
The s3api cross-compat tests in test_service weren't sophisticated enough to account for real s3 session credentials that could see actual aws s3 buckets (or a vsaio you actually use) - however valid assertions on the authorization logic doesn't actually require such a strictly clean slate. Drive-by: prefer test config option without double negative, and update ansible that's based on the sample config. Related-Change-Id: I811642fccd916bd9ef71846a8108d50a462740f0 Change-Id: Ifab08cfe72f12d80e2196ad9b9b7876ace5825b4 Signed-off-by: Clay Gerrard <clay.gerrard@gmail.com>
87 lines
2.2 KiB
YAML
87 lines
2.2 KiB
YAML
- name: Add domain_remap and etag-quoter to pipeline
|
|
replace:
|
|
path: "/etc/swift/proxy-server.conf"
|
|
regexp: "cache listing_formats"
|
|
replace: "cache domain_remap etag-quoter listing_formats"
|
|
become: true
|
|
|
|
- name: Set domain_remap domain
|
|
ini_file:
|
|
path: /etc/swift/proxy-server.conf
|
|
section: filter:domain_remap
|
|
option: storage_domain
|
|
value: example.com
|
|
become: true
|
|
|
|
- name: Set storage_domain in test.conf (for Keystone tests)
|
|
ini_file:
|
|
path: /etc/swift/test.conf
|
|
section: func_test
|
|
option: storage_domain
|
|
value: example.com
|
|
become: true
|
|
|
|
- name: Turn off s3_acl_tests_enabled in test.conf (for Keystone tests)
|
|
ini_file:
|
|
path: /etc/swift/test.conf
|
|
section: s3api_test
|
|
option: s3_acl_tests_enabled
|
|
value: false
|
|
become: true
|
|
|
|
- name: Set storage_domain in test/sample.conf (for tempauth tests)
|
|
ini_file:
|
|
path: "{{ ansible_env.HOME }}/{{ zuul.project.src_dir }}/../swift/test/sample.conf"
|
|
section: func_test
|
|
option: storage_domain
|
|
value: example.com
|
|
become: true
|
|
|
|
- name: Turn off s3_acl_tests_enabled in test/sample.conf (for tempauth tests)
|
|
ini_file:
|
|
path: "{{ ansible_env.HOME }}/{{ zuul.project.src_dir }}/../swift/test/sample.conf"
|
|
section: s3api_test
|
|
option: s3_acl_tests_enabled
|
|
value: false
|
|
become: true
|
|
|
|
- name: Enable object versioning
|
|
ini_file:
|
|
path: /etc/swift/proxy-server.conf
|
|
section: filter:versioned_writes
|
|
option: allow_object_versioning
|
|
value: true
|
|
become: true
|
|
|
|
- name: Configure s3api force_swift_request_proxy_log
|
|
ini_file:
|
|
path: /etc/swift/proxy-server.conf
|
|
section: filter:s3api
|
|
option: force_swift_request_proxy_log
|
|
value: true
|
|
become: true
|
|
|
|
- name: Copy ring for Policy-1
|
|
copy:
|
|
remote_src: true
|
|
src: /etc/swift/object.ring.gz
|
|
dest: /etc/swift/object-1.ring.gz
|
|
become: true
|
|
|
|
- name: Add Policy-1 to swift.conf
|
|
ini_file:
|
|
path: /etc/swift/swift.conf
|
|
section: storage-policy:1
|
|
option: name
|
|
value: Policy-1
|
|
become: true
|
|
|
|
- name: Restart service to pick up config changes
|
|
command: systemctl restart devstack@s-{{ item }}.service
|
|
become: true
|
|
with_items:
|
|
- proxy
|
|
- account
|
|
- container
|
|
- object
|