· 9 years ago · Nov 17, 2016, 11:58 PM
1[root@controller keystone]# cat /etc/glance/glance-registry.conf
2[DEFAULT]
3
4#
5# From glance.registry
6#
7
8#
9# Set the image owner to tenant or the authenticated user.
10#
11# Assign a boolean value to determine the owner of an image. When set to
12# True, the owner of the image is the tenant. When set to False, the
13# owner of the image will be the authenticated user issuing the request.
14# Setting it to False makes the image private to the associated user and
15# sharing with other users within the same tenant (or "project")
16# requires explicit image sharing via image membership.
17#
18# Possible values:
19# * True
20# * False
21#
22# Related options:
23# * None
24#
25# (boolean value)
26#owner_is_tenant = true
27
28#
29# Role used to identify an authenticated user as administrator.
30#
31# Provide a string value representing a Keystone role to identify an
32# administrative user. Users with this role will be granted
33# administrative privileges. The default value for this option is
34# 'admin'.
35#
36# Possible values:
37# * A string value which is a valid Keystone role
38#
39# Related options:
40# * None
41#
42# (string value)
43#admin_role = admin
44
45#
46# Allow limited access to unauthenticated users.
47#
48# Assign a boolean to determine API access for unathenticated
49# users. When set to False, the API cannot be accessed by
50# unauthenticated users. When set to True, unauthenticated users can
51# access the API with read-only privileges. This however only applies
52# when using ContextMiddleware.
53#
54# Possible values:
55# * True
56# * False
57#
58# Related options:
59# * None
60#
61# (boolean value)
62#allow_anonymous_access = false
63
64#
65# Limit the request ID length.
66#
67# Provide an integer value to limit the length of the request ID to
68# the specified length. The default value is 64. Users can change this
69# to any ineteger value between 0 and 16384 however keeping in mind that
70# a larger value may flood the logs.
71#
72# Possible values:
73# * Integer value between 0 and 16384
74#
75# Related options:
76# * None
77#
78# (integer value)
79# Minimum value: 0
80#max_request_id_length = 64
81
82#
83# Allow users to add additional/custom properties to images.
84#
85# Glance defines a standard set of properties (in its schema) that
86# appear on every image. These properties are also known as
87# ``base properties``. In addition to these properties, Glance
88# allows users to add custom properties to images. These are known
89# as ``additional properties``.
90#
91# By default, this configuration option is set to ``True`` and users
92# are allowed to add additional properties. The number of additional
93# properties that can be added to an image can be controlled via
94# ``image_property_quota`` configuration option.
95#
96# Possible values:
97# * True
98# * False
99#
100# Related options:
101# * image_property_quota
102#
103# (boolean value)
104#allow_additional_image_properties = true
105
106#
107# Maximum number of image members per image.
108#
109# This limits the maximum of users an image can be shared with. Any negative
110# value is interpreted as unlimited.
111#
112# Related options:
113# * None
114#
115# (integer value)
116#image_member_quota = 128
117
118#
119# Maximum number of properties allowed on an image.
120#
121# This enforces an upper limit on the number of additional properties an image
122# can have. Any negative value is interpreted as unlimited.
123#
124# NOTE: This won't have any impact if additional properties are disabled. Please
125# refer to ``allow_additional_image_properties``.
126#
127# Related options:
128# * ``allow_additional_image_properties``
129#
130# (integer value)
131#image_property_quota = 128
132
133#
134# Maximum number of tags allowed on an image.
135#
136# Any negative value is interpreted as unlimited.
137#
138# Related options:
139# * None
140#
141# (integer value)
142#image_tag_quota = 128
143
144#
145# Maximum number of locations allowed on an image.
146#
147# Any negative value is interpreted as unlimited.
148#
149# Related options:
150# * None
151#
152# (integer value)
153#image_location_quota = 10
154
155#
156# Python module path of data access API.
157#
158# Specifies the path to the API to use for accessing the data model.
159# This option determines how the image catalog data will be accessed.
160#
161# Possible values:
162# * glance.db.sqlalchemy.api
163# * glance.db.registry.api
164# * glance.db.simple.api
165#
166# If this option is set to ``glance.db.sqlalchemy.api`` then the image
167# catalog data is stored in and read from the database via the
168# SQLAlchemy Core and ORM APIs.
169#
170# Setting this option to ``glance.db.registry.api`` will force all
171# database access requests to be routed through the Registry service.
172# This avoids data access from the Glance API nodes for an added layer
173# of security, scalability and manageability.
174#
175# NOTE: In v2 OpenStack Images API, the registry service is optional.
176# In order to use the Registry API in v2, the option
177# ``enable_v2_registry`` must be set to ``True``.
178#
179# Finally, when this configuration option is set to
180# ``glance.db.simple.api``, image catalog data is stored in and read
181# from an in-memory data structure. This is primarily used for testing.
182#
183# Related options:
184# * enable_v2_api
185# * enable_v2_registry
186#
187# (string value)
188#data_api = glance.db.sqlalchemy.api
189
190#
191# The default number of results to return for a request.
192#
193# Responses to certain API requests, like list images, may return
194# multiple items. The number of results returned can be explicitly
195# controlled by specifying the ``limit`` parameter in the API request.
196# However, if a ``limit`` parameter is not specified, this
197# configuration value will be used as the default number of results to
198# be returned for any API request.
199#
200# NOTES:
201# * The value of this configuration option may not be greater than
202# the value specified by ``api_limit_max``.
203# * Setting this to a very large value may slow down database
204# queries and increase response times. Setting this to a
205# very low value may result in poor user experience.
206#
207# Possible values:
208# * Any positive integer
209#
210# Related options:
211# * api_limit_max
212#
213# (integer value)
214# Minimum value: 1
215#limit_param_default = 25
216
217#
218# Maximum number of results that could be returned by a request.
219#
220# As described in the help text of ``limit_param_default``, some
221# requests may return multiple results. The number of results to be
222# returned are governed either by the ``limit`` parameter in the
223# request or the ``limit_param_default`` configuration option.
224# The value in either case, can't be greater than the absolute maximum
225# defined by this configuration option. Anything greater than this
226# value is trimmed down to the maximum value defined here.
227#
228# NOTE: Setting this to a very large value may slow down database
229# queries and increase response times. Setting this to a
230# very low value may result in poor user experience.
231#
232# Possible values:
233# * Any positive integer
234#
235# Related options:
236# * limit_param_default
237#
238# (integer value)
239# Minimum value: 1
240#api_limit_max = 1000
241
242#
243# Show direct image location when returning an image.
244#
245# This configuration option indicates whether to show the direct image
246# location when returning image details to the user. The direct image
247# location is where the image data is stored in backend storage. This
248# image location is shown under the image property ``direct_url``.
249#
250# When multiple image locations exist for an image, the best location
251# is displayed based on the location strategy indicated by the
252# configuration option ``location_strategy``.
253#
254# NOTES:
255# * Revealing image locations can present a GRAVE SECURITY RISK as
256# image locations can sometimes include credentials. Hence, this
257# is set to ``False`` by default. Set this to ``True`` with
258# EXTREME CAUTION and ONLY IF you know what you are doing!
259# * If an operator wishes to avoid showing any image location(s)
260# to the user, then both this option and
261# ``show_multiple_locations`` MUST be set to ``False``.
262#
263# Possible values:
264# * True
265# * False
266#
267# Related options:
268# * show_multiple_locations
269# * location_strategy
270#
271# (boolean value)
272#show_image_direct_url = false
273
274# DEPRECATED:
275# Show all image locations when returning an image.
276#
277# This configuration option indicates whether to show all the image
278# locations when returning image details to the user. When multiple
279# image locations exist for an image, the locations are ordered based
280# on the location strategy indicated by the configuration opt
281# ``location_strategy``. The image locations are shown under the
282# image property ``locations``.
283#
284# NOTES:
285# * Revealing image locations can present a GRAVE SECURITY RISK as
286# image locations can sometimes include credentials. Hence, this
287# is set to ``False`` by default. Set this to ``True`` with
288# EXTREME CAUTION and ONLY IF you know what you are doing!
289# * If an operator wishes to avoid showing any image location(s)
290# to the user, then both this option and
291# ``show_image_direct_url`` MUST be set to ``False``.
292#
293# Possible values:
294# * True
295# * False
296#
297# Related options:
298# * show_image_direct_url
299# * location_strategy
300#
301# (boolean value)
302# This option is deprecated for removal since Newton.
303# Its value may be silently ignored in the future.
304# Reason: This option will be removed in the Ocata release because the same
305# functionality can be achieved with greater granularity by using policies.
306# Please see the Newton release notes for more information.
307#show_multiple_locations = false
308
309#
310# Maximum size of image a user can upload in bytes.
311#
312# An image upload greater than the size mentioned here would result
313# in an image creation failure. This configuration option defaults to
314# 1099511627776 bytes (1 TiB).
315#
316# NOTES:
317# * This value should only be increased after careful
318# consideration and must be set less than or equal to
319# 8 EiB (9223372036854775808).
320# * This value must be set with careful consideration of the
321# backend storage capacity. Setting this to a very low value
322# may result in a large number of image failures. And, setting
323# this to a very large value may result in faster consumption
324# of storage. Hence, this must be set according to the nature of
325# images created and storage capacity available.
326#
327# Possible values:
328# * Any positive number less than or equal to 9223372036854775808
329#
330# (integer value)
331# Minimum value: 1
332# Maximum value: 9223372036854775808
333#image_size_cap = 1099511627776
334
335#
336# Maximum amount of image storage per tenant.
337#
338# This enforces an upper limit on the cumulative storage consumed by all images
339# of a tenant across all stores. This is a per-tenant limit.
340#
341# The default unit for this configuration option is Bytes. However, storage
342# units can be specified using case-sensitive literals ``B``, ``KB``, ``MB``,
343# ``GB`` and ``TB`` representing Bytes, KiloBytes, MegaBytes, GigaBytes and
344# TeraBytes respectively. Note that there should not be any space between the
345# value and unit. Value ``0`` signifies no quota enforcement. Negative values
346# are invalid and result in errors.
347#
348# Possible values:
349# * A string that is a valid concatenation of a non-negative integer
350# representing the storage value and an optional string literal
351# representing storage units as mentioned above.
352#
353# Related options:
354# * None
355#
356# (string value)
357#user_storage_quota = 0
358
359#
360# Deploy the v1 OpenStack Images API.
361#
362# When this option is set to ``True``, Glance service will respond to
363# requests on registered endpoints conforming to the v1 OpenStack
364# Images API.
365#
366# NOTES:
367# * If this option is enabled, then ``enable_v1_registry`` must
368# also be set to ``True`` to enable mandatory usage of Registry
369# service with v1 API.
370#
371# * If this option is disabled, then the ``enable_v1_registry``
372# option, which is enabled by default, is also recommended
373# to be disabled.
374#
375# * This option is separate from ``enable_v2_api``, both v1 and v2
376# OpenStack Images API can be deployed independent of each
377# other.
378#
379# * If deploying only the v2 Images API, this option, which is
380# enabled by default, should be disabled.
381#
382# Possible values:
383# * True
384# * False
385#
386# Related options:
387# * enable_v1_registry
388# * enable_v2_api
389#
390# (boolean value)
391#enable_v1_api = true
392
393#
394# Deploy the v2 OpenStack Images API.
395#
396# When this option is set to ``True``, Glance service will respond
397# to requests on registered endpoints conforming to the v2 OpenStack
398# Images API.
399#
400# NOTES:
401# * If this option is disabled, then the ``enable_v2_registry``
402# option, which is enabled by default, is also recommended
403# to be disabled.
404#
405# * This option is separate from ``enable_v1_api``, both v1 and v2
406# OpenStack Images API can be deployed independent of each
407# other.
408#
409# * If deploying only the v1 Images API, this option, which is
410# enabled by default, should be disabled.
411#
412# Possible values:
413# * True
414# * False
415#
416# Related options:
417# * enable_v2_registry
418# * enable_v1_api
419#
420# (boolean value)
421#enable_v2_api = true
422
423#
424# Deploy the v1 API Registry service.
425#
426# When this option is set to ``True``, the Registry service
427# will be enabled in Glance for v1 API requests.
428#
429# NOTES:
430# * Use of Registry is mandatory in v1 API, so this option must
431# be set to ``True`` if the ``enable_v1_api`` option is enabled.
432#
433# * If deploying only the v2 OpenStack Images API, this option,
434# which is enabled by default, should be disabled.
435#
436# Possible values:
437# * True
438# * False
439#
440# Related options:
441# * enable_v1_api
442#
443# (boolean value)
444#enable_v1_registry = true
445
446#
447# Deploy the v2 API Registry service.
448#
449# When this option is set to ``True``, the Registry service
450# will be enabled in Glance for v2 API requests.
451#
452# NOTES:
453# * Use of Registry is optional in v2 API, so this option
454# must only be enabled if both ``enable_v2_api`` is set to
455# ``True`` and the ``data_api`` option is set to
456# ``glance.db.registry.api``.
457#
458# * If deploying only the v1 OpenStack Images API, this option,
459# which is enabled by default, should be disabled.
460#
461# Possible values:
462# * True
463# * False
464#
465# Related options:
466# * enable_v2_api
467# * data_api
468#
469# (boolean value)
470#enable_v2_registry = true
471
472#
473# Host address of the pydev server.
474#
475# Provide a string value representing the hostname or IP of the
476# pydev server to use for debugging. The pydev server listens for
477# debug connections on this address, facilitating remote debugging
478# in Glance.
479#
480# Possible values:
481# * Valid hostname
482# * Valid IP address
483#
484# Related options:
485# * None
486#
487# (string value)
488#pydev_worker_debug_host = localhost
489
490#
491# Port number that the pydev server will listen on.
492#
493# Provide a port number to bind the pydev server to. The pydev
494# process accepts debug connections on this port and facilitates
495# remote debugging in Glance.
496#
497# Possible values:
498# * A valid port number
499#
500# Related options:
501# * None
502#
503# (port value)
504# Minimum value: 0
505# Maximum value: 65535
506#pydev_worker_debug_port = 5678
507
508#
509# AES key for encrypting store location metadata.
510#
511# Provide a string value representing the AES cipher to use for
512# encrypting Glance store metadata.
513#
514# NOTE: The AES key to use must be set to a random string of length
515# 16, 24 or 32 bytes.
516#
517# Possible values:
518# * String value representing a valid AES key
519#
520# Related options:
521# * None
522#
523# (string value)
524#metadata_encryption_key = <None>
525
526#
527# Digest algorithm to use for digital signature.
528#
529# Provide a string value representing the digest algorithm to
530# use for generating digital signatures. By default, ``sha256``
531# is used.
532#
533# To get a list of the available algorithms supported by the version
534# of OpenSSL on your platform, run the command:
535# ``openssl list-message-digest-algorithms``.
536# Examples are 'sha1', 'sha256', and 'sha512'.
537#
538# NOTE: ``digest_algorithm`` is not related to Glance's image signing
539# and verification. It is only used to sign the universally unique
540# identifier (UUID) as a part of the certificate file and key file
541# validation.
542#
543# Possible values:
544# * An OpenSSL message digest algorithm identifier
545#
546# Relation options:
547# * None
548#
549# (string value)
550#digest_algorithm = sha256
551
552#
553# IP address to bind the glance servers to.
554#
555# Provide an IP address to bind the glance server to. The default
556# value is ``0.0.0.0``.
557#
558# Edit this option to enable the server to listen on one particular
559# IP address on the network card. This facilitates selection of a
560# particular network interface for the server.
561#
562# Possible values:
563# * A valid IPv4 address
564# * A valid IPv6 address
565#
566# Related options:
567# * None
568#
569# (string value)
570#bind_host = 0.0.0.0
571
572#
573# Port number on which the server will listen.
574#
575# Provide a valid port number to bind the server's socket to. This
576# port is then set to identify processes and forward network messages
577# that arrive at the server. The default bind_port value for the API
578# server is 9292 and for the registry server is 9191.
579#
580# Possible values:
581# * A valid port number (0 to 65535)
582#
583# Related options:
584# * None
585#
586# (port value)
587# Minimum value: 0
588# Maximum value: 65535
589#bind_port = <None>
590
591#
592# Set the number of incoming connection requests.
593#
594# Provide a positive integer value to limit the number of requests in
595# the backlog queue. The default queue size is 4096.
596#
597# An incoming connection to a TCP listener socket is queued before a
598# connection can be established with the server. Setting the backlog
599# for a TCP socket ensures a limited queue size for incoming traffic.
600#
601# Possible values:
602# * Positive integer
603#
604# Related options:
605# * None
606#
607# (integer value)
608# Minimum value: 1
609#backlog = 4096
610
611#
612# Set the wait time before a connection recheck.
613#
614# Provide a positive integer value representing time in seconds which
615# is set as the idle wait time before a TCP keep alive packet can be
616# sent to the host. The default value is 600 seconds.
617#
618# Setting ``tcp_keepidle`` helps verify at regular intervals that a
619# connection is intact and prevents frequent TCP connection
620# reestablishment.
621#
622# Possible values:
623# * Positive integer value representing time in seconds
624#
625# Related options:
626# * None
627#
628# (integer value)
629# Minimum value: 1
630#tcp_keepidle = 600
631
632#
633# Absolute path to the CA file.
634#
635# Provide a string value representing a valid absolute path to
636# the Certificate Authority file to use for client authentication.
637#
638# A CA file typically contains necessary trusted certificates to
639# use for the client authentication. This is essential to ensure
640# that a secure connection is established to the server via the
641# internet.
642#
643# Possible values:
644# * Valid absolute path to the CA file
645#
646# Related options:
647# * None
648#
649# (string value)
650#ca_file = /etc/ssl/cafile
651
652#
653# Absolute path to the certificate file.
654#
655# Provide a string value representing a valid absolute path to the
656# certificate file which is required to start the API service
657# securely.
658#
659# A certificate file typically is a public key container and includes
660# the server's public key, server name, server information and the
661# signature which was a result of the verification process using the
662# CA certificate. This is required for a secure connection
663# establishment.
664#
665# Possible values:
666# * Valid absolute path to the certificate file
667#
668# Related options:
669# * None
670#
671# (string value)
672#cert_file = /etc/ssl/certs
673
674#
675# Absolute path to a private key file.
676#
677# Provide a string value representing a valid absolute path to a
678# private key file which is required to establish the client-server
679# connection.
680#
681# Possible values:
682# * Absolute path to the private key file
683#
684# Related options:
685# * None
686#
687# (string value)
688#key_file = /etc/ssl/key/key-file.pem
689
690# DEPRECATED: The HTTP header used to determine the scheme for the original
691# request, even if it was removed by an SSL terminating proxy. Typical value is
692# "HTTP_X_FORWARDED_PROTO". (string value)
693# This option is deprecated for removal.
694# Its value may be silently ignored in the future.
695# Reason: Use the http_proxy_to_wsgi middleware instead.
696#secure_proxy_ssl_header = <None>
697
698#
699# Number of Glance worker processes to start.
700#
701# Provide a non-negative integer value to set the number of child
702# process workers to service requests. By default, the number of CPUs
703# available is set as the value for ``workers``.
704#
705# Each worker process is made to listen on the port set in the
706# configuration file and contains a greenthread pool of size 1000.
707#
708# NOTE: Setting the number of workers to zero, triggers the creation
709# of a single API process with a greenthread pool of size 1000.
710#
711# Possible values:
712# * 0
713# * Positive integer value (typically equal to the number of CPUs)
714#
715# Related options:
716# * None
717#
718# (integer value)
719# Minimum value: 0
720#workers = <None>
721
722#
723# Maximum line size of message headers.
724#
725# Provide an integer value representing a length to limit the size of
726# message headers. The default value is 16384.
727#
728# NOTE: ``max_header_line`` may need to be increased when using large
729# tokens (typically those generated by the Keystone v3 API with big
730# service catalogs). However, it is to be kept in mind that larger
731# values for ``max_header_line`` would flood the logs.
732#
733# Setting ``max_header_line`` to 0 sets no limit for the line size of
734# message headers.
735#
736# Possible values:
737# * 0
738# * Positive integer
739#
740# Related options:
741# * None
742#
743# (integer value)
744# Minimum value: 0
745#max_header_line = 16384
746
747#
748# Set keep alive option for HTTP over TCP.
749#
750# Provide a boolean value to determine sending of keep alive packets.
751# If set to ``False``, the server returns the header
752# "Connection: close". If set to ``True``, the server returns a
753# "Connection: Keep-Alive" in its responses. This enables retention of
754# the same TCP connection for HTTP conversations instead of opening a
755# new one with each new request.
756#
757# This option must be set to ``False`` if the client socket connection
758# needs to be closed explicitly after the response is received and
759# read successfully by the client.
760#
761# Possible values:
762# * True
763# * False
764#
765# Related options:
766# * None
767#
768# (boolean value)
769#http_keepalive = true
770
771#
772# Timeout for client connections' socket operations.
773#
774# Provide a valid integer value representing time in seconds to set
775# the period of wait before an incoming connection can be closed. The
776# default value is 900 seconds.
777#
778# The value zero implies wait forever.
779#
780# Possible values:
781# * Zero
782# * Positive integer
783#
784# Related options:
785# * None
786#
787# (integer value)
788# Minimum value: 0
789#client_socket_timeout = 900
790
791#
792# From oslo.log
793#
794
795# If set to true, the logging level will be set to DEBUG instead of the default
796# INFO level. (boolean value)
797# Note: This option can be changed without restarting.
798#debug = false
799
800# DEPRECATED: If set to false, the logging level will be set to WARNING instead
801# of the default INFO level. (boolean value)
802# This option is deprecated for removal.
803# Its value may be silently ignored in the future.
804#verbose = true
805
806# The name of a logging configuration file. This file is appended to any
807# existing logging configuration files. For details about logging configuration
808# files, see the Python logging module documentation. Note that when logging
809# configuration files are used then all logging configuration is set in the
810# configuration file and other logging configuration options are ignored (for
811# example, logging_context_format_string). (string value)
812# Note: This option can be changed without restarting.
813# Deprecated group/name - [DEFAULT]/log_config
814#log_config_append = <None>
815
816# Defines the format string for %%(asctime)s in log records. Default:
817# %(default)s . This option is ignored if log_config_append is set. (string
818# value)
819#log_date_format = %Y-%m-%d %H:%M:%S
820
821# (Optional) Name of log file to send logging output to. If no default is set,
822# logging will go to stderr as defined by use_stderr. This option is ignored if
823# log_config_append is set. (string value)
824# Deprecated group/name - [DEFAULT]/logfile
825#log_file = <None>
826
827# (Optional) The base directory used for relative log_file paths. This option
828# is ignored if log_config_append is set. (string value)
829# Deprecated group/name - [DEFAULT]/logdir
830#log_dir = <None>
831
832# Uses logging handler designed to watch file system. When log file is moved or
833# removed this handler will open a new log file with specified path
834# instantaneously. It makes sense only if log_file option is specified and Linux
835# platform is used. This option is ignored if log_config_append is set. (boolean
836# value)
837#watch_log_file = false
838
839# Use syslog for logging. Existing syslog format is DEPRECATED and will be
840# changed later to honor RFC5424. This option is ignored if log_config_append is
841# set. (boolean value)
842#use_syslog = false
843
844# Syslog facility to receive log lines. This option is ignored if
845# log_config_append is set. (string value)
846#syslog_log_facility = LOG_USER
847
848# Log output to standard error. This option is ignored if log_config_append is
849# set. (boolean value)
850#use_stderr = true
851
852# Format string to use for log messages with context. (string value)
853#logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
854
855# Format string to use for log messages when context is undefined. (string
856# value)
857#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
858
859# Additional data to append to log message when logging level for the message is
860# DEBUG. (string value)
861#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
862
863# Prefix each line of exception output with this format. (string value)
864#logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
865
866# Defines the format string for %(user_identity)s that is used in
867# logging_context_format_string. (string value)
868#logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
869
870# List of package logging levels in logger=LEVEL pairs. This option is ignored
871# if log_config_append is set. (list value)
872#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
873
874# Enables or disables publication of error events. (boolean value)
875#publish_errors = false
876
877# The format for an instance that is passed with the log message. (string value)
878#instance_format = "[instance: %(uuid)s] "
879
880# The format for an instance UUID that is passed with the log message. (string
881# value)
882#instance_uuid_format = "[instance: %(uuid)s] "
883
884# Enables or disables fatal status of deprecations. (boolean value)
885#fatal_deprecations = false
886
887#
888# From oslo.messaging
889#
890
891# Size of RPC connection pool. (integer value)
892# Deprecated group/name - [DEFAULT]/rpc_conn_pool_size
893#rpc_conn_pool_size = 30
894
895# The pool size limit for connections expiration policy (integer value)
896#conn_pool_min_size = 2
897
898# The time-to-live in sec of idle connections in the pool (integer value)
899#conn_pool_ttl = 1200
900
901# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
902# The "host" option should point or resolve to this address. (string value)
903# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_address
904#rpc_zmq_bind_address = *
905
906# MatchMaker driver. (string value)
907# Allowed values: redis, dummy
908# Deprecated group/name - [DEFAULT]/rpc_zmq_matchmaker
909#rpc_zmq_matchmaker = redis
910
911# Number of ZeroMQ contexts, defaults to 1. (integer value)
912# Deprecated group/name - [DEFAULT]/rpc_zmq_contexts
913#rpc_zmq_contexts = 1
914
915# Maximum number of ingress messages to locally buffer per topic. Default is
916# unlimited. (integer value)
917# Deprecated group/name - [DEFAULT]/rpc_zmq_topic_backlog
918#rpc_zmq_topic_backlog = <None>
919
920# Directory for holding IPC sockets. (string value)
921# Deprecated group/name - [DEFAULT]/rpc_zmq_ipc_dir
922#rpc_zmq_ipc_dir = /var/run/openstack
923
924# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
925# "host" option, if running Nova. (string value)
926# Deprecated group/name - [DEFAULT]/rpc_zmq_host
927#rpc_zmq_host = localhost
928
929# Seconds to wait before a cast expires (TTL). The default value of -1 specifies
930# an infinite linger period. The value of 0 specifies no linger period. Pending
931# messages shall be discarded immediately when the socket is closed. Only
932# supported by impl_zmq. (integer value)
933# Deprecated group/name - [DEFAULT]/rpc_cast_timeout
934#rpc_cast_timeout = -1
935
936# The default number of seconds that poll should wait. Poll raises timeout
937# exception when timeout expired. (integer value)
938# Deprecated group/name - [DEFAULT]/rpc_poll_timeout
939#rpc_poll_timeout = 1
940
941# Expiration timeout in seconds of a name service record about existing target (
942# < 0 means no timeout). (integer value)
943# Deprecated group/name - [DEFAULT]/zmq_target_expire
944#zmq_target_expire = 300
945
946# Update period in seconds of a name service record about existing target.
947# (integer value)
948# Deprecated group/name - [DEFAULT]/zmq_target_update
949#zmq_target_update = 180
950
951# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
952# value)
953# Deprecated group/name - [DEFAULT]/use_pub_sub
954#use_pub_sub = true
955
956# Use ROUTER remote proxy. (boolean value)
957# Deprecated group/name - [DEFAULT]/use_router_proxy
958#use_router_proxy = true
959
960# Minimal port number for random ports range. (port value)
961# Minimum value: 0
962# Maximum value: 65535
963# Deprecated group/name - [DEFAULT]/rpc_zmq_min_port
964#rpc_zmq_min_port = 49153
965
966# Maximal port number for random ports range. (integer value)
967# Minimum value: 1
968# Maximum value: 65536
969# Deprecated group/name - [DEFAULT]/rpc_zmq_max_port
970#rpc_zmq_max_port = 65536
971
972# Number of retries to find free port number before fail with ZMQBindError.
973# (integer value)
974# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_port_retries
975#rpc_zmq_bind_port_retries = 100
976
977# Default serialization mechanism for serializing/deserializing
978# outgoing/incoming messages (string value)
979# Allowed values: json, msgpack
980# Deprecated group/name - [DEFAULT]/rpc_zmq_serialization
981#rpc_zmq_serialization = json
982
983# This option configures round-robin mode in zmq socket. True means not keeping
984# a queue when server side disconnects. False means to keep queue and messages
985# even if server is disconnected, when the server appears we send all
986# accumulated messages to it. (boolean value)
987#zmq_immediate = false
988
989# Size of executor thread pool. (integer value)
990# Deprecated group/name - [DEFAULT]/rpc_thread_pool_size
991#executor_thread_pool_size = 64
992
993# Seconds to wait for a response from a call. (integer value)
994#rpc_response_timeout = 60
995
996# A URL representing the messaging driver to use and its full configuration.
997# (string value)
998#transport_url = <None>
999
1000# DEPRECATED: The messaging driver to use, defaults to rabbit. Other drivers
1001# include amqp and zmq. (string value)
1002# This option is deprecated for removal.
1003# Its value may be silently ignored in the future.
1004# Reason: Replaced by [DEFAULT]/transport_url
1005#rpc_backend = rabbit
1006
1007# The default exchange under which topics are scoped. May be overridden by an
1008# exchange name specified in the transport_url option. (string value)
1009#control_exchange = openstack
1010
1011
1012[database]
1013
1014#
1015# From oslo.db
1016#
1017
1018# DEPRECATED: The file name to use with SQLite. (string value)
1019# Deprecated group/name - [DEFAULT]/sqlite_db
1020# This option is deprecated for removal.
1021# Its value may be silently ignored in the future.
1022# Reason: Should use config option connection or slave_connection to connect the
1023# database.
1024#sqlite_db = oslo.sqlite
1025
1026# If True, SQLite uses synchronous mode. (boolean value)
1027# Deprecated group/name - [DEFAULT]/sqlite_synchronous
1028#sqlite_synchronous = true
1029
1030# The back end to use for the database. (string value)
1031# Deprecated group/name - [DEFAULT]/db_backend
1032#backend = sqlalchemy
1033
1034# The SQLAlchemy connection string to use to connect to the database. (string
1035# value)
1036# Deprecated group/name - [DEFAULT]/sql_connection
1037# Deprecated group/name - [DATABASE]/sql_connection
1038# Deprecated group/name - [sql]/connection
1039#connection = <None>
1040
1041# The SQLAlchemy connection string to use to connect to the slave database.
1042# (string value)
1043#slave_connection = <None>
1044
1045# The SQL mode to be used for MySQL sessions. This option, including the
1046# default, overrides any server-set SQL mode. To use whatever SQL mode is set by
1047# the server configuration, set this to no value. Example: mysql_sql_mode=
1048# (string value)
1049#mysql_sql_mode = TRADITIONAL
1050
1051# Timeout before idle SQL connections are reaped. (integer value)
1052# Deprecated group/name - [DEFAULT]/sql_idle_timeout
1053# Deprecated group/name - [DATABASE]/sql_idle_timeout
1054# Deprecated group/name - [sql]/idle_timeout
1055#idle_timeout = 3600
1056
1057# Minimum number of SQL connections to keep open in a pool. (integer value)
1058# Deprecated group/name - [DEFAULT]/sql_min_pool_size
1059# Deprecated group/name - [DATABASE]/sql_min_pool_size
1060#min_pool_size = 1
1061
1062# Maximum number of SQL connections to keep open in a pool. Setting a value of 0
1063# indicates no limit. (integer value)
1064# Deprecated group/name - [DEFAULT]/sql_max_pool_size
1065# Deprecated group/name - [DATABASE]/sql_max_pool_size
1066#max_pool_size = 5
1067
1068# Maximum number of database connection retries during startup. Set to -1 to
1069# specify an infinite retry count. (integer value)
1070# Deprecated group/name - [DEFAULT]/sql_max_retries
1071# Deprecated group/name - [DATABASE]/sql_max_retries
1072#max_retries = 10
1073
1074# Interval between retries of opening a SQL connection. (integer value)
1075# Deprecated group/name - [DEFAULT]/sql_retry_interval
1076# Deprecated group/name - [DATABASE]/reconnect_interval
1077#retry_interval = 10
1078
1079# If set, use this value for max_overflow with SQLAlchemy. (integer value)
1080# Deprecated group/name - [DEFAULT]/sql_max_overflow
1081# Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
1082#max_overflow = 50
1083
1084# Verbosity of SQL debugging information: 0=None, 100=Everything. (integer
1085# value)
1086# Minimum value: 0
1087# Maximum value: 100
1088# Deprecated group/name - [DEFAULT]/sql_connection_debug
1089#connection_debug = 0
1090
1091# Add Python stack traces to SQL as comment strings. (boolean value)
1092# Deprecated group/name - [DEFAULT]/sql_connection_trace
1093#connection_trace = false
1094
1095# If set, use this value for pool_timeout with SQLAlchemy. (integer value)
1096# Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
1097#pool_timeout = <None>
1098
1099# Enable the experimental use of database reconnect on connection lost. (boolean
1100# value)
1101#use_db_reconnect = false
1102
1103# Seconds between retries of a database transaction. (integer value)
1104#db_retry_interval = 1
1105
1106# If True, increases the interval between retries of a database operation up to
1107# db_max_retry_interval. (boolean value)
1108#db_inc_retry_interval = true
1109
1110# If db_inc_retry_interval is set, the maximum seconds between retries of a
1111# database operation. (integer value)
1112#db_max_retry_interval = 10
1113
1114# Maximum retries in case of connection error or deadlock error before error is
1115# raised. Set to -1 to specify an infinite retry count. (integer value)
1116#db_max_retries = 20
1117
1118#
1119# From oslo.db.concurrency
1120#
1121
1122# Enable the experimental use of thread pooling for all DB API calls (boolean
1123# value)
1124# Deprecated group/name - [DEFAULT]/dbapi_use_tpool
1125#use_tpool = false
1126
1127connection = mysql+pymysql://glance:xa1234@controller/glance
1128
1129[keystone_authtoken]
1130
1131auth_uri = http://controller:5000
1132auth_url = http://controller:35357
1133memcached_servers = controller:11211
1134auth_type = password
1135project_domain_name = default
1136user_domain_name = default
1137project_name = service
1138username = glance
1139password = xa1234
1140
1141[matchmaker_redis]
1142
1143#
1144# From oslo.messaging
1145#
1146
1147# DEPRECATED: Host to locate redis. (string value)
1148# This option is deprecated for removal.
1149# Its value may be silently ignored in the future.
1150# Reason: Replaced by [DEFAULT]/transport_url
1151#host = 127.0.0.1
1152
1153# DEPRECATED: Use this port to connect to redis host. (port value)
1154# Minimum value: 0
1155# Maximum value: 65535
1156# This option is deprecated for removal.
1157# Its value may be silently ignored in the future.
1158# Reason: Replaced by [DEFAULT]/transport_url
1159#port = 6379
1160
1161# DEPRECATED: Password for Redis server (optional). (string value)
1162# This option is deprecated for removal.
1163# Its value may be silently ignored in the future.
1164# Reason: Replaced by [DEFAULT]/transport_url
1165#password =
1166
1167# DEPRECATED: List of Redis Sentinel hosts (fault tolerance mode) e.g.
1168# [host:port, host1:port ... ] (list value)
1169# This option is deprecated for removal.
1170# Its value may be silently ignored in the future.
1171# Reason: Replaced by [DEFAULT]/transport_url
1172#sentinel_hosts =
1173
1174# Redis replica set name. (string value)
1175#sentinel_group_name = oslo-messaging-zeromq
1176
1177# Time in ms to wait between connection attempts. (integer value)
1178#wait_timeout = 2000
1179
1180# Time in ms to wait before the transaction is killed. (integer value)
1181#check_timeout = 20000
1182
1183# Timeout in ms on blocking socket operations (integer value)
1184#socket_timeout = 10000
1185
1186
1187[oslo_messaging_amqp]
1188
1189#
1190# From oslo.messaging
1191#
1192
1193# Name for the AMQP container. must be globally unique. Defaults to a generated
1194# UUID (string value)
1195# Deprecated group/name - [amqp1]/container_name
1196#container_name = <None>
1197
1198# Timeout for inactive connections (in seconds) (integer value)
1199# Deprecated group/name - [amqp1]/idle_timeout
1200#idle_timeout = 0
1201
1202# Debug: dump AMQP frames to stdout (boolean value)
1203# Deprecated group/name - [amqp1]/trace
1204#trace = false
1205
1206# CA certificate PEM file to verify server certificate (string value)
1207# Deprecated group/name - [amqp1]/ssl_ca_file
1208#ssl_ca_file =
1209
1210# Identifying certificate PEM file to present to clients (string value)
1211# Deprecated group/name - [amqp1]/ssl_cert_file
1212#ssl_cert_file =
1213
1214# Private key PEM file used to sign cert_file certificate (string value)
1215# Deprecated group/name - [amqp1]/ssl_key_file
1216#ssl_key_file =
1217
1218# Password for decrypting ssl_key_file (if encrypted) (string value)
1219# Deprecated group/name - [amqp1]/ssl_key_password
1220#ssl_key_password = <None>
1221
1222# Accept clients using either SSL or plain TCP (boolean value)
1223# Deprecated group/name - [amqp1]/allow_insecure_clients
1224#allow_insecure_clients = false
1225
1226# Space separated list of acceptable SASL mechanisms (string value)
1227# Deprecated group/name - [amqp1]/sasl_mechanisms
1228#sasl_mechanisms =
1229
1230# Path to directory that contains the SASL configuration (string value)
1231# Deprecated group/name - [amqp1]/sasl_config_dir
1232#sasl_config_dir =
1233
1234# Name of configuration file (without .conf suffix) (string value)
1235# Deprecated group/name - [amqp1]/sasl_config_name
1236#sasl_config_name =
1237
1238# User name for message broker authentication (string value)
1239# Deprecated group/name - [amqp1]/username
1240#username =
1241
1242# Password for message broker authentication (string value)
1243# Deprecated group/name - [amqp1]/password
1244#password =
1245
1246# Seconds to pause before attempting to re-connect. (integer value)
1247# Minimum value: 1
1248#connection_retry_interval = 1
1249
1250# Increase the connection_retry_interval by this many seconds after each
1251# unsuccessful failover attempt. (integer value)
1252# Minimum value: 0
1253#connection_retry_backoff = 2
1254
1255# Maximum limit for connection_retry_interval + connection_retry_backoff
1256# (integer value)
1257# Minimum value: 1
1258#connection_retry_interval_max = 30
1259
1260# Time to pause between re-connecting an AMQP 1.0 link that failed due to a
1261# recoverable error. (integer value)
1262# Minimum value: 1
1263#link_retry_delay = 10
1264
1265# The deadline for an rpc reply message delivery. Only used when caller does not
1266# provide a timeout expiry. (integer value)
1267# Minimum value: 5
1268#default_reply_timeout = 30
1269
1270# The deadline for an rpc cast or call message delivery. Only used when caller
1271# does not provide a timeout expiry. (integer value)
1272# Minimum value: 5
1273#default_send_timeout = 30
1274
1275# The deadline for a sent notification message delivery. Only used when caller
1276# does not provide a timeout expiry. (integer value)
1277# Minimum value: 5
1278#default_notify_timeout = 30
1279
1280# Indicates the addressing mode used by the driver.
1281# Permitted values:
1282# 'legacy' - use legacy non-routable addressing
1283# 'routable' - use routable addresses
1284# 'dynamic' - use legacy addresses if the message bus does not support routing
1285# otherwise use routable addressing (string value)
1286#addressing_mode = dynamic
1287
1288# address prefix used when sending to a specific server (string value)
1289# Deprecated group/name - [amqp1]/server_request_prefix
1290#server_request_prefix = exclusive
1291
1292# address prefix used when broadcasting to all servers (string value)
1293# Deprecated group/name - [amqp1]/broadcast_prefix
1294#broadcast_prefix = broadcast
1295
1296# address prefix when sending to any server in group (string value)
1297# Deprecated group/name - [amqp1]/group_request_prefix
1298#group_request_prefix = unicast
1299
1300# Address prefix for all generated RPC addresses (string value)
1301#rpc_address_prefix = openstack.org/om/rpc
1302
1303# Address prefix for all generated Notification addresses (string value)
1304#notify_address_prefix = openstack.org/om/notify
1305
1306# Appended to the address prefix when sending a fanout message. Used by the
1307# message bus to identify fanout messages. (string value)
1308#multicast_address = multicast
1309
1310# Appended to the address prefix when sending to a particular RPC/Notification
1311# server. Used by the message bus to identify messages sent to a single
1312# destination. (string value)
1313#unicast_address = unicast
1314
1315# Appended to the address prefix when sending to a group of consumers. Used by
1316# the message bus to identify messages that should be delivered in a round-robin
1317# fashion across consumers. (string value)
1318#anycast_address = anycast
1319
1320# Exchange name used in notification addresses.
1321# Exchange name resolution precedence:
1322# Target.exchange if set
1323# else default_notification_exchange if set
1324# else control_exchange if set
1325# else 'notify' (string value)
1326#default_notification_exchange = <None>
1327
1328# Exchange name used in RPC addresses.
1329# Exchange name resolution precedence:
1330# Target.exchange if set
1331# else default_rpc_exchange if set
1332# else control_exchange if set
1333# else 'rpc' (string value)
1334#default_rpc_exchange = <None>
1335
1336# Window size for incoming RPC Reply messages. (integer value)
1337# Minimum value: 1
1338#reply_link_credit = 200
1339
1340# Window size for incoming RPC Request messages (integer value)
1341# Minimum value: 1
1342#rpc_server_credit = 100
1343
1344# Window size for incoming Notification messages (integer value)
1345# Minimum value: 1
1346#notify_server_credit = 100
1347
1348
1349[oslo_messaging_notifications]
1350
1351#
1352# From oslo.messaging
1353#
1354
1355# The Drivers(s) to handle sending notifications. Possible values are messaging,
1356# messagingv2, routing, log, test, noop (multi valued)
1357# Deprecated group/name - [DEFAULT]/notification_driver
1358#driver =
1359
1360# A URL representing the messaging driver to use for notifications. If not set,
1361# we fall back to the same configuration used for RPC. (string value)
1362# Deprecated group/name - [DEFAULT]/notification_transport_url
1363#transport_url = <None>
1364
1365# AMQP topic used for OpenStack notifications. (list value)
1366# Deprecated group/name - [rpc_notifier2]/topics
1367# Deprecated group/name - [DEFAULT]/notification_topics
1368#topics = notifications
1369
1370
1371[oslo_messaging_rabbit]
1372
1373#
1374# From oslo.messaging
1375#
1376
1377# Use durable queues in AMQP. (boolean value)
1378# Deprecated group/name - [DEFAULT]/amqp_durable_queues
1379# Deprecated group/name - [DEFAULT]/rabbit_durable_queues
1380#amqp_durable_queues = false
1381
1382# Auto-delete queues in AMQP. (boolean value)
1383# Deprecated group/name - [DEFAULT]/amqp_auto_delete
1384#amqp_auto_delete = false
1385
1386# SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and
1387# SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some
1388# distributions. (string value)
1389# Deprecated group/name - [DEFAULT]/kombu_ssl_version
1390#kombu_ssl_version =
1391
1392# SSL key file (valid only if SSL enabled). (string value)
1393# Deprecated group/name - [DEFAULT]/kombu_ssl_keyfile
1394#kombu_ssl_keyfile =
1395
1396# SSL cert file (valid only if SSL enabled). (string value)
1397# Deprecated group/name - [DEFAULT]/kombu_ssl_certfile
1398#kombu_ssl_certfile =
1399
1400# SSL certification authority file (valid only if SSL enabled). (string value)
1401# Deprecated group/name - [DEFAULT]/kombu_ssl_ca_certs
1402#kombu_ssl_ca_certs =
1403
1404# How long to wait before reconnecting in response to an AMQP consumer cancel
1405# notification. (floating point value)
1406# Deprecated group/name - [DEFAULT]/kombu_reconnect_delay
1407#kombu_reconnect_delay = 1.0
1408
1409# EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression will not
1410# be used. This option may not be available in future versions. (string value)
1411#kombu_compression = <None>
1412
1413# How long to wait a missing client before abandoning to send it its replies.
1414# This value should not be longer than rpc_response_timeout. (integer value)
1415# Deprecated group/name - [oslo_messaging_rabbit]/kombu_reconnect_timeout
1416#kombu_missing_consumer_retry_timeout = 60
1417
1418# Determines how the next RabbitMQ node is chosen in case the one we are
1419# currently connected to becomes unavailable. Takes effect only if more than one
1420# RabbitMQ node is provided in config. (string value)
1421# Allowed values: round-robin, shuffle
1422#kombu_failover_strategy = round-robin
1423
1424# DEPRECATED: The RabbitMQ broker address where a single node is used. (string
1425# value)
1426# Deprecated group/name - [DEFAULT]/rabbit_host
1427# This option is deprecated for removal.
1428# Its value may be silently ignored in the future.
1429# Reason: Replaced by [DEFAULT]/transport_url
1430#rabbit_host = localhost
1431
1432# DEPRECATED: The RabbitMQ broker port where a single node is used. (port value)
1433# Minimum value: 0
1434# Maximum value: 65535
1435# Deprecated group/name - [DEFAULT]/rabbit_port
1436# This option is deprecated for removal.
1437# Its value may be silently ignored in the future.
1438# Reason: Replaced by [DEFAULT]/transport_url
1439#rabbit_port = 5672
1440
1441# DEPRECATED: RabbitMQ HA cluster host:port pairs. (list value)
1442# Deprecated group/name - [DEFAULT]/rabbit_hosts
1443# This option is deprecated for removal.
1444# Its value may be silently ignored in the future.
1445# Reason: Replaced by [DEFAULT]/transport_url
1446#rabbit_hosts = $rabbit_host:$rabbit_port
1447
1448# Connect over SSL for RabbitMQ. (boolean value)
1449# Deprecated group/name - [DEFAULT]/rabbit_use_ssl
1450#rabbit_use_ssl = false
1451
1452# DEPRECATED: The RabbitMQ userid. (string value)
1453# Deprecated group/name - [DEFAULT]/rabbit_userid
1454# This option is deprecated for removal.
1455# Its value may be silently ignored in the future.
1456# Reason: Replaced by [DEFAULT]/transport_url
1457#rabbit_userid = guest
1458
1459# DEPRECATED: The RabbitMQ password. (string value)
1460# Deprecated group/name - [DEFAULT]/rabbit_password
1461# This option is deprecated for removal.
1462# Its value may be silently ignored in the future.
1463# Reason: Replaced by [DEFAULT]/transport_url
1464#rabbit_password = guest
1465
1466# The RabbitMQ login method. (string value)
1467# Deprecated group/name - [DEFAULT]/rabbit_login_method
1468#rabbit_login_method = AMQPLAIN
1469
1470# DEPRECATED: The RabbitMQ virtual host. (string value)
1471# Deprecated group/name - [DEFAULT]/rabbit_virtual_host
1472# This option is deprecated for removal.
1473# Its value may be silently ignored in the future.
1474# Reason: Replaced by [DEFAULT]/transport_url
1475#rabbit_virtual_host = /
1476
1477# How frequently to retry connecting with RabbitMQ. (integer value)
1478#rabbit_retry_interval = 1
1479
1480# How long to backoff for between retries when connecting to RabbitMQ. (integer
1481# value)
1482# Deprecated group/name - [DEFAULT]/rabbit_retry_backoff
1483#rabbit_retry_backoff = 2
1484
1485# Maximum interval of RabbitMQ connection retries. Default is 30 seconds.
1486# (integer value)
1487#rabbit_interval_max = 30
1488
1489# DEPRECATED: Maximum number of RabbitMQ connection retries. Default is 0
1490# (infinite retry count). (integer value)
1491# Deprecated group/name - [DEFAULT]/rabbit_max_retries
1492# This option is deprecated for removal.
1493# Its value may be silently ignored in the future.
1494#rabbit_max_retries = 0
1495
1496# Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change this
1497# option, you must wipe the RabbitMQ database. In RabbitMQ 3.0, queue mirroring
1498# is no longer controlled by the x-ha-policy argument when declaring a queue. If
1499# you just want to make sure that all queues (except those with auto-generated
1500# names) are mirrored across all nodes, run: "rabbitmqctl set_policy HA
1501# '^(?!amq\.).*' '{"ha-mode": "all"}' " (boolean value)
1502# Deprecated group/name - [DEFAULT]/rabbit_ha_queues
1503#rabbit_ha_queues = false
1504
1505# Positive integer representing duration in seconds for queue TTL (x-expires).
1506# Queues which are unused for the duration of the TTL are automatically deleted.
1507# The parameter affects only reply and fanout queues. (integer value)
1508# Minimum value: 1
1509#rabbit_transient_queues_ttl = 1800
1510
1511# Specifies the number of messages to prefetch. Setting to zero allows unlimited
1512# messages. (integer value)
1513#rabbit_qos_prefetch_count = 0
1514
1515# Number of seconds after which the Rabbit broker is considered down if
1516# heartbeat's keep-alive fails (0 disable the heartbeat). EXPERIMENTAL (integer
1517# value)
1518#heartbeat_timeout_threshold = 60
1519
1520# How often times during the heartbeat_timeout_threshold we check the heartbeat.
1521# (integer value)
1522#heartbeat_rate = 2
1523
1524# Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake (boolean value)
1525# Deprecated group/name - [DEFAULT]/fake_rabbit
1526#fake_rabbit = false
1527
1528# Maximum number of channels to allow (integer value)
1529#channel_max = <None>
1530
1531# The maximum byte size for an AMQP frame (integer value)
1532#frame_max = <None>
1533
1534# How often to send heartbeats for consumer's connections (integer value)
1535#heartbeat_interval = 3
1536
1537# Enable SSL (boolean value)
1538#ssl = <None>
1539
1540# Arguments passed to ssl.wrap_socket (dict value)
1541#ssl_options = <None>
1542
1543# Set socket timeout in seconds for connection's socket (floating point value)
1544#socket_timeout = 0.25
1545
1546# Set TCP_USER_TIMEOUT in seconds for connection's socket (floating point value)
1547#tcp_user_timeout = 0.25
1548
1549# Set delay for reconnection to some host which has connection error (floating
1550# point value)
1551#host_connection_reconnect_delay = 0.25
1552
1553# Connection factory implementation (string value)
1554# Allowed values: new, single, read_write
1555#connection_factory = single
1556
1557# Maximum number of connections to keep queued. (integer value)
1558#pool_max_size = 30
1559
1560# Maximum number of connections to create above `pool_max_size`. (integer value)
1561#pool_max_overflow = 0
1562
1563# Default number of seconds to wait for a connections to available (integer
1564# value)
1565#pool_timeout = 30
1566
1567# Lifetime of a connection (since creation) in seconds or None for no recycling.
1568# Expired connections are closed on acquire. (integer value)
1569#pool_recycle = 600
1570
1571# Threshold at which inactive (since release) connections are considered stale
1572# in seconds or None for no staleness. Stale connections are closed on acquire.
1573# (integer value)
1574#pool_stale = 60
1575
1576# Persist notification messages. (boolean value)
1577#notification_persistence = false
1578
1579# Exchange name for sending notifications (string value)
1580#default_notification_exchange = ${control_exchange}_notification
1581
1582# Max number of not acknowledged message which RabbitMQ can send to notification
1583# listener. (integer value)
1584#notification_listener_prefetch_count = 100
1585
1586# Reconnecting retry count in case of connectivity problem during sending
1587# notification, -1 means infinite retry. (integer value)
1588#default_notification_retry_attempts = -1
1589
1590# Reconnecting retry delay in case of connectivity problem during sending
1591# notification message (floating point value)
1592#notification_retry_delay = 0.25
1593
1594# Time to live for rpc queues without consumers in seconds. (integer value)
1595#rpc_queue_expiration = 60
1596
1597# Exchange name for sending RPC messages (string value)
1598#default_rpc_exchange = ${control_exchange}_rpc
1599
1600# Exchange name for receiving RPC replies (string value)
1601#rpc_reply_exchange = ${control_exchange}_rpc_reply
1602
1603# Max number of not acknowledged message which RabbitMQ can send to rpc
1604# listener. (integer value)
1605#rpc_listener_prefetch_count = 100
1606
1607# Max number of not acknowledged message which RabbitMQ can send to rpc reply
1608# listener. (integer value)
1609#rpc_reply_listener_prefetch_count = 100
1610
1611# Reconnecting retry count in case of connectivity problem during sending reply.
1612# -1 means infinite retry during rpc_timeout (integer value)
1613#rpc_reply_retry_attempts = -1
1614
1615# Reconnecting retry delay in case of connectivity problem during sending reply.
1616# (floating point value)
1617#rpc_reply_retry_delay = 0.25
1618
1619# Reconnecting retry count in case of connectivity problem during sending RPC
1620# message, -1 means infinite retry. If actual retry attempts in not 0 the rpc
1621# request could be processed more then one time (integer value)
1622#default_rpc_retry_attempts = -1
1623
1624# Reconnecting retry delay in case of connectivity problem during sending RPC
1625# message (floating point value)
1626#rpc_retry_delay = 0.25
1627
1628
1629[oslo_messaging_zmq]
1630
1631#
1632# From oslo.messaging
1633#
1634
1635# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
1636# The "host" option should point or resolve to this address. (string value)
1637# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_address
1638#rpc_zmq_bind_address = *
1639
1640# MatchMaker driver. (string value)
1641# Allowed values: redis, dummy
1642# Deprecated group/name - [DEFAULT]/rpc_zmq_matchmaker
1643#rpc_zmq_matchmaker = redis
1644
1645# Number of ZeroMQ contexts, defaults to 1. (integer value)
1646# Deprecated group/name - [DEFAULT]/rpc_zmq_contexts
1647#rpc_zmq_contexts = 1
1648
1649# Maximum number of ingress messages to locally buffer per topic. Default is
1650# unlimited. (integer value)
1651# Deprecated group/name - [DEFAULT]/rpc_zmq_topic_backlog
1652#rpc_zmq_topic_backlog = <None>
1653
1654# Directory for holding IPC sockets. (string value)
1655# Deprecated group/name - [DEFAULT]/rpc_zmq_ipc_dir
1656#rpc_zmq_ipc_dir = /var/run/openstack
1657
1658# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
1659# "host" option, if running Nova. (string value)
1660# Deprecated group/name - [DEFAULT]/rpc_zmq_host
1661#rpc_zmq_host = localhost
1662
1663# Seconds to wait before a cast expires (TTL). The default value of -1 specifies
1664# an infinite linger period. The value of 0 specifies no linger period. Pending
1665# messages shall be discarded immediately when the socket is closed. Only
1666# supported by impl_zmq. (integer value)
1667# Deprecated group/name - [DEFAULT]/rpc_cast_timeout
1668#rpc_cast_timeout = -1
1669
1670# The default number of seconds that poll should wait. Poll raises timeout
1671# exception when timeout expired. (integer value)
1672# Deprecated group/name - [DEFAULT]/rpc_poll_timeout
1673#rpc_poll_timeout = 1
1674
1675# Expiration timeout in seconds of a name service record about existing target (
1676# < 0 means no timeout). (integer value)
1677# Deprecated group/name - [DEFAULT]/zmq_target_expire
1678#zmq_target_expire = 300
1679
1680# Update period in seconds of a name service record about existing target.
1681# (integer value)
1682# Deprecated group/name - [DEFAULT]/zmq_target_update
1683#zmq_target_update = 180
1684
1685# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
1686# value)
1687# Deprecated group/name - [DEFAULT]/use_pub_sub
1688#use_pub_sub = true
1689
1690# Use ROUTER remote proxy. (boolean value)
1691# Deprecated group/name - [DEFAULT]/use_router_proxy
1692#use_router_proxy = true
1693
1694# Minimal port number for random ports range. (port value)
1695# Minimum value: 0
1696# Maximum value: 65535
1697# Deprecated group/name - [DEFAULT]/rpc_zmq_min_port
1698#rpc_zmq_min_port = 49153
1699
1700# Maximal port number for random ports range. (integer value)
1701# Minimum value: 1
1702# Maximum value: 65536
1703# Deprecated group/name - [DEFAULT]/rpc_zmq_max_port
1704#rpc_zmq_max_port = 65536
1705
1706# Number of retries to find free port number before fail with ZMQBindError.
1707# (integer value)
1708# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_port_retries
1709#rpc_zmq_bind_port_retries = 100
1710
1711# Default serialization mechanism for serializing/deserializing
1712# outgoing/incoming messages (string value)
1713# Allowed values: json, msgpack
1714# Deprecated group/name - [DEFAULT]/rpc_zmq_serialization
1715#rpc_zmq_serialization = json
1716
1717# This option configures round-robin mode in zmq socket. True means not keeping
1718# a queue when server side disconnects. False means to keep queue and messages
1719# even if server is disconnected, when the server appears we send all
1720# accumulated messages to it. (boolean value)
1721#zmq_immediate = false
1722
1723
1724[oslo_policy]
1725
1726#
1727# From oslo.policy
1728#
1729
1730# The JSON file that defines policies. (string value)
1731# Deprecated group/name - [DEFAULT]/policy_file
1732#policy_file = policy.json
1733
1734# Default rule. Enforced when a requested rule is not found. (string value)
1735# Deprecated group/name - [DEFAULT]/policy_default_rule
1736#policy_default_rule = default
1737
1738# Directories where policy configuration files are stored. They can be relative
1739# to any directory in the search path defined by the config_dir option, or
1740# absolute paths. The file defined by policy_file must exist for these
1741# directories to be searched. Missing or empty directories are ignored. (multi
1742# valued)
1743# Deprecated group/name - [DEFAULT]/policy_dirs
1744#policy_dirs = policy.d
1745
1746
1747[paste_deploy]
1748
1749
1750#
1751# From glance.registry
1752#
1753
1754#
1755# Deployment flavor to use in the server application pipeline.
1756#
1757# Provide a string value representing the appropriate deployment
1758# flavor used in the server application pipleline. This is typically
1759# the partial name of a pipeline in the paste configuration file with
1760# the service name removed.
1761#
1762# For example, if your paste section name in the paste configuration
1763# file is [pipeline:glance-api-keystone], set ``flavor`` to
1764# ``keystone``.
1765#
1766# Possible values:
1767# * String value representing a partial pipeline name.
1768#
1769# Related Options:
1770# * config_file
1771#
1772# (string value)
1773#flavor = keystone
1774
1775#
1776# Name of the paste configuration file.
1777#
1778# Provide a string value representing the name of the paste
1779# configuration file to use for configuring piplelines for
1780# server application deployments.
1781#
1782# NOTES:
1783# * Provide the name or the path relative to the glance directory
1784# for the paste configuration file and not the absolute path.
1785# * The sample paste configuration file shipped with Glance need
1786# not be edited in most cases as it comes with ready-made
1787# pipelines for all common deployment flavors.
1788#
1789# If no value is specified for this option, the ``paste.ini`` file
1790# with the prefix of the corresponding Glance service's configuration
1791# file name will be searched for in the known configuration
1792# directories. (For example, if this option is missing from or has no
1793# value set in ``glance-api.conf``, the service will look for a file
1794# named ``glance-api-paste.ini``.) If the paste configuration file is
1795# not found, the service will not start.
1796#
1797# Possible values:
1798# * A string value representing the name of the paste configuration
1799# file.
1800#
1801# Related Options:
1802# * flavor
1803#
1804# (string value)
1805#config_file = glance-api-paste.ini
1806
1807flavor = keystone
1808
1809[profiler]
1810
1811#
1812# From glance.registry
1813#
1814
1815#
1816# Enables the profiling for all services on this node. Default value is False
1817# (fully disable the profiling feature).
1818#
1819# Possible values:
1820#
1821# * True: Enables the feature
1822# * False: Disables the feature. The profiling cannot be started via this
1823# project
1824# operations. If the profiling is triggered by another project, this project
1825# part
1826# will be empty.
1827# (boolean value)
1828# Deprecated group/name - [profiler]/profiler_enabled
1829#enabled = false
1830
1831#
1832# Enables SQL requests profiling in services. Default value is False (SQL
1833# requests won't be traced).
1834#
1835# Possible values:
1836#
1837# * True: Enables SQL requests profiling. Each SQL query will be part of the
1838# trace and can the be analyzed by how much time was spent for that.
1839# * False: Disables SQL requests profiling. The spent time is only shown on a
1840# higher level of operations. Single SQL queries cannot be analyzed this
1841# way.
1842# (boolean value)
1843#trace_sqlalchemy = false
1844
1845#
1846# Secret key(s) to use for encrypting context data for performance profiling.
1847# This string value should have the following format: <key1>[,<key2>,...<keyn>],
1848# where each key is some random string. A user who triggers the profiling via
1849# the REST API has to set one of these keys in the headers of the REST API call
1850# to include profiling results of this node for this particular project.
1851#
1852# Both "enabled" flag and "hmac_keys" config options should be set to enable
1853# profiling. Also, to generate correct profiling information across all services
1854# at least one key needs to be consistent between OpenStack projects. This
1855# ensures it can be used from client side to generate the trace, containing
1856# information from all possible resources. (string value)
1857#hmac_keys = SECRET_KEY
1858
1859#
1860# Connection string for a notifier backend. Default value is messaging:// which
1861# sets the notifier to oslo_messaging.
1862#
1863# Examples of possible values:
1864#
1865# * messaging://: use oslo_messaging driver for sending notifications.
1866# (string value)
1867#connection_string = messaging://
1868[root@controller keystone]#