a0bddc9a70
Currently, the oslo config generator takes glance_store configs in consideration while generating sample configs for the registry. Registry doesn't really need these configs. This patch removes the store config namespace from the oslo config generator's setup to avoid regeneration of store section in registry sample. Sample configs have been regenerated using `tox -e genconfig` command to make sure they reflect the change proposed. Only the glance-registry.conf file has been refreshed as a part of this commit. Closes-Bug: 1584350 Change-Id: I27c53d281dcd97a30c22a27c4833b24e1ca84f83
1057 lines
35 KiB
Plaintext
1057 lines
35 KiB
Plaintext
[DEFAULT]
|
|
|
|
#
|
|
# From glance.registry
|
|
#
|
|
|
|
# When true, this option sets the owner of an image to be the tenant.
|
|
# Otherwise, the owner of the image will be the authenticated user
|
|
# issuing the request. (boolean value)
|
|
#owner_is_tenant = true
|
|
|
|
# Role used to identify an authenticated user as administrator.
|
|
# (string value)
|
|
#admin_role = admin
|
|
|
|
# Allow unauthenticated users to access the API with read-only
|
|
# privileges. This only applies when using ContextMiddleware. (boolean
|
|
# value)
|
|
#allow_anonymous_access = false
|
|
|
|
# Limits request ID length. (integer value)
|
|
#max_request_id_length = 64
|
|
|
|
# Whether to allow users to specify image properties beyond what the
|
|
# image schema provides (boolean value)
|
|
#allow_additional_image_properties = true
|
|
|
|
# Maximum number of image members per image. Negative values evaluate
|
|
# to unlimited. (integer value)
|
|
#image_member_quota = 128
|
|
|
|
# Maximum number of properties allowed on an image. Negative values
|
|
# evaluate to unlimited. (integer value)
|
|
#image_property_quota = 128
|
|
|
|
# Maximum number of tags allowed on an image. Negative values evaluate
|
|
# to unlimited. (integer value)
|
|
#image_tag_quota = 128
|
|
|
|
# Maximum number of locations allowed on an image. Negative values
|
|
# evaluate to unlimited. (integer value)
|
|
#image_location_quota = 10
|
|
|
|
# Python module path of data access API (string value)
|
|
#data_api = glance.db.sqlalchemy.api
|
|
|
|
# Default value for the number of items returned by a request if not
|
|
# specified explicitly in the request (integer value)
|
|
#limit_param_default = 25
|
|
|
|
# Maximum permissible number of items that could be returned by a
|
|
# request (integer value)
|
|
#api_limit_max = 1000
|
|
|
|
# Whether to include the backend image storage location in image
|
|
# properties. Revealing storage location can be a security risk, so
|
|
# use this setting with caution! (boolean value)
|
|
#show_image_direct_url = false
|
|
|
|
# Whether to include the backend image locations in image properties.
|
|
# For example, if using the file system store a URL of
|
|
# "file:///path/to/image" will be returned to the user in the
|
|
# 'direct_url' meta-data field. Revealing storage location can be a
|
|
# security risk, so use this setting with caution! Setting this to
|
|
# true overrides the show_image_direct_url option. (boolean value)
|
|
#show_multiple_locations = false
|
|
|
|
# Maximum size of image a user can upload in bytes. Defaults to
|
|
# 1099511627776 bytes (1 TB).WARNING: this value should only be
|
|
# increased after careful consideration and must be set to a value
|
|
# under 8 EB (9223372036854775808). (integer value)
|
|
# Maximum value: 9223372036854775808
|
|
#image_size_cap = 1099511627776
|
|
|
|
# Set a system wide quota for every user. This value is the total
|
|
# capacity that a user can use across all storage systems. A value of
|
|
# 0 means unlimited.Optional unit can be specified for the value.
|
|
# Accepted units are B, KB, MB, GB and TB representing Bytes,
|
|
# KiloBytes, MegaBytes, GigaBytes and TeraBytes respectively. If no
|
|
# unit is specified then Bytes is assumed. Note that there should not
|
|
# be any space between value and unit and units are case sensitive.
|
|
# (string value)
|
|
#user_storage_quota = 0
|
|
|
|
# Deploy the v1 OpenStack Images API. (boolean value)
|
|
#enable_v1_api = true
|
|
|
|
# Deploy the v2 OpenStack Images API. (boolean value)
|
|
#enable_v2_api = true
|
|
|
|
# Deploy the v1 OpenStack Registry API. (boolean value)
|
|
#enable_v1_registry = true
|
|
|
|
# Deploy the v2 OpenStack Registry API. (boolean value)
|
|
#enable_v2_registry = true
|
|
|
|
# The hostname/IP of the pydev process listening for debug connections
|
|
# (string value)
|
|
#pydev_worker_debug_host = <None>
|
|
|
|
# The port on which a pydev process is listening for connections.
|
|
# (port value)
|
|
# Minimum value: 0
|
|
# Maximum value: 65535
|
|
#pydev_worker_debug_port = 5678
|
|
|
|
# AES key for encrypting store 'location' metadata. This includes, if
|
|
# used, Swift or S3 credentials. Should be set to a random string of
|
|
# length 16, 24 or 32 bytes (string value)
|
|
#metadata_encryption_key = <None>
|
|
|
|
# Digest algorithm which will be used for digital signature. Use the
|
|
# command "openssl list-message-digest-algorithms" to get the
|
|
# available algorithms supported by the version of OpenSSL on the
|
|
# platform. Examples are "sha1", "sha256", "sha512", etc. (string
|
|
# value)
|
|
#digest_algorithm = sha256
|
|
|
|
# Address to bind the server. Useful when selecting a particular
|
|
# network interface. (string value)
|
|
#bind_host = 0.0.0.0
|
|
|
|
# The port on which the server will listen. (port value)
|
|
# Minimum value: 0
|
|
# Maximum value: 65535
|
|
#bind_port = <None>
|
|
|
|
# The backlog value that will be used when creating the TCP listener
|
|
# socket. (integer value)
|
|
#backlog = 4096
|
|
|
|
# The value for the socket option TCP_KEEPIDLE. This is the time in
|
|
# seconds that the connection must be idle before TCP starts sending
|
|
# keepalive probes. (integer value)
|
|
#tcp_keepidle = 600
|
|
|
|
# CA certificate file to use to verify connecting clients. (string
|
|
# value)
|
|
#ca_file = <None>
|
|
|
|
# Certificate file to use when starting API server securely. (string
|
|
# value)
|
|
#cert_file = <None>
|
|
|
|
# Private key file to use when starting API server securely. (string
|
|
# value)
|
|
#key_file = <None>
|
|
|
|
# The HTTP header used to determine the scheme for the original
|
|
# request, even if it was removed by an SSL terminating proxy. Typical
|
|
# value is "HTTP_X_FORWARDED_PROTO". (string value)
|
|
#secure_proxy_ssl_header = <None>
|
|
|
|
# The number of child process workers that will be created to service
|
|
# requests. The default will be equal to the number of CPUs available.
|
|
# (integer value)
|
|
#workers = <None>
|
|
|
|
# Maximum line size of message headers to be accepted. max_header_line
|
|
# may need to be increased when using large tokens (typically those
|
|
# generated by the Keystone v3 API with big service catalogs (integer
|
|
# value)
|
|
#max_header_line = 16384
|
|
|
|
# If False, server will return the header "Connection: close", If
|
|
# True, server will return "Connection: Keep-Alive" in its responses.
|
|
# In order to close the client socket connection explicitly after the
|
|
# response is sent and read successfully by the client, you simply
|
|
# have to set this option to False when you create a wsgi server.
|
|
# (boolean value)
|
|
#http_keepalive = true
|
|
|
|
# Timeout for client connections' socket operations. If an incoming
|
|
# connection is idle for this number of seconds it will be closed. A
|
|
# value of '0' means wait forever. (integer value)
|
|
#client_socket_timeout = 900
|
|
|
|
#
|
|
# From oslo.log
|
|
#
|
|
|
|
# If set to true, the logging level will be set to DEBUG instead of
|
|
# the default INFO level. (boolean value)
|
|
#debug = false
|
|
|
|
# If set to false, the logging level will be set to WARNING instead of
|
|
# the default INFO level. (boolean value)
|
|
# This option is deprecated for removal.
|
|
# Its value may be silently ignored in the future.
|
|
#verbose = true
|
|
|
|
# The name of a logging configuration file. This file is appended to
|
|
# any existing logging configuration files. For details about logging
|
|
# configuration files, see the Python logging module documentation.
|
|
# Note that when logging configuration files are used then all logging
|
|
# configuration is set in the configuration file and other logging
|
|
# configuration options are ignored (for example,
|
|
# logging_context_format_string). (string value)
|
|
# Deprecated group/name - [DEFAULT]/log_config
|
|
#log_config_append = <None>
|
|
|
|
# Defines the format string for %%(asctime)s in log records. Default:
|
|
# %(default)s . This option is ignored if log_config_append is set.
|
|
# (string value)
|
|
#log_date_format = %Y-%m-%d %H:%M:%S
|
|
|
|
# (Optional) Name of log file to send logging output to. If no default
|
|
# is set, logging will go to stderr as defined by use_stderr. This
|
|
# option is ignored if log_config_append is set. (string value)
|
|
# Deprecated group/name - [DEFAULT]/logfile
|
|
#log_file = <None>
|
|
|
|
# (Optional) The base directory used for relative log_file paths.
|
|
# This option is ignored if log_config_append is set. (string value)
|
|
# Deprecated group/name - [DEFAULT]/logdir
|
|
#log_dir = <None>
|
|
|
|
# Uses logging handler designed to watch file system. When log file is
|
|
# moved or removed this handler will open a new log file with
|
|
# specified path instantaneously. It makes sense only if log_file
|
|
# option is specified and Linux platform is used. This option is
|
|
# ignored if log_config_append is set. (boolean value)
|
|
#watch_log_file = false
|
|
|
|
# Use syslog for logging. Existing syslog format is DEPRECATED and
|
|
# will be changed later to honor RFC5424. This option is ignored if
|
|
# log_config_append is set. (boolean value)
|
|
#use_syslog = false
|
|
|
|
# Syslog facility to receive log lines. This option is ignored if
|
|
# log_config_append is set. (string value)
|
|
#syslog_log_facility = LOG_USER
|
|
|
|
# Log output to standard error. This option is ignored if
|
|
# log_config_append is set. (boolean value)
|
|
#use_stderr = true
|
|
|
|
# Format string to use for log messages with context. (string value)
|
|
#logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
|
|
|
|
# Format string to use for log messages when context is undefined.
|
|
# (string value)
|
|
#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
|
|
|
|
# Additional data to append to log message when logging level for the
|
|
# message is DEBUG. (string value)
|
|
#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
|
|
|
|
# Prefix each line of exception output with this format. (string
|
|
# value)
|
|
#logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
|
|
|
|
# Defines the format string for %(user_identity)s that is used in
|
|
# logging_context_format_string. (string value)
|
|
#logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
|
|
|
|
# List of package logging levels in logger=LEVEL pairs. This option is
|
|
# ignored if log_config_append is set. (list value)
|
|
#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
|
|
|
|
# Enables or disables publication of error events. (boolean value)
|
|
#publish_errors = false
|
|
|
|
# The format for an instance that is passed with the log message.
|
|
# (string value)
|
|
#instance_format = "[instance: %(uuid)s] "
|
|
|
|
# The format for an instance UUID that is passed with the log message.
|
|
# (string value)
|
|
#instance_uuid_format = "[instance: %(uuid)s] "
|
|
|
|
# Enables or disables fatal status of deprecations. (boolean value)
|
|
#fatal_deprecations = false
|
|
|
|
#
|
|
# From oslo.messaging
|
|
#
|
|
|
|
# Size of RPC connection pool. (integer value)
|
|
# Deprecated group/name - [DEFAULT]/rpc_conn_pool_size
|
|
#rpc_conn_pool_size = 30
|
|
|
|
# ZeroMQ bind address. Should be a wildcard (*), an ethernet
|
|
# interface, or IP. The "host" option should point or resolve to this
|
|
# address. (string value)
|
|
#rpc_zmq_bind_address = *
|
|
|
|
# MatchMaker driver. (string value)
|
|
# Allowed values: redis, dummy
|
|
#rpc_zmq_matchmaker = redis
|
|
|
|
# Type of concurrency used. Either "native" or "eventlet" (string
|
|
# value)
|
|
#rpc_zmq_concurrency = eventlet
|
|
|
|
# Number of ZeroMQ contexts, defaults to 1. (integer value)
|
|
#rpc_zmq_contexts = 1
|
|
|
|
# Maximum number of ingress messages to locally buffer per topic.
|
|
# Default is unlimited. (integer value)
|
|
#rpc_zmq_topic_backlog = <None>
|
|
|
|
# Directory for holding IPC sockets. (string value)
|
|
#rpc_zmq_ipc_dir = /var/run/openstack
|
|
|
|
# Name of this node. Must be a valid hostname, FQDN, or IP address.
|
|
# Must match "host" option, if running Nova. (string value)
|
|
#rpc_zmq_host = localhost
|
|
|
|
# Seconds to wait before a cast expires (TTL). The default value of -1
|
|
# specifies an infinite linger period. The value of 0 specifies no
|
|
# linger period. Pending messages shall be discarded immediately when
|
|
# the socket is closed. Only supported by impl_zmq. (integer value)
|
|
#rpc_cast_timeout = -1
|
|
|
|
# The default number of seconds that poll should wait. Poll raises
|
|
# timeout exception when timeout expired. (integer value)
|
|
#rpc_poll_timeout = 1
|
|
|
|
# Expiration timeout in seconds of a name service record about
|
|
# existing target ( < 0 means no timeout). (integer value)
|
|
#zmq_target_expire = 120
|
|
|
|
# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy.
|
|
# (boolean value)
|
|
#use_pub_sub = true
|
|
|
|
# Minimal port number for random ports range. (port value)
|
|
# Minimum value: 0
|
|
# Maximum value: 65535
|
|
#rpc_zmq_min_port = 49152
|
|
|
|
# Maximal port number for random ports range. (integer value)
|
|
# Minimum value: 1
|
|
# Maximum value: 65536
|
|
#rpc_zmq_max_port = 65536
|
|
|
|
# Number of retries to find free port number before fail with
|
|
# ZMQBindError. (integer value)
|
|
#rpc_zmq_bind_port_retries = 100
|
|
|
|
# Size of executor thread pool. (integer value)
|
|
# Deprecated group/name - [DEFAULT]/rpc_thread_pool_size
|
|
#executor_thread_pool_size = 64
|
|
|
|
# Seconds to wait for a response from a call. (integer value)
|
|
#rpc_response_timeout = 60
|
|
|
|
# A URL representing the messaging driver to use and its full
|
|
# configuration. If not set, we fall back to the rpc_backend option
|
|
# and driver specific configuration. (string value)
|
|
#transport_url = <None>
|
|
|
|
# The messaging driver to use, defaults to rabbit. Other drivers
|
|
# include amqp and zmq. (string value)
|
|
#rpc_backend = rabbit
|
|
|
|
# The default exchange under which topics are scoped. May be
|
|
# overridden by an exchange name specified in the transport_url
|
|
# option. (string value)
|
|
#control_exchange = openstack
|
|
|
|
|
|
[database]
|
|
|
|
#
|
|
# From oslo.db
|
|
#
|
|
|
|
# The file name to use with SQLite. (string value)
|
|
# Deprecated group/name - [DEFAULT]/sqlite_db
|
|
#sqlite_db = oslo.sqlite
|
|
|
|
# If True, SQLite uses synchronous mode. (boolean value)
|
|
# Deprecated group/name - [DEFAULT]/sqlite_synchronous
|
|
#sqlite_synchronous = true
|
|
|
|
# The back end to use for the database. (string value)
|
|
# Deprecated group/name - [DEFAULT]/db_backend
|
|
#backend = sqlalchemy
|
|
|
|
# The SQLAlchemy connection string to use to connect to the database.
|
|
# (string value)
|
|
# Deprecated group/name - [DEFAULT]/sql_connection
|
|
# Deprecated group/name - [DATABASE]/sql_connection
|
|
# Deprecated group/name - [sql]/connection
|
|
#connection = <None>
|
|
|
|
# The SQLAlchemy connection string to use to connect to the slave
|
|
# database. (string value)
|
|
#slave_connection = <None>
|
|
|
|
# The SQL mode to be used for MySQL sessions. This option, including
|
|
# the default, overrides any server-set SQL mode. To use whatever SQL
|
|
# mode is set by the server configuration, set this to no value.
|
|
# Example: mysql_sql_mode= (string value)
|
|
#mysql_sql_mode = TRADITIONAL
|
|
|
|
# Timeout before idle SQL connections are reaped. (integer value)
|
|
# Deprecated group/name - [DEFAULT]/sql_idle_timeout
|
|
# Deprecated group/name - [DATABASE]/sql_idle_timeout
|
|
# Deprecated group/name - [sql]/idle_timeout
|
|
#idle_timeout = 3600
|
|
|
|
# Minimum number of SQL connections to keep open in a pool. (integer
|
|
# value)
|
|
# Deprecated group/name - [DEFAULT]/sql_min_pool_size
|
|
# Deprecated group/name - [DATABASE]/sql_min_pool_size
|
|
#min_pool_size = 1
|
|
|
|
# Maximum number of SQL connections to keep open in a pool. (integer
|
|
# value)
|
|
# Deprecated group/name - [DEFAULT]/sql_max_pool_size
|
|
# Deprecated group/name - [DATABASE]/sql_max_pool_size
|
|
#max_pool_size = <None>
|
|
|
|
# Maximum number of database connection retries during startup. Set to
|
|
# -1 to specify an infinite retry count. (integer value)
|
|
# Deprecated group/name - [DEFAULT]/sql_max_retries
|
|
# Deprecated group/name - [DATABASE]/sql_max_retries
|
|
#max_retries = 10
|
|
|
|
# Interval between retries of opening a SQL connection. (integer
|
|
# value)
|
|
# Deprecated group/name - [DEFAULT]/sql_retry_interval
|
|
# Deprecated group/name - [DATABASE]/reconnect_interval
|
|
#retry_interval = 10
|
|
|
|
# If set, use this value for max_overflow with SQLAlchemy. (integer
|
|
# value)
|
|
# Deprecated group/name - [DEFAULT]/sql_max_overflow
|
|
# Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
|
|
#max_overflow = 50
|
|
|
|
# Verbosity of SQL debugging information: 0=None, 100=Everything.
|
|
# (integer value)
|
|
# Deprecated group/name - [DEFAULT]/sql_connection_debug
|
|
#connection_debug = 0
|
|
|
|
# Add Python stack traces to SQL as comment strings. (boolean value)
|
|
# Deprecated group/name - [DEFAULT]/sql_connection_trace
|
|
#connection_trace = false
|
|
|
|
# If set, use this value for pool_timeout with SQLAlchemy. (integer
|
|
# value)
|
|
# Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
|
|
#pool_timeout = <None>
|
|
|
|
# Enable the experimental use of database reconnect on connection
|
|
# lost. (boolean value)
|
|
#use_db_reconnect = false
|
|
|
|
# Seconds between retries of a database transaction. (integer value)
|
|
#db_retry_interval = 1
|
|
|
|
# If True, increases the interval between retries of a database
|
|
# operation up to db_max_retry_interval. (boolean value)
|
|
#db_inc_retry_interval = true
|
|
|
|
# If db_inc_retry_interval is set, the maximum seconds between retries
|
|
# of a database operation. (integer value)
|
|
#db_max_retry_interval = 10
|
|
|
|
# Maximum retries in case of connection error or deadlock error before
|
|
# error is raised. Set to -1 to specify an infinite retry count.
|
|
# (integer value)
|
|
#db_max_retries = 20
|
|
|
|
#
|
|
# From oslo.db.concurrency
|
|
#
|
|
|
|
# Enable the experimental use of thread pooling for all DB API calls
|
|
# (boolean value)
|
|
# Deprecated group/name - [DEFAULT]/dbapi_use_tpool
|
|
#use_tpool = false
|
|
|
|
|
|
[keystone_authtoken]
|
|
|
|
#
|
|
# From keystonemiddleware.auth_token
|
|
#
|
|
|
|
# Complete public Identity API endpoint. (string value)
|
|
#auth_uri = <None>
|
|
|
|
# API version of the admin Identity API endpoint. (string value)
|
|
#auth_version = <None>
|
|
|
|
# Do not handle authorization requests within the middleware, but
|
|
# delegate the authorization decision to downstream WSGI components.
|
|
# (boolean value)
|
|
#delay_auth_decision = false
|
|
|
|
# Request timeout value for communicating with Identity API server.
|
|
# (integer value)
|
|
#http_connect_timeout = <None>
|
|
|
|
# How many times are we trying to reconnect when communicating with
|
|
# Identity API Server. (integer value)
|
|
#http_request_max_retries = 3
|
|
|
|
# Env key for the swift cache. (string value)
|
|
#cache = <None>
|
|
|
|
# Required if identity server requires client certificate (string
|
|
# value)
|
|
#certfile = <None>
|
|
|
|
# Required if identity server requires client certificate (string
|
|
# value)
|
|
#keyfile = <None>
|
|
|
|
# A PEM encoded Certificate Authority to use when verifying HTTPs
|
|
# connections. Defaults to system CAs. (string value)
|
|
#cafile = <None>
|
|
|
|
# Verify HTTPS connections. (boolean value)
|
|
#insecure = false
|
|
|
|
# The region in which the identity server can be found. (string value)
|
|
#region_name = <None>
|
|
|
|
# Directory used to cache files related to PKI tokens. (string value)
|
|
#signing_dir = <None>
|
|
|
|
# Optionally specify a list of memcached server(s) to use for caching.
|
|
# If left undefined, tokens will instead be cached in-process. (list
|
|
# value)
|
|
# Deprecated group/name - [DEFAULT]/memcache_servers
|
|
#memcached_servers = <None>
|
|
|
|
# In order to prevent excessive effort spent validating tokens, the
|
|
# middleware caches previously-seen tokens for a configurable duration
|
|
# (in seconds). Set to -1 to disable caching completely. (integer
|
|
# value)
|
|
#token_cache_time = 300
|
|
|
|
# Determines the frequency at which the list of revoked tokens is
|
|
# retrieved from the Identity service (in seconds). A high number of
|
|
# revocation events combined with a low cache duration may
|
|
# significantly reduce performance. (integer value)
|
|
#revocation_cache_time = 10
|
|
|
|
# (Optional) If defined, indicate whether token data should be
|
|
# authenticated or authenticated and encrypted. If MAC, token data is
|
|
# authenticated (with HMAC) in the cache. If ENCRYPT, token data is
|
|
# encrypted and authenticated in the cache. If the value is not one of
|
|
# these options or empty, auth_token will raise an exception on
|
|
# initialization. (string value)
|
|
# Allowed values: None, MAC, ENCRYPT
|
|
#memcache_security_strategy = None
|
|
|
|
# (Optional, mandatory if memcache_security_strategy is defined) This
|
|
# string is used for key derivation. (string value)
|
|
#memcache_secret_key = <None>
|
|
|
|
# (Optional) Number of seconds memcached server is considered dead
|
|
# before it is tried again. (integer value)
|
|
#memcache_pool_dead_retry = 300
|
|
|
|
# (Optional) Maximum total number of open connections to every
|
|
# memcached server. (integer value)
|
|
#memcache_pool_maxsize = 10
|
|
|
|
# (Optional) Socket timeout in seconds for communicating with a
|
|
# memcached server. (integer value)
|
|
#memcache_pool_socket_timeout = 3
|
|
|
|
# (Optional) Number of seconds a connection to memcached is held
|
|
# unused in the pool before it is closed. (integer value)
|
|
#memcache_pool_unused_timeout = 60
|
|
|
|
# (Optional) Number of seconds that an operation will wait to get a
|
|
# memcached client connection from the pool. (integer value)
|
|
#memcache_pool_conn_get_timeout = 10
|
|
|
|
# (Optional) Use the advanced (eventlet safe) memcached client pool.
|
|
# The advanced pool will only work under python 2.x. (boolean value)
|
|
#memcache_use_advanced_pool = false
|
|
|
|
# (Optional) Indicate whether to set the X-Service-Catalog header. If
|
|
# False, middleware will not ask for service catalog on token
|
|
# validation and will not set the X-Service-Catalog header. (boolean
|
|
# value)
|
|
#include_service_catalog = true
|
|
|
|
# Used to control the use and type of token binding. Can be set to:
|
|
# "disabled" to not check token binding. "permissive" (default) to
|
|
# validate binding information if the bind type is of a form known to
|
|
# the server and ignore it if not. "strict" like "permissive" but if
|
|
# the bind type is unknown the token will be rejected. "required" any
|
|
# form of token binding is needed to be allowed. Finally the name of a
|
|
# binding method that must be present in tokens. (string value)
|
|
#enforce_token_bind = permissive
|
|
|
|
# If true, the revocation list will be checked for cached tokens. This
|
|
# requires that PKI tokens are configured on the identity server.
|
|
# (boolean value)
|
|
#check_revocations_for_cached = false
|
|
|
|
# Hash algorithms to use for hashing PKI tokens. This may be a single
|
|
# algorithm or multiple. The algorithms are those supported by Python
|
|
# standard hashlib.new(). The hashes will be tried in the order given,
|
|
# so put the preferred one first for performance. The result of the
|
|
# first hash will be stored in the cache. This will typically be set
|
|
# to multiple values only while migrating from a less secure algorithm
|
|
# to a more secure one. Once all the old tokens are expired this
|
|
# option should be set to a single value for better performance. (list
|
|
# value)
|
|
#hash_algorithms = md5
|
|
|
|
# Authentication type to load (unknown value)
|
|
# Deprecated group/name - [DEFAULT]/auth_plugin
|
|
#auth_type = <None>
|
|
|
|
# Config Section from which to load plugin specific options (unknown
|
|
# value)
|
|
#auth_section = <None>
|
|
|
|
|
|
[matchmaker_redis]
|
|
|
|
#
|
|
# From oslo.messaging
|
|
#
|
|
|
|
# Host to locate redis. (string value)
|
|
#host = 127.0.0.1
|
|
|
|
# Use this port to connect to redis host. (port value)
|
|
# Minimum value: 0
|
|
# Maximum value: 65535
|
|
#port = 6379
|
|
|
|
# Password for Redis server (optional). (string value)
|
|
#password =
|
|
|
|
# List of Redis Sentinel hosts (fault tolerance mode) e.g.
|
|
# [host:port, host1:port ... ] (list value)
|
|
#sentinel_hosts =
|
|
|
|
# Redis replica set name. (string value)
|
|
#sentinel_group_name = oslo-messaging-zeromq
|
|
|
|
# Time in ms to wait between connection attempts. (integer value)
|
|
#wait_timeout = 500
|
|
|
|
# Time in ms to wait before the transaction is killed. (integer value)
|
|
#check_timeout = 20000
|
|
|
|
# Timeout in ms on blocking socket operations (integer value)
|
|
#socket_timeout = 1000
|
|
|
|
|
|
[oslo_messaging_amqp]
|
|
|
|
#
|
|
# From oslo.messaging
|
|
#
|
|
|
|
# address prefix used when sending to a specific server (string value)
|
|
# Deprecated group/name - [amqp1]/server_request_prefix
|
|
#server_request_prefix = exclusive
|
|
|
|
# address prefix used when broadcasting to all servers (string value)
|
|
# Deprecated group/name - [amqp1]/broadcast_prefix
|
|
#broadcast_prefix = broadcast
|
|
|
|
# address prefix when sending to any server in group (string value)
|
|
# Deprecated group/name - [amqp1]/group_request_prefix
|
|
#group_request_prefix = unicast
|
|
|
|
# Name for the AMQP container (string value)
|
|
# Deprecated group/name - [amqp1]/container_name
|
|
#container_name = <None>
|
|
|
|
# Timeout for inactive connections (in seconds) (integer value)
|
|
# Deprecated group/name - [amqp1]/idle_timeout
|
|
#idle_timeout = 0
|
|
|
|
# Debug: dump AMQP frames to stdout (boolean value)
|
|
# Deprecated group/name - [amqp1]/trace
|
|
#trace = false
|
|
|
|
# CA certificate PEM file to verify server certificate (string value)
|
|
# Deprecated group/name - [amqp1]/ssl_ca_file
|
|
#ssl_ca_file =
|
|
|
|
# Identifying certificate PEM file to present to clients (string
|
|
# value)
|
|
# Deprecated group/name - [amqp1]/ssl_cert_file
|
|
#ssl_cert_file =
|
|
|
|
# Private key PEM file used to sign cert_file certificate (string
|
|
# value)
|
|
# Deprecated group/name - [amqp1]/ssl_key_file
|
|
#ssl_key_file =
|
|
|
|
# Password for decrypting ssl_key_file (if encrypted) (string value)
|
|
# Deprecated group/name - [amqp1]/ssl_key_password
|
|
#ssl_key_password = <None>
|
|
|
|
# Accept clients using either SSL or plain TCP (boolean value)
|
|
# Deprecated group/name - [amqp1]/allow_insecure_clients
|
|
#allow_insecure_clients = false
|
|
|
|
# Space separated list of acceptable SASL mechanisms (string value)
|
|
# Deprecated group/name - [amqp1]/sasl_mechanisms
|
|
#sasl_mechanisms =
|
|
|
|
# Path to directory that contains the SASL configuration (string
|
|
# value)
|
|
# Deprecated group/name - [amqp1]/sasl_config_dir
|
|
#sasl_config_dir =
|
|
|
|
# Name of configuration file (without .conf suffix) (string value)
|
|
# Deprecated group/name - [amqp1]/sasl_config_name
|
|
#sasl_config_name =
|
|
|
|
# User name for message broker authentication (string value)
|
|
# Deprecated group/name - [amqp1]/username
|
|
#username =
|
|
|
|
# Password for message broker authentication (string value)
|
|
# Deprecated group/name - [amqp1]/password
|
|
#password =
|
|
|
|
|
|
[oslo_messaging_notifications]
|
|
|
|
#
|
|
# From oslo.messaging
|
|
#
|
|
|
|
# The Drivers(s) to handle sending notifications. Possible values are
|
|
# messaging, messagingv2, routing, log, test, noop (multi valued)
|
|
# Deprecated group/name - [DEFAULT]/notification_driver
|
|
#driver =
|
|
|
|
# A URL representing the messaging driver to use for notifications. If
|
|
# not set, we fall back to the same configuration used for RPC.
|
|
# (string value)
|
|
# Deprecated group/name - [DEFAULT]/notification_transport_url
|
|
#transport_url = <None>
|
|
|
|
# AMQP topic used for OpenStack notifications. (list value)
|
|
# Deprecated group/name - [rpc_notifier2]/topics
|
|
# Deprecated group/name - [DEFAULT]/notification_topics
|
|
#topics = notifications
|
|
|
|
|
|
[oslo_messaging_rabbit]
|
|
|
|
#
|
|
# From oslo.messaging
|
|
#
|
|
|
|
# Use durable queues in AMQP. (boolean value)
|
|
# Deprecated group/name - [DEFAULT]/amqp_durable_queues
|
|
# Deprecated group/name - [DEFAULT]/rabbit_durable_queues
|
|
#amqp_durable_queues = false
|
|
|
|
# Auto-delete queues in AMQP. (boolean value)
|
|
# Deprecated group/name - [DEFAULT]/amqp_auto_delete
|
|
#amqp_auto_delete = false
|
|
|
|
# SSL version to use (valid only if SSL enabled). Valid values are
|
|
# TLSv1 and SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be
|
|
# available on some distributions. (string value)
|
|
# Deprecated group/name - [DEFAULT]/kombu_ssl_version
|
|
#kombu_ssl_version =
|
|
|
|
# SSL key file (valid only if SSL enabled). (string value)
|
|
# Deprecated group/name - [DEFAULT]/kombu_ssl_keyfile
|
|
#kombu_ssl_keyfile =
|
|
|
|
# SSL cert file (valid only if SSL enabled). (string value)
|
|
# Deprecated group/name - [DEFAULT]/kombu_ssl_certfile
|
|
#kombu_ssl_certfile =
|
|
|
|
# SSL certification authority file (valid only if SSL enabled).
|
|
# (string value)
|
|
# Deprecated group/name - [DEFAULT]/kombu_ssl_ca_certs
|
|
#kombu_ssl_ca_certs =
|
|
|
|
# How long to wait before reconnecting in response to an AMQP consumer
|
|
# cancel notification. (floating point value)
|
|
# Deprecated group/name - [DEFAULT]/kombu_reconnect_delay
|
|
#kombu_reconnect_delay = 1.0
|
|
|
|
# EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression
|
|
# will not be used. This option may notbe available in future
|
|
# versions. (string value)
|
|
#kombu_compression = <None>
|
|
|
|
# How long to wait a missing client beforce abandoning to send it its
|
|
# replies. This value should not be longer than rpc_response_timeout.
|
|
# (integer value)
|
|
# Deprecated group/name - [DEFAULT]/kombu_reconnect_timeout
|
|
#kombu_missing_consumer_retry_timeout = 60
|
|
|
|
# Determines how the next RabbitMQ node is chosen in case the one we
|
|
# are currently connected to becomes unavailable. Takes effect only if
|
|
# more than one RabbitMQ node is provided in config. (string value)
|
|
# Allowed values: round-robin, shuffle
|
|
#kombu_failover_strategy = round-robin
|
|
|
|
# The RabbitMQ broker address where a single node is used. (string
|
|
# value)
|
|
# Deprecated group/name - [DEFAULT]/rabbit_host
|
|
#rabbit_host = localhost
|
|
|
|
# The RabbitMQ broker port where a single node is used. (port value)
|
|
# Minimum value: 0
|
|
# Maximum value: 65535
|
|
# Deprecated group/name - [DEFAULT]/rabbit_port
|
|
#rabbit_port = 5672
|
|
|
|
# RabbitMQ HA cluster host:port pairs. (list value)
|
|
# Deprecated group/name - [DEFAULT]/rabbit_hosts
|
|
#rabbit_hosts = $rabbit_host:$rabbit_port
|
|
|
|
# Connect over SSL for RabbitMQ. (boolean value)
|
|
# Deprecated group/name - [DEFAULT]/rabbit_use_ssl
|
|
#rabbit_use_ssl = false
|
|
|
|
# The RabbitMQ userid. (string value)
|
|
# Deprecated group/name - [DEFAULT]/rabbit_userid
|
|
#rabbit_userid = guest
|
|
|
|
# The RabbitMQ password. (string value)
|
|
# Deprecated group/name - [DEFAULT]/rabbit_password
|
|
#rabbit_password = guest
|
|
|
|
# The RabbitMQ login method. (string value)
|
|
# Deprecated group/name - [DEFAULT]/rabbit_login_method
|
|
#rabbit_login_method = AMQPLAIN
|
|
|
|
# The RabbitMQ virtual host. (string value)
|
|
# Deprecated group/name - [DEFAULT]/rabbit_virtual_host
|
|
#rabbit_virtual_host = /
|
|
|
|
# How frequently to retry connecting with RabbitMQ. (integer value)
|
|
#rabbit_retry_interval = 1
|
|
|
|
# How long to backoff for between retries when connecting to RabbitMQ.
|
|
# (integer value)
|
|
# Deprecated group/name - [DEFAULT]/rabbit_retry_backoff
|
|
#rabbit_retry_backoff = 2
|
|
|
|
# Maximum interval of RabbitMQ connection retries. Default is 30
|
|
# seconds. (integer value)
|
|
#rabbit_interval_max = 30
|
|
|
|
# Maximum number of RabbitMQ connection retries. Default is 0
|
|
# (infinite retry count). (integer value)
|
|
# Deprecated group/name - [DEFAULT]/rabbit_max_retries
|
|
#rabbit_max_retries = 0
|
|
|
|
# Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change
|
|
# this option, you must wipe the RabbitMQ database. In RabbitMQ 3.0,
|
|
# queue mirroring is no longer controlled by the x-ha-policy argument
|
|
# when declaring a queue. If you just want to make sure that all
|
|
# queues (except those with auto-generated names) are mirrored across
|
|
# all nodes, run: "rabbitmqctl set_policy HA '^(?!amq\.).*' '{"ha-
|
|
# mode": "all"}' " (boolean value)
|
|
# Deprecated group/name - [DEFAULT]/rabbit_ha_queues
|
|
#rabbit_ha_queues = false
|
|
|
|
# Positive integer representing duration in seconds for queue TTL
|
|
# (x-expires). Queues which are unused for the duration of the TTL are
|
|
# automatically deleted. The parameter affects only reply and fanout
|
|
# queues. (integer value)
|
|
# Minimum value: 1
|
|
#rabbit_transient_queues_ttl = 1800
|
|
|
|
# Specifies the number of messages to prefetch. Setting to zero allows
|
|
# unlimited messages. (integer value)
|
|
#rabbit_qos_prefetch_count = 0
|
|
|
|
# Number of seconds after which the Rabbit broker is considered down
|
|
# if heartbeat's keep-alive fails (0 disable the heartbeat).
|
|
# EXPERIMENTAL (integer value)
|
|
#heartbeat_timeout_threshold = 60
|
|
|
|
# How often times during the heartbeat_timeout_threshold we check the
|
|
# heartbeat. (integer value)
|
|
#heartbeat_rate = 2
|
|
|
|
# Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake
|
|
# (boolean value)
|
|
# Deprecated group/name - [DEFAULT]/fake_rabbit
|
|
#fake_rabbit = false
|
|
|
|
# Maximum number of channels to allow (integer value)
|
|
#channel_max = <None>
|
|
|
|
# The maximum byte size for an AMQP frame (integer value)
|
|
#frame_max = <None>
|
|
|
|
# How often to send heartbeats for consumer's connections (integer
|
|
# value)
|
|
#heartbeat_interval = 1
|
|
|
|
# Enable SSL (boolean value)
|
|
#ssl = <None>
|
|
|
|
# Arguments passed to ssl.wrap_socket (dict value)
|
|
#ssl_options = <None>
|
|
|
|
# Set socket timeout in seconds for connection's socket (floating
|
|
# point value)
|
|
#socket_timeout = 0.25
|
|
|
|
# Set TCP_USER_TIMEOUT in seconds for connection's socket (floating
|
|
# point value)
|
|
#tcp_user_timeout = 0.25
|
|
|
|
# Set delay for reconnection to some host which has connection error
|
|
# (floating point value)
|
|
#host_connection_reconnect_delay = 0.25
|
|
|
|
# Maximum number of connections to keep queued. (integer value)
|
|
#pool_max_size = 10
|
|
|
|
# Maximum number of connections to create above `pool_max_size`.
|
|
# (integer value)
|
|
#pool_max_overflow = 0
|
|
|
|
# Default number of seconds to wait for a connections to available
|
|
# (integer value)
|
|
#pool_timeout = 30
|
|
|
|
# Lifetime of a connection (since creation) in seconds or None for no
|
|
# recycling. Expired connections are closed on acquire. (integer
|
|
# value)
|
|
#pool_recycle = 600
|
|
|
|
# Threshold at which inactive (since release) connections are
|
|
# considered stale in seconds or None for no staleness. Stale
|
|
# connections are closed on acquire. (integer value)
|
|
#pool_stale = 60
|
|
|
|
# Persist notification messages. (boolean value)
|
|
#notification_persistence = false
|
|
|
|
# Exchange name for for sending notifications (string value)
|
|
#default_notification_exchange = ${control_exchange}_notification
|
|
|
|
# Max number of not acknowledged message which RabbitMQ can send to
|
|
# notification listener. (integer value)
|
|
#notification_listener_prefetch_count = 100
|
|
|
|
# Reconnecting retry count in case of connectivity problem during
|
|
# sending notification, -1 means infinite retry. (integer value)
|
|
#default_notification_retry_attempts = -1
|
|
|
|
# Reconnecting retry delay in case of connectivity problem during
|
|
# sending notification message (floating point value)
|
|
#notification_retry_delay = 0.25
|
|
|
|
# Time to live for rpc queues without consumers in seconds. (integer
|
|
# value)
|
|
#rpc_queue_expiration = 60
|
|
|
|
# Exchange name for sending RPC messages (string value)
|
|
#default_rpc_exchange = ${control_exchange}_rpc
|
|
|
|
# Exchange name for receiving RPC replies (string value)
|
|
#rpc_reply_exchange = ${control_exchange}_rpc_reply
|
|
|
|
# Max number of not acknowledged message which RabbitMQ can send to
|
|
# rpc listener. (integer value)
|
|
#rpc_listener_prefetch_count = 100
|
|
|
|
# Max number of not acknowledged message which RabbitMQ can send to
|
|
# rpc reply listener. (integer value)
|
|
#rpc_reply_listener_prefetch_count = 100
|
|
|
|
# Reconnecting retry count in case of connectivity problem during
|
|
# sending reply. -1 means infinite retry during rpc_timeout (integer
|
|
# value)
|
|
#rpc_reply_retry_attempts = -1
|
|
|
|
# Reconnecting retry delay in case of connectivity problem during
|
|
# sending reply. (floating point value)
|
|
#rpc_reply_retry_delay = 0.25
|
|
|
|
# Reconnecting retry count in case of connectivity problem during
|
|
# sending RPC message, -1 means infinite retry. If actual retry
|
|
# attempts in not 0 the rpc request could be processed more then one
|
|
# time (integer value)
|
|
#default_rpc_retry_attempts = -1
|
|
|
|
# Reconnecting retry delay in case of connectivity problem during
|
|
# sending RPC message (floating point value)
|
|
#rpc_retry_delay = 0.25
|
|
|
|
|
|
[oslo_policy]
|
|
|
|
#
|
|
# From oslo.policy
|
|
#
|
|
|
|
# The JSON file that defines policies. (string value)
|
|
# Deprecated group/name - [DEFAULT]/policy_file
|
|
#policy_file = policy.json
|
|
|
|
# Default rule. Enforced when a requested rule is not found. (string
|
|
# value)
|
|
# Deprecated group/name - [DEFAULT]/policy_default_rule
|
|
#policy_default_rule = default
|
|
|
|
# Directories where policy configuration files are stored. They can be
|
|
# relative to any directory in the search path defined by the
|
|
# config_dir option, or absolute paths. The file defined by
|
|
# policy_file must exist for these directories to be searched.
|
|
# Missing or empty directories are ignored. (multi valued)
|
|
# Deprecated group/name - [DEFAULT]/policy_dirs
|
|
#policy_dirs = policy.d
|
|
|
|
|
|
[paste_deploy]
|
|
|
|
#
|
|
# From glance.registry
|
|
#
|
|
|
|
# Partial name of a pipeline in your paste configuration file with the
|
|
# service name removed. For example, if your paste section name is
|
|
# [pipeline:glance-api-keystone] use the value "keystone" (string
|
|
# value)
|
|
#flavor = <None>
|
|
|
|
# Name of the paste configuration file. (string value)
|
|
#config_file = <None>
|
|
|
|
|
|
[profiler]
|
|
|
|
#
|
|
# From glance.registry
|
|
#
|
|
|
|
# If False fully disable profiling feature. (boolean value)
|
|
#enabled = false
|
|
|
|
# If False doesn't trace SQL requests. (boolean value)
|
|
#trace_sqlalchemy = false
|
|
|
|
# Secret key to use to sign Glance API and Glance Registry services
|
|
# tracing messages. (string value)
|
|
#hmac_keys = SECRET_KEY
|