b5917e35ac
Adds new config value for accessing nova metadata api with SSL. In case nova api requires client certificate other config values were added providing client certificate and client private key. DocImpact Closes-bug: #1293587 Change-Id: I782a12eb77553f4369b782071b4ad19efb82e5e2
53 lines
1.7 KiB
INI
53 lines
1.7 KiB
INI
[DEFAULT]
|
|
# Show debugging output in log (sets DEBUG log level output)
|
|
# debug = True
|
|
|
|
# The Neutron user information for accessing the Neutron API.
|
|
auth_url = http://localhost:5000/v2.0
|
|
auth_region = RegionOne
|
|
# Turn off verification of the certificate for ssl
|
|
# auth_insecure = False
|
|
# Certificate Authority public key (CA cert) file for ssl
|
|
# auth_ca_cert =
|
|
admin_tenant_name = %SERVICE_TENANT_NAME%
|
|
admin_user = %SERVICE_USER%
|
|
admin_password = %SERVICE_PASSWORD%
|
|
|
|
# Network service endpoint type to pull from the keystone catalog
|
|
# endpoint_type = adminURL
|
|
|
|
# IP address used by Nova metadata server
|
|
# nova_metadata_ip = 127.0.0.1
|
|
|
|
# TCP Port used by Nova metadata server
|
|
# nova_metadata_port = 8775
|
|
|
|
# Which protocol to use for requests to Nova metadata server, http or https
|
|
# nova_metadata_protocol = http
|
|
|
|
# Whether insecure SSL connection should be accepted for Nova metadata server
|
|
# requests
|
|
# nova_metadata_insecure = False
|
|
|
|
# Client certificate for nova api, needed when nova api requires client
|
|
# certificates
|
|
# nova_client_cert =
|
|
|
|
# Private key for nova client certificate
|
|
# nova_client_priv_key =
|
|
|
|
# When proxying metadata requests, Neutron signs the Instance-ID header with a
|
|
# shared secret to prevent spoofing. You may select any string for a secret,
|
|
# but it must match here and in the configuration used by the Nova Metadata
|
|
# Server. NOTE: Nova uses a different key: neutron_metadata_proxy_shared_secret
|
|
# metadata_proxy_shared_secret =
|
|
|
|
# Location of Metadata Proxy UNIX domain socket
|
|
# metadata_proxy_socket = $state_path/metadata_proxy
|
|
|
|
# Number of separate worker processes for metadata server
|
|
# metadata_workers = 0
|
|
|
|
# Number of backlog requests to configure the metadata server socket with
|
|
# metadata_backlog = 128
|