openstack/devstack
Code Issues Proposed changes

swift: Configure s3token appropriately

Browse Source 
We need an appropriate auth_uri for s3token to be able to contact
Keystone.

Since tempauth is always enabled, we want to delay the auth decision
until after tempauth has had a chance to try.

Change-Id: Ie4ff33a617b9dc74d51d037ec8ebd0d9787dd76d
This commit is contained in:
Tim Burke 2020-05-26 20:11:24 -07:00
parent 5b48e362af
commit 6681a1f126
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/swift
View File

@ -431,6 +431,8 @@ function configure_swift {
swift_pipeline+=" authtoken" swift_pipeline+=" authtoken"
if is_service_enabled s3api;then if is_service_enabled s3api;then
swift_pipeline+=" s3token" swift_pipeline+=" s3token"
iniset ${SWIFT_CONFIG_PROXY_SERVER} filter:s3token auth_uri ${KEYSTONE_AUTH_URI_V3}
iniset ${SWIFT_CONFIG_PROXY_SERVER} filter:s3token delay_auth_decision true
fi fi
swift_pipeline+=" keystoneauth" swift_pipeline+=" keystoneauth"
fi fi