|
|
楼主 |
发表于 2018-9-26 09:42:22
|
显示全部楼层
[general]
0 ?; b7 Y" E% f5 n+ |
, _6 q! |" ~, K: o" @
/ _4 O% G$ c- i# t& f+ q" u
% Q. R5 F- e* I+ c' k! _2 ^; W, Y# Path to a public key to install on servers. If a usable key has not) V, v% h: t+ O: B% ^4 X8 Y
' J `" f3 r3 Z+ ^# been installed on the remote servers, the user is prompted for a7 q1 A5 J- P. J# i
$ ^1 Z) S) T& U* [; m
# password and this key is installed so the password will not be
2 k: o6 @8 z3 L1 z7 h6 ?4 K
9 W0 R/ N- R) B! O0 a% q' t# required again.
( ^6 _: |3 M+ _+ u8 x+ T+ B: D* I3 G1 x$ |: Y1 C: r8 b
CONFIG_SSH_KEY=/root/.ssh/id_rsa.pub, ~, k& Z9 `- N. A
2 \3 v' R* r+ d8 ]$ O0 h7 B+ {9 Q9 V1 ~2 }! Y, i: S7 a
8 e3 f& i% U; K# Default password to be used everywhere (overridden by passwords set, m$ W( g6 Z) k6 R9 B
( r9 y; d2 X/ g5 m/ G) P# for individual services or users).# u' M& n9 \+ _( q2 P( |/ Y
' C+ L, b4 T) C; u) Z g; q2 `
CONFIG_DEFAULT_PASSWORD=7 g" c1 @# n7 l& J
# j! W- b+ ?3 Y, G* m0 u0 A7 s9 O, m+ A
( ?3 U* D1 L8 z6 U6 N& \
# The amount of service workers/threads to use for each service.
) t7 k3 d# k" Y& j& `; q2 B( ]0 ], `1 {3 R+ |- k7 y; M0 \
# Useful to tweak when you have memory constraints. Defaults to the
, Q" x. }6 h2 x" E# c) [
/ b3 V# \0 O, |7 Z# amount of cores on the system.! m& |3 B+ W3 Z b# P
1 ]3 Y3 V& e4 z7 I* k% e
CONFIG_SERVICE_WORKERS=%{::processorcount}
# g. a# L0 M+ G/ h$ l. ]& B
- {$ y7 I: ]' P$ p; R) r" l" r0 t1 O% _* `8 |0 O
/ w: d7 v3 T* s" Z. `$ O# N( p
# Specify 'y' to install MariaDB. ['y', 'n']! C* \4 P7 ^' J/ m+ h0 f6 y1 g
. x3 E3 u8 F3 v# k6 ]/ o% _1 u: [
CONFIG_MARIADB_INSTALL=y( x+ g @) c) V7 q9 T& y& M
7 T$ J9 ]! V4 U3 P( f5 M
3 B6 z6 {: d3 |9 X" m7 B" N" q# ~* H# w! V8 H& K8 ^
# Specify 'y' to install OpenStack Image Service (glance). ['y', 'n']7 ^1 b' `8 `9 J3 H( d
% X. {9 Q' u O) w/ k% WCONFIG_GLANCE_INSTALL=y& [, ?, n+ N8 ~* |- f1 g
8 b7 u* g& z! z6 M/ V' O$ K9 T: u8 m4 a7 c9 e5 ^/ ]
, E+ R* W9 w' e; X% k3 f$ q/ W: Q) ^) V
# Specify 'y' to install OpenStack Block Storage (cinder). ['y', 'n']
7 u% R' U0 I8 m7 A7 }( a5 ^1 b
0 a- Z$ E; a0 ^. L7 ~( HCONFIG_CINDER_INSTALL=y
9 }4 k/ i) [( h3 o- D/ D9 O
3 ^9 r: ^( A6 N* W, o1 a
4 w6 k3 M7 A9 H* @- q
( T l5 i2 r# s9 A! t# Specify 'y' to install OpenStack Shared File System (manila). ['y',, M) y. @9 [$ U/ C) p
' K, {1 S7 ~1 ^
# 'n']2 p3 W& b6 ^- I* Z. s
" K0 }! _* N: C6 RCONFIG_MANILA_INSTALL=y
$ y" p2 L8 ]5 K+ n- p
% V- d1 A# Y( `- K5 v) Q$ h8 b
3 m# Y8 h3 [) s1 H8 L" ] H+ |8 F* K7 g" g5 L
# Specify 'y' to install OpenStack Compute (nova). ['y', 'n']
0 R, Q" Q T5 @
# L. r- Y) P; _. }; xCONFIG_NOVA_INSTALL=y7 r# l! @1 G. R! C5 u
C* A. A- o; r! k2 `2 H! W( ~' h$ C6 I/ |
0 S. l% f% W! o* L4 v M# Specify 'y' to install OpenStack Networking (neutron); otherwise,# W' W5 A/ b! A* o# R. @* |% t0 w
2 K4 |$ S# s5 Q) L# Compute Networking (nova) will be used. ['y', 'n']% A+ s) }" ` e9 s; d8 @: I: X
# H) s s( [" \$ N# w" nCONFIG_NEUTRON_INSTALL=y( |) N$ Z; f/ ]7 s( u9 Q B% I
+ j, E7 D& _4 [3 C7 U% [
3 P/ H5 ?- L7 K; u2 c4 \# p! g/ J1 D: ^9 `9 |( v0 n
# Specify 'y' to install OpenStack Dashboard (horizon). ['y', 'n']$ _' L+ `* o8 X" u
4 F3 Z6 y% I; `3 o, B I* jCONFIG_HORIZON_INSTALL=y
8 B; q" P0 P4 x8 G! l# s- r4 G0 V* g% X
$ v* {) b5 N2 Z: v' g
" ?, ~* a' o9 K( K9 p# Specify 'y' to install OpenStack Object Storage (swift). ['y', 'n']
9 q4 v X6 ]9 y9 G x( K) Z" b# }5 u3 G8 U
CONFIG_SWIFT_INSTALL=y6 l2 f' @% {4 Q
1 g6 u6 ] J" t
$ X- @- {# B& h; ?/ Q3 s
0 P) |" w' o- |
# Specify 'y' to install OpenStack Metering (ceilometer). ['y', 'n']
8 x+ n" _# z: n7 N( I
+ D0 R! ?- H2 `$ F+ s2 ?. K, f& h* M' oCONFIG_CEILOMETER_INSTALL=y% n9 h; D; ^9 Y7 T5 ?
# \- F i4 U/ N% w |9 i, F0 U5 X
6 Y1 ]9 t7 B% X4 k
# Specify 'y' to install OpenStack Telemetry Alarming (Aodh). Note4 V: R' x. E: |1 x' u. o% B: b1 [
) Y3 n n+ ^( d. Y/ `# Aodh requires Ceilometer to be installed as well. ['y', 'n']$ N: m; ^! O4 E) i% W9 l
. z/ m2 L, P0 O |
CONFIG_AODH_INSTALL=y
, K+ K% o# ]) s) R, G
8 s5 o! |3 H8 h2 t3 i I# B# |; |
$ v$ @. _6 Y% d' U+ g+ L
2 @* ]4 e; M8 }& N a. ~# Specify 'y' to install OpenStack Metering as a Service (gnocchi).$ R9 E# R9 L% p: b( b% \6 e" C
6 Y3 ]& n& ?, d9 o; j6 I: r( L* k
# ['y', 'n']2 H( X. j- T% m; h+ M
! j" m" L- q- j3 @
CONFIG_GNOCCHI_INSTALL=y2 _& ^$ D! p$ j. q( a9 n
. |* T0 @6 _' Z& v: y9 o2 `7 s; o5 ?
. z p" G- Q1 R j- ~0 {, G. {4 J' V* \. l0 n6 X$ d
# Specify 'y' to install OpenStack Data Processing (sahara). In case
, A" M5 f3 [+ t' L" a1 l
9 c# L* Z/ `& Q5 ^6 O+ v: y# of sahara installation packstack also installs heat.['y', 'n']
1 Z. L7 s# f1 l5 x/ \
8 ^4 O' J/ N+ z u, k. P+ C) MCONFIG_SAHARA_INSTALL=n
; W+ \' D. X* T- w: {6 F2 V5 x0 e7 y8 |- v+ G* ]' B( v
M S1 u/ {8 S" V, G' b1 S0 b: ~
; s1 i% e: a1 k9 J2 R+ x: y
# Specify 'y' to install OpenStack Orchestration (heat). ['y', 'n']! p+ a7 i2 A* d3 q F" b8 P# M
) v4 G& H1 {7 W# c6 ~: B! u$ p" wCONFIG_HEAT_INSTALL=n
' N4 [$ \: ^3 J" g
1 L) {" S% o$ k/ `$ @6 b3 I, n/ u- {3 B
4 _. V- X0 A$ m7 n1 \% k, h- N# Specify 'y' to install OpenStack Database (trove) ['y', 'n']
5 Q7 `7 B% T8 ?+ s% Z1 t
6 I; o8 U9 F/ g! WCONFIG_TROVE_INSTALL=n
8 |) z! s* h( C3 |; ]- F0 s) G& j/ X% G
2 \' r! ]4 k1 K" U
+ J/ B6 i K7 d( ]& J
# Specify 'y' to install OpenStack Bare Metal Provisioning (ironic).
6 C0 }0 G v7 n8 f' V( k, j( q' k3 I( H# z, @9 d" T
# ['y', 'n']
$ H, k3 g) e" C, i+ ~* u e& W2 l
CONFIG_IRONIC_INSTALL=n
$ K+ H$ D& U. @ T( {( W" T1 \; O3 C) H& |$ o. Y% T! L
* X4 I3 {, U, |
% ?' g8 }) r" b# Specify 'y' to install the OpenStack Client packages (command-line& n9 V) H) u; a
# x( k# J4 D- P2 |2 ^
# tools). An admin "rc" file will also be installed. ['y', 'n']
1 ?- F3 a8 L$ T! L! e" P
8 X3 k: \, B6 PCONFIG_CLIENT_INSTALL=y9 g0 ]/ G- S. [, I% h
& b, g8 X) s$ o7 O0 J
$ V' S# t+ l2 t# k! ?6 [% a
! }. t% D1 T5 D. g& c: g# Comma-separated list of NTP servers. Leave plain if Packstack3 N& [& n1 l$ E# S- q
( Q9 D: S1 S1 a( G( }1 ~
# should not install ntpd on instances.
8 ~! ]! b7 t& e2 O7 q' M8 E5 X, ]( S
CONFIG_NTP_SERVERS=
2 w1 x/ w5 |3 H6 R8 e2 _7 [
' O; {+ d# b" j# H/ ^. g* [. n1 j
$ t0 _, r: q' a k+ |2 ?- C; E8 [' w" W/ u# z- m7 O: X
# Specify 'y' to install Nagios to monitor OpenStack hosts. Nagios
( H# Z6 y2 v* k4 }6 F( O C" {2 w( u( B* z
# provides additional tools for monitoring the OpenStack environment.. a6 ?+ m# y8 c, }+ }7 w
4 @3 A* @4 a: D+ T0 P1 c0 x. L# ['y', 'n']4 v5 i/ Y" G" f
/ d) q ~% ?1 sCONFIG_NAGIOS_INSTALL=y
. k# F! r3 \" ~: c( N& E
9 Q$ I4 P7 P* Z- }- i: Y* h0 V+ v- p4 Z, p! W( c
3 ]2 w* {$ G/ w5 d9 D) `$ `$ b# Comma-separated list of servers to be excluded from the
- V" [- V3 l' J( R4 W% S/ w6 C' _; }6 r( J8 {, g2 T3 F* u
# installation. This is helpful if you are running Packstack a second
% ^( M( K8 V$ e5 F* B H# v7 n: t7 Y2 U
# time with the same answer file and do not want Packstack to
( a8 N( q% i7 s. ~' D# [4 P6 ^
X6 V) E4 c% r) H# overwrite these server's configurations. Leave empty if you do not- e4 t [& a# v' a
0 }* b3 J3 h; R: m( F; @. l9 t
# need to exclude any servers.
" m& [3 p/ k6 \. z4 d" w: f+ L/ q& l! Q( D, [
EXCLUDE_SERVERS=
$ j, a, Z- k; _+ ?! U" B& ~6 T9 C o- Z9 l4 d
* k- y6 s# M/ Y5 s1 x3 N
* D! x% K; Z% C3 u% U4 K, h8 [# Specify 'y' if you want to run OpenStack services in debug mode;3 ]( X" F, j- j' X
- e( a4 o+ k, ~ v# otherwise, specify 'n'. ['y', 'n']
" ]. x( _" o9 N6 p
/ r2 E: }+ Z4 C! DCONFIG_DEBUG_MODE=n: c; [( b1 E& A ?# n
9 `2 J% D+ R5 h; l. G& n7 J$ g1 W' x( B3 r+ h$ u* j# l
$ z8 h" S0 v% [' G. Y z4 w: _! v
# Server on which to install OpenStack services specific to the
6 f5 X. w/ `! E3 m& L# K4 j$ r2 u; F6 m6 D: \' E% d, O
# controller role (for example, API servers or dashboard).( k8 i( ~/ r& J. n9 r. r4 N+ t) M
& P0 }2 k# J! \- |' |CONFIG_CONTROLLER_HOST=10.0.2.15, p0 d6 p: o2 S# q. Y) j
# O1 ?* P8 T1 H, c1 c( o4 g$ J
" p3 |; A6 ~. [% `$ W: ^
* H! ~; P. P! k! D# List the servers on which to install the Compute service.
$ n9 h9 t) D5 a+ a) L# G F5 ~, x. p* R* x; x, U7 n( e2 ~
CONFIG_COMPUTE_HOSTS=10.0.2.15
; \) _! @8 z# R. |* P8 Y, r$ d( |5 `
- r2 X) u! v$ g( G# T( H: K" U2 u
- ]- v, k4 X7 [6 I* [/ c+ [6 n, }1 ^1 {4 X4 _
# List of servers on which to install the network service such as3 c' r9 H( K: b* J& [# r
* V. o; h8 b( Z) V8 U# Compute networking (nova network) or OpenStack Networking (neutron).+ _ P' x1 }4 y. l. g8 o) `
3 z" K5 N$ n. z8 x. L6 b4 bCONFIG_NETWORK_HOSTS=10.0.2.15
& O2 o: ?* @# D2 y7 J5 C2 x E8 q& Y) S, I5 D; q U1 b: w
5 f: [" Q3 x2 ~0 o' A& @6 y
: q1 L( I" X% i ~6 [ p# Specify 'y' if you want to use VMware vCenter as hypervisor and2 f! R4 [# ^/ o+ k
. A- E$ h7 ^4 S6 _) r; |: z# storage; otherwise, specify 'n'. ['y', 'n']$ H- d7 }! v X2 J
; V4 b) v9 X( Z8 u# f8 O9 v( W$ V, x
CONFIG_VMWARE_BACKEND=n
7 M( `3 v: R( _( h/ l" ^$ c5 M7 B) e0 F6 a0 O& V! H! O
- V* |' W x* g$ H. p/ }
, R/ r! U, l- @0 p4 @5 _1 S# Specify 'y' if you want to use unsupported parameters. This should9 I; E5 n3 N. f) a
+ U/ [; N8 I6 C, U" |$ B8 E; w7 _, Z- k
# be used only if you know what you are doing. Issues caused by using
+ [7 r5 R9 x9 u' I1 B) `
$ ^0 d0 T6 s& q, f+ v. v" o# unsupported options will not be fixed before the next major release.
, U h+ K: w; l+ }2 N }* [7 X+ ?" N+ Y% b/ I/ {& i$ j7 ]) y- l. \
# ['y', 'n']$ x/ Y' j1 \% I8 e& A$ H
# N8 t3 s' x& mCONFIG_UNSUPPORTED=n
5 l, B: v4 b# }6 p9 j8 T0 V: ?$ z9 p5 d k k i6 h0 j
* ~& U0 @; _+ {5 ]! k9 j0 U' c. c; x7 L# d5 N1 T2 u5 s
# Specify 'y' if you want to use subnet addresses (in CIDR format); ^# |; ~9 E: m# @5 b
, O# R: {$ G7 y: o6 y# instead of interface names in following options:, j& W3 \9 b: t5 K" ^6 J9 ~
" p5 p& m, I3 Q( p z
# CONFIG_NOVA_COMPUTE_PRIVIF, CONFIG_NOVA_NETWORK_PRIVIF,
7 x+ b3 f" g- N C0 x* J9 W: x( w* }
G7 j2 v0 k4 c S# CONFIG_NOVA_NETWORK_PUBIF, CONFIG_NEUTRON_OVS_BRIDGE_IFACES,
) X2 U- Y( W/ ^5 p% `9 i" s+ u! j: K$ G2 t9 G; V/ Q9 `& a
# CONFIG_NEUTRON_LB_INTERFACE_MAPPINGS, CONFIG_NEUTRON_OVS_TUNNEL_IF.
) o& N' a, S2 w/ U) m) t
; f, M& ~* L& g2 x: h+ q! ]7 b$ R# This is useful for cases when interface names are not same on all b1 x' J1 N: k
# ?( f+ ?6 f- a4 c8 A q' H# installation hosts.5 d ? G+ R k$ X1 Z* p% G% ~
% b3 W" |6 y" i- Y7 DCONFIG_USE_SUBNETS=n
% G( Q4 x& _3 k" G$ T) F
M. z6 I# z+ m, }& [9 {5 d7 `* p, A5 A2 |& Q! L5 C
0 b6 s' l5 o+ h i: w7 S5 e- p# IP address of the VMware vCenter server., x6 H {, z- Y) m! l" M% f5 C
2 o/ t! R% A! L
CONFIG_VCENTER_HOST=
- {! R1 O6 ~+ t3 w }3 ^; y+ c3 E- u& s' v& k
: q3 Q0 d# @# Q/ q Y
4 Y( w* g5 s. b! ?/ G' i/ l$ O
# User name for VMware vCenter server authentication., ^/ X: Z7 E4 l% Z% q d8 c
7 g# X1 o% N( Y. w h0 |
CONFIG_VCENTER_USER=
. N$ w% |* T$ U" B* }6 C9 g# T& }/ _& E' r! @6 r& ^6 j# i
+ P/ [9 K5 H- v% Z1 h, I
# {8 z7 }( {% l- ~0 {. b4 x# Password for VMware vCenter server authentication.
" O+ B4 t3 t4 ], B
L' t- h1 m% U6 h+ P0 B9 {" |$ B4 gCONFIG_VCENTER_PASSWORD=
/ Y" f9 y( x& {; Y) `' O4 s0 J
2 R+ |6 D; E$ o$ b8 g* l8 m
( x4 T( K( u/ l( G1 ?" d" A; R3 N$ g' N6 L7 ], ]8 ~+ F
# Comma separated list of names of the VMware vCenter clusters. Note:3 t9 H' T }: _& T2 \8 ^
3 B% M' L2 W, z& T& d
# if multiple clusters are specified each one is mapped to one2 I& J$ a1 c0 M6 r
" q+ r, T0 q; J
# compute, otherwise all computes are mapped to same cluster.1 c* j5 Q* u9 L' H% Y
( T O5 l; h7 m8 ?6 m) i
CONFIG_VCENTER_CLUSTER_NAMES=- O' z- r ~1 G! T( {
4 _; o8 \1 I; q9 h0 D3 R! w4 m+ \0 B. z5 g
; ^# y; }; R( [# m5 y7 Q# (Unsupported!) Server on which to install OpenStack services
' `4 m- l3 y3 ?- Q: C8 R! _% q7 m3 K# W
# specific to storage servers such as Image or Block Storage services.
f5 w, l4 Z/ C: B J& N O3 U
- W3 a1 E7 |' f/ u- ICONFIG_STORAGE_HOST=10.0.2.157 ~: o- S3 v6 V% i2 |
, `3 a5 {: T7 Z# d3 ^ L+ y
. \: a& v8 y# s- \( W6 O2 Y4 j0 _/ m8 @1 |" ~7 C8 [
# (Unsupported!) Server on which to install OpenStack services. A6 F! w# D; q; I$ `
5 m# H8 J/ l5 v {# x- I& p# specific to OpenStack Data Processing (sahara).
6 `' G3 v0 ?' E: Y* T" u3 \3 R$ H s5 G) K# d" _4 ~' |
CONFIG_SAHARA_HOST=10.0.2.15
7 k1 w, ~) k1 {; e7 E4 e0 D! [
8 C# `$ ` u p$ D, w% I$ q7 D8 {5 A3 G7 M
# Specify 'y' to enable the EPEL repository (Extra Packages for
" f8 D7 `$ u& ]8 b, k! f( `4 {3 [( d! R
# Enterprise Linux). ['y', 'n']
7 T% q* g. t6 X+ j/ h) }" R% {
; B. u% `/ n) a' _% |CONFIG_USE_EPEL=n: {6 r/ _* J/ f& U7 Y- |
+ J8 W: w" I( P/ K! f+ \
4 D) y% o0 q! D7 ~+ E7 b7 c
# ^0 h+ w+ _' n& ]4 U% g; n: G# Comma-separated list of URLs for any additional yum repositories,
! H1 e0 W8 E8 L" ]& @6 p! g9 Y( F! z& Q9 F
# to use for installation.# x9 L7 r. l$ E+ }
6 n2 r" w5 p6 I0 I$ j6 ]2 _! T' `; WCONFIG_REPO=+ K" G) w3 |! c2 \
) f' A% Y6 g. h3 D& D c5 [4 F
8 x; M" D7 _9 ~; u5 R: O r& f' X- v! _/ ]" N
# Specify 'y' to enable the RDO testing repository. ['y', 'n']* Q) w# u2 c2 r8 N; [9 e
2 ?/ ]$ Y* B* O) \
CONFIG_ENABLE_RDO_TESTING=n. [, ^( D+ O3 ^0 w7 Y, ]" Z
; s" s+ E/ h; w% O; v/ u+ f& L! t
' M9 k6 G; f5 s6 Q9 X- ]5 ^/ C5 L+ c; g7 y) v9 L! ?
# To subscribe each server with Red Hat Subscription Manager, include
* Y1 f$ b) I) z) g" V H% V- i. A0 M3 U; K1 N0 c
# this with CONFIG_RH_PW.
" n( i( e$ {$ [$ b* S" {6 o/ M7 b; t. ~" F5 m g
CONFIG_RH_USER=
) V1 K8 C* O% x& `- R2 _. ?' K0 Z6 d* L: W5 L8 b! R/ j
% ~" R7 k6 q- E! v4 ?2 K
! A+ _$ J8 [7 o' M; _( P
# To subscribe each server to receive updates from a Satellite7 O2 _2 R0 w- T9 T
( x0 M, x' l8 Q
# server, provide the URL of the Satellite server. You must also
; V4 l/ }3 Y" D! F9 d
+ V/ R9 \! X3 M# provide a user name (CONFIG_SATELLITE_USERNAME) and password
h+ p. N! O% D6 N# @: ?
8 v J2 ?; p) P. S# (CONFIG_SATELLITE_PASSWORD) or an access key (CONFIG_SATELLITE_AKEY)) v7 D U4 L8 q! l3 W! I( P7 y
" {% k1 O$ z! Q3 `$ p
# for authentication.
2 j- a% R2 l, w3 P' P; \7 Y# u! s8 I
CONFIG_SATELLITE_URL=1 H# z1 t3 w/ ^- y
4 c6 |4 y; q& G0 H- ^% ?! f6 Z3 W) d2 w* r! R1 P( R0 t/ K; i
$ x) ^- ~6 c/ h5 G) G* e* Z! }' @! S
# Specify a Satellite 6 Server to register to. If not specified,
( z% l: k X4 }: A3 `
3 H1 e3 T& i$ x# Packstack will register the system to the Red Hat server. When this
5 h4 G9 X$ I& ~
3 A1 l2 d. V9 o$ g* R; [6 T+ C# option is specified, you also need to set the Satellite 6
- f# b. e- R1 ]; b/ B
1 u2 l* S+ w& L! e# organization (CONFIG_RH_SAT6_ORG) and an activation key$ Y1 Q& n! F% l' _9 d# e7 g6 V
& z6 a- S1 V \" c+ H9 W) O# (CONFIG_RH_SAT6_KEY).
* Y) [7 i0 G5 j6 e5 J+ ?
2 ]. Z& N* l. C5 o+ `, gCONFIG_RH_SAT6_SERVER=
: V- Q% v; [5 k! ?3 _$ B6 @" o) T' f& i2 b4 I1 p* V2 J' I$ }
; U! h* Z. F6 J2 D( Q3 J! H
. Y5 B: g) x7 Q5 a7 g+ S! n# To subscribe each server with Red Hat Subscription Manager, include
& Z! s: m; e- j9 w) Z" r6 t
; M8 Z$ y% P+ Z0 j: U) r4 i# this with CONFIG_RH_USER.! l$ F2 e; l# `7 n1 |7 d0 h+ [
5 D& V, f# z& F' h; S9 g1 e6 b
CONFIG_RH_PW=
3 X. E& E1 N' X$ M5 v5 @
) s/ B* Y5 M9 B2 ^3 v, [2 G2 }+ k" t/ S; v7 j
3 {' h! h# D I Z
# Specify 'y' to enable RHEL optional repositories. ['y', 'n']- q. L" |% u) v3 K$ S
0 ^4 p* B4 P/ Q2 a/ B) JCONFIG_RH_OPTIONAL=y
8 N% k+ G% A" n! S: e; e- W1 h. b, y/ [7 b: ]9 V1 e4 M: C$ j
* f) |; p8 ?0 |& ]
3 I1 @5 q/ ^% [& d& p( Q' i* [# HTTP proxy to use with Red Hat Subscription Manager.
. H/ e7 H3 o$ }8 H( y
f/ Q% J9 Z& k, u" D5 OCONFIG_RH_PROXY=' p- m2 s( i: f5 {2 b; U. s
* Y) e1 R; R8 }2 U) \: z: P
; D& N# W5 i% Q. [/ V4 e% y5 X% {0 q6 P% [: i+ |! ?
# Specify a Satellite 6 Server organization to use when registering' `& \- e0 J3 y4 S$ |/ w
6 k+ `9 {9 {& c3 E' h
# the system.
9 c1 G. q9 A- ]! v6 f/ V' o7 O8 f, U
CONFIG_RH_SAT6_ORG=$ k* \7 L+ r' H3 c! ~
: `/ I% w( Q& F
8 N0 s/ Y2 I0 a; k, v* R. w D+ ^7 w0 [7 ^# t Y
# Specify a Satellite 6 Server activation key to use when registering6 c4 Q g, U7 h' r0 l* @0 D
- i }% k& g; t% Y& r8 s7 T6 j# the system.
" Q- b2 G" H$ `: }- \
; N. x* n* z: F7 mCONFIG_RH_SAT6_KEY=- f! l; e# ]0 ^( x
& w+ ^" _% \9 g$ {$ I8 M6 R6 F
( {; v* \5 w6 S
( y# L; `/ E7 v5 K# d3 D# Port to use for Red Hat Subscription Manager's HTTP proxy.2 Q& o; k1 R5 k" O
: J+ I8 N+ |! j- y4 v
CONFIG_RH_PROXY_PORT=
; G, ^5 x9 I0 d8 G, i! f6 ^8 \% N0 f3 g) `) U
% M6 @$ Z- x) d4 A* Q9 I4 f
9 z- p$ i5 Z9 C6 `
# User name to use for Red Hat Subscription Manager's HTTP proxy.! Q. c5 C, T, f8 V
1 [, |0 I$ e+ c8 l
CONFIG_RH_PROXY_USER=8 j( a, y7 M) g' ~: N
9 O* d# m0 m; C+ E" N9 {5 x# H
- R* u' [% o# s- d9 t# Password to use for Red Hat Subscription Manager's HTTP proxy.- D4 R. a% s% E0 g$ e
& R: p* p1 u% O
CONFIG_RH_PROXY_PW=
8 T8 V! X% T) s) C
; Z% O! B$ w9 a2 m. V: T% M
% ^6 `# V- E# x
6 C9 u& P8 Z9 C; V# User name to authenticate with the RHN Satellite server; if you1 q& z( k* s" ]- ]- h* A
" C6 q# I3 W9 P9 J0 T# intend to use an access key for Satellite authentication, leave this
8 X1 u- C! r" d4 d `1 Q8 W3 o6 _. I0 j
# blank.8 I' K) L. i/ W+ F: G
4 b5 j8 Q0 \% E& H- D$ Z
CONFIG_SATELLITE_USER=
$ p6 S# n' O, Q, g' l* j7 s: v2 B( P
' M% p' v1 b2 K+ M
5 W. K) Z, q6 F8 v# Password to authenticate with the RHN Satellite server; if you9 g7 f' d: v; d9 x
- W; V! |+ g# k, x! h
# intend to use an access key for Satellite authentication, leave this
$ {# l! D' ~+ v5 u: a* N/ |/ @1 j/ u+ C! Z
# blank.( Z. W. q4 {! J3 s/ `0 ]: n# |7 N* Y
- Z6 @- s% y" z9 @! [" x
CONFIG_SATELLITE_PW=2 L, `/ w. E' ~# U# d) \8 Z
9 u. \6 l' ?& s4 g3 e5 L& ]1 w- S& Q+ `! W2 n& z
7 \4 \9 g) k4 k6 _. X/ Y+ p5 `( _# Access key for the Satellite server; if you intend to use a user' \& j5 E, V# b% b; [1 ~
6 a7 m$ M" I5 W2 N6 ^8 C+ @ o# name and password for Satellite authentication, leave this blank.8 y8 J% N* l! T: F2 m. e5 |1 R
% n7 u. P& h0 {0 u. C; ?+ k0 p
CONFIG_SATELLITE_AKEY=
* ^% d1 h/ h3 Q2 K J( r- m# v
2 {1 Z! i; o+ ]/ k3 Q& Z( X
' A+ z8 O% B6 ~1 U4 {2 |9 v# ?! |; U |. G# F0 {
# Certificate path or URL of the certificate authority to verify that
, o: C( u5 o+ u b0 |* G6 B4 }0 q8 A4 Q8 |
# the connection with the Satellite server is secure. If you are not
; Z: h& W- \1 d2 k+ k
" m, K+ p% s; Y/ i+ l# using Satellite in your deployment, leave this blank.. F( |. t% v7 q3 r0 I& _* a \9 @& h
( g7 n- j1 r& R3 \/ A+ JCONFIG_SATELLITE_CACERT=' b2 v4 ]+ V0 u& \' X3 C
8 k! l% Q- V" L7 U4 K4 x2 |! p- ]0 ~% x* @; h
2 d" y0 }4 O2 x- b( p$ B: W
# Profile name that should be used as an identifier for the system in
$ @- z8 H( M. G# U( n
% U' m7 X* |5 W( O# Q! G# RHN Satellite (if required).
- K7 d; }2 F. V$ ]( v b% H" S& O; Z; r1 P: g; Z0 o- Q
CONFIG_SATELLITE_PROFILE=
' ^0 W8 p3 ~/ |. k
; e! Y" s3 j: S h- W. V6 C: M# r( K
: x- Y- _) l+ {/ J2 R9 R# k$ `: i1 v: T( Q
# Comma-separated list of flags passed to the rhnreg_ks command.
7 ^0 r$ \) I4 ~) q$ p, Y, a; @# k; {$ }/ _1 d2 Y: M& \# X; V
# Valid flags are: novirtinfo, norhnsd, nopackages ['novirtinfo',# t5 ^( N/ I4 n" U
_' t/ R0 d# C4 ~3 ^# 'norhnsd', 'nopackages']
' i% u0 v; n3 I. q( e
' f% K: @. f$ p" PCONFIG_SATELLITE_FLAGS=6 W. e L( K: ?2 c3 c9 {( @" {# h
w2 Q' |# E" Q" s6 U! U1 o! P7 U# }
, ?5 @& ~3 X' O9 Q
# [5 e0 D) t7 I- Y6 m3 Z% O& d" t: R
# HTTP proxy to use when connecting to the RHN Satellite server (if
6 H6 E6 t4 C" O& y; [9 {
5 u- L7 q2 Q# b3 y7 D# O! T+ k# required).- s$ r* _, z( Q- {
! p$ T) Q& z6 {$ |# n: yCONFIG_SATELLITE_PROXY=7 }3 w4 }1 Z* {& P [ \1 F
u+ q' w( V) d, [
; B7 U' ~; i+ y, Z/ Z5 E5 v" r+ l
8 L) ^+ m$ @0 ?) y& z$ R/ L, h+ B2 l
# User name to authenticate with the Satellite-server HTTP proxy.
" o( U) p+ ]/ A* t( i: l
3 y1 y# b( [, [% ~. PCONFIG_SATELLITE_PROXY_USER=
; f5 x8 D: {8 S3 u! d4 L
8 ?! ~( n+ Q5 q! o$ ?' i$ @: I% T* a
8 H7 u7 C; W2 x5 n j9 Z- @
# User password to authenticate with the Satellite-server HTTP proxy.2 c! G; c/ n1 g5 {! Z+ {
; Y+ ~# Y" a% O9 F5 x" FCONFIG_SATELLITE_PROXY_PW=
, P! L: |+ T+ c0 j5 G' H; N q3 Z! w1 s
% O9 o3 X+ L I. {" E
% d2 I& W7 N/ L: ^3 Y, D7 u# Specify filepath for CA cert file. If CONFIG_SSL_CACERT_SELFSIGN is- k# o$ p. o8 }5 Y. o8 V
9 v1 |5 ?1 u$ g7 }6 S# y) F# set to 'n' it has to be preexisting file.3 N( e: A: d% R- H ~( O
& W! H* @) F5 x5 L+ b. ACONFIG_SSL_CACERT_FILE=/etc/pki/tls/certs/selfcert.crt) [) a$ ~% F# q# Q) f
) V( Q7 r$ \9 @" l5 ]6 T
1 v' O1 u. R8 K
" _% r4 M& X7 B9 x& B3 T3 S) X" l# Specify filepath for CA cert key file. If7 v ?0 R3 d) ~6 T+ a2 i( K
5 v8 g+ z+ ]: g
# CONFIG_SSL_CACERT_SELFSIGN is set to 'n' it has to be preexisting
$ w) \% t- G9 ~* {( i" Q x! k9 Q4 z8 O7 U$ h+ G6 ]! H
# file.: H$ G4 y1 H6 A) u/ X
3 I% j, ?* Y0 [5 w) \* B
CONFIG_SSL_CACERT_KEY_FILE=/etc/pki/tls/private/selfkey.key1 {3 u6 B) v6 s! O' ]/ o( q
) `% J1 m# L! W6 q# q
: G2 w9 e" Y/ D9 S; K/ {4 A6 F3 t5 e- z
# Enter the path to use to store generated SSL certificates in.5 X% y# F1 V- H; [8 \
+ s: V4 o" L; g+ z( ^
CONFIG_SSL_CERT_DIR=~/packstackca/
( U h& e* h" ~# a' i+ A
$ b' A; h$ M/ u' v! B
* P7 ` h# [: C& j0 E
* x, G2 L; Y& k3 d# Specify 'y' if you want Packstack to pregenerate the CA
( C+ ~3 V! Y" l, m0 g) C4 }& K
& y5 L! ? C6 |5 H/ x& h6 m! a# Certificate. b# S# n7 ? c
3 x: e0 |. L( x x5 E
CONFIG_SSL_CACERT_SELFSIGN=y9 L- @" `, L* W, ~; s) Y
) I; b5 i' q8 ]* v; c
! R, i7 j- Z- ^ [ t# e
! [0 Y# F' w) `% v# Enter the selfsigned CAcert subject country. P) c7 r4 _! h6 \' z8 y, H+ q
- N" Q2 z l! K
CONFIG_SELFSIGN_CACERT_SUBJECT_C=--$ J0 b6 d7 k& t/ O
4 O7 y9 N) t/ B+ Y
i8 {/ I! T* C* g# X* u; }7 v4 s" w! g/ d) W d
# Enter the selfsigned CAcert subject state. P5 g. T( d7 H4 f! Z$ T( K) h
6 k; a2 \1 Y$ I. ~; D
CONFIG_SELFSIGN_CACERT_SUBJECT_ST=State+ ] W1 W' J9 d x9 S8 r3 O# h
+ _3 N; g% R5 d; `6 J( z' u1 ]4 y, f, M& [3 ?
" T4 \! V6 s i: `0 H. r4 G1 ~# Enter the selfsigned CAcert subject location.7 N) B5 k [3 Q& g) m
7 K* i# z. ~$ O: N) A
CONFIG_SELFSIGN_CACERT_SUBJECT_L=City
4 O+ v, E. j4 L, C7 F) Q0 U3 _/ b j H' k; l, I/ |
) [8 s7 E( }2 q) s9 I1 y/ o- F7 t$ p) L; i& ]! P
# Enter the selfsigned CAcert subject organization." L) h w/ N8 [* V; e% }
5 q6 {! [, M: A0 t( O2 oCONFIG_SELFSIGN_CACERT_SUBJECT_O=openstack
7 R; V( K1 e8 ^, O7 ^. _8 z [* ^8 c- ~: Y6 h" i# T D
. E9 j$ Q0 R5 R* k; I1 o) I2 m
7 {. X8 S2 u1 h6 [$ A# Enter the selfsigned CAcert subject organizational unit.
0 V# \ t1 W. h2 M
1 }7 e- Z; T& r6 xCONFIG_SELFSIGN_CACERT_SUBJECT_OU=packstack1 w: g) K5 C" L+ M- P
8 n3 O7 Y# K# N$ W* c4 _. e
0 B* O9 ` ] O; v" d. {
/ P$ ]' @0 h2 s" O# Enter the selfsigned CAcert subject common name.
$ ? D- T, ~& N; p* D1 D: r. \" i5 v" v; X$ P% b0 C
CONFIG_SELFSIGN_CACERT_SUBJECT_CN=packstack1 W5 {: q' D) a: C) J7 s
% H0 C6 t" U0 ~9 A' k4 |3 V: P0 }. Y7 h+ B* J( \7 ]/ C5 r
; R& e+ b, Z% B- f) Z
CONFIG_SELFSIGN_CACERT_SUBJECT_MAIL=admin@packstack. O& f) b9 z; J
+ u; N/ n# G! I7 A4 S" q! R! w6 B) F6 }- B# X1 p# h u
' T: P# x' |. v' |' D' Q% |
# Service to be used as the AMQP broker. Allowed values are: rabbitmq
& t7 h, g& d! k+ h6 i
# Z1 P( l" k9 d5 k# ['rabbitmq']) O8 z3 z3 p; e$ M- b! H
2 H6 T L/ \8 {3 e0 e$ H3 k
CONFIG_AMQP_BACKEND=rabbitmq8 E" V- `# c& @" J g/ v
6 @& A$ s, \5 s5 b- a& @# f7 |9 _& j: N2 e- L2 @
g! J+ t9 L+ q* b: F7 Z; [4 x: J# IP address of the server on which to install the AMQP service.
4 q4 L Q* z% H3 Q5 G) B% B3 r: g. Z1 P. Z: |& A: ~5 l ?8 \' k7 U
CONFIG_AMQP_HOST=10.0.2.151 J/ ^5 ]8 m- b( W) B- b
* l6 N9 Y1 u- l7 F, m4 N& W3 D
& e( r/ `6 P% `: a2 J" l* h
3 Z3 u& `# C, }% _8 ~) t# Specify 'y' to enable SSL for the AMQP service. ['y', 'n']; L# U# X' J3 T+ s0 H2 s7 p! }
9 i( P1 b' C: W( V9 LCONFIG_AMQP_ENABLE_SSL=n, G0 g6 @- B3 v: g
6 h9 w) w' t$ q4 h" G1 p; Y( ]) C1 h% q( W8 T
' s- b/ b8 Q& g( Z2 P
# Specify 'y' to enable authentication for the AMQP service. ['y',! {! f$ P% g* r) v( K5 [3 @3 M
8 f5 [2 {7 n2 [; k. D- S# 'n'], b8 Q7 X9 M. X/ U% {$ i" K; k
0 t: E' k5 C' n w, u$ X
CONFIG_AMQP_ENABLE_AUTH=n% k' U0 Y" t7 c9 L( E' u
. U' `% t d- }2 B, ^9 F1 }
; Y0 X1 J: y4 R' z/ G6 x9 A# n) C4 s7 I% F" y
# Password for the NSS certificate database of the AMQP service.
2 P& C7 J/ h( f6 ]# y( h# O; \2 @/ x* K9 j$ z; f; p
CONFIG_AMQP_NSS_CERTDB_PW=PW_PLACEHOLDER4 P% x6 s* `- f8 u
& ], k: p& F- L1 o5 _
3 i% ~6 C7 d! l; F t2 y
: Q! q* _ p9 k2 _' P# User for AMQP authentication.( b8 i0 s, T% {. n& O( c
. F( N* _8 S7 }+ h' s( |
CONFIG_AMQP_AUTH_USER=amqp_user
+ b* l& B2 v1 D6 R
9 {7 U- w$ W: S3 \' A" j
$ z0 l) b- F/ h# X4 O0 Q
4 p- O7 U" w2 w# Password for AMQP authentication./ o$ t1 o4 x# B5 A
7 K- n/ V# Q& u8 a, T+ T8 y
CONFIG_AMQP_AUTH_PASSWORD=PW_PLACEHOLDER* T# ~9 h. F5 F, x
% `4 Q- H' A3 c+ |8 d' q6 ^- P! }2 r
; V5 H; O n$ }) [6 G! j
# IP address of the server on which to install MariaDB. If a MariaDB. V! ~' w' D2 i8 v
& E" |! b7 i6 _' m( _2 E
# installation was not specified in CONFIG_MARIADB_INSTALL, specify1 V. A- l& w3 t) n
2 @+ o* U8 u! B# z/ Z# the IP address of an existing database server (a MariaDB cluster can
% w3 B' A6 w4 G2 X! K: d9 r0 H& @
) O& X4 V" m; y4 K. ^# also be specified).+ w8 R' V2 T# l( V/ Y
' W I, b- ^( l7 sCONFIG_MARIADB_HOST=10.0.2.15) [: H0 ?* a9 r5 n
" i' G) P! k- N h( o. Q: U! R3 i6 N, ]+ y1 A( m/ b7 c6 G( t
+ M2 J# k6 a8 K- N
# User name for the MariaDB administrative user.. e% V: a2 Q- p3 H+ n: X, X9 \
7 R1 H( c( @, M, R9 Q$ `CONFIG_MARIADB_USER=root
* r& G/ M6 s+ _6 c9 t- i' |/ u0 G" u. C' k# u: {: B0 s! ^
) @- e2 i3 |) N& g7 q
0 y+ B0 C6 Z3 F- s
# Password for the MariaDB administrative user.
% H1 A, v: A6 n
+ J H* }2 ]& @, r% jCONFIG_MARIADB_PW=67910d76942f46168 _0 s1 |/ R. V! |
4 L* E, D- k8 Q p0 P$ p
* i2 R) ~# N0 {; K7 J
' _) @9 s% r6 z' f& ^# Password to use for the Identity service (keystone) to access the1 F L7 R, f" V0 [2 K
) Q& n0 P( E% n" K
# database.
p; Y2 k- o, v* L6 l/ F, B
% ^6 D" P2 @/ s U( C+ V: zCONFIG_KEYSTONE_DB_PW=0f7395897231422d
9 M* l) q' M- u* u& n+ t$ |. |. T+ g) F+ f3 {' W, F5 o
$ v& y. d# n$ U8 x! a
; K! c2 W( l( L+ C- c2 c
# Enter y if cron job for removing soft deleted DB rows should be8 K% y2 K2 m( {+ q
g! j0 O; g- V7 f' U1 n3 L# created.$ U7 P! H) X( Q6 S, S8 O
, n/ ]6 ]; Z/ u q. p6 l: E
CONFIG_KEYSTONE_DB_PURGE_ENABLE=True& I$ x" h1 ]" Y4 _- v6 ?( u
. R; j8 x: e8 L5 Q* e8 |
2 V3 h# ^% ?# S/ [" E3 Y: V1 g) q4 y2 |3 u/ e+ Y6 ^
# Default region name to use when creating tenants in the Identity
2 z) L+ q& P0 U2 {- ?# P
( c5 U( Q! L* [8 G# service.
& ^5 x) ~$ I2 W/ T+ N) v9 I: d
- j3 J5 K2 C/ lCONFIG_KEYSTONE_REGION=RegionOne
" Z. K" U' p9 ^0 E7 s' A4 t m9 C# x+ M$ \# Y) f. g& w
+ `- M7 E& D5 y9 P
+ K+ `4 w" l3 Y1 H; ]' u# Token to use for the Identity service API.
4 P% d5 p/ y1 m
" f1 S2 R% o. n" ~6 _6 J5 S: A9 ~9 QCONFIG_KEYSTONE_ADMIN_TOKEN=abb21145a01448e288e25bfac854d7aa6 t) k# [* u3 Y- C$ ~
4 ~6 N' k# \0 q% j6 _: W L$ y) E/ n* c9 W# n/ K
* Z5 {+ S7 V$ K W/ U# Email address for the Identity service 'admin' user. Defaults to- c0 a$ Y( Y! Q& D; R! v& ~
: O {, d D% iCONFIG_KEYSTONE_ADMIN_EMAIL=root@localhost' I" {4 g1 ~" R, I! t& r8 J
p( R. x2 C8 ~7 q5 H4 S
3 t2 o2 U0 c4 R4 s3 r
6 [/ S3 i' G& k0 @# User name for the Identity service 'admin' user. Defaults to) U0 e. M% E9 g8 u0 X8 R- B
3 `: `% C7 J8 s2 f# @
# 'admin'.1 i% C" j8 m/ G1 r
1 T; G6 [+ H( r# {, ^: U, U4 |
CONFIG_KEYSTONE_ADMIN_USERNAME=admin+ q& f, g6 b+ d# @2 c8 L/ G V: ^
, a1 W3 N; ]' I
& i, S* M, B4 p! B u( P, {9 ~1 Z' ?
# Password to use for the Identity service 'admin' user.0 o$ d- P( T: Y* A9 A" z/ i3 |
' B9 c ~9 q' Q! ]" q4 u) Y, S- XCONFIG_KEYSTONE_ADMIN_PW=admin
& q/ ?1 e" A# Q5 m% D7 X. K3 B
. T: L8 G0 n7 R. l, c) }2 b: A) B8 I& m/ T! `, F% B8 O( }
# I9 P5 z7 h1 `* g
# Password to use for the Identity service 'demo' user.4 R" q, I/ _3 k
6 f& t+ M3 ~7 j+ E1 ~- eCONFIG_KEYSTONE_DEMO_PW=demo
0 m- l, Y+ u/ z# M j& G" ~8 O& B5 _3 f0 C6 U
8 r# o/ _7 f7 O1 M. \) l+ B5 a3 A" [% t2 D: m8 @- L. \3 T
# Identity service API version string. ['v2.0', 'v3']
/ J4 W0 R1 x/ i2 W
7 ~) g4 T" n" c! |- H7 a; ZCONFIG_KEYSTONE_API_VERSION=v2.0
# F* m; r$ e B6 E0 h8 X, Q$ t
" [ E- {' J" c; L( `% V( K! w! _4 n6 x9 O& h* q& z j4 {+ ^1 ]
5 |" k" B# m, f7 T" k# Identity service token format (UUID or PKI). The recommended format
3 f! r' C5 V; R$ K
" I# e1 P9 |9 ]+ z# for new deployments is UUID. ['UUID', 'PKI']4 |* e6 G9 x$ X0 A2 p" b
( K/ j( Q: Y8 y8 V- F2 PCONFIG_KEYSTONE_TOKEN_FORMAT=UUID8 a" Z1 C4 \; D
2 G1 i6 ~. {) S3 t
1 B1 N) o9 X5 C- e7 Z, h' a8 x
' u/ ?2 \1 t! N2 Y; r# Name of service to use to run the Identity service (keystone or- l2 G# L4 ~0 U# q2 \9 ]# |
. T: [4 z6 c) ~- B
# httpd). ['keystone', 'httpd']
8 I V- W) v! D* M( ` o: d- B6 k% P! r
CONFIG_KEYSTONE_SERVICE_NAME=httpd
6 ]+ g X; u! q4 s* q: q$ v5 N4 k
8 d! F; B- e. P5 V
: t& ?; J3 U9 C$ \7 ~' X p# Type of Identity service backend (sql or ldap). ['sql', 'ldap']
9 P* ^) D# X, l; p' F5 j! R `. f4 h& @) }) m4 @; H. ^7 L
CONFIG_KEYSTONE_IDENTITY_BACKEND=sql; b. O+ |, n- z: h; y
5 `3 _$ G9 d. z- [4 C+ x
, F; C3 g n6 a! p5 w2 h* ?* e( ~& B ^4 u) Y7 s
# URL for the Identity service LDAP backend.% d% U& l8 L" ]
+ Y& c, p( q3 Y, x' |* _: \
CONFIG_KEYSTONE_LDAP_URL=ldap://10.0.2.15
0 A. v- w. v6 n6 x& d! J$ { V* d7 C3 P5 |# m5 i
: V5 q# a! d2 b' X" @' I. i1 _( B7 b" O& S9 M, J
# User DN for the Identity service LDAP backend. Used to bind to the8 \& w; m) ]0 A' P
7 [' I( y, z$ o) @/ {' h
# LDAP server if the LDAP server does not allow anonymous
}/ t) g$ e8 \; G0 ^2 c
. T; }( m* b M5 w, r# authentication.% s/ Q' ?9 @) g5 ~
3 f) ~8 ]) N7 c- q# _2 G- l
CONFIG_KEYSTONE_LDAP_USER_DN=
! w& J/ W; ~4 k/ q: k& L" t$ L: m( m3 x/ Q
7 m( s8 r+ h1 \! d. F; u) y: k
: G8 S% g8 [/ W0 w+ v% d
# User DN password for the Identity service LDAP backend.! _2 e" w# l0 V5 _
. F& i! Z% X, }2 s4 D# B" u! L {+ eCONFIG_KEYSTONE_LDAP_USER_PASSWORD=
6 R% W/ H' K3 G9 ~1 y
8 Z$ F; o6 _/ ?$ y6 I5 y9 [
, Z- ~1 V% \; z; B1 `
' E$ F. j- ?! M5 {# Base suffix for the Identity service LDAP backend.
8 K3 @2 f1 |+ r7 o$ y! u7 t
9 Y1 F; u) E/ TCONFIG_KEYSTONE_LDAP_SUFFIX=
6 j5 w x4 t: Z# Z/ a
2 `5 z d$ o0 W) g- {, w: `
5 Y7 q$ n2 y5 a0 x6 o9 {1 `7 i u: J L3 ?7 t" u
# Query scope for the Identity service LDAP backend. Use 'one' for
9 w3 [8 m9 W3 f% J5 \4 p2 T$ k5 t6 x6 ]$ ?' p
# onelevel/singleLevel or 'sub' for subtree/wholeSubtree ('base' is0 F0 Q4 ^) P: ^8 j
% ~5 A2 ?5 p W+ X1 y! V* M# not actually used by the Identity service and is therefore
3 B, F# h' D7 f: D$ _+ Z7 Z% z1 n3 ]* B: @# ~. c
# deprecated). ['base', 'one', 'sub']
8 Q$ |) `# @8 {! u
% {5 N3 W8 N; L% q9 A( y. A4 j+ S. ? g, mCONFIG_KEYSTONE_LDAP_QUERY_SCOPE=one4 \' o* Y3 `. w+ a+ j( |+ ]
& e) ?9 s4 P7 @3 E0 W2 |1 y
% ?$ U2 p( a. {0 C7 f0 L* V2 s9 B1 j: I, a) y) R6 l( r! j
# Query page size for the Identity service LDAP backend.3 g! g# N+ B* v9 d
! W1 c* \) Y3 a* PCONFIG_KEYSTONE_LDAP_PAGE_SIZE=-1
4 D5 J. J+ A( D1 I- C
8 [# V& t9 R/ P; a+ [0 t, y
5 f% n/ g% Q8 L; r0 ]& u3 p1 [' L
7 n! w8 j0 ]) R3 V# D0 s( b# User subtree for the Identity service LDAP backend.
) k* q* r/ A' F
" M7 k1 _2 ~- ~) |$ R$ RCONFIG_KEYSTONE_LDAP_USER_SUBTREE=
/ p9 I6 J0 I* z
- w; _2 G* \, [% b% K. b+ y1 }' u
2 E3 _$ q+ }5 C4 F3 P* h& o) f9 |' f$ ` @5 n( B
# User query filter for the Identity service LDAP backend.
9 n3 f# r, F1 U6 d" t- ~( W
. s% s1 h1 Q$ {8 J8 D; f, nCONFIG_KEYSTONE_LDAP_USER_FILTER=
` s6 e' F$ p8 D' v
9 w3 V, @/ y* Y' b' f
; M5 s: R+ ^5 a* F S) [0 b6 u2 r/ g! I. |( E# [: b5 D
# User object class for the Identity service LDAP backend.
/ I3 l& @! a6 j; [: I# s$ s, O! L5 a3 z: h
CONFIG_KEYSTONE_LDAP_USER_OBJECTCLASS=5 O& t* x% j" R. K ~- W0 G; Q
) v! Z$ ~0 o- e( l9 ?+ h" X$ m2 p
; ?: K( B% b, J; d
, w" A& d) v: c# User ID attribute for the Identity service LDAP backend.
9 L0 l) k9 v8 a: C( V5 Q% D1 F* x8 U" P* L9 T
CONFIG_KEYSTONE_LDAP_USER_ID_ATTRIBUTE=
$ \# L! I8 c! r% `
3 h2 A* w% d+ e3 v7 Z- R# ?; U& s+ G1 J
$ p. }, H" j: Y. x* o* M* {# _2 l2 m: E1 y% c5 _& b% P0 V4 w
# User name attribute for the Identity service LDAP backend.
- [/ l& g& M3 X( q! @! @) U
0 O6 L' \3 P, U9 N; o* o( s7 |CONFIG_KEYSTONE_LDAP_USER_NAME_ATTRIBUTE=
3 n+ _: ], Q% t5 e& N
8 o" \5 v! n0 E
- L% r& I, x" i- Z
, D: s, n. A- t3 `& k# C# User email address attribute for the Identity service LDAP backend.& h. k) V3 \: ^+ q( V
$ ^2 a$ F# w }& c9 C
CONFIG_KEYSTONE_LDAP_USER_MAIL_ATTRIBUTE=
7 @8 i" y( N: y( K( g/ R4 \% V7 Y" |8 R, C4 w1 e% z
1 A/ y7 x R- t/ o
% V. w1 F6 H) f9 P" B* o3 ?+ j# User-enabled attribute for the Identity service LDAP backend.8 ?0 o. n- L2 m- |
" b" u: L( N" D x
CONFIG_KEYSTONE_LDAP_USER_ENABLED_ATTRIBUTE=
H; F! z+ L+ G6 ~& j- K6 q8 ^3 Q* p$ B( s( H- y
7 @/ V0 \8 ~! A9 a5 K7 C
, }8 {' O% ~! T7 {
# Bit mask integer applied to user-enabled attribute for the Identity
]) W: D8 A2 z" [0 Q
! k8 \) L6 r3 T$ Q7 i) s# service LDAP backend. Indicate the bit that the enabled value is0 I# M# v6 O3 i4 a9 I# _2 e# {, _ E
6 \, v% ?+ G" ]
# stored in if the LDAP server represents "enabled" as a bit on an
! p3 d l& G/ l& W. a
4 A* G7 d! c/ J4 S" M9 N8 w, `# integer rather than a boolean. A value of "0" indicates the mask is4 x, S' N$ A% g( \; x6 R
4 V' E; a9 K+ L+ D# _
# not used (default). If this is not set to "0", the typical value is
- P" @, }& B6 P. ]0 o- t
9 J4 D" e& E! E. {2 ?" X) N# "2", typically used when
# e) {) c/ f# I" M) G% w" {
, Q h, l' Y2 A. z8 X# "CONFIG_KEYSTONE_LDAP_USER_ENABLED_ATTRIBUTE = userAccountControl".. g* @; w' M, a9 P' x) ^
/ {/ A4 d: \8 j7 K5 u
CONFIG_KEYSTONE_LDAP_USER_ENABLED_MASK=-1
7 f; i$ N5 a/ ?: C% }+ e: z5 M+ M* Y9 z& F/ P( ]2 d$ {# n
! T( a1 @" ?/ I, G8 A( j4 D) h0 ~+ L' U' v# j9 o j* [
# Value of enabled attribute which indicates user is enabled for the
; W1 p+ E' c' E6 C
: W& g0 K/ ?& u% {) S) @# Identity service LDAP backend. This should match an appropriate
1 B6 D/ U3 O* l+ ~& t
; T+ D& B! V& P: [, e8 C# integer value if the LDAP server uses non-boolean (bitmask) values8 h* x% D% |& h9 p9 f
F, F5 c) \; A; X8 d, q& `- a
# to indicate whether a user is enabled or disabled. If this is not7 s! U! o( s, O' p. R
7 ~0 I1 E+ V. ?4 U) J
# set as 'y', the typical value is "512". This is typically used when: Z" [. w9 d1 ~7 I
% ]7 M* I4 G; e, A4 Q0 Y$ `; m4 O) C+ h
# "CONFIG_KEYSTONE_LDAP_USER_ENABLED_ATTRIBUTE = userAccountControl".
) Z6 y% U' ~% q! O7 y5 E, N# C4 F$ p
& r6 u0 _6 [' E( v* MCONFIG_KEYSTONE_LDAP_USER_ENABLED_DEFAULT=TRUE
- C" _- p4 z& v8 Y# c8 y8 V$ o3 E1 o! W# D% `; D/ n
3 i' ^/ N3 W1 u1 F& }, P; g( e, B$ `; u6 O4 L/ n
# Specify 'y' if users are disabled (not enabled) in the Identity9 e0 V- p- h) D/ x( ]
( g. V3 T! X# m! k: K1 W: Y
# service LDAP backend (inverts boolean-enalbed values). Some LDAP; l. W/ T6 ^" b' J
% S1 Q8 x: ~ N3 m3 k0 t
# servers use a boolean lock attribute where "y" means an account is
9 M4 N# L( G+ c- v- J! N! H' i1 ]; z& U. H
# disabled. Setting this to 'y' allows these lock attributes to be7 S0 `/ u8 E. Y5 l
9 V5 k `- t- W! F6 k# used. This setting will have no effect if- n& f3 x: w. V0 E1 Q& A9 o0 ^6 V
+ P, b' s% w9 S! y
# "CONFIG_KEYSTONE_LDAP_USER_ENABLED_MASK" is in use. ['n', 'y']
, V8 m" Q. A$ `% N7 z! z1 {" ~, R- E' [5 K
CONFIG_KEYSTONE_LDAP_USER_ENABLED_INVERT=n1 |$ {- f2 L8 O8 B
4 q8 v- I4 N, n$ R
4 j$ |6 D) E, }4 i! `/ V+ g' W
1 S. S9 F# P6 o9 u3 ~+ M+ p. S
# Comma-separated list of attributes stripped from LDAP user entry
9 I# `4 p( W! e9 V {& x0 g# m+ F/ i+ G* ]# m! z
# upon update.2 W" H4 c) T& {8 n3 [
' _* Q5 d V, G% V3 n0 n& l
CONFIG_KEYSTONE_LDAP_USER_ATTRIBUTE_IGNORE=
/ o ?6 }0 p9 }# [& o- x2 B" g% c& |2 G# N2 R
( |0 o* V7 I1 I2 k- ?2 `" E, d0 U2 w
2 ]0 I0 R; B: a# Identity service LDAP attribute mapped to default_project_id for0 X! ~2 _4 \& D4 I1 u/ p% g
) N: Q; ?: f6 h5 f; H# users.
0 y+ J( E( d: J/ \) |$ s
! A2 O1 T; x* d7 e; V' ~6 f+ bCONFIG_KEYSTONE_LDAP_USER_DEFAULT_PROJECT_ID_ATTRIBUTE=
! c# ^; `5 M# R+ R6 b6 H" r
8 g! p8 O: `# S3 G4 I- }
$ d. g+ D2 J6 k) m) T5 a5 x6 j0 F) x" T
# Specify 'y' if you want to be able to create Identity service users$ ^, k/ D/ t$ T# z
+ n5 O. v- Q4 v# through the Identity service interface; specify 'n' if you will
4 d# g% q# @! \. O B1 Q" q0 d. |' i* l# I W9 X
# create directly in the LDAP backend. ['n', 'y']: \) R9 t+ t0 Y) w. I# V; n
H5 ]: u% j0 x. W! p9 D: ECONFIG_KEYSTONE_LDAP_USER_ALLOW_CREATE=n4 j+ X, ?' R* B
4 K7 I; \# } c, I6 ^
7 i8 ~! S. b: n% ?- _7 J6 a) c+ e7 f9 ~) `' j
# Specify 'y' if you want to be able to update Identity service users
+ ~/ o' ^6 I Q% ~, Q8 ~4 n
# V9 G D0 w# }$ \# through the Identity service interface; specify 'n' if you will. S6 l& B3 z4 V. K3 s& O; u
3 w& y* U* j9 [, o* P, h7 [3 R
# update directly in the LDAP backend. ['n', 'y']
6 R5 a" r' o- L7 W6 H. O- `- o! G2 V1 k: N2 z% q
CONFIG_KEYSTONE_LDAP_USER_ALLOW_UPDATE=n
" V1 i& O$ d# V* ^: w, [& z; |5 s# x) Z: U/ K
- z9 K8 h0 u: A7 q
N' \5 o3 G, V, O3 V$ ~3 p- J# U# Specify 'y' if you want to be able to delete Identity service users
! Y6 \% [, B* q6 h, ?! K
& O, l" ~7 |6 c6 J' t8 A" w0 N# c* k- b# through the Identity service interface; specify 'n' if you will$ \& V) T5 O+ j( n6 t
6 n- r1 o" N7 E1 M
# delete directly in the LDAP backend. ['n', 'y']& }1 h3 J; C$ g' Q* a8 W1 S2 P
9 U a0 Q7 o% E- [" W! J; iCONFIG_KEYSTONE_LDAP_USER_ALLOW_DELETE=n* v8 V& P% B3 p) q
/ [0 X9 E ~, x% P6 D
+ t7 O2 r4 }$ M0 p+ Y: }
- T7 ~( |9 e) ~5 D- ~/ N
# Identity service LDAP attribute mapped to password. j5 E$ q: T' e7 `" ^6 |
. F) R8 V4 ] ]" wCONFIG_KEYSTONE_LDAP_USER_PASS_ATTRIBUTE=
+ z& @ Q! N0 {( k2 o2 b6 g. q: s
6 t( \' J' s, w- f4 a5 b. ]# |7 f4 R. l/ j% x
) L" {. s0 }/ f
# DN of the group entry to hold enabled LDAP users when using enabled
. D \ D5 K+ c2 ^: A5 _, z( l$ I$ m2 O! [$ m' `
# emulation.
. ^, P$ u5 E7 D3 w- J, {
, ^# c6 e2 K0 n! {% [% cCONFIG_KEYSTONE_LDAP_USER_ENABLED_EMULATION_DN=
" f( `8 L! o5 k8 H @ N' A( J
% U, n3 f6 y s# l1 u, x: J C2 \- J' K7 _! m; A* K8 x8 U$ X2 ?
/ a# d! n5 q* @4 f+ X
# List of additional LDAP attributes for mapping additional attribute
! h D, `" v6 ^/ q( Y( z9 b ^4 O7 d
9 ^% `( k( {9 K% I2 F) Y% o+ a# mappings for users. The attribute-mapping format is) g( t1 s# N9 m# I# x7 H
* f# B& C9 d7 R* ?* i3 G# <ldap_attr>:<user_attr>, where ldap_attr is the attribute in the( G0 P" x: A% @- `
( D" v( X ^; U \5 B$ M7 t
# LDAP entry and user_attr is the Identity API attribute.2 B' [! }6 h* W7 U0 ~; Y
6 A2 _( K' H1 s4 s+ g
CONFIG_KEYSTONE_LDAP_USER_ADDITIONAL_ATTRIBUTE_MAPPING=
0 f& Z# A3 b6 K0 O0 g6 J7 H7 Z. W' r3 v* g }6 F% G! t
: [' a( {. H9 s7 C
# M1 h) `8 U5 @& J# Group subtree for the Identity service LDAP backend.2 W% T/ w& B) z
8 ~$ u2 V4 U! Z" }
CONFIG_KEYSTONE_LDAP_GROUP_SUBTREE=! W2 V, h8 z: i
- g6 F7 J0 z5 L( q7 X6 [+ f0 D5 G$ _
/ s* v& t8 l$ i, |$ v
# Group query filter for the Identity service LDAP backend.! r/ ]# `: x2 Y8 M: c+ z4 F
3 ~# N- ^, Q. }, v( r0 J5 w$ n! i, Z9 yCONFIG_KEYSTONE_LDAP_GROUP_FILTER=
( s: i2 c9 U* m8 J9 ^( U. i- V3 d7 @3 e0 L7 C
% M- Y' e: G: v9 P: u% l( \6 D
4 [1 {! ]0 [3 l* h7 Q s, f
# Group object class for the Identity service LDAP backend.% A6 M$ e" a0 _- A. f
7 p" W2 A# e* r3 zCONFIG_KEYSTONE_LDAP_GROUP_OBJECTCLASS=6 I% y8 _( \* w2 v& \
x$ v8 [0 Z: r- v4 r5 w
+ A5 C. n0 O: y7 E. K
2 x! E0 U$ K/ v6 t
# Group ID attribute for the Identity service LDAP backend.
0 c8 _* b- H! i. @& ~% |( f- d3 S5 Q9 E( P
CONFIG_KEYSTONE_LDAP_GROUP_ID_ATTRIBUTE=
& z3 p7 K7 `# O- Q$ K
0 Q/ c; @( n1 ~
, _' A9 p# j1 k( m, K
+ O1 D3 ^4 u0 q- w) V# Group name attribute for the Identity service LDAP backend.
+ e8 }; n* ~# Y9 f
$ y3 K8 J) q' e" G: MCONFIG_KEYSTONE_LDAP_GROUP_NAME_ATTRIBUTE= e' Z' w; N7 L j6 P9 s( k
0 Q3 V5 u8 w6 R# r2 h
5 F k4 @* t/ V3 |, a
* G5 T+ q3 T3 @# Group member attribute for the Identity service LDAP backend.4 O& {: K* ^: q& l
: m' b/ `9 d& o$ U% m% E E3 ^
CONFIG_KEYSTONE_LDAP_GROUP_MEMBER_ATTRIBUTE=0 _2 s' i- Q. }' j
$ h; B9 ]) ?' h( v T& b6 ?
# m a. l. o) d2 j- B+ @; F& n
& ]. l& H: G) D* P' D, S7 {' H# Group description attribute for the Identity service LDAP backend.
- G5 j* r. [* _# R9 T g; o! e) R
CONFIG_KEYSTONE_LDAP_GROUP_DESC_ATTRIBUTE=
6 b7 _ g! H5 {3 W! F5 I. n( M ?2 j/ L- h* e- u! L; e! `; E
3 Q+ |- e, ^; g/ V0 U5 k* I
, L5 K5 T2 _2 o2 k- l6 G* B# n, X
# Comma-separated list of attributes stripped from LDAP group entry
1 J4 X" f; l5 G- ?1 x
+ ^! a( e J1 \4 E6 f6 N; K# upon update.
$ R; R# g! Z0 v% v" Y+ d, M. \% V. E
CONFIG_KEYSTONE_LDAP_GROUP_ATTRIBUTE_IGNORE=% R6 w2 d0 V% R2 |
& e' f4 f% [4 a( v2 R% ^
1 K; ]. W6 `" n: d; W9 c7 h
# Q: L" q" Y: @: ~' o$ H
# Specify 'y' if you want to be able to create Identity service
6 f% S2 `' l/ k t: B" P1 M# R$ T' }3 J! Q, m8 @6 z, `4 x% F
# groups through the Identity service interface; specify 'n' if you
5 K4 O( L( Q7 G8 w% |, L$ M* Y# F; a6 ^( H7 C9 ]
# will create directly in the LDAP backend. ['n', 'y']) J- K1 L9 T _- Z
) h0 p) @7 x& g% J
CONFIG_KEYSTONE_LDAP_GROUP_ALLOW_CREATE=n* i* N0 }8 u, M, Q- w u( a
& W0 Z/ b* d; ^4 |# u+ M+ a S
% o" x* f/ y# _
5 g; r9 m9 g3 D- g- x( M# Specify 'y' if you want to be able to update Identity service7 U) ~. s# m) l l* N. D/ U
0 ?1 W8 o" Q. N. k6 E$ p# groups through the Identity service interface; specify 'n' if you, j+ ]1 @/ s7 n# c. O9 G
" |1 T' Q- X6 E) @
# will update directly in the LDAP backend. ['n', 'y']# A* v' E5 U2 ]- z
& ]9 p2 p* t3 B, ~9 \% a: FCONFIG_KEYSTONE_LDAP_GROUP_ALLOW_UPDATE=n D" t3 C, ~2 s
* X6 X, \" V, ]+ H W7 c
, O- e5 {$ y$ y" M
+ i6 s' x: p$ c' P# y# Specify 'y' if you want to be able to delete Identity service& C; G0 g- U q! ]7 |1 X5 J" \
* \' @0 S0 y. U) K# groups through the Identity service interface; specify 'n' if you+ w5 I9 i. d1 P, A$ {
9 T; y: d( y/ Z" k; \# will delete directly in the LDAP backend. ['n', 'y']
% W5 s) p& I1 ?, K
* `' [, J8 h. T: u0 T, RCONFIG_KEYSTONE_LDAP_GROUP_ALLOW_DELETE=n
' N% Z2 m+ j4 u+ Y7 a- q6 D, a
+ o+ Z! P1 P4 S/ W5 h8 A6 k. W' N& r3 \6 O3 c) l* b
0 R X0 h* I2 i" Y/ G6 J" C. @
# List of additional LDAP attributes used for mapping additional
. K. @8 H. x- q7 D3 K: T& h5 h! l
# attribute mappings for groups. The attribute=mapping format is
+ x" e: u5 ~& H3 k- ]: b
! c2 n/ X' x7 I# s7 s6 v# <ldap_attr>:<group_attr>, where ldap_attr is the attribute in the* E1 h6 u0 B8 y$ i) r; n, u5 }
$ F5 y( x8 P$ P8 b# LDAP entry and group_attr is the Identity API attribute.
$ x7 r/ f# g, S- Z& Y& l1 F5 Y$ W& }; A# x% u6 f, c4 X
CONFIG_KEYSTONE_LDAP_GROUP_ADDITIONAL_ATTRIBUTE_MAPPING=% x* z1 K# S7 T7 u# q
$ f/ f# U3 {* }+ W8 H
+ t! m8 M# k/ l* E% n1 y" W
' ?5 v4 z/ ~! y" G7 D$ L# Specify 'y' if the Identity service LDAP backend should use TLS.
6 h3 w# {' ^; V. C) D4 Z
1 q, m+ [ R) t; D# ['n', 'y']
8 M3 }. Q( p" u; J% n7 |7 o: v5 W9 H8 O! X: v2 @: U( ~% o
CONFIG_KEYSTONE_LDAP_USE_TLS=n
- q5 f+ }( F% R: @
$ o& I- G V e8 ~$ G r/ O$ @& e1 E
4 T- N! l6 D! g7 K, p* ~
# CA certificate directory for Identity service LDAP backend (if TLS- t% d) H- U8 K9 j- z
5 a5 N! x3 T+ f# is used).
' m1 p# y) i V* \
% E" d7 u0 Y, {: K- X& WCONFIG_KEYSTONE_LDAP_TLS_CACERTDIR=
2 c8 I/ u) M8 v3 q9 q9 E
8 E& E8 U* p/ v
% v( E) k0 S3 [4 W6 _0 w* X
7 f: R* \% M& e7 ?# CA certificate file for Identity service LDAP backend (if TLS is- J9 a$ e |) n; Q+ R
9 ]) a F# e, v# |
# used).8 l; O8 k3 Z- Q+ I% i0 O
4 W9 z- q5 {4 k
CONFIG_KEYSTONE_LDAP_TLS_CACERTFILE=
8 p" b9 ~4 U0 c: S
2 g D9 q* \& R, J0 A: A$ @
; B& E* H% J# _# Y
( F" m. S# x9 R8 r1 R# Certificate-checking strictness level for Identity service LDAP( m& g' o9 I; O' a0 D4 O, |. I
: r) j: R) h# U# ^+ I" O3 e# backend; valid options are: never, allow, demand. ['never', 'allow',( t* \. M3 O) }, J" z
M X7 A" M9 R6 q6 N
# 'demand']
6 g) v# {- y N# p7 k0 f* M3 d8 S
D$ q- q8 t( A i9 qCONFIG_KEYSTONE_LDAP_TLS_REQ_CERT=demand5 F3 @# Q! ]' V6 t. F& s3 B6 I* V- y
5 O6 M: a* P) L3 O( R
) A* x! Y6 x# K+ H: j. ^
; t5 ]" i. O* I$ h# Password to use for the Image service (glance) to access the5 K1 l- i2 w4 J
/ d" `9 Z6 e& P4 W# database.% D5 x. Y1 b n% ?! X
0 T( H$ x% c- R8 x5 m" yCONFIG_GLANCE_DB_PW=ab6b7d5882bf4bcd! R# T0 t2 f! e5 v
+ }( u! j8 ]# X! R( {5 N5 t$ x a+ g+ B4 s6 C4 t1 s# }* C
* a: X' e0 f# b: T2 d# Password to use for the Image service to authenticate with the
% {3 r" {% R& Z2 B4 \- c& e8 j
$ o0 c) v8 q& u1 V% j2 s& }; y# Identity service.
3 R$ k6 F3 j* Z, A7 X8 B7 G6 N! `. V) [
CONFIG_GLANCE_KS_PW=cca0c6076d8a48498 U. e8 m2 g6 i# x0 `
9 A! E i. j8 A% i
; y# J, v- p0 W) L2 {3 y& m
" S/ n' f" q; p$ Y, E$ ?$ w# Storage backend for the Image service (controls how the Image; t1 k& A* R: `( ~/ B
9 c0 }$ f, h$ F8 n# service stores disk images). Valid options are: file or swift9 H' S1 B+ {. a. m& U# b
+ H2 Y c8 c! `! v; R
# (Object Storage). The Object Storage service must be enabled to use7 ~9 D+ G* \% ]3 [: ?
% u$ D* ^# H5 I2 n' ^6 H/ f( [5 T1 F
# it as a working backend; otherwise, Packstack falls back to 'file'.* B' E3 _$ }4 T* T" P
9 s+ C9 |% G; V
# ['file', 'swift']
% O$ j. T, [6 ~' B# v4 z* x
% \& `; u, c& `% x# UCONFIG_GLANCE_BACKEND=file
& I0 y/ n- |1 K& Z+ j
9 _, ]' ^5 I9 J% v1 b
) _% h2 t: W5 Y d) i4 d5 M1 P) g, G6 ^& m6 \# D/ `$ G% v3 f5 t9 W
# Password to use for the Block Storage service (cinder) to access$ b- I4 [+ m; i2 Y `
; `6 U6 J5 [# F2 d/ p4 W
# the database.
! r9 S, M$ W, S" @5 `- X3 O8 {# v! W5 h9 X, x- W) P, q
CONFIG_CINDER_DB_PW=9a41e1c3ec5146dd! F8 o0 U- {& b% y
3 E' v- Q6 Y, J
0 G4 }" p) o4 z# F( S# Z/ M `8 @8 l8 {! r) R$ J2 x& o
# Enter y if cron job for removing soft deleted DB rows should be- ?! C( o# P- ]& s8 n) F" o6 ?
* ]1 \1 @) d8 p+ r; D( B% `' {8 z/ e
# created.
( ?: q# x+ ^! E* E/ g9 C; D
( k [$ J- Q( m% F, }$ c% X- B" nCONFIG_CINDER_DB_PURGE_ENABLE=True
. z1 ~7 k0 v3 W) r5 @# l. n- C+ M
" {* x- I8 {7 w' a+ H
5 n3 s. t3 x# h# E/ ^6 x% w+ F# Password to use for the Block Storage service to authenticate with, B) f' Z. c! V
/ s# N+ Z$ l) ]9 f; ~$ U% C# the Identity service.+ E" Y" S0 R: I- `
! ~3 M" s% V! v
CONFIG_CINDER_KS_PW=c8a9cda31b6d47eb$ \" I g# ]7 ?7 _1 X4 p i, `$ B
3 N1 s, Q5 `) U9 ^' P( h- F7 R
9 r2 U# B0 ^, [" a5 b
* g. R e! y2 @! i0 |4 h2 D
# Storage backend to use for the Block Storage service; valid options
; m$ F: l/ c6 c9 ]1 P- V
8 V4 j5 y1 d3 f: F$ D# are: lvm, gluster, nfs, vmdk, netapp. ['lvm', 'gluster', 'nfs',1 \# G& u& `+ f
* h% r' m9 S8 [ x4 i0 i( v# 'vmdk', 'netapp']6 ?' q; F* P/ q7 t1 b5 k: `
0 L, i, ^4 s' p" _) WCONFIG_CINDER_BACKEND=lvm9 m& K; D8 f; j/ b: X
! F2 H# x0 Q+ V* v( u
* u8 m9 v3 y" x3 P
; h! {8 ]$ X4 @# Specify 'y' to create the Block Storage volumes group. That is,
, x" o: d$ f( n$ _" J+ }+ @/ \; L) i1 K9 j% W
# Packstack creates a raw disk image in /var/lib/cinder, and mounts it
* L; f2 O2 x. f4 ?% E% s% L
2 H6 n( `, N* c3 _1 M# using a loopback device. This should only be used for testing on a
. W# }/ h J0 B+ U0 o0 W( M7 c0 p$ T* O% L
# proof-of-concept installation of the Block Storage service (a file-4 Z9 S% U- }' P8 M
' j0 g* k7 t8 Z! ^- R' {6 u$ c
# backed volume group is not suitable for production usage). ['y',: }3 M8 p" w1 i( ~& C
9 a7 F0 l. Y& {% I3 w
# 'n']$ k; A# ?3 O. K+ L# I
$ U7 }" X6 `4 `9 lCONFIG_CINDER_VOLUMES_CREATE=y1 g; }9 M: E3 U# _" Z6 \
- s* {- ]1 h8 e7 N
$ x$ a' k+ C* ?' v9 G( h% Y* Y* i
7 z1 s: O' V& B# n: |
# Size of Block Storage volumes group. Actual volume size will be# H9 d) C4 ^" H* w: `
* q* ~5 T* u/ Q: k, F9 v# extended with 3% more space for VG metadata. Remember that the size
1 P" d; Z+ y+ q
0 Z8 m4 z) f; y# of the volume group will restrict the amount of disk space that you
; m4 s, v" X. k2 f
. S, `$ L, ~/ Z, c& X5 [ t" z# can expose to Compute instances, and that the specified amount must! G8 z- A- R! Y6 Z9 o0 S
' w7 R" T) T/ ?7 t0 Q' Z
# be available on the device used for /var/lib/cinder.
; p3 Q" K. \1 ?% R( X. | ^, H! c: ^% y. D) K% e
CONFIG_CINDER_VOLUMES_SIZE=20G
" y" F0 A: ?& G; X9 s9 t! _! d& `- u
0 M* d& ?" L) T) Q9 M
8 j5 j* G, A" x( ]0 S# A single or comma-separated list of Red Hat Storage (gluster)) e. C' p- N1 K+ Q9 A9 O
. ^" G k* P- F. X! g# volume shares to mount. Example: 'ip-address:/vol-name', 'domain8 Y# F, w8 x% f7 H( ?6 h' K+ s! e
. B8 T: P, E$ O! E& z/ c, s
# :/vol-name'
# K: {/ {, v9 H: t+ J+ C" v/ P0 `
# ]8 ~ [6 |$ v2 T* zCONFIG_CINDER_GLUSTER_MOUNTS=) v$ K9 Z# o n% F1 ?9 C; {
`4 \' ?, [2 |" F
' z& L7 @$ \0 R6 H" C* R
" J: Z8 \& _; J6 J# A single or comma-separated list of NFS exports to mount. Example:+ a4 l: v4 r, N* @. p
* u1 U. ~+ J4 n
# 'ip-address:/export-name'- ?) c C; n- W0 V! T
7 o: S7 Z/ p1 h7 lCONFIG_CINDER_NFS_MOUNTS=
3 D* {; k4 t y4 J
) y4 A8 R7 p5 B# m" C6 w" f5 R# Y1 ^6 S I! E& S, G
! {: [. N+ A1 E# Administrative user account name used to access the NetApp storage" b/ M8 x( ], B0 A7 `# Y
% V/ H/ T9 i2 `* G3 U# A: N
# system or proxy server.
5 f& f! T2 w* z; r9 A
1 d7 B5 j0 T) \5 KCONFIG_CINDER_NETAPP_LOGIN=7 y. E7 r6 p) g
1 q: T4 o5 l) @' J9 ^" O
: j! Z# g- o) {% u, U( J/ |: A) A$ n" G) k2 U3 O
# Password for the NetApp administrative user account specified in
! }3 @3 q7 }/ M5 p; q# Z: n, y6 z" T/ O0 n( q$ v
# the CONFIG_CINDER_NETAPP_LOGIN parameter.$ t$ ^, ?2 ?4 K9 j A+ t* }: l
, W1 R& M) e, H; {
CONFIG_CINDER_NETAPP_PASSWORD=; q8 H! u6 U7 \' E" {
) l3 r" m+ m3 i- x2 Y
8 [3 V" w' \$ {) ^' F3 \; T ^; C* R+ g$ \
# Hostname (or IP address) for the NetApp storage system or proxy
8 W6 P) C& Z7 C/ B0 Z- _- g7 l: a
# server.: |0 e- r1 Z$ q2 J5 `! I/ O
/ Q' g) m* h4 I5 b
CONFIG_CINDER_NETAPP_HOSTNAME=
+ O) F4 O$ c" S; J0 ^4 q: L
% R1 O' N7 J# d' Z) h) W4 m
: o7 h4 |) u; b9 W! v- D* k( p
. n7 k1 s2 @+ E6 C2 [9 w; \1 ?" d l# The TCP port to use for communication with the storage system or1 _8 w( @/ y0 U
+ R) W4 Z9 ^8 l5 w0 j u# proxy. If not specified, Data ONTAP drivers will use 80 for HTTP and
" P; T2 J. I$ Z
" `" p! G1 g/ s( g6 ^/ u9 _# 443 for HTTPS; E-Series will use 8080 for HTTP and 8443 for HTTPS.; a4 h* C+ C1 H3 X( r- R# R" Q; W
4 s$ i' [# v) J# Defaults to 80.
" U# e$ g5 |* d
' h! L; c2 h1 L0 O) `* NCONFIG_CINDER_NETAPP_SERVER_PORT=800 h [; V- _/ z( t7 r3 e; ~
& `. c0 q. u' o
1 V. e+ m3 u: ? ?" B
$ J: S- M- e/ F. k9 }: h, V+ L/ X# Storage family type used on the NetApp storage system; valid$ e/ J5 r1 d9 b% O$ g
3 j+ Y! V: \/ E ?; U7 q# options are ontap_7mode for using Data ONTAP operating in 7-Mode,
0 P, C ~ }4 E& [5 ~0 S$ f
& y" w' o, X9 O# P+ R# ontap_cluster for using clustered Data ONTAP, or E-Series for NetApp7 m9 B. j7 l! E. E3 |, d
% p/ P) ~3 Y+ N1 C
# E-Series. Defaults to ontap_cluster. ['ontap_7mode', @, K. K/ h$ f* s& {, I
& ~: V3 c# i0 w. h7 A
# 'ontap_cluster', 'eseries']& V' G6 P# ]5 L" y, U9 }5 A
6 x+ X+ N+ o/ v/ D& l2 O1 \CONFIG_CINDER_NETAPP_STORAGE_FAMILY=ontap_cluster
7 ^2 M8 ?, d& \
+ h l+ x4 H& W) _! H! I" X' L. W
2 ]* u" d. g8 w. f# X" A( k9 [5 {
# The transport protocol used when communicating with the NetApp- v! W- f( \' K9 i& Q
- u/ h7 _, f- ?4 j7 _8 a# storage system or proxy server. Valid values are http or https.
/ o2 l$ S( I6 j+ ]4 x/ ?; Y+ q/ d, o$ H" ~$ L' G( ]+ p0 J( U
# Defaults to 'http'. ['http', 'https']
0 E" u; a; c, p! g6 o4 j8 M. x7 O
+ g1 m: u; R0 X* `7 b$ r* @CONFIG_CINDER_NETAPP_TRANSPORT_TYPE=http
5 k4 ?% f" y8 x( [4 v; v: N: v" d7 S" W' d4 [) g
3 ?( i3 r+ [' l3 v* O5 e
# b, B% S/ H, i) B/ h1 n# Storage protocol to be used on the data path with the NetApp/ j% L9 |! Z7 Q. L9 ~* _) F9 J2 I
2 n+ D4 Z# E) {4 e5 C `# storage system; valid options are iscsi, fc, nfs. Defaults to nfs.
% O& w0 P1 w1 @- L) E! ?5 B
# k. S8 A# F3 F1 T0 J1 V# ['iscsi', 'fc', 'nfs']
+ } S' F# b7 m! `0 m4 g3 X# T* G2 B( N' P/ K" |7 Z# q v: {; b6 a
CONFIG_CINDER_NETAPP_STORAGE_PROTOCOL=nfs' [7 N% }# h* T* S5 {8 Y; G
2 t% {- j8 I+ Z, j# b- i$ D4 A7 y' @6 o9 ^* [$ H
! _0 ~8 _. A7 X1 q6 z
# Quantity to be multiplied by the requested volume size to ensure
" _; ], y3 V& y/ t6 X: G+ W/ M, {# s
: y. y* W4 E, ?) x& t+ i1 r$ s# enough space is available on the virtual storage server (Vserver) to
4 Y9 q) \. i4 k0 r9 G; a- Z
$ O: `) w4 G1 D: N- B: Y# fulfill the volume creation request. Defaults to 1.0.
0 b3 A! G/ p ?# h2 b9 Z1 B6 n- J d5 W) V' O$ T
CONFIG_CINDER_NETAPP_SIZE_MULTIPLIER=1.0: F' d) g. z( t7 b6 u+ m
% I$ G. r U" W% h, u; J
; ]) L4 z1 ]* _1 y
2 E: k7 J( u$ `. j8 g! Q# Time period (in minutes) that is allowed to elapse after the image
O0 [: {% }- j/ S0 @0 ^- v6 W: c9 l
# is last accessed, before it is deleted from the NFS image cache.
, M$ l0 ]0 J6 a1 t
5 r% v5 E* H/ G2 R1 `+ C2 w$ [# When a cache-cleaning cycle begins, images in the cache that have1 [+ z. q0 B8 [1 X' l, s
* l1 ]* A1 x. c
# not been accessed in the last M minutes, where M is the value of% Q3 ^5 y( ?) P2 ^' A) G3 ?6 k
- C8 j; ~2 N! A$ a: j) N2 Q
# this parameter, are deleted from the cache to create free space on% [; L" v! a5 \7 A* z
. b* P% v! K+ a1 W6 l' L
# the NFS share. Defaults to 720.
( |- J! D) l4 o+ K0 l; f8 h- Z5 [0 e/ l" b; s, C( A$ _% Q4 L2 Q
CONFIG_CINDER_NETAPP_EXPIRY_THRES_MINUTES=7201 @$ f) Y2 E% d- z, S h
& [- I# c1 d; J& R" q$ f
) d& Q* r/ F+ ^4 Z; ^( ^! C/ y
% F( r M, @$ v% v9 O, O9 F* O# If the percentage of available space for an NFS share has dropped
0 k# }6 I* Q! [9 ~1 H- w
% h+ M7 q0 `3 r" a# below the value specified by this parameter, the NFS image cache is
/ e% X7 I. L( b/ B3 a5 ?
" Q& I# c% T& i3 ~# cleaned. Defaults to 20.
. P4 l/ ^, W$ N K+ R
% E. C V1 Z) y- uCONFIG_CINDER_NETAPP_THRES_AVL_SIZE_PERC_START=20# S- m+ k" @+ t. L! i$ y( q
" v% H: h/ K- [, S; t6 L
( K6 a' a1 b5 d" c$ j G1 F! A, X/ T9 e6 c; F
# When the percentage of available space on an NFS share has reached
$ p2 Q( H- k I5 Z- W( x5 V# y$ l- U, U7 }5 J
# the percentage specified by this parameter, the driver stops
) f0 @2 _! Y3 B9 k9 y8 p+ @0 w
; _* Q0 p. W! m; A2 w3 r# x# clearing files from the NFS image cache that have not been accessed6 K& d1 g# B* c8 Z
. }8 _* T' H; S4 ~
# in the last M minutes, where M is the value of the
% Y7 U0 Y# p" n& V. ?5 G7 B, j2 ~ h6 t% P" S! X
# CONFIG_CINDER_NETAPP_EXPIRY_THRES_MINUTES parameter. Defaults to 60.
! T8 Z# T+ Z; i
3 W L, L* C. t7 A7 i KCONFIG_CINDER_NETAPP_THRES_AVL_SIZE_PERC_STOP=60
/ k ` n" ?8 k: D
+ o {% x; r9 r' S3 P0 l' f4 L/ H4 j k
" C0 n9 g1 _$ l, {4 q G l
# Single or comma-separated list of NetApp NFS shares for Block
' x+ p4 W7 @& q9 `4 f. s$ \
" Z: ?# J+ Y$ j: x# Storage to use. Format: ip-address:/export-name. Defaults to ''.5 h' F) o- ~/ w
1 I8 Z# p- W+ z2 P4 S) z0 @6 GCONFIG_CINDER_NETAPP_NFS_SHARES=& @% K9 M' c" b+ x! V
9 Y7 X5 F' @7 p* N& I7 X% L0 L6 ?/ {
! A0 G; o. c$ f4 k
# File with the list of available NFS shares. Defaults to2 b& b* M/ B( `
# J# p% l$ g4 p( r$ S) \# w# '/etc/cinder/shares.conf'.
- g' W' n6 _# Y5 O8 t
! J1 S1 D# d( C- X; y+ eCONFIG_CINDER_NETAPP_NFS_SHARES_CONFIG=/etc/cinder/shares.conf
& [! @' H7 O9 b2 e9 s; o; F+ G5 u0 s7 c1 ~3 s
% u# G5 E1 v1 q+ {0 ^9 i
( e3 Z$ Z3 n, {( s; }' N! m# This parameter is only utilized when the storage protocol is! i0 e$ Q; H- [# _" ^; s
. ^# M4 H$ G# G9 e) Z) P) K" @# configured to use iSCSI or FC. This parameter is used to restrict
3 s) m" X p2 X$ n6 R2 s% F1 O1 g5 ]
# provisioning to the specified controller volumes. Specify the value
1 r2 T+ M6 I. X5 ?# y7 y; e0 K* `8 b4 p& G* R- A) p
# of this parameter to be a comma separated list of NetApp controller5 ?* r! }) _1 o7 b1 ], I
% i3 t) P- @$ R
# volume names to be used for provisioning. Defaults to ''.8 ]. H$ r( Q0 D
8 l0 B6 W0 M" cCONFIG_CINDER_NETAPP_VOLUME_LIST=4 B" t" _1 \/ p. Z
( z* F) q! ]' ~8 ~- Z
7 e. p9 u) o) w: a
2 V! ], \ P# ~$ w# The vFiler unit on which provisioning of block storage volumes will
- b$ r: M7 [8 l9 Y7 @% B+ g1 b0 f2 z1 {* m
# be done. This parameter is only used by the driver when connecting3 H; I& |# {1 C2 A
4 [! C! |* r* ~# a$ K- A# to an instance with a storage family of Data ONTAP operating in
; p5 l% } s+ o" ?2 E! I& K6 _7 v" d! R4 k8 V
# 7-Mode Only use this parameter when utilizing the MultiStore feature
q- @+ `7 g$ ^$ b8 }5 H8 A" J
1 I3 \0 z$ k' G+ I9 }- C# on the NetApp storage system. Defaults to ''.
: @7 d2 X' v" f5 e. g3 b3 Q1 w8 ]9 L6 ^
CONFIG_CINDER_NETAPP_VFILER=
7 {, h" e1 a- G1 D1 p# X% v0 R0 D0 F( _, ~
. ~( v1 i! q9 ~- z8 |
% R. h( A3 _/ \6 X+ K% ~
# The name of the config.conf stanza for a Data ONTAP (7-mode) HA3 S7 f$ {+ W0 v7 v0 G- L' s" K7 x
6 B: e, r" G C+ Z7 q8 i+ D$ R5 d6 R
# partner. This option is only used by the driver when connecting to
, |0 f- k4 i- Y+ `' O: U5 x5 h( x
7 @( j, W7 q, \9 r- |# an instance with a storage family of Data ONTAP operating in 7-Mode,, d9 {. |% W' f& D* I: E
( f- ~" ]+ @+ W3 w, {
# and it is required if the storage protocol selected is FC. Defaults1 l1 A5 z/ l/ U9 }1 p2 C# W+ n
- _: w' [1 d' q$ |8 ^7 n0 j
# to ''.
' p. L; I0 [) }" ^- v+ J9 C5 X( S& o6 y% g: D
CONFIG_CINDER_NETAPP_PARTNER_BACKEND_NAME=8 a& M( u) }; U7 Q! V
3 x2 e3 ?% J. F( W
" q1 a1 z$ x$ s* z: g9 D6 {* R U; d/ S6 s/ c$ {
# This option specifies the virtual storage server (Vserver) name on
$ K% C3 C* ~8 R9 t* A
' ^0 k" S& u7 J8 r+ P' Y# the storage cluster on which provisioning of block storage volumes% B5 C. B7 b; e! F4 P# _
1 s' C3 o; ` W" V7 I- c# should occur. Defaults to ''.
, ~( y/ z1 T" {6 K8 v- l A
! {+ I9 u9 L z2 N7 O6 VCONFIG_CINDER_NETAPP_VSERVER=% n' a# O& X9 f2 v2 A8 M$ P
, ^- G4 Y: i Y* I- O* r+ A
( |( B- K3 B0 |( x; d* }3 i) C
6 g3 J4 _/ U. z# Restricts provisioning to the specified controllers. Value must be
) w* j9 {- i$ `% T
" N7 }4 A8 {/ s# a comma-separated list of controller hostnames or IP addresses to be# B' K) o, i8 k* H7 r& `* n: d8 l: s$ x
! R5 X, F: Q- |/ d# used for provisioning. This option is only utilized when the storage- S5 @7 ^0 `2 R: [8 `, {
" n, B+ ?1 ~, L: ]- N$ L; P% Z: K
# family is configured to use E-Series. Defaults to ''.; o: g) Y" h. T* {) Y3 Y
5 T# { v! S2 \
CONFIG_CINDER_NETAPP_CONTROLLER_IPS=
0 e; b0 w' j" e s
+ |: y; A2 j$ |; M* ~/ J) m: g5 i6 f* n$ z: K
8 j- Y+ J: H8 k5 g: w# Password for the NetApp E-Series storage array. Defaults to ''.
+ D9 [2 j- f, p1 t) b: D4 F& h! b8 T8 F
CONFIG_CINDER_NETAPP_SA_PASSWORD=
$ f) C/ b, K B0 T: {, u4 K
. J' u, C! K' C1 R0 b; J
% w2 ~0 i8 Q" m n% m
E) ` g& e: M# This option is used to define how the controllers in the E-Series
$ B/ C2 r) }- w# k$ l
- t% F1 M. h& f( N# storage array will work with the particular operating system on the! c4 N; a$ m3 X
. j4 P5 f/ _8 O# hosts that are connected to it. Defaults to 'linux_dm_mp': o( y/ m. T: n0 t
% `. n8 g6 l/ i9 D8 `/ k
CONFIG_CINDER_NETAPP_ESERIES_HOST_TYPE=linux_dm_mp
# e u& V3 L7 G N2 d- i6 y/ Z* T5 D6 x/ I( d! @
F7 r1 ]( [: v5 a, ]
w0 @3 q3 l$ m& n0 V# Path to the NetApp E-Series proxy application on a proxy server.8 T5 X- N, N3 ]0 h0 M0 b
( s/ C( f& A1 q5 X( G8 k# The value is combined with the value of the
0 m; O* S# }3 [% b( N
8 f, |1 N3 [: x/ a2 M# CONFIG_CINDER_NETAPP_TRANSPORT_TYPE, CONFIG_CINDER_NETAPP_HOSTNAME,
7 M+ i1 l. v$ m9 X5 @5 N' R3 L' N0 s
7 R, X4 |0 X0 R2 a& ]8 `, W$ Q# and CONFIG_CINDER_NETAPP_HOSTNAME options to create the URL used by3 X! \. T% S s1 G% h( f* @2 ?0 e3 [
* X) L/ ?' @" ^" a {- Z5 N# the driver to connect to the proxy application. Defaults to [) E; \0 T: m' L
) m9 n1 f3 N9 i9 ^; h
# '/devmgr/v2'.
6 p6 B) t% s/ _1 S9 E" ?' w6 K# M; J8 o
CONFIG_CINDER_NETAPP_WEBSERVICE_PATH=/devmgr/v2
( Z- M v( b, |5 G3 Q% V1 o
+ v4 B; g5 L& |7 m
6 S5 m4 q) h2 p8 I k z/ G5 |' w8 H2 t+ \
# Restricts provisioning to the specified storage pools. Only dynamic+ U5 u9 o; q' e. n7 Y
+ S) v: g5 X) _ P- N' V# disk pools are currently supported. The value must be a comma-
& j- O. o& s3 Q1 @# Y: m& D9 _8 i
# separated list of disk pool names to be used for provisioning.
2 l' N& b2 R% A6 t Y7 \
7 k( G& k6 z' E6 L. ]; I- L- t# Defaults to ''.
9 K! b. c5 R. N2 O \6 H1 L( g' `" F$ R( d
CONFIG_CINDER_NETAPP_STORAGE_POOLS=8 e: f0 G( y& M
! S; Z; J9 Y& K" n2 a. ]/ Z$ J6 C
2 }2 ?: t# a0 ]6 _+ ?) A. Q0 E( i9 m
# Password to use for OpenStack Bare Metal Provisioning (ironic) to
' Z, Q7 @% _& M( Q0 T6 }, ]7 o9 ?7 T- f( O6 p
# access the database.
. y1 r4 r9 F0 K' W5 t' ]9 o0 \
, i: ~0 D/ |% ]+ @5 KCONFIG_IRONIC_DB_PW=PW_PLACEHOLDER P u4 e; p# L0 p* B
1 R8 r6 N- }4 J( S3 Y. s. o6 ]
# B0 Z9 @0 ?1 I' s7 q& \, d
) Z# Q$ g0 |3 ?" K+ ^. x( l9 _
# Password to use for OpenStack Bare Metal Provisioning to
* |$ m! R& d( T) c# ]3 X
4 z' y ~) `, x% |+ S$ }" H# authenticate with the Identity service.4 z5 i1 P# n. i
( n* i- y) s, W/ e7 N5 i/ O- \
CONFIG_IRONIC_KS_PW=PW_PLACEHOLDER
$ ? h& H: m! I+ ?- I/ i9 J8 z
+ F" o. t7 {( e3 e( b
: q# x3 m+ x: h$ C/ G. j0 x" a. K- t5 A4 y2 h( B/ }( Y
# Enter y if cron job for removing soft deleted DB rows should be
- z. h& `' p: c+ Y6 b( q
. K% M; K7 d" [+ S* Z# created.1 L2 c3 U' G Z% i, \4 b' u S
( { f3 t6 s; M7 T0 Z$ {
CONFIG_NOVA_DB_PURGE_ENABLE=True r- ~3 N4 T0 e
' H7 E% X- @" O! j) }) z ?, J+ t |8 k9 ? G" i
- d0 w; b4 ?9 D9 V0 ]: e% T# Password to use for the Compute service (nova) to access the
6 A B0 `, k( a! {# U U2 A
& l! X p) r8 k+ e, s( e R# database.
7 {) y d8 @' B: R4 t( e
% A/ j8 K) r# p+ o: BCONFIG_NOVA_DB_PW=2b413313b40c4cef
/ U+ l4 M; C; W* m) L
2 x& p# ^8 Y* m! C7 ^+ w. t* h$ @' E6 t
. e# [. a* ?/ X9 F, t
( P1 }$ h& P6 X d8 D& F7 |# Password to use for the Compute service to authenticate with the
2 T6 u6 o0 F: P$ ~: T" q* _
2 j" A. f L: S% w/ a: L# Identity service.
8 k2 S. ]; P6 l) \* f
$ Z6 [ s5 H7 D) wCONFIG_NOVA_KS_PW=de17a9d0e3984bae
) S$ }9 C% L9 a# i% ]1 S
! t; i1 x/ N) D3 k& l2 z- M7 ^
$ [1 I7 L( f- E X% V
% Q# d6 H. B& ?3 E, s$ ?# Overcommitment ratio for virtual to physical CPUs. Specify 1.0 to2 I- v# r8 o1 u# l& k
3 U3 I: d/ m. o/ {
# disable CPU overcommitment.
+ p' y, \- F* ]
, B1 `2 Q; f/ L% D& r N" ]' J3 tCONFIG_NOVA_SCHED_CPU_ALLOC_RATIO=16.04 `- d! A t* C' m" ^) |9 }
; y+ }# K) W8 z$ E# e @ y& F1 w. ^8 ^: u: n# u* N Z
m: O4 y- u, M. |% |/ x8 f7 l# Overcommitment ratio for virtual to physical RAM. Specify 1.0 to; |% F3 O8 p3 `$ D. ~
* e" B B% P! |' v3 U+ j1 P
# disable RAM overcommitment.
' {1 M. N4 f, B* F$ a, Y9 ^. P- T2 T% u& D0 S
CONFIG_NOVA_SCHED_RAM_ALLOC_RATIO=1.5) y* j/ v- v% J# G% Q7 [
7 i; w# R U ^+ @
) h4 V2 m$ g) U8 H
. |- r& k4 i; t9 B* W# Protocol used for instance migration. Valid options are: tcp and, N/ x Q6 o# P1 Q9 `$ w
8 F) {, u t6 y/ S$ \
# ssh. Note that by default, the Compute user is created with the
$ f3 B6 K0 _5 q' t* f) R# G, S& U& Z7 ^) W8 x5 M2 R1 i5 t
# /sbin/nologin shell so that the SSH protocol will not work. To make
; H/ G) R( m9 q' [& c
" V$ a3 U7 Q+ u3 ]3 p9 H# the SSH protocol work, you must configure the Compute user on
& o# Z! P6 G6 z; ^* ]" n( w5 |& A1 I) x) m+ k! x6 k- G
# compute hosts manually. ['tcp', 'ssh']
* o0 N% O+ H1 @& U- e4 ^9 E9 x: O' a6 T
CONFIG_NOVA_COMPUTE_MIGRATE_PROTOCOL=tcp" p8 k& C/ e/ \0 h3 l- e- o6 K n
1 R3 s/ H1 a: ~9 A
$ m1 s* R6 F% |- }, o+ |9 ]2 E+ C# B6 Y, o$ F, l
# Manager that runs the Compute service.( f' h) j% d) x+ I/ _( Q' O
( U/ k8 w$ h0 j0 D1 L0 q) b6 g, GCONFIG_NOVA_COMPUTE_MANAGER=nova.compute.manager.ComputeManager( C O# K" ~2 K; K/ |& H9 Z
2 n% {+ v1 |, Z$ E5 w! M \$ a$ Y3 c) ?0 q
1 D& z y5 F; w& u$ [9 D
# PEM encoded certificate to be used for ssl on the https server,) |4 S8 {/ |! G0 e2 R
4 _; }: [6 @! w& ~5 N
# leave blank if one should be generated, this certificate should not
( s. o7 T6 D' Y9 x& G" ~) }" i- t) R- k& {: A
# require a passphrase. If CONFIG_HORIZON_SSL is set to 'n' this
. r. f4 v2 |4 P* b: m; d5 m, j) x8 w y: r6 x! _% C2 @
# parameter is ignored.
: |% T- M7 w" _ `0 M% o3 c1 P+ J* J0 ?
CONFIG_VNC_SSL_CERT=
0 l7 l# C9 e0 F. z4 S- s+ D! D/ d' B5 f6 K5 z0 Y+ I+ e2 b
) H6 P; B) m/ L0 U' ~' |/ t q
+ W/ P/ w. Z5 }# j( ~# SSL keyfile corresponding to the certificate if one was entered. If: `. `, {. [. n
1 b* b9 _7 t9 R- T- l# CONFIG_HORIZON_SSL is set to 'n' this parameter is ignored.( P. O" H/ Q1 Q
& ~9 s7 x4 z+ f. L5 U) N2 W \CONFIG_VNC_SSL_KEY=
$ H8 | q: ^# @, u# E( `8 s! T d
/ Y! s6 p; @2 i0 B" n
7 a. I2 _6 ], l* \1 y
1 |& E a4 b: Z# i- u( `5 E0 g# Enter the PCI passthrough array of hash in JSON style for
# x. X: K# c6 y0 J6 {2 q; s; h$ }: v/ u2 L8 `* ?8 [9 k- t2 D- |
# controller eg. [{"vendor_id":"1234", "product_id":"5678",8 G' A+ @, U4 [. e
. k r+ c9 p, r; J, W# "name":"default"}, {...}]
. _) m8 b4 Q0 s2 ^, I
1 v0 i. R n5 Y# LCONFIG_NOVA_PCI_ALIAS=) n" B/ J0 V2 |6 |; Q* y
7 j) r/ b3 X* p( F5 L
: @8 ^9 x# d; Y# S7 X( }: j% B- V
+ F5 m0 s" T2 n7 o) c! j# Enter the PCI passthrough whitelist array of hash in JSON style for: W0 ], h+ W! P/ d+ y0 ~ u
* G3 d( |$ @+ V1 f
# controller eg. [{"vendor_id":"1234", "product_id":"5678",+ W1 `+ m' o! g& I
8 P2 K" I5 T+ u% Y7 I0 P6 {2 O# "name':"default"}, {...}]
$ _# y% c( H: h, A5 d! m$ ?1 o# D+ o, T5 v" M
CONFIG_NOVA_PCI_PASSTHROUGH_WHITELIST=) q$ G; i; ^, d1 E% E% i6 J
1 E$ A( T- o0 {& x j5 P8 H9 E$ c) M ?4 W
( _* x4 A+ r2 u4 v9 l& @
# Private interface for flat DHCP on the Compute servers.
8 T, o- _. \7 |0 A, M
$ z: D! o3 |$ g, z0 f& GCONFIG_NOVA_COMPUTE_PRIVIF=
7 I$ ^- n T' p$ S1 {, _2 S3 z( O* r
) K7 u2 a* p) F: ^7 N: D
- t5 {( p. X# _. ~1 I* c
# Compute Network Manager. ['^nova\.network\.manager\.\w+Manager$'] `0 m6 [1 E" s& g T+ S8 F
- {2 S8 A5 a8 R
CONFIG_NOVA_NETWORK_MANAGER=nova.network.manager.FlatDHCPManager7 A, |! G2 I0 j% S
$ Y% v! j/ T) E* E$ v+ E. p4 K! f
0 I+ |& ]0 Z+ G. h& ~9 X' v+ n4 J5 |# \' n
# Public interface on the Compute network server.3 R4 z+ n8 R: L' D! b' j# A
6 K6 Z) C/ c* U' QCONFIG_NOVA_NETWORK_PUBIF=eth0
0 F4 b7 H/ @2 d/ R3 t1 d' @+ d: y9 ?) v7 X) d
+ ^+ F; h) h8 L/ R% J
7 m, T" |# p2 h& h8 t* _
# Private interface for flat DHCP on the Compute network server.( _6 H; J1 M$ a: I- h& y) [- A5 `
' ~' M+ u9 _$ z* @, ~
CONFIG_NOVA_NETWORK_PRIVIF=% r% v0 v! Z9 s, Y& T8 E
! c$ I6 P* z- Q" p: h" r- t
/ D. }3 d$ f* h+ Q; _$ q5 q2 C
$ T+ `3 z3 V Z; m, t! r* ^/ H# IP Range for flat DHCP. ['^[\:\.\da-fA-f]+(\/\d+){0,1}$']+ Y, f% g7 W8 h1 y, J: U
; y! Z1 |' O6 K% s1 N
CONFIG_NOVA_NETWORK_FIXEDRANGE=192.168.32.0/22
8 P& z- J/ p; Z% T; ~4 e
1 P; i* s2 d# s$ x5 v. f' o* t' _! D2 c" K& n2 Y) c
) ~5 B) R: x/ S& G9 [
# IP Range for floating IP addresses. ['^[\:\.\da-1 m3 r x# `; j2 j3 p3 U3 T
" `5 T: g( Y. X! l) ~# fA-f]+(\/\d+){0,1}$']% g i" P8 [8 x+ W8 ~9 F5 {6 `& R5 k
; @+ z* u8 d4 o) G! p
CONFIG_NOVA_NETWORK_FLOATRANGE=10.3.4.0/22
+ j- c9 r+ V- Y( { D6 C7 P2 X* U- h6 @+ L) z, K7 `7 C: @% g
) {% U; V" \& g+ y9 B) z9 V+ [
7 w6 G) ]* Q/ r. s/ E
# Specify 'y' to automatically assign a floating IP to new instances.! z% O# O9 w2 R$ s$ ?& i, T
( T& j' N( E" Z" d1 f- j
# ['y', 'n']
1 V' {8 `5 I0 q/ c" ^
8 L( ]1 c9 W- o, O' `/ LCONFIG_NOVA_NETWORK_AUTOASSIGNFLOATINGIP=n
' ^. U" Q$ g5 P' C5 b' I6 c+ L# W2 P! u' J
; I& R6 D" M& [* [' Q. `; H1 i3 q
$ P, j4 U; u/ V& E+ o- l# First VLAN for private networks (Compute networking).
4 K8 s4 |0 M9 E4 {% l3 d2 W/ B7 B, I1 I% m# u$ y
CONFIG_NOVA_NETWORK_VLAN_START=100
5 g% B+ V4 U( d( I" d" g9 s& O+ P Z/ k( m+ J. `
7 D; s1 a/ y7 ~( |
$ }7 Z% {6 p' @ j3 `
# Number of networks to support (Compute networking).
: q+ u; G' ?) N, _/ t3 P) d( X5 c+ w8 f K) h8 q) l" w4 z8 J, F
CONFIG_NOVA_NETWORK_NUMBER=15 O0 k2 y9 \+ d
$ b B0 f+ p/ d' b& q: E
- w* c, n5 ? h/ n9 c% E$ U" o+ I
L: e" v! j3 }; a9 x; n# Number of addresses in each private subnet (Compute networking).$ z* E0 D6 Q2 Y3 L' [# g/ {
5 h5 I; `! G. B+ ]' @CONFIG_NOVA_NETWORK_SIZE=255
8 E3 o; x, N) S& r7 U
( G3 j3 j4 M. U; V) \+ T( C: x$ I; L7 D
8 e- F1 x0 E; a" O3 b4 Q; V
# Password to use for OpenStack Networking (neutron) to authenticate
: o3 k) S% h9 B$ [# D# q" {& R5 ~. L; G3 i
# with the Identity service.; e, g6 L9 a# n4 L
3 f5 U3 j X1 i: a# k7 W+ _9 bCONFIG_NEUTRON_KS_PW=0f93966d6de04e8d$ f' x. b& U$ x3 T! m
3 a3 A: `( r* d$ F% _# ]# u/ R
' i9 l Q0 s0 V" \0 ]5 F4 g# |
7 a. o. b; f4 S# The password to use for OpenStack Networking to access the
# E8 C0 C5 ]# W7 f+ \. V+ Z7 \; F' B7 z7 L. `: w
# database.* Z0 A% X L% C. x! {
. D1 r/ E) g, Y
CONFIG_NEUTRON_DB_PW=6d506e19899e4a3f& f3 z( ]& N: O7 D, ~3 G! I4 E' D
" W# a3 T$ ?7 q6 a7 G$ |( v% ]
" o2 L& T! n# ~, P! V# The name of the Open vSwitch bridge (or empty for linuxbridge) for
3 i, F+ A/ {3 r" R& U/ z
) k ] |. r. c& N# the OpenStack Networking L3 agent to use for external traffic.
# y N# H) Y' K7 M& h; m8 T1 K
5 x% w" y* a M s+ O# Specify 'provider' if you intend to use a provider network to handle9 M0 H9 Q3 p* G9 b2 a+ q; @# Q
: s$ o" I k/ |) @
# external traffic.8 H$ G2 s0 v) `6 D) T
* B1 z: e6 [: V9 l! K1 G# @7 N. dCONFIG_NEUTRON_L3_EXT_BRIDGE=br-ex2 Z! I3 n* [0 `' {
1 S8 b v; ]2 U
& S0 D& t! F& {) _% C/ a D$ R; ]1 q
# Password for the OpenStack Networking metadata agent.& B) K6 X" X0 E' ~3 B# \
: a# V( ?! S( y0 M- |9 iCONFIG_NEUTRON_METADATA_PW=f7db67c5f3024050
7 [/ H% M5 d: y, l2 q: J" @6 m4 D' u
* A" ~# [& n C* o. i& H; A& R9 g2 Z( \4 L8 I9 C& u5 ]
# Specify 'y' to install OpenStack Networking's Load-Balancing-
4 ^! c3 I! Y; O
; J6 K" Z* M4 \! S# as-a-Service (LBaaS). ['y', 'n']
3 l$ b/ M% q2 V! q9 c4 u( |! _ b" q8 M, D% R; o. h0 g
CONFIG_LBAAS_INSTALL=n
/ S7 v! |" y8 k1 h v- y6 v
1 M8 E2 G3 h$ J. N/ R9 o, r
6 `: L7 f3 M. Y3 B/ l) B% ]
5 K2 j$ e" b. P8 a, s2 p& N6 S8 ~# Specify 'y' to install OpenStack Networking's L3 Metering agent+ q2 l1 k' g, H, O
+ x' N, y4 {3 [ |/ ~- U+ t, E
# ['y', 'n']
8 Z8 N0 A; ^8 A) ~ Y+ H
* h' L6 e/ @) S3 U' u+ rCONFIG_NEUTRON_METERING_AGENT_INSTALL=y
+ f$ j# q3 b4 ?! o- \& s
/ T0 O' X$ f$ y* E' K' {7 e$ e ]
+ |7 U4 r8 Z5 U+ y* c$ B3 x
$ b: z2 H" n ~- |# Specify 'y' to configure OpenStack Networking's Firewall-
- z3 G d8 J0 K
2 h) O% W, c' P" n% |5 H$ d+ ?# as-a-Service (FWaaS). ['y', 'n']0 Q4 u3 J9 k, h. F
% `* e# i+ h3 }; j- f$ F# X9 L: P
CONFIG_NEUTRON_FWAAS=n( v: x8 K# g0 g' k# m; B1 q3 i
% _3 `0 l/ c4 m/ m
' i& h+ i. @$ V J) v; X: E2 s$ c2 S! S7 Y7 Q6 Y- a
# Specify 'y' to configure OpenStack Networking's VPN-as-a-Service. w! K6 M. {+ w1 ~. Y) W2 Y
2 e1 z9 N# o7 m- U9 ?; |, ?5 x
# (VPNaaS). ['y', 'n']$ ^+ u1 k( i0 B" Y' d' `
* t& |+ q& L% n, m# ^7 x
CONFIG_NEUTRON_VPNAAS=n' T5 @0 p( d& |7 R" X8 l k
# |) T" F, `+ |; u5 B& f5 T3 v/ l1 O
6 N w% t. s( h) ^+ A, z# Comma-separated list of network-type driver entry points to be
0 N, z0 H% m! k u& M) ?; ?4 q2 c5 d3 q7 H, i5 K2 c. h. M
# loaded from the neutron.ml2.type_drivers namespace. ['local',: x L/ `0 `' k ]% i, g! G9 u
4 B- [' a% @( |$ D( V# 'flat', 'vlan', 'gre', 'vxlan']
5 B D7 M& B4 _+ E' b' X6 Q: s5 j# _6 e; h0 P- P6 F
CONFIG_NEUTRON_ML2_TYPE_DRIVERS=vxlan
2 `/ U K( @% e6 S1 \; n; `8 u! ]! E
! r) S$ L% T" i# u4 B8 d" K- Z
" o' p& D3 y! i" ]' e
# Comma-separated, ordered list of network types to allocate as
: Y7 S" B9 H6 j) W% }* t# t, N W G: U" L& U0 a6 F# k
# tenant networks. The 'local' value is only useful for single-box- q' l* i1 Q% D7 w! v X. K
" R4 ~+ n" i2 ]+ k
# testing and provides no connectivity between hosts. ['local',0 h/ s) Q5 a$ C# U6 d
7 k/ a( ~) n* ?( {; i1 z# 'vlan', 'gre', 'vxlan']
' z) a# d0 c, m. [9 E
: _; {" w: M2 {1 ^ n9 o9 @CONFIG_NEUTRON_ML2_TENANT_NETWORK_TYPES=vxlan
# t4 {1 Q. \! b* @3 ]& ~7 M: `3 t4 a3 g3 G. G
( Z! p& y: r4 e; M4 ~
) Y' t* j" F2 x* F% X' r. T' `
# Comma-separated ordered list of networking mechanism driver entry
) k* J5 N' l) X1 J" Y+ V* j$ [6 f* [" A. i# R: |9 P
# points to be loaded from the neutron.ml2.mechanism_drivers
) X' x; u N$ p; q! h6 s1 M/ Z2 G9 _" Y8 K) L
# namespace. ['logger', 'test', 'linuxbridge', 'openvswitch',; s& W8 l! x- c2 e1 q" y" f, ^5 d1 ]* }
5 y' W# {# U2 }$ Q+ f
# 'hyperv', 'ncs', 'arista', 'cisco_nexus', 'mlnx', 'l2population',6 @' o2 u b) C: s/ s$ l: r
9 H: i0 b; u- Z3 O# 'sriovnicswitch']6 U6 Z4 r) x+ C
* E6 J8 B' n9 j9 H; x+ Z
CONFIG_NEUTRON_ML2_MECHANISM_DRIVERS=openvswitch
! R' n! w2 ]5 h
0 V6 T* Y% m' |; L# x3 p4 m1 A) Z2 c- w/ _9 O8 }6 y6 l6 ]
2 y' u9 g" ]; L8 N6 ?+ n# Comma-separated list of physical_network names with which flat
- z- C/ Z* L* g) I y2 V/ z h! {, D/ x% }/ W3 H0 }; [/ r: `
# networks can be created. Use * to allow flat networks with arbitrary2 e0 z7 ]$ W- z9 \4 d0 L* e i
" @" o* K1 F1 E6 U3 [4 d7 Y$ ~# physical_network names.! @2 A: G( ?, [1 j: W- j
l1 r- w- Y7 Q, s Q) N
CONFIG_NEUTRON_ML2_FLAT_NETWORKS=*
. a5 {' [; D4 d3 | r" j1 r5 k
5 N5 L3 I( m; i4 M8 ^1 A7 f |8 t& e7 J
' m; Q1 n# t6 ?: ~! ?, `
# Comma-separated list of <physical_network>:<vlan_min>:<vlan_max> or1 @& R* v/ B. T0 E7 P$ m
# Q5 w8 f2 S8 S2 h3 p7 o# <physical_network> specifying physical_network names usable for VLAN7 e3 \2 D Y. G7 x0 _+ h6 z9 O- \
; u- ?" ]+ L2 O6 q
# provider and tenant networks, as well as ranges of VLAN tags on each% A1 k' w- Z$ T( B7 l
: E/ [) b% y! t
# available for allocation to tenant networks.( P4 Y. t+ u* ^& w
R# @) s1 |/ S- tCONFIG_NEUTRON_ML2_VLAN_RANGES=
2 O$ d3 S1 J: J& ~$ D1 k
) X$ T4 G# @; T+ E, T
( ^; j! c) d& J3 t8 I! ?' b" n( E( F# x* e
# Comma-separated list of <tun_min>:<tun_max> tuples enumerating9 s; v$ A4 D6 `& j+ p3 {% U d5 ]& `
* i' _4 H6 `0 t# ranges of GRE tunnel IDs that are available for tenant-network) [9 q, b) |/ p6 ~) Y/ d
2 F$ r* ?% E8 A! D4 T
# allocation. A tuple must be an array with tun_max +1 - tun_min >
& H5 q/ s, d7 B0 d r
L& a. E! t' \( s# 1000000.
' K6 L6 W z1 d( J) H
1 K2 a1 {2 B& H' l' W( sCONFIG_NEUTRON_ML2_TUNNEL_ID_RANGES=) c5 \$ N. l- ]8 o
' ^5 r. C* s" L+ P6 g
+ |# E$ P" q3 [, A. }4 I4 d
* s( L! M$ ^. O: E. q# Comma-separated list of addresses for VXLAN multicast group. If
n0 ^7 }) w) H. c# z
0 v# ~% m L. U `1 x! _; `# left empty, disables VXLAN from sending allocate broadcast traffic7 A! {3 G7 K- o3 o# [5 n9 e
$ W8 A# V! Z0 Y4 v! [7 K% f J
# (disables multicast VXLAN mode). Should be a Multicast IP (v4 or v6)
# R$ O; Q9 H! o4 F) h# D7 k) t) q; C5 B7 p$ v# z7 K
# address.9 H3 r9 }- o6 D
) L+ ]# ?. B# X8 ?( t, Z
CONFIG_NEUTRON_ML2_VXLAN_GROUP=
" p. M" x: w2 z1 i! X' G- c
0 Q% `! Z6 s" z* p8 f# {" B* J" Z! U( |: _: [9 o# V2 h
- ]0 ]) E. F8 _# Comma-separated list of <vni_min>:<vni_max> tuples enumerating
7 p: ^6 `+ i( e$ _- m( c% P, z: z! h& ]& [+ z" o9 ] g
# ranges of VXLAN VNI IDs that are available for tenant network
0 D3 ^9 j9 C! X! f+ l
b7 v, b3 e4 Q, k) l# allocation. Minimum value is 0 and maximum value is 16777215.( t" f! f5 o3 @; G5 }, p5 v& j
/ p2 b7 v+ w- a( s# s/ RCONFIG_NEUTRON_ML2_VNI_RANGES=10:100
- P7 _( z& f- f" l4 l
1 J% [& P+ Z0 H6 r, Y: m# }2 }
/ d6 B5 |4 V2 k+ R/ ]" H; z- o5 M% U# [# I- I" R# Y+ X5 {# p
# Name of the L2 agent to be used with OpenStack Networking.
! `- L W& A* T6 Z% V0 c" n {
9 V/ U/ W: j1 [! n2 Y5 c2 ]# ['linuxbridge', 'openvswitch']$ G6 s2 ~2 q/ `' v
8 U# C0 f* n4 s$ Z+ yCONFIG_NEUTRON_L2_AGENT=openvswitch! O, o8 q* `- w
& `, V; h0 s: S9 x4 X- }8 D
( w& ?9 Z3 T4 K c9 O6 i
2 Q& J) c. z( W K$ @: X% {# Comma separated list of supported PCI vendor devices defined by
, u0 e9 V7 A8 Q6 U) p
2 T& V7 x% f! d/ @# vendor_id:product_id according to the PCI ID Repository.
8 u4 m3 d. l2 Q* }6 H" U* \( p1 D6 A9 u" Q% d* v$ m, W
CONFIG_NEUTRON_ML2_SUPPORTED_PCI_VENDOR_DEVS=['15b3:1004', '8086:10ca']
! I% H. f( ~' W& g- V; v, ~2 v& V }, R% B% m0 M$ Z3 P
4 e+ G8 P \4 L z- w M, x9 z8 o
; T2 y( a5 g$ J( L8 u. v! l; r# Specify 'y' if the sriov agent is required6 J% N# r# c8 s( _# Y
$ ]1 J" ~: Q9 X3 cCONFIG_NEUTRON_ML2_SRIOV_AGENT_REQUIRED=n1 q8 f3 `: J% t9 R; k3 e# ^3 N; L
& G1 i) q4 O( @7 f) ~) J) e' |8 m3 q& v2 h2 \, A8 J1 ?
+ R7 Y5 p$ w0 p! E7 d# Comma-separated list of interface mappings for the OpenStack
7 d; k$ ?* x; K7 w3 K/ k! N6 o7 m# c% z$ i2 e/ @
# Networking ML2 SRIOV agent. Each tuple in the list must be in the% {0 o: M5 F7 B2 ^$ Y* J
* I4 B+ S ], |# H# format <physical_network>:<net_interface>. Example:1 g) Q8 g$ x4 a3 {5 p$ t6 z
* g" f. j; _- I! \3 g# physnet1:eth1,physnet2:eth2,physnet3:eth3.' W8 C; N" i& d- N9 G8 X6 S8 R
4 s3 L9 p m" e' v2 y7 u5 d
CONFIG_NEUTRON_ML2_SRIOV_INTERFACE_MAPPINGS=2 _0 w' m- ]' G# H3 H! T0 O2 O) V$ H
, X$ U* e/ X; E! t: Z5 b. i$ T8 f+ |' h- [( c0 i
! e Y# w$ L e/ V. ^7 @/ c7 P/ R
# Comma-separated list of interface mappings for the OpenStack3 G$ H! P$ s' y- s' M
3 X, I }6 D. J4 n0 e# Networking linuxbridge plugin. Each tuple in the list must be in the( I$ W5 Q9 u3 T8 c5 E# f8 g
) ]# T) y0 p7 {, b( z2 K: p" `
# format <physical_network>:<net_interface>. Example:5 i9 O" e' h- |. `" x
0 _- k; Z' d5 D3 c# U# w
# physnet1:eth1,physnet2:eth2,physnet3:eth3.- L) u7 @$ A5 ?7 L, {" m
/ H7 {/ [2 \7 w1 i
CONFIG_NEUTRON_LB_INTERFACE_MAPPINGS=) M# N) a! M) @+ r: {4 X/ e
$ ~3 Y/ w, |8 `# T% ~3 l! ~
4 J7 f( A; @' Z5 w* @+ \
9 m; r0 i, o% i9 @/ }# Comma-separated list of bridge mappings for the OpenStack
( s- m+ \4 p- Z9 M5 u( L+ |
# Q9 g& x1 D8 d# Networking Open vSwitch plugin. Each tuple in the list must be in
' {( h$ h4 |( `* W# N0 A/ b* s5 f: ^
8 n6 m0 B# U, M6 b# the format <physical_network>:<ovs_bridge>. Example: physnet1:br-+ s# W+ ]' A d( @( f+ Z9 x; z
# J9 I. X* r; Y0 g) M( F
# eth1,physnet2:br-eth2,physnet3:br-eth3; k! O) w4 K+ t4 V2 j1 H6 R9 \
7 u% Z8 T$ s/ Y4 VCONFIG_NEUTRON_OVS_BRIDGE_MAPPINGS=
! N% Z; I# l* R, \3 z7 [+ C2 C5 e5 Q4 I0 u. L( [8 D( N
9 E0 _( k9 q! L& ^- J
" ]+ U' ^: z# s8 z, K# Comma-separated list of colon-separated Open vSwitch
/ y* u% K' x; j! m* m" p, p. A0 e5 m
# <bridge>:<interface> pairs. The interface will be added to the% X6 O+ b9 g# f! J; a4 f$ f3 ~ N' m
4 i% G1 k" ?1 Y: u$ P: w3 l# associated bridge. If you desire the bridge to be persistent a value. w1 V3 d3 W# b4 O
+ _! j; Z/ J( F6 w9 a% e% o
# must be added to this directive, also! h8 R, u V9 v7 c& i- w5 i$ @
, G! w7 e1 x% Z: Z8 h) ]7 r
# CONFIG_NEUTRON_OVS_BRIDGE_MAPPINGS must be set in order to create
( p5 x. r" [; G* O0 P" f: A! v3 M0 q2 }; o2 t
# the proper port. This can be achieved from the command line by2 h, {; ]. e- M8 X; U
0 |( E7 S; d. K. i; @' v6 B5 t
# issuing the following command: packstack --allinone --os-neutron-
8 r- U% l. M4 v8 l) g5 L2 e; l! L- {) G& v0 U; j1 r) X
# ovs-bridge-mappings=ext-net:br-ex --os-neutron-ovs-bridge-interfaces4 ~& w$ e9 w! h2 ^4 o# X7 ^
& Y" k+ t% k+ g. a- C5 D: T5 @# =br-ex:eth00 z) ~" W0 M# D5 a
0 L# F& u* B) D) `2 T1 r+ e1 L# n
CONFIG_NEUTRON_OVS_BRIDGE_IFACES=* h) z. [; R. F, I* a' i
' P- |/ M' U& X5 A' |, C0 ^
2 n1 _) L0 A! W5 M: z# p0 @$ C% i
' b q3 X5 a4 Y; \9 c2 _( K! L# Comma-separated list of Open vSwitch bridges that must be created6 U- W/ I- A; ?) h
( }# c9 p* i& V# H8 T# and connected to interfaces in compute nodes when flat or vlan type
6 u$ ~( `6 D* e9 b7 K% C. V: M' ^
' S4 L% {+ H% E& N7 `9 Q# drivers are enabled. These bridges must exist in
/ T' [4 p( E1 E6 C2 Q% B2 ?" m' }1 P% y5 \. N0 M3 m* q6 L
# CONFIG_NEUTRON_OVS_BRIDGE_MAPPINGS and
/ j" _- g% P; E6 b6 V5 P% p/ ]8 G$ d2 l1 _
# CONFIG_NEUTRON_OVS_BRIDGE_IFACES. Example: --os-neutron-ovs-bridges-
* F+ A# A0 f8 j; m
O2 ^9 e; x4 g1 {" }# compute=br-vlan --os-neutron-ovs-bridge-mappings="extnet:br-$ E; X/ U8 A' Q9 m) @
% L; p; O5 U) ], c f6 O: S# ex,physnet1:br-vlan" --os-neutron-ovs-bridge-interfaces="br-ex:eth1$ `) |& H+ h2 F- a" J |
1 a& `, o" O' i& w5 G# p+ i/ N. i- G- `# ,br-vlan:eth2"
( N! V% z5 _# p1 j; U m6 l" O" N% Y. H- M+ P4 R6 `, S
CONFIG_NEUTRON_OVS_BRIDGES_COMPUTE=
' e! A; t; l5 H; X- }- O; Z$ l+ a6 {( Z: }; ^% `
( v- D9 ]& l8 O, o d
( M# ]/ {1 I& l& ]/ O# Interface for the Open vSwitch tunnel. Packstack overrides the IP
4 m- I; Z& I7 h% _# C
$ J' \9 p* b+ C5 @1 |1 X# address used for tunnels on this hypervisor to the IP found on the
8 j) A( q' G G) Q0 g, s3 S
2 q/ k" C; t, f* p6 J# specified interface (for example, eth1).
3 Z9 j% m" `! ]2 U2 W) ~0 L
, p/ m4 }' y& _- S! QCONFIG_NEUTRON_OVS_TUNNEL_IF=
' h* g* Y$ E$ t1 f7 `/ h; \, ^; B9 H$ S5 [5 U \4 |# J
7 [2 W9 y2 Z0 R3 e* p2 r4 v! V- Y7 q
# Comma-separated list of subnets (for example,
# d# [& i, l* A {4 q! R" c
5 m0 ]" b6 ]) ?) Q6 P, g+ U# 192.168.10.0/24,192.168.11.0/24) used for sending tunneling packets.' H9 r7 ^6 x8 P
6 G5 W) g$ z+ T+ _8 _: l1 m. I( [
# This is used to configure IP filtering to accept tunneling packets
' ~* V( b5 z3 P7 ^3 ]# k7 w9 ]$ w+ o
# from these subnets instead of specific IP addresses of peer nodes.! w: D8 u# D2 p
( d/ n( ~$ j( B7 p6 [& ~
# This is useful when you add existing nodes to EXCLUDE_SERVERS4 z. W7 J: g% z5 i" _ S
+ O2 j1 ] e: r" O) J
# because, in this case, packstack cannot modify the IP filtering of9 g6 V+ r; I! `" z+ \: n( q8 X
# A& V3 @4 s3 P7 t9 J! }, z& K# the existing nodes.. `( a* @ p! {& k5 E* h
2 E6 x: Y# w) X/ [CONFIG_NEUTRON_OVS_TUNNEL_SUBNETS=+ A4 b" n1 W) m) G" R. ~
! p* k: Y6 g R4 F2 h
( `/ _* s; O) g' l0 S7 G+ o/ f
h; y8 j7 i% ~. w( i8 L# VXLAN UDP port.
- O4 k7 I- E5 S1 D3 c8 A
. D/ [/ t c6 fCONFIG_NEUTRON_OVS_VXLAN_UDP_PORT=47897 d4 k" p. t) Y) @# t
+ T2 v, m9 F( ~' E" r2 N+ H6 w8 h5 k
8 ~9 K6 s7 c/ d! r) c$ @% ?# Password to use for the OpenStack File Share service (manila) to
" E( G# C; q. S% B( P
5 v6 I2 T* _7 H, S9 k# access the database.1 M& q9 Q& T. w% s V" _
9 D$ h% O$ |0 w k1 k9 z/ y/ cCONFIG_MANILA_DB_PW=05a1afde52ee4dca7 S: K$ X) s, u, M0 E) a1 O
p8 S7 U! D/ K" x) e& d, a2 A3 l
* h" c/ q F& e [# |9 Y' ^! G+ M
( \0 k3 U1 ?3 `3 `& l# Password to use for the OpenStack File Share service (manila) to8 h5 P7 R4 x4 Z5 V0 B
- b+ j2 f: n( N9 P# authenticate with the Identity service.0 F* D0 Z. y! V- t: v G
: \4 F! Z# L0 W# W3 I
CONFIG_MANILA_KS_PW=d68b8a1e35c54d891 ] D2 M1 k- z& _; e; u; C4 E
! m2 h( R5 b5 y- i, [: y8 p4 c) P! _- @9 b% n& |6 A V
$ x; a4 ]/ h; r9 C# Backend for the OpenStack File Share service (manila); valid
+ ?* c, Z, [7 X, V$ l1 q9 S% o' B7 i! F4 V
# options are: generic, netapp, glusternative, or glusternfs.
: S& ~* I% W9 K7 z5 p0 N7 i- c8 m2 S G9 I9 f1 O7 T8 X+ _: s7 G
# ['generic', 'netapp', 'glusternative', 'glusternfs']
E8 H( A# o$ f7 f% W" r( }
) Q4 i8 [+ A* P- s* yCONFIG_MANILA_BACKEND=generic
/ G9 j6 Y8 ^2 w: @8 X$ e% h' l
) F7 ~8 W/ _0 \0 O, c0 m
8 a. L. K7 E' y) F& B3 `1 ?8 F# [
' ?* X( y, z& ~ Y$ T; S" g# Denotes whether the driver should handle the responsibility of
' E( J7 {( [. U& a9 i9 C* ~! D' Z6 m! K3 q9 u! @
# managing share servers. This must be set to false if the driver is+ e! G; v6 q# T) }# p
' W7 U* b0 {3 F5 U4 f; t2 a% P
# to operate without managing share servers. Defaults to 'false'+ y3 i7 T( r# U% |
8 E) K7 n6 o( m' H" a E+ \
# ['true', 'false']
& K+ G) r5 J L9 y0 a/ U6 |/ A7 x- F/ s
CONFIG_MANILA_NETAPP_DRV_HANDLES_SHARE_SERVERS=false, w }* X: W; Q7 H1 k" Z* Z0 \
M, o. S( u$ W( k( d& k5 v0 l
' K8 s( y! m. K' J- L8 X
( h. ?: N( |' V$ d8 m1 E# The transport protocol used when communicating with the storage
: |# f6 V2 }: K& ]
0 Q! M* d/ L) ?: f# S& K! v; B# system or proxy server. Valid values are 'http' and 'https'.) ?# u6 s9 ~4 v) {; w* V" c
) b5 D1 v" `0 a. }- B/ ]/ |$ w8 G6 U L# Defaults to 'https'. ['https', 'http']% U# y+ B1 q/ H, f3 K' a" A* h% c
* J- o; T% E" s/ A
CONFIG_MANILA_NETAPP_TRANSPORT_TYPE=https
/ E- Y3 Z8 L: [7 u9 L" d. h' @# ^0 \* x, m Z _1 O1 t
' ^- E7 H) R. B# p: \/ g6 m% [- _0 i+ ]4 B$ j( ^. Y
# Administrative user account name used to access the NetApp storage+ ]% ]+ }; G3 `+ R3 u
4 t& E) ^! N' F* ^, Q5 ]
# system. Defaults to ''.! s3 }) }' |! f) O
- X( }+ I( l4 h" pCONFIG_MANILA_NETAPP_LOGIN=admin9 @! L7 r( P( `6 B& [, z1 ?& U
2 ~7 e h% S! |; T$ X7 _
; j7 e" r, ?7 D$ W
, I0 x& N5 E& ]6 ]' }6 Y# Password for the NetApp administrative user account specified in
( w8 ^% A2 f/ Y4 d: i) v& u6 x$ B3 b) q. B
# the CONFIG_MANILA_NETAPP_LOGIN parameter. Defaults to ''.
6 I9 r8 W0 F4 ?
: ^0 }* `1 d1 JCONFIG_MANILA_NETAPP_PASSWORD=
) V* E' m: m8 x1 k0 K' ]6 o \" R, U3 T
$ E4 j7 C. J# V# c
- n* @# g; |3 }9 z h# _0 ?
# Hostname (or IP address) for the NetApp storage system or proxy- y$ [' r5 Q3 H( q" e% r, ^' `% y8 d
. j# t0 n1 O1 O
# server. Defaults to ''.
9 f1 I* W6 y3 i* m0 A" T6 |9 r9 L1 ?0 a z" [$ D0 p2 G
CONFIG_MANILA_NETAPP_SERVER_HOSTNAME=% X7 L, K, T: I) S7 O3 Y
& L, x5 O3 F7 ~6 ^& O% T' {) v% p3 j0 F4 A& E
; g% l6 \* @: F: D1 a5 T# The storage family type used on the storage system; valid values8 Z" v" M& Z# l) G
! O$ F# }2 v. D$ x+ h1 s
# are ontap_cluster for clustered Data ONTAP. Defaults to0 ]& Q5 W# i0 x4 ]) U+ Q
' Y2 {3 d. I( y7 w
# 'ontap_cluster'. ['ontap_cluster']; h$ \9 N" X, p6 s& l; C, J
% j% `, z7 {, R' }1 s& J0 bCONFIG_MANILA_NETAPP_STORAGE_FAMILY=ontap_cluster, _9 r \8 i, C8 N: N7 e
1 R& ?: D- B8 D* _* W- {: E
: o$ g: U6 k# h& |# M1 w9 }
+ X% L) Z7 I Q/ r
# The TCP port to use for communication with the storage system or
( J& l! O) x, D: d! V; Z" x$ X9 I# @! m0 L1 w+ D2 L4 w1 [
# proxy server. If not specified, Data ONTAP drivers will use 80 for
4 K7 ^. M% d+ j, |/ y5 i! W; e; x s! U& q- h6 N( o5 P
# HTTP and 443 for HTTPS. Defaults to '443'.
- K. c' S) S1 t. H- i! s
z0 e" c% D$ u- t* }CONFIG_MANILA_NETAPP_SERVER_PORT=443
" w2 T* _% Q/ o1 y2 `5 Q- m# Z* ~3 {- P" J5 e
% ~- b0 ?' N P3 {. X- x% R
9 q+ y' ~2 Y) p, o3 ~! T/ @9 R# Pattern for searching available aggregates for NetApp provisioning.! e9 e' c/ D& q3 S
( f$ Y6 _$ H9 G4 Q
# Defaults to '(.*)'.1 ?( e, P" m2 E3 p7 T2 b
) V% i: v$ j) U r* i# T/ V& _CONFIG_MANILA_NETAPP_AGGREGATE_NAME_SEARCH_PATTERN=(.*)
, s5 N. l3 ?2 }, ?6 u; d3 R* x% {6 K8 `6 a; Y9 o# L1 ~
' F& l- {9 p2 u2 `: t$ p# {# e2 _$ Y4 G% B+ E) m0 {! S' _
# Name of aggregate on which to create the NetApp root volume. This
6 F a) _+ r0 G
% A7 X$ `) \1 K c1 f2 M# option only applies when the option3 Q) n5 a4 D6 u. t G$ O3 I9 R
, c: v: k) P5 Y+ Z/ v! w$ u, C# CONFIG_MANILA_NETAPP_DRV_HANDLES_SHARE_SERVERS is set to True.8 W A f$ i) v! ]+ f$ M
) H* e5 e% `8 A% G( _8 rCONFIG_MANILA_NETAPP_ROOT_VOLUME_AGGREGATE=$ E& P5 W+ H5 @- [5 }
7 _7 b Q6 Y# _, I. F
7 Q# l$ U5 J, Z
$ r* j% M, w$ f6 ?0 ^! }1 K* C# NetApp root volume name. Defaults to 'root'.
/ X: ~9 R/ S! Z& K. |' s+ _( ?& d! f
8 q$ Z9 F2 @1 i0 f( D aCONFIG_MANILA_NETAPP_ROOT_VOLUME_NAME=root* v5 x5 T! p2 F
6 _8 I9 @2 _; @6 Q! s: [: Y3 { w; x2 W! |; G* C
2 d( Y! K3 N2 m6 h) q( N+ u
# This option specifies the storage virtual machine (previously6 s, I; Q7 R C1 ^* I) e
5 W6 s" C( `9 ~
# called a Vserver) name on the storage cluster on which provisioning2 R: y N& @% _& R% Y
; g7 U+ K2 f$ t l
# of shared file systems should occur. This option only applies when( M A; ] N: v
+ I! F h% O7 |( H# the option driver_handles_share_servers is set to False. Defaults to
/ t$ ^. F8 g4 c5 o
2 O2 D0 K3 M) r) u" K# ''.
2 e, R4 t! H3 q" l
|- m" f$ _$ j& c' oCONFIG_MANILA_NETAPP_VSERVER=
9 ^5 C* r* O0 u! b- T1 Z: _$ K" \6 p( w, _& i6 m+ Y! v7 x% N8 X
7 l: ]/ D' t6 p) E
1 _1 ^+ {( r; ~4 O# ?6 ~4 M# Denotes whether the driver should handle the responsibility of. H; `3 [! o/ {7 A( A
( Q H0 x/ ]/ v7 @1 ? y# managing share servers. This must be set to false if the driver is
3 `4 B1 p9 E7 s; e. k$ v/ j9 R; G3 a, l2 F. q& b
# to operate without managing share servers. Defaults to 'true'.
2 e! G5 d {+ h4 d p- b0 d$ H( p4 M; n5 G+ H
# ['true', 'false']
3 J/ A! a: x/ E5 {+ H7 D
9 ]: V( T5 ^: s! Z6 X# f& yCONFIG_MANILA_GENERIC_DRV_HANDLES_SHARE_SERVERS=true
( A; L2 y- ~7 c/ p' e E) r- D- R9 X2 J5 s1 F$ |
" H6 v1 e$ ^- ?, ^$ k
" V; w6 W- G( W% E) E- h0 k
# Volume name template for Manila service. Defaults to 'manila-' k8 k Y, U% _( E
3 i! |" V3 u/ v; ] w( y# share-%s'.7 J( Q0 m1 E1 ?. p3 X$ o8 ]3 u7 v
/ k8 N- r+ d. N2 [CONFIG_MANILA_GENERIC_VOLUME_NAME_TEMPLATE=manila-share-%s
: H8 h+ v$ h$ c: M/ q
! m* x5 l/ G& I) V; N! h) O- U1 W( W9 T6 E$ {. f: c
5 V5 e U- P b) t
# Share mount path for Manila service. Defaults to '/shares'.$ R5 r; u, E B8 o5 `6 x+ D3 b& E" o
8 O0 a' n/ I* P2 X4 @* cCONFIG_MANILA_GENERIC_SHARE_MOUNT_PATH=/shares
+ y9 b8 w1 g X8 I/ w* E4 _
% z% |( `+ v+ z! N% q- O( a* d Z" {( V/ e
+ \! p/ g# e% Y( W# Location of disk image for Manila service instance. Defaults to '2 r; |1 H% R6 l% a0 c" Z0 e& G( c
; `/ |) n9 a0 U$ W4 T/ M E$ pCONFIG_MANILA_SERVICE_IMAGE_LOCATION=http://192.168.117.129/centos/help/files/manila-service-image.qcow2
2 A# }! p0 T8 w0 d5 [7 \6 T
- e! J) ~( D( c6 `! I/ H
/ T# y$ I6 g5 m# v# \
" W$ x* |5 [3 t4 x# User in Manila service instance.
5 O& K& a6 a' z& u F: Q0 m# z6 C9 S7 \+ @5 E$ P2 C
CONFIG_MANILA_SERVICE_INSTANCE_USER=manila& \* H; z& j) J! [. L& V7 L
- [5 g9 k: i! t: k# b0 S+ L) |( x
/ O( o- U- k: O' M% u7 A, u) a
0 b V, _) _; h! L' O( _# Password to service instance user.' t% g- [# q4 t
' v' J- A9 @7 Q0 m+ ^/ _
CONFIG_MANILA_SERVICE_INSTANCE_PASSWORD=manila
7 v' ^. I# p z$ z5 B
: D9 ^( E) S* u3 x5 Q3 n N% H3 j/ {7 W
+ i4 b% u2 q% L) g9 P# y
# Type of networking that the backend will use. A more detailed0 ?$ ]5 |0 K# d; I9 F: ^: M5 ~
) m: U( [$ {3 L& t, }9 m* f
# description of each option is available in the Manila docs. Defaults
. {0 [. l( s# z8 [+ c' u5 n. o$ }
0 `# o/ h+ A& T- b J7 \# to 'neutron'. ['neutron', 'nova-network', 'standalone']* @3 T7 v6 X, P% L. s
( ^4 \2 W. I B8 @- \% ~
CONFIG_MANILA_NETWORK_TYPE=neutron
2 X$ ~# v# k1 w" o* X& q3 M
# Y; P; |+ Z. a- b7 P$ _; y7 N
; D' z8 }' j; M7 a
4 m% C, h4 ], _; S3 Y1 A" B! F# Gateway IPv4 address that should be used. Required. Defaults to ''.5 T* ~+ g' [. F6 {, N1 i; @
, n( g( |- N* QCONFIG_MANILA_NETWORK_STANDALONE_GATEWAY=
; a C, J1 {7 V+ ?; A, H9 S3 ~' k" v7 U1 ^! d1 ?
% T% S; r; `, p S4 u/ h7 R7 t- G& ?
$ \1 Y9 A! E) H* |# Network mask that will be used. Can be either decimal like '24' or
/ a; y, j3 a: |: K S* o" g6 W$ x1 Z* \+ A
# binary like '255.255.255.0'. Required. Defaults to ''.
; l. k2 y3 [+ z4 K$ o6 ~$ d4 X2 B0 d1 i' A, Q2 O* [
CONFIG_MANILA_NETWORK_STANDALONE_NETMASK=0 U b! _1 `( O5 [" |
+ G' [! W3 |, b0 H* ~8 E% g7 |- _# }
! |) Y# `+ Q. Y) ~) ^
* ~; b6 E: Z' ] J8 f2 V3 G# Set it if network has segmentation (VLAN, VXLAN, etc). It will be. M+ H4 f9 V0 n4 q$ `& c3 }8 |. G# S! E0 F
% K6 m# B3 ?; q9 K3 \& W
# assigned to share-network and share drivers will be able to use this
[2 h- J+ y; U' K: l {! i
& L( g7 p; ]& \7 d# for network interfaces within provisioned share servers. Optional.) z/ O2 o9 R( B, v6 | ]. B
" V6 m# P4 K2 {$ j( J
# Example: 1001. Defaults to ''.
" A! n) b! P, K5 ~5 o! g; T; x! x# {! U0 C" `# E
CONFIG_MANILA_NETWORK_STANDALONE_SEG_ID=! {7 B. r4 G* P# V s4 t
3 a: ~; K* d! j; l9 x. L
# B( X8 x6 ?7 B; c2 a) T6 C! y% Z) K5 U4 j
# Can be IP address, range of IP addresses or list of addresses or8 J r- X0 m' J. h: `
2 s6 g5 m) z5 M
# ranges. Contains addresses from IP network that are allowed to be0 d1 ?6 C+ e) ]1 Q0 B6 [7 j2 x/ U/ T5 l% G
_) z2 G O- u' H w# used. If empty, then will be assumed that all host addresses from" E" m, W( w" {+ ~7 M: C
. w5 n: r( ~( o$ Y, A$ q
# network can be used. Optional. Examples: 10.0.0.10 or' X: q; O a, j, W2 d2 J* u' G
T; @8 f1 G! s: h2 v/ O& O
# 10.0.0.10-10.0.0.20 or
. V. X- r% G: `4 S3 f; c$ Y, U6 ]5 T' y6 D2 Y
# 10.0.0.10-10.0.0.20,10.0.0.30-10.0.0.40,10.0.0.50. Defaults to ''.
- K8 z+ X2 L9 v2 ]2 Z$ z: W k+ C' j, Y; D- g8 _' }
CONFIG_MANILA_NETWORK_STANDALONE_IP_RANGE=/ x$ y# G- J1 R; v; V1 s/ N
2 x ~1 p3 \9 ^& s) d9 L* T* y7 Z4 `' R
" F' ?- V: c) C9 I% v% b- v2 t# IP version of network. Optional. Defaults to '4'. ['4', '6']
$ v3 m+ Z+ j2 h; r
6 D# _, [; K( gCONFIG_MANILA_NETWORK_STANDALONE_IP_VERSION=4+ a9 E# h6 Q5 p: C/ c5 Y( r
/ g' M2 m0 h8 D ]. v
$ S5 D8 [0 D8 c3 p/ T+ G
6 P' i E. D8 F8 y+ |9 u# List of GlusterFS servers that can be used to create shares. Each
% X) D9 J. g) r2 Q1 D7 [
- P" t7 h/ s3 a6 ~1 U3 `- d# GlusterFS server should be of the form [remoteuser@]<volserver>, and
7 e$ T/ y. \' N7 Q4 ?/ l5 d8 `: o7 D
6 [: g7 F4 g7 p* D4 d& r9 S# they are assumed to belong to distinct Gluster clusters.
+ Q) V {$ O7 X) z% C) I4 |9 W f7 [* t/ d2 x/ C% K" O6 S
CONFIG_MANILA_GLUSTERFS_SERVERS=4 l' b: t5 K( i8 V0 D
7 k) s) O" Q v* p
( Y# D( u3 [5 d- A) ^' z7 ~* q6 x3 W& ~" t1 ~
# Path of Manila host's private SSH key file.; f+ ?7 t3 E% V. a; l
" k c( c7 n9 U/ L
CONFIG_MANILA_GLUSTERFS_NATIVE_PATH_TO_PRIVATE_KEY=
! _) P1 Q4 v8 T& t" [0 z+ i5 ]9 |0 h4 J1 k* S8 ~
$ e2 \8 s9 v# d" I
. w$ G5 J. s! n- n8 Y# Regular expression template used to filter GlusterFS volumes for3 P$ T" ~) _! I
8 R3 F1 j) E) l& ^! n: } Q W
# share creation. The regex template can optionally (ie. with support
/ n" s( v: @* [
9 M( U2 C; T2 C, u4 I, L8 y. T$ ^8 ^' @# of the GlusterFS backend) contain the #{size} parameter which
, n7 z5 @, ?' {. t; v; h ^* o! [6 x0 A6 y
# matches an integer (sequence of digits) in which case the value' J5 O/ A6 L" x$ w1 Q
; Y- W% {: S! m ^
# shall be intepreted as size of the volume in GB. Examples: "manila-5 i8 b& R$ `, _6 S
/ E, X, w9 [+ Z' R: e8 k) g2 M, y% t
# share-volume-d+$", "manila-share-volume-#{size}G-d+$"; with matching
# X( @; ^9 u3 p Q9 p& g% i4 Y9 T" d1 s3 c3 b3 w
# volume names, respectively: "manila-share-volume-12", "manila-share-( P, h, r& ~# o/ J! N- c0 {+ p4 m
$ c& o% F6 k& x3 I
# volume-3G-13". In latter example, the number that matches "#{size}",
% P3 ?4 Q* o8 N- C q1 h3 J2 k6 g" m+ p# ~8 T' k
# that is, 3, is an indication that the size of volume is 3G.( e5 O' ]! b( [8 {- Q7 I9 v' c
- Y8 K3 Y+ y8 Q. L% {2 U, J& ZCONFIG_MANILA_GLUSTERFS_VOLUME_PATTERN=
& f# z" a/ J$ }3 W* v1 ^
. a% n4 Q3 B& e
, G: j/ G1 C9 L; a2 G
* z; j* j( x% o R" }9 A# Specifies the GlusterFS volume to be mounted on the Manila host.
# s& b; h( F" q& |" B% o
# E. Q7 o$ D. A: V# For e.g: [remoteuser@]<volserver>:/<volid>+ J+ {1 |% z8 |! n1 u4 `
1 P; t9 w1 C* {: Z6 \: L, p' _ l
CONFIG_MANILA_GLUSTERFS_TARGET=
: o- `7 g0 y2 `2 Q1 K, y9 V
5 L Y* h* v& ?9 D: q6 R0 r+ v, X9 c/ ?
* n; Z. _% b6 Y2 g! c) W+ S* n
# Base directory containing mount points for Gluster volumes.4 K& Q ^8 U$ d+ b
9 s! K$ I4 U1 I" w" rCONFIG_MANILA_GLUSTERFS_MOUNT_POINT_BASE=' u4 \. }+ l/ D
1 D- z+ {1 I6 A I8 B. }4 v4 Z: c9 G {/ H8 M
$ t8 U) _' p; i! r# Type of NFS server that mediate access to the Gluster volumes
) S. ]) h, V8 T: ]* \0 q+ F$ v+ K) Y4 ^+ ~0 o4 ]
# (Gluster or Ganesha).
8 C$ t' V7 R8 q' z) \
7 _$ b& T: o0 S& `' \! e# A$ zCONFIG_MANILA_GLUSTERFS_NFS_SERVER_TYPE=gluster
) S- O5 t: ]$ x& t( P: A; Y8 D* H" R" ~9 Z1 }" N
* W7 f4 @. k7 }8 G8 j
9 k- j- y1 {4 y. ~8 m# Path of Manila host's private SSH key file.: ^1 }: c' \, v3 Q
* }$ Q; i: X5 E7 Z3 n2 {, M2 |CONFIG_MANILA_GLUSTERFS_PATH_TO_PRIVATE_KEY=' q4 V3 H8 a. v8 { G
1 A$ s! V# r7 \' i9 i7 K
; |! v9 H" j( X; u) R8 b
_/ }! u r Q9 C# Remote Ganesha server node's IP address.
- _! C% A/ H. B
+ K/ \/ A& N+ S) Q9 @% O& s4 a2 V+ nCONFIG_MANILA_GLUSTERFS_GANESHA_SERVER_IP=
6 d: i1 B, r3 F; X3 N
5 {' \2 c- j3 c9 i
5 ? H7 O" m6 E
. R6 {6 K: ?* R: B5 b4 D# Specify 'y' to set up Horizon communication over https. ['y', 'n']
' T8 D' R |8 m' I- s, v
8 P: M3 [4 ]- [7 x' wCONFIG_HORIZON_SSL=n
& _. r0 u# k" p( Y9 z& ?2 l( p. z9 ~! K
5 ^$ N7 N q: w! K5 [
p6 o5 I) \( z$ N! g7 e" d# Secret key to use for Horizon Secret Encryption Key.+ o0 f! Z! n% j5 V2 f
" L2 U% W0 ~) `3 O5 c6 V* }/ OCONFIG_HORIZON_SECRET_KEY=4c5dae8f4f124d68bf2516083b38b292
( m" T5 Y v$ A- y$ d9 J2 u6 R. ^5 W
8 H" }. G& t2 u/ b" c# |9 e' ^4 M9 z. n; \9 j2 T! S6 h0 D
# PEM-encoded certificate to be used for SSL connections on the https* T& L$ Y4 r7 D5 _
. L6 }- S2 r" Q9 r& U! ^7 }- ~# server. To generate a certificate, leave blank.; O9 n* z( x8 w& v
+ G( e& l; M' ]1 v2 T8 J
CONFIG_HORIZON_SSL_CERT=' h1 C5 u, f8 z
: X2 I- b& x2 H3 M, ~$ ]/ U4 r/ {% |/ C6 K
" j/ m5 X. x+ y# K- [; u' c( v
# SSL keyfile corresponding to the certificate if one was specified.9 C' Y( Q$ I3 Q1 o4 ?9 a$ E
/ F/ a; j9 e+ v7 p( k3 X# The certificate should not require a passphrase.
* Z$ O% Q2 o; x! F a6 n
& E% J' @ C b- L9 K" U; r* LCONFIG_HORIZON_SSL_KEY=; _+ K' T( l4 n: {
0 W: u% B/ ^# ?2 e
( A6 P3 S* S$ ~ o5 w! p$ ~
) d2 M2 B8 X; ? O( sCONFIG_HORIZON_SSL_CACERT=
/ c, ]9 g5 r8 B3 x, l: ?/ B9 E z; p) F2 ~$ K3 N8 L
: r* [7 @" `$ N5 R
$ p' c) s; B% W% i. Q2 }/ }# Password to use for the Object Storage service to authenticate with
# Y+ z1 T& z! c* a4 I8 m" J1 k7 M5 Z- }2 k
# the Identity service.
& P4 X# s2 D" {( L, D4 P7 T6 W9 G' j
CONFIG_SWIFT_KS_PW=dff5fe32de494c99
1 W" O1 ]! e' M- t! D5 ^" C. T L1 M3 W6 d" U W4 R d% P U
; a: e1 T0 ^ C, y
4 K# p% V$ R6 m* H: N) u
# Comma-separated list of devices to use as storage device for Object9 A9 v( k; V, p) V2 ~
3 Z7 n0 k4 }' z I! j# Storage. Each entry must take the format /path/to/dev (for example,8 o' a, q5 G; _% t
# i& T( k; C; s* J$ l
# specifying /dev/vdb installs /dev/vdb as the Object Storage storage, N0 i% V! W3 X
0 h6 I/ E' ], X$ B
# device; Packstack does not create the filesystem, you must do this3 z% U: L" Y2 S! G& b
. z, y3 ?+ ?* \0 x" T; i' c/ |# first). If left empty, Packstack creates a loopback device for test
, {$ c5 N8 c7 ~
! H @0 |7 s9 r4 m7 d: a# setup.7 G9 H/ p; v/ {/ p" [
5 \! G- t1 A$ V a9 K: L& a' yCONFIG_SWIFT_STORAGES=
# @4 b p$ l4 z; [; u6 u8 O
" S5 t$ _" F+ @0 H, D( G: C
% f t8 o4 e% y ? l0 X& Y4 ^# L* C# |6 n; C1 d
# Number of Object Storage storage zones; this number MUST be no
0 X1 w7 }; R9 B% m# u' h- T
0 s9 z d: A4 ]9 o1 R o# larger than the number of configured storage devices.
: f% c0 U& Z6 Y, \7 S q
7 s; I. }- m F5 V. h9 q# U, R% [CONFIG_SWIFT_STORAGE_ZONES=1# F6 e9 C- P5 ?
7 m/ H8 A; m' s, S* p9 X6 m- ~+ }; H/ a
0 b8 g9 s; O: g9 w9 H, ~9 `& M
* Q% f$ w) h7 O' a% o: C p
# Number of Object Storage storage replicas; this number MUST be no" h1 L d0 T5 {
4 \( g1 a7 y; n8 z& ^2 J0 J! E# larger than the number of configured storage zones.
& h7 y* ]' Y- { g, P* n( N; j8 M; D
& Z4 s" G) U4 W4 J3 fCONFIG_SWIFT_STORAGE_REPLICAS=19 F+ v0 n! V3 I9 Y
3 r/ e6 ^3 T* V# b5 o4 p+ k9 l6 D- M
$ W# J7 _1 O/ W+ P
& A/ f* {2 A$ ~& W8 y
# File system type for storage nodes. ['xfs', 'ext4']
J: b7 w! d/ m9 A8 p. V3 P' W
7 b* t& c! b3 t0 @$ s, ^CONFIG_SWIFT_STORAGE_FSTYPE=ext4# n1 K3 b% l2 A: ^+ k% {
0 K6 F! z& c; i9 b% P% O* x1 i3 b- U' i9 r4 h
: r# g" \( v# o- X* X4 R
# Custom seed number to use for swift_hash_path_suffix in
6 N; I7 t( j1 s! t$ V4 D; i o1 h$ R( o/ d% Y% f
# /etc/swift/swift.conf. If you do not provide a value, a seed number
2 b' H" X# C5 t' [ w, |$ g* D
/ Y2 P! m, B4 ^# is automatically generated.) K7 n& `3 S/ ]- r
4 a/ k3 Z0 a% F! [# d
CONFIG_SWIFT_HASH=01da2433204e416b
! w7 y3 P( T) R) C" F. l( |7 U+ `+ i" ~7 E# |5 Z2 N, k3 U5 Q0 k* S2 _
' j! `4 j! v& I2 i: H4 i' c" W; }
# Size of the Object Storage loopback file storage device.$ A/ [; o: q; S! d
3 V# V0 w0 b3 p7 M9 YCONFIG_SWIFT_STORAGE_SIZE=2G& ^6 {: a% J1 F- w
9 u4 {$ o {2 u* @/ n4 H9 P' s" d7 k& [1 n
& ~5 [9 j- C" s9 g3 k7 ^" r* [: D# Password used by Orchestration service user to authenticate against
( a& D" ~ K* [# ~) ^) V2 `+ k8 C. B
# the database.
* @" }, z/ M9 w. h- b- k: G9 d3 V7 Y. o
CONFIG_HEAT_DB_PW=PW_PLACEHOLDER6 j. ]* I' I* m+ l9 }- b' G7 H
8 a" ~ Z3 K8 v9 g- p" H' E( s
- l0 y! h$ x$ s- J6 K, X; D9 p9 N- W U: `
# Encryption key to use for authentication in the Orchestration% l. t( `1 k/ z7 O1 g
& f% h& K! F4 @% D# database (16, 24, or 32 chars).5 R% d; Q h- y. r
6 k- a* p! i3 P- l# ~& v3 ZCONFIG_HEAT_AUTH_ENC_KEY=8aecdfeb31124de5* c5 s3 i; w2 C8 L) Z
4 G4 b/ R7 J3 y8 i6 d
% j& J/ G" s# w5 j
: J; J3 G' S4 C* g- @, X# Password to use for the Orchestration service to authenticate with3 z9 A' z- u+ x+ V
3 k. @5 @. ]4 I5 Z3 k2 a7 k y
# the Identity service.
/ o$ s5 ^# g' }- E6 A C C# [/ N7 d3 t) P* c0 g
CONFIG_HEAT_KS_PW=PW_PLACEHOLDER7 v) X$ f6 q8 E6 F+ V
; h+ H, \1 _# Y- [' i6 Z
$ m+ U, ], E' P4 M6 S' I7 Q* m4 X" `, n1 ~) _5 C- J
# Specify 'y' to install the Orchestration CloudWatch API. ['y', 'n']$ p! r h2 R% M. r) f
! |, v$ L7 R3 A' d, a
CONFIG_HEAT_CLOUDWATCH_INSTALL=n. e. `* g) j7 P+ H: {
3 C8 ]' H" A5 `' R! P
) |$ R) A3 E& |/ X
$ B$ N0 g6 j) B7 E, f( _' _; A# Specify 'y' to install the Orchestration CloudFormation API. ['y',! U& `* d6 s+ d, C& ]. X& ^$ q: K
2 o" w% s9 B$ s# M( B/ T& E# 'n']" I$ ?) t1 S; U8 J, V* H" t
: B" p$ ~ C% O7 S# p7 c% [/ b
CONFIG_HEAT_CFN_INSTALL=n
4 |9 \ }2 I+ F' N
9 S/ n: n5 G& g, f c) F5 X+ ]0 r0 {" P3 ^% D0 h5 [* M
3 Q2 ? G1 Q' `# Name of the Identity domain for Orchestration.
% b3 m5 y2 F, Y3 D2 f. X7 C
1 P1 T" U7 p7 ECONFIG_HEAT_DOMAIN=heat2 t$ {3 k; h( R# N0 h* w4 Q F! Y
. l1 C! @- g9 z+ X
6 }5 ^* i% x4 L1 F) j8 L
5 H9 E8 u) i1 \$ w0 Q4 G! O# Name of the Identity domain administrative user for Orchestration.
6 O, e- k* w) ]$ ~. R" \
: g9 Z$ x* H8 u; aCONFIG_HEAT_DOMAIN_ADMIN=heat_admin8 g/ r( Q! l) j# @
% K5 t* {6 E/ }) y E: b2 Q Q
" s5 ]% X) b! ~7 s! `' [ I; L: E: L3 n& c9 q0 P
# Password for the Identity domain administrative user for4 Y# C$ R" c, D! A
3 z8 ]. F8 p0 c: X \
# Orchestration.) ^' U8 x. J6 ` J+ m
5 m+ D* T6 Q- a CCONFIG_HEAT_DOMAIN_PASSWORD=PW_PLACEHOLDER- R E9 b5 f! f" C ] `
7 N7 e3 x3 K: G9 B
& H: S0 O& U% S
9 @/ @2 r3 x; {: q# Specify 'y' to provision for demo usage and testing. ['y', 'n'] J+ y/ r6 `; J0 o U9 A
, s% F- b$ S2 \$ S+ P( n- f% @CONFIG_PROVISION_DEMO=y* C, k8 |% v8 J, F& A# Q ~
+ g) F1 p9 h/ ^8 j, z
4 ]& l# n5 m3 l5 A: q# |( i& c0 J. W/ \! \/ P7 W) B
# Specify 'y' to configure the OpenStack Integration Test Suite( d+ Y) I- A0 s6 j* x N$ J
% k% ~0 ]) `4 w* b$ @
# (tempest) for testing. The test suite requires OpenStack Networking6 |( s$ C& C& u
# t% X5 n! |! V: ^, O# to be installed. ['y', 'n']
]" ?/ B. ~% B
M/ Y: Y+ G: d+ O# [CONFIG_PROVISION_TEMPEST=n
1 y. Y/ u6 c; {
. h" V c) T$ x" F6 |( {7 T! U" m( T; Y* \3 `6 B
& N- Q! v9 ?+ E& j v& u: `# CIDR network address for the floating IP subnet.8 V9 {; y. w, u6 U6 h
' N7 o% [, Z$ X7 [+ L6 \% ~. YCONFIG_PROVISION_DEMO_FLOATRANGE=172.24.4.224/288 O" G; ~- L: d ~+ P% b
0 m2 ]6 t7 d0 P$ e* u
0 W9 f4 f* \- P# a) V/ [7 o
9 `* s) e Z) t: ^
# The name to be assigned to the demo image in Glance (default$ d3 i8 R H0 H& g9 Q! O9 i- e& h2 s
) x2 ?. ^% g `, K6 [8 r# "cirros").' I" }; u Q6 s9 y
$ ]# W0 D$ A% U. u* y; ~3 e
CONFIG_PROVISION_IMAGE_NAME=cirros+ Y$ D( j8 |/ ^
& w$ U$ a1 A$ p# m9 `0 g% t# q7 `; r& e7 Z4 q
5 L! |. d/ M/ H$ D- |" L+ I
# A URL or local file location for an image to download and provision
) _9 d2 G, u( g9 \4 C' P, J
0 o- v7 K0 W5 K# in Glance (defaults to a URL for a recent "cirros" image).
! _' u% x/ E4 y7 e. l( E" p6 ], x& T% x% Z8 Y+ d* \4 x+ x
CONFIG_PROVISION_IMAGE_URL=http://192.168.117.129/centos/help/files/cirros-0.3.4-x86_64-disk.img
\2 C }1 i3 _, _
; [2 Y+ e. w1 M* u% l. R9 u
7 B/ R* ^, j# M5 ?1 _. ~6 p: }, A4 k# t6 x: U' `3 u, G
# Format for the demo image (default "qcow2").
+ v2 _" y" P9 L" O" h/ ?
( t; t7 Q1 \- t1 U- q6 C/ SCONFIG_PROVISION_IMAGE_FORMAT=qcow2
- v. R; o! G* q5 K- {9 V) J
6 z( z) F9 \6 b( j0 w* `/ r ~6 }) b* |8 z/ `9 `, x
$ t( p- H3 o9 z6 X; E# x- y
# User to use when connecting to instances booted from the demo3 N6 e* X0 u* |( ?5 s
2 a! E% _2 h4 K4 u& _
# image.+ W! C O9 H m% w$ f
: Z/ E" |. C2 n. z% |% n: `CONFIG_PROVISION_IMAGE_SSH_USER=cirros( F) f z! L: f6 Q! L0 z
; n9 z9 ?* N' k9 Z$ N+ C( u; W& H
0 z: E" O9 o' ?5 X7 J+ r
: E$ O3 A0 u& G; a: T# ?3 z" PCONFIG_TEMPEST_HOST=
7 Y, w+ T: \2 B9 i; ^- h
/ P: |5 u* e8 R' V
8 F' Q" t. Z9 H
/ v& C+ Z# B2 j8 u# P# Name of the Integration Test Suite provisioning user. If you do not
, P1 w7 T$ Q: G S; t
2 s1 b% J' m6 E+ i F5 `, s# provide a user name, Tempest is configured in a standalone mode./ S9 }1 F8 p8 @ G
3 {! Z0 j' L9 \0 U% P$ O6 d5 sCONFIG_PROVISION_TEMPEST_USER=
+ n! F, I9 F; }5 X% R2 p; p9 E' c: Z6 {1 o3 A" o6 O
3 N% W/ e6 A" x: y3 E4 s" H$ ~) o; Q1 a* [) v7 z
# Password to use for the Integration Test Suite provisioning user.
! U, }4 i* ]7 R# ?: Q) I: u; g- D
! _; V; D* m, jCONFIG_PROVISION_TEMPEST_USER_PW=PW_PLACEHOLDER
% I7 C) ^; s+ E& u/ Z: _4 l3 v0 z- r
. B- R( @1 e5 j; u. a+ b) N4 a; _
( s9 h: X8 ?& P$ ~; E9 `) V# CIDR network address for the floating IP subnet.' B8 A `* }/ B9 A2 N0 u# ^. `7 E
. z: b- e: i8 ZCONFIG_PROVISION_TEMPEST_FLOATRANGE=172.24.4.224/28
0 I9 t* I9 V; R' ?3 ^7 N8 ^' x" t1 W7 g" I
8 r, w) ]( _0 X7 o# E/ v2 _+ o- {1 o: b3 C! U& T8 S
# URI of the Integration Test Suite git repository.
* Z- c4 ]9 z* }( @2 f
/ V. C) j7 O. ] W. }CONFIG_PROVISION_TEMPEST_REPO_URI=https://github.com/openstack/tempest.git: a. y8 x7 N$ T3 P3 z
* o7 I* d9 y& t5 y1 r- e' n
1 J8 e& w k9 C+ m( z6 i# M: u: Z
# Revision (branch) of the Integration Test Suite git repository.
& n. ^0 M3 A D: G! _
. O# n* a9 j. U" u& k& sCONFIG_PROVISION_TEMPEST_REPO_REVISION=master( \) O4 w* a2 }1 k6 T0 ?2 ?: q% i
; I' a ~2 Q) \* y+ p/ z0 v, y: z. ^% G% u+ O
I# _ J# E$ Z$ [# Specify 'y' to run Tempest smoke test as last step of installation.
3 ]& P8 _6 z0 C! E% P7 l+ X; d$ b$ a! g5 d" z, L- U
CONFIG_RUN_TEMPEST=n
- E; o% z) W- |1 e/ D/ s
! m) Q5 e, L8 ~# ` G- j2 j$ V
0 L, s+ m. C' ~' H2 c5 n) A' j1 M; ?! V) r/ q
# Test suites to run, example: "smoke dashboard TelemetryAlarming".1 J8 N9 K. \+ @, i) W( p6 k$ U
" ]( g h6 Q# `$ R* e8 s1 k
# Optional, defaults to "smoke".
. G* c# \. m' |! _8 B; i! Q$ @* o
CONFIG_RUN_TEMPEST_TESTS=smoke1 m/ R# E H! [: ]7 ~6 O
$ c; P8 r+ m7 p: _
D6 G# [, W. [, O, X
y6 J/ o5 d0 `7 t5 ~ t8 c# Specify 'y' to configure the Open vSwitch external bridge for an* V2 E8 C: p& F' E
& w0 m+ b2 L7 A" Y' [8 r
# all-in-one deployment (the L3 external bridge acts as the gateway
9 t; J. K; X6 G9 R0 H1 }; ~. T& ]; m6 N+ p( u" t5 }" |) @
# for virtual machines). ['y', 'n']
. A: V$ [% d8 e4 B5 d: z" D. A9 z. U2 ~: U) t: s1 i# v
CONFIG_PROVISION_OVS_BRIDGE=y
! ~, a, W# e. F' t
# i2 t- q1 I( L/ P& D
: h8 ?9 v1 x( H
8 H' F1 Q1 P, b7 ?( M- d8 F# Password to use for Gnocchi to access the database.
6 Z+ d& O W; u. F0 e8 j3 z1 ~. Z$ M. t+ \0 |( d% @
CONFIG_GNOCCHI_DB_PW=f40e4c770e3b4d1c
M: U/ k% G0 h' `
+ T6 `! ^1 V6 t+ C/ [9 v, B- u( Q+ w7 Z* Z" E
* V% A2 N1 Z% S* _$ U; s, J8 ~3 Q# Password to use for Gnocchi to authenticate with the Identity* s* N" {9 _+ Q8 u' Q+ k. L5 M
# v, }- e+ Y8 q% E6 u
# service.
) {" n* D6 ~3 j& Y. V3 Q: D4 T
, s g! Q$ P; X* {CONFIG_GNOCCHI_KS_PW=314a530c538048f9 o. s+ ]& J( u( x9 e' ^6 h9 R
) m& B Z& W0 k1 }& n+ p
+ N+ d) `9 D7 ^5 [: U/ M; S) M
* P8 _. x3 g" d: } ~' Z# Secret key for signing Telemetry service (ceilometer) messages.
7 B [7 l# E0 a9 P! f; Q4 Q3 T* O. y" Q1 ~2 Z+ [
CONFIG_CEILOMETER_SECRET=e0dccc8ed8024c16& a* ~" l( \- P6 L
2 `* L& v f/ p6 u3 Q. E% x
; b* l% c! E& R: k5 A" n2 {
& Q+ J. T R: N/ j2 x9 A" R( u# Password to use for Telemetry to authenticate with the Identity" w! X6 p% @7 w1 ~
+ e3 X$ g" y7 @, T# service.* w3 z- _& }$ b6 H* Z! P* F
# e8 u8 X* h, N+ XCONFIG_CEILOMETER_KS_PW=4c2b90ee71664e5e% F6 t5 b: u3 w6 P' u; u0 ^0 w
$ X& k6 O j% ]2 E) [4 |4 c( s K
( a6 L0 u i' U3 R
# u- E$ v2 F2 A, H% ]' j2 W7 N5 V# Ceilometer service name. ['httpd', 'ceilometer']( u3 e& v# \8 \; B6 Z
9 j/ B' D- q+ K/ @3 b, H+ ]CONFIG_CEILOMETER_SERVICE_NAME=httpd
: s4 n) \. N. A# p* ? Q, j: `& ~% W V/ l/ d6 f1 ?1 H
( L+ ~9 Y2 _! ~
. Z6 `8 `9 A, r0 X! e# Backend driver for Telemetry's group membership coordination.5 H3 `! U' E! d9 K
* g$ y: I0 l7 C5 k z0 `; h# ['redis', 'none']6 G5 t4 \ k$ o* S8 `6 p j
6 r' ^7 o( t- M7 p! E a$ M
CONFIG_CEILOMETER_COORDINATION_BACKEND=redis
* K+ e, V# Q" {, k8 p6 }5 f1 t5 P
' y" ]1 C# y/ G( x! m
/ E% |9 V4 Z* C2 |
# Backend driver for Telemetry's metering backend configuration.
& X$ z ]. e- v |& k2 h# ? S- ?- y; H! R' S( ` d
# ['database', 'gnocchi']' X1 J4 J9 C2 L" L2 w1 o; A
/ }/ t' E8 d3 J& j/ X4 o( fCONFIG_CEILOMETER_METERING_BACKEND=database
. E: `7 Z3 _: i9 b/ c( J- i4 X& J m* |" Y* v9 W
, U4 Z, f& g: L1 }
: {" K5 n8 G) _0 G' g* f0 V# IP address of the server on which to install MongoDB.
- G* U- y7 G3 x! C
! K7 a/ u9 w8 H5 m4 w* b" SCONFIG_MONGODB_HOST=10.0.2.15
* v9 ~4 A |! x+ I- L/ o0 ~
% m2 Y- Z0 {! v+ m O
: U* |2 C8 `3 d
9 P* M6 R4 x: i: @# IP address of the server on which to install the Redis master! b' M, M- N3 P) @
% U2 w# y0 p" W! U3 d# server.5 j$ c0 a) u( h* C0 F" L
5 Y# |$ U1 A1 E0 {) d
CONFIG_REDIS_MASTER_HOST=10.0.2.153 b1 \0 I# M0 i" {) U& L
- R! n$ }) C' W* p5 w8 f
) ]: |& x3 S0 ^
2 d6 Z* j& U5 V7 E [# Port on which the Redis server(s) listens. h/ s1 E" t6 o
. {% |& k$ \3 V/ X; p' u% } ]3 ?
CONFIG_REDIS_PORT=63798 V/ P2 i& y/ z" L, V* H% j- `
& I3 R: X5 a4 t0 v# f( D: k, W' h( x9 X+ u x* r0 }- f2 E
) V+ {7 U8 |' i. ~8 _! {
# Specify 'y' to have Redis try to use HA. ['y', 'n']
/ |, ?( h L) S1 I" F* b1 a: K2 f9 d7 K+ c8 }1 r/ [ w+ b
CONFIG_REDIS_HA=n
+ `7 q+ N6 \5 V0 u) H7 f% p. c, x9 i) k
" j- b+ d* j$ A1 ~: c" s5 I
) j8 ~8 k6 _9 y! l& K4 [# Hosts on which to install Redis slaves.$ p2 Y, |# u0 @1 H; @5 F
% I5 n# J. l+ Y2 Q
CONFIG_REDIS_SLAVE_HOSTS=10.0.2.15. |$ T* M3 ~' y7 q1 ]% `( O( `
7 s$ i2 k9 H+ J/ H
" _. I, _4 t8 b& m; h
2 ]. }4 l3 Q7 ]3 n
# Hosts on which to install Redis sentinel servers.4 T5 z1 c0 h: F5 ]
. q1 D6 |9 f- o: ]
CONFIG_REDIS_SENTINEL_HOSTS=10.0.2.15* a3 q9 \ A! w- `, L; ?
' K" z( o8 `' Q* j- `+ D# c: [2 [
( ^! S0 t/ ]; }5 g/ ]. w3 L
# Host to configure as the Redis coordination sentinel.5 X. i0 s/ R9 i, K& H# G+ [
6 Z4 }+ s6 [, H/ R" T* @CONFIG_REDIS_SENTINEL_CONTACT_HOST=10.0.2.15! b. s3 n0 \) I5 I8 n
* t* f; k+ u, x- r& l1 o" [# X
% S& Q2 s9 W( z b6 z
9 ~2 e3 I' G& Z! y. h, N# Port on which Redis sentinel servers listen.
" a2 |. w) g% H; c
5 H. V5 I7 e8 lCONFIG_REDIS_SENTINEL_PORT=26379: E7 V+ x5 O$ w/ I6 f
$ B1 j, n$ h# T2 j1 }) @, i
* ^& {% |- m9 C1 |
% Z4 B- }" G* q& j, @$ r! K# Quorum value for Redis sentinel servers.
. R4 l% t, I. g0 g8 E1 M/ l1 M+ w. P1 [- _
CONFIG_REDIS_SENTINEL_QUORUM=2
( X$ {+ ^ N% Y& |" J' q/ p3 g
2 {6 O* a* b j+ Q6 H6 k3 N0 `+ t
, R; }9 c( y- b. M- S# Name of the master server watched by the Redis sentinel. ['[a-z]+']) v+ r9 E4 H% ^' D* j% r. O
3 a0 r. K# Q% f& s9 i' F' o
CONFIG_REDIS_MASTER_NAME=mymaster
7 H. r) K; E! G6 Q; g( p( c l% _: c7 W
) N: W% W8 w# T- c" E4 e
7 o/ s1 L' X/ x2 y1 @# Password to use for Telemetry Alarming to authenticate with the" S8 _: w1 q7 Y2 @* o
; ?, J7 F6 L8 E4 e6 }# s
# Identity service.3 c2 ^9 _6 b5 |7 c( G! L
: T/ l7 _3 k! FCONFIG_AODH_KS_PW=739a1dae2a254e6a
7 q) e8 f) n0 Q- v5 W- h% r6 M8 s1 ~
6 Z" N" V" j3 a+ L4 n1 R6 J0 t& }
2 M! f* [2 t' h" k! c
# Password to use for OpenStack Database-as-a-Service (trove) to- F/ c# q5 m& q7 t
. F( {- L# i( K8 s" Y: i
# access the database.+ G$ B" ~" G3 K+ T# @
+ \- J: N5 P% F; S) Z3 l
CONFIG_TROVE_DB_PW=PW_PLACEHOLDER p( o Z- A8 `
b" } v. i2 N0 _5 Z! B2 b& ]) m. W6 i8 u0 |/ H4 Q2 @
0 }7 o5 p$ a8 W V; }
# Password to use for OpenStack Database-as-a-Service to authenticate
( W: x) H3 V4 g& X1 G! K- Z0 M/ a6 p B- r
7 e9 R$ }8 [3 N: C# with the Identity service.
+ Z0 }; a* `. E. L- |2 F& r, j1 Q+ B ]7 j1 u. a# r& ^+ ]( E2 z
CONFIG_TROVE_KS_PW=PW_PLACEHOLDER2 g5 g' `: w% m! n
! b% H; n, N& ?0 x u
: L& \# B$ j" X8 D4 |# k N" _, n% N% T% Q$ H
# User name to use when OpenStack Database-as-a-Service connects to- j% `/ g9 d+ L& \
2 G4 g! H3 Y+ ?. q
# the Compute service.
, B, o3 ^( b0 @9 t$ M; M
, J- T% E* j h+ I. Y# MCONFIG_TROVE_NOVA_USER=trove0 G7 U9 h( j/ a4 m0 g w
* ], ^) o# x" {; X8 o6 A7 O: P
7 G" ]3 a5 J3 p I3 i
& P! m/ U- _5 Q1 E. |8 `+ x# Tenant to use when OpenStack Database-as-a-Service connects to the
: F/ r' B( g+ V1 }# ?, N+ z; I7 Z" A' D/ M3 ~/ H
# Compute service.
c9 F! b/ x+ c. U6 R% S
( o3 D5 k% j& B2 b; YCONFIG_TROVE_NOVA_TENANT=services
- v. Q4 E# A+ t% N7 d6 [* f* ^- C+ Q, s; k
% V+ M, b4 R; W! [: q* @. b7 {% `6 j) g
# Password to use when OpenStack Database-as-a-Service connects to: e2 ?$ o+ \) y8 G! B! W; ]
3 c# A' g( J# s+ m5 M; n- _# the Compute service.
" _% B% l9 Q6 s* p6 L# n* j5 x, U3 A2 H- W. n! W
CONFIG_TROVE_NOVA_PW=PW_PLACEHOLDER
! _, y$ f; H5 N; P1 t2 s( b6 f. X$ ]3 ]! a
% c _$ f3 G+ _3 H4 y2 N
5 f/ ?. v$ T' a; P
# Password to use for OpenStack Data Processing (sahara) to access
' r: B5 b0 }. G7 N, e
0 c- m* h9 [7 k5 l- V# the database.8 m* u- _+ e: Y
8 W7 r# P) _1 c1 b& \- C+ JCONFIG_SAHARA_DB_PW=PW_PLACEHOLDER
, R3 X2 |* d( A* H3 p5 e, b) X# G7 F0 ~9 C1 z
6 t8 B7 m7 w( T6 r" N
! A- _! S3 I- i' t5 [# Password to use for OpenStack Data Processing to authenticate with
* U( b- m1 d% C' q4 p, z1 q& i! V% ^6 t6 R2 ^8 l
# the Identity service.
) d7 @( G' }+ ~3 [
" g" K( T% z& Q3 a) \1 X2 M, qCONFIG_SAHARA_KS_PW=PW_PLACEHOLDER3 k1 O' ]" [( p! v4 y5 u
+ u* ]: k. p* _# g6 o6 {6 o g7 D O8 T
, U! A* b. Y7 |& f
; C& t! _4 G2 T, R7 A( p) }) l# Password of the nagiosadmin user on the Nagios server.
' q9 v4 G! S4 ^" b! m5 l
+ T+ A6 { t6 DCONFIG_NAGIOS_PW=d346f2fb71ef489a
, y7 s+ E- [# L* U# L7 X
8 ?/ h3 s8 _( z! l: f8 x |
|
发表于 2018-9-26 09:36:10