upstream/oracle/userland-gate: comparison components/openstack/heat/files/heat.conf

equal deleted inserted replaced

-:f9a2279efa0d
+:f8d3bc724af7
 #
 # The HTTP Header that will be used to determine which the original request
 # protocol scheme was, even if it was removed by an SSL terminator proxy.
 # (string value)
+# Deprecated group/name - [DEFAULT]/secure_proxy_ssl_header
 #secure_proxy_ssl_header = X-Forwarded-Proto
 #
 # From heat.common.config
 #
 # Name of the engine node. This can be an opaque identifier. It is not
 # necessarily a hostname, FQDN, or IP address. (string value)
-#host = heat
+#host =
-#
-# From heat.common.config
-#
-# The default user for new instances. This option is deprecated and will be
-# removed in the Juno release. If it's empty, Heat will use the default user
-# set up with your cloud image (for OS::Nova::Server) or 'ec2-user' (for
-# AWS::EC2::Instance). (string value)
-instance_user =
 # List of directories to search for plug-ins. (list value)
 #plugin_dirs = /usr/lib/heat
 # The directory to search for environment files. (string value)
 # Select deferred auth method, stored password or trusts. (string value)
 # Allowed values: password, trusts
 #deferred_auth_method = trusts
+# Allow reauthentication on token expiry, such that long-running tasks may
+# complete. Note this defeats the expiry of any provided user tokens. (string
+# value)
+# Allowed values: '', trusts
+#reauthentication_auth_method =
+# Gap, in seconds, to determine whether the given token is about to expire.
+# (integer value)
+#stale_token_duration = 30
 # Subset of trustor roles to be delegated to heat. If left unset, all roles of
 # a user will be delegated to heat when creating a stack. (list value)
 #trusts_delegated_roles =
 # Maximum resources allowed per top-level stack. -1 stands for unlimited.
 #max_stacks_per_tenant = 100
 # Number of times to retry to bring a resource to a non-error state. Set to 0
 # to disable retries. (integer value)
 #action_retry_limit = 5
+# Number of times to retry when a client encounters an expected intermittent
+# error. Set to 0 to disable retries. (integer value)
+#client_retry_limit = 2
+# Number of times to check whether an interface has been attached or detached.
+# (integer value)
+# Minimum value: 1
+#max_interface_check_attempts = 10
 # Controls how many events will be pruned whenever a stack's events exceed
 # max_events_per_stack. Set this lower to keep more events at the expense of
 # more frequent purges. (integer value)
 #event_purge_batch_size = 10
 # RPC timeout for the engine liveness check that is used for stack locking.
 # (integer value)
 #engine_life_check_timeout = 2
 # Enable the legacy OS::Heat::CWLiteAlarm resource. (boolean value)
-#enable_cloud_watch_lite = true
+#enable_cloud_watch_lite = false
 # Enable the preview Stack Abandon feature. (boolean value)
 #enable_stack_abandon = false
 # Enable the preview Stack Adopt feature. (boolean value)
 #enable_stack_adopt = false
 # Enables engine with convergence architecture. All stacks with this option
-# will be created using convergence engine . (boolean value)
+# will be created using convergence engine. (boolean value)
 #convergence_engine = false
+# On update, enables heat to collect existing resource properties from reality
+# and converge to updated template. (boolean value)
+#observe_on_update = false
 # Template default for how the server should receive the metadata required for
 # software configuration. POLL_SERVER_CFN will allow calls to the cfn API
 # action DescribeStackResource authenticated with the provided keypair
 # (requires enabled heat-api-cfn). POLL_SERVER_HEAT will allow calls to the
 # Heat API resource-show using the provided keystone credentials (requires
 # keystone v3 API, and configured stack_user_* config options). POLL_TEMP_URL
 # will create and populate a Swift TempURL with metadata for polling (requires
-# object-store endpoint which supports TempURL). (string value)
+# object-store endpoint which supports TempURL).ZAQAR_MESSAGE will create a
-# Allowed values: POLL_SERVER_CFN, POLL_SERVER_HEAT, POLL_TEMP_URL
+# dedicated zaqar queue and post the metadata for polling. (string value)
+# Allowed values: POLL_SERVER_CFN, POLL_SERVER_HEAT, POLL_TEMP_URL, ZAQAR_MESSAGE
 #default_software_config_transport = POLL_SERVER_CFN
 # Template default for how the server should signal to heat with the deployment
 # output values. CFN_SIGNAL will allow an HTTP POST to a CFN keypair signed URL
 # (requires enabled heat-api-cfn). TEMP_URL_SIGNAL will create a Swift TempURL
 # to be signaled via HTTP PUT (requires object-store endpoint which supports
 # TempURL). HEAT_SIGNAL will allow calls to the Heat API resource-signal using
-# the provided keystone credentials (string value)
+# the provided keystone credentials. ZAQAR_SIGNAL will create a dedicated zaqar
-# Allowed values: CFN_SIGNAL, TEMP_URL_SIGNAL, HEAT_SIGNAL
+# queue to be signaled using the provided keystone credentials. (string value)
+# Allowed values: CFN_SIGNAL, TEMP_URL_SIGNAL, HEAT_SIGNAL, ZAQAR_SIGNAL
 #default_deployment_signal_transport = CFN_SIGNAL
+# Stacks containing these tag names will be hidden. Multiple tags should be
+# given in a comma-delimited list (eg. hidden_stack_tags=hide_me,me_too). (list
+# value)
+#hidden_stack_tags = data-processing-cluster
 # Deprecated. (string value)
 #onready = <None>
 # When this feature is enabled, scheduler hints identifying the heat stack
 # stackname) with list[0] being (None, rootstackname), heat_resource_name will
 # be set to the resource's name, and heat_resource_uuid will be set to the
 # resource's orchestration id. (boolean value)
 #stack_scheduler_hints = false
-#
+# Encrypt template parameters that were marked as hidden and also all the
-# From heat.common.config
+# resource properties before storing them in database. (boolean value)
-#
+#encrypt_parameters_and_properties = false
 # Seconds between running periodic tasks. (integer value)
 #periodic_interval = 60
-# URL of the Heat metadata server. (string value)
+# URL of the Heat metadata server. NOTE: Setting this is only needed if you
-#heat_metadata_server_url =
+# require instances to use a different endpoint than in the keystone catalog
+# (string value)
+#heat_metadata_server_url = <None>
 # URL of the Heat waitcondition server. (string value)
-#heat_waitcondition_server_url =
+#heat_waitcondition_server_url = <None>
 # URL of the Heat CloudWatch server. (string value)
 #heat_watch_server_url =
 # Instance connection to CFN/CW API via https. (string value)
 # Maximum depth allowed when using nested stacks. (integer value)
 #max_nested_stack_depth = 5
 # Number of heat-engine processes to fork and run. (integer value)
-num_engine_workers = 1
+num_engine_workers = 4
 #
 # From heat.common.crypt
 #
 # Key used to encrypt authentication info in the database. Length of this key
-# must be 16, 24 or 32 characters. (string value)
+# must be 32 characters. (string value)
 #auth_encryption_key = notgood but just long enough i t
 #
 # From heat.common.heat_keystoneclient
 #
 #default_notification_level = INFO
 # Default publisher_id for outgoing notifications. (string value)
 #default_publisher_id = <None>
-# List of drivers to send notifications (DEPRECATED). (multi valued)
-#list_notifier_drivers =
 #
 # From heat.engine.resources
 #
 # Custom template for the built-in loadbalancer nested stack. (string value)
 #loadbalancer_template = <None>
 #
-# From heat.openstack.common.eventlet_backdoor
+# From oslo.log
+#
+# If set to true, the logging level will be set to DEBUG instead of the default
+# INFO level. (boolean value)
+#debug = false
+# If set to false, the logging level will be set to WARNING instead of the
+# default INFO level. (boolean value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#verbose = true
+# The name of a logging configuration file. This file is appended to any
+# existing logging configuration files. For details about logging configuration
+# files, see the Python logging module documentation. Note that when logging
+# configuration files are used then all logging configuration is set in the
+# configuration file and other logging configuration options are ignored (for
+# example, logging_context_format_string). (string value)
+# Deprecated group/name - [DEFAULT]/log_config
+#log_config_append = <None>
+# Defines the format string for %%(asctime)s in log records. Default:
+# %(default)s . This option is ignored if log_config_append is set. (string
+# value)
+#log_date_format = %Y-%m-%d %H:%M:%S
+# (Optional) Name of log file to send logging output to. If no default is set,
+# logging will go to stderr as defined by use_stderr. This option is ignored if
+# log_config_append is set. (string value)
+# Deprecated group/name - [DEFAULT]/logfile
+#log_file = <None>
+# (Optional) The base directory used for relative log_file  paths. This option
+# is ignored if log_config_append is set. (string value)
+# Deprecated group/name - [DEFAULT]/logdir
+#log_dir = <None>
+# Uses logging handler designed to watch file system. When log file is moved or
+# removed this handler will open a new log file with specified path
+# instantaneously. It makes sense only if log_file option is specified and
+# Linux platform is used. This option is ignored if log_config_append is set.
+# (boolean value)
+#watch_log_file = false
+# Use syslog for logging. Existing syslog format is DEPRECATED and will be
+# changed later to honor RFC5424. This option is ignored if log_config_append
+# is set. (boolean value)
+#use_syslog = false
+# Syslog facility to receive log lines. This option is ignored if
+# log_config_append is set. (string value)
+#syslog_log_facility = LOG_USER
+# Log output to standard error. This option is ignored if log_config_append is
+# set. (boolean value)
+#use_stderr = true
+# Format string to use for log messages with context. (string value)
+#logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
+# Format string to use for log messages when context is undefined. (string
+# value)
+#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
+# Additional data to append to log message when logging level for the message
+# is DEBUG. (string value)
+#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
+# Prefix each line of exception output with this format. (string value)
+#logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
+# Defines the format string for %(user_identity)s that is used in
+# logging_context_format_string. (string value)
+#logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
+# List of package logging levels in logger=LEVEL pairs. This option is ignored
+# if log_config_append is set. (list value)
+#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
+# Enables or disables publication of error events. (boolean value)
+#publish_errors = false
+# The format for an instance that is passed with the log message. (string
+# value)
+#instance_format = "[instance: %(uuid)s] "
+# The format for an instance UUID that is passed with the log message. (string
+# value)
+#instance_uuid_format = "[instance: %(uuid)s] "
+# Enables or disables fatal status of deprecations. (boolean value)
+#fatal_deprecations = false
+#
+# From oslo.messaging
+#
+# Size of RPC connection pool. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_conn_pool_size
+#rpc_conn_pool_size = 30
+# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
+# The "host" option should point or resolve to this address. (string value)
+#rpc_zmq_bind_address = *
+# MatchMaker driver. (string value)
+# Allowed values: redis, dummy
+#rpc_zmq_matchmaker = redis
+# Type of concurrency used. Either "native" or "eventlet" (string value)
+#rpc_zmq_concurrency = eventlet
+# Number of ZeroMQ contexts, defaults to 1. (integer value)
+#rpc_zmq_contexts = 1
+# Maximum number of ingress messages to locally buffer per topic. Default is
+# unlimited. (integer value)
+#rpc_zmq_topic_backlog = <None>
+# Directory for holding IPC sockets. (string value)
+#rpc_zmq_ipc_dir = /var/run/openstack
+# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
+# "host" option, if running Nova. (string value)
+#rpc_zmq_host = localhost
+# Seconds to wait before a cast expires (TTL). The default value of -1
+# specifies an infinite linger period. The value of 0 specifies no linger
+# period. Pending messages shall be discarded immediately when the socket is
+# closed. Only supported by impl_zmq. (integer value)
+#rpc_cast_timeout = -1
+# The default number of seconds that poll should wait. Poll raises timeout
+# exception when timeout expired. (integer value)
+#rpc_poll_timeout = 1
+# Expiration timeout in seconds of a name service record about existing target
+# ( < 0 means no timeout). (integer value)
+#zmq_target_expire = 120
+# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
+# value)
+#use_pub_sub = true
+# Minimal port number for random ports range. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#rpc_zmq_min_port = 49152
+# Maximal port number for random ports range. (integer value)
+# Minimum value: 1
+# Maximum value: 65536
+#rpc_zmq_max_port = 65536
+# Number of retries to find free port number before fail with ZMQBindError.
+# (integer value)
+#rpc_zmq_bind_port_retries = 100
+# Size of executor thread pool. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_thread_pool_size
+#executor_thread_pool_size = 64
+# Seconds to wait for a response from a call. (integer value)
+#rpc_response_timeout = 60
+# A URL representing the messaging driver to use and its full configuration. If
+# not set, we fall back to the rpc_backend option and driver specific
+# configuration. (string value)
+#transport_url = <None>
+# The messaging driver to use, defaults to rabbit. Other drivers include amqp
+# and zmq. (string value)
+#rpc_backend = rabbit
+# The default exchange under which topics are scoped. May be overridden by an
+# exchange name specified in the transport_url option. (string value)
+#control_exchange = openstack
+#
+# From oslo.service.periodic_task
+#
+# Some periodic tasks can be run in a separate process. Should we run them
+# here? (boolean value)
+#run_external_periodic_tasks = true
+#
+# From oslo.service.service
 #
 # Enable eventlet backdoor.  Acceptable values are 0, <port>, and
 # <start>:<end>, where 0 results in listening on a random tcp port number;
 # <port> results in listening on the specified port number (and not enabling
 # backdoor if that port is in use); and <start>:<end> results in listening on
 # the smallest unused port number within the specified range of port numbers.
 # The chosen port is displayed in the service's log file. (string value)
 #backdoor_port = <None>
-#
+# Enable eventlet backdoor, using the provided path as a unix socket that can
-# From heat.openstack.common.policy
+# receive connections. This option is mutually exclusive with 'backdoor_port'
-#
+# in that only one should be provided. If both are provided then the existence
+# of this option overrides the usage of that option. (string value)
-# The JSON file that defines policies. (string value)
+#backdoor_socket = <None>
-#policy_file = policy.json
+# Enables or disables logging values of all registered options when starting a
-# Default rule. Enforced when a requested rule is not found. (string value)
+# service (at DEBUG level). (boolean value)
-#policy_default_rule = default
+#log_options = true
-# Directories where policy configuration files are stored. They can be relative
+# Specify a timeout after which a gracefully shutdown server will exit. Zero
-# to any directory in the search path defined by the config_dir option, or
+# value means endless wait. (integer value)
-# absolute paths. The file defined by policy_file must exist for these
+#graceful_shutdown_timeout = 60
-# directories to be searched. (multi valued)
-#policy_dirs = policy.d
-#
-# From oslo.log
-#
-# Print debugging output (set logging level to DEBUG instead of default WARNING
-# level). (boolean value)
-#debug = false
-# Print more verbose output (set logging level to INFO instead of default
-# WARNING level). (boolean value)
-#verbose = false
-# The name of a logging configuration file. This file is appended to any
-# existing logging configuration files. For details about logging configuration
-# files, see the Python logging module documentation. (string value)
-# Deprecated group/name - [DEFAULT]/log_config
-#log_config_append = <None>
-# DEPRECATED. A logging.Formatter log message format string which may use any
-# of the available logging.LogRecord attributes. This option is deprecated.
-# Please use logging_context_format_string and logging_default_format_string
-# instead. (string value)
-#log_format = <None>
-# Format string for %%(asctime)s in log records. Default: %(default)s . (string
-# value)
-#log_date_format = %Y-%m-%d %H:%M:%S
-# (Optional) Name of log file to output to. If no default is set, logging will
-# go to stdout. (string value)
-# Deprecated group/name - [DEFAULT]/logfile
-#log_file = <None>
-# (Optional) The base directory used for relative --log-file paths. (string
-# value)
-# Deprecated group/name - [DEFAULT]/logdir
-#log_dir = <None>
-# Use syslog for logging. Existing syslog format is DEPRECATED during I, and
-# will change in J to honor RFC5424. (boolean value)
-#use_syslog = false
-# (Optional) Enables or disables syslog rfc5424 format for logging. If enabled,
-# prefixes the MSG part of the syslog message with APP-NAME (RFC5424). The
-# format without the APP-NAME is deprecated in I, and will be removed in J.
-# (boolean value)
-#use_syslog_rfc_format = false
-# Syslog facility to receive log lines. (string value)
-#syslog_log_facility = LOG_USER
-# Log output to standard error. (boolean value)
-#use_stderr = true
-# Format string to use for log messages with context. (string value)
-#logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
-# Format string to use for log messages without context. (string value)
-#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
-# Data to append to log format when level is DEBUG. (string value)
-#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
-# Prefix each line of exception output with this format. (string value)
-#logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d TRACE %(name)s %(instance)s
-# List of logger=LEVEL pairs. (list value)
-#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN
-# Enables or disables publication of error events. (boolean value)
-#publish_errors = false
-# Enables or disables fatal status of deprecations. (boolean value)
-#fatal_deprecations = false
-# The format for an instance that is passed with the log message. (string
-# value)
-#instance_format = "[instance: %(uuid)s] "
-# The format for an instance UUID that is passed with the log message. (string
-# value)
-#instance_uuid_format = "[instance: %(uuid)s] "
-#
-# From oslo.messaging
-#
-# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
-# The "host" option should point or resolve to this address. (string value)
-#rpc_zmq_bind_address = *
-# MatchMaker driver. (string value)
-#rpc_zmq_matchmaker = local
-# ZeroMQ receiver listening port. (integer value)
-#rpc_zmq_port = 9501
-# Number of ZeroMQ contexts, defaults to 1. (integer value)
-#rpc_zmq_contexts = 1
-# Maximum number of ingress messages to locally buffer per topic. Default is
-# unlimited. (integer value)
-#rpc_zmq_topic_backlog = <None>
-# Directory for holding IPC sockets. (string value)
-#rpc_zmq_ipc_dir = /var/run/openstack
-# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
-# "host" option, if running Nova. (string value)
-#rpc_zmq_host = localhost
-# Seconds to wait before a cast expires (TTL). Only supported by impl_zmq.
-# (integer value)
-#rpc_cast_timeout = 30
-# Heartbeat frequency. (integer value)
-#matchmaker_heartbeat_freq = 300
-# Heartbeat time-to-live. (integer value)
-#matchmaker_heartbeat_ttl = 600
-# Size of RPC thread pool. (integer value)
-#rpc_thread_pool_size = 64
-# Driver or drivers to handle sending notifications. (multi valued)
-#notification_driver =
-# AMQP topic used for OpenStack notifications. (list value)
-# Deprecated group/name - [rpc_notifier2]/topics
-#notification_topics = notifications
-# Seconds to wait for a response from a call. (integer value)
-#rpc_response_timeout = 60
-# A URL representing the messaging driver to use and its full configuration. If
-# not set, we fall back to the rpc_backend option and driver specific
-# configuration. (string value)
-#transport_url = <None>
-# The messaging driver to use, defaults to rabbit. Other drivers include qpid
-# and zmq. (string value)
-#rpc_backend = rabbit
-# The default exchange under which topics are scoped. May be overridden by an
-# exchange name specified in the transport_url option. (string value)
-#control_exchange = openstack
 [auth_password]
 #
 # Allowed keystone endpoints for auth_uri when multi_cloud is enabled. At least
 # one endpoint needs to be specified. (list value)
 #allowed_auth_uris =
+[cache]
+#
+# From oslo.cache
+#
+# Prefix for building the configuration dictionary for the cache region. This
+# should not need to be changed unless there is another dogpile.cache region
+# with the same configuration name. (string value)
+#config_prefix = cache.oslo
+# Default TTL, in seconds, for any cached item in the dogpile.cache region.
+# This applies to any cached method that doesn't have an explicit cache
+# expiration time defined for it. (integer value)
+#expiration_time = 600
+# Dogpile.cache backend module. It is recommended that Memcache with pooling
+# (oslo_cache.memcache_pool) or Redis (dogpile.cache.redis) be used in
+# production deployments.  Small workloads (single process) like devstack can
+# use the dogpile.cache.memory backend. (string value)
+#backend = dogpile.cache.null
+# Arguments supplied to the backend module. Specify this option once per
+# argument to be passed to the dogpile.cache backend. Example format:
+# "<argname>:<value>". (multi valued)
+#backend_argument =
+# Proxy classes to import that will affect the way the dogpile.cache backend
+# functions. See the dogpile.cache documentation on changing-backend-behavior.
+# (list value)
+#proxies =
+# Global toggle for caching. (boolean value)
+#enabled = false
+# Extra debugging from the cache backend (cache keys, get/set/delete/etc
+# calls). This is only really useful if you need to see the specific cache-
+# backend get/set/delete calls with the keys/values.  Typically this should be
+# left set to false. (boolean value)
+#debug_cache_backend = false
+# Memcache servers in the format of "host:port". (dogpile.cache.memcache and
+# oslo_cache.memcache_pool backends only). (list value)
+#memcache_servers = localhost:11211
+# Number of seconds memcached server is considered dead before it is tried
+# again. (dogpile.cache.memcache and oslo_cache.memcache_pool backends only).
+# (integer value)
+#memcache_dead_retry = 300
+# Timeout in seconds for every call to a server. (dogpile.cache.memcache and
+# oslo_cache.memcache_pool backends only). (integer value)
+#memcache_socket_timeout = 3
+# Max total number of open connections to every memcached server.
+# (oslo_cache.memcache_pool backend only). (integer value)
+#memcache_pool_maxsize = 10
+# Number of seconds a connection to memcached is held unused in the pool before
+# it is closed. (oslo_cache.memcache_pool backend only). (integer value)
+#memcache_pool_unused_timeout = 60
+# Number of seconds that an operation will wait to get a memcache client
+# connection. (integer value)
+#memcache_pool_connection_get_timeout = 10
 [clients]
 #
 # From heat.common.config
 #
 #key_file = <None>
 # If set, then the server's certificate will not be verified. (boolean value)
 #insecure = <None>
-#
-# From heat.common.config
-#
 # Allow client's debug log output. (boolean value)
 #http_log_debug = false
 [clients_glance]
 #key_file = <None>
 # If set, then the server's certificate will not be verified. (boolean value)
 #insecure = <None>
-#
-# From heat.common.config
-#
 # Optional heat url in format like http://0.0.0.0:8004/v1/%(tenant_id)s.
 # (string value)
 #url =
 #key_file = <None>
 # If set, then the server's certificate will not be verified. (boolean value)
 #insecure = <None>
+# Unversioned keystone url in format like http://0.0.0.0:5000. (string value)
+#auth_uri =
 [clients_neutron]
 #
 # From heat.common.config
 #key_file = <None>
 # If set, then the server's certificate will not be verified. (boolean value)
 #insecure = <None>
-#
-# From heat.common.config
-#
 # Allow client's debug log output. (boolean value)
 #http_log_debug = false
 [clients_sahara]
 # Optional PEM-formatted file that contains the private key. (string value)
 #key_file = <None>
 # If set, then the server's certificate will not be verified. (boolean value)
 #insecure = <None>
+[cors]
+#
+# From oslo.middleware
+#
+# Indicate whether this resource may be shared with the domain received in the
+# requests "origin" header. (list value)
+#allowed_origin = <None>
+# Indicate that the actual request can include user credentials (boolean value)
+#allow_credentials = true
+# Indicate which headers are safe to expose to the API. Defaults to HTTP Simple
+# Headers. (list value)
+#expose_headers = X-Auth-Token,X-Subject-Token,X-Service-Token,X-OpenStack-Request-ID
+# Maximum cache age of CORS preflight requests. (integer value)
+#max_age = 3600
+# Indicate which methods can be used during the actual request. (list value)
+#allow_methods = GET,PUT,POST,DELETE,PATCH
+# Indicate which header field names may be used during the actual request.
+# (list value)
+#allow_headers = X-Auth-Token,X-Identity-Status,X-Roles,X-Service-Catalog,X-User-Id,X-Tenant-Id,X-OpenStack-Request-ID
+[cors.subdomain]
+#
+# From oslo.middleware
+#
+# Indicate whether this resource may be shared with the domain received in the
+# requests "origin" header. (list value)
+#allowed_origin = <None>
+# Indicate that the actual request can include user credentials (boolean value)
+#allow_credentials = true
+# Indicate which headers are safe to expose to the API. Defaults to HTTP Simple
+# Headers. (list value)
+#expose_headers = X-Auth-Token,X-Subject-Token,X-Service-Token,X-OpenStack-Request-ID
+# Maximum cache age of CORS preflight requests. (integer value)
+#max_age = 3600
+# Indicate which methods can be used during the actual request. (list value)
+#allow_methods = GET,PUT,POST,DELETE,PATCH
+# Indicate which header field names may be used during the actual request.
+# (list value)
+#allow_headers = X-Auth-Token,X-Identity-Status,X-Roles,X-Service-Catalog,X-User-Id,X-Tenant-Id,X-OpenStack-Request-ID
 [database]
 #
 # default, overrides any server-set SQL mode. To use whatever SQL mode is set
 # by the server configuration, set this to no value. Example: mysql_sql_mode=
 # (string value)
 #mysql_sql_mode = TRADITIONAL
-# This configures the MySQL storage engine. This allows for OpenStack to
-# support different storage engines such as InnoDB, NDB, etc. By Default,
-# this value will be set to InnoDB. For MySQL Cluster, set to NDBCLUSTER.
-# Example: mysql_storage_engine=(string value)
-#mysql_storage_engine = InnoDB
 # Timeout before idle SQL connections are reaped. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_idle_timeout
 # Deprecated group/name - [DATABASE]/sql_idle_timeout
 # Deprecated group/name - [sql]/idle_timeout
 #idle_timeout = 3600
 #retry_interval = 10
 # If set, use this value for max_overflow with SQLAlchemy. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_max_overflow
 # Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
-#max_overflow = <None>
+#max_overflow = 50
 # Verbosity of SQL debugging information: 0=None, 100=Everything. (integer
 # value)
 # Deprecated group/name - [DEFAULT]/sql_connection_debug
 #connection_debug = 0
 #
 # From heat.common.wsgi
 #
 # Address to bind the server. Useful when selecting a particular network
-# interface. (string value)
+# interface. (IP address value)
 # Deprecated group/name - [DEFAULT]/bind_host
 #bind_host = 0.0.0.0
-# The port on which the server will listen. (integer value)
+# The port on which the server will listen. (port value)
+# Minimum value: 0
+# Maximum value: 65535
 # Deprecated group/name - [DEFAULT]/bind_port
 #bind_port = 8004
 # Number of backlog requests to configure the socket with. (integer value)
 # Deprecated group/name - [DEFAULT]/backlog
 # Location of the SSL key file to use for enabling SSL mode. (string value)
 # Deprecated group/name - [DEFAULT]/key_file
 #key_file = <None>
-# Number of workers for Heat service. (integer value)
+# Number of workers for Heat service. Default value 0 means, that service will
+# start number of workers equal number of cores on server. (integer value)
 # Deprecated group/name - [DEFAULT]/workers
-#workers = 0
+workers = 1
 # Maximum line size of message headers to be accepted. max_header_line may need
 # to be increased when using large tokens (typically those generated by the
 # Keystone v3 API with big service catalogs). (integer value)
 #max_header_line = 16384
+# The value for the socket option TCP_KEEPIDLE.  This is the time in seconds
+# that the connection must be idle before TCP starts sending keepalive probes.
+# (integer value)
+#tcp_keepidle = 600
 [heat_api_cfn]
 #
 # From heat.common.wsgi
 #
 # Address to bind the server. Useful when selecting a particular network
-# interface. (string value)
+# interface. (IP address value)
 # Deprecated group/name - [DEFAULT]/bind_host
 #bind_host = 0.0.0.0
-# The port on which the server will listen. (integer value)
+# The port on which the server will listen. (port value)
+# Minimum value: 0
+# Maximum value: 65535
 # Deprecated group/name - [DEFAULT]/bind_port
 #bind_port = 8000
 # Number of backlog requests to configure the socket with. (integer value)
 # Deprecated group/name - [DEFAULT]/backlog
 # Deprecated group/name - [DEFAULT]/key_file
 #key_file = <None>
 # Number of workers for Heat service. (integer value)
 # Deprecated group/name - [DEFAULT]/workers
-#workers = 0
+#workers = 1
 # Maximum line size of message headers to be accepted. max_header_line may need
 # to be increased when using large tokens (typically those generated by the
 # Keystone v3 API with big service catalogs). (integer value)
 #max_header_line = 16384
+# The value for the socket option TCP_KEEPIDLE.  This is the time in seconds
+# that the connection must be idle before TCP starts sending keepalive probes.
+# (integer value)
+#tcp_keepidle = 600
 [heat_api_cloudwatch]
 #
 # From heat.common.wsgi
 #
 # Address to bind the server. Useful when selecting a particular network
-# interface. (string value)
+# interface. (IP address value)
 # Deprecated group/name - [DEFAULT]/bind_host
 #bind_host = 0.0.0.0
-# The port on which the server will listen. (integer value)
+# The port on which the server will listen. (port value)
+# Minimum value: 0
+# Maximum value: 65535
 # Deprecated group/name - [DEFAULT]/bind_port
 #bind_port = 8003
 # Number of backlog requests to configure the socket with. (integer value)
 # Deprecated group/name - [DEFAULT]/backlog
 # Deprecated group/name - [DEFAULT]/key_file
 #key_file = <None>
 # Number of workers for Heat service. (integer value)
 # Deprecated group/name - [DEFAULT]/workers
-#workers = 0
+#workers = 1
 # Maximum line size of message headers to be accepted. max_header_line may need
 # to be increased when using large tokens (typically those generated by the
 # Keystone v3 API with big service catalogs.) (integer value)
 #max_header_line = 16384
+# The value for the socket option TCP_KEEPIDLE.  This is the time in seconds
+# that the connection must be idle before TCP starts sending keepalive probes.
+# (integer value)
+#tcp_keepidle = 600
 [keystone_authtoken]
 #
 # From keystonemiddleware.auth_token
 # Defaults to system CAs. (string value)
 #cafile = <None>
 # Verify HTTPS connections. (boolean value)
 #insecure = false
+# The region in which the identity server can be found. (string value)
+#region_name = <None>
 # Directory used to cache files related to PKI tokens. (string value)
 signing_dir = /var/lib/heat/keystone-signing
 # Optionally specify a list of memcached server(s) to use for caching. If left
 # combined with a low cache duration may significantly reduce performance.
 # (integer value)
 #revocation_cache_time = 10
 # (Optional) If defined, indicate whether token data should be authenticated or
-# authenticated and encrypted. Acceptable values are MAC or ENCRYPT.  If MAC,
+# authenticated and encrypted. If MAC, token data is authenticated (with HMAC)
-# token data is authenticated (with HMAC) in the cache. If ENCRYPT, token data
+# in the cache. If ENCRYPT, token data is encrypted and authenticated in the
-# is encrypted and authenticated in the cache. If the value is not one of these
+# cache. If the value is not one of these options or empty, auth_token will
-# options or empty, auth_token will raise an exception on initialization.
+# raise an exception on initialization. (string value)
-# (string value)
+# Allowed values: None, MAC, ENCRYPT
-#memcache_security_strategy = <None>
+#memcache_security_strategy = None
 # (Optional, mandatory if memcache_security_strategy is defined) This string is
 # used for key derivation. (string value)
 #memcache_secret_key = <None>
 # (Optional) Maximum total number of open connections to every memcached
 # server. (integer value)
 #memcache_pool_maxsize = 10
-# (Optional) Socket timeout in seconds for communicating with a memcache
+# (Optional) Socket timeout in seconds for communicating with a memcached
 # server. (integer value)
 #memcache_pool_socket_timeout = 3
 # (Optional) Number of seconds a connection to memcached is held unused in the
 # pool before it is closed. (integer value)
 #memcache_pool_unused_timeout = 60
-# (Optional) Number of seconds that an operation will wait to get a memcache
+# (Optional) Number of seconds that an operation will wait to get a memcached
 # client connection from the pool. (integer value)
 #memcache_pool_conn_get_timeout = 10
-# (Optional) Use the advanced (eventlet safe) memcache client pool. The
+# (Optional) Use the advanced (eventlet safe) memcached client pool. The
 # advanced pool will only work under python 2.x. (boolean value)
 #memcache_use_advanced_pool = false
 # (Optional) Indicate whether to set the X-Service-Catalog header. If False,
 # middleware will not ask for service catalog on token validation and will not
 # migrating from a less secure algorithm to a more secure one. Once all the old
 # tokens are expired this option should be set to a single value for better
 # performance. (list value)
 #hash_algorithms = md5
-# Prefix to prepend at the beginning of the path. Deprecated, use identity_uri.
+# Authentication type to load (unknown value)
-# (string value)
+# Deprecated group/name - [DEFAULT]/auth_plugin
-#auth_admin_prefix =
+#auth_type = <None>
-# Host providing the admin Identity API endpoint. Deprecated, use identity_uri.
+# Config Section from which to load plugin specific options (unknown value)
-# (string value)
+#auth_section = <None>
-#auth_host = 127.0.0.1
-# Port of the admin Identity API endpoint. Deprecated, use identity_uri.
-# (integer value)
-#auth_port = 35357
-# Protocol of the admin Identity API endpoint (http or https). Deprecated, use
-# identity_uri. (string value)
-#auth_protocol = https
 # Complete admin Identity API endpoint. This should specify the unversioned
 # root endpoint e.g. https://localhost:35357/ (string value)
 identity_uri = http://127.0.0.1:35357/
-# This option is deprecated and may be removed in a future release. Single
-# shared secret with the Keystone configuration used for bootstrapping a
-# Keystone installation, or otherwise bypassing the normal authentication
-# process. This option should not be used, use `admin_user` and
-# `admin_password` instead. (string value)
-#admin_token = <None>
 # Service username. (string value)
 admin_user = %SERVICE_USER%
 # Service user password. (string value)
 admin_password = %SERVICE_PASSWORD%
 # Service tenant name. (string value)
 admin_tenant_name = %SERVICE_TENANT_NAME%
-# Name of the plugin to load (string value)
-#auth_plugin = <None>
-# Config Section from which to load plugin specific options (string value)
-#auth_section = <None>
 [matchmaker_redis]
 #
 # From oslo.messaging
 #
 # Host to locate redis. (string value)
 #host = 127.0.0.1
-# Use this port to connect to redis host. (integer value)
+# Use this port to connect to redis host. (port value)
+# Minimum value: 0
+# Maximum value: 65535
 #port = 6379
 # Password for Redis server (optional). (string value)
-#password = <None>
+#password =
+# List of Redis Sentinel hosts (fault tolerance mode) e.g.
-[matchmaker_ring]
+# [host:port, host1:port ... ] (list value)
+#sentinel_hosts =
-#
-# From oslo.messaging
+# Redis replica set name. (string value)
-#
+#sentinel_group_name = oslo-messaging-zeromq
-# Matchmaker ring file (JSON). (string value)
+# Time in ms to wait between connection attempts. (integer value)
-# Deprecated group/name - [DEFAULT]/matchmaker_ringfile
+#wait_timeout = 500
-#ringfile = /etc/oslo/matchmaker_ring.json
+# Time in ms to wait before the transaction is killed. (integer value)
+#check_timeout = 20000
+# Timeout in ms on blocking socket operations (integer value)
+#socket_timeout = 1000
+[oslo_concurrency]
+#
+# From oslo.concurrency
+#
+# Enables or disables inter-process locks. (boolean value)
+# Deprecated group/name - [DEFAULT]/disable_process_locking
+#disable_process_locking = false
+# Directory to use for lock files.  For security, the specified directory
+# should only be writable by the user running the processes that need locking.
+# Defaults to environment variable OSLO_LOCK_PATH. If external locks are used,
+# a lock path must be set. (string value)
+# Deprecated group/name - [DEFAULT]/lock_path
+lock_path = /var/lib/heat/lock
 [oslo_messaging_amqp]
 #
 # Debug: dump AMQP frames to stdout (boolean value)
 # Deprecated group/name - [amqp1]/trace
 #trace = false
-# CA certificate PEM file for verifing server certificate (string value)
+# CA certificate PEM file to verify server certificate (string value)
 # Deprecated group/name - [amqp1]/ssl_ca_file
 #ssl_ca_file =
 # Identifying certificate PEM file to present to clients (string value)
 # Deprecated group/name - [amqp1]/ssl_cert_file
 # Accept clients using either SSL or plain TCP (boolean value)
 # Deprecated group/name - [amqp1]/allow_insecure_clients
 #allow_insecure_clients = false
+# Space separated list of acceptable SASL mechanisms (string value)
-[oslo_messaging_qpid]
+# Deprecated group/name - [amqp1]/sasl_mechanisms
+#sasl_mechanisms =
+# Path to directory that contains the SASL configuration (string value)
+# Deprecated group/name - [amqp1]/sasl_config_dir
+#sasl_config_dir =
+# Name of configuration file (without .conf suffix) (string value)
+# Deprecated group/name - [amqp1]/sasl_config_name
+#sasl_config_name =
+# User name for message broker authentication (string value)
+# Deprecated group/name - [amqp1]/username
+#username =
+# Password for message broker authentication (string value)
+# Deprecated group/name - [amqp1]/password
+#password =
+[oslo_messaging_notifications]
 #
 # From oslo.messaging
 #
+# The Drivers(s) to handle sending notifications. Possible values are
+# messaging, messagingv2, routing, log, test, noop (multi valued)
+# Deprecated group/name - [DEFAULT]/notification_driver
+#driver =
+# A URL representing the messaging driver to use for notifications. If not set,
+# we fall back to the same configuration used for RPC. (string value)
+# Deprecated group/name - [DEFAULT]/notification_transport_url
+#transport_url = <None>
+# AMQP topic used for OpenStack notifications. (list value)
+# Deprecated group/name - [rpc_notifier2]/topics
+# Deprecated group/name - [DEFAULT]/notification_topics
+#topics = notifications
+[oslo_messaging_rabbit]
+#
+# From oslo.messaging
+#
 # Use durable queues in AMQP. (boolean value)
+# Deprecated group/name - [DEFAULT]/amqp_durable_queues
 # Deprecated group/name - [DEFAULT]/rabbit_durable_queues
 #amqp_durable_queues = false
 # Auto-delete queues in AMQP. (boolean value)
 # Deprecated group/name - [DEFAULT]/amqp_auto_delete
 #amqp_auto_delete = false
-# Size of RPC connection pool. (integer value)
-# Deprecated group/name - [DEFAULT]/rpc_conn_pool_size
-#rpc_conn_pool_size = 30
-# Qpid broker hostname. (string value)
-# Deprecated group/name - [DEFAULT]/qpid_hostname
-#qpid_hostname = localhost
-# Qpid broker port. (integer value)
-# Deprecated group/name - [DEFAULT]/qpid_port
-#qpid_port = 5672
-# Qpid HA cluster host:port pairs. (list value)
-# Deprecated group/name - [DEFAULT]/qpid_hosts
-#qpid_hosts = $qpid_hostname:$qpid_port
-# Username for Qpid connection. (string value)
-# Deprecated group/name - [DEFAULT]/qpid_username
-#qpid_username =
-# Password for Qpid connection. (string value)
-# Deprecated group/name - [DEFAULT]/qpid_password
-#qpid_password =
-# Space separated list of SASL mechanisms to use for auth. (string value)
-# Deprecated group/name - [DEFAULT]/qpid_sasl_mechanisms
-#qpid_sasl_mechanisms =
-# Seconds between connection keepalive heartbeats. (integer value)
-# Deprecated group/name - [DEFAULT]/qpid_heartbeat
-#qpid_heartbeat = 60
-# Transport to use, either 'tcp' or 'ssl'. (string value)
-# Deprecated group/name - [DEFAULT]/qpid_protocol
-#qpid_protocol = tcp
-# Whether to disable the Nagle algorithm. (boolean value)
-# Deprecated group/name - [DEFAULT]/qpid_tcp_nodelay
-#qpid_tcp_nodelay = true
-# The number of prefetched messages held by receiver. (integer value)
-# Deprecated group/name - [DEFAULT]/qpid_receiver_capacity
-#qpid_receiver_capacity = 1
-# The qpid topology version to use.  Version 1 is what was originally used by
-# impl_qpid.  Version 2 includes some backwards-incompatible changes that allow
-# broker federation to work.  Users should update to version 2 when they are
-# able to take everything down, as it requires a clean break. (integer value)
-# Deprecated group/name - [DEFAULT]/qpid_topology_version
-#qpid_topology_version = 1
-[oslo_messaging_rabbit]
-#
-# From oslo.messaging
-#
-# Use durable queues in AMQP. (boolean value)
-# Deprecated group/name - [DEFAULT]/rabbit_durable_queues
-#amqp_durable_queues = false
-# Auto-delete queues in AMQP. (boolean value)
-# Deprecated group/name - [DEFAULT]/amqp_auto_delete
-#amqp_auto_delete = false
-# Size of RPC connection pool. (integer value)
-# Deprecated group/name - [DEFAULT]/rpc_conn_pool_size
-#rpc_conn_pool_size = 30
 # SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and
 # SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some
 # distributions. (string value)
 # Deprecated group/name - [DEFAULT]/kombu_ssl_version
 # How long to wait before reconnecting in response to an AMQP consumer cancel
 # notification. (floating point value)
 # Deprecated group/name - [DEFAULT]/kombu_reconnect_delay
 #kombu_reconnect_delay = 1.0
+# EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression will not
+# be used. This option may notbe available in future versions. (string value)
+#kombu_compression = <None>
+# How long to wait a missing client beforce abandoning to send it its replies.
+# This value should not be longer than rpc_response_timeout. (integer value)
+# Deprecated group/name - [DEFAULT]/kombu_reconnect_timeout
+#kombu_missing_consumer_retry_timeout = 60
+# Determines how the next RabbitMQ node is chosen in case the one we are
+# currently connected to becomes unavailable. Takes effect only if more than
+# one RabbitMQ node is provided in config. (string value)
+# Allowed values: round-robin, shuffle
+#kombu_failover_strategy = round-robin
 # The RabbitMQ broker address where a single node is used. (string value)
 # Deprecated group/name - [DEFAULT]/rabbit_host
 #rabbit_host = localhost
-# The RabbitMQ broker port where a single node is used. (integer value)
+# The RabbitMQ broker port where a single node is used. (port value)
+# Minimum value: 0
+# Maximum value: 65535
 # Deprecated group/name - [DEFAULT]/rabbit_port
 #rabbit_port = 5672
 # RabbitMQ HA cluster host:port pairs. (list value)
 # Deprecated group/name - [DEFAULT]/rabbit_hosts
 # How long to backoff for between retries when connecting to RabbitMQ. (integer
 # value)
 # Deprecated group/name - [DEFAULT]/rabbit_retry_backoff
 #rabbit_retry_backoff = 2
+# Maximum interval of RabbitMQ connection retries. Default is 30 seconds.
+# (integer value)
+#rabbit_interval_max = 30
 # Maximum number of RabbitMQ connection retries. Default is 0 (infinite retry
 # count). (integer value)
 # Deprecated group/name - [DEFAULT]/rabbit_max_retries
 #rabbit_max_retries = 0
-# Use HA queues in RabbitMQ (x-ha-policy: all). If you change this option, you
+# Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change this
-# must wipe the RabbitMQ database. (boolean value)
+# option, you must wipe the RabbitMQ database. In RabbitMQ 3.0, queue mirroring
+# is no longer controlled by the x-ha-policy argument when declaring a queue.
+# If you just want to make sure that all queues (except  those with auto-
+# generated names) are mirrored across all nodes, run: "rabbitmqctl set_policy
+# HA '^(?!amq\.).*' '{"ha-mode": "all"}' " (boolean value)
 # Deprecated group/name - [DEFAULT]/rabbit_ha_queues
 #rabbit_ha_queues = false
+# Positive integer representing duration in seconds for queue TTL (x-expires).
+# Queues which are unused for the duration of the TTL are automatically
+# deleted. The parameter affects only reply and fanout queues. (integer value)
+# Minimum value: 1
+#rabbit_transient_queues_ttl = 1800
+# Specifies the number of messages to prefetch. Setting to zero allows
+# unlimited messages. (integer value)
+#rabbit_qos_prefetch_count = 0
 # Number of seconds after which the Rabbit broker is considered down if
-# heartbeat's keep-alive fails (0 disables the heartbeat, >0 enables it.
+# heartbeat's keep-alive fails (0 disable the heartbeat). EXPERIMENTAL (integer
-# Enabling heartbeats requires kombu>=3.0.7 and amqp>=1.4.0). EXPERIMENTAL
+# value)
-# (integer value)
+#heartbeat_timeout_threshold = 60
-#heartbeat_timeout_threshold = 0
 # How often times during the heartbeat_timeout_threshold we check the
 # heartbeat. (integer value)
 #heartbeat_rate = 2
 # Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake (boolean value)
 # Deprecated group/name - [DEFAULT]/fake_rabbit
 #fake_rabbit = false
+# Maximum number of channels to allow (integer value)
+#channel_max = <None>
+# The maximum byte size for an AMQP frame (integer value)
+#frame_max = <None>
+# How often to send heartbeats for consumer's connections (integer value)
+#heartbeat_interval = 1
+# Enable SSL (boolean value)
+#ssl = <None>
+# Arguments passed to ssl.wrap_socket (dict value)
+#ssl_options = <None>
+# Set socket timeout in seconds for connection's socket (floating point value)
+#socket_timeout = 0.25
+# Set TCP_USER_TIMEOUT in seconds for connection's socket (floating point
+# value)
+#tcp_user_timeout = 0.25
+# Set delay for reconnection to some host which has connection error (floating
+# point value)
+#host_connection_reconnect_delay = 0.25
+# Maximum number of connections to keep queued. (integer value)
+#pool_max_size = 10
+# Maximum number of connections to create above `pool_max_size`. (integer
+# value)
+#pool_max_overflow = 0
+# Default number of seconds to wait for a connections to available (integer
+# value)
+#pool_timeout = 30
+# Lifetime of a connection (since creation) in seconds or None for no
+# recycling. Expired connections are closed on acquire. (integer value)
+#pool_recycle = 600
+# Threshold at which inactive (since release) connections are considered stale
+# in seconds or None for no staleness. Stale connections are closed on acquire.
+# (integer value)
+#pool_stale = 60
+# Persist notification messages. (boolean value)
+#notification_persistence = false
+# Exchange name for for sending notifications (string value)
+#default_notification_exchange = ${control_exchange}_notification
+# Max number of not acknowledged message which RabbitMQ can send to
+# notification listener. (integer value)
+#notification_listener_prefetch_count = 100
+# Reconnecting retry count in case of connectivity problem during sending
+# notification, -1 means infinite retry. (integer value)
+#default_notification_retry_attempts = -1
+# Reconnecting retry delay in case of connectivity problem during sending
+# notification message (floating point value)
+#notification_retry_delay = 0.25
+# Time to live for rpc queues without consumers in seconds. (integer value)
+#rpc_queue_expiration = 60
+# Exchange name for sending RPC messages (string value)
+#default_rpc_exchange = ${control_exchange}_rpc
+# Exchange name for receiving RPC replies (string value)
+#rpc_reply_exchange = ${control_exchange}_rpc_reply
+# Max number of not acknowledged message which RabbitMQ can send to rpc
+# listener. (integer value)
+#rpc_listener_prefetch_count = 100
+# Max number of not acknowledged message which RabbitMQ can send to rpc reply
+# listener. (integer value)
+#rpc_reply_listener_prefetch_count = 100
+# Reconnecting retry count in case of connectivity problem during sending
+# reply. -1 means infinite retry during rpc_timeout (integer value)
+#rpc_reply_retry_attempts = -1
+# Reconnecting retry delay in case of connectivity problem during sending
+# reply. (floating point value)
+#rpc_reply_retry_delay = 0.25
+# Reconnecting retry count in case of connectivity problem during sending RPC
+# message, -1 means infinite retry. If actual retry attempts in not 0 the rpc
+# request could be processed more then one time (integer value)
+#default_rpc_retry_attempts = -1
+# Reconnecting retry delay in case of connectivity problem during sending RPC
+# message (floating point value)
+#rpc_retry_delay = 0.25
 [oslo_middleware]
 #
 # The maximum body size for each  request, in bytes. (integer value)
 # Deprecated group/name - [DEFAULT]/osapi_max_request_body_size
 # Deprecated group/name - [DEFAULT]/max_request_body_size
 #max_request_body_size = 114688
+# The HTTP Header that will be used to determine what the original request
+# protocol scheme was, even if it was hidden by an SSL termination proxy.
+# (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#secure_proxy_ssl_header = X-Forwarded-Proto
+[oslo_policy]
+#
+# From oslo.policy
+#
+# The JSON file that defines policies. (string value)
+# Deprecated group/name - [DEFAULT]/policy_file
+#policy_file = policy.json
+# Default rule. Enforced when a requested rule is not found. (string value)
+# Deprecated group/name - [DEFAULT]/policy_default_rule
+#policy_default_rule = default
+# Directories where policy configuration files are stored. They can be relative
+# to any directory in the search path defined by the config_dir option, or
+# absolute paths. The file defined by policy_file must exist for these
+# directories to be searched.  Missing or empty directories are ignored. (multi
+# valued)
+# Deprecated group/name - [DEFAULT]/policy_dirs
+#policy_dirs = policy.d
+[oslo_reports]
+#
+# From oslo.reports
+#
+# Path to a log directory where to create a file (string value)
+#log_dir = <None>
+[oslo_versionedobjects]
+#
+# From oslo.versionedobjects
+#
+# Make exception message format errors fatal (boolean value)
+#fatal_exception_format_errors = false
 [paste_deploy]
 #
 # From heat.common.config
 #
 # From heat.common.config
 #
-# If False fully disable profiling feature. (boolean value)
+#
-#profiler_enabled = false
+# Enables the profiling for all services on this node. Default value is False
+# (fully disable the profiling feature).
-# If False do not trace SQL requests. (boolean value)
+#
+# Possible values:
+#
+# * True: Enables the feature
+# * False: Disables the feature. The profiling cannot be started via this
+# project
+# operations. If the profiling is triggered by another project, this project
+# part
+# will be empty.
+#  (boolean value)
+# Deprecated group/name - [profiler]/profiler_enabled
+#enabled = false
+#
+# Enables SQL requests profiling in services. Default value is False (SQL
+# requests won't be traced).
+#
+# Possible values:
+#
+# * True: Enables SQL requests profiling. Each SQL query will be part of the
+# trace and can the be analyzed by how much time was spent for that.
+# * False: Disables SQL requests profiling. The spent time is only shown on a
+# higher level of operations. Single SQL queries cannot be analyzed this
+# way.
+#  (boolean value)
 #trace_sqlalchemy = false
+#
+# Secret key(s) to use for encrypting context data for performance profiling.
+# This string value should have the following format:
+# <key1>[,<key2>,...<keyn>],
+# where each key is some random string. A user who triggers the profiling via
+# the REST API has to set one of these keys in the headers of the REST API call
+# to include profiling results of this node for this particular project.
+#
+# Both "enabled" flag and "hmac_keys" config options should be set to enable
+# profiling. Also, to generate correct profiling information across all
+# services
+# at least one key needs to be consistent between OpenStack projects. This
+# ensures it can be used from client side to generate the trace, containing
+# information from all possible resources. (string value)
+#hmac_keys = SECRET_KEY
 [revision]
 #
 # Heat build revision. If you would prefer to manage your build revision
 # separately, you can move this section to a different file and add it as
 # another config option. (string value)
 #heat_revision = unknown
+[ssl]
+#
+# From oslo.service.sslutils
+#
+# CA certificate file to use to verify connecting clients. (string value)
+# Deprecated group/name - [DEFAULT]/ssl_ca_file
+#ca_file = <None>
+# Certificate file to use when starting the server securely. (string value)
+# Deprecated group/name - [DEFAULT]/ssl_cert_file
+#cert_file = <None>
+# Private key file to use when starting the server securely. (string value)
+# Deprecated group/name - [DEFAULT]/ssl_key_file
+#key_file = <None>
+# SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and
+# SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some
+# distributions. (string value)
+#version = <None>
+# Sets the list of available ciphers. value should be a string in the OpenSSL
+# cipher list format. (string value)
+#ciphers = <None>
+[trustee]
+#
+# From heat.common.context
+#
+# Name of the plugin to load (string value)
+#auth_plugin = <None>
+# Config Section from which to load plugin specific options (string value)
+#auth_section = <None>
+# Authentication URL (string value)
+#auth_url = <None>
+# Domain ID to scope to (string value)
+#domain_id = <None>
+# Domain name to scope to (string value)
+#domain_name = <None>
+# Project ID to scope to (string value)
+#project_id = <None>
+# Project name to scope to (string value)
+#project_name = <None>
+# Domain ID containing project (string value)
+#project_domain_id = <None>
+# Domain name containing project (string value)
+#project_domain_name = <None>
+# Trust ID (string value)
+#trust_id = <None>
+# User ID (string value)
+#user_id = <None>
+# Username (string value)
+# Deprecated group/name - [DEFAULT]/user_name
+#username = <None>
+# User's domain id (string value)
+#user_domain_id = <None>
+# User's domain name (string value)
+#user_domain_name = <None>
+# User's password (string value)
+#password = <None>

changeset 6850	f8d3bc724af7
parent 6530	c9012715dd1d
child 6866	4c1935f5ec9a