openstack/openstack-ansible-os_neutron
Code Issues Proposed changes

Update paste, policy and rootwrap configurations 2016-10-21

Browse Source 
Change-Id: Ie2d4bfddc36e1852928568b9ba7a7aefda97436c
This commit is contained in:
Jesse Pretorius 2016-10-21 14:23:28 +01:00
parent 903632f3b3
commit 8fda2b7a93
2 changed files with 11 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
files/rootwrap.d/iptables-firewall.filters
View File

@ -8,20 +8,19 @@
[Filters] [Filters]
# neutron/agent/linux/iptables_manager.py # neutron/agent/linux/iptables_firewall.py
# "iptables-save", ... # "iptables-save", ...
iptables-save: CommandFilter, iptables-save, root iptables-save: CommandFilter, iptables-save, root
iptables-restore: CommandFilter, iptables-restore, root iptables-restore: CommandFilter, iptables-restore, root
ip6tables-save: CommandFilter, ip6tables-save, root ip6tables-save: CommandFilter, ip6tables-save, root
ip6tables-restore: CommandFilter, ip6tables-restore, root ip6tables-restore: CommandFilter, ip6tables-restore, root
# neutron/agent/linux/iptables_manager.py # neutron/agent/linux/iptables_firewall.py
# "iptables", "-A", ... # "iptables", "-A", ...
iptables: CommandFilter, iptables, root iptables: CommandFilter, iptables, root
ip6tables: CommandFilter, ip6tables, root ip6tables: CommandFilter, ip6tables, root
# neutron/agent/linux/iptables_manager.py # neutron/agent/linux/iptables_firewall.py
# "sysctl", "-w", ...
sysctl: CommandFilter, sysctl, root sysctl: CommandFilter, sysctl, root
# neutron/agent/linux/ip_conntrack.py # neutron/agent/linux/ip_conntrack.py

11
templates/api-paste.ini.j2
View File

@ -5,13 +5,13 @@ use = egg:Paste#urlmap
[composite:neutronapi_v2_0] [composite:neutronapi_v2_0]
use = call:neutron.auth:pipeline_factory use = call:neutron.auth:pipeline_factory
noauth = cors request_id catch_errors extensions neutronapiapp_v2_0 noauth = cors http_proxy_to_wsgi request_id catch_errors extensions neutronapiapp_v2_0
keystone = cors request_id catch_errors authtoken keystonecontext extensions neutronapiapp_v2_0 keystone = cors http_proxy_to_wsgi request_id catch_errors authtoken keystonecontext extensions neutronapiapp_v2_0
[composite:neutronversions_composite] [composite:neutronversions_composite]
use = call:neutron.auth:pipeline_factory use = call:neutron.auth:pipeline_factory
noauth = cors neutronversions noauth = cors http_proxy_to_wsgi neutronversions
keystone = cors neutronversions keystone = cors http_proxy_to_wsgi neutronversions
[filter:request_id] [filter:request_id]
paste.filter_factory = oslo_middleware:RequestId.factory paste.filter_factory = oslo_middleware:RequestId.factory
@ -23,6 +23,9 @@ paste.filter_factory = oslo_middleware:CatchErrors.factory
paste.filter_factory = oslo_middleware.cors:filter_factory paste.filter_factory = oslo_middleware.cors:filter_factory
oslo_config_project = neutron oslo_config_project = neutron
[filter:http_proxy_to_wsgi]
paste.filter_factory = oslo_middleware.http_proxy_to_wsgi:HTTPProxyToWSGI.factory
[filter:keystonecontext] [filter:keystonecontext]
paste.filter_factory = neutron.auth:NeutronKeystoneContext.factory paste.filter_factory = neutron.auth:NeutronKeystoneContext.factory