From 43af5e45c71dbab812cd48f2f536f7f70ef23000 Mon Sep 17 00:00:00 2001 From: Dan Prince Date: Tue, 26 Jul 2016 14:07:30 -0400 Subject: Add noauth middleware This patch implements noauth middleware that can be enabled by adding the following to heat.conf: [paste_deploy] flavor = noauth One use case for this middleware would be to use alongside of a single process heat-all setup (using fake_rpc, sqlite) to avoid having to bootstrap keystone to use only the Heat software deployments resources. We could use this approach to help bootstrap TripleO's undercloud using heat templates with pre-deployed servers (a single undercloud server for the intial case). Change-Id: I50a8cc46b4c3c235d438a711760fba94bf8e9715 --- etc/heat/api-paste.ini | 11 +++++++++++ 1 file changed, 11 insertions(+) (limited to 'etc') diff --git a/etc/heat/api-paste.ini b/etc/heat/api-paste.ini index b1068efd8..986a4a252 100644 --- a/etc/heat/api-paste.ini +++ b/etc/heat/api-paste.ini @@ -22,6 +22,13 @@ pipeline = cors request_id faultwrap http_proxy_to_wsgi versionnegotiation authu [pipeline:heat-api-custombackend] pipeline = cors request_id faultwrap versionnegotiation context custombackendauth apiv1app +# To enable, in heat.conf: +# [paste_deploy] +# flavor = noauth +# +[pipeline:heat-api-noauth] +pipeline = cors request_id faultwrap http_proxy_to_wsgi versionnegotiation noauth context apiv1app + # heat-api-cfn pipeline [pipeline:heat-api-cfn] pipeline = cors http_proxy_to_wsgi cfnversionnegotiation osprofiler ec2authtoken authtoken context apicfnv1app @@ -97,6 +104,10 @@ paste.filter_factory = heat.common.auth_password:filter_factory [filter:custombackendauth] paste.filter_factory = heat.common.custom_backend_auth:filter_factory +# Auth middleware that accepts any auth +[filter:noauth] +paste.filter_factory = heat.common.noauth:filter_factory + # Middleware to set x-openstack-request-id in http response header [filter:request_id] paste.filter_factory = oslo_middleware.request_id:RequestId.factory -- cgit v1.2.1