16a821e00d
Presently, the wsgi server allows persist connections. Hence even after the response is sent to the client, it doesn't close the client socket connection. Because of this problem, the green thread is not released back to the pool. In order to close the client socket connection explicitly after the response is sent and read successfully by the client, you simply have to set keepalive to False when you create a wsgi server. DocImpact: Added http_keepalive option (default=True). SecurityImpact Closes-Bug: #1361360 Change-Id: I93aaca24935a4f3096210233097dd6b8c5440176
263 lines
8.1 KiB
Plaintext
263 lines
8.1 KiB
Plaintext
[DEFAULT]
|
|
# Show more verbose log output (sets INFO log level output)
|
|
#verbose = False
|
|
|
|
# Show debugging output in logs (sets DEBUG log level output)
|
|
#debug = False
|
|
|
|
# Address to bind the registry server
|
|
bind_host = 0.0.0.0
|
|
|
|
# Port the bind the registry server to
|
|
bind_port = 9191
|
|
|
|
# Log to this file. Make sure you do not set the same log file for both the API
|
|
# and registry servers!
|
|
#
|
|
# If `log_file` is omitted and `use_syslog` is false, then log messages are
|
|
# sent to stdout as a fallback.
|
|
log_file = /var/log/glance/registry.log
|
|
|
|
# Backlog requests when creating socket
|
|
backlog = 4096
|
|
|
|
# TCP_KEEPIDLE value in seconds when creating socket.
|
|
# Not supported on OS X.
|
|
#tcp_keepidle = 600
|
|
|
|
# API to use for accessing data. Default value points to sqlalchemy
|
|
# package.
|
|
#data_api = glance.db.sqlalchemy.api
|
|
|
|
# The number of child process workers that will be
|
|
# created to service Registry requests. The default will be
|
|
# equal to the number of CPUs available. (integer value)
|
|
#workers = None
|
|
|
|
# Enable Registry API versions individually or simultaneously
|
|
#enable_v1_registry = True
|
|
#enable_v2_registry = True
|
|
|
|
# Limit the api to return `param_limit_max` items in a call to a container. If
|
|
# a larger `limit` query param is provided, it will be reduced to this value.
|
|
api_limit_max = 1000
|
|
|
|
# If a `limit` query param is not provided in an api request, it will
|
|
# default to `limit_param_default`
|
|
limit_param_default = 25
|
|
|
|
# Role used to identify an authenticated user as administrator
|
|
#admin_role = admin
|
|
|
|
# Enable DEBUG log messages from sqlalchemy which prints every database
|
|
# query and response.
|
|
# Default: False
|
|
#sqlalchemy_debug = True
|
|
|
|
# http_keepalive option. If False, server will return the header
|
|
# "Connection: close", If True, server will return "Connection: Keep-Alive"
|
|
# in its responses. In order to close the client socket connection
|
|
# explicitly after the response is sent and read successfully by the client,
|
|
# you simply have to set this option to False when you create a wsgi server.
|
|
#http_keepalive = True
|
|
|
|
# ================= Syslog Options ============================
|
|
|
|
# Send logs to syslog (/dev/log) instead of to file specified
|
|
# by `log_file`
|
|
#use_syslog = False
|
|
|
|
# Facility to use. If unset defaults to LOG_USER.
|
|
#syslog_log_facility = LOG_LOCAL1
|
|
|
|
# ================= SSL Options ===============================
|
|
|
|
# Certificate file to use when starting registry server securely
|
|
#cert_file = /path/to/certfile
|
|
|
|
# Private key file to use when starting registry server securely
|
|
#key_file = /path/to/keyfile
|
|
|
|
# CA certificate file to use to verify connecting clients
|
|
#ca_file = /path/to/cafile
|
|
|
|
# ============ Notification System Options =====================
|
|
|
|
# Driver or drivers to handle sending notifications. Set to
|
|
# 'messaging' to send notifications to a message queue.
|
|
# notification_driver = noop
|
|
|
|
# Default publisher_id for outgoing notifications.
|
|
# default_publisher_id = image.localhost
|
|
|
|
# Messaging driver used for 'messaging' notifications driver
|
|
# rpc_backend = 'rabbit'
|
|
|
|
# Configuration options if sending notifications via rabbitmq (these are
|
|
# the defaults)
|
|
rabbit_host = localhost
|
|
rabbit_port = 5672
|
|
rabbit_use_ssl = false
|
|
rabbit_userid = guest
|
|
rabbit_password = guest
|
|
rabbit_virtual_host = /
|
|
rabbit_notification_exchange = glance
|
|
rabbit_notification_topic = notifications
|
|
rabbit_durable_queues = False
|
|
|
|
# Configuration options if sending notifications via Qpid (these are
|
|
# the defaults)
|
|
qpid_notification_exchange = glance
|
|
qpid_notification_topic = notifications
|
|
qpid_hostname = localhost
|
|
qpid_port = 5672
|
|
qpid_username =
|
|
qpid_password =
|
|
qpid_sasl_mechanisms =
|
|
qpid_reconnect_timeout = 0
|
|
qpid_reconnect_limit = 0
|
|
qpid_reconnect_interval_min = 0
|
|
qpid_reconnect_interval_max = 0
|
|
qpid_reconnect_interval = 0
|
|
qpid_heartbeat = 5
|
|
# Set to 'ssl' to enable SSL
|
|
qpid_protocol = tcp
|
|
qpid_tcp_nodelay = True
|
|
|
|
|
|
# =============== Policy Options ==============================
|
|
|
|
# The JSON file that defines policies.
|
|
#policy_file = policy.json
|
|
|
|
# Default rule. Enforced when a requested rule is not found.
|
|
#policy_default_rule = default
|
|
|
|
# Directories where policy configuration files are stored.
|
|
# They can be relative to any directory in the search path
|
|
# defined by the config_dir option, or absolute paths.
|
|
# The file defined by policy_file must exist for these
|
|
# directories to be searched.
|
|
#policy_dirs = policy.d
|
|
|
|
# ================= Database Options ==========================
|
|
|
|
[database]
|
|
# The file name to use with SQLite (string value)
|
|
#sqlite_db = glance.sqlite
|
|
|
|
# If True, SQLite uses synchronous mode (boolean value)
|
|
#sqlite_synchronous = True
|
|
|
|
# The backend to use for db (string value)
|
|
# Deprecated group/name - [DEFAULT]/db_backend
|
|
#backend = sqlalchemy
|
|
|
|
# The SQLAlchemy connection string used to connect to the
|
|
# database (string value)
|
|
# Deprecated group/name - [DEFAULT]/sql_connection
|
|
# Deprecated group/name - [DATABASE]/sql_connection
|
|
# Deprecated group/name - [sql]/connection
|
|
#connection = <None>
|
|
|
|
# The SQL mode to be used for MySQL sessions. This option,
|
|
# including the default, overrides any server-set SQL mode. To
|
|
# use whatever SQL mode is set by the server configuration,
|
|
# set this to no value. Example: mysql_sql_mode= (string
|
|
# value)
|
|
#mysql_sql_mode = TRADITIONAL
|
|
|
|
# Timeout before idle sql connections are reaped (integer
|
|
# value)
|
|
# Deprecated group/name - [DEFAULT]/sql_idle_timeout
|
|
# Deprecated group/name - [DATABASE]/sql_idle_timeout
|
|
# Deprecated group/name - [sql]/idle_timeout
|
|
#idle_timeout = 3600
|
|
|
|
# Minimum number of SQL connections to keep open in a pool
|
|
# (integer value)
|
|
# Deprecated group/name - [DEFAULT]/sql_min_pool_size
|
|
# Deprecated group/name - [DATABASE]/sql_min_pool_size
|
|
#min_pool_size = 1
|
|
|
|
# Maximum number of SQL connections to keep open in a pool
|
|
# (integer value)
|
|
# Deprecated group/name - [DEFAULT]/sql_max_pool_size
|
|
# Deprecated group/name - [DATABASE]/sql_max_pool_size
|
|
#max_pool_size = <None>
|
|
|
|
# Maximum db connection retries during startup. (setting -1
|
|
# implies an infinite retry count) (integer value)
|
|
# Deprecated group/name - [DEFAULT]/sql_max_retries
|
|
# Deprecated group/name - [DATABASE]/sql_max_retries
|
|
#max_retries = 10
|
|
|
|
# Interval between retries of opening a sql connection
|
|
# (integer value)
|
|
# Deprecated group/name - [DEFAULT]/sql_retry_interval
|
|
# Deprecated group/name - [DATABASE]/reconnect_interval
|
|
#retry_interval = 10
|
|
|
|
# If set, use this value for max_overflow with sqlalchemy
|
|
# (integer value)
|
|
# Deprecated group/name - [DEFAULT]/sql_max_overflow
|
|
# Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
|
|
#max_overflow = <None>
|
|
|
|
# Verbosity of SQL debugging information. 0=None,
|
|
# 100=Everything (integer value)
|
|
# Deprecated group/name - [DEFAULT]/sql_connection_debug
|
|
#connection_debug = 0
|
|
|
|
# Add python stack traces to SQL as comment strings (boolean
|
|
# value)
|
|
# Deprecated group/name - [DEFAULT]/sql_connection_trace
|
|
#connection_trace = False
|
|
|
|
# If set, use this value for pool_timeout with sqlalchemy
|
|
# (integer value)
|
|
# Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
|
|
#pool_timeout = <None>
|
|
|
|
# Enable the experimental use of database reconnect on
|
|
# connection lost (boolean value)
|
|
#use_db_reconnect = False
|
|
|
|
# seconds between db connection retries (integer value)
|
|
#db_retry_interval = 1
|
|
|
|
# Whether to increase interval between db connection retries,
|
|
# up to db_max_retry_interval (boolean value)
|
|
#db_inc_retry_interval = True
|
|
|
|
# max seconds between db connection retries, if
|
|
# db_inc_retry_interval is enabled (integer value)
|
|
#db_max_retry_interval = 10
|
|
|
|
# maximum db connection retries before error is raised.
|
|
# (setting -1 implies an infinite retry count) (integer value)
|
|
#db_max_retries = 20
|
|
|
|
[keystone_authtoken]
|
|
identity_uri = http://127.0.0.1:35357
|
|
admin_tenant_name = %SERVICE_TENANT_NAME%
|
|
admin_user = %SERVICE_USER%
|
|
admin_password = %SERVICE_PASSWORD%
|
|
|
|
[paste_deploy]
|
|
# Name of the paste configuration file that defines the available pipelines
|
|
#config_file = glance-registry-paste.ini
|
|
|
|
# Partial name of a pipeline in your paste configuration file with the
|
|
# service name removed. For example, if your paste section name is
|
|
# [pipeline:glance-registry-keystone], you would configure the flavor below
|
|
# as 'keystone'.
|
|
#flavor=
|
|
|
|
[profiler]
|
|
# If False fully disable profiling feature.
|
|
#enabled = False
|
|
|
|
# If False doesn't trace SQL requests.
|
|
#trace_sqlalchemy = False
|