627fde8832
To create a "nova.conf.sample" file, we use "tox -e genconfig". This command triggers the generator from "oslo.config" which needs entry points in "setup.cfg". Right now we have multiple entry points to "opts.py" files which are going to be consolidated to one single point of entry "nova/conf/opts.py". Until all config options are moved to that central place, we would often face merge conflicts when multiple contributors commit patches to that one "opts.py". To prevent that, and to make it easier for future config option moduls in "nova/conf/", the new "nova/conf/opts.py" module collects the config options in a dynamic way. Co-Author: EdLeafe <ed@leafe.com> bp centralize-config-options Change-Id: I4e5d643cd93bb2822ff59c71669cedf3de7f86fc
49 lines
1.9 KiB
Python
49 lines
1.9 KiB
Python
# Copyright 2015 Huawei Technology corp.
|
|
# Copyright 2015 OpenStack Foundation
|
|
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
from oslo_config import cfg
|
|
|
|
ephemeral_storage_encryption_group = cfg.OptGroup(
|
|
name='ephemeral_storage_encryption',
|
|
title='Ephemeral storage encryption options')
|
|
|
|
ephemeral_storage_encryption_opts = [
|
|
cfg.BoolOpt('enabled',
|
|
default=False,
|
|
help='Whether to encrypt ephemeral storage'),
|
|
cfg.StrOpt('cipher',
|
|
default='aes-xts-plain64',
|
|
help='The cipher and mode to be used to encrypt ephemeral '
|
|
'storage. Which ciphers are available ciphers depends '
|
|
'on kernel support. See /proc/crypto for the list of '
|
|
'available options.'),
|
|
cfg.IntOpt('key_size',
|
|
default=512,
|
|
help='The bit length of the encryption key to be used to '
|
|
'encrypt ephemeral storage (in XTS mode only half of '
|
|
'the bits are used for encryption key)')
|
|
]
|
|
|
|
|
|
def register_opts(conf):
|
|
conf.register_group(ephemeral_storage_encryption_group)
|
|
conf.register_opts(ephemeral_storage_encryption_opts,
|
|
group='ephemeral_storage_encryption')
|
|
|
|
|
|
def list_opts():
|
|
return {'ephemeral_storage_encryption': ephemeral_storage_encryption_opts}
|