* Keystone middleware moved back into nova in b160d731
* Removaes old pipeline replace
* Adds validator in to ec2 pipeline
Change-Id: Idf7a274e7961bf18b9dd7533f7a0f0a606a291d8
| 1 | 1 |
deleted file mode 100644 |
| ... | ... |
@@ -1,20 +0,0 @@ |
| 1 |
-########## |
|
| 2 |
-# Extras # |
|
| 3 |
-########## |
|
| 4 |
- |
|
| 5 |
-[filter:keystonecontext] |
|
| 6 |
-paste.filter_factory = keystone.middleware.nova_keystone_context:NovaKeystoneContext.factory |
|
| 7 |
- |
|
| 8 |
-[filter:totoken] |
|
| 9 |
-paste.filter_factory = keystone.middleware.ec2_token:EC2Token.factory |
|
| 10 |
- |
|
| 11 |
-[filter:authtoken] |
|
| 12 |
-paste.filter_factory = keystone.middleware.auth_token:filter_factory |
|
| 13 |
-service_protocol = http |
|
| 14 |
-service_host = 127.0.0.1 |
|
| 15 |
-service_port = 5000 |
|
| 16 |
-auth_host = 127.0.0.1 |
|
| 17 |
-auth_port = 35357 |
|
| 18 |
-auth_protocol = http |
|
| 19 |
-auth_uri = http://127.0.0.1:5000/ |
|
| 20 |
-admin_token = %SERVICE_TOKEN% |
| ... | ... |
@@ -834,7 +834,7 @@ if [[ "$ENABLED_SERVICES" =~ "n-api" ]]; then |
| 834 | 834 |
# the configuration required for nova to validate keystone tokens. |
| 835 | 835 |
|
| 836 | 836 |
# First we add a some extra data to the default paste config from nova |
| 837 |
- cat $NOVA_DIR/etc/nova/api-paste.ini $FILES/nova-api-paste.ini > $NOVA_DIR/bin/nova-api-paste.ini |
|
| 837 |
+ cp $NOVA_DIR/etc/nova/api-paste.ini $NOVA_DIR/bin/nova-api-paste.ini |
|
| 838 | 838 |
|
| 839 | 839 |
# Then we add our own service token to the configuration |
| 840 | 840 |
sed -e "s,%SERVICE_TOKEN%,$SERVICE_TOKEN,g" -i $NOVA_DIR/bin/nova-api-paste.ini |
| ... | ... |
@@ -843,9 +843,8 @@ if [[ "$ENABLED_SERVICES" =~ "n-api" ]]; then |
| 843 | 843 |
function replace_pipeline() {
|
| 844 | 844 |
sed "/\[pipeline:$1\]/,/\[/s/^pipeline = .*/pipeline = $2/" -i $NOVA_DIR/bin/nova-api-paste.ini |
| 845 | 845 |
} |
| 846 |
- replace_pipeline "ec2cloud" "ec2faultwrap logrequest totoken authtoken keystonecontext cloudrequest authorizer ec2executor" |
|
| 846 |
+ replace_pipeline "ec2cloud" "ec2faultwrap logrequest totoken authtoken keystonecontext cloudrequest authorizer validator ec2executor" |
|
| 847 | 847 |
replace_pipeline "ec2admin" "ec2faultwrap logrequest totoken authtoken keystonecontext adminrequest authorizer ec2executor" |
| 848 |
- replace_pipeline "openstack_api_v2" "faultwrap authtoken keystonecontext ratelimit osapi_app_v2" |
|
| 849 | 848 |
replace_pipeline "openstack_compute_api_v2" "faultwrap authtoken keystonecontext ratelimit osapi_compute_app_v2" |
| 850 | 849 |
replace_pipeline "openstack_volume_api_v1" "faultwrap authtoken keystonecontext ratelimit osapi_volume_app_v1" |
| 851 | 850 |
fi |