Files
swift/roles/dsvm-additional-middlewares/tasks/main.yaml
Clay Gerrard b5e6964a22 s3api: fix test_service with pre-existing buckets
The s3api cross-compat tests in test_service weren't sophisticated
enough to account for real s3 session credentials that could see actual
aws s3 buckets (or a vsaio you actually use) - however valid assertions
on the authorization logic doesn't actually require such a strictly
clean slate.

Drive-by: prefer test config option without double negative, and update
ansible that's based on the sample config.

Related-Change-Id: I811642fccd916bd9ef71846a8108d50a462740f0
Change-Id: Ifab08cfe72f12d80e2196ad9b9b7876ace5825b4
Signed-off-by: Clay Gerrard <clay.gerrard@gmail.com>
2025-09-03 11:57:19 -05:00

87 lines
2.2 KiB
YAML

- name: Add domain_remap and etag-quoter to pipeline
replace:
path: "/etc/swift/proxy-server.conf"
regexp: "cache listing_formats"
replace: "cache domain_remap etag-quoter listing_formats"
become: true
- name: Set domain_remap domain
ini_file:
path: /etc/swift/proxy-server.conf
section: filter:domain_remap
option: storage_domain
value: example.com
become: true
- name: Set storage_domain in test.conf (for Keystone tests)
ini_file:
path: /etc/swift/test.conf
section: func_test
option: storage_domain
value: example.com
become: true
- name: Turn off s3_acl_tests_enabled in test.conf (for Keystone tests)
ini_file:
path: /etc/swift/test.conf
section: s3api_test
option: s3_acl_tests_enabled
value: false
become: true
- name: Set storage_domain in test/sample.conf (for tempauth tests)
ini_file:
path: "{{ ansible_env.HOME }}/{{ zuul.project.src_dir }}/../swift/test/sample.conf"
section: func_test
option: storage_domain
value: example.com
become: true
- name: Turn off s3_acl_tests_enabled in test/sample.conf (for tempauth tests)
ini_file:
path: "{{ ansible_env.HOME }}/{{ zuul.project.src_dir }}/../swift/test/sample.conf"
section: s3api_test
option: s3_acl_tests_enabled
value: false
become: true
- name: Enable object versioning
ini_file:
path: /etc/swift/proxy-server.conf
section: filter:versioned_writes
option: allow_object_versioning
value: true
become: true
- name: Configure s3api force_swift_request_proxy_log
ini_file:
path: /etc/swift/proxy-server.conf
section: filter:s3api
option: force_swift_request_proxy_log
value: true
become: true
- name: Copy ring for Policy-1
copy:
remote_src: true
src: /etc/swift/object.ring.gz
dest: /etc/swift/object-1.ring.gz
become: true
- name: Add Policy-1 to swift.conf
ini_file:
path: /etc/swift/swift.conf
section: storage-policy:1
option: name
value: Policy-1
become: true
- name: Restart service to pick up config changes
command: systemctl restart devstack@s-{{ item }}.service
become: true
with_items:
- proxy
- account
- container
- object