]> git.apps.os.sepia.ceph.com Git - ceph.git/commit
rgw: make keystone work without admin token(service ac requirement) 64200/head
authorDeepika Upadhyay <deepika.upadhyay@clyso.com>
Mon, 28 Oct 2024 09:19:52 +0000 (14:49 +0530)
committerDeepika Upadhyay <deepika.upadhyay@clyso.com>
Wed, 23 Jul 2025 11:25:10 +0000 (16:55 +0530)
commit8ac23fd720135e56181360dcc5c9f16b99f0273d
treee93d70a39f905d948051ebee25a1f48e78f470ef
parent4df087001fd1684fd2f9fc5a3e6533cc9180d992
rgw: make keystone work without admin token(service ac requirement)

Ceph RGW admin credentials must not be a requirement.
Both ec2 auth and keystone token validation work without an admin token.

And the user token verification will use its own token. The only
requirement for the service admin user token is the allow_expired, but
in our case we don't use this parameter.

fixes: https://tracker.ceph.com/issues/68327

Co-authored-by: @kayrus
Signed-off-by: Deepika Upadhyay <deepika.upadhyay@clyso.com>
(cherry picked from commit 55ce1782e159190fd9202b6e270a1a2c470b0626)
src/rgw/rgw_auth_keystone.cc