diff --git a/doc/config-reference/source/samples/neutron/neutron.conf.sample b/doc/config-reference/source/samples/neutron/neutron.conf.sample index 5fdfb4e394..0692c6536a 100644 --- a/doc/config-reference/source/samples/neutron/neutron.conf.sample +++ b/doc/config-reference/source/samples/neutron/neutron.conf.sample @@ -4,46 +4,55 @@ # From neutron # -# Hostname to be used by the Neutron server, agents and services running on -# this machine. All the agents and services running on this machine must use -# the same host value. (string value) -#host = example.domain +# Where to store Neutron state files. This directory must be writable by the +# agent. (string value) +#state_path = /var/lib/neutron -# If True, then allow plugins that support it to create VLAN transparent -# networks. (boolean value) -#vlan_transparent = false +# The host IP to bind to (string value) +#bind_host = 0.0.0.0 + +# The port to bind to (port value) +# Minimum value: 0 +# Maximum value: 65535 +#bind_port = 9696 + +# The path for API extensions. Note that this can be a colon-separated list of +# paths. For example: api_extensions_path = +# extensions:/path/to/more/exts:/even/more/exts. The __path__ of +# neutron.extensions is appended to this, so if your extensions are in there +# you don't need to specify them here. (string value) +#api_extensions_path = + +# The type of authentication to use (string value) +#auth_strategy = keystone + +# The core plugin Neutron will use (string value) +#core_plugin = + +# The service plugins Neutron will use (list value) +#service_plugins = + +# The base MAC address Neutron will use for VIFs. The first 3 octets will +# remain unchanged. If the 4th octet is not 00, it will also be used. The +# others will be randomly generated. (string value) +#base_mac = fa:16:3e:00:00:00 + +# How many times Neutron will retry MAC generation (integer value) +#mac_generation_retries = 16 + +# Allow the usage of the bulk API (boolean value) +#allow_bulk = true # Allow the usage of the pagination (boolean value) #allow_pagination = false -# Number of separate API worker processes for service. If not specified, the -# default is equal to the number of CPUs available for best performance. -# (integer value) -#api_workers = - -# This will choose the web framework in which to run the Neutron API server. -# 'pecan' is a new experiemental rewrite of the API server. (string value) -# Allowed values: legacy, pecan -#web_framework = legacy - -# Ensure that configured gateway is on subnet. For IPv6, validate only if -# gateway is not a link local address. (boolean value) -#force_gateway_on_subnet = true - # Allow the usage of the sorting (boolean value) #allow_sorting = false -# Send notification to nova when port data (fixed_ips/floatingip) changes so -# nova can update its cache. (boolean value) -#notify_nova_on_port_data_changes = true - # The maximum number of items returned in a single response, value was # 'infinite' or negative integer means no limit (string value) #pagination_max_limit = -1 -# Number of seconds to keep retrying to listen (integer value) -#retry_until_window = 30 - # Default value of availability zone hints. The availability zone aware # schedulers use this when the resources availability_zone_hints is empty. # Multiple availability zones can be specified by a comma separated string. @@ -52,52 +61,18 @@ # while scheduling the resource. (list value) #default_availability_zones = -# Neutron IPAM (IP address management) driver to use. If ipam_driver is not set -# (default behavior), no IPAM driver is used. In order to use the reference -# implementation of Neutron IPAM driver, use 'internal'. (string value) -#ipam_driver = - -# If True, effort is made to advertise MTU settings to VMs via network methods -# (DHCP and RA MTU options) when the network's preferred MTU is known. (boolean -# value) -#advertise_mtu = false - # Maximum number of DNS nameservers per subnet (integer value) #max_dns_nameservers = 5 -# Number of RPC worker processes for service (integer value) -#rpc_workers = 1 - -# The host IP to bind to (string value) -#bind_host = 0.0.0.0 - # Maximum number of host routes per subnet (integer value) #max_subnet_host_routes = 20 -# The type of authentication to use (string value) -#auth_strategy = keystone - -# The port to bind to (port value) -# Minimum value: 1 -# Maximum value: 65535 -#bind_port = 9696 - -# Number of backlog requests to configure the socket with (integer value) -#backlog = 4096 - # Maximum number of fixed ips per port. This option is deprecated and will be # removed in the N release. (integer value) # This option is deprecated for removal. # Its value may be silently ignored in the future. #max_fixed_ips_per_port = 5 -# The path for API extensions. Note that this can be a colon-separated list of -# paths. For example: api_extensions_path = -# extensions:/path/to/more/exts:/even/more/exts. The __path__ of -# neutron.extensions is appended to this, so if your extensions are in there -# you don't need to specify them here. (string value) -#api_extensions_path = - # Default IPv4 subnet pool to be used for automatic subnet CIDR allocation. # Specifies by UUID the pool to be used in case where creation of a subnet is # being called without a subnet pool ID. If not set then no pool will be used @@ -109,14 +84,6 @@ # Its value may be silently ignored in the future. #default_ipv4_subnet_pool = -# Number of seconds between sending events to nova if there are any events to -# send. (integer value) -#send_events_interval = 2 - -# Where to store Neutron state files. This directory must be writable by the -# agent. (string value) -#state_path = /var/lib/neutron - # Default IPv6 subnet pool to be used for automatic subnet CIDR allocation. # Specifies by UUID the pool to be used in case where creation of a subnet is # being called without a subnet pool ID. See the description for @@ -126,13 +93,6 @@ # Its value may be silently ignored in the future. #default_ipv6_subnet_pool = -# Number of RPC worker processes dedicated to state reports queue (integer -# value) -#rpc_state_report_workers = 1 - -# The core plugin Neutron will use (string value) -#core_plugin = - # Enables IPv6 Prefix Delegation for automatic subnet CIDR allocation. Set to # True to enable IPv6 Prefix Delegation for subnet allocation in a PD-capable # environment. Users making subnet creation requests for IPv6 subnets without @@ -141,45 +101,91 @@ # default IPv6 subnetpool. (boolean value) #ipv6_pd_enabled = false -# Allow overlapping IP support in Neutron. Attention: the following parameter -# MUST be set to False if Neutron is being used in conjunction with Nova -# security groups. (boolean value) -#allow_overlapping_ips = false - -# The service plugins Neutron will use (list value) -#service_plugins = - # DHCP lease duration (in seconds). Use -1 to tell dnsmasq to use infinite # lease times. (integer value) # Deprecated group/name - [DEFAULT]/dhcp_lease_time #dhcp_lease_duration = 86400 -# The base MAC address Neutron will use for VIFs. The first 3 octets will -# remain unchanged. If the 4th octet is not 00, it will also be used. The -# others will be randomly generated. (string value) -#base_mac = fa:16:3e:00:00:00 - -# Send notification to nova when port status changes (boolean value) -#notify_nova_on_port_status_changes = true - # Domain to use for building the hostnames (string value) #dns_domain = openstacklocal -# How many times Neutron will retry MAC generation (integer value) -#mac_generation_retries = 16 +# Driver for external DNS integration. (string value) +#external_dns_driver = # Allow sending resource operation notification to DHCP agent (boolean value) #dhcp_agent_notification = true +# Allow overlapping IP support in Neutron. Attention: the following parameter +# MUST be set to False if Neutron is being used in conjunction with Nova +# security groups. (boolean value) +#allow_overlapping_ips = false + +# Hostname to be used by the Neutron server, agents and services running on +# this machine. All the agents and services running on this machine must use +# the same host value. (string value) +#host = example.domain + +# Ensure that configured gateway is on subnet. For IPv6, validate only if +# gateway is not a link local address. Deprecated, to be removed during the +# Newton release, at which point the gateway will not be forced on to subnet. +# (boolean value) +# This option is deprecated for removal. +# Its value may be silently ignored in the future. +#force_gateway_on_subnet = true + +# Send notification to nova when port status changes (boolean value) +#notify_nova_on_port_status_changes = true + +# Send notification to nova when port data (fixed_ips/floatingip) changes so +# nova can update its cache. (boolean value) +#notify_nova_on_port_data_changes = true + +# Number of seconds between sending events to nova if there are any events to +# send. (integer value) +#send_events_interval = 2 + +# If True, advertise network MTU values if core plugin calculates them. MTU is +# advertised to running instances via DHCP and RA MTU options. (boolean value) +#advertise_mtu = true + +# Neutron IPAM (IP address management) driver to use. If ipam_driver is not set +# (default behavior), no IPAM driver is used. In order to use the reference +# implementation of Neutron IPAM driver, use 'internal'. (string value) +#ipam_driver = + +# If True, then allow plugins that support it to create VLAN transparent +# networks. (boolean value) +#vlan_transparent = false + +# This will choose the web framework in which to run the Neutron API server. +# 'pecan' is a new experiemental rewrite of the API server. (string value) +# Allowed values: legacy, pecan +#web_framework = legacy + +# Number of backlog requests to configure the socket with (integer value) +#backlog = 4096 + +# Number of seconds to keep retrying to listen (integer value) +#retry_until_window = 30 + # Enable SSL on the API server (boolean value) #use_ssl = false -# Allow the usage of the bulk API (boolean value) -#allow_bulk = true - # Seconds between running periodic tasks (integer value) #periodic_interval = 40 +# Number of separate API worker processes for service. If not specified, the +# default is equal to the number of CPUs available for best performance. +# (integer value) +#api_workers = + +# Number of RPC worker processes for service (integer value) +#rpc_workers = 1 + +# Number of RPC worker processes dedicated to state reports queue (integer +# value) +#rpc_state_report_workers = 1 + # Range of seconds to randomly delay when starting the periodic task scheduler # to reduce stampeding. (Disable by setting to 0) (integer value) #periodic_fuzzy_delay = 5 @@ -188,6 +194,16 @@ # From neutron.agent # +# The driver used to manage the virtual interface. (string value) +#interface_driver = + +# Location for Metadata Proxy UNIX domain socket. (string value) +#metadata_proxy_socket = $state_path/metadata_proxy + +# User (uid or name) running metadata proxy after its initialization (if empty: +# agent effective user). (string value) +#metadata_proxy_user = + # Group (gid or name) running metadata proxy after its initialization (if # empty: agent effective group). (string value) #metadata_proxy_group = @@ -200,60 +216,14 @@ # effective user id/name. (boolean value) #metadata_proxy_watch_log = -# User (uid or name) running metadata proxy after its initialization (if empty: -# agent effective user). (string value) -#metadata_proxy_user = - -# The driver used to manage the virtual interface. (string value) -#interface_driver = - -# Location for Metadata Proxy UNIX domain socket. (string value) -#metadata_proxy_socket = $state_path/metadata_proxy - # # From neutron.db # -# Subnet used for the l3 HA admin network. (string value) -#l3_ha_net_cidr = 169.254.192.0/18 - -# Allow auto scheduling networks to DHCP agent. (boolean value) -#network_auto_schedule = true - -# Define the default value of enable_snat if not provided in -# external_gateway_info. (boolean value) -#enable_snat_by_default = true - -# Driver to use for scheduling router to a default L3 agent. Default is -# 'LeastRoutersScheduler' which assigns routers to L3 agents by enumerating the -# number of routers already assigned to nodes, then assigns to the node with -# the lowest count. (string value) -#router_scheduler_driver = neutron.scheduler.l3_agent_scheduler.LeastRoutersScheduler - -# Number of DHCP agents scheduled to host a tenant network. If this number is -# greater than 1, the scheduler automatically assigns multiple DHCP agents for -# a given tenant network, providing high availability for DHCP service. -# (integer value) -#dhcp_agents_per_network = 1 - # Seconds to regard the agent is down; should be at least twice # report_interval, to be sure the agent is down for good. (integer value) #agent_down_time = 75 -# Minimum number of L3 agents which a HA router will be scheduled on. If it is -# set to 0 then the router will be scheduled on every agent. (integer value) -#min_l3_agents_per_router = 2 - -# Driver to use for scheduling network to DHCP agent (string value) -#network_scheduler_driver = neutron.scheduler.dhcp_agent_scheduler.WeightScheduler - -# Automatically reschedule routers from offline L3 agents to online L3 agents. -# (boolean value) -#allow_automatic_l3agent_failover = false - -# Allow auto scheduling of routers to L3 agent. (boolean value) -#router_auto_schedule = true - # Representing the resource type whose load is being reported by the agent. # This can be "networks", "subnets" or "ports". When specified (Default is # networks), the server will extract particular load sent as part of its agent @@ -267,15 +237,39 @@ # Allowed values: networks, subnets, ports #dhcp_load_type = networks -# The physical network name with which the HA network can be created. (string -# value) -#l3_ha_network_physical_name = +# Agent starts with admin_state_up=False when enable_new_agents=False. In the +# case, user's resources will not be scheduled automatically to the agent until +# admin changes admin_state_up to True. (boolean value) +#enable_new_agents = true + +# Maximum number of routes per router (integer value) +#max_routes = 30 + +# Define the default value of enable_snat if not provided in +# external_gateway_info. (boolean value) +#enable_snat_by_default = true + +# Driver to use for scheduling network to DHCP agent (string value) +#network_scheduler_driver = neutron.scheduler.dhcp_agent_scheduler.WeightScheduler + +# Allow auto scheduling networks to DHCP agent. (boolean value) +#network_auto_schedule = true # Automatically remove networks from offline DHCP agents. (boolean value) #allow_automatic_dhcp_failover = true -# Maximum number of routes per router (integer value) -#max_routes = 30 +# Number of DHCP agents scheduled to host a tenant network. If this number is +# greater than 1, the scheduler automatically assigns multiple DHCP agents for +# a given tenant network, providing high availability for DHCP service. +# (integer value) +#dhcp_agents_per_network = 1 + +# Enable services on an agent with admin_state_up False. If this option is +# False, when admin_state_up of an agent is turned False, services on it will +# be disabled. Agents with admin_state_up False are not selected for automatic +# scheduling regardless of this option. But manual scheduling to such agents is +# available if this option is True. (boolean value) +#enable_services_on_agents_with_admin_state_down = false # The base mac address used for unique DVR instances by Neutron. The first 3 # octets will remain unchanged. If the 4th octet is not 00, it will also be @@ -285,24 +279,33 @@ # The default is 3 octet (string value) #dvr_base_mac = fa:16:3f:00:00:00 -# Agent starts with admin_state_up=False when enable_new_agents=False. In the -# case, user's resources will not be scheduled automatically to the agent until -# admin changes admin_state_up to True. (boolean value) -#enable_new_agents = true +# System-wide flag to determine the type of router that tenants can create. +# Only admin can override. (boolean value) +#router_distributed = false -# Enable services on an agent with admin_state_up False. If this option is -# False, when admin_state_up of an agent is turned False, services on it will -# be disabled. Agents with admin_state_up False are not selected for automatic -# scheduling regardless of this option. But manual scheduling to such agents is -# available if this option is True. (boolean value) -#enable_services_on_agents_with_admin_state_down = false +# Driver to use for scheduling router to a default L3 agent (string value) +#router_scheduler_driver = neutron.scheduler.l3_agent_scheduler.LeastRoutersScheduler + +# Allow auto scheduling of routers to L3 agent. (boolean value) +#router_auto_schedule = true + +# Automatically reschedule routers from offline L3 agents to online L3 agents. +# (boolean value) +#allow_automatic_l3agent_failover = false + +# Enable HA mode for virtual routers. (boolean value) +#l3_ha = false # Maximum number of L3 agents which a HA router will be scheduled on. If it is # set to 0 then the router will be scheduled on every agent. (integer value) #max_l3_agents_per_router = 3 -# Enable HA mode for virtual routers. (boolean value) -#l3_ha = false +# Minimum number of L3 agents which a HA router will be scheduled on. If it is +# set to 0 then the router will be scheduled on every agent. (integer value) +#min_l3_agents_per_router = 2 + +# Subnet used for the l3 HA admin network. (string value) +#l3_ha_net_cidr = 169.254.192.0/18 # The network type to use when creating the HA network for an HA router. By # default or if empty, the first 'tenant_network_types' is used. This is @@ -310,9 +313,9 @@ # default one. (string value) #l3_ha_network_type = -# System-wide flag to determine the type of router that tenants can create. -# Only admin can override. (boolean value) -#router_distributed = false +# The physical network name with which the HA network can be created. (string +# value) +#l3_ha_network_physical_name = # # From neutron.extensions @@ -332,6 +335,41 @@ # From oslo.log # +# If set to true, the logging level will be set to DEBUG instead of the default +# INFO level. (boolean value) +#debug = false + +# If set to false, the logging level will be set to WARNING instead of the +# default INFO level. (boolean value) +# This option is deprecated for removal. +# Its value may be silently ignored in the future. +#verbose = true + +# The name of a logging configuration file. This file is appended to any +# existing logging configuration files. For details about logging configuration +# files, see the Python logging module documentation. Note that when logging +# configuration files are used then all logging configuration is set in the +# configuration file and other logging configuration options are ignored (for +# example, logging_context_format_string). (string value) +# Deprecated group/name - [DEFAULT]/log_config +#log_config_append = + +# Defines the format string for %%(asctime)s in log records. Default: +# %(default)s . This option is ignored if log_config_append is set. (string +# value) +#log_date_format = %Y-%m-%d %H:%M:%S + +# (Optional) Name of log file to send logging output to. If no default is set, +# logging will go to stderr as defined by use_stderr. This option is ignored if +# log_config_append is set. (string value) +# Deprecated group/name - [DEFAULT]/logfile +#log_file = + +# (Optional) The base directory used for relative log_file paths. This option +# is ignored if log_config_append is set. (string value) +# Deprecated group/name - [DEFAULT]/logdir +#log_dir = + # Uses logging handler designed to watch file system. When log file is moved or # removed this handler will open a new log file with specified path # instantaneously. It makes sense only if log_file option is specified and @@ -344,15 +382,6 @@ # is set. (boolean value) #use_syslog = false -# Enables or disables syslog rfc5424 format for logging. If enabled, prefixes -# the MSG part of the syslog message with APP-NAME (RFC5424). The format -# without the APP-NAME is deprecated in Kilo, and will be removed in Mitaka, -# along with this option. This option is ignored if log_config_append is set. -# (boolean value) -# This option is deprecated for removal. -# Its value may be silently ignored in the future. -#use_syslog_rfc_format = true - # Syslog facility to receive log lines. This option is ignored if # log_config_append is set. (string value) #syslog_log_facility = LOG_USER @@ -372,69 +401,28 @@ # is DEBUG. (string value) #logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d -# If set to true, the logging level will be set to DEBUG instead of the default -# INFO level. (boolean value) -#debug = false - # Prefix each line of exception output with this format. (string value) #logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s -# If set to false, the logging level will be set to WARNING instead of the -# default INFO level. (boolean value) -# This option is deprecated for removal. -# Its value may be silently ignored in the future. -#verbose = true - # Defines the format string for %(user_identity)s that is used in # logging_context_format_string. (string value) #logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s -# The name of a logging configuration file. This file is appended to any -# existing logging configuration files. For details about logging configuration -# files, see the Python logging module documentation. Note that when logging -# configuration files are used all logging configuration is defined in the -# configuration file and other logging configuration options are ignored (for -# example, log_format). (string value) -# Deprecated group/name - [DEFAULT]/log_config -#log_config_append = - # List of package logging levels in logger=LEVEL pairs. This option is ignored # if log_config_append is set. (list value) -#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN - -# DEPRECATED. A logging.Formatter log message format string which may use any -# of the available logging.LogRecord attributes. This option is deprecated. -# Please use logging_context_format_string and logging_default_format_string -# instead. This option is ignored if log_config_append is set. (string value) -#log_format = +#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO # Enables or disables publication of error events. (boolean value) #publish_errors = false -# Defines the format string for %%(asctime)s in log records. Default: -# %(default)s . This option is ignored if log_config_append is set. (string -# value) -#log_date_format = %Y-%m-%d %H:%M:%S - # The format for an instance that is passed with the log message. (string # value) #instance_format = "[instance: %(uuid)s] " -# (Optional) Name of log file to send logging output to. If no default is set, -# logging will go to stderr as defined by use_stderr. This option is ignored if -# log_config_append is set. (string value) -# Deprecated group/name - [DEFAULT]/logfile -#log_file = - # The format for an instance UUID that is passed with the log message. (string # value) #instance_uuid_format = "[instance: %(uuid)s] " -# (Optional) The base directory used for relative log_file paths. This option -# is ignored if log_config_append is set. (string value) -# Deprecated group/name - [DEFAULT]/logdir -#log_dir = - # Enables or disables fatal status of deprecations. (boolean value) #fatal_deprecations = false @@ -442,105 +430,82 @@ # From oslo.messaging # -# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match -# "host" option, if running Nova. (string value) -#rpc_zmq_host = localhost - -# Host to locate redis. (string value) -#host = 127.0.0.1 - -# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean -# value) -#use_pub_sub = true - -# Seconds to wait before a cast expires (TTL). Only supported by impl_zmq. -# (integer value) -#rpc_cast_timeout = 30 - -# Use this port to connect to redis host. (port value) -# Minimum value: 1 -# Maximum value: 65535 -#port = 6379 - -# The default number of seconds that poll should wait. Poll raises timeout -# exception when timeout expired. (integer value) -#rpc_poll_timeout = 1 - -# Password for Redis server (optional). (string value) -#password = - -# Directory for holding IPC sockets. (string value) -#rpc_zmq_ipc_dir = /var/run/openstack - -# Configures zmq-messaging to use proxy with non PUB/SUB patterns. (boolean -# value) -#direct_over_proxy = true - -# Size of executor thread pool. (integer value) -# Deprecated group/name - [DEFAULT]/rpc_thread_pool_size -#executor_thread_pool_size = 64 - # Size of RPC connection pool. (integer value) # Deprecated group/name - [DEFAULT]/rpc_conn_pool_size #rpc_conn_pool_size = 30 -# A URL representing the messaging driver to use and its full configuration. If -# not set, we fall back to the rpc_backend option and driver specific -# configuration. (string value) -#transport_url = - # ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP. # The "host" option should point or resolve to this address. (string value) #rpc_zmq_bind_address = * -# The messaging driver to use, defaults to rabbit. Other drivers include amqp -# and zmq. (string value) -#rpc_backend = rabbit - # MatchMaker driver. (string value) +# Allowed values: redis, dummy #rpc_zmq_matchmaker = redis -# The Drivers(s) to handle sending notifications. Possible values are -# messaging, messagingv2, routing, log, test, noop (multi valued) -# Deprecated group/name - [DEFAULT]/notification_driver -#driver = - -# Minimal port number for random ports range. (port value) -# Minimum value: 1 -# Maximum value: 65535 -#rpc_zmq_min_port = 49152 - # Type of concurrency used. Either "native" or "eventlet" (string value) #rpc_zmq_concurrency = eventlet # Number of ZeroMQ contexts, defaults to 1. (integer value) #rpc_zmq_contexts = 1 -# A URL representing the messaging driver to use for notifications. If not set, -# we fall back to the same configuration used for RPC. (string value) -# Deprecated group/name - [DEFAULT]/notification_transport_url -#transport_url = +# Maximum number of ingress messages to locally buffer per topic. Default is +# unlimited. (integer value) +#rpc_zmq_topic_backlog = + +# Directory for holding IPC sockets. (string value) +#rpc_zmq_ipc_dir = /var/run/openstack + +# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match +# "host" option, if running Nova. (string value) +#rpc_zmq_host = localhost + +# Seconds to wait before a cast expires (TTL). The default value of -1 +# specifies an infinite linger period. The value of 0 specifies no linger +# period. Pending messages shall be discarded immediately when the socket is +# closed. Only supported by impl_zmq. (integer value) +#rpc_cast_timeout = -1 + +# The default number of seconds that poll should wait. Poll raises timeout +# exception when timeout expired. (integer value) +#rpc_poll_timeout = 1 + +# Expiration timeout in seconds of a name service record about existing target +# ( < 0 means no timeout). (integer value) +#zmq_target_expire = 120 + +# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean +# value) +#use_pub_sub = true + +# Minimal port number for random ports range. (port value) +# Minimum value: 0 +# Maximum value: 65535 +#rpc_zmq_min_port = 49152 # Maximal port number for random ports range. (integer value) # Minimum value: 1 # Maximum value: 65536 #rpc_zmq_max_port = 65536 -# Maximum number of ingress messages to locally buffer per topic. Default is -# unlimited. (integer value) -#rpc_zmq_topic_backlog = - # Number of retries to find free port number before fail with ZMQBindError. # (integer value) #rpc_zmq_bind_port_retries = 100 +# Size of executor thread pool. (integer value) +# Deprecated group/name - [DEFAULT]/rpc_thread_pool_size +#executor_thread_pool_size = 64 + # Seconds to wait for a response from a call. (integer value) #rpc_response_timeout = 60 -# AMQP topic used for OpenStack notifications. (list value) -# Deprecated group/name - [rpc_notifier2]/topics -# Deprecated group/name - [DEFAULT]/notification_topics -#topics = notifications +# A URL representing the messaging driver to use and its full configuration. If +# not set, we fall back to the rpc_backend option and driver specific +# configuration. (string value) +#transport_url = + +# The messaging driver to use, defaults to rabbit. Other drivers include amqp +# and zmq. (string value) +#rpc_backend = rabbit # The default exchange under which topics are scoped. May be overridden by an # exchange name specified in the transport_url option. (string value) @@ -550,33 +515,34 @@ # From oslo.service.wsgi # -# Size of the pool of greenthreads used by wsgi (integer value) -#wsgi_default_pool_size = 1000 - -# Timeout for client connections' socket operations. If an incoming connection -# is idle for this number of seconds it will be closed. A value of '0' means -# wait forever. (integer value) -#client_socket_timeout = 900 +# File name for the paste.deploy config for api service (string value) +#api_paste_config = api-paste.ini # A python format string that is used as the template to generate log lines. # The following values can beformatted into it: client_ip, date_time, # request_line, status_code, body_length, wall_seconds. (string value) #wsgi_log_format = %(client_ip)s "%(request_line)s" status: %(status_code)s len: %(body_length)s time: %(wall_seconds).7f -# File name for the paste.deploy config for api service (string value) -#api_paste_config = api-paste.ini +# Sets the value of TCP_KEEPIDLE in seconds for each server socket. Not +# supported on OS X. (integer value) +#tcp_keepidle = 600 + +# Size of the pool of greenthreads used by wsgi (integer value) +#wsgi_default_pool_size = 100 + +# Maximum line size of message headers to be accepted. max_header_line may need +# to be increased when using large tokens (typically those generated when +# keystone is configured to use PKI tokens with big service catalogs). (integer +# value) +#max_header_line = 16384 # If False, closes the client socket connection explicitly. (boolean value) #wsgi_keep_alive = true -# Maximum line size of message headers to be accepted. max_header_line may need -# to be increased when using large tokens (typically those generated by the -# Keystone v3 API with big service catalogs). (integer value) -#max_header_line = 16384 - -# Sets the value of TCP_KEEPIDLE in seconds for each server socket. Not -# supported on OS X. (integer value) -#tcp_keepidle = 600 +# Timeout for client connections' socket operations. If an incoming connection +# is idle for this number of seconds it will be closed. A value of '0' means +# wait forever. (integer value) +#client_socket_timeout = 900 [agent] @@ -585,44 +551,44 @@ # From neutron.agent # +# Root helper application. Use 'sudo neutron-rootwrap +# /etc/neutron/rootwrap.conf' to use the real root filter facility. Change to +# 'sudo' to skip the filtering and just run the command directly. (string +# value) +#root_helper = sudo + # Use the root helper when listing the namespaces on a system. This may not be # required depending on the security configuration. If the root helper is not # required, set this to False for a performance improvement. (boolean value) #use_helper_for_ns_read = true -# Action to be executed when a child process dies (string value) -# Allowed values: respawn, exit -#check_child_processes_action = respawn - -# Availability zone of this node (string value) -#availability_zone = nova - # Root helper daemon application to use when possible. (string value) #root_helper_daemon = +# Seconds between nodes reporting state to server; should be less than +# agent_down_time, best if it is half or less than agent_down_time. (floating +# point value) +#report_interval = 30 + +# Log agent heartbeats (boolean value) +#log_agent_heartbeats = false + # Add comments to iptables rules. Set to false to disallow the addition of # comments to generated iptables rules that describe each rule's purpose. # System must support the iptables comments module for addition of comments. # (boolean value) #comment_iptables_rules = true -# Seconds between nodes reporting state to server; should be less than -# agent_down_time, best if it is half or less than agent_down_time. (floating -# point value) -#report_interval = 30 +# Action to be executed when a child process dies (string value) +# Allowed values: respawn, exit +#check_child_processes_action = respawn # Interval between checks of child process liveness (seconds), use 0 to disable # (integer value) #check_child_processes_interval = 60 -# Log agent heartbeats (boolean value) -#log_agent_heartbeats = false - -# Root helper application. Use 'sudo neutron-rootwrap -# /etc/neutron/rootwrap.conf' to use the real root filter facility. Change to -# 'sudo' to skip the filtering and just run the command directly. (string -# value) -#root_helper = sudo +# Availability zone of this node (string value) +#availability_zone = nova [cors] @@ -631,27 +597,27 @@ # From oslo.middleware.cors # -# Indicate which methods can be used during the actual request. (list value) -#allow_methods = GET,POST,PUT,DELETE,OPTIONS +# Indicate whether this resource may be shared with the domain received in the +# requests "origin" header. (list value) +#allowed_origin = + +# Indicate that the actual request can include user credentials (boolean value) +#allow_credentials = true # Indicate which headers are safe to expose to the API. Defaults to HTTP Simple # Headers. (list value) #expose_headers = Content-Type,Cache-Control,Content-Language,Expires,Last-Modified,Pragma -# Indicate that the actual request can include user credentials (boolean value) -#allow_credentials = true - # Maximum cache age of CORS preflight requests. (integer value) #max_age = 3600 +# Indicate which methods can be used during the actual request. (list value) +#allow_methods = GET,POST,PUT,DELETE,OPTIONS + # Indicate which header field names may be used during the actual request. # (list value) #allow_headers = Content-Type,Cache-Control,Content-Language,Expires,Last-Modified,Pragma -# Indicate whether this resource may be shared with the domain received in the -# requests "origin" header. (list value) -#allowed_origin = - [cors.subdomain] @@ -659,27 +625,27 @@ # From oslo.middleware.cors # -# Indicate which methods can be used during the actual request. (list value) -#allow_methods = GET,POST,PUT,DELETE,OPTIONS +# Indicate whether this resource may be shared with the domain received in the +# requests "origin" header. (list value) +#allowed_origin = + +# Indicate that the actual request can include user credentials (boolean value) +#allow_credentials = true # Indicate which headers are safe to expose to the API. Defaults to HTTP Simple # Headers. (list value) #expose_headers = Content-Type,Cache-Control,Content-Language,Expires,Last-Modified,Pragma -# Indicate that the actual request can include user credentials (boolean value) -#allow_credentials = true +# Maximum cache age of CORS preflight requests. (integer value) +#max_age = 3600 -# Indicate whether this resource may be shared with the domain received in the -# requests "origin" header. (list value) -#allowed_origin = +# Indicate which methods can be used during the actual request. (list value) +#allow_methods = GET,POST,PUT,DELETE,OPTIONS # Indicate which header field names may be used during the actual request. # (list value) #allow_headers = Content-Type,Cache-Control,Content-Language,Expires,Last-Modified,Pragma -# Maximum cache age of CORS preflight requests. (integer value) -#max_age = 3600 - [database] @@ -695,19 +661,35 @@ # From oslo.db # +# The file name to use with SQLite. (string value) +# Deprecated group/name - [DEFAULT]/sqlite_db +#sqlite_db = oslo.sqlite + # If True, SQLite uses synchronous mode. (boolean value) # Deprecated group/name - [DEFAULT]/sqlite_synchronous #sqlite_synchronous = true -# Verbosity of SQL debugging information: 0=None, 100=Everything. (integer +# The back end to use for the database. (string value) +# Deprecated group/name - [DEFAULT]/db_backend +#backend = sqlalchemy + +# The SQLAlchemy connection string to use to connect to the database. (string # value) -# Deprecated group/name - [DEFAULT]/sql_connection_debug -#connection_debug = 0 +# Deprecated group/name - [DEFAULT]/sql_connection +# Deprecated group/name - [DATABASE]/sql_connection +# Deprecated group/name - [sql]/connection +#connection = # The SQLAlchemy connection string to use to connect to the slave database. # (string value) #slave_connection = +# The SQL mode to be used for MySQL sessions. This option, including the +# default, overrides any server-set SQL mode. To use whatever SQL mode is set +# by the server configuration, set this to no value. Example: mysql_sql_mode= +# (string value) +#mysql_sql_mode = TRADITIONAL + # Timeout before idle SQL connections are reaped. (integer value) # Deprecated group/name - [DEFAULT]/sql_idle_timeout # Deprecated group/name - [DATABASE]/sql_idle_timeout @@ -719,13 +701,10 @@ # Deprecated group/name - [DATABASE]/sql_min_pool_size #min_pool_size = 1 -# Maximum retries in case of connection error or deadlock error before error is -# raised. Set to -1 to specify an infinite retry count. (integer value) -#db_max_retries = 20 - -# The back end to use for the database. (string value) -# Deprecated group/name - [DEFAULT]/db_backend -#backend = sqlalchemy +# Maximum number of SQL connections to keep open in a pool. (integer value) +# Deprecated group/name - [DEFAULT]/sql_max_pool_size +# Deprecated group/name - [DATABASE]/sql_max_pool_size +#max_pool_size = # Maximum number of database connection retries during startup. Set to -1 to # specify an infinite retry count. (integer value) @@ -741,36 +720,17 @@ # If set, use this value for max_overflow with SQLAlchemy. (integer value) # Deprecated group/name - [DEFAULT]/sql_max_overflow # Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow -#max_overflow = +#max_overflow = 50 + +# Verbosity of SQL debugging information: 0=None, 100=Everything. (integer +# value) +# Deprecated group/name - [DEFAULT]/sql_connection_debug +#connection_debug = 0 # Add Python stack traces to SQL as comment strings. (boolean value) # Deprecated group/name - [DEFAULT]/sql_connection_trace #connection_trace = false -# If True, increases the interval between retries of a database operation up to -# db_max_retry_interval. (boolean value) -#db_inc_retry_interval = true - -# Seconds between retries of a database transaction. (integer value) -#db_retry_interval = 1 - -# The SQLAlchemy connection string to use to connect to the database. (string -# value) -# Deprecated group/name - [DEFAULT]/sql_connection -# Deprecated group/name - [DATABASE]/sql_connection -# Deprecated group/name - [sql]/connection -#connection = - -# The SQL mode to be used for MySQL sessions. This option, including the -# default, overrides any server-set SQL mode. To use whatever SQL mode is set -# by the server configuration, set this to no value. Example: mysql_sql_mode= -# (string value) -#mysql_sql_mode = TRADITIONAL - -# The file name to use with SQLite. (string value) -# Deprecated group/name - [DEFAULT]/sqlite_db -#sqlite_db = oslo.sqlite - # If set, use this value for pool_timeout with SQLAlchemy. (integer value) # Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout #pool_timeout = @@ -779,15 +739,21 @@ # (boolean value) #use_db_reconnect = false -# Maximum number of SQL connections to keep open in a pool. (integer value) -# Deprecated group/name - [DEFAULT]/sql_max_pool_size -# Deprecated group/name - [DATABASE]/sql_max_pool_size -#max_pool_size = +# Seconds between retries of a database transaction. (integer value) +#db_retry_interval = 1 + +# If True, increases the interval between retries of a database operation up to +# db_max_retry_interval. (boolean value) +#db_inc_retry_interval = true # If db_inc_retry_interval is set, the maximum seconds between retries of a # database operation. (integer value) #db_max_retry_interval = 10 +# Maximum retries in case of connection error or deadlock error before error is +# raised. Set to -1 to specify an infinite retry count. (integer value) +#db_max_retries = 20 + [keystone_authtoken] @@ -795,6 +761,12 @@ # From keystonemiddleware.auth_token # +# Complete public Identity API endpoint. (string value) +#auth_uri = + +# API version of the admin Identity API endpoint. (string value) +#auth_version = + # Do not handle authorization requests within the middleware, but delegate the # authorization decision to downstream WSGI components. (boolean value) #delay_auth_decision = false @@ -803,15 +775,6 @@ # value) #http_connect_timeout = -# (Optional) Number of seconds that an operation will wait to get a memcached -# client connection from the pool. (integer value) -#memcache_pool_conn_get_timeout = 10 - -# (Optional) Indicate whether to set the X-Service-Catalog header. If False, -# middleware will not ask for service catalog on token validation and will not -# set the X-Service-Catalog header. (boolean value) -#include_service_catalog = true - # How many times are we trying to reconnect when communicating with Identity # API Server. (integer value) #http_request_max_retries = 3 @@ -819,9 +782,34 @@ # Env key for the swift cache. (string value) #cache = -# If true, the revocation list will be checked for cached tokens. This requires -# that PKI tokens are configured on the identity server. (boolean value) -#check_revocations_for_cached = false +# Required if identity server requires client certificate (string value) +#certfile = + +# Required if identity server requires client certificate (string value) +#keyfile = + +# A PEM encoded Certificate Authority to use when verifying HTTPs connections. +# Defaults to system CAs. (string value) +#cafile = + +# Verify HTTPS connections. (boolean value) +#insecure = false + +# The region in which the identity server can be found. (string value) +#region_name = + +# Directory used to cache files related to PKI tokens. (string value) +#signing_dir = + +# Optionally specify a list of memcached server(s) to use for caching. If left +# undefined, tokens will instead be cached in-process. (list value) +# Deprecated group/name - [DEFAULT]/memcache_servers +#memcached_servers = + +# In order to prevent excessive effort spent validating tokens, the middleware +# caches previously-seen tokens for a configurable duration (in seconds). Set +# to -1 to disable caching completely. (integer value) +#token_cache_time = 300 # Determines the frequency at which the list of revoked tokens is retrieved # from the Identity service (in seconds). A high number of revocation events @@ -829,12 +817,6 @@ # (integer value) #revocation_cache_time = 10 -# Required if identity server requires client certificate (string value) -#certfile = - -# Required if identity server requires client certificate (string value) -#keyfile = - # (Optional) If defined, indicate whether token data should be authenticated or # authenticated and encrypted. If MAC, token data is authenticated (with HMAC) # in the cache. If ENCRYPT, token data is encrypted and authenticated in the @@ -843,52 +825,39 @@ # Allowed values: None, MAC, ENCRYPT #memcache_security_strategy = None -# (Optional) Use the advanced (eventlet safe) memcached client pool. The -# advanced pool will only work under python 2.x. (boolean value) -#memcache_use_advanced_pool = false - -# A PEM encoded Certificate Authority to use when verifying HTTPs connections. -# Defaults to system CAs. (string value) -#cafile = - -# Config Section from which to load plugin specific options (unknown value) -#auth_section = - -# Verify HTTPS connections. (boolean value) -#insecure = false - # (Optional, mandatory if memcache_security_strategy is defined) This string is # used for key derivation. (string value) #memcache_secret_key = -# The region in which the identity server can be found. (string value) -#region_name = - # (Optional) Number of seconds memcached server is considered dead before it is # tried again. (integer value) #memcache_pool_dead_retry = 300 -# In order to prevent excessive effort spent validating tokens, the middleware -# caches previously-seen tokens for a configurable duration (in seconds). Set -# to -1 to disable caching completely. (integer value) -#token_cache_time = 300 - -# Directory used to cache files related to PKI tokens. (string value) -#signing_dir = - # (Optional) Maximum total number of open connections to every memcached # server. (integer value) #memcache_pool_maxsize = 10 -# Optionally specify a list of memcached server(s) to use for caching. If left -# undefined, tokens will instead be cached in-process. (list value) -# Deprecated group/name - [DEFAULT]/memcache_servers -#memcached_servers = - # (Optional) Socket timeout in seconds for communicating with a memcached # server. (integer value) #memcache_pool_socket_timeout = 3 +# (Optional) Number of seconds a connection to memcached is held unused in the +# pool before it is closed. (integer value) +#memcache_pool_unused_timeout = 60 + +# (Optional) Number of seconds that an operation will wait to get a memcached +# client connection from the pool. (integer value) +#memcache_pool_conn_get_timeout = 10 + +# (Optional) Use the advanced (eventlet safe) memcached client pool. The +# advanced pool will only work under python 2.x. (boolean value) +#memcache_use_advanced_pool = false + +# (Optional) Indicate whether to set the X-Service-Catalog header. If False, +# middleware will not ask for service catalog on token validation and will not +# set the X-Service-Catalog header. (boolean value) +#include_service_catalog = true + # Used to control the use and type of token binding. Can be set to: "disabled" # to not check token binding. "permissive" (default) to validate binding # information if the bind type is of a form known to the server and ignore it @@ -898,15 +867,9 @@ # (string value) #enforce_token_bind = permissive -# Complete public Identity API endpoint. (string value) -#auth_uri = - -# Authentication type to load (unknown value) -# Deprecated group/name - [DEFAULT]/auth_plugin -#auth_type = - -# API version of the admin Identity API endpoint. (string value) -#auth_version = +# If true, the revocation list will be checked for cached tokens. This requires +# that PKI tokens are configured on the identity server. (boolean value) +#check_revocations_for_cached = false # Hash algorithms to use for hashing PKI tokens. This may be a single algorithm # or multiple. The algorithms are those supported by Python standard @@ -918,9 +881,12 @@ # performance. (list value) #hash_algorithms = md5 -# (Optional) Number of seconds a connection to memcached is held unused in the -# pool before it is closed. (integer value) -#memcache_pool_unused_timeout = 60 +# Authentication type to load (unknown value) +# Deprecated group/name - [DEFAULT]/auth_plugin +#auth_type = + +# Config Section from which to load plugin specific options (unknown value) +#auth_section = [matchmaker_redis] @@ -932,13 +898,29 @@ # Host to locate redis. (string value) #host = 127.0.0.1 +# Use this port to connect to redis host. (port value) +# Minimum value: 0 +# Maximum value: 65535 +#port = 6379 + # Password for Redis server (optional). (string value) #password = -# Use this port to connect to redis host. (port value) -# Minimum value: 1 -# Maximum value: 65535 -#port = 6379 +# List of Redis Sentinel hosts (fault tolerance mode) e.g. +# [host:port, host1:port ... ] (list value) +#sentinel_hosts = + +# Redis replica set name. (string value) +#sentinel_group_name = oslo-messaging-zeromq + +# Time in ms to wait between connection attempts. (integer value) +#wait_timeout = 500 + +# Time in ms to wait before the transaction is killed. (integer value) +#check_timeout = 20000 + +# Timeout in ms on blocking socket operations (integer value) +#socket_timeout = 1000 [nova] @@ -947,20 +929,23 @@ # From neutron # +# Name of nova region to use. Useful if keystone manages more than one region. +# (string value) +#region_name = + # Type of the nova endpoint to use. This endpoint will be looked up in the # keystone catalog and should be one of public, internal or admin. (string # value) # Allowed values: public, admin, internal #endpoint_type = public -# Name of nova region to use. Useful if keystone manages more than one region. -# (string value) -#region_name = - # # From nova.auth # +# Warning: Failed to format sample for auth_url +# isinstance() arg 2 must be a class, type, or tuple of classes and types + # Authentication type to load (unknown value) # Deprecated group/name - [DEFAULT]/auth_plugin #auth_type = @@ -969,75 +954,65 @@ # (string value) #cafile = -# Domain ID containing project (unknown value) -#project_domain_id = +# PEM encoded client certificate cert file (string value) +#certfile = -# Domain name containing project (unknown value) -#project_domain_name = +# Warning: Failed to format sample for default_domain_id +# isinstance() arg 2 must be a class, type, or tuple of classes and types -# Trust ID (unknown value) -#trust_id = +# Warning: Failed to format sample for default_domain_name +# isinstance() arg 2 must be a class, type, or tuple of classes and types -# Optional domain ID to use with v3 and v2 parameters. It will be used for both -# the user and project domain in v3 and ignored in v2 authentication. (unknown -# value) -#default_domain_id = +# Warning: Failed to format sample for domain_id +# isinstance() arg 2 must be a class, type, or tuple of classes and types -# PEM encoded client certificate key file (string value) -#keyfile = - -# Optional domain name to use with v3 API and v2 parameters. It will be used -# for both the user and project domain in v3 and ignored in v2 authentication. -# (unknown value) -#default_domain_name = +# Warning: Failed to format sample for domain_name +# isinstance() arg 2 must be a class, type, or tuple of classes and types # Verify HTTPS connections. (boolean value) #insecure = false +# PEM encoded client certificate key file (string value) +#keyfile = + +# Warning: Failed to format sample for password +# isinstance() arg 2 must be a class, type, or tuple of classes and types + +# Warning: Failed to format sample for project_domain_id +# isinstance() arg 2 must be a class, type, or tuple of classes and types + +# Warning: Failed to format sample for project_domain_name +# isinstance() arg 2 must be a class, type, or tuple of classes and types + +# Warning: Failed to format sample for project_id +# isinstance() arg 2 must be a class, type, or tuple of classes and types + +# Warning: Failed to format sample for project_name +# isinstance() arg 2 must be a class, type, or tuple of classes and types + +# Warning: Failed to format sample for tenant_id +# isinstance() arg 2 must be a class, type, or tuple of classes and types + +# Warning: Failed to format sample for tenant_name +# isinstance() arg 2 must be a class, type, or tuple of classes and types + # Timeout value for http requests (integer value) #timeout = -# User's domain id (unknown value) -#user_domain_id = +# Warning: Failed to format sample for trust_id +# isinstance() arg 2 must be a class, type, or tuple of classes and types -# User's domain name (unknown value) -#user_domain_name = +# Warning: Failed to format sample for user_domain_id +# isinstance() arg 2 must be a class, type, or tuple of classes and types -# Authentication URL (unknown value) -#auth_url = +# Warning: Failed to format sample for user_domain_name +# isinstance() arg 2 must be a class, type, or tuple of classes and types -# Tenant Name (unknown value) -#tenant_name = +# Warning: Failed to format sample for user_id +# isinstance() arg 2 must be a class, type, or tuple of classes and types -# Domain ID to scope to (unknown value) -#domain_id = - -# User's password (unknown value) -#password = - -# User id (unknown value) -#user_id = - -# Project ID to scope to (unknown value) -# Deprecated group/name - [DEFAULT]/tenant-id -#project_id = - -# Tenant ID (unknown value) -#tenant_id = - -# PEM encoded client certificate cert file (string value) -#certfile = - -# Domain name to scope to (unknown value) -#domain_name = - -# Project name to scope to (unknown value) -# Deprecated group/name - [DEFAULT]/tenant-name -#project_name = - -# Username (unknown value) -# Deprecated group/name - [DEFAULT]/username -#username = +# Warning: Failed to format sample for username +# isinstance() arg 2 must be a class, type, or tuple of classes and types [oslo_concurrency] @@ -1064,70 +1039,92 @@ # From oslo.messaging # -# Name of configuration file (without .conf suffix) (string value) -# Deprecated group/name - [amqp1]/sasl_config_name -#sasl_config_name = - -# CA certificate PEM file to verify server certificate (string value) -# Deprecated group/name - [amqp1]/ssl_ca_file -#ssl_ca_file = +# address prefix used when sending to a specific server (string value) +# Deprecated group/name - [amqp1]/server_request_prefix +#server_request_prefix = exclusive # address prefix used when broadcasting to all servers (string value) # Deprecated group/name - [amqp1]/broadcast_prefix #broadcast_prefix = broadcast -# Accept clients using either SSL or plain TCP (boolean value) -# Deprecated group/name - [amqp1]/allow_insecure_clients -#allow_insecure_clients = false - -# Timeout for inactive connections (in seconds) (integer value) -# Deprecated group/name - [amqp1]/idle_timeout -#idle_timeout = 0 - -# Identifying certificate PEM file to present to clients (string value) -# Deprecated group/name - [amqp1]/ssl_cert_file -#ssl_cert_file = - -# Space separated list of acceptable SASL mechanisms (string value) -# Deprecated group/name - [amqp1]/sasl_mechanisms -#sasl_mechanisms = - -# User name for message broker authentication (string value) -# Deprecated group/name - [amqp1]/username -#username = - # address prefix when sending to any server in group (string value) # Deprecated group/name - [amqp1]/group_request_prefix #group_request_prefix = unicast -# Password for message broker authentication (string value) -# Deprecated group/name - [amqp1]/password -#password = - -# Debug: dump AMQP frames to stdout (boolean value) -# Deprecated group/name - [amqp1]/trace -#trace = false - -# Private key PEM file used to sign cert_file certificate (string value) -# Deprecated group/name - [amqp1]/ssl_key_file -#ssl_key_file = - -# Path to directory that contains the SASL configuration (string value) -# Deprecated group/name - [amqp1]/sasl_config_dir -#sasl_config_dir = - -# address prefix used when sending to a specific server (string value) -# Deprecated group/name - [amqp1]/server_request_prefix -#server_request_prefix = exclusive - # Name for the AMQP container (string value) # Deprecated group/name - [amqp1]/container_name #container_name = +# Timeout for inactive connections (in seconds) (integer value) +# Deprecated group/name - [amqp1]/idle_timeout +#idle_timeout = 0 + +# Debug: dump AMQP frames to stdout (boolean value) +# Deprecated group/name - [amqp1]/trace +#trace = false + +# CA certificate PEM file to verify server certificate (string value) +# Deprecated group/name - [amqp1]/ssl_ca_file +#ssl_ca_file = + +# Identifying certificate PEM file to present to clients (string value) +# Deprecated group/name - [amqp1]/ssl_cert_file +#ssl_cert_file = + +# Private key PEM file used to sign cert_file certificate (string value) +# Deprecated group/name - [amqp1]/ssl_key_file +#ssl_key_file = + # Password for decrypting ssl_key_file (if encrypted) (string value) # Deprecated group/name - [amqp1]/ssl_key_password #ssl_key_password = +# Accept clients using either SSL or plain TCP (boolean value) +# Deprecated group/name - [amqp1]/allow_insecure_clients +#allow_insecure_clients = false + +# Space separated list of acceptable SASL mechanisms (string value) +# Deprecated group/name - [amqp1]/sasl_mechanisms +#sasl_mechanisms = + +# Path to directory that contains the SASL configuration (string value) +# Deprecated group/name - [amqp1]/sasl_config_dir +#sasl_config_dir = + +# Name of configuration file (without .conf suffix) (string value) +# Deprecated group/name - [amqp1]/sasl_config_name +#sasl_config_name = + +# User name for message broker authentication (string value) +# Deprecated group/name - [amqp1]/username +#username = + +# Password for message broker authentication (string value) +# Deprecated group/name - [amqp1]/password +#password = + + +[oslo_messaging_notifications] + +# +# From oslo.messaging +# + +# The Drivers(s) to handle sending notifications. Possible values are +# messaging, messagingv2, routing, log, test, noop (multi valued) +# Deprecated group/name - [DEFAULT]/notification_driver +#driver = + +# A URL representing the messaging driver to use for notifications. If not set, +# we fall back to the same configuration used for RPC. (string value) +# Deprecated group/name - [DEFAULT]/notification_transport_url +#transport_url = + +# AMQP topic used for OpenStack notifications. (list value) +# Deprecated group/name - [rpc_notifier2]/topics +# Deprecated group/name - [DEFAULT]/notification_topics +#topics = notifications + [oslo_messaging_rabbit] @@ -1135,113 +1132,233 @@ # From oslo.messaging # -# The RabbitMQ virtual host. (string value) -# Deprecated group/name - [DEFAULT]/rabbit_virtual_host -#rabbit_virtual_host = / - -# How long to wait before reconnecting in response to an AMQP consumer cancel -# notification. (floating point value) -# Deprecated group/name - [DEFAULT]/kombu_reconnect_delay -#kombu_reconnect_delay = 1.0 - -# How frequently to retry connecting with RabbitMQ. (integer value) -#rabbit_retry_interval = 1 - -# How long to wait a missing client beforce abandoning to send it its replies. -# This value should not be longer than rpc_response_timeout. (integer value) -# Deprecated group/name - [DEFAULT]/kombu_reconnect_timeout -#kombu_missing_consumer_retry_timeout = 60 - -# How long to backoff for between retries when connecting to RabbitMQ. (integer -# value) -# Deprecated group/name - [DEFAULT]/rabbit_retry_backoff -#rabbit_retry_backoff = 2 - -# Maximum number of RabbitMQ connection retries. Default is 0 (infinite retry -# count). (integer value) -# Deprecated group/name - [DEFAULT]/rabbit_max_retries -#rabbit_max_retries = 0 - -# The RabbitMQ broker address where a single node is used. (string value) -# Deprecated group/name - [DEFAULT]/rabbit_host -#rabbit_host = localhost - -# The RabbitMQ broker port where a single node is used. (port value) -# Minimum value: 1 -# Maximum value: 65535 -# Deprecated group/name - [DEFAULT]/rabbit_port -#rabbit_port = 5672 - -# Use HA queues in RabbitMQ (x-ha-policy: all). If you change this option, you -# must wipe the RabbitMQ database. (boolean value) -# Deprecated group/name - [DEFAULT]/rabbit_ha_queues -#rabbit_ha_queues = false - -# RabbitMQ HA cluster host:port pairs. (list value) -# Deprecated group/name - [DEFAULT]/rabbit_hosts -#rabbit_hosts = $rabbit_host:$rabbit_port +# Use durable queues in AMQP. (boolean value) +# Deprecated group/name - [DEFAULT]/amqp_durable_queues +# Deprecated group/name - [DEFAULT]/rabbit_durable_queues +#amqp_durable_queues = false # Auto-delete queues in AMQP. (boolean value) # Deprecated group/name - [DEFAULT]/amqp_auto_delete #amqp_auto_delete = false -# Determines how the next RabbitMQ node is chosen in case the one we are -# currently connected to becomes unavailable. Takes effect only if more than -# one RabbitMQ node is provided in config. (string value) -# Allowed values: round-robin, shuffle -#kombu_failover_strategy = round-robin - -# How often times during the heartbeat_timeout_threshold we check the -# heartbeat. (integer value) -#heartbeat_rate = 2 - -# Number of seconds after which the Rabbit broker is considered down if -# heartbeat's keep-alive fails (0 disable the heartbeat). EXPERIMENTAL (integer -# value) -#heartbeat_timeout_threshold = 60 - # SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and # SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some # distributions. (string value) # Deprecated group/name - [DEFAULT]/kombu_ssl_version #kombu_ssl_version = -# Use durable queues in AMQP. (boolean value) -# Deprecated group/name - [DEFAULT]/amqp_durable_queues -# Deprecated group/name - [DEFAULT]/rabbit_durable_queues -#amqp_durable_queues = false - -# The RabbitMQ userid. (string value) -# Deprecated group/name - [DEFAULT]/rabbit_userid -#rabbit_userid = guest - # SSL key file (valid only if SSL enabled). (string value) # Deprecated group/name - [DEFAULT]/kombu_ssl_keyfile #kombu_ssl_keyfile = -# Connect over SSL for RabbitMQ. (boolean value) -# Deprecated group/name - [DEFAULT]/rabbit_use_ssl -#rabbit_use_ssl = false - -# The RabbitMQ password. (string value) -# Deprecated group/name - [DEFAULT]/rabbit_password -#rabbit_password = guest - # SSL cert file (valid only if SSL enabled). (string value) # Deprecated group/name - [DEFAULT]/kombu_ssl_certfile #kombu_ssl_certfile = -# Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake (boolean value) -# Deprecated group/name - [DEFAULT]/fake_rabbit -#fake_rabbit = false +# SSL certification authority file (valid only if SSL enabled). (string value) +# Deprecated group/name - [DEFAULT]/kombu_ssl_ca_certs +#kombu_ssl_ca_certs = + +# How long to wait before reconnecting in response to an AMQP consumer cancel +# notification. (floating point value) +# Deprecated group/name - [DEFAULT]/kombu_reconnect_delay +#kombu_reconnect_delay = 1.0 + +# EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression will not +# be used. This option may notbe available in future versions. (string value) +#kombu_compression = + +# How long to wait a missing client beforce abandoning to send it its replies. +# This value should not be longer than rpc_response_timeout. (integer value) +# Deprecated group/name - [DEFAULT]/kombu_reconnect_timeout +#kombu_missing_consumer_retry_timeout = 60 + +# Determines how the next RabbitMQ node is chosen in case the one we are +# currently connected to becomes unavailable. Takes effect only if more than +# one RabbitMQ node is provided in config. (string value) +# Allowed values: round-robin, shuffle +#kombu_failover_strategy = round-robin + +# The RabbitMQ broker address where a single node is used. (string value) +# Deprecated group/name - [DEFAULT]/rabbit_host +#rabbit_host = localhost + +# The RabbitMQ broker port where a single node is used. (port value) +# Minimum value: 0 +# Maximum value: 65535 +# Deprecated group/name - [DEFAULT]/rabbit_port +#rabbit_port = 5672 + +# RabbitMQ HA cluster host:port pairs. (list value) +# Deprecated group/name - [DEFAULT]/rabbit_hosts +#rabbit_hosts = $rabbit_host:$rabbit_port + +# Connect over SSL for RabbitMQ. (boolean value) +# Deprecated group/name - [DEFAULT]/rabbit_use_ssl +#rabbit_use_ssl = false + +# The RabbitMQ userid. (string value) +# Deprecated group/name - [DEFAULT]/rabbit_userid +#rabbit_userid = guest + +# The RabbitMQ password. (string value) +# Deprecated group/name - [DEFAULT]/rabbit_password +#rabbit_password = guest # The RabbitMQ login method. (string value) # Deprecated group/name - [DEFAULT]/rabbit_login_method #rabbit_login_method = AMQPLAIN -# SSL certification authority file (valid only if SSL enabled). (string value) -# Deprecated group/name - [DEFAULT]/kombu_ssl_ca_certs -#kombu_ssl_ca_certs = +# The RabbitMQ virtual host. (string value) +# Deprecated group/name - [DEFAULT]/rabbit_virtual_host +#rabbit_virtual_host = / + +# How frequently to retry connecting with RabbitMQ. (integer value) +#rabbit_retry_interval = 1 + +# How long to backoff for between retries when connecting to RabbitMQ. (integer +# value) +# Deprecated group/name - [DEFAULT]/rabbit_retry_backoff +#rabbit_retry_backoff = 2 + +# Maximum interval of RabbitMQ connection retries. Default is 30 seconds. +# (integer value) +#rabbit_interval_max = 30 + +# Maximum number of RabbitMQ connection retries. Default is 0 (infinite retry +# count). (integer value) +# Deprecated group/name - [DEFAULT]/rabbit_max_retries +#rabbit_max_retries = 0 + +# Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change this +# option, you must wipe the RabbitMQ database. In RabbitMQ 3.0, queue mirroring +# is no longer controlled by the x-ha-policy argument when declaring a queue. +# If you just want to make sure that all queues (except those with auto- +# generated names) are mirrored across all nodes, run: "rabbitmqctl set_policy +# HA '^(?!amq\.).*' '{"ha-mode": "all"}' " (boolean value) +# Deprecated group/name - [DEFAULT]/rabbit_ha_queues +#rabbit_ha_queues = false + +# Positive integer representing duration in seconds for queue TTL (x-expires). +# Queues which are unused for the duration of the TTL are automatically +# deleted. The parameter affects only reply and fanout queues. (integer value) +# Minimum value: 1 +#rabbit_transient_queues_ttl = 600 + +# Specifies the number of messages to prefetch. Setting to zero allows +# unlimited messages. (integer value) +#rabbit_qos_prefetch_count = 0 + +# Number of seconds after which the Rabbit broker is considered down if +# heartbeat's keep-alive fails (0 disable the heartbeat). EXPERIMENTAL (integer +# value) +#heartbeat_timeout_threshold = 60 + +# How often times during the heartbeat_timeout_threshold we check the +# heartbeat. (integer value) +#heartbeat_rate = 2 + +# Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake (boolean value) +# Deprecated group/name - [DEFAULT]/fake_rabbit +#fake_rabbit = false + +# Maximum number of channels to allow (integer value) +#channel_max = + +# The maximum byte size for an AMQP frame (integer value) +#frame_max = + +# How often to send heartbeats for consumer's connections (integer value) +#heartbeat_interval = 1 + +# Enable SSL (boolean value) +#ssl = + +# Arguments passed to ssl.wrap_socket (dict value) +#ssl_options = + +# Set socket timeout in seconds for connection's socket (floating point value) +#socket_timeout = 0.25 + +# Set TCP_USER_TIMEOUT in seconds for connection's socket (floating point +# value) +#tcp_user_timeout = 0.25 + +# Set delay for reconnection to some host which has connection error (floating +# point value) +#host_connection_reconnect_delay = 0.25 + +# Maximum number of connections to keep queued. (integer value) +#pool_max_size = 10 + +# Maximum number of connections to create above `pool_max_size`. (integer +# value) +#pool_max_overflow = 0 + +# Default number of seconds to wait for a connections to available (integer +# value) +#pool_timeout = 30 + +# Lifetime of a connection (since creation) in seconds or None for no +# recycling. Expired connections are closed on acquire. (integer value) +#pool_recycle = 600 + +# Threshold at which inactive (since release) connections are considered stale +# in seconds or None for no staleness. Stale connections are closed on acquire. +# (integer value) +#pool_stale = 60 + +# Persist notification messages. (boolean value) +#notification_persistence = false + +# Exchange name for for sending notifications (string value) +#default_notification_exchange = ${control_exchange}_notification + +# Max number of not acknowledged message which RabbitMQ can send to +# notification listener. (integer value) +#notification_listener_prefetch_count = 100 + +# Reconnecting retry count in case of connectivity problem during sending +# notification, -1 means infinite retry. (integer value) +#default_notification_retry_attempts = -1 + +# Reconnecting retry delay in case of connectivity problem during sending +# notification message (floating point value) +#notification_retry_delay = 0.25 + +# Time to live for rpc queues without consumers in seconds. (integer value) +#rpc_queue_expiration = 60 + +# Exchange name for sending RPC messages (string value) +#default_rpc_exchange = ${control_exchange}_rpc + +# Exchange name for receiving RPC replies (string value) +#rpc_reply_exchange = ${control_exchange}_rpc_reply + +# Max number of not acknowledged message which RabbitMQ can send to rpc +# listener. (integer value) +#rpc_listener_prefetch_count = 100 + +# Max number of not acknowledged message which RabbitMQ can send to rpc reply +# listener. (integer value) +#rpc_reply_listener_prefetch_count = 100 + +# Reconnecting retry count in case of connectivity problem during sending +# reply. -1 means infinite retry during rpc_timeout (integer value) +#rpc_reply_retry_attempts = -1 + +# Reconnecting retry delay in case of connectivity problem during sending +# reply. (floating point value) +#rpc_reply_retry_delay = 0.25 + +# Reconnecting retry count in case of connectivity problem during sending RPC +# message, -1 means infinite retry. If actual retry attempts in not 0 the rpc +# request could be processed more then one time (integer value) +#default_rpc_retry_attempts = -1 + +# Reconnecting retry delay in case of connectivity problem during sending RPC +# message (floating point value) +#rpc_retry_delay = 0.25 [oslo_policy] @@ -1254,6 +1371,10 @@ # Deprecated group/name - [DEFAULT]/policy_file #policy_file = policy.json +# Default rule. Enforced when a requested rule is not found. (string value) +# Deprecated group/name - [DEFAULT]/policy_default_rule +#policy_default_rule = default + # Directories where policy configuration files are stored. They can be relative # to any directory in the search path defined by the config_dir option, or # absolute paths. The file defined by policy_file must exist for these @@ -1262,10 +1383,6 @@ # Deprecated group/name - [DEFAULT]/policy_dirs #policy_dirs = policy.d -# Default rule. Enforced when a requested rule is not found. (string value) -# Deprecated group/name - [DEFAULT]/policy_default_rule -#policy_default_rule = default - [quotas] @@ -1273,36 +1390,36 @@ # From neutron # -# Number of subnets allowed per tenant, A negative value means unlimited. -# (integer value) -#quota_subnet = 10 - # Resource name(s) that are supported in quota features. This option is now # deprecated for removal. (list value) # This option is deprecated for removal. # Its value may be silently ignored in the future. #quota_items = network,subnet,port -# Default driver to use for quota checks (string value) -#quota_driver = neutron.db.quota.driver.DbQuotaDriver +# Default number of resource allowed per tenant. A negative value means +# unlimited. (integer value) +#default_quota = -1 + +# Number of networks allowed per tenant. A negative value means unlimited. +# (integer value) +#quota_network = 10 + +# Number of subnets allowed per tenant, A negative value means unlimited. +# (integer value) +#quota_subnet = 10 # Number of ports allowed per tenant. A negative value means unlimited. # (integer value) #quota_port = 50 -# Default number of resource allowed per tenant. A negative value means -# unlimited. (integer value) -#default_quota = -1 +# Default driver to use for quota checks (string value) +#quota_driver = neutron.db.quota.driver.DbQuotaDriver # Keep in track in the database of current resourcequota usage. Plugins which # do not leverage the neutron database should set this flag to False (boolean # value) #track_quota_usage = true -# Number of networks allowed per tenant. A negative value means unlimited. -# (integer value) -#quota_network = 10 - # # From neutron.extensions # @@ -1311,6 +1428,10 @@ # (integer value) #quota_router = 10 +# Number of floating IPs allowed per tenant. A negative value means unlimited. +# (integer value) +#quota_floatingip = 50 + # Number of security groups allowed per tenant. A negative value means # unlimited. (integer value) #quota_security_group = 10 @@ -1319,10 +1440,6 @@ # unlimited. (integer value) #quota_security_group_rule = 100 -# Number of floating IPs allowed per tenant. A negative value means unlimited. -# (integer value) -#quota_floatingip = 50 - [ssl] @@ -1334,9 +1451,9 @@ # Deprecated group/name - [DEFAULT]/ssl_ca_file #ca_file = -# Sets the list of available ciphers. value should be a string in the OpenSSL -# cipher list format. (string value) -#ciphers = +# Certificate file to use when starting the server securely. (string value) +# Deprecated group/name - [DEFAULT]/ssl_cert_file +#cert_file = # Private key file to use when starting the server securely. (string value) # Deprecated group/name - [DEFAULT]/ssl_key_file @@ -1347,6 +1464,6 @@ # distributions. (string value) #version = -# Certificate file to use when starting the server securely. (string value) -# Deprecated group/name - [DEFAULT]/ssl_cert_file -#cert_file = +# Sets the list of available ciphers. value should be a string in the OpenSSL +# cipher list format. (string value) +#ciphers =