1. devstack
  2. Commit f12d3ab02c41bedf584f59732c13519434c17724
Browse code

update glance to use keystone

Anthony Young authored on 2011/09/20 16:33:51
Showing 3 changed files
files/glance-api.conf
History View file @ f12d3ab
1 1 
new file mode 100644
... ... 
@@ -0,0 +1,178 @@
0 
+[DEFAULT]
1 
+# Show more verbose log output (sets INFO log level output)
2 
+verbose = True
3 
+
4 
+# Show debugging output in logs (sets DEBUG log level output)
5 
+debug = True
6 
+
7 
+# Which backend store should Glance use by default is not specified
8 
+# in a request to add a new image to Glance? Default: 'file'
9 
+# Available choices are 'file', 'swift', and 's3'
10 
+default_store = file
11 
+
12 
+# Address to bind the API server
13 
+bind_host = 0.0.0.0
14 
+
15 
+# Port the bind the API server to
16 
+bind_port = 9292
17 
+
18 
+# Address to find the registry server
19 
+registry_host = 0.0.0.0
20 
+
21 
+# Port the registry server is listening on
22 
+registry_port = 9191
23 
+
24 
+# Log to this file. Make sure you do not set the same log
25 
+# file for both the API and registry servers!
26 
+log_file = /var/log/glance/api.log
27 
+
28 
+# Send logs to syslog (/dev/log) instead of to file specified by `log_file`
29 
+use_syslog = False
30 
+
31 
+# ============ Notification System Options =====================
32 
+
33 
+# Notifications can be sent when images are create, updated or deleted.
34 
+# There are three methods of sending notifications, logging (via the
35 
+# log_file directive), rabbit (via a rabbitmq queue) or noop (no
36 
+# notifications sent, the default)
37 
+notifier_strategy = noop
38 
+
39 
+# Configuration options if sending notifications via rabbitmq (these are
40 
+# the defaults)
41 
+rabbit_host = localhost
42 
+rabbit_port = 5672
43 
+rabbit_use_ssl = false
44 
+rabbit_userid = guest
45 
+rabbit_password = guest
46 
+rabbit_virtual_host = /
47 
+rabbit_notification_topic = glance_notifications
48 
+
49 
+# ============ Filesystem Store Options ========================
50 
+
51 
+# Directory that the Filesystem backend store
52 
+# writes image data to
53 
+filesystem_store_datadir = /var/lib/glance/images/
54 
+
55 
+# ============ Swift Store Options =============================
56 
+
57 
+# Address where the Swift authentication service lives
58 
+swift_store_auth_address = 127.0.0.1:8080/v1.0/
59 
+
60 
+# User to authenticate against the Swift authentication service
61 
+swift_store_user = jdoe
62 
+
63 
+# Auth key for the user authenticating against the
64 
+# Swift authentication service
65 
+swift_store_key = a86850deb2742ec3cb41518e26aa2d89
66 
+
67 
+# Container within the account that the account should use
68 
+# for storing images in Swift
69 
+swift_store_container = glance
70 
+
71 
+# Do we create the container if it does not exist?
72 
+swift_store_create_container_on_put = False
73 
+
74 
+# What size, in MB, should Glance start chunking image files
75 
+# and do a large object manifest in Swift? By default, this is
76 
+# the maximum object size in Swift, which is 5GB
77 
+swift_store_large_object_size = 5120
78 
+
79 
+# When doing a large object manifest, what size, in MB, should
80 
+# Glance write chunks to Swift? This amount of data is written
81 
+# to a temporary disk buffer during the process of chunking
82 
+# the image file, and the default is 200MB
83 
+swift_store_large_object_chunk_size = 200
84 
+
85 
+# Whether to use ServiceNET to communicate with the Swift storage servers.
86 
+# (If you aren't RACKSPACE, leave this False!)
87 
+#
88 
+# To use ServiceNET for authentication, prefix hostname of
89 
+# `swift_store_auth_address` with 'snet-'.
90 
+# Ex. https://example.com/v1.0/ -> https://snet-example.com/v1.0/
91 
+swift_enable_snet = False
92 
+
93 
+# ============ S3 Store Options =============================
94 
+
95 
+# Address where the S3 authentication service lives
96 
+s3_store_host = 127.0.0.1:8080/v1.0/
97 
+
98 
+# User to authenticate against the S3 authentication service
99 
+s3_store_access_key = <20-char AWS access key>
100 
+
101 
+# Auth key for the user authenticating against the
102 
+# S3 authentication service
103 
+s3_store_secret_key = <40-char AWS secret key>
104 
+
105 
+# Container within the account that the account should use
106 
+# for storing images in S3. Note that S3 has a flat namespace,
107 
+# so you need a unique bucket name for your glance images. An
108 
+# easy way to do this is append your AWS access key to "glance".
109 
+# S3 buckets in AWS *must* be lowercased, so remember to lowercase
110 
+# your AWS access key if you use it in your bucket name below!
111 
+s3_store_bucket = <lowercased 20-char aws access key>glance
112 
+
113 
+# Do we create the bucket if it does not exist?
114 
+s3_store_create_bucket_on_put = False
115 
+
116 
+# ============ Image Cache Options ========================
117 
+
118 
+image_cache_enabled = False
119 
+
120 
+# Directory that the Image Cache writes data to
121 
+# Make sure this is also set in glance-pruner.conf
122 
+image_cache_datadir = /var/lib/glance/image-cache/
123 
+
124 
+# Number of seconds after which we should consider an incomplete image to be
125 
+# stalled and eligible for reaping
126 
+image_cache_stall_timeout = 86400
127 
+
128 
+# ============ Delayed Delete Options =============================
129 
+
130 
+# Turn on/off delayed delete
131 
+delayed_delete = False
132 
+
133 
+# Delayed delete time in seconds
134 
+scrub_time = 43200
135 
+
136 
+# Directory that the scrubber will use to remind itself of what to delete
137 
+# Make sure this is also set in glance-scrubber.conf
138 
+scrubber_datadir = /var/lib/glance/scrubber
139 
+
140 
+[pipeline:glance-api]
141 
+#pipeline = versionnegotiation context apiv1app
142 
+# NOTE: use the following pipeline for keystone
143 
+pipeline = versionnegotiation authtoken context apiv1app
144 
+
145 
+# To enable Image Cache Management API replace pipeline with below:
146 
+# pipeline = versionnegotiation context imagecache apiv1app
147 
+# NOTE: use the following pipeline for keystone auth (with caching)
148 
+# pipeline = versionnegotiation authtoken context imagecache apiv1app
149 
+
150 
+[pipeline:versions]
151 
+pipeline = versionsapp
152 
+
153 
+[app:versionsapp]
154 
+paste.app_factory = glance.api.versions:app_factory
155 
+
156 
+[app:apiv1app]
157 
+paste.app_factory = glance.api.v1:app_factory
158 
+
159 
+[filter:versionnegotiation]
160 
+paste.filter_factory = glance.api.middleware.version_negotiation:filter_factory
161 
+
162 
+[filter:imagecache]
163 
+paste.filter_factory = glance.api.middleware.image_cache:filter_factory
164 
+
165 
+[filter:context]
166 
+paste.filter_factory = glance.common.context:filter_factory
167 
+
168 
+[filter:authtoken]
169 
+paste.filter_factory = keystone.middleware.auth_token:filter_factory
170 
+service_protocol = http
171 
+service_host = 127.0.0.1
172 
+service_port = 5000
173 
+auth_host = 127.0.0.1
174 
+auth_port = 5001
175 
+auth_protocol = http
176 
+auth_uri = http://127.0.0.1:5000/
177 
+admin_token = 999888777666
files/glance-registry.conf
History View file @ f12d3ab
... ... 
@@ -41,9 +41,9 @@ api_limit_max = 1000
41 41 
 limit_param_default = 25
42 42
43 43 
 [pipeline:glance-registry]
44 
-pipeline = context registryapp
44 
+#pipeline = context registryapp
45 45 
 # NOTE: use the following pipeline for keystone
46 
-# pipeline = authtoken keystone_shim context registryapp
46 
+pipeline = authtoken keystone_shim context registryapp
47 47
48 48 
 [app:registryapp]
49 49 
 paste.app_factory = glance.registry.server:app_factory
stack.sh
History View file @ f12d3ab
... ... 
@@ -281,6 +281,9 @@ if [[ "$ENABLED_SERVICES" =~ "g-reg" ]]; then
281 281 
     GLANCE_CONF=$GLANCE_DIR/etc/glance-registry.conf
282 282 
     cp $FILES/glance-registry.conf $GLANCE_CONF
283 283 
     sudo sed -e "s,%SQL_CONN%,$BASE_SQL_CONN/glance,g" -i $GLANCE_CONF
284 
+
285 
+    GLANCE_API_CONF=$GLANCE_DIR/etc/glance-api.conf
286 
+    cp $FILES/glance-api.conf $GLANCE_API_CONF
284 287 
 fi
285 288
286 289 
 # Nova