31ed556e67
This allows swift service endpoints to use custom hostnames, and adds the following variables: * swift_internal_fqdn * swift_external_fqdn These default to the old values of kolla_internal_fqdn or kolla_external_fqdn. This also adds a swift_proxy_server_listen_port option, which defaults to swift_proxy_server_port for backward compatibility. This option allow the user to differentiate between the port the service listens on, and the port the service is reachable on. This is useful for external load balancers which live on the same host as the service itself. While we're in here, use the ``internal_protocol`` variable for the swift endpoint in cinder's swift backup driver configuration, instead of hardcoding to ``http``. Change-Id: Ibc01618383c26e16c0067f7f6b9cf5160d968d1e Implements: blueprint service-hostnames
94 lines
2.6 KiB
Django/Jinja
94 lines
2.6 KiB
Django/Jinja
[DEFAULT]
|
|
bind_ip = {{ api_interface_address }}
|
|
bind_port = {{ swift_proxy_server_listen_port }}
|
|
|
|
log_udp_host = {{ syslog_server }}
|
|
log_udp_port = {{ syslog_udp_port }}
|
|
log_name = {{ service_name }}
|
|
log_facility = {{ syslog_swift_facility }}
|
|
log_level = {{ swift_log_level }}
|
|
workers = {{ openstack_service_workers }}
|
|
|
|
[pipeline:main]
|
|
pipeline = catch_errors gatekeeper healthcheck cache container_sync bulk tempurl ratelimit authtoken keystoneauth container_quotas account_quotas slo dlo {% if enable_ceilometer | bool %}ceilometer {% endif %}proxy-server
|
|
|
|
[app:proxy-server]
|
|
use = egg:swift#proxy
|
|
allow_account_management = true
|
|
account_autocreate = true
|
|
|
|
[filter:tempurl]
|
|
use = egg:swift#tempurl
|
|
|
|
[filter:cache]
|
|
use = egg:swift#memcache
|
|
memcache_servers = {% for host in groups['swift-proxy-server'] %}{{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ memcached_port }}{% if not loop.last %},{% endif %}{% endfor %}
|
|
|
|
[filter:catch_errors]
|
|
use = egg:swift#catch_errors
|
|
|
|
[filter:healthcheck]
|
|
use = egg:swift#healthcheck
|
|
|
|
[filter:proxy-logging]
|
|
use = egg:swift#proxy_logging
|
|
|
|
[filter:authtoken]
|
|
paste.filter_factory = keystonemiddleware.auth_token:filter_factory
|
|
auth_uri = {{ keystone_internal_url }}
|
|
auth_url = {{ keystone_admin_url }}
|
|
auth_type = password
|
|
project_domain_id = {{ default_project_domain_id }}
|
|
user_domain_id = {{ default_user_domain_id }}
|
|
project_name = service
|
|
username = {{ swift_keystone_user }}
|
|
password = {{ swift_keystone_password }}
|
|
delay_auth_decision = {{ swift_delay_auth_decision }}
|
|
|
|
memcache_security_strategy = ENCRYPT
|
|
memcache_secret_key = {{ memcache_secret_key }}
|
|
memcached_servers = {% for host in groups['memcached'] %}{{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ memcached_port }}{% if not loop.last %},{% endif %}{% endfor %}
|
|
|
|
|
|
[filter:keystoneauth]
|
|
use = egg:swift#keystoneauth
|
|
operator_roles = admin,{{ keystone_default_user_role }},ResellerAdmin
|
|
|
|
{% if enable_ceilometer | bool %}
|
|
[filter:ceilometer]
|
|
paste.filter_factory = ceilometermiddleware.swift:filter_factory
|
|
control_exchange = swift
|
|
url = {{ notify_transport_url }}
|
|
driver = messagingv2
|
|
topic = notifications
|
|
log_level = WARN
|
|
{% endif %}
|
|
|
|
[filter:container_sync]
|
|
use = egg:swift#container_sync
|
|
|
|
[filter:bulk]
|
|
use = egg:swift#bulk
|
|
|
|
[filter:ratelimit]
|
|
use = egg:swift#ratelimit
|
|
|
|
[filter:gatekeeper]
|
|
use = egg:swift#gatekeeper
|
|
|
|
[filter:account_quotas]
|
|
use = egg:swift#account_quotas
|
|
|
|
[filter:container_quotas]
|
|
use = egg:swift#container_quotas
|
|
|
|
[filter:slo]
|
|
use = egg:swift#slo
|
|
|
|
[filter:dlo]
|
|
use = egg:swift#dlo
|
|
|
|
[filter:versioned_writes]
|
|
use = egg:swift#versioned_writes
|
|
allow_versioned_writes = True
|