diff --git a/etc/glance-api.conf b/etc/glance-api.conf index 596c2ec10e..a0dd35d10b 100644 --- a/etc/glance-api.conf +++ b/etc/glance-api.conf @@ -79,9 +79,9 @@ #max_request_id_length = 64 # -# Public url endpoint to use for Glance/Glare versions response. +# Public url endpoint to use for Glance versions response. # -# This is the public url endpoint that will appear in the Glance/Glare +# This is the public url endpoint that will appear in the Glance # "versions" response. If no value is specified, the endpoint that is # displayed in the version's response is that of the host running the # API service. Change the endpoint to represent the proxy URL if the @@ -504,7 +504,7 @@ # Related options: # * None # -# (string value) +# (unknown value) #pydev_worker_debug_host = localhost # @@ -569,6 +569,56 @@ # (string value) #digest_algorithm = sha256 +# +# The URL provides location where the temporary data will be stored +# +# This option is for Glance internal use only. Glance will save the +# image data uploaded by the user to 'staging' endpoint during the +# image import process. +# +# This option does not change the 'staging' API endpoint by any means. +# +# NOTE: It is discouraged to use same path as [TASKS]/work_dir +# +# NOTE: 'file://' is the only option +# api_image_import flow will support for now. +# +# NOTE: The staging path must be on shared filesystem available to all +# Glance API nodes. +# +# Possible values: +# * String starting with 'file://' followed by absolute FS path +# +# Related options: +# * [TASKS]/work_dir +# * [DEFAULT]/enable_image_import (*deprecated*) +# +# (string value) +#node_staging_uri = file:///tmp/staging/ + +# DEPRECATED: +# Enables the Image Import workflow introduced in Pike +# +# As '[DEFAULT]/node_staging_uri' is required for the Image +# Import, it's disabled per default in Pike, enabled per +# default in Queens and removed in Rocky. This allows Glance to +# operate with previous version configs upon upgrade. +# +# Setting this option to True will enable the endpoints related +# to Image Import Refactoring work. +# +# Related options: +# * [DEFUALT]/node_staging_uri (boolean value) +# This option is deprecated for removal since Pike. +# Its value may be silently ignored in the future. +# Reason: +# This option is deprecated for removal in Rocky. +# +# It was introduced to make sure that the API is not enabled +# before the '[DEFAULT]/node_staging_uri' is defined and is +# long term redundant. +#enable_image_import = false + # # Strategy to determine the preference order of image locations. # @@ -636,7 +686,8 @@ # policy.json is used to express property protections for each # of the CRUD operations. Examples of how property protections # are enforced based on ``roles`` or ``policies`` can be found at: -# https://docs.openstack.org/glance/latest/admin/property-protections.html#examples +# https://docs.openstack.org/glance/latest/admin/property- +# protections.html#examples # # Possible values: # * roles @@ -687,7 +738,7 @@ # Related options: # * None # -# (string value) +# (unknown value) #bind_host = 0.0.0.0 # @@ -1083,7 +1134,7 @@ # * metadef_resource_type # * metadef_tag # For a complete listing and description of each event refer to: -# https://docs.openstack.org/glance/latest/admin/notifications.html +# http://docs.openstack.org/developer/glance/notifications.html # # The values must be specified as: . # For example: image.create,task.success,metadef_tag @@ -1103,7 +1154,7 @@ # Related options: # * None # -# (string value) +# (unknown value) #registry_host = 0.0.0.0 # @@ -1448,12 +1499,6 @@ # Note: This option can be changed without restarting. #debug = false -# DEPRECATED: If set to false, the logging level will be set to WARNING instead -# of the default INFO level. (boolean value) -# This option is deprecated for removal. -# Its value may be silently ignored in the future. -#verbose = true - # The name of a logging configuration file. This file is appended to any # existing logging configuration files. For details about logging configuration # files, see the Python logging module documentation. Note that when logging @@ -1492,6 +1537,12 @@ # set. (boolean value) #use_syslog = false +# Enable journald for logging. If running in a systemd environment you may wish +# to enable journal support. Doing so will use the journal native protocol which +# includes structured metadata in addition to log messages.This option is +# ignored if log_config_append is set. (boolean value) +#use_journal = false + # Syslog facility to receive log lines. This option is ignored if # log_config_append is set. (string value) #syslog_log_facility = LOG_USER @@ -1520,7 +1571,7 @@ # List of package logging levels in logger=LEVEL pairs. This option is ignored # if log_config_append is set. (list value) -#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO +#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO # Enables or disables publication of error events. (boolean value) #publish_errors = false @@ -1552,7 +1603,6 @@ # # Size of RPC connection pool. (integer value) -# Deprecated group/name - [DEFAULT]/rpc_conn_pool_size #rpc_conn_pool_size = 30 # The pool size limit for connections expiration policy (integer value) @@ -1563,30 +1613,24 @@ # ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP. # The "host" option should point or resolve to this address. (string value) -# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_address #rpc_zmq_bind_address = * # MatchMaker driver. (string value) # Allowed values: redis, sentinel, dummy -# Deprecated group/name - [DEFAULT]/rpc_zmq_matchmaker #rpc_zmq_matchmaker = redis # Number of ZeroMQ contexts, defaults to 1. (integer value) -# Deprecated group/name - [DEFAULT]/rpc_zmq_contexts #rpc_zmq_contexts = 1 # Maximum number of ingress messages to locally buffer per topic. Default is # unlimited. (integer value) -# Deprecated group/name - [DEFAULT]/rpc_zmq_topic_backlog #rpc_zmq_topic_backlog = # Directory for holding IPC sockets. (string value) -# Deprecated group/name - [DEFAULT]/rpc_zmq_ipc_dir #rpc_zmq_ipc_dir = /var/run/openstack # Name of this node. Must be a valid hostname, FQDN, or IP address. Must match # "host" option, if running Nova. (string value) -# Deprecated group/name - [DEFAULT]/rpc_zmq_host #rpc_zmq_host = localhost # Number of seconds to wait before all pending messages will be sent after @@ -1599,26 +1643,21 @@ # The default number of seconds that poll should wait. Poll raises timeout # exception when timeout expired. (integer value) -# Deprecated group/name - [DEFAULT]/rpc_poll_timeout #rpc_poll_timeout = 1 # Expiration timeout in seconds of a name service record about existing target ( # < 0 means no timeout). (integer value) -# Deprecated group/name - [DEFAULT]/zmq_target_expire #zmq_target_expire = 300 # Update period in seconds of a name service record about existing target. # (integer value) -# Deprecated group/name - [DEFAULT]/zmq_target_update #zmq_target_update = 180 # Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean # value) -# Deprecated group/name - [DEFAULT]/use_pub_sub #use_pub_sub = false # Use ROUTER remote proxy. (boolean value) -# Deprecated group/name - [DEFAULT]/use_router_proxy #use_router_proxy = false # This option makes direct connections dynamic or static. It makes sense only @@ -1633,24 +1672,20 @@ # Minimal port number for random ports range. (port value) # Minimum value: 0 # Maximum value: 65535 -# Deprecated group/name - [DEFAULT]/rpc_zmq_min_port #rpc_zmq_min_port = 49153 # Maximal port number for random ports range. (integer value) # Minimum value: 1 # Maximum value: 65536 -# Deprecated group/name - [DEFAULT]/rpc_zmq_max_port #rpc_zmq_max_port = 65536 # Number of retries to find free port number before fail with ZMQBindError. # (integer value) -# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_port_retries #rpc_zmq_bind_port_retries = 100 # Default serialization mechanism for serializing/deserializing # outgoing/incoming messages (string value) # Allowed values: json, msgpack -# Deprecated group/name - [DEFAULT]/rpc_zmq_serialization #rpc_zmq_serialization = json # This option configures round-robin mode in zmq socket. True means not keeping @@ -1714,7 +1749,8 @@ # value) #subscribe_on = -# Size of executor thread pool. (integer value) +# Size of executor thread pool when executor is threading or eventlet. (integer +# value) # Deprecated group/name - [DEFAULT]/rpc_thread_pool_size #executor_thread_pool_size = 64 @@ -1766,51 +1802,13 @@ #allow_headers = Content-MD5,X-Image-Meta-Checksum,X-Storage-Token,Accept-Encoding,X-Auth-Token,X-Identity-Status,X-Roles,X-Service-Catalog,X-User-Id,X-Tenant-Id,X-OpenStack-Request-ID -[cors.subdomain] - -# -# From oslo.middleware.cors -# - -# Indicate whether this resource may be shared with the domain received in the -# requests "origin" header. Format: "://[:]", no trailing -# slash. Example: https://horizon.example.com (list value) -#allowed_origin = - -# Indicate that the actual request can include user credentials (boolean value) -#allow_credentials = true - -# Indicate which headers are safe to expose to the API. Defaults to HTTP Simple -# Headers. (list value) -#expose_headers = X-Image-Meta-Checksum,X-Auth-Token,X-Subject-Token,X-Service-Token,X-OpenStack-Request-ID - -# Maximum cache age of CORS preflight requests. (integer value) -#max_age = 3600 - -# Indicate which methods can be used during the actual request. (list value) -#allow_methods = GET,PUT,POST,DELETE,PATCH - -# Indicate which header field names may be used during the actual request. (list -# value) -#allow_headers = Content-MD5,X-Image-Meta-Checksum,X-Storage-Token,Accept-Encoding,X-Auth-Token,X-Identity-Status,X-Roles,X-Service-Catalog,X-User-Id,X-Tenant-Id,X-OpenStack-Request-ID - - [database] # # From oslo.db # -# DEPRECATED: The file name to use with SQLite. (string value) -# Deprecated group/name - [DEFAULT]/sqlite_db -# This option is deprecated for removal. -# Its value may be silently ignored in the future. -# Reason: Should use config option connection or slave_connection to connect the -# database. -#sqlite_db = oslo.sqlite - # If True, SQLite uses synchronous mode. (boolean value) -# Deprecated group/name - [DEFAULT]/sqlite_synchronous #sqlite_synchronous = true # The back end to use for the database. (string value) @@ -1834,6 +1832,10 @@ # (string value) #mysql_sql_mode = TRADITIONAL +# If True, transparently enables support for handling MySQL Cluster (NDB). +# (boolean value) +#mysql_enable_ndb = false + # Timeout before idle SQL connections are reaped. (integer value) # Deprecated group/name - [DEFAULT]/sql_idle_timeout # Deprecated group/name - [DATABASE]/sql_idle_timeout @@ -1994,7 +1996,7 @@ # For more information on setting up a particular store in your # deployment and help with the usage of this feature, please contact # the storage driver maintainers listed here: -# https://docs.openstack.org/glance_store/latest/user/drivers.html +# http://docs.openstack.org/developer/glance_store/drivers/index.html # # Possible values: # * Zero @@ -2308,7 +2310,7 @@ # # More information on configuring filesystem store with multiple store # directories can be found at -# https://docs.openstack.org/glance/latest/configuration/index.html +# http://docs.openstack.org/developer/glance/configuring.html # # NOTE: This directory is used only when filesystem store is used as a # storage backend. Either ``filesystem_store_datadir`` or @@ -2359,7 +2361,7 @@ # digit. # # For more information, please refer the documentation at -# https://docs.openstack.org/glance/latest/configuration/index.html +# http://docs.openstack.org/developer/glance/configuring.html # # Possible values: # * A valid file access permission @@ -2601,7 +2603,7 @@ # Related Options: # * sheepdog_store_port # -# (string value) +# (unknown value) #sheepdog_store_address = 127.0.0.1 # @@ -2776,7 +2778,7 @@ # this is 5GB. To upload objects bigger than this limit, objects are segmented # into multiple smaller objects that are tied together with a manifest file. # For more detail, refer to -# https://docs.openstack.org/swift/latest/overview_large_objects.html +# http://docs.openstack.org/developer/swift/overview_large_objects.html # # This configuration option specifies the size threshold over which the Swift # driver will start segmenting image data into multiple smaller files. @@ -3100,7 +3102,7 @@ # * vmware_server_username # * vmware_server_password # -# (string value) +# (unknown value) #vmware_server_host = 127.0.0.1 # @@ -3287,10 +3289,10 @@ # Complete "public" Identity API endpoint. This endpoint should not be an # "admin" endpoint, as it should be accessible by all end users. Unauthenticated # clients are redirected to this endpoint to authenticate. Although this -# endpoint should ideally be unversioned, client support in the wild varies. -# If you're using a versioned v2 endpoint here, then this should *not* be the -# same endpoint the service user utilizes for validating tokens, because normal -# end users may not be able to reach that endpoint. (string value) +# endpoint should ideally be unversioned, client support in the wild varies. If +# you're using a versioned v2 endpoint here, then this should *not* be the same +# endpoint the service user utilizes for validating tokens, because normal end +# users may not be able to reach that endpoint. (string value) #auth_uri = # API version of the admin Identity API endpoint. (string value) @@ -3504,14 +3506,12 @@ # # Enables or disables inter-process locks. (boolean value) -# Deprecated group/name - [DEFAULT]/disable_process_locking #disable_process_locking = false # Directory to use for lock files. For security, the specified directory should # only be writable by the user running the processes that need locking. Defaults # to environment variable OSLO_LOCK_PATH. If external locks are used, a lock # path must be set. (string value) -# Deprecated group/name - [DEFAULT]/lock_path #lock_path = @@ -3523,59 +3523,60 @@ # Name for the AMQP container. must be globally unique. Defaults to a generated # UUID (string value) -# Deprecated group/name - [amqp1]/container_name #container_name = # Timeout for inactive connections (in seconds) (integer value) -# Deprecated group/name - [amqp1]/idle_timeout #idle_timeout = 0 # Debug: dump AMQP frames to stdout (boolean value) -# Deprecated group/name - [amqp1]/trace #trace = false +# Attempt to connect via SSL. If no other ssl-related parameters are given, it +# will use the system's CA-bundle to verify the server's certificate. (boolean +# value) +#ssl = false + # CA certificate PEM file used to verify the server's certificate (string value) -# Deprecated group/name - [amqp1]/ssl_ca_file #ssl_ca_file = # Self-identifying certificate PEM file for client authentication (string value) -# Deprecated group/name - [amqp1]/ssl_cert_file #ssl_cert_file = # Private key PEM file used to sign ssl_cert_file certificate (optional) (string # value) -# Deprecated group/name - [amqp1]/ssl_key_file #ssl_key_file = # Password for decrypting ssl_key_file (if encrypted) (string value) -# Deprecated group/name - [amqp1]/ssl_key_password #ssl_key_password = # DEPRECATED: Accept clients using either SSL or plain TCP (boolean value) -# Deprecated group/name - [amqp1]/allow_insecure_clients # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Not applicable - not a SSL server #allow_insecure_clients = false # Space separated list of acceptable SASL mechanisms (string value) -# Deprecated group/name - [amqp1]/sasl_mechanisms #sasl_mechanisms = # Path to directory that contains the SASL configuration (string value) -# Deprecated group/name - [amqp1]/sasl_config_dir #sasl_config_dir = # Name of configuration file (without .conf suffix) (string value) -# Deprecated group/name - [amqp1]/sasl_config_name #sasl_config_name = -# User name for message broker authentication (string value) -# Deprecated group/name - [amqp1]/username +# SASL realm to use if no realm present in username (string value) +#sasl_default_realm = + +# DEPRECATED: User name for message broker authentication (string value) +# This option is deprecated for removal. +# Its value may be silently ignored in the future. +# Reason: Should use configuration option transport_url to provide the username. #username = -# Password for message broker authentication (string value) -# Deprecated group/name - [amqp1]/password +# DEPRECATED: Password for message broker authentication (string value) +# This option is deprecated for removal. +# Its value may be silently ignored in the future. +# Reason: Should use configuration option transport_url to provide the password. #password = # Seconds to pause before attempting to re-connect. (integer value) @@ -3630,15 +3631,12 @@ #addressing_mode = dynamic # address prefix used when sending to a specific server (string value) -# Deprecated group/name - [amqp1]/server_request_prefix #server_request_prefix = exclusive # address prefix used when broadcasting to all servers (string value) -# Deprecated group/name - [amqp1]/broadcast_prefix #broadcast_prefix = broadcast # address prefix when sending to any server in group (string value) -# Deprecated group/name - [amqp1]/group_request_prefix #group_request_prefix = unicast # Address prefix for all generated RPC addresses (string value) @@ -3726,7 +3724,7 @@ # Max fetch bytes of Kafka consumer (integer value) #kafka_max_fetch_bytes = 1048576 -# Default timeout(s) for Kafka consumers (integer value) +# Default timeout(s) for Kafka consumers (floating point value) #kafka_consumer_timeout = 1.0 # Pool Size for Kafka Consumers (integer value) @@ -3771,6 +3769,11 @@ # Deprecated group/name - [DEFAULT]/notification_topics #topics = notifications +# The maximum number of attempts to re-send a notification message which failed +# to be delivered due to a recoverable error. 0 - No retry, -1 - indefinite +# (integer value) +#retry = -1 + [oslo_messaging_rabbit] @@ -3784,30 +3787,31 @@ #amqp_durable_queues = false # Auto-delete queues in AMQP. (boolean value) -# Deprecated group/name - [DEFAULT]/amqp_auto_delete #amqp_auto_delete = false +# Enable SSL (boolean value) +#ssl = + # SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and # SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some # distributions. (string value) -# Deprecated group/name - [DEFAULT]/kombu_ssl_version -#kombu_ssl_version = +# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_version +#ssl_version = # SSL key file (valid only if SSL enabled). (string value) -# Deprecated group/name - [DEFAULT]/kombu_ssl_keyfile -#kombu_ssl_keyfile = +# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_keyfile +#ssl_key_file = # SSL cert file (valid only if SSL enabled). (string value) -# Deprecated group/name - [DEFAULT]/kombu_ssl_certfile -#kombu_ssl_certfile = +# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_certfile +#ssl_cert_file = # SSL certification authority file (valid only if SSL enabled). (string value) -# Deprecated group/name - [DEFAULT]/kombu_ssl_ca_certs -#kombu_ssl_ca_certs = +# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_ca_certs +#ssl_ca_file = # How long to wait before reconnecting in response to an AMQP consumer cancel # notification. (floating point value) -# Deprecated group/name - [DEFAULT]/kombu_reconnect_delay #kombu_reconnect_delay = 1.0 # EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression will not @@ -3827,7 +3831,6 @@ # DEPRECATED: The RabbitMQ broker address where a single node is used. (string # value) -# Deprecated group/name - [DEFAULT]/rabbit_host # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Replaced by [DEFAULT]/transport_url @@ -3836,32 +3839,24 @@ # DEPRECATED: The RabbitMQ broker port where a single node is used. (port value) # Minimum value: 0 # Maximum value: 65535 -# Deprecated group/name - [DEFAULT]/rabbit_port # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Replaced by [DEFAULT]/transport_url #rabbit_port = 5672 # DEPRECATED: RabbitMQ HA cluster host:port pairs. (list value) -# Deprecated group/name - [DEFAULT]/rabbit_hosts # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Replaced by [DEFAULT]/transport_url #rabbit_hosts = $rabbit_host:$rabbit_port -# Connect over SSL for RabbitMQ. (boolean value) -# Deprecated group/name - [DEFAULT]/rabbit_use_ssl -#rabbit_use_ssl = false - # DEPRECATED: The RabbitMQ userid. (string value) -# Deprecated group/name - [DEFAULT]/rabbit_userid # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Replaced by [DEFAULT]/transport_url #rabbit_userid = guest # DEPRECATED: The RabbitMQ password. (string value) -# Deprecated group/name - [DEFAULT]/rabbit_password # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Replaced by [DEFAULT]/transport_url @@ -3869,11 +3864,9 @@ # The RabbitMQ login method. (string value) # Allowed values: PLAIN, AMQPLAIN, RABBIT-CR-DEMO -# Deprecated group/name - [DEFAULT]/rabbit_login_method #rabbit_login_method = AMQPLAIN # DEPRECATED: The RabbitMQ virtual host. (string value) -# Deprecated group/name - [DEFAULT]/rabbit_virtual_host # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Replaced by [DEFAULT]/transport_url @@ -3884,7 +3877,6 @@ # How long to backoff for between retries when connecting to RabbitMQ. (integer # value) -# Deprecated group/name - [DEFAULT]/rabbit_retry_backoff #rabbit_retry_backoff = 2 # Maximum interval of RabbitMQ connection retries. Default is 30 seconds. @@ -3893,7 +3885,6 @@ # DEPRECATED: Maximum number of RabbitMQ connection retries. Default is 0 # (infinite retry count). (integer value) -# Deprecated group/name - [DEFAULT]/rabbit_max_retries # This option is deprecated for removal. # Its value may be silently ignored in the future. #rabbit_max_retries = 0 @@ -3904,7 +3895,6 @@ # you just want to make sure that all queues (except those with auto-generated # names) are mirrored across all nodes, run: "rabbitmqctl set_policy HA # '^(?!amq\.).*' '{"ha-mode": "all"}' " (boolean value) -# Deprecated group/name - [DEFAULT]/rabbit_ha_queues #rabbit_ha_queues = false # Positive integer representing duration in seconds for queue TTL (x-expires). @@ -3927,7 +3917,6 @@ #heartbeat_rate = 2 # Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake (boolean value) -# Deprecated group/name - [DEFAULT]/fake_rabbit #fake_rabbit = false # Maximum number of channels to allow (integer value) @@ -3939,9 +3928,6 @@ # How often to send heartbeats for consumer's connections (integer value) #heartbeat_interval = 3 -# Enable SSL (boolean value) -#ssl = - # Arguments passed to ssl.wrap_socket (dict value) #ssl_options = @@ -4044,30 +4030,24 @@ # ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP. # The "host" option should point or resolve to this address. (string value) -# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_address #rpc_zmq_bind_address = * # MatchMaker driver. (string value) # Allowed values: redis, sentinel, dummy -# Deprecated group/name - [DEFAULT]/rpc_zmq_matchmaker #rpc_zmq_matchmaker = redis # Number of ZeroMQ contexts, defaults to 1. (integer value) -# Deprecated group/name - [DEFAULT]/rpc_zmq_contexts #rpc_zmq_contexts = 1 # Maximum number of ingress messages to locally buffer per topic. Default is # unlimited. (integer value) -# Deprecated group/name - [DEFAULT]/rpc_zmq_topic_backlog #rpc_zmq_topic_backlog = # Directory for holding IPC sockets. (string value) -# Deprecated group/name - [DEFAULT]/rpc_zmq_ipc_dir #rpc_zmq_ipc_dir = /var/run/openstack # Name of this node. Must be a valid hostname, FQDN, or IP address. Must match # "host" option, if running Nova. (string value) -# Deprecated group/name - [DEFAULT]/rpc_zmq_host #rpc_zmq_host = localhost # Number of seconds to wait before all pending messages will be sent after @@ -4080,26 +4060,21 @@ # The default number of seconds that poll should wait. Poll raises timeout # exception when timeout expired. (integer value) -# Deprecated group/name - [DEFAULT]/rpc_poll_timeout #rpc_poll_timeout = 1 # Expiration timeout in seconds of a name service record about existing target ( # < 0 means no timeout). (integer value) -# Deprecated group/name - [DEFAULT]/zmq_target_expire #zmq_target_expire = 300 # Update period in seconds of a name service record about existing target. # (integer value) -# Deprecated group/name - [DEFAULT]/zmq_target_update #zmq_target_update = 180 # Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean # value) -# Deprecated group/name - [DEFAULT]/use_pub_sub #use_pub_sub = false # Use ROUTER remote proxy. (boolean value) -# Deprecated group/name - [DEFAULT]/use_router_proxy #use_router_proxy = false # This option makes direct connections dynamic or static. It makes sense only @@ -4114,24 +4089,20 @@ # Minimal port number for random ports range. (port value) # Minimum value: 0 # Maximum value: 65535 -# Deprecated group/name - [DEFAULT]/rpc_zmq_min_port #rpc_zmq_min_port = 49153 # Maximal port number for random ports range. (integer value) # Minimum value: 1 # Maximum value: 65536 -# Deprecated group/name - [DEFAULT]/rpc_zmq_max_port #rpc_zmq_max_port = 65536 # Number of retries to find free port number before fail with ZMQBindError. # (integer value) -# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_port_retries #rpc_zmq_bind_port_retries = 100 # Default serialization mechanism for serializing/deserializing # outgoing/incoming messages (string value) # Allowed values: json, msgpack -# Deprecated group/name - [DEFAULT]/rpc_zmq_serialization #rpc_zmq_serialization = json # This option configures round-robin mode in zmq socket. True means not keeping @@ -4214,11 +4185,9 @@ # # The file that defines policies. (string value) -# Deprecated group/name - [DEFAULT]/policy_file #policy_file = policy.json # Default rule. Enforced when a requested rule is not found. (string value) -# Deprecated group/name - [DEFAULT]/policy_default_rule #policy_default_rule = default # Directories where policy configuration files are stored. They can be relative @@ -4226,7 +4195,6 @@ # absolute paths. The file defined by policy_file must exist for these # directories to be searched. Missing or empty directories are ignored. (multi # valued) -# Deprecated group/name - [DEFAULT]/policy_dirs #policy_dirs = policy.d diff --git a/etc/glance-cache.conf b/etc/glance-cache.conf index c15707fe04..03e6d3f3cf 100644 --- a/etc/glance-cache.conf +++ b/etc/glance-cache.conf @@ -409,7 +409,7 @@ # Related options: # * None # -# (string value) +# (unknown value) #pydev_worker_debug_host = localhost # @@ -474,6 +474,56 @@ # (string value) #digest_algorithm = sha256 +# +# The URL provides location where the temporary data will be stored +# +# This option is for Glance internal use only. Glance will save the +# image data uploaded by the user to 'staging' endpoint during the +# image import process. +# +# This option does not change the 'staging' API endpoint by any means. +# +# NOTE: It is discouraged to use same path as [TASKS]/work_dir +# +# NOTE: 'file://' is the only option +# api_image_import flow will support for now. +# +# NOTE: The staging path must be on shared filesystem available to all +# Glance API nodes. +# +# Possible values: +# * String starting with 'file://' followed by absolute FS path +# +# Related options: +# * [TASKS]/work_dir +# * [DEFAULT]/enable_image_import (*deprecated*) +# +# (string value) +#node_staging_uri = file:///tmp/staging/ + +# DEPRECATED: +# Enables the Image Import workflow introduced in Pike +# +# As '[DEFAULT]/node_staging_uri' is required for the Image +# Import, it's disabled per default in Pike, enabled per +# default in Queens and removed in Rocky. This allows Glance to +# operate with previous version configs upon upgrade. +# +# Setting this option to True will enable the endpoints related +# to Image Import Refactoring work. +# +# Related options: +# * [DEFUALT]/node_staging_uri (boolean value) +# This option is deprecated for removal since Pike. +# Its value may be silently ignored in the future. +# Reason: +# This option is deprecated for removal in Rocky. +# +# It was introduced to make sure that the API is not enabled +# before the '[DEFAULT]/node_staging_uri' is defined and is +# long term redundant. +#enable_image_import = false + # # The relative path to sqlite file database that will be used for image cache # management. @@ -621,7 +671,7 @@ # Related options: # * None # -# (string value) +# (unknown value) #registry_host = 0.0.0.0 # @@ -859,12 +909,6 @@ # Note: This option can be changed without restarting. #debug = false -# DEPRECATED: If set to false, the logging level will be set to WARNING instead -# of the default INFO level. (boolean value) -# This option is deprecated for removal. -# Its value may be silently ignored in the future. -#verbose = true - # The name of a logging configuration file. This file is appended to any # existing logging configuration files. For details about logging configuration # files, see the Python logging module documentation. Note that when logging @@ -903,6 +947,12 @@ # set. (boolean value) #use_syslog = false +# Enable journald for logging. If running in a systemd environment you may wish +# to enable journal support. Doing so will use the journal native protocol which +# includes structured metadata in addition to log messages.This option is +# ignored if log_config_append is set. (boolean value) +#use_journal = false + # Syslog facility to receive log lines. This option is ignored if # log_config_append is set. (string value) #syslog_log_facility = LOG_USER @@ -931,7 +981,7 @@ # List of package logging levels in logger=LEVEL pairs. This option is ignored # if log_config_append is set. (list value) -#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO +#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO # Enables or disables publication of error events. (boolean value) #publish_errors = false @@ -1042,7 +1092,7 @@ # For more information on setting up a particular store in your # deployment and help with the usage of this feature, please contact # the storage driver maintainers listed here: -# https://docs.openstack.org/glance_store/latest/user/drivers.html +# http://docs.openstack.org/developer/glance_store/drivers/index.html # # Possible values: # * Zero @@ -1356,7 +1406,7 @@ # # More information on configuring filesystem store with multiple store # directories can be found at -# https://docs.openstack.org/glance/latest/configuration/index.html +# http://docs.openstack.org/developer/glance/configuring.html # # NOTE: This directory is used only when filesystem store is used as a # storage backend. Either ``filesystem_store_datadir`` or @@ -1407,7 +1457,7 @@ # digit. # # For more information, please refer the documentation at -# https://docs.openstack.org/glance/latest/configuration/index.html +# http://docs.openstack.org/developer/glance/configuring.html # # Possible values: # * A valid file access permission @@ -1649,7 +1699,7 @@ # Related Options: # * sheepdog_store_port # -# (string value) +# (unknown value) #sheepdog_store_address = 127.0.0.1 # @@ -1824,7 +1874,7 @@ # this is 5GB. To upload objects bigger than this limit, objects are segmented # into multiple smaller objects that are tied together with a manifest file. # For more detail, refer to -# https://docs.openstack.org/swift/latest/overview_large_objects.html +# http://docs.openstack.org/developer/swift/overview_large_objects.html # # This configuration option specifies the size threshold over which the Swift # driver will start segmenting image data into multiple smaller files. @@ -2148,7 +2198,7 @@ # * vmware_server_username # * vmware_server_password # -# (string value) +# (unknown value) #vmware_server_host = 127.0.0.1 # @@ -2318,11 +2368,9 @@ # # The file that defines policies. (string value) -# Deprecated group/name - [DEFAULT]/policy_file #policy_file = policy.json # Default rule. Enforced when a requested rule is not found. (string value) -# Deprecated group/name - [DEFAULT]/policy_default_rule #policy_default_rule = default # Directories where policy configuration files are stored. They can be relative @@ -2330,5 +2378,4 @@ # absolute paths. The file defined by policy_file must exist for these # directories to be searched. Missing or empty directories are ignored. (multi # valued) -# Deprecated group/name - [DEFAULT]/policy_dirs #policy_dirs = policy.d diff --git a/etc/glance-manage.conf b/etc/glance-manage.conf index 45def89c17..2605809e76 100644 --- a/etc/glance-manage.conf +++ b/etc/glance-manage.conf @@ -9,12 +9,6 @@ # Note: This option can be changed without restarting. #debug = false -# DEPRECATED: If set to false, the logging level will be set to WARNING instead -# of the default INFO level. (boolean value) -# This option is deprecated for removal. -# Its value may be silently ignored in the future. -#verbose = true - # The name of a logging configuration file. This file is appended to any # existing logging configuration files. For details about logging configuration # files, see the Python logging module documentation. Note that when logging @@ -53,6 +47,12 @@ # set. (boolean value) #use_syslog = false +# Enable journald for logging. If running in a systemd environment you may wish +# to enable journal support. Doing so will use the journal native protocol which +# includes structured metadata in addition to log messages.This option is +# ignored if log_config_append is set. (boolean value) +#use_journal = false + # Syslog facility to receive log lines. This option is ignored if # log_config_append is set. (string value) #syslog_log_facility = LOG_USER @@ -81,7 +81,7 @@ # List of package logging levels in logger=LEVEL pairs. This option is ignored # if log_config_append is set. (list value) -#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO +#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO # Enables or disables publication of error events. (boolean value) #publish_errors = false @@ -115,16 +115,7 @@ # From oslo.db # -# DEPRECATED: The file name to use with SQLite. (string value) -# Deprecated group/name - [DEFAULT]/sqlite_db -# This option is deprecated for removal. -# Its value may be silently ignored in the future. -# Reason: Should use config option connection or slave_connection to connect the -# database. -#sqlite_db = oslo.sqlite - # If True, SQLite uses synchronous mode. (boolean value) -# Deprecated group/name - [DEFAULT]/sqlite_synchronous #sqlite_synchronous = true # The back end to use for the database. (string value) @@ -148,6 +139,10 @@ # (string value) #mysql_sql_mode = TRADITIONAL +# If True, transparently enables support for handling MySQL Cluster (NDB). +# (boolean value) +#mysql_enable_ndb = false + # Timeout before idle SQL connections are reaped. (integer value) # Deprecated group/name - [DEFAULT]/sql_idle_timeout # Deprecated group/name - [DATABASE]/sql_idle_timeout diff --git a/etc/glance-registry.conf b/etc/glance-registry.conf index 1357d02bac..4f4ae77421 100644 --- a/etc/glance-registry.conf +++ b/etc/glance-registry.conf @@ -483,7 +483,7 @@ # Related options: # * None # -# (string value) +# (unknown value) #pydev_worker_debug_host = localhost # @@ -548,6 +548,56 @@ # (string value) #digest_algorithm = sha256 +# +# The URL provides location where the temporary data will be stored +# +# This option is for Glance internal use only. Glance will save the +# image data uploaded by the user to 'staging' endpoint during the +# image import process. +# +# This option does not change the 'staging' API endpoint by any means. +# +# NOTE: It is discouraged to use same path as [TASKS]/work_dir +# +# NOTE: 'file://' is the only option +# api_image_import flow will support for now. +# +# NOTE: The staging path must be on shared filesystem available to all +# Glance API nodes. +# +# Possible values: +# * String starting with 'file://' followed by absolute FS path +# +# Related options: +# * [TASKS]/work_dir +# * [DEFAULT]/enable_image_import (*deprecated*) +# +# (string value) +#node_staging_uri = file:///tmp/staging/ + +# DEPRECATED: +# Enables the Image Import workflow introduced in Pike +# +# As '[DEFAULT]/node_staging_uri' is required for the Image +# Import, it's disabled per default in Pike, enabled per +# default in Queens and removed in Rocky. This allows Glance to +# operate with previous version configs upon upgrade. +# +# Setting this option to True will enable the endpoints related +# to Image Import Refactoring work. +# +# Related options: +# * [DEFUALT]/node_staging_uri (boolean value) +# This option is deprecated for removal since Pike. +# Its value may be silently ignored in the future. +# Reason: +# This option is deprecated for removal in Rocky. +# +# It was introduced to make sure that the API is not enabled +# before the '[DEFAULT]/node_staging_uri' is defined and is +# long term redundant. +#enable_image_import = false + # # IP address to bind the glance servers to. # @@ -565,7 +615,7 @@ # Related options: # * None # -# (string value) +# (unknown value) #bind_host = 0.0.0.0 # @@ -796,12 +846,6 @@ # Note: This option can be changed without restarting. #debug = false -# DEPRECATED: If set to false, the logging level will be set to WARNING instead -# of the default INFO level. (boolean value) -# This option is deprecated for removal. -# Its value may be silently ignored in the future. -#verbose = true - # The name of a logging configuration file. This file is appended to any # existing logging configuration files. For details about logging configuration # files, see the Python logging module documentation. Note that when logging @@ -840,6 +884,12 @@ # set. (boolean value) #use_syslog = false +# Enable journald for logging. If running in a systemd environment you may wish +# to enable journal support. Doing so will use the journal native protocol which +# includes structured metadata in addition to log messages.This option is +# ignored if log_config_append is set. (boolean value) +#use_journal = false + # Syslog facility to receive log lines. This option is ignored if # log_config_append is set. (string value) #syslog_log_facility = LOG_USER @@ -868,7 +918,7 @@ # List of package logging levels in logger=LEVEL pairs. This option is ignored # if log_config_append is set. (list value) -#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO +#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO # Enables or disables publication of error events. (boolean value) #publish_errors = false @@ -900,7 +950,6 @@ # # Size of RPC connection pool. (integer value) -# Deprecated group/name - [DEFAULT]/rpc_conn_pool_size #rpc_conn_pool_size = 30 # The pool size limit for connections expiration policy (integer value) @@ -911,30 +960,24 @@ # ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP. # The "host" option should point or resolve to this address. (string value) -# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_address #rpc_zmq_bind_address = * # MatchMaker driver. (string value) # Allowed values: redis, sentinel, dummy -# Deprecated group/name - [DEFAULT]/rpc_zmq_matchmaker #rpc_zmq_matchmaker = redis # Number of ZeroMQ contexts, defaults to 1. (integer value) -# Deprecated group/name - [DEFAULT]/rpc_zmq_contexts #rpc_zmq_contexts = 1 # Maximum number of ingress messages to locally buffer per topic. Default is # unlimited. (integer value) -# Deprecated group/name - [DEFAULT]/rpc_zmq_topic_backlog #rpc_zmq_topic_backlog = # Directory for holding IPC sockets. (string value) -# Deprecated group/name - [DEFAULT]/rpc_zmq_ipc_dir #rpc_zmq_ipc_dir = /var/run/openstack # Name of this node. Must be a valid hostname, FQDN, or IP address. Must match # "host" option, if running Nova. (string value) -# Deprecated group/name - [DEFAULT]/rpc_zmq_host #rpc_zmq_host = localhost # Number of seconds to wait before all pending messages will be sent after @@ -947,26 +990,21 @@ # The default number of seconds that poll should wait. Poll raises timeout # exception when timeout expired. (integer value) -# Deprecated group/name - [DEFAULT]/rpc_poll_timeout #rpc_poll_timeout = 1 # Expiration timeout in seconds of a name service record about existing target ( # < 0 means no timeout). (integer value) -# Deprecated group/name - [DEFAULT]/zmq_target_expire #zmq_target_expire = 300 # Update period in seconds of a name service record about existing target. # (integer value) -# Deprecated group/name - [DEFAULT]/zmq_target_update #zmq_target_update = 180 # Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean # value) -# Deprecated group/name - [DEFAULT]/use_pub_sub #use_pub_sub = false # Use ROUTER remote proxy. (boolean value) -# Deprecated group/name - [DEFAULT]/use_router_proxy #use_router_proxy = false # This option makes direct connections dynamic or static. It makes sense only @@ -981,24 +1019,20 @@ # Minimal port number for random ports range. (port value) # Minimum value: 0 # Maximum value: 65535 -# Deprecated group/name - [DEFAULT]/rpc_zmq_min_port #rpc_zmq_min_port = 49153 # Maximal port number for random ports range. (integer value) # Minimum value: 1 # Maximum value: 65536 -# Deprecated group/name - [DEFAULT]/rpc_zmq_max_port #rpc_zmq_max_port = 65536 # Number of retries to find free port number before fail with ZMQBindError. # (integer value) -# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_port_retries #rpc_zmq_bind_port_retries = 100 # Default serialization mechanism for serializing/deserializing # outgoing/incoming messages (string value) # Allowed values: json, msgpack -# Deprecated group/name - [DEFAULT]/rpc_zmq_serialization #rpc_zmq_serialization = json # This option configures round-robin mode in zmq socket. True means not keeping @@ -1062,7 +1096,8 @@ # value) #subscribe_on = -# Size of executor thread pool. (integer value) +# Size of executor thread pool when executor is threading or eventlet. (integer +# value) # Deprecated group/name - [DEFAULT]/rpc_thread_pool_size #executor_thread_pool_size = 64 @@ -1091,16 +1126,7 @@ # From oslo.db # -# DEPRECATED: The file name to use with SQLite. (string value) -# Deprecated group/name - [DEFAULT]/sqlite_db -# This option is deprecated for removal. -# Its value may be silently ignored in the future. -# Reason: Should use config option connection or slave_connection to connect the -# database. -#sqlite_db = oslo.sqlite - # If True, SQLite uses synchronous mode. (boolean value) -# Deprecated group/name - [DEFAULT]/sqlite_synchronous #sqlite_synchronous = true # The back end to use for the database. (string value) @@ -1124,6 +1150,10 @@ # (string value) #mysql_sql_mode = TRADITIONAL +# If True, transparently enables support for handling MySQL Cluster (NDB). +# (boolean value) +#mysql_enable_ndb = false + # Timeout before idle SQL connections are reaped. (integer value) # Deprecated group/name - [DEFAULT]/sql_idle_timeout # Deprecated group/name - [DATABASE]/sql_idle_timeout @@ -1210,10 +1240,10 @@ # Complete "public" Identity API endpoint. This endpoint should not be an # "admin" endpoint, as it should be accessible by all end users. Unauthenticated # clients are redirected to this endpoint to authenticate. Although this -# endpoint should ideally be unversioned, client support in the wild varies. -# If you're using a versioned v2 endpoint here, then this should *not* be the -# same endpoint the service user utilizes for validating tokens, because normal -# end users may not be able to reach that endpoint. (string value) +# endpoint should ideally be unversioned, client support in the wild varies. If +# you're using a versioned v2 endpoint here, then this should *not* be the same +# endpoint the service user utilizes for validating tokens, because normal end +# users may not be able to reach that endpoint. (string value) #auth_uri = # API version of the admin Identity API endpoint. (string value) @@ -1428,59 +1458,60 @@ # Name for the AMQP container. must be globally unique. Defaults to a generated # UUID (string value) -# Deprecated group/name - [amqp1]/container_name #container_name = # Timeout for inactive connections (in seconds) (integer value) -# Deprecated group/name - [amqp1]/idle_timeout #idle_timeout = 0 # Debug: dump AMQP frames to stdout (boolean value) -# Deprecated group/name - [amqp1]/trace #trace = false +# Attempt to connect via SSL. If no other ssl-related parameters are given, it +# will use the system's CA-bundle to verify the server's certificate. (boolean +# value) +#ssl = false + # CA certificate PEM file used to verify the server's certificate (string value) -# Deprecated group/name - [amqp1]/ssl_ca_file #ssl_ca_file = # Self-identifying certificate PEM file for client authentication (string value) -# Deprecated group/name - [amqp1]/ssl_cert_file #ssl_cert_file = # Private key PEM file used to sign ssl_cert_file certificate (optional) (string # value) -# Deprecated group/name - [amqp1]/ssl_key_file #ssl_key_file = # Password for decrypting ssl_key_file (if encrypted) (string value) -# Deprecated group/name - [amqp1]/ssl_key_password #ssl_key_password = # DEPRECATED: Accept clients using either SSL or plain TCP (boolean value) -# Deprecated group/name - [amqp1]/allow_insecure_clients # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Not applicable - not a SSL server #allow_insecure_clients = false # Space separated list of acceptable SASL mechanisms (string value) -# Deprecated group/name - [amqp1]/sasl_mechanisms #sasl_mechanisms = # Path to directory that contains the SASL configuration (string value) -# Deprecated group/name - [amqp1]/sasl_config_dir #sasl_config_dir = # Name of configuration file (without .conf suffix) (string value) -# Deprecated group/name - [amqp1]/sasl_config_name #sasl_config_name = -# User name for message broker authentication (string value) -# Deprecated group/name - [amqp1]/username +# SASL realm to use if no realm present in username (string value) +#sasl_default_realm = + +# DEPRECATED: User name for message broker authentication (string value) +# This option is deprecated for removal. +# Its value may be silently ignored in the future. +# Reason: Should use configuration option transport_url to provide the username. #username = -# Password for message broker authentication (string value) -# Deprecated group/name - [amqp1]/password +# DEPRECATED: Password for message broker authentication (string value) +# This option is deprecated for removal. +# Its value may be silently ignored in the future. +# Reason: Should use configuration option transport_url to provide the password. #password = # Seconds to pause before attempting to re-connect. (integer value) @@ -1535,15 +1566,12 @@ #addressing_mode = dynamic # address prefix used when sending to a specific server (string value) -# Deprecated group/name - [amqp1]/server_request_prefix #server_request_prefix = exclusive # address prefix used when broadcasting to all servers (string value) -# Deprecated group/name - [amqp1]/broadcast_prefix #broadcast_prefix = broadcast # address prefix when sending to any server in group (string value) -# Deprecated group/name - [amqp1]/group_request_prefix #group_request_prefix = unicast # Address prefix for all generated RPC addresses (string value) @@ -1631,7 +1659,7 @@ # Max fetch bytes of Kafka consumer (integer value) #kafka_max_fetch_bytes = 1048576 -# Default timeout(s) for Kafka consumers (integer value) +# Default timeout(s) for Kafka consumers (floating point value) #kafka_consumer_timeout = 1.0 # Pool Size for Kafka Consumers (integer value) @@ -1676,6 +1704,11 @@ # Deprecated group/name - [DEFAULT]/notification_topics #topics = notifications +# The maximum number of attempts to re-send a notification message which failed +# to be delivered due to a recoverable error. 0 - No retry, -1 - indefinite +# (integer value) +#retry = -1 + [oslo_messaging_rabbit] @@ -1689,30 +1722,31 @@ #amqp_durable_queues = false # Auto-delete queues in AMQP. (boolean value) -# Deprecated group/name - [DEFAULT]/amqp_auto_delete #amqp_auto_delete = false +# Enable SSL (boolean value) +#ssl = + # SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and # SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some # distributions. (string value) -# Deprecated group/name - [DEFAULT]/kombu_ssl_version -#kombu_ssl_version = +# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_version +#ssl_version = # SSL key file (valid only if SSL enabled). (string value) -# Deprecated group/name - [DEFAULT]/kombu_ssl_keyfile -#kombu_ssl_keyfile = +# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_keyfile +#ssl_key_file = # SSL cert file (valid only if SSL enabled). (string value) -# Deprecated group/name - [DEFAULT]/kombu_ssl_certfile -#kombu_ssl_certfile = +# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_certfile +#ssl_cert_file = # SSL certification authority file (valid only if SSL enabled). (string value) -# Deprecated group/name - [DEFAULT]/kombu_ssl_ca_certs -#kombu_ssl_ca_certs = +# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_ca_certs +#ssl_ca_file = # How long to wait before reconnecting in response to an AMQP consumer cancel # notification. (floating point value) -# Deprecated group/name - [DEFAULT]/kombu_reconnect_delay #kombu_reconnect_delay = 1.0 # EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression will not @@ -1732,7 +1766,6 @@ # DEPRECATED: The RabbitMQ broker address where a single node is used. (string # value) -# Deprecated group/name - [DEFAULT]/rabbit_host # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Replaced by [DEFAULT]/transport_url @@ -1741,32 +1774,24 @@ # DEPRECATED: The RabbitMQ broker port where a single node is used. (port value) # Minimum value: 0 # Maximum value: 65535 -# Deprecated group/name - [DEFAULT]/rabbit_port # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Replaced by [DEFAULT]/transport_url #rabbit_port = 5672 # DEPRECATED: RabbitMQ HA cluster host:port pairs. (list value) -# Deprecated group/name - [DEFAULT]/rabbit_hosts # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Replaced by [DEFAULT]/transport_url #rabbit_hosts = $rabbit_host:$rabbit_port -# Connect over SSL for RabbitMQ. (boolean value) -# Deprecated group/name - [DEFAULT]/rabbit_use_ssl -#rabbit_use_ssl = false - # DEPRECATED: The RabbitMQ userid. (string value) -# Deprecated group/name - [DEFAULT]/rabbit_userid # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Replaced by [DEFAULT]/transport_url #rabbit_userid = guest # DEPRECATED: The RabbitMQ password. (string value) -# Deprecated group/name - [DEFAULT]/rabbit_password # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Replaced by [DEFAULT]/transport_url @@ -1774,11 +1799,9 @@ # The RabbitMQ login method. (string value) # Allowed values: PLAIN, AMQPLAIN, RABBIT-CR-DEMO -# Deprecated group/name - [DEFAULT]/rabbit_login_method #rabbit_login_method = AMQPLAIN # DEPRECATED: The RabbitMQ virtual host. (string value) -# Deprecated group/name - [DEFAULT]/rabbit_virtual_host # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Replaced by [DEFAULT]/transport_url @@ -1789,7 +1812,6 @@ # How long to backoff for between retries when connecting to RabbitMQ. (integer # value) -# Deprecated group/name - [DEFAULT]/rabbit_retry_backoff #rabbit_retry_backoff = 2 # Maximum interval of RabbitMQ connection retries. Default is 30 seconds. @@ -1798,7 +1820,6 @@ # DEPRECATED: Maximum number of RabbitMQ connection retries. Default is 0 # (infinite retry count). (integer value) -# Deprecated group/name - [DEFAULT]/rabbit_max_retries # This option is deprecated for removal. # Its value may be silently ignored in the future. #rabbit_max_retries = 0 @@ -1809,7 +1830,6 @@ # you just want to make sure that all queues (except those with auto-generated # names) are mirrored across all nodes, run: "rabbitmqctl set_policy HA # '^(?!amq\.).*' '{"ha-mode": "all"}' " (boolean value) -# Deprecated group/name - [DEFAULT]/rabbit_ha_queues #rabbit_ha_queues = false # Positive integer representing duration in seconds for queue TTL (x-expires). @@ -1832,7 +1852,6 @@ #heartbeat_rate = 2 # Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake (boolean value) -# Deprecated group/name - [DEFAULT]/fake_rabbit #fake_rabbit = false # Maximum number of channels to allow (integer value) @@ -1844,9 +1863,6 @@ # How often to send heartbeats for consumer's connections (integer value) #heartbeat_interval = 3 -# Enable SSL (boolean value) -#ssl = - # Arguments passed to ssl.wrap_socket (dict value) #ssl_options = @@ -1949,30 +1965,24 @@ # ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP. # The "host" option should point or resolve to this address. (string value) -# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_address #rpc_zmq_bind_address = * # MatchMaker driver. (string value) # Allowed values: redis, sentinel, dummy -# Deprecated group/name - [DEFAULT]/rpc_zmq_matchmaker #rpc_zmq_matchmaker = redis # Number of ZeroMQ contexts, defaults to 1. (integer value) -# Deprecated group/name - [DEFAULT]/rpc_zmq_contexts #rpc_zmq_contexts = 1 # Maximum number of ingress messages to locally buffer per topic. Default is # unlimited. (integer value) -# Deprecated group/name - [DEFAULT]/rpc_zmq_topic_backlog #rpc_zmq_topic_backlog = # Directory for holding IPC sockets. (string value) -# Deprecated group/name - [DEFAULT]/rpc_zmq_ipc_dir #rpc_zmq_ipc_dir = /var/run/openstack # Name of this node. Must be a valid hostname, FQDN, or IP address. Must match # "host" option, if running Nova. (string value) -# Deprecated group/name - [DEFAULT]/rpc_zmq_host #rpc_zmq_host = localhost # Number of seconds to wait before all pending messages will be sent after @@ -1985,26 +1995,21 @@ # The default number of seconds that poll should wait. Poll raises timeout # exception when timeout expired. (integer value) -# Deprecated group/name - [DEFAULT]/rpc_poll_timeout #rpc_poll_timeout = 1 # Expiration timeout in seconds of a name service record about existing target ( # < 0 means no timeout). (integer value) -# Deprecated group/name - [DEFAULT]/zmq_target_expire #zmq_target_expire = 300 # Update period in seconds of a name service record about existing target. # (integer value) -# Deprecated group/name - [DEFAULT]/zmq_target_update #zmq_target_update = 180 # Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean # value) -# Deprecated group/name - [DEFAULT]/use_pub_sub #use_pub_sub = false # Use ROUTER remote proxy. (boolean value) -# Deprecated group/name - [DEFAULT]/use_router_proxy #use_router_proxy = false # This option makes direct connections dynamic or static. It makes sense only @@ -2019,24 +2024,20 @@ # Minimal port number for random ports range. (port value) # Minimum value: 0 # Maximum value: 65535 -# Deprecated group/name - [DEFAULT]/rpc_zmq_min_port #rpc_zmq_min_port = 49153 # Maximal port number for random ports range. (integer value) # Minimum value: 1 # Maximum value: 65536 -# Deprecated group/name - [DEFAULT]/rpc_zmq_max_port #rpc_zmq_max_port = 65536 # Number of retries to find free port number before fail with ZMQBindError. # (integer value) -# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_port_retries #rpc_zmq_bind_port_retries = 100 # Default serialization mechanism for serializing/deserializing # outgoing/incoming messages (string value) # Allowed values: json, msgpack -# Deprecated group/name - [DEFAULT]/rpc_zmq_serialization #rpc_zmq_serialization = json # This option configures round-robin mode in zmq socket. True means not keeping @@ -2108,11 +2109,9 @@ # # The file that defines policies. (string value) -# Deprecated group/name - [DEFAULT]/policy_file #policy_file = policy.json # Default rule. Enforced when a requested rule is not found. (string value) -# Deprecated group/name - [DEFAULT]/policy_default_rule #policy_default_rule = default # Directories where policy configuration files are stored. They can be relative @@ -2120,7 +2119,6 @@ # absolute paths. The file defined by policy_file must exist for these # directories to be searched. Missing or empty directories are ignored. (multi # valued) -# Deprecated group/name - [DEFAULT]/policy_dirs #policy_dirs = policy.d diff --git a/etc/glance-scrubber.conf b/etc/glance-scrubber.conf index d17df78bec..d030ea2e3b 100644 --- a/etc/glance-scrubber.conf +++ b/etc/glance-scrubber.conf @@ -409,7 +409,7 @@ # Related options: # * None # -# (string value) +# (unknown value) #pydev_worker_debug_host = localhost # @@ -474,6 +474,56 @@ # (string value) #digest_algorithm = sha256 +# +# The URL provides location where the temporary data will be stored +# +# This option is for Glance internal use only. Glance will save the +# image data uploaded by the user to 'staging' endpoint during the +# image import process. +# +# This option does not change the 'staging' API endpoint by any means. +# +# NOTE: It is discouraged to use same path as [TASKS]/work_dir +# +# NOTE: 'file://' is the only option +# api_image_import flow will support for now. +# +# NOTE: The staging path must be on shared filesystem available to all +# Glance API nodes. +# +# Possible values: +# * String starting with 'file://' followed by absolute FS path +# +# Related options: +# * [TASKS]/work_dir +# * [DEFAULT]/enable_image_import (*deprecated*) +# +# (string value) +#node_staging_uri = file:///tmp/staging/ + +# DEPRECATED: +# Enables the Image Import workflow introduced in Pike +# +# As '[DEFAULT]/node_staging_uri' is required for the Image +# Import, it's disabled per default in Pike, enabled per +# default in Queens and removed in Rocky. This allows Glance to +# operate with previous version configs upon upgrade. +# +# Setting this option to True will enable the endpoints related +# to Image Import Refactoring work. +# +# Related options: +# * [DEFUALT]/node_staging_uri (boolean value) +# This option is deprecated for removal since Pike. +# Its value may be silently ignored in the future. +# Reason: +# This option is deprecated for removal in Rocky. +# +# It was introduced to make sure that the API is not enabled +# before the '[DEFAULT]/node_staging_uri' is defined and is +# long term redundant. +#enable_image_import = false + # # The amount of time, in seconds, to delay image scrubbing. # @@ -865,7 +915,7 @@ # Related options: # * None # -# (string value) +# (unknown value) #registry_host = 0.0.0.0 # @@ -891,12 +941,6 @@ # Note: This option can be changed without restarting. #debug = false -# DEPRECATED: If set to false, the logging level will be set to WARNING instead -# of the default INFO level. (boolean value) -# This option is deprecated for removal. -# Its value may be silently ignored in the future. -#verbose = true - # The name of a logging configuration file. This file is appended to any # existing logging configuration files. For details about logging configuration # files, see the Python logging module documentation. Note that when logging @@ -935,6 +979,12 @@ # set. (boolean value) #use_syslog = false +# Enable journald for logging. If running in a systemd environment you may wish +# to enable journal support. Doing so will use the journal native protocol which +# includes structured metadata in addition to log messages.This option is +# ignored if log_config_append is set. (boolean value) +#use_journal = false + # Syslog facility to receive log lines. This option is ignored if # log_config_append is set. (string value) #syslog_log_facility = LOG_USER @@ -963,7 +1013,7 @@ # List of package logging levels in logger=LEVEL pairs. This option is ignored # if log_config_append is set. (list value) -#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO +#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO # Enables or disables publication of error events. (boolean value) #publish_errors = false @@ -997,16 +1047,7 @@ # From oslo.db # -# DEPRECATED: The file name to use with SQLite. (string value) -# Deprecated group/name - [DEFAULT]/sqlite_db -# This option is deprecated for removal. -# Its value may be silently ignored in the future. -# Reason: Should use config option connection or slave_connection to connect the -# database. -#sqlite_db = oslo.sqlite - # If True, SQLite uses synchronous mode. (boolean value) -# Deprecated group/name - [DEFAULT]/sqlite_synchronous #sqlite_synchronous = true # The back end to use for the database. (string value) @@ -1030,6 +1071,10 @@ # (string value) #mysql_sql_mode = TRADITIONAL +# If True, transparently enables support for handling MySQL Cluster (NDB). +# (boolean value) +#mysql_enable_ndb = false + # Timeout before idle SQL connections are reaped. (integer value) # Deprecated group/name - [DEFAULT]/sql_idle_timeout # Deprecated group/name - [DATABASE]/sql_idle_timeout @@ -1190,7 +1235,7 @@ # For more information on setting up a particular store in your # deployment and help with the usage of this feature, please contact # the storage driver maintainers listed here: -# https://docs.openstack.org/glance_store/latest/user/drivers.html +# http://docs.openstack.org/developer/glance_store/drivers/index.html # # Possible values: # * Zero @@ -1504,7 +1549,7 @@ # # More information on configuring filesystem store with multiple store # directories can be found at -# https://docs.openstack.org/glance/latest/configuration/index.html +# http://docs.openstack.org/developer/glance/configuring.html # # NOTE: This directory is used only when filesystem store is used as a # storage backend. Either ``filesystem_store_datadir`` or @@ -1555,7 +1600,7 @@ # digit. # # For more information, please refer the documentation at -# https://docs.openstack.org/glance/latest/configuration/index.html +# http://docs.openstack.org/developer/glance/configuring.html # # Possible values: # * A valid file access permission @@ -1797,7 +1842,7 @@ # Related Options: # * sheepdog_store_port # -# (string value) +# (unknown value) #sheepdog_store_address = 127.0.0.1 # @@ -1972,7 +2017,7 @@ # this is 5GB. To upload objects bigger than this limit, objects are segmented # into multiple smaller objects that are tied together with a manifest file. # For more detail, refer to -# https://docs.openstack.org/swift/latest/overview_large_objects.html +# http://docs.openstack.org/developer/swift/overview_large_objects.html # # This configuration option specifies the size threshold over which the Swift # driver will start segmenting image data into multiple smaller files. @@ -2296,7 +2341,7 @@ # * vmware_server_username # * vmware_server_password # -# (string value) +# (unknown value) #vmware_server_host = 127.0.0.1 # @@ -2466,14 +2511,12 @@ # # Enables or disables inter-process locks. (boolean value) -# Deprecated group/name - [DEFAULT]/disable_process_locking #disable_process_locking = false # Directory to use for lock files. For security, the specified directory should # only be writable by the user running the processes that need locking. Defaults # to environment variable OSLO_LOCK_PATH. If external locks are used, a lock # path must be set. (string value) -# Deprecated group/name - [DEFAULT]/lock_path #lock_path = @@ -2484,11 +2527,9 @@ # # The file that defines policies. (string value) -# Deprecated group/name - [DEFAULT]/policy_file #policy_file = policy.json # Default rule. Enforced when a requested rule is not found. (string value) -# Deprecated group/name - [DEFAULT]/policy_default_rule #policy_default_rule = default # Directories where policy configuration files are stored. They can be relative @@ -2496,5 +2537,4 @@ # absolute paths. The file defined by policy_file must exist for these # directories to be searched. Missing or empty directories are ignored. (multi # valued) -# Deprecated group/name - [DEFAULT]/policy_dirs #policy_dirs = policy.d