blob: 6af000b5295ee342c47fccb6a4ff3286b40e8467 [file] [log] [blame]
Petr Jediný1c34abb2017-06-07 14:34:13 +02001{%- from "ceilometer/map.jinja" import agent with context %}
2[DEFAULT]
3
4#
5# From oslo.log
6#
7
8# If set to true, the logging level will be set to DEBUG instead of the default
9# INFO level. (boolean value)
10#debug = false
11debug=False
12
13# If set to false, the logging level will be set to WARNING instead of the
14# default INFO level. (boolean value)
15# This option is deprecated for removal.
16# Its value may be silently ignored in the future.
17#verbose = true
18verbose=True
19
20# The name of a logging configuration file. This file is appended to any
21# existing logging configuration files. For details about logging configuration
22# files, see the Python logging module documentation. Note that when logging
23# configuration files are used then all logging configuration is set in the
24# configuration file and other logging configuration options are ignored (for
25# example, logging_context_format_string). (string value)
26# Deprecated group/name - [DEFAULT]/log_config
27#log_config_append = <None>
28
29# Defines the format string for %%(asctime)s in log records. Default:
30# %(default)s . This option is ignored if log_config_append is set. (string
31# value)
32#log_date_format = %Y-%m-%d %H:%M:%S
33
34# (Optional) Name of log file to send logging output to. If no default is set,
35# logging will go to stderr as defined by use_stderr. This option is ignored if
36# log_config_append is set. (string value)
37# Deprecated group/name - [DEFAULT]/logfile
38#log_file = <None>
39
40# (Optional) The base directory used for relative log_file paths. This option
41# is ignored if log_config_append is set. (string value)
42# Deprecated group/name - [DEFAULT]/logdir
43#log_dir = <None>
44
45# Uses logging handler designed to watch file system. When log file is moved or
46# removed this handler will open a new log file with specified path
47# instantaneously. It makes sense only if log_file option is specified and
48# Linux platform is used. This option is ignored if log_config_append is set.
49# (boolean value)
50#watch_log_file = false
51
52# Use syslog for logging. Existing syslog format is DEPRECATED and will be
53# changed later to honor RFC5424. This option is ignored if log_config_append
54# is set. (boolean value)
55#use_syslog = false
56
57# Syslog facility to receive log lines. This option is ignored if
58# log_config_append is set. (string value)
59#syslog_log_facility = LOG_USER
60
61# Log output to standard error. This option is ignored if log_config_append is
62# set. (boolean value)
63#use_stderr = true
64
65# Format string to use for log messages with context. (string value)
66#logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
67
68# Format string to use for log messages when context is undefined. (string
69# value)
70#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
71
72# Additional data to append to log message when logging level for the message
73# is DEBUG. (string value)
74#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
75
76# Prefix each line of exception output with this format. (string value)
77#logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
78
79# Defines the format string for %(user_identity)s that is used in
80# logging_context_format_string. (string value)
81#logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
82
83# List of package logging levels in logger=LEVEL pairs. This option is ignored
84# if log_config_append is set. (list value)
85#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
86
87# Enables or disables publication of error events. (boolean value)
88#publish_errors = false
89
90# The format for an instance that is passed with the log message. (string
91# value)
92#instance_format = "[instance: %(uuid)s] "
93
94# The format for an instance UUID that is passed with the log message. (string
95# value)
96#instance_uuid_format = "[instance: %(uuid)s] "
97
98# Enables or disables fatal status of deprecations. (boolean value)
99#fatal_deprecations = false
100
101#
102# From oslo.messaging
103#
104
105# Size of RPC connection pool. (integer value)
106# Deprecated group/name - [DEFAULT]/rpc_conn_pool_size
107#rpc_conn_pool_size = 30
108
109# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
110# The "host" option should point or resolve to this address. (string value)
111#rpc_zmq_bind_address = *
112
113# MatchMaker driver. (string value)
114# Allowed values: redis, dummy
115#rpc_zmq_matchmaker = redis
116
117# Type of concurrency used. Either "native" or "eventlet" (string value)
118#rpc_zmq_concurrency = eventlet
119
120# Number of ZeroMQ contexts, defaults to 1. (integer value)
121#rpc_zmq_contexts = 1
122
123# Maximum number of ingress messages to locally buffer per topic. Default is
124# unlimited. (integer value)
125#rpc_zmq_topic_backlog = <None>
126
127# Directory for holding IPC sockets. (string value)
128#rpc_zmq_ipc_dir = /var/run/openstack
129
130# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
131# "host" option, if running Nova. (string value)
132#rpc_zmq_host = localhost
133
134# Seconds to wait before a cast expires (TTL). The default value of -1
135# specifies an infinite linger period. The value of 0 specifies no linger
136# period. Pending messages shall be discarded immediately when the socket is
137# closed. Only supported by impl_zmq. (integer value)
138#rpc_cast_timeout = -1
139
140# The default number of seconds that poll should wait. Poll raises timeout
141# exception when timeout expired. (integer value)
142#rpc_poll_timeout = 1
143
144# Expiration timeout in seconds of a name service record about existing target
145# ( < 0 means no timeout). (integer value)
146#zmq_target_expire = 120
147
148# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
149# value)
150#use_pub_sub = true
151
152# Minimal port number for random ports range. (port value)
153# Minimum value: 0
154# Maximum value: 65535
155#rpc_zmq_min_port = 49152
156
157# Maximal port number for random ports range. (integer value)
158# Minimum value: 1
159# Maximum value: 65536
160#rpc_zmq_max_port = 65536
161
162# Number of retries to find free port number before fail with ZMQBindError.
163# (integer value)
164#rpc_zmq_bind_port_retries = 100
165
166# Size of executor thread pool. (integer value)
167# Deprecated group/name - [DEFAULT]/rpc_thread_pool_size
168#executor_thread_pool_size = 64
169{%- if agent.message_queue.rpc_thread_pool_size is defined %}
170executor_thread_pool_size = {{ agent.message_queue.rpc_thread_pool_size }}
171{%- endif %}
172
173# Seconds to wait for a response from a call. (integer value)
174#rpc_response_timeout = 60
175
176# A URL representing the messaging driver to use and its full configuration. If
177# not set, we fall back to the rpc_backend option and driver specific
178# configuration. (string value)
179#transport_url = <None>
180{%- if agent.message_queue.members is defined %}
181transport_url = rabbit://{% for member in agent.message_queue.members -%}
182 {{ agent.message_queue.user }}:{{ agent.message_queue.password }}@{{ member.host }}:{{ member.get('port', 5672) }}
183 {%- if not loop.last -%},{%- endif -%}
184 {%- endfor -%}
185 /{{ agent.message_queue.virtual_host }}
186{%- else %}
187transport_url = rabbit://{{ agent.message_queue.user }}:{{ agent.message_queue.password }}@{{ agent.message_queue.host }}:{{ agent.message_queue.port }}/{{ agent.message_queue.virtual_host }}
188{%- endif %}
189
190# The messaging driver to use, defaults to rabbit. Other drivers include amqp
191# and zmq. (string value)
192#rpc_backend = rabbit
193rpc_backend = rabbit
194
195# The default exchange under which topics are scoped. May be overridden by an
196# exchange name specified in the transport_url option. (string value)
197#control_exchange = openstack
198
199#
200# From oslo.service.service
201#
202
203# Enable eventlet backdoor. Acceptable values are 0, <port>, and
204# <start>:<end>, where 0 results in listening on a random tcp port number;
205# <port> results in listening on the specified port number (and not enabling
206# backdoor if that port is in use); and <start>:<end> results in listening on
207# the smallest unused port number within the specified range of port numbers.
208# The chosen port is displayed in the service's log file. (string value)
209#backdoor_port = <None>
210
211# Enable eventlet backdoor, using the provided path as a unix socket that can
212# receive connections. This option is mutually exclusive with 'backdoor_port'
213# in that only one should be provided. If both are provided then the existence
214# of this option overrides the usage of that option. (string value)
215#backdoor_socket = <None>
216
217# Enables or disables logging values of all registered options when starting a
218# service (at DEBUG level). (boolean value)
219#log_options = true
220
221# Specify a timeout after which a gracefully shutdown server will exit. Zero
222# value means endless wait. (integer value)
223#graceful_shutdown_timeout = 60
224
225
226[cors]
227
228#
229# From oslo.middleware.cors
230#
231
232# Indicate whether this resource may be shared with the domain received in the
233# requests "origin" header. (list value)
234#allowed_origin = <None>
235
236# Indicate that the actual request can include user credentials (boolean value)
237#allow_credentials = true
238
239# Indicate which headers are safe to expose to the API. Defaults to HTTP Simple
240# Headers. (list value)
241#expose_headers = Content-Type,Cache-Control,Content-Language,Expires,Last-Modified,Pragma
242
243# Maximum cache age of CORS preflight requests. (integer value)
244#max_age = 3600
245
246# Indicate which methods can be used during the actual request. (list value)
247#allow_methods = GET,POST,PUT,DELETE,OPTIONS
248
249# Indicate which header field names may be used during the actual request.
250# (list value)
251#allow_headers = Content-Type,Cache-Control,Content-Language,Expires,Last-Modified,Pragma
252
253
254[cors.subdomain]
255
256#
257# From oslo.middleware.cors
258#
259
260# Indicate whether this resource may be shared with the domain received in the
261# requests "origin" header. (list value)
262#allowed_origin = <None>
263
264# Indicate that the actual request can include user credentials (boolean value)
265#allow_credentials = true
266
267# Indicate which headers are safe to expose to the API. Defaults to HTTP Simple
268# Headers. (list value)
269#expose_headers = Content-Type,Cache-Control,Content-Language,Expires,Last-Modified,Pragma
270
271# Maximum cache age of CORS preflight requests. (integer value)
272#max_age = 3600
273
274# Indicate which methods can be used during the actual request. (list value)
275#allow_methods = GET,POST,PUT,DELETE,OPTIONS
276
277# Indicate which header field names may be used during the actual request.
278# (list value)
279#allow_headers = Content-Type,Cache-Control,Content-Language,Expires,Last-Modified,Pragma
280
281
282[database]
283
284#
285# From oslo.db
286#
287
288# The file name to use with SQLite. (string value)
289# Deprecated group/name - [DEFAULT]/sqlite_db
290#sqlite_db = oslo.sqlite
291
292# If True, SQLite uses synchronous mode. (boolean value)
293# Deprecated group/name - [DEFAULT]/sqlite_synchronous
294#sqlite_synchronous = true
295
296# The back end to use for the database. (string value)
297# Deprecated group/name - [DEFAULT]/db_backend
298#backend = sqlalchemy
299
300# The SQLAlchemy connection string to use to connect to the database. (string
301# value)
302# Deprecated group/name - [DEFAULT]/sql_connection
303# Deprecated group/name - [DATABASE]/sql_connection
304# Deprecated group/name - [sql]/connection
305#connection = <None>
306
307# The SQLAlchemy connection string to use to connect to the slave database.
308# (string value)
309#slave_connection = <None>
310
311# The SQL mode to be used for MySQL sessions. This option, including the
312# default, overrides any server-set SQL mode. To use whatever SQL mode is set
313# by the server configuration, set this to no value. Example: mysql_sql_mode=
314# (string value)
315#mysql_sql_mode = TRADITIONAL
316
317# Timeout before idle SQL connections are reaped. (integer value)
318# Deprecated group/name - [DEFAULT]/sql_idle_timeout
319# Deprecated group/name - [DATABASE]/sql_idle_timeout
320# Deprecated group/name - [sql]/idle_timeout
321#idle_timeout = 3600
322
323# Minimum number of SQL connections to keep open in a pool. (integer value)
324# Deprecated group/name - [DEFAULT]/sql_min_pool_size
325# Deprecated group/name - [DATABASE]/sql_min_pool_size
326#min_pool_size = 1
327
328# Maximum number of SQL connections to keep open in a pool. (integer value)
329# Deprecated group/name - [DEFAULT]/sql_max_pool_size
330# Deprecated group/name - [DATABASE]/sql_max_pool_size
331#max_pool_size = <None>
332
333# Maximum number of database connection retries during startup. Set to -1 to
334# specify an infinite retry count. (integer value)
335# Deprecated group/name - [DEFAULT]/sql_max_retries
336# Deprecated group/name - [DATABASE]/sql_max_retries
337#max_retries = 10
338
339# Interval between retries of opening a SQL connection. (integer value)
340# Deprecated group/name - [DEFAULT]/sql_retry_interval
341# Deprecated group/name - [DATABASE]/reconnect_interval
342#retry_interval = 10
343
344# If set, use this value for max_overflow with SQLAlchemy. (integer value)
345# Deprecated group/name - [DEFAULT]/sql_max_overflow
346# Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
347#max_overflow = 50
348
349# Verbosity of SQL debugging information: 0=None, 100=Everything. (integer
350# value)
351# Deprecated group/name - [DEFAULT]/sql_connection_debug
352#connection_debug = 0
353
354# Add Python stack traces to SQL as comment strings. (boolean value)
355# Deprecated group/name - [DEFAULT]/sql_connection_trace
356#connection_trace = false
357
358# If set, use this value for pool_timeout with SQLAlchemy. (integer value)
359# Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
360#pool_timeout = <None>
361
362# Enable the experimental use of database reconnect on connection lost.
363# (boolean value)
364#use_db_reconnect = false
365
366# Seconds between retries of a database transaction. (integer value)
367#db_retry_interval = 1
368
369# If True, increases the interval between retries of a database operation up to
370# db_max_retry_interval. (boolean value)
371#db_inc_retry_interval = true
372
373# If db_inc_retry_interval is set, the maximum seconds between retries of a
374# database operation. (integer value)
375#db_max_retry_interval = 10
376
377# Maximum retries in case of connection error or deadlock error before error is
378# raised. Set to -1 to specify an infinite retry count. (integer value)
379#db_max_retries = 20
380
381
382[keystone_authtoken]
383
384#
385# From keystonemiddleware.auth_token
386#
387
388auth_type = password
389user_domain_id = {{ agent.identity.get('domain', 'default') }}
390project_domain_id = {{ agent.identity.get('domain', 'default') }}
391project_name = {{ agent.identity.tenant }}
392username = {{ agent.identity.user }}
393password = {{ agent.identity.password }}
394auth_uri=http://{{ agent.identity.host }}:5000
395auth_url=http://{{ agent.identity.host }}:35357
396token_cache_time = -1
397interface=internalURL
398
399{%- if agent.cache is defined %}
Mykyta Karpin72d0b992018-02-16 12:01:11 +0200400memcached_servers={%- for member in agent.cache.members %}{{ member.host }}:11211{% if not loop.last %},{% endif %}{%- endfor %}
Petr Jediný1c34abb2017-06-07 14:34:13 +0200401{%- endif %}
402
403# Complete public Identity API endpoint. (string value)
404#auth_uri = <None>
405
406# API version of the admin Identity API endpoint. (string value)
407#auth_version = <None>
408
409# Do not handle authorization requests within the middleware, but delegate the
410# authorization decision to downstream WSGI components. (boolean value)
411#delay_auth_decision = false
412
413# Request timeout value for communicating with Identity API server. (integer
414# value)
415#http_connect_timeout = <None>
416
417# How many times are we trying to reconnect when communicating with Identity
418# API Server. (integer value)
419#http_request_max_retries = 3
420
421# Env key for the swift cache. (string value)
422#cache = <None>
423
424# Required if identity server requires client certificate (string value)
425#certfile = <None>
426
427# Required if identity server requires client certificate (string value)
428#keyfile = <None>
429
430# A PEM encoded Certificate Authority to use when verifying HTTPs connections.
431# Defaults to system CAs. (string value)
432#cafile = <None>
433
434# Verify HTTPS connections. (boolean value)
435#insecure = false
436
437# The region in which the identity server can be found. (string value)
438#region_name = <None>
439
440# Directory used to cache files related to PKI tokens. (string value)
441#signing_dir = <None>
442
443# Optionally specify a list of memcached server(s) to use for caching. If left
444# undefined, tokens will instead be cached in-process. (list value)
445# Deprecated group/name - [DEFAULT]/memcache_servers
446#memcached_servers = <None>
447
448# In order to prevent excessive effort spent validating tokens, the middleware
449# caches previously-seen tokens for a configurable duration (in seconds). Set
450# to -1 to disable caching completely. (integer value)
451#token_cache_time = 300
452
453# Determines the frequency at which the list of revoked tokens is retrieved
454# from the Identity service (in seconds). A high number of revocation events
455# combined with a low cache duration may significantly reduce performance.
456# (integer value)
457#revocation_cache_time = 10
458
459# (Optional) If defined, indicate whether token data should be authenticated or
460# authenticated and encrypted. If MAC, token data is authenticated (with HMAC)
461# in the cache. If ENCRYPT, token data is encrypted and authenticated in the
462# cache. If the value is not one of these options or empty, auth_token will
463# raise an exception on initialization. (string value)
464# Allowed values: None, MAC, ENCRYPT
465#memcache_security_strategy = None
466
467# (Optional, mandatory if memcache_security_strategy is defined) This string is
468# used for key derivation. (string value)
469#memcache_secret_key = <None>
470
471# (Optional) Number of seconds memcached server is considered dead before it is
472# tried again. (integer value)
473#memcache_pool_dead_retry = 300
474
475# (Optional) Maximum total number of open connections to every memcached
476# server. (integer value)
477#memcache_pool_maxsize = 10
478
479# (Optional) Socket timeout in seconds for communicating with a memcached
480# server. (integer value)
481#memcache_pool_socket_timeout = 3
482
483# (Optional) Number of seconds a connection to memcached is held unused in the
484# pool before it is closed. (integer value)
485#memcache_pool_unused_timeout = 60
486
487# (Optional) Number of seconds that an operation will wait to get a memcached
488# client connection from the pool. (integer value)
489#memcache_pool_conn_get_timeout = 10
490
491# (Optional) Use the advanced (eventlet safe) memcached client pool. The
492# advanced pool will only work under python 2.x. (boolean value)
493#memcache_use_advanced_pool = false
494
495# (Optional) Indicate whether to set the X-Service-Catalog header. If False,
496# middleware will not ask for service catalog on token validation and will not
497# set the X-Service-Catalog header. (boolean value)
498#include_service_catalog = true
499
500# Used to control the use and type of token binding. Can be set to: "disabled"
501# to not check token binding. "permissive" (default) to validate binding
502# information if the bind type is of a form known to the server and ignore it
503# if not. "strict" like "permissive" but if the bind type is unknown the token
504# will be rejected. "required" any form of token binding is needed to be
505# allowed. Finally the name of a binding method that must be present in tokens.
506# (string value)
507#enforce_token_bind = permissive
508
509# If true, the revocation list will be checked for cached tokens. This requires
510# that PKI tokens are configured on the identity server. (boolean value)
511#check_revocations_for_cached = false
512
513# Hash algorithms to use for hashing PKI tokens. This may be a single algorithm
514# or multiple. The algorithms are those supported by Python standard
515# hashlib.new(). The hashes will be tried in the order given, so put the
516# preferred one first for performance. The result of the first hash will be
517# stored in the cache. This will typically be set to multiple values only while
518# migrating from a less secure algorithm to a more secure one. Once all the old
519# tokens are expired this option should be set to a single value for better
520# performance. (list value)
521#hash_algorithms = md5
522
523# Prefix to prepend at the beginning of the path. Deprecated, use identity_uri.
524# (string value)
525#auth_admin_prefix =
526
527# Host providing the admin Identity API endpoint. Deprecated, use identity_uri.
528# (string value)
529#auth_host = 127.0.0.1
530
531# Port of the admin Identity API endpoint. Deprecated, use identity_uri.
532# (integer value)
533#auth_port = 35357
534
535# Protocol of the admin Identity API endpoint. Deprecated, use identity_uri.
536# (string value)
537# Allowed values: http, https
538#auth_protocol = https
539
540# Complete admin Identity API endpoint. This should specify the unversioned
541# root endpoint e.g. https://localhost:35357/ (string value)
542#identity_uri = <None>
543
544# This option is deprecated and may be removed in a future release. Single
545# shared secret with the Keystone configuration used for bootstrapping a
546# Keystone installation, or otherwise bypassing the normal authentication
547# process. This option should not be used, use `admin_user` and
548# `admin_password` instead. (string value)
549#admin_token = <None>
550
551# Service username. (string value)
552#admin_user = <None>
553
554# Service user password. (string value)
555#admin_password = <None>
556
557# Service tenant name. (string value)
558#admin_tenant_name = admin
559
560# Authentication type to load (unknown value)
561# Deprecated group/name - [DEFAULT]/auth_plugin
562#auth_type = <None>
563
564# Config Section from which to load plugin specific options (unknown value)
565#auth_section = <None>
566
567
568[matchmaker_redis]
569
570#
571# From oslo.messaging
572#
573
574# Host to locate redis. (string value)
575#host = 127.0.0.1
576
577# Use this port to connect to redis host. (port value)
578# Minimum value: 0
579# Maximum value: 65535
580#port = 6379
581
582# Password for Redis server (optional). (string value)
583#password =
584
585# List of Redis Sentinel hosts (fault tolerance mode) e.g.
586# [host:port, host1:port ... ] (list value)
587#sentinel_hosts =
588
589# Redis replica set name. (string value)
590#sentinel_group_name = oslo-messaging-zeromq
591
592# Time in ms to wait between connection attempts. (integer value)
593#wait_timeout = 500
594
595# Time in ms to wait before the transaction is killed. (integer value)
596#check_timeout = 20000
597
598# Timeout in ms on blocking socket operations (integer value)
599#socket_timeout = 1000
600
601
602[oslo_concurrency]
603
604#
605# From oslo.concurrency
606#
607
608# Enables or disables inter-process locks. (boolean value)
609# Deprecated group/name - [DEFAULT]/disable_process_locking
610#disable_process_locking = false
611
612# Directory to use for lock files. For security, the specified directory
613# should only be writable by the user running the processes that need locking.
614# Defaults to environment variable OSLO_LOCK_PATH. If OSLO_LOCK_PATH is not set
615# in the environment, use the Python tempfile.gettempdir function to find a
616# suitable location. If external locks are used, a lock path must be set.
617# (string value)
618# Deprecated group/name - [DEFAULT]/lock_path
619#lock_path = /tmp
620
621
622[oslo_messaging_amqp]
623
624#
625# From oslo.messaging
626#
627
628# address prefix used when sending to a specific server (string value)
629# Deprecated group/name - [amqp1]/server_request_prefix
630#server_request_prefix = exclusive
631
632# address prefix used when broadcasting to all servers (string value)
633# Deprecated group/name - [amqp1]/broadcast_prefix
634#broadcast_prefix = broadcast
635
636# address prefix when sending to any server in group (string value)
637# Deprecated group/name - [amqp1]/group_request_prefix
638#group_request_prefix = unicast
639
640# Name for the AMQP container (string value)
641# Deprecated group/name - [amqp1]/container_name
642#container_name = <None>
643
644# Timeout for inactive connections (in seconds) (integer value)
645# Deprecated group/name - [amqp1]/idle_timeout
646#idle_timeout = 0
647
648# Debug: dump AMQP frames to stdout (boolean value)
649# Deprecated group/name - [amqp1]/trace
650#trace = false
651
652# CA certificate PEM file to verify server certificate (string value)
653# Deprecated group/name - [amqp1]/ssl_ca_file
654#ssl_ca_file =
655
656# Identifying certificate PEM file to present to clients (string value)
657# Deprecated group/name - [amqp1]/ssl_cert_file
658#ssl_cert_file =
659
660# Private key PEM file used to sign cert_file certificate (string value)
661# Deprecated group/name - [amqp1]/ssl_key_file
662#ssl_key_file =
663
664# Password for decrypting ssl_key_file (if encrypted) (string value)
665# Deprecated group/name - [amqp1]/ssl_key_password
666#ssl_key_password = <None>
667
668# Accept clients using either SSL or plain TCP (boolean value)
669# Deprecated group/name - [amqp1]/allow_insecure_clients
670#allow_insecure_clients = false
671
672# Space separated list of acceptable SASL mechanisms (string value)
673# Deprecated group/name - [amqp1]/sasl_mechanisms
674#sasl_mechanisms =
675
676# Path to directory that contains the SASL configuration (string value)
677# Deprecated group/name - [amqp1]/sasl_config_dir
678#sasl_config_dir =
679
680# Name of configuration file (without .conf suffix) (string value)
681# Deprecated group/name - [amqp1]/sasl_config_name
682#sasl_config_name =
683
684# User name for message broker authentication (string value)
685# Deprecated group/name - [amqp1]/username
686#username =
687
688# Password for message broker authentication (string value)
689# Deprecated group/name - [amqp1]/password
690#password =
691
692
693[oslo_messaging_notifications]
694
695#
696# From oslo.messaging
697#
698
699# The Drivers(s) to handle sending notifications. Possible values are
700# messaging, messagingv2, routing, log, test, noop (multi valued)
701# Deprecated group/name - [DEFAULT]/notification_driver
702#driver =
703
704# A URL representing the messaging driver to use for notifications. If not set,
705# we fall back to the same configuration used for RPC. (string value)
706# Deprecated group/name - [DEFAULT]/notification_transport_url
707#transport_url = <None>
708
709# AMQP topic used for OpenStack notifications. (list value)
710# Deprecated group/name - [rpc_notifier2]/topics
711# Deprecated group/name - [DEFAULT]/notification_topics
712#topics = notifications
713topics = notifications
714
715
716[oslo_messaging_rabbit]
717
718#
719# From oslo.messaging
720#
721
722# Use durable queues in AMQP. (boolean value)
723# Deprecated group/name - [DEFAULT]/amqp_durable_queues
724# Deprecated group/name - [DEFAULT]/rabbit_durable_queues
725#amqp_durable_queues = false
726
727# Auto-delete queues in AMQP. (boolean value)
728# Deprecated group/name - [DEFAULT]/amqp_auto_delete
729#amqp_auto_delete = false
730
731# SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and
732# SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some
733# distributions. (string value)
734# Deprecated group/name - [DEFAULT]/kombu_ssl_version
735#kombu_ssl_version =
736
737# SSL key file (valid only if SSL enabled). (string value)
738# Deprecated group/name - [DEFAULT]/kombu_ssl_keyfile
739#kombu_ssl_keyfile =
740
741# SSL cert file (valid only if SSL enabled). (string value)
742# Deprecated group/name - [DEFAULT]/kombu_ssl_certfile
743#kombu_ssl_certfile =
744
745# SSL certification authority file (valid only if SSL enabled). (string value)
746# Deprecated group/name - [DEFAULT]/kombu_ssl_ca_certs
747#kombu_ssl_ca_certs =
748
749# How long to wait before reconnecting in response to an AMQP consumer cancel
750# notification. (floating point value)
751# Deprecated group/name - [DEFAULT]/kombu_reconnect_delay
752#kombu_reconnect_delay = 1.0
753
754# EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression will not
755# be used. This option may notbe available in future versions. (string value)
756#kombu_compression = <None>
757
758# How long to wait a missing client beforce abandoning to send it its replies.
759# This value should not be longer than rpc_response_timeout. (integer value)
760# Deprecated group/name - [DEFAULT]/kombu_reconnect_timeout
761#kombu_missing_consumer_retry_timeout = 60
762
763# Determines how the next RabbitMQ node is chosen in case the one we are
764# currently connected to becomes unavailable. Takes effect only if more than
765# one RabbitMQ node is provided in config. (string value)
766# Allowed values: round-robin, shuffle
767#kombu_failover_strategy = round-robin
768
769# The RabbitMQ broker address where a single node is used. (string value)
770# Deprecated group/name - [DEFAULT]/rabbit_host
771#rabbit_host = localhost
772
773# The RabbitMQ broker port where a single node is used. (port value)
774# Minimum value: 0
775# Maximum value: 65535
776# Deprecated group/name - [DEFAULT]/rabbit_port
777#rabbit_port = 5672
778
779# RabbitMQ HA cluster host:port pairs. (list value)
780# Deprecated group/name - [DEFAULT]/rabbit_hosts
781#rabbit_hosts = $rabbit_host:$rabbit_port
782
783# Connect over SSL for RabbitMQ. (boolean value)
784# Deprecated group/name - [DEFAULT]/rabbit_use_ssl
785#rabbit_use_ssl = false
786
787# The RabbitMQ userid. (string value)
788# Deprecated group/name - [DEFAULT]/rabbit_userid
789#rabbit_userid = guest
790
791# The RabbitMQ password. (string value)
792# Deprecated group/name - [DEFAULT]/rabbit_password
793#rabbit_password = guest
794
795# The RabbitMQ login method. (string value)
796# Deprecated group/name - [DEFAULT]/rabbit_login_method
797#rabbit_login_method = AMQPLAIN
798
799# The RabbitMQ virtual host. (string value)
800# Deprecated group/name - [DEFAULT]/rabbit_virtual_host
801#rabbit_virtual_host = /
802
803# How frequently to retry connecting with RabbitMQ. (integer value)
804#rabbit_retry_interval = 1
805
806# How long to backoff for between retries when connecting to RabbitMQ. (integer
807# value)
808# Deprecated group/name - [DEFAULT]/rabbit_retry_backoff
809#rabbit_retry_backoff = 2
810
811# Maximum interval of RabbitMQ connection retries. Default is 30 seconds.
812# (integer value)
813#rabbit_interval_max = 30
814
815# Maximum number of RabbitMQ connection retries. Default is 0 (infinite retry
816# count). (integer value)
817# Deprecated group/name - [DEFAULT]/rabbit_max_retries
818#rabbit_max_retries = 0
819
820# Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change this
821# option, you must wipe the RabbitMQ database. In RabbitMQ 3.0, queue mirroring
822# is no longer controlled by the x-ha-policy argument when declaring a queue.
823# If you just want to make sure that all queues (except those with auto-
824# generated names) are mirrored across all nodes, run: "rabbitmqctl set_policy
825# HA '^(?!amq\.).*' '{"ha-mode": "all"}' " (boolean value)
826# Deprecated group/name - [DEFAULT]/rabbit_ha_queues
827#rabbit_ha_queues = false
828
829# Positive integer representing duration in seconds for queue TTL (x-expires).
830# Queues which are unused for the duration of the TTL are automatically
831# deleted. The parameter affects only reply and fanout queues. (integer value)
832# Minimum value: 1
833#rabbit_transient_queues_ttl = 1800
834
835# Specifies the number of messages to prefetch. Setting to zero allows
836# unlimited messages. (integer value)
837#rabbit_qos_prefetch_count = 0
838
839# Number of seconds after which the Rabbit broker is considered down if
840# heartbeat's keep-alive fails (0 disable the heartbeat). EXPERIMENTAL (integer
841# value)
842#heartbeat_timeout_threshold = 60
843
844# How often times during the heartbeat_timeout_threshold we check the
845# heartbeat. (integer value)
846#heartbeat_rate = 2
847
848# Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake (boolean value)
849# Deprecated group/name - [DEFAULT]/fake_rabbit
850#fake_rabbit = false
851
852# Maximum number of channels to allow (integer value)
853#channel_max = <None>
854
855# The maximum byte size for an AMQP frame (integer value)
856#frame_max = <None>
857
858# How often to send heartbeats for consumer's connections (integer value)
859#heartbeat_interval = 1
860
861# Enable SSL (boolean value)
862#ssl = <None>
863
864# Arguments passed to ssl.wrap_socket (dict value)
865#ssl_options = <None>
866
867# Set socket timeout in seconds for connection's socket (floating point value)
868#socket_timeout = 0.25
869
870# Set TCP_USER_TIMEOUT in seconds for connection's socket (floating point
871# value)
872#tcp_user_timeout = 0.25
873
874# Set delay for reconnection to some host which has connection error (floating
875# point value)
876#host_connection_reconnect_delay = 0.25
877
878# Maximum number of connections to keep queued. (integer value)
879#pool_max_size = 10
880
881# Maximum number of connections to create above `pool_max_size`. (integer
882# value)
883#pool_max_overflow = 0
884
885# Default number of seconds to wait for a connections to available (integer
886# value)
887#pool_timeout = 30
888
889# Lifetime of a connection (since creation) in seconds or None for no
890# recycling. Expired connections are closed on acquire. (integer value)
891#pool_recycle = 600
892
893# Threshold at which inactive (since release) connections are considered stale
894# in seconds or None for no staleness. Stale connections are closed on acquire.
895# (integer value)
896#pool_stale = 60
897
898# Persist notification messages. (boolean value)
899#notification_persistence = false
900
901# Exchange name for for sending notifications (string value)
902#default_notification_exchange = ${control_exchange}_notification
903
904# Max number of not acknowledged message which RabbitMQ can send to
905# notification listener. (integer value)
906#notification_listener_prefetch_count = 100
907
908# Reconnecting retry count in case of connectivity problem during sending
909# notification, -1 means infinite retry. (integer value)
910#default_notification_retry_attempts = -1
911
912# Reconnecting retry delay in case of connectivity problem during sending
913# notification message (floating point value)
914#notification_retry_delay = 0.25
915
916# Time to live for rpc queues without consumers in seconds. (integer value)
917#rpc_queue_expiration = 60
918
919# Exchange name for sending RPC messages (string value)
920#default_rpc_exchange = ${control_exchange}_rpc
921
922# Exchange name for receiving RPC replies (string value)
923#rpc_reply_exchange = ${control_exchange}_rpc_reply
924
925# Max number of not acknowledged message which RabbitMQ can send to rpc
926# listener. (integer value)
927#rpc_listener_prefetch_count = 100
928
929# Max number of not acknowledged message which RabbitMQ can send to rpc reply
930# listener. (integer value)
931#rpc_reply_listener_prefetch_count = 100
932
933# Reconnecting retry count in case of connectivity problem during sending
934# reply. -1 means infinite retry during rpc_timeout (integer value)
935#rpc_reply_retry_attempts = -1
936
937# Reconnecting retry delay in case of connectivity problem during sending
938# reply. (floating point value)
939#rpc_reply_retry_delay = 0.25
940
941# Reconnecting retry count in case of connectivity problem during sending RPC
942# message, -1 means infinite retry. If actual retry attempts in not 0 the rpc
943# request could be processed more then one time (integer value)
944#default_rpc_retry_attempts = -1
945
946# Reconnecting retry delay in case of connectivity problem during sending RPC
947# message (floating point value)
948#rpc_retry_delay = 0.25
949
950
951[oslo_policy]
952
953#
954# From oslo.policy
955#
956
957# The JSON file that defines policies. (string value)
958# Deprecated group/name - [DEFAULT]/policy_file
959#policy_file = policy.json
960
961# Default rule. Enforced when a requested rule is not found. (string value)
962# Deprecated group/name - [DEFAULT]/policy_default_rule
963#policy_default_rule = default
964
965# Directories where policy configuration files are stored. They can be relative
966# to any directory in the search path defined by the config_dir option, or
967# absolute paths. The file defined by policy_file must exist for these
968# directories to be searched. Missing or empty directories are ignored. (multi
969# valued)
970# Deprecated group/name - [DEFAULT]/policy_dirs
971#policy_dirs = policy.d
972
973[service_credentials]
974
975auth_type = password
976user_domain_id = {{ agent.identity.get('domain', 'default') }}
977project_domain_id = {{ agent.identity.get('domain', 'default') }}
978project_name = {{ agent.identity.tenant }}
979username = {{ agent.identity.user }}
980password = {{ agent.identity.password }}
Ildar Svetlov77de21e2017-07-03 12:56:15 +0400981auth_url=http://{{ agent.identity.host }}:5000/v3
Petr Jediný1c34abb2017-06-07 14:34:13 +0200982token_cache_time = -1
983interface=internalURL
984region_name={{ agent.get('region', 'RegionOne') }}