006254c505
This adds a 'ca_file' config option that points to a local CA cert that will be used to verify certs provided by connecting clients. The 'ca_file' option is only used if the server is already properly configured to to use SSL - that means having a valid 'cert_file' and 'key_file'. If no 'ca_file' is provided, the behavior will remain the same - the server will still provide its cert to clients, but it will ignore certs sent back from those clients. Fixes bug 1032451 Change-Id: Ie48646b0fc5398ba7cda2fb627b820f533482e00
69 lines
2.2 KiB
Plaintext
69 lines
2.2 KiB
Plaintext
[DEFAULT]
|
|
# Show more verbose log output (sets INFO log level output)
|
|
verbose = True
|
|
|
|
# Show debugging output in logs (sets DEBUG log level output)
|
|
debug = False
|
|
|
|
# Address to bind the registry server
|
|
bind_host = 0.0.0.0
|
|
|
|
# Port the bind the registry server to
|
|
bind_port = 9191
|
|
|
|
# Log to this file. Make sure you do not set the same log
|
|
# file for both the API and registry servers!
|
|
log_file = /var/log/glance/registry.log
|
|
|
|
# Backlog requests when creating socket
|
|
backlog = 4096
|
|
|
|
# TCP_KEEPIDLE value in seconds when creating socket.
|
|
# Not supported on OS X.
|
|
# tcp_keepidle = 600
|
|
|
|
# SQLAlchemy connection string for the reference implementation
|
|
# registry server. Any valid SQLAlchemy connection string is fine.
|
|
# See: http://www.sqlalchemy.org/docs/05/reference/sqlalchemy/connections.html#sqlalchemy.create_engine
|
|
sql_connection = sqlite:///glance.sqlite
|
|
|
|
# Period in seconds after which SQLAlchemy should reestablish its connection
|
|
# to the database.
|
|
#
|
|
# MySQL uses a default `wait_timeout` of 8 hours, after which it will drop
|
|
# idle connections. This can result in 'MySQL Gone Away' exceptions. If you
|
|
# notice this, you can lower this value to ensure that SQLAlchemy reconnects
|
|
# before MySQL can drop the connection.
|
|
sql_idle_timeout = 3600
|
|
|
|
# Limit the api to return `param_limit_max` items in a call to a container. If
|
|
# a larger `limit` query param is provided, it will be reduced to this value.
|
|
api_limit_max = 1000
|
|
|
|
# If a `limit` query param is not provided in an api request, it will
|
|
# default to `limit_param_default`
|
|
limit_param_default = 25
|
|
|
|
# Role used to identify an authenticated user as administrator
|
|
#admin_role = admin
|
|
|
|
# ================= Syslog Options ============================
|
|
|
|
# Send logs to syslog (/dev/log) instead of to file specified
|
|
# by `log_file`
|
|
use_syslog = False
|
|
|
|
# Facility to use. If unset defaults to LOG_USER.
|
|
# syslog_log_facility = LOG_LOCAL1
|
|
|
|
# ================= SSL Options ===============================
|
|
|
|
# Certificate file to use when starting registry server securely
|
|
# cert_file = /path/to/certfile
|
|
|
|
# Private key file to use when starting registry server securely
|
|
# key_file = /path/to/keyfile
|
|
|
|
# CA certificate file to use to verify connecting clients
|
|
# ca_file = /path/to/cafile
|