b770339534
HAProxy: change to use option forwardfor to pass origin IP address to backend via X-Forwarded-For header Keystone: Apache does the audit logs for keystone. Change the LogFormat to display the passed address instead of the connection address which is that of the load balancer. Nova, Cinder, Glance: these services can make use of the address passed in X-Forwarded-For. With this setting the API logs for these services include the client IP address. Change-Id: Ia861ecc11a7c7d463d0366586926d1a842853f69 Closes-Bug: #1548935
48 lines
1.3 KiB
Django/Jinja
48 lines
1.3 KiB
Django/Jinja
[DEFAULT]
|
|
debug = {{ glance_logging_debug }}
|
|
|
|
# NOTE(elemoine) log_dir alone does not work for Glance
|
|
log_file = /var/log/kolla/glance/api.log
|
|
use_forwarded_for = true
|
|
|
|
bind_host = {{ hostvars[inventory_hostname]['ansible_' + api_interface]['ipv4']['address'] }}
|
|
bind_port = {{ glance_api_port }}
|
|
|
|
|
|
registry_host = {{ kolla_internal_address }}
|
|
|
|
{% if enable_ceph | bool %}
|
|
show_image_direct_url= True
|
|
{% endif %}
|
|
|
|
[database]
|
|
connection = mysql+pymysql://{{ glance_database_user }}:{{ glance_database_password }}@{{ glance_database_address }}/{{ glance_database_name }}
|
|
|
|
[keystone_authtoken]
|
|
auth_uri = {{ internal_protocol }}://{{ kolla_internal_address }}:{{ keystone_public_port }}
|
|
auth_url = {{ admin_protocol }}://{{ kolla_internal_address }}:{{ keystone_admin_port }}
|
|
auth_type = password
|
|
project_domain_id = default
|
|
user_domain_id = default
|
|
project_name = service
|
|
username = {{ glance_keystone_user }}
|
|
password = {{ glance_keystone_password }}
|
|
|
|
[paste_deploy]
|
|
flavor = keystone
|
|
|
|
[glance_store]
|
|
{% if enable_ceph | bool %}
|
|
default_store = rbd
|
|
stores = rbd
|
|
rbd_store_user = glance
|
|
rbd_store_pool = {{ ceph_glance_pool_name }}
|
|
rbd_store_chunk_size = 8
|
|
{% else %}
|
|
default_store = file
|
|
filesystem_store_datadir = /var/lib/glance/images/
|
|
{% endif %}
|
|
|
|
[oslo_messaging_notifications]
|
|
driver = noop
|