mirrors/versitygw
1
0
Fork 0
mirror of https://github.com/versity/versitygw.git synced 2026-09-26 01:44:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: add standalone iam service to systemd config setup

Browse Source
This commit is contained in:
Ben McClelland
2026-09-02 14:05:30 -07:00
parent 535cc9d521
commit c9e26b58c4
4 changed files with 198 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
extra/example.conf
+49
View File
@@ -342,6 +342,15 @@ ROOT_SECRET_ACCESS_KEY=
# Example: VGW_WEBUI_ADMIN_GATEWAYS=https://admin.example.com,http://192.168.1.100:7080
#VGW_WEBUI_ADMIN_GATEWAYS=
# The VGW_WEBUI_IAM_GATEWAYS option specifies standalone IAM service URLs for
# the Web GUI login page. The IAM service is a separate process, so its URLs
# cannot be auto-detected from this S3 gateway. Multiple URLs can be specified
# as a comma-separated list. When set, the Web GUI uses the standalone IAM
# service rather than the admin API: admin login and management surfaces are
# hidden, and management requests use the S3 and IAM APIs.
# Example: VGW_WEBUI_IAM_GATEWAYS=https://iam.example.com,http://localhost:7076
#VGW_WEBUI_IAM_GATEWAYS=
###################
# Website Hosting #
###################
@@ -519,6 +528,46 @@ ROOT_SECRET_ACCESS_KEY=
# FreeIPA IAM debug output
#VGW_IPA_DEBUG=false
# The standalone IAM options connect this gateway to a separately deployed IAM
# service through its private endpoint. Use a UNIX socket path, or use a TCP
# address with all three mTLS options below.
#VGW_IAM_STANDALONE_ENDPOINT=
# Access key used to sign this gateway's private IAM service requests. Set this
# together with VGW_IAM_STANDALONE_SECRET, or leave both unset to use the root
# access and secret credentials.
#VGW_IAM_STANDALONE_ACCESS=
# Secret key used to sign this gateway's private IAM service requests. Set this
# together with VGW_IAM_STANDALONE_ACCESS, or leave both unset to use the root
# access and secret credentials.
#VGW_IAM_STANDALONE_SECRET=
# TLS client certificate presented to the standalone IAM service. Required for
# a TCP VGW_IAM_STANDALONE_ENDPOINT; not used for a UNIX socket endpoint.
#VGW_IAM_STANDALONE_CLIENT_CERT=
# Private key for VGW_IAM_STANDALONE_CLIENT_CERT.
#VGW_IAM_STANDALONE_CLIENT_CERT_KEY=
# PEM-encoded CA bundle used to verify the standalone IAM service TLS
# certificate. Required for a TCP VGW_IAM_STANDALONE_ENDPOINT; not used for a
# UNIX socket endpoint.
#VGW_IAM_STANDALONE_SERVER_CA=
# POSIX user ID assigned to every account resolved through standalone IAM.
# Standalone IAM has no per-user POSIX identity, so all accounts use this value.
# Defaults to 0.
#VGW_IAM_STANDALONE_DEFAULT_UID=0
# POSIX group ID assigned to every account resolved through standalone IAM.
# Defaults to 0.
#VGW_IAM_STANDALONE_DEFAULT_GID=0
# Project ID assigned to every account resolved through standalone IAM.
# Defaults to 0.
#VGW_IAM_STANDALONE_DEFAULT_PROJECT_ID=0
###############
# IAM caching #
###############