Browse code

Set glance authtoken in config, not paste

Glance can use the keystone_authtoken config section in
glance-api-conf and glance-registry.conf instead of having
to write into paste files.

Change-Id: Iaf372f3a01558b8305b5c5f5f64113a3674e9782

Brian Waldon authored on 2012/08/30 05:30:03
Showing 1 changed files
... ...
@@ -1055,16 +1055,13 @@ if is_service_enabled g-reg; then
1055 1055
     iniset $GLANCE_REGISTRY_CONF DEFAULT sql_connection $BASE_SQL_CONN/glance?charset=utf8
1056 1056
     iniset $GLANCE_REGISTRY_CONF DEFAULT use_syslog $SYSLOG
1057 1057
     iniset $GLANCE_REGISTRY_CONF paste_deploy flavor keystone
1058
-
1059
-    GLANCE_REGISTRY_PASTE_INI=$GLANCE_CONF_DIR/glance-registry-paste.ini
1060
-    cp $GLANCE_DIR/etc/glance-registry-paste.ini $GLANCE_REGISTRY_PASTE_INI
1061
-    iniset $GLANCE_REGISTRY_PASTE_INI filter:authtoken auth_host $KEYSTONE_AUTH_HOST
1062
-    iniset $GLANCE_REGISTRY_PASTE_INI filter:authtoken auth_port $KEYSTONE_AUTH_PORT
1063
-    iniset $GLANCE_REGISTRY_PASTE_INI filter:authtoken auth_protocol $KEYSTONE_AUTH_PROTOCOL
1064
-    iniset $GLANCE_REGISTRY_PASTE_INI filter:authtoken auth_uri $KEYSTONE_SERVICE_PROTOCOL://$KEYSTONE_SERVICE_HOST:$KEYSTONE_SERVICE_PORT/
1065
-    iniset $GLANCE_REGISTRY_PASTE_INI filter:authtoken admin_tenant_name $SERVICE_TENANT_NAME
1066
-    iniset $GLANCE_REGISTRY_PASTE_INI filter:authtoken admin_user glance
1067
-    iniset $GLANCE_REGISTRY_PASTE_INI filter:authtoken admin_password $SERVICE_PASSWORD
1058
+    iniset $GLANCE_REGISTRY_CONF keystone_authtoken auth_host $KEYSTONE_AUTH_HOST
1059
+    iniset $GLANCE_REGISTRY_CONF keystone_authtoken auth_port $KEYSTONE_AUTH_PORT
1060
+    iniset $GLANCE_REGISTRY_CONF keystone_authtoken auth_protocol $KEYSTONE_AUTH_PROTOCOL
1061
+    iniset $GLANCE_REGISTRY_CONF keystone_authtoken auth_uri $KEYSTONE_SERVICE_PROTOCOL://$KEYSTONE_SERVICE_HOST:$KEYSTONE_SERVICE_PORT/
1062
+    iniset $GLANCE_REGISTRY_CONF keystone_authtoken admin_tenant_name $SERVICE_TENANT_NAME
1063
+    iniset $GLANCE_REGISTRY_CONF keystone_authtoken admin_user glance
1064
+    iniset $GLANCE_REGISTRY_CONF keystone_authtoken admin_password $SERVICE_PASSWORD
1068 1065
 
1069 1066
     GLANCE_API_CONF=$GLANCE_CONF_DIR/glance-api.conf
1070 1067
     cp $GLANCE_DIR/etc/glance-api.conf $GLANCE_API_CONF
... ...
@@ -1074,6 +1071,13 @@ if is_service_enabled g-reg; then
1074 1074
     iniset $GLANCE_API_CONF DEFAULT use_syslog $SYSLOG
1075 1075
     iniset $GLANCE_API_CONF DEFAULT filesystem_store_datadir $GLANCE_IMAGE_DIR/
1076 1076
     iniset $GLANCE_API_CONF paste_deploy flavor keystone
1077
+    iniset $GLANCE_API_CONF keystone_authtoken auth_host $KEYSTONE_AUTH_HOST
1078
+    iniset $GLANCE_API_CONF keystone_authtoken auth_port $KEYSTONE_AUTH_PORT
1079
+    iniset $GLANCE_API_CONF keystone_authtoken auth_protocol $KEYSTONE_AUTH_PROTOCOL
1080
+    iniset $GLANCE_API_CONF keystone_authtoken auth_uri $KEYSTONE_SERVICE_PROTOCOL://$KEYSTONE_SERVICE_HOST:$KEYSTONE_SERVICE_PORT/
1081
+    iniset $GLANCE_API_CONF keystone_authtoken admin_tenant_name $SERVICE_TENANT_NAME
1082
+    iniset $GLANCE_API_CONF keystone_authtoken admin_user glance
1083
+    iniset $GLANCE_API_CONF keystone_authtoken admin_password $SERVICE_PASSWORD
1077 1084
 
1078 1085
     # Store the images in swift if enabled.
1079 1086
     if is_service_enabled swift; then
... ...
@@ -1084,15 +1088,11 @@ if is_service_enabled g-reg; then
1084 1084
         iniset $GLANCE_API_CONF DEFAULT swift_store_create_container_on_put True
1085 1085
     fi
1086 1086
 
1087
+    GLANCE_REGISTRY_PASTE_INI=$GLANCE_CONF_DIR/glance-registry-paste.ini
1088
+    cp $GLANCE_DIR/etc/glance-registry-paste.ini $GLANCE_REGISTRY_PASTE_INI
1089
+
1087 1090
     GLANCE_API_PASTE_INI=$GLANCE_CONF_DIR/glance-api-paste.ini
1088 1091
     cp $GLANCE_DIR/etc/glance-api-paste.ini $GLANCE_API_PASTE_INI
1089
-    iniset $GLANCE_API_PASTE_INI filter:authtoken auth_host $KEYSTONE_AUTH_HOST
1090
-    iniset $GLANCE_API_PASTE_INI filter:authtoken auth_port $KEYSTONE_AUTH_PORT
1091
-    iniset $GLANCE_API_PASTE_INI filter:authtoken auth_protocol $KEYSTONE_AUTH_PROTOCOL
1092
-    iniset $GLANCE_API_PASTE_INI filter:authtoken auth_uri $KEYSTONE_SERVICE_PROTOCOL://$KEYSTONE_SERVICE_HOST:$KEYSTONE_SERVICE_PORT/
1093
-    iniset $GLANCE_API_PASTE_INI filter:authtoken admin_tenant_name $SERVICE_TENANT_NAME
1094
-    iniset $GLANCE_API_PASTE_INI filter:authtoken admin_user glance
1095
-    iniset $GLANCE_API_PASTE_INI filter:authtoken admin_password $SERVICE_PASSWORD
1096 1092
 
1097 1093
     GLANCE_POLICY_JSON=$GLANCE_CONF_DIR/policy.json
1098 1094
     cp $GLANCE_DIR/etc/policy.json $GLANCE_POLICY_JSON