---
project_name: "swift"

swift_services:
  swift-api:
    group: swift-proxy-server
    enabled: true
    haproxy:
      swift_api:
        enabled: "{{ enable_swift }}"
        mode: "http"
        external: false
        port: "{{ swift_proxy_server_listen_port }}"
      swift_api_external:
        enabled: "{{ enable_swift }}"
        mode: "http"
        external: true
        port: "{{ swift_proxy_server_listen_port }}"

####################
# Docker
####################
swift_install_type: "{{ kolla_install_type }}"
swift_tag: "{{ openstack_tag }}"

swift_proxy_server_image: "{{ docker_registry ~ '/' if docker_registry else '' }}{{ docker_namespace }}/{{ kolla_base_distro }}-{{ swift_install_type }}-swift-proxy-server"
swift_proxy_server_tag: "{{ swift_tag }}"
swift_proxy_server_image_full: "{{ swift_proxy_server_image }}:{{ swift_proxy_server_tag }}"

swift_account_image: "{{ docker_registry ~ '/' if docker_registry else '' }}{{ docker_namespace }}/{{ kolla_base_distro }}-{{ swift_install_type }}-swift-account"
swift_account_tag: "{{ swift_tag }}"
swift_account_image_full: "{{ swift_account_image }}:{{ swift_account_tag }}"

swift_container_image: "{{ docker_registry ~ '/' if docker_registry else '' }}{{ docker_namespace }}/{{ kolla_base_distro }}-{{ swift_install_type }}-swift-container"
swift_container_tag: "{{ swift_tag }}"
swift_container_image_full: "{{ swift_container_image }}:{{ swift_container_tag }}"

swift_object_image: "{{ docker_registry ~ '/' if docker_registry else '' }}{{ docker_namespace }}/{{ kolla_base_distro }}-{{ swift_install_type }}-swift-object"
swift_object_tag: "{{ swift_tag }}"
swift_object_image_full: "{{ swift_object_image }}:{{ swift_object_tag }}"

swift_object_expirer_image: "{{ docker_registry ~ '/' if docker_registry else '' }}{{ docker_namespace }}/{{ kolla_base_distro }}-{{ swift_install_type }}-swift-object-expirer"
swift_object_expirer_tag: "{{ swift_tag }}"
swift_object_expirer_image_full: "{{ swift_object_expirer_image }}:{{ swift_object_expirer_tag }}"

swift_rsyncd_image: "{{ docker_registry ~ '/' if docker_registry else '' }}{{ docker_namespace }}/{{ kolla_base_distro }}-{{ swift_install_type }}-swift-rsyncd"
swift_rsyncd_tag: "{{ swift_tag }}"
swift_rsyncd_image_full: "{{ swift_rsyncd_image }}:{{ swift_rsyncd_tag }}"

swift_log_level: "{{ 'DEBUG' if openstack_logging_debug | bool else 'INFO'}}"

####################
# OpenStack
####################
swift_admin_endpoint: "{{ admin_protocol }}://{{ swift_internal_fqdn | put_address_in_context('url') }}:{{ swift_proxy_server_port }}/v1"
swift_internal_endpoint: "{{ internal_protocol }}://{{ swift_internal_fqdn | put_address_in_context('url') }}:{{ swift_proxy_server_port }}/v1/AUTH_%(tenant_id)s"
swift_public_endpoint: "{{ public_protocol }}://{{ swift_external_fqdn | put_address_in_context('url') }}:{{ swift_proxy_server_port }}/v1/AUTH_%(tenant_id)s"

swift_logging_debug: "{{ openstack_logging_debug }}"

swift_keystone_user: "swift"
swift_admin_tenant_name: "admin"

swift_devices_mount_point: "/srv/node"
swift_devices_match_mode: "strict"
swift_devices_name: "KOLLA_SWIFT_DATA"
# For S3 API we need to defer the auth decision to allow s3api and s3token
# middlewares to process requests using EC2 credentials.
swift_delay_auth_decision: "{{ enable_swift_s3api | bool }}"

# Boolean, true if there is a dedicated replication network.
swift_has_replication_network: "{{ swift_storage_interface != swift_replication_interface }}"

openstack_swift_auth: "{{ openstack_auth }}"

syslog_server: "{{ api_interface_address }}"
syslog_swift_facility: "local0"

swift_enable_rolling_upgrade: "yes"

swift_extra_ring_files: []

####################
# Keystone
####################
swift_ks_services:
  - name: "swift"
    type: "object-store"
    description: "Openstack Object Storage"
    endpoints:
      - {'interface': 'admin', 'url': '{{ swift_admin_endpoint }}'}
      - {'interface': 'internal', 'url': '{{ swift_internal_endpoint }}'}
      - {'interface': 'public', 'url': '{{ swift_public_endpoint }}'}

swift_ks_users:
  - project: "service"
    user: "{{ swift_keystone_user }}"
    password: "{{ swift_keystone_password }}"
    role: "admin"