| Anthony Young | 3a09312 | 2011-09-13 19:01:45 +0000 | [diff] [blame^] | 1 | [DEFAULT] |
| 2 | # Show more verbose log output (sets INFO log level output) |
| 3 | verbose = False |
| 4 | |
| 5 | # Show debugging output in logs (sets DEBUG log level output) |
| 6 | debug = False |
| 7 | |
| 8 | # Which backend store should Keystone use by default. |
| 9 | # Default: 'sqlite' |
| 10 | # Available choices are 'sqlite' [future will include LDAP, PAM, etc] |
| 11 | default_store = sqlite |
| 12 | |
| 13 | # Log to this file. Make sure you do not set the same log |
| 14 | # file for both the API and registry servers! |
| 15 | log_file = /opt/keystone/keystone.log |
| 16 | |
| 17 | # List of backends to be configured |
| 18 | backends = keystone.backends.sqlalchemy |
| 19 | #For LDAP support, add: ,keystone.backends.ldap |
| 20 | |
| 21 | # Dictionary Maps every service to a header.Missing services would get header |
| 22 | # X_(SERVICE_NAME) Key => Service Name, Value => Header Name |
| 23 | service-header-mappings = { |
| 24 | 'nova' : 'X-Server-Management-Url', |
| 25 | 'swift' : 'X-Storage-Url', |
| 26 | 'cdn' : 'X-CDN-Management-Url'} |
| 27 | |
| 28 | # Address to bind the API server |
| 29 | # TODO Properties defined within app not available via pipeline. |
| 30 | service_host = 0.0.0.0 |
| 31 | |
| 32 | # Port the bind the API server to |
| 33 | service_port = 5000 |
| 34 | |
| 35 | # Address to bind the Admin API server |
| 36 | admin_host = 0.0.0.0 |
| 37 | |
| 38 | # Port the bind the Admin API server to |
| 39 | admin_port = 5001 |
| 40 | |
| 41 | #Role that allows to perform admin operations. |
| 42 | keystone-admin-role = Admin |
| 43 | |
| 44 | #Role that allows to perform service admin operations. |
| 45 | keystone-service-admin-role = KeystoneServiceAdmin |
| 46 | |
| 47 | [keystone.backends.sqlalchemy] |
| 48 | # SQLAlchemy connection string for the reference implementation registry |
| 49 | # server. Any valid SQLAlchemy connection string is fine. |
| 50 | # See: http://bit.ly/ideIpI |
| 51 | #sql_connection = sqlite:///keystone.db |
| 52 | sql_connection = mysql://root:nova@localhost/keystone |
| 53 | backend_entities = ['UserRoleAssociation', 'Endpoints', 'Role', 'Tenant', |
| 54 | 'User', 'Credentials', 'EndpointTemplates', 'Token', |
| 55 | 'Service'] |
| 56 | |
| 57 | # Period in seconds after which SQLAlchemy should reestablish its connection |
| 58 | # to the database. |
| 59 | sql_idle_timeout = 30 |
| 60 | |
| 61 | [pipeline:admin] |
| 62 | pipeline = |
| 63 | urlrewritefilter |
| 64 | admin_api |
| 65 | |
| 66 | [pipeline:keystone-legacy-auth] |
| 67 | pipeline = |
| 68 | urlrewritefilter |
| 69 | legacy_auth |
| 70 | RAX-KEY-extension |
| 71 | service_api |
| 72 | |
| 73 | [app:service_api] |
| 74 | paste.app_factory = keystone.server:service_app_factory |
| 75 | |
| 76 | [app:admin_api] |
| 77 | paste.app_factory = keystone.server:admin_app_factory |
| 78 | |
| 79 | [filter:urlrewritefilter] |
| 80 | paste.filter_factory = keystone.middleware.url:filter_factory |
| 81 | |
| 82 | [filter:legacy_auth] |
| 83 | paste.filter_factory = keystone.frontends.legacy_token_auth:filter_factory |
| 84 | |
| 85 | [filter:RAX-KEY-extension] |
| 86 | paste.filter_factory = keystone.contrib.extensions.service.raxkey.frontend:filter_factory |