s3tests.conf.SAMPLE

[DEFAULT]
## this section is just used for host, port and bucket_prefix

# host set for rgw in vstart.sh
host = {{ S3_HOST }} 

# port set for rgw in vstart.sh
port = {{ S3_PORT }} 

## say "False" to disable TLS
is_secure = {{ S3_TLS }} 

## say "False" to disable SSL Verify
ssl_verify = False

[fixtures]
## all the buckets created will start with this prefix;
## {random} will be filled with random characters to pad
## the prefix to 30 characters long, and avoid collisions
bucket prefix = yournamehere-{random}-

[s3 main]
# main display_name set in vstart.sh
display_name = {{ S3_MAIN_DISPLAY_NAME }}

# main user_idname set in vstart.sh
user_id = {{ S3_MAIN_USER_ID }} 

# main email set in vstart.sh
email = tester@ceph.com

# zonegroup api_name for bucket location
api_name = default

## main AWS access key
access_key = {{ S3_MAIN_ACCESS_KEY }}

## main AWS secret key
secret_key = {{ S3_MAIN_SECRET_KEY }}

## replace with key id obtained when secret is created, or delete if KMS not tested
#kms_keyid = 01234567-89ab-cdef-0123-456789abcdef

[s3 alt]
# alt display_name set in vstart.sh
display_name = {{ S3_ALT_DISPLAY_NAME }}
## alt email set in vstart.sh
email = john.doe@example.com

# alt user_id set in vstart.sh
user_id = {{ S3_ALT_USER_ID }}

# alt AWS access key set in vstart.sh
access_key = {{ S3_ALT_ACCESS_KEY }}

# alt AWS secret key set in vstart.sh
secret_key = {{ S3_ALT_SECRET_KEY }}

[s3 tenant]
# tenant display_name set in vstart.sh
display_name = testx$tenanteduser

# tenant user_id set in vstart.sh
user_id = {{ S3_TENANT_USER_ID }}

# tenant AWS secret key set in vstart.sh
access_key = {{ S3_TENANT_ACCESS_KEY }}

# tenant AWS secret key set in vstart.sh
secret_key = {{ S3_TENANT_SECRET_KEY }}

# tenant email set in vstart.sh
email = tenanteduser@example.com

#following section needs to be added for all sts-tests
[iam]
#used for iam operations in sts-tests
#email from vstart.sh
email = s3@example.com

#user_id from vstart.sh
user_id = {{ S3_IAM_USER_ID }}

#access_key from vstart.sh
access_key = {{ S3_IAM_ACCESS_KEY }}

#secret_key vstart.sh
secret_key = {{ S3_IAM_SECRET_KEY }}

#display_name from vstart.sh
display_name = youruseridhere

#following section needs to be added when you want to run Assume Role With Webidentity test
[webidentity]
#used for assume role with web identity test in sts-tests
#all parameters will be obtained from ceph/qa/tasks/keycloak.py
token=<access_token>

aud=<obtained after introspecting token>

sub=<obtained after introspecting token>

azp=<obtained after introspecting token>

user_token=<access token for a user, with attribute Department=[Engineering, Marketing>]

thumbprint=<obtained from x509 certificate>

KC_REALM=<name of the realm>