diff options
| author | guang-yee <guang.yee@hp.com> | 2013-10-11 14:08:57 -0700 |
|---|---|---|
| committer | guang-yee <guang.yee@hp.com> | 2013-11-21 22:55:48 -0800 |
| commit | a97b293501fa504dd154fc921809a40bc2a34049 (patch) | |
| tree | 052620546857efdb402280629446de8ed4602fa0 /doc | |
| parent | b89d28663ed181e1df56ada271931891a4c77f67 (diff) | |
| download | python-keystoneclient-a97b293501fa504dd154fc921809a40bc2a34049.tar.gz | |
Opt-out of service catalog
Introducing a config option 'include_service_catalog' to indicate whether
service catalog is needed. If the 'include_service_catalog' option is set to
False, middleware will not ask for service catalog on token validation and will
not set the X-Service-Catalog header.
This option is backward compatible as it is default to True.
DocImpact
Fixed bug 1228317
Change-Id: Id8c410a7ae0443ac425d20cb9c6a24ee5bb2cb8d
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/source/middlewarearchitecture.rst | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/doc/source/middlewarearchitecture.rst b/doc/source/middlewarearchitecture.rst index caeff21..6b08904 100644 --- a/doc/source/middlewarearchitecture.rst +++ b/doc/source/middlewarearchitecture.rst @@ -141,6 +141,8 @@ a WSGI component. Example for the auth_token middleware:: ;Uncomment next 2 lines if Keystone server is validating client cert ;certfile = <path to middleware public cert> ;keyfile = <path to middleware private cert> + ;Uncomment next line to opt-out of service catalog + ;include_service_catalog = False For services which have separate paste-deploy ini file, auth_token middleware can be alternatively configured in [keystone_authtoken] section in the main @@ -197,6 +199,10 @@ Configuration Options encoded CA file/bundle that will be used to verify HTTPS connections. * ``insecure``: (optional, default `False`) Don't verify HTTPS connections (overrides `cafile`). +* ``include_service_catalog``: (optional, default `True`) Indicate whether to + set the X-Service-Catalog header. If False, middleware will not ask for + service catalog on token validation and will not set the X-Service-Catalog + header. Caching for improved response ----------------------------- |