# Copyright 2017 The Openstack-Helm Authors. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. {{ include "cinder.conf.cinder_values_skeleton" .Values.conf.cinder | trunc 0 }} {{ include "cinder.conf.cinder" .Values.conf.cinder }} {{- define "cinder.conf.cinder_values_skeleton" -}} {{- if not .default -}}{{- set . "default" dict -}}{{- end -}} {{- if not .default.cinder -}}{{- set .default "cinder" dict -}}{{- end -}} {{- if not .default.oslo -}}{{- set .default "oslo" dict -}}{{- end -}} {{- if not .default.oslo.config -}}{{- set .default.oslo "config" dict -}}{{- end -}} {{- if not .default.oslo.log -}}{{- set .default.oslo "log" dict -}}{{- end -}} {{- if not .default.oslo.messaging -}}{{- set .default.oslo "messaging" dict -}}{{- end -}} {{- if not .default.oslo.service -}}{{- set .default.oslo "service" dict -}}{{- end -}} {{- if not .default.oslo.service.periodic_task -}}{{- set .default.oslo.service "periodic_task" dict -}}{{- end -}} {{- if not .default.oslo.service.service -}}{{- set .default.oslo.service "service" dict -}}{{- end -}} {{- if not .default.oslo.service.wsgi -}}{{- set .default.oslo.service "wsgi" dict -}}{{- end -}} {{- if not .backend -}}{{- set . "backend" dict -}}{{- end -}} {{- if not .backend.cinder -}}{{- set .backend "cinder" dict -}}{{- end -}} {{- if not .brcd_fabric_example -}}{{- set . "brcd_fabric_example" dict -}}{{- end -}} {{- if not .brcd_fabric_example.cinder -}}{{- set .brcd_fabric_example "cinder" dict -}}{{- end -}} {{- if not .cisco_fabric_example -}}{{- set . "cisco_fabric_example" dict -}}{{- end -}} {{- if not .cisco_fabric_example.cinder -}}{{- set .cisco_fabric_example "cinder" dict -}}{{- end -}} {{- if not .coordination -}}{{- set . "coordination" dict -}}{{- end -}} {{- if not .coordination.cinder -}}{{- set .coordination "cinder" dict -}}{{- end -}} {{- if not .fc_zone_manager -}}{{- set . "fc_zone_manager" dict -}}{{- end -}} {{- if not .fc_zone_manager.cinder -}}{{- set .fc_zone_manager "cinder" dict -}}{{- end -}} {{- if not .key_manager -}}{{- set . "key_manager" dict -}}{{- end -}} {{- if not .key_manager.cinder -}}{{- set .key_manager "cinder" dict -}}{{- end -}} {{- if not .barbican -}}{{- set . "barbican" dict -}}{{- end -}} {{- if not .barbican.castellan -}}{{- set .barbican "castellan" dict -}}{{- end -}} {{- if not .barbican.castellan.config -}}{{- set .barbican.castellan "config" dict -}}{{- end -}} {{- if not .cors -}}{{- set . "cors" dict -}}{{- end -}} {{- if not .cors.oslo -}}{{- set .cors "oslo" dict -}}{{- end -}} {{- if not .cors.oslo.middleware -}}{{- set .cors.oslo "middleware" dict -}}{{- end -}} {{- if not .cors.subdomain -}}{{- set .cors "subdomain" dict -}}{{- end -}} {{- if not .cors.subdomain.oslo -}}{{- set .cors.subdomain "oslo" dict -}}{{- end -}} {{- if not .cors.subdomain.oslo.middleware -}}{{- set .cors.subdomain.oslo "middleware" dict -}}{{- end -}} {{- if not .database -}}{{- set . "database" dict -}}{{- end -}} {{- if not .database.oslo -}}{{- set .database "oslo" dict -}}{{- end -}} {{- if not .database.oslo.db -}}{{- set .database.oslo "db" dict -}}{{- end -}} {{- if not .key_manager.castellan -}}{{- set .key_manager "castellan" dict -}}{{- end -}} {{- if not .key_manager.castellan.config -}}{{- set .key_manager.castellan "config" dict -}}{{- end -}} {{- if not .keystone_authtoken -}}{{- set . "keystone_authtoken" dict -}}{{- end -}} {{- if not .keystone_authtoken.keystonemiddleware -}}{{- set .keystone_authtoken "keystonemiddleware" dict -}}{{- end -}} {{- if not .keystone_authtoken.keystonemiddleware.auth_token -}}{{- set .keystone_authtoken.keystonemiddleware "auth_token" dict -}}{{- end -}} {{- if not .matchmaker_redis -}}{{- set . "matchmaker_redis" dict -}}{{- end -}} {{- if not .matchmaker_redis.oslo -}}{{- set .matchmaker_redis "oslo" dict -}}{{- end -}} {{- if not .matchmaker_redis.oslo.messaging -}}{{- set .matchmaker_redis.oslo "messaging" dict -}}{{- end -}} {{- if not .oslo_concurrency -}}{{- set . "oslo_concurrency" dict -}}{{- end -}} {{- if not .oslo_concurrency.oslo -}}{{- set .oslo_concurrency "oslo" dict -}}{{- end -}} {{- if not .oslo_concurrency.oslo.concurrency -}}{{- set .oslo_concurrency.oslo "concurrency" dict -}}{{- end -}} {{- if not .oslo_messaging_amqp -}}{{- set . "oslo_messaging_amqp" dict -}}{{- end -}} {{- if not .oslo_messaging_amqp.oslo -}}{{- set .oslo_messaging_amqp "oslo" dict -}}{{- end -}} {{- if not .oslo_messaging_amqp.oslo.messaging -}}{{- set .oslo_messaging_amqp.oslo "messaging" dict -}}{{- end -}} {{- if not .oslo_messaging_notifications -}}{{- set . "oslo_messaging_notifications" dict -}}{{- end -}} {{- if not .oslo_messaging_notifications.oslo -}}{{- set .oslo_messaging_notifications "oslo" dict -}}{{- end -}} {{- if not .oslo_messaging_notifications.oslo.messaging -}}{{- set .oslo_messaging_notifications.oslo "messaging" dict -}}{{- end -}} {{- if not .oslo_messaging_rabbit -}}{{- set . "oslo_messaging_rabbit" dict -}}{{- end -}} {{- if not .oslo_messaging_rabbit.oslo -}}{{- set .oslo_messaging_rabbit "oslo" dict -}}{{- end -}} {{- if not .oslo_messaging_rabbit.oslo.messaging -}}{{- set .oslo_messaging_rabbit.oslo "messaging" dict -}}{{- end -}} {{- if not .oslo_messaging_zmq -}}{{- set . "oslo_messaging_zmq" dict -}}{{- end -}} {{- if not .oslo_messaging_zmq.oslo -}}{{- set .oslo_messaging_zmq "oslo" dict -}}{{- end -}} {{- if not .oslo_messaging_zmq.oslo.messaging -}}{{- set .oslo_messaging_zmq.oslo "messaging" dict -}}{{- end -}} {{- if not .oslo_middleware -}}{{- set . "oslo_middleware" dict -}}{{- end -}} {{- if not .oslo_middleware.oslo -}}{{- set .oslo_middleware "oslo" dict -}}{{- end -}} {{- if not .oslo_middleware.oslo.middleware -}}{{- set .oslo_middleware.oslo "middleware" dict -}}{{- end -}} {{- if not .oslo_policy -}}{{- set . "oslo_policy" dict -}}{{- end -}} {{- if not .oslo_policy.oslo -}}{{- set .oslo_policy "oslo" dict -}}{{- end -}} {{- if not .oslo_policy.oslo.policy -}}{{- set .oslo_policy.oslo "policy" dict -}}{{- end -}} {{- if not .oslo_reports -}}{{- set . "oslo_reports" dict -}}{{- end -}} {{- if not .oslo_reports.oslo -}}{{- set .oslo_reports "oslo" dict -}}{{- end -}} {{- if not .oslo_reports.oslo.reports -}}{{- set .oslo_reports.oslo "reports" dict -}}{{- end -}} {{- if not .oslo_versionedobjects -}}{{- set . "oslo_versionedobjects" dict -}}{{- end -}} {{- if not .oslo_versionedobjects.oslo -}}{{- set .oslo_versionedobjects "oslo" dict -}}{{- end -}} {{- if not .oslo_versionedobjects.oslo.versionedobjects -}}{{- set .oslo_versionedobjects.oslo "versionedobjects" dict -}}{{- end -}} {{- if not .ssl -}}{{- set . "ssl" dict -}}{{- end -}} {{- if not .ssl.oslo -}}{{- set .ssl "oslo" dict -}}{{- end -}} {{- if not .ssl.oslo.service -}}{{- set .ssl.oslo "service" dict -}}{{- end -}} {{- if not .ssl.oslo.service.sslutils -}}{{- set .ssl.oslo.service "sslutils" dict -}}{{- end -}} {{- end -}} {{- define "cinder.conf.cinder" -}} [DEFAULT] # # From cinder # # Backup metadata version to be used when backing up volume metadata. # If this number is bumped, make sure the service doing the restore # supports the new version. (integer value) # from .default.cinder.backup_metadata_version {{ if not .default.cinder.backup_metadata_version }}#{{ end }}backup_metadata_version = {{ .default.cinder.backup_metadata_version | default "2" }} # The number of chunks or objects, for which one Ceilometer # notification will be sent (integer value) # from .default.cinder.backup_object_number_per_notification {{ if not .default.cinder.backup_object_number_per_notification }}#{{ end }}backup_object_number_per_notification = {{ .default.cinder.backup_object_number_per_notification | default "10" }} # Interval, in seconds, between two progress notifications reporting # the backup status (integer value) # from .default.cinder.backup_timer_interval {{ if not .default.cinder.backup_timer_interval }}#{{ end }}backup_timer_interval = {{ .default.cinder.backup_timer_interval | default "120" }} # Name of this cluster. Used to group volume hosts that share the # same backend configurations to work in HA Active-Active mode. # Active-Active is not yet supported. (string value) # from .default.cinder.cluster {{ if not .default.cinder.cluster }}#{{ end }}cluster = {{ .default.cinder.cluster | default "" }} # The maximum number of items that a collection resource returns in a # single response (integer value) # from .default.cinder.osapi_max_limit {{ if not .default.cinder.osapi_max_limit }}#{{ end }}osapi_max_limit = {{ .default.cinder.osapi_max_limit | default "1000" }} # Base URL that will be presented to users in links to the OpenStack # Volume API (string value) # Deprecated group/name - [DEFAULT]/osapi_compute_link_prefix # from .default.cinder.osapi_volume_base_URL {{ if not .default.cinder.osapi_volume_base_URL }}#{{ end }}osapi_volume_base_URL = {{ .default.cinder.osapi_volume_base_URL | default "" }} # Volume filter options which non-admin user could use to query # volumes. Default values are: ['name', 'status', 'metadata', # 'availability_zone' ,'bootable', 'group_id'] (list value) # from .default.cinder.query_volume_filters {{ if not .default.cinder.query_volume_filters }}#{{ end }}query_volume_filters = {{ .default.cinder.query_volume_filters | default "name,status,metadata,availability_zone,bootable,group_id" }} # Ceph configuration file to use. (string value) # from .default.cinder.backup_ceph_conf {{ if not .default.cinder.backup_ceph_conf }}#{{ end }}backup_ceph_conf = {{ .default.cinder.backup_ceph_conf | default "/etc/ceph/ceph.conf" }} # The Ceph user to connect with. Default here is to use the same user # as for Cinder volumes. If not using cephx this should be set to # None. (string value) # from .default.cinder.backup_ceph_user {{ if not .default.cinder.backup_ceph_user }}#{{ end }}backup_ceph_user = {{ .default.cinder.backup_ceph_user | default "cinder" }} # The chunk size, in bytes, that a backup is broken into before # transfer to the Ceph object store. (integer value) # from .default.cinder.backup_ceph_chunk_size {{ if not .default.cinder.backup_ceph_chunk_size }}#{{ end }}backup_ceph_chunk_size = {{ .default.cinder.backup_ceph_chunk_size | default "134217728" }} # The Ceph pool where volume backups are stored. (string value) # from .default.cinder.backup_ceph_pool {{ if not .default.cinder.backup_ceph_pool }}#{{ end }}backup_ceph_pool = {{ .default.cinder.backup_ceph_pool | default "backups" }} # RBD stripe unit to use when creating a backup image. (integer value) # from .default.cinder.backup_ceph_stripe_unit {{ if not .default.cinder.backup_ceph_stripe_unit }}#{{ end }}backup_ceph_stripe_unit = {{ .default.cinder.backup_ceph_stripe_unit | default "0" }} # RBD stripe count to use when creating a backup image. (integer # value) # from .default.cinder.backup_ceph_stripe_count {{ if not .default.cinder.backup_ceph_stripe_count }}#{{ end }}backup_ceph_stripe_count = {{ .default.cinder.backup_ceph_stripe_count | default "0" }} # If True, always discard excess bytes when restoring volumes i.e. pad # with zeroes. (boolean value) # from .default.cinder.restore_discard_excess_bytes {{ if not .default.cinder.restore_discard_excess_bytes }}#{{ end }}restore_discard_excess_bytes = {{ .default.cinder.restore_discard_excess_bytes | default "true" }} # Compression algorithm (None to disable) (string value) # from .default.cinder.backup_compression_algorithm {{ if not .default.cinder.backup_compression_algorithm }}#{{ end }}backup_compression_algorithm = {{ .default.cinder.backup_compression_algorithm | default "zlib" }} # Sets the value of TCP_KEEPALIVE (True/False) for each server socket. # (boolean value) # from .default.cinder.tcp_keepalive {{ if not .default.cinder.tcp_keepalive }}#{{ end }}tcp_keepalive = {{ .default.cinder.tcp_keepalive | default "true" }} # Sets the value of TCP_KEEPINTVL in seconds for each server socket. # Not supported on OS X. (integer value) # from .default.cinder.tcp_keepalive_interval {{ if not .default.cinder.tcp_keepalive_interval }}#{{ end }}tcp_keepalive_interval = {{ .default.cinder.tcp_keepalive_interval | default "" }} # Sets the value of TCP_KEEPCNT for each server socket. Not supported # on OS X. (integer value) # from .default.cinder.tcp_keepalive_count {{ if not .default.cinder.tcp_keepalive_count }}#{{ end }}tcp_keepalive_count = {{ .default.cinder.tcp_keepalive_count | default "" }} # Option to enable strict host key checking. When set to "True" # Cinder will only connect to systems with a host key present in the # configured "ssh_hosts_key_file". When set to "False" the host key # will be saved upon first connection and used for subsequent # connections. Default=False (boolean value) # from .default.cinder.strict_ssh_host_key_policy {{ if not .default.cinder.strict_ssh_host_key_policy }}#{{ end }}strict_ssh_host_key_policy = {{ .default.cinder.strict_ssh_host_key_policy | default "false" }} # File containing SSH host keys for the systems with which Cinder # needs to communicate. OPTIONAL: Default=$state_path/ssh_known_hosts # (string value) # from .default.cinder.ssh_hosts_key_file {{ if not .default.cinder.ssh_hosts_key_file }}#{{ end }}ssh_hosts_key_file = {{ .default.cinder.ssh_hosts_key_file | default "$state_path/ssh_known_hosts" }} # Base dir containing mount point for gluster share. (string value) # from .default.cinder.glusterfs_backup_mount_point {{ if not .default.cinder.glusterfs_backup_mount_point }}#{{ end }}glusterfs_backup_mount_point = {{ .default.cinder.glusterfs_backup_mount_point | default "$state_path/backup_mount" }} # GlusterFS share in : # format. Eg: 1.2.3.4:backup_vol (string value) # from .default.cinder.glusterfs_backup_share {{ if not .default.cinder.glusterfs_backup_share }}#{{ end }}glusterfs_backup_share = {{ .default.cinder.glusterfs_backup_share | default "" }} # Volume prefix for the backup id when backing up to TSM (string # value) # from .default.cinder.backup_tsm_volume_prefix {{ if not .default.cinder.backup_tsm_volume_prefix }}#{{ end }}backup_tsm_volume_prefix = {{ .default.cinder.backup_tsm_volume_prefix | default "backup" }} # TSM password for the running username (string value) # from .default.cinder.backup_tsm_password {{ if not .default.cinder.backup_tsm_password }}#{{ end }}backup_tsm_password = {{ .default.cinder.backup_tsm_password | default "password" }} # Enable or Disable compression for backups (boolean value) # from .default.cinder.backup_tsm_compression {{ if not .default.cinder.backup_tsm_compression }}#{{ end }}backup_tsm_compression = {{ .default.cinder.backup_tsm_compression | default "true" }} # Make exception message format errors fatal. (boolean value) # from .default.cinder.fatal_exception_format_errors {{ if not .default.cinder.fatal_exception_format_errors }}#{{ end }}fatal_exception_format_errors = {{ .default.cinder.fatal_exception_format_errors | default "false" }} # Top-level directory for maintaining cinder's state (string value) # Deprecated group/name - [DEFAULT]/pybasedir # from .default.cinder.state_path {{ if not .default.cinder.state_path }}#{{ end }}state_path = {{ .default.cinder.state_path | default "/var/lib/cinder" }} # IP address of this host (string value) # from .default.cinder.my_ip {{ if not .default.cinder.my_ip }}#{{ end }}my_ip = {{ .default.cinder.my_ip | default "10.102.86.147" }} # A list of the URLs of glance API servers available to cinder # ([http[s]://][hostname|ip]:port). If protocol is not specified it # defaults to http. (list value) # from .default.cinder.glance_api_servers {{ if not .default.cinder.glance_api_servers }}#{{ end }}glance_api_servers = {{ .default.cinder.glance_api_servers | default "" }} # Version of the glance API to use (integer value) # from .default.cinder.glance_api_version {{ if not .default.cinder.glance_api_version }}#{{ end }}glance_api_version = {{ .default.cinder.glance_api_version | default "1" }} # Number retries when downloading an image from glance (integer value) # Minimum value: 0 # from .default.cinder.glance_num_retries {{ if not .default.cinder.glance_num_retries }}#{{ end }}glance_num_retries = {{ .default.cinder.glance_num_retries | default "0" }} # Allow to perform insecure SSL (https) requests to glance (https will # be used but cert validation will not be performed). (boolean value) # from .default.cinder.glance_api_insecure {{ if not .default.cinder.glance_api_insecure }}#{{ end }}glance_api_insecure = {{ .default.cinder.glance_api_insecure | default "false" }} # Enables or disables negotiation of SSL layer compression. In some # cases disabling compression can improve data throughput, such as # when high network bandwidth is available and you use compressed # image formats like qcow2. (boolean value) # from .default.cinder.glance_api_ssl_compression {{ if not .default.cinder.glance_api_ssl_compression }}#{{ end }}glance_api_ssl_compression = {{ .default.cinder.glance_api_ssl_compression | default "false" }} # Location of ca certificates file to use for glance client requests. # (string value) # from .default.cinder.glance_ca_certificates_file {{ if not .default.cinder.glance_ca_certificates_file }}#{{ end }}glance_ca_certificates_file = {{ .default.cinder.glance_ca_certificates_file | default "" }} # http/https timeout value for glance operations. If no value (None) # is supplied here, the glanceclient default value is used. (integer # value) # from .default.cinder.glance_request_timeout {{ if not .default.cinder.glance_request_timeout }}#{{ end }}glance_request_timeout = {{ .default.cinder.glance_request_timeout | default "" }} # DEPRECATED: Deploy v1 of the Cinder API. (boolean value) # This option is deprecated for removal. # Its value may be silently ignored in the future. # from .default.cinder.enable_v1_api {{ if not .default.cinder.enable_v1_api }}#{{ end }}enable_v1_api = {{ .default.cinder.enable_v1_api | default "true" }} # DEPRECATED: Deploy v2 of the Cinder API. (boolean value) # This option is deprecated for removal. # Its value may be silently ignored in the future. # from .default.cinder.enable_v2_api {{ if not .default.cinder.enable_v2_api }}#{{ end }}enable_v2_api = {{ .default.cinder.enable_v2_api | default "true" }} # Deploy v3 of the Cinder API. (boolean value) # from .default.cinder.enable_v3_api {{ if not .default.cinder.enable_v3_api }}#{{ end }}enable_v3_api = {{ .default.cinder.enable_v3_api | default "true" }} # Enables or disables rate limit of the API. (boolean value) # from .default.cinder.api_rate_limit {{ if not .default.cinder.api_rate_limit }}#{{ end }}api_rate_limit = {{ .default.cinder.api_rate_limit | default "true" }} # Specify list of extensions to load when using osapi_volume_extension # option with cinder.api.contrib.select_extensions (list value) # from .default.cinder.osapi_volume_ext_list {{ if not .default.cinder.osapi_volume_ext_list }}#{{ end }}osapi_volume_ext_list = {{ .default.cinder.osapi_volume_ext_list | default "" }} # osapi volume extension to load (multi valued) # from .default.cinder.osapi_volume_extension (multiopt) {{ if not .default.cinder.osapi_volume_extension }}#osapi_volume_extension = {{ .default.cinder.osapi_volume_extension | default "cinder.api.contrib.standard_extensions" }}{{ else }}{{ range .default.cinder.osapi_volume_extension }}osapi_volume_extension = {{ . }}{{ end }}{{ end }} # Full class name for the Manager for volume (string value) # from .default.cinder.volume_manager {{ if not .default.cinder.volume_manager }}#{{ end }}volume_manager = {{ .default.cinder.volume_manager | default "cinder.volume.manager.VolumeManager" }} # Full class name for the Manager for volume backup (string value) # from .default.cinder.backup_manager {{ if not .default.cinder.backup_manager }}#{{ end }}backup_manager = {{ .default.cinder.backup_manager | default "cinder.backup.manager.BackupManager" }} # Full class name for the Manager for scheduler (string value) # from .default.cinder.scheduler_manager {{ if not .default.cinder.scheduler_manager }}#{{ end }}scheduler_manager = {{ .default.cinder.scheduler_manager | default "cinder.scheduler.manager.SchedulerManager" }} # Name of this node. This can be an opaque identifier. It is not # necessarily a host name, FQDN, or IP address. (string value) # from .default.cinder.host {{ if not .default.cinder.host }}#{{ end }}host = {{ .default.cinder.host | default "cinder-volume-worker" }} # Availability zone of this node (string value) # from .default.cinder.storage_availability_zone {{ if not .default.cinder.storage_availability_zone }}#{{ end }}storage_availability_zone = {{ .default.cinder.storage_availability_zone | default "nova" }} # Default availability zone for new volumes. If not set, the # storage_availability_zone option value is used as the default for # new volumes. (string value) # from .default.cinder.default_availability_zone {{ if not .default.cinder.default_availability_zone }}#{{ end }}default_availability_zone = {{ .default.cinder.default_availability_zone | default "" }} # If the requested Cinder availability zone is unavailable, fall back # to the value of default_availability_zone, then # storage_availability_zone, instead of failing. (boolean value) # from .default.cinder.allow_availability_zone_fallback {{ if not .default.cinder.allow_availability_zone_fallback }}#{{ end }}allow_availability_zone_fallback = {{ .default.cinder.allow_availability_zone_fallback | default "false" }} # Default volume type to use (string value) # from .default.cinder.default_volume_type {{ if not .default.cinder.default_volume_type }}#{{ end }}default_volume_type = {{ .default.cinder.default_volume_type | default "" }} # Default group type to use (string value) # from .default.cinder.default_group_type {{ if not .default.cinder.default_group_type }}#{{ end }}default_group_type = {{ .default.cinder.default_group_type | default "" }} # Time period for which to generate volume usages. The options are # hour, day, month, or year. (string value) # from .default.cinder.volume_usage_audit_period {{ if not .default.cinder.volume_usage_audit_period }}#{{ end }}volume_usage_audit_period = {{ .default.cinder.volume_usage_audit_period | default "month" }} # Path to the rootwrap configuration file to use for running commands # as root (string value) # from .default.cinder.rootwrap_config {{ if not .default.cinder.rootwrap_config }}#{{ end }}rootwrap_config = {{ .default.cinder.rootwrap_config | default "/etc/cinder/rootwrap.conf" }} # Enable monkey patching (boolean value) # from .default.cinder.monkey_patch {{ if not .default.cinder.monkey_patch }}#{{ end }}monkey_patch = {{ .default.cinder.monkey_patch | default "false" }} # List of modules/decorators to monkey patch (list value) # from .default.cinder.monkey_patch_modules {{ if not .default.cinder.monkey_patch_modules }}#{{ end }}monkey_patch_modules = {{ .default.cinder.monkey_patch_modules | default "" }} # Maximum time since last check-in for a service to be considered up # (integer value) # from .default.cinder.service_down_time {{ if not .default.cinder.service_down_time }}#{{ end }}service_down_time = {{ .default.cinder.service_down_time | default "60" }} # The full class name of the volume API class to use (string value) # from .default.cinder.volume_api_class {{ if not .default.cinder.volume_api_class }}#{{ end }}volume_api_class = {{ .default.cinder.volume_api_class | default "cinder.volume.api.API" }} # The full class name of the volume backup API class (string value) # from .default.cinder.backup_api_class {{ if not .default.cinder.backup_api_class }}#{{ end }}backup_api_class = {{ .default.cinder.backup_api_class | default "cinder.backup.api.API" }} # The strategy to use for auth. Supports noauth or keystone. (string # value) # Allowed values: noauth, keystone # from .default.cinder.auth_strategy {{ if not .default.cinder.auth_strategy }}#{{ end }}auth_strategy = {{ .default.cinder.auth_strategy | default "keystone" }} # A list of backend names to use. These backend names should be backed # by a unique [CONFIG] group with its options (list value) # from .default.cinder.enabled_backends {{ if not .default.cinder.enabled_backends }}#{{ end }}enabled_backends = {{ .default.cinder.enabled_backends | default "" }} # Whether snapshots count against gigabyte quota (boolean value) # from .default.cinder.no_snapshot_gb_quota {{ if not .default.cinder.no_snapshot_gb_quota }}#{{ end }}no_snapshot_gb_quota = {{ .default.cinder.no_snapshot_gb_quota | default "false" }} # The full class name of the volume transfer API class (string value) # from .default.cinder.transfer_api_class {{ if not .default.cinder.transfer_api_class }}#{{ end }}transfer_api_class = {{ .default.cinder.transfer_api_class | default "cinder.transfer.api.API" }} # The full class name of the volume replication API class (string # value) # from .default.cinder.replication_api_class {{ if not .default.cinder.replication_api_class }}#{{ end }}replication_api_class = {{ .default.cinder.replication_api_class | default "cinder.replication.api.API" }} # The full class name of the consistencygroup API class (string value) # from .default.cinder.consistencygroup_api_class {{ if not .default.cinder.consistencygroup_api_class }}#{{ end }}consistencygroup_api_class = {{ .default.cinder.consistencygroup_api_class | default "cinder.consistencygroup.api.API" }} # The full class name of the group API class (string value) # from .default.cinder.group_api_class {{ if not .default.cinder.group_api_class }}#{{ end }}group_api_class = {{ .default.cinder.group_api_class | default "cinder.group.api.API" }} # OpenStack privileged account username. Used for requests to other # services (such as Nova) that require an account with special rights. # (string value) # from .default.cinder.os_privileged_user_name {{ if not .default.cinder.os_privileged_user_name }}#{{ end }}os_privileged_user_name = {{ .default.cinder.os_privileged_user_name | default "" }} # Password associated with the OpenStack privileged account. (string # value) # from .default.cinder.os_privileged_user_password {{ if not .default.cinder.os_privileged_user_password }}#{{ end }}os_privileged_user_password = {{ .default.cinder.os_privileged_user_password | default "" }} # Tenant name associated with the OpenStack privileged account. # (string value) # from .default.cinder.os_privileged_user_tenant {{ if not .default.cinder.os_privileged_user_tenant }}#{{ end }}os_privileged_user_tenant = {{ .default.cinder.os_privileged_user_tenant | default "" }} # Auth URL associated with the OpenStack privileged account. (string # value) # from .default.cinder.os_privileged_user_auth_url {{ if not .default.cinder.os_privileged_user_auth_url }}#{{ end }}os_privileged_user_auth_url = {{ .default.cinder.os_privileged_user_auth_url | default "" }} # Multiplier used for weighing free capacity. Negative numbers mean to # stack vs spread. (floating point value) # from .default.cinder.capacity_weight_multiplier {{ if not .default.cinder.capacity_weight_multiplier }}#{{ end }}capacity_weight_multiplier = {{ .default.cinder.capacity_weight_multiplier | default "1.0" }} # Multiplier used for weighing allocated capacity. Positive numbers # mean to stack vs spread. (floating point value) # from .default.cinder.allocated_capacity_weight_multiplier {{ if not .default.cinder.allocated_capacity_weight_multiplier }}#{{ end }}allocated_capacity_weight_multiplier = {{ .default.cinder.allocated_capacity_weight_multiplier | default "-1.0" }} # Max size for body of a request (integer value) # from .default.cinder.osapi_max_request_body_size {{ if not .default.cinder.osapi_max_request_body_size }}#{{ end }}osapi_max_request_body_size = {{ .default.cinder.osapi_max_request_body_size | default "114688" }} # The URL of the Swift endpoint (string value) # from .default.cinder.backup_swift_url {{ if not .default.cinder.backup_swift_url }}#{{ end }}backup_swift_url = {{ .default.cinder.backup_swift_url | default "" }} # The URL of the Keystone endpoint (string value) # from .default.cinder.backup_swift_auth_url {{ if not .default.cinder.backup_swift_auth_url }}#{{ end }}backup_swift_auth_url = {{ .default.cinder.backup_swift_auth_url | default "" }} # Info to match when looking for swift in the service catalog. Format # is: separated values of the form: # :: - Only used if # backup_swift_url is unset (string value) # from .default.cinder.swift_catalog_info {{ if not .default.cinder.swift_catalog_info }}#{{ end }}swift_catalog_info = {{ .default.cinder.swift_catalog_info | default "object-store:swift:publicURL" }} # Info to match when looking for keystone in the service catalog. # Format is: separated values of the form: # :: - Only used if # backup_swift_auth_url is unset (string value) # from .default.cinder.keystone_catalog_info {{ if not .default.cinder.keystone_catalog_info }}#{{ end }}keystone_catalog_info = {{ .default.cinder.keystone_catalog_info | default "identity:Identity Service:publicURL" }} # Swift authentication mechanism (string value) # from .default.cinder.backup_swift_auth {{ if not .default.cinder.backup_swift_auth }}#{{ end }}backup_swift_auth = {{ .default.cinder.backup_swift_auth | default "per_user" }} # Swift authentication version. Specify "1" for auth 1.0, or "2" for # auth 2.0 or "3" for auth 3.0 (string value) # from .default.cinder.backup_swift_auth_version {{ if not .default.cinder.backup_swift_auth_version }}#{{ end }}backup_swift_auth_version = {{ .default.cinder.backup_swift_auth_version | default "1" }} # Swift tenant/account name. Required when connecting to an auth 2.0 # system (string value) # from .default.cinder.backup_swift_tenant {{ if not .default.cinder.backup_swift_tenant }}#{{ end }}backup_swift_tenant = {{ .default.cinder.backup_swift_tenant | default "" }} # Swift user domain name. Required when connecting to an auth 3.0 # system (string value) # from .default.cinder.backup_swift_user_domain {{ if not .default.cinder.backup_swift_user_domain }}#{{ end }}backup_swift_user_domain = {{ .default.cinder.backup_swift_user_domain | default "" }} # Swift project domain name. Required when connecting to an auth 3.0 # system (string value) # from .default.cinder.backup_swift_project_domain {{ if not .default.cinder.backup_swift_project_domain }}#{{ end }}backup_swift_project_domain = {{ .default.cinder.backup_swift_project_domain | default "" }} # Swift project/account name. Required when connecting to an auth 3.0 # system (string value) # from .default.cinder.backup_swift_project {{ if not .default.cinder.backup_swift_project }}#{{ end }}backup_swift_project = {{ .default.cinder.backup_swift_project | default "" }} # Swift user name (string value) # from .default.cinder.backup_swift_user {{ if not .default.cinder.backup_swift_user }}#{{ end }}backup_swift_user = {{ .default.cinder.backup_swift_user | default "" }} # Swift key for authentication (string value) # from .default.cinder.backup_swift_key {{ if not .default.cinder.backup_swift_key }}#{{ end }}backup_swift_key = {{ .default.cinder.backup_swift_key | default "" }} # The default Swift container to use (string value) # from .default.cinder.backup_swift_container {{ if not .default.cinder.backup_swift_container }}#{{ end }}backup_swift_container = {{ .default.cinder.backup_swift_container | default "volumebackups" }} # The size in bytes of Swift backup objects (integer value) # from .default.cinder.backup_swift_object_size {{ if not .default.cinder.backup_swift_object_size }}#{{ end }}backup_swift_object_size = {{ .default.cinder.backup_swift_object_size | default "52428800" }} # The size in bytes that changes are tracked for incremental backups. # backup_swift_object_size has to be multiple of # backup_swift_block_size. (integer value) # from .default.cinder.backup_swift_block_size {{ if not .default.cinder.backup_swift_block_size }}#{{ end }}backup_swift_block_size = {{ .default.cinder.backup_swift_block_size | default "32768" }} # The number of retries to make for Swift operations (integer value) # from .default.cinder.backup_swift_retry_attempts {{ if not .default.cinder.backup_swift_retry_attempts }}#{{ end }}backup_swift_retry_attempts = {{ .default.cinder.backup_swift_retry_attempts | default "3" }} # The backoff time in seconds between Swift retries (integer value) # from .default.cinder.backup_swift_retry_backoff {{ if not .default.cinder.backup_swift_retry_backoff }}#{{ end }}backup_swift_retry_backoff = {{ .default.cinder.backup_swift_retry_backoff | default "2" }} # Enable or Disable the timer to send the periodic progress # notifications to Ceilometer when backing up the volume to the Swift # backend storage. The default value is True to enable the timer. # (boolean value) # from .default.cinder.backup_swift_enable_progress_timer {{ if not .default.cinder.backup_swift_enable_progress_timer }}#{{ end }}backup_swift_enable_progress_timer = {{ .default.cinder.backup_swift_enable_progress_timer | default "true" }} # Location of the CA certificate file to use for swift client # requests. (string value) # from .default.cinder.backup_swift_ca_cert_file {{ if not .default.cinder.backup_swift_ca_cert_file }}#{{ end }}backup_swift_ca_cert_file = {{ .default.cinder.backup_swift_ca_cert_file | default "" }} # Bypass verification of server certificate when making SSL connection # to Swift. (boolean value) # from .default.cinder.backup_swift_auth_insecure {{ if not .default.cinder.backup_swift_auth_insecure }}#{{ end }}backup_swift_auth_insecure = {{ .default.cinder.backup_swift_auth_insecure | default "false" }} # Interval, in seconds, between nodes reporting state to datastore # (integer value) # from .default.cinder.report_interval {{ if not .default.cinder.report_interval }}#{{ end }}report_interval = {{ .default.cinder.report_interval | default "10" }} # Interval, in seconds, between running periodic tasks (integer value) # from .default.cinder.periodic_interval {{ if not .default.cinder.periodic_interval }}#{{ end }}periodic_interval = {{ .default.cinder.periodic_interval | default "60" }} # Range, in seconds, to randomly delay when starting the periodic task # scheduler to reduce stampeding. (Disable by setting to 0) (integer # value) # from .default.cinder.periodic_fuzzy_delay {{ if not .default.cinder.periodic_fuzzy_delay }}#{{ end }}periodic_fuzzy_delay = {{ .default.cinder.periodic_fuzzy_delay | default "60" }} # IP address on which OpenStack Volume API listens (string value) # from .default.cinder.osapi_volume_listen {{ if not .default.cinder.osapi_volume_listen }}#{{ end }}osapi_volume_listen = {{ .default.cinder.osapi_volume_listen | default "0.0.0.0" }} # Port on which OpenStack Volume API listens (port value) # Minimum value: 0 # Maximum value: 65535 # from .default.cinder.osapi_volume_listen_port {{ if not .default.cinder.osapi_volume_listen_port }}#{{ end }}osapi_volume_listen_port = {{ .default.cinder.osapi_volume_listen_port | default "8776" }} # Number of workers for OpenStack Volume API service. The default is # equal to the number of CPUs available. (integer value) # from .default.cinder.osapi_volume_workers {{ if not .default.cinder.osapi_volume_workers }}#{{ end }}osapi_volume_workers = {{ .default.cinder.osapi_volume_workers | default "" }} # Wraps the socket in a SSL context if True is set. A certificate file # and key file must be specified. (boolean value) # from .default.cinder.osapi_volume_use_ssl {{ if not .default.cinder.osapi_volume_use_ssl }}#{{ end }}osapi_volume_use_ssl = {{ .default.cinder.osapi_volume_use_ssl | default "false" }} # The full class name of the compute API class to use (string value) # from .default.cinder.compute_api_class {{ if not .default.cinder.compute_api_class }}#{{ end }}compute_api_class = {{ .default.cinder.compute_api_class | default "cinder.compute.nova.API" }} # ID of the project which will be used as the Cinder internal tenant. # (string value) # from .default.cinder.cinder_internal_tenant_project_id {{ if not .default.cinder.cinder_internal_tenant_project_id }}#{{ end }}cinder_internal_tenant_project_id = {{ .default.cinder.cinder_internal_tenant_project_id | default "" }} # ID of the user to be used in volume operations as the Cinder # internal tenant. (string value) # from .default.cinder.cinder_internal_tenant_user_id {{ if not .default.cinder.cinder_internal_tenant_user_id }}#{{ end }}cinder_internal_tenant_user_id = {{ .default.cinder.cinder_internal_tenant_user_id | default "" }} # The scheduler host manager class to use (string value) # from .default.cinder.scheduler_host_manager {{ if not .default.cinder.scheduler_host_manager }}#{{ end }}scheduler_host_manager = {{ .default.cinder.scheduler_host_manager | default "cinder.scheduler.host_manager.HostManager" }} # Maximum number of attempts to schedule a volume (integer value) # from .default.cinder.scheduler_max_attempts {{ if not .default.cinder.scheduler_max_attempts }}#{{ end }}scheduler_max_attempts = {{ .default.cinder.scheduler_max_attempts | default "3" }} # The maximum size in bytes of the files used to hold backups. If the # volume being backed up exceeds this size, then it will be backed up # into multiple files.backup_file_size must be a multiple of # backup_sha_block_size_bytes. (integer value) # from .default.cinder.backup_file_size {{ if not .default.cinder.backup_file_size }}#{{ end }}backup_file_size = {{ .default.cinder.backup_file_size | default "1999994880" }} # The size in bytes that changes are tracked for incremental backups. # backup_file_size has to be multiple of backup_sha_block_size_bytes. # (integer value) # from .default.cinder.backup_sha_block_size_bytes {{ if not .default.cinder.backup_sha_block_size_bytes }}#{{ end }}backup_sha_block_size_bytes = {{ .default.cinder.backup_sha_block_size_bytes | default "32768" }} # Enable or Disable the timer to send the periodic progress # notifications to Ceilometer when backing up the volume to the # backend storage. The default value is True to enable the timer. # (boolean value) # from .default.cinder.backup_enable_progress_timer {{ if not .default.cinder.backup_enable_progress_timer }}#{{ end }}backup_enable_progress_timer = {{ .default.cinder.backup_enable_progress_timer | default "true" }} # Path specifying where to store backups. (string value) # from .default.cinder.backup_posix_path {{ if not .default.cinder.backup_posix_path }}#{{ end }}backup_posix_path = {{ .default.cinder.backup_posix_path | default "$state_path/backup" }} # Custom directory to use for backups. (string value) # from .default.cinder.backup_container {{ if not .default.cinder.backup_container }}#{{ end }}backup_container = {{ .default.cinder.backup_container | default "" }} # Driver to use for database access (string value) # from .default.cinder.db_driver {{ if not .default.cinder.db_driver }}#{{ end }}db_driver = {{ .default.cinder.db_driver | default "cinder.db" }} # The number of characters in the salt. (integer value) # from .default.cinder.volume_transfer_salt_length {{ if not .default.cinder.volume_transfer_salt_length }}#{{ end }}volume_transfer_salt_length = {{ .default.cinder.volume_transfer_salt_length | default "8" }} # The number of characters in the autogenerated auth key. (integer # value) # from .default.cinder.volume_transfer_key_length {{ if not .default.cinder.volume_transfer_key_length }}#{{ end }}volume_transfer_key_length = {{ .default.cinder.volume_transfer_key_length | default "16" }} # Services to be added to the available pool on create (boolean value) # from .default.cinder.enable_new_services {{ if not .default.cinder.enable_new_services }}#{{ end }}enable_new_services = {{ .default.cinder.enable_new_services | default "true" }} # Template string to be used to generate volume names (string value) # from .default.cinder.volume_name_template {{ if not .default.cinder.volume_name_template }}#{{ end }}volume_name_template = {{ .default.cinder.volume_name_template | default "volume-%s" }} # Template string to be used to generate snapshot names (string value) # from .default.cinder.snapshot_name_template {{ if not .default.cinder.snapshot_name_template }}#{{ end }}snapshot_name_template = {{ .default.cinder.snapshot_name_template | default "snapshot-%s" }} # Template string to be used to generate backup names (string value) # from .default.cinder.backup_name_template {{ if not .default.cinder.backup_name_template }}#{{ end }}backup_name_template = {{ .default.cinder.backup_name_template | default "backup-%s" }} # Multiplier used for weighing volume number. Negative numbers mean to # spread vs stack. (floating point value) # from .default.cinder.volume_number_multiplier {{ if not .default.cinder.volume_number_multiplier }}#{{ end }}volume_number_multiplier = {{ .default.cinder.volume_number_multiplier | default "-1.0" }} # Number of times to attempt to run flakey shell commands (integer # value) # from .default.cinder.num_shell_tries {{ if not .default.cinder.num_shell_tries }}#{{ end }}num_shell_tries = {{ .default.cinder.num_shell_tries | default "3" }} # The percentage of backend capacity is reserved (integer value) # Minimum value: 0 # Maximum value: 100 # from .default.cinder.reserved_percentage {{ if not .default.cinder.reserved_percentage }}#{{ end }}reserved_percentage = {{ .default.cinder.reserved_percentage | default "0" }} # Prefix for iSCSI volumes (string value) # from .default.cinder.iscsi_target_prefix {{ if not .default.cinder.iscsi_target_prefix }}#{{ end }}iscsi_target_prefix = {{ .default.cinder.iscsi_target_prefix | default "iqn.2010-10.org.openstack:" }} # The IP address that the iSCSI daemon is listening on (string value) # from .default.cinder.iscsi_ip_address {{ if not .default.cinder.iscsi_ip_address }}#{{ end }}iscsi_ip_address = {{ .default.cinder.iscsi_ip_address | default "$my_ip" }} # The list of secondary IP addresses of the iSCSI daemon (list value) # from .default.cinder.iscsi_secondary_ip_addresses {{ if not .default.cinder.iscsi_secondary_ip_addresses }}#{{ end }}iscsi_secondary_ip_addresses = {{ .default.cinder.iscsi_secondary_ip_addresses | default "" }} # The port that the iSCSI daemon is listening on (port value) # Minimum value: 0 # Maximum value: 65535 # from .default.cinder.iscsi_port {{ if not .default.cinder.iscsi_port }}#{{ end }}iscsi_port = {{ .default.cinder.iscsi_port | default "3260" }} # The maximum number of times to rescan targets to find volume # (integer value) # from .default.cinder.num_volume_device_scan_tries {{ if not .default.cinder.num_volume_device_scan_tries }}#{{ end }}num_volume_device_scan_tries = {{ .default.cinder.num_volume_device_scan_tries | default "3" }} # The backend name for a given driver implementation (string value) # from .default.cinder.volume_backend_name {{ if not .default.cinder.volume_backend_name }}#{{ end }}volume_backend_name = {{ .default.cinder.volume_backend_name | default "" }} # Do we attach/detach volumes in cinder using multipath for volume to # image and image to volume transfers? (boolean value) # from .default.cinder.use_multipath_for_image_xfer {{ if not .default.cinder.use_multipath_for_image_xfer }}#{{ end }}use_multipath_for_image_xfer = {{ .default.cinder.use_multipath_for_image_xfer | default "false" }} # If this is set to True, attachment of volumes for image transfer # will be aborted when multipathd is not running. Otherwise, it will # fallback to single path. (boolean value) # from .default.cinder.enforce_multipath_for_image_xfer {{ if not .default.cinder.enforce_multipath_for_image_xfer }}#{{ end }}enforce_multipath_for_image_xfer = {{ .default.cinder.enforce_multipath_for_image_xfer | default "false" }} # Method used to wipe old volumes (string value) # Allowed values: none, zero, shred # from .default.cinder.volume_clear {{ if not .default.cinder.volume_clear }}#{{ end }}volume_clear = {{ .default.cinder.volume_clear | default "zero" }} # Size in MiB to wipe at start of old volumes. 1024 MiBat max. 0 => # all (integer value) # Maximum value: 1024 # from .default.cinder.volume_clear_size {{ if not .default.cinder.volume_clear_size }}#{{ end }}volume_clear_size = {{ .default.cinder.volume_clear_size | default "0" }} # The flag to pass to ionice to alter the i/o priority of the process # used to zero a volume after deletion, for example "-c3" for idle # only priority. (string value) # from .default.cinder.volume_clear_ionice {{ if not .default.cinder.volume_clear_ionice }}#{{ end }}volume_clear_ionice = {{ .default.cinder.volume_clear_ionice | default "" }} # iSCSI target user-land tool to use. tgtadm is default, use lioadm # for LIO iSCSI support, scstadmin for SCST target support, ietadm for # iSCSI Enterprise Target, iscsictl for Chelsio iSCSI Target or fake # for testing. (string value) # Allowed values: tgtadm, lioadm, scstadmin, iscsictl, ietadm, fake # from .default.cinder.iscsi_helper {{ if not .default.cinder.iscsi_helper }}#{{ end }}iscsi_helper = {{ .default.cinder.iscsi_helper | default "tgtadm" }} # Volume configuration file storage directory (string value) # from .default.cinder.volumes_dir {{ if not .default.cinder.volumes_dir }}#{{ end }}volumes_dir = {{ .default.cinder.volumes_dir | default "$state_path/volumes" }} # IET configuration file (string value) # from .default.cinder.iet_conf {{ if not .default.cinder.iet_conf }}#{{ end }}iet_conf = {{ .default.cinder.iet_conf | default "/etc/iet/ietd.conf" }} # Chiscsi (CXT) global defaults configuration file (string value) # from .default.cinder.chiscsi_conf {{ if not .default.cinder.chiscsi_conf }}#{{ end }}chiscsi_conf = {{ .default.cinder.chiscsi_conf | default "/etc/chelsio-iscsi/chiscsi.conf" }} # Sets the behavior of the iSCSI target to either perform blockio or # fileio optionally, auto can be set and Cinder will autodetect type # of backing device (string value) # Allowed values: blockio, fileio, auto # from .default.cinder.iscsi_iotype {{ if not .default.cinder.iscsi_iotype }}#{{ end }}iscsi_iotype = {{ .default.cinder.iscsi_iotype | default "fileio" }} # The default block size used when copying/clearing volumes (string # value) # from .default.cinder.volume_dd_blocksize {{ if not .default.cinder.volume_dd_blocksize }}#{{ end }}volume_dd_blocksize = {{ .default.cinder.volume_dd_blocksize | default "1M" }} # The blkio cgroup name to be used to limit bandwidth of volume copy # (string value) # from .default.cinder.volume_copy_blkio_cgroup_name {{ if not .default.cinder.volume_copy_blkio_cgroup_name }}#{{ end }}volume_copy_blkio_cgroup_name = {{ .default.cinder.volume_copy_blkio_cgroup_name | default "cinder-volume-copy" }} # The upper limit of bandwidth of volume copy. 0 => unlimited (integer # value) # from .default.cinder.volume_copy_bps_limit {{ if not .default.cinder.volume_copy_bps_limit }}#{{ end }}volume_copy_bps_limit = {{ .default.cinder.volume_copy_bps_limit | default "0" }} # Sets the behavior of the iSCSI target to either perform write- # back(on) or write-through(off). This parameter is valid if # iscsi_helper is set to tgtadm. (string value) # Allowed values: on, off # from .default.cinder.iscsi_write_cache {{ if not .default.cinder.iscsi_write_cache }}#{{ end }}iscsi_write_cache = {{ .default.cinder.iscsi_write_cache | default "on" }} # Sets the target-specific flags for the iSCSI target. Only used for # tgtadm to specify backing device flags using bsoflags option. The # specified string is passed as is to the underlying tool. (string # value) # from .default.cinder.iscsi_target_flags {{ if not .default.cinder.iscsi_target_flags }}#{{ end }}iscsi_target_flags = {{ .default.cinder.iscsi_target_flags | default "" }} # Determines the iSCSI protocol for new iSCSI volumes, created with # tgtadm or lioadm target helpers. In order to enable RDMA, this # parameter should be set with the value "iser". The supported iSCSI # protocol values are "iscsi" and "iser". (string value) # Allowed values: iscsi, iser # from .default.cinder.iscsi_protocol {{ if not .default.cinder.iscsi_protocol }}#{{ end }}iscsi_protocol = {{ .default.cinder.iscsi_protocol | default "iscsi" }} # The path to the client certificate key for verification, if the # driver supports it. (string value) # from .default.cinder.driver_client_cert_key {{ if not .default.cinder.driver_client_cert_key }}#{{ end }}driver_client_cert_key = {{ .default.cinder.driver_client_cert_key | default "" }} # The path to the client certificate for verification, if the driver # supports it. (string value) # from .default.cinder.driver_client_cert {{ if not .default.cinder.driver_client_cert }}#{{ end }}driver_client_cert = {{ .default.cinder.driver_client_cert | default "" }} # Tell driver to use SSL for connection to backend storage if the # driver supports it. (boolean value) # from .default.cinder.driver_use_ssl {{ if not .default.cinder.driver_use_ssl }}#{{ end }}driver_use_ssl = {{ .default.cinder.driver_use_ssl | default "false" }} # Float representation of the over subscription ratio when thin # provisioning is involved. Default ratio is 20.0, meaning provisioned # capacity can be 20 times of the total physical capacity. If the # ratio is 10.5, it means provisioned capacity can be 10.5 times of # the total physical capacity. A ratio of 1.0 means provisioned # capacity cannot exceed the total physical capacity. The ratio has to # be a minimum of 1.0. (floating point value) # from .default.cinder.max_over_subscription_ratio {{ if not .default.cinder.max_over_subscription_ratio }}#{{ end }}max_over_subscription_ratio = {{ .default.cinder.max_over_subscription_ratio | default "20.0" }} # Certain ISCSI targets have predefined target names, SCST target # driver uses this name. (string value) # from .default.cinder.scst_target_iqn_name {{ if not .default.cinder.scst_target_iqn_name }}#{{ end }}scst_target_iqn_name = {{ .default.cinder.scst_target_iqn_name | default "" }} # SCST target implementation can choose from multiple SCST target # drivers. (string value) # from .default.cinder.scst_target_driver {{ if not .default.cinder.scst_target_driver }}#{{ end }}scst_target_driver = {{ .default.cinder.scst_target_driver | default "iscsi" }} # Option to enable/disable CHAP authentication for targets. (boolean # value) # Deprecated group/name - [DEFAULT]/eqlx_use_chap # from .default.cinder.use_chap_auth {{ if not .default.cinder.use_chap_auth }}#{{ end }}use_chap_auth = {{ .default.cinder.use_chap_auth | default "false" }} # CHAP user name. (string value) # Deprecated group/name - [DEFAULT]/eqlx_chap_login # from .default.cinder.chap_username {{ if not .default.cinder.chap_username }}#{{ end }}chap_username = {{ .default.cinder.chap_username | default "" }} # Password for specified CHAP account name. (string value) # Deprecated group/name - [DEFAULT]/eqlx_chap_password # from .default.cinder.chap_password {{ if not .default.cinder.chap_password }}#{{ end }}chap_password = {{ .default.cinder.chap_password | default "" }} # Namespace for driver private data values to be saved in. (string # value) # from .default.cinder.driver_data_namespace {{ if not .default.cinder.driver_data_namespace }}#{{ end }}driver_data_namespace = {{ .default.cinder.driver_data_namespace | default "" }} # String representation for an equation that will be used to filter # hosts. Only used when the driver filter is set to be used by the # Cinder scheduler. (string value) # from .default.cinder.filter_function {{ if not .default.cinder.filter_function }}#{{ end }}filter_function = {{ .default.cinder.filter_function | default "" }} # String representation for an equation that will be used to determine # the goodness of a host. Only used when using the goodness weigher is # set to be used by the Cinder scheduler. (string value) # from .default.cinder.goodness_function {{ if not .default.cinder.goodness_function }}#{{ end }}goodness_function = {{ .default.cinder.goodness_function | default "" }} # If set to True the http client will validate the SSL certificate of # the backend endpoint. (boolean value) # from .default.cinder.driver_ssl_cert_verify {{ if not .default.cinder.driver_ssl_cert_verify }}#{{ end }}driver_ssl_cert_verify = {{ .default.cinder.driver_ssl_cert_verify | default "false" }} # Can be used to specify a non default path to a CA_BUNDLE file or # directory with certificates of trusted CAs, which will be used to # validate the backend (string value) # from .default.cinder.driver_ssl_cert_path {{ if not .default.cinder.driver_ssl_cert_path }}#{{ end }}driver_ssl_cert_path = {{ .default.cinder.driver_ssl_cert_path | default "" }} # List of options that control which trace info is written to the # DEBUG log level to assist developers. Valid values are method and # api. (list value) # from .default.cinder.trace_flags {{ if not .default.cinder.trace_flags }}#{{ end }}trace_flags = {{ .default.cinder.trace_flags | default "" }} # Multi opt of dictionaries to represent a replication target device. # This option may be specified multiple times in a single config # section to specify multiple replication target devices. Each entry # takes the standard dict config form: replication_device = # target_device_id:,key1:value1,key2:value2... (dict value) # from .default.cinder.replication_device (multiopt) {{ if not .default.cinder.replication_device }}#replication_device = {{ .default.cinder.replication_device | default "" }}{{ else }}{{ range .default.cinder.replication_device }}replication_device = {{ . }}{{ end }}{{ end }} # If set to True, upload-to-image in raw format will create a cloned # volume and register its location to the image service, instead of # uploading the volume content. The cinder backend and locations # support must be enabled in the image service, and glance_api_version # must be set to 2. (boolean value) # from .default.cinder.image_upload_use_cinder_backend {{ if not .default.cinder.image_upload_use_cinder_backend }}#{{ end }}image_upload_use_cinder_backend = {{ .default.cinder.image_upload_use_cinder_backend | default "false" }} # If set to True, the image volume created by upload-to-image will be # placed in the internal tenant. Otherwise, the image volume is # created in the current context's tenant. (boolean value) # from .default.cinder.image_upload_use_internal_tenant {{ if not .default.cinder.image_upload_use_internal_tenant }}#{{ end }}image_upload_use_internal_tenant = {{ .default.cinder.image_upload_use_internal_tenant | default "false" }} # Enable the image volume cache for this backend. (boolean value) # from .default.cinder.image_volume_cache_enabled {{ if not .default.cinder.image_volume_cache_enabled }}#{{ end }}image_volume_cache_enabled = {{ .default.cinder.image_volume_cache_enabled | default "false" }} # Max size of the image volume cache for this backend in GB. 0 => # unlimited. (integer value) # from .default.cinder.image_volume_cache_max_size_gb {{ if not .default.cinder.image_volume_cache_max_size_gb }}#{{ end }}image_volume_cache_max_size_gb = {{ .default.cinder.image_volume_cache_max_size_gb | default "0" }} # Max number of entries allowed in the image volume cache. 0 => # unlimited. (integer value) # from .default.cinder.image_volume_cache_max_count {{ if not .default.cinder.image_volume_cache_max_count }}#{{ end }}image_volume_cache_max_count = {{ .default.cinder.image_volume_cache_max_count | default "0" }} # Report to clients of Cinder that the backend supports discard (aka. # trim/unmap). This will not actually change the behavior of the # backend or the client directly, it will only notify that it can be # used. (boolean value) # from .default.cinder.report_discard_supported {{ if not .default.cinder.report_discard_supported }}#{{ end }}report_discard_supported = {{ .default.cinder.report_discard_supported | default "false" }} # Protocol for transferring data between host and storage back-end. # (string value) # Allowed values: iscsi, fc # from .default.cinder.storage_protocol {{ if not .default.cinder.storage_protocol }}#{{ end }}storage_protocol = {{ .default.cinder.storage_protocol | default "iscsi" }} # If this is set to True, the backup_use_temp_snapshot path will be # used during the backup. Otherwise, it will use # backup_use_temp_volume path. (boolean value) # from .default.cinder.backup_use_temp_snapshot {{ if not .default.cinder.backup_use_temp_snapshot }}#{{ end }}backup_use_temp_snapshot = {{ .default.cinder.backup_use_temp_snapshot | default "false" }} # Set this to True when you want to allow an unsupported driver to # start. Drivers that haven't maintained a working CI system and # testing are marked as unsupported until CI is working again. This # also marks a driver as deprecated and may be removed in the next # release. (boolean value) # from .default.cinder.enable_unsupported_driver {{ if not .default.cinder.enable_unsupported_driver }}#{{ end }}enable_unsupported_driver = {{ .default.cinder.enable_unsupported_driver | default "false" }} # The maximum number of times to rescan iSER targetto find volume # (integer value) # from .default.cinder.num_iser_scan_tries {{ if not .default.cinder.num_iser_scan_tries }}#{{ end }}num_iser_scan_tries = {{ .default.cinder.num_iser_scan_tries | default "3" }} # Prefix for iSER volumes (string value) # from .default.cinder.iser_target_prefix {{ if not .default.cinder.iser_target_prefix }}#{{ end }}iser_target_prefix = {{ .default.cinder.iser_target_prefix | default "iqn.2010-10.org.openstack:" }} # The IP address that the iSER daemon is listening on (string value) # from .default.cinder.iser_ip_address {{ if not .default.cinder.iser_ip_address }}#{{ end }}iser_ip_address = {{ .default.cinder.iser_ip_address | default "$my_ip" }} # The port that the iSER daemon is listening on (port value) # Minimum value: 0 # Maximum value: 65535 # from .default.cinder.iser_port {{ if not .default.cinder.iser_port }}#{{ end }}iser_port = {{ .default.cinder.iser_port | default "3260" }} # The name of the iSER target user-land tool to use (string value) # from .default.cinder.iser_helper {{ if not .default.cinder.iser_helper }}#{{ end }}iser_helper = {{ .default.cinder.iser_helper | default "tgtadm" }} # Public url to use for versions endpoint. The default is None, which # will use the request's host_url attribute to populate the URL base. # If Cinder is operating behind a proxy, you will want to change this # to represent the proxy's URL. (string value) # from .default.cinder.public_endpoint {{ if not .default.cinder.public_endpoint }}#{{ end }}public_endpoint = {{ .default.cinder.public_endpoint | default "" }} # A list of url schemes that can be downloaded directly via the # direct_url. Currently supported schemes: [file]. (list value) # from .default.cinder.allowed_direct_url_schemes {{ if not .default.cinder.allowed_direct_url_schemes }}#{{ end }}allowed_direct_url_schemes = {{ .default.cinder.allowed_direct_url_schemes | default "" }} # Info to match when looking for glance in the service catalog. Format # is: separated values of the form: # :: - Only used if # glance_api_servers are not provided. (string value) # from .default.cinder.glance_catalog_info {{ if not .default.cinder.glance_catalog_info }}#{{ end }}glance_catalog_info = {{ .default.cinder.glance_catalog_info | default "image:glance:publicURL" }} # Default core properties of image (list value) # from .default.cinder.glance_core_properties {{ if not .default.cinder.glance_core_properties }}#{{ end }}glance_core_properties = {{ .default.cinder.glance_core_properties | default "checksum,container_format,disk_format,image_name,image_id,min_disk,min_ram,name,size" }} # The GCS bucket to use. (string value) # from .default.cinder.backup_gcs_bucket {{ if not .default.cinder.backup_gcs_bucket }}#{{ end }}backup_gcs_bucket = {{ .default.cinder.backup_gcs_bucket | default "" }} # The size in bytes of GCS backup objects. (integer value) # from .default.cinder.backup_gcs_object_size {{ if not .default.cinder.backup_gcs_object_size }}#{{ end }}backup_gcs_object_size = {{ .default.cinder.backup_gcs_object_size | default "52428800" }} # The size in bytes that changes are tracked for incremental backups. # backup_gcs_object_size has to be multiple of backup_gcs_block_size. # (integer value) # from .default.cinder.backup_gcs_block_size {{ if not .default.cinder.backup_gcs_block_size }}#{{ end }}backup_gcs_block_size = {{ .default.cinder.backup_gcs_block_size | default "32768" }} # GCS object will be downloaded in chunks of bytes. (integer value) # from .default.cinder.backup_gcs_reader_chunk_size {{ if not .default.cinder.backup_gcs_reader_chunk_size }}#{{ end }}backup_gcs_reader_chunk_size = {{ .default.cinder.backup_gcs_reader_chunk_size | default "2097152" }} # GCS object will be uploaded in chunks of bytes. Pass in a value of # -1 if the file is to be uploaded as a single chunk. (integer value) # from .default.cinder.backup_gcs_writer_chunk_size {{ if not .default.cinder.backup_gcs_writer_chunk_size }}#{{ end }}backup_gcs_writer_chunk_size = {{ .default.cinder.backup_gcs_writer_chunk_size | default "2097152" }} # Number of times to retry. (integer value) # from .default.cinder.backup_gcs_num_retries {{ if not .default.cinder.backup_gcs_num_retries }}#{{ end }}backup_gcs_num_retries = {{ .default.cinder.backup_gcs_num_retries | default "3" }} # List of GCS error codes. (list value) # from .default.cinder.backup_gcs_retry_error_codes {{ if not .default.cinder.backup_gcs_retry_error_codes }}#{{ end }}backup_gcs_retry_error_codes = {{ .default.cinder.backup_gcs_retry_error_codes | default "429" }} # Location of GCS bucket. (string value) # from .default.cinder.backup_gcs_bucket_location {{ if not .default.cinder.backup_gcs_bucket_location }}#{{ end }}backup_gcs_bucket_location = {{ .default.cinder.backup_gcs_bucket_location | default "US" }} # Storage class of GCS bucket. (string value) # from .default.cinder.backup_gcs_storage_class {{ if not .default.cinder.backup_gcs_storage_class }}#{{ end }}backup_gcs_storage_class = {{ .default.cinder.backup_gcs_storage_class | default "NEARLINE" }} # Absolute path of GCS service account credential file. (string value) # from .default.cinder.backup_gcs_credential_file {{ if not .default.cinder.backup_gcs_credential_file }}#{{ end }}backup_gcs_credential_file = {{ .default.cinder.backup_gcs_credential_file | default "" }} # Owner project id for GCS bucket. (string value) # from .default.cinder.backup_gcs_project_id {{ if not .default.cinder.backup_gcs_project_id }}#{{ end }}backup_gcs_project_id = {{ .default.cinder.backup_gcs_project_id | default "" }} # Http user-agent string for gcs api. (string value) # from .default.cinder.backup_gcs_user_agent {{ if not .default.cinder.backup_gcs_user_agent }}#{{ end }}backup_gcs_user_agent = {{ .default.cinder.backup_gcs_user_agent | default "gcscinder" }} # Enable or Disable the timer to send the periodic progress # notifications to Ceilometer when backing up the volume to the GCS # backend storage. The default value is True to enable the timer. # (boolean value) # from .default.cinder.backup_gcs_enable_progress_timer {{ if not .default.cinder.backup_gcs_enable_progress_timer }}#{{ end }}backup_gcs_enable_progress_timer = {{ .default.cinder.backup_gcs_enable_progress_timer | default "true" }} # URL for http proxy access. (uri value) # from .default.cinder.backup_gcs_proxy_url {{ if not .default.cinder.backup_gcs_proxy_url }}#{{ end }}backup_gcs_proxy_url = {{ .default.cinder.backup_gcs_proxy_url | default "" }} # Treat X-Forwarded-For as the canonical remote address. Only enable # this if you have a sanitizing proxy. (boolean value) # from .default.cinder.use_forwarded_for {{ if not .default.cinder.use_forwarded_for }}#{{ end }}use_forwarded_for = {{ .default.cinder.use_forwarded_for | default "false" }} # Backup services use same backend. (boolean value) # from .default.cinder.backup_use_same_host {{ if not .default.cinder.backup_use_same_host }}#{{ end }}backup_use_same_host = {{ .default.cinder.backup_use_same_host | default "false" }} # Driver to use for backups. (string value) # from .default.cinder.backup_driver {{ if not .default.cinder.backup_driver }}#{{ end }}backup_driver = {{ .default.cinder.backup_driver | default "cinder.backup.drivers.swift" }} # Offload pending backup delete during backup service startup. If # false, the backup service will remain down until all pending backups # are deleted. (boolean value) # from .default.cinder.backup_service_inithost_offload {{ if not .default.cinder.backup_service_inithost_offload }}#{{ end }}backup_service_inithost_offload = {{ .default.cinder.backup_service_inithost_offload | default "true" }} # Number of volumes allowed per project (integer value) # from .default.cinder.quota_volumes {{ if not .default.cinder.quota_volumes }}#{{ end }}quota_volumes = {{ .default.cinder.quota_volumes | default "10" }} # Number of volume snapshots allowed per project (integer value) # from .default.cinder.quota_snapshots {{ if not .default.cinder.quota_snapshots }}#{{ end }}quota_snapshots = {{ .default.cinder.quota_snapshots | default "10" }} # Number of consistencygroups allowed per project (integer value) # from .default.cinder.quota_consistencygroups {{ if not .default.cinder.quota_consistencygroups }}#{{ end }}quota_consistencygroups = {{ .default.cinder.quota_consistencygroups | default "10" }} # Number of groups allowed per project (integer value) # from .default.cinder.quota_groups {{ if not .default.cinder.quota_groups }}#{{ end }}quota_groups = {{ .default.cinder.quota_groups | default "10" }} # Total amount of storage, in gigabytes, allowed for volumes and # snapshots per project (integer value) # from .default.cinder.quota_gigabytes {{ if not .default.cinder.quota_gigabytes }}#{{ end }}quota_gigabytes = {{ .default.cinder.quota_gigabytes | default "1000" }} # Number of volume backups allowed per project (integer value) # from .default.cinder.quota_backups {{ if not .default.cinder.quota_backups }}#{{ end }}quota_backups = {{ .default.cinder.quota_backups | default "10" }} # Total amount of storage, in gigabytes, allowed for backups per # project (integer value) # from .default.cinder.quota_backup_gigabytes {{ if not .default.cinder.quota_backup_gigabytes }}#{{ end }}quota_backup_gigabytes = {{ .default.cinder.quota_backup_gigabytes | default "1000" }} # Number of seconds until a reservation expires (integer value) # from .default.cinder.reservation_expire {{ if not .default.cinder.reservation_expire }}#{{ end }}reservation_expire = {{ .default.cinder.reservation_expire | default "86400" }} # Count of reservations until usage is refreshed (integer value) # from .default.cinder.until_refresh {{ if not .default.cinder.until_refresh }}#{{ end }}until_refresh = {{ .default.cinder.until_refresh | default "0" }} # Number of seconds between subsequent usage refreshes (integer value) # from .default.cinder.max_age {{ if not .default.cinder.max_age }}#{{ end }}max_age = {{ .default.cinder.max_age | default "0" }} # Default driver to use for quota checks (string value) # from .default.cinder.quota_driver {{ if not .default.cinder.quota_driver }}#{{ end }}quota_driver = {{ .default.cinder.quota_driver | default "cinder.quota.DbQuotaDriver" }} # Enables or disables use of default quota class with default quota. # (boolean value) # from .default.cinder.use_default_quota_class {{ if not .default.cinder.use_default_quota_class }}#{{ end }}use_default_quota_class = {{ .default.cinder.use_default_quota_class | default "true" }} # Max size allowed per volume, in gigabytes (integer value) # from .default.cinder.per_volume_size_limit {{ if not .default.cinder.per_volume_size_limit }}#{{ end }}per_volume_size_limit = {{ .default.cinder.per_volume_size_limit | default "-1" }} # Which filter class names to use for filtering hosts when not # specified in the request. (list value) # from .default.cinder.scheduler_default_filters {{ if not .default.cinder.scheduler_default_filters }}#{{ end }}scheduler_default_filters = {{ .default.cinder.scheduler_default_filters | default "AvailabilityZoneFilter,CapacityFilter,CapabilitiesFilter" }} # Which weigher class names to use for weighing hosts. (list value) # from .default.cinder.scheduler_default_weighers {{ if not .default.cinder.scheduler_default_weighers }}#{{ end }}scheduler_default_weighers = {{ .default.cinder.scheduler_default_weighers | default "CapacityWeigher" }} # Which handler to use for selecting the host/pool after weighing # (string value) # from .default.cinder.scheduler_weight_handler {{ if not .default.cinder.scheduler_weight_handler }}#{{ end }}scheduler_weight_handler = {{ .default.cinder.scheduler_weight_handler | default "cinder.scheduler.weights.OrderedHostWeightHandler" }} # Default scheduler driver to use (string value) # from .default.cinder.scheduler_driver {{ if not .default.cinder.scheduler_driver }}#{{ end }}scheduler_driver = {{ .default.cinder.scheduler_driver | default "cinder.scheduler.filter_scheduler.FilterScheduler" }} # Base dir containing mount point for NFS share. (string value) # from .default.cinder.backup_mount_point_base {{ if not .default.cinder.backup_mount_point_base }}#{{ end }}backup_mount_point_base = {{ .default.cinder.backup_mount_point_base | default "$state_path/backup_mount" }} # NFS share in hostname:path, ipv4addr:path, or "[ipv6addr]:path" # format. (string value) # from .default.cinder.backup_share {{ if not .default.cinder.backup_share }}#{{ end }}backup_share = {{ .default.cinder.backup_share | default "" }} # Mount options passed to the NFS client. See NFS man page for # details. (string value) # from .default.cinder.backup_mount_options {{ if not .default.cinder.backup_mount_options }}#{{ end }}backup_mount_options = {{ .default.cinder.backup_mount_options | default "" }} # Absolute path to scheduler configuration JSON file. (string value) # from .default.cinder.scheduler_json_config_location {{ if not .default.cinder.scheduler_json_config_location }}#{{ end }}scheduler_json_config_location = {{ .default.cinder.scheduler_json_config_location | default "" }} # message minimum life in seconds. (integer value) # from .default.cinder.message_ttl {{ if not .default.cinder.message_ttl }}#{{ end }}message_ttl = {{ .default.cinder.message_ttl | default "2592000" }} # Directory used for temporary storage during image conversion (string # value) # from .default.cinder.image_conversion_dir {{ if not .default.cinder.image_conversion_dir }}#{{ end }}image_conversion_dir = {{ .default.cinder.image_conversion_dir | default "$state_path/conversion" }} # Match this value when searching for nova in the service catalog. # Format is: separated values of the form: # :: (string value) # from .default.cinder.nova_catalog_info {{ if not .default.cinder.nova_catalog_info }}#{{ end }}nova_catalog_info = {{ .default.cinder.nova_catalog_info | default "compute:Compute Service:publicURL" }} # Same as nova_catalog_info, but for admin endpoint. (string value) # from .default.cinder.nova_catalog_admin_info {{ if not .default.cinder.nova_catalog_admin_info }}#{{ end }}nova_catalog_admin_info = {{ .default.cinder.nova_catalog_admin_info | default "compute:Compute Service:adminURL" }} # Override service catalog lookup with template for nova endpoint e.g. # http://localhost:8774/v2/%(project_id)s (string value) # from .default.cinder.nova_endpoint_template {{ if not .default.cinder.nova_endpoint_template }}#{{ end }}nova_endpoint_template = {{ .default.cinder.nova_endpoint_template | default "" }} # Same as nova_endpoint_template, but for admin endpoint. (string # value) # from .default.cinder.nova_endpoint_admin_template {{ if not .default.cinder.nova_endpoint_admin_template }}#{{ end }}nova_endpoint_admin_template = {{ .default.cinder.nova_endpoint_admin_template | default "" }} # Region name of this node (string value) # from .default.cinder.os_region_name {{ if not .default.cinder.os_region_name }}#{{ end }}os_region_name = {{ .default.cinder.os_region_name | default "" }} # Location of ca certificates file to use for nova client requests. # (string value) # from .default.cinder.nova_ca_certificates_file {{ if not .default.cinder.nova_ca_certificates_file }}#{{ end }}nova_ca_certificates_file = {{ .default.cinder.nova_ca_certificates_file | default "" }} # Allow to perform insecure SSL requests to nova (boolean value) # from .default.cinder.nova_api_insecure {{ if not .default.cinder.nova_api_insecure }}#{{ end }}nova_api_insecure = {{ .default.cinder.nova_api_insecure | default "false" }} # Driver to use for volume creation (string value) # from .default.cinder.volume_driver {{ if not .default.cinder.volume_driver }}#{{ end }}volume_driver = {{ .default.cinder.volume_driver | default "cinder.volume.drivers.lvm.LVMVolumeDriver" }} # Timeout for creating the volume to migrate to when performing volume # migration (seconds) (integer value) # from .default.cinder.migration_create_volume_timeout_secs {{ if not .default.cinder.migration_create_volume_timeout_secs }}#{{ end }}migration_create_volume_timeout_secs = {{ .default.cinder.migration_create_volume_timeout_secs | default "300" }} # Offload pending volume delete during volume service startup (boolean # value) # from .default.cinder.volume_service_inithost_offload {{ if not .default.cinder.volume_service_inithost_offload }}#{{ end }}volume_service_inithost_offload = {{ .default.cinder.volume_service_inithost_offload | default "false" }} # FC Zoning mode configured (string value) # from .default.cinder.zoning_mode {{ if not .default.cinder.zoning_mode }}#{{ end }}zoning_mode = {{ .default.cinder.zoning_mode | default "" }} # User defined capabilities, a JSON formatted string specifying # key/value pairs. The key/value pairs can be used by the # CapabilitiesFilter to select between backends when requests specify # volume types. For example, specifying a service level or the # geographical location of a backend, then creating a volume type to # allow the user to select by these different properties. (string # value) # from .default.cinder.extra_capabilities {{ if not .default.cinder.extra_capabilities }}#{{ end }}extra_capabilities = {{ .default.cinder.extra_capabilities | default "{}" }} # Suppress requests library SSL certificate warnings. (boolean value) # from .default.cinder.suppress_requests_ssl_warnings {{ if not .default.cinder.suppress_requests_ssl_warnings }}#{{ end }}suppress_requests_ssl_warnings = {{ .default.cinder.suppress_requests_ssl_warnings | default "false" }} # Enables the Force option on upload_to_image. This enables running # upload_volume on in-use volumes for backends that support it. # (boolean value) # from .default.cinder.enable_force_upload {{ if not .default.cinder.enable_force_upload }}#{{ end }}enable_force_upload = {{ .default.cinder.enable_force_upload | default "false" }} # Create volume from snapshot at the host where snapshot resides # (boolean value) # from .default.cinder.snapshot_same_host {{ if not .default.cinder.snapshot_same_host }}#{{ end }}snapshot_same_host = {{ .default.cinder.snapshot_same_host | default "true" }} # Ensure that the new volumes are the same AZ as snapshot or source # volume (boolean value) # from .default.cinder.cloned_volume_same_az {{ if not .default.cinder.cloned_volume_same_az }}#{{ end }}cloned_volume_same_az = {{ .default.cinder.cloned_volume_same_az | default "true" }} # Cache volume availability zones in memory for the provided duration # in seconds (integer value) # from .default.cinder.az_cache_duration {{ if not .default.cinder.az_cache_duration }}#{{ end }}az_cache_duration = {{ .default.cinder.az_cache_duration | default "3600" }} # # From oslo.config # # Path to a config file to use. Multiple config files can be # specified, with values in later files taking precedence. Defaults to # %(default)s. (unknown value) # from .default.oslo.config.config_file {{ if not .default.oslo.config.config_file }}#{{ end }}config_file = {{ .default.oslo.config.config_file | default "~/.project/project.conf,~/project.conf,/etc/project/project.conf,/etc/project.conf" }} # Path to a config directory to pull *.conf files from. This file set # is sorted, so as to provide a predictable parse order if individual # options are over-ridden. The set is parsed after the file(s) # specified via previous --config-file, arguments hence over-ridden # options in the directory take precedence. (list value) # from .default.oslo.config.config_dir {{ if not .default.oslo.config.config_dir }}#{{ end }}config_dir = {{ .default.oslo.config.config_dir | default "" }} # # From oslo.log # # If set to true, the logging level will be set to DEBUG instead of # the default INFO level. (boolean value) # Note: This option can be changed without restarting. # from .default.oslo.log.debug {{ if not .default.oslo.log.debug }}#{{ end }}debug = {{ .default.oslo.log.debug | default "false" }} # DEPRECATED: If set to false, the logging level will be set to # WARNING instead of the default INFO level. (boolean value) # This option is deprecated for removal. # Its value may be silently ignored in the future. # from .default.oslo.log.verbose {{ if not .default.oslo.log.verbose }}#{{ end }}verbose = {{ .default.oslo.log.verbose | default "true" }} # The name of a logging configuration file. This file is appended to # any existing logging configuration files. For details about logging # configuration files, see the Python logging module documentation. # Note that when logging configuration files are used then all logging # configuration is set in the configuration file and other logging # configuration options are ignored (for example, # logging_context_format_string). (string value) # Note: This option can be changed without restarting. # Deprecated group/name - [DEFAULT]/log_config # from .default.oslo.log.log_config_append {{ if not .default.oslo.log.log_config_append }}#{{ end }}log_config_append = {{ .default.oslo.log.log_config_append | default "" }} # Defines the format string for %%(asctime)s in log records. Default: # %(default)s . This option is ignored if log_config_append is set. # (string value) # from .default.oslo.log.log_date_format {{ if not .default.oslo.log.log_date_format }}#{{ end }}log_date_format = {{ .default.oslo.log.log_date_format | default "%Y-%m-%d %H:%M:%S" }} # (Optional) Name of log file to send logging output to. If no default # is set, logging will go to stderr as defined by use_stderr. This # option is ignored if log_config_append is set. (string value) # Deprecated group/name - [DEFAULT]/logfile # from .default.oslo.log.log_file {{ if not .default.oslo.log.log_file }}#{{ end }}log_file = {{ .default.oslo.log.log_file | default "" }} # (Optional) The base directory used for relative log_file paths. # This option is ignored if log_config_append is set. (string value) # Deprecated group/name - [DEFAULT]/logdir # from .default.oslo.log.log_dir {{ if not .default.oslo.log.log_dir }}#{{ end }}log_dir = {{ .default.oslo.log.log_dir | default "" }} # Uses logging handler designed to watch file system. When log file is # moved or removed this handler will open a new log file with # specified path instantaneously. It makes sense only if log_file # option is specified and Linux platform is used. This option is # ignored if log_config_append is set. (boolean value) # from .default.oslo.log.watch_log_file {{ if not .default.oslo.log.watch_log_file }}#{{ end }}watch_log_file = {{ .default.oslo.log.watch_log_file | default "false" }} # Use syslog for logging. Existing syslog format is DEPRECATED and # will be changed later to honor RFC5424. This option is ignored if # log_config_append is set. (boolean value) # from .default.oslo.log.use_syslog {{ if not .default.oslo.log.use_syslog }}#{{ end }}use_syslog = {{ .default.oslo.log.use_syslog | default "false" }} # Syslog facility to receive log lines. This option is ignored if # log_config_append is set. (string value) # from .default.oslo.log.syslog_log_facility {{ if not .default.oslo.log.syslog_log_facility }}#{{ end }}syslog_log_facility = {{ .default.oslo.log.syslog_log_facility | default "LOG_USER" }} # Log output to standard error. This option is ignored if # log_config_append is set. (boolean value) # from .default.oslo.log.use_stderr {{ if not .default.oslo.log.use_stderr }}#{{ end }}use_stderr = {{ .default.oslo.log.use_stderr | default "true" }} # Format string to use for log messages with context. (string value) # from .default.oslo.log.logging_context_format_string {{ if not .default.oslo.log.logging_context_format_string }}#{{ end }}logging_context_format_string = {{ .default.oslo.log.logging_context_format_string | default "%(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s" }} # Format string to use for log messages when context is undefined. # (string value) # from .default.oslo.log.logging_default_format_string {{ if not .default.oslo.log.logging_default_format_string }}#{{ end }}logging_default_format_string = {{ .default.oslo.log.logging_default_format_string | default "%(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s" }} # Additional data to append to log message when logging level for the # message is DEBUG. (string value) # from .default.oslo.log.logging_debug_format_suffix {{ if not .default.oslo.log.logging_debug_format_suffix }}#{{ end }}logging_debug_format_suffix = {{ .default.oslo.log.logging_debug_format_suffix | default "%(funcName)s %(pathname)s:%(lineno)d" }} # Prefix each line of exception output with this format. (string # value) # from .default.oslo.log.logging_exception_prefix {{ if not .default.oslo.log.logging_exception_prefix }}#{{ end }}logging_exception_prefix = {{ .default.oslo.log.logging_exception_prefix | default "%(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s" }} # Defines the format string for %(user_identity)s that is used in # logging_context_format_string. (string value) # from .default.oslo.log.logging_user_identity_format {{ if not .default.oslo.log.logging_user_identity_format }}#{{ end }}logging_user_identity_format = {{ .default.oslo.log.logging_user_identity_format | default "%(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s" }} # List of package logging levels in logger=LEVEL pairs. This option is # ignored if log_config_append is set. (list value) # from .default.oslo.log.default_log_levels {{ if not .default.oslo.log.default_log_levels }}#{{ end }}default_log_levels = {{ .default.oslo.log.default_log_levels | default "amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO" }} # Enables or disables publication of error events. (boolean value) # from .default.oslo.log.publish_errors {{ if not .default.oslo.log.publish_errors }}#{{ end }}publish_errors = {{ .default.oslo.log.publish_errors | default "false" }} # The format for an instance that is passed with the log message. # (string value) # from .default.oslo.log.instance_format {{ if not .default.oslo.log.instance_format }}#{{ end }}instance_format = {{ .default.oslo.log.instance_format | default "\"[instance: %(uuid)s] \"" }} # The format for an instance UUID that is passed with the log message. # (string value) # from .default.oslo.log.instance_uuid_format {{ if not .default.oslo.log.instance_uuid_format }}#{{ end }}instance_uuid_format = {{ .default.oslo.log.instance_uuid_format | default "\"[instance: %(uuid)s] \"" }} # Enables or disables fatal status of deprecations. (boolean value) # from .default.oslo.log.fatal_deprecations {{ if not .default.oslo.log.fatal_deprecations }}#{{ end }}fatal_deprecations = {{ .default.oslo.log.fatal_deprecations | default "false" }} # # From oslo.messaging # # Size of RPC connection pool. (integer value) # Deprecated group/name - [DEFAULT]/rpc_conn_pool_size # from .default.oslo.messaging.rpc_conn_pool_size {{ if not .default.oslo.messaging.rpc_conn_pool_size }}#{{ end }}rpc_conn_pool_size = {{ .default.oslo.messaging.rpc_conn_pool_size | default "30" }} # The pool size limit for connections expiration policy (integer # value) # from .default.oslo.messaging.conn_pool_min_size {{ if not .default.oslo.messaging.conn_pool_min_size }}#{{ end }}conn_pool_min_size = {{ .default.oslo.messaging.conn_pool_min_size | default "2" }} # The time-to-live in sec of idle connections in the pool (integer # value) # from .default.oslo.messaging.conn_pool_ttl {{ if not .default.oslo.messaging.conn_pool_ttl }}#{{ end }}conn_pool_ttl = {{ .default.oslo.messaging.conn_pool_ttl | default "1200" }} # ZeroMQ bind address. Should be a wildcard (*), an ethernet # interface, or IP. The "host" option should point or resolve to this # address. (string value) # Deprecated group/name - [DEFAULT]/rpc_zmq_bind_address # from .default.oslo.messaging.rpc_zmq_bind_address {{ if not .default.oslo.messaging.rpc_zmq_bind_address }}#{{ end }}rpc_zmq_bind_address = {{ .default.oslo.messaging.rpc_zmq_bind_address | default "*" }} # MatchMaker driver. (string value) # Allowed values: redis, dummy # Deprecated group/name - [DEFAULT]/rpc_zmq_matchmaker # from .default.oslo.messaging.rpc_zmq_matchmaker {{ if not .default.oslo.messaging.rpc_zmq_matchmaker }}#{{ end }}rpc_zmq_matchmaker = {{ .default.oslo.messaging.rpc_zmq_matchmaker | default "redis" }} # Number of ZeroMQ contexts, defaults to 1. (integer value) # Deprecated group/name - [DEFAULT]/rpc_zmq_contexts # from .default.oslo.messaging.rpc_zmq_contexts {{ if not .default.oslo.messaging.rpc_zmq_contexts }}#{{ end }}rpc_zmq_contexts = {{ .default.oslo.messaging.rpc_zmq_contexts | default "1" }} # Maximum number of ingress messages to locally buffer per topic. # Default is unlimited. (integer value) # Deprecated group/name - [DEFAULT]/rpc_zmq_topic_backlog # from .default.oslo.messaging.rpc_zmq_topic_backlog {{ if not .default.oslo.messaging.rpc_zmq_topic_backlog }}#{{ end }}rpc_zmq_topic_backlog = {{ .default.oslo.messaging.rpc_zmq_topic_backlog | default "" }} # Directory for holding IPC sockets. (string value) # Deprecated group/name - [DEFAULT]/rpc_zmq_ipc_dir # from .default.oslo.messaging.rpc_zmq_ipc_dir {{ if not .default.oslo.messaging.rpc_zmq_ipc_dir }}#{{ end }}rpc_zmq_ipc_dir = {{ .default.oslo.messaging.rpc_zmq_ipc_dir | default "/var/run/openstack" }} # Name of this node. Must be a valid hostname, FQDN, or IP address. # Must match "host" option, if running Nova. (string value) # Deprecated group/name - [DEFAULT]/rpc_zmq_host # from .default.oslo.messaging.rpc_zmq_host {{ if not .default.oslo.messaging.rpc_zmq_host }}#{{ end }}rpc_zmq_host = {{ .default.oslo.messaging.rpc_zmq_host | default "localhost" }} # Seconds to wait before a cast expires (TTL). The default value of -1 # specifies an infinite linger period. The value of 0 specifies no # linger period. Pending messages shall be discarded immediately when # the socket is closed. Only supported by impl_zmq. (integer value) # Deprecated group/name - [DEFAULT]/rpc_cast_timeout # from .default.oslo.messaging.rpc_cast_timeout {{ if not .default.oslo.messaging.rpc_cast_timeout }}#{{ end }}rpc_cast_timeout = {{ .default.oslo.messaging.rpc_cast_timeout | default "-1" }} # The default number of seconds that poll should wait. Poll raises # timeout exception when timeout expired. (integer value) # Deprecated group/name - [DEFAULT]/rpc_poll_timeout # from .default.oslo.messaging.rpc_poll_timeout {{ if not .default.oslo.messaging.rpc_poll_timeout }}#{{ end }}rpc_poll_timeout = {{ .default.oslo.messaging.rpc_poll_timeout | default "1" }} # Expiration timeout in seconds of a name service record about # existing target ( < 0 means no timeout). (integer value) # Deprecated group/name - [DEFAULT]/zmq_target_expire # from .default.oslo.messaging.zmq_target_expire {{ if not .default.oslo.messaging.zmq_target_expire }}#{{ end }}zmq_target_expire = {{ .default.oslo.messaging.zmq_target_expire | default "300" }} # Update period in seconds of a name service record about existing # target. (integer value) # Deprecated group/name - [DEFAULT]/zmq_target_update # from .default.oslo.messaging.zmq_target_update {{ if not .default.oslo.messaging.zmq_target_update }}#{{ end }}zmq_target_update = {{ .default.oslo.messaging.zmq_target_update | default "180" }} # Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. # (boolean value) # Deprecated group/name - [DEFAULT]/use_pub_sub # from .default.oslo.messaging.use_pub_sub {{ if not .default.oslo.messaging.use_pub_sub }}#{{ end }}use_pub_sub = {{ .default.oslo.messaging.use_pub_sub | default "true" }} # Use ROUTER remote proxy. (boolean value) # Deprecated group/name - [DEFAULT]/use_router_proxy # from .default.oslo.messaging.use_router_proxy {{ if not .default.oslo.messaging.use_router_proxy }}#{{ end }}use_router_proxy = {{ .default.oslo.messaging.use_router_proxy | default "true" }} # Minimal port number for random ports range. (port value) # Minimum value: 0 # Maximum value: 65535 # Deprecated group/name - [DEFAULT]/rpc_zmq_min_port # from .default.oslo.messaging.rpc_zmq_min_port {{ if not .default.oslo.messaging.rpc_zmq_min_port }}#{{ end }}rpc_zmq_min_port = {{ .default.oslo.messaging.rpc_zmq_min_port | default "49153" }} # Maximal port number for random ports range. (integer value) # Minimum value: 1 # Maximum value: 65536 # Deprecated group/name - [DEFAULT]/rpc_zmq_max_port # from .default.oslo.messaging.rpc_zmq_max_port {{ if not .default.oslo.messaging.rpc_zmq_max_port }}#{{ end }}rpc_zmq_max_port = {{ .default.oslo.messaging.rpc_zmq_max_port | default "65536" }} # Number of retries to find free port number before fail with # ZMQBindError. (integer value) # Deprecated group/name - [DEFAULT]/rpc_zmq_bind_port_retries # from .default.oslo.messaging.rpc_zmq_bind_port_retries {{ if not .default.oslo.messaging.rpc_zmq_bind_port_retries }}#{{ end }}rpc_zmq_bind_port_retries = {{ .default.oslo.messaging.rpc_zmq_bind_port_retries | default "100" }} # Default serialization mechanism for serializing/deserializing # outgoing/incoming messages (string value) # Allowed values: json, msgpack # Deprecated group/name - [DEFAULT]/rpc_zmq_serialization # from .default.oslo.messaging.rpc_zmq_serialization {{ if not .default.oslo.messaging.rpc_zmq_serialization }}#{{ end }}rpc_zmq_serialization = {{ .default.oslo.messaging.rpc_zmq_serialization | default "json" }} # This option configures round-robin mode in zmq socket. True means # not keeping a queue when server side disconnects. False means to # keep queue and messages even if server is disconnected, when the # server appears we send all accumulated messages to it. (boolean # value) # from .default.oslo.messaging.zmq_immediate {{ if not .default.oslo.messaging.zmq_immediate }}#{{ end }}zmq_immediate = {{ .default.oslo.messaging.zmq_immediate | default "false" }} # Size of executor thread pool. (integer value) # Deprecated group/name - [DEFAULT]/rpc_thread_pool_size # from .default.oslo.messaging.executor_thread_pool_size {{ if not .default.oslo.messaging.executor_thread_pool_size }}#{{ end }}executor_thread_pool_size = {{ .default.oslo.messaging.executor_thread_pool_size | default "64" }} # Seconds to wait for a response from a call. (integer value) # from .default.oslo.messaging.rpc_response_timeout {{ if not .default.oslo.messaging.rpc_response_timeout }}#{{ end }}rpc_response_timeout = {{ .default.oslo.messaging.rpc_response_timeout | default "60" }} # A URL representing the messaging driver to use and its full # configuration. (string value) # from .default.oslo.messaging.transport_url {{ if not .default.oslo.messaging.transport_url }}#{{ end }}transport_url = {{ .default.oslo.messaging.transport_url | default "" }} # DEPRECATED: The messaging driver to use, defaults to rabbit. Other # drivers include amqp and zmq. (string value) # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Replaced by [DEFAULT]/transport_url # from .default.oslo.messaging.rpc_backend {{ if not .default.oslo.messaging.rpc_backend }}#{{ end }}rpc_backend = {{ .default.oslo.messaging.rpc_backend | default "rabbit" }} # The default exchange under which topics are scoped. May be # overridden by an exchange name specified in the transport_url # option. (string value) # from .default.oslo.messaging.control_exchange {{ if not .default.oslo.messaging.control_exchange }}#{{ end }}control_exchange = {{ .default.oslo.messaging.control_exchange | default "openstack" }} # # From oslo.service.periodic_task # # Some periodic tasks can be run in a separate process. Should we run # them here? (boolean value) # from .default.oslo.service.periodic_task.run_external_periodic_tasks {{ if not .default.oslo.service.periodic_task.run_external_periodic_tasks }}#{{ end }}run_external_periodic_tasks = {{ .default.oslo.service.periodic_task.run_external_periodic_tasks | default "true" }} # # From oslo.service.service # # Enable eventlet backdoor. Acceptable values are 0, , and # :, where 0 results in listening on a random tcp port # number; results in listening on the specified port number # (and not enabling backdoor if that port is in use); and # : results in listening on the smallest unused port # number within the specified range of port numbers. The chosen port # is displayed in the service's log file. (string value) # from .default.oslo.service.service.backdoor_port {{ if not .default.oslo.service.service.backdoor_port }}#{{ end }}backdoor_port = {{ .default.oslo.service.service.backdoor_port | default "" }} # Enable eventlet backdoor, using the provided path as a unix socket # that can receive connections. This option is mutually exclusive with # 'backdoor_port' in that only one should be provided. If both are # provided then the existence of this option overrides the usage of # that option. (string value) # from .default.oslo.service.service.backdoor_socket {{ if not .default.oslo.service.service.backdoor_socket }}#{{ end }}backdoor_socket = {{ .default.oslo.service.service.backdoor_socket | default "" }} # Enables or disables logging values of all registered options when # starting a service (at DEBUG level). (boolean value) # from .default.oslo.service.service.log_options {{ if not .default.oslo.service.service.log_options }}#{{ end }}log_options = {{ .default.oslo.service.service.log_options | default "true" }} # Specify a timeout after which a gracefully shutdown server will # exit. Zero value means endless wait. (integer value) # from .default.oslo.service.service.graceful_shutdown_timeout {{ if not .default.oslo.service.service.graceful_shutdown_timeout }}#{{ end }}graceful_shutdown_timeout = {{ .default.oslo.service.service.graceful_shutdown_timeout | default "60" }} # # From oslo.service.wsgi # # File name for the paste.deploy config for api service (string value) # from .default.oslo.service.wsgi.api_paste_config {{ if not .default.oslo.service.wsgi.api_paste_config }}#{{ end }}api_paste_config = {{ .default.oslo.service.wsgi.api_paste_config | default "api-paste.ini" }} # A python format string that is used as the template to generate log # lines. The following values can beformatted into it: client_ip, # date_time, request_line, status_code, body_length, wall_seconds. # (string value) # from .default.oslo.service.wsgi.wsgi_log_format {{ if not .default.oslo.service.wsgi.wsgi_log_format }}#{{ end }}wsgi_log_format = {{ .default.oslo.service.wsgi.wsgi_log_format | default "%(client_ip)s \"%(request_line)s\" status: %(status_code)s len: %(body_length)s time: %(wall_seconds).7f" }} # Sets the value of TCP_KEEPIDLE in seconds for each server socket. # Not supported on OS X. (integer value) # from .default.oslo.service.wsgi.tcp_keepidle {{ if not .default.oslo.service.wsgi.tcp_keepidle }}#{{ end }}tcp_keepidle = {{ .default.oslo.service.wsgi.tcp_keepidle | default "600" }} # Size of the pool of greenthreads used by wsgi (integer value) # from .default.oslo.service.wsgi.wsgi_default_pool_size {{ if not .default.oslo.service.wsgi.wsgi_default_pool_size }}#{{ end }}wsgi_default_pool_size = {{ .default.oslo.service.wsgi.wsgi_default_pool_size | default "100" }} # Maximum line size of message headers to be accepted. max_header_line # may need to be increased when using large tokens (typically those # generated when keystone is configured to use PKI tokens with big # service catalogs). (integer value) # from .default.oslo.service.wsgi.max_header_line {{ if not .default.oslo.service.wsgi.max_header_line }}#{{ end }}max_header_line = {{ .default.oslo.service.wsgi.max_header_line | default "16384" }} # If False, closes the client socket connection explicitly. (boolean # value) # from .default.oslo.service.wsgi.wsgi_keep_alive {{ if not .default.oslo.service.wsgi.wsgi_keep_alive }}#{{ end }}wsgi_keep_alive = {{ .default.oslo.service.wsgi.wsgi_keep_alive | default "true" }} # Timeout for client connections' socket operations. If an incoming # connection is idle for this number of seconds it will be closed. A # value of '0' means wait forever. (integer value) # from .default.oslo.service.wsgi.client_socket_timeout {{ if not .default.oslo.service.wsgi.client_socket_timeout }}#{{ end }}client_socket_timeout = {{ .default.oslo.service.wsgi.client_socket_timeout | default "900" }} [BRCD_FABRIC_EXAMPLE] # # From cinder # # South bound connector for the fabric. (string value) # Allowed values: SSH, HTTP, HTTPS # from .brcd_fabric_example.cinder.fc_southbound_protocol {{ if not .brcd_fabric_example.cinder.fc_southbound_protocol }}#{{ end }}fc_southbound_protocol = {{ .brcd_fabric_example.cinder.fc_southbound_protocol | default "HTTP" }} # Management IP of fabric. (string value) # from .brcd_fabric_example.cinder.fc_fabric_address {{ if not .brcd_fabric_example.cinder.fc_fabric_address }}#{{ end }}fc_fabric_address = {{ .brcd_fabric_example.cinder.fc_fabric_address | default "" }} # Fabric user ID. (string value) # from .brcd_fabric_example.cinder.fc_fabric_user {{ if not .brcd_fabric_example.cinder.fc_fabric_user }}#{{ end }}fc_fabric_user = {{ .brcd_fabric_example.cinder.fc_fabric_user | default "" }} # Password for user. (string value) # from .brcd_fabric_example.cinder.fc_fabric_password {{ if not .brcd_fabric_example.cinder.fc_fabric_password }}#{{ end }}fc_fabric_password = {{ .brcd_fabric_example.cinder.fc_fabric_password | default "" }} # Connecting port (port value) # Minimum value: 0 # Maximum value: 65535 # from .brcd_fabric_example.cinder.fc_fabric_port {{ if not .brcd_fabric_example.cinder.fc_fabric_port }}#{{ end }}fc_fabric_port = {{ .brcd_fabric_example.cinder.fc_fabric_port | default "22" }} # Local SSH certificate Path. (string value) # from .brcd_fabric_example.cinder.fc_fabric_ssh_cert_path {{ if not .brcd_fabric_example.cinder.fc_fabric_ssh_cert_path }}#{{ end }}fc_fabric_ssh_cert_path = {{ .brcd_fabric_example.cinder.fc_fabric_ssh_cert_path | default "" }} # Overridden zoning policy. (string value) # from .brcd_fabric_example.cinder.zoning_policy {{ if not .brcd_fabric_example.cinder.zoning_policy }}#{{ end }}zoning_policy = {{ .brcd_fabric_example.cinder.zoning_policy | default "initiator-target" }} # Overridden zoning activation state. (boolean value) # from .brcd_fabric_example.cinder.zone_activate {{ if not .brcd_fabric_example.cinder.zone_activate }}#{{ end }}zone_activate = {{ .brcd_fabric_example.cinder.zone_activate | default "true" }} # Overridden zone name prefix. (string value) # from .brcd_fabric_example.cinder.zone_name_prefix {{ if not .brcd_fabric_example.cinder.zone_name_prefix }}#{{ end }}zone_name_prefix = {{ .brcd_fabric_example.cinder.zone_name_prefix | default "openstack" }} # Virtual Fabric ID. (string value) # from .brcd_fabric_example.cinder.fc_virtual_fabric_id {{ if not .brcd_fabric_example.cinder.fc_virtual_fabric_id }}#{{ end }}fc_virtual_fabric_id = {{ .brcd_fabric_example.cinder.fc_virtual_fabric_id | default "" }} # DEPRECATED: Principal switch WWN of the fabric. This option is not # used anymore. (string value) # This option is deprecated for removal. # Its value may be silently ignored in the future. # from .brcd_fabric_example.cinder.principal_switch_wwn {{ if not .brcd_fabric_example.cinder.principal_switch_wwn }}#{{ end }}principal_switch_wwn = {{ .brcd_fabric_example.cinder.principal_switch_wwn | default "" }} [CISCO_FABRIC_EXAMPLE] # # From cinder # # Management IP of fabric (string value) # from .cisco_fabric_example.cinder.cisco_fc_fabric_address {{ if not .cisco_fabric_example.cinder.cisco_fc_fabric_address }}#{{ end }}cisco_fc_fabric_address = {{ .cisco_fabric_example.cinder.cisco_fc_fabric_address | default "" }} # Fabric user ID (string value) # from .cisco_fabric_example.cinder.cisco_fc_fabric_user {{ if not .cisco_fabric_example.cinder.cisco_fc_fabric_user }}#{{ end }}cisco_fc_fabric_user = {{ .cisco_fabric_example.cinder.cisco_fc_fabric_user | default "" }} # Password for user (string value) # from .cisco_fabric_example.cinder.cisco_fc_fabric_password {{ if not .cisco_fabric_example.cinder.cisco_fc_fabric_password }}#{{ end }}cisco_fc_fabric_password = {{ .cisco_fabric_example.cinder.cisco_fc_fabric_password | default "" }} # Connecting port (port value) # Minimum value: 0 # Maximum value: 65535 # from .cisco_fabric_example.cinder.cisco_fc_fabric_port {{ if not .cisco_fabric_example.cinder.cisco_fc_fabric_port }}#{{ end }}cisco_fc_fabric_port = {{ .cisco_fabric_example.cinder.cisco_fc_fabric_port | default "22" }} # overridden zoning policy (string value) # from .cisco_fabric_example.cinder.cisco_zoning_policy {{ if not .cisco_fabric_example.cinder.cisco_zoning_policy }}#{{ end }}cisco_zoning_policy = {{ .cisco_fabric_example.cinder.cisco_zoning_policy | default "initiator-target" }} # overridden zoning activation state (boolean value) # from .cisco_fabric_example.cinder.cisco_zone_activate {{ if not .cisco_fabric_example.cinder.cisco_zone_activate }}#{{ end }}cisco_zone_activate = {{ .cisco_fabric_example.cinder.cisco_zone_activate | default "true" }} # overridden zone name prefix (string value) # from .cisco_fabric_example.cinder.cisco_zone_name_prefix {{ if not .cisco_fabric_example.cinder.cisco_zone_name_prefix }}#{{ end }}cisco_zone_name_prefix = {{ .cisco_fabric_example.cinder.cisco_zone_name_prefix | default "" }} # VSAN of the Fabric (string value) # from .cisco_fabric_example.cinder.cisco_zoning_vsan {{ if not .cisco_fabric_example.cinder.cisco_zoning_vsan }}#{{ end }}cisco_zoning_vsan = {{ .cisco_fabric_example.cinder.cisco_zoning_vsan | default "" }} [COORDINATION] # # From cinder # # The backend URL to use for distributed coordination. (string value) # from .coordination.cinder.backend_url {{ if not .coordination.cinder.backend_url }}#{{ end }}backend_url = {{ .coordination.cinder.backend_url | default "file://$state_path" }} # Number of seconds between heartbeats for distributed coordination. # (floating point value) # from .coordination.cinder.heartbeat {{ if not .coordination.cinder.heartbeat }}#{{ end }}heartbeat = {{ .coordination.cinder.heartbeat | default "1.0" }} # Initial number of seconds to wait after failed reconnection. # (floating point value) # from .coordination.cinder.initial_reconnect_backoff {{ if not .coordination.cinder.initial_reconnect_backoff }}#{{ end }}initial_reconnect_backoff = {{ .coordination.cinder.initial_reconnect_backoff | default "0.1" }} # Maximum number of seconds between sequential reconnection retries. # (floating point value) # from .coordination.cinder.max_reconnect_backoff {{ if not .coordination.cinder.max_reconnect_backoff }}#{{ end }}max_reconnect_backoff = {{ .coordination.cinder.max_reconnect_backoff | default "60.0" }} [FC-ZONE-MANAGER] # # From cinder # # South bound connector for zoning operation (string value) # from .fc_zone_manager.cinder.brcd_sb_connector {{ if not .fc_zone_manager.cinder.brcd_sb_connector }}#{{ end }}brcd_sb_connector = {{ .fc_zone_manager.cinder.brcd_sb_connector | default "HTTP" }} # FC Zone Driver responsible for zone management (string value) # from .fc_zone_manager.cinder.zone_driver {{ if not .fc_zone_manager.cinder.zone_driver }}#{{ end }}zone_driver = {{ .fc_zone_manager.cinder.zone_driver | default "cinder.zonemanager.drivers.brocade.brcd_fc_zone_driver.BrcdFCZoneDriver" }} # Zoning policy configured by user; valid values include "initiator- # target" or "initiator" (string value) # from .fc_zone_manager.cinder.zoning_policy {{ if not .fc_zone_manager.cinder.zoning_policy }}#{{ end }}zoning_policy = {{ .fc_zone_manager.cinder.zoning_policy | default "initiator-target" }} # Comma separated list of Fibre Channel fabric names. This list of # names is used to retrieve other SAN credentials for connecting to # each SAN fabric (string value) # from .fc_zone_manager.cinder.fc_fabric_names {{ if not .fc_zone_manager.cinder.fc_fabric_names }}#{{ end }}fc_fabric_names = {{ .fc_zone_manager.cinder.fc_fabric_names | default "" }} # FC SAN Lookup Service (string value) # from .fc_zone_manager.cinder.fc_san_lookup_service {{ if not .fc_zone_manager.cinder.fc_san_lookup_service }}#{{ end }}fc_san_lookup_service = {{ .fc_zone_manager.cinder.fc_san_lookup_service | default "cinder.zonemanager.drivers.brocade.brcd_fc_san_lookup_service.BrcdFCSanLookupService" }} # Set this to True when you want to allow an unsupported zone manager # driver to start. Drivers that haven't maintained a working CI # system and testing are marked as unsupported until CI is working # again. This also marks a driver as deprecated and may be removed in # the next release. (boolean value) # from .fc_zone_manager.cinder.enable_unsupported_driver {{ if not .fc_zone_manager.cinder.enable_unsupported_driver }}#{{ end }}enable_unsupported_driver = {{ .fc_zone_manager.cinder.enable_unsupported_driver | default "false" }} # Southbound connector for zoning operation (string value) # from .fc_zone_manager.cinder.cisco_sb_connector {{ if not .fc_zone_manager.cinder.cisco_sb_connector }}#{{ end }}cisco_sb_connector = {{ .fc_zone_manager.cinder.cisco_sb_connector | default "cinder.zonemanager.drivers.cisco.cisco_fc_zone_client_cli.CiscoFCZoneClientCLI" }} [KEY_MANAGER] # # From cinder # # Fixed key returned by key manager, specified in hex (string value) # Deprecated group/name - [keymgr]/fixed_key # from .key_manager.cinder.fixed_key {{ if not .key_manager.cinder.fixed_key }}#{{ end }}fixed_key = {{ .key_manager.cinder.fixed_key | default "" }} [barbican] # # From castellan.config # # Use this endpoint to connect to Barbican, for example: # "http://localhost:9311/" (string value) # from .barbican.castellan.config.barbican_endpoint {{ if not .barbican.castellan.config.barbican_endpoint }}#{{ end }}barbican_endpoint = {{ .barbican.castellan.config.barbican_endpoint | default "" }} # Version of the Barbican API, for example: "v1" (string value) # from .barbican.castellan.config.barbican_api_version {{ if not .barbican.castellan.config.barbican_api_version }}#{{ end }}barbican_api_version = {{ .barbican.castellan.config.barbican_api_version | default "" }} # Use this endpoint to connect to Keystone (string value) # from .barbican.castellan.config.auth_endpoint {{ if not .barbican.castellan.config.auth_endpoint }}#{{ end }}auth_endpoint = {{ .barbican.castellan.config.auth_endpoint | default "http://localhost:5000/v3" }} # Number of seconds to wait before retrying poll for key creation # completion (integer value) # from .barbican.castellan.config.retry_delay {{ if not .barbican.castellan.config.retry_delay }}#{{ end }}retry_delay = {{ .barbican.castellan.config.retry_delay | default "1" }} # Number of times to retry poll for key creation completion (integer # value) # from .barbican.castellan.config.number_of_retries {{ if not .barbican.castellan.config.number_of_retries }}#{{ end }}number_of_retries = {{ .barbican.castellan.config.number_of_retries | default "60" }} [cors] # # From oslo.middleware # # Indicate whether this resource may be shared with the domain # received in the requests "origin" header. Format: # "://[:]", no trailing slash. Example: # https://horizon.example.com (list value) # from .cors.oslo.middleware.allowed_origin {{ if not .cors.oslo.middleware.allowed_origin }}#{{ end }}allowed_origin = {{ .cors.oslo.middleware.allowed_origin | default "" }} # Indicate that the actual request can include user credentials # (boolean value) # from .cors.oslo.middleware.allow_credentials {{ if not .cors.oslo.middleware.allow_credentials }}#{{ end }}allow_credentials = {{ .cors.oslo.middleware.allow_credentials | default "true" }} # Indicate which headers are safe to expose to the API. Defaults to # HTTP Simple Headers. (list value) # from .cors.oslo.middleware.expose_headers {{ if not .cors.oslo.middleware.expose_headers }}#{{ end }}expose_headers = {{ .cors.oslo.middleware.expose_headers | default "X-Auth-Token,X-Subject-Token,X-Service-Token,X-OpenStack-Request-ID,OpenStack-API-Version" }} # Maximum cache age of CORS preflight requests. (integer value) # from .cors.oslo.middleware.max_age {{ if not .cors.oslo.middleware.max_age }}#{{ end }}max_age = {{ .cors.oslo.middleware.max_age | default "3600" }} # Indicate which methods can be used during the actual request. (list # value) # from .cors.oslo.middleware.allow_methods {{ if not .cors.oslo.middleware.allow_methods }}#{{ end }}allow_methods = {{ .cors.oslo.middleware.allow_methods | default "GET,PUT,POST,DELETE,PATCH,HEAD" }} # Indicate which header field names may be used during the actual # request. (list value) # from .cors.oslo.middleware.allow_headers {{ if not .cors.oslo.middleware.allow_headers }}#{{ end }}allow_headers = {{ .cors.oslo.middleware.allow_headers | default "X-Auth-Token,X-Identity-Status,X-Roles,X-Service-Catalog,X-User-Id,X-Tenant-Id,X-OpenStack-Request-ID,X-Trace-Info,X-Trace-HMAC,OpenStack-API-Version" }} [cors.subdomain] # # From oslo.middleware # # Indicate whether this resource may be shared with the domain # received in the requests "origin" header. Format: # "://[:]", no trailing slash. Example: # https://horizon.example.com (list value) # from .cors.subdomain.oslo.middleware.allowed_origin {{ if not .cors.subdomain.oslo.middleware.allowed_origin }}#{{ end }}allowed_origin = {{ .cors.subdomain.oslo.middleware.allowed_origin | default "" }} # Indicate that the actual request can include user credentials # (boolean value) # from .cors.subdomain.oslo.middleware.allow_credentials {{ if not .cors.subdomain.oslo.middleware.allow_credentials }}#{{ end }}allow_credentials = {{ .cors.subdomain.oslo.middleware.allow_credentials | default "true" }} # Indicate which headers are safe to expose to the API. Defaults to # HTTP Simple Headers. (list value) # from .cors.subdomain.oslo.middleware.expose_headers {{ if not .cors.subdomain.oslo.middleware.expose_headers }}#{{ end }}expose_headers = {{ .cors.subdomain.oslo.middleware.expose_headers | default "X-Auth-Token,X-Subject-Token,X-Service-Token,X-OpenStack-Request-ID,OpenStack-API-Version" }} # Maximum cache age of CORS preflight requests. (integer value) # from .cors.subdomain.oslo.middleware.max_age {{ if not .cors.subdomain.oslo.middleware.max_age }}#{{ end }}max_age = {{ .cors.subdomain.oslo.middleware.max_age | default "3600" }} # Indicate which methods can be used during the actual request. (list # value) # from .cors.subdomain.oslo.middleware.allow_methods {{ if not .cors.subdomain.oslo.middleware.allow_methods }}#{{ end }}allow_methods = {{ .cors.subdomain.oslo.middleware.allow_methods | default "GET,PUT,POST,DELETE,PATCH,HEAD" }} # Indicate which header field names may be used during the actual # request. (list value) # from .cors.subdomain.oslo.middleware.allow_headers {{ if not .cors.subdomain.oslo.middleware.allow_headers }}#{{ end }}allow_headers = {{ .cors.subdomain.oslo.middleware.allow_headers | default "X-Auth-Token,X-Identity-Status,X-Roles,X-Service-Catalog,X-User-Id,X-Tenant-Id,X-OpenStack-Request-ID,X-Trace-Info,X-Trace-HMAC,OpenStack-API-Version" }} [database] # # From oslo.db # # DEPRECATED: The file name to use with SQLite. (string value) # Deprecated group/name - [DEFAULT]/sqlite_db # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Should use config option connection or slave_connection to # connect the database. # from .database.oslo.db.sqlite_db {{ if not .database.oslo.db.sqlite_db }}#{{ end }}sqlite_db = {{ .database.oslo.db.sqlite_db | default "oslo.sqlite" }} # If True, SQLite uses synchronous mode. (boolean value) # Deprecated group/name - [DEFAULT]/sqlite_synchronous # from .database.oslo.db.sqlite_synchronous {{ if not .database.oslo.db.sqlite_synchronous }}#{{ end }}sqlite_synchronous = {{ .database.oslo.db.sqlite_synchronous | default "true" }} # The back end to use for the database. (string value) # Deprecated group/name - [DEFAULT]/db_backend # from .database.oslo.db.backend {{ if not .database.oslo.db.backend }}#{{ end }}backend = {{ .database.oslo.db.backend | default "sqlalchemy" }} # The SQLAlchemy connection string to use to connect to the database. # (string value) # Deprecated group/name - [DEFAULT]/sql_connection # Deprecated group/name - [DATABASE]/sql_connection # Deprecated group/name - [sql]/connection # from .database.oslo.db.connection {{ if not .database.oslo.db.connection }}#{{ end }}connection = {{ .database.oslo.db.connection | default "" }} # The SQLAlchemy connection string to use to connect to the slave # database. (string value) # from .database.oslo.db.slave_connection {{ if not .database.oslo.db.slave_connection }}#{{ end }}slave_connection = {{ .database.oslo.db.slave_connection | default "" }} # The SQL mode to be used for MySQL sessions. This option, including # the default, overrides any server-set SQL mode. To use whatever SQL # mode is set by the server configuration, set this to no value. # Example: mysql_sql_mode= (string value) # from .database.oslo.db.mysql_sql_mode {{ if not .database.oslo.db.mysql_sql_mode }}#{{ end }}mysql_sql_mode = {{ .database.oslo.db.mysql_sql_mode | default "TRADITIONAL" }} # Timeout before idle SQL connections are reaped. (integer value) # Deprecated group/name - [DEFAULT]/sql_idle_timeout # Deprecated group/name - [DATABASE]/sql_idle_timeout # Deprecated group/name - [sql]/idle_timeout # from .database.oslo.db.idle_timeout {{ if not .database.oslo.db.idle_timeout }}#{{ end }}idle_timeout = {{ .database.oslo.db.idle_timeout | default "3600" }} # Minimum number of SQL connections to keep open in a pool. (integer # value) # Deprecated group/name - [DEFAULT]/sql_min_pool_size # Deprecated group/name - [DATABASE]/sql_min_pool_size # from .database.oslo.db.min_pool_size {{ if not .database.oslo.db.min_pool_size }}#{{ end }}min_pool_size = {{ .database.oslo.db.min_pool_size | default "1" }} # Maximum number of SQL connections to keep open in a pool. Setting a # value of 0 indicates no limit. (integer value) # Deprecated group/name - [DEFAULT]/sql_max_pool_size # Deprecated group/name - [DATABASE]/sql_max_pool_size # from .database.oslo.db.max_pool_size {{ if not .database.oslo.db.max_pool_size }}#{{ end }}max_pool_size = {{ .database.oslo.db.max_pool_size | default "5" }} # Maximum number of database connection retries during startup. Set to # -1 to specify an infinite retry count. (integer value) # Deprecated group/name - [DEFAULT]/sql_max_retries # Deprecated group/name - [DATABASE]/sql_max_retries # from .database.oslo.db.max_retries {{ if not .database.oslo.db.max_retries }}#{{ end }}max_retries = {{ .database.oslo.db.max_retries | default "10" }} # Interval between retries of opening a SQL connection. (integer # value) # Deprecated group/name - [DEFAULT]/sql_retry_interval # Deprecated group/name - [DATABASE]/reconnect_interval # from .database.oslo.db.retry_interval {{ if not .database.oslo.db.retry_interval }}#{{ end }}retry_interval = {{ .database.oslo.db.retry_interval | default "10" }} # If set, use this value for max_overflow with SQLAlchemy. (integer # value) # Deprecated group/name - [DEFAULT]/sql_max_overflow # Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow # from .database.oslo.db.max_overflow {{ if not .database.oslo.db.max_overflow }}#{{ end }}max_overflow = {{ .database.oslo.db.max_overflow | default "50" }} # Verbosity of SQL debugging information: 0=None, 100=Everything. # (integer value) # Minimum value: 0 # Maximum value: 100 # Deprecated group/name - [DEFAULT]/sql_connection_debug # from .database.oslo.db.connection_debug {{ if not .database.oslo.db.connection_debug }}#{{ end }}connection_debug = {{ .database.oslo.db.connection_debug | default "0" }} # Add Python stack traces to SQL as comment strings. (boolean value) # Deprecated group/name - [DEFAULT]/sql_connection_trace # from .database.oslo.db.connection_trace {{ if not .database.oslo.db.connection_trace }}#{{ end }}connection_trace = {{ .database.oslo.db.connection_trace | default "false" }} # If set, use this value for pool_timeout with SQLAlchemy. (integer # value) # Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout # from .database.oslo.db.pool_timeout {{ if not .database.oslo.db.pool_timeout }}#{{ end }}pool_timeout = {{ .database.oslo.db.pool_timeout | default "" }} # Enable the experimental use of database reconnect on connection # lost. (boolean value) # from .database.oslo.db.use_db_reconnect {{ if not .database.oslo.db.use_db_reconnect }}#{{ end }}use_db_reconnect = {{ .database.oslo.db.use_db_reconnect | default "false" }} # Seconds between retries of a database transaction. (integer value) # from .database.oslo.db.db_retry_interval {{ if not .database.oslo.db.db_retry_interval }}#{{ end }}db_retry_interval = {{ .database.oslo.db.db_retry_interval | default "1" }} # If True, increases the interval between retries of a database # operation up to db_max_retry_interval. (boolean value) # from .database.oslo.db.db_inc_retry_interval {{ if not .database.oslo.db.db_inc_retry_interval }}#{{ end }}db_inc_retry_interval = {{ .database.oslo.db.db_inc_retry_interval | default "true" }} # If db_inc_retry_interval is set, the maximum seconds between retries # of a database operation. (integer value) # from .database.oslo.db.db_max_retry_interval {{ if not .database.oslo.db.db_max_retry_interval }}#{{ end }}db_max_retry_interval = {{ .database.oslo.db.db_max_retry_interval | default "10" }} # Maximum retries in case of connection error or deadlock error before # error is raised. Set to -1 to specify an infinite retry count. # (integer value) # from .database.oslo.db.db_max_retries {{ if not .database.oslo.db.db_max_retries }}#{{ end }}db_max_retries = {{ .database.oslo.db.db_max_retries | default "20" }} [key_manager] # # From castellan.config # # The full class name of the key manager API class (string value) # from .key_manager.castellan.config.api_class {{ if not .key_manager.castellan.config.api_class }}#{{ end }}api_class = {{ .key_manager.castellan.config.api_class | default "castellan.key_manager.barbican_key_manager.BarbicanKeyManager" }} # The type of authentication credential to create. Possible values are # 'token', 'password', 'keystone_token', and 'keystone_password'. # Required if no context is passed to the credential factory. (string # value) # from .key_manager.castellan.config.auth_type {{ if not .key_manager.castellan.config.auth_type }}#{{ end }}auth_type = {{ .key_manager.castellan.config.auth_type | default "" }} # Token for authentication. Required for 'token' and 'keystone_token' # auth_type if no context is passed to the credential factory. (string # value) # from .key_manager.castellan.config.token {{ if not .key_manager.castellan.config.token }}#{{ end }}token = {{ .key_manager.castellan.config.token | default "" }} # Username for authentication. Required for 'password' auth_type. # Optional for the 'keystone_password' auth_type. (string value) # from .key_manager.castellan.config.username {{ if not .key_manager.castellan.config.username }}#{{ end }}username = {{ .key_manager.castellan.config.username | default "" }} # Password for authentication. Required for 'password' and # 'keystone_password' auth_type. (string value) # from .key_manager.castellan.config.password {{ if not .key_manager.castellan.config.password }}#{{ end }}password = {{ .key_manager.castellan.config.password | default "" }} # User ID for authentication. Optional for 'keystone_token' and # 'keystone_password' auth_type. (string value) # from .key_manager.castellan.config.user_id {{ if not .key_manager.castellan.config.user_id }}#{{ end }}user_id = {{ .key_manager.castellan.config.user_id | default "" }} # User's domain ID for authentication. Optional for 'keystone_token' # and 'keystone_password' auth_type. (string value) # from .key_manager.castellan.config.user_domain_id {{ if not .key_manager.castellan.config.user_domain_id }}#{{ end }}user_domain_id = {{ .key_manager.castellan.config.user_domain_id | default "" }} # User's domain name for authentication. Optional for 'keystone_token' # and 'keystone_password' auth_type. (string value) # from .key_manager.castellan.config.user_domain_name {{ if not .key_manager.castellan.config.user_domain_name }}#{{ end }}user_domain_name = {{ .key_manager.castellan.config.user_domain_name | default "" }} # Trust ID for trust scoping. Optional for 'keystone_token' and # 'keystone_password' auth_type. (string value) # from .key_manager.castellan.config.trust_id {{ if not .key_manager.castellan.config.trust_id }}#{{ end }}trust_id = {{ .key_manager.castellan.config.trust_id | default "" }} # Domain ID for domain scoping. Optional for 'keystone_token' and # 'keystone_password' auth_type. (string value) # from .key_manager.castellan.config.domain_id {{ if not .key_manager.castellan.config.domain_id }}#{{ end }}domain_id = {{ .key_manager.castellan.config.domain_id | default "" }} # Domain name for domain scoping. Optional for 'keystone_token' and # 'keystone_password' auth_type. (string value) # from .key_manager.castellan.config.domain_name {{ if not .key_manager.castellan.config.domain_name }}#{{ end }}domain_name = {{ .key_manager.castellan.config.domain_name | default "" }} # Project ID for project scoping. Optional for 'keystone_token' and # 'keystone_password' auth_type. (string value) # from .key_manager.castellan.config.project_id {{ if not .key_manager.castellan.config.project_id }}#{{ end }}project_id = {{ .key_manager.castellan.config.project_id | default "" }} # Project name for project scoping. Optional for 'keystone_token' and # 'keystone_password' auth_type. (string value) # from .key_manager.castellan.config.project_name {{ if not .key_manager.castellan.config.project_name }}#{{ end }}project_name = {{ .key_manager.castellan.config.project_name | default "" }} # Project's domain ID for project. Optional for 'keystone_token' and # 'keystone_password' auth_type. (string value) # from .key_manager.castellan.config.project_domain_id {{ if not .key_manager.castellan.config.project_domain_id }}#{{ end }}project_domain_id = {{ .key_manager.castellan.config.project_domain_id | default "" }} # Project's domain name for project. Optional for 'keystone_token' and # 'keystone_password' auth_type. (string value) # from .key_manager.castellan.config.project_domain_name {{ if not .key_manager.castellan.config.project_domain_name }}#{{ end }}project_domain_name = {{ .key_manager.castellan.config.project_domain_name | default "" }} # Allow fetching a new token if the current one is going to expire. # Optional for 'keystone_token' and 'keystone_password' auth_type. # (boolean value) # from .key_manager.castellan.config.reauthenticate {{ if not .key_manager.castellan.config.reauthenticate }}#{{ end }}reauthenticate = {{ .key_manager.castellan.config.reauthenticate | default "true" }} [keystone_authtoken] # # From keystonemiddleware.auth_token # # FIXME(dulek) - added the next several lines because oslo gen config refuses to generate the line items required in keystonemiddleware # for authentication - while it does support an "auth_section" parameter to locate these elsewhere, it would be a strange divergence # from how neutron keystone authentication is stored today - ocata and later appear to use a "service" user section which can house these details # and does successfully generate beyond newton, so likely this whole section will be removed the next time we generate this file {{ if not .keystone_authtoken.keystonemiddleware.auth_token.auth_url }}#{{ end }}auth_url = {{ .keystone_authtoken.keystonemiddleware.auth_token.auth_url | default "" }} {{ if not .keystone_authtoken.keystonemiddleware.auth_token.region_name }}#{{ end }}region_name = {{ .keystone_authtoken.keystonemiddleware.auth_token.region_name | default "" }} {{ if not .keystone_authtoken.keystonemiddleware.auth_token.project_name }}#{{ end }}project_name = {{ .keystone_authtoken.keystonemiddleware.auth_token.project_name | default "" }} {{ if not .keystone_authtoken.keystonemiddleware.auth_token.project_domain_name }}#{{ end }}project_domain_name = {{ .keystone_authtoken.keystonemiddleware.auth_token.project_domain_name | default "" }} {{ if not .keystone_authtoken.keystonemiddleware.auth_token.user_domain_name }}#{{ end }}user_domain_name = {{ .keystone_authtoken.keystonemiddleware.auth_token.user_domain_name | default "" }} {{ if not .keystone_authtoken.keystonemiddleware.auth_token.username }}#{{ end }}username = {{ .keystone_authtoken.keystonemiddleware.auth_token.username | default "" }} {{ if not .keystone_authtoken.keystonemiddleware.auth_token.password }}#{{ end }}password = {{ .keystone_authtoken.keystonemiddleware.auth_token.password | default "" }} # Complete "public" Identity API endpoint. This endpoint should not be # an "admin" endpoint, as it should be accessible by all end users. # Unauthenticated clients are redirected to this endpoint to # authenticate. Although this endpoint should ideally be unversioned, # client support in the wild varies. If you're using a versioned v2 # endpoint here, then this should *not* be the same endpoint the # service user utilizes for validating tokens, because normal end # users may not be able to reach that endpoint. (string value) # from .keystone_authtoken.keystonemiddleware.auth_token.auth_uri {{ if not .keystone_authtoken.keystonemiddleware.auth_token.auth_uri }}#{{ end }}auth_uri = {{ .keystone_authtoken.keystonemiddleware.auth_token.auth_uri | default "" }} # API version of the admin Identity API endpoint. (string value) # from .keystone_authtoken.keystonemiddleware.auth_token.auth_version {{ if not .keystone_authtoken.keystonemiddleware.auth_token.auth_version }}#{{ end }}auth_version = {{ .keystone_authtoken.keystonemiddleware.auth_token.auth_version | default "" }} # Do not handle authorization requests within the middleware, but # delegate the authorization decision to downstream WSGI components. # (boolean value) # from .keystone_authtoken.keystonemiddleware.auth_token.delay_auth_decision {{ if not .keystone_authtoken.keystonemiddleware.auth_token.delay_auth_decision }}#{{ end }}delay_auth_decision = {{ .keystone_authtoken.keystonemiddleware.auth_token.delay_auth_decision | default "false" }} # Request timeout value for communicating with Identity API server. # (integer value) # from .keystone_authtoken.keystonemiddleware.auth_token.http_connect_timeout {{ if not .keystone_authtoken.keystonemiddleware.auth_token.http_connect_timeout }}#{{ end }}http_connect_timeout = {{ .keystone_authtoken.keystonemiddleware.auth_token.http_connect_timeout | default "" }} # How many times are we trying to reconnect when communicating with # Identity API Server. (integer value) # from .keystone_authtoken.keystonemiddleware.auth_token.http_request_max_retries {{ if not .keystone_authtoken.keystonemiddleware.auth_token.http_request_max_retries }}#{{ end }}http_request_max_retries = {{ .keystone_authtoken.keystonemiddleware.auth_token.http_request_max_retries | default "3" }} # Request environment key where the Swift cache object is stored. When # auth_token middleware is deployed with a Swift cache, use this # option to have the middleware share a caching backend with swift. # Otherwise, use the ``memcached_servers`` option instead. (string # value) # from .keystone_authtoken.keystonemiddleware.auth_token.cache {{ if not .keystone_authtoken.keystonemiddleware.auth_token.cache }}#{{ end }}cache = {{ .keystone_authtoken.keystonemiddleware.auth_token.cache | default "" }} # Required if identity server requires client certificate (string # value) # from .keystone_authtoken.keystonemiddleware.auth_token.certfile {{ if not .keystone_authtoken.keystonemiddleware.auth_token.certfile }}#{{ end }}certfile = {{ .keystone_authtoken.keystonemiddleware.auth_token.certfile | default "" }} # Required if identity server requires client certificate (string # value) # from .keystone_authtoken.keystonemiddleware.auth_token.keyfile {{ if not .keystone_authtoken.keystonemiddleware.auth_token.keyfile }}#{{ end }}keyfile = {{ .keystone_authtoken.keystonemiddleware.auth_token.keyfile | default "" }} # A PEM encoded Certificate Authority to use when verifying HTTPs # connections. Defaults to system CAs. (string value) # from .keystone_authtoken.keystonemiddleware.auth_token.cafile {{ if not .keystone_authtoken.keystonemiddleware.auth_token.cafile }}#{{ end }}cafile = {{ .keystone_authtoken.keystonemiddleware.auth_token.cafile | default "" }} # Verify HTTPS connections. (boolean value) # from .keystone_authtoken.keystonemiddleware.auth_token.insecure {{ if not .keystone_authtoken.keystonemiddleware.auth_token.insecure }}#{{ end }}insecure = {{ .keystone_authtoken.keystonemiddleware.auth_token.insecure | default "false" }} # The region in which the identity server can be found. (string value) # from .keystone_authtoken.keystonemiddleware.auth_token.region_name {{ if not .keystone_authtoken.keystonemiddleware.auth_token.region_name }}#{{ end }}region_name = {{ .keystone_authtoken.keystonemiddleware.auth_token.region_name | default "" }} # Directory used to cache files related to PKI tokens. (string value) # from .keystone_authtoken.keystonemiddleware.auth_token.signing_dir {{ if not .keystone_authtoken.keystonemiddleware.auth_token.signing_dir }}#{{ end }}signing_dir = {{ .keystone_authtoken.keystonemiddleware.auth_token.signing_dir | default "" }} # Optionally specify a list of memcached server(s) to use for caching. # If left undefined, tokens will instead be cached in-process. (list # value) # Deprecated group/name - [keystone_authtoken]/memcache_servers # from .keystone_authtoken.keystonemiddleware.auth_token.memcached_servers {{ if not .keystone_authtoken.keystonemiddleware.auth_token.memcached_servers }}#{{ end }}memcached_servers = {{ .keystone_authtoken.keystonemiddleware.auth_token.memcached_servers | default "" }} # In order to prevent excessive effort spent validating tokens, the # middleware caches previously-seen tokens for a configurable duration # (in seconds). Set to -1 to disable caching completely. (integer # value) # from .keystone_authtoken.keystonemiddleware.auth_token.token_cache_time {{ if not .keystone_authtoken.keystonemiddleware.auth_token.token_cache_time }}#{{ end }}token_cache_time = {{ .keystone_authtoken.keystonemiddleware.auth_token.token_cache_time | default "300" }} # Determines the frequency at which the list of revoked tokens is # retrieved from the Identity service (in seconds). A high number of # revocation events combined with a low cache duration may # significantly reduce performance. Only valid for PKI tokens. # (integer value) # from .keystone_authtoken.keystonemiddleware.auth_token.revocation_cache_time {{ if not .keystone_authtoken.keystonemiddleware.auth_token.revocation_cache_time }}#{{ end }}revocation_cache_time = {{ .keystone_authtoken.keystonemiddleware.auth_token.revocation_cache_time | default "10" }} # (Optional) If defined, indicate whether token data should be # authenticated or authenticated and encrypted. If MAC, token data is # authenticated (with HMAC) in the cache. If ENCRYPT, token data is # encrypted and authenticated in the cache. If the value is not one of # these options or empty, auth_token will raise an exception on # initialization. (string value) # Allowed values: None, MAC, ENCRYPT # from .keystone_authtoken.keystonemiddleware.auth_token.memcache_security_strategy {{ if not .keystone_authtoken.keystonemiddleware.auth_token.memcache_security_strategy }}#{{ end }}memcache_security_strategy = {{ .keystone_authtoken.keystonemiddleware.auth_token.memcache_security_strategy | default "None" }} # (Optional, mandatory if memcache_security_strategy is defined) This # string is used for key derivation. (string value) # from .keystone_authtoken.keystonemiddleware.auth_token.memcache_secret_key {{ if not .keystone_authtoken.keystonemiddleware.auth_token.memcache_secret_key }}#{{ end }}memcache_secret_key = {{ .keystone_authtoken.keystonemiddleware.auth_token.memcache_secret_key | default "" }} # (Optional) Number of seconds memcached server is considered dead # before it is tried again. (integer value) # from .keystone_authtoken.keystonemiddleware.auth_token.memcache_pool_dead_retry {{ if not .keystone_authtoken.keystonemiddleware.auth_token.memcache_pool_dead_retry }}#{{ end }}memcache_pool_dead_retry = {{ .keystone_authtoken.keystonemiddleware.auth_token.memcache_pool_dead_retry | default "300" }} # (Optional) Maximum total number of open connections to every # memcached server. (integer value) # from .keystone_authtoken.keystonemiddleware.auth_token.memcache_pool_maxsize {{ if not .keystone_authtoken.keystonemiddleware.auth_token.memcache_pool_maxsize }}#{{ end }}memcache_pool_maxsize = {{ .keystone_authtoken.keystonemiddleware.auth_token.memcache_pool_maxsize | default "10" }} # (Optional) Socket timeout in seconds for communicating with a # memcached server. (integer value) # from .keystone_authtoken.keystonemiddleware.auth_token.memcache_pool_socket_timeout {{ if not .keystone_authtoken.keystonemiddleware.auth_token.memcache_pool_socket_timeout }}#{{ end }}memcache_pool_socket_timeout = {{ .keystone_authtoken.keystonemiddleware.auth_token.memcache_pool_socket_timeout | default "3" }} # (Optional) Number of seconds a connection to memcached is held # unused in the pool before it is closed. (integer value) # from .keystone_authtoken.keystonemiddleware.auth_token.memcache_pool_unused_timeout {{ if not .keystone_authtoken.keystonemiddleware.auth_token.memcache_pool_unused_timeout }}#{{ end }}memcache_pool_unused_timeout = {{ .keystone_authtoken.keystonemiddleware.auth_token.memcache_pool_unused_timeout | default "60" }} # (Optional) Number of seconds that an operation will wait to get a # memcached client connection from the pool. (integer value) # from .keystone_authtoken.keystonemiddleware.auth_token.memcache_pool_conn_get_timeout {{ if not .keystone_authtoken.keystonemiddleware.auth_token.memcache_pool_conn_get_timeout }}#{{ end }}memcache_pool_conn_get_timeout = {{ .keystone_authtoken.keystonemiddleware.auth_token.memcache_pool_conn_get_timeout | default "10" }} # (Optional) Use the advanced (eventlet safe) memcached client pool. # The advanced pool will only work under python 2.x. (boolean value) # from .keystone_authtoken.keystonemiddleware.auth_token.memcache_use_advanced_pool {{ if not .keystone_authtoken.keystonemiddleware.auth_token.memcache_use_advanced_pool }}#{{ end }}memcache_use_advanced_pool = {{ .keystone_authtoken.keystonemiddleware.auth_token.memcache_use_advanced_pool | default "false" }} # (Optional) Indicate whether to set the X-Service-Catalog header. If # False, middleware will not ask for service catalog on token # validation and will not set the X-Service-Catalog header. (boolean # value) # from .keystone_authtoken.keystonemiddleware.auth_token.include_service_catalog {{ if not .keystone_authtoken.keystonemiddleware.auth_token.include_service_catalog }}#{{ end }}include_service_catalog = {{ .keystone_authtoken.keystonemiddleware.auth_token.include_service_catalog | default "true" }} # Used to control the use and type of token binding. Can be set to: # "disabled" to not check token binding. "permissive" (default) to # validate binding information if the bind type is of a form known to # the server and ignore it if not. "strict" like "permissive" but if # the bind type is unknown the token will be rejected. "required" any # form of token binding is needed to be allowed. Finally the name of a # binding method that must be present in tokens. (string value) # from .keystone_authtoken.keystonemiddleware.auth_token.enforce_token_bind {{ if not .keystone_authtoken.keystonemiddleware.auth_token.enforce_token_bind }}#{{ end }}enforce_token_bind = {{ .keystone_authtoken.keystonemiddleware.auth_token.enforce_token_bind | default "permissive" }} # If true, the revocation list will be checked for cached tokens. This # requires that PKI tokens are configured on the identity server. # (boolean value) # from .keystone_authtoken.keystonemiddleware.auth_token.check_revocations_for_cached {{ if not .keystone_authtoken.keystonemiddleware.auth_token.check_revocations_for_cached }}#{{ end }}check_revocations_for_cached = {{ .keystone_authtoken.keystonemiddleware.auth_token.check_revocations_for_cached | default "false" }} # Hash algorithms to use for hashing PKI tokens. This may be a single # algorithm or multiple. The algorithms are those supported by Python # standard hashlib.new(). The hashes will be tried in the order given, # so put the preferred one first for performance. The result of the # first hash will be stored in the cache. This will typically be set # to multiple values only while migrating from a less secure algorithm # to a more secure one. Once all the old tokens are expired this # option should be set to a single value for better performance. (list # value) # from .keystone_authtoken.keystonemiddleware.auth_token.hash_algorithms {{ if not .keystone_authtoken.keystonemiddleware.auth_token.hash_algorithms }}#{{ end }}hash_algorithms = {{ .keystone_authtoken.keystonemiddleware.auth_token.hash_algorithms | default "md5" }} # Authentication type to load (string value) # Deprecated group/name - [keystone_authtoken]/auth_plugin # from .keystone_authtoken.keystonemiddleware.auth_token.auth_type {{ if not .keystone_authtoken.keystonemiddleware.auth_token.auth_type }}#{{ end }}auth_type = {{ .keystone_authtoken.keystonemiddleware.auth_token.auth_type | default "" }} # Config Section from which to load plugin specific options (string # value) # from .keystone_authtoken.keystonemiddleware.auth_token.auth_section {{ if not .keystone_authtoken.keystonemiddleware.auth_token.auth_section }}#{{ end }}auth_section = {{ .keystone_authtoken.keystonemiddleware.auth_token.auth_section | default "" }} [matchmaker_redis] # # From oslo.messaging # # DEPRECATED: Host to locate redis. (string value) # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Replaced by [DEFAULT]/transport_url # from .matchmaker_redis.oslo.messaging.host {{ if not .matchmaker_redis.oslo.messaging.host }}#{{ end }}host = {{ .matchmaker_redis.oslo.messaging.host | default "127.0.0.1" }} # DEPRECATED: Use this port to connect to redis host. (port value) # Minimum value: 0 # Maximum value: 65535 # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Replaced by [DEFAULT]/transport_url # from .matchmaker_redis.oslo.messaging.port {{ if not .matchmaker_redis.oslo.messaging.port }}#{{ end }}port = {{ .matchmaker_redis.oslo.messaging.port | default "6379" }} # DEPRECATED: Password for Redis server (optional). (string value) # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Replaced by [DEFAULT]/transport_url # from .matchmaker_redis.oslo.messaging.password {{ if not .matchmaker_redis.oslo.messaging.password }}#{{ end }}password = {{ .matchmaker_redis.oslo.messaging.password | default "" }} # DEPRECATED: List of Redis Sentinel hosts (fault tolerance mode) e.g. # [host:port, host1:port ... ] (list value) # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Replaced by [DEFAULT]/transport_url # from .matchmaker_redis.oslo.messaging.sentinel_hosts {{ if not .matchmaker_redis.oslo.messaging.sentinel_hosts }}#{{ end }}sentinel_hosts = {{ .matchmaker_redis.oslo.messaging.sentinel_hosts | default "" }} # Redis replica set name. (string value) # from .matchmaker_redis.oslo.messaging.sentinel_group_name {{ if not .matchmaker_redis.oslo.messaging.sentinel_group_name }}#{{ end }}sentinel_group_name = {{ .matchmaker_redis.oslo.messaging.sentinel_group_name | default "oslo-messaging-zeromq" }} # Time in ms to wait between connection attempts. (integer value) # from .matchmaker_redis.oslo.messaging.wait_timeout {{ if not .matchmaker_redis.oslo.messaging.wait_timeout }}#{{ end }}wait_timeout = {{ .matchmaker_redis.oslo.messaging.wait_timeout | default "2000" }} # Time in ms to wait before the transaction is killed. (integer value) # from .matchmaker_redis.oslo.messaging.check_timeout {{ if not .matchmaker_redis.oslo.messaging.check_timeout }}#{{ end }}check_timeout = {{ .matchmaker_redis.oslo.messaging.check_timeout | default "20000" }} # Timeout in ms on blocking socket operations (integer value) # from .matchmaker_redis.oslo.messaging.socket_timeout {{ if not .matchmaker_redis.oslo.messaging.socket_timeout }}#{{ end }}socket_timeout = {{ .matchmaker_redis.oslo.messaging.socket_timeout | default "10000" }} [oslo_concurrency] # # From oslo.concurrency # # Enables or disables inter-process locks. (boolean value) # Deprecated group/name - [DEFAULT]/disable_process_locking # from .oslo_concurrency.oslo.concurrency.disable_process_locking {{ if not .oslo_concurrency.oslo.concurrency.disable_process_locking }}#{{ end }}disable_process_locking = {{ .oslo_concurrency.oslo.concurrency.disable_process_locking | default "false" }} # Directory to use for lock files. For security, the specified # directory should only be writable by the user running the processes # that need locking. Defaults to environment variable OSLO_LOCK_PATH. # If external locks are used, a lock path must be set. (string value) # Deprecated group/name - [DEFAULT]/lock_path # from .oslo_concurrency.oslo.concurrency.lock_path {{ if not .oslo_concurrency.oslo.concurrency.lock_path }}#{{ end }}lock_path = {{ .oslo_concurrency.oslo.concurrency.lock_path | default "" }} [oslo_messaging_amqp] # # From oslo.messaging # # Name for the AMQP container. must be globally unique. Defaults to a # generated UUID (string value) # Deprecated group/name - [amqp1]/container_name # from .oslo_messaging_amqp.oslo.messaging.container_name {{ if not .oslo_messaging_amqp.oslo.messaging.container_name }}#{{ end }}container_name = {{ .oslo_messaging_amqp.oslo.messaging.container_name | default "" }} # Timeout for inactive connections (in seconds) (integer value) # Deprecated group/name - [amqp1]/idle_timeout # from .oslo_messaging_amqp.oslo.messaging.idle_timeout {{ if not .oslo_messaging_amqp.oslo.messaging.idle_timeout }}#{{ end }}idle_timeout = {{ .oslo_messaging_amqp.oslo.messaging.idle_timeout | default "0" }} # Debug: dump AMQP frames to stdout (boolean value) # Deprecated group/name - [amqp1]/trace # from .oslo_messaging_amqp.oslo.messaging.trace {{ if not .oslo_messaging_amqp.oslo.messaging.trace }}#{{ end }}trace = {{ .oslo_messaging_amqp.oslo.messaging.trace | default "false" }} # CA certificate PEM file to verify server certificate (string value) # Deprecated group/name - [amqp1]/ssl_ca_file # from .oslo_messaging_amqp.oslo.messaging.ssl_ca_file {{ if not .oslo_messaging_amqp.oslo.messaging.ssl_ca_file }}#{{ end }}ssl_ca_file = {{ .oslo_messaging_amqp.oslo.messaging.ssl_ca_file | default "" }} # Identifying certificate PEM file to present to clients (string # value) # Deprecated group/name - [amqp1]/ssl_cert_file # from .oslo_messaging_amqp.oslo.messaging.ssl_cert_file {{ if not .oslo_messaging_amqp.oslo.messaging.ssl_cert_file }}#{{ end }}ssl_cert_file = {{ .oslo_messaging_amqp.oslo.messaging.ssl_cert_file | default "" }} # Private key PEM file used to sign cert_file certificate (string # value) # Deprecated group/name - [amqp1]/ssl_key_file # from .oslo_messaging_amqp.oslo.messaging.ssl_key_file {{ if not .oslo_messaging_amqp.oslo.messaging.ssl_key_file }}#{{ end }}ssl_key_file = {{ .oslo_messaging_amqp.oslo.messaging.ssl_key_file | default "" }} # Password for decrypting ssl_key_file (if encrypted) (string value) # Deprecated group/name - [amqp1]/ssl_key_password # from .oslo_messaging_amqp.oslo.messaging.ssl_key_password {{ if not .oslo_messaging_amqp.oslo.messaging.ssl_key_password }}#{{ end }}ssl_key_password = {{ .oslo_messaging_amqp.oslo.messaging.ssl_key_password | default "" }} # Accept clients using either SSL or plain TCP (boolean value) # Deprecated group/name - [amqp1]/allow_insecure_clients # from .oslo_messaging_amqp.oslo.messaging.allow_insecure_clients {{ if not .oslo_messaging_amqp.oslo.messaging.allow_insecure_clients }}#{{ end }}allow_insecure_clients = {{ .oslo_messaging_amqp.oslo.messaging.allow_insecure_clients | default "false" }} # Space separated list of acceptable SASL mechanisms (string value) # Deprecated group/name - [amqp1]/sasl_mechanisms # from .oslo_messaging_amqp.oslo.messaging.sasl_mechanisms {{ if not .oslo_messaging_amqp.oslo.messaging.sasl_mechanisms }}#{{ end }}sasl_mechanisms = {{ .oslo_messaging_amqp.oslo.messaging.sasl_mechanisms | default "" }} # Path to directory that contains the SASL configuration (string # value) # Deprecated group/name - [amqp1]/sasl_config_dir # from .oslo_messaging_amqp.oslo.messaging.sasl_config_dir {{ if not .oslo_messaging_amqp.oslo.messaging.sasl_config_dir }}#{{ end }}sasl_config_dir = {{ .oslo_messaging_amqp.oslo.messaging.sasl_config_dir | default "" }} # Name of configuration file (without .conf suffix) (string value) # Deprecated group/name - [amqp1]/sasl_config_name # from .oslo_messaging_amqp.oslo.messaging.sasl_config_name {{ if not .oslo_messaging_amqp.oslo.messaging.sasl_config_name }}#{{ end }}sasl_config_name = {{ .oslo_messaging_amqp.oslo.messaging.sasl_config_name | default "" }} # User name for message broker authentication (string value) # Deprecated group/name - [amqp1]/username # from .oslo_messaging_amqp.oslo.messaging.username {{ if not .oslo_messaging_amqp.oslo.messaging.username }}#{{ end }}username = {{ .oslo_messaging_amqp.oslo.messaging.username | default "" }} # Password for message broker authentication (string value) # Deprecated group/name - [amqp1]/password # from .oslo_messaging_amqp.oslo.messaging.password {{ if not .oslo_messaging_amqp.oslo.messaging.password }}#{{ end }}password = {{ .oslo_messaging_amqp.oslo.messaging.password | default "" }} # Seconds to pause before attempting to re-connect. (integer value) # Minimum value: 1 # from .oslo_messaging_amqp.oslo.messaging.connection_retry_interval {{ if not .oslo_messaging_amqp.oslo.messaging.connection_retry_interval }}#{{ end }}connection_retry_interval = {{ .oslo_messaging_amqp.oslo.messaging.connection_retry_interval | default "1" }} # Increase the connection_retry_interval by this many seconds after # each unsuccessful failover attempt. (integer value) # Minimum value: 0 # from .oslo_messaging_amqp.oslo.messaging.connection_retry_backoff {{ if not .oslo_messaging_amqp.oslo.messaging.connection_retry_backoff }}#{{ end }}connection_retry_backoff = {{ .oslo_messaging_amqp.oslo.messaging.connection_retry_backoff | default "2" }} # Maximum limit for connection_retry_interval + # connection_retry_backoff (integer value) # Minimum value: 1 # from .oslo_messaging_amqp.oslo.messaging.connection_retry_interval_max {{ if not .oslo_messaging_amqp.oslo.messaging.connection_retry_interval_max }}#{{ end }}connection_retry_interval_max = {{ .oslo_messaging_amqp.oslo.messaging.connection_retry_interval_max | default "30" }} # Time to pause between re-connecting an AMQP 1.0 link that failed due # to a recoverable error. (integer value) # Minimum value: 1 # from .oslo_messaging_amqp.oslo.messaging.link_retry_delay {{ if not .oslo_messaging_amqp.oslo.messaging.link_retry_delay }}#{{ end }}link_retry_delay = {{ .oslo_messaging_amqp.oslo.messaging.link_retry_delay | default "10" }} # The deadline for an rpc reply message delivery. Only used when # caller does not provide a timeout expiry. (integer value) # Minimum value: 5 # from .oslo_messaging_amqp.oslo.messaging.default_reply_timeout {{ if not .oslo_messaging_amqp.oslo.messaging.default_reply_timeout }}#{{ end }}default_reply_timeout = {{ .oslo_messaging_amqp.oslo.messaging.default_reply_timeout | default "30" }} # The deadline for an rpc cast or call message delivery. Only used # when caller does not provide a timeout expiry. (integer value) # Minimum value: 5 # from .oslo_messaging_amqp.oslo.messaging.default_send_timeout {{ if not .oslo_messaging_amqp.oslo.messaging.default_send_timeout }}#{{ end }}default_send_timeout = {{ .oslo_messaging_amqp.oslo.messaging.default_send_timeout | default "30" }} # The deadline for a sent notification message delivery. Only used # when caller does not provide a timeout expiry. (integer value) # Minimum value: 5 # from .oslo_messaging_amqp.oslo.messaging.default_notify_timeout {{ if not .oslo_messaging_amqp.oslo.messaging.default_notify_timeout }}#{{ end }}default_notify_timeout = {{ .oslo_messaging_amqp.oslo.messaging.default_notify_timeout | default "30" }} # Indicates the addressing mode used by the driver. # Permitted values: # 'legacy' - use legacy non-routable addressing # 'routable' - use routable addresses # 'dynamic' - use legacy addresses if the message bus does not # support routing otherwise use routable addressing (string value) # from .oslo_messaging_amqp.oslo.messaging.addressing_mode {{ if not .oslo_messaging_amqp.oslo.messaging.addressing_mode }}#{{ end }}addressing_mode = {{ .oslo_messaging_amqp.oslo.messaging.addressing_mode | default "dynamic" }} # address prefix used when sending to a specific server (string value) # Deprecated group/name - [amqp1]/server_request_prefix # from .oslo_messaging_amqp.oslo.messaging.server_request_prefix {{ if not .oslo_messaging_amqp.oslo.messaging.server_request_prefix }}#{{ end }}server_request_prefix = {{ .oslo_messaging_amqp.oslo.messaging.server_request_prefix | default "exclusive" }} # address prefix used when broadcasting to all servers (string value) # Deprecated group/name - [amqp1]/broadcast_prefix # from .oslo_messaging_amqp.oslo.messaging.broadcast_prefix {{ if not .oslo_messaging_amqp.oslo.messaging.broadcast_prefix }}#{{ end }}broadcast_prefix = {{ .oslo_messaging_amqp.oslo.messaging.broadcast_prefix | default "broadcast" }} # address prefix when sending to any server in group (string value) # Deprecated group/name - [amqp1]/group_request_prefix # from .oslo_messaging_amqp.oslo.messaging.group_request_prefix {{ if not .oslo_messaging_amqp.oslo.messaging.group_request_prefix }}#{{ end }}group_request_prefix = {{ .oslo_messaging_amqp.oslo.messaging.group_request_prefix | default "unicast" }} # Address prefix for all generated RPC addresses (string value) # from .oslo_messaging_amqp.oslo.messaging.rpc_address_prefix {{ if not .oslo_messaging_amqp.oslo.messaging.rpc_address_prefix }}#{{ end }}rpc_address_prefix = {{ .oslo_messaging_amqp.oslo.messaging.rpc_address_prefix | default "openstack.org/om/rpc" }} # Address prefix for all generated Notification addresses (string # value) # from .oslo_messaging_amqp.oslo.messaging.notify_address_prefix {{ if not .oslo_messaging_amqp.oslo.messaging.notify_address_prefix }}#{{ end }}notify_address_prefix = {{ .oslo_messaging_amqp.oslo.messaging.notify_address_prefix | default "openstack.org/om/notify" }} # Appended to the address prefix when sending a fanout message. Used # by the message bus to identify fanout messages. (string value) # from .oslo_messaging_amqp.oslo.messaging.multicast_address {{ if not .oslo_messaging_amqp.oslo.messaging.multicast_address }}#{{ end }}multicast_address = {{ .oslo_messaging_amqp.oslo.messaging.multicast_address | default "multicast" }} # Appended to the address prefix when sending to a particular # RPC/Notification server. Used by the message bus to identify # messages sent to a single destination. (string value) # from .oslo_messaging_amqp.oslo.messaging.unicast_address {{ if not .oslo_messaging_amqp.oslo.messaging.unicast_address }}#{{ end }}unicast_address = {{ .oslo_messaging_amqp.oslo.messaging.unicast_address | default "unicast" }} # Appended to the address prefix when sending to a group of consumers. # Used by the message bus to identify messages that should be # delivered in a round-robin fashion across consumers. (string value) # from .oslo_messaging_amqp.oslo.messaging.anycast_address {{ if not .oslo_messaging_amqp.oslo.messaging.anycast_address }}#{{ end }}anycast_address = {{ .oslo_messaging_amqp.oslo.messaging.anycast_address | default "anycast" }} # Exchange name used in notification addresses. # Exchange name resolution precedence: # Target.exchange if set # else default_notification_exchange if set # else control_exchange if set # else 'notify' (string value) # from .oslo_messaging_amqp.oslo.messaging.default_notification_exchange {{ if not .oslo_messaging_amqp.oslo.messaging.default_notification_exchange }}#{{ end }}default_notification_exchange = {{ .oslo_messaging_amqp.oslo.messaging.default_notification_exchange | default "" }} # Exchange name used in RPC addresses. # Exchange name resolution precedence: # Target.exchange if set # else default_rpc_exchange if set # else control_exchange if set # else 'rpc' (string value) # from .oslo_messaging_amqp.oslo.messaging.default_rpc_exchange {{ if not .oslo_messaging_amqp.oslo.messaging.default_rpc_exchange }}#{{ end }}default_rpc_exchange = {{ .oslo_messaging_amqp.oslo.messaging.default_rpc_exchange | default "" }} # Window size for incoming RPC Reply messages. (integer value) # Minimum value: 1 # from .oslo_messaging_amqp.oslo.messaging.reply_link_credit {{ if not .oslo_messaging_amqp.oslo.messaging.reply_link_credit }}#{{ end }}reply_link_credit = {{ .oslo_messaging_amqp.oslo.messaging.reply_link_credit | default "200" }} # Window size for incoming RPC Request messages (integer value) # Minimum value: 1 # from .oslo_messaging_amqp.oslo.messaging.rpc_server_credit {{ if not .oslo_messaging_amqp.oslo.messaging.rpc_server_credit }}#{{ end }}rpc_server_credit = {{ .oslo_messaging_amqp.oslo.messaging.rpc_server_credit | default "100" }} # Window size for incoming Notification messages (integer value) # Minimum value: 1 # from .oslo_messaging_amqp.oslo.messaging.notify_server_credit {{ if not .oslo_messaging_amqp.oslo.messaging.notify_server_credit }}#{{ end }}notify_server_credit = {{ .oslo_messaging_amqp.oslo.messaging.notify_server_credit | default "100" }} [oslo_messaging_notifications] # # From oslo.messaging # # The Drivers(s) to handle sending notifications. Possible values are # messaging, messagingv2, routing, log, test, noop (multi valued) # Deprecated group/name - [DEFAULT]/notification_driver # from .oslo_messaging_notifications.oslo.messaging.driver (multiopt) {{ if not .oslo_messaging_notifications.oslo.messaging.driver }}#driver = {{ .oslo_messaging_notifications.oslo.messaging.driver | default "" }}{{ else }}{{ range .oslo_messaging_notifications.oslo.messaging.driver }}driver = {{ . }}{{ end }}{{ end }} # A URL representing the messaging driver to use for notifications. If # not set, we fall back to the same configuration used for RPC. # (string value) # Deprecated group/name - [DEFAULT]/notification_transport_url # from .oslo_messaging_notifications.oslo.messaging.transport_url {{ if not .oslo_messaging_notifications.oslo.messaging.transport_url }}#{{ end }}transport_url = {{ .oslo_messaging_notifications.oslo.messaging.transport_url | default "" }} # AMQP topic used for OpenStack notifications. (list value) # Deprecated group/name - [rpc_notifier2]/topics # Deprecated group/name - [DEFAULT]/notification_topics # from .oslo_messaging_notifications.oslo.messaging.topics {{ if not .oslo_messaging_notifications.oslo.messaging.topics }}#{{ end }}topics = {{ .oslo_messaging_notifications.oslo.messaging.topics | default "notifications" }} [oslo_messaging_rabbit] # # From oslo.messaging # # Use durable queues in AMQP. (boolean value) # Deprecated group/name - [DEFAULT]/amqp_durable_queues # Deprecated group/name - [DEFAULT]/rabbit_durable_queues # from .oslo_messaging_rabbit.oslo.messaging.amqp_durable_queues {{ if not .oslo_messaging_rabbit.oslo.messaging.amqp_durable_queues }}#{{ end }}amqp_durable_queues = {{ .oslo_messaging_rabbit.oslo.messaging.amqp_durable_queues | default "false" }} # Auto-delete queues in AMQP. (boolean value) # Deprecated group/name - [DEFAULT]/amqp_auto_delete # from .oslo_messaging_rabbit.oslo.messaging.amqp_auto_delete {{ if not .oslo_messaging_rabbit.oslo.messaging.amqp_auto_delete }}#{{ end }}amqp_auto_delete = {{ .oslo_messaging_rabbit.oslo.messaging.amqp_auto_delete | default "false" }} # SSL version to use (valid only if SSL enabled). Valid values are # TLSv1 and SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be # available on some distributions. (string value) # Deprecated group/name - [DEFAULT]/kombu_ssl_version # from .oslo_messaging_rabbit.oslo.messaging.kombu_ssl_version {{ if not .oslo_messaging_rabbit.oslo.messaging.kombu_ssl_version }}#{{ end }}kombu_ssl_version = {{ .oslo_messaging_rabbit.oslo.messaging.kombu_ssl_version | default "" }} # SSL key file (valid only if SSL enabled). (string value) # Deprecated group/name - [DEFAULT]/kombu_ssl_keyfile # from .oslo_messaging_rabbit.oslo.messaging.kombu_ssl_keyfile {{ if not .oslo_messaging_rabbit.oslo.messaging.kombu_ssl_keyfile }}#{{ end }}kombu_ssl_keyfile = {{ .oslo_messaging_rabbit.oslo.messaging.kombu_ssl_keyfile | default "" }} # SSL cert file (valid only if SSL enabled). (string value) # Deprecated group/name - [DEFAULT]/kombu_ssl_certfile # from .oslo_messaging_rabbit.oslo.messaging.kombu_ssl_certfile {{ if not .oslo_messaging_rabbit.oslo.messaging.kombu_ssl_certfile }}#{{ end }}kombu_ssl_certfile = {{ .oslo_messaging_rabbit.oslo.messaging.kombu_ssl_certfile | default "" }} # SSL certification authority file (valid only if SSL enabled). # (string value) # Deprecated group/name - [DEFAULT]/kombu_ssl_ca_certs # from .oslo_messaging_rabbit.oslo.messaging.kombu_ssl_ca_certs {{ if not .oslo_messaging_rabbit.oslo.messaging.kombu_ssl_ca_certs }}#{{ end }}kombu_ssl_ca_certs = {{ .oslo_messaging_rabbit.oslo.messaging.kombu_ssl_ca_certs | default "" }} # How long to wait before reconnecting in response to an AMQP consumer # cancel notification. (floating point value) # Deprecated group/name - [DEFAULT]/kombu_reconnect_delay # from .oslo_messaging_rabbit.oslo.messaging.kombu_reconnect_delay {{ if not .oslo_messaging_rabbit.oslo.messaging.kombu_reconnect_delay }}#{{ end }}kombu_reconnect_delay = {{ .oslo_messaging_rabbit.oslo.messaging.kombu_reconnect_delay | default "1.0" }} # EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression # will not be used. This option may not be available in future # versions. (string value) # from .oslo_messaging_rabbit.oslo.messaging.kombu_compression {{ if not .oslo_messaging_rabbit.oslo.messaging.kombu_compression }}#{{ end }}kombu_compression = {{ .oslo_messaging_rabbit.oslo.messaging.kombu_compression | default "" }} # How long to wait a missing client before abandoning to send it its # replies. This value should not be longer than rpc_response_timeout. # (integer value) # Deprecated group/name - [oslo_messaging_rabbit]/kombu_reconnect_timeout # from .oslo_messaging_rabbit.oslo.messaging.kombu_missing_consumer_retry_timeout {{ if not .oslo_messaging_rabbit.oslo.messaging.kombu_missing_consumer_retry_timeout }}#{{ end }}kombu_missing_consumer_retry_timeout = {{ .oslo_messaging_rabbit.oslo.messaging.kombu_missing_consumer_retry_timeout | default "60" }} # Determines how the next RabbitMQ node is chosen in case the one we # are currently connected to becomes unavailable. Takes effect only if # more than one RabbitMQ node is provided in config. (string value) # Allowed values: round-robin, shuffle # from .oslo_messaging_rabbit.oslo.messaging.kombu_failover_strategy {{ if not .oslo_messaging_rabbit.oslo.messaging.kombu_failover_strategy }}#{{ end }}kombu_failover_strategy = {{ .oslo_messaging_rabbit.oslo.messaging.kombu_failover_strategy | default "round-robin" }} # DEPRECATED: The RabbitMQ broker address where a single node is used. # (string value) # Deprecated group/name - [DEFAULT]/rabbit_host # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Replaced by [DEFAULT]/transport_url # from .oslo_messaging_rabbit.oslo.messaging.rabbit_host {{ if not .oslo_messaging_rabbit.oslo.messaging.rabbit_host }}#{{ end }}rabbit_host = {{ .oslo_messaging_rabbit.oslo.messaging.rabbit_host | default "localhost" }} # DEPRECATED: The RabbitMQ broker port where a single node is used. # (port value) # Minimum value: 0 # Maximum value: 65535 # Deprecated group/name - [DEFAULT]/rabbit_port # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Replaced by [DEFAULT]/transport_url # from .oslo_messaging_rabbit.oslo.messaging.rabbit_port {{ if not .oslo_messaging_rabbit.oslo.messaging.rabbit_port }}#{{ end }}rabbit_port = {{ .oslo_messaging_rabbit.oslo.messaging.rabbit_port | default "5672" }} # DEPRECATED: RabbitMQ HA cluster host:port pairs. (list value) # Deprecated group/name - [DEFAULT]/rabbit_hosts # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Replaced by [DEFAULT]/transport_url # from .oslo_messaging_rabbit.oslo.messaging.rabbit_hosts {{ if not .oslo_messaging_rabbit.oslo.messaging.rabbit_hosts }}#{{ end }}rabbit_hosts = {{ .oslo_messaging_rabbit.oslo.messaging.rabbit_hosts | default "$rabbit_host:$rabbit_port" }} # Connect over SSL for RabbitMQ. (boolean value) # Deprecated group/name - [DEFAULT]/rabbit_use_ssl # from .oslo_messaging_rabbit.oslo.messaging.rabbit_use_ssl {{ if not .oslo_messaging_rabbit.oslo.messaging.rabbit_use_ssl }}#{{ end }}rabbit_use_ssl = {{ .oslo_messaging_rabbit.oslo.messaging.rabbit_use_ssl | default "false" }} # DEPRECATED: The RabbitMQ userid. (string value) # Deprecated group/name - [DEFAULT]/rabbit_userid # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Replaced by [DEFAULT]/transport_url # from .oslo_messaging_rabbit.oslo.messaging.rabbit_userid {{ if not .oslo_messaging_rabbit.oslo.messaging.rabbit_userid }}#{{ end }}rabbit_userid = {{ .oslo_messaging_rabbit.oslo.messaging.rabbit_userid | default "guest" }} # DEPRECATED: The RabbitMQ password. (string value) # Deprecated group/name - [DEFAULT]/rabbit_password # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Replaced by [DEFAULT]/transport_url # from .oslo_messaging_rabbit.oslo.messaging.rabbit_password {{ if not .oslo_messaging_rabbit.oslo.messaging.rabbit_password }}#{{ end }}rabbit_password = {{ .oslo_messaging_rabbit.oslo.messaging.rabbit_password | default "guest" }} # The RabbitMQ login method. (string value) # Deprecated group/name - [DEFAULT]/rabbit_login_method # from .oslo_messaging_rabbit.oslo.messaging.rabbit_login_method {{ if not .oslo_messaging_rabbit.oslo.messaging.rabbit_login_method }}#{{ end }}rabbit_login_method = {{ .oslo_messaging_rabbit.oslo.messaging.rabbit_login_method | default "AMQPLAIN" }} # DEPRECATED: The RabbitMQ virtual host. (string value) # Deprecated group/name - [DEFAULT]/rabbit_virtual_host # This option is deprecated for removal. # Its value may be silently ignored in the future. # Reason: Replaced by [DEFAULT]/transport_url # from .oslo_messaging_rabbit.oslo.messaging.rabbit_virtual_host {{ if not .oslo_messaging_rabbit.oslo.messaging.rabbit_virtual_host }}#{{ end }}rabbit_virtual_host = {{ .oslo_messaging_rabbit.oslo.messaging.rabbit_virtual_host | default "/" }} # How frequently to retry connecting with RabbitMQ. (integer value) # from .oslo_messaging_rabbit.oslo.messaging.rabbit_retry_interval {{ if not .oslo_messaging_rabbit.oslo.messaging.rabbit_retry_interval }}#{{ end }}rabbit_retry_interval = {{ .oslo_messaging_rabbit.oslo.messaging.rabbit_retry_interval | default "1" }} # How long to backoff for between retries when connecting to RabbitMQ. # (integer value) # Deprecated group/name - [DEFAULT]/rabbit_retry_backoff # from .oslo_messaging_rabbit.oslo.messaging.rabbit_retry_backoff {{ if not .oslo_messaging_rabbit.oslo.messaging.rabbit_retry_backoff }}#{{ end }}rabbit_retry_backoff = {{ .oslo_messaging_rabbit.oslo.messaging.rabbit_retry_backoff | default "2" }} # Maximum interval of RabbitMQ connection retries. Default is 30 # seconds. (integer value) # from .oslo_messaging_rabbit.oslo.messaging.rabbit_interval_max {{ if not .oslo_messaging_rabbit.oslo.messaging.rabbit_interval_max }}#{{ end }}rabbit_interval_max = {{ .oslo_messaging_rabbit.oslo.messaging.rabbit_interval_max | default "30" }} # DEPRECATED: Maximum number of RabbitMQ connection retries. Default # is 0 (infinite retry count). (integer value) # Deprecated group/name - [DEFAULT]/rabbit_max_retries # This option is deprecated for removal. # Its value may be silently ignored in the future. # from .oslo_messaging_rabbit.oslo.messaging.rabbit_max_retries {{ if not .oslo_messaging_rabbit.oslo.messaging.rabbit_max_retries }}#{{ end }}rabbit_max_retries = {{ .oslo_messaging_rabbit.oslo.messaging.rabbit_max_retries | default "0" }} # Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change # this option, you must wipe the RabbitMQ database. In RabbitMQ 3.0, # queue mirroring is no longer controlled by the x-ha-policy argument # when declaring a queue. If you just want to make sure that all # queues (except those with auto-generated names) are mirrored across # all nodes, run: "rabbitmqctl set_policy HA '^(?!amq\.).*' '{"ha- # mode": "all"}' " (boolean value) # Deprecated group/name - [DEFAULT]/rabbit_ha_queues # from .oslo_messaging_rabbit.oslo.messaging.rabbit_ha_queues {{ if not .oslo_messaging_rabbit.oslo.messaging.rabbit_ha_queues }}#{{ end }}rabbit_ha_queues = {{ .oslo_messaging_rabbit.oslo.messaging.rabbit_ha_queues | default "false" }} # Positive integer representing duration in seconds for queue TTL # (x-expires). Queues which are unused for the duration of the TTL are # automatically deleted. The parameter affects only reply and fanout # queues. (integer value) # Minimum value: 1 # from .oslo_messaging_rabbit.oslo.messaging.rabbit_transient_queues_ttl {{ if not .oslo_messaging_rabbit.oslo.messaging.rabbit_transient_queues_ttl }}#{{ end }}rabbit_transient_queues_ttl = {{ .oslo_messaging_rabbit.oslo.messaging.rabbit_transient_queues_ttl | default "1800" }} # Specifies the number of messages to prefetch. Setting to zero allows # unlimited messages. (integer value) # from .oslo_messaging_rabbit.oslo.messaging.rabbit_qos_prefetch_count {{ if not .oslo_messaging_rabbit.oslo.messaging.rabbit_qos_prefetch_count }}#{{ end }}rabbit_qos_prefetch_count = {{ .oslo_messaging_rabbit.oslo.messaging.rabbit_qos_prefetch_count | default "0" }} # Number of seconds after which the Rabbit broker is considered down # if heartbeat's keep-alive fails (0 disable the heartbeat). # EXPERIMENTAL (integer value) # from .oslo_messaging_rabbit.oslo.messaging.heartbeat_timeout_threshold {{ if not .oslo_messaging_rabbit.oslo.messaging.heartbeat_timeout_threshold }}#{{ end }}heartbeat_timeout_threshold = {{ .oslo_messaging_rabbit.oslo.messaging.heartbeat_timeout_threshold | default "60" }} # How often times during the heartbeat_timeout_threshold we check the # heartbeat. (integer value) # from .oslo_messaging_rabbit.oslo.messaging.heartbeat_rate {{ if not .oslo_messaging_rabbit.oslo.messaging.heartbeat_rate }}#{{ end }}heartbeat_rate = {{ .oslo_messaging_rabbit.oslo.messaging.heartbeat_rate | default "2" }} # Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake # (boolean value) # Deprecated group/name - [DEFAULT]/fake_rabbit # from .oslo_messaging_rabbit.oslo.messaging.fake_rabbit {{ if not .oslo_messaging_rabbit.oslo.messaging.fake_rabbit }}#{{ end }}fake_rabbit = {{ .oslo_messaging_rabbit.oslo.messaging.fake_rabbit | default "false" }} # Maximum number of channels to allow (integer value) # from .oslo_messaging_rabbit.oslo.messaging.channel_max {{ if not .oslo_messaging_rabbit.oslo.messaging.channel_max }}#{{ end }}channel_max = {{ .oslo_messaging_rabbit.oslo.messaging.channel_max | default "" }} # The maximum byte size for an AMQP frame (integer value) # from .oslo_messaging_rabbit.oslo.messaging.frame_max {{ if not .oslo_messaging_rabbit.oslo.messaging.frame_max }}#{{ end }}frame_max = {{ .oslo_messaging_rabbit.oslo.messaging.frame_max | default "" }} # How often to send heartbeats for consumer's connections (integer # value) # from .oslo_messaging_rabbit.oslo.messaging.heartbeat_interval {{ if not .oslo_messaging_rabbit.oslo.messaging.heartbeat_interval }}#{{ end }}heartbeat_interval = {{ .oslo_messaging_rabbit.oslo.messaging.heartbeat_interval | default "3" }} # Enable SSL (boolean value) # from .oslo_messaging_rabbit.oslo.messaging.ssl {{ if not .oslo_messaging_rabbit.oslo.messaging.ssl }}#{{ end }}ssl = {{ .oslo_messaging_rabbit.oslo.messaging.ssl | default "" }} # Arguments passed to ssl.wrap_socket (dict value) # from .oslo_messaging_rabbit.oslo.messaging.ssl_options {{ if not .oslo_messaging_rabbit.oslo.messaging.ssl_options }}#{{ end }}ssl_options = {{ .oslo_messaging_rabbit.oslo.messaging.ssl_options | default "" }} # Set socket timeout in seconds for connection's socket (floating # point value) # from .oslo_messaging_rabbit.oslo.messaging.socket_timeout {{ if not .oslo_messaging_rabbit.oslo.messaging.socket_timeout }}#{{ end }}socket_timeout = {{ .oslo_messaging_rabbit.oslo.messaging.socket_timeout | default "0.25" }} # Set TCP_USER_TIMEOUT in seconds for connection's socket (floating # point value) # from .oslo_messaging_rabbit.oslo.messaging.tcp_user_timeout {{ if not .oslo_messaging_rabbit.oslo.messaging.tcp_user_timeout }}#{{ end }}tcp_user_timeout = {{ .oslo_messaging_rabbit.oslo.messaging.tcp_user_timeout | default "0.25" }} # Set delay for reconnection to some host which has connection error # (floating point value) # from .oslo_messaging_rabbit.oslo.messaging.host_connection_reconnect_delay {{ if not .oslo_messaging_rabbit.oslo.messaging.host_connection_reconnect_delay }}#{{ end }}host_connection_reconnect_delay = {{ .oslo_messaging_rabbit.oslo.messaging.host_connection_reconnect_delay | default "0.25" }} # Connection factory implementation (string value) # Allowed values: new, single, read_write # from .oslo_messaging_rabbit.oslo.messaging.connection_factory {{ if not .oslo_messaging_rabbit.oslo.messaging.connection_factory }}#{{ end }}connection_factory = {{ .oslo_messaging_rabbit.oslo.messaging.connection_factory | default "single" }} # Maximum number of connections to keep queued. (integer value) # from .oslo_messaging_rabbit.oslo.messaging.pool_max_size {{ if not .oslo_messaging_rabbit.oslo.messaging.pool_max_size }}#{{ end }}pool_max_size = {{ .oslo_messaging_rabbit.oslo.messaging.pool_max_size | default "30" }} # Maximum number of connections to create above `pool_max_size`. # (integer value) # from .oslo_messaging_rabbit.oslo.messaging.pool_max_overflow {{ if not .oslo_messaging_rabbit.oslo.messaging.pool_max_overflow }}#{{ end }}pool_max_overflow = {{ .oslo_messaging_rabbit.oslo.messaging.pool_max_overflow | default "0" }} # Default number of seconds to wait for a connections to available # (integer value) # from .oslo_messaging_rabbit.oslo.messaging.pool_timeout {{ if not .oslo_messaging_rabbit.oslo.messaging.pool_timeout }}#{{ end }}pool_timeout = {{ .oslo_messaging_rabbit.oslo.messaging.pool_timeout | default "30" }} # Lifetime of a connection (since creation) in seconds or None for no # recycling. Expired connections are closed on acquire. (integer # value) # from .oslo_messaging_rabbit.oslo.messaging.pool_recycle {{ if not .oslo_messaging_rabbit.oslo.messaging.pool_recycle }}#{{ end }}pool_recycle = {{ .oslo_messaging_rabbit.oslo.messaging.pool_recycle | default "600" }} # Threshold at which inactive (since release) connections are # considered stale in seconds or None for no staleness. Stale # connections are closed on acquire. (integer value) # from .oslo_messaging_rabbit.oslo.messaging.pool_stale {{ if not .oslo_messaging_rabbit.oslo.messaging.pool_stale }}#{{ end }}pool_stale = {{ .oslo_messaging_rabbit.oslo.messaging.pool_stale | default "60" }} # Persist notification messages. (boolean value) # from .oslo_messaging_rabbit.oslo.messaging.notification_persistence {{ if not .oslo_messaging_rabbit.oslo.messaging.notification_persistence }}#{{ end }}notification_persistence = {{ .oslo_messaging_rabbit.oslo.messaging.notification_persistence | default "false" }} # Exchange name for sending notifications (string value) # from .oslo_messaging_rabbit.oslo.messaging.default_notification_exchange {{ if not .oslo_messaging_rabbit.oslo.messaging.default_notification_exchange }}#{{ end }}default_notification_exchange = {{ .oslo_messaging_rabbit.oslo.messaging.default_notification_exchange | default "${control_exchange}_notification" }} # Max number of not acknowledged message which RabbitMQ can send to # notification listener. (integer value) # from .oslo_messaging_rabbit.oslo.messaging.notification_listener_prefetch_count {{ if not .oslo_messaging_rabbit.oslo.messaging.notification_listener_prefetch_count }}#{{ end }}notification_listener_prefetch_count = {{ .oslo_messaging_rabbit.oslo.messaging.notification_listener_prefetch_count | default "100" }} # Reconnecting retry count in case of connectivity problem during # sending notification, -1 means infinite retry. (integer value) # from .oslo_messaging_rabbit.oslo.messaging.default_notification_retry_attempts {{ if not .oslo_messaging_rabbit.oslo.messaging.default_notification_retry_attempts }}#{{ end }}default_notification_retry_attempts = {{ .oslo_messaging_rabbit.oslo.messaging.default_notification_retry_attempts | default "-1" }} # Reconnecting retry delay in case of connectivity problem during # sending notification message (floating point value) # from .oslo_messaging_rabbit.oslo.messaging.notification_retry_delay {{ if not .oslo_messaging_rabbit.oslo.messaging.notification_retry_delay }}#{{ end }}notification_retry_delay = {{ .oslo_messaging_rabbit.oslo.messaging.notification_retry_delay | default "0.25" }} # Time to live for rpc queues without consumers in seconds. (integer # value) # from .oslo_messaging_rabbit.oslo.messaging.rpc_queue_expiration {{ if not .oslo_messaging_rabbit.oslo.messaging.rpc_queue_expiration }}#{{ end }}rpc_queue_expiration = {{ .oslo_messaging_rabbit.oslo.messaging.rpc_queue_expiration | default "60" }} # Exchange name for sending RPC messages (string value) # from .oslo_messaging_rabbit.oslo.messaging.default_rpc_exchange {{ if not .oslo_messaging_rabbit.oslo.messaging.default_rpc_exchange }}#{{ end }}default_rpc_exchange = {{ .oslo_messaging_rabbit.oslo.messaging.default_rpc_exchange | default "${control_exchange}_rpc" }} # Exchange name for receiving RPC replies (string value) # from .oslo_messaging_rabbit.oslo.messaging.rpc_reply_exchange {{ if not .oslo_messaging_rabbit.oslo.messaging.rpc_reply_exchange }}#{{ end }}rpc_reply_exchange = {{ .oslo_messaging_rabbit.oslo.messaging.rpc_reply_exchange | default "${control_exchange}_rpc_reply" }} # Max number of not acknowledged message which RabbitMQ can send to # rpc listener. (integer value) # from .oslo_messaging_rabbit.oslo.messaging.rpc_listener_prefetch_count {{ if not .oslo_messaging_rabbit.oslo.messaging.rpc_listener_prefetch_count }}#{{ end }}rpc_listener_prefetch_count = {{ .oslo_messaging_rabbit.oslo.messaging.rpc_listener_prefetch_count | default "100" }} # Max number of not acknowledged message which RabbitMQ can send to # rpc reply listener. (integer value) # from .oslo_messaging_rabbit.oslo.messaging.rpc_reply_listener_prefetch_count {{ if not .oslo_messaging_rabbit.oslo.messaging.rpc_reply_listener_prefetch_count }}#{{ end }}rpc_reply_listener_prefetch_count = {{ .oslo_messaging_rabbit.oslo.messaging.rpc_reply_listener_prefetch_count | default "100" }} # Reconnecting retry count in case of connectivity problem during # sending reply. -1 means infinite retry during rpc_timeout (integer # value) # from .oslo_messaging_rabbit.oslo.messaging.rpc_reply_retry_attempts {{ if not .oslo_messaging_rabbit.oslo.messaging.rpc_reply_retry_attempts }}#{{ end }}rpc_reply_retry_attempts = {{ .oslo_messaging_rabbit.oslo.messaging.rpc_reply_retry_attempts | default "-1" }} # Reconnecting retry delay in case of connectivity problem during # sending reply. (floating point value) # from .oslo_messaging_rabbit.oslo.messaging.rpc_reply_retry_delay {{ if not .oslo_messaging_rabbit.oslo.messaging.rpc_reply_retry_delay }}#{{ end }}rpc_reply_retry_delay = {{ .oslo_messaging_rabbit.oslo.messaging.rpc_reply_retry_delay | default "0.25" }} # Reconnecting retry count in case of connectivity problem during # sending RPC message, -1 means infinite retry. If actual retry # attempts in not 0 the rpc request could be processed more then one # time (integer value) # from .oslo_messaging_rabbit.oslo.messaging.default_rpc_retry_attempts {{ if not .oslo_messaging_rabbit.oslo.messaging.default_rpc_retry_attempts }}#{{ end }}default_rpc_retry_attempts = {{ .oslo_messaging_rabbit.oslo.messaging.default_rpc_retry_attempts | default "-1" }} # Reconnecting retry delay in case of connectivity problem during # sending RPC message (floating point value) # from .oslo_messaging_rabbit.oslo.messaging.rpc_retry_delay {{ if not .oslo_messaging_rabbit.oslo.messaging.rpc_retry_delay }}#{{ end }}rpc_retry_delay = {{ .oslo_messaging_rabbit.oslo.messaging.rpc_retry_delay | default "0.25" }} [oslo_messaging_zmq] # # From oslo.messaging # # ZeroMQ bind address. Should be a wildcard (*), an ethernet # interface, or IP. The "host" option should point or resolve to this # address. (string value) # Deprecated group/name - [DEFAULT]/rpc_zmq_bind_address # from .oslo_messaging_zmq.oslo.messaging.rpc_zmq_bind_address {{ if not .oslo_messaging_zmq.oslo.messaging.rpc_zmq_bind_address }}#{{ end }}rpc_zmq_bind_address = {{ .oslo_messaging_zmq.oslo.messaging.rpc_zmq_bind_address | default "*" }} # MatchMaker driver. (string value) # Allowed values: redis, dummy # Deprecated group/name - [DEFAULT]/rpc_zmq_matchmaker # from .oslo_messaging_zmq.oslo.messaging.rpc_zmq_matchmaker {{ if not .oslo_messaging_zmq.oslo.messaging.rpc_zmq_matchmaker }}#{{ end }}rpc_zmq_matchmaker = {{ .oslo_messaging_zmq.oslo.messaging.rpc_zmq_matchmaker | default "redis" }} # Number of ZeroMQ contexts, defaults to 1. (integer value) # Deprecated group/name - [DEFAULT]/rpc_zmq_contexts # from .oslo_messaging_zmq.oslo.messaging.rpc_zmq_contexts {{ if not .oslo_messaging_zmq.oslo.messaging.rpc_zmq_contexts }}#{{ end }}rpc_zmq_contexts = {{ .oslo_messaging_zmq.oslo.messaging.rpc_zmq_contexts | default "1" }} # Maximum number of ingress messages to locally buffer per topic. # Default is unlimited. (integer value) # Deprecated group/name - [DEFAULT]/rpc_zmq_topic_backlog # from .oslo_messaging_zmq.oslo.messaging.rpc_zmq_topic_backlog {{ if not .oslo_messaging_zmq.oslo.messaging.rpc_zmq_topic_backlog }}#{{ end }}rpc_zmq_topic_backlog = {{ .oslo_messaging_zmq.oslo.messaging.rpc_zmq_topic_backlog | default "" }} # Directory for holding IPC sockets. (string value) # Deprecated group/name - [DEFAULT]/rpc_zmq_ipc_dir # from .oslo_messaging_zmq.oslo.messaging.rpc_zmq_ipc_dir {{ if not .oslo_messaging_zmq.oslo.messaging.rpc_zmq_ipc_dir }}#{{ end }}rpc_zmq_ipc_dir = {{ .oslo_messaging_zmq.oslo.messaging.rpc_zmq_ipc_dir | default "/var/run/openstack" }} # Name of this node. Must be a valid hostname, FQDN, or IP address. # Must match "host" option, if running Nova. (string value) # Deprecated group/name - [DEFAULT]/rpc_zmq_host # from .oslo_messaging_zmq.oslo.messaging.rpc_zmq_host {{ if not .oslo_messaging_zmq.oslo.messaging.rpc_zmq_host }}#{{ end }}rpc_zmq_host = {{ .oslo_messaging_zmq.oslo.messaging.rpc_zmq_host | default "localhost" }} # Seconds to wait before a cast expires (TTL). The default value of -1 # specifies an infinite linger period. The value of 0 specifies no # linger period. Pending messages shall be discarded immediately when # the socket is closed. Only supported by impl_zmq. (integer value) # Deprecated group/name - [DEFAULT]/rpc_cast_timeout # from .oslo_messaging_zmq.oslo.messaging.rpc_cast_timeout {{ if not .oslo_messaging_zmq.oslo.messaging.rpc_cast_timeout }}#{{ end }}rpc_cast_timeout = {{ .oslo_messaging_zmq.oslo.messaging.rpc_cast_timeout | default "-1" }} # The default number of seconds that poll should wait. Poll raises # timeout exception when timeout expired. (integer value) # Deprecated group/name - [DEFAULT]/rpc_poll_timeout # from .oslo_messaging_zmq.oslo.messaging.rpc_poll_timeout {{ if not .oslo_messaging_zmq.oslo.messaging.rpc_poll_timeout }}#{{ end }}rpc_poll_timeout = {{ .oslo_messaging_zmq.oslo.messaging.rpc_poll_timeout | default "1" }} # Expiration timeout in seconds of a name service record about # existing target ( < 0 means no timeout). (integer value) # Deprecated group/name - [DEFAULT]/zmq_target_expire # from .oslo_messaging_zmq.oslo.messaging.zmq_target_expire {{ if not .oslo_messaging_zmq.oslo.messaging.zmq_target_expire }}#{{ end }}zmq_target_expire = {{ .oslo_messaging_zmq.oslo.messaging.zmq_target_expire | default "300" }} # Update period in seconds of a name service record about existing # target. (integer value) # Deprecated group/name - [DEFAULT]/zmq_target_update # from .oslo_messaging_zmq.oslo.messaging.zmq_target_update {{ if not .oslo_messaging_zmq.oslo.messaging.zmq_target_update }}#{{ end }}zmq_target_update = {{ .oslo_messaging_zmq.oslo.messaging.zmq_target_update | default "180" }} # Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. # (boolean value) # Deprecated group/name - [DEFAULT]/use_pub_sub # from .oslo_messaging_zmq.oslo.messaging.use_pub_sub {{ if not .oslo_messaging_zmq.oslo.messaging.use_pub_sub }}#{{ end }}use_pub_sub = {{ .oslo_messaging_zmq.oslo.messaging.use_pub_sub | default "true" }} # Use ROUTER remote proxy. (boolean value) # Deprecated group/name - [DEFAULT]/use_router_proxy # from .oslo_messaging_zmq.oslo.messaging.use_router_proxy {{ if not .oslo_messaging_zmq.oslo.messaging.use_router_proxy }}#{{ end }}use_router_proxy = {{ .oslo_messaging_zmq.oslo.messaging.use_router_proxy | default "true" }} # Minimal port number for random ports range. (port value) # Minimum value: 0 # Maximum value: 65535 # Deprecated group/name - [DEFAULT]/rpc_zmq_min_port # from .oslo_messaging_zmq.oslo.messaging.rpc_zmq_min_port {{ if not .oslo_messaging_zmq.oslo.messaging.rpc_zmq_min_port }}#{{ end }}rpc_zmq_min_port = {{ .oslo_messaging_zmq.oslo.messaging.rpc_zmq_min_port | default "49153" }} # Maximal port number for random ports range. (integer value) # Minimum value: 1 # Maximum value: 65536 # Deprecated group/name - [DEFAULT]/rpc_zmq_max_port # from .oslo_messaging_zmq.oslo.messaging.rpc_zmq_max_port {{ if not .oslo_messaging_zmq.oslo.messaging.rpc_zmq_max_port }}#{{ end }}rpc_zmq_max_port = {{ .oslo_messaging_zmq.oslo.messaging.rpc_zmq_max_port | default "65536" }} # Number of retries to find free port number before fail with # ZMQBindError. (integer value) # Deprecated group/name - [DEFAULT]/rpc_zmq_bind_port_retries # from .oslo_messaging_zmq.oslo.messaging.rpc_zmq_bind_port_retries {{ if not .oslo_messaging_zmq.oslo.messaging.rpc_zmq_bind_port_retries }}#{{ end }}rpc_zmq_bind_port_retries = {{ .oslo_messaging_zmq.oslo.messaging.rpc_zmq_bind_port_retries | default "100" }} # Default serialization mechanism for serializing/deserializing # outgoing/incoming messages (string value) # Allowed values: json, msgpack # Deprecated group/name - [DEFAULT]/rpc_zmq_serialization # from .oslo_messaging_zmq.oslo.messaging.rpc_zmq_serialization {{ if not .oslo_messaging_zmq.oslo.messaging.rpc_zmq_serialization }}#{{ end }}rpc_zmq_serialization = {{ .oslo_messaging_zmq.oslo.messaging.rpc_zmq_serialization | default "json" }} # This option configures round-robin mode in zmq socket. True means # not keeping a queue when server side disconnects. False means to # keep queue and messages even if server is disconnected, when the # server appears we send all accumulated messages to it. (boolean # value) # from .oslo_messaging_zmq.oslo.messaging.zmq_immediate {{ if not .oslo_messaging_zmq.oslo.messaging.zmq_immediate }}#{{ end }}zmq_immediate = {{ .oslo_messaging_zmq.oslo.messaging.zmq_immediate | default "false" }} [oslo_middleware] # # From oslo.middleware # # The maximum body size for each request, in bytes. (integer value) # Deprecated group/name - [DEFAULT]/osapi_max_request_body_size # Deprecated group/name - [DEFAULT]/max_request_body_size # from .oslo_middleware.oslo.middleware.max_request_body_size {{ if not .oslo_middleware.oslo.middleware.max_request_body_size }}#{{ end }}max_request_body_size = {{ .oslo_middleware.oslo.middleware.max_request_body_size | default "114688" }} # DEPRECATED: The HTTP Header that will be used to determine what the # original request protocol scheme was, even if it was hidden by a SSL # termination proxy. (string value) # This option is deprecated for removal. # Its value may be silently ignored in the future. # from .oslo_middleware.oslo.middleware.secure_proxy_ssl_header {{ if not .oslo_middleware.oslo.middleware.secure_proxy_ssl_header }}#{{ end }}secure_proxy_ssl_header = {{ .oslo_middleware.oslo.middleware.secure_proxy_ssl_header | default "X-Forwarded-Proto" }} # Whether the application is behind a proxy or not. This determines if # the middleware should parse the headers or not. (boolean value) # from .oslo_middleware.oslo.middleware.enable_proxy_headers_parsing {{ if not .oslo_middleware.oslo.middleware.enable_proxy_headers_parsing }}#{{ end }}enable_proxy_headers_parsing = {{ .oslo_middleware.oslo.middleware.enable_proxy_headers_parsing | default "false" }} [oslo_policy] # # From oslo.policy # # The JSON file that defines policies. (string value) # Deprecated group/name - [DEFAULT]/policy_file # from .oslo_policy.oslo.policy.policy_file {{ if not .oslo_policy.oslo.policy.policy_file }}#{{ end }}policy_file = {{ .oslo_policy.oslo.policy.policy_file | default "policy.json" }} # Default rule. Enforced when a requested rule is not found. (string # value) # Deprecated group/name - [DEFAULT]/policy_default_rule # from .oslo_policy.oslo.policy.policy_default_rule {{ if not .oslo_policy.oslo.policy.policy_default_rule }}#{{ end }}policy_default_rule = {{ .oslo_policy.oslo.policy.policy_default_rule | default "default" }} # Directories where policy configuration files are stored. They can be # relative to any directory in the search path defined by the # config_dir option, or absolute paths. The file defined by # policy_file must exist for these directories to be searched. # Missing or empty directories are ignored. (multi valued) # Deprecated group/name - [DEFAULT]/policy_dirs # from .oslo_policy.oslo.policy.policy_dirs (multiopt) {{ if not .oslo_policy.oslo.policy.policy_dirs }}#policy_dirs = {{ .oslo_policy.oslo.policy.policy_dirs | default "policy.d" }}{{ else }}{{ range .oslo_policy.oslo.policy.policy_dirs }}policy_dirs = {{ . }}{{ end }}{{ end }} [oslo_reports] # # From oslo.reports # # Path to a log directory where to create a file (string value) # from .oslo_reports.oslo.reports.log_dir {{ if not .oslo_reports.oslo.reports.log_dir }}#{{ end }}log_dir = {{ .oslo_reports.oslo.reports.log_dir | default "" }} # The path to a file to watch for changes to trigger the reports, # instead of signals. Setting this option disables the signal trigger # for the reports. If application is running as a WSGI application it # is recommended to use this instead of signals. (string value) # from .oslo_reports.oslo.reports.file_event_handler {{ if not .oslo_reports.oslo.reports.file_event_handler }}#{{ end }}file_event_handler = {{ .oslo_reports.oslo.reports.file_event_handler | default "" }} # How many seconds to wait between polls when file_event_handler is # set (integer value) # from .oslo_reports.oslo.reports.file_event_handler_interval {{ if not .oslo_reports.oslo.reports.file_event_handler_interval }}#{{ end }}file_event_handler_interval = {{ .oslo_reports.oslo.reports.file_event_handler_interval | default "1" }} [oslo_versionedobjects] # # From oslo.versionedobjects # # Make exception message format errors fatal (boolean value) # from .oslo_versionedobjects.oslo.versionedobjects.fatal_exception_format_errors {{ if not .oslo_versionedobjects.oslo.versionedobjects.fatal_exception_format_errors }}#{{ end }}fatal_exception_format_errors = {{ .oslo_versionedobjects.oslo.versionedobjects.fatal_exception_format_errors | default "false" }} [ssl] # # From oslo.service.sslutils # # CA certificate file to use to verify connecting clients. (string # value) # Deprecated group/name - [DEFAULT]/ssl_ca_file # from .ssl.oslo.service.sslutils.ca_file {{ if not .ssl.oslo.service.sslutils.ca_file }}#{{ end }}ca_file = {{ .ssl.oslo.service.sslutils.ca_file | default "" }} # Certificate file to use when starting the server securely. (string # value) # Deprecated group/name - [DEFAULT]/ssl_cert_file # from .ssl.oslo.service.sslutils.cert_file {{ if not .ssl.oslo.service.sslutils.cert_file }}#{{ end }}cert_file = {{ .ssl.oslo.service.sslutils.cert_file | default "" }} # Private key file to use when starting the server securely. (string # value) # Deprecated group/name - [DEFAULT]/ssl_key_file # from .ssl.oslo.service.sslutils.key_file {{ if not .ssl.oslo.service.sslutils.key_file }}#{{ end }}key_file = {{ .ssl.oslo.service.sslutils.key_file | default "" }} # SSL version to use (valid only if SSL enabled). Valid values are # TLSv1 and SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be # available on some distributions. (string value) # from .ssl.oslo.service.sslutils.version {{ if not .ssl.oslo.service.sslutils.version }}#{{ end }}version = {{ .ssl.oslo.service.sslutils.version | default "" }} # Sets the list of available ciphers. value should be a string in the # OpenSSL cipher list format. (string value) # from .ssl.oslo.service.sslutils.ciphers {{ if not .ssl.oslo.service.sslutils.ciphers }}#{{ end }}ciphers = {{ .ssl.oslo.service.sslutils.ciphers | default "" }} {{- end -}}