New, updated, and deprecated options in Liberty for OpenStack Compute
New options
Option = default value (Type) Help string
[DEFAULT] console_allowed_origins = (ListOpt) Allowed Origin header hostnames for access to console proxy servers
[DEFAULT] executor_thread_pool_size = 64 (IntOpt) Size of executor thread pool.
[DEFAULT] max_concurrent_live_migrations = 1 (IntOpt) Maximum number of live migrations to run concurrently. This limit is enforced to avoid outbound live migrations overwhelming the host/network and causing failures. It is not recommended that you change this unless you are very sure that doing so is safe and stable in your environment.
[DEFAULT] password = (StrOpt) Password for Redis server (optional).
[DEFAULT] port = 6379 (IntOpt) Use this port to connect to redis host.
[DEFAULT] rpc_conn_pool_size = 30 (IntOpt) Size of RPC connection pool.
[DEFAULT] rpc_poll_timeout = 1 (IntOpt) The default number of seconds that poll should wait. Poll raises timeout exception when timeout expired.
[DEFAULT] rpc_zmq_all_req_rep = True (BoolOpt) Use REQ/REP pattern for all methods CALL/CAST/FANOUT.
[DEFAULT] rpc_zmq_concurrency = eventlet (StrOpt) Type of concurrency used. Either "native" or "eventlet"
[DEFAULT] secure_proxy_ssl_header = None (StrOpt) The HTTP header used to determine the scheme for the original request, even if it was removed by an SSL terminating proxy. Typical value is "HTTP_X_FORWARDED_PROTO".
[DEFAULT] update_resources_interval = 0 (IntOpt) Interval in seconds for updating compute resources. A number less than 0 means to disable the task completely. Leaving this at the default of 0 will cause this to run at the default periodic interval. Setting it to any positive value will cause it to run at approximately that number of seconds.
[DEFAULT] use_rootwrap_daemon = False (BoolOpt) Start and use a daemon that can run the commands that need to be run with root privileges. This option is usually enabled on nodes that run nova compute processes
[DEFAULT] watch_log_file = False (BoolOpt) (Optional) Uses logging handler designed to watch file system. When log file is moved or removed this handler will open a new log file with specified path instantaneously. It makes sense only if log-file option is specified and Linux platform is used. This option is ignored if log_config_append is set.
[DEFAULT] zmq_use_broker = True (BoolOpt) Shows whether zmq-messaging uses broker or not.
[cors] allow_credentials = True (BoolOpt) Indicate that the actual request can include user credentials
[cors] allow_headers = Content-Type, Cache-Control, Content-Language, Expires, Last-Modified, Pragma (ListOpt) Indicate which header field names may be used during the actual request.
[cors] allow_methods = GET, POST, PUT, DELETE, OPTIONS (ListOpt) Indicate which methods can be used during the actual request.
[cors] allowed_origin = None (StrOpt) Indicate whether this resource may be shared with the domain received in the requests "origin" header.
[cors] expose_headers = Content-Type, Cache-Control, Content-Language, Expires, Last-Modified, Pragma (ListOpt) Indicate which headers are safe to expose to the API. Defaults to HTTP Simple Headers.
[cors] max_age = 3600 (IntOpt) Maximum cache age of CORS preflight requests.
[cors.subdomain] allow_credentials = True (BoolOpt) Indicate that the actual request can include user credentials
[cors.subdomain] allow_headers = Content-Type, Cache-Control, Content-Language, Expires, Last-Modified, Pragma (ListOpt) Indicate which header field names may be used during the actual request.
[cors.subdomain] allow_methods = GET, POST, PUT, DELETE, OPTIONS (ListOpt) Indicate which methods can be used during the actual request.
[cors.subdomain] allowed_origin = None (StrOpt) Indicate whether this resource may be shared with the domain received in the requests "origin" header.
[cors.subdomain] expose_headers = Content-Type, Cache-Control, Content-Language, Expires, Last-Modified, Pragma (ListOpt) Indicate which headers are safe to expose to the API. Defaults to HTTP Simple Headers.
[cors.subdomain] max_age = 3600 (IntOpt) Maximum cache age of CORS preflight requests.
[hyperv] power_state_check_timeframe = 60 (IntOpt) The timeframe to be checked for instance power state changes.
[hyperv] power_state_event_polling_interval = 2 (IntOpt) Instance power state change event polling frequency.
[keystone_authtoken] region_name = None (StrOpt) The region in which the identity server can be found.
[libvirt] live_migration_completion_timeout = 800 (IntOpt) Time to wait, in seconds, for migration to successfully complete transferring data before aborting the operation. Value is per GiB of guest RAM + disk to be transferred, with lower bound of a minimum of 2 GiB. Should usually be larger than downtime delay * downtime steps. Set to 0 to disable timeouts.
[libvirt] live_migration_downtime = 500 (IntOpt) Maximum permitted downtime, in milliseconds, for live migration switchover. Will be rounded up to a minimum of 100ms. Use a large value if guest liveness is unimportant.
[libvirt] live_migration_downtime_delay = 75 (IntOpt) Time to wait, in seconds, between each step increase of the migration downtime. Minimum delay is 10 seconds. Value is per GiB of guest RAM + disk to be transferred, with lower bound of a minimum of 2 GiB per device
[libvirt] live_migration_downtime_steps = 10 (IntOpt) Number of incremental steps to reach max downtime value. Will be rounded up to a minimum of 3 steps
[libvirt] live_migration_progress_timeout = 150 (IntOpt) Time to wait, in seconds, for migration to make forward progress in transferring data before aborting the operation. Set to 0 to disable timeouts.
[libvirt] remote_filesystem_transport = ssh (StrOpt) Use ssh or rsync transport for creating, copying, removing files on the remote host.
[mks] enabled = False (BoolOpt) Enable MKS related features
[mks] mksproxy_base_url = http://127.0.0.1:6090/ (StrOpt) Location of MKS web console proxy, in the form "http://127.0.0.1:6090/"
[osapi_v21] enabled = True (BoolOpt) DEPRECATED: Whether the V2.1 API is enabled or not. This option will be removed in the near future.
[osapi_v21] extensions_blacklist = (ListOpt) DEPRECATED: A list of v2.1 API extensions to never load. Specify the extension aliases here. This option will be removed in the near future. After that point you have to run all of the API.
[osapi_v21] extensions_whitelist = (ListOpt) DEPRECATED: If the list is not empty then a v2.1 API extension will only be loaded if it exists in this list. Specify the extension aliases here. This option will be removed in the near future. After that point you have to run all of the API.
[oslo_messaging_amqp] password = (StrOpt) Password for message broker authentication
[oslo_messaging_amqp] sasl_config_dir = (StrOpt) Path to directory that contains the SASL configuration
[oslo_messaging_amqp] sasl_config_name = (StrOpt) Name of configuration file (without .conf suffix)
[oslo_messaging_amqp] sasl_mechanisms = (StrOpt) Space separated list of acceptable SASL mechanisms
[oslo_messaging_amqp] username = (StrOpt) User name for message broker authentication
[oslo_messaging_qpid] send_single_reply = False (BoolOpt) Send a single AMQP reply to call message. The current behaviour since oslo-incubator is to send two AMQP replies - first one with the payload, a second one to ensure the other have finish to send the payload. We are going to remove it in the N release, but we must keep backward compatible at the same time. This option provides such compatibility - it defaults to False in Liberty and can be turned on for early adopters with a new installations or for testing. Please note, that this option will be removed in the Mitaka release.
[oslo_messaging_rabbit] kombu_reconnect_timeout = 60 (IntOpt) How long to wait before considering a reconnect attempt to have failed. This value should not be longer than rpc_response_timeout.
[oslo_messaging_rabbit] send_single_reply = False (BoolOpt) Send a single AMQP reply to call message. The current behaviour since oslo-incubator is to send two AMQP replies - first one with the payload, a second one to ensure the other have finish to send the payload. We are going to remove it in the N release, but we must keep backward compatible at the same time. This option provides such compatibility - it defaults to False in Liberty and can be turned on for early adopters with a new installations or for testing. Please note, that this option will be removed in the Mitaka release.
[oslo_middleware] secure_proxy_ssl_header = X-Forwarded-Proto (StrOpt) The HTTP Header that will be used to determine what the original request protocol scheme was, even if it was hidden by an SSL termination proxy.
[oslo_versionedobjects] fatal_exception_format_errors = False (BoolOpt) Make exception message format errors fatal
[vmware] ca_file = None (StrOpt) Specify a CA bundle file to use in verifying the vCenter server certificate.
[vmware] console_delay_seconds = None (IntOpt) Set this value if affected by an increased network latency causing repeated characters when typing in a remote console.
[vmware] insecure = False (BoolOpt) If true, the vCenter server certificate is not verified. If false, then the default CA truststore is used for verification. This option is ignored if "ca_file" is set.
[vmware] serial_port_proxy_uri = None (StrOpt) Identifies a proxy service that provides network access to the serial_port_service_uri. This option is ignored if serial_port_service_uri is not specified.
[vmware] serial_port_service_uri = None (StrOpt) Identifies the remote system that serial port traffic will be sent to. If this is not set, no serial ports will be added to the created VMs.
[vnc] enabled = True (BoolOpt) Enable VNC related features
[vnc] keymap = en-us (StrOpt) Keymap for VNC
[vnc] novncproxy_base_url = http://127.0.0.1:6080/vnc_auto.html (StrOpt) Location of VNC console proxy, in the form "http://127.0.0.1:6080/vnc_auto.html"
[vnc] vncserver_listen = 127.0.0.1 (StrOpt) IP address on which instance vncservers should listen
[vnc] vncserver_proxyclient_address = 127.0.0.1 (StrOpt) The address to which proxy clients (like nova-xvpvncproxy) should connect
[vnc] xvpvncproxy_base_url = http://127.0.0.1:6081/console (StrOpt) Location of nova xvp VNC console proxy, in the form "http://127.0.0.1:6081/console"
[workarounds] handle_virt_lifecycle_events = True (BoolOpt) Whether or not to handle events raised from the compute driver's 'emit_event' method. These are lifecycle events raised from compute drivers that implement the method. An example of a lifecycle event is an instance starting or stopping. If the instance is going through task state changes due to an API operation, like resize, the events are ignored. However, this is an advanced feature which allows the hypervisor to signal to the compute service that an unexpected state change has occurred in an instance and the instance can be shutdown automatically - which can inherently race in reboot operations or when the compute service or host is rebooted, either planned or due to an unexpected outage. Care should be taken when using this and sync_power_state_interval is negative since then if any instances are out of sync between the hypervisor and the Nova database they will have to be synchronized manually. See https://bugs.launchpad.net/bugs/1444630
New default values
Option Previous default value New default value
[DEFAULT] compute_available_monitors ['nova.compute.monitors.all_monitors'] None
[DEFAULT] cpu_allocation_ratio 16.0 0.0
[DEFAULT] default_log_levels amqp=WARN, amqplib=WARN, boto=WARN, qpid=WARN, sqlalchemy=WARN, suds=INFO, oslo.messaging=INFO, iso8601=WARN, requests.packages.urllib3.connectionpool=WARN, urllib3.connectionpool=WARN, websocket=WARN, requests.packages.urllib3.util.retry=WARN, urllib3.util.retry=WARN, keystonemiddleware=WARN, routes.middleware=WARN, stevedore=WARN amqp=WARN, amqplib=WARN, boto=WARN, qpid=WARN, sqlalchemy=WARN, suds=INFO, oslo.messaging=INFO, iso8601=WARN, requests.packages.urllib3.connectionpool=WARN, urllib3.connectionpool=WARN, websocket=WARN, requests.packages.urllib3.util.retry=WARN, urllib3.util.retry=WARN, keystonemiddleware=WARN, routes.middleware=WARN, stevedore=WARN, taskflow=WARN
[DEFAULT] logging_exception_prefix %(asctime)s.%(msecs)03d %(process)d TRACE %(name)s %(instance)s %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
[DEFAULT] osapi_compute_extension ['nova.api.openstack.compute.contrib.standard_extensions'] ['nova.api.openstack.compute.legacy_v2.contrib.standard_extensions']
[DEFAULT] ram_allocation_ratio 1.5 0.0
[DEFAULT] rpc_zmq_matchmaker local redis
[DEFAULT] scheduler_default_filters RetryFilter, AvailabilityZoneFilter, RamFilter, ComputeFilter, ComputeCapabilitiesFilter, ImagePropertiesFilter, ServerGroupAntiAffinityFilter, ServerGroupAffinityFilter RetryFilter, AvailabilityZoneFilter, RamFilter, DiskFilter, ComputeFilter, ComputeCapabilitiesFilter, ImagePropertiesFilter, ServerGroupAntiAffinityFilter, ServerGroupAffinityFilter
[DEFAULT] use_syslog_rfc_format False True
[DEFAULT] verbose False True
[cells] mute_weight_multiplier -10.0 -10000.0
[libvirt] remove_unused_kernels False True
[matchmaker_redis] password None
[oslo_messaging_rabbit] heartbeat_timeout_threshold 0 60
Deprecated options
Deprecated option New Option
[DEFAULT] network_device_mtu None
[DEFAULT] vnc_keymap [vnc] keymap
[osapi_v21] extensions_whitelist None
[ironic] admin_auth_token None
[DEFAULT] vnc_enabled [vnc] enabled
[DEFAULT] use_syslog None
[DEFAULT] xvpvncproxy_base_url [vnc] xvpvncproxy_base_url
[ironic] client_log_level None
[neutron] admin_username None
[DEFAULT] ssl_ca_file [ssl] ca_file
[neutron] auth_strategy None
[osapi_v21] enabled None
[DEFAULT] novncproxy_base_url [vnc] novncproxy_base_url
[DEFAULT] compute_available_monitors None
[neutron] admin_user_id None
[neutron] admin_tenant_id None
[DEFAULT] ssl_cert_file [ssl] cert_file
[DEFAULT] log_format None
[DEFAULT] vncserver_proxyclient_address [vnc] vncserver_proxyclient_address
[osapi_v21] extensions_blacklist None
[workarounds] destroy_after_evacuate None
[neutron] admin_tenant_name None
[DEFAULT] osapi_compute_ext_list None
[DEFAULT] rpc_thread_pool_size [DEFAULT] executor_thread_pool_size
[DEFAULT] vncserver_listen [vnc] vncserver_listen
[neutron] admin_password None
[DEFAULT] share_dhcp_address None
[DEFAULT] ssl_key_file [ssl] key_file
[libvirt] remove_unused_kernels None
[neutron] admin_auth_url None