|
|
楼主 |
发表于 2018-9-26 09:42:22
|
显示全部楼层
[general]
H4 ?7 ?) p7 t6 K5 d/ z
0 ?0 `/ g' P% v+ s9 B( [) w
9 v8 o2 Y3 O0 ^# F3 r! ]! z8 r8 m9 ^( t( W$ ?& @' h& a0 V' a8 V8 [
# Path to a public key to install on servers. If a usable key has not1 m K3 z2 w# ]( Z. P) _, s: G
! U5 L% x# J5 _ L
# been installed on the remote servers, the user is prompted for a
) u5 D2 }8 ^' D; g: @. q4 L- c- [' N" P5 }+ L3 m7 Q
# password and this key is installed so the password will not be
9 p) @! \3 y# w; a
7 a, j& J- S, ?% C# required again.* C. y: X9 X. K& f
* i; {" ?; c( H6 I0 ]9 L" h/ HCONFIG_SSH_KEY=/root/.ssh/id_rsa.pub/ l5 ~& N1 O5 B- a- ?7 T) g
, J- ~! G/ ]% r$ r; o2 F; e( n
L% ~3 i: u' M3 l) e. K$ I) F' F* }- M7 Y5 G+ n* F
# Default password to be used everywhere (overridden by passwords set
# J$ n$ |3 ~ f9 I, L2 O" s
) `5 W2 G" [. U$ d) a# for individual services or users).+ y3 I! V- t6 ]+ [# B- x+ Q
Y8 W) ~1 m" W! oCONFIG_DEFAULT_PASSWORD=4 I' C& B- [! v
9 E- c' a5 z! {4 k( e( r+ T* e5 M8 k5 J4 ?. k
! W+ W: p; p2 B v( C' b& P: c% Q
# The amount of service workers/threads to use for each service.
% r" o, b6 C- b1 V" C. H( c
( {- p/ V2 y+ A# Useful to tweak when you have memory constraints. Defaults to the
/ A/ H% _; e( M) A! E3 E' q0 K O7 f
# amount of cores on the system.& B) @0 L% ]/ _3 a; ]2 ^
5 ], y# X! ^' V, K) I" gCONFIG_SERVICE_WORKERS=%{::processorcount}
9 c( D. O5 g7 f( X3 n( n/ `3 ~' E+ ?9 ?& t; A) C. y
% s* V5 q3 ~( f" L4 R# I, y! {/ ~. o* @# e( m- u/ W
# Specify 'y' to install MariaDB. ['y', 'n']
1 |& B2 o- k/ Y3 m% b: x$ L) w
, H6 n, [7 Q/ k. R# WCONFIG_MARIADB_INSTALL=y _6 U1 m3 f9 m+ E! ?3 _2 N
1 Y5 N& V$ [7 m5 C9 c
* i2 l8 p0 B1 U! f; I Y4 |5 f' l$ U
`. j- D" v" \# H l) x/ _# Specify 'y' to install OpenStack Image Service (glance). ['y', 'n']
* M/ y* ?; e* ?' S0 G
/ t/ w4 ^1 l& u5 D! mCONFIG_GLANCE_INSTALL=y, _! R! Y) |# Q' G1 ?( X
0 z- ^; ~0 y F! I8 H% d
" B3 d, T3 O( M, g9 r3 I1 a' U4 h+ l, C$ ?* `* A: `+ `+ h
# Specify 'y' to install OpenStack Block Storage (cinder). ['y', 'n']+ j' E$ ~ \* _1 s5 u* X7 z' ~
- F! E1 u2 F" _- b! E# v
CONFIG_CINDER_INSTALL=y" e, I# i- j9 i
1 P9 L$ X* Q4 @6 V3 [/ ]4 e ^% e
" {" L" y- T" n5 ^* `3 B, I. \1 ]( K
# Specify 'y' to install OpenStack Shared File System (manila). ['y',: t* F8 s1 w/ U
$ [# U/ W8 {7 j4 j5 G7 M
# 'n']
- }6 j, `8 n Q3 ~4 x6 _- r5 \
( ~. _5 H- ^+ u4 N% X8 a; UCONFIG_MANILA_INSTALL=y
. F+ ^3 t7 d- X+ {, `+ c5 o# {
. @ L5 U8 E5 x4 M3 M* z: g( }: W( C" U- T& G! W
- h0 J& M. ?: b* q
# Specify 'y' to install OpenStack Compute (nova). ['y', 'n']0 Q( I& ^" |/ `" O X7 T
* p# B& ?% {, W7 _+ PCONFIG_NOVA_INSTALL=y3 H2 I$ r+ w* y0 U
5 f' r" a6 u h7 D/ g
2 ^' D: \+ {% _
% j6 S: p7 Z: V- d6 q# Specify 'y' to install OpenStack Networking (neutron); otherwise,' \' Q: s' w0 l& F J$ i. s: a1 R
. ?& \5 p' t# h0 U# Compute Networking (nova) will be used. ['y', 'n']
! _( W: @7 o6 K. b; q9 Y" i1 l+ ?
& y4 F3 k3 F& F. @1 nCONFIG_NEUTRON_INSTALL=y
/ e9 o& `' e& c7 y1 P( W/ s6 w
* r7 O4 j( X2 [( `- O% g r/ c% m
# F& l J' ~: T7 J) q4 R. K/ }4 Y- B- P) V% b3 P/ i- ?/ N5 C
# Specify 'y' to install OpenStack Dashboard (horizon). ['y', 'n']& B. e$ q }# A
# i& B) i7 W/ c; o1 S) Y/ b9 W
CONFIG_HORIZON_INSTALL=y1 H4 R( i" t+ N8 b
1 M7 V I: f# i: L
, ^& m& n- V# @7 Y" z/ o; V
" ~9 a* q9 _- W- h( }# Specify 'y' to install OpenStack Object Storage (swift). ['y', 'n']
; P* J$ E9 e+ W- A' L
0 t i5 x) k# f# NCONFIG_SWIFT_INSTALL=y
5 K Z+ l6 s6 @7 P1 a3 G+ }/ X! n2 U" v x4 {5 I$ u" e) `
! c+ ] ]5 w+ E3 G7 f, t( }) \! y
, A4 W1 I, m, F2 i# Specify 'y' to install OpenStack Metering (ceilometer). ['y', 'n']0 q" i3 Y! T1 y2 Y* S
8 V; y F9 C& [3 l' T5 |' B. f
CONFIG_CEILOMETER_INSTALL=y
7 B9 m+ s2 A' H1 X
/ K6 m3 G% w0 w3 u' d
5 p3 w- {/ L2 x ~2 s/ I2 v( @/ L. s; I+ l$ M# b6 G6 E; J' Q. K
# Specify 'y' to install OpenStack Telemetry Alarming (Aodh). Note9 T' @: D5 ?' c" X& o4 `
/ O$ ?) v* t8 a
# Aodh requires Ceilometer to be installed as well. ['y', 'n']
' B. `7 p6 |" r3 B0 S& O J0 i8 v" |2 ]9 W3 Z7 |# d* c
CONFIG_AODH_INSTALL=y
! E; k+ F7 j8 q" u' E
+ E- R0 k ^' }- L8 g
8 ?) A M3 Z& j& z+ I7 f( s5 m7 s9 X& ^( F2 h
# Specify 'y' to install OpenStack Metering as a Service (gnocchi)./ e( R) n+ f+ |$ j9 J, p
8 u# {$ g3 r# ?8 P( K# ['y', 'n']
) p4 C( r, }/ O g
}; |5 c8 c2 _. oCONFIG_GNOCCHI_INSTALL=y# C+ f$ v- T7 S- D% ?$ p( D9 d
- V6 ~1 z2 v b+ ~! A
. ?& p: R: H2 n8 \7 x
4 V8 _3 ], ^# ^9 ]" Q2 ^/ E+ e# Specify 'y' to install OpenStack Data Processing (sahara). In case5 X' V" _- ? ^# g
6 }- z2 |! \5 i* {# of sahara installation packstack also installs heat.['y', 'n']2 H4 d+ N# N* B d5 y9 Y
- a9 G" _! X: f$ {1 D* [ f
CONFIG_SAHARA_INSTALL=n
! N: q" `$ G3 o: B" E2 r. J+ W7 y2 z1 f5 d4 E
7 k# r. L. s* a6 \8 U
+ p* E. Y4 v: X- w4 S& G7 k# Specify 'y' to install OpenStack Orchestration (heat). ['y', 'n']7 s L* I* ~' J0 [
0 i& A- C' B/ }9 j3 g- j( e: VCONFIG_HEAT_INSTALL=n( o* R8 k! F1 H, W# U) f
/ \6 s# K5 P+ @0 s6 p; |
Y! }6 |# H' x k! w
' g' h' \2 o1 p; K5 C; ^
# Specify 'y' to install OpenStack Database (trove) ['y', 'n']
* K/ }& w: E/ ?( x
3 i) H4 r* z, rCONFIG_TROVE_INSTALL=n
0 e+ Y1 V, J" ]; O1 I3 F4 V6 R8 H2 ?7 v) N+ H
" E- D" o4 V1 a- F: I
& f( [& J# k2 [* u! k/ Y# W& e
# Specify 'y' to install OpenStack Bare Metal Provisioning (ironic)./ M9 W& A; n3 }$ r; F& K I
- Y- e. {0 a5 Z5 _8 H/ f
# ['y', 'n']9 a$ f7 T# r0 u4 ?3 B1 \5 O) i4 I" t
$ U" K [9 ~5 {) z; o; R4 jCONFIG_IRONIC_INSTALL=n
) _& I( z. l! u x; G
6 S4 G% y0 h, i' `, s O. w) {# n+ Y1 @9 b
+ ?7 Z' x- E4 @* O( q. ~
# Specify 'y' to install the OpenStack Client packages (command-line. t1 R0 d- b! U5 r& r
" O4 ?1 e; t1 Z5 @' x6 S
# tools). An admin "rc" file will also be installed. ['y', 'n']* O- `& G; K+ _# a6 j9 O
/ Y0 Q7 z9 ?8 |+ X5 Y
CONFIG_CLIENT_INSTALL=y
$ H: i, B% x$ v: Q: b( Q6 L; d# M- _; a
: h+ \! r; e/ T; R& d1 {' a( \& K
# Comma-separated list of NTP servers. Leave plain if Packstack) x3 C; }& I& e5 q6 p
3 c, e/ [) @, x. N! O3 V; H# should not install ntpd on instances.* w" n$ m) A3 {$ E
8 x- N4 G: D4 j4 N) XCONFIG_NTP_SERVERS=
/ n* n1 g( }1 ~4 @' b
* G- F6 R% w8 ]6 m! a9 v* j& u, q! \( f/ s
& A5 [7 E3 J* P) @5 @
# Specify 'y' to install Nagios to monitor OpenStack hosts. Nagios. f% `; j3 N& }/ D) [# L8 D" p
+ r j* h' ?# i$ f: @: ^3 r. w# provides additional tools for monitoring the OpenStack environment.# m* N3 l0 J5 C: H8 k* u, m
) ] O6 n9 [' H$ x1 O/ W c# ['y', 'n']
3 e+ K" `- w4 F" ?. h/ W: I
* [) Q% `: }" U7 P9 ~CONFIG_NAGIOS_INSTALL=y5 d/ t S3 I5 n6 }- W# v
- g. A, ?4 K6 O
6 K! A% A; e4 s2 w; s
$ X4 i! s' j1 B4 ?% a
# Comma-separated list of servers to be excluded from the; |4 D! \% G/ G: ]* e
2 C5 b! u) M! P$ K! u
# installation. This is helpful if you are running Packstack a second
5 n" }) p6 y# d
- z" h/ X9 G% F# B' _# time with the same answer file and do not want Packstack to r7 p* M& w$ U2 O5 |, N
6 i( @& {$ N5 c- ^ ]: Y
# overwrite these server's configurations. Leave empty if you do not+ M2 X) e3 v0 _8 D/ ~* |3 ?
; q0 z( |% s2 e* f. ^# need to exclude any servers.3 Z- O4 C9 i# F) ], B2 P6 v
. m3 }0 z7 w$ r7 N4 ~" U; JEXCLUDE_SERVERS=
/ v) R& t. I# z F! o4 `8 b7 }; c* ^1 V% a+ C) _
6 f* t$ Y( |6 ~5 l' |
% |( @' h2 H" [/ m) L
# Specify 'y' if you want to run OpenStack services in debug mode;
! E6 e. ~2 Q- M! f
& J3 G1 i3 a' n% ~( q4 J# otherwise, specify 'n'. ['y', 'n']/ S! J8 r5 T0 r, u; Y
$ i: Q' W, v2 q7 a! o' n% t/ J; MCONFIG_DEBUG_MODE=n
8 \# o, j, U. H, l$ k! b* \* O8 n! @7 `! P! u7 x% U
" b' W! Q2 p0 W
; V: Z# n& e2 H3 K# Server on which to install OpenStack services specific to the6 V+ ^0 x7 L( |/ E4 Y0 X% G( l
7 v5 k8 A, Q* f6 U% ]7 ^
# controller role (for example, API servers or dashboard)., Z7 N6 K/ G; G3 p8 g
8 e3 u) ~8 u. ^7 i% v" S
CONFIG_CONTROLLER_HOST=10.0.2.15# c9 J+ Q. ]# [( [
* s% a2 T' u+ f, J) H, s
" u3 B. q3 x6 A/ r/ ^, x [& ~9 j; x% F& B$ F; I
# List the servers on which to install the Compute service.
/ ~) L7 D( u+ z% m' b9 \2 W( O, w% D# i# d" R% D7 B
CONFIG_COMPUTE_HOSTS=10.0.2.15
/ D. ^; I' ]8 h) x( `8 k2 i1 u' E% i! M1 P5 ~
7 d7 @; a2 S* N3 q* ^
8 q3 W, V6 U( \# S7 q
# List of servers on which to install the network service such as
7 H( W( M- Q0 s _, Q% K( w; ~% _3 l4 D) o) @. n
# Compute networking (nova network) or OpenStack Networking (neutron).
, a$ d0 c3 X1 v1 J, C+ C( R4 p- g4 s, {2 @- G: h# \& l
CONFIG_NETWORK_HOSTS=10.0.2.15
7 h6 n4 u' j a+ y6 U- j9 a
/ D9 G: B5 O# N$ G7 A, q, P# c H) X! `$ l# b
1 {" J; ]! C6 {
# Specify 'y' if you want to use VMware vCenter as hypervisor and
7 {$ d6 {' I* l- N$ v# X0 Y' m Y
# storage; otherwise, specify 'n'. ['y', 'n']1 c, `1 Y% Z% p" H" S
7 g& Y6 l7 T2 O
CONFIG_VMWARE_BACKEND=n4 q. U* h, e# p/ D$ U+ i
( i2 ` l7 i' K' W# L8 f
" o: i0 x1 r j" T
, B& o+ [3 t$ U" G3 z7 U
# Specify 'y' if you want to use unsupported parameters. This should
6 u* P( E& F7 Q' R- ~( W; r& p3 S6 S1 R
# be used only if you know what you are doing. Issues caused by using7 p2 K* ~+ p0 ~' w
" a0 q' n7 J2 n* R& \: m# m$ |# unsupported options will not be fixed before the next major release.
+ ~; k0 X' n7 \8 _' b' d, U
0 Y7 U1 c4 y+ Q& U7 Y# ['y', 'n']
' F* H) T" |0 ~ `" a- q1 Q3 G! W# j1 a- b2 A6 [" y6 v8 n5 U
CONFIG_UNSUPPORTED=n2 b! a, D3 `/ R% r# a" ^) m
- _$ b: i5 I( k6 i1 ?* C: d1 ~8 h% C: Z5 b
) q" k. c+ d3 t7 N" T# Specify 'y' if you want to use subnet addresses (in CIDR format); f+ C. @( \7 \+ {( {
' c- N/ v4 ?3 x! `2 @9 w/ x6 U
# instead of interface names in following options:3 T# ~4 c1 y7 Z1 {
/ G/ O* H9 C+ ?! N3 L# CONFIG_NOVA_COMPUTE_PRIVIF, CONFIG_NOVA_NETWORK_PRIVIF,
: F4 \- l8 f; D" @4 l, T5 `1 A
- u- Z8 Q4 n% \. V+ W) q# CONFIG_NOVA_NETWORK_PUBIF, CONFIG_NEUTRON_OVS_BRIDGE_IFACES,
) \+ e6 l5 G1 T4 G! C+ w) g/ o. ]. d l( j3 L- y
# CONFIG_NEUTRON_LB_INTERFACE_MAPPINGS, CONFIG_NEUTRON_OVS_TUNNEL_IF.
# m% n2 S3 B4 @7 O
; O6 _. m2 ^, H: ^1 t F! ?# This is useful for cases when interface names are not same on all
3 C2 O3 l( C. n2 Z! z; O* O8 u2 e: N7 \0 n8 C: q8 H
# installation hosts.
! H+ x- `: l- O, }; P- M+ a! k/ C
2 _) g) b) w8 I5 C2 [+ K: FCONFIG_USE_SUBNETS=n4 n0 J. U, n: y( f8 k
) x' b( ~% B5 d9 v( @0 f5 v; B" b% y, `5 b. n" L2 f
- J( L- z/ B2 U8 \% F
# IP address of the VMware vCenter server.
) m' v( C9 }+ }2 Y
( L' d5 b" Y6 B$ _" }CONFIG_VCENTER_HOST=5 R' y& D( V6 F# b3 h2 C. E2 \
! h$ S) A( a o! F9 W
7 G# `& X7 y$ v/ Q( E0 [
( s- h D. W/ z f! A G
# User name for VMware vCenter server authentication., n, [; R$ |' f V
: x& X7 m2 a( L h2 UCONFIG_VCENTER_USER=
$ K h v$ L" ~. o7 ^% f1 a- U$ m$ \+ M5 O7 ]% R
- v8 Q9 ^$ N3 f; \
" Z; x9 n7 X' k4 n# s
# Password for VMware vCenter server authentication.
4 i# E8 l8 t. }/ T. d3 Z/ ~) ~2 p2 T* y- @; W4 [
CONFIG_VCENTER_PASSWORD=
! r% j- n- f% i1 L/ h0 [
j8 J' i3 l; k# g, F& Y( _' Z! H# j9 ]3 H9 J2 k
; ~- U; k4 g1 R2 |
# Comma separated list of names of the VMware vCenter clusters. Note:
# O; P& A! k9 L* }9 G6 \9 Q- N/ z2 y8 K4 [" Z& _1 w8 i |
# if multiple clusters are specified each one is mapped to one
b% t3 w0 S( A9 ~4 D9 J0 F; C; _, i9 [# n }+ Z
# compute, otherwise all computes are mapped to same cluster.6 O0 u' F, F3 _ y( j" X2 ^) l
. g, N0 ]0 d/ L3 S Y! b# ]CONFIG_VCENTER_CLUSTER_NAMES=
, m7 S- [# w, g+ B0 H- b) v* K4 V4 F; J
" {4 [& K1 O7 P8 i
3 m% z* }, s2 `# (Unsupported!) Server on which to install OpenStack services; j5 m, f) ]) N6 G) q9 a& K c. n
8 ?5 y9 d) s% e& f4 a1 R! j
# specific to storage servers such as Image or Block Storage services.
+ P" H. r+ w7 ]& f6 |9 D9 y/ i. ~( Y C/ D& v+ X( A7 d; j
CONFIG_STORAGE_HOST=10.0.2.15
5 K8 N. y: K8 T& e
% [2 x4 B0 u0 g% E9 | `0 I. R0 C1 j" r: y" k* X% x
7 _; }4 a0 X" ~5 W
# (Unsupported!) Server on which to install OpenStack services
$ S" Q" }) f8 r3 T: Y9 i/ Z3 q3 x6 `% p/ L5 ~
# specific to OpenStack Data Processing (sahara).- Y6 [0 H1 Y& g9 { d( T% }
2 i# L* p6 P e& A5 L' LCONFIG_SAHARA_HOST=10.0.2.15
5 k Q0 q" D% n; i' n( n! |
5 ]+ _ F ]7 x @6 I! p* t! z5 F4 q$ h' U
9 l6 b4 g2 [3 W' g9 W# Specify 'y' to enable the EPEL repository (Extra Packages for5 j, k, E/ K* c- D. p
& E$ A2 F2 Q. K$ e% v2 B# Enterprise Linux). ['y', 'n']; `: |5 [9 p, q0 R( y# `! P
# E- _2 [) r+ J5 ZCONFIG_USE_EPEL=n/ Y' p* n' L' K; H3 K% b. ?
; x( z7 h" K* j' w) u) M
) f/ V0 z) ?0 A. X) S
# p! i) g# Z4 I$ m2 H5 O
# Comma-separated list of URLs for any additional yum repositories,
2 h6 y$ M) z& ]; N- K0 x, T. t0 W* P: w
# to use for installation.
" {" u( q: Z7 j8 E- l6 @7 s% ^
6 c! [5 p W% m, c, Y) y) g5 C9 `CONFIG_REPO=
: l* }4 V2 s' s1 b3 n! H5 Y3 ]4 S( n
5 E6 T! m7 o8 ]' U9 t
5 t. w* S o7 ^7 e5 Z2 N
2 l6 j* M$ }: P0 s- i$ p& T3 y# Specify 'y' to enable the RDO testing repository. ['y', 'n']
+ S6 I! K5 O( V' e
& E! T% N- @" w3 fCONFIG_ENABLE_RDO_TESTING=n" p( ?- f8 s8 e, w/ M& D
* P1 G! v4 I! Z" ? Z
6 L+ Q( W. O K
" Q1 W% b1 S5 r: Y- f# To subscribe each server with Red Hat Subscription Manager, include. J) P6 }) x7 @6 [- s6 e! h
' p. P6 o8 E! [: o s$ A0 s
# this with CONFIG_RH_PW.
) \8 w$ t4 _/ P$ v$ A" A2 n9 c5 T9 E7 {' u1 m* D
CONFIG_RH_USER=/ D: p9 F' C& H0 J$ f5 ]5 L
- j; d/ w+ B- u/ M& `& {4 C
- [/ ]9 d& Q$ Q4 B, ~7 E7 f' n/ k! X# M! [$ t
# To subscribe each server to receive updates from a Satellite
7 V4 \, X* H, }: G0 N/ S6 g" G0 T
' n, l, o. u6 R- z# h# server, provide the URL of the Satellite server. You must also7 F% N9 s8 W3 K* Q" ` y: D
% ?& ^8 l0 W! i) z6 A" x: z
# provide a user name (CONFIG_SATELLITE_USERNAME) and password
! i D. ?5 f& K C2 c+ k+ b% Y+ H9 t3 f' E
# (CONFIG_SATELLITE_PASSWORD) or an access key (CONFIG_SATELLITE_AKEY)
, h! V% R; ?- ]/ c: Q; Q2 }
7 g v; O3 B- W0 ^9 F$ S# for authentication.
0 z$ A/ g: p, | S
" y0 x) [/ ~( yCONFIG_SATELLITE_URL=
, O; [( s- \! v- v/ P
( F) D7 ?$ A9 _% P
w; N0 s. N8 b
3 \3 b; | p8 W5 L$ V3 ^# Specify a Satellite 6 Server to register to. If not specified,
0 b5 E Q5 X' V
( ^! E% u; D4 J- F- C# Packstack will register the system to the Red Hat server. When this& {2 m* G i' {' Q6 w
/ s; Z6 L! s/ F. ~/ v, `" k
# option is specified, you also need to set the Satellite 6' o: ~3 Y! c6 j4 z4 f$ R
$ E$ ?/ K1 p2 j% S$ b" ~
# organization (CONFIG_RH_SAT6_ORG) and an activation key
+ ^/ e8 N6 W d0 P% f/ n3 v7 b& v& f" G& o0 z1 H) ]9 n! J+ N
# (CONFIG_RH_SAT6_KEY).
) U3 t! ]" o: l7 C) B; h3 R9 T* J6 c3 `" L
CONFIG_RH_SAT6_SERVER=
4 |6 V6 N3 j7 ?0 i+ f2 q% s! ~; D" O3 b9 ]; y
- Z- e2 C& Z4 X) o3 C1 |
9 k) u6 J- s7 I# s# To subscribe each server with Red Hat Subscription Manager, include8 L! A5 `5 ~3 i
: o q6 m2 H- ]( C; ~: o- [
# this with CONFIG_RH_USER.
) J0 r6 S7 K# u4 z
1 i2 x M- M7 s# |* XCONFIG_RH_PW=
6 \# V+ s# J& W- W1 }
, X6 @* A" a+ k8 M1 t" j F& X0 l: s' ?, O2 F# ^
9 ~4 z, u1 r0 w2 W: L
# Specify 'y' to enable RHEL optional repositories. ['y', 'n']/ G; q! M& Y3 C8 M# I+ x( P
9 R- x- n! o% s \9 [0 H+ T& Y5 k; B
CONFIG_RH_OPTIONAL=y
$ N% O* t1 L* D* F- ^. a/ N
! _' |0 m$ _/ [
; S' m" d( ~% H) j5 K% O( d" X: _4 j! |: u- j
# HTTP proxy to use with Red Hat Subscription Manager.
$ S' s8 v5 o. X4 D/ d4 j9 J8 g7 ?* G* ?4 \
CONFIG_RH_PROXY=3 ? ?' J8 g' S- h' m9 ] o0 q
: \6 U2 ~4 q2 }
, b/ ?3 B2 Y) `4 o& C4 S* }
4 Q& Y- A' z3 g, ^% B9 f6 _5 x# K" C: i9 N
# Specify a Satellite 6 Server organization to use when registering
, t, }) V- k1 e2 n6 G* V. i
5 x! |: m2 ?5 o- N# the system.( }( a( ]: ?: u" G/ \
8 }$ K# X" n; U @CONFIG_RH_SAT6_ORG=6 w# h( D/ ]1 Z' j2 E
# z$ z: X% I ?+ A+ Q
# s+ ?% S" @% d# m/ k* v+ X
1 t4 Z9 U/ L" \% a7 k4 M' a% ^5 r* Q7 K9 S# Specify a Satellite 6 Server activation key to use when registering
5 M |/ z4 g8 c) [( D$ f# P$ M9 L/ D; {9 \
# the system.3 [8 R5 q7 {9 u& V/ |2 c, J, P
/ i! ~+ q% q4 n$ C" N6 `2 J% nCONFIG_RH_SAT6_KEY=
, m8 `0 ]4 m% B, I
; L1 h$ Z7 `7 ?4 n& Y1 j$ K3 Z" P
+ J: J3 ?8 E' f8 {
( ~5 |. i6 E5 I! ]6 H# Port to use for Red Hat Subscription Manager's HTTP proxy.' a- R7 O/ p5 a& H# E7 t
4 @ F. G. [1 |$ x" z/ Y; Q, x3 WCONFIG_RH_PROXY_PORT=7 E- |, C" C5 ], y7 K" Z5 ?4 u8 N
! F4 i- y2 |/ d& h" w& a
# ^( w/ J/ K% n- m4 \3 v! R0 M
2 J5 W5 ?* M( a! V1 @# User name to use for Red Hat Subscription Manager's HTTP proxy.$ g. P# d/ v1 e5 t5 L
6 b' n, }3 x$ H) oCONFIG_RH_PROXY_USER=% a1 W& {" _. O( M4 p4 b9 g
& L0 N. @6 ^, V1 c. R+ O% d
0 j9 [% Q; g( l& N' u
3 b6 `' y. ?, O$ g! [, V8 B' Z" ~5 C# Password to use for Red Hat Subscription Manager's HTTP proxy.! J+ V8 y: h+ N E6 j
. L7 s4 v$ ?4 h3 F! v3 p6 H
CONFIG_RH_PROXY_PW=1 C* p2 \6 J5 }% O7 [3 ^0 A' x
/ c* n/ A6 L* s& p/ a6 g5 A4 v. {" X# z5 V f% |, |
+ \9 x( V* C" z0 B# User name to authenticate with the RHN Satellite server; if you
. o8 E* Q3 A& U7 T3 j* y0 q ?0 H) K+ N5 v) J$ t
# intend to use an access key for Satellite authentication, leave this
& h) D4 {# ~% ?) X
( |1 Y6 a' t! Q: }- P# blank.
6 X1 ^7 N, b9 L% J. Z9 s$ Q/ I8 r9 p( M: z$ L0 t0 l8 c! s' ]
CONFIG_SATELLITE_USER=
2 h/ a# K8 I; h. q; B. F' L) E* E; k
& L7 T* C) e/ ^, V2 I+ A8 o w- P/ z/ R3 M, t: X+ Z7 w
( j4 }; x) h1 s* c0 q
# Password to authenticate with the RHN Satellite server; if you8 C4 A9 p; g) v, B' ^1 m
0 h% U( Y8 T6 { H) c3 Z) X5 H% L
# intend to use an access key for Satellite authentication, leave this: x6 I2 g9 T& R! C; B+ [
6 [' W4 W( t" C( @( w. j, U
# blank.
0 _9 I5 Q1 b( {! o( g1 W, A
8 k2 W- I: C/ L3 ~: gCONFIG_SATELLITE_PW=
& k I$ I) z( s7 s+ F
& L g+ K5 n, ~0 [5 ^9 s+ t
5 J/ k6 M& ~1 ?# ^+ a# A y& z4 d! w5 V: i3 }4 }
# Access key for the Satellite server; if you intend to use a user
4 y" {$ I2 Q0 |3 m4 H$ g
% t& U9 ^. A- w) J \" W# name and password for Satellite authentication, leave this blank.$ e6 h: M' O1 c& k4 B
( V- o0 E" X: f+ X" x6 q
CONFIG_SATELLITE_AKEY=3 W) ], f4 ~) {+ |' K% M
: A' T* k* M+ a
; O" X1 W( E7 v1 ^0 J& c/ s9 n
) ^: {5 w9 Q% B# Certificate path or URL of the certificate authority to verify that
, I2 F" {" r- o9 F1 |; ], X5 d' u7 ?1 A7 H
# the connection with the Satellite server is secure. If you are not
, Z4 y) ~! x& K% l1 e1 }$ Z) y. v: G( d4 `
# using Satellite in your deployment, leave this blank.
& S; D' h# N, t0 U1 `( C9 c. E) `
) M5 x. X* U& X8 M) }; t( y7 [CONFIG_SATELLITE_CACERT=
9 U; ^* W6 O z p
4 {: G5 u( U* t; g9 B9 a3 b" v0 a: t
7 I; I. f5 r" n8 @ ^0 Y$ H. p# Profile name that should be used as an identifier for the system in
6 w3 R$ D4 C9 _/ q/ @4 l& |) e" T4 f, I# W' N( z/ l" g. J# \
# RHN Satellite (if required).
; Y+ }' q2 ^% u% u6 {0 U0 g9 ^* T: ~# e1 h
CONFIG_SATELLITE_PROFILE=
! Y8 K5 Z0 S9 L$ {& a& I; a2 x. d* l: M
: C5 J5 q5 t) w, G4 `1 H! E# O) o& a- E' E- Z
# Comma-separated list of flags passed to the rhnreg_ks command.. ~+ M4 _% B u+ x
% B5 w$ K' u, Y) X# Valid flags are: novirtinfo, norhnsd, nopackages ['novirtinfo',
3 d% h. `! w/ K( d0 \' h* m1 k) |" o
, u9 B7 `$ N- ?2 I2 M3 m# 'norhnsd', 'nopackages']
% e4 }1 O3 t9 i! u r
# o! Q% s3 g/ Y9 \. R; q& _CONFIG_SATELLITE_FLAGS=3 v) m1 J: r9 ?* o# f+ i% E3 e9 m$ s
2 F+ t3 P" R% N6 k* D" g7 D( e* \ ?" J* g
. A: E3 T$ `* }( ?! _7 ^
# HTTP proxy to use when connecting to the RHN Satellite server (if
- B6 p s8 i- ]5 G+ R& M/ k( B8 x) B5 p" Z# O& J
# required).
3 K. @+ u& y+ p' y: h# i/ z, p. V
5 W8 V3 L ?9 Y3 WCONFIG_SATELLITE_PROXY=
6 P+ H# N' Y( f+ u B
! \5 p- D/ }# C z. m" i0 r: S& h$ z5 I. O# d# g. z( ]: ]
, I$ @! t! \$ c# User name to authenticate with the Satellite-server HTTP proxy.
# x/ a8 p! o5 [, x& k
8 u2 P2 r0 u% k" a$ j8 @CONFIG_SATELLITE_PROXY_USER=; U, W, T4 B. C
( n& k. d* J( Z x1 a: d# ]% g/ f% g5 ]( Q2 w' W
- h- N4 Y5 \$ @8 j2 f* V# User password to authenticate with the Satellite-server HTTP proxy.1 t# k, z$ j% d. o9 Q6 a
8 ?* F; L( j" Z: L( i0 |; i$ Y
CONFIG_SATELLITE_PROXY_PW=1 S" x- a0 [ v& C# ] Z' ?2 H2 J. ~- z
3 y# R4 K$ k8 z* w: ?' n3 h5 @- E! d1 L# [: D% H
0 g! [, I; O! ], [& X0 t" S# Specify filepath for CA cert file. If CONFIG_SSL_CACERT_SELFSIGN is: t2 C0 t1 D$ R! o3 P) o
8 v* U( o1 N# b1 Z# set to 'n' it has to be preexisting file.! a+ m1 b( F; P: I( x& B
# m3 T( q6 f0 w$ s: {$ |CONFIG_SSL_CACERT_FILE=/etc/pki/tls/certs/selfcert.crt: |- t) V' Q, B: s0 o
# L1 b3 g- M5 V& A8 Z* @* H: \" I8 B q5 w
& S; v! @9 e. G* S9 S# Specify filepath for CA cert key file. If& ?8 d j4 ]0 I9 W: z3 k. l* d
3 u/ b5 n; E2 p! N
# CONFIG_SSL_CACERT_SELFSIGN is set to 'n' it has to be preexisting4 p3 c9 P* N6 D; p+ o6 U0 |' J2 |
' }" }- a$ z. S! t8 [' S. m ^5 V
# file.) f! T5 d$ f5 a$ s9 w5 p
. O) k1 Z7 @3 l7 Y1 g. RCONFIG_SSL_CACERT_KEY_FILE=/etc/pki/tls/private/selfkey.key
# r" s, y z! a; A) e. l% o
' @- |! @) Y( r6 z* N4 h1 q8 y
) v$ Y) b8 a3 r, j+ r9 o& s/ P/ B! q" j
# Enter the path to use to store generated SSL certificates in.
) n( E' R( h/ B& ?$ ?' P
7 g1 P, a& f0 Q+ L; [ a! hCONFIG_SSL_CERT_DIR=~/packstackca/
. s( s# k+ I+ O6 {& V L; b7 u+ t0 F, F O( W1 ?, Q6 F
( {. ^/ @) e6 C" l0 ^
/ B# U) k( J& s# Specify 'y' if you want Packstack to pregenerate the CA0 w9 X7 z% i: ?8 ^: Z
+ Y. b; J2 y' i, v2 P# Certificate.* {% T/ l& n$ H! T2 z7 f8 c0 m
" |$ L- t0 {8 K$ H3 {6 F6 r, ACONFIG_SSL_CACERT_SELFSIGN=y7 }) K* ^$ l+ Q, D
7 y( G5 m) v, C0 l& s8 }8 o
9 r' C; y1 y0 s. n) j# L5 R+ ~% o2 }' `9 ?& | b) s
# Enter the selfsigned CAcert subject country.8 c0 R1 O0 Q- c
5 ~, ^3 q0 H. j/ `9 C- ~$ {CONFIG_SELFSIGN_CACERT_SUBJECT_C=--
/ x7 \% |; m1 y0 D0 y) K
5 m5 ~, K/ z& J
3 [& R" ^0 u6 }1 G
; U- T1 k0 {' C7 s3 B# v+ }8 N. N, H# Enter the selfsigned CAcert subject state.9 C. p8 T) E6 ?: Q1 ~ n$ M
6 u* ?. ^( o( i' ?$ `CONFIG_SELFSIGN_CACERT_SUBJECT_ST=State
( l+ }4 P; u0 H* }
% e7 j: u$ J5 g" C, [- [7 ]8 ? z
X1 J; J! Q" ~! }! l# ^9 w/ l* c. r2 f
# Enter the selfsigned CAcert subject location.
* U, G3 o- u: {, e3 b$ ?
5 T% B, ^8 |/ F: W6 OCONFIG_SELFSIGN_CACERT_SUBJECT_L=City
2 D# U. | c% w0 A- z1 F6 l
; _% p# t2 h1 d* W8 B* g
/ ~$ Q- c& b( m* r8 l' P% f
5 [/ x: Z; A+ W# Enter the selfsigned CAcert subject organization.
# ?; u% s- v# S. q
' ?% W9 [' P7 W0 f2 MCONFIG_SELFSIGN_CACERT_SUBJECT_O=openstack! m* @5 d" f% S$ \* H; S: Q
+ l6 w* K) A( p$ E
$ p+ D7 P1 h* X
k$ i9 W3 w6 K1 M+ g* U% O6 q$ T3 j# Enter the selfsigned CAcert subject organizational unit.9 J+ U, I; X1 i) m: [; z
0 Y& c" a& b# R# `* \
CONFIG_SELFSIGN_CACERT_SUBJECT_OU=packstack
. z# C5 i' B2 [8 w& N3 I; L
' o, k8 W9 d J3 {' E; o2 q0 |, t; @" Y4 T, o
3 ]' R7 E( @! p* B( e; p& C7 N7 @, G7 A
# Enter the selfsigned CAcert subject common name.9 ]8 A: S E5 d5 A7 |
% N: y" E% O: u" [& KCONFIG_SELFSIGN_CACERT_SUBJECT_CN=packstack
v4 W2 Q+ j2 c
/ `+ H2 X! g2 u6 {$ }+ }; n6 m, l: P3 {6 H- c3 L( d8 t/ \; @
9 j# @5 A, h9 [8 q( T0 ]CONFIG_SELFSIGN_CACERT_SUBJECT_MAIL=admin@packstack
r4 v- N7 D* h
& q5 {: a) c1 B; G4 ?, M( \! S7 y% S2 m, D4 G z2 m9 ^
/ U# b3 ~$ d+ }, w9 s; [% o; l
# Service to be used as the AMQP broker. Allowed values are: rabbitmq* Z' d* r; D4 M4 [
% k3 u; W/ [% c5 _# ['rabbitmq']
1 v4 a$ t7 C# W. T0 t5 w
0 j1 P+ q/ X) SCONFIG_AMQP_BACKEND=rabbitmq
- r: g5 h8 i: y$ e+ D& I3 k1 l4 T7 S
1 J' r$ ` O2 i& R
9 W) T% ~8 g: Z9 I% }+ V+ J6 U: o8 _* H: `, R1 g
# IP address of the server on which to install the AMQP service.% b9 \1 R# _7 Z7 R8 z
9 S) n- M$ S0 f1 M) O3 g. `" t: RCONFIG_AMQP_HOST=10.0.2.15: a2 m& P$ h3 h% P5 t! t
! R6 {" h, R3 c7 ~, I! {9 J% y
! z4 j% d! X2 C# ?
0 D) N. n$ X, R' K- V# Specify 'y' to enable SSL for the AMQP service. ['y', 'n']
0 l8 w# b4 x( p4 p' f8 W, u3 k1 [8 e5 F
CONFIG_AMQP_ENABLE_SSL=n. i5 e" r! P' Y
( S7 f9 [, Z; |. ?. E" K
* ? f. x) ~- z
% c& J! z& f L+ \- y
# Specify 'y' to enable authentication for the AMQP service. ['y',0 o" Y; h* k3 v
~/ t* N/ O! _+ h# G3 B! T# 'n']) a: A0 H1 G* s/ D# f/ @1 b) L' U7 W
( M! u" \. ~* k4 f+ ?, R0 X! p6 g
CONFIG_AMQP_ENABLE_AUTH=n
8 e- x* f4 h# \# S! Q. b) f, ]' P( a, R, v1 b0 E2 @
( a) @5 g6 `7 d5 Q& {, ]' P, I
3 o: C5 r* T- l0 M% h" ?+ s
# Password for the NSS certificate database of the AMQP service.
/ U, @* W% j$ Z, O. X5 U2 b- {8 K! H% L1 W H+ C y
CONFIG_AMQP_NSS_CERTDB_PW=PW_PLACEHOLDER
5 K( S7 e( C% K! N1 S. V/ g& E/ z8 }& M z
# h8 w% Z6 q8 Y$ r
5 @1 F* c" K1 k J% W# User for AMQP authentication." L7 n3 Z9 h& Q' `% e
6 ^8 b6 d& _* Y3 P n4 o+ j
CONFIG_AMQP_AUTH_USER=amqp_user% L7 k* B, b4 W( ^; @
1 a7 D: X3 }: ]& b7 ^
9 P& ~+ ]6 Y# V9 P1 n3 j' ?. d6 n! B; ~3 `9 w
# Password for AMQP authentication.
0 k; h" d- p& n0 t% c8 C8 H
1 X0 j; _9 ^( e" F) {CONFIG_AMQP_AUTH_PASSWORD=PW_PLACEHOLDER
$ K8 w3 r7 g1 Y+ c* s8 G- E" H' c6 x( U$ g
& b I( w6 \2 Q, E( `+ D8 E5 }( L% M/ O1 W2 I: F
# IP address of the server on which to install MariaDB. If a MariaDB. M5 Q% ~, h9 E' @
+ U( j8 ^5 a. `; J" u
# installation was not specified in CONFIG_MARIADB_INSTALL, specify
0 a* N0 l# k$ [; b9 i7 Y( {
8 J" B# { c7 i6 w2 N. @4 I; r# the IP address of an existing database server (a MariaDB cluster can Y5 c. C$ E) ~6 n7 y
, D5 b9 w4 @1 ~" f% A# also be specified).
" [$ _9 z3 R$ Q/ j! L/ D1 b, ?* W: v. d! m9 C8 [1 _
CONFIG_MARIADB_HOST=10.0.2.15
+ o9 ~5 i: k) L. a
2 }+ T' T; P3 r. y/ b. d% R8 q' Z; {; A; f7 y1 {- Q7 P+ q
6 r& `: }$ U1 L9 y& {# User name for the MariaDB administrative user.9 ], @" k: {) m; a4 R9 k- K
: k( w1 y7 S3 k$ B
CONFIG_MARIADB_USER=root
c9 G. o5 d3 o( p: F' ^
3 Y( V" w- E/ d$ \; h* S! y5 S% ], m# i) s8 w
: X+ P% ?% `! {* t) `% l# Password for the MariaDB administrative user.
: p8 `7 a4 \( H! q( i: d9 f
& N' _2 O3 L! |$ c( E9 E$ ]CONFIG_MARIADB_PW=67910d76942f4616; R4 e1 J6 L3 ~6 D9 e
5 C1 [( H. b. A# C+ w% }( w
( w- \& N V4 m2 {1 o. d8 _8 D% n+ q/ I; ?5 l8 d5 f/ {: a
# Password to use for the Identity service (keystone) to access the
: z- i# N! q) n/ {0 I; |# m% @- k! J2 _
# database.4 W2 N8 f' `! J/ K: z5 ~
" G3 N, G5 Q. T+ D8 A3 ~% N! zCONFIG_KEYSTONE_DB_PW=0f7395897231422d1 L" _% z; r; {8 r& z: ?
" z/ f4 n/ ]1 l, o" {! r5 ^0 U, I& m' ~$ Z" `' H: M3 K; r
1 n5 b2 ~5 k; I% ]# Enter y if cron job for removing soft deleted DB rows should be
! Y4 o9 R9 G4 B! G8 a# f" ?# m& d9 @, m* P; R
# created.
* _6 f7 l2 {6 J; i2 s0 O, c; k$ j4 P: p. p' P3 Z
CONFIG_KEYSTONE_DB_PURGE_ENABLE=True
g5 J+ w3 B* C' X1 u `2 [% N" n& {# V3 ~7 C; W5 u' G
8 H. w2 D6 x8 K0 S
3 F* Y+ v( y* v/ v: ^, p9 K: y T# Default region name to use when creating tenants in the Identity9 x9 N$ f' F# N4 ]& V$ O
4 b1 k m- ]( B J* j$ C
# service.
( j, o5 l: W- a8 f% C( T ]
" g7 R0 T& R/ E- `1 h. I, DCONFIG_KEYSTONE_REGION=RegionOne
% m. }9 a5 p7 S* Y- R* Y5 x, \- Y! t1 J; I8 D$ Q: e0 Q
! @% v( J: e4 x; N, C+ f( J w
$ F4 z% i* d2 h6 N/ M8 l9 M; y+ n
# Token to use for the Identity service API.
& m0 |8 p$ b! R* X0 C# I0 W' T" r
5 r& p2 y$ ~# g! YCONFIG_KEYSTONE_ADMIN_TOKEN=abb21145a01448e288e25bfac854d7aa
( k( q6 ]3 n5 w: C! _/ d0 N) {( c, E; l" ~/ M! j1 h) {) I* E
, v, U# e8 ~- X) l( Z
1 O- Y6 a, A: ]7 b
# Email address for the Identity service 'admin' user. Defaults to
3 c% x" V* f# Z
' t+ z1 a" {; @# H7 e" Y. ^9 |CONFIG_KEYSTONE_ADMIN_EMAIL=root@localhost5 r0 V! a' H5 v6 J& Q4 C& Q2 L
+ e' Z' w5 Z0 M) y4 S7 S& e
0 n# [0 P2 _' E, ~3 H
; Y; g( {" B# Y. v7 G& o& e0 R# User name for the Identity service 'admin' user. Defaults to! @6 b. |$ H2 T- g
7 ~& Z% d0 j: F+ T3 S# 'admin'.! g% E4 H6 h/ Y U& [! D5 {, N
' }$ {0 I; h0 N2 u7 \! b( g' ~CONFIG_KEYSTONE_ADMIN_USERNAME=admin$ x5 c$ D1 P+ h5 S [
0 x3 [7 L2 |! _- O1 d6 F( }$ x: x/ B4 F& e l% {1 h7 T
* B1 F$ u$ D( ~* B8 w
# Password to use for the Identity service 'admin' user.6 {+ k6 I/ r! E0 H1 B5 P0 E2 s( N$ q
, q2 E# ^5 l# h! G6 uCONFIG_KEYSTONE_ADMIN_PW=admin- k# }7 O5 N m; x# U
8 p% X& U5 X3 Y( r6 E
, ]# H' ~$ _# R! Z7 O! L
7 ?5 U/ U5 s9 l# P4 w$ K( ]
# Password to use for the Identity service 'demo' user.
3 ~. F! [5 r$ L3 E* o4 G1 u4 }# `% F8 p) R
CONFIG_KEYSTONE_DEMO_PW=demo
/ _5 Z e& S6 l2 X% E/ X
; e. u9 P4 g1 a* D) ^6 h0 B
& f$ H( r+ H2 Y) H J# F% e& e
a2 l$ C" \/ i2 ~$ \. N# Identity service API version string. ['v2.0', 'v3'], S. V8 E! a C$ b
/ a; h0 t, ~5 T- \8 Q" xCONFIG_KEYSTONE_API_VERSION=v2.09 F2 H/ J5 A5 H! e$ N4 C
$ Y& Z) q7 R7 d% M3 {
# I2 S9 O( R( \; _3 e% P! G! [% g8 f8 Z& O( @
# Identity service token format (UUID or PKI). The recommended format
3 Z4 ?+ Z4 P9 U9 z6 c
& v+ ^" ]( M, F' {, l# for new deployments is UUID. ['UUID', 'PKI']7 m% I9 F3 A( n! i8 |/ J
) A8 p) s9 s$ D# w" `2 G+ ?CONFIG_KEYSTONE_TOKEN_FORMAT=UUID
) b) F/ ~. o7 L3 n" V
3 U& H! X6 c( [" p& Y) D! M, x" m6 z/ q, n. Q/ O" g" v& M8 H
% c' H+ E6 h% t* M" E- w# Name of service to use to run the Identity service (keystone or3 y$ p/ d9 n0 ~$ Z
" t" o' f9 x# \" d0 r5 T* K3 _/ a2 e" |
# httpd). ['keystone', 'httpd']( o6 P& m2 J% x8 j0 t6 D4 h
( I% M2 ^+ d" z( b$ I0 d. B8 X% n
CONFIG_KEYSTONE_SERVICE_NAME=httpd
7 a! F: H. Z1 C ~/ A9 s1 z( v& [- H
; q2 y; i! \& Q" { B3 o! n7 D+ E; Q+ Y4 n5 n6 z, U
% c# P3 Z' p: t+ C# Type of Identity service backend (sql or ldap). ['sql', 'ldap']! T( A) F5 A6 W' E6 i! X
& ~# @, l6 S# g1 C$ M% B
CONFIG_KEYSTONE_IDENTITY_BACKEND=sql0 y+ z2 [8 \; D
4 [# C6 q& q; d( t# ^0 H
9 R) z3 ~ A: K. g
# w+ K: L3 p4 X+ Q$ S7 ~# URL for the Identity service LDAP backend.
2 L! r% E4 g p" j' \- |
0 l4 O: g$ @6 r. x" I0 ?CONFIG_KEYSTONE_LDAP_URL=ldap://10.0.2.15
2 k8 L) L& x; P8 p6 v4 I+ e; E/ p9 P& y
3 m* C' n$ g* `, x
/ @- \( o' ]7 [: b; [2 l. H# User DN for the Identity service LDAP backend. Used to bind to the
) ~* ]& P# ~ ~9 ]
7 t$ X5 l9 z' p3 A5 q# LDAP server if the LDAP server does not allow anonymous2 _2 e0 X6 F& x9 @3 ^! C
6 B" [4 t# w) s+ }( B H) N7 {
# authentication.
: W) F, ?4 ^! D& v6 _9 S" V; P- u. b r1 q$ H5 y
CONFIG_KEYSTONE_LDAP_USER_DN=8 C0 l" J& N! v* i2 C, Y6 S
6 t5 ~! z6 Z C1 g: d# a
! P5 M$ n1 [! R0 ?
* A$ g* K6 J- t1 U7 r; l. C# User DN password for the Identity service LDAP backend.
4 a w# k9 a2 Q: g! s/ n- T% c0 r' k0 ?- S
CONFIG_KEYSTONE_LDAP_USER_PASSWORD=
0 n2 X5 D: N" y* T( _5 K+ ^8 E [5 W% b! P' T4 |5 ~ q
N- A! ^# h1 g6 ~* _4 }
# k o% a- A# A& J& h8 I0 b5 Q# Base suffix for the Identity service LDAP backend.
8 H- X5 i3 D' [9 h" W
4 e, ?: r9 s- h/ u2 p4 RCONFIG_KEYSTONE_LDAP_SUFFIX=+ R! p" f9 `7 [# k
, z! A7 U2 s2 _6 c" ]/ d
; F/ `. }4 ?0 }8 X M' c
8 d6 s) Q0 `7 W/ s: n# Query scope for the Identity service LDAP backend. Use 'one' for
! o$ p+ t( k7 R. Q* _, L4 |! c0 O; j8 q: Z3 P9 C" x/ k
# onelevel/singleLevel or 'sub' for subtree/wholeSubtree ('base' is
, D& E& l7 m; k% e) K, e! |& Q# `* {
# not actually used by the Identity service and is therefore
0 F7 s1 n& O( v$ m0 m+ p9 X$ `* k
! C6 Z' L% d- e$ { m# deprecated). ['base', 'one', 'sub']
* U) T8 s% w1 D( I$ s. n1 M
' ^9 s% B2 G) m" \4 a1 U7 Z! YCONFIG_KEYSTONE_LDAP_QUERY_SCOPE=one2 s A3 R( U+ p5 O2 |# N
! u& L! L% R' v% Y' x: G7 w; T9 e. i4 Y+ ^
0 d, t2 r+ ~$ S( y% y! Z# Query page size for the Identity service LDAP backend.2 C0 K* |$ y; W5 P% W. S: }* t
J' n9 X# E, @3 b5 p* ]
CONFIG_KEYSTONE_LDAP_PAGE_SIZE=-1
; P( ~* O( v) Q2 p- W: J2 Z
5 H8 M' c. _/ ?' ^; x
" ?# g# F, H* Z6 \' J# R1 E1 h4 C# z0 b; T+ i
# User subtree for the Identity service LDAP backend." t7 P9 n) @0 s) V
: y3 s, l. W, W/ hCONFIG_KEYSTONE_LDAP_USER_SUBTREE=
) `* g5 ]+ L; r2 R
" p$ C# z' A$ @# M0 D8 `
4 a+ g2 R+ {9 n. c# ]8 D
1 P, T" j: ^8 ^9 z! |# User query filter for the Identity service LDAP backend.8 U+ N( O4 Z% F: o& b
2 x5 g) M' g( KCONFIG_KEYSTONE_LDAP_USER_FILTER=* l/ ~2 g/ D8 \6 e
2 F6 P; q1 k- t2 R+ E
! X# Y- F8 n4 ?+ U/ l# R% e6 O _, s5 h9 B; G
# User object class for the Identity service LDAP backend.- a& D# {3 E$ S: x7 M" G/ V
" m7 ]. e, p c1 E% R- H# iCONFIG_KEYSTONE_LDAP_USER_OBJECTCLASS=+ R: j9 R4 ]5 A/ w' F) @! K! c
5 f1 B! B1 ^ p1 n2 U
3 I- Q+ \/ k6 \! [- u& a, F/ Z8 V5 h" P# C2 |1 E
# User ID attribute for the Identity service LDAP backend.
" q6 |1 Z3 H: J8 z
2 L1 d- H* G; n7 O: J+ t2 PCONFIG_KEYSTONE_LDAP_USER_ID_ATTRIBUTE=+ M9 V+ K; p8 O
: t3 S) l2 x6 v& ~
3 ^1 j* i9 f) \/ O2 Q
4 k# |. j' w8 U4 W. ]6 C, S" c# User name attribute for the Identity service LDAP backend.& O; ^% X: o, b+ i1 `# O" K5 H
6 ]5 e) R$ ~0 u4 Q/ ~" y/ O! }& `CONFIG_KEYSTONE_LDAP_USER_NAME_ATTRIBUTE=: {# ^ o6 R5 y# w* e
6 x' P$ n3 R3 X. b2 H& e3 v2 [8 G
9 |. }! R+ q) o8 d
/ }% j( U) E: V4 ?# j; s
# User email address attribute for the Identity service LDAP backend.
3 x% d" B, |& d0 W1 O; R
+ C6 p4 ?) Q: ]! a% w$ mCONFIG_KEYSTONE_LDAP_USER_MAIL_ATTRIBUTE=" J* z; S8 ]) K7 Z
. ~! u/ n) |, l; ?* b
8 E2 _& t3 _% w5 @& Y/ `& I( P: v" `3 p) g* y0 x$ a9 N& B
# User-enabled attribute for the Identity service LDAP backend.6 c! t/ Y9 s# @, R3 F% b
8 e& }& k( J' y, Z9 d' u
CONFIG_KEYSTONE_LDAP_USER_ENABLED_ATTRIBUTE=
3 n, R" ~6 H: r4 d. t7 v+ i8 u- x* V& G
- `5 T3 E" F2 u: S( t' X5 ?( Y4 [$ l
# Bit mask integer applied to user-enabled attribute for the Identity
2 F8 f$ ]- L! O6 u; T" I2 b" @5 e0 i& O% {' j( r; C; ?8 k F
# service LDAP backend. Indicate the bit that the enabled value is
; p1 }! Y* u5 F% \5 `$ \6 B3 }# Y7 j9 L9 f4 q' s6 [2 y
# stored in if the LDAP server represents "enabled" as a bit on an
) L# v3 r% @/ a5 l1 D, b3 s( }; b* W. y3 f- Z) T
# integer rather than a boolean. A value of "0" indicates the mask is
* l" M% C' s' |
, |' I7 y$ a/ S6 E( K# not used (default). If this is not set to "0", the typical value is" u1 L' ~) p( [4 @
2 Z o- H( z+ _% }7 x; P7 i& y
# "2", typically used when
& E" o+ ~7 ]6 s, D" Y9 L2 z: V3 B! a \: _$ w4 i: S7 ^ `
# "CONFIG_KEYSTONE_LDAP_USER_ENABLED_ATTRIBUTE = userAccountControl".
3 }9 E: m) a7 J, E7 F) o9 v7 ]( V' Q, i7 l, J
CONFIG_KEYSTONE_LDAP_USER_ENABLED_MASK=-1
9 @9 m7 O. Z6 Z B
1 m, N! P/ X0 j x
9 |: k! T# R h4 o z4 ]8 ^
1 O1 y* ]. E5 i& s6 `+ h# Value of enabled attribute which indicates user is enabled for the
# j ^$ M2 }& F6 {% j; {, Y9 ]" I/ @+ m0 |: [. {
# Identity service LDAP backend. This should match an appropriate( O+ C* G5 {7 Y( x( w6 Q
! y( J. c* v& w# integer value if the LDAP server uses non-boolean (bitmask) values
* N3 X9 h7 _8 v0 i( R% U2 |, x; c# ~* ?9 J7 y
# to indicate whether a user is enabled or disabled. If this is not
x$ e: T0 v& Y! D" A3 ]
' Y1 f: B, a2 X# `- p# set as 'y', the typical value is "512". This is typically used when
- T+ |3 n9 q' i; J$ `0 Q# V" t$ P q8 M- V( r" ^3 ]
# "CONFIG_KEYSTONE_LDAP_USER_ENABLED_ATTRIBUTE = userAccountControl".' T! {! i+ [, Y8 z& P& s
% Y& ]5 n4 o, q( q& F
CONFIG_KEYSTONE_LDAP_USER_ENABLED_DEFAULT=TRUE# D- |6 q J( |0 W- x, y4 X
1 Q3 A' {( Q7 E6 P
- \% H) o: O$ V2 N/ ^" v$ J# E- @) Z4 F. ~/ k$ L6 Q
# Specify 'y' if users are disabled (not enabled) in the Identity
# S$ N/ A8 [2 d! q# k/ I, u, a* ~0 K3 @ c0 x9 ]( V
# service LDAP backend (inverts boolean-enalbed values). Some LDAP8 G$ }/ D* I, R( W
% x/ s0 o/ n2 M$ c: n
# servers use a boolean lock attribute where "y" means an account is0 p7 ~; R& L- g. k' H
6 n' r* w# S5 g" }5 w: E! L# disabled. Setting this to 'y' allows these lock attributes to be
$ s1 Q1 `. x( p" k+ E6 X2 C. F; j( W/ H# v! _- {8 W
# used. This setting will have no effect if6 H, f5 t) r# e, I2 [5 X+ n+ C
" w/ k$ D8 J& i. H# "CONFIG_KEYSTONE_LDAP_USER_ENABLED_MASK" is in use. ['n', 'y']
) ^2 G# f' |8 S) _9 _, t! N0 x) y. W& P6 ~% {! M& b4 L& M
CONFIG_KEYSTONE_LDAP_USER_ENABLED_INVERT=n7 ?* B+ y/ Y! z$ Q9 {0 e5 A* m/ h
5 n1 U7 }- U* A# M8 i! L
. p; r% h! U; z: R$ C
$ ^6 n( F' _( s1 q6 c2 }! t6 _
# Comma-separated list of attributes stripped from LDAP user entry! D3 Y z. i* i! M! ^
3 I p$ d C8 c. y) o* w
# upon update.7 K8 v0 B( l8 _8 R+ G
0 L3 W7 R% u3 m8 U9 ]CONFIG_KEYSTONE_LDAP_USER_ATTRIBUTE_IGNORE=
, V/ L$ o9 h. Q: ]( |
! e# y: e6 r4 [! O" s1 U) t" G
a$ Y: i$ f9 d; ~0 h
; _, j" u. ?- t+ F) F* p# Identity service LDAP attribute mapped to default_project_id for" c) M! T( l. n+ F# P4 g
# }" v: A0 j& [& G! y6 _
# users.
5 x4 M: u* U) A z* D z4 u; Y& c' `2 t# F1 F3 ^% F4 ?
CONFIG_KEYSTONE_LDAP_USER_DEFAULT_PROJECT_ID_ATTRIBUTE=
7 C. x+ Y5 K" |6 s: B) M
- |; s: @5 ^; R. u l% ^" o7 ` u8 n: m" [* l- C% b
+ O- g+ {9 l& B9 P( Q Y. ~. @
# Specify 'y' if you want to be able to create Identity service users3 R) Z$ S; v5 T! N$ p
6 U( ~* }8 d9 [+ e f* t6 d7 i# through the Identity service interface; specify 'n' if you will0 q) i$ Z( i9 Q/ a- p
$ {3 Z# p0 o% C4 O+ i
# create directly in the LDAP backend. ['n', 'y']
+ X' n( \* R8 C6 g. z& N, k8 O, S6 [& U2 Q0 |
CONFIG_KEYSTONE_LDAP_USER_ALLOW_CREATE=n7 M! @' L( \# ]2 e- \
" j/ T* P# n* e. x0 @) \' P4 C2 ?# R; q/ W `$ g/ D% X
% H4 @- E9 o8 B& j# Specify 'y' if you want to be able to update Identity service users' n. k, S. N3 c$ l/ e) r" T3 T1 f
' z8 R7 H& Z% r9 `' Z
# through the Identity service interface; specify 'n' if you will9 Y- i5 Q R0 B D8 l
9 T) |% A I, u+ Z5 c2 F, F* F# update directly in the LDAP backend. ['n', 'y']
5 T% d0 s { l& I2 g3 K# ^ j* J; b* W% ?
CONFIG_KEYSTONE_LDAP_USER_ALLOW_UPDATE=n
9 \! `/ A- H2 R+ K* ^0 T5 ~4 m W* f5 u z
1 b& i, u5 q: f% G* b6 I2 e
% i! R) o0 m$ p. L. Q1 ~ y/ a/ i2 }# Specify 'y' if you want to be able to delete Identity service users
9 r: S% [% n2 C B0 x( } {' f+ y
. F' K* n5 O( r# through the Identity service interface; specify 'n' if you will; N1 m: r# Z9 \! V0 e
" \: a$ N5 `% d/ L- u' {7 O
# delete directly in the LDAP backend. ['n', 'y']9 r4 {8 S0 E. Z( D v" j
~) R, Y* a/ f. d" ?# ZCONFIG_KEYSTONE_LDAP_USER_ALLOW_DELETE=n2 B5 Y2 |: O; E0 ~( g! s
l$ Y C F; D: v, K5 t; g, q' H6 X3 \- C% \* A1 I
( g- S1 x' U( Y1 d
# Identity service LDAP attribute mapped to password., H* F, ]7 T4 W" Y
! c( O/ h* A/ c- ~- {! i8 J; F3 @CONFIG_KEYSTONE_LDAP_USER_PASS_ATTRIBUTE=
) i; k' M1 S I5 s% k( }
W1 y! X! ~- V. e$ z1 V2 ]
1 w5 \4 ^+ X& T
7 I$ l) `5 R- x+ H8 m# DN of the group entry to hold enabled LDAP users when using enabled
' [( G# b' [ ?9 o2 B
8 r8 ~( f7 _# W h; g# emulation.+ a5 V) |) @: I" s' R' U
3 j3 f0 ~3 g3 xCONFIG_KEYSTONE_LDAP_USER_ENABLED_EMULATION_DN=
$ f: A( u, v# R, k- r7 a) l6 N7 q* Z7 b$ i: _
0 N6 b- U% v) F8 q, f5 M
U& m' f% f2 _& R* V% |0 ~6 S
# List of additional LDAP attributes for mapping additional attribute
' V" s9 n) i5 a. R
8 M6 F, h3 @9 Y, j4 C# mappings for users. The attribute-mapping format is
. e9 d3 n" r) v' U/ F/ p; e! p o& ~2 m }
# <ldap_attr>:<user_attr>, where ldap_attr is the attribute in the6 u" g$ p- x- b& c
, r1 a0 p9 T1 K* v) f! p# LDAP entry and user_attr is the Identity API attribute.
[, T0 m. G f
h5 b4 [9 K: X( L+ U4 dCONFIG_KEYSTONE_LDAP_USER_ADDITIONAL_ATTRIBUTE_MAPPING=3 n0 c, H$ \/ {) a# ^" h% d4 u; z
8 i. j* d& f: w/ P) k
" N& I8 [) C$ u+ a3 t \3 E
9 n" P# L, J. b* |# y: e! q$ g# Group subtree for the Identity service LDAP backend.
- }% e, R x2 t; l# n
" ?, o4 @4 L3 G6 Y! bCONFIG_KEYSTONE_LDAP_GROUP_SUBTREE=
) a4 c9 v) e& w) X
( d5 f0 w2 t1 x" Y+ ]) {
, T# n0 @0 f& h) f+ a% ~" S7 m
: J8 M: {. n: x% e7 G/ f1 N, Z$ q# Group query filter for the Identity service LDAP backend.! p4 ?1 B( Y/ d5 w6 X7 U* p
( Y8 J, H% {- R& \+ ~$ g% eCONFIG_KEYSTONE_LDAP_GROUP_FILTER=# i, F9 @# ^/ F0 T! I$ [( B
! _& u) \" g4 V, w1 o! Q9 |
5 H5 v& X: }2 C. }
+ o" h/ G9 t" h/ y/ H) r& L
# Group object class for the Identity service LDAP backend.
, ^/ J7 L3 B5 X3 c8 R8 M; T1 c3 _( U# c
CONFIG_KEYSTONE_LDAP_GROUP_OBJECTCLASS=
3 ?( J( j, A t O# u+ |# O9 K4 a
5 y2 J, Q% [! Y9 ~, D* j( `- G" x
5 f( N$ U# X0 _; p% v0 u/ h# Group ID attribute for the Identity service LDAP backend.% X, R0 A' _9 K! d1 O
" q' O8 X2 V5 X7 W; a1 X$ o
CONFIG_KEYSTONE_LDAP_GROUP_ID_ATTRIBUTE=1 J! n" n) T9 e4 z! W1 x
/ N, p/ L/ }( n9 ^% S9 D: O( V2 M: w+ H8 [
, ]7 C( f3 S4 s# {4 P+ }4 a, X; ^
# Group name attribute for the Identity service LDAP backend.
6 [( J% j0 r# F9 U* q0 d+ ^& D* z, i+ }4 s5 B8 F
CONFIG_KEYSTONE_LDAP_GROUP_NAME_ATTRIBUTE=1 ?# [# q/ ^* n6 i# B) F+ V+ E5 O
. {1 T/ f5 R6 W" T
) B* `& H8 O; D: @. C5 B% I* _) ?! l$ }5 z0 @' s8 ^& S' E& A
# Group member attribute for the Identity service LDAP backend.
) p# Z/ K# |1 q* L# D: e L5 G; e
: i. [( ]' @' L7 n( a3 h" b3 aCONFIG_KEYSTONE_LDAP_GROUP_MEMBER_ATTRIBUTE=: r% y0 t# |" T, W' |7 O$ I4 J
}$ i. K5 g% f2 b0 {3 ~5 ^2 `
& s! L8 t e2 o; V
: q3 _. M# G1 n* I) `$ _
# Group description attribute for the Identity service LDAP backend.
% p" E7 s1 t7 u8 T0 Y
7 M( `! t: _+ Z0 n2 m7 Y& yCONFIG_KEYSTONE_LDAP_GROUP_DESC_ATTRIBUTE=0 b# R& f8 R$ A! W% k
7 ~9 G H5 t( t, _' t, G& q
) O/ r8 l7 Z1 n* _+ w
# A# P2 A5 ~, g& t4 |# Comma-separated list of attributes stripped from LDAP group entry: B' a) P: t( o5 ^$ o% l" r
! S9 K/ K0 N4 L. f5 ?# upon update.8 f" F, P/ Z# ]
# i5 D. W# G* ^ C/ g3 _, w* qCONFIG_KEYSTONE_LDAP_GROUP_ATTRIBUTE_IGNORE=; [2 P* j% i3 x5 J* b
" H# _6 Z ^, S" y- [
! f9 r; j4 I4 w) r: ^* @; Y0 W* @5 G# Q) ?# ^
# Specify 'y' if you want to be able to create Identity service, B* L& s& S, c5 U
7 d* l% |, ?* P
# groups through the Identity service interface; specify 'n' if you
. G# j7 Q& m2 E- s% V* M. M$ p7 @% w3 `: K1 U; T& F
# will create directly in the LDAP backend. ['n', 'y']
' g+ [8 w; l" }% S* k6 b) v1 w$ S: X' @. t9 }4 c
CONFIG_KEYSTONE_LDAP_GROUP_ALLOW_CREATE=n
( q3 G3 K- F1 _+ Z& t( i" _$ q3 H& w- ~% F; s
2 d( x( g# [3 Q; n8 x( \* a/ ?% K5 R- r4 s1 E1 f: {
# Specify 'y' if you want to be able to update Identity service3 R8 A0 i1 r2 t P
) a. t( g( \/ N+ h: b# groups through the Identity service interface; specify 'n' if you6 e' u" o1 D" O% V- f
, N) d. h% d& ?3 B
# will update directly in the LDAP backend. ['n', 'y']
: t+ l0 B' s3 ^ S! }. l+ X. x4 U7 ^
CONFIG_KEYSTONE_LDAP_GROUP_ALLOW_UPDATE=n' ^/ b0 |7 U; @. g: N- k2 L: W
. @& d$ E1 W, b: v+ t$ H
# O3 j" E/ u: b2 j1 J: ` W
; N/ f1 L2 x$ ?& t. D. f) q# Specify 'y' if you want to be able to delete Identity service
( G% m8 k% R5 M4 v; D& M" R9 Z! J* L! b( S" y
# groups through the Identity service interface; specify 'n' if you3 Z2 K3 C0 J' M2 L% u) L9 z2 w' w
9 U( t8 s, @- p H- G/ R/ |
# will delete directly in the LDAP backend. ['n', 'y']. G/ r" h9 a+ Q( |: b% Y7 {9 D
. w! B9 P1 n# d' ^* m6 z3 H$ z1 @
CONFIG_KEYSTONE_LDAP_GROUP_ALLOW_DELETE=n
* B% V1 Y# ?0 \/ P. E$ h3 e
6 a `2 y+ ~# v" Z) b7 ~
' |1 z1 v0 G+ ~+ r2 x7 h* ^2 U( L) G7 }! C, H* q [) a
# List of additional LDAP attributes used for mapping additional# C; u. Z. w% c; W
1 D' Y/ b/ d1 D' Z/ u2 y/ J5 W
# attribute mappings for groups. The attribute=mapping format is
( e* }$ |" [ Z: W# @7 x$ f9 P7 Z- K
# <ldap_attr>:<group_attr>, where ldap_attr is the attribute in the
0 Q1 ?" L9 E& _5 j+ G K. V* R! [% _0 U e; r6 N( w4 S
# LDAP entry and group_attr is the Identity API attribute.
- `% v$ e/ W$ J. R
6 Z' c9 N! e. a9 w; [* ]* JCONFIG_KEYSTONE_LDAP_GROUP_ADDITIONAL_ATTRIBUTE_MAPPING=
% A/ ?- g& {- T9 P8 V$ d
% E0 G [6 ]# u; j0 \6 z C2 X
9 N7 p8 L6 U' S( Z/ Q+ _: U5 |% v- D
2 I! a% P ~' r% j# Specify 'y' if the Identity service LDAP backend should use TLS./ K* B! j0 @1 m% B( v
4 v( O4 L. t( y6 N
# ['n', 'y']
/ M* f. c! X$ U- U: q6 K. }- x1 r6 O9 ~5 L* N. i, _& _
CONFIG_KEYSTONE_LDAP_USE_TLS=n
0 U* m: {; T. ~+ w/ c, [8 q7 e8 s) O; k2 d( H* O
- W* \' R. A$ i' e# l% {# A8 [+ U( n3 W0 P
# CA certificate directory for Identity service LDAP backend (if TLS- P9 q; C9 f0 V/ G( E: j
8 W' m* {) ~; G& P9 ?, h& I# is used).* s" _/ \0 Q! e! o1 ^* [' [0 s
. O' A1 U6 |2 S8 J$ b, }
CONFIG_KEYSTONE_LDAP_TLS_CACERTDIR=0 d" N+ D; ~1 ]$ Z! u/ C! `6 E
5 u6 G2 @$ ?3 |! u- G3 S" F5 L
4 F- `% [ u' X4 d% P8 ]% ?8 M3 R# U3 n% j# }5 r
# CA certificate file for Identity service LDAP backend (if TLS is( M# x$ K" y. f
* Y! ]5 P; m& \4 _- \9 ?% _
# used).
3 p# t( R2 e2 i# ~) p8 ^/ \4 q- x. L
CONFIG_KEYSTONE_LDAP_TLS_CACERTFILE=$ P. @! ^+ y N1 B
. D5 k, c5 c) u4 q$ |
2 {/ R% Y/ o/ a& G7 R9 Y
3 ]: ]4 d7 G$ @$ f9 k# Certificate-checking strictness level for Identity service LDAP
+ j0 T7 g" ?7 V/ ?: ^# N
7 w v7 P; B d5 J# backend; valid options are: never, allow, demand. ['never', 'allow',. Z2 b$ z: C1 K! C g$ S
+ R0 Z0 F7 E# p7 b. l. s& c) N( A
# 'demand']
* X( B: J' v$ g4 b. U& w& Q. p/ R/ p
CONFIG_KEYSTONE_LDAP_TLS_REQ_CERT=demand L l8 P" O" }% f( i( I/ j, |
6 _( r# Q i2 f/ O- y; P
( y" ?8 t) H# z
7 d, f: P: V0 K! m# Password to use for the Image service (glance) to access the
% E* n2 }* g$ k
+ U0 d M l( b2 p8 V; f# database.8 V8 J" j' X" V; P% A8 H5 ]% g& g
$ E! {4 f1 m' l8 \, [/ l
CONFIG_GLANCE_DB_PW=ab6b7d5882bf4bcd
: B4 ]0 O+ _7 E7 I+ {( \% ~% A
0 K6 T4 m- g# _4 y1 W
$ W6 n2 n! I$ w7 _- G! D3 v: g$ i, s" D7 p8 J9 p
# Password to use for the Image service to authenticate with the
* [& [0 o; D0 d7 {5 H! ~) M$ Z8 e, W; ?1 l) ]0 \' n, @6 N2 X
# Identity service.
4 W5 M R- A% Z; Z1 {+ A, R
; f7 K) ?& `- [! _8 GCONFIG_GLANCE_KS_PW=cca0c6076d8a4849
0 J3 t. e- m: w# W8 }4 N: H1 P
7 k( _: _. {* _2 K
: }9 O. Z8 W K9 a( u$ o& J; C: J+ `: B, c
# Storage backend for the Image service (controls how the Image
+ [9 n1 A; ~4 p: r' h/ V2 m( z0 k9 Y6 d4 b* O
# service stores disk images). Valid options are: file or swift6 c9 _$ g- {' {6 C+ ~1 `
. j5 c! q9 ]% n' E# F' f0 f# (Object Storage). The Object Storage service must be enabled to use2 ]0 |9 k4 M, u$ s# k/ u
1 p2 M2 t8 |4 J. B0 ^# it as a working backend; otherwise, Packstack falls back to 'file'.
, F9 Z7 F. {' o
' l4 c1 i" z0 |' I' {# ['file', 'swift']6 V4 Q$ @9 _9 h8 T/ e
$ y" R7 g/ S+ X: Z0 Q' P
CONFIG_GLANCE_BACKEND=file: i% W4 c! w1 L x: P& @
4 @5 |- k/ C1 }' h+ \- \; u9 y/ I! r
7 |5 O7 n2 J6 O* |% T
* a( c- l6 @7 U7 J6 c: j
# Password to use for the Block Storage service (cinder) to access0 @7 ^! m3 M* F% E! y9 t
! p* k/ M, Z8 c6 V# the database.$ o% j1 s- ~" V# x4 \5 e
; ?2 \ k8 D! ?& g" E
CONFIG_CINDER_DB_PW=9a41e1c3ec5146dd
! v9 a7 x1 l7 ]0 \! I4 t+ F, q
* q& l4 h ]. o/ S; [( E) i+ Q. Q% `2 Y
% C" _5 k" e: `& |3 \9 C% p! z6 G* h0 W' f" }0 L
# Enter y if cron job for removing soft deleted DB rows should be
9 B0 `9 e# ?5 J% H+ z! k: F' u5 O- s) g {( U+ D- i* |! n* }& J& i
# created./ |, m3 g# T- c$ T& @
1 Q8 ~: `: Z3 b; P! k0 `CONFIG_CINDER_DB_PURGE_ENABLE=True, C5 h" ]2 f7 Z/ L# k3 f
% B, q) o) Y0 L i- e
2 x* a! O$ P1 m8 i% h P
: O; D! u5 A, M3 l# Password to use for the Block Storage service to authenticate with1 a3 y0 s- q R
6 S6 W/ C1 }: M1 p4 j
# the Identity service.
/ h( V; O2 g( h+ b, e. c1 ~7 q
$ Y, L L7 E& T* S2 Y& ~( M0 @CONFIG_CINDER_KS_PW=c8a9cda31b6d47eb$ u1 o0 k- v. T: z2 C
/ s" o( b, k3 l H M# r% v! r
# i4 L! |* {+ _7 L/ J* s3 B, }! ]( ]3 `) `% G
# Storage backend to use for the Block Storage service; valid options
1 w C- ]1 M, U# y: e }
0 Y/ O+ S9 h4 V/ B* }# {; j; r# are: lvm, gluster, nfs, vmdk, netapp. ['lvm', 'gluster', 'nfs'," R1 I1 H `1 ~* R! v0 a, s9 e
: Q q* g0 o: g# 'vmdk', 'netapp']
: J' b9 G6 r" t0 n2 N& Z3 N, r( A. p' b. p' s2 D
CONFIG_CINDER_BACKEND=lvm' X6 |; m" H! g( Q% {
, f! q: z" [ j3 p! ^/ B4 V0 x& Z$ J1 N; @' H( ^
' D, i- Q0 H8 ^, W7 ?/ g H5 A# Specify 'y' to create the Block Storage volumes group. That is,4 B% y* h1 g0 B9 k( E
. n# \& A8 K: L2 d0 X1 v# Packstack creates a raw disk image in /var/lib/cinder, and mounts it% b8 F$ _2 S, X5 L
6 e. k( J; P( u, u4 x. j
# using a loopback device. This should only be used for testing on a3 Z6 A! U* S# p
2 B6 h. b" {$ p! A7 a5 s1 n4 o5 q# proof-of-concept installation of the Block Storage service (a file-* a; ^2 i1 y3 g4 F( P: [$ @
$ r8 P- r) ?& X" E$ F& p6 G, N6 R
# backed volume group is not suitable for production usage). ['y', o8 r& W1 @$ L# {" \. z
/ o8 E1 j& }2 V6 v' q0 L% x6 ^2 ~: X* @# 'n']5 Q6 ^4 }- A- s3 d0 p
' Z$ l# N& d `0 Q
CONFIG_CINDER_VOLUMES_CREATE=y7 p& G6 ^- O0 L, |$ S- c2 F! D" h
; e9 }' d: Y. r% v, G! O, M4 Y. q
; h+ C- |* ]% c/ |6 f
7 [* m% t# O9 _# Size of Block Storage volumes group. Actual volume size will be
/ n F1 `& f: n& m+ k1 _
7 D' \' {2 Z3 E; M- ]# extended with 3% more space for VG metadata. Remember that the size5 e; D+ K, f8 \, j
: }; L3 P& s7 T* o# of the volume group will restrict the amount of disk space that you
8 U7 X. p2 T* `9 l. X, W
\ p' q4 x K2 |: O# `# can expose to Compute instances, and that the specified amount must
/ v; E- M' H/ e4 \) g- H; [! T$ u* }8 o+ o; ^3 e0 m
# be available on the device used for /var/lib/cinder.
$ x* M7 }0 X/ G3 X! x1 D* F; w5 v6 x- R, a
CONFIG_CINDER_VOLUMES_SIZE=20G
( w7 e- i7 N8 l$ i- D: U; h1 ` Z8 x( k M# @1 Q
; y/ T$ i% A) q% Z6 T) x8 r" V% F5 X' W/ \3 [
# A single or comma-separated list of Red Hat Storage (gluster)
: J4 R6 j8 |; L/ a+ h9 Y/ e0 y6 D) `! e4 T& S) w" J$ v& q) O
# volume shares to mount. Example: 'ip-address:/vol-name', 'domain% {5 p7 _! e! ?8 W# Q( m6 \4 j8 w
* G+ n+ a8 a9 m+ C1 Q# :/vol-name'# a* l: \# p; P4 k/ o
& n/ h: _. e. T; L, Y, n& |CONFIG_CINDER_GLUSTER_MOUNTS=9 U' C! y' F* q7 g. q2 I
- d! F" B3 H! Z1 a8 ~& U4 ?/ X- s" q
! |7 y; m( s) R) Z
8 {0 Y8 Y( b- h# C; x+ k
# A single or comma-separated list of NFS exports to mount. Example:- k5 e" c g3 F
3 f1 o: P( g% |& \! |/ k/ c# 'ip-address:/export-name'! r; W1 ?3 G2 z3 Q5 H }
4 V/ G" l1 |5 U+ W6 b0 Q qCONFIG_CINDER_NFS_MOUNTS=
/ A6 E. Q( X Z1 v; C3 _3 f$ @) [- j2 O. n! J# |
2 M/ e$ p4 [. l- l$ v7 g7 O
! V+ c O# G% p# Administrative user account name used to access the NetApp storage
2 ?4 w9 \# m1 c. X$ J1 ~7 Y+ U& g" Y7 A
# system or proxy server.
8 A6 z6 A4 d, b3 U' g) _# ?$ T+ D) m0 Q% v7 X# V
CONFIG_CINDER_NETAPP_LOGIN=- U( O# q* M1 h3 a8 q: t
" `) J# ]- D% q+ p% G* Y' h% Y \
8 G+ W1 U9 ?( Z
# Password for the NetApp administrative user account specified in
9 c6 O3 ^) l( f9 T7 P2 M+ E3 {6 ^1 M# V* P/ y# L6 _' z! c
# the CONFIG_CINDER_NETAPP_LOGIN parameter.
_+ i' @9 ?1 f1 u+ V! S/ H
4 ~, Y, M# R. W( r& |' \9 ?CONFIG_CINDER_NETAPP_PASSWORD=9 J" D7 l( s2 k" V0 H
0 _% }1 n U. B# a$ e( R4 g! U& ^. S6 I1 o; j7 I% I7 t
2 u+ t+ j5 w2 H, _! b2 h( L& }
# Hostname (or IP address) for the NetApp storage system or proxy
4 K# ~* \9 d k& {- s4 t/ P% b1 J# ~1 W3 }4 F* l% ?; i4 P. W" m/ V
# server.
+ e- `" L) I6 x8 k8 V) V( ?) B4 i7 D
CONFIG_CINDER_NETAPP_HOSTNAME=
! \" K* c3 `2 F3 ?& n1 `$ g1 l. T8 M3 F
* |# | U0 P6 r; {+ t% H* g# R" w
( V' H ]0 T M; V7 [# x G/ @* o# The TCP port to use for communication with the storage system or3 a1 _+ C' O8 W" X' _- c4 X
) [$ K$ @4 x4 `& w% D# proxy. If not specified, Data ONTAP drivers will use 80 for HTTP and* X3 K1 i h6 a/ b7 n
; N |8 e5 Y4 P; f3 t; H
# 443 for HTTPS; E-Series will use 8080 for HTTP and 8443 for HTTPS.
. P/ K7 O: o( @0 T$ A
2 x3 ?+ t" ~/ i# Defaults to 80.6 v- l* n9 S8 T, t0 ^+ H
+ y: T( T0 e$ S4 K/ N6 o
CONFIG_CINDER_NETAPP_SERVER_PORT=80! i* k( Y) J0 {9 S4 D1 U
; U* H, O! d* Q2 q9 Y# e0 S* f8 C- ^1 W% {* P
8 Y( g; b3 Z: d4 k% N# Storage family type used on the NetApp storage system; valid
' ^# f4 K. ?* `8 `' B
0 t) q1 c* f2 H+ T8 B' U& h# options are ontap_7mode for using Data ONTAP operating in 7-Mode,; R: D) u& q( G
, Y+ C7 c3 W: D# y+ P8 C+ I B1 F
# ontap_cluster for using clustered Data ONTAP, or E-Series for NetApp3 x2 s2 k& y2 Y% g
5 x0 c+ m5 X2 H, T% U; X# E-Series. Defaults to ontap_cluster. ['ontap_7mode',6 o! D# @9 n( q
; U* x$ d* Y1 ~5 J1 O8 ?
# 'ontap_cluster', 'eseries']
! X% G) E* n* @* h
- }. l3 |) j3 c( l n% aCONFIG_CINDER_NETAPP_STORAGE_FAMILY=ontap_cluster) |8 _$ Z' F$ r# c$ ?: X$ ^, k
B+ _, ^* X6 E/ W$ S2 J% l2 X
1 b1 J. ^# D0 Z& V
3 C3 d1 W; P$ @; K/ b+ q- Z) g8 V+ B4 }# The transport protocol used when communicating with the NetApp+ H# t* u- G; g5 B# H
5 U4 a* M9 K+ f% @& r
# storage system or proxy server. Valid values are http or https.& _$ h: q# g& k7 h" ^4 H
, `) P) D8 d& U
# Defaults to 'http'. ['http', 'https']
+ e+ l8 r0 k- f+ ]+ i8 t; ~ A: @4 Y0 l1 J
CONFIG_CINDER_NETAPP_TRANSPORT_TYPE=http% q9 |; y. g6 X& U K L' z# Y0 m
7 u4 l2 a% o$ F) _) R1 W) M5 }. h. R) c5 a% B) Y" E6 s- `
+ B a* W0 r1 K& e0 Z# Storage protocol to be used on the data path with the NetApp
) s" x4 R7 Q6 v1 \; a* J9 a+ |* N% Y- U5 q3 O
# storage system; valid options are iscsi, fc, nfs. Defaults to nfs.' I, r: _7 t# O5 z, ]! @1 W
. |5 K' }, p: r7 D0 Z4 r
# ['iscsi', 'fc', 'nfs']0 ]" f5 M5 } s: |9 \3 u- i
! o' T. q5 B8 z1 q, v& NCONFIG_CINDER_NETAPP_STORAGE_PROTOCOL=nfs9 l0 V5 l+ N9 N0 j4 P, c
5 ?8 a4 H" E( ]2 ^- }: P
) N: [1 z0 D. _/ G- L H% O
% s7 | b' Y, b# Quantity to be multiplied by the requested volume size to ensure
9 V5 @5 b, l8 F2 u& C( J+ k {% F z7 m9 s9 w4 A5 ^/ f" W* J1 l" j; E
# enough space is available on the virtual storage server (Vserver) to! Z- I5 W8 W3 ]4 o% D: Q3 i* x
' Z5 O; g0 K U3 a/ [; ?# fulfill the volume creation request. Defaults to 1.0.
9 j8 e/ x% o" k. `( H$ B& ^
; M9 O" s& _5 [( u4 P; D' P, KCONFIG_CINDER_NETAPP_SIZE_MULTIPLIER=1.0
( m3 Z3 G6 z9 ]( h* k K: T5 P- s+ ^; Z$ l6 v
/ A8 O" ]7 w/ u9 e s7 o/ ~1 E/ H: Z& |+ y( s2 u; U
# Time period (in minutes) that is allowed to elapse after the image" q2 \( K7 C$ n* L' O2 m j
" b4 j+ I! M" u9 y; t1 S# is last accessed, before it is deleted from the NFS image cache., T" q+ [3 `3 x; Y* j9 g& g+ c$ r
! h9 @( {8 h, n b( i8 C# When a cache-cleaning cycle begins, images in the cache that have1 b& e3 `0 _9 Y" H5 a5 A
# P- ~! B8 ` p/ V5 ?. \
# not been accessed in the last M minutes, where M is the value of( Q v5 ?7 [2 |/ g
: i* W# {0 F) [- {+ j' N
# this parameter, are deleted from the cache to create free space on3 ~) v0 }& W3 V; d/ u5 O2 o
9 y4 ]1 f" {) D6 [# the NFS share. Defaults to 720.
& Y! ]6 G5 E7 y3 ]( J0 \
, D( }& }# E' l0 @8 CCONFIG_CINDER_NETAPP_EXPIRY_THRES_MINUTES=720/ W. S! c, R4 {! Y" \; F
; u% M1 F6 x0 o( o* `8 m, U# I1 h) b; i
! I. u# o" v9 F( `; m7 E# If the percentage of available space for an NFS share has dropped; E! D; S& t% x* e' o( ?
) D# d! H- W5 z( {
# below the value specified by this parameter, the NFS image cache is
4 d$ Y& v& m, [. ]$ e: k
" v0 y) ?& |3 O9 U& _# cleaned. Defaults to 20.7 C" X* S W. H- c
' D( O$ m* V n" Z0 sCONFIG_CINDER_NETAPP_THRES_AVL_SIZE_PERC_START=20
8 M8 e9 ^8 ^* ?, ~( Z. c* C: b2 I* c; h: _) a, R/ [
8 P- c2 D$ U8 F- i
9 Q* d! D! g! G( `
# When the percentage of available space on an NFS share has reached
# I c2 r; k5 b5 E+ U' e/ _8 N& x# m, f- Y# s
# the percentage specified by this parameter, the driver stops
, A- N) ?( R0 T. v0 F% D
+ R L0 H r: Z# clearing files from the NFS image cache that have not been accessed& I$ Z5 g# N, {3 l
8 d" O: t- X% z& ?9 L$ }6 h8 y' V- L# in the last M minutes, where M is the value of the
; r( F; D" X5 @- j, m) \7 Q
# I8 g6 A# z1 @# e& _0 F# CONFIG_CINDER_NETAPP_EXPIRY_THRES_MINUTES parameter. Defaults to 60.
5 Q7 d2 a' i/ O9 W0 O x+ @ Q% ^1 I) G; w7 {% o, A8 c
CONFIG_CINDER_NETAPP_THRES_AVL_SIZE_PERC_STOP=60
, O" y8 O# O! Y( N, V( L
/ p9 N5 Z; h' c: u: s9 x
# H7 | [( N1 u4 D1 T, Q8 g
' K/ ^* R& ~) l* I# Single or comma-separated list of NetApp NFS shares for Block/ G) ]8 {/ N& u9 ?- V; ]/ O
# D1 C; z+ f# X1 ]; g1 [1 k
# Storage to use. Format: ip-address:/export-name. Defaults to ''.+ e4 y- W c F9 P
* [; P( r2 a. r5 z' HCONFIG_CINDER_NETAPP_NFS_SHARES=
6 }" d% B4 r4 I( T) s* H/ N+ F, H$ m' l
0 ]4 w# E; x, z+ Y/ }" e- S: ?/ ?- @/ k, Q4 W( u- k
# File with the list of available NFS shares. Defaults to
( y( H! Y: e, O9 c" V- l0 T! ^) }2 |8 I n: K+ R2 L0 s Z
# '/etc/cinder/shares.conf'.
) f2 P, C2 d. z' j1 \ S& i/ v7 X h: g, {- ~5 L0 j- p& T. A
CONFIG_CINDER_NETAPP_NFS_SHARES_CONFIG=/etc/cinder/shares.conf
2 }$ i5 @( F6 ~# }
6 u0 j: L) r& Y% ?6 H. u$ [# n+ x4 ]
- Q; ]" e3 j& L% W" w5 H% `
# This parameter is only utilized when the storage protocol is8 N* f; p4 \+ ?0 Z. r2 P
* e0 ^" t! Q: k" N) B
# configured to use iSCSI or FC. This parameter is used to restrict7 f4 c# D1 k" B
8 k' u+ Z1 q9 \/ j# provisioning to the specified controller volumes. Specify the value
: C' b7 ~) s& E, z$ J' u& f5 k/ `: s" r3 E
# of this parameter to be a comma separated list of NetApp controller6 ^+ [, c/ c( c9 f2 P, C( o/ q
j1 s2 t7 i- @8 `! l) U3 @
# volume names to be used for provisioning. Defaults to ''./ K' i2 y+ O; j$ g. ~1 U
7 |' Z) w* O' M! GCONFIG_CINDER_NETAPP_VOLUME_LIST=" G$ ~+ h3 L' R( _8 x
/ b' E' \. _0 t4 I
+ q* `4 ?- ~9 h9 Y5 W
! b0 M3 O+ d! v. g/ A9 k
# The vFiler unit on which provisioning of block storage volumes will
# T+ h- h4 q7 a; m- f! y, Q- k" P' P6 m0 B k# w
# be done. This parameter is only used by the driver when connecting" d2 D' Q5 Q9 A# v
! @% s' O& P( S# to an instance with a storage family of Data ONTAP operating in
% b, J0 e: e& O6 Z
0 u: z6 W% s5 a6 u) Q& d7 T Z# 7-Mode Only use this parameter when utilizing the MultiStore feature/ d" ]6 M g; |; ~( c2 H
3 D3 q6 U+ l" L' v9 M \- z" a
# on the NetApp storage system. Defaults to ''.: [- T# X4 C% I- M1 \
. f4 Q3 H& }4 e! }* L
CONFIG_CINDER_NETAPP_VFILER=
- Y0 i i$ I! ^, j. d8 A0 l9 C0 b; s% O; a
, ~9 {3 j8 k" p @8 ~
7 ^& P6 Z) L1 ?1 q0 g
# The name of the config.conf stanza for a Data ONTAP (7-mode) HA) W0 A8 Y, ~8 z
" r9 p+ V- r Z/ L: b% M2 |
# partner. This option is only used by the driver when connecting to% O9 e" J, j, w5 h
( U/ X7 f* n5 |+ Z7 q4 o; Z
# an instance with a storage family of Data ONTAP operating in 7-Mode,
. h/ K$ ^1 m+ [- O
1 h" V$ Z2 B6 [7 n" T- E4 G3 ?3 z: a# and it is required if the storage protocol selected is FC. Defaults, ~* L5 O+ x n8 q% |7 O
7 ], Q9 r9 R$ ?* A
# to ''.( Z/ E% q5 M9 f/ [ Z# t. W
7 V% z8 t0 X0 C* {3 m% |
CONFIG_CINDER_NETAPP_PARTNER_BACKEND_NAME=
2 L F5 d* x) M) y
c- F! z0 O1 }3 @+ q0 G, _! \5 ~: D, x6 ~
0 t/ Z" ^1 _. G6 e) `! T5 k# This option specifies the virtual storage server (Vserver) name on
$ E% t( ?. Q0 p- J2 m9 z% l
" ^: b' a% b# N! d9 g0 K7 L# the storage cluster on which provisioning of block storage volumes
) @, E6 i" H" X) P s* X
! ]/ x, }6 N6 B2 k0 t# should occur. Defaults to ''.
& b; C: u9 l9 p6 x+ M* |; e. u' ~/ V: ]* \: ?% s+ r
CONFIG_CINDER_NETAPP_VSERVER=, N* ?& S- f! ~ X& I) e
* y: i9 h% P) N2 v
7 N, Y( _1 @" ^6 h8 ~3 W3 `2 Z$ ~6 T
( U8 Y d% k3 Y5 \* R1 O: F# Restricts provisioning to the specified controllers. Value must be
( ]( |* _$ T1 {0 C
' |" }2 i- I" x. E( N/ T' y: E; O# a comma-separated list of controller hostnames or IP addresses to be0 C8 `1 x; u& G0 J6 i- t& G$ F( y
) T/ K* b5 K6 {0 u0 I
# used for provisioning. This option is only utilized when the storage
+ q+ d2 X" R5 j, w/ b9 u0 G2 q, R- _2 \
# family is configured to use E-Series. Defaults to ''.
0 K5 x# V2 Y+ A" M/ a7 m m3 G o" @. m) d2 u6 q) X
CONFIG_CINDER_NETAPP_CONTROLLER_IPS=2 _( x; I6 e9 V% s4 t5 J
* B4 H- B! U! [
+ f% Q$ \2 j; ^" U/ o' L8 [ K
2 `% s( W9 I; v7 z }' l5 n
# Password for the NetApp E-Series storage array. Defaults to ''.
: K0 O# ]* A0 F1 h3 u2 u
- l4 O& {3 o: Z0 t x( ~5 L: PCONFIG_CINDER_NETAPP_SA_PASSWORD=; j4 n" W. [6 v7 o( A3 _: T, z
5 d; J# g8 I# W! i) N s
# P) C T2 |' s- J; F5 U5 l4 o) I! ]! y7 Q, `
# This option is used to define how the controllers in the E-Series, r; P6 ]7 ]- D: U' Y, B) r% `
4 `/ J& F7 D: R# storage array will work with the particular operating system on the
# o& N& @; W( K0 k* A. ^5 |( Q
8 m2 G6 f9 X( m% O! D. A# hosts that are connected to it. Defaults to 'linux_dm_mp'1 `/ h% L+ y' G/ E( T% D
* U/ J: ?1 a0 e2 L+ pCONFIG_CINDER_NETAPP_ESERIES_HOST_TYPE=linux_dm_mp9 Q5 h7 ]: `7 `2 c; K8 {9 y
7 ?; L3 [5 f* z2 @, J
* P( x8 ~* i1 J, n3 K
! Y: J! ?# L' F4 G5 O
# Path to the NetApp E-Series proxy application on a proxy server.5 m9 c' G- T6 w3 S$ A5 n
. p3 n& V8 x" q, X: Z
# The value is combined with the value of the
6 z7 |( p* f! L5 J6 E6 D7 v! ^# v: A0 l, |; L
# CONFIG_CINDER_NETAPP_TRANSPORT_TYPE, CONFIG_CINDER_NETAPP_HOSTNAME,
1 g u1 k- N( b. H. n2 g u
J% b! K$ x7 Z [# and CONFIG_CINDER_NETAPP_HOSTNAME options to create the URL used by5 `) {: b& Z4 ^" }
& g' b b9 o8 o( w* [+ D$ C2 v
# the driver to connect to the proxy application. Defaults to
) O6 Q9 J I K; j
/ X) a/ v# Y7 r3 y- _# '/devmgr/v2'. T& i& t4 H4 [* F
p* u5 \7 t& i$ t
CONFIG_CINDER_NETAPP_WEBSERVICE_PATH=/devmgr/v2
9 Y# z7 L( h+ |
5 @; `; N% \- V; _
: W' a+ x( j0 D, o: n1 h" B2 g. T P4 M5 I# Z3 G# D7 t
# Restricts provisioning to the specified storage pools. Only dynamic: H8 ~% u5 x( S' h8 Q! a+ @+ L# H
1 U. a) g+ ]; e$ M4 m: `5 I& c; Q
# disk pools are currently supported. The value must be a comma-8 k& ?' b: t% X4 @: z
2 J& r: a: o8 s; I b) j# separated list of disk pool names to be used for provisioning.
3 C' @( y' c2 x9 p) T( Q/ ?8 x. q
n# R! ~/ p$ W# Defaults to ''.
. y' O* {% H6 r7 E6 s( F$ U* D4 n- G4 J/ Y: f0 D
CONFIG_CINDER_NETAPP_STORAGE_POOLS=
8 v: z$ r$ [' i$ w0 q0 d0 S( e9 k. H, b' W- Z
6 d v7 o+ j1 @+ f* f
- B& y& w) c7 H. l* X
# Password to use for OpenStack Bare Metal Provisioning (ironic) to* O' N* T# F9 b* E% t# I8 n' t. w
1 G6 Z2 W% V; ]- m/ J3 |3 n: L
# access the database./ b" ]( ~( ?7 v- t+ Y2 d$ c
0 ^5 k P5 W# c5 u, b: NCONFIG_IRONIC_DB_PW=PW_PLACEHOLDER
9 n: T7 E: c/ B8 G
6 L* P* |5 J( h# x5 A% f* B* o6 d8 @
. C/ A( M" q- z& {% w: |/ s$ D1 |0 C. R1 a
# Password to use for OpenStack Bare Metal Provisioning to3 S/ ~3 \: T$ v$ H! }$ J
5 ?3 o* a0 g, i
# authenticate with the Identity service.
1 f6 I7 }( @8 o4 c+ Z' {. X9 `9 I
- h0 j9 z; A2 A, kCONFIG_IRONIC_KS_PW=PW_PLACEHOLDER; S f) P w, v1 |8 b& z. \
* M5 q6 C; ^6 D: }3 k7 |% v% X' t1 V! S
* h/ P' L. X9 M, m) B* F; B
7 g5 \2 s5 C% Y% d& i% v) ~# Enter y if cron job for removing soft deleted DB rows should be
- y+ W# t% X, ~9 ?" [5 A, o! q6 h; s: d4 C6 s+ |8 O4 A
# created.
9 _/ c9 K# C4 F( F: g$ P3 U5 W5 r c l
CONFIG_NOVA_DB_PURGE_ENABLE=True
4 R2 \8 x0 @9 n/ E- ]/ T0 [
v+ q3 y8 E6 w# P- K& L }1 J1 V& L$ c3 \, b
! e9 ]6 X- j4 V$ d# Password to use for the Compute service (nova) to access the
" V; ^5 t: d6 z7 j0 e* k! i# e3 t- e0 m
# database.; i$ @7 \8 s6 E6 I
; h3 g( b# n5 M9 P
CONFIG_NOVA_DB_PW=2b413313b40c4cef. Z6 e% D: ^! n. [2 }9 V. _* m+ y
2 ]7 Z% c% Y9 w' l9 ~
6 `/ J7 l$ t/ z' O2 o! U- ?
* o. u6 d/ r& B. y, |# Password to use for the Compute service to authenticate with the% {+ M- B1 _. u* y8 ?
7 s+ N: s' b# {; @* i
# Identity service.
, [$ {- V* L7 R3 ?5 j8 @6 m" ]3 A# {9 b
CONFIG_NOVA_KS_PW=de17a9d0e3984bae0 i1 I' T# z+ B$ _* }- c1 |7 S
. }* J1 \3 R' i8 h7 T: r/ p. p* k5 ?; }+ u
, {$ R# R) l8 }8 ]# F
# Overcommitment ratio for virtual to physical CPUs. Specify 1.0 to" v% @ v6 i% L+ R! \
6 e1 D1 I; ]' O
# disable CPU overcommitment.: W ]7 c) ^; |' Y% C y
! \9 `/ X2 r* G1 O) ?: R0 BCONFIG_NOVA_SCHED_CPU_ALLOC_RATIO=16.05 k( n* {6 u9 F% ~' Z, c- r! [, Z2 [. F
# E5 G( Q% P% P0 [9 v
3 `' t _3 M' N! n6 X3 b2 M+ V1 X! i4 f+ r9 u$ |5 Z# W
# Overcommitment ratio for virtual to physical RAM. Specify 1.0 to. I8 o3 e# O( z* s1 ~0 N
7 U: G2 _: N* @5 V, \9 Y! ^# disable RAM overcommitment.
/ ^# g q; d9 @7 S! d: P+ k
# O0 ^3 o; ^! b; \6 Q9 SCONFIG_NOVA_SCHED_RAM_ALLOC_RATIO=1.59 j/ q; N( E' S% k3 z* v" Q
* D$ c# b* p# I! o; m
- H6 E% L) L* r2 K! s
/ _. b! O+ j! X: x# Protocol used for instance migration. Valid options are: tcp and
4 |3 @- T9 a1 P) _. b5 M! r* ~- \0 _- l, L: M
# ssh. Note that by default, the Compute user is created with the2 o' u$ s% V; F" G& i
k1 D: d- p0 Y$ U6 D6 D6 z7 P
# /sbin/nologin shell so that the SSH protocol will not work. To make
. U$ E- W7 y2 b9 @
) d' J" W$ E. h; V, m# the SSH protocol work, you must configure the Compute user on
1 K* P* j) @9 H8 b* m) u1 n2 S; B0 q2 z" Z/ H6 {3 o
# compute hosts manually. ['tcp', 'ssh']: l" D* L+ \9 E4 I; T8 I8 m; l
& Y2 X4 d" u( u+ c% l
CONFIG_NOVA_COMPUTE_MIGRATE_PROTOCOL=tcp
# x! y8 U# R6 c. p1 G; n* L& j' l
. R7 |5 A6 |) c6 j9 _6 z# [' u h) ~( H( |3 H/ _
. G9 d }# R* `+ e# Manager that runs the Compute service./ \% z/ I! Z8 I+ O8 x
9 E- P, j% U X) @7 pCONFIG_NOVA_COMPUTE_MANAGER=nova.compute.manager.ComputeManager
R$ g6 i* x' e
, U- M% \ N" C8 ^' c
( Y, o1 a- w. `3 \" ?% o; |& k2 m/ k$ A3 J/ M
# PEM encoded certificate to be used for ssl on the https server,) |: V# L/ u/ z& P$ z, {' H9 O, p
# |+ g% }6 _/ ?
# leave blank if one should be generated, this certificate should not
0 \3 g& f+ F) O# e1 ?. V8 w3 G: }# C/ p! e5 t
# require a passphrase. If CONFIG_HORIZON_SSL is set to 'n' this
& P9 J1 e# A8 K6 W% H9 X( i
7 }% l9 H! s6 @2 ^1 C/ C% M# parameter is ignored.
4 W7 r. D R- {( ~ R1 F: b% L! ~0 T
CONFIG_VNC_SSL_CERT=9 h8 `$ j B% K
0 ^+ a G, T' R. } s6 U
# h5 p! l% L: n: U* R J
0 i7 P) o$ {% F
# SSL keyfile corresponding to the certificate if one was entered. If
% R' |; R5 ?* K }7 s6 U% r8 v% `8 U6 d3 E9 l2 w1 L; j8 P
# CONFIG_HORIZON_SSL is set to 'n' this parameter is ignored.
7 N9 x& n: {+ x) ^$ F
$ [% ^$ M. E7 x, T" NCONFIG_VNC_SSL_KEY=
5 x O7 R( `4 O- @0 d* k m# b$ k U' d8 n/ r
Y/ M7 F& Z* s5 u0 E3 C1 z6 Z
+ Y. p3 ]) [! u3 Q% D, c6 ?
# Enter the PCI passthrough array of hash in JSON style for
5 c& f2 H' w8 k ?: Q2 I8 Y% ]3 N3 \! G0 m4 M
# controller eg. [{"vendor_id":"1234", "product_id":"5678",. G9 u, I3 l C7 f B7 _! m
# F# V* \; T& [3 l* X( R+ ~/ L; t# "name":"default"}, {...}]; c! i* n/ J2 T2 U! d0 f
' U& N( V6 l7 f$ v
CONFIG_NOVA_PCI_ALIAS=
3 V1 t3 `% A& D0 j3 T2 _; E- O# F) u0 z: B7 z' n
7 B9 U2 m2 e" `8 @! w" M) o/ B3 |. z1 @$ D) N: g# a% t4 U
# Enter the PCI passthrough whitelist array of hash in JSON style for+ p! i8 [4 C2 O+ V: z
. A- p- k% U; o+ l
# controller eg. [{"vendor_id":"1234", "product_id":"5678",% W! s# f& l b2 O7 {) o0 J) ?
; N- F+ Y) L8 m
# "name':"default"}, {...}]
8 d; n# j/ ~- d1 a" Q) X
S$ t% q) q8 |$ }& mCONFIG_NOVA_PCI_PASSTHROUGH_WHITELIST=
- O# ]7 L1 H3 H; ~6 U& y
0 y# H1 D0 Y5 k6 _+ T/ t5 B' q U+ o5 o* P$ D& n, e! k, \" ~' ?
8 d/ T5 y7 P* q3 y7 N# Private interface for flat DHCP on the Compute servers.
" X9 d) @. f7 T6 L. b4 K+ s7 I. `# e
CONFIG_NOVA_COMPUTE_PRIVIF=( Q( G: \7 b- c
8 v3 w) C' Z2 B6 j
h- @" Z# p- K3 Y2 r; U, N2 S
! H2 _3 z4 ~' n7 C$ ?2 Y/ n; B# Compute Network Manager. ['^nova\.network\.manager\.\w+Manager$']9 H/ c- D7 I$ {. @: Y% V
; G4 ?6 w+ t5 I! e8 N6 u
CONFIG_NOVA_NETWORK_MANAGER=nova.network.manager.FlatDHCPManager/ r2 T& ~" @8 ^( y' X$ D: |( t
7 j/ m2 z- o9 Z
. w) F6 F6 I" m' v- q5 w: @7 m5 c
9 `; p: K. V7 @1 J5 p% B3 b8 d# Public interface on the Compute network server.1 d8 y0 B7 a2 D9 t* u+ v
# S$ q9 ^1 ]5 K$ ^- C F5 YCONFIG_NOVA_NETWORK_PUBIF=eth0 w y% U7 v) }4 Z; i
% Q: \! V t9 N1 u3 h' j2 l' y
4 Y! L5 g6 Z& }- R6 {* S/ _3 [
Z9 `$ O; m @4 L# Private interface for flat DHCP on the Compute network server.
) c* F. ~5 d9 S3 E% B+ s2 ~5 G' Q+ O4 x4 e- V$ U
CONFIG_NOVA_NETWORK_PRIVIF=$ x& Z- }! q" F) j. g: f7 H8 B2 X
: u# ^! a! A% ]) q8 E: `
[4 j' y4 Q" {; _2 J2 b& _1 W
; j* M7 ]. ] h4 S7 F+ V# IP Range for flat DHCP. ['^[\:\.\da-fA-f]+(\/\d+){0,1}$']
2 @2 v, J+ f: T4 |% H( a8 Y' T- c8 S C. S- G
CONFIG_NOVA_NETWORK_FIXEDRANGE=192.168.32.0/229 S. K& z% S4 ^; i0 j
) n& r5 d _+ Y! v0 T- I& Z3 K
/ m" B5 m4 `' n+ l7 S
! ^* o$ z+ {% t
# IP Range for floating IP addresses. ['^[\:\.\da-
' V. T ^$ L- \) G% m# [0 A' s) q, f8 H' ^
# fA-f]+(\/\d+){0,1}$']
0 ?' d+ j0 f& h- S: X
9 c* q+ A& p) z2 {3 cCONFIG_NOVA_NETWORK_FLOATRANGE=10.3.4.0/221 Q$ j: @8 J0 {
6 R h; ~* p5 \
/ [( I! d# Z+ G/ b
# }. `' n9 V! l1 q# ]/ E8 Z- N# Specify 'y' to automatically assign a floating IP to new instances.
$ F2 @& |1 c6 t. C: g( n+ k8 g9 f* i& O. [' I' f2 F2 o9 |
# ['y', 'n']
' r0 v' j C" }! ^% ]
4 v4 d4 z$ P$ N! HCONFIG_NOVA_NETWORK_AUTOASSIGNFLOATINGIP=n: ?" h- ?6 C8 l9 W! S! ^4 J @
, h( v) Q; @5 n& V" X! e7 Y
; O& R5 a9 s, ~6 `- m
`3 c7 b' B6 Y2 Z, [4 G* g# First VLAN for private networks (Compute networking).
3 Q0 S& K3 u; s+ t, v$ I
4 @4 \, \; @7 D( ]8 D2 N8 P2 DCONFIG_NOVA_NETWORK_VLAN_START=100
) t) C+ |, {8 _3 w1 O9 C8 }" g! k0 s7 o2 ?) v; v
5 b) R7 @' g1 E
, E6 s& G/ g- ?. @5 A# G6 a6 a# Number of networks to support (Compute networking).
5 ~- S$ x( ]( k$ B% \# ]& F* [8 P+ C( K" E' Q) [ u1 I v
CONFIG_NOVA_NETWORK_NUMBER=1# v0 W% f9 g6 U5 C. @$ `3 G
7 k; u8 i0 P& @0 w4 m
}/ u$ N8 x6 O6 x% I% Z: ?& {9 }* {; R1 H2 c1 n1 [
# Number of addresses in each private subnet (Compute networking).; D$ F; ]# V/ N% X; n/ ~
* [8 @* d. g+ t6 T: E5 `9 H
CONFIG_NOVA_NETWORK_SIZE=255, G+ `3 f% @! M; J! t1 |% u
) a" z' v7 e3 {
& ]4 c0 I, |/ f! {2 s W3 I8 Z
/ f( V" C1 N3 J; D, ~7 p* h# Password to use for OpenStack Networking (neutron) to authenticate
6 L: |6 X/ P" X5 V0 P2 @8 j4 D9 c8 s
# with the Identity service.5 R8 z( Z! l# e) u0 J" t
+ Q2 X7 `, w5 v/ M1 w! f& {# zCONFIG_NEUTRON_KS_PW=0f93966d6de04e8d
: J3 V! K, l9 m' D) F6 G* v& E, O; G- n( a ~3 U! ?- p& g( g
5 `% X4 k" b& S" P( c4 E2 r' S& A' W4 N
# The password to use for OpenStack Networking to access the1 b0 h: s k( `; O' t4 Z$ {# k
! E& V4 N6 c6 g; D7 B/ h9 r5 ^# database.
0 R2 n) b; x+ ~. ?" b- w4 @0 t+ I+ o' }8 _1 o1 c8 _# u
CONFIG_NEUTRON_DB_PW=6d506e19899e4a3f0 S! Q/ |, ~" B# O) ?5 k1 l
9 c7 E6 y1 \: b9 P+ N1 ^" q4 H. R# M# D! A$ k M: d. k
6 Q9 S, i+ {& o) _) x6 [+ `# The name of the Open vSwitch bridge (or empty for linuxbridge) for
: E% K. c5 P, W' \% I+ d4 L- X) h5 e- H' y" N8 f2 A! W
# the OpenStack Networking L3 agent to use for external traffic.
e( ~2 G8 {/ u' U% T2 [& K% r, D
# Specify 'provider' if you intend to use a provider network to handle0 s5 i ], `: ^( l* T8 Y3 s" w
7 F/ H$ K3 f2 m& C' Z x; {# external traffic./ ?. h2 g( A9 H0 b
2 C. A' d" z9 ~, g: {CONFIG_NEUTRON_L3_EXT_BRIDGE=br-ex
* E8 ~- p6 O! z8 \3 s/ M3 B
$ L- l5 ^( Y2 t! I8 ?. {4 b+ }/ z H( B
4 d& |" y& V0 u0 n& X; M' v# Password for the OpenStack Networking metadata agent.
, t/ q# K w7 t. R d/ w5 ~+ R
6 Q' q5 }. h0 b, ?1 r/ oCONFIG_NEUTRON_METADATA_PW=f7db67c5f3024050 g& ^; _( K+ q3 b) F; O1 ~0 \
- M% u% w0 E, U' H+ ]
6 g3 R& C% t; p- f c, E/ T8 B2 x4 m( t" W/ k
# Specify 'y' to install OpenStack Networking's Load-Balancing-: R+ s% r2 i5 ]* d C% }5 h1 ^# {
3 k6 A3 d( m" U3 Z; Q$ V# as-a-Service (LBaaS). ['y', 'n']- ?' T# R9 D+ ]# z$ t9 l, N4 V6 g7 v
4 u9 h6 @1 _) Z. ^3 n- W8 S; dCONFIG_LBAAS_INSTALL=n
* R& G1 | _, @6 |. h& T3 |
6 D$ _- e+ R6 r' W) ]
, v: a5 u" \9 ] v
; G- X- n. B7 v2 U# Specify 'y' to install OpenStack Networking's L3 Metering agent
0 }' }3 Q& X% k2 n, \- @( ~7 F; Z8 F; t, z. y
# ['y', 'n']
: H& l3 ~+ V) p& l: q% a
& A7 s% R, _3 a7 yCONFIG_NEUTRON_METERING_AGENT_INSTALL=y
0 ?& n& A+ z6 S4 u3 _6 |, ?3 I7 j. A! h/ |3 j5 l( n9 ^/ D2 ]
2 Q8 Y5 d/ {, i. k5 r
* J7 c0 Q- V. Z5 V
# Specify 'y' to configure OpenStack Networking's Firewall-
$ w! L% j( S1 u) g7 r; X/ N: H( @6 Z7 w! G( |1 s- M
# as-a-Service (FWaaS). ['y', 'n']
0 I, |, B# k, f4 b
& S& t7 t2 |0 T8 `' p- MCONFIG_NEUTRON_FWAAS=n! i& c$ q D9 w& z( q/ t
/ a( L% N, m1 y6 ?6 u/ ] m
6 O0 w6 }# ]0 ~/ q J5 i/ ]
! M7 R* L# p/ }. z, a! i# Specify 'y' to configure OpenStack Networking's VPN-as-a-Service) c9 ^& H( \& M" ?
3 _! p* L M% F# Z# (VPNaaS). ['y', 'n']1 \, h4 y# X. {6 n
7 p" S$ A8 v+ S) ^& t" HCONFIG_NEUTRON_VPNAAS=n& ~8 m$ \5 g6 O9 ]# P
6 s9 B8 o. S% o4 k& ]$ ]1 C3 E: N: F( p1 r9 \7 s
$ f j! E# f: P) T+ ]# Comma-separated list of network-type driver entry points to be
' K v+ b ?( Z
' }' D% L3 e6 E6 y/ F# loaded from the neutron.ml2.type_drivers namespace. ['local',4 K6 q9 A3 O' c( d
8 O6 C0 D+ p7 r$ H& E2 z: X3 a
# 'flat', 'vlan', 'gre', 'vxlan']
( @( g9 {/ l4 l) V" R$ k% w$ Y! Z0 R4 [
CONFIG_NEUTRON_ML2_TYPE_DRIVERS=vxlan) l' g$ R3 P2 W3 I8 S
; ^: i' D. e8 b2 B9 m8 X- t# M. y6 \$ G# C6 F8 l% t. H
5 U; }. o* p7 ]3 S" z$ z# Comma-separated, ordered list of network types to allocate as; D, e% Q2 o' Y, \2 X( @* L2 ^8 j/ D% e
) ^! S( S$ R% w. g: T4 n/ {
# tenant networks. The 'local' value is only useful for single-box
: Z# v" J& n" |
) Z/ B( @* V1 ?8 X$ p) e: z, r# testing and provides no connectivity between hosts. ['local',
8 { C0 `: Q6 H# Y& H8 M
; W* j: G8 v; |. q# 'vlan', 'gre', 'vxlan']
: F, F5 ]- L; Q/ u7 M$ e8 S! r% C& A0 i- ^+ |2 V
CONFIG_NEUTRON_ML2_TENANT_NETWORK_TYPES=vxlan
9 H" s: \! {1 o, G3 Y$ Z6 c O q6 Y1 k1 N
% n1 N3 f1 G& P+ Q% e( z
j4 ?3 ~) f! `% X0 b2 `1 K3 ?( p
# Comma-separated ordered list of networking mechanism driver entry! K0 s# g. M, o' @& E- o
* c4 G1 } p5 L3 ]9 ] P$ I# points to be loaded from the neutron.ml2.mechanism_drivers" L$ k( j6 m1 U
8 G; X6 m9 e, f- w# namespace. ['logger', 'test', 'linuxbridge', 'openvswitch',
! T. i$ x! }4 u* j0 R! D& s5 ~9 @
# 'hyperv', 'ncs', 'arista', 'cisco_nexus', 'mlnx', 'l2population',
" B8 a- @; k) q; T: j) D# ~0 |$ V6 A" r! u9 D# X$ [$ T
# 'sriovnicswitch']
+ ?4 Z# ^; `" B0 b9 l) ]9 |2 H
1 p1 J0 L% U# @* y+ c% FCONFIG_NEUTRON_ML2_MECHANISM_DRIVERS=openvswitch
* `4 m+ @: V, A0 V1 L
7 D3 q _5 ~. m/ h0 K: _2 Y3 E
7 e( p8 A- I( m$ @
# T% [( p3 N7 K, _5 s! g# Comma-separated list of physical_network names with which flat" E8 s' p2 v3 A' x& w
2 @+ U) q& G5 ?. M% ]3 S, {8 }& a
# networks can be created. Use * to allow flat networks with arbitrary, r9 _* V8 O, T$ n9 j2 k
3 y7 Y; {: c! [4 M! N y2 D# u
# physical_network names.
5 d' U' F; n$ H' N/ @9 x) a8 v) f2 `
CONFIG_NEUTRON_ML2_FLAT_NETWORKS=*
7 A! t. F7 g2 W
+ r/ V+ n# `. Z' f( d9 L0 Q J5 u
1 ~- D$ U5 K$ M" [3 l$ H
# Comma-separated list of <physical_network>:<vlan_min>:<vlan_max> or" {. c$ l! r1 w" C. \
% m @( f g$ T6 J
# <physical_network> specifying physical_network names usable for VLAN
2 m. j# u" ?, |6 M- v8 u4 d9 H H& |, `7 O* Z
# provider and tenant networks, as well as ranges of VLAN tags on each
+ }# T4 R! m% X% S" w' A. M4 q
$ c/ E0 M, c/ @, Q- C0 X# available for allocation to tenant networks." B1 [) v- c& z9 s! d
4 ?! a" Q- V) c# c+ x8 R6 JCONFIG_NEUTRON_ML2_VLAN_RANGES=) x1 J& m) v" Q: ~8 s. H8 o C5 L
; D0 Q, c7 v8 I9 a+ h( j- m( U. b1 F( `- T
h6 [3 ]( c& c' \6 n0 k
# Comma-separated list of <tun_min>:<tun_max> tuples enumerating
6 X- O9 ]+ k$ G9 s
4 L( D' j$ C w0 w) c# ranges of GRE tunnel IDs that are available for tenant-network& U1 _6 d; }. {' C: h ^9 W: s% Y
* U* l+ [; O2 @% o" H
# allocation. A tuple must be an array with tun_max +1 - tun_min >" k: e; t# R5 v* z4 I
3 c5 \5 [7 q8 s& D; t$ u$ v
# 1000000.
" F/ G: u8 O0 r+ z) ]3 h0 [3 g+ o
8 O& ~2 t! u7 L4 I; K7 w1 uCONFIG_NEUTRON_ML2_TUNNEL_ID_RANGES=
' j9 L! F- V8 R3 p1 a2 @" n8 M9 s1 O: ~; e
( ~; a4 ~2 _3 @; S; u
6 x( e9 R; B5 k4 ]
# Comma-separated list of addresses for VXLAN multicast group. If
6 s% {. a1 x6 d6 Z1 Y
3 w: B2 d" j" T% m, W S# left empty, disables VXLAN from sending allocate broadcast traffic+ r+ y- `. P( u* G; m, }
; P/ y+ h! g+ Z) o$ Q) Y v# (disables multicast VXLAN mode). Should be a Multicast IP (v4 or v6)
9 Z9 p& _6 L; T" I& H! j) n
6 _* G6 T, a+ |1 g3 k F# address.6 r% z; ^* R2 u
/ \/ P& N# k- N U- X; @, Z
CONFIG_NEUTRON_ML2_VXLAN_GROUP=
/ ?! b1 Q9 Y! h) }1 w b$ c
& H) p5 p# O0 m" p$ i' _/ ~
7 ~' ^* M* n4 R# C
# i; T6 {8 r' a/ d8 R5 j# Comma-separated list of <vni_min>:<vni_max> tuples enumerating- r9 a4 H* Q) E
2 [4 g* e' c$ {! ?
# ranges of VXLAN VNI IDs that are available for tenant network
2 e* |3 n# P) D" j: V% a( }! p6 Y! d3 L" p. ?2 }( L% q. T
# allocation. Minimum value is 0 and maximum value is 16777215.
' n& S- m1 y* m4 f+ F2 _( v" F% B- S& _, Y. u
CONFIG_NEUTRON_ML2_VNI_RANGES=10:100, y: e8 N0 P( U* e2 f8 X1 S0 x
+ O! s6 F8 c0 m3 q, L. z
/ o1 R% H9 R( A
& c$ d; p+ J8 c2 E1 C& ], L# Name of the L2 agent to be used with OpenStack Networking.# t$ Y' k2 a& k% s* U( n
$ Q. u8 a( U4 J3 @& B, m# ['linuxbridge', 'openvswitch']3 Y7 x3 I& }1 U6 I/ D" K- K' } a
$ k7 n' V. B4 H0 Z5 vCONFIG_NEUTRON_L2_AGENT=openvswitch6 y! y* h9 h+ ~: I2 g+ X
0 ]2 L- P. F+ W7 ]$ V9 G6 f$ `1 G% T- N$ p0 o, H8 V
1 z1 s' L) Q9 f3 \- i; Y* M; ]
# Comma separated list of supported PCI vendor devices defined by1 S9 H$ ?4 D @" A& _6 c& x+ j" X
6 b' k" ?+ k8 `, c* B7 A `# vendor_id:product_id according to the PCI ID Repository.+ `6 D: d% M/ z+ A
6 |/ M" [( @( Q6 p2 U/ ZCONFIG_NEUTRON_ML2_SUPPORTED_PCI_VENDOR_DEVS=['15b3:1004', '8086:10ca']5 a% d9 O! @! G6 B
( `, _" b$ z: q6 X. d
3 A" N% }" j' Y" v
* e2 [3 v) m, F/ a' m# K8 T
# Specify 'y' if the sriov agent is required
; s5 V3 ?/ H5 o9 U& G1 l! g j
! V& T( f$ Y1 v2 Q2 ICONFIG_NEUTRON_ML2_SRIOV_AGENT_REQUIRED=n# O7 d) S7 ] g% I
- ]* v( h8 F; p( F! z; p3 O3 i
. [0 w7 W' y2 w E/ G* r: M
) }5 o( ~( H3 {$ e$ L# Comma-separated list of interface mappings for the OpenStack
5 g/ T4 V+ b( N1 a, E( k
& x& q! Z! _, C/ g# g# ]- U! T8 w# Networking ML2 SRIOV agent. Each tuple in the list must be in the, g+ K6 u. r9 a- ]9 p. J* t1 T
+ d7 z7 N/ r y ?, W9 O1 a; |/ u# format <physical_network>:<net_interface>. Example:
% [3 w& V# V. y2 W4 ^+ R$ M* ~0 D+ W8 F0 s ^, @5 j/ A
# physnet1:eth1,physnet2:eth2,physnet3:eth3.
1 K( X& B9 Z* g; W
/ j+ W( S( z2 d- e0 NCONFIG_NEUTRON_ML2_SRIOV_INTERFACE_MAPPINGS= \( w, X4 I" }" ?- M
# u; o7 {* O' |5 ?. `5 \( f$ s5 x, t
6 k$ L; ?( c0 `8 E- s8 ?+ P
# Comma-separated list of interface mappings for the OpenStack
, d% U0 b" C; u6 ]5 o) S4 ~2 _" j4 e* T& ?+ @. H, j
# Networking linuxbridge plugin. Each tuple in the list must be in the
! S; Q) E8 t5 b1 h, J8 F, j: \6 @; n: j3 g. ~( H& {) Y/ g# }2 D
# format <physical_network>:<net_interface>. Example:
6 J7 F) c' Y8 |. n0 u& E2 |: g# D G- h' P, {# B
# physnet1:eth1,physnet2:eth2,physnet3:eth3.
6 h- V$ U# C/ j/ Y' |8 c8 @3 o+ S ]/ A
CONFIG_NEUTRON_LB_INTERFACE_MAPPINGS=' k- B; [ \: P) I- `& }
- c# q. i0 D" @1 w
5 }# _# p& [ @
& v J1 ~$ ]& L, m" q( @
# Comma-separated list of bridge mappings for the OpenStack% M, i1 W( L9 G" f: S* I
1 U- @" [' w- n. F8 D1 _# Networking Open vSwitch plugin. Each tuple in the list must be in: m/ m& I* T$ k) X3 p) I
% E6 x9 }$ X" E, n
# the format <physical_network>:<ovs_bridge>. Example: physnet1:br-, n2 P# o% k( z/ V% r
4 i- F) Y+ Q) ?. b& [* ^) f9 d
# eth1,physnet2:br-eth2,physnet3:br-eth3
" m! _7 j0 V8 E* {& X9 K4 l0 o8 y# k- B8 V1 @% H
CONFIG_NEUTRON_OVS_BRIDGE_MAPPINGS=
0 a& u4 w- U" k7 i$ h5 K6 F# c$ ?
2 p0 [) M+ e q1 H( _# R% a, I8 K& Y; e+ E/ N$ d
$ a7 F- C i. _5 L' G
# Comma-separated list of colon-separated Open vSwitch
3 a2 ~5 w+ N2 \5 V. m, B6 A1 Y% `4 t! ]: q- d
# <bridge>:<interface> pairs. The interface will be added to the4 K+ t0 M8 L7 [2 h
- U4 ]; X+ e! r- _$ H2 Z) E+ n# associated bridge. If you desire the bridge to be persistent a value# Q* r5 x# Z5 a! M3 {6 o0 k
+ n( E; N0 F- e# must be added to this directive, also
/ w- m+ `7 U+ {/ G; F( o( @
: J- B% D& Y0 h* J# CONFIG_NEUTRON_OVS_BRIDGE_MAPPINGS must be set in order to create
, I& m" I/ S& Y+ Z! x) L" g3 Z8 F8 X+ o4 e" @/ d8 W/ y
# the proper port. This can be achieved from the command line by/ v2 ?. k0 r$ o8 ~1 x) V% w
. [) Y6 ]$ f B+ o& w# issuing the following command: packstack --allinone --os-neutron-2 p3 h6 }+ C! w
' f. r) |: ~! A8 _* }# ovs-bridge-mappings=ext-net:br-ex --os-neutron-ovs-bridge-interfaces
7 W9 `7 A7 ^0 g! n# W6 R0 j
) g- W4 Y$ m- G% X# =br-ex:eth0
1 u2 s, u9 G+ v2 u L I* }& K, v# }; i
CONFIG_NEUTRON_OVS_BRIDGE_IFACES=
% z( u1 H) k! K0 K. W/ t' D; }: y3 L( E
5 t4 B% @* P& n- c' R$ V4 a9 J6 L0 {& d! j# V1 a
# Comma-separated list of Open vSwitch bridges that must be created# @2 l: X( F' ?
9 B9 p: t) D9 T. x# and connected to interfaces in compute nodes when flat or vlan type
6 P9 r% A( U9 M$ C5 S
1 G+ j$ g& X9 D4 H9 m; I# drivers are enabled. These bridges must exist in6 R5 @6 p6 m% H" a& ^! k7 I
9 {. a& v- q# y+ u! l1 e6 r5 P# CONFIG_NEUTRON_OVS_BRIDGE_MAPPINGS and7 s4 g7 K7 E: ^0 ~
7 I, W: C8 M( ]: O' _# CONFIG_NEUTRON_OVS_BRIDGE_IFACES. Example: --os-neutron-ovs-bridges-. f' m& B/ h6 b* P6 z7 Q, Z
) y Q7 n. U# j# compute=br-vlan --os-neutron-ovs-bridge-mappings="extnet:br-8 U; g, G# A( s7 A1 s
3 d7 {8 W" o& G7 s( y& i3 W# ex,physnet1:br-vlan" --os-neutron-ovs-bridge-interfaces="br-ex:eth15 s; t& @/ u* O
0 H0 E% e: @0 O" j5 U3 q# c
# ,br-vlan:eth2"4 j6 W; k$ X" p1 _% V
2 i }+ Q3 O: @( ?
CONFIG_NEUTRON_OVS_BRIDGES_COMPUTE=
1 p" A. f& O! _0 ~3 J
5 b& f. R- F3 r9 h# {6 V; K+ K
- D( S8 {& e1 q) J" V5 j+ J/ o9 ]) E3 j% P& K8 ?4 G! x z
# Interface for the Open vSwitch tunnel. Packstack overrides the IP
& c: w( {' T/ ]$ g5 b5 M5 c0 l6 h* J; p, t5 E# j
# address used for tunnels on this hypervisor to the IP found on the
. R/ r2 W. B( H! G2 G: Y6 ^ f$ y; N
# specified interface (for example, eth1).
" b& U" R" {8 a% O$ {3 X2 s$ }2 ] b# S; J6 o' W! ~
CONFIG_NEUTRON_OVS_TUNNEL_IF=" D* Q( |' v X* B4 g- k
7 _- W8 n6 ] z/ t) g0 S
# M) Z1 Q9 L3 I5 k- p8 z4 I( e% T
% [& j" e$ D7 O0 S/ L+ E# m. V4 d# Comma-separated list of subnets (for example,- b9 Y( W4 L! U4 x- ^
% C ~2 [+ s! j
# 192.168.10.0/24,192.168.11.0/24) used for sending tunneling packets.
) c- ?0 g. z9 j. X2 w$ l* {: s4 L# i. Z) e: n# S
# This is used to configure IP filtering to accept tunneling packets
! j" `7 V. m% w( h, \# e
; I# {8 V0 n4 u5 _6 Q! f/ p# from these subnets instead of specific IP addresses of peer nodes.
% S( m7 Y# ~+ J1 b# F1 n. S- d/ o% l* i: H" R
# This is useful when you add existing nodes to EXCLUDE_SERVERS- M# B/ f9 b; `1 K' ?
& L4 X9 N+ c: U" B& X: h
# because, in this case, packstack cannot modify the IP filtering of7 J/ e! f. l+ I
0 Y0 j5 {3 J' \/ S5 b3 X# the existing nodes.2 O F4 \9 e7 J( |$ ]6 L, z* c
9 b0 i/ D8 {) m g" z9 i; s
CONFIG_NEUTRON_OVS_TUNNEL_SUBNETS=
5 f) j- R2 z- u7 b
3 s1 A- L' v9 z5 z. I( ]2 P, T
% Y7 P Y) u" w1 G5 o
$ t! Q" J. T, r7 d" T# VXLAN UDP port.
* c5 Q) a$ @. a) R4 @: S0 ~8 @# B
( x9 e* F3 C! l: X5 J2 t" j# n; sCONFIG_NEUTRON_OVS_VXLAN_UDP_PORT=47894 Z# |+ E V7 |% c2 m0 D
& v# _& P; s! b7 ^' |4 Z/ [8 W' @' } E D& {3 y: X
$ ^- A3 B' M, R- p0 U' g6 T# Password to use for the OpenStack File Share service (manila) to
8 l: V& \! g$ G" m& @9 N8 A! b/ i4 C. X5 M/ S, X' ?
# access the database.
! Y) N, N( x3 q: N7 X. c
7 I. n, j+ s( u! `CONFIG_MANILA_DB_PW=05a1afde52ee4dca
4 x, F1 p4 }9 R+ W7 o7 g7 O& I U+ m: e* v5 O
+ N# P" g5 c/ s8 n$ Y
% q' n) a: f: o+ @! F9 j# Password to use for the OpenStack File Share service (manila) to. O! k' }+ l6 h8 M% d9 L; U
% S1 v3 e+ O/ u$ d$ d
# authenticate with the Identity service.
* X2 h: P. D$ f' K: y
$ G6 |# f4 ^# M+ `4 ^- WCONFIG_MANILA_KS_PW=d68b8a1e35c54d89
* N4 Q9 Q; W" `* U
: D% r3 ~" ^) h7 y4 D1 d) i/ O
a% I9 i3 _3 g$ _
% D* `* H& [/ r: O; B3 g0 N4 v# Backend for the OpenStack File Share service (manila); valid9 Y4 W) P% B: R* i, c T1 f% ]
8 s4 |# \3 O2 V4 i/ S. O9 ~0 V1 u# options are: generic, netapp, glusternative, or glusternfs.
: O8 ^" j# Z- M0 \" ]; Q' L3 J- ]: \, t W
# ['generic', 'netapp', 'glusternative', 'glusternfs']5 T! ^. W$ T7 X3 L$ b
7 z5 I# D, t$ `! F/ E6 p/ P) [
CONFIG_MANILA_BACKEND=generic7 z0 f+ o- L9 u0 W1 X j
% Y' e5 B' m/ }$ {! O2 q, s
: m3 S( L! r9 ?# `0 Q# x" R' }
$ H9 x& S; {5 x! N# Denotes whether the driver should handle the responsibility of
! `0 `3 ]0 R; a: Y. L# c
# n8 z+ g! G1 ]) X, h. [# managing share servers. This must be set to false if the driver is/ z3 {: N" V6 t; b
& F8 t$ g& V% D( a
# to operate without managing share servers. Defaults to 'false'
' C8 d- F; T, B
9 b) I @% D# J2 j- X# ['true', 'false']
5 Y8 R ?1 o$ N( j. O( U
. C& s. I( P6 B9 {5 `CONFIG_MANILA_NETAPP_DRV_HANDLES_SHARE_SERVERS=false
) [# o4 p$ k ~4 T% L# C) F: z6 M7 s- M6 [; K$ S1 k
' G$ t0 e; Q( n1 C6 Y0 c, f. I$ G! c6 Y0 N0 v
# The transport protocol used when communicating with the storage
3 u$ z3 p; I3 K$ R T) w% Z% u3 A1 z: k( X2 {
# system or proxy server. Valid values are 'http' and 'https'.) h) H. D( \! r9 l* z9 j
% h* G0 v2 [5 U! n# Defaults to 'https'. ['https', 'http']' Q7 o! t8 b' v' g& Z+ s" V6 S
7 }2 V' D: A3 `CONFIG_MANILA_NETAPP_TRANSPORT_TYPE=https9 N2 ]: I @7 o1 U6 B4 K; K
% M5 ^; {) L5 F% v0 J' c6 a, f9 @: L" v
7 p) h) o# ~# _* g0 L. {- |
# Administrative user account name used to access the NetApp storage, g7 Q* z8 ?. j! x
V) H4 [! Q& u7 p, k# system. Defaults to ''.
7 ?* I0 {4 F( y) O+ t% D' N+ }# u! ~! o$ v
CONFIG_MANILA_NETAPP_LOGIN=admin8 r# k+ S$ N; {! s5 ~' l0 t
* V3 P: E8 B: k: A1 A, t% e* O' |5 R0 Y9 W% l+ `( v" c
+ a; [! G- A& X3 z3 k8 D
# Password for the NetApp administrative user account specified in
: ?5 A! Z. m; W" V8 T- U$ ~& X; i" ]& }; F) ]# I8 c$ A% O& s
# the CONFIG_MANILA_NETAPP_LOGIN parameter. Defaults to ''.
1 C& N4 G7 w3 h h- d: G/ {! z0 r, a' V( a
CONFIG_MANILA_NETAPP_PASSWORD=
2 A' p7 F, @5 _% q6 K3 c' ^/ e! H. D, W8 t0 p3 Z, Q' l0 R/ z
# [( B# _! a# @4 ~
( P7 a0 k( d7 M0 C9 @% R% z7 m# Hostname (or IP address) for the NetApp storage system or proxy
- X% i# [! @1 |3 b0 K
& s0 p. I1 L: R8 E$ V# server. Defaults to ''.6 ?$ y$ S$ S7 G3 @
! D7 J- M) T$ X' G' c, b( S
CONFIG_MANILA_NETAPP_SERVER_HOSTNAME=
* @! k* t6 h( _ j4 l6 ]5 w- L
2 x( Q/ S! n3 z$ ]2 V* U& ^0 }+ ^7 ~0 Q
! ]# u8 @$ q7 c& L. [# The storage family type used on the storage system; valid values
6 _. f" C+ T$ A+ C/ s9 l! v
% m: o, n q; B0 a. [7 Y# are ontap_cluster for clustered Data ONTAP. Defaults to
Y8 l+ x; i- X q! y0 f) w. I) g/ t* E! L% ~" j
# 'ontap_cluster'. ['ontap_cluster']* s7 U* g$ a4 t( m
1 ~5 O9 H* b [4 KCONFIG_MANILA_NETAPP_STORAGE_FAMILY=ontap_cluster" b- R$ s4 `$ U
( G! e6 f9 q7 L: V* Y
, J+ X, ]5 E6 j( X/ x
3 q4 `) \8 h5 r; L' j* G# The TCP port to use for communication with the storage system or
3 B- Q! _4 K( B
# ^+ o4 A1 d/ E: U3 y2 A. A6 N* x& g# proxy server. If not specified, Data ONTAP drivers will use 80 for( t& F; v4 }5 j- w3 A6 E# v; U v
0 I8 L# g7 \9 ]5 y' n7 Z) A
# HTTP and 443 for HTTPS. Defaults to '443'.: J$ u4 z' {, y' u2 O
- B* K0 E1 Y$ X- _3 k: e0 h
CONFIG_MANILA_NETAPP_SERVER_PORT=443
+ r2 c: l9 S( h; b* T9 w+ R( f9 c1 E+ ?" j1 U( E2 A, G* e' l7 G
: c4 }' D6 ?4 c' c* w
( b, m/ w2 `8 \, p
# Pattern for searching available aggregates for NetApp provisioning.
8 z$ c& I I2 z$ |% G6 R7 M0 n4 R& d
# Defaults to '(.*)'.
+ @8 y, U/ C& J) H t/ \
- h. _: W% A1 p* [* f' [CONFIG_MANILA_NETAPP_AGGREGATE_NAME_SEARCH_PATTERN=(.*)/ u4 z: q; H/ D" \% L0 {0 e0 ^
4 @/ B8 ^$ p, p( x2 |2 [ D
" Y: V) }8 Z# {6 A6 X L
$ e$ b6 _6 O% M# Name of aggregate on which to create the NetApp root volume. This
7 e% w7 S1 S" X4 X
( b5 v, a# n h/ m" r8 y% P# option only applies when the option' W; F2 j- z( I2 a2 B% s: Z
- W {, C8 x I# R; t& ?" c- r
# CONFIG_MANILA_NETAPP_DRV_HANDLES_SHARE_SERVERS is set to True.
3 ?- P! z; a" i1 b
, b2 Q9 [2 Q$ n* }* h. p5 pCONFIG_MANILA_NETAPP_ROOT_VOLUME_AGGREGATE=5 W! X# \- u% h' r, J. F
' ]% g+ n& s# P3 K) d" d' w9 b4 o0 l) p2 X1 f- V7 L3 p
+ v7 z3 }: U; @, F' _% ~: y# NetApp root volume name. Defaults to 'root'./ z+ M1 v1 {* ^6 `! M, ?" _, w
9 y( V W+ k Z/ \CONFIG_MANILA_NETAPP_ROOT_VOLUME_NAME=root G# {. Y L$ ?8 ~0 {0 l/ N; Q
& e1 n0 G( n) {4 e2 s( r0 I5 G4 _# j8 m& W: e/ R, N2 D# I
/ k3 V8 d. U( ~/ N# J
# This option specifies the storage virtual machine (previously& I5 w: X- S: X7 V: b* g' x9 h
) O; y: N7 u; g! E4 P- R
# called a Vserver) name on the storage cluster on which provisioning& E- V% T V* K" E
! d, l0 U: b8 _5 Q9 J4 g6 f& U, a# of shared file systems should occur. This option only applies when
6 G! L- q6 q1 N3 p, d- V* ?" @6 Y1 h; X% Q! W
# the option driver_handles_share_servers is set to False. Defaults to1 ^0 P- T- @" g, I! q
4 L/ P4 A2 X1 |+ ~
# ''.
3 ?' K, S Y" z9 O$ y
; ]. C3 f# k. Y7 s+ U' x9 K; SCONFIG_MANILA_NETAPP_VSERVER=+ t. V& \8 P( @! i% X T: t
6 e6 V. Z/ V! M: K
- d* Y. v& t6 N+ j2 ]% J* x
. V5 ^% d) V7 l% \6 [* f
# Denotes whether the driver should handle the responsibility of8 A8 v* U; K, j! W1 h+ m5 h8 M Q/ i
3 g) o8 P# v! G# o0 E3 p* F# g9 ~# managing share servers. This must be set to false if the driver is
! X& E5 m1 e: z$ y. ]
: x& Q M+ v7 U. W+ s9 k. e# to operate without managing share servers. Defaults to 'true'.! `2 J" ?( X& M1 p [
1 _1 W% ] e/ |" X+ t0 L# ['true', 'false']
7 B& W8 o1 @9 a! ~4 |( O5 J( b
k( r6 L8 M! I# hCONFIG_MANILA_GENERIC_DRV_HANDLES_SHARE_SERVERS=true
; d" l, N/ [* {2 ?- O( u
$ L5 r! p$ C/ E+ z6 A9 a- z! `2 C# k8 Q- q1 d
" Z- @. Y+ O6 x H" D3 ^; @* E, U7 K& E
# Volume name template for Manila service. Defaults to 'manila-$ N8 @' ?4 }' M% w, P$ } A% W& H
5 g6 f% y; V6 Y+ Z3 g
# share-%s'.# h" f# @6 k6 Y1 p) `. j
- l, D+ z, H4 Z' ICONFIG_MANILA_GENERIC_VOLUME_NAME_TEMPLATE=manila-share-%s$ _3 M. B/ Z3 G3 I- G
$ s9 m5 C( X/ w0 u' G; x h
' a" f% d8 P. B
" _8 _6 k7 `/ {* I; r$ ^
# Share mount path for Manila service. Defaults to '/shares'.9 d' m$ e* A1 _
o7 x! F1 q( P0 _2 o
CONFIG_MANILA_GENERIC_SHARE_MOUNT_PATH=/shares5 H6 Y4 [/ b6 Y9 Z& w+ o
( y2 Y5 `9 |; |; _: F
8 {9 e- f5 E( @* S9 K" p6 q" ?
7 Z/ n4 `& h8 ~* l; x/ S# Location of disk image for Manila service instance. Defaults to '; K- E% N+ f( l; w& L8 N
# y0 Z( a9 L3 I9 ?" T" w
CONFIG_MANILA_SERVICE_IMAGE_LOCATION=http://192.168.117.129/centos/help/files/manila-service-image.qcow2. {5 P% y S5 U2 X- Q5 K. z$ y, s
3 v4 W+ ^# Q6 ~* s5 J
, T4 W8 a# e: _1 a8 h, D
( A8 I( v1 { H; B2 J# User in Manila service instance.
4 L5 K% ^ @+ P2 x) T/ h! Y0 F8 d3 `( b0 A
CONFIG_MANILA_SERVICE_INSTANCE_USER=manila
( @/ `8 W* S7 v+ o# Y* k6 [& X6 ` g, \7 z7 a
. {3 I& `! ~# d# B9 m/ S* }3 @$ T A
2 ~. [" |! H6 V H
# Password to service instance user.& J& S% e! o+ ]3 F) t/ `2 E
5 N- A% Q1 W" x
CONFIG_MANILA_SERVICE_INSTANCE_PASSWORD=manila
. N( o7 e7 w+ g( Z) |3 w0 |2 k2 z
2 Q1 s. C0 j6 S+ R$ Z) L! a4 n& B* h
/ |8 z+ m6 v- @, e5 Z7 |5 C5 K# Type of networking that the backend will use. A more detailed
+ j6 B% F9 v& l+ h1 v, K9 |5 y; b( {5 ^2 A! ~
# description of each option is available in the Manila docs. Defaults( I1 I7 G# j% G; n3 w1 x2 t K
# |1 u' i) x+ m8 p8 e: E5 N# c# to 'neutron'. ['neutron', 'nova-network', 'standalone']
( w/ f. H* Y0 T8 S% t7 N4 l3 K' p6 a4 O6 U! i+ ]+ V5 m1 w
CONFIG_MANILA_NETWORK_TYPE=neutron
" S- T. F' w" B6 R; V! S* i# e9 I0 G' n2 N5 P
9 [5 r* i, u5 O% W; a8 @
: }- M: n6 F3 [* x# Gateway IPv4 address that should be used. Required. Defaults to ''.
8 i2 _4 ^! i7 t6 [" y) S9 k: Y# P2 A0 n; q4 Q( s' j/ X
CONFIG_MANILA_NETWORK_STANDALONE_GATEWAY=
* c' l/ A5 h/ y6 [' O6 ]! f! S j O. T! ?: N& t2 S' m
/ T* b. }* k( E$ G: s- R8 B
y: T% I1 q9 h. q/ l# Network mask that will be used. Can be either decimal like '24' or& Y1 [; W' J1 S2 \
7 L) R i1 u' d& C+ m! e0 K# binary like '255.255.255.0'. Required. Defaults to ''.' F! N) m* h0 \+ P
' R* }5 @! Z( X0 l2 y" m# y! H+ ECONFIG_MANILA_NETWORK_STANDALONE_NETMASK=
7 q4 |7 h/ P7 f, S7 D, h; z5 C+ s) I- f; y( q; {
' q r; P0 U1 Z& v) |& M, e
8 S' J* q4 P6 K6 x8 r1 k# Set it if network has segmentation (VLAN, VXLAN, etc). It will be0 U9 H7 V2 e, _1 }; p, M% L
$ S7 V& X, B$ A3 y' G& X% ]
# assigned to share-network and share drivers will be able to use this
5 c7 `/ {! D- V8 O6 [
2 M) I+ T( P; P4 r5 H& |! Q# for network interfaces within provisioned share servers. Optional.
/ j* |7 g/ b9 R% Z' o9 m: x
- H B' |7 e: m6 ^# Example: 1001. Defaults to ''.6 z, w9 q0 B/ K: f4 O& n
/ D J/ A2 t3 m1 ~4 G iCONFIG_MANILA_NETWORK_STANDALONE_SEG_ID=- q8 n+ j. a- d% K
* N3 b u' I9 N- z6 q
* l6 a+ |- I, w" J3 S' N
' r% i2 `, f' R" \1 K1 d4 L3 ~& w# Can be IP address, range of IP addresses or list of addresses or
# `) O# D4 Q4 C; |% N) ~0 M' X2 \. R3 a% Q
# ranges. Contains addresses from IP network that are allowed to be
, y1 _, p* R4 T+ ]3 p( f
% R: L( Z9 }% o2 E. [# used. If empty, then will be assumed that all host addresses from5 P0 z2 C+ R7 H, r t I
( O9 K9 U" N7 N, g. h( `$ r
# network can be used. Optional. Examples: 10.0.0.10 or
, N$ J) h# Z) T( U+ t
; i+ ^% l- q; {- g6 ~$ l; A# 10.0.0.10-10.0.0.20 or
6 }" J4 Z4 _. y7 L$ X0 Q2 L8 @3 u9 X B
# 10.0.0.10-10.0.0.20,10.0.0.30-10.0.0.40,10.0.0.50. Defaults to ''.
2 U. V9 m4 U1 S6 Z( C" {
W$ `; d+ Q' T, i2 f7 O) LCONFIG_MANILA_NETWORK_STANDALONE_IP_RANGE=$ ~" X i9 u! [0 N$ b% g1 Z, O) h
' O- _6 \, s% S: {
, e. B4 E% d8 \7 }' C0 k
. ^5 E3 X9 u* W8 W+ P# IP version of network. Optional. Defaults to '4'. ['4', '6']
! _5 |1 e- R' d3 B: N/ D; u( z
( ^* r3 t W1 V. X' Z7 ?- k9 JCONFIG_MANILA_NETWORK_STANDALONE_IP_VERSION=4
) j7 h- n1 q$ A# n% \8 V3 _8 t* S) l0 X! W' J8 i
4 `5 Z" {& Y+ f: Z5 M7 q) o
4 z- X* Z8 f3 y2 t+ }# List of GlusterFS servers that can be used to create shares. Each
/ Z5 h0 h3 r; S* \: a
% C) q# [0 {( W! ^% W9 G4 p# GlusterFS server should be of the form [remoteuser@]<volserver>, and
; b2 j# g0 e: b7 f
; ~$ c Z* b A# they are assumed to belong to distinct Gluster clusters.
$ d8 M N! D# g4 {( p* A7 Z' r+ A/ \8 N
CONFIG_MANILA_GLUSTERFS_SERVERS=0 x* O1 H/ Q; k1 g$ T
. S) Y0 ~0 ]; T$ _
2 v* U% }4 I2 F: P1 T
2 c2 Q/ y3 D: c5 M# Path of Manila host's private SSH key file.
+ l/ h) a) c5 Q7 `2 V1 y) F% h9 N. K$ B8 Q# A2 q
CONFIG_MANILA_GLUSTERFS_NATIVE_PATH_TO_PRIVATE_KEY=) D4 f* P S; W1 u P
: {! ^1 n: U, g. K, r9 }
1 }3 u |6 |. m/ A. i/ c5 D6 v! |9 @, [; i h& P7 B# C6 s
# Regular expression template used to filter GlusterFS volumes for6 \# m c# ?" j" g1 N! I& P
9 w( Y# ^: w% J$ Y; \/ h Z) o
# share creation. The regex template can optionally (ie. with support
: V1 Y a% Y8 z! y
0 }0 b2 A; `3 X- |' X# of the GlusterFS backend) contain the #{size} parameter which+ D/ m, k; h& w. `
1 s* a- ] L* S1 h1 K: D; k# matches an integer (sequence of digits) in which case the value+ H- H, u* M* a$ [+ Q2 [
+ e& l e: S$ L, D3 J% S7 u9 L0 Z# shall be intepreted as size of the volume in GB. Examples: "manila-& b3 r$ P4 w9 o$ y0 A9 {. f
$ V6 G: V" |% A- {# share-volume-d+$", "manila-share-volume-#{size}G-d+$"; with matching* P3 o+ k1 T4 k- d
) ]3 M* J4 ]+ H1 `6 M# volume names, respectively: "manila-share-volume-12", "manila-share-' ~( W3 F4 G1 E$ w
$ f5 U N5 x9 L" X
# volume-3G-13". In latter example, the number that matches "#{size}",
# @) }0 w2 }+ G% t
. o O' b9 A; r# that is, 3, is an indication that the size of volume is 3G.5 o( X5 \# A4 s8 R+ C; S) R
7 f9 X5 P/ I5 v( ICONFIG_MANILA_GLUSTERFS_VOLUME_PATTERN=4 m9 d, H/ S$ i) F4 p
; n V% U7 b7 T3 M* S
8 P9 ~* V* {. b; {: t& s; X% p- W$ L) ^
# Specifies the GlusterFS volume to be mounted on the Manila host.) n$ Z2 a% Q4 }7 h, V, d
& b* f% f5 i9 j: z3 g# For e.g: [remoteuser@]<volserver>:/<volid>/ S7 Z# V( g. f, O
- B% q( l% M% o8 l9 K" F. ]: S' o
CONFIG_MANILA_GLUSTERFS_TARGET=& U8 Y" j, N7 p2 H
) ~( m$ e" O, a2 V" C) b' A! \# z
+ i7 N, h& T( \! s) G
. Y6 [6 G8 i c5 }% }6 J" E6 I: D# Base directory containing mount points for Gluster volumes.
$ u) b& k c7 Y8 I6 K6 A7 C
1 ]" O% F, z7 r! _2 P9 DCONFIG_MANILA_GLUSTERFS_MOUNT_POINT_BASE=
2 X* u% |! x/ M6 {: R2 x4 T6 D1 {
% Z" }) p7 O2 o9 j0 n( F
6 Z- B7 o9 s7 M8 I, ?/ o$ e, o3 i0 u5 a, o4 ]$ \9 U
# Type of NFS server that mediate access to the Gluster volumes$ F0 t0 O9 [ ?
0 Q7 S. [9 m, \3 s9 K# (Gluster or Ganesha)., n: ?5 Q1 @" Q1 j: e6 O1 r% u8 ~
- r+ t+ |2 _. G3 ^- ^
CONFIG_MANILA_GLUSTERFS_NFS_SERVER_TYPE=gluster4 Q: J) @2 }7 u& |* z9 e
7 r. r6 R6 B% b. c" Z+ |& w
0 t' G N3 z9 l/ [1 b
, D! o: w0 {: S- \' p5 E# Path of Manila host's private SSH key file.. H- n2 p# t- O4 U
P. Z6 a$ F9 T* }4 k7 GCONFIG_MANILA_GLUSTERFS_PATH_TO_PRIVATE_KEY=
: \; M7 p# K6 M: T8 s7 a
) w+ u! \( |4 }" K; P# A5 X9 A9 c: C- ^ N8 p( k- h! Y% n
' z$ Z2 I! C4 M3 J# Remote Ganesha server node's IP address.
& U6 @, e. x) Z! j( T3 @1 N7 y2 m! h i
CONFIG_MANILA_GLUSTERFS_GANESHA_SERVER_IP=) I% P- E' u% [9 E+ D$ i2 m8 J
7 C+ T) y* u# x2 T; [3 [
* ~8 `5 g) R+ }, q$ x/ J6 a$ c2 f0 b: G7 B
# Specify 'y' to set up Horizon communication over https. ['y', 'n']
3 D( _" L0 q# r j: N! o$ f% v
6 h7 ]! c# e8 }+ U3 ~CONFIG_HORIZON_SSL=n
, k1 F1 @7 U" t" |8 i3 N9 G$ {1 d& D7 `% I' ?5 N6 i( A4 s
F0 v/ |- i7 O' ]% T1 j* X1 a& O! m
# Secret key to use for Horizon Secret Encryption Key.
& l+ B( G( _# }7 r/ E. J, ?: q% _0 x+ w) G! f) k% h, B4 z
CONFIG_HORIZON_SECRET_KEY=4c5dae8f4f124d68bf2516083b38b292( s# L- E5 m4 f
9 z( G, l. w* H; |0 m0 s% N! ~. w. c& O, F3 m+ s
5 A. M: ~% A4 e% G! L
# PEM-encoded certificate to be used for SSL connections on the https
( ]5 b0 L6 b0 Q, K7 K ^) [. [4 G: j% e3 `4 F: U# j" ]: T& W
# server. To generate a certificate, leave blank.
- O, f) J# N8 ?# o: S$ z- O2 ?+ Q
$ e6 B& n! E2 R4 m+ P% cCONFIG_HORIZON_SSL_CERT=6 V L; C$ b3 V" T
$ Y# {9 z% S& M( ?7 U
( Z7 J, r9 z- z$ k9 U* Z
& ~- Q( y; d* N% }$ U( g3 B: q# SSL keyfile corresponding to the certificate if one was specified.' a* _2 k; e# }5 _3 `
+ z( Y3 [ }0 _2 T# The certificate should not require a passphrase.
; G. v+ t+ K% ~0 t# \6 i5 ?
6 ?, p! p) c* N4 S- LCONFIG_HORIZON_SSL_KEY=
6 P9 R7 e" V% \8 C" l5 j% q7 y
6 {: }+ z: e" ?+ ]6 {% @" b' e3 N' o
7 y- Z- i8 i% U5 N9 L" N/ _
CONFIG_HORIZON_SSL_CACERT=$ P, |2 i a) {! q$ M, q
. c0 ^* N& F8 a4 i# e2 M# {
4 b) a) y3 `; ?
" @7 f' l8 H0 I# Password to use for the Object Storage service to authenticate with
2 e# B9 K3 m( y4 m3 S7 _3 w' q: z( n
, r: l) k9 E: z/ S" \/ g; |# the Identity service. D& ]% z( P: C
* ~7 U, w; P# b2 J- ECONFIG_SWIFT_KS_PW=dff5fe32de494c99
* X) a2 u6 h3 l" T/ _- E( K7 ~' k5 }% k/ J: A7 a. I
$ b* M% q7 j C8 E" S# e: h' s9 ]. H9 \, i% c7 H
# Comma-separated list of devices to use as storage device for Object. v4 d/ K z. D2 o+ p2 S
( ~& D1 i0 U q& b/ y3 n
# Storage. Each entry must take the format /path/to/dev (for example,6 p0 X# F. B$ p5 R+ f' D3 G
- d2 ~; n( e/ [+ }1 k: Z# specifying /dev/vdb installs /dev/vdb as the Object Storage storage( q: _" O' F! l$ ~ d' L
" ^. K# p+ n6 t& A* F8 f
# device; Packstack does not create the filesystem, you must do this
" C7 e& |1 `1 |) I7 A2 v- T
, _& m# Z# {+ B# first). If left empty, Packstack creates a loopback device for test8 X, j$ I% t$ j- ?
( y. b1 D4 r! g" R# setup.
Y; V8 z, S+ V$ o9 ?) `3 O6 g/ A% N/ b' V2 |
CONFIG_SWIFT_STORAGES=$ ~/ w* u1 }1 v( P9 _+ I
& U, G9 p# s+ w) B4 H
g0 B* _! K* ~7 d% e$ @: j& C+ f+ _( p
# Number of Object Storage storage zones; this number MUST be no/ }3 ]* U! ~3 C/ u w% k7 h
; U! i# O, r& Y+ G. G
# larger than the number of configured storage devices.
% }0 `; g+ R) O% x
' C. Z; W/ W: r( O/ j4 WCONFIG_SWIFT_STORAGE_ZONES=11 p2 O, p- o, i& R4 r& A% g6 J
5 U s3 X* P6 o
: ?" l" _6 C( Q6 z
' H S& S) u. n( O9 @# Number of Object Storage storage replicas; this number MUST be no" I$ |' H) q. I" b, V
1 B% p! I! P9 J. g
# larger than the number of configured storage zones.
, |, ]. Y+ R. o% F9 w9 u, T' {
: w4 T, e6 u6 G U: \- X' b% j4 lCONFIG_SWIFT_STORAGE_REPLICAS=1
/ n) j- V0 ` `8 p% f% V5 ^) G3 Y+ r& F' h3 v
5 w! W( s$ Y' m1 w' t8 Q( N w1 _/ o$ K5 p3 B, Z' f
# File system type for storage nodes. ['xfs', 'ext4']) J9 \, O5 I( @/ L& D& U7 x
3 Z' P% V, _; MCONFIG_SWIFT_STORAGE_FSTYPE=ext4
3 U) @- s: L9 P q7 ~- W1 w+ ~8 y: W) A
0 i1 j- d8 Y% c; J, `; \! k' o
1 Z' F6 q7 E" C( T" C4 b3 j2 t# Custom seed number to use for swift_hash_path_suffix in
4 W# c, F: z5 ?( I7 C7 w8 Z. s, Q; x h5 f6 A7 k. E
# /etc/swift/swift.conf. If you do not provide a value, a seed number5 v1 R8 q) j# l" Y
) n: p* L8 W. N0 ]. j- b5 ? W6 I! ?. K# is automatically generated.
% R% v$ g: D% @
! d6 r) O$ m9 ]8 NCONFIG_SWIFT_HASH=01da2433204e416b& _* h) P P% w
9 n! y0 L: ?& N0 z- C# c
9 ], N8 o# H; ]
2 U0 b, R) a( {1 N( j! |# o; \# Size of the Object Storage loopback file storage device.
5 D: `4 p. A9 m; F5 a
7 \/ Q! `1 [) ~1 `CONFIG_SWIFT_STORAGE_SIZE=2G
4 S+ b! Y# ]2 r' n
! |8 k# X- b' H# i/ x+ h" d# b. t$ q* o$ M* H4 @2 l8 J
+ t3 s: A( [6 \
# Password used by Orchestration service user to authenticate against- L( `4 v+ Q9 r0 Q0 d8 v) t8 S
0 r( H6 x; y/ X/ D c. n- j# the database.
' a+ w8 w. ~* c* S+ N2 o1 O) v) Y
CONFIG_HEAT_DB_PW=PW_PLACEHOLDER) F/ ?) q) Z1 B3 K% T: F3 A
* T1 Y) J/ k! \1 D/ @
# k% B5 R x8 w* G/ p5 C/ T
) l2 W& p+ I: x# Encryption key to use for authentication in the Orchestration
; R }) k. r4 s- `. {; m& ^. {$ c
# database (16, 24, or 32 chars).: c* d8 t- h1 I7 A
. [1 g7 S3 `3 d8 k
CONFIG_HEAT_AUTH_ENC_KEY=8aecdfeb31124de5. S+ P+ R3 [5 d- S1 x
: j5 k9 o% g# P7 U# ^
# c6 V/ V! Z) O1 m! s; d
6 T+ |( N2 O- n0 e& D7 O# Password to use for the Orchestration service to authenticate with
& M* f! v" Z3 r+ f' k, ]5 ` G( F3 P. C! W+ I0 Q. ?4 A' w
# the Identity service.
; w5 M- ]% D: J2 m
; `/ R' q; J+ J2 @: \! PCONFIG_HEAT_KS_PW=PW_PLACEHOLDER, j% r) ~4 i8 s- q
4 I" V E; h- t" }& o4 a0 g" I7 E! M! M' T2 _$ l5 M
: I1 f* q( _- F8 I- K- H# Specify 'y' to install the Orchestration CloudWatch API. ['y', 'n']
, q5 L, Z9 b% w$ N ~$ O4 r/ D. w1 M/ t# n& @
CONFIG_HEAT_CLOUDWATCH_INSTALL=n
! y7 a3 }3 e2 z/ f2 `
M ?3 k2 @' A o9 o1 ?( U6 j
9 ^; D7 Q, c6 [5 o4 v" y9 n' ~5 {" U$ i& y: O. ~
# Specify 'y' to install the Orchestration CloudFormation API. ['y',
g$ n% r% d8 S, k P5 \6 a. W* P! u6 s
4 Q: p9 U; c5 d# 'n']2 I6 w6 r& }: v9 Q
$ W* }7 @! X7 N: d" q. ?: O
CONFIG_HEAT_CFN_INSTALL=n2 F$ ^ s' x7 o, w/ H9 ~& L D
R9 Z: A1 E6 W$ s
+ t y; ^4 O- z/ P4 c
' t+ u4 ?8 _1 X; x8 y; B/ G
# Name of the Identity domain for Orchestration./ s3 k- t3 [) n2 b, d' `: \- @2 G$ [
% p) E. F3 E+ a2 UCONFIG_HEAT_DOMAIN=heat
2 a/ o' u- o" o- r- v2 r( v% ?5 N
- h6 S0 T f) i! K2 T5 A, V3 p9 c
% U* X# {' x" z4 e: x9 a" H# Name of the Identity domain administrative user for Orchestration.
. b7 r' g" z% s) G" `7 M6 n J1 _- W' F; v4 L+ I
CONFIG_HEAT_DOMAIN_ADMIN=heat_admin
& `) ~2 N4 M7 n) N$ y2 x5 h: z% J7 V! x X- _3 x
- M% o; N% _9 d# W( V1 h1 d
: | r) l' Q- w2 B' l9 M0 O# Password for the Identity domain administrative user for- v |; B7 n3 N. y- H
0 Y# ^* [2 `& M% T: A5 Y5 P1 a# f
# Orchestration.5 Q6 q( ~6 D! e
" v/ a# W! W: {4 R% O& b0 H/ X' Q
CONFIG_HEAT_DOMAIN_PASSWORD=PW_PLACEHOLDER3 Y; v3 G; b9 l% ]
0 j# S. b# p$ ]$ h+ W$ I: A' G0 _& k) I4 d
0 W0 D/ L2 Z5 ^: f1 @3 |1 ?/ Q( @
# Specify 'y' to provision for demo usage and testing. ['y', 'n']
6 W1 w+ e" T$ t7 M. z& y4 }, U8 B2 ~3 W1 m' z8 c3 h7 p: Z5 Y- E/ \* d
CONFIG_PROVISION_DEMO=y! `; M& A y" k+ }; n+ ?- b, v
; P( G% s5 o- f* P p
L+ Y5 |8 a6 P. G% x0 x0 |
& r' u6 {% Q! k% u. F
# Specify 'y' to configure the OpenStack Integration Test Suite3 r" p3 y" V, { s; V) b" @
7 Q5 h+ L+ ^! I9 f- Z! C$ W! J1 k# (tempest) for testing. The test suite requires OpenStack Networking
; D/ `, D( `. @5 T8 n c$ h; \# b3 @+ K E6 u
# to be installed. ['y', 'n']
- `5 y% S' w5 R: _
/ N) L2 P) t. C/ x8 k( F0 uCONFIG_PROVISION_TEMPEST=n
1 ` l; N7 P- d8 L. }5 b7 V+ K7 f, m0 s+ `$ [; x/ Q
; n! D n8 {% Z, |
5 V/ }* s1 ~5 R2 x! O6 s/ D
# CIDR network address for the floating IP subnet.
7 H5 N) S- V. E+ d+ g& @; i$ U+ a8 `* U8 W5 @" t* W6 T4 S1 a
CONFIG_PROVISION_DEMO_FLOATRANGE=172.24.4.224/28
% z' E6 a, j) r6 r+ a- Y- `5 ?0 A- X4 U( a8 x
4 |5 N. h% { @ W
( g6 A: z8 \( p+ D* W+ Q# The name to be assigned to the demo image in Glance (default
$ z+ b( J X; f2 N' L3 Y# b! q) Z
# "cirros").
: H: Q8 n/ u. e2 [
+ ?$ e( ]' o2 [; B8 NCONFIG_PROVISION_IMAGE_NAME=cirros
* u* E# M; H; P; n6 P$ X
* Z" Z8 {2 s8 o" k& {# ]3 D
3 `, F# c. b( O+ |5 P4 J
2 G: F7 H& r6 S3 ]# A URL or local file location for an image to download and provision2 m* F( w3 Z4 n) _4 o7 @% C9 `
0 Y. W* H! X: ^
# in Glance (defaults to a URL for a recent "cirros" image).
0 S" V2 r& m- w: _: r5 @5 Z4 P8 W5 ?
CONFIG_PROVISION_IMAGE_URL=http://192.168.117.129/centos/help/files/cirros-0.3.4-x86_64-disk.img
2 ~( D2 u% P. z6 j& G' M& |6 x E8 P2 W* Y) R) T* n1 W0 g
& o+ n; d" [1 |: f7 [/ G
+ M( q3 s0 l0 p7 y* R/ T7 w# Format for the demo image (default "qcow2").
) @" b* d( A$ N) V# ^5 ]: V2 S/ X' u+ G
CONFIG_PROVISION_IMAGE_FORMAT=qcow2
! ^) J! d9 q5 K5 |1 A' y
3 n+ ]" B" c. ~. `$ I# ]- n. C( W+ ~$ m
0 H- H" ^1 N5 ? J( D3 b; |! K
# User to use when connecting to instances booted from the demo
3 r" {4 \5 l& h# C$ C# x# z: W c1 m& w* q2 c4 t0 n0 P
# image.9 g z3 z( K- Z6 c! G( m
) x: }: k. H2 ECONFIG_PROVISION_IMAGE_SSH_USER=cirros8 ?7 w) X5 [* C
9 T: ?; B& |1 B9 Q& y: s9 G7 F1 T- }# }- V* y# E$ t% K$ W
& y3 \ O* \1 T. o0 k r8 wCONFIG_TEMPEST_HOST=, [3 V$ `) _) N
1 J8 X5 F# g+ `8 J( N: i. Y \
; `' n5 T+ @$ g9 n; j$ {1 S$ E, S v$ g, f$ f5 M" n
# Name of the Integration Test Suite provisioning user. If you do not
9 d1 M5 |1 M* Z6 w" y$ Z5 x5 J* M
# provide a user name, Tempest is configured in a standalone mode.
# s3 {) R" o* Y: d: k0 {( d5 Y" W$ i8 k- }. K; c
CONFIG_PROVISION_TEMPEST_USER=
4 z. M& z# X4 z+ x, S# p( M
: ^4 E- B: u+ h1 D$ j' k
% ^/ g% u3 e$ W% h
' I$ y% A( o9 i8 D d! J% G+ u# Password to use for the Integration Test Suite provisioning user.) Z3 V; l# [! h9 i( V; _
) @4 Y$ B6 F/ yCONFIG_PROVISION_TEMPEST_USER_PW=PW_PLACEHOLDER
- b6 [8 b! E' C1 j g* m! p# C* z) e9 [7 g$ y8 o2 s$ k
1 R, E) E4 y1 y
, B: [( C# p0 h, t" C. ?# CIDR network address for the floating IP subnet.
9 d+ c/ M$ D1 O. U5 ~
5 n9 ], G9 c" F/ q. ]5 rCONFIG_PROVISION_TEMPEST_FLOATRANGE=172.24.4.224/282 K5 [8 }6 W# V# L+ z: C
6 k" A& r9 t4 X% m" U& ~6 X5 P: @ N/ n( ?
0 z$ X0 ?; X- _/ d$ G' y$ M i C
# URI of the Integration Test Suite git repository.1 L8 d& J5 H" v6 I( R8 u
' Q1 \, f- Y7 J: Z! H/ \1 i JCONFIG_PROVISION_TEMPEST_REPO_URI=https://github.com/openstack/tempest.git
$ V+ [8 {# S9 T, P1 j X" o. M3 J/ ^6 W
' A! f" s* o$ m# y% y$ T
# C2 q8 l, B, Y$ i$ ~# I# Revision (branch) of the Integration Test Suite git repository.
7 Z1 k( n2 A2 ^* @/ ?- X, G$ n; `4 C% H, }" t7 {
CONFIG_PROVISION_TEMPEST_REPO_REVISION=master
9 K7 W2 m* P& _2 j% l; E
% F! V, b; p: ~8 ?( e, c) I& h/ J% u
% y9 M2 j( c2 s7 z7 E
* K( V9 p2 [9 G2 T( O7 F" |) @1 E) _# Specify 'y' to run Tempest smoke test as last step of installation. G6 ]7 X8 a5 E: P
$ c, `( o2 \/ b
CONFIG_RUN_TEMPEST=n
( ~* G0 d( V( K$ {: Q# O( _4 A! f" e$ U0 S3 M: d
% \1 D5 U. U. }) n0 k
! `. F9 U f( B% W) V* F# Test suites to run, example: "smoke dashboard TelemetryAlarming".' s0 d9 P y! {3 \# h
u1 x7 G T. s5 d
# Optional, defaults to "smoke".
3 [0 H9 Z( g: z& e0 `% }) V; {+ `7 a+ x, @( t4 `8 E( ~
CONFIG_RUN_TEMPEST_TESTS=smoke9 A7 \5 \, F! _) `! [5 B, K
) \# [$ }2 G n3 Y- f1 @( j) h- i9 }% \6 x! u
7 L5 @# u8 L6 l' V
# Specify 'y' to configure the Open vSwitch external bridge for an
: d& W! Q; T! ~# f- K+ W! T; f- K3 f
# all-in-one deployment (the L3 external bridge acts as the gateway
/ }- y" V& G# q* Z
+ t8 m: P F; z: X& j9 V u# for virtual machines). ['y', 'n']
" d4 }, L3 Q' o' u- _( O% R/ M! c2 E. Y
CONFIG_PROVISION_OVS_BRIDGE=y
p, Z/ O: N6 ]9 d" D4 [# i
1 E! q. {% ?, Q% h4 f W* H+ h% M( Z
0 Y+ h. e0 X, x7 b, g0 q1 C
" i9 R R# ~$ w* U; k B# Password to use for Gnocchi to access the database.
3 k& `8 p! f T
% e8 B6 f1 u+ P+ |7 QCONFIG_GNOCCHI_DB_PW=f40e4c770e3b4d1c8 y5 U: c9 Z) g$ } G
$ O+ o; H8 H/ D6 R" H1 s
' r3 C% p1 u2 l: K3 O: ^
8 d, f/ K4 g# p/ j) W& K# Password to use for Gnocchi to authenticate with the Identity! \) D/ X* Z' ?& ]1 X. _
8 ]+ W3 i( E! I8 {, }
# service.+ x* q1 J# i9 w5 J
- C* q- |& d2 k9 w1 H. m0 C
CONFIG_GNOCCHI_KS_PW=314a530c538048f9) K% m5 {3 y% @( _: C: l
. _/ u4 ^: d1 ?
7 y: T8 i) O& W' Y. E; z
; C- J3 Q' `2 ]% W; Q# Secret key for signing Telemetry service (ceilometer) messages.4 Z4 K4 J% f6 O+ c9 e
3 ?4 w; A/ E& C4 iCONFIG_CEILOMETER_SECRET=e0dccc8ed8024c16
: l1 A& Z' c3 ~* ?3 |# @; k3 I* H9 m6 G5 o8 T
( x) |; r' L- X) h# I% c. W. h. F- u* C _
# Password to use for Telemetry to authenticate with the Identity
9 f) d- ?! d' M7 c+ o+ I5 |/ P+ L0 V1 O
# service.
( O' e1 s- U: r/ A8 I2 k( c3 a* \0 ^6 _
CONFIG_CEILOMETER_KS_PW=4c2b90ee71664e5e
% S% T8 B+ P% I" `6 m) j: @, }" ^2 | I6 k t# |' G/ ~/ Q$ @
- @5 T- \/ j4 G3 |& U3 Z6 B
, |: r' t( G! Y1 U# \1 w
# Ceilometer service name. ['httpd', 'ceilometer']
& V' k7 j. W+ Q. z$ `1 |! @% r) u/ T5 J5 q' L
CONFIG_CEILOMETER_SERVICE_NAME=httpd3 o) T# _/ N& D: E" c- X6 a
& @0 u; K6 R$ }
- R8 e7 h* p& e7 \
7 a0 j6 |* |# U# x& e# Backend driver for Telemetry's group membership coordination.
, t; e ~5 K& H) [ _3 w) G( {. b$ c' ~% ~/ _" j% k2 n
# ['redis', 'none']
+ C8 b# A% f; K; q# R z* N
- M+ G8 ~. L6 M H- }- T( rCONFIG_CEILOMETER_COORDINATION_BACKEND=redis
* [2 V* I6 ^% r* n, m5 `/ I* c% f9 N7 E
% r0 y" G4 W1 \) z/ P+ {4 b
0 c8 N6 C' d* `) f$ N) P2 b
# Backend driver for Telemetry's metering backend configuration.9 p J6 X# @9 j+ Z
. o# I4 k% G# y* w7 R* i3 \
# ['database', 'gnocchi']
* I# }! p9 w3 t7 p
5 B& a3 m' m+ }. I, v4 a( vCONFIG_CEILOMETER_METERING_BACKEND=database/ A9 y5 ?' D2 U8 x
# {3 r, _6 X. [, q7 v
% t" b- g6 p* @9 M% _& U1 W* X
' J) T# W2 h, y) g. J0 V- t6 y1 ~
# IP address of the server on which to install MongoDB.- M! c# o7 I- r+ Y) X
! O) x( K4 o2 M2 p- o* x# q4 O. U' pCONFIG_MONGODB_HOST=10.0.2.15
6 a; s" R- u, ~) f" J& l
; n! U- r/ f: L0 m0 ]7 K2 u/ M: M% J. F3 ^6 B
% X6 r1 o2 h* K7 G
# IP address of the server on which to install the Redis master7 E+ t6 z$ ` C/ m' ^& r
[1 O- s- M- @4 C
# server.
8 [' A+ Y: b/ d: G
; b( L3 Y2 X3 w5 a% wCONFIG_REDIS_MASTER_HOST=10.0.2.15
2 p1 w: q9 m/ E6 b1 ?6 T1 k! T/ y, r: T! }) ]* z! `+ I
) U* \% l& r) k% E
5 s9 @" [9 p: G1 A( k3 Y. s9 v# Port on which the Redis server(s) listens.
2 |5 Q R- v5 m0 d$ t9 u5 ~
7 }% L1 u4 L; nCONFIG_REDIS_PORT=6379
: H$ R% p8 [8 a/ Y! M; p$ G2 _- V6 ]2 n. V) J! t
' j( N$ y$ c/ ^. [; k4 V/ F
3 t1 e8 O6 L" w* H( W$ n E( \# Specify 'y' to have Redis try to use HA. ['y', 'n']- R/ o9 G) a0 \
$ F6 k) T. t2 W% I8 X* ` X
CONFIG_REDIS_HA=n
. [- c9 q3 w" R! z% h; _) ~* z2 F. |+ ^9 u: p/ u
: j9 D$ F* y) I6 @$ r S% e2 N4 r. _5 _6 K: W) C) _
# Hosts on which to install Redis slaves.
. I8 |2 o$ r& c: a% {7 U2 B8 ^# A8 Q' ^" e: U
CONFIG_REDIS_SLAVE_HOSTS=10.0.2.15
7 x# |! e$ X* Y, n0 m
0 S. J9 ]4 v: e3 V' G2 N; D5 c$ X: r8 Q5 @3 h# F2 u
& b3 ^5 N% l4 s8 j' P
# Hosts on which to install Redis sentinel servers.. g+ N: c2 y5 o @& m; K0 O3 m
' q: F l2 a* F. z2 A9 F: o( tCONFIG_REDIS_SENTINEL_HOSTS=10.0.2.150 c- O { R; w# m4 q: t
1 W0 R) t: s; @7 C* b& ?. g) n/ d+ |. t5 \
' J5 m+ i& q# x& s6 R# Host to configure as the Redis coordination sentinel.
7 e" r- L: g5 ]# n9 I$ n O8 n
, A! S3 x9 \/ D7 YCONFIG_REDIS_SENTINEL_CONTACT_HOST=10.0.2.15" I$ w0 a# _% W( z# R2 |
/ `2 d0 ^( c4 q' a$ z
7 w. V% f) F6 i. Y1 g5 }4 p* ^! v9 O9 t+ t( |6 ^1 ^
# Port on which Redis sentinel servers listen.9 `6 u; Q. D0 e9 E8 v: _& }" V
0 g* W/ m: o) z. HCONFIG_REDIS_SENTINEL_PORT=26379! M# v, [1 p. a: M9 @, }
$ i- V/ W h& G, d) t
' }# h! y9 H5 L/ K7 u+ w
p2 A# ?6 k& v9 ]8 e- e
# Quorum value for Redis sentinel servers.& z. M0 b5 X+ S3 v0 a7 R
O4 Y" q6 w/ C) j1 y5 B1 v) z4 J
CONFIG_REDIS_SENTINEL_QUORUM=2$ Y; I, [0 L! b `/ z) r6 w
* ?% E- X% z! _1 c: j! K
8 ?5 b4 w6 M5 N& O7 E6 z
( q7 a' E2 i" }
# Name of the master server watched by the Redis sentinel. ['[a-z]+']
! ~, V0 |0 x( E+ c. x; q X1 F- l2 B# p, Q) j3 G
CONFIG_REDIS_MASTER_NAME=mymaster/ d7 k& |# Q8 l ]: t/ p$ |
1 s, [! }( @" j& Z1 E! f$ A
! O7 Q, h6 B& @ T
+ @3 w* T. i8 B: k, Q0 [# Password to use for Telemetry Alarming to authenticate with the
4 Z" ~* Z! z+ p0 K1 {! h+ Z6 Z/ V# L% c9 f- o q# F/ b
# Identity service.( Q: W1 \" F/ f
4 G+ P7 W R/ Z( aCONFIG_AODH_KS_PW=739a1dae2a254e6a4 O* D' @4 y! z7 U9 o& u6 W
! q7 F# T' R: O! u( A {1 J+ Z3 X# J9 @' b) \0 N$ J
- o5 o Q2 G6 p& ^ B9 f! S
# Password to use for OpenStack Database-as-a-Service (trove) to
D0 E+ o; O& t8 P
$ p6 X+ z* [* H I: i4 F' r# access the database.
* e, r4 M( o4 L% Q3 n% A! C' B9 o( R8 o. |- M/ Q# R: S- ?
CONFIG_TROVE_DB_PW=PW_PLACEHOLDER7 T5 c" t) ]9 j w$ }
$ V: X# C" c# _' [0 t
. I4 p- b4 @' [& i: c8 P
0 G/ M" o9 `9 S: S( ~$ @0 e# Password to use for OpenStack Database-as-a-Service to authenticate& j: n w' s- s9 C- U4 K
* _% g3 Z b7 R( D& h. _# with the Identity service.
6 Q4 P: L+ Z% y" e; P
I+ R! m' o9 t$ F' C* @! r5 BCONFIG_TROVE_KS_PW=PW_PLACEHOLDER2 c$ ?- s# h8 H. C1 w
' ~2 T, P% f8 C0 M' W+ E2 y1 S2 C- D$ o/ q0 t4 c
6 u( C' y0 {% U G
# User name to use when OpenStack Database-as-a-Service connects to' r6 }2 D* D# g; @% W
0 N- }8 M! S2 n
# the Compute service.
& d5 K. t* T7 |0 [7 b
. b2 R: o ~2 _, }. L! D, b% {CONFIG_TROVE_NOVA_USER=trove7 Q+ ?- m: \7 @% `6 m
8 r8 @+ r' ]2 [1 c" J
* Q. A Z2 I1 |- u% z! U
) H$ g7 _2 ^! {# Tenant to use when OpenStack Database-as-a-Service connects to the
0 b5 X- @( X9 E# c5 b$ B
! F* L* o6 d0 L4 F5 H( W8 ]" g* k# Compute service.
5 ~1 V4 E. S/ b) j& S, ^5 Q7 L+ z4 H! l. _$ j. R
CONFIG_TROVE_NOVA_TENANT=services
1 K! n' F3 j6 f1 R4 ^. A
! y9 q& K& t+ I
3 G4 A8 t" E3 d* W+ \' i* O% Z, p0 z1 A# B% [+ ~; M
# Password to use when OpenStack Database-as-a-Service connects to6 j V- P6 x2 }( M+ b+ X3 ^
$ c+ L2 N" O/ s; J4 L7 C
# the Compute service.
: o, }) e( l* ~/ \, w. h- v9 u4 e% [& Q+ V# d
CONFIG_TROVE_NOVA_PW=PW_PLACEHOLDER# I3 i; x: @6 Z" d- y
1 e* [" b0 t' I2 x; B9 u* F
, O/ d' ?* t: _: I* J
" O! Y: E; V' X. ^! X# Password to use for OpenStack Data Processing (sahara) to access& t: M7 W: b! U; F x
4 g, Q, V1 c, y6 h# the database.
# l K0 P( v6 |( t# L* Z9 k- `, i' D% S8 i. f; x. a) }1 z
CONFIG_SAHARA_DB_PW=PW_PLACEHOLDER
* d9 ^) z# Q% B0 t! E- F8 ~7 ^$ W, b* n1 ?* V
5 M" r* n# i# g$ |7 b
/ U8 |' h. V6 w1 n- s1 q! B# Password to use for OpenStack Data Processing to authenticate with* I5 I/ q9 ?. }' t: n; W! r. M
) ~2 Y% V2 g( c1 q. @# the Identity service.- H' i9 ]9 L& K# q- m0 F1 r6 s1 J8 B
8 t# a8 [2 B& w2 r' N7 N( I/ u( ^8 k
CONFIG_SAHARA_KS_PW=PW_PLACEHOLDER# \) k8 f H+ C n: V
9 E) v; `% K2 O
0 M5 L+ x3 N) y' _
& z1 V" r" F7 z; }: ]
# Password of the nagiosadmin user on the Nagios server.8 }# X+ \( a+ B/ T9 v% Q
3 t' p$ ]# u" [8 A, H( z( F2 q6 O- @$ uCONFIG_NAGIOS_PW=d346f2fb71ef489a
. m5 N' E2 v) S$ ] b' t0 A. l. R& t7 ?
|
|
发表于 2018-9-26 09:36:10