27a734c78a
Unfortunately, we can't identify the user, so we can't map to an account, so we can't respect whatever CORS metadata might be set on the container. As a result, the allowed origins must be configured cluster-wide. Add a new config option, cors_preflight_allow_origin, for that; default it to blank (ie, deny preflights from all origins, preserving existing behavior), but allow either a comma-separated list of origins or * (to allow all origins). Change-Id: I985143bf03125a05792e79bc5e5f83722d6431b3 Co-Authored-By: Matthew Oliver <matt@oliver.net.au>
101 lines
2.2 KiB
Plaintext
101 lines
2.2 KiB
Plaintext
[DEFAULT]
|
|
bind_ip = 0.0.0.0
|
|
bind_port = 8080
|
|
log_address = /dev/log
|
|
log_facility = LOG_LOCAL2
|
|
log_headers = false
|
|
log_level = DEBUG
|
|
log_name = proxy-server
|
|
user = swift
|
|
|
|
[pipeline:main]
|
|
pipeline = catch_errors gatekeeper healthcheck proxy-logging cache etag-quoter listing_formats bulk tempurl ratelimit s3api tempauth staticweb copy container-quotas account-quotas slo dlo versioned_writes symlink proxy-logging proxy-server
|
|
|
|
[filter:catch_errors]
|
|
use = egg:swift#catch_errors
|
|
|
|
[filter:healthcheck]
|
|
use = egg:swift#healthcheck
|
|
|
|
[filter:proxy-logging]
|
|
use = egg:swift#proxy_logging
|
|
|
|
[filter:bulk]
|
|
use = egg:swift#bulk
|
|
|
|
[filter:ratelimit]
|
|
use = egg:swift#ratelimit
|
|
|
|
[filter:crossdomain]
|
|
use = egg:swift#crossdomain
|
|
|
|
[filter:dlo]
|
|
use = egg:swift#dlo
|
|
|
|
[filter:slo]
|
|
use = egg:swift#slo
|
|
|
|
[filter:tempurl]
|
|
use = egg:swift#tempurl
|
|
|
|
[filter:tempauth]
|
|
use = egg:swift#tempauth
|
|
user_admin_admin = admin .admin .reseller_admin
|
|
user_test_tester = testing .admin
|
|
user_test_tester2 = testing2 .admin
|
|
user_test_tester3 = testing3
|
|
user_test2_tester2 = testing2 .admin
|
|
|
|
[filter:staticweb]
|
|
use = egg:swift#staticweb
|
|
|
|
[filter:account-quotas]
|
|
use = egg:swift#account_quotas
|
|
|
|
[filter:container-quotas]
|
|
use = egg:swift#container_quotas
|
|
|
|
[filter:cache]
|
|
use = egg:swift#memcache
|
|
|
|
[filter:etag-quoter]
|
|
use = egg:swift#etag_quoter
|
|
enable_by_default = false
|
|
|
|
[filter:gatekeeper]
|
|
use = egg:swift#gatekeeper
|
|
|
|
[filter:versioned_writes]
|
|
use = egg:swift#versioned_writes
|
|
allow_versioned_writes = true
|
|
allow_object_versioning = true
|
|
|
|
[filter:copy]
|
|
use = egg:swift#copy
|
|
|
|
[filter:listing_formats]
|
|
use = egg:swift#listing_formats
|
|
|
|
[filter:symlink]
|
|
use = egg:swift#symlink
|
|
|
|
# To enable, add the s3api middleware to the pipeline before tempauth
|
|
[filter:s3api]
|
|
use = egg:swift#s3api
|
|
cors_preflight_allow_origin = *
|
|
|
|
# Example to create root secret: `openssl rand -base64 32`
|
|
[filter:keymaster]
|
|
use = egg:swift#keymaster
|
|
encryption_root_secret = changeme/changeme/changeme/changeme/change/=
|
|
|
|
# To enable use of encryption add both middlewares to pipeline, example:
|
|
# <other middleware> keymaster encryption proxy-logging proxy-server
|
|
[filter:encryption]
|
|
use = egg:swift#encryption
|
|
|
|
[app:proxy-server]
|
|
use = egg:swift#proxy
|
|
allow_account_management = true
|
|
account_autocreate = true
|