[DEFAULT]
bind_port = 8080
# for ease of gdb, strace
#workers = 2
workers = 8
user = swift

# The RDO/OSP standard is local2. We have some other services on local0.
log_facility = LOG_LOCAL2

# log_level = DEBUG

# Removed swift3 for the upgrade to F24
# Removed Keystone for upgrade to F25 (python2-pika_pool)
# The bulk middleware is required for Gnocchi
[pipeline:main]
#pipeline = catch_errors gatekeeper healthcheck proxy-logging cache listing_formats bulk s3api tempurl ratelimit tempauth           staticweb copy container-quotas account-quotas slo dlo versioned_writes proxy-logging proxy-server
pipeline = catch_errors gatekeeper healthcheck proxy-logging cache listing_formats bulk s3api tempurl ratelimit authtoken keystone staticweb copy container-quotas account-quotas slo dlo versioned_writes proxy-logging proxy-server

[app:proxy-server]
use = egg:swift#proxy
allow_account_management = true
account_autocreate = true
put_api_v1 = true

[filter:healthcheck]
use = egg:swift#healthcheck

[filter:cache]
use = egg:swift#memcache
memcache_servers = 192.168.50.1:11211,192.168.50.2:11211
connect_timeout = 1.2

[filter:ratelimit]
use = egg:swift#ratelimit

[filter:catch_errors]
use = egg:swift#catch_errors

[filter:staticweb]
use = egg:swift#staticweb
url_base = https://

[filter:tempurl]
use = egg:swift#tempurl

[filter:proxy-logging]
use = egg:swift#proxy_logging
access_log_headers = false
reveal_sensitive_prefix = 12
#
# Note: The double proxy-logging in the pipeline is not a mistake. The
# left-most proxy-logging is there to log requests that were handled in
# middleware and never made it through to the right-most middleware (and
# proxy server). Double logging is prevented for normal requests. See
# proxy-logging docs.

# Note: Put before both ratelimit and auth in the pipeline.
[filter:bulk]
use = egg:swift#bulk

# Note: Put after auth and staticweb in the pipeline.
[filter:slo]
use = egg:swift#slo

# Note: Put after auth and staticweb in the pipeline.
[filter:dlo]
use = egg:swift#dlo

# Note: Put after auth in the pipeline.
[filter:container-quotas]
use = egg:swift#container_quotas

# Note: Put after auth in the pipeline.
[filter:account-quotas]
use = egg:swift#account_quotas

[filter:gatekeeper]
use = egg:swift#gatekeeper

[filter:container_sync]
use = egg:swift#container_sync

[filter:versioned_writes]
use = egg:swift#versioned_writes

[filter:copy]
use = egg:swift#copy

[filter:listing_formats]
use = egg:swift#listing_formats

[filter:keystone]
use = egg:swift#keystoneauth
reseller_prefix = KSAU
operator_roles = admin, swiftuser
reseller_admin_role = ResellerAdmin
# is_admin is obsolete in Queens
#is_admin = true
cache = swift.cache

[filter:authtoken]
paste.filter_factory = keystonemiddleware.auth_token:filter_factory
#
auth_url = http://keystone:35357/v3
www_authenticate_uri = https://rhev-a24c-01.os.lab.eng.bos.redhat.com:5000/v3
region_name = RegionX
#
# These are for the case of auth_type=password:
auth_plugin = password
project_domain_id = default
project_name = services
user_domain_id = default
username = swift
password = swi*
#
delay_auth_decision = True
#
#signing_dir = /tmp/keystone-signing-swift

# former swift3
# use = egg:swift3#swift3
[filter:s3api]
use = egg:swift#s3api

#[filter:s3token]
#paste.filter_factory = keystoneclient.middleware.s3_token:filter_factory
#auth_port = 35357
#auth_host = 127.0.0.1
#auth_protocol = http

[filter:tempauth]
use = egg:swift#tempauth
user_admten_admin = adm* .admin .reseller_admin https://rhev-a24c-01.os.lab.eng.bos.redhat.com:443/v1/AUTH_admten
user_test_tester = tes* .admin     http://rhev-a24c-01.os.lab.eng.bos.redhat.com:8080/v1/AUTH_test
user_test2_tester2 = tes* .admin  http://rhev-a24c-01.os.lab.eng.bos.redhat.com:8080/v1/AUTH_test2
user_test_tester3 = tes*          http://rhev-a24c-01.os.lab.eng.bos.redhat.com:8080/v1/AUTH_test
user_zaitcev_zaitcev = tot* .admin .reseller_admin https://rhev-a24c-01.os.lab.eng.bos.redhat.com/v1/AUTH_zaitcev
user_fvollero_fvollero = xRw* AUTH_fvollero https://rhev-a24c-01.os.lab.eng.bos.redhat.com/v1/AUTH_fvollero
user_gnocchi_gnocchi = pas* .admin   http://rhev-a24c-01.os.lab.eng.bos.redhat.com:8080/v1/AUTH_gnocchi
user_ssbarnea_ssbarnea = t6i* AUTH_ssbarnea https://rhev-a24c-01.os.lab.eng.bos.redhat.com/v1/AUTH_ssbarnea

#[filter:ceilometer]
#use = egg:ceilometer#swift