New, updated and deprecated options in Liberty for OpenStack Identity
New options
Option = default value (Type) Help string
[DEFAULT] executor_thread_pool_size = 64 (IntOpt) Size of executor thread pool.
[DEFAULT] rpc_conn_pool_size = 30 (IntOpt) Size of RPC connection pool.
[cors] allow_credentials = True (BoolOpt) Indicate that the actual request can include user credentials
[cors] allow_headers = Content-Type, Cache-Control, Content-Language, Expires, Last-Modified, Pragma (ListOpt) Indicate which header field names may be used during the actual request.
[cors] allow_methods = GET, POST, PUT, DELETE, OPTIONS (ListOpt) Indicate which methods can be used during the actual request.
[cors] allowed_origin = None (StrOpt) Indicate whether this resource may be shared with the domain received in the requests "origin" header.
[cors] expose_headers = Content-Type, Cache-Control, Content-Language, Expires, Last-Modified, Pragma (ListOpt) Indicate which headers are safe to expose to the API. Defaults to HTTP Simple Headers.
[cors] max_age = 3600 (IntOpt) Maximum cache age of CORS preflight requests.
[cors.subdomain] allow_credentials = True (BoolOpt) Indicate that the actual request can include user credentials
[cors.subdomain] allow_headers = Content-Type, Cache-Control, Content-Language, Expires, Last-Modified, Pragma (ListOpt) Indicate which header field names may be used during the actual request.
[cors.subdomain] allow_methods = GET, POST, PUT, DELETE, OPTIONS (ListOpt) Indicate which methods can be used during the actual request.
[cors.subdomain] allowed_origin = None (StrOpt) Indicate whether this resource may be shared with the domain received in the requests "origin" header.
[cors.subdomain] expose_headers = Content-Type, Cache-Control, Content-Language, Expires, Last-Modified, Pragma (ListOpt) Indicate which headers are safe to expose to the API. Defaults to HTTP Simple Headers.
[cors.subdomain] max_age = 3600 (IntOpt) Maximum cache age of CORS preflight requests.
[endpoint_policy] enabled = True (BoolOpt) Enable endpoint_policy functionality.
[oslo_messaging_qpid] send_single_reply = False (BoolOpt) Send a single AMQP reply to call message. The current behaviour since oslo-incubator is to send two AMQP replies - first one with the payload, a second one to ensure the other have finish to send the payload. We are going to remove it in the N release, but we must keep backward compatible at the same time. This option provides such compatibility - it defaults to False in Liberty and can be turned on for early adopters with a new installations or for testing. Please note, that this option will be removed in M release.
[oslo_messaging_rabbit] kombu_reconnect_timeout = 60 (IntOpt) How long to wait before considering a reconnect attempt to have failed. This value should not be longer than rpc_response_timeout.
[oslo_messaging_rabbit] send_single_reply = False (BoolOpt) Send a single AMQP reply to call message. The current behaviour since oslo-incubator is to send two AMQP replies - first one with the payload, a second one to ensure the other have finish to send the payload. We are going to remove it in the N release, but we must keep backward compatible at the same time. This option provides such compatibility - it defaults to False in Liberty and can be turned on for early adopters with a new installations or for testing. Please note, that this option will be removed in M release.
[oslo_middleware] secure_proxy_ssl_header = X-Forwarded-Proto (StrOpt) The HTTP Header that will be used to determine what the original request protocol scheme was, even if it was hidden by an SSL termination proxy.
New default values
Option Previous default value New default value
[DEFAULT] crypt_strength 40000 10000
[DEFAULT] default_log_levels amqp=WARN, amqplib=WARN, boto=WARN, qpid=WARN, sqlalchemy=WARN, suds=INFO, oslo.messaging=INFO, iso8601=WARN, requests.packages.urllib3.connectionpool=WARN, urllib3.connectionpool=WARN, websocket=WARN, requests.packages.urllib3.util.retry=WARN, urllib3.util.retry=WARN, keystonemiddleware=WARN, routes.middleware=WARN, stevedore=WARN amqp=WARN, amqplib=WARN, boto=WARN, qpid=WARN, sqlalchemy=WARN, suds=INFO, oslo.messaging=INFO, iso8601=WARN, requests.packages.urllib3.connectionpool=WARN, urllib3.connectionpool=WARN, websocket=WARN, requests.packages.urllib3.util.retry=WARN, urllib3.util.retry=WARN, keystonemiddleware=WARN, routes.middleware=WARN, stevedore=WARN, taskflow=WARN
[DEFAULT] logging_exception_prefix %(asctime)s.%(msecs)03d %(process)d TRACE %(name)s %(instance)s %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
[DEFAULT] use_syslog_rfc_format False True
[DEFAULT] verbose False True
[auth] external keystone.auth.plugins.external.DefaultDomain None
[auth] oauth1 keystone.auth.plugins.oauth1.OAuth None
[auth] password keystone.auth.plugins.password.Password None
[auth] token keystone.auth.plugins.token.Token None
[catalog] driver keystone.catalog.backends.sql.Catalog sql
[credential] driver keystone.credential.backends.sql.Credential sql
[domain_config] driver keystone.resource.config_backends.sql.DomainConfig sql
[endpoint_filter] driver keystone.contrib.endpoint_filter.backends.sql.EndpointFilter sql
[endpoint_policy] driver keystone.contrib.endpoint_policy.backends.sql.EndpointPolicy sql
[federation] driver keystone.contrib.federation.backends.sql.Federation sql
[identity] driver keystone.identity.backends.sql.Identity sql
[identity_mapping] driver keystone.identity.mapping_backends.sql.Mapping sql
[identity_mapping] generator keystone.identity.id_generators.sha256.Generator sha256
[oauth1] driver keystone.contrib.oauth1.backends.sql.OAuth1 sql
[oslo_messaging_rabbit] heartbeat_timeout_threshold 0 60
[policy] driver keystone.policy.backends.sql.Policy sql
[revoke] driver keystone.contrib.revoke.backends.sql.Revoke sql
[token] driver keystone.token.persistence.backends.sql.Token sql
[token] provider keystone.token.providers.uuid.Provider uuid
[trust] driver keystone.trust.backends.sql.Trust sql
Deprecated options
Deprecated option New Option
[DEFAULT] use_syslog None
[DEFAULT] log_format None
[DEFAULT] rpc_thread_pool_size [DEFAULT] executor_thread_pool_size