08ab3d8e73
Kolla-ansible actually bring it's own barbican-api-paste.ini file to enable Keystone authentication, in order to fix this https://bugs.launchpad.net/kolla/+bug/1625337 auth_token middleware is actually managed by Barbican. Furthermore barbican-api-paste.ini brings by Kolla-ansible is outdated: * http_proxy_to_wsgi middleware is missing Hence this file should not be managed statically by kolla-ansible. This patch keep custom paste file feature. Just put the file to /etc/kolla/config/barbican/barbican-api.ini path. Change-Id: Ia50237f7df7f89526a976575b017145c71b11ec0 Closes-bug: #1695026
42 lines
1.3 KiB
Django/Jinja
42 lines
1.3 KiB
Django/Jinja
{
|
|
"command": "uwsgi --master --emperor /etc/barbican/vassals --logto /var/log/kolla/barbican/barbican-api.log",
|
|
"config_files": [
|
|
{
|
|
"source": "{{ container_config_directory }}/barbican.conf",
|
|
"dest": "/etc/barbican/barbican.conf",
|
|
"owner": "barbican",
|
|
"perm": "0600"
|
|
},
|
|
{
|
|
"source": "{{ container_config_directory }}/vassals/barbican-api.ini",
|
|
"dest": "/etc/barbican/vassals/barbican-api.ini",
|
|
"owner": "barbican",
|
|
"perm": "0600"
|
|
},
|
|
{
|
|
"source": "{{ container_config_directory }}/barbican-api-paste.ini",
|
|
"dest": "/etc/barbican/barbican-api-paste.ini",
|
|
"owner": "barbican",
|
|
"perm": "0600",
|
|
"optional": true
|
|
},
|
|
{
|
|
"source": "{{ container_config_directory }}/policy.json",
|
|
"dest": "/etc/barbican/policy.json",
|
|
"owner": "barbican",
|
|
"perm": "0600",
|
|
"optional": true
|
|
}
|
|
],
|
|
"permissions": [
|
|
{
|
|
"path": "/var/lib/barbican",
|
|
"owner": "barbican:barbican"
|
|
},
|
|
{
|
|
"path": "/var/log/kolla/barbican",
|
|
"owner": "barbican:barbican"
|
|
}
|
|
]
|
|
}
|