1
# Use this pipeline for no auth or image caching - DEFAULT
3
pipeline = cors healthcheck versionnegotiation osprofiler unauthenticated-context rootapp
5
# Use this pipeline for image caching and no auth
6
[pipeline:glance-api-caching]
7
pipeline = cors healthcheck versionnegotiation osprofiler unauthenticated-context cache rootapp
9
# Use this pipeline for caching w/ management interface but no auth
10
[pipeline:glance-api-cachemanagement]
11
pipeline = cors healthcheck versionnegotiation osprofiler unauthenticated-context cache cachemanage rootapp
13
# Use this pipeline for keystone auth
14
[pipeline:glance-api-keystone]
15
pipeline = cors healthcheck versionnegotiation osprofiler authtoken context rootapp
17
# Use this pipeline for keystone auth with image caching
18
[pipeline:glance-api-keystone+caching]
19
pipeline = cors healthcheck versionnegotiation osprofiler authtoken context cache rootapp
21
# Use this pipeline for keystone auth with caching and cache management
22
[pipeline:glance-api-keystone+cachemanagement]
23
pipeline = cors healthcheck versionnegotiation osprofiler authtoken context cache cachemanage rootapp
25
# Use this pipeline for authZ only. This means that the registry will treat a
26
# user as authenticated without making requests to keystone to reauthenticate
28
[pipeline:glance-api-trusted-auth]
29
pipeline = cors healthcheck versionnegotiation osprofiler context rootapp
31
# Use this pipeline for authZ only. This means that the registry will treat a
32
# user as authenticated without making requests to keystone to reauthenticate
33
# the user and uses cache management
34
[pipeline:glance-api-trusted-auth+cachemanagement]
35
pipeline = cors healthcheck versionnegotiation osprofiler context cache cachemanage rootapp
38
paste.composite_factory = glance.api:root_app_factory
45
paste.app_factory = glance.api.versions:create_resource
48
paste.app_factory = glance.api.v1.router:API.factory
51
paste.app_factory = glance.api.v2.router:API.factory
54
paste.app_factory = glance.api.v3.router:API.factory
57
paste.filter_factory = oslo_middleware:Healthcheck.factory
58
backends = disable_by_file
59
disable_by_file_path = /etc/glance/healthcheck_disable
61
[filter:versionnegotiation]
62
paste.filter_factory = glance.api.middleware.version_negotiation:VersionNegotiationFilter.factory
65
paste.filter_factory = glance.api.middleware.cache:CacheFilter.factory
68
paste.filter_factory = glance.api.middleware.cache_manage:CacheManageFilter.factory
71
paste.filter_factory = glance.api.middleware.context:ContextMiddleware.factory
73
[filter:unauthenticated-context]
74
paste.filter_factory = glance.api.middleware.context:UnauthenticatedContextMiddleware.factory
77
paste.filter_factory = keystonemiddleware.auth_token:filter_factory
78
delay_auth_decision = true
81
paste.filter_factory = glance.api.middleware.gzip:GzipMiddleware.factory
84
paste.filter_factory = osprofiler.web:WsgiMiddleware.factory
85
hmac_keys = SECRET_KEY #DEPRECATED
86
enabled = yes #DEPRECATED
89
paste.filter_factory = oslo_middleware.cors:filter_factory
90
oslo_config_project = glance
91
oslo_config_program = glance-api
92
# Basic Headers (Automatic)
93
# Accept = Origin, Accept, Accept-Language, Content-Type, Cache-Control, Content-Language, Expires, Last-Modified, Pragma
94
# Expose = Origin, Accept, Accept-Language, Content-Type, Cache-Control, Content-Language, Expires, Last-Modified, Pragma
97
# Accept = Content-MD5, X-Image-Meta-Checksum, X-Storage-Token, Accept-Encoding
98
# Expose = X-Image-Meta-Checksum
101
# Accept = X-Auth-Token, X-Identity-Status, X-Roles, X-Service-Catalog, X-User-Id, X-Tenant-Id
102
# Expose = X-Auth-Token, X-Subject-Token, X-Service-Token
104
# Request ID Middleware Headers
105
# Accept = X-OpenStack-Request-ID
106
# Expose = X-OpenStack-Request-ID
107
latent_allow_headers = Content-MD5, X-Image-Meta-Checksum, X-Storage-Token, Accept-Encoding, X-Auth-Token, X-Identity-Status, X-Roles, X-Service-Catalog, X-User-Id, X-Tenant-Id, X-OpenStack-Request-ID
108
latent_expose_headers = X-Image-Meta-Checksum, X-Auth-Token, X-Subject-Token, X-Service-Token, X-OpenStack-Request-ID
b'\\ No newline at end of file'