361eb32b44
Seems somewhere along the way fernet tokens became the default. As a result, we likely ought to lock keystone to uuid tokens to keep the setup minimalistic. Change-Id: Ic2dce366d0a8589862ea8adbf48f1baa681b27c3
27 lines
795 B
Django/Jinja
27 lines
795 B
Django/Jinja
# {{ ansible_managed }}
|
|
[DEFAULT]
|
|
|
|
debug = {{ keystone.debug | bool }}
|
|
transport_url = amqp://{{ keystone.message_queue.username }}:{{ keystone.message_queue.password }}@{{ keystone.message_queue.host }}:{{ keystone.message_queue.port | default('5672') }}/
|
|
|
|
[auth]
|
|
|
|
methods = password,token
|
|
|
|
{% if enable_cors | bool == true %}
|
|
[cors]
|
|
allowed_origin = {{ cors_allowed_origin | default('allowed_origin=http://localhost:8000') }}
|
|
allow_credentials = {{ enable_cors_credential_support | default('true') }}
|
|
{% endif %}
|
|
|
|
[database]
|
|
|
|
connection = mysql+pymysql://{{ keystone.database.username }}:{{ keystone.database.password }}@{{ keystone.database.host }}/{{ keystone.database.name }}?charset=utf8
|
|
use_db_reconnect = true
|
|
|
|
[security_compliance]
|
|
lockout_failure_attempts = 3
|
|
|
|
[token]
|
|
provider = uuid
|