components/openstack/glance/files/glance-scrubber.conf
changeset 6852 bf55de364b19
parent 6176 8b75bcaa9d4d
child 6866 4c1935f5ec9a
equal deleted inserted replaced
6851:f984e52b96bb 6852:bf55de364b19
    42 
    42 
    43 # Whether to include the backend image locations in image properties.
    43 # Whether to include the backend image locations in image properties.
    44 # For example, if using the file system store a URL of
    44 # For example, if using the file system store a URL of
    45 # "file:///path/to/image" will be returned to the user in the
    45 # "file:///path/to/image" will be returned to the user in the
    46 # 'direct_url' meta-data field. Revealing storage location can be a
    46 # 'direct_url' meta-data field. Revealing storage location can be a
    47 # security risk, so use this setting with caution!  The overrides
    47 # security risk, so use this setting with caution! Setting this to
    48 # show_image_direct_url. (boolean value)
    48 # true overrides the show_image_direct_url option. (boolean value)
    49 #show_multiple_locations = false
    49 #show_multiple_locations = false
    50 
    50 
    51 # Maximum size of image a user can upload in bytes. Defaults to
    51 # Maximum size of image a user can upload in bytes. Defaults to
    52 # 1099511627776 bytes (1 TB).WARNING: this value should only be
    52 # 1099511627776 bytes (1 TB). WARNING: this value should only be
    53 # increased after careful consideration and must be set to a value
    53 # increased after careful consideration and must be set to a value
    54 # under 8 EB (9223372036854775808). (integer value)
    54 # under 8 EB (9223372036854775808). (integer value)
       
    55 # Maximum value: 9223372036854775808
    55 #image_size_cap = 1099511627776
    56 #image_size_cap = 1099511627776
    56 
    57 
    57 # Set a system wide quota for every user. This value is the total
    58 # Set a system wide quota for every user. This value is the total
    58 # capacity that a user can use across all storage systems. A value of
    59 # capacity that a user can use across all storage systems. A value of
    59 # 0 means unlimited.Optional unit can be specified for the value.
    60 # 0 means unlimited. Optional unit can be specified for the value.
    60 # Accepted units are B, KB, MB, GB and TB representing Bytes,
    61 # Accepted units are B, KB, MB, GB and TB representing Bytes,
    61 # KiloBytes, MegaBytes, GigaBytes and TeraBytes respectively. If no
    62 # KiloBytes, MegaBytes, GigaBytes and TeraBytes respectively. If no
    62 # unit is specified then Bytes is assumed. Note that there should not
    63 # unit is specified then Bytes is assumed. Note that there should not
    63 # be any space between value and unit and units are case sensitive.
    64 # be any space between value and unit and units are case sensitive.
    64 # (string value)
    65 # (string value)
    79 # The hostname/IP of the pydev process listening for debug connections
    80 # The hostname/IP of the pydev process listening for debug connections
    80 # (string value)
    81 # (string value)
    81 #pydev_worker_debug_host = <None>
    82 #pydev_worker_debug_host = <None>
    82 
    83 
    83 # The port on which a pydev process is listening for connections.
    84 # The port on which a pydev process is listening for connections.
    84 # (integer value)
    85 # (port value)
       
    86 # Minimum value: 0
       
    87 # Maximum value: 65535
    85 #pydev_worker_debug_port = 5678
    88 #pydev_worker_debug_port = 5678
    86 
    89 
    87 # AES key for encrypting store 'location' metadata. This includes, if
    90 # AES key for encrypting store 'location' metadata. This includes, if
    88 # used, Swift or S3 credentials. Should be set to a random string of
    91 # used, Swift or S3 credentials. Should be set to a random string of
    89 # length 16, 24 or 32 bytes (string value)
    92 # length 16, 24 or 32 bytes (string value)
    90 #metadata_encryption_key = <None>
    93 #metadata_encryption_key = <None>
    91 
    94 
    92 # Digest algorithm which will be used for digital signature; the
    95 # Digest algorithm which will be used for digital signature. Use the
    93 # default is sha1 the default in Kilo for a smooth upgrade process,
       
    94 # and it will be updated with sha256 in next release(L). Use the
       
    95 # command "openssl list-message-digest-algorithms" to get the
    96 # command "openssl list-message-digest-algorithms" to get the
    96 # available algorithms supported by the version of OpenSSL on the
    97 # available algorithms supported by the version of OpenSSL on the
    97 # platform. Examples are "sha1", "sha256", "sha512", etc. (string
    98 # platform. Examples are "sha1", "sha256", "sha512", etc. (string
    98 # value)
    99 # value)
    99 #digest_algorithm = sha1
   100 #digest_algorithm = sha256
   100 
       
   101 # Directory that the scrubber will use to track information about what
       
   102 # to delete. Make sure this is set in glance-api.conf and glance-
       
   103 # scrubber.conf. (string value)
       
   104 #scrubber_datadir = /var/lib/glance/scrubber
       
   105 
   101 
   106 # The amount of time in seconds to delay before performing a delete.
   102 # The amount of time in seconds to delay before performing a delete.
   107 # (integer value)
   103 # (integer value)
   108 #scrub_time = 0
   104 #scrub_time = 0
   109 
   105 
   110 # A boolean that determines if the scrubber should clean up the files
   106 # The size of thread pool to be used for scrubbing images. The default
   111 # it uses for taking data. Only one server in your deployment should
   107 # is one, which signifies serial scrubbing. Any value above one
   112 # be designated the cleanup host. (boolean value)
   108 # indicates the max number of images that may be scrubbed in parallel.
   113 #cleanup_scrubber = false
   109 # (integer value)
       
   110 #scrub_pool_size = 1
   114 
   111 
   115 # Turn on/off delayed delete. (boolean value)
   112 # Turn on/off delayed delete. (boolean value)
   116 #delayed_delete = false
   113 #delayed_delete = false
   117 
   114 
   118 # Items must have a modified time that is older than this value in
   115 # Role used to identify an authenticated user as administrator.
   119 # order to be candidates for cleanup. (integer value)
   116 # (string value)
   120 #cleanup_scrubber_time = 86400
   117 #admin_role = admin
       
   118 
       
   119 # Whether to pass through headers containing user and tenant
       
   120 # information when making requests to the registry. This allows the
       
   121 # registry to use the context middleware without keystonemiddleware's
       
   122 # auth_token middleware, removing calls to the keystone auth service.
       
   123 # It is recommended that when using this option, secure communication
       
   124 # between glance api and glance registry is ensured by means other
       
   125 # than auth_token middleware. (boolean value)
       
   126 #send_identity_headers = false
   121 
   127 
   122 # Loop time between checking for new items to schedule for delete.
   128 # Loop time between checking for new items to schedule for delete.
   123 # (integer value)
   129 # (integer value)
   124 #wakeup_time = 300
   130 #wakeup_time = 300
   125 
   131 
   127 # the scrub operation once and then exits. When specified do not exit
   133 # the scrub operation once and then exits. When specified do not exit
   128 # and run scrub on wakeup_time interval as specified in the config.
   134 # and run scrub on wakeup_time interval as specified in the config.
   129 # (boolean value)
   135 # (boolean value)
   130 daemon = true
   136 daemon = true
   131 
   137 
       
   138 # The protocol to use for communication with the registry server.
       
   139 # Either http or https. (string value)
       
   140 #registry_client_protocol = http
       
   141 
       
   142 # The path to the key file to use in SSL connections to the registry
       
   143 # server, if any. Alternately, you may set the GLANCE_CLIENT_KEY_FILE
       
   144 # environment variable to a filepath of the key file (string value)
       
   145 #registry_client_key_file = <None>
       
   146 
       
   147 # The path to the cert file to use in SSL connections to the registry
       
   148 # server, if any. Alternately, you may set the GLANCE_CLIENT_CERT_FILE
       
   149 # environment variable to a filepath of the CA cert file (string
       
   150 # value)
       
   151 #registry_client_cert_file = <None>
       
   152 
       
   153 # The path to the certifying authority cert file to use in SSL
       
   154 # connections to the registry server, if any. Alternately, you may set
       
   155 # the GLANCE_CLIENT_CA_FILE environment variable to a filepath of the
       
   156 # CA cert file. (string value)
       
   157 #registry_client_ca_file = <None>
       
   158 
       
   159 # When using SSL in connections to the registry server, do not require
       
   160 # validation via a certifying authority. This is the registry's
       
   161 # equivalent of specifying --insecure on the command line using
       
   162 # glanceclient for the API. (boolean value)
       
   163 #registry_client_insecure = false
       
   164 
       
   165 # The period of time, in seconds, that the API server will wait for a
       
   166 # registry request to complete. A value of 0 implies no timeout.
       
   167 # (integer value)
       
   168 #registry_client_timeout = 600
       
   169 
   132 # Whether to pass through the user token when making requests to the
   170 # Whether to pass through the user token when making requests to the
   133 # registry. (boolean value)
   171 # registry. To prevent failures with token expiration during big files
       
   172 # upload, it is recommended to set this parameter to False. If
       
   173 # "use_user_token" is not in effect, then admin credentials can be
       
   174 # specified. (boolean value)
       
   175 # This option is deprecated for removal.
       
   176 # Its value may be silently ignored in the future.
       
   177 # Reason: This option was considered harmful and has been deprecated
       
   178 # in M release. It will be removed in O release. For more information
       
   179 # read OSSN-0060. Related functionality with uploading big images has
       
   180 # been implemented with Keystone trusts support.
   134 #use_user_token = true
   181 #use_user_token = true
   135 
   182 
   136 # The administrators user name. If "use_user_token" is not in effect,
   183 # The administrators user name. If "use_user_token" is not in effect,
   137 # then admin credentials can be specified. (string value)
   184 # then admin credentials can be specified. (string value)
       
   185 # This option is deprecated for removal.
       
   186 # Its value may be silently ignored in the future.
       
   187 # Reason: This option was considered harmful and has been deprecated
       
   188 # in M release. It will be removed in O release. For more information
       
   189 # read OSSN-0060. Related functionality with uploading big images has
       
   190 # been implemented with Keystone trusts support.
   138 admin_user = %SERVICE_USER%
   191 admin_user = %SERVICE_USER%
   139 
   192 
   140 # The administrators password. If "use_user_token" is not in effect,
   193 # The administrators password. If "use_user_token" is not in effect,
   141 # then admin credentials can be specified. (string value)
   194 # then admin credentials can be specified. (string value)
       
   195 # This option is deprecated for removal.
       
   196 # Its value may be silently ignored in the future.
       
   197 # Reason: This option was considered harmful and has been deprecated
       
   198 # in M release. It will be removed in O release. For more information
       
   199 # read OSSN-0060. Related functionality with uploading big images has
       
   200 # been implemented with Keystone trusts support.
   142 admin_password = %SERVICE_PASSWORD%
   201 admin_password = %SERVICE_PASSWORD%
   143 
   202 
   144 # The tenant name of the administrative user. If "use_user_token" is
   203 # The tenant name of the administrative user. If "use_user_token" is
   145 # not in effect, then admin tenant name can be specified. (string
   204 # not in effect, then admin tenant name can be specified. (string
   146 # value)
   205 # value)
       
   206 # This option is deprecated for removal.
       
   207 # Its value may be silently ignored in the future.
       
   208 # Reason: This option was considered harmful and has been deprecated
       
   209 # in M release. It will be removed in O release. For more information
       
   210 # read OSSN-0060. Related functionality with uploading big images has
       
   211 # been implemented with Keystone trusts support.
   147 admin_tenant_name = %SERVICE_TENANT_NAME%
   212 admin_tenant_name = %SERVICE_TENANT_NAME%
   148 
   213 
   149 # The URL to the keystone service. If "use_user_token" is not in
   214 # The URL to the keystone service. If "use_user_token" is not in
   150 # effect and using keystone auth, then URL of keystone can be
   215 # effect and using keystone auth, then URL of keystone can be
   151 # specified. (string value)
   216 # specified. (string value)
       
   217 # This option is deprecated for removal.
       
   218 # Its value may be silently ignored in the future.
       
   219 # Reason: This option was considered harmful and has been deprecated
       
   220 # in M release. It will be removed in O release. For more information
       
   221 # read OSSN-0060. Related functionality with uploading big images has
       
   222 # been implemented with Keystone trusts support.
   152 auth_url = http://127.0.0.1:5000/v2.0/
   223 auth_url = http://127.0.0.1:5000/v2.0/
   153 
   224 
   154 # The strategy to use for authentication. If "use_user_token" is not
   225 # The strategy to use for authentication. If "use_user_token" is not
   155 # in effect, then auth strategy can be specified. (string value)
   226 # in effect, then auth strategy can be specified. (string value)
   156 #auth_strategy = noauth
   227 # This option is deprecated for removal.
       
   228 # Its value may be silently ignored in the future.
       
   229 # Reason: This option was considered harmful and has been deprecated
       
   230 # in M release. It will be removed in O release. For more information
       
   231 # read OSSN-0060. Related functionality with uploading big images has
       
   232 # been implemented with Keystone trusts support.
       
   233 auth_strategy = keystone
   157 
   234 
   158 # The region for the authentication service. If "use_user_token" is
   235 # The region for the authentication service. If "use_user_token" is
   159 # not in effect and using keystone auth, then region name can be
   236 # not in effect and using keystone auth, then region name can be
   160 # specified. (string value)
   237 # specified. (string value)
       
   238 # This option is deprecated for removal.
       
   239 # Its value may be silently ignored in the future.
       
   240 # Reason: This option was considered harmful and has been deprecated
       
   241 # in M release. It will be removed in O release. For more information
       
   242 # read OSSN-0060. Related functionality with uploading big images has
       
   243 # been implemented with Keystone trusts support.
   161 #auth_region = <None>
   244 #auth_region = <None>
   162 
   245 
   163 # Address to find the registry server. (string value)
   246 # Address to find the registry server. (string value)
   164 #registry_host = 0.0.0.0
   247 #registry_host = 0.0.0.0
   165 
   248 
   166 # Port the registry server is listening on. (integer value)
   249 # Port the registry server is listening on. (port value)
       
   250 # Minimum value: 0
       
   251 # Maximum value: 65535
   167 #registry_port = 9191
   252 #registry_port = 9191
   168 
   253 
   169 #
   254 #
   170 # From oslo.log
   255 # From oslo.log
   171 #
   256 #
   172 
   257 
   173 # Print debugging output (set logging level to DEBUG instead of
   258 # If set to true, the logging level will be set to DEBUG instead of
   174 # default WARNING level). (boolean value)
   259 # the default INFO level. (boolean value)
   175 #debug = false
   260 #debug = false
   176 
   261 
   177 # Print more verbose output (set logging level to INFO instead of
   262 # If set to false, the logging level will be set to WARNING instead of
   178 # default WARNING level). (boolean value)
   263 # the default INFO level. (boolean value)
   179 #verbose = false
   264 # This option is deprecated for removal.
       
   265 # Its value may be silently ignored in the future.
       
   266 #verbose = true
   180 
   267 
   181 # The name of a logging configuration file. This file is appended to
   268 # The name of a logging configuration file. This file is appended to
   182 # any existing logging configuration files. For details about logging
   269 # any existing logging configuration files. For details about logging
   183 # configuration files, see the Python logging module documentation.
   270 # configuration files, see the Python logging module documentation.
   184 # (string value)
   271 # Note that when logging configuration files are used then all logging
       
   272 # configuration is set in the configuration file and other logging
       
   273 # configuration options are ignored (for example,
       
   274 # logging_context_format_string). (string value)
   185 # Deprecated group/name - [DEFAULT]/log_config
   275 # Deprecated group/name - [DEFAULT]/log_config
   186 #log_config_append = <None>
   276 #log_config_append = <None>
   187 
   277 
   188 # DEPRECATED. A logging.Formatter log message format string which may
   278 # Defines the format string for %%(asctime)s in log records. Default:
   189 # use any of the available logging.LogRecord attributes. This option
   279 # %(default)s . This option is ignored if log_config_append is set.
   190 # is deprecated.  Please use logging_context_format_string and
   280 # (string value)
   191 # logging_default_format_string instead. (string value)
       
   192 #log_format = <None>
       
   193 
       
   194 # Format string for %%(asctime)s in log records. Default: %(default)s
       
   195 # . (string value)
       
   196 #log_date_format = %Y-%m-%d %H:%M:%S
   281 #log_date_format = %Y-%m-%d %H:%M:%S
   197 
   282 
   198 # (Optional) Name of log file to output to. If no default is set,
   283 # (Optional) Name of log file to send logging output to. If no default
   199 # logging will go to stdout. (string value)
   284 # is set, logging will go to stderr as defined by use_stderr. This
       
   285 # option is ignored if log_config_append is set. (string value)
   200 # Deprecated group/name - [DEFAULT]/logfile
   286 # Deprecated group/name - [DEFAULT]/logfile
   201 #log_file = <None>
   287 #log_file = <None>
   202 
   288 
   203 # (Optional) The base directory used for relative --log-file paths.
   289 # (Optional) The base directory used for relative log_file paths.
   204 # (string value)
   290 # This option is ignored if log_config_append is set. (string value)
   205 # Deprecated group/name - [DEFAULT]/logdir
   291 # Deprecated group/name - [DEFAULT]/logdir
   206 #log_dir = <None>
   292 #log_dir = <None>
   207 
   293 
   208 # Use syslog for logging. Existing syslog format is DEPRECATED during
   294 # Uses logging handler designed to watch file system. When log file is
   209 # I, and will change in J to honor RFC5424. (boolean value)
   295 # moved or removed this handler will open a new log file with
       
   296 # specified path instantaneously. It makes sense only if log_file
       
   297 # option is specified and Linux platform is used. This option is
       
   298 # ignored if log_config_append is set. (boolean value)
       
   299 #watch_log_file = false
       
   300 
       
   301 # Use syslog for logging. Existing syslog format is DEPRECATED and
       
   302 # will be changed later to honor RFC5424. This option is ignored if
       
   303 # log_config_append is set. (boolean value)
   210 #use_syslog = false
   304 #use_syslog = false
   211 
   305 
   212 # (Optional) Enables or disables syslog rfc5424 format for logging. If
   306 # Syslog facility to receive log lines. This option is ignored if
   213 # enabled, prefixes the MSG part of the syslog message with APP-NAME
   307 # log_config_append is set. (string value)
   214 # (RFC5424). The format without the APP-NAME is deprecated in I, and
       
   215 # will be removed in J. (boolean value)
       
   216 #use_syslog_rfc_format = false
       
   217 
       
   218 # Syslog facility to receive log lines. (string value)
       
   219 #syslog_log_facility = LOG_USER
   308 #syslog_log_facility = LOG_USER
   220 
   309 
   221 # Log output to standard error. (boolean value)
   310 # Log output to standard error. This option is ignored if
       
   311 # log_config_append is set. (boolean value)
   222 #use_stderr = true
   312 #use_stderr = true
   223 
   313 
   224 # Format string to use for log messages with context. (string value)
   314 # Format string to use for log messages with context. (string value)
   225 #logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
   315 #logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
   226 
   316 
   227 # Format string to use for log messages without context. (string
   317 # Format string to use for log messages when context is undefined.
   228 # value)
   318 # (string value)
   229 #logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
   319 #logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
   230 
   320 
   231 # Data to append to log format when level is DEBUG. (string value)
   321 # Additional data to append to log message when logging level for the
       
   322 # message is DEBUG. (string value)
   232 #logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
   323 #logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
   233 
   324 
   234 # Prefix each line of exception output with this format. (string
   325 # Prefix each line of exception output with this format. (string
   235 # value)
   326 # value)
   236 #logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d TRACE %(name)s %(instance)s
   327 #logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
   237 
   328 
   238 # List of logger=LEVEL pairs. (list value)
   329 # Defines the format string for %(user_identity)s that is used in
   239 #default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN
   330 # logging_context_format_string. (string value)
       
   331 #logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
       
   332 
       
   333 # List of package logging levels in logger=LEVEL pairs. This option is
       
   334 # ignored if log_config_append is set. (list value)
       
   335 #default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
   240 
   336 
   241 # Enables or disables publication of error events. (boolean value)
   337 # Enables or disables publication of error events. (boolean value)
   242 #publish_errors = false
   338 #publish_errors = false
   243 
   339 
       
   340 # The format for an instance that is passed with the log message.
       
   341 # (string value)
       
   342 #instance_format = "[instance: %(uuid)s] "
       
   343 
       
   344 # The format for an instance UUID that is passed with the log message.
       
   345 # (string value)
       
   346 #instance_uuid_format = "[instance: %(uuid)s] "
       
   347 
   244 # Enables or disables fatal status of deprecations. (boolean value)
   348 # Enables or disables fatal status of deprecations. (boolean value)
   245 #fatal_deprecations = false
   349 #fatal_deprecations = false
   246 
   350 
   247 # The format for an instance that is passed with the log message.
   351 
   248 # (string value)
   352 [database]
   249 #instance_format = "[instance: %(uuid)s] "
   353 
   250 
   354 #
   251 # The format for an instance UUID that is passed with the log message.
   355 # From oslo.db
   252 # (string value)
   356 #
   253 #instance_uuid_format = "[instance: %(uuid)s] "
   357 
   254 
   358 # The file name to use with SQLite. (string value)
   255 
   359 # Deprecated group/name - [DEFAULT]/sqlite_db
   256 [glance_store]
   360 #sqlite_db = oslo.sqlite
   257 
   361 
   258 #
   362 # If True, SQLite uses synchronous mode. (boolean value)
   259 # From glance.store
   363 # Deprecated group/name - [DEFAULT]/sqlite_synchronous
   260 #
   364 #sqlite_synchronous = true
   261 
   365 
   262 # List of stores enabled (list value)
   366 # The back end to use for the database. (string value)
   263 #stores = file,http
   367 # Deprecated group/name - [DEFAULT]/db_backend
   264 
   368 #backend = sqlalchemy
   265 # Default scheme to use to store image data. The scheme must be
   369 
   266 # registered by one of the stores defined by the 'stores' config
   370 # The SQLAlchemy connection string to use to connect to the database.
   267 # option. (string value)
   371 # (string value)
   268 #default_store = file
   372 # Deprecated group/name - [DEFAULT]/sql_connection
   269 
   373 # Deprecated group/name - [DATABASE]/sql_connection
   270 # Minimum interval seconds to execute updating dynamic storage
   374 # Deprecated group/name - [sql]/connection
   271 # capabilities based on backend status then. It's not a periodic
   375 connection = mysql://%SERVICE_USER%:%SERVICE_PASSWORD%@localhost/glance
   272 # routine, the update logic will be executed only when interval
   376 
   273 # seconds elapsed and an operation of store has triggered. The feature
   377 # The SQLAlchemy connection string to use to connect to the slave
   274 # will be enabled only when the option value greater then zero.
   378 # database. (string value)
       
   379 #slave_connection = <None>
       
   380 
       
   381 # The SQL mode to be used for MySQL sessions. This option, including
       
   382 # the default, overrides any server-set SQL mode. To use whatever SQL
       
   383 # mode is set by the server configuration, set this to no value.
       
   384 # Example: mysql_sql_mode= (string value)
       
   385 #mysql_sql_mode = TRADITIONAL
       
   386 
       
   387 # Timeout before idle SQL connections are reaped. (integer value)
       
   388 # Deprecated group/name - [DEFAULT]/sql_idle_timeout
       
   389 # Deprecated group/name - [DATABASE]/sql_idle_timeout
       
   390 # Deprecated group/name - [sql]/idle_timeout
       
   391 #idle_timeout = 3600
       
   392 
       
   393 # Minimum number of SQL connections to keep open in a pool. (integer
       
   394 # value)
       
   395 # Deprecated group/name - [DEFAULT]/sql_min_pool_size
       
   396 # Deprecated group/name - [DATABASE]/sql_min_pool_size
       
   397 #min_pool_size = 1
       
   398 
       
   399 # Maximum number of SQL connections to keep open in a pool. (integer
       
   400 # value)
       
   401 # Deprecated group/name - [DEFAULT]/sql_max_pool_size
       
   402 # Deprecated group/name - [DATABASE]/sql_max_pool_size
       
   403 #max_pool_size = <None>
       
   404 
       
   405 # Maximum number of database connection retries during startup. Set to
       
   406 # -1 to specify an infinite retry count. (integer value)
       
   407 # Deprecated group/name - [DEFAULT]/sql_max_retries
       
   408 # Deprecated group/name - [DATABASE]/sql_max_retries
       
   409 #max_retries = 10
       
   410 
       
   411 # Interval between retries of opening a SQL connection. (integer
       
   412 # value)
       
   413 # Deprecated group/name - [DEFAULT]/sql_retry_interval
       
   414 # Deprecated group/name - [DATABASE]/reconnect_interval
       
   415 #retry_interval = 10
       
   416 
       
   417 # If set, use this value for max_overflow with SQLAlchemy. (integer
       
   418 # value)
       
   419 # Deprecated group/name - [DEFAULT]/sql_max_overflow
       
   420 # Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
       
   421 #max_overflow = 50
       
   422 
       
   423 # Verbosity of SQL debugging information: 0=None, 100=Everything.
   275 # (integer value)
   424 # (integer value)
   276 #store_capabilities_update_min_interval = 0
   425 # Deprecated group/name - [DEFAULT]/sql_connection_debug
   277 
   426 #connection_debug = 0
   278 #
   427 
   279 # From glance.store
   428 # Add Python stack traces to SQL as comment strings. (boolean value)
   280 #
   429 # Deprecated group/name - [DEFAULT]/sql_connection_trace
   281 
   430 #connection_trace = false
   282 # Images will be chunked into objects of this size (in megabytes). For
   431 
   283 # best performance, this should be a power of two. (integer value)
   432 # If set, use this value for pool_timeout with SQLAlchemy. (integer
   284 #sheepdog_store_chunk_size = 64
   433 # value)
   285 
   434 # Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
   286 # Port of sheep daemon. (integer value)
   435 #pool_timeout = <None>
   287 #sheepdog_store_port = 7000
   436 
   288 
   437 # Enable the experimental use of database reconnect on connection
   289 # IP address of sheep daemon. (string value)
   438 # lost. (boolean value)
   290 #sheepdog_store_address = localhost
   439 #use_db_reconnect = false
   291 
   440 
   292 # RADOS images will be chunked into objects of this size (in
   441 # Seconds between retries of a database transaction. (integer value)
   293 # megabytes). For best performance, this should be a power of two.
   442 #db_retry_interval = 1
       
   443 
       
   444 # If True, increases the interval between retries of a database
       
   445 # operation up to db_max_retry_interval. (boolean value)
       
   446 #db_inc_retry_interval = true
       
   447 
       
   448 # If db_inc_retry_interval is set, the maximum seconds between retries
       
   449 # of a database operation. (integer value)
       
   450 #db_max_retry_interval = 10
       
   451 
       
   452 # Maximum retries in case of connection error or deadlock error before
       
   453 # error is raised. Set to -1 to specify an infinite retry count.
   294 # (integer value)
   454 # (integer value)
   295 #rbd_store_chunk_size = 8
   455 #db_max_retries = 20
   296 
   456 
   297 # RADOS pool in which images are stored. (string value)
   457 #
   298 #rbd_store_pool = images
   458 # From oslo.db.concurrency
   299 
   459 #
   300 # RADOS user to authenticate as (only applicable if using Cephx. If
   460 
   301 # <None>, a default will be chosen based on the client. section in
   461 # Enable the experimental use of thread pooling for all DB API calls
   302 # rbd_store_ceph_conf) (string value)
       
   303 #rbd_store_user = <None>
       
   304 
       
   305 # Ceph configuration file path. If <None>, librados will locate the
       
   306 # default config. If using cephx authentication, this file should
       
   307 # include a reference to the right keyring in a client.<USER> section
       
   308 # (string value)
       
   309 #rbd_store_ceph_conf = /etc/ceph/ceph.conf
       
   310 
       
   311 # Directory to which the Filesystem backend store writes images.
       
   312 # (string value)
       
   313 filesystem_store_datadir = /var/lib/glance/images/
       
   314 
       
   315 # List of directories and its priorities to which the Filesystem
       
   316 # backend store writes images. (multi valued)
       
   317 #filesystem_store_datadirs =
       
   318 
       
   319 # The path to a file which contains the metadata to be returned with
       
   320 # any location associated with this store.  The file must contain a
       
   321 # valid JSON object. The object should contain the keys 'id' and
       
   322 # 'mountpoint'. The value for both keys should be 'string'. (string
       
   323 # value)
       
   324 #filesystem_store_metadata_file = <None>
       
   325 
       
   326 # The required permission for created image file. In this way the user
       
   327 # other service used, e.g. Nova, who consumes the image could be the
       
   328 # exclusive member of the group that owns the files created. Assigning
       
   329 # it less then or equal to zero means don't change the default
       
   330 # permission of the file. This value will be decoded as an octal
       
   331 # digit. (integer value)
       
   332 #filesystem_store_file_perm = 0
       
   333 
       
   334 # Hostname or IP address of the instance to connect to, or a mongodb
       
   335 # URI, or a list of hostnames / mongodb URIs. If host is an IPv6
       
   336 # literal it must be enclosed in '[' and ']' characters following the
       
   337 # RFC2732 URL syntax (e.g. '[::1]' for localhost) (string value)
       
   338 #mongodb_store_uri = <None>
       
   339 
       
   340 # Database to use (string value)
       
   341 #mongodb_store_db = <None>
       
   342 
       
   343 # The host where the S3 server is listening. (string value)
       
   344 #s3_store_host = <None>
       
   345 
       
   346 # The S3 query token access key. (string value)
       
   347 #s3_store_access_key = <None>
       
   348 
       
   349 # The S3 query token secret key. (string value)
       
   350 #s3_store_secret_key = <None>
       
   351 
       
   352 # The S3 bucket to be used to store the Glance data. (string value)
       
   353 #s3_store_bucket = <None>
       
   354 
       
   355 # The local directory where uploads will be staged before they are
       
   356 # transferred into S3. (string value)
       
   357 #s3_store_object_buffer_dir = <None>
       
   358 
       
   359 # A boolean to determine if the S3 bucket should be created on upload
       
   360 # if it does not exist or if an error should be returned to the user.
       
   361 # (boolean value)
   462 # (boolean value)
   362 #s3_store_create_bucket_on_put = false
   463 # Deprecated group/name - [DEFAULT]/dbapi_use_tpool
   363 
   464 #use_tpool = false
   364 # The S3 calling format used to determine the bucket. Either subdomain
       
   365 # or path can be used. (string value)
       
   366 #s3_store_bucket_url_format = subdomain
       
   367 
       
   368 # What size, in MB, should S3 start chunking image files and do a
       
   369 # multipart upload in S3. (integer value)
       
   370 #s3_store_large_object_size = 100
       
   371 
       
   372 # What multipart upload part size, in MB, should S3 use when uploading
       
   373 # parts. The size must be greater than or equal to 5M. (integer value)
       
   374 #s3_store_large_object_chunk_size = 10
       
   375 
       
   376 # The number of thread pools to perform a multipart upload in S3.
       
   377 # (integer value)
       
   378 #s3_store_thread_pools = 10
       
   379 
       
   380 # ESX/ESXi or vCenter Server target system. The server value can be an
       
   381 # IP address or a DNS name. (string value)
       
   382 #vmware_server_host = <None>
       
   383 
       
   384 # Username for authenticating with VMware ESX/VC server. (string
       
   385 # value)
       
   386 #vmware_server_username = <None>
       
   387 
       
   388 # Password for authenticating with VMware ESX/VC server. (string
       
   389 # value)
       
   390 #vmware_server_password = <None>
       
   391 
       
   392 # DEPRECATED. Inventory path to a datacenter. If the
       
   393 # vmware_server_host specified is an ESX/ESXi, the
       
   394 # vmware_datacenter_path is optional. If specified, it should be "ha-
       
   395 # datacenter". This option is deprecated in favor of vmware_datastores
       
   396 # and will be removed in the Liberty release. (string value)
       
   397 #vmware_datacenter_path = ha-datacenter
       
   398 
       
   399 # DEPRECATED. Datastore associated with the datacenter. This option is
       
   400 # deprecated in favor of vmware_datastores and will be removed in the
       
   401 # Liberty release. (string value)
       
   402 #vmware_datastore_name = <None>
       
   403 
       
   404 # Number of times VMware ESX/VC server API must be retried upon
       
   405 # connection related issues. (integer value)
       
   406 #vmware_api_retry_count = 10
       
   407 
       
   408 # The interval used for polling remote tasks invoked on VMware ESX/VC
       
   409 # server. (integer value)
       
   410 #vmware_task_poll_interval = 5
       
   411 
       
   412 # The name of the directory where the glance images will be stored in
       
   413 # the VMware datastore. (string value)
       
   414 #vmware_store_image_dir = /openstack_glance
       
   415 
       
   416 # Allow to perform insecure SSL requests to ESX/VC. (boolean value)
       
   417 #vmware_api_insecure = false
       
   418 
       
   419 # A list of datastores where the image can be stored. This option may
       
   420 # be specified multiple times for specifying multiple datastores.
       
   421 # Either one of vmware_datastore_name or vmware_datastores is
       
   422 # required. The datastore name should be specified after its
       
   423 # datacenter path, seperated by ":". An optional weight may be given
       
   424 # after the datastore name, seperated again by ":". Thus, the required
       
   425 # format becomes <datacenter_path>:<datastore_name>:<optional_weight>.
       
   426 # When adding an image, the datastore with highest weight will be
       
   427 # selected, unless there is not enough free space available in cases
       
   428 # where the image size is already known. If no weight is given, it is
       
   429 # assumed to be zero and the directory will be considered for
       
   430 # selection last. If multiple datastores have the same weight, then
       
   431 # the one with the most free space available is selected. (multi
       
   432 # valued)
       
   433 #vmware_datastores =
       
   434 
       
   435 # Info to match when looking for cinder in the service catalog. Format
       
   436 # is : separated values of the form:
       
   437 # <service_type>:<service_name>:<endpoint_type> (string value)
       
   438 #cinder_catalog_info = volume:cinder:publicURL
       
   439 
       
   440 # Override service catalog lookup with template for cinder endpoint
       
   441 # e.g. http://localhost:8776/v1/%(project_id)s (string value)
       
   442 #cinder_endpoint_template = <None>
       
   443 
       
   444 # Region name of this node (string value)
       
   445 #os_region_name = <None>
       
   446 
       
   447 # Location of ca certicates file to use for cinder client requests.
       
   448 # (string value)
       
   449 #cinder_ca_certificates_file = <None>
       
   450 
       
   451 # Number of cinderclient retries on failed http calls (integer value)
       
   452 #cinder_http_retries = 3
       
   453 
       
   454 # Allow to perform insecure SSL requests to cinder (boolean value)
       
   455 #cinder_api_insecure = false
       
   456 
       
   457 # Version of the authentication service to use. Valid versions are 2
       
   458 # for keystone and 1 for swauth and rackspace. (deprecated) (string
       
   459 # value)
       
   460 #swift_store_auth_version = 2
       
   461 
       
   462 # If True, swiftclient won't check for a valid SSL certificate when
       
   463 # authenticating. (boolean value)
       
   464 #swift_store_auth_insecure = false
       
   465 
       
   466 # A string giving the CA certificate file to use in SSL connections
       
   467 # for verifying certs. (string value)
       
   468 #swift_store_cacert = <None>
       
   469 
       
   470 # The region of the swift endpoint to be used for single tenant. This
       
   471 # setting is only necessary if the tenant has multiple swift
       
   472 # endpoints. (string value)
       
   473 #swift_store_region = <None>
       
   474 
       
   475 # If set, the configured endpoint will be used. If None, the storage
       
   476 # url from the auth response will be used. (string value)
       
   477 #swift_store_endpoint = <None>
       
   478 
       
   479 # A string giving the endpoint type of the swift service to use
       
   480 # (publicURL, adminURL or internalURL). This setting is only used if
       
   481 # swift_store_auth_version is 2. (string value)
       
   482 #swift_store_endpoint_type = publicURL
       
   483 
       
   484 # A string giving the service type of the swift service to use. This
       
   485 # setting is only used if swift_store_auth_version is 2. (string
       
   486 # value)
       
   487 #swift_store_service_type = object-store
       
   488 
       
   489 # Container within the account that the account should use for storing
       
   490 # images in Swift when using single container mode. In multiple
       
   491 # container mode, this will be the prefix for all containers. (string
       
   492 # value)
       
   493 #swift_store_container = glance
       
   494 
       
   495 # The size, in MB, that Glance will start chunking image files and do
       
   496 # a large object manifest in Swift. (integer value)
       
   497 #swift_store_large_object_size = 5120
       
   498 
       
   499 # The amount of data written to a temporary disk buffer during the
       
   500 # process of chunking the image file. (integer value)
       
   501 #swift_store_large_object_chunk_size = 200
       
   502 
       
   503 # A boolean value that determines if we create the container if it
       
   504 # does not exist. (boolean value)
       
   505 #swift_store_create_container_on_put = false
       
   506 
       
   507 # If set to True, enables multi-tenant storage mode which causes
       
   508 # Glance images to be stored in tenant specific Swift accounts.
       
   509 # (boolean value)
       
   510 #swift_store_multi_tenant = false
       
   511 
       
   512 # When set to 0, a single-tenant store will only use one container to
       
   513 # store all images. When set to an integer value between 1 and 32, a
       
   514 # single-tenant store will use multiple containers to store images,
       
   515 # and this value will determine how many containers are created.Used
       
   516 # only when swift_store_multi_tenant is disabled. The total number of
       
   517 # containers that will be used is equal to 16^N, so if this config
       
   518 # option is set to 2, then 16^2=256 containers will be used to store
       
   519 # images. (integer value)
       
   520 #swift_store_multiple_containers_seed = 0
       
   521 
       
   522 # A list of tenants that will be granted read/write access on all
       
   523 # Swift containers created by Glance in multi-tenant mode. (list
       
   524 # value)
       
   525 #swift_store_admin_tenants =
       
   526 
       
   527 # If set to False, disables SSL layer compression of https swift
       
   528 # requests. Setting to False may improve performance for images which
       
   529 # are already in a compressed format, eg qcow2. (boolean value)
       
   530 #swift_store_ssl_compression = true
       
   531 
       
   532 # The number of times a Swift download will be retried before the
       
   533 # request fails. (integer value)
       
   534 #swift_store_retry_get_count = 0
       
   535 
       
   536 # The reference to the default swift account/backing store parameters
       
   537 # to use for adding new images. (string value)
       
   538 #default_swift_reference = ref1
       
   539 
       
   540 # The address where the Swift authentication service is
       
   541 # listening.(deprecated) (string value)
       
   542 #swift_store_auth_address = <None>
       
   543 
       
   544 # The user to authenticate against the Swift authentication service
       
   545 # (deprecated) (string value)
       
   546 #swift_store_user = <None>
       
   547 
       
   548 # Auth key for the user authenticating against the Swift
       
   549 # authentication service. (deprecated) (string value)
       
   550 #swift_store_key = <None>
       
   551 
       
   552 # The config file that has the swift account(s)configs. (string value)
       
   553 #swift_store_config_file = <None>
       
   554 
   465 
   555 
   466 
   556 [oslo_concurrency]
   467 [oslo_concurrency]
   557 
   468 
   558 #
   469 #
   566 # Directory to use for lock files.  For security, the specified
   477 # Directory to use for lock files.  For security, the specified
   567 # directory should only be writable by the user running the processes
   478 # directory should only be writable by the user running the processes
   568 # that need locking. Defaults to environment variable OSLO_LOCK_PATH.
   479 # that need locking. Defaults to environment variable OSLO_LOCK_PATH.
   569 # If external locks are used, a lock path must be set. (string value)
   480 # If external locks are used, a lock path must be set. (string value)
   570 # Deprecated group/name - [DEFAULT]/lock_path
   481 # Deprecated group/name - [DEFAULT]/lock_path
   571 #lock_path = <None>
   482 lock_path = /var/lib/glance/lock
   572 
   483 
   573 
   484 
   574 [oslo_policy]
   485 [oslo_policy]
   575 
   486 
   576 #
   487 #