← Back to branch summary

~corey.bryant/charms/trusty/keystone/python-six

« back to all changes in this revision

Viewing changes to templates/grizzly/keystone.conf

  • Committer: James Page
  • Date: 2014-03-27 10:54:38 UTC
  • mfrom: (55.1.22 keystone)
  • mto: (52.4.7 keystone)
  • mto: This revision was merged to the branch mainline in revision 60.
  • Revision ID: james.page@canonical.com-20140327105438-oid8czi9ud51iut1
Merge ssl-everywhere branch (may break stuff)

Show diffs side-by-side

added added

removed removed

Lines of Context:
templates/grizzly/keystone.conf
 
1
# grizzly
 
2
###############################################################################
 
3
# [ WARNING ]
 
4
# Configuration file maintained by Juju. Local changes may be overwritten.
 
5
###############################################################################
 
6
[DEFAULT]
 
7
admin_token = {{ token }}
 
8
admin_port = {{ admin_port }}
 
9
public_port = {{ public_port }}
 
10
use_syslog = {{ use_syslog }}
 
11
log_config = /etc/keystone/logging.conf
 
12
debug = {{ debug }}
 
13
verbose = {{ verbose }}
 
14
 
 
15
[sql]
 
16
{% if database_host -%}
 
17
connection = mysql://{{ database_user }}:{{ database_password }}@{{ database_host }}/{{ database }}{% if database_ssl_ca %}?ssl_ca={{ database_ssl_ca }}{% if database_ssl_cert %}&ssl_cert={{ database_ssl_cert }}&ssl_key={{ database_ssl_key }}{% endif %}{% endif %}
 
18
{% else -%}
 
19
connection = sqlite:////var/lib/keystone/keystone.db
 
20
{% endif -%}
 
21
idle_timeout = 200
 
22
 
 
23
[identity]
 
24
driver = keystone.identity.backends.sql.Identity
 
25
 
 
26
[trust]
 
27
driver = keystone.trust.backends.sql.Trust
 
28
 
 
29
[catalog]
 
30
driver = keystone.catalog.backends.sql.Catalog
 
31
 
 
32
[token]
 
33
driver = keystone.token.backends.sql.Token
 
34
expiration = 86400
 
35
 
 
36
[policy]
 
37
driver = keystone.policy.backends.rules.Policy
 
38
 
 
39
[ec2]
 
40
driver = keystone.contrib.ec2.backends.sql.Ec2
 
41
 
 
42
{% if signing -%}
 
43
[signing]
 
44
token_format = UUID
 
45
certfile = /etc/keystone/ssl/certs/signing_cert.pem
 
46
keyfile = /etc/keystone/ssl/private/signing_key.pem
 
47
ca_certs = /etc/keystone/ssl/certs/ca.pem
 
48
key_size = 1024
 
49
valid_days = 3650
 
50
ca_password = None
 
51
{% endif -%}
 
52
 
 
53
[auth]
 
54
methods = password,token
 
55
password = keystone.auth.plugins.password.Password
 
56
token = keystone.auth.plugins.token.Token
 
57
 
 
58
[filter:debug]
 
59
paste.filter_factory = keystone.common.wsgi:Debug.factory
 
60
 
 
61
[filter:token_auth]
 
62
paste.filter_factory = keystone.middleware:TokenAuthMiddleware.factory
 
63
 
 
64
[filter:admin_token_auth]
 
65
paste.filter_factory = keystone.middleware:AdminTokenAuthMiddleware.factory
 
66
 
 
67
[filter:xml_body]
 
68
paste.filter_factory = keystone.middleware:XmlBodyMiddleware.factory
 
69
 
 
70
[filter:json_body]
 
71
paste.filter_factory = keystone.middleware:JsonBodyMiddleware.factory
 
72
 
 
73
[filter:user_crud_extension]
 
74
paste.filter_factory = keystone.contrib.user_crud:CrudExtension.factory
 
75
 
 
76
[filter:crud_extension]
 
77
paste.filter_factory = keystone.contrib.admin_crud:CrudExtension.factory
 
78
 
 
79
[filter:ec2_extension]
 
80
paste.filter_factory = keystone.contrib.ec2:Ec2Extension.factory
 
81
 
 
82
[filter:s3_extension]
 
83
paste.filter_factory = keystone.contrib.s3:S3Extension.factory
 
84
 
 
85
[filter:url_normalize]
 
86
paste.filter_factory = keystone.middleware:NormalizingFilter.factory
 
87
 
 
88
[filter:sizelimit]
 
89
paste.filter_factory = keystone.middleware:RequestBodySizeLimiter.factory
 
90
 
 
91
[filter:stats_monitoring]
 
92
paste.filter_factory = keystone.contrib.stats:StatsMiddleware.factory
 
93
 
 
94
[filter:stats_reporting]
 
95
paste.filter_factory = keystone.contrib.stats:StatsExtension.factory
 
96
 
 
97
[filter:access_log]
 
98
paste.filter_factory = keystone.contrib.access:AccessLogMiddleware.factory
 
99
 
 
100
[app:public_service]
 
101
paste.app_factory = keystone.service:public_app_factory
 
102
 
 
103
[app:service_v3]
 
104
paste.app_factory = keystone.service:v3_app_factory
 
105
 
 
106
[app:admin_service]
 
107
paste.app_factory = keystone.service:admin_app_factory
 
108
 
 
109
[pipeline:public_api]
 
110
pipeline = access_log sizelimit stats_monitoring url_normalize token_auth admin_token_auth xml_body json_body debug ec2_extension user_crud_extension public_service
 
111
 
 
112
[pipeline:admin_api]
 
113
pipeline = access_log sizelimit stats_monitoring url_normalize token_auth admin_token_auth xml_body json_body debug stats_reporting ec2_extension s3_extension crud_extension admin_service
 
114
 
 
115
[pipeline:api_v3]
 
116
pipeline = access_log sizelimit stats_monitoring url_normalize token_auth admin_token_auth xml_body json_body debug stats_reporting ec2_extension s3_extension service_v3
 
117
 
 
118
[app:public_version_service]
 
119
paste.app_factory = keystone.service:public_version_app_factory
 
120
 
 
121
[app:admin_version_service]
 
122
paste.app_factory = keystone.service:admin_version_app_factory
 
123
 
 
124
[pipeline:public_version_api]
 
125
pipeline = access_log sizelimit stats_monitoring url_normalize xml_body public_version_service
 
126
 
 
127
[pipeline:admin_version_api]
 
128
pipeline = access_log sizelimit stats_monitoring url_normalize xml_body admin_version_service
 
129
 
 
130
[composite:main]
 
131
use = egg:Paste#urlmap
 
132
/v2.0 = public_api
 
133
/v3 = api_v3
 
134
/ = public_version_api
 
135
 
 
136
[composite:admin]
 
137
use = egg:Paste#urlmap
 
138
/v2.0 = admin_api
 
139
/v3 = api_v3
 
140
/ = admin_version_api