We need an appropriate auth_uri for s3token to be able to contact
Keystone.
Since tempauth is always enabled, we want to delay the auth decision
until after tempauth has had a chance to try.
Change-Id: Ie4ff33a617b9dc74d51d037ec8ebd0d9787dd76d
| ... | ... |
@@ -431,6 +431,8 @@ function configure_swift {
|
| 431 | 431 |
swift_pipeline+=" authtoken" |
| 432 | 432 |
if is_service_enabled s3api;then |
| 433 | 433 |
swift_pipeline+=" s3token" |
| 434 |
+ iniset ${SWIFT_CONFIG_PROXY_SERVER} filter:s3token auth_uri ${KEYSTONE_AUTH_URI_V3}
|
|
| 435 |
+ iniset ${SWIFT_CONFIG_PROXY_SERVER} filter:s3token delay_auth_decision true
|
|
| 434 | 436 |
fi |
| 435 | 437 |
swift_pipeline+=" keystoneauth" |
| 436 | 438 |
fi |