%define COMPONENT registry
%define RPM_NAME caas-%{COMPONENT}
%define RPM_MAJOR_VERSION 2.7.1
-%define RPM_MINOR_VERSION 2
+%define RPM_MINOR_VERSION 3
%define IMAGE_TAG %{RPM_MAJOR_VERSION}-%{RPM_MINOR_VERSION}
Name: %{RPM_NAME}
Version: %{RPM_MAJOR_VERSION}
%define COMPONENT swift
%define RPM_NAME caas-%{COMPONENT}
%define RPM_MAJOR_VERSION 2.21.0
-%define RPM_MINOR_VERSION 4
+%define RPM_MINOR_VERSION 5
%define IMAGE_TAG %{RPM_MAJOR_VERSION}-%{RPM_MINOR_VERSION}
Name: %{RPM_NAME}
Version: %{RPM_MAJOR_VERSION}
delete:
enabled: true
swift:
- username: admin:registry
- password: {{ swift_registry_pass }}
+ username: admin:admin
+ password: {{ swift_admin_pass }}
authurl: {{ caas.swift }}/auth/v1.0
container: dockerregistry
http:
delete:
enabled: true
swift:
- username: admin:registry
- password: {{ swift_registry_pass }}
+ username: admin:admin
+ password: {{ swift_admin_pass }}
authurl: {{ caas.swift_update }}/auth/v1.0
container: dockerregistry
http:
# See the License for the specific language governing permissions and
# limitations under the License.
-- import_tasks: password_handler.yml
-
- name: create directories
file:
path: "{{ item }}"
+++ /dev/null
----
-# Copyright 2019 Nokia
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-- shell: openssl rand -hex 10 | /usr/bin/openssl enc -aes-256-cbc -a -pass pass:{{ name }}
- register: password
-
-- name: insert passwords into etcd
- command: '/usr/bin/curl -X PUT
- https://{{ ansible_host }}:{{ caas.etcd_api_port }}/v2/keys/swift/{{ item }}?prevExist=false
- --cacert /etc/etcd/ssl/ca.pem
- --cert /etc/etcd/ssl/etcd{{ nodeindex }}.pem
- --key /etc/etcd/ssl/etcd{{ nodeindex }}-key.pem
- --data-urlencode value="{{ password.stdout }}"'
- become_user: "root"
-
+++ /dev/null
----
-# Copyright 2019 Nokia
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-- include_tasks: password_gen.yml
- with_items:
- - "registry"
-
-- name: get registry password
- command: '/usr/bin/curl
- https://{{ ansible_host }}:{{ caas.etcd_api_port }}/v2/keys/swift/registry
- --cacert /etc/etcd/ssl/ca.pem
- --cert /etc/etcd/ssl/etcd{{ nodeindex }}.pem
- --key /etc/etcd/ssl/etcd{{ nodeindex }}-key.pem'
- register: registry_pass
- become_user: "root"
-
-- name: decode registry pass
- shell: echo {{ (registry_pass.stdout|from_json).node.value }} | /usr/bin/openssl enc -d -aes-256-cbc -a -pass pass:{{ name }}
- register: registry_pass
-
-- name: set registry pass
- set_fact:
- swift_registry_pass: "{{ registry_pass.stdout }}"
use = egg:swift#tempauth
# user_<tenant>_<username> = <password> <privileges>
user_admin_admin = {{ caas.swift_credential.password }} .admin .reseller_admin
-user_admin_registry = {{ swift_registry_pass }} .admin
use = egg:swift#tempauth
# user_<tenant>_<username> = <password> <privileges>
user_admin_admin = {{ caas.swift_credential.password }} .admin .reseller_admin
-user_admin_registry = {{ swift_registry_pass }} .admin
+++ /dev/null
-{#
-Copyright 2019 Nokia
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-#}
-export SWIFT_USER=registry
-export SWIFT_TENANT=admin
-export SWIFT_PASS={{ swift_registry_pass }}
-