The keystone admin token supposed to be used only
for setting up keystone and it should not be used
in any other service config.
Change-Id: Iaa9be1878e89a6bc3a84a0c57fc6f5cecc371d2f
| ... | ... |
@@ -441,16 +441,15 @@ function configure_swift {
|
| 441 | 441 |
|
| 442 | 442 |
if is_service_enabled swift3; then |
| 443 | 443 |
cat <<EOF >>${SWIFT_CONFIG_PROXY_SERVER}
|
| 444 |
-# NOTE(chmou): s3token middleware is not updated yet to use only |
|
| 445 |
-# username and password. |
|
| 446 | 444 |
[filter:s3token] |
| 447 | 445 |
paste.filter_factory = keystoneclient.middleware.s3_token:filter_factory |
| 448 | 446 |
auth_port = ${KEYSTONE_AUTH_PORT}
|
| 449 | 447 |
auth_host = ${KEYSTONE_AUTH_HOST}
|
| 450 | 448 |
auth_protocol = ${KEYSTONE_AUTH_PROTOCOL}
|
| 451 | 449 |
cafile = ${SSL_BUNDLE_FILE}
|
| 452 |
-auth_token = ${SERVICE_TOKEN}
|
|
| 453 |
-admin_token = ${SERVICE_TOKEN}
|
|
| 450 |
+admin_user = swift |
|
| 451 |
+admin_tenant_name = ${SERVICE_TENANT_NAME}
|
|
| 452 |
+admin_password = ${SERVICE_PASSWORD}
|
|
| 454 | 453 |
|
| 455 | 454 |
[filter:swift3] |
| 456 | 455 |
use = egg:swift3#swift3 |