37 # nova_client_priv_key = |
37 # nova_client_priv_key = |
38 |
38 |
39 # When proxying metadata requests, Neutron signs the Instance-ID header with a |
39 # When proxying metadata requests, Neutron signs the Instance-ID header with a |
40 # shared secret to prevent spoofing. You may select any string for a secret, |
40 # shared secret to prevent spoofing. You may select any string for a secret, |
41 # but it must match here and in the configuration used by the Nova Metadata |
41 # but it must match here and in the configuration used by the Nova Metadata |
42 # Server. NOTE: Nova uses a different key: neutron_metadata_proxy_shared_secret |
42 # Server. NOTE: Nova uses the same config key, but in [neutron] section. |
43 # metadata_proxy_shared_secret = |
43 # metadata_proxy_shared_secret = |
44 |
44 |
45 # Location of Metadata Proxy UNIX domain socket |
45 # Location of Metadata Proxy UNIX domain socket |
46 # metadata_proxy_socket = $state_path/metadata_proxy |
46 # metadata_proxy_socket = $state_path/metadata_proxy |
|
47 |
|
48 # Metadata Proxy UNIX domain socket mode, 3 values allowed: |
|
49 # 'deduce': deduce mode from metadata_proxy_user/group values, |
|
50 # 'user': set metadata proxy socket mode to 0o644, to use when |
|
51 # metadata_proxy_user is agent effective user or root, |
|
52 # 'group': set metadata proxy socket mode to 0o664, to use when |
|
53 # metadata_proxy_group is agent effective group, |
|
54 # 'all': set metadata proxy socket mode to 0o666, to use otherwise. |
|
55 # metadata_proxy_socket_mode = deduce |
47 |
56 |
48 # Number of separate worker processes for metadata server. Defaults to |
57 # Number of separate worker processes for metadata server. Defaults to |
49 # half the number of CPU cores |
58 # half the number of CPU cores |
50 metadata_workers = 1 |
59 metadata_workers = 1 |
51 |
60 |