11cfe49b8f
During the release many config options are changed or updated. The
sample config files provided in tree (under etc/*) need to be updated
using the autogeneration tool as these files are being used in different
places. Some examples are devstack gates, downstream packagers shipping
with the same (or using defaults from these files), etc.
Hence, before we cut a release we need to refresh the config files
shipped with tree to match the changes done in the source code during
the release cycle.
This commit is intended to refresh the entire set of config files for
Newton. They include:
* glance api and registry related configs
* scrubber, cache and manage utilities' configs
* any other configs coming from downstream like oslo libraries,
glance_store, etc.
* belonging to affiliated code base like glare.
Change-Id: Iea2c538b37182191445cc5c1f8b2d9dceed06343
Co-Authored-By: Nikhil Komawar <nik.komawar@gmail.com>
Co-Authored-By: Hemanth Makkapati <hemanth.makkapati@rackspace.com>
1995 lines
65 KiB
Plaintext
1995 lines
65 KiB
Plaintext
[DEFAULT]
|
|
|
|
#
|
|
# From glance.registry
|
|
#
|
|
|
|
#
|
|
# Set the image owner to tenant or the authenticated user.
|
|
#
|
|
# Assign a boolean value to determine the owner of an image. When set to
|
|
# True, the owner of the image is the tenant. When set to False, the
|
|
# owner of the image will be the authenticated user issuing the request.
|
|
# Setting it to False makes the image private to the associated user and
|
|
# sharing with other users within the same tenant (or "project")
|
|
# requires explicit image sharing via image membership.
|
|
#
|
|
# Possible values:
|
|
# * True
|
|
# * False
|
|
#
|
|
# Related options:
|
|
# * None
|
|
#
|
|
# (boolean value)
|
|
#owner_is_tenant = true
|
|
|
|
#
|
|
# Role used to identify an authenticated user as administrator.
|
|
#
|
|
# Provide a string value representing a Keystone role to identify an
|
|
# administrative user. Users with this role will be granted
|
|
# administrative privileges. The default value for this option is
|
|
# 'admin'.
|
|
#
|
|
# Possible values:
|
|
# * A string value which is a valid Keystone role
|
|
#
|
|
# Related options:
|
|
# * None
|
|
#
|
|
# (string value)
|
|
#admin_role = admin
|
|
|
|
#
|
|
# Allow limited access to unauthenticated users.
|
|
#
|
|
# Assign a boolean to determine API access for unathenticated
|
|
# users. When set to False, the API cannot be accessed by
|
|
# unauthenticated users. When set to True, unauthenticated users can
|
|
# access the API with read-only privileges. This however only applies
|
|
# when using ContextMiddleware.
|
|
#
|
|
# Possible values:
|
|
# * True
|
|
# * False
|
|
#
|
|
# Related options:
|
|
# * None
|
|
#
|
|
# (boolean value)
|
|
#allow_anonymous_access = false
|
|
|
|
#
|
|
# Limit the request ID length.
|
|
#
|
|
# Provide an integer value to limit the length of the request ID to
|
|
# the specified length. The default value is 64. Users can change this
|
|
# to any ineteger value between 0 and 16384 however keeping in mind that
|
|
# a larger value may flood the logs.
|
|
#
|
|
# Possible values:
|
|
# * Integer value between 0 and 16384
|
|
#
|
|
# Related options:
|
|
# * None
|
|
#
|
|
# (integer value)
|
|
# Minimum value: 0
|
|
#max_request_id_length = 64
|
|
|
|
#
|
|
# Allow users to add additional/custom properties to images.
|
|
#
|
|
# Glance defines a standard set of properties (in its schema) that
|
|
# appear on every image. These properties are also known as
|
|
# ``base properties``. In addition to these properties, Glance
|
|
# allows users to add custom properties to images. These are known
|
|
# as ``additional properties``.
|
|
#
|
|
# By default, this configuration option is set to ``True`` and users
|
|
# are allowed to add additional properties. The number of additional
|
|
# properties that can be added to an image can be controlled via
|
|
# ``image_property_quota`` configuration option.
|
|
#
|
|
# Possible values:
|
|
# * True
|
|
# * False
|
|
#
|
|
# Related options:
|
|
# * image_property_quota
|
|
#
|
|
# (boolean value)
|
|
#allow_additional_image_properties = true
|
|
|
|
#
|
|
# Maximum number of image members per image.
|
|
#
|
|
# This limits the maximum of users an image can be shared with. Any negative
|
|
# value is interpreted as unlimited.
|
|
#
|
|
# Related options:
|
|
# * None
|
|
#
|
|
# (integer value)
|
|
#image_member_quota = 128
|
|
|
|
#
|
|
# Maximum number of properties allowed on an image.
|
|
#
|
|
# This enforces an upper limit on the number of additional properties an image
|
|
# can have. Any negative value is interpreted as unlimited.
|
|
#
|
|
# NOTE: This won't have any impact if additional properties are disabled. Please
|
|
# refer to ``allow_additional_image_properties``.
|
|
#
|
|
# Related options:
|
|
# * ``allow_additional_image_properties``
|
|
#
|
|
# (integer value)
|
|
#image_property_quota = 128
|
|
|
|
#
|
|
# Maximum number of tags allowed on an image.
|
|
#
|
|
# Any negative value is interpreted as unlimited.
|
|
#
|
|
# Related options:
|
|
# * None
|
|
#
|
|
# (integer value)
|
|
#image_tag_quota = 128
|
|
|
|
#
|
|
# Maximum number of locations allowed on an image.
|
|
#
|
|
# Any negative value is interpreted as unlimited.
|
|
#
|
|
# Related options:
|
|
# * None
|
|
#
|
|
# (integer value)
|
|
#image_location_quota = 10
|
|
|
|
#
|
|
# Python module path of data access API.
|
|
#
|
|
# Specifies the path to the API to use for accessing the data model.
|
|
# This option determines how the image catalog data will be accessed.
|
|
#
|
|
# Possible values:
|
|
# * glance.db.sqlalchemy.api
|
|
# * glance.db.registry.api
|
|
# * glance.db.simple.api
|
|
#
|
|
# If this option is set to ``glance.db.sqlalchemy.api`` then the image
|
|
# catalog data is stored in and read from the database via the
|
|
# SQLAlchemy Core and ORM APIs.
|
|
#
|
|
# Setting this option to ``glance.db.registry.api`` will force all
|
|
# database access requests to be routed through the Registry service.
|
|
# This avoids data access from the Glance API nodes for an added layer
|
|
# of security, scalability and manageability.
|
|
#
|
|
# NOTE: In v2 OpenStack Images API, the registry service is optional.
|
|
# In order to use the Registry API in v2, the option
|
|
# ``enable_v2_registry`` must be set to ``True``.
|
|
#
|
|
# Finally, when this configuration option is set to
|
|
# ``glance.db.simple.api``, image catalog data is stored in and read
|
|
# from an in-memory data structure. This is primarily used for testing.
|
|
#
|
|
# Related options:
|
|
# * enable_v2_api
|
|
# * enable_v2_registry
|
|
#
|
|
# (string value)
|
|
#data_api = glance.db.sqlalchemy.api
|
|
|
|
#
|
|
# The default number of results to return for a request.
|
|
#
|
|
# Responses to certain API requests, like list images, may return
|
|
# multiple items. The number of results returned can be explicitly
|
|
# controlled by specifying the ``limit`` parameter in the API request.
|
|
# However, if a ``limit`` parameter is not specified, this
|
|
# configuration value will be used as the default number of results to
|
|
# be returned for any API request.
|
|
#
|
|
# NOTES:
|
|
# * The value of this configuration option may not be greater than
|
|
# the value specified by ``api_limit_max``.
|
|
# * Setting this to a very large value may slow down database
|
|
# queries and increase response times. Setting this to a
|
|
# very low value may result in poor user experience.
|
|
#
|
|
# Possible values:
|
|
# * Any positive integer
|
|
#
|
|
# Related options:
|
|
# * api_limit_max
|
|
#
|
|
# (integer value)
|
|
# Minimum value: 1
|
|
#limit_param_default = 25
|
|
|
|
#
|
|
# Maximum number of results that could be returned by a request.
|
|
#
|
|
# As described in the help text of ``limit_param_default``, some
|
|
# requests may return multiple results. The number of results to be
|
|
# returned are governed either by the ``limit`` parameter in the
|
|
# request or the ``limit_param_default`` configuration option.
|
|
# The value in either case, can't be greater than the absolute maximum
|
|
# defined by this configuration option. Anything greater than this
|
|
# value is trimmed down to the maximum value defined here.
|
|
#
|
|
# NOTE: Setting this to a very large value may slow down database
|
|
# queries and increase response times. Setting this to a
|
|
# very low value may result in poor user experience.
|
|
#
|
|
# Possible values:
|
|
# * Any positive integer
|
|
#
|
|
# Related options:
|
|
# * limit_param_default
|
|
#
|
|
# (integer value)
|
|
# Minimum value: 1
|
|
#api_limit_max = 1000
|
|
|
|
#
|
|
# Show direct image location when returning an image.
|
|
#
|
|
# This configuration option indicates whether to show the direct image
|
|
# location when returning image details to the user. The direct image
|
|
# location is where the image data is stored in backend storage. This
|
|
# image location is shown under the image property ``direct_url``.
|
|
#
|
|
# When multiple image locations exist for an image, the best location
|
|
# is displayed based on the location strategy indicated by the
|
|
# configuration option ``location_strategy``.
|
|
#
|
|
# NOTES:
|
|
# * Revealing image locations can present a GRAVE SECURITY RISK as
|
|
# image locations can sometimes include credentials. Hence, this
|
|
# is set to ``False`` by default. Set this to ``True`` with
|
|
# EXTREME CAUTION and ONLY IF you know what you are doing!
|
|
# * If an operator wishes to avoid showing any image location(s)
|
|
# to the user, then both this option and
|
|
# ``show_multiple_locations`` MUST be set to ``False``.
|
|
#
|
|
# Possible values:
|
|
# * True
|
|
# * False
|
|
#
|
|
# Related options:
|
|
# * show_multiple_locations
|
|
# * location_strategy
|
|
#
|
|
# (boolean value)
|
|
#show_image_direct_url = false
|
|
|
|
# DEPRECATED:
|
|
# Show all image locations when returning an image.
|
|
#
|
|
# This configuration option indicates whether to show all the image
|
|
# locations when returning image details to the user. When multiple
|
|
# image locations exist for an image, the locations are ordered based
|
|
# on the location strategy indicated by the configuration opt
|
|
# ``location_strategy``. The image locations are shown under the
|
|
# image property ``locations``.
|
|
#
|
|
# NOTES:
|
|
# * Revealing image locations can present a GRAVE SECURITY RISK as
|
|
# image locations can sometimes include credentials. Hence, this
|
|
# is set to ``False`` by default. Set this to ``True`` with
|
|
# EXTREME CAUTION and ONLY IF you know what you are doing!
|
|
# * If an operator wishes to avoid showing any image location(s)
|
|
# to the user, then both this option and
|
|
# ``show_image_direct_url`` MUST be set to ``False``.
|
|
#
|
|
# Possible values:
|
|
# * True
|
|
# * False
|
|
#
|
|
# Related options:
|
|
# * show_image_direct_url
|
|
# * location_strategy
|
|
#
|
|
# (boolean value)
|
|
# This option is deprecated for removal since Newton.
|
|
# Its value may be silently ignored in the future.
|
|
# Reason: This option will be removed in the Ocata release because the same
|
|
# functionality can be achieved with greater granularity by using policies.
|
|
# Please see the Newton release notes for more information.
|
|
#show_multiple_locations = false
|
|
|
|
#
|
|
# Maximum size of image a user can upload in bytes.
|
|
#
|
|
# An image upload greater than the size mentioned here would result
|
|
# in an image creation failure. This configuration option defaults to
|
|
# 1099511627776 bytes (1 TiB).
|
|
#
|
|
# NOTES:
|
|
# * This value should only be increased after careful
|
|
# consideration and must be set less than or equal to
|
|
# 8 EiB (9223372036854775808).
|
|
# * This value must be set with careful consideration of the
|
|
# backend storage capacity. Setting this to a very low value
|
|
# may result in a large number of image failures. And, setting
|
|
# this to a very large value may result in faster consumption
|
|
# of storage. Hence, this must be set according to the nature of
|
|
# images created and storage capacity available.
|
|
#
|
|
# Possible values:
|
|
# * Any positive number less than or equal to 9223372036854775808
|
|
#
|
|
# (integer value)
|
|
# Minimum value: 1
|
|
# Maximum value: 9223372036854775808
|
|
#image_size_cap = 1099511627776
|
|
|
|
#
|
|
# Maximum amount of image storage per tenant.
|
|
#
|
|
# This enforces an upper limit on the cumulative storage consumed by all images
|
|
# of a tenant across all stores. This is a per-tenant limit.
|
|
#
|
|
# The default unit for this configuration option is Bytes. However, storage
|
|
# units can be specified using case-sensitive literals ``B``, ``KB``, ``MB``,
|
|
# ``GB`` and ``TB`` representing Bytes, KiloBytes, MegaBytes, GigaBytes and
|
|
# TeraBytes respectively. Note that there should not be any space between the
|
|
# value and unit. Value ``0`` signifies no quota enforcement. Negative values
|
|
# are invalid and result in errors.
|
|
#
|
|
# Possible values:
|
|
# * A string that is a valid concatenation of a non-negative integer
|
|
# representing the storage value and an optional string literal
|
|
# representing storage units as mentioned above.
|
|
#
|
|
# Related options:
|
|
# * None
|
|
#
|
|
# (string value)
|
|
#user_storage_quota = 0
|
|
|
|
#
|
|
# Deploy the v1 OpenStack Images API.
|
|
#
|
|
# When this option is set to ``True``, Glance service will respond to
|
|
# requests on registered endpoints conforming to the v1 OpenStack
|
|
# Images API.
|
|
#
|
|
# NOTES:
|
|
# * If this option is enabled, then ``enable_v1_registry`` must
|
|
# also be set to ``True`` to enable mandatory usage of Registry
|
|
# service with v1 API.
|
|
#
|
|
# * If this option is disabled, then the ``enable_v1_registry``
|
|
# option, which is enabled by default, is also recommended
|
|
# to be disabled.
|
|
#
|
|
# * This option is separate from ``enable_v2_api``, both v1 and v2
|
|
# OpenStack Images API can be deployed independent of each
|
|
# other.
|
|
#
|
|
# * If deploying only the v2 Images API, this option, which is
|
|
# enabled by default, should be disabled.
|
|
#
|
|
# Possible values:
|
|
# * True
|
|
# * False
|
|
#
|
|
# Related options:
|
|
# * enable_v1_registry
|
|
# * enable_v2_api
|
|
#
|
|
# (boolean value)
|
|
#enable_v1_api = true
|
|
|
|
#
|
|
# Deploy the v2 OpenStack Images API.
|
|
#
|
|
# When this option is set to ``True``, Glance service will respond
|
|
# to requests on registered endpoints conforming to the v2 OpenStack
|
|
# Images API.
|
|
#
|
|
# NOTES:
|
|
# * If this option is disabled, then the ``enable_v2_registry``
|
|
# option, which is enabled by default, is also recommended
|
|
# to be disabled.
|
|
#
|
|
# * This option is separate from ``enable_v1_api``, both v1 and v2
|
|
# OpenStack Images API can be deployed independent of each
|
|
# other.
|
|
#
|
|
# * If deploying only the v1 Images API, this option, which is
|
|
# enabled by default, should be disabled.
|
|
#
|
|
# Possible values:
|
|
# * True
|
|
# * False
|
|
#
|
|
# Related options:
|
|
# * enable_v2_registry
|
|
# * enable_v1_api
|
|
#
|
|
# (boolean value)
|
|
#enable_v2_api = true
|
|
|
|
#
|
|
# Deploy the v1 API Registry service.
|
|
#
|
|
# When this option is set to ``True``, the Registry service
|
|
# will be enabled in Glance for v1 API requests.
|
|
#
|
|
# NOTES:
|
|
# * Use of Registry is mandatory in v1 API, so this option must
|
|
# be set to ``True`` if the ``enable_v1_api`` option is enabled.
|
|
#
|
|
# * If deploying only the v2 OpenStack Images API, this option,
|
|
# which is enabled by default, should be disabled.
|
|
#
|
|
# Possible values:
|
|
# * True
|
|
# * False
|
|
#
|
|
# Related options:
|
|
# * enable_v1_api
|
|
#
|
|
# (boolean value)
|
|
#enable_v1_registry = true
|
|
|
|
#
|
|
# Deploy the v2 API Registry service.
|
|
#
|
|
# When this option is set to ``True``, the Registry service
|
|
# will be enabled in Glance for v2 API requests.
|
|
#
|
|
# NOTES:
|
|
# * Use of Registry is optional in v2 API, so this option
|
|
# must only be enabled if both ``enable_v2_api`` is set to
|
|
# ``True`` and the ``data_api`` option is set to
|
|
# ``glance.db.registry.api``.
|
|
#
|
|
# * If deploying only the v1 OpenStack Images API, this option,
|
|
# which is enabled by default, should be disabled.
|
|
#
|
|
# Possible values:
|
|
# * True
|
|
# * False
|
|
#
|
|
# Related options:
|
|
# * enable_v2_api
|
|
# * data_api
|
|
#
|
|
# (boolean value)
|
|
#enable_v2_registry = true
|
|
|
|
#
|
|
# Host address of the pydev server.
|
|
#
|
|
# Provide a string value representing the hostname or IP of the
|
|
# pydev server to use for debugging. The pydev server listens for
|
|
# debug connections on this address, facilitating remote debugging
|
|
# in Glance.
|
|
#
|
|
# Possible values:
|
|
# * Valid hostname
|
|
# * Valid IP address
|
|
#
|
|
# Related options:
|
|
# * None
|
|
#
|
|
# (string value)
|
|
#pydev_worker_debug_host = localhost
|
|
|
|
#
|
|
# Port number that the pydev server will listen on.
|
|
#
|
|
# Provide a port number to bind the pydev server to. The pydev
|
|
# process accepts debug connections on this port and facilitates
|
|
# remote debugging in Glance.
|
|
#
|
|
# Possible values:
|
|
# * A valid port number
|
|
#
|
|
# Related options:
|
|
# * None
|
|
#
|
|
# (port value)
|
|
# Minimum value: 0
|
|
# Maximum value: 65535
|
|
#pydev_worker_debug_port = 5678
|
|
|
|
#
|
|
# AES key for encrypting store location metadata.
|
|
#
|
|
# Provide a string value representing the AES cipher to use for
|
|
# encrypting Glance store metadata.
|
|
#
|
|
# NOTE: The AES key to use must be set to a random string of length
|
|
# 16, 24 or 32 bytes.
|
|
#
|
|
# Possible values:
|
|
# * String value representing a valid AES key
|
|
#
|
|
# Related options:
|
|
# * None
|
|
#
|
|
# (string value)
|
|
#metadata_encryption_key = <None>
|
|
|
|
#
|
|
# Digest algorithm to use for digital signature.
|
|
#
|
|
# Provide a string value representing the digest algorithm to
|
|
# use for generating digital signatures. By default, ``sha256``
|
|
# is used.
|
|
#
|
|
# To get a list of the available algorithms supported by the version
|
|
# of OpenSSL on your platform, run the command:
|
|
# ``openssl list-message-digest-algorithms``.
|
|
# Examples are 'sha1', 'sha256', and 'sha512'.
|
|
#
|
|
# NOTE: ``digest_algorithm`` is not related to Glance's image signing
|
|
# and verification. It is only used to sign the universally unique
|
|
# identifier (UUID) as a part of the certificate file and key file
|
|
# validation.
|
|
#
|
|
# Possible values:
|
|
# * An OpenSSL message digest algorithm identifier
|
|
#
|
|
# Relation options:
|
|
# * None
|
|
#
|
|
# (string value)
|
|
#digest_algorithm = sha256
|
|
|
|
#
|
|
# IP address to bind the glance servers to.
|
|
#
|
|
# Provide an IP address to bind the glance server to. The default
|
|
# value is ``0.0.0.0``.
|
|
#
|
|
# Edit this option to enable the server to listen on one particular
|
|
# IP address on the network card. This facilitates selection of a
|
|
# particular network interface for the server.
|
|
#
|
|
# Possible values:
|
|
# * A valid IPv4 address
|
|
# * A valid IPv6 address
|
|
#
|
|
# Related options:
|
|
# * None
|
|
#
|
|
# (string value)
|
|
#bind_host = 0.0.0.0
|
|
|
|
#
|
|
# Port number on which the server will listen.
|
|
#
|
|
# Provide a valid port number to bind the server's socket to. This
|
|
# port is then set to identify processes and forward network messages
|
|
# that arrive at the server. The default bind_port value for the API
|
|
# server is 9292 and for the registry server is 9191.
|
|
#
|
|
# Possible values:
|
|
# * A valid port number (0 to 65535)
|
|
#
|
|
# Related options:
|
|
# * None
|
|
#
|
|
# (port value)
|
|
# Minimum value: 0
|
|
# Maximum value: 65535
|
|
#bind_port = <None>
|
|
|
|
#
|
|
# Set the number of incoming connection requests.
|
|
#
|
|
# Provide a positive integer value to limit the number of requests in
|
|
# the backlog queue. The default queue size is 4096.
|
|
#
|
|
# An incoming connection to a TCP listener socket is queued before a
|
|
# connection can be established with the server. Setting the backlog
|
|
# for a TCP socket ensures a limited queue size for incoming traffic.
|
|
#
|
|
# Possible values:
|
|
# * Positive integer
|
|
#
|
|
# Related options:
|
|
# * None
|
|
#
|
|
# (integer value)
|
|
# Minimum value: 1
|
|
#backlog = 4096
|
|
|
|
#
|
|
# Set the wait time before a connection recheck.
|
|
#
|
|
# Provide a positive integer value representing time in seconds which
|
|
# is set as the idle wait time before a TCP keep alive packet can be
|
|
# sent to the host. The default value is 600 seconds.
|
|
#
|
|
# Setting ``tcp_keepidle`` helps verify at regular intervals that a
|
|
# connection is intact and prevents frequent TCP connection
|
|
# reestablishment.
|
|
#
|
|
# Possible values:
|
|
# * Positive integer value representing time in seconds
|
|
#
|
|
# Related options:
|
|
# * None
|
|
#
|
|
# (integer value)
|
|
# Minimum value: 1
|
|
#tcp_keepidle = 600
|
|
|
|
#
|
|
# Absolute path to the CA file.
|
|
#
|
|
# Provide a string value representing a valid absolute path to
|
|
# the Certificate Authority file to use for client authentication.
|
|
#
|
|
# A CA file typically contains necessary trusted certificates to
|
|
# use for the client authentication. This is essential to ensure
|
|
# that a secure connection is established to the server via the
|
|
# internet.
|
|
#
|
|
# Possible values:
|
|
# * Valid absolute path to the CA file
|
|
#
|
|
# Related options:
|
|
# * None
|
|
#
|
|
# (string value)
|
|
#ca_file = /etc/ssl/cafile
|
|
|
|
#
|
|
# Absolute path to the certificate file.
|
|
#
|
|
# Provide a string value representing a valid absolute path to the
|
|
# certificate file which is required to start the API service
|
|
# securely.
|
|
#
|
|
# A certificate file typically is a public key container and includes
|
|
# the server's public key, server name, server information and the
|
|
# signature which was a result of the verification process using the
|
|
# CA certificate. This is required for a secure connection
|
|
# establishment.
|
|
#
|
|
# Possible values:
|
|
# * Valid absolute path to the certificate file
|
|
#
|
|
# Related options:
|
|
# * None
|
|
#
|
|
# (string value)
|
|
#cert_file = /etc/ssl/certs
|
|
|
|
#
|
|
# Absolute path to a private key file.
|
|
#
|
|
# Provide a string value representing a valid absolute path to a
|
|
# private key file which is required to establish the client-server
|
|
# connection.
|
|
#
|
|
# Possible values:
|
|
# * Absolute path to the private key file
|
|
#
|
|
# Related options:
|
|
# * None
|
|
#
|
|
# (string value)
|
|
#key_file = /etc/ssl/key/key-file.pem
|
|
|
|
# DEPRECATED: The HTTP header used to determine the scheme for the original
|
|
# request, even if it was removed by an SSL terminating proxy. Typical value is
|
|
# "HTTP_X_FORWARDED_PROTO". (string value)
|
|
# This option is deprecated for removal.
|
|
# Its value may be silently ignored in the future.
|
|
# Reason: Use the http_proxy_to_wsgi middleware instead.
|
|
#secure_proxy_ssl_header = <None>
|
|
|
|
#
|
|
# Number of Glance worker processes to start.
|
|
#
|
|
# Provide a non-negative integer value to set the number of child
|
|
# process workers to service requests. By default, the number of CPUs
|
|
# available is set as the value for ``workers``.
|
|
#
|
|
# Each worker process is made to listen on the port set in the
|
|
# configuration file and contains a greenthread pool of size 1000.
|
|
#
|
|
# NOTE: Setting the number of workers to zero, triggers the creation
|
|
# of a single API process with a greenthread pool of size 1000.
|
|
#
|
|
# Possible values:
|
|
# * 0
|
|
# * Positive integer value (typically equal to the number of CPUs)
|
|
#
|
|
# Related options:
|
|
# * None
|
|
#
|
|
# (integer value)
|
|
# Minimum value: 0
|
|
#workers = <None>
|
|
|
|
#
|
|
# Maximum line size of message headers.
|
|
#
|
|
# Provide an integer value representing a length to limit the size of
|
|
# message headers. The default value is 16384.
|
|
#
|
|
# NOTE: ``max_header_line`` may need to be increased when using large
|
|
# tokens (typically those generated by the Keystone v3 API with big
|
|
# service catalogs). However, it is to be kept in mind that larger
|
|
# values for ``max_header_line`` would flood the logs.
|
|
#
|
|
# Setting ``max_header_line`` to 0 sets no limit for the line size of
|
|
# message headers.
|
|
#
|
|
# Possible values:
|
|
# * 0
|
|
# * Positive integer
|
|
#
|
|
# Related options:
|
|
# * None
|
|
#
|
|
# (integer value)
|
|
# Minimum value: 0
|
|
#max_header_line = 16384
|
|
|
|
#
|
|
# Set keep alive option for HTTP over TCP.
|
|
#
|
|
# Provide a boolean value to determine sending of keep alive packets.
|
|
# If set to ``False``, the server returns the header
|
|
# "Connection: close". If set to ``True``, the server returns a
|
|
# "Connection: Keep-Alive" in its responses. This enables retention of
|
|
# the same TCP connection for HTTP conversations instead of opening a
|
|
# new one with each new request.
|
|
#
|
|
# This option must be set to ``False`` if the client socket connection
|
|
# needs to be closed explicitly after the response is received and
|
|
# read successfully by the client.
|
|
#
|
|
# Possible values:
|
|
# * True
|
|
# * False
|
|
#
|
|
# Related options:
|
|
# * None
|
|
#
|
|
# (boolean value)
|
|
#http_keepalive = true
|
|
|
|
#
|
|
# Timeout for client connections' socket operations.
|
|
#
|
|
# Provide a valid integer value representing time in seconds to set
|
|
# the period of wait before an incoming connection can be closed. The
|
|
# default value is 900 seconds.
|
|
#
|
|
# The value zero implies wait forever.
|
|
#
|
|
# Possible values:
|
|
# * Zero
|
|
# * Positive integer
|
|
#
|
|
# Related options:
|
|
# * None
|
|
#
|
|
# (integer value)
|
|
# Minimum value: 0
|
|
#client_socket_timeout = 900
|
|
|
|
#
|
|
# From oslo.log
|
|
#
|
|
|
|
# If set to true, the logging level will be set to DEBUG instead of the default
|
|
# INFO level. (boolean value)
|
|
# Note: This option can be changed without restarting.
|
|
#debug = false
|
|
|
|
# DEPRECATED: If set to false, the logging level will be set to WARNING instead
|
|
# of the default INFO level. (boolean value)
|
|
# This option is deprecated for removal.
|
|
# Its value may be silently ignored in the future.
|
|
#verbose = true
|
|
|
|
# The name of a logging configuration file. This file is appended to any
|
|
# existing logging configuration files. For details about logging configuration
|
|
# files, see the Python logging module documentation. Note that when logging
|
|
# configuration files are used then all logging configuration is set in the
|
|
# configuration file and other logging configuration options are ignored (for
|
|
# example, logging_context_format_string). (string value)
|
|
# Note: This option can be changed without restarting.
|
|
# Deprecated group/name - [DEFAULT]/log_config
|
|
#log_config_append = <None>
|
|
|
|
# Defines the format string for %%(asctime)s in log records. Default:
|
|
# %(default)s . This option is ignored if log_config_append is set. (string
|
|
# value)
|
|
#log_date_format = %Y-%m-%d %H:%M:%S
|
|
|
|
# (Optional) Name of log file to send logging output to. If no default is set,
|
|
# logging will go to stderr as defined by use_stderr. This option is ignored if
|
|
# log_config_append is set. (string value)
|
|
# Deprecated group/name - [DEFAULT]/logfile
|
|
#log_file = <None>
|
|
|
|
# (Optional) The base directory used for relative log_file paths. This option
|
|
# is ignored if log_config_append is set. (string value)
|
|
# Deprecated group/name - [DEFAULT]/logdir
|
|
#log_dir = <None>
|
|
|
|
# Uses logging handler designed to watch file system. When log file is moved or
|
|
# removed this handler will open a new log file with specified path
|
|
# instantaneously. It makes sense only if log_file option is specified and Linux
|
|
# platform is used. This option is ignored if log_config_append is set. (boolean
|
|
# value)
|
|
#watch_log_file = false
|
|
|
|
# Use syslog for logging. Existing syslog format is DEPRECATED and will be
|
|
# changed later to honor RFC5424. This option is ignored if log_config_append is
|
|
# set. (boolean value)
|
|
#use_syslog = false
|
|
|
|
# Syslog facility to receive log lines. This option is ignored if
|
|
# log_config_append is set. (string value)
|
|
#syslog_log_facility = LOG_USER
|
|
|
|
# Log output to standard error. This option is ignored if log_config_append is
|
|
# set. (boolean value)
|
|
#use_stderr = true
|
|
|
|
# Format string to use for log messages with context. (string value)
|
|
#logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
|
|
|
|
# Format string to use for log messages when context is undefined. (string
|
|
# value)
|
|
#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
|
|
|
|
# Additional data to append to log message when logging level for the message is
|
|
# DEBUG. (string value)
|
|
#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
|
|
|
|
# Prefix each line of exception output with this format. (string value)
|
|
#logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
|
|
|
|
# Defines the format string for %(user_identity)s that is used in
|
|
# logging_context_format_string. (string value)
|
|
#logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
|
|
|
|
# List of package logging levels in logger=LEVEL pairs. This option is ignored
|
|
# if log_config_append is set. (list value)
|
|
#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
|
|
|
|
# Enables or disables publication of error events. (boolean value)
|
|
#publish_errors = false
|
|
|
|
# The format for an instance that is passed with the log message. (string value)
|
|
#instance_format = "[instance: %(uuid)s] "
|
|
|
|
# The format for an instance UUID that is passed with the log message. (string
|
|
# value)
|
|
#instance_uuid_format = "[instance: %(uuid)s] "
|
|
|
|
# Enables or disables fatal status of deprecations. (boolean value)
|
|
#fatal_deprecations = false
|
|
|
|
#
|
|
# From oslo.messaging
|
|
#
|
|
|
|
# Size of RPC connection pool. (integer value)
|
|
# Deprecated group/name - [DEFAULT]/rpc_conn_pool_size
|
|
#rpc_conn_pool_size = 30
|
|
|
|
# The pool size limit for connections expiration policy (integer value)
|
|
#conn_pool_min_size = 2
|
|
|
|
# The time-to-live in sec of idle connections in the pool (integer value)
|
|
#conn_pool_ttl = 1200
|
|
|
|
# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
|
|
# The "host" option should point or resolve to this address. (string value)
|
|
# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_address
|
|
#rpc_zmq_bind_address = *
|
|
|
|
# MatchMaker driver. (string value)
|
|
# Allowed values: redis, dummy
|
|
# Deprecated group/name - [DEFAULT]/rpc_zmq_matchmaker
|
|
#rpc_zmq_matchmaker = redis
|
|
|
|
# Number of ZeroMQ contexts, defaults to 1. (integer value)
|
|
# Deprecated group/name - [DEFAULT]/rpc_zmq_contexts
|
|
#rpc_zmq_contexts = 1
|
|
|
|
# Maximum number of ingress messages to locally buffer per topic. Default is
|
|
# unlimited. (integer value)
|
|
# Deprecated group/name - [DEFAULT]/rpc_zmq_topic_backlog
|
|
#rpc_zmq_topic_backlog = <None>
|
|
|
|
# Directory for holding IPC sockets. (string value)
|
|
# Deprecated group/name - [DEFAULT]/rpc_zmq_ipc_dir
|
|
#rpc_zmq_ipc_dir = /var/run/openstack
|
|
|
|
# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
|
|
# "host" option, if running Nova. (string value)
|
|
# Deprecated group/name - [DEFAULT]/rpc_zmq_host
|
|
#rpc_zmq_host = localhost
|
|
|
|
# Seconds to wait before a cast expires (TTL). The default value of -1 specifies
|
|
# an infinite linger period. The value of 0 specifies no linger period. Pending
|
|
# messages shall be discarded immediately when the socket is closed. Only
|
|
# supported by impl_zmq. (integer value)
|
|
# Deprecated group/name - [DEFAULT]/rpc_cast_timeout
|
|
#rpc_cast_timeout = -1
|
|
|
|
# The default number of seconds that poll should wait. Poll raises timeout
|
|
# exception when timeout expired. (integer value)
|
|
# Deprecated group/name - [DEFAULT]/rpc_poll_timeout
|
|
#rpc_poll_timeout = 1
|
|
|
|
# Expiration timeout in seconds of a name service record about existing target (
|
|
# < 0 means no timeout). (integer value)
|
|
# Deprecated group/name - [DEFAULT]/zmq_target_expire
|
|
#zmq_target_expire = 300
|
|
|
|
# Update period in seconds of a name service record about existing target.
|
|
# (integer value)
|
|
# Deprecated group/name - [DEFAULT]/zmq_target_update
|
|
#zmq_target_update = 180
|
|
|
|
# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
|
|
# value)
|
|
# Deprecated group/name - [DEFAULT]/use_pub_sub
|
|
#use_pub_sub = true
|
|
|
|
# Use ROUTER remote proxy. (boolean value)
|
|
# Deprecated group/name - [DEFAULT]/use_router_proxy
|
|
#use_router_proxy = true
|
|
|
|
# Minimal port number for random ports range. (port value)
|
|
# Minimum value: 0
|
|
# Maximum value: 65535
|
|
# Deprecated group/name - [DEFAULT]/rpc_zmq_min_port
|
|
#rpc_zmq_min_port = 49153
|
|
|
|
# Maximal port number for random ports range. (integer value)
|
|
# Minimum value: 1
|
|
# Maximum value: 65536
|
|
# Deprecated group/name - [DEFAULT]/rpc_zmq_max_port
|
|
#rpc_zmq_max_port = 65536
|
|
|
|
# Number of retries to find free port number before fail with ZMQBindError.
|
|
# (integer value)
|
|
# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_port_retries
|
|
#rpc_zmq_bind_port_retries = 100
|
|
|
|
# Default serialization mechanism for serializing/deserializing
|
|
# outgoing/incoming messages (string value)
|
|
# Allowed values: json, msgpack
|
|
# Deprecated group/name - [DEFAULT]/rpc_zmq_serialization
|
|
#rpc_zmq_serialization = json
|
|
|
|
# This option configures round-robin mode in zmq socket. True means not keeping
|
|
# a queue when server side disconnects. False means to keep queue and messages
|
|
# even if server is disconnected, when the server appears we send all
|
|
# accumulated messages to it. (boolean value)
|
|
#zmq_immediate = false
|
|
|
|
# Size of executor thread pool. (integer value)
|
|
# Deprecated group/name - [DEFAULT]/rpc_thread_pool_size
|
|
#executor_thread_pool_size = 64
|
|
|
|
# Seconds to wait for a response from a call. (integer value)
|
|
#rpc_response_timeout = 60
|
|
|
|
# A URL representing the messaging driver to use and its full configuration.
|
|
# (string value)
|
|
#transport_url = <None>
|
|
|
|
# DEPRECATED: The messaging driver to use, defaults to rabbit. Other drivers
|
|
# include amqp and zmq. (string value)
|
|
# This option is deprecated for removal.
|
|
# Its value may be silently ignored in the future.
|
|
# Reason: Replaced by [DEFAULT]/transport_url
|
|
#rpc_backend = rabbit
|
|
|
|
# The default exchange under which topics are scoped. May be overridden by an
|
|
# exchange name specified in the transport_url option. (string value)
|
|
#control_exchange = openstack
|
|
|
|
|
|
[database]
|
|
|
|
#
|
|
# From oslo.db
|
|
#
|
|
|
|
# DEPRECATED: The file name to use with SQLite. (string value)
|
|
# Deprecated group/name - [DEFAULT]/sqlite_db
|
|
# This option is deprecated for removal.
|
|
# Its value may be silently ignored in the future.
|
|
# Reason: Should use config option connection or slave_connection to connect the
|
|
# database.
|
|
#sqlite_db = oslo.sqlite
|
|
|
|
# If True, SQLite uses synchronous mode. (boolean value)
|
|
# Deprecated group/name - [DEFAULT]/sqlite_synchronous
|
|
#sqlite_synchronous = true
|
|
|
|
# The back end to use for the database. (string value)
|
|
# Deprecated group/name - [DEFAULT]/db_backend
|
|
#backend = sqlalchemy
|
|
|
|
# The SQLAlchemy connection string to use to connect to the database. (string
|
|
# value)
|
|
# Deprecated group/name - [DEFAULT]/sql_connection
|
|
# Deprecated group/name - [DATABASE]/sql_connection
|
|
# Deprecated group/name - [sql]/connection
|
|
#connection = <None>
|
|
|
|
# The SQLAlchemy connection string to use to connect to the slave database.
|
|
# (string value)
|
|
#slave_connection = <None>
|
|
|
|
# The SQL mode to be used for MySQL sessions. This option, including the
|
|
# default, overrides any server-set SQL mode. To use whatever SQL mode is set by
|
|
# the server configuration, set this to no value. Example: mysql_sql_mode=
|
|
# (string value)
|
|
#mysql_sql_mode = TRADITIONAL
|
|
|
|
# Timeout before idle SQL connections are reaped. (integer value)
|
|
# Deprecated group/name - [DEFAULT]/sql_idle_timeout
|
|
# Deprecated group/name - [DATABASE]/sql_idle_timeout
|
|
# Deprecated group/name - [sql]/idle_timeout
|
|
#idle_timeout = 3600
|
|
|
|
# Minimum number of SQL connections to keep open in a pool. (integer value)
|
|
# Deprecated group/name - [DEFAULT]/sql_min_pool_size
|
|
# Deprecated group/name - [DATABASE]/sql_min_pool_size
|
|
#min_pool_size = 1
|
|
|
|
# Maximum number of SQL connections to keep open in a pool. Setting a value of 0
|
|
# indicates no limit. (integer value)
|
|
# Deprecated group/name - [DEFAULT]/sql_max_pool_size
|
|
# Deprecated group/name - [DATABASE]/sql_max_pool_size
|
|
#max_pool_size = 5
|
|
|
|
# Maximum number of database connection retries during startup. Set to -1 to
|
|
# specify an infinite retry count. (integer value)
|
|
# Deprecated group/name - [DEFAULT]/sql_max_retries
|
|
# Deprecated group/name - [DATABASE]/sql_max_retries
|
|
#max_retries = 10
|
|
|
|
# Interval between retries of opening a SQL connection. (integer value)
|
|
# Deprecated group/name - [DEFAULT]/sql_retry_interval
|
|
# Deprecated group/name - [DATABASE]/reconnect_interval
|
|
#retry_interval = 10
|
|
|
|
# If set, use this value for max_overflow with SQLAlchemy. (integer value)
|
|
# Deprecated group/name - [DEFAULT]/sql_max_overflow
|
|
# Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
|
|
#max_overflow = 50
|
|
|
|
# Verbosity of SQL debugging information: 0=None, 100=Everything. (integer
|
|
# value)
|
|
# Minimum value: 0
|
|
# Maximum value: 100
|
|
# Deprecated group/name - [DEFAULT]/sql_connection_debug
|
|
#connection_debug = 0
|
|
|
|
# Add Python stack traces to SQL as comment strings. (boolean value)
|
|
# Deprecated group/name - [DEFAULT]/sql_connection_trace
|
|
#connection_trace = false
|
|
|
|
# If set, use this value for pool_timeout with SQLAlchemy. (integer value)
|
|
# Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
|
|
#pool_timeout = <None>
|
|
|
|
# Enable the experimental use of database reconnect on connection lost. (boolean
|
|
# value)
|
|
#use_db_reconnect = false
|
|
|
|
# Seconds between retries of a database transaction. (integer value)
|
|
#db_retry_interval = 1
|
|
|
|
# If True, increases the interval between retries of a database operation up to
|
|
# db_max_retry_interval. (boolean value)
|
|
#db_inc_retry_interval = true
|
|
|
|
# If db_inc_retry_interval is set, the maximum seconds between retries of a
|
|
# database operation. (integer value)
|
|
#db_max_retry_interval = 10
|
|
|
|
# Maximum retries in case of connection error or deadlock error before error is
|
|
# raised. Set to -1 to specify an infinite retry count. (integer value)
|
|
#db_max_retries = 20
|
|
|
|
#
|
|
# From oslo.db.concurrency
|
|
#
|
|
|
|
# Enable the experimental use of thread pooling for all DB API calls (boolean
|
|
# value)
|
|
# Deprecated group/name - [DEFAULT]/dbapi_use_tpool
|
|
#use_tpool = false
|
|
|
|
|
|
[keystone_authtoken]
|
|
|
|
#
|
|
# From keystonemiddleware.auth_token
|
|
#
|
|
|
|
# Complete "public" Identity API endpoint. This endpoint should not be an
|
|
# "admin" endpoint, as it should be accessible by all end users. Unauthenticated
|
|
# clients are redirected to this endpoint to authenticate. Although this
|
|
# endpoint should ideally be unversioned, client support in the wild varies.
|
|
# If you're using a versioned v2 endpoint here, then this should *not* be the
|
|
# same endpoint the service user utilizes for validating tokens, because normal
|
|
# end users may not be able to reach that endpoint. (string value)
|
|
#auth_uri = <None>
|
|
|
|
# API version of the admin Identity API endpoint. (string value)
|
|
#auth_version = <None>
|
|
|
|
# Do not handle authorization requests within the middleware, but delegate the
|
|
# authorization decision to downstream WSGI components. (boolean value)
|
|
#delay_auth_decision = false
|
|
|
|
# Request timeout value for communicating with Identity API server. (integer
|
|
# value)
|
|
#http_connect_timeout = <None>
|
|
|
|
# How many times are we trying to reconnect when communicating with Identity API
|
|
# Server. (integer value)
|
|
#http_request_max_retries = 3
|
|
|
|
# Request environment key where the Swift cache object is stored. When
|
|
# auth_token middleware is deployed with a Swift cache, use this option to have
|
|
# the middleware share a caching backend with swift. Otherwise, use the
|
|
# ``memcached_servers`` option instead. (string value)
|
|
#cache = <None>
|
|
|
|
# Required if identity server requires client certificate (string value)
|
|
#certfile = <None>
|
|
|
|
# Required if identity server requires client certificate (string value)
|
|
#keyfile = <None>
|
|
|
|
# A PEM encoded Certificate Authority to use when verifying HTTPs connections.
|
|
# Defaults to system CAs. (string value)
|
|
#cafile = <None>
|
|
|
|
# Verify HTTPS connections. (boolean value)
|
|
#insecure = false
|
|
|
|
# The region in which the identity server can be found. (string value)
|
|
#region_name = <None>
|
|
|
|
# Directory used to cache files related to PKI tokens. (string value)
|
|
#signing_dir = <None>
|
|
|
|
# Optionally specify a list of memcached server(s) to use for caching. If left
|
|
# undefined, tokens will instead be cached in-process. (list value)
|
|
# Deprecated group/name - [keystone_authtoken]/memcache_servers
|
|
#memcached_servers = <None>
|
|
|
|
# In order to prevent excessive effort spent validating tokens, the middleware
|
|
# caches previously-seen tokens for a configurable duration (in seconds). Set to
|
|
# -1 to disable caching completely. (integer value)
|
|
#token_cache_time = 300
|
|
|
|
# Determines the frequency at which the list of revoked tokens is retrieved from
|
|
# the Identity service (in seconds). A high number of revocation events combined
|
|
# with a low cache duration may significantly reduce performance. Only valid for
|
|
# PKI tokens. (integer value)
|
|
#revocation_cache_time = 10
|
|
|
|
# (Optional) If defined, indicate whether token data should be authenticated or
|
|
# authenticated and encrypted. If MAC, token data is authenticated (with HMAC)
|
|
# in the cache. If ENCRYPT, token data is encrypted and authenticated in the
|
|
# cache. If the value is not one of these options or empty, auth_token will
|
|
# raise an exception on initialization. (string value)
|
|
# Allowed values: None, MAC, ENCRYPT
|
|
#memcache_security_strategy = None
|
|
|
|
# (Optional, mandatory if memcache_security_strategy is defined) This string is
|
|
# used for key derivation. (string value)
|
|
#memcache_secret_key = <None>
|
|
|
|
# (Optional) Number of seconds memcached server is considered dead before it is
|
|
# tried again. (integer value)
|
|
#memcache_pool_dead_retry = 300
|
|
|
|
# (Optional) Maximum total number of open connections to every memcached server.
|
|
# (integer value)
|
|
#memcache_pool_maxsize = 10
|
|
|
|
# (Optional) Socket timeout in seconds for communicating with a memcached
|
|
# server. (integer value)
|
|
#memcache_pool_socket_timeout = 3
|
|
|
|
# (Optional) Number of seconds a connection to memcached is held unused in the
|
|
# pool before it is closed. (integer value)
|
|
#memcache_pool_unused_timeout = 60
|
|
|
|
# (Optional) Number of seconds that an operation will wait to get a memcached
|
|
# client connection from the pool. (integer value)
|
|
#memcache_pool_conn_get_timeout = 10
|
|
|
|
# (Optional) Use the advanced (eventlet safe) memcached client pool. The
|
|
# advanced pool will only work under python 2.x. (boolean value)
|
|
#memcache_use_advanced_pool = false
|
|
|
|
# (Optional) Indicate whether to set the X-Service-Catalog header. If False,
|
|
# middleware will not ask for service catalog on token validation and will not
|
|
# set the X-Service-Catalog header. (boolean value)
|
|
#include_service_catalog = true
|
|
|
|
# Used to control the use and type of token binding. Can be set to: "disabled"
|
|
# to not check token binding. "permissive" (default) to validate binding
|
|
# information if the bind type is of a form known to the server and ignore it if
|
|
# not. "strict" like "permissive" but if the bind type is unknown the token will
|
|
# be rejected. "required" any form of token binding is needed to be allowed.
|
|
# Finally the name of a binding method that must be present in tokens. (string
|
|
# value)
|
|
#enforce_token_bind = permissive
|
|
|
|
# If true, the revocation list will be checked for cached tokens. This requires
|
|
# that PKI tokens are configured on the identity server. (boolean value)
|
|
#check_revocations_for_cached = false
|
|
|
|
# Hash algorithms to use for hashing PKI tokens. This may be a single algorithm
|
|
# or multiple. The algorithms are those supported by Python standard
|
|
# hashlib.new(). The hashes will be tried in the order given, so put the
|
|
# preferred one first for performance. The result of the first hash will be
|
|
# stored in the cache. This will typically be set to multiple values only while
|
|
# migrating from a less secure algorithm to a more secure one. Once all the old
|
|
# tokens are expired this option should be set to a single value for better
|
|
# performance. (list value)
|
|
#hash_algorithms = md5
|
|
|
|
# Authentication type to load (string value)
|
|
# Deprecated group/name - [keystone_authtoken]/auth_plugin
|
|
#auth_type = <None>
|
|
|
|
# Config Section from which to load plugin specific options (string value)
|
|
#auth_section = <None>
|
|
|
|
|
|
[matchmaker_redis]
|
|
|
|
#
|
|
# From oslo.messaging
|
|
#
|
|
|
|
# DEPRECATED: Host to locate redis. (string value)
|
|
# This option is deprecated for removal.
|
|
# Its value may be silently ignored in the future.
|
|
# Reason: Replaced by [DEFAULT]/transport_url
|
|
#host = 127.0.0.1
|
|
|
|
# DEPRECATED: Use this port to connect to redis host. (port value)
|
|
# Minimum value: 0
|
|
# Maximum value: 65535
|
|
# This option is deprecated for removal.
|
|
# Its value may be silently ignored in the future.
|
|
# Reason: Replaced by [DEFAULT]/transport_url
|
|
#port = 6379
|
|
|
|
# DEPRECATED: Password for Redis server (optional). (string value)
|
|
# This option is deprecated for removal.
|
|
# Its value may be silently ignored in the future.
|
|
# Reason: Replaced by [DEFAULT]/transport_url
|
|
#password =
|
|
|
|
# DEPRECATED: List of Redis Sentinel hosts (fault tolerance mode) e.g.
|
|
# [host:port, host1:port ... ] (list value)
|
|
# This option is deprecated for removal.
|
|
# Its value may be silently ignored in the future.
|
|
# Reason: Replaced by [DEFAULT]/transport_url
|
|
#sentinel_hosts =
|
|
|
|
# Redis replica set name. (string value)
|
|
#sentinel_group_name = oslo-messaging-zeromq
|
|
|
|
# Time in ms to wait between connection attempts. (integer value)
|
|
#wait_timeout = 2000
|
|
|
|
# Time in ms to wait before the transaction is killed. (integer value)
|
|
#check_timeout = 20000
|
|
|
|
# Timeout in ms on blocking socket operations (integer value)
|
|
#socket_timeout = 10000
|
|
|
|
|
|
[oslo_messaging_amqp]
|
|
|
|
#
|
|
# From oslo.messaging
|
|
#
|
|
|
|
# Name for the AMQP container. must be globally unique. Defaults to a generated
|
|
# UUID (string value)
|
|
# Deprecated group/name - [amqp1]/container_name
|
|
#container_name = <None>
|
|
|
|
# Timeout for inactive connections (in seconds) (integer value)
|
|
# Deprecated group/name - [amqp1]/idle_timeout
|
|
#idle_timeout = 0
|
|
|
|
# Debug: dump AMQP frames to stdout (boolean value)
|
|
# Deprecated group/name - [amqp1]/trace
|
|
#trace = false
|
|
|
|
# CA certificate PEM file to verify server certificate (string value)
|
|
# Deprecated group/name - [amqp1]/ssl_ca_file
|
|
#ssl_ca_file =
|
|
|
|
# Identifying certificate PEM file to present to clients (string value)
|
|
# Deprecated group/name - [amqp1]/ssl_cert_file
|
|
#ssl_cert_file =
|
|
|
|
# Private key PEM file used to sign cert_file certificate (string value)
|
|
# Deprecated group/name - [amqp1]/ssl_key_file
|
|
#ssl_key_file =
|
|
|
|
# Password for decrypting ssl_key_file (if encrypted) (string value)
|
|
# Deprecated group/name - [amqp1]/ssl_key_password
|
|
#ssl_key_password = <None>
|
|
|
|
# Accept clients using either SSL or plain TCP (boolean value)
|
|
# Deprecated group/name - [amqp1]/allow_insecure_clients
|
|
#allow_insecure_clients = false
|
|
|
|
# Space separated list of acceptable SASL mechanisms (string value)
|
|
# Deprecated group/name - [amqp1]/sasl_mechanisms
|
|
#sasl_mechanisms =
|
|
|
|
# Path to directory that contains the SASL configuration (string value)
|
|
# Deprecated group/name - [amqp1]/sasl_config_dir
|
|
#sasl_config_dir =
|
|
|
|
# Name of configuration file (without .conf suffix) (string value)
|
|
# Deprecated group/name - [amqp1]/sasl_config_name
|
|
#sasl_config_name =
|
|
|
|
# User name for message broker authentication (string value)
|
|
# Deprecated group/name - [amqp1]/username
|
|
#username =
|
|
|
|
# Password for message broker authentication (string value)
|
|
# Deprecated group/name - [amqp1]/password
|
|
#password =
|
|
|
|
# Seconds to pause before attempting to re-connect. (integer value)
|
|
# Minimum value: 1
|
|
#connection_retry_interval = 1
|
|
|
|
# Increase the connection_retry_interval by this many seconds after each
|
|
# unsuccessful failover attempt. (integer value)
|
|
# Minimum value: 0
|
|
#connection_retry_backoff = 2
|
|
|
|
# Maximum limit for connection_retry_interval + connection_retry_backoff
|
|
# (integer value)
|
|
# Minimum value: 1
|
|
#connection_retry_interval_max = 30
|
|
|
|
# Time to pause between re-connecting an AMQP 1.0 link that failed due to a
|
|
# recoverable error. (integer value)
|
|
# Minimum value: 1
|
|
#link_retry_delay = 10
|
|
|
|
# The deadline for an rpc reply message delivery. Only used when caller does not
|
|
# provide a timeout expiry. (integer value)
|
|
# Minimum value: 5
|
|
#default_reply_timeout = 30
|
|
|
|
# The deadline for an rpc cast or call message delivery. Only used when caller
|
|
# does not provide a timeout expiry. (integer value)
|
|
# Minimum value: 5
|
|
#default_send_timeout = 30
|
|
|
|
# The deadline for a sent notification message delivery. Only used when caller
|
|
# does not provide a timeout expiry. (integer value)
|
|
# Minimum value: 5
|
|
#default_notify_timeout = 30
|
|
|
|
# Indicates the addressing mode used by the driver.
|
|
# Permitted values:
|
|
# 'legacy' - use legacy non-routable addressing
|
|
# 'routable' - use routable addresses
|
|
# 'dynamic' - use legacy addresses if the message bus does not support routing
|
|
# otherwise use routable addressing (string value)
|
|
#addressing_mode = dynamic
|
|
|
|
# address prefix used when sending to a specific server (string value)
|
|
# Deprecated group/name - [amqp1]/server_request_prefix
|
|
#server_request_prefix = exclusive
|
|
|
|
# address prefix used when broadcasting to all servers (string value)
|
|
# Deprecated group/name - [amqp1]/broadcast_prefix
|
|
#broadcast_prefix = broadcast
|
|
|
|
# address prefix when sending to any server in group (string value)
|
|
# Deprecated group/name - [amqp1]/group_request_prefix
|
|
#group_request_prefix = unicast
|
|
|
|
# Address prefix for all generated RPC addresses (string value)
|
|
#rpc_address_prefix = openstack.org/om/rpc
|
|
|
|
# Address prefix for all generated Notification addresses (string value)
|
|
#notify_address_prefix = openstack.org/om/notify
|
|
|
|
# Appended to the address prefix when sending a fanout message. Used by the
|
|
# message bus to identify fanout messages. (string value)
|
|
#multicast_address = multicast
|
|
|
|
# Appended to the address prefix when sending to a particular RPC/Notification
|
|
# server. Used by the message bus to identify messages sent to a single
|
|
# destination. (string value)
|
|
#unicast_address = unicast
|
|
|
|
# Appended to the address prefix when sending to a group of consumers. Used by
|
|
# the message bus to identify messages that should be delivered in a round-robin
|
|
# fashion across consumers. (string value)
|
|
#anycast_address = anycast
|
|
|
|
# Exchange name used in notification addresses.
|
|
# Exchange name resolution precedence:
|
|
# Target.exchange if set
|
|
# else default_notification_exchange if set
|
|
# else control_exchange if set
|
|
# else 'notify' (string value)
|
|
#default_notification_exchange = <None>
|
|
|
|
# Exchange name used in RPC addresses.
|
|
# Exchange name resolution precedence:
|
|
# Target.exchange if set
|
|
# else default_rpc_exchange if set
|
|
# else control_exchange if set
|
|
# else 'rpc' (string value)
|
|
#default_rpc_exchange = <None>
|
|
|
|
# Window size for incoming RPC Reply messages. (integer value)
|
|
# Minimum value: 1
|
|
#reply_link_credit = 200
|
|
|
|
# Window size for incoming RPC Request messages (integer value)
|
|
# Minimum value: 1
|
|
#rpc_server_credit = 100
|
|
|
|
# Window size for incoming Notification messages (integer value)
|
|
# Minimum value: 1
|
|
#notify_server_credit = 100
|
|
|
|
|
|
[oslo_messaging_notifications]
|
|
|
|
#
|
|
# From oslo.messaging
|
|
#
|
|
|
|
# The Drivers(s) to handle sending notifications. Possible values are messaging,
|
|
# messagingv2, routing, log, test, noop (multi valued)
|
|
# Deprecated group/name - [DEFAULT]/notification_driver
|
|
#driver =
|
|
|
|
# A URL representing the messaging driver to use for notifications. If not set,
|
|
# we fall back to the same configuration used for RPC. (string value)
|
|
# Deprecated group/name - [DEFAULT]/notification_transport_url
|
|
#transport_url = <None>
|
|
|
|
# AMQP topic used for OpenStack notifications. (list value)
|
|
# Deprecated group/name - [rpc_notifier2]/topics
|
|
# Deprecated group/name - [DEFAULT]/notification_topics
|
|
#topics = notifications
|
|
|
|
|
|
[oslo_messaging_rabbit]
|
|
|
|
#
|
|
# From oslo.messaging
|
|
#
|
|
|
|
# Use durable queues in AMQP. (boolean value)
|
|
# Deprecated group/name - [DEFAULT]/amqp_durable_queues
|
|
# Deprecated group/name - [DEFAULT]/rabbit_durable_queues
|
|
#amqp_durable_queues = false
|
|
|
|
# Auto-delete queues in AMQP. (boolean value)
|
|
# Deprecated group/name - [DEFAULT]/amqp_auto_delete
|
|
#amqp_auto_delete = false
|
|
|
|
# SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and
|
|
# SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some
|
|
# distributions. (string value)
|
|
# Deprecated group/name - [DEFAULT]/kombu_ssl_version
|
|
#kombu_ssl_version =
|
|
|
|
# SSL key file (valid only if SSL enabled). (string value)
|
|
# Deprecated group/name - [DEFAULT]/kombu_ssl_keyfile
|
|
#kombu_ssl_keyfile =
|
|
|
|
# SSL cert file (valid only if SSL enabled). (string value)
|
|
# Deprecated group/name - [DEFAULT]/kombu_ssl_certfile
|
|
#kombu_ssl_certfile =
|
|
|
|
# SSL certification authority file (valid only if SSL enabled). (string value)
|
|
# Deprecated group/name - [DEFAULT]/kombu_ssl_ca_certs
|
|
#kombu_ssl_ca_certs =
|
|
|
|
# How long to wait before reconnecting in response to an AMQP consumer cancel
|
|
# notification. (floating point value)
|
|
# Deprecated group/name - [DEFAULT]/kombu_reconnect_delay
|
|
#kombu_reconnect_delay = 1.0
|
|
|
|
# EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression will not
|
|
# be used. This option may not be available in future versions. (string value)
|
|
#kombu_compression = <None>
|
|
|
|
# How long to wait a missing client before abandoning to send it its replies.
|
|
# This value should not be longer than rpc_response_timeout. (integer value)
|
|
# Deprecated group/name - [oslo_messaging_rabbit]/kombu_reconnect_timeout
|
|
#kombu_missing_consumer_retry_timeout = 60
|
|
|
|
# Determines how the next RabbitMQ node is chosen in case the one we are
|
|
# currently connected to becomes unavailable. Takes effect only if more than one
|
|
# RabbitMQ node is provided in config. (string value)
|
|
# Allowed values: round-robin, shuffle
|
|
#kombu_failover_strategy = round-robin
|
|
|
|
# DEPRECATED: The RabbitMQ broker address where a single node is used. (string
|
|
# value)
|
|
# Deprecated group/name - [DEFAULT]/rabbit_host
|
|
# This option is deprecated for removal.
|
|
# Its value may be silently ignored in the future.
|
|
# Reason: Replaced by [DEFAULT]/transport_url
|
|
#rabbit_host = localhost
|
|
|
|
# DEPRECATED: The RabbitMQ broker port where a single node is used. (port value)
|
|
# Minimum value: 0
|
|
# Maximum value: 65535
|
|
# Deprecated group/name - [DEFAULT]/rabbit_port
|
|
# This option is deprecated for removal.
|
|
# Its value may be silently ignored in the future.
|
|
# Reason: Replaced by [DEFAULT]/transport_url
|
|
#rabbit_port = 5672
|
|
|
|
# DEPRECATED: RabbitMQ HA cluster host:port pairs. (list value)
|
|
# Deprecated group/name - [DEFAULT]/rabbit_hosts
|
|
# This option is deprecated for removal.
|
|
# Its value may be silently ignored in the future.
|
|
# Reason: Replaced by [DEFAULT]/transport_url
|
|
#rabbit_hosts = $rabbit_host:$rabbit_port
|
|
|
|
# Connect over SSL for RabbitMQ. (boolean value)
|
|
# Deprecated group/name - [DEFAULT]/rabbit_use_ssl
|
|
#rabbit_use_ssl = false
|
|
|
|
# DEPRECATED: The RabbitMQ userid. (string value)
|
|
# Deprecated group/name - [DEFAULT]/rabbit_userid
|
|
# This option is deprecated for removal.
|
|
# Its value may be silently ignored in the future.
|
|
# Reason: Replaced by [DEFAULT]/transport_url
|
|
#rabbit_userid = guest
|
|
|
|
# DEPRECATED: The RabbitMQ password. (string value)
|
|
# Deprecated group/name - [DEFAULT]/rabbit_password
|
|
# This option is deprecated for removal.
|
|
# Its value may be silently ignored in the future.
|
|
# Reason: Replaced by [DEFAULT]/transport_url
|
|
#rabbit_password = guest
|
|
|
|
# The RabbitMQ login method. (string value)
|
|
# Deprecated group/name - [DEFAULT]/rabbit_login_method
|
|
#rabbit_login_method = AMQPLAIN
|
|
|
|
# DEPRECATED: The RabbitMQ virtual host. (string value)
|
|
# Deprecated group/name - [DEFAULT]/rabbit_virtual_host
|
|
# This option is deprecated for removal.
|
|
# Its value may be silently ignored in the future.
|
|
# Reason: Replaced by [DEFAULT]/transport_url
|
|
#rabbit_virtual_host = /
|
|
|
|
# How frequently to retry connecting with RabbitMQ. (integer value)
|
|
#rabbit_retry_interval = 1
|
|
|
|
# How long to backoff for between retries when connecting to RabbitMQ. (integer
|
|
# value)
|
|
# Deprecated group/name - [DEFAULT]/rabbit_retry_backoff
|
|
#rabbit_retry_backoff = 2
|
|
|
|
# Maximum interval of RabbitMQ connection retries. Default is 30 seconds.
|
|
# (integer value)
|
|
#rabbit_interval_max = 30
|
|
|
|
# DEPRECATED: Maximum number of RabbitMQ connection retries. Default is 0
|
|
# (infinite retry count). (integer value)
|
|
# Deprecated group/name - [DEFAULT]/rabbit_max_retries
|
|
# This option is deprecated for removal.
|
|
# Its value may be silently ignored in the future.
|
|
#rabbit_max_retries = 0
|
|
|
|
# Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change this
|
|
# option, you must wipe the RabbitMQ database. In RabbitMQ 3.0, queue mirroring
|
|
# is no longer controlled by the x-ha-policy argument when declaring a queue. If
|
|
# you just want to make sure that all queues (except those with auto-generated
|
|
# names) are mirrored across all nodes, run: "rabbitmqctl set_policy HA
|
|
# '^(?!amq\.).*' '{"ha-mode": "all"}' " (boolean value)
|
|
# Deprecated group/name - [DEFAULT]/rabbit_ha_queues
|
|
#rabbit_ha_queues = false
|
|
|
|
# Positive integer representing duration in seconds for queue TTL (x-expires).
|
|
# Queues which are unused for the duration of the TTL are automatically deleted.
|
|
# The parameter affects only reply and fanout queues. (integer value)
|
|
# Minimum value: 1
|
|
#rabbit_transient_queues_ttl = 1800
|
|
|
|
# Specifies the number of messages to prefetch. Setting to zero allows unlimited
|
|
# messages. (integer value)
|
|
#rabbit_qos_prefetch_count = 0
|
|
|
|
# Number of seconds after which the Rabbit broker is considered down if
|
|
# heartbeat's keep-alive fails (0 disable the heartbeat). EXPERIMENTAL (integer
|
|
# value)
|
|
#heartbeat_timeout_threshold = 60
|
|
|
|
# How often times during the heartbeat_timeout_threshold we check the heartbeat.
|
|
# (integer value)
|
|
#heartbeat_rate = 2
|
|
|
|
# Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake (boolean value)
|
|
# Deprecated group/name - [DEFAULT]/fake_rabbit
|
|
#fake_rabbit = false
|
|
|
|
# Maximum number of channels to allow (integer value)
|
|
#channel_max = <None>
|
|
|
|
# The maximum byte size for an AMQP frame (integer value)
|
|
#frame_max = <None>
|
|
|
|
# How often to send heartbeats for consumer's connections (integer value)
|
|
#heartbeat_interval = 3
|
|
|
|
# Enable SSL (boolean value)
|
|
#ssl = <None>
|
|
|
|
# Arguments passed to ssl.wrap_socket (dict value)
|
|
#ssl_options = <None>
|
|
|
|
# Set socket timeout in seconds for connection's socket (floating point value)
|
|
#socket_timeout = 0.25
|
|
|
|
# Set TCP_USER_TIMEOUT in seconds for connection's socket (floating point value)
|
|
#tcp_user_timeout = 0.25
|
|
|
|
# Set delay for reconnection to some host which has connection error (floating
|
|
# point value)
|
|
#host_connection_reconnect_delay = 0.25
|
|
|
|
# Connection factory implementation (string value)
|
|
# Allowed values: new, single, read_write
|
|
#connection_factory = single
|
|
|
|
# Maximum number of connections to keep queued. (integer value)
|
|
#pool_max_size = 30
|
|
|
|
# Maximum number of connections to create above `pool_max_size`. (integer value)
|
|
#pool_max_overflow = 0
|
|
|
|
# Default number of seconds to wait for a connections to available (integer
|
|
# value)
|
|
#pool_timeout = 30
|
|
|
|
# Lifetime of a connection (since creation) in seconds or None for no recycling.
|
|
# Expired connections are closed on acquire. (integer value)
|
|
#pool_recycle = 600
|
|
|
|
# Threshold at which inactive (since release) connections are considered stale
|
|
# in seconds or None for no staleness. Stale connections are closed on acquire.
|
|
# (integer value)
|
|
#pool_stale = 60
|
|
|
|
# Persist notification messages. (boolean value)
|
|
#notification_persistence = false
|
|
|
|
# Exchange name for sending notifications (string value)
|
|
#default_notification_exchange = ${control_exchange}_notification
|
|
|
|
# Max number of not acknowledged message which RabbitMQ can send to notification
|
|
# listener. (integer value)
|
|
#notification_listener_prefetch_count = 100
|
|
|
|
# Reconnecting retry count in case of connectivity problem during sending
|
|
# notification, -1 means infinite retry. (integer value)
|
|
#default_notification_retry_attempts = -1
|
|
|
|
# Reconnecting retry delay in case of connectivity problem during sending
|
|
# notification message (floating point value)
|
|
#notification_retry_delay = 0.25
|
|
|
|
# Time to live for rpc queues without consumers in seconds. (integer value)
|
|
#rpc_queue_expiration = 60
|
|
|
|
# Exchange name for sending RPC messages (string value)
|
|
#default_rpc_exchange = ${control_exchange}_rpc
|
|
|
|
# Exchange name for receiving RPC replies (string value)
|
|
#rpc_reply_exchange = ${control_exchange}_rpc_reply
|
|
|
|
# Max number of not acknowledged message which RabbitMQ can send to rpc
|
|
# listener. (integer value)
|
|
#rpc_listener_prefetch_count = 100
|
|
|
|
# Max number of not acknowledged message which RabbitMQ can send to rpc reply
|
|
# listener. (integer value)
|
|
#rpc_reply_listener_prefetch_count = 100
|
|
|
|
# Reconnecting retry count in case of connectivity problem during sending reply.
|
|
# -1 means infinite retry during rpc_timeout (integer value)
|
|
#rpc_reply_retry_attempts = -1
|
|
|
|
# Reconnecting retry delay in case of connectivity problem during sending reply.
|
|
# (floating point value)
|
|
#rpc_reply_retry_delay = 0.25
|
|
|
|
# Reconnecting retry count in case of connectivity problem during sending RPC
|
|
# message, -1 means infinite retry. If actual retry attempts in not 0 the rpc
|
|
# request could be processed more then one time (integer value)
|
|
#default_rpc_retry_attempts = -1
|
|
|
|
# Reconnecting retry delay in case of connectivity problem during sending RPC
|
|
# message (floating point value)
|
|
#rpc_retry_delay = 0.25
|
|
|
|
|
|
[oslo_messaging_zmq]
|
|
|
|
#
|
|
# From oslo.messaging
|
|
#
|
|
|
|
# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
|
|
# The "host" option should point or resolve to this address. (string value)
|
|
# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_address
|
|
#rpc_zmq_bind_address = *
|
|
|
|
# MatchMaker driver. (string value)
|
|
# Allowed values: redis, dummy
|
|
# Deprecated group/name - [DEFAULT]/rpc_zmq_matchmaker
|
|
#rpc_zmq_matchmaker = redis
|
|
|
|
# Number of ZeroMQ contexts, defaults to 1. (integer value)
|
|
# Deprecated group/name - [DEFAULT]/rpc_zmq_contexts
|
|
#rpc_zmq_contexts = 1
|
|
|
|
# Maximum number of ingress messages to locally buffer per topic. Default is
|
|
# unlimited. (integer value)
|
|
# Deprecated group/name - [DEFAULT]/rpc_zmq_topic_backlog
|
|
#rpc_zmq_topic_backlog = <None>
|
|
|
|
# Directory for holding IPC sockets. (string value)
|
|
# Deprecated group/name - [DEFAULT]/rpc_zmq_ipc_dir
|
|
#rpc_zmq_ipc_dir = /var/run/openstack
|
|
|
|
# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
|
|
# "host" option, if running Nova. (string value)
|
|
# Deprecated group/name - [DEFAULT]/rpc_zmq_host
|
|
#rpc_zmq_host = localhost
|
|
|
|
# Seconds to wait before a cast expires (TTL). The default value of -1 specifies
|
|
# an infinite linger period. The value of 0 specifies no linger period. Pending
|
|
# messages shall be discarded immediately when the socket is closed. Only
|
|
# supported by impl_zmq. (integer value)
|
|
# Deprecated group/name - [DEFAULT]/rpc_cast_timeout
|
|
#rpc_cast_timeout = -1
|
|
|
|
# The default number of seconds that poll should wait. Poll raises timeout
|
|
# exception when timeout expired. (integer value)
|
|
# Deprecated group/name - [DEFAULT]/rpc_poll_timeout
|
|
#rpc_poll_timeout = 1
|
|
|
|
# Expiration timeout in seconds of a name service record about existing target (
|
|
# < 0 means no timeout). (integer value)
|
|
# Deprecated group/name - [DEFAULT]/zmq_target_expire
|
|
#zmq_target_expire = 300
|
|
|
|
# Update period in seconds of a name service record about existing target.
|
|
# (integer value)
|
|
# Deprecated group/name - [DEFAULT]/zmq_target_update
|
|
#zmq_target_update = 180
|
|
|
|
# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
|
|
# value)
|
|
# Deprecated group/name - [DEFAULT]/use_pub_sub
|
|
#use_pub_sub = true
|
|
|
|
# Use ROUTER remote proxy. (boolean value)
|
|
# Deprecated group/name - [DEFAULT]/use_router_proxy
|
|
#use_router_proxy = true
|
|
|
|
# Minimal port number for random ports range. (port value)
|
|
# Minimum value: 0
|
|
# Maximum value: 65535
|
|
# Deprecated group/name - [DEFAULT]/rpc_zmq_min_port
|
|
#rpc_zmq_min_port = 49153
|
|
|
|
# Maximal port number for random ports range. (integer value)
|
|
# Minimum value: 1
|
|
# Maximum value: 65536
|
|
# Deprecated group/name - [DEFAULT]/rpc_zmq_max_port
|
|
#rpc_zmq_max_port = 65536
|
|
|
|
# Number of retries to find free port number before fail with ZMQBindError.
|
|
# (integer value)
|
|
# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_port_retries
|
|
#rpc_zmq_bind_port_retries = 100
|
|
|
|
# Default serialization mechanism for serializing/deserializing
|
|
# outgoing/incoming messages (string value)
|
|
# Allowed values: json, msgpack
|
|
# Deprecated group/name - [DEFAULT]/rpc_zmq_serialization
|
|
#rpc_zmq_serialization = json
|
|
|
|
# This option configures round-robin mode in zmq socket. True means not keeping
|
|
# a queue when server side disconnects. False means to keep queue and messages
|
|
# even if server is disconnected, when the server appears we send all
|
|
# accumulated messages to it. (boolean value)
|
|
#zmq_immediate = false
|
|
|
|
|
|
[oslo_policy]
|
|
|
|
#
|
|
# From oslo.policy
|
|
#
|
|
|
|
# The JSON file that defines policies. (string value)
|
|
# Deprecated group/name - [DEFAULT]/policy_file
|
|
#policy_file = policy.json
|
|
|
|
# Default rule. Enforced when a requested rule is not found. (string value)
|
|
# Deprecated group/name - [DEFAULT]/policy_default_rule
|
|
#policy_default_rule = default
|
|
|
|
# Directories where policy configuration files are stored. They can be relative
|
|
# to any directory in the search path defined by the config_dir option, or
|
|
# absolute paths. The file defined by policy_file must exist for these
|
|
# directories to be searched. Missing or empty directories are ignored. (multi
|
|
# valued)
|
|
# Deprecated group/name - [DEFAULT]/policy_dirs
|
|
#policy_dirs = policy.d
|
|
|
|
|
|
[paste_deploy]
|
|
|
|
#
|
|
# From glance.registry
|
|
#
|
|
|
|
#
|
|
# Deployment flavor to use in the server application pipeline.
|
|
#
|
|
# Provide a string value representing the appropriate deployment
|
|
# flavor used in the server application pipleline. This is typically
|
|
# the partial name of a pipeline in the paste configuration file with
|
|
# the service name removed.
|
|
#
|
|
# For example, if your paste section name in the paste configuration
|
|
# file is [pipeline:glance-api-keystone], set ``flavor`` to
|
|
# ``keystone``.
|
|
#
|
|
# Possible values:
|
|
# * String value representing a partial pipeline name.
|
|
#
|
|
# Related Options:
|
|
# * config_file
|
|
#
|
|
# (string value)
|
|
#flavor = keystone
|
|
|
|
#
|
|
# Name of the paste configuration file.
|
|
#
|
|
# Provide a string value representing the name of the paste
|
|
# configuration file to use for configuring piplelines for
|
|
# server application deployments.
|
|
#
|
|
# NOTES:
|
|
# * Provide the name or the path relative to the glance directory
|
|
# for the paste configuration file and not the absolute path.
|
|
# * The sample paste configuration file shipped with Glance need
|
|
# not be edited in most cases as it comes with ready-made
|
|
# pipelines for all common deployment flavors.
|
|
#
|
|
# If no value is specified for this option, the ``paste.ini`` file
|
|
# with the prefix of the corresponding Glance service's configuration
|
|
# file name will be searched for in the known configuration
|
|
# directories. (For example, if this option is missing from or has no
|
|
# value set in ``glance-api.conf``, the service will look for a file
|
|
# named ``glance-api-paste.ini``.) If the paste configuration file is
|
|
# not found, the service will not start.
|
|
#
|
|
# Possible values:
|
|
# * A string value representing the name of the paste configuration
|
|
# file.
|
|
#
|
|
# Related Options:
|
|
# * flavor
|
|
#
|
|
# (string value)
|
|
#config_file = glance-api-paste.ini
|
|
|
|
|
|
[profiler]
|
|
|
|
#
|
|
# From glance.registry
|
|
#
|
|
|
|
#
|
|
# Enables the profiling for all services on this node. Default value is False
|
|
# (fully disable the profiling feature).
|
|
#
|
|
# Possible values:
|
|
#
|
|
# * True: Enables the feature
|
|
# * False: Disables the feature. The profiling cannot be started via this
|
|
# project
|
|
# operations. If the profiling is triggered by another project, this project
|
|
# part
|
|
# will be empty.
|
|
# (boolean value)
|
|
# Deprecated group/name - [profiler]/profiler_enabled
|
|
#enabled = false
|
|
|
|
#
|
|
# Enables SQL requests profiling in services. Default value is False (SQL
|
|
# requests won't be traced).
|
|
#
|
|
# Possible values:
|
|
#
|
|
# * True: Enables SQL requests profiling. Each SQL query will be part of the
|
|
# trace and can the be analyzed by how much time was spent for that.
|
|
# * False: Disables SQL requests profiling. The spent time is only shown on a
|
|
# higher level of operations. Single SQL queries cannot be analyzed this
|
|
# way.
|
|
# (boolean value)
|
|
#trace_sqlalchemy = false
|
|
|
|
#
|
|
# Secret key(s) to use for encrypting context data for performance profiling.
|
|
# This string value should have the following format: <key1>[,<key2>,...<keyn>],
|
|
# where each key is some random string. A user who triggers the profiling via
|
|
# the REST API has to set one of these keys in the headers of the REST API call
|
|
# to include profiling results of this node for this particular project.
|
|
#
|
|
# Both "enabled" flag and "hmac_keys" config options should be set to enable
|
|
# profiling. Also, to generate correct profiling information across all services
|
|
# at least one key needs to be consistent between OpenStack projects. This
|
|
# ensures it can be used from client side to generate the trace, containing
|
|
# information from all possible resources. (string value)
|
|
#hmac_keys = SECRET_KEY
|
|
|
|
#
|
|
# Connection string for a notifier backend. Default value is messaging:// which
|
|
# sets the notifier to oslo_messaging.
|
|
#
|
|
# Examples of possible values:
|
|
#
|
|
# * messaging://: use oslo_messaging driver for sending notifications.
|
|
# (string value)
|
|
#connection_string = messaging://
|