Browse code

swift: Configure s3token appropriately

We need an appropriate auth_uri for s3token to be able to contact
Keystone.

Since tempauth is always enabled, we want to delay the auth decision
until after tempauth has had a chance to try.

Change-Id: Ie4ff33a617b9dc74d51d037ec8ebd0d9787dd76d

Tim Burke authored on 2020/05/27 12:11:24
Showing 1 changed files
... ...
@@ -431,6 +431,8 @@ function configure_swift {
431 431
         swift_pipeline+=" authtoken"
432 432
         if is_service_enabled s3api;then
433 433
             swift_pipeline+=" s3token"
434
+            iniset ${SWIFT_CONFIG_PROXY_SERVER} filter:s3token auth_uri ${KEYSTONE_AUTH_URI_V3}
435
+            iniset ${SWIFT_CONFIG_PROXY_SERVER} filter:s3token delay_auth_decision true
434 436
         fi
435 437
         swift_pipeline+=" keystoneauth"
436 438
     fi