]> git.apps.os.sepia.ceph.com Git - ceph-ci.git/commit
rgw: make keystone work without admin token(service ac requirement)
authorDeepika Upadhyay <deepika.upadhyay@clyso.com>
Mon, 28 Oct 2024 09:19:52 +0000 (14:49 +0530)
committerDeepika <deepika.upadhyay@clyso.com>
Thu, 26 Jun 2025 07:37:10 +0000 (07:37 +0000)
commitf9d209427d7d6f8c8928699190ad1adb1a279e31
treeb9d0a6f01b70219806c8d01b1aa9ded63ac1f8c9
parente1d03c9cfa791088d7feb5fe0f752e06ef457f1d
rgw: make keystone work without admin token(service ac requirement)

Ceph RGW admin credentials must not be a requirement.
Both ec2 auth and keystone token validation work without an admin token.

And the user token verification will use its own token. The only
requirement for the service admin user token is the allow_expired, but
in our case we don't use this parameter.

fixes: https://tracker.ceph.com/issues/68327

Co-authored-by: @kayrus
Signed-off-by: Deepika Upadhyay <deepika.upadhyay@clyso.com>
(cherry picked from commit 55ce1782e159190fd9202b6e270a1a2c470b0626)
src/rgw/rgw_auth_keystone.cc