| {%- from "glance/map.jinja" import server with context %} |
| [DEFAULT] |
| # Show more verbose log output (sets INFO log level output) |
| #verbose=True |
| verbose=False |
| |
| # Show debugging output in logs (sets DEBUG log level output) |
| #debug=False |
| debug=False |
| |
| #log_file=/var/log/glance/image-cache.log |
| |
| # Send logs to syslog (/dev/log) instead of to file specified by `log_file` |
| #use_syslog = False |
| |
| # Directory that the Image Cache writes data to |
| image_cache_dir=/var/lib/glance/image-cache/ |
| |
| # Number of seconds after which we should consider an incomplete image to be |
| # stalled and eligible for reaping |
| image_cache_stall_time = 86400 |
| |
| # image_cache_invalid_entry_grace_period - seconds |
| # |
| # If an exception is raised as we're writing to the cache, the cache-entry is |
| # deemed invalid and moved to <image_cache_datadir>/invalid so that it can be |
| # inspected for debugging purposes. |
| # |
| # This is number of seconds to leave these invalid images around before they |
| # are elibible to be reaped. |
| image_cache_invalid_entry_grace_period = 3600 |
| |
| # Max cache size in bytes |
| image_cache_max_size = 5000000000 |
| |
| # Address to find the registry server |
| registry_host = {{ server.registry.host }} |
| |
| # Port the registry server is listening on |
| registry_port = {{ server.registry.port }} |
| |
| # Auth settings if using Keystone |
| # auth_url = http://127.0.0.1:5000/v2.0/ |
| auth_url = http://{{ pillar.glance.server.identity.host }}:{{ pillar.glance.server.identity.port }} |
| # admin_tenant_name = %SERVICE_TENANT_NAME% |
| admin_tenant_name = {{ pillar.glance.server.identity.tenant }} |
| # admin_user = %SERVICE_USER% |
| admin_user = glance |
| # admin_password = %SERVICE_PASSWORD% |
| admin_password = {{ pillar.glance.server.identity.password }} |
| |
| # List of which store classes and store class locations are |
| # currently known to glance at startup. |
| # known_stores = glance.store.filesystem.Store, |
| # glance.store.http.Store, |
| # glance.store.rbd.Store, |
| # glance.store.s3.Store, |
| # glance.store.swift.Store, |
| # glance.store.sheepdog.Store, |
| # glance.store.cinder.Store, |
| |
| # ============ Filesystem Store Options ======================== |
| |
| # Directory that the Filesystem backend store |
| # writes image data to |
| filesystem_store_datadir = /var/lib/glance/images/ |
| |
| # ============ Swift Store Options ============================= |
| |
| # Version of the authentication service to use |
| # Valid versions are '2' for keystone and '1' for swauth and rackspace |
| swift_store_auth_version = 2 |
| |
| # Address where the Swift authentication service lives |
| # Valid schemes are 'http://' and 'https://' |
| # If no scheme specified, default to 'https://' |
| # For swauth, use something like '127.0.0.1:8080/v1.0/' |
| swift_store_auth_address = 127.0.0.1:5000/v2.0/ |
| |
| # User to authenticate against the Swift authentication service |
| # If you use Swift authentication service, set it to 'account':'user' |
| # where 'account' is a Swift storage account and 'user' |
| # is a user in that account |
| swift_store_user = jdoe:jdoe |
| |
| # Auth key for the user authenticating against the |
| # Swift authentication service |
| swift_store_key = a86850deb2742ec3cb41518e26aa2d89 |
| |
| # Container within the account that the account should use |
| # for storing images in Swift |
| swift_store_container = glance |
| |
| # Do we create the container if it does not exist? |
| swift_store_create_container_on_put = False |
| |
| # What size, in MB, should Glance start chunking image files |
| # and do a large object manifest in Swift? By default, this is |
| # the maximum object size in Swift, which is 5GB |
| swift_store_large_object_size = 5120 |
| |
| # When doing a large object manifest, what size, in MB, should |
| # Glance write chunks to Swift? This amount of data is written |
| # to a temporary disk buffer during the process of chunking |
| # the image file, and the default is 200MB |
| swift_store_large_object_chunk_size = 200 |
| |
| # Whether to use ServiceNET to communicate with the Swift storage servers. |
| # (If you aren't RACKSPACE, leave this False!) |
| # |
| # To use ServiceNET for authentication, prefix hostname of |
| # `swift_store_auth_address` with 'snet-'. |
| # Ex. https://example.com/v1.0/ -> https://snet-example.com/v1.0/ |
| swift_enable_snet = False |
| |
| # ============ S3 Store Options ============================= |
| |
| # Address where the S3 authentication service lives |
| # Valid schemes are 'http://' and 'https://' |
| # If no scheme specified, default to 'http://' |
| s3_store_host = 127.0.0.1:8080/v1.0/ |
| |
| # User to authenticate against the S3 authentication service |
| s3_store_access_key = <20-char AWS access key> |
| |
| # Auth key for the user authenticating against the |
| # S3 authentication service |
| s3_store_secret_key = <40-char AWS secret key> |
| |
| # Container within the account that the account should use |
| # for storing images in S3. Note that S3 has a flat namespace, |
| # so you need a unique bucket name for your glance images. An |
| # easy way to do this is append your AWS access key to "glance". |
| # S3 buckets in AWS *must* be lowercased, so remember to lowercase |
| # your AWS access key if you use it in your bucket name below! |
| s3_store_bucket = <lowercased 20-char aws access key>glance |
| |
| # Do we create the bucket if it does not exist? |
| s3_store_create_bucket_on_put = False |
| |
| # When sending images to S3, the data will first be written to a |
| # temporary buffer on disk. By default the platform's temporary directory |
| # will be used. If required, an alternative directory can be specified here. |
| # s3_store_object_buffer_dir = /path/to/dir |
| |
| # ============ Cinder Store Options =========================== |
| |
| # Info to match when looking for cinder in the service catalog |
| # Format is : separated values of the form: |
| # <service_type>:<service_name>:<endpoint_type> (string value) |
| cinder_catalog_info = volume:cinder:{{ server.identity.get('endpoint_type', 'publicURL') }} |
| |
| # Override service catalog lookup with template for cinder endpoint |
| # e.g. http://localhost:8776/v1/%(project_id)s (string value) |
| #cinder_endpoint_template = <None> |
| |
| # Region name of this node (string value) |
| #os_region_name = <None> |
| |
| # Location of ca certicates file to use for cinder client requests |
| # (string value) |
| #cinder_ca_certificates_file = <None> |
| |
| # Number of cinderclient retries on failed http calls (integer value) |
| #cinder_http_retries = 3 |
| |
| # Allow to perform insecure SSL requests to cinder (boolean value) |
| #cinder_api_insecure = False |
| |
| # ================= Security Options ========================== |
| |
| # AES key for encrypting store 'location' metadata, including |
| # -- if used -- Swift or S3 credentials |
| # Should be set to a random string of length 16, 24 or 32 bytes |
| # metadata_encryption_key = <16, 24 or 32 char registry metadata key> |