upload openstack queens conf
This commit is contained in:
light
@@ -0,0 +1,65 @@
|
||||
#############
|
||||
# OpenStack #
|
||||
#############
|
||||
|
||||
[composite:osapi_volume]
|
||||
use = call:cinder.api:root_app_factory
|
||||
/: apiversions
|
||||
/v2: openstack_volume_api_v2
|
||||
/v3: openstack_volume_api_v3
|
||||
|
||||
[composite:openstack_volume_api_v2]
|
||||
use = call:cinder.api.middleware.auth:pipeline_factory
|
||||
noauth = cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler noauth apiv2
|
||||
keystone = cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler authtoken keystonecontext apiv2
|
||||
keystone_nolimit = cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler authtoken keystonecontext apiv2
|
||||
|
||||
[composite:openstack_volume_api_v3]
|
||||
use = call:cinder.api.middleware.auth:pipeline_factory
|
||||
noauth = cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler noauth apiv3
|
||||
keystone = cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler authtoken keystonecontext apiv3
|
||||
keystone_nolimit = cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler authtoken keystonecontext apiv3
|
||||
|
||||
[filter:request_id]
|
||||
paste.filter_factory = oslo_middleware.request_id:RequestId.factory
|
||||
|
||||
[filter:http_proxy_to_wsgi]
|
||||
paste.filter_factory = oslo_middleware.http_proxy_to_wsgi:HTTPProxyToWSGI.factory
|
||||
|
||||
[filter:cors]
|
||||
paste.filter_factory = oslo_middleware.cors:filter_factory
|
||||
oslo_config_project = cinder
|
||||
|
||||
[filter:faultwrap]
|
||||
paste.filter_factory = cinder.api.middleware.fault:FaultWrapper.factory
|
||||
|
||||
[filter:osprofiler]
|
||||
paste.filter_factory = osprofiler.web:WsgiMiddleware.factory
|
||||
|
||||
[filter:noauth]
|
||||
paste.filter_factory = cinder.api.middleware.auth:NoAuthMiddleware.factory
|
||||
|
||||
[filter:sizelimit]
|
||||
paste.filter_factory = oslo_middleware.sizelimit:RequestBodySizeLimiter.factory
|
||||
|
||||
[app:apiv2]
|
||||
paste.app_factory = cinder.api.v2.router:APIRouter.factory
|
||||
|
||||
[app:apiv3]
|
||||
paste.app_factory = cinder.api.v3.router:APIRouter.factory
|
||||
|
||||
[pipeline:apiversions]
|
||||
pipeline = cors http_proxy_to_wsgi faultwrap osvolumeversionapp
|
||||
|
||||
[app:osvolumeversionapp]
|
||||
paste.app_factory = cinder.api.versions:Versions.factory
|
||||
|
||||
##########
|
||||
# Shared #
|
||||
##########
|
||||
|
||||
[filter:keystonecontext]
|
||||
paste.filter_factory = cinder.api.middleware.auth:CinderKeystoneContext.factory
|
||||
|
||||
[filter:authtoken]
|
||||
paste.filter_factory = keystonemiddleware.auth_token:filter_factory
|
||||
@@ -0,0 +1,31 @@
|
||||
[DEFAULT]
|
||||
my_ip = 10.0.0.11
|
||||
transport_url = rabbit://openstack:rabbitPass@controller
|
||||
rootwrap_config = /etc/cinder/rootwrap.conf
|
||||
api_paste_confg = /etc/cinder/api-paste.ini
|
||||
iscsi_helper = tgtadm
|
||||
volume_name_template = volume-%s
|
||||
volume_group = cinder-volumes
|
||||
verbose = True
|
||||
auth_strategy = keystone
|
||||
state_path = /var/lib/cinder
|
||||
lock_path = /var/lock/cinder
|
||||
volumes_dir = /var/lib/cinder/volumes
|
||||
enabled_backends = lvm
|
||||
|
||||
[database]
|
||||
connection = mysql+pymysql://cinder:cinder_db_secret@controller/cinder
|
||||
|
||||
[keystone_authtoken]
|
||||
password = cinder_user_secret
|
||||
username = cinder
|
||||
project_name = service
|
||||
user_domain_id = default
|
||||
project_domain_id = default
|
||||
auth_type = password
|
||||
memcached_servers = controller:11211
|
||||
auth_url = http://controller:5000
|
||||
auth_uri = http://controller:5000
|
||||
|
||||
[oslo_concurrency]
|
||||
lock_path = /var/lib/cinder/tmp
|
||||
@@ -0,0 +1,76 @@
|
||||
[loggers]
|
||||
keys = root, cinder
|
||||
|
||||
[handlers]
|
||||
keys = stderr, stdout, watchedfile, syslog, null
|
||||
|
||||
[formatters]
|
||||
keys = legacycinder, default
|
||||
|
||||
[logger_root]
|
||||
level = WARNING
|
||||
handlers = null
|
||||
|
||||
[logger_cinder]
|
||||
level = INFO
|
||||
handlers = stderr
|
||||
qualname = cinder
|
||||
|
||||
[logger_amqplib]
|
||||
level = WARNING
|
||||
handlers = stderr
|
||||
qualname = amqplib
|
||||
|
||||
[logger_sqlalchemy]
|
||||
level = WARNING
|
||||
handlers = stderr
|
||||
qualname = sqlalchemy
|
||||
# "level = INFO" logs SQL queries.
|
||||
# "level = DEBUG" logs SQL queries and results.
|
||||
# "level = WARNING" logs neither. (Recommended for production systems.)
|
||||
|
||||
[logger_boto]
|
||||
level = WARNING
|
||||
handlers = stderr
|
||||
qualname = boto
|
||||
|
||||
[logger_suds]
|
||||
level = INFO
|
||||
handlers = stderr
|
||||
qualname = suds
|
||||
|
||||
[logger_eventletwsgi]
|
||||
level = WARNING
|
||||
handlers = stderr
|
||||
qualname = eventlet.wsgi.server
|
||||
|
||||
[handler_stderr]
|
||||
class = StreamHandler
|
||||
args = (sys.stderr,)
|
||||
formatter = legacycinder
|
||||
|
||||
[handler_stdout]
|
||||
class = StreamHandler
|
||||
args = (sys.stdout,)
|
||||
formatter = legacycinder
|
||||
|
||||
[handler_watchedfile]
|
||||
class = handlers.WatchedFileHandler
|
||||
args = ('cinder.log',)
|
||||
formatter = legacycinder
|
||||
|
||||
[handler_syslog]
|
||||
class = handlers.SysLogHandler
|
||||
args = ('/dev/log', handlers.SysLogHandler.LOG_USER)
|
||||
formatter = legacycinder
|
||||
|
||||
[handler_null]
|
||||
class = cinder.log.NullHandler
|
||||
formatter = default
|
||||
args = ()
|
||||
|
||||
[formatter_legacycinder]
|
||||
class = cinder.log.LegacyCinderFormatter
|
||||
|
||||
[formatter_default]
|
||||
format = %(message)s
|
||||
@@ -0,0 +1,27 @@
|
||||
# Configuration for cinder-rootwrap
|
||||
# This file should be owned by (and only-writeable by) the root user
|
||||
|
||||
[DEFAULT]
|
||||
# List of directories to load filter definitions from (separated by ',').
|
||||
# These directories MUST all be only writeable by root !
|
||||
filters_path=/etc/cinder/rootwrap.d,/usr/share/cinder/rootwrap
|
||||
|
||||
# List of directories to search executables in, in case filters do not
|
||||
# explicitely specify a full path (separated by ',')
|
||||
# If not specified, defaults to system PATH environment variable.
|
||||
# These directories MUST all be only writeable by root !
|
||||
exec_dirs=/sbin,/usr/sbin,/bin,/usr/bin,/usr/local/bin,/usr/local/sbin,/usr/lpp/mmfs/bin
|
||||
|
||||
# Enable logging to syslog
|
||||
# Default value is False
|
||||
use_syslog=False
|
||||
|
||||
# Which syslog facility to use.
|
||||
# Valid values include auth, authpriv, syslog, local0, local1...
|
||||
# Default value is 'syslog'
|
||||
syslog_log_facility=syslog
|
||||
|
||||
# Which messages to log.
|
||||
# INFO means log all usage
|
||||
# ERROR means only log unsuccessful attempts
|
||||
syslog_log_level=ERROR
|
||||
@@ -0,0 +1,90 @@
|
||||
# Use this pipeline for no auth or image caching - DEFAULT
|
||||
[pipeline:glance-api]
|
||||
pipeline = cors healthcheck http_proxy_to_wsgi versionnegotiation osprofiler unauthenticated-context rootapp
|
||||
|
||||
# Use this pipeline for image caching and no auth
|
||||
[pipeline:glance-api-caching]
|
||||
pipeline = cors healthcheck http_proxy_to_wsgi versionnegotiation osprofiler unauthenticated-context cache rootapp
|
||||
|
||||
# Use this pipeline for caching w/ management interface but no auth
|
||||
[pipeline:glance-api-cachemanagement]
|
||||
pipeline = cors healthcheck http_proxy_to_wsgi versionnegotiation osprofiler unauthenticated-context cache cachemanage rootapp
|
||||
|
||||
# Use this pipeline for keystone auth
|
||||
[pipeline:glance-api-keystone]
|
||||
pipeline = cors healthcheck http_proxy_to_wsgi versionnegotiation osprofiler authtoken context rootapp
|
||||
|
||||
# Use this pipeline for keystone auth with image caching
|
||||
[pipeline:glance-api-keystone+caching]
|
||||
pipeline = cors healthcheck http_proxy_to_wsgi versionnegotiation osprofiler authtoken context cache rootapp
|
||||
|
||||
# Use this pipeline for keystone auth with caching and cache management
|
||||
[pipeline:glance-api-keystone+cachemanagement]
|
||||
pipeline = cors healthcheck http_proxy_to_wsgi versionnegotiation osprofiler authtoken context cache cachemanage rootapp
|
||||
|
||||
# Use this pipeline for authZ only. This means that the registry will treat a
|
||||
# user as authenticated without making requests to keystone to reauthenticate
|
||||
# the user.
|
||||
[pipeline:glance-api-trusted-auth]
|
||||
pipeline = cors healthcheck http_proxy_to_wsgi versionnegotiation osprofiler context rootapp
|
||||
|
||||
# Use this pipeline for authZ only. This means that the registry will treat a
|
||||
# user as authenticated without making requests to keystone to reauthenticate
|
||||
# the user and uses cache management
|
||||
[pipeline:glance-api-trusted-auth+cachemanagement]
|
||||
pipeline = cors healthcheck http_proxy_to_wsgi versionnegotiation osprofiler context cache cachemanage rootapp
|
||||
|
||||
[composite:rootapp]
|
||||
paste.composite_factory = glance.api:root_app_factory
|
||||
/: apiversions
|
||||
/v1: apiv1app
|
||||
/v2: apiv2app
|
||||
|
||||
[app:apiversions]
|
||||
paste.app_factory = glance.api.versions:create_resource
|
||||
|
||||
[app:apiv1app]
|
||||
paste.app_factory = glance.api.v1.router:API.factory
|
||||
|
||||
[app:apiv2app]
|
||||
paste.app_factory = glance.api.v2.router:API.factory
|
||||
|
||||
[filter:healthcheck]
|
||||
paste.filter_factory = oslo_middleware:Healthcheck.factory
|
||||
backends = disable_by_file
|
||||
disable_by_file_path = /etc/glance/healthcheck_disable
|
||||
|
||||
[filter:versionnegotiation]
|
||||
paste.filter_factory = glance.api.middleware.version_negotiation:VersionNegotiationFilter.factory
|
||||
|
||||
[filter:cache]
|
||||
paste.filter_factory = glance.api.middleware.cache:CacheFilter.factory
|
||||
|
||||
[filter:cachemanage]
|
||||
paste.filter_factory = glance.api.middleware.cache_manage:CacheManageFilter.factory
|
||||
|
||||
[filter:context]
|
||||
paste.filter_factory = glance.api.middleware.context:ContextMiddleware.factory
|
||||
|
||||
[filter:unauthenticated-context]
|
||||
paste.filter_factory = glance.api.middleware.context:UnauthenticatedContextMiddleware.factory
|
||||
|
||||
[filter:authtoken]
|
||||
paste.filter_factory = keystonemiddleware.auth_token:filter_factory
|
||||
delay_auth_decision = true
|
||||
|
||||
[filter:gzip]
|
||||
paste.filter_factory = glance.api.middleware.gzip:GzipMiddleware.factory
|
||||
|
||||
[filter:osprofiler]
|
||||
paste.filter_factory = osprofiler.web:WsgiMiddleware.factory
|
||||
hmac_keys = SECRET_KEY #DEPRECATED
|
||||
enabled = yes #DEPRECATED
|
||||
|
||||
[filter:cors]
|
||||
paste.filter_factory = oslo_middleware.cors:filter_factory
|
||||
oslo_config_project = glance
|
||||
oslo_config_program = glance-api
|
||||
|
||||
[filter:http_proxy_to_wsgi]
|
||||
paste.filter_factory = oslo_middleware:HTTPProxyToWSGI.factory
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,228 @@
|
||||
[DEFAULT]
|
||||
|
||||
#
|
||||
# From oslo.log
|
||||
#
|
||||
|
||||
# If set to true, the logging level will be set to DEBUG instead of the default
|
||||
# INFO level. (boolean value)
|
||||
# Note: This option can be changed without restarting.
|
||||
#debug = false
|
||||
|
||||
# The name of a logging configuration file. This file is appended to any
|
||||
# existing logging configuration files. For details about logging configuration
|
||||
# files, see the Python logging module documentation. Note that when logging
|
||||
# configuration files are used then all logging configuration is set in the
|
||||
# configuration file and other logging configuration options are ignored (for
|
||||
# example, logging_context_format_string). (string value)
|
||||
# Note: This option can be changed without restarting.
|
||||
# Deprecated group/name - [DEFAULT]/log_config
|
||||
#log_config_append = <None>
|
||||
|
||||
# Defines the format string for %%(asctime)s in log records. Default:
|
||||
# %(default)s . This option is ignored if log_config_append is set. (string
|
||||
# value)
|
||||
#log_date_format = %Y-%m-%d %H:%M:%S
|
||||
|
||||
# (Optional) Name of log file to send logging output to. If no default is set,
|
||||
# logging will go to stderr as defined by use_stderr. This option is ignored if
|
||||
# log_config_append is set. (string value)
|
||||
# Deprecated group/name - [DEFAULT]/logfile
|
||||
#log_file = <None>
|
||||
|
||||
# (Optional) The base directory used for relative log_file paths. This option
|
||||
# is ignored if log_config_append is set. (string value)
|
||||
# Deprecated group/name - [DEFAULT]/logdir
|
||||
#log_dir = <None>
|
||||
|
||||
# Uses logging handler designed to watch file system. When log file is moved or
|
||||
# removed this handler will open a new log file with specified path
|
||||
# instantaneously. It makes sense only if log_file option is specified and Linux
|
||||
# platform is used. This option is ignored if log_config_append is set. (boolean
|
||||
# value)
|
||||
#watch_log_file = false
|
||||
|
||||
# Use syslog for logging. Existing syslog format is DEPRECATED and will be
|
||||
# changed later to honor RFC5424. This option is ignored if log_config_append is
|
||||
# set. (boolean value)
|
||||
#use_syslog = false
|
||||
|
||||
# Enable journald for logging. If running in a systemd environment you may wish
|
||||
# to enable journal support. Doing so will use the journal native protocol which
|
||||
# includes structured metadata in addition to log messages.This option is
|
||||
# ignored if log_config_append is set. (boolean value)
|
||||
#use_journal = false
|
||||
|
||||
# Syslog facility to receive log lines. This option is ignored if
|
||||
# log_config_append is set. (string value)
|
||||
#syslog_log_facility = LOG_USER
|
||||
|
||||
# Use JSON formatting for logging. This option is ignored if log_config_append
|
||||
# is set. (boolean value)
|
||||
#use_json = false
|
||||
|
||||
# Log output to standard error. This option is ignored if log_config_append is
|
||||
# set. (boolean value)
|
||||
#use_stderr = false
|
||||
|
||||
# Format string to use for log messages with context. (string value)
|
||||
#logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
|
||||
|
||||
# Format string to use for log messages when context is undefined. (string
|
||||
# value)
|
||||
#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
|
||||
|
||||
# Additional data to append to log message when logging level for the message is
|
||||
# DEBUG. (string value)
|
||||
#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
|
||||
|
||||
# Prefix each line of exception output with this format. (string value)
|
||||
#logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
|
||||
|
||||
# Defines the format string for %(user_identity)s that is used in
|
||||
# logging_context_format_string. (string value)
|
||||
#logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
|
||||
|
||||
# List of package logging levels in logger=LEVEL pairs. This option is ignored
|
||||
# if log_config_append is set. (list value)
|
||||
#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
|
||||
|
||||
# Enables or disables publication of error events. (boolean value)
|
||||
#publish_errors = false
|
||||
|
||||
# The format for an instance that is passed with the log message. (string value)
|
||||
#instance_format = "[instance: %(uuid)s] "
|
||||
|
||||
# The format for an instance UUID that is passed with the log message. (string
|
||||
# value)
|
||||
#instance_uuid_format = "[instance: %(uuid)s] "
|
||||
|
||||
# Interval, number of seconds, of log rate limiting. (integer value)
|
||||
#rate_limit_interval = 0
|
||||
|
||||
# Maximum number of logged messages per rate_limit_interval. (integer value)
|
||||
#rate_limit_burst = 0
|
||||
|
||||
# Log level name used by rate limiting: CRITICAL, ERROR, INFO, WARNING, DEBUG or
|
||||
# empty string. Logs with level greater or equal to rate_limit_except_level are
|
||||
# not filtered. An empty string means that all levels are filtered. (string
|
||||
# value)
|
||||
#rate_limit_except_level = CRITICAL
|
||||
|
||||
# Enables or disables fatal status of deprecations. (boolean value)
|
||||
#fatal_deprecations = false
|
||||
|
||||
|
||||
[database]
|
||||
|
||||
#
|
||||
# From oslo.db
|
||||
#
|
||||
|
||||
# If True, SQLite uses synchronous mode. (boolean value)
|
||||
#sqlite_synchronous = true
|
||||
|
||||
# The back end to use for the database. (string value)
|
||||
# Deprecated group/name - [DEFAULT]/db_backend
|
||||
#backend = sqlalchemy
|
||||
|
||||
# The SQLAlchemy connection string to use to connect to the database. (string
|
||||
# value)
|
||||
# Deprecated group/name - [DEFAULT]/sql_connection
|
||||
# Deprecated group/name - [DATABASE]/sql_connection
|
||||
# Deprecated group/name - [sql]/connection
|
||||
#connection = <None>
|
||||
|
||||
# The SQLAlchemy connection string to use to connect to the slave database.
|
||||
# (string value)
|
||||
#slave_connection = <None>
|
||||
|
||||
# The SQL mode to be used for MySQL sessions. This option, including the
|
||||
# default, overrides any server-set SQL mode. To use whatever SQL mode is set by
|
||||
# the server configuration, set this to no value. Example: mysql_sql_mode=
|
||||
# (string value)
|
||||
#mysql_sql_mode = TRADITIONAL
|
||||
|
||||
# If True, transparently enables support for handling MySQL Cluster (NDB).
|
||||
# (boolean value)
|
||||
#mysql_enable_ndb = false
|
||||
|
||||
# Connections which have been present in the connection pool longer than this
|
||||
# number of seconds will be replaced with a new one the next time they are
|
||||
# checked out from the pool. (integer value)
|
||||
# Deprecated group/name - [DATABASE]/idle_timeout
|
||||
# Deprecated group/name - [database]/idle_timeout
|
||||
# Deprecated group/name - [DEFAULT]/sql_idle_timeout
|
||||
# Deprecated group/name - [DATABASE]/sql_idle_timeout
|
||||
# Deprecated group/name - [sql]/idle_timeout
|
||||
#connection_recycle_time = 3600
|
||||
|
||||
# Minimum number of SQL connections to keep open in a pool. (integer value)
|
||||
# Deprecated group/name - [DEFAULT]/sql_min_pool_size
|
||||
# Deprecated group/name - [DATABASE]/sql_min_pool_size
|
||||
#min_pool_size = 1
|
||||
|
||||
# Maximum number of SQL connections to keep open in a pool. Setting a value of 0
|
||||
# indicates no limit. (integer value)
|
||||
# Deprecated group/name - [DEFAULT]/sql_max_pool_size
|
||||
# Deprecated group/name - [DATABASE]/sql_max_pool_size
|
||||
#max_pool_size = 5
|
||||
|
||||
# Maximum number of database connection retries during startup. Set to -1 to
|
||||
# specify an infinite retry count. (integer value)
|
||||
# Deprecated group/name - [DEFAULT]/sql_max_retries
|
||||
# Deprecated group/name - [DATABASE]/sql_max_retries
|
||||
#max_retries = 10
|
||||
|
||||
# Interval between retries of opening a SQL connection. (integer value)
|
||||
# Deprecated group/name - [DEFAULT]/sql_retry_interval
|
||||
# Deprecated group/name - [DATABASE]/reconnect_interval
|
||||
#retry_interval = 10
|
||||
|
||||
# If set, use this value for max_overflow with SQLAlchemy. (integer value)
|
||||
# Deprecated group/name - [DEFAULT]/sql_max_overflow
|
||||
# Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
|
||||
#max_overflow = 50
|
||||
|
||||
# Verbosity of SQL debugging information: 0=None, 100=Everything. (integer
|
||||
# value)
|
||||
# Minimum value: 0
|
||||
# Maximum value: 100
|
||||
# Deprecated group/name - [DEFAULT]/sql_connection_debug
|
||||
#connection_debug = 0
|
||||
|
||||
# Add Python stack traces to SQL as comment strings. (boolean value)
|
||||
# Deprecated group/name - [DEFAULT]/sql_connection_trace
|
||||
#connection_trace = false
|
||||
|
||||
# If set, use this value for pool_timeout with SQLAlchemy. (integer value)
|
||||
# Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
|
||||
#pool_timeout = <None>
|
||||
|
||||
# Enable the experimental use of database reconnect on connection lost. (boolean
|
||||
# value)
|
||||
#use_db_reconnect = false
|
||||
|
||||
# Seconds between retries of a database transaction. (integer value)
|
||||
#db_retry_interval = 1
|
||||
|
||||
# If True, increases the interval between retries of a database operation up to
|
||||
# db_max_retry_interval. (boolean value)
|
||||
#db_inc_retry_interval = true
|
||||
|
||||
# If db_inc_retry_interval is set, the maximum seconds between retries of a
|
||||
# database operation. (integer value)
|
||||
#db_max_retry_interval = 10
|
||||
|
||||
# Maximum retries in case of connection error or deadlock error before error is
|
||||
# raised. Set to -1 to specify an infinite retry count. (integer value)
|
||||
#db_max_retries = 20
|
||||
|
||||
#
|
||||
# From oslo.db.concurrency
|
||||
#
|
||||
|
||||
# Enable the experimental use of thread pooling for all DB API calls (boolean
|
||||
# value)
|
||||
# Deprecated group/name - [DEFAULT]/dbapi_use_tpool
|
||||
#use_tpool = false
|
||||
@@ -0,0 +1,35 @@
|
||||
# Use this pipeline for no auth - DEFAULT
|
||||
[pipeline:glance-registry]
|
||||
pipeline = healthcheck osprofiler unauthenticated-context registryapp
|
||||
|
||||
# Use this pipeline for keystone auth
|
||||
[pipeline:glance-registry-keystone]
|
||||
pipeline = healthcheck osprofiler authtoken context registryapp
|
||||
|
||||
# Use this pipeline for authZ only. This means that the registry will treat a
|
||||
# user as authenticated without making requests to keystone to reauthenticate
|
||||
# the user.
|
||||
[pipeline:glance-registry-trusted-auth]
|
||||
pipeline = healthcheck osprofiler context registryapp
|
||||
|
||||
[app:registryapp]
|
||||
paste.app_factory = glance.registry.api:API.factory
|
||||
|
||||
[filter:healthcheck]
|
||||
paste.filter_factory = oslo_middleware:Healthcheck.factory
|
||||
backends = disable_by_file
|
||||
disable_by_file_path = /etc/glance/healthcheck_disable
|
||||
|
||||
[filter:context]
|
||||
paste.filter_factory = glance.api.middleware.context:ContextMiddleware.factory
|
||||
|
||||
[filter:unauthenticated-context]
|
||||
paste.filter_factory = glance.api.middleware.context:UnauthenticatedContextMiddleware.factory
|
||||
|
||||
[filter:authtoken]
|
||||
paste.filter_factory = keystonemiddleware.auth_token:filter_factory
|
||||
|
||||
[filter:osprofiler]
|
||||
paste.filter_factory = osprofiler.web:WsgiMiddleware.factory
|
||||
hmac_keys = SECRET_KEY #DEPRECATED
|
||||
enabled = yes #DEPRECATED
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,4 @@
|
||||
This directory contains predefined namespaces for Glance Metadata Definitions
|
||||
Catalog. Files from this directory can be loaded into the database using
|
||||
db_load_metadefs command for glance-manage. Similarly you can unload the
|
||||
definitions using db_unload_metadefs command.
|
||||
+154
@@ -0,0 +1,154 @@
|
||||
{
|
||||
"namespace": "CIM::ProcessorAllocationSettingData",
|
||||
"display_name": "CIM Processor Allocation Setting",
|
||||
"description": "Properties related to the resource allocation settings of a processor (CPU) from Common Information Model (CIM) schema (http://www.dmtf.org/standards/cim). These are properties that identify processor setting data and may be specified to volume, image, host aggregate, flavor and Nova server as scheduler hint. For each property details, please refer to http://schemas.dmtf.org/wbem/cim-html/2/CIM_ProcessorAllocationSettingData.html.",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Cinder::Volume",
|
||||
"prefix": "CIM_PASD_",
|
||||
"properties_target": "image"
|
||||
},
|
||||
{
|
||||
"name": "OS::Glance::Image",
|
||||
"prefix": "CIM_PASD_"
|
||||
},
|
||||
{
|
||||
"name": "OS::Nova::Aggregate",
|
||||
"prefix": "CIM_PASD_"
|
||||
},
|
||||
{
|
||||
"name": "OS::Nova::Flavor",
|
||||
"prefix": "CIM_PASD_"
|
||||
},
|
||||
{
|
||||
"name": "OS::Nova::Server",
|
||||
"properties_target": "scheduler_hint"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"InstructionSet": {
|
||||
"title": "Instruction Set",
|
||||
"description": "Identifies the instruction set of the processor within a processor architecture.",
|
||||
"operators": ["<or>"],
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"x86:i386",
|
||||
"x86:i486",
|
||||
"x86:i586",
|
||||
"x86:i686",
|
||||
"x86:64",
|
||||
"IA-64:IA-64",
|
||||
"AS/400:TIMI",
|
||||
"Power:Power_2.03",
|
||||
"Power:Power_2.04",
|
||||
"Power:Power_2.05",
|
||||
"Power:Power_2.06",
|
||||
"S/390:ESA/390",
|
||||
"S/390:z/Architecture",
|
||||
"S/390:z/Architecture_2",
|
||||
"PA-RISC:PA-RISC_1.0",
|
||||
"PA-RISC:PA-RISC_2.0",
|
||||
"ARM:A32",
|
||||
"ARM:A64",
|
||||
"MIPS:MIPS_I",
|
||||
"MIPS:MIPS_II",
|
||||
"MIPS:MIPS_III",
|
||||
"MIPS:MIPS_IV",
|
||||
"MIPS:MIPS_V",
|
||||
"MIPS:MIPS32",
|
||||
"MIPS64:MIPS64",
|
||||
"Alpha:Alpha",
|
||||
"SPARC:SPARC_V7",
|
||||
"SPARC:SPARC_V8",
|
||||
"SPARC:SPARC_V9",
|
||||
"SPARC:SPARC_JPS1",
|
||||
"SPARC:UltraSPARC2005",
|
||||
"SPARC:UltraSPARC2007",
|
||||
"68k:68000",
|
||||
"68k:68010",
|
||||
"68k:68020",
|
||||
"68k:68030",
|
||||
"68k:68040",
|
||||
"68k:68060"
|
||||
]
|
||||
},
|
||||
"ProcessorArchitecture": {
|
||||
"title": "Processor Architecture",
|
||||
"description": "Identifies the processor architecture of the processor.",
|
||||
"operators": ["<or>"],
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"x86",
|
||||
"IA-64",
|
||||
"AS/400",
|
||||
"Power",
|
||||
"S/390",
|
||||
"PA-RISC",
|
||||
"ARM",
|
||||
"MIPS",
|
||||
"Alpha",
|
||||
"SPARC",
|
||||
"68k"
|
||||
]
|
||||
},
|
||||
"InstructionSetExtensionName": {
|
||||
"title": "Instruction Set Extension",
|
||||
"description": "Identifies the instruction set extensions of the processor within a processor architecture.",
|
||||
"operators": ["<or>", "<all-in>"],
|
||||
"type": "array",
|
||||
"items": {
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"x86:3DNow",
|
||||
"x86:3DNowExt",
|
||||
"x86:ABM",
|
||||
"x86:AES",
|
||||
"x86:AVX",
|
||||
"x86:AVX2",
|
||||
"x86:BMI",
|
||||
"x86:CX16",
|
||||
"x86:F16C",
|
||||
"x86:FSGSBASE",
|
||||
"x86:LWP",
|
||||
"x86:MMX",
|
||||
"x86:PCLMUL",
|
||||
"x86:RDRND",
|
||||
"x86:SSE2",
|
||||
"x86:SSE3",
|
||||
"x86:SSSE3",
|
||||
"x86:SSE4A",
|
||||
"x86:SSE41",
|
||||
"x86:SSE42",
|
||||
"x86:FMA3",
|
||||
"x86:FMA4",
|
||||
"x86:XOP",
|
||||
"x86:TBM",
|
||||
"x86:VT-d",
|
||||
"x86:VT-x",
|
||||
"x86:EPT",
|
||||
"x86:SVM",
|
||||
"PA-RISC:MAX",
|
||||
"PA-RISC:MAX2",
|
||||
"ARM:DSP",
|
||||
"ARM:Jazelle-DBX",
|
||||
"ARM:Thumb",
|
||||
"ARM:Thumb-2",
|
||||
"ARM:ThumbEE)",
|
||||
"ARM:VFP",
|
||||
"ARM:NEON",
|
||||
"ARM:TrustZone",
|
||||
"MIPS:MDMX",
|
||||
"MIPS:MIPS-3D",
|
||||
"Alpha:BWX",
|
||||
"Alpha:FIX",
|
||||
"Alpha:CIX",
|
||||
"Alpha:MVI"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"objects": []
|
||||
}
|
||||
|
||||
+178
@@ -0,0 +1,178 @@
|
||||
{
|
||||
"namespace": "CIM::ResourceAllocationSettingData",
|
||||
"display_name": "CIM Resource Allocation Setting Data",
|
||||
"description": "Properties from Common Information Model (CIM) schema (http://www.dmtf.org/standards/cim) that represent settings specifically related to an allocated resource that are outside the scope of the CIM class typically used to represent the resource itself. These properties may be specified to volume, host aggregate and flavor. For each property details, please refer to http://schemas.dmtf.org/wbem/cim-html/2/CIM_ResourceAllocationSettingData.html.",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Cinder::Volume",
|
||||
"prefix": "CIM_RASD_",
|
||||
"properties_target": "image"
|
||||
},
|
||||
{
|
||||
"name": "OS::Nova::Aggregate",
|
||||
"prefix": "CIM_RASD_"
|
||||
},
|
||||
{
|
||||
"name": "OS::Nova::Flavor",
|
||||
"prefix": "CIM_RASD_"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"Address": {
|
||||
"title": "Address",
|
||||
"description": "The address of the resource.",
|
||||
"type": "string"
|
||||
},
|
||||
"AddressOnParent": {
|
||||
"title": "Address On Parent",
|
||||
"description": "Describes the address of this resource in the context of the Parent.",
|
||||
"type": "string"
|
||||
},
|
||||
"AllocationUnits": {
|
||||
"title": "Allocation Units",
|
||||
"description": "This property specifies the units of allocation used by the Reservation and Limit properties.",
|
||||
"type": "string"
|
||||
},
|
||||
"AutomaticAllocation": {
|
||||
"title": "Automatic Allocation",
|
||||
"description": "This property specifies if the resource will be automatically allocated.",
|
||||
"type": "boolean"
|
||||
},
|
||||
"AutomaticDeallocation": {
|
||||
"title": "Automatic Deallocation",
|
||||
"description": "This property specifies if the resource will be automatically de-allocated.",
|
||||
"type": "boolean"
|
||||
},
|
||||
"ConsumerVisibility": {
|
||||
"title": "Consumer Visibility",
|
||||
"description": "Describes the consumers visibility to the allocated resource.",
|
||||
"operators": ["<or>"],
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"Unknown",
|
||||
"Passed-Through",
|
||||
"Virtualized",
|
||||
"Not represented",
|
||||
"DMTF reserved",
|
||||
"Vendor Reserved"
|
||||
]
|
||||
},
|
||||
"Limit": {
|
||||
"title": "Limit",
|
||||
"description": "This property specifies the upper bound, or maximum amount of resource that will be granted for this allocation.",
|
||||
"type": "string"
|
||||
},
|
||||
"MappingBehavior": {
|
||||
"title": "Mapping Behavior",
|
||||
"description": "Specifies how this resource maps to underlying resources. If the HostResource array contains any entries, this property reflects how the resource maps to those specific resources.",
|
||||
"operators": ["<or>"],
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"Unknown",
|
||||
"Not Supported",
|
||||
"Dedicated",
|
||||
"Soft Affinity",
|
||||
"Hard Affinity",
|
||||
"DMTF Reserved",
|
||||
"Vendor Reserved"
|
||||
]
|
||||
},
|
||||
"OtherResourceType": {
|
||||
"title": "Other Resource Type",
|
||||
"description": "A string that describes the resource type when a well defined value is not available and ResourceType has the value 'Other'.",
|
||||
"type": "string"
|
||||
},
|
||||
"Parent": {
|
||||
"title": "Parent",
|
||||
"description": "The Parent of the resource.",
|
||||
"type": "string"
|
||||
},
|
||||
"PoolID": {
|
||||
"title": "Pool ID",
|
||||
"description": "This property specifies which ResourcePool the resource is currently allocated from, or which ResourcePool the resource will be allocated from when the allocation occurs.",
|
||||
"type": "string"
|
||||
},
|
||||
"Reservation": {
|
||||
"title": "Reservation",
|
||||
"description": "This property specifies the amount of resource guaranteed to be available for this allocation.",
|
||||
"type": "string"
|
||||
},
|
||||
"ResourceSubType": {
|
||||
"title": "Resource Sub Type",
|
||||
"description": "A string describing an implementation specific sub-type for this resource.",
|
||||
"type": "string"
|
||||
},
|
||||
"ResourceType": {
|
||||
"title": "Resource Type",
|
||||
"description": "The type of resource this allocation setting represents.",
|
||||
"operators": ["<or>"],
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"Other",
|
||||
"Computer System",
|
||||
"Processor",
|
||||
"Memory",
|
||||
"IDE Controller",
|
||||
"Parallel SCSI HBA",
|
||||
"FC HBA",
|
||||
"iSCSI HBA",
|
||||
"IB HCA",
|
||||
"Ethernet Adapter",
|
||||
"Other Network Adapter",
|
||||
"I/O Slot",
|
||||
"I/O Device",
|
||||
"Floppy Drive",
|
||||
"CD Drive",
|
||||
"DVD drive",
|
||||
"Disk Drive",
|
||||
"Tape Drive",
|
||||
"Storage Extent",
|
||||
"Other storage device",
|
||||
"Serial port",
|
||||
"Parallel port",
|
||||
"USB Controller",
|
||||
"Graphics controller",
|
||||
"IEEE 1394 Controller",
|
||||
"Partitionable Unit",
|
||||
"Base Partitionable Unit",
|
||||
"Power",
|
||||
"Cooling Capacity",
|
||||
"Ethernet Switch Port",
|
||||
"Logical Disk",
|
||||
"Storage Volume",
|
||||
"Ethernet Connection",
|
||||
"DMTF reserved",
|
||||
"Vendor Reserved"
|
||||
]
|
||||
},
|
||||
"VirtualQuantity": {
|
||||
"title": "Virtual Quantity",
|
||||
"description": "This property specifies the quantity of resources presented to the consumer.",
|
||||
"type": "string"
|
||||
},
|
||||
"VirtualQuantityUnits": {
|
||||
"title": "Virtual Quantity Units",
|
||||
"description": "This property specifies the units used by the VirtualQuantity property.",
|
||||
"type": "string"
|
||||
},
|
||||
"Weight": {
|
||||
"title": "Weight",
|
||||
"description": "This property specifies a relative priority for this allocation in relation to other allocations from the same ResourcePool.",
|
||||
"type": "string"
|
||||
},
|
||||
"Connection": {
|
||||
"title": "Connection",
|
||||
"description": "The thing to which this resource is connected.",
|
||||
"type": "string"
|
||||
},
|
||||
"HostResource": {
|
||||
"title": "Host Resource",
|
||||
"description": "This property exposes specific assignment of resources.",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"objects": []
|
||||
}
|
||||
|
||||
+122
@@ -0,0 +1,122 @@
|
||||
{
|
||||
"namespace": "CIM::StorageAllocationSettingData",
|
||||
"display_name": "CIM Storage Allocation Setting Data",
|
||||
"description": "Properties related to the allocation of virtual storage from Common Information Model (CIM) schema (http://www.dmtf.org/standards/cim). These properties may be specified to volume, host aggregate and flavor. For each property details, please refer to http://schemas.dmtf.org/wbem/cim-html/2/CIM_StorageAllocationSettingData.html.",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Cinder::Volume",
|
||||
"prefix": "CIM_SASD_"
|
||||
},
|
||||
{
|
||||
"name": "OS::Nova::Aggregate",
|
||||
"prefix": "CIM_SASD_"
|
||||
},
|
||||
{
|
||||
"name": "OS::Nova::Flavor",
|
||||
"prefix": "CIM_SASD_"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"Access": {
|
||||
"title": "Access",
|
||||
"description": "Access describes whether the allocated storage extent is 1 (readable), 2 (writeable), or 3 (both).",
|
||||
"operators": ["<or>"],
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"Unknown",
|
||||
"Readable",
|
||||
"Writeable",
|
||||
"Read/Write Supported",
|
||||
"DMTF Reserved"
|
||||
]
|
||||
},
|
||||
"HostExtentName": {
|
||||
"title": "Host Extent Name",
|
||||
"description": "A unique identifier for the host extent.",
|
||||
"type": "string"
|
||||
},
|
||||
"HostExtentNameFormat": {
|
||||
"title": "Host Extent Name Format",
|
||||
"description": "The HostExtentNameFormat property identifies the format that is used for the value of the HostExtentName property.",
|
||||
"operators": ["<or>"],
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"Unknown",
|
||||
"Other",
|
||||
"SNVM",
|
||||
"NAA",
|
||||
"EUI64",
|
||||
"T10VID",
|
||||
"OS Device Name",
|
||||
"DMTF Reserved"
|
||||
]
|
||||
},
|
||||
"HostExtentNameNamespace": {
|
||||
"title": "Host Extent Name Namespace",
|
||||
"description": "If the host extent is a SCSI volume, then the preferred source for SCSI volume names is SCSI VPD Page 83 responses.",
|
||||
"operators": ["<or>"],
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"Unknown",
|
||||
"Other",
|
||||
"VPD83Type3",
|
||||
"VPD83Type2",
|
||||
"VPD83Type1",
|
||||
"VPD80",
|
||||
"NodeWWN",
|
||||
"SNVM",
|
||||
"OS Device Namespace",
|
||||
"DMTF Reserved"
|
||||
]
|
||||
},
|
||||
"HostExtentStartingAddress": {
|
||||
"title": "Host Extent Starting Address",
|
||||
"description": "The HostExtentStartingAddress property identifies the starting address on the host storage extent identified by the value of the HostExtentName property that is used for the allocation of the virtual storage extent.",
|
||||
"type": "string"
|
||||
},
|
||||
"HostResourceBlockSize": {
|
||||
"title": "Host Resource Block Size",
|
||||
"description": "Size in bytes of the blocks that are allocated at the host as the result of this storage resource allocation or storage resource allocation request.",
|
||||
"type": "string"
|
||||
},
|
||||
"Limit": {
|
||||
"title": "Limit",
|
||||
"description": "The maximum amount of blocks that will be granted for this storage resource allocation at the host.",
|
||||
"type": "string"
|
||||
},
|
||||
"OtherHostExtentNameFormat": {
|
||||
"title": "Other Host Extent Name Format",
|
||||
"description": "A string describing the format of the HostExtentName property if the value of the HostExtentNameFormat property is 1 (Other).",
|
||||
"type": "string"
|
||||
},
|
||||
"OtherHostExtentNameNamespace": {
|
||||
"title": "Other Host Extent Name Namespace",
|
||||
"description": "A string describing the namespace of the HostExtentName property if the value of the HostExtentNameNamespace matches 1 (Other).",
|
||||
"type": "string"
|
||||
},
|
||||
"Reservation": {
|
||||
"title": "Reservation",
|
||||
"description": "The amount of blocks that are guaranteed to be available for this storage resource allocation at the host.",
|
||||
"type": "string"
|
||||
},
|
||||
"VirtualQuantity": {
|
||||
"title": "Virtual Quantity",
|
||||
"description": "Number of blocks that are presented to the consumer.",
|
||||
"type": "string"
|
||||
},
|
||||
"VirtualQuantityUnits": {
|
||||
"title": "Virtual Quantity Units",
|
||||
"description": "This property specifies the units used by the VirtualQuantity property.",
|
||||
"type": "string"
|
||||
},
|
||||
"VirtualResourceBlockSize": {
|
||||
"title": "Virtual Resource Block Size",
|
||||
"description": "Size in bytes of the blocks that are presented to the consumer as the result of this storage resource allocation or storage resource allocation request.",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"objects": []
|
||||
}
|
||||
|
||||
+127
@@ -0,0 +1,127 @@
|
||||
{
|
||||
"namespace": "CIM::VirtualSystemSettingData",
|
||||
"display_name": "CIM Virtual System Setting Data",
|
||||
"description": "A set of virtualization specific properties from Common Information Model (CIM) schema (http://www.dmtf.org/standards/cim), which define the virtual aspects of a virtual system. These properties may be specified to host aggregate and flavor. For each property details, please refer to http://schemas.dmtf.org/wbem/cim-html/2/CIM_VirtualSystemSettingData.html.",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Nova::Aggregate",
|
||||
"prefix": "CIM_VSSD_"
|
||||
},
|
||||
{
|
||||
"name": "OS::Nova::Flavor",
|
||||
"prefix": "CIM_VSSD_"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"AutomaticRecoveryAction": {
|
||||
"title": "Automatic Recovery Action",
|
||||
"description": "Action to take for the virtual system when the software executed by the virtual system fails.",
|
||||
"operators": ["<or>"],
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"None",
|
||||
"Restart",
|
||||
"Revert to snapshot",
|
||||
"DMTF Reserved"
|
||||
]
|
||||
},
|
||||
"AutomaticShutdownAction": {
|
||||
"title": "Automatic Shutdown Action",
|
||||
"description": "Action to take for the virtual system when the host is shut down.",
|
||||
"operators": ["<or>"],
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"Turn Off",
|
||||
"Save state",
|
||||
"Shutdown",
|
||||
"DMTF Reserved"
|
||||
]
|
||||
},
|
||||
"AutomaticStartupAction": {
|
||||
"title": "Automatic Startup Action",
|
||||
"description": "Action to take for the virtual system when the host is started.",
|
||||
"operators": ["<or>"],
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"None",
|
||||
"Restart if previously active",
|
||||
"Always startup",
|
||||
"DMTF Reserved"
|
||||
]
|
||||
},
|
||||
"AutomaticStartupActionDelay": {
|
||||
"title": "Automatic Startup Action Delay",
|
||||
"description": "Delay applicable to startup action.",
|
||||
"type": "string"
|
||||
},
|
||||
"AutomaticStartupActionSequenceNumber": {
|
||||
"title": "Automatic Startup Action Sequence Number",
|
||||
"description": "Number indicating the relative sequence of virtual system activation when the host system is started.",
|
||||
"type": "string"
|
||||
},
|
||||
"ConfigurationDataRoot": {
|
||||
"title": "Configuration Data Root",
|
||||
"description": "Filepath of a directory where information about the virtual system configuration is stored.",
|
||||
"type": "string"
|
||||
},
|
||||
"ConfigurationFile": {
|
||||
"title": "Configuration File",
|
||||
"description": "Filepath of a file where information about the virtual system configuration is stored.",
|
||||
"type": "string"
|
||||
},
|
||||
"ConfigurationID": {
|
||||
"title": "Configuration ID",
|
||||
"description": "Unique id of the virtual system configuration.",
|
||||
"type": "string"
|
||||
},
|
||||
"CreationTime": {
|
||||
"title": "Creation Time",
|
||||
"description": "Time when the virtual system configuration was created.",
|
||||
"type": "string"
|
||||
},
|
||||
"LogDataRoot": {
|
||||
"title": "Log Data Root",
|
||||
"description": "Filepath of a directory where log information about the virtual system is stored.",
|
||||
"type": "string"
|
||||
},
|
||||
"RecoveryFile": {
|
||||
"title": "Recovery File",
|
||||
"description": "Filepath of a file where recovery relateded information of the virtual system is stored.",
|
||||
"type": "string"
|
||||
},
|
||||
"SnapshotDataRoot": {
|
||||
"title": "Snapshot Data Root",
|
||||
"description": "Filepath of a directory where information about virtual system snapshots is stored.",
|
||||
"type": "string"
|
||||
},
|
||||
"SuspendDataRoot": {
|
||||
"title": "Suspend Data Root",
|
||||
"description": "Filepath of a directory where suspend related information about the virtual system is stored.",
|
||||
"type": "string"
|
||||
},
|
||||
"SwapFileDataRoot": {
|
||||
"title": "Swap File Data Root",
|
||||
"description": "Filepath of a directory where swapfiles of the virtual system are stored.",
|
||||
"type": "string"
|
||||
},
|
||||
"VirtualSystemIdentifier": {
|
||||
"title": "Virtual System Identifier",
|
||||
"description": "VirtualSystemIdentifier shall reflect a unique name for the system as it is used within the virtualization platform.",
|
||||
"type": "string"
|
||||
},
|
||||
"VirtualSystemType": {
|
||||
"title": "Virtual System Type",
|
||||
"description": "VirtualSystemType shall reflect a particular type of virtual system.",
|
||||
"type": "string"
|
||||
},
|
||||
"Notes": {
|
||||
"title": "Notes",
|
||||
"description": "End-user supplied notes that are related to the virtual system.",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"objects": []
|
||||
}
|
||||
|
||||
@@ -0,0 +1,21 @@
|
||||
{
|
||||
"namespace": "OS::Compute::AggregateDiskFilter",
|
||||
"display_name": "Disk Allocation per Host",
|
||||
"description": "Properties related to the Nova scheduler filter AggregateDiskFilter. Filters aggregate hosts based on the available disk space compared to the requested disk space. Hosts in the aggregate with not enough usable disk will be filtered out. The filter must be enabled in the Nova scheduler to use these properties.",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Nova::Aggregate"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"disk_allocation_ratio": {
|
||||
"title": "Disk Subscription Ratio",
|
||||
"description": "Allows the host to be under and over subscribed for the amount of disk space requested for an instance. A ratio greater than 1.0 allows for over subscription (hosts may have less usable disk space than requested). A ratio less than 1.0 allows for under subscription.",
|
||||
"type": "number",
|
||||
"readonly": false
|
||||
}
|
||||
},
|
||||
"objects": []
|
||||
}
|
||||
@@ -0,0 +1,23 @@
|
||||
{
|
||||
"namespace": "OS::Compute::AggregateIoOpsFilter",
|
||||
"display_name": "IO Ops per Host",
|
||||
"description": "Properties related to the Nova scheduler filter AggregateIoOpsFilter. Filters aggregate hosts based on the number of instances currently changing state. Hosts in the aggregate with too many instances changing state will be filtered out. The filter must be enabled in the Nova scheduler to use these properties.",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Nova::Aggregate"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"max_io_ops_per_host": {
|
||||
"title": "Maximum IO Operations per Host",
|
||||
"description": "Prevents hosts in the aggregate that have this many or more instances currently in build, resize, snapshot, migrate, rescue or unshelve to be scheduled for new instances.",
|
||||
"type": "integer",
|
||||
"readonly": false,
|
||||
"default": 8,
|
||||
"minimum": 1
|
||||
}
|
||||
},
|
||||
"objects": []
|
||||
}
|
||||
@@ -0,0 +1,21 @@
|
||||
{
|
||||
"namespace": "OS::Compute::AggregateNumInstancesFilter",
|
||||
"display_name": "Instances per Host",
|
||||
"description": "Properties related to the Nova scheduler filter AggregateNumInstancesFilter. Filters aggregate hosts by the number of running instances on it. Hosts in the aggregate with too many instances will be filtered out. The filter must be enabled in the Nova scheduler to use these properties.", "visibility": "public",
|
||||
"protected": false,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Nova::Aggregate"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"max_instances_per_host": {
|
||||
"title": "Max Instances Per Host",
|
||||
"description": "Maximum number of instances allowed to run on a host in the aggregate.",
|
||||
"type": "integer",
|
||||
"readonly": false,
|
||||
"minimum": 0
|
||||
}
|
||||
},
|
||||
"objects": []
|
||||
}
|
||||
@@ -0,0 +1,43 @@
|
||||
{
|
||||
"namespace": "OS::Compute::CPUPinning",
|
||||
"display_name": "CPU Pinning",
|
||||
"description": "This provides the preferred CPU pinning and CPU thread pinning policy to be used when pinning vCPU of the guest to pCPU of the host. See http://docs.openstack.org/admin-guide/compute-numa-cpu-pinning.html",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Glance::Image",
|
||||
"prefix": "hw_"
|
||||
},
|
||||
{
|
||||
"name": "OS::Cinder::Volume",
|
||||
"prefix": "hw_",
|
||||
"properties_target": "image"
|
||||
},
|
||||
{
|
||||
"name": "OS::Nova::Flavor",
|
||||
"prefix": "hw:"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"cpu_policy": {
|
||||
"title": "CPU Pinning policy",
|
||||
"description": "Type of CPU pinning policy.",
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"shared",
|
||||
"dedicated"
|
||||
]
|
||||
},
|
||||
"cpu_thread_policy": {
|
||||
"title": "CPU Thread Pinning Policy.",
|
||||
"description": "Type of CPU thread pinning policy.",
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"isolate",
|
||||
"prefer",
|
||||
"require"
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,29 @@
|
||||
{
|
||||
"namespace": "OS::Compute::GuestMemoryBacking",
|
||||
"display_name": "Guest Memory Backing",
|
||||
"description": "This provides the preferred backing option for guest RAM. Guest's memory can be backed by hugepages to limit TLB lookups. See also: https://wiki.openstack.org/wiki/VirtDriverGuestCPUMemoryPlacement",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Nova::Flavor",
|
||||
"prefix": "hw:"
|
||||
},
|
||||
{
|
||||
"name": "OS::Glance::Image",
|
||||
"prefix": "hw_"
|
||||
},
|
||||
{
|
||||
"name": "OS::Cinder::Volume",
|
||||
"prefix": "hw_",
|
||||
"properties_target": "image"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"mem_page_size": {
|
||||
"title": "Size of memory page",
|
||||
"description": "Page size to be used for Guest memory backing. Value can be specified as <number><unit> (i.e.: 2MB, 1GB) or 'any', 'small', 'large'. If this property is set in Image metadata then only 'any' and 'large' values are accepted in Flavor metadata by Nova API.",
|
||||
"type": "string"
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,21 @@
|
||||
{
|
||||
"namespace": "OS::Compute::GuestShutdownBehavior",
|
||||
"display_name": "Shutdown Behavior",
|
||||
"description": "These properties allow modifying the shutdown behavior for stop, rescue, resize, and shelve operations.",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Glance::Image"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"os_shutdown_timeout": {
|
||||
"title": "Shutdown timeout",
|
||||
"description": "By default, guests will be given 60 seconds to perform a graceful shutdown. After that, the VM is powered off. This property allows overriding the amount of time (unit: seconds) to allow a guest OS to cleanly shut down before power off. A value of 0 (zero) means the guest will be powered off immediately with no opportunity for guest OS clean-up.",
|
||||
"type": "integer",
|
||||
"minimum": 0
|
||||
}
|
||||
},
|
||||
"objects": []
|
||||
}
|
||||
@@ -0,0 +1,293 @@
|
||||
{
|
||||
"namespace": "OS::Compute::HostCapabilities",
|
||||
"display_name": "Compute Host Capabilities",
|
||||
"description": "Hardware capabilities provided by the compute host. This provides the ability to fine tune the hardware specification required when an instance is requested. The ComputeCapabilitiesFilter should be enabled in the Nova scheduler to use these properties. When enabled, this filter checks that the capabilities provided by the compute host satisfy any extra specifications requested. Only hosts that can provide the requested capabilities will be eligible for hosting the instance.",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Nova::Flavor",
|
||||
"prefix": "capabilities:"
|
||||
},
|
||||
{
|
||||
"name": "OS::Nova::Aggregate",
|
||||
"prefix": "aggregate_instance_extra_specs:"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"cpu_info:vendor": {
|
||||
"title": "Vendor",
|
||||
"description": "Specifies the CPU manufacturer.",
|
||||
"operators": ["<or>"],
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"Intel",
|
||||
"AMD"
|
||||
]
|
||||
},
|
||||
"cpu_info:model": {
|
||||
"title": "Model",
|
||||
"description": "Specifies the CPU model. Use this property to ensure that your vm runs on a a specific cpu model.",
|
||||
"operators": ["<or>"],
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"Conroe",
|
||||
"Core2Duo",
|
||||
"Penryn",
|
||||
"Nehalem",
|
||||
"Westmere",
|
||||
"SandyBridge",
|
||||
"IvyBridge",
|
||||
"Haswell",
|
||||
"Broadwell",
|
||||
"Delhi",
|
||||
"Seoul",
|
||||
"Abu Dhabi",
|
||||
"Interlagos",
|
||||
"Kabini",
|
||||
"Valencia",
|
||||
"Zurich",
|
||||
"Budapest",
|
||||
"Barcelona",
|
||||
"Suzuka",
|
||||
"Shanghai",
|
||||
"Istanbul",
|
||||
"Lisbon",
|
||||
"Magny-Cours",
|
||||
"Valencia",
|
||||
"Cortex-A57",
|
||||
"Cortex-A53",
|
||||
"Cortex-A12",
|
||||
"Cortex-A17",
|
||||
"Cortex-A15",
|
||||
"Coretx-A7",
|
||||
"X-Gene"
|
||||
]
|
||||
},
|
||||
"cpu_info:arch": {
|
||||
"title": "Architecture",
|
||||
"description": "Specifies the CPU architecture. Use this property to specify the architecture supported by the hypervisor.",
|
||||
"operators": ["<or>"],
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"x86",
|
||||
"x86_64",
|
||||
"i686",
|
||||
"ia64",
|
||||
"ARMv8-A",
|
||||
"ARMv7-A"
|
||||
]
|
||||
},
|
||||
"cpu_info:topology:cores": {
|
||||
"title": "cores",
|
||||
"description": "Number of cores.",
|
||||
"type": "integer",
|
||||
"readonly": false,
|
||||
"default": 1
|
||||
},
|
||||
"cpu_info:topology:threads": {
|
||||
"title": "threads",
|
||||
"description": "Number of threads.",
|
||||
"type": "integer",
|
||||
"readonly": false,
|
||||
"default": 1
|
||||
},
|
||||
"cpu_info:topology:sockets": {
|
||||
"title": "sockets",
|
||||
"description": "Number of sockets.",
|
||||
"type": "integer",
|
||||
"readonly": false,
|
||||
"default": 1
|
||||
},
|
||||
"cpu_info:features": {
|
||||
"title": "Features",
|
||||
"description": "Specifies CPU flags/features. Using this property you can specify the required set of instructions supported by a vm.",
|
||||
"operators": ["<or>", "<all-in>"],
|
||||
"type": "array",
|
||||
"items": {
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"fpu",
|
||||
"vme",
|
||||
"de",
|
||||
"pse",
|
||||
"tsc",
|
||||
"msr",
|
||||
"pae",
|
||||
"mce",
|
||||
"cx8",
|
||||
"apic",
|
||||
"sep",
|
||||
"mtrr",
|
||||
"pge",
|
||||
"mca",
|
||||
"cmov",
|
||||
"pat",
|
||||
"pse36",
|
||||
"pn",
|
||||
"clflush",
|
||||
"dts",
|
||||
"acpi",
|
||||
"mmx",
|
||||
"fxsr",
|
||||
"sse",
|
||||
"sse2",
|
||||
"ss",
|
||||
"ht",
|
||||
"tm",
|
||||
"ia64",
|
||||
"pbe",
|
||||
"syscall",
|
||||
"mp",
|
||||
"nx",
|
||||
"mmxext",
|
||||
"fxsr_opt",
|
||||
"pdpe1gb",
|
||||
"rdtscp",
|
||||
"lm",
|
||||
"3dnowext",
|
||||
"3dnow",
|
||||
"arch_perfmon",
|
||||
"pebs",
|
||||
"bts",
|
||||
"rep_good",
|
||||
"nopl",
|
||||
"xtopology",
|
||||
"tsc_reliable",
|
||||
"nonstop_tsc",
|
||||
"extd_apicid",
|
||||
"amd_dcm",
|
||||
"aperfmperf",
|
||||
"eagerfpu",
|
||||
"nonstop_tsc_s3",
|
||||
"pni",
|
||||
"pclmulqdq",
|
||||
"dtes64",
|
||||
"monitor",
|
||||
"ds_cpl",
|
||||
"vmx",
|
||||
"smx",
|
||||
"est",
|
||||
"tm2",
|
||||
"ssse3",
|
||||
"cid",
|
||||
"fma",
|
||||
"cx16",
|
||||
"xtpr",
|
||||
"pdcm",
|
||||
"pcid",
|
||||
"dca",
|
||||
"sse4_1",
|
||||
"sse4_2",
|
||||
"x2apic",
|
||||
"movbe",
|
||||
"popcnt",
|
||||
"tsc_deadline_timer",
|
||||
"aes",
|
||||
"xsave",
|
||||
"avx",
|
||||
"f16c",
|
||||
"rdrand",
|
||||
"hypervisor",
|
||||
"rng",
|
||||
"rng_en",
|
||||
"ace",
|
||||
"ace_en",
|
||||
"ace2",
|
||||
"ace2_en",
|
||||
"phe",
|
||||
"phe_en",
|
||||
"pmm",
|
||||
"pmm_en",
|
||||
"lahf_lm",
|
||||
"cmp_legacy",
|
||||
"svm",
|
||||
"extapic",
|
||||
"cr8_legacy",
|
||||
"abm",
|
||||
"sse4a",
|
||||
"misalignsse",
|
||||
"3dnowprefetch",
|
||||
"osvw",
|
||||
"ibs",
|
||||
"xop",
|
||||
"skinit",
|
||||
"wdt",
|
||||
"lwp",
|
||||
"fma4",
|
||||
"tce",
|
||||
"nodeid_msr",
|
||||
"tbm",
|
||||
"topoext",
|
||||
"perfctr_core",
|
||||
"perfctr_nb",
|
||||
"bpext",
|
||||
"perfctr_l2",
|
||||
"mwaitx",
|
||||
"ida",
|
||||
"arat",
|
||||
"cpb",
|
||||
"epb",
|
||||
"pln",
|
||||
"pts",
|
||||
"dtherm",
|
||||
"hw_pstate",
|
||||
"proc_feedback",
|
||||
"hwp",
|
||||
"hwp_notify",
|
||||
"hwp_act_window",
|
||||
"hwp_epp",
|
||||
"hwp_pkg_req",
|
||||
"intel_pt",
|
||||
"tpr_shadow",
|
||||
"vnmi",
|
||||
"flexpriority",
|
||||
"ept",
|
||||
"vpid",
|
||||
"npt",
|
||||
"lbrv",
|
||||
"svm_lock",
|
||||
"nrip_save",
|
||||
"tsc_scale",
|
||||
"vmcb_clean",
|
||||
"flushbyasid",
|
||||
"decodeassists",
|
||||
"pausefilter",
|
||||
"pfthreshold",
|
||||
"vmmcall",
|
||||
"fsgsbase",
|
||||
"tsc_adjust",
|
||||
"bmi1",
|
||||
"hle",
|
||||
"avx2",
|
||||
"smep",
|
||||
"bmi2",
|
||||
"erms",
|
||||
"invpcid",
|
||||
"rtm",
|
||||
"cqm",
|
||||
"mpx",
|
||||
"avx512f",
|
||||
"rdseed",
|
||||
"adx",
|
||||
"smap",
|
||||
"pcommit",
|
||||
"clflushopt",
|
||||
"clwb",
|
||||
"avx512pf",
|
||||
"avx512er",
|
||||
"avx512cd",
|
||||
"sha_ni",
|
||||
"xsaveopt",
|
||||
"xsavec",
|
||||
"xgetbv1",
|
||||
"xsaves",
|
||||
"cqm_llc",
|
||||
"cqm_occup_llc",
|
||||
"clzero"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"objects": []
|
||||
}
|
||||
@@ -0,0 +1,42 @@
|
||||
{
|
||||
"namespace": "OS::Compute::Hypervisor",
|
||||
"display_name": "Hypervisor Selection",
|
||||
"description": "OpenStack Compute supports many hypervisors, although most installations use only one hypervisor. For installations with multiple supported hypervisors, you can schedule different hypervisors using the ImagePropertiesFilter. This filters compute nodes that satisfy any architecture, hypervisor type, or virtual machine mode properties specified on the instance's image properties.",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Glance::Image"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"hypervisor_type": {
|
||||
"title": "Hypervisor Type",
|
||||
"description": "Hypervisor type required by the image. Used with the ImagePropertiesFilter. \n\n KVM - Kernel-based Virtual Machine. LXC - Linux Containers (through libvirt). QEMU - Quick EMUlator. UML - User Mode Linux. hyperv - Microsoft® hyperv. vmware - VMware® vsphere. Baremetal - physical provisioning. VZ - Virtuozzo OS Containers and Virtual Machines (through libvirt). For more information, see: http://docs.openstack.org/trunk/config-reference/content/section_compute-hypervisors.html",
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"baremetal",
|
||||
"hyperv",
|
||||
"kvm",
|
||||
"lxc",
|
||||
"qemu",
|
||||
"uml",
|
||||
"vmware",
|
||||
"vz",
|
||||
"xen"
|
||||
]
|
||||
},
|
||||
"vm_mode": {
|
||||
"title": "VM Mode",
|
||||
"description": "The virtual machine mode. This represents the host/guest ABI (application binary interface) used for the virtual machine. Used with the ImagePropertiesFilter. \n\n hvm — Fully virtualized - This is the virtual machine mode (vm_mode) used by QEMU and KVM. \n\n xen - Xen 3.0 paravirtualized. \n\n uml — User Mode Linux paravirtualized. \n\n exe — Executables in containers. This is the mode used by LXC.",
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"hvm",
|
||||
"xen",
|
||||
"uml",
|
||||
"exe"
|
||||
]
|
||||
}
|
||||
},
|
||||
"objects": []
|
||||
}
|
||||
@@ -0,0 +1,36 @@
|
||||
{
|
||||
"namespace": "OS::Compute::InstanceData",
|
||||
"display_name": "Instance Config Data",
|
||||
"description": "Instances can perform self-configuration based on data made available to the running instance. These properties affect instance configuration.",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Glance::Image"
|
||||
},
|
||||
{
|
||||
"name": "OS::Cinder::Volume",
|
||||
"properties_target": "image"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"img_config_drive": {
|
||||
"title": "Config Drive",
|
||||
"description": "This property specifies whether or not Nova should use a config drive when booting the image. Mandatory means that Nova will always use a config drive when booting the image. OpenStack can be configured to write metadata to a special configuration drive that will be attached to the instance when it boots. The instance can retrieve any information from the config drive. One use case for the config drive is to pass network configuration information to the instance. See also: http://docs.openstack.org/user-guide/cli_config_drive.html",
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"optional",
|
||||
"mandatory"
|
||||
]
|
||||
},
|
||||
"os_require_quiesce": {
|
||||
"title": "Require Quiescent File system",
|
||||
"description": "This property specifies whether or not the filesystem must be quiesced during snapshot processing. For volume backed and image backed snapshots, yes means that snapshotting is aborted when quiescing fails, whereas, no means quiescing will be skipped and snapshot processing will continue after the quiesce failure.",
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"yes",
|
||||
"no"
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,103 @@
|
||||
{
|
||||
"namespace": "OS::Compute::LibvirtImage",
|
||||
"display_name": "libvirt Driver Options for Images",
|
||||
"description": "The libvirt Compute Driver Options for Glance Images. \n\nThese are properties specific to compute drivers. For a list of all hypervisors, see here: https://wiki.openstack.org/wiki/HypervisorSupportMatrix.",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Glance::Image"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"hw_disk_bus": {
|
||||
"title": "Disk Bus",
|
||||
"description": "Specifies the type of disk controller to attach disk devices to.",
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"scsi",
|
||||
"virtio",
|
||||
"uml",
|
||||
"xen",
|
||||
"ide",
|
||||
"usb",
|
||||
"fdc",
|
||||
"sata"
|
||||
]
|
||||
},
|
||||
"hw_rng_model": {
|
||||
"title": "Random Number Generator Device",
|
||||
"description": "Adds a random-number generator device to the image's instances. The cloud administrator can enable and control device behavior by configuring the instance's flavor. By default: The generator device is disabled. /dev/random is used as the default entropy source. To specify a physical HW RNG device, use the following option in the nova.conf file: rng_dev_path=/dev/hwrng",
|
||||
"type": "string",
|
||||
"default": "virtio"
|
||||
},
|
||||
"hw_machine_type": {
|
||||
"title": "Machine Type",
|
||||
"description": "Enables booting an ARM system using the specified machine type. By default, if an ARM image is used and its type is not specified, Compute uses vexpress-a15 (for ARMv7) or virt (for AArch64) machine types. Valid types can be viewed by using the virsh capabilities command (machine types are displayed in the machine tag).",
|
||||
"type": "string"
|
||||
},
|
||||
"hw_scsi_model": {
|
||||
"title": "SCSI Model",
|
||||
"description": "Enables the use of VirtIO SCSI (virtio-scsi) to provide block device access for compute instances; by default, instances use VirtIO Block (virtio-blk). VirtIO SCSI is a para-virtualized SCSI controller device that provides improved scalability and performance, and supports advanced SCSI hardware.",
|
||||
"type": "string",
|
||||
"default": "virtio-scsi"
|
||||
},
|
||||
"hw_video_model": {
|
||||
"title": "Video Model",
|
||||
"description": "The video image driver used.",
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"vga",
|
||||
"cirrus",
|
||||
"vmvga",
|
||||
"xen",
|
||||
"qxl"
|
||||
]
|
||||
},
|
||||
"hw_video_ram": {
|
||||
"title": "Max Video Ram",
|
||||
"description": "Maximum RAM (unit: MB) for the video image. Used only if a hw_video:ram_max_mb value has been set in the flavor's extra_specs and that value is higher than the value set in hw_video_ram.",
|
||||
"type": "integer",
|
||||
"minimum": 0
|
||||
},
|
||||
"os_command_line": {
|
||||
"title": "Kernel Command Line",
|
||||
"description": "The kernel command line to be used by the libvirt driver, instead of the default. For linux containers (LXC), the value is used as arguments for initialization. This key is valid only for Amazon kernel, ramdisk, or machine images (aki, ari, or ami).",
|
||||
"type": "string"
|
||||
},
|
||||
"hw_vif_model": {
|
||||
"title": "Virtual Network Interface",
|
||||
"description": "Specifies the model of virtual network interface device to use. The valid options depend on the hypervisor configuration. libvirt driver options: KVM and QEMU: e1000, ne2k_pci, pcnet, rtl8139, spapr-vlan, and virtio. Xen: e1000, netfront, ne2k_pci, pcnet, and rtl8139.",
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"e1000",
|
||||
"e1000e",
|
||||
"ne2k_pci",
|
||||
"netfront",
|
||||
"pcnet",
|
||||
"rtl8139",
|
||||
"spapr-vlan",
|
||||
"virtio"
|
||||
]
|
||||
},
|
||||
"hw_qemu_guest_agent": {
|
||||
"title": "QEMU Guest Agent",
|
||||
"description": "This is a background process which helps management applications execute guest OS level commands. For example, freezing and thawing filesystems, entering suspend. However, guest agent (GA) is not bullet proof, and hostile guest OS can send spurious replies.",
|
||||
"type": "string",
|
||||
"enum": ["yes", "no"]
|
||||
},
|
||||
"hw_pointer_model": {
|
||||
"title": "Pointer Model",
|
||||
"description": "Input devices allow interaction with a graphical framebuffer. For example to provide a graphic tablet for absolute cursor movement. Currently only supported by the KVM/QEMU hypervisor configuration and VNC or SPICE consoles must be enabled.",
|
||||
"type": "string",
|
||||
"enum": ["usbtablet"]
|
||||
},
|
||||
"img_hide_hypervisor_id": {
|
||||
"title": "Hide hypervisor id",
|
||||
"description": "Enables hiding the host hypervisor signature in the guest OS.",
|
||||
"type": "string",
|
||||
"enum": ["yes", "no"]
|
||||
}
|
||||
},
|
||||
"objects": []
|
||||
}
|
||||
@@ -0,0 +1,32 @@
|
||||
{
|
||||
"namespace": "OS::Compute::Libvirt",
|
||||
"display_name": "libvirt Driver Options",
|
||||
"description": "The libvirt compute driver options. \n\nThese are properties that affect the libvirt compute driver and may be specified on flavors and images. For a list of all hypervisors, see here: https://wiki.openstack.org/wiki/HypervisorSupportMatrix.",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Glance::Image",
|
||||
"prefix": "hw_"
|
||||
},
|
||||
{
|
||||
"name": "OS::Nova::Flavor",
|
||||
"prefix": "hw:"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"serial_port_count": {
|
||||
"title": "Serial Port Count",
|
||||
"description": "Specifies the count of serial ports that should be provided. If hw:serial_port_count is not set in the flavor's extra_specs, then any count is permitted. If hw:serial_port_count is set, then this provides the default serial port count. It is permitted to override the default serial port count, but only with a lower value.",
|
||||
"type": "integer",
|
||||
"minimum": 0
|
||||
},
|
||||
"boot_menu": {
|
||||
"title": "Boot Menu",
|
||||
"description": "If true, enables the BIOS bootmenu. In cases where both the image metadata and Extra Spec are set, the Extra Spec setting is used. This allows for flexibility in setting/overriding the default behavior as needed.",
|
||||
"type": "string",
|
||||
"enum": ["true", "false"]
|
||||
}
|
||||
},
|
||||
"objects": []
|
||||
}
|
||||
@@ -0,0 +1,109 @@
|
||||
{
|
||||
"namespace": "OS::Compute::Quota",
|
||||
"display_name": "Flavor Quota",
|
||||
"description": "Compute drivers may enable quotas on CPUs available to a VM, disk tuning, bandwidth I/O, and instance VIF traffic control. See: http://docs.openstack.org/admin-guide/compute-flavors.html",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Nova::Flavor"
|
||||
}
|
||||
],
|
||||
"objects": [
|
||||
{
|
||||
"name": "CPU Limits",
|
||||
"description": "You can configure the CPU limits with control parameters.",
|
||||
"properties": {
|
||||
"quota:cpu_shares": {
|
||||
"title": "Quota: CPU Shares",
|
||||
"description": "Specifies the proportional weighted share for the domain. If this element is omitted, the service defaults to the OS provided defaults. There is no unit for the value; it is a relative measure based on the setting of other VMs. For example, a VM configured with value 2048 gets twice as much CPU time as a VM configured with value 1024.",
|
||||
"type": "integer"
|
||||
},
|
||||
"quota:cpu_period": {
|
||||
"title": "Quota: CPU Period",
|
||||
"description": "Specifies the enforcement interval (unit: microseconds) for QEMU and LXC hypervisors. Within a period, each VCPU of the domain is not allowed to consume more than the quota worth of runtime. The value should be in range [1000, 1000000]. A period with value 0 means no value.",
|
||||
"type": "integer",
|
||||
"minimum": 1000,
|
||||
"maximum": 1000000
|
||||
},
|
||||
"quota:cpu_quota": {
|
||||
"title": "Quota: CPU Quota",
|
||||
"description": "Specifies the maximum allowed bandwidth (unit: microseconds). A domain with a negative-value quota indicates that the domain has infinite bandwidth, which means that it is not bandwidth controlled. The value should be in range [1000, 18446744073709551] or less than 0. A quota with value 0 means no value. You can use this feature to ensure that all vCPUs run at the same speed.",
|
||||
"type": "integer"
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "Disk QoS",
|
||||
"description": "Using disk I/O quotas, you can set maximum disk write to 10 MB per second for a VM user.",
|
||||
"properties": {
|
||||
"quota:disk_read_bytes_sec": {
|
||||
"title": "Quota: Disk read bytes / sec",
|
||||
"description": "Sets disk I/O quota for disk read bytes / sec.",
|
||||
"type": "integer"
|
||||
},
|
||||
"quota:disk_read_iops_sec": {
|
||||
"title": "Quota: Disk read IOPS / sec",
|
||||
"description": "Sets disk I/O quota for disk read IOPS / sec.",
|
||||
"type": "integer"
|
||||
},
|
||||
"quota:disk_write_bytes_sec": {
|
||||
"title": "Quota: Disk Write Bytes / sec",
|
||||
"description": "Sets disk I/O quota for disk write bytes / sec.",
|
||||
"type": "integer"
|
||||
},
|
||||
"quota:disk_write_iops_sec": {
|
||||
"title": "Quota: Disk Write IOPS / sec",
|
||||
"description": "Sets disk I/O quota for disk write IOPS / sec.",
|
||||
"type": "integer"
|
||||
},
|
||||
"quota:disk_total_bytes_sec": {
|
||||
"title": "Quota: Disk Total Bytes / sec",
|
||||
"description": "Sets disk I/O quota for total disk bytes / sec.",
|
||||
"type": "integer"
|
||||
},
|
||||
"quota:disk_total_iops_sec": {
|
||||
"title": "Quota: Disk Total IOPS / sec",
|
||||
"description": "Sets disk I/O quota for disk total IOPS / sec.",
|
||||
"type": "integer"
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "Virtual Interface QoS",
|
||||
"description": "Bandwidth QoS tuning for instance virtual interfaces (VIFs) may be specified with these properties. Incoming and outgoing traffic can be shaped independently. If not specified, no quality of service (QoS) is applied on that traffic direction. So, if you want to shape only the network's incoming traffic, use inbound only (and vice versa). The OpenStack Networking service abstracts the physical implementation of the network, allowing plugins to configure and manage physical resources. Virtual Interfaces (VIF) in the logical model are analogous to physical network interface cards (NICs). VIFs are typically owned a managed by an external service; for instance when OpenStack Networking is used for building OpenStack networks, VIFs would be created, owned, and managed in Nova. VIFs are connected to OpenStack Networking networks via ports. A port is analogous to a port on a network switch, and it has an administrative state. When a VIF is attached to a port the OpenStack Networking API creates an attachment object, which specifies the fact that a VIF with a given identifier is plugged into the port.",
|
||||
"properties": {
|
||||
"quota:vif_inbound_average": {
|
||||
"title": "Quota: VIF Inbound Average",
|
||||
"description": "Network Virtual Interface (VIF) inbound average in kilobytes per second. Specifies average bit rate on the interface being shaped.",
|
||||
"type": "integer"
|
||||
},
|
||||
"quota:vif_inbound_burst": {
|
||||
"title": "Quota: VIF Inbound Burst",
|
||||
"description": "Network Virtual Interface (VIF) inbound burst in total kilobytes. Specifies the amount of bytes that can be burst at peak speed.",
|
||||
"type": "integer"
|
||||
},
|
||||
"quota:vif_inbound_peak": {
|
||||
"title": "Quota: VIF Inbound Peak",
|
||||
"description": "Network Virtual Interface (VIF) inbound peak in kilobytes per second. Specifies maximum rate at which an interface can receive data.",
|
||||
"type": "integer"
|
||||
},
|
||||
"quota:vif_outbound_average": {
|
||||
"title": "Quota: VIF Outbound Average",
|
||||
"description": "Network Virtual Interface (VIF) outbound average in kilobytes per second. Specifies average bit rate on the interface being shaped.",
|
||||
"type": "integer"
|
||||
},
|
||||
"quota:vif_outbound_burst": {
|
||||
"title": "Quota: VIF Outbound Burst",
|
||||
"description": "Network Virtual Interface (VIF) outbound burst in total kilobytes. Specifies the amount of bytes that can be burst at peak speed.",
|
||||
"type": "integer"
|
||||
},
|
||||
"quota:vif_outbound_peak": {
|
||||
"title": "Quota: VIF Outbound Peak",
|
||||
"description": "Network Virtual Interface (VIF) outbound peak in kilobytes per second. Specifies maximum rate at which an interface can send data.",
|
||||
"type": "integer"
|
||||
}
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,29 @@
|
||||
{
|
||||
"namespace": "OS::Compute::RandomNumberGenerator",
|
||||
"display_name": "Random Number Generator",
|
||||
"description": "If a random-number generator device has been added to the instance through its image properties, the device can be enabled and configured.",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Nova::Flavor"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"hw_rng:allowed": {
|
||||
"title": "Random Number Generator Allowed",
|
||||
"description": "",
|
||||
"type": "boolean"
|
||||
},
|
||||
"hw_rng:rate_bytes": {
|
||||
"title": "Random number generator limits.",
|
||||
"description": "Allowed amount of bytes that the guest can read from the host's entropy per period.",
|
||||
"type": "integer"
|
||||
},
|
||||
"hw_rng:rate_period": {
|
||||
"title": "Random number generator read period.",
|
||||
"description": "Duration of the read period in seconds.",
|
||||
"type": "integer"
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,24 @@
|
||||
{
|
||||
"namespace": "OS::Compute::Trust",
|
||||
"display_name": "Trusted Compute Pools (Intel® TXT)",
|
||||
"description": "Trusted compute pools with Intel® Trusted Execution Technology (Intel® TXT) support IT compliance by protecting virtualized data centers - private, public, and hybrid clouds against attacks toward hypervisor and BIOS, firmware, and other pre-launch software components. The Nova trust scheduling filter must be enabled and configured with the trust attestation service in order to use this feature.",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Nova::Flavor"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"trust:trusted_host": {
|
||||
"title": "Intel® TXT attestation",
|
||||
"description": "Select to ensure that node has been attested by Intel® Trusted Execution Technology (Intel® TXT). The Nova trust scheduling filter must be enabled and configured with the trust attestation service in order to use this feature.",
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"trusted",
|
||||
"untrusted",
|
||||
"unknown"
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,54 @@
|
||||
{
|
||||
"namespace": "OS::Compute::VirtCPUTopology",
|
||||
"display_name": "Virtual CPU Topology",
|
||||
"description": "This provides the preferred socket/core/thread counts for the virtual CPU instance exposed to guests. This enables the ability to avoid hitting limitations on vCPU topologies that OS vendors place on their products. See also: http://git.openstack.org/cgit/openstack/nova-specs/tree/specs/juno/virt-driver-vcpu-topology.rst",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Glance::Image",
|
||||
"prefix": "hw_"
|
||||
},
|
||||
{
|
||||
"name": "OS::Cinder::Volume",
|
||||
"prefix": "hw_",
|
||||
"properties_target": "image"
|
||||
},
|
||||
{
|
||||
"name": "OS::Nova::Flavor",
|
||||
"prefix": "hw:"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"cpu_sockets": {
|
||||
"title": "vCPU Sockets",
|
||||
"description": "Preferred number of sockets to expose to the guest.",
|
||||
"type": "integer"
|
||||
},
|
||||
"cpu_cores": {
|
||||
"title": "vCPU Cores",
|
||||
"description": "Preferred number of cores to expose to the guest.",
|
||||
"type": "integer"
|
||||
},
|
||||
"cpu_threads": {
|
||||
"title": " vCPU Threads",
|
||||
"description": "Preferred number of threads to expose to the guest.",
|
||||
"type": "integer"
|
||||
},
|
||||
"cpu_maxsockets": {
|
||||
"title": "Max vCPU Sockets",
|
||||
"description": "Maximum number of sockets to expose to the guest.",
|
||||
"type": "integer"
|
||||
},
|
||||
"cpu_maxcores": {
|
||||
"title": "Max vCPU Cores",
|
||||
"description": "Maximum number of cores to expose to the guest.",
|
||||
"type": "integer"
|
||||
},
|
||||
"cpu_maxthreads": {
|
||||
"title": "Max vCPU Threads",
|
||||
"description": "Maximum number of threads to expose to the guest.",
|
||||
"type": "integer"
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,34 @@
|
||||
{
|
||||
"namespace": "OS::Compute::VMwareFlavor",
|
||||
"display_name": "VMware Driver Options for Flavors",
|
||||
"description": "VMware Driver Options for Flavors may be used to customize and manage Nova Flavors. These are properties specific to VMWare compute drivers and will only have an effect if the VMWare compute driver is enabled in Nova. See: http://docs.openstack.org/admin-guide/compute-flavors.html",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Nova::Flavor"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"vmware:hw_version": {
|
||||
"title": "VMware Hardware Version",
|
||||
"description": "Specifies the hardware version VMware uses to create images. If the hardware version needs to be compatible with a cluster version, for backward compatibility or other circumstances, the vmware:hw_version key specifies a virtual machine hardware version. In the event that a cluster has mixed host version types, the key will enable the vCenter to place the cluster on the correct host.",
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"vmx-13",
|
||||
"vmx-11",
|
||||
"vmx-10",
|
||||
"vmx-09",
|
||||
"vmx-08",
|
||||
"vmx-07",
|
||||
"vmx-04",
|
||||
"vmx-03"
|
||||
]
|
||||
},
|
||||
"vmware:storage_policy": {
|
||||
"title": "VMware Storage Policy",
|
||||
"description": "Specifies the storage policy to be applied for newly created instance. If not provided, the default storage policy specified in config file will be used. If Storage Policy Based Management (SPBM) is not enabled in config file, this value won't be used.",
|
||||
"type": "string"
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,26 @@
|
||||
{
|
||||
"namespace": "OS::Compute::VMwareQuotaFlavor",
|
||||
"display_name": "VMware Quota for Flavors",
|
||||
"description": "The VMware compute driver allows various compute quotas to be specified on flavors. When specified, the VMWare driver will ensure that the quota is enforced. These are properties specific to VMWare compute drivers and will only have an effect if the VMWare compute driver is enabled in Nova. For a list of hypervisors, see: https://wiki.openstack.org/wiki/HypervisorSupportMatrix. For flavor customization, see: http://docs.openstack.org/admin-guide/compute-flavors.html",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Nova::Flavor"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"quota:cpu_limit": {
|
||||
"title": "Quota: CPU Limit",
|
||||
"description": "Specifies the upper limit for CPU allocation in MHz. This parameter ensures that a machine never uses more than the defined amount of CPU time. It can be used to enforce a limit on the machine's CPU performance. The value should be a numerical value in MHz. If zero is supplied then the cpu_limit is unlimited.",
|
||||
"type": "integer",
|
||||
"minimum": 0
|
||||
},
|
||||
"quota:cpu_reservation": {
|
||||
"title": "Quota: CPU Reservation Limit",
|
||||
"description": "Specifies the guaranteed minimum CPU reservation in MHz. This means that if needed, the machine will definitely get allocated the reserved amount of CPU cycles. The value should be a numerical value in MHz.",
|
||||
"type": "integer",
|
||||
"minimum": 0
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,212 @@
|
||||
{
|
||||
"namespace": "OS::Compute::VMware",
|
||||
"display_name": "VMware Driver Options",
|
||||
"description": "The VMware compute driver options. \n\nThese are properties specific to VMWare compute drivers and will only have an effect if the VMWare compute driver is enabled in Nova. For a list of all hypervisors, see here: https://wiki.openstack.org/wiki/HypervisorSupportMatrix.",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Glance::Image"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"img_linked_clone":{
|
||||
"title": "Linked Clone",
|
||||
"description": "By default, the VMware compute driver creates linked clones when possible (though this can be turned off by the operator). You can use this image property on a per-image basis to control whether virtual machines booted from the image are treated as full clones (value: false) or linked clones (value: true). Please refer to VMware documentation for information about full vs. linked clones.",
|
||||
"type": "boolean"
|
||||
},
|
||||
"vmware_adaptertype": {
|
||||
"title": "Disk Adapter Type",
|
||||
"description": "The virtual SCSI or IDE controller used by the hypervisor.",
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"lsiLogic",
|
||||
"lsiLogicsas",
|
||||
"paraVirtual",
|
||||
"busLogic",
|
||||
"ide"
|
||||
],
|
||||
"default" : "lsiLogic"
|
||||
},
|
||||
"vmware_disktype": {
|
||||
"title": "Disk Provisioning Type",
|
||||
"description": "When performing operations such as creating a virtual disk, cloning, or migrating, the disk provisioning type may be specified. Please refer to VMware documentation for more.",
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"streamOptimized",
|
||||
"sparse",
|
||||
"preallocated"
|
||||
],
|
||||
"default" : "preallocated"
|
||||
},
|
||||
"vmware_ostype": {
|
||||
"title": "OS Type",
|
||||
"description": "A VMware GuestID which describes the operating system installed in the image. This value is passed to the hypervisor when creating a virtual machine. If not specified, the key defaults to otherGuest. See thinkvirt.com.",
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"asianux3_64Guest",
|
||||
"asianux3Guest",
|
||||
"asianux4_64Guest",
|
||||
"asianux4Guest",
|
||||
"asianux5_64Guest",
|
||||
"asianux7_64Guest",
|
||||
"centos64Guest",
|
||||
"centosGuest",
|
||||
"centos6Guest",
|
||||
"centos6_64Guest",
|
||||
"centos7_64Guest",
|
||||
"coreos64Guest",
|
||||
"darwin10_64Guest",
|
||||
"darwin10Guest",
|
||||
"darwin11_64Guest",
|
||||
"darwin11Guest",
|
||||
"darwin12_64Guest",
|
||||
"darwin13_64Guest",
|
||||
"darwin14_64Guest",
|
||||
"darwin15_64Guest",
|
||||
"darwin16_64Guest",
|
||||
"darwin64Guest",
|
||||
"darwinGuest",
|
||||
"debian4_64Guest",
|
||||
"debian4Guest",
|
||||
"debian5_64Guest",
|
||||
"debian5Guest",
|
||||
"debian6_64Guest",
|
||||
"debian6Guest",
|
||||
"debian7_64Guest",
|
||||
"debian7Guest",
|
||||
"debian8_64Guest",
|
||||
"debian8Guest",
|
||||
"debian9_64Guest",
|
||||
"debian9Guest",
|
||||
"debian10_64Guest",
|
||||
"debian10Guest",
|
||||
"dosGuest",
|
||||
"eComStation2Guest",
|
||||
"eComStationGuest",
|
||||
"fedora64Guest",
|
||||
"fedoraGuest",
|
||||
"freebsd64Guest",
|
||||
"freebsdGuest",
|
||||
"genericLinuxGuest",
|
||||
"mandrakeGuest",
|
||||
"mandriva64Guest",
|
||||
"mandrivaGuest",
|
||||
"netware4Guest",
|
||||
"netware5Guest",
|
||||
"netware6Guest",
|
||||
"nld9Guest",
|
||||
"oesGuest",
|
||||
"openServer5Guest",
|
||||
"openServer6Guest",
|
||||
"opensuse64Guest",
|
||||
"opensuseGuest",
|
||||
"oracleLinux64Guest",
|
||||
"oracleLinuxGuest",
|
||||
"oracleLinux6Guest",
|
||||
"oracleLinux6_64Guest",
|
||||
"oracleLinux7_64Guest",
|
||||
"os2Guest",
|
||||
"other24xLinux64Guest",
|
||||
"other24xLinuxGuest",
|
||||
"other26xLinux64Guest",
|
||||
"other26xLinuxGuest",
|
||||
"other3xLinux64Guest",
|
||||
"other3xLinuxGuest",
|
||||
"otherGuest",
|
||||
"otherGuest64",
|
||||
"otherLinux64Guest",
|
||||
"otherLinuxGuest",
|
||||
"redhatGuest",
|
||||
"rhel2Guest",
|
||||
"rhel3_64Guest",
|
||||
"rhel3Guest",
|
||||
"rhel4_64Guest",
|
||||
"rhel4Guest",
|
||||
"rhel5_64Guest",
|
||||
"rhel5Guest",
|
||||
"rhel6_64Guest",
|
||||
"rhel6Guest",
|
||||
"rhel7_64Guest",
|
||||
"rhel7Guest",
|
||||
"sjdsGuest",
|
||||
"sles10_64Guest",
|
||||
"sles10Guest",
|
||||
"sles11_64Guest",
|
||||
"sles11Guest",
|
||||
"sles12_64Guest",
|
||||
"sles12Guest",
|
||||
"sles64Guest",
|
||||
"slesGuest",
|
||||
"solaris10_64Guest",
|
||||
"solaris10Guest",
|
||||
"solaris11_64Guest",
|
||||
"solaris6Guest",
|
||||
"solaris7Guest",
|
||||
"solaris8Guest",
|
||||
"solaris9Guest",
|
||||
"turboLinux64Guest",
|
||||
"turboLinuxGuest",
|
||||
"ubuntu64Guest",
|
||||
"ubuntuGuest",
|
||||
"unixWare7Guest",
|
||||
"vmkernel5Guest",
|
||||
"vmkernel6Guest",
|
||||
"vmkernel65Guest",
|
||||
"vmkernelGuest",
|
||||
"vmwarePhoton64Guest",
|
||||
"win2000AdvServGuest",
|
||||
"win2000ProGuest",
|
||||
"win2000ServGuest",
|
||||
"win31Guest",
|
||||
"win95Guest",
|
||||
"win98Guest",
|
||||
"windows7_64Guest",
|
||||
"windows7Guest",
|
||||
"windows7Server64Guest",
|
||||
"windows8_64Guest",
|
||||
"windows8Guest",
|
||||
"windows8Server64Guest",
|
||||
"windows9_64Guest",
|
||||
"windows9Guest",
|
||||
"windows9Server64Guest",
|
||||
"windowsHyperVGuest",
|
||||
"winLonghorn64Guest",
|
||||
"winLonghornGuest",
|
||||
"winMeGuest",
|
||||
"winNetBusinessGuest",
|
||||
"winNetDatacenter64Guest",
|
||||
"winNetDatacenterGuest",
|
||||
"winNetEnterprise64Guest",
|
||||
"winNetEnterpriseGuest",
|
||||
"winNetStandard64Guest",
|
||||
"winNetStandardGuest",
|
||||
"winNetWebGuest",
|
||||
"winNTGuest",
|
||||
"winVista64Guest",
|
||||
"winVistaGuest",
|
||||
"winXPHomeGuest",
|
||||
"winXPPro64Guest",
|
||||
"winXPProGuest"
|
||||
],
|
||||
"default": "otherGuest"
|
||||
},
|
||||
"hw_vif_model": {
|
||||
"title": "Virtual Network Interface",
|
||||
"description": "Specifies the model of virtual network interface device to use. The valid options depend on the hypervisor. VMware driver supported options: e1000, e1000e, VirtualE1000, VirtualE1000e, VirtualPCNet32, VirtualSriovEthernetCard, and VirtualVmxnet.",
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"e1000",
|
||||
"e1000e",
|
||||
"VirtualE1000",
|
||||
"VirtualE1000e",
|
||||
"VirtualPCNet32",
|
||||
"VirtualSriovEthernetCard",
|
||||
"VirtualVmxnet",
|
||||
"VirtualVmxnet3"
|
||||
],
|
||||
"default" : "e1000"
|
||||
}
|
||||
},
|
||||
"objects": []
|
||||
}
|
||||
@@ -0,0 +1,33 @@
|
||||
{
|
||||
"namespace": "OS::Compute::Watchdog",
|
||||
"display_name": "Watchdog Behavior",
|
||||
"description": "Compute drivers may enable watchdog behavior over instances. See: http://docs.openstack.org/admin-guide/compute-flavors.html",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Glance::Image"
|
||||
},
|
||||
{
|
||||
"name": "OS::Cinder::Volume",
|
||||
"properties_target": "image"
|
||||
},
|
||||
{
|
||||
"name": "OS::Nova::Flavor"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"hw_watchdog_action": {
|
||||
"title": "Watchdog Action",
|
||||
"description": "For the libvirt driver, you can enable and set the behavior of a virtual hardware watchdog device for each flavor. Watchdog devices keep an eye on the guest server, and carry out the configured action, if the server hangs. The watchdog uses the i6300esb device (emulating a PCI Intel 6300ESB). If hw_watchdog_action is not specified, the watchdog is disabled. Watchdog behavior set using a specific image's properties will override behavior set using flavors.",
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"disabled",
|
||||
"reset",
|
||||
"poweroff",
|
||||
"pause",
|
||||
"none"
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,29 @@
|
||||
{
|
||||
"namespace": "OS::Compute::XenAPI",
|
||||
"display_name": "XenAPI Driver Options",
|
||||
"description": "The XenAPI compute driver options. \n\nThese are properties specific to compute drivers. For a list of all hypervisors, see here: https://wiki.openstack.org/wiki/HypervisorSupportMatrix.",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Glance::Image"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"os_type": {
|
||||
"title": "OS Type",
|
||||
"description": "The operating system installed on the image. The XenAPI driver contains logic that takes different actions depending on the value of the os_type parameter of the image. For example, for os_type=windows images, it creates a FAT32-based swap partition instead of a Linux swap partition, and it limits the injected host name to less than 16 characters.",
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"linux",
|
||||
"windows"
|
||||
]
|
||||
},
|
||||
"auto_disk_config": {
|
||||
"title": "Disk Adapter Type",
|
||||
"description": "If true, the root partition on the disk is automatically resized before the instance boots. This value is only taken into account by the Compute service when using a Xen-based hypervisor with the XenAPI driver. The Compute service will only attempt to resize if there is a single partition on the image, and only if the partition is in ext3 or ext4 format.",
|
||||
"type": "boolean"
|
||||
}
|
||||
},
|
||||
"objects": []
|
||||
}
|
||||
@@ -0,0 +1,42 @@
|
||||
{
|
||||
"display_name": "Common Image Properties",
|
||||
"namespace": "OS::Glance::CommonImageProperties",
|
||||
"description": "When adding an image to Glance, you may specify some common image properties that may prove useful to consumers of your image.",
|
||||
"protected": true,
|
||||
"resource_type_associations" : [
|
||||
],
|
||||
"properties": {
|
||||
"kernel_id": {
|
||||
"title": "Kernel ID",
|
||||
"type": "string",
|
||||
"pattern": "^([0-9a-fA-F]){8}-([0-9a-fA-F]){4}-([0-9a-fA-F]){4}-([0-9a-fA-F]){4}-([0-9a-fA-F]){12}$",
|
||||
"description": "ID of image stored in Glance that should be used as the kernel when booting an AMI-style image."
|
||||
},
|
||||
"ramdisk_id": {
|
||||
"title": "Ramdisk ID",
|
||||
"type": "string",
|
||||
"pattern": "^([0-9a-fA-F]){8}-([0-9a-fA-F]){4}-([0-9a-fA-F]){4}-([0-9a-fA-F]){4}-([0-9a-fA-F]){12}$",
|
||||
"description": "ID of image stored in Glance that should be used as the ramdisk when booting an AMI-style image."
|
||||
},
|
||||
"instance_uuid": {
|
||||
"title": "Instance ID",
|
||||
"type": "string",
|
||||
"description": "Metadata which can be used to record which instance this image is associated with. (Informational only, does not create an instance snapshot.)"
|
||||
},
|
||||
"architecture": {
|
||||
"title": "CPU Architecture",
|
||||
"description": "The CPU architecture that must be supported by the hypervisor. For example, x86_64, arm, or ppc64. Run uname -m to get the architecture of a machine. We strongly recommend using the architecture data vocabulary defined by the libosinfo project for this purpose.",
|
||||
"type": "string"
|
||||
},
|
||||
"os_distro": {
|
||||
"title": "OS Distro",
|
||||
"description": "The common name of the operating system distribution in lowercase (uses the same data vocabulary as the libosinfo project). Specify only a recognized value for this field. Deprecated values are listed to assist you in searching for the recognized value.",
|
||||
"type": "string"
|
||||
},
|
||||
"os_version": {
|
||||
"title": "OS Version",
|
||||
"description": "Operating system version as specified by the distributor. (for example, '11.10')",
|
||||
"type": "string"
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,50 @@
|
||||
{
|
||||
"namespace": "OS::Glance::Signatures",
|
||||
"display_name": "Image Signature Verification",
|
||||
"description": "Image signature verification allows the user to verify that an image has not been modified prior to booting the image.",
|
||||
"visibility": "public",
|
||||
"protected": false,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Glance::Image"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"img_signature": {
|
||||
"title": "Image Signature",
|
||||
"description": "The signature of the image data encoded in base64 format.",
|
||||
"type": "string"
|
||||
},
|
||||
"img_signature_certificate_uuid": {
|
||||
"title": "Image Signature Certificate UUID",
|
||||
"description": "The UUID used to retrieve the certificate from the key manager.",
|
||||
"type": "string"
|
||||
},
|
||||
"img_signature_hash_method": {
|
||||
"title": "Image Signature Hash Method",
|
||||
"description": "The hash method used in creating the signature.",
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"SHA-224",
|
||||
"SHA-256",
|
||||
"SHA-384",
|
||||
"SHA-512"
|
||||
]
|
||||
},
|
||||
"img_signature_key_type": {
|
||||
"title": "Image Signature Key Type",
|
||||
"description": "The key type used in creating the signature.",
|
||||
"type": "string",
|
||||
"enum": [
|
||||
"RSA-PSS",
|
||||
"DSA",
|
||||
"ECC_SECT571K1",
|
||||
"ECC_SECT409K1",
|
||||
"ECC_SECT571R1",
|
||||
"ECC_SECT409R1",
|
||||
"ECC_SECP521R1",
|
||||
"ECC_SECP384R1"
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,32 @@
|
||||
{
|
||||
"display_name": "Common Operating System Properties",
|
||||
"namespace": "OS::OperatingSystem",
|
||||
"description": "Details of the operating system contained within this image as well as common operating system properties that can be set on a VM instance created from this image.",
|
||||
"protected": true,
|
||||
"resource_type_associations" : [
|
||||
{
|
||||
"name": "OS::Glance::Image"
|
||||
},
|
||||
{
|
||||
"name": "OS::Cinder::Volume",
|
||||
"properties_target": "image"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"os_distro": {
|
||||
"title": "OS Distro",
|
||||
"description": "The common name of the operating system distribution in lowercase (uses the same data vocabulary as the libosinfo project). Specify only a recognized value for this field. Deprecated values are listed to assist you in searching for the recognized value.",
|
||||
"type": "string"
|
||||
},
|
||||
"os_version": {
|
||||
"title": "OS Version",
|
||||
"description": "Operating system version as specified by the distributor. (for example, '11.10')",
|
||||
"type": "string"
|
||||
},
|
||||
"os_admin_user": {
|
||||
"title": "OS Admin User",
|
||||
"description": "The name of the user with admin privileges.",
|
||||
"type": "string"
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,334 @@
|
||||
{
|
||||
"namespace": "OS::Software::DBMS",
|
||||
"display_name": "Database Software",
|
||||
"description": "A database is an organized collection of data. The data is typically organized to model aspects of reality in a way that supports processes requiring information. Database management systems are computer software applications that interact with the user, other applications, and the database itself to capture and analyze data. (http://en.wikipedia.org/wiki/Database)",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Glance::Image"
|
||||
},
|
||||
{
|
||||
"name": "OS::Cinder::Volume",
|
||||
"properties_target": "image"
|
||||
},
|
||||
{
|
||||
"name": "OS::Nova::Server",
|
||||
"properties_target": "metadata"
|
||||
},
|
||||
{
|
||||
"name": "OS::Trove::Instance"
|
||||
}
|
||||
],
|
||||
"objects": [
|
||||
{
|
||||
"name": "MySQL",
|
||||
"description": "MySQL is an object-relational database management system (ORDBMS). The MySQL development project has made its source code available under the terms of the GNU General Public License, as well as under a variety of proprietary agreements. MySQL was owned and sponsored by a single for-profit firm, the Swedish company MySQL AB, now owned by Oracle Corporation. MySQL is a popular choice of database for use in web applications, and is a central component of the widely used LAMP open source web application software stack (and other 'AMP' stacks). (http://en.wikipedia.org/wiki/MySQL)",
|
||||
"properties": {
|
||||
"sw_database_mysql_version": {
|
||||
"title": "Version",
|
||||
"description": "The specific version of MySQL.",
|
||||
"type": "string"
|
||||
},
|
||||
"sw_database_mysql_listen_port": {
|
||||
"title": "Listen Port",
|
||||
"description": "The configured TCP/IP port which MySQL listens for incoming connections.",
|
||||
"type": "integer",
|
||||
"minimum": 1,
|
||||
"maximum": 65535,
|
||||
"default": 3606
|
||||
},
|
||||
"sw_database_mysql_admin": {
|
||||
"title": "Admin User",
|
||||
"description": "The primary user with privileges to perform administrative operations.",
|
||||
"type": "string",
|
||||
"default": "root"
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "PostgreSQL",
|
||||
"description": "PostgreSQL, often simply 'Postgres', is an object-relational database management system (ORDBMS) with an emphasis on extensibility and standards-compliance. PostgreSQL is cross-platform and runs on many operating systems. (http://en.wikipedia.org/wiki/PostgreSQL)",
|
||||
"properties": {
|
||||
"sw_database_postgresql_version": {
|
||||
"title": "Version",
|
||||
"description": "The specific version of PostgreSQL.",
|
||||
"type": "string"
|
||||
},
|
||||
"sw_database_postgresql_listen_port": {
|
||||
"title": "Listen Port",
|
||||
"description": "Specifies the TCP/IP port or local Unix domain socket file extension on which PostgreSQL is to listen for connections from client applications.",
|
||||
"type": "integer",
|
||||
"minimum": 1,
|
||||
"maximum": 65535,
|
||||
"default": 5432
|
||||
},
|
||||
"sw_database_postgresql_admin": {
|
||||
"title": "Admin User",
|
||||
"description": "The primary user with privileges to perform administrative operations.",
|
||||
"type": "string",
|
||||
"default": "postgres"
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "SQL Server",
|
||||
"description": "Microsoft SQL Server is a relational database management system developed by Microsoft. There are at least a dozen different editions of Microsoft SQL Server aimed at different audiences and for workloads ranging from small single-machine applications to large Internet-facing applications with many concurrent users. Its primary query languages are T-SQL and ANSI SQL. (http://en.wikipedia.org/wiki/Microsoft_SQL_Server)",
|
||||
"properties": {
|
||||
"sw_database_sqlserver_version": {
|
||||
"title": "Version",
|
||||
"description": "The specific version of Microsoft SQL Server.",
|
||||
"type": "string"
|
||||
},
|
||||
"sw_database_sqlserver_edition": {
|
||||
"title": "Edition",
|
||||
"description": "SQL Server is available in multiple editions, with different feature sets and targeting different users.",
|
||||
"type": "string",
|
||||
"default": "Express",
|
||||
"enum": [
|
||||
"Datacenter",
|
||||
"Enterprise",
|
||||
"Standard",
|
||||
"Web",
|
||||
"Business Intelligence",
|
||||
"Workgroup",
|
||||
"Express",
|
||||
"Compact (SQL CE)",
|
||||
"Developer",
|
||||
"Embedded (SSEE)",
|
||||
"Express",
|
||||
"Fast Track",
|
||||
"LocalDB",
|
||||
"Parallel Data Warehouse (PDW)",
|
||||
"Business Intelligence",
|
||||
"Datawarehouse Appliance Edition"
|
||||
]
|
||||
},
|
||||
"sw_database_sqlserver_listen_port": {
|
||||
"title": "Listen Port",
|
||||
"description": "Specifies the TCP/IP port or local Unix domain socket file extension on which SQL Server is to listen for connections from client applications. The default SQL Server port is 1433, and client ports are assigned a random value between 1024 and 5000.",
|
||||
"type": "integer",
|
||||
"minimum": 1,
|
||||
"maximum": 65535,
|
||||
"default": 1433
|
||||
},
|
||||
"sw_database_postsqlserver_admin": {
|
||||
"title": "Admin User",
|
||||
"description": "The primary user with privileges to perform administrative operations.",
|
||||
"type": "string",
|
||||
"default": "sa"
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "Oracle",
|
||||
"description": "Oracle Database (commonly referred to as Oracle RDBMS or simply as Oracle) is an object-relational database management system produced and marketed by Oracle Corporation. (http://en.wikipedia.org/wiki/Oracle_Database)",
|
||||
"properties": {
|
||||
"sw_database_oracle_version": {
|
||||
"title": "Version",
|
||||
"description": "The specific version of Oracle.",
|
||||
"type": "string"
|
||||
},
|
||||
"sw_database_oracle_edition": {
|
||||
"title": "Edition",
|
||||
"description": "Over and above the different versions of the Oracle database management software developed over time, Oracle Corporation subdivides its product into varying editions.",
|
||||
"type": "string",
|
||||
"default": "Express",
|
||||
"enum": [
|
||||
"Enterprise",
|
||||
"Standard",
|
||||
"Standard Edition One",
|
||||
"Express (XE)",
|
||||
"Workgroup",
|
||||
"Lite"
|
||||
]
|
||||
},
|
||||
"sw_database_oracle_listen_port": {
|
||||
"title": "Listen Port",
|
||||
"description": "Specifies the TCP/IP port or local Unix domain socket file extension on which Oracle is to listen for connections from client applications.",
|
||||
"type": "integer",
|
||||
"minimum": 1,
|
||||
"maximum": 65535,
|
||||
"default": 1521
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "DB2",
|
||||
"description": "IBM DB2 is a family of database server products developed by IBM. These products all support the relational model, but in recent years some products have been extended to support object-relational features and non-relational structures, in particular XML. (http://en.wikipedia.org/wiki/IBM_DB2)",
|
||||
"properties": {
|
||||
"sw_database_db2_version": {
|
||||
"title": "Version",
|
||||
"description": "The specific version of DB2.",
|
||||
"type": "string"
|
||||
},
|
||||
"sw_database_db2_port": {
|
||||
"title": "Listen Port",
|
||||
"description": "Specifies the TCP/IP port or local Unix domain socket file extension on which DB2 is to listen for connections from client applications.",
|
||||
"type": "integer",
|
||||
"minimum": 1,
|
||||
"maximum": 65535,
|
||||
"default": 5432
|
||||
},
|
||||
"sw_database_db2_admin": {
|
||||
"title": "Admin User",
|
||||
"description": "The primary user with privileges to perform administrative operations.",
|
||||
"type": "string"
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "MongoDB",
|
||||
"description": "MongoDB is a cross-platform document-oriented database. Classified as a NoSQL database, MongoDB uses JSON-like documents with dynamic schemas (MongoDB calls the format BSON), making the integration of data in certain types of applications easier and faster. Released under a combination of the GNU Affero General Public License and the Apache License, MongoDB is free and open-source software. (http://en.wikipedia.org/wiki/MongoDB)",
|
||||
"properties": {
|
||||
"sw_database_mongodb_version": {
|
||||
"title": "Version",
|
||||
"description": "The specific version of MongoDB.",
|
||||
"type": "string"
|
||||
},
|
||||
"sw_database_mongodb_listen_port": {
|
||||
"title": "Listen Port",
|
||||
"description": "Specifies the TCP/IP port or local Unix domain socket file extension on which MongoDB is to listen for connections from client applications.",
|
||||
"type": "integer",
|
||||
"minimum": 1,
|
||||
"maximum": 65535,
|
||||
"default": 27017
|
||||
},
|
||||
"sw_database_mongodb_admin": {
|
||||
"title": "Admin User",
|
||||
"description": "The primary user with privileges to perform administrative operations.",
|
||||
"type": "string"
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "Couchbase Server",
|
||||
"description": "Couchbase Server, originally known as Membase, is an open source, distributed (shared-nothing architecture) NoSQL document-oriented database that is optimized for interactive applications. These applications must serve many concurrent users by creating, storing, retrieving, aggregating, manipulating and presenting data. In support of these kinds of application needs, Couchbase is designed to provide easy-to-scale key-value or document access with low latency and high sustained throughput. (http://en.wikipedia.org/wiki/Couchbase_Server)",
|
||||
"properties": {
|
||||
"sw_database_couchbaseserver_version": {
|
||||
"title": "Version",
|
||||
"description": "The specific version of Couchbase Server.",
|
||||
"type": "string"
|
||||
},
|
||||
"sw_database_couchbaseserver_listen_port": {
|
||||
"title": "Listen Port",
|
||||
"description": "Specifies the TCP/IP port or local Unix domain socket file extension on which Couchbase is to listen for connections from client applications.",
|
||||
"type": "integer",
|
||||
"minimum": 1,
|
||||
"maximum": 65535,
|
||||
"default": 11211
|
||||
},
|
||||
"sw_database_couchbaseserver_admin": {
|
||||
"title": "Admin User",
|
||||
"description": "The primary user with privileges to perform administrative operations.",
|
||||
"type": "string",
|
||||
"default": "admin"
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "Redis",
|
||||
"description": "Redis is a data structure server (NoSQL). It is open-source, networked, in-memory, and stores keys with optional durability. The development of Redis has been sponsored by Pivotal Software since May 2013; before that, it was sponsored by VMware. The name Redis means REmote DIctionary Server. (http://en.wikipedia.org/wiki/Redis)",
|
||||
"properties": {
|
||||
"sw_database_redis_version": {
|
||||
"title": "Version",
|
||||
"description": "The specific version of Redis.",
|
||||
"type": "string"
|
||||
},
|
||||
"sw_database_redis_listen_port": {
|
||||
"title": "Listen Port",
|
||||
"description": "Specifies the TCP/IP port or local Unix domain socket file extension on which Redis is to listen for connections from client applications.",
|
||||
"type": "integer",
|
||||
"minimum": 1,
|
||||
"maximum": 65535,
|
||||
"default": 6379
|
||||
},
|
||||
"sw_database_redis_admin": {
|
||||
"title": "Admin User",
|
||||
"description": "The primary user with privileges to perform administrative operations.",
|
||||
"type": "string",
|
||||
"default": "admin"
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "CouchDB",
|
||||
"description": "Apache CouchDB, commonly referred to as CouchDB, is an open source NoSQL database. It is a NoSQL database that uses JSON to store data, JavaScript as its query language using MapReduce, and HTTP for an API. One of its distinguishing features is multi-master replication. CouchDB was first released in 2005 and later became an Apache project in 2008. (http://en.wikipedia.org/wiki/CouchDB)",
|
||||
"properties": {
|
||||
"sw_database_couchdb_version": {
|
||||
"title": "Version",
|
||||
"description": "The specific version of CouchDB.",
|
||||
"type": "string"
|
||||
},
|
||||
"sw_database_couchdb_listen_port": {
|
||||
"title": "Listen Port",
|
||||
"description": "Specifies the TCP/IP port or local Unix domain socket file extension on which CouchDB is to listen for connections from client applications.",
|
||||
"type": "integer",
|
||||
"minimum": 1,
|
||||
"maximum": 65535,
|
||||
"default": 5984
|
||||
},
|
||||
"sw_database_couchdb_admin": {
|
||||
"title": "Admin User",
|
||||
"description": "The primary user with privileges to perform administrative operations.",
|
||||
"type": "string"
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "Apache Cassandra",
|
||||
"description": "Apache Cassandra is an open source distributed NoSQL database management system designed to handle large amounts of data across many commodity servers, providing high availability with no single point of failure. (http://en.wikipedia.org/wiki/Apache_Cassandra)",
|
||||
"properties": {
|
||||
"sw_database_cassandra_version": {
|
||||
"title": "Version",
|
||||
"description": "The specific version of Apache Cassandra.",
|
||||
"type": "string"
|
||||
},
|
||||
"sw_database_cassandra_listen_port": {
|
||||
"title": "Listen Port",
|
||||
"description": "Specifies the TCP/IP port or local Unix domain socket file extension on which Cassandra is to listen for connections from client applications.",
|
||||
"type": "integer",
|
||||
"minimum": 1,
|
||||
"maximum": 65535,
|
||||
"default": 9160
|
||||
},
|
||||
"sw_database_cassandra_admin": {
|
||||
"title": "Admin User",
|
||||
"description": "The primary user with privileges to perform administrative operations.",
|
||||
"type": "string",
|
||||
"default": "cassandra"
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "HBase",
|
||||
"description": "HBase is an open source, non-relational (NoSQL), distributed database modeled after Google's BigTable and written in Java. It is developed as part of Apache Software Foundation's Apache Hadoop project and runs on top of HDFS (Hadoop Distributed Filesystem), providing BigTable-like capabilities for Hadoop. (http://en.wikipedia.org/wiki/Apache_HBase)",
|
||||
"properties": {
|
||||
"sw_database_hbase_version": {
|
||||
"title": "Version",
|
||||
"description": "The specific version of HBase.",
|
||||
"type": "string"
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "Hazlecast",
|
||||
"description": "In computing, Hazelcast is an in-memory open source software data grid based on Java. By having multiple nodes form a cluster, data is evenly distributed among the nodes. This allows for horizontal scaling both in terms of available storage space and processing power. Backups are also distributed in a similar fashion to other nodes, based on configuration, thereby protecting against single node failure. (http://en.wikipedia.org/wiki/Hazelcast)",
|
||||
"properties": {
|
||||
"sw_database_hazlecast_version": {
|
||||
"title": "Version",
|
||||
"description": "The specific version of Hazlecast.",
|
||||
"type": "string"
|
||||
},
|
||||
"sw_database_hazlecast_port": {
|
||||
"title": "Listen Port",
|
||||
"description": "Specifies the TCP/IP port or local Unix domain socket file extension on which Hazlecast is to listen for connections between members.",
|
||||
"type": "integer",
|
||||
"minimum": 1,
|
||||
"maximum": 65535,
|
||||
"default": 5701
|
||||
}
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,77 @@
|
||||
{
|
||||
"namespace": "OS::Software::Runtimes",
|
||||
"display_name": "Runtime Environment",
|
||||
"description": "Software is written in a specific programming language and the language must execute within a runtime environment. The runtime environment provides an abstraction to utilizing a computer's processor, memory (RAM), and other system resources.",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Glance::Image"
|
||||
},
|
||||
{
|
||||
"name": "OS::Cinder::Volume",
|
||||
"properties_target": "image"
|
||||
},
|
||||
{
|
||||
"name": "OS::Nova::Server",
|
||||
"properties_target": "metadata"
|
||||
}
|
||||
],
|
||||
"objects": [
|
||||
{
|
||||
"name": "PHP",
|
||||
"description": "PHP is a server-side scripting language designed for web development but also used as a general-purpose programming language. PHP code can be simply mixed with HTML code, or it can be used in combination with various templating engines and web frameworks. PHP code is usually processed by a PHP interpreter, which is usually implemented as a web server's native module or a Common Gateway Interface (CGI) executable. After the PHP code is interpreted and executed, the web server sends resulting output to its client, usually in form of a part of the generated web page – for example, PHP code can generate a web page's HTML code, an image, or some other data. PHP has also evolved to include a command-line interface (CLI) capability and can be used in standalone graphical applications. (http://en.wikipedia.org/wiki/PHP)",
|
||||
"properties": {
|
||||
"sw_runtime_php_version": {
|
||||
"title": "Version",
|
||||
"description": "The specific version of PHP.",
|
||||
"type": "string"
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "Python",
|
||||
"description": "Python is a widely used general-purpose, high-level programming language. Its design philosophy emphasizes code readability, and its syntax allows programmers to express concepts in fewer lines of code than would be possible in languages such as C++ or Java. The language provides constructs intended to enable clear programs on both a small and large scale. Python supports multiple programming paradigms, including object-oriented, imperative and functional programming or procedural styles. It features a dynamic type system and automatic memory management and has a large and comprehensive standard library. (http://en.wikipedia.org/wiki/Python_(programming_language))",
|
||||
"properties": {
|
||||
"sw_runtime_python_version": {
|
||||
"title": "Version",
|
||||
"description": "The specific version of python.",
|
||||
"type": "string"
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "Java",
|
||||
"description": "Java is a functional computer programming language that is concurrent, class-based, object-oriented, and specifically designed to have as few implementation dependencies as possible. It is intended to let application developers write once, run anywhere (WORA), meaning that code that runs on one platform does not need to be recompiled to run on another. Java applications are typically compiled to bytecode that can run on any Java virtual machine (JVM) regardless of computer architecture. (http://en.wikipedia.org/wiki/Java_(programming_language))",
|
||||
"properties": {
|
||||
"sw_runtime_java_version": {
|
||||
"title": "Version",
|
||||
"description": "The specific version of Java.",
|
||||
"type": "string"
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "Ruby",
|
||||
"description": "Ruby is a dynamic, reflective, object-oriented, general-purpose programming language. It was designed and developed in the mid-1990s by Yukihiro Matsumoto in Japan. According to its authors, Ruby was influenced by Perl, Smalltalk, Eiffel, Ada, and Lisp. It supports multiple programming paradigms, including functional, object-oriented, and imperative. It also has a dynamic type system and automatic memory management. (http://en.wikipedia.org/wiki/Python_(programming_language))",
|
||||
"properties": {
|
||||
"sw_runtime_ruby_version": {
|
||||
"title": "Version",
|
||||
"description": "The specific version of Ruby.",
|
||||
"type": "string"
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "Perl",
|
||||
"description": "Perl is a family of high-level, general-purpose, interpreted, dynamic programming languages. The languages in this family include Perl 5 and Perl 6. Though Perl is not officially an acronym, there are various backronyms in use, the most well-known being Practical Extraction and Reporting Language (http://en.wikipedia.org/wiki/Perl)",
|
||||
"properties": {
|
||||
"sw_runtime_perl_version": {
|
||||
"title": "Version",
|
||||
"description": "The specific version of Perl.",
|
||||
"type": "string"
|
||||
}
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,103 @@
|
||||
{
|
||||
"namespace": "OS::Software::WebServers",
|
||||
"display_name": "Web Servers",
|
||||
"description": "A web server is a computer system that processes requests via HTTP, the basic network protocol used to distribute information on the World Wide Web. The most common use of web servers is to host websites, but there are other uses such as gaming, data storage, running enterprise applications, handling email, FTP, or other web uses. (http://en.wikipedia.org/wiki/Web_server)",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Glance::Image"
|
||||
},
|
||||
{
|
||||
"name": "OS::Cinder::Volume",
|
||||
"properties_target": "image"
|
||||
},
|
||||
{
|
||||
"name": "OS::Nova::Server",
|
||||
"properties_target": "metadata"
|
||||
}
|
||||
],
|
||||
"objects": [
|
||||
{
|
||||
"name": "Apache HTTP Server",
|
||||
"description": "The Apache HTTP Server, colloquially called Apache, is a Web server application notable for playing a key role in the initial growth of the World Wide Web. Apache is developed and maintained by an open community of developers under the auspices of the Apache Software Foundation. Most commonly used on a Unix-like system, the software is available for a wide variety of operating systems, including Unix, FreeBSD, Linux, Solaris, Novell NetWare, OS X, Microsoft Windows, OS/2, TPF, OpenVMS and eComStation. Released under the Apache License, Apache is open-source software. (http://en.wikipedia.org/wiki/Apache_HTTP_Server)",
|
||||
"properties": {
|
||||
"sw_webserver_apache_version": {
|
||||
"title": "Version",
|
||||
"description": "The specific version of Apache.",
|
||||
"type": "string"
|
||||
},
|
||||
"sw_webserver_apache_http_port": {
|
||||
"title": "HTTP Port",
|
||||
"description": "The configured TCP/IP port on which the web server listens for incoming HTTP connections.",
|
||||
"type": "integer",
|
||||
"minimum": 1,
|
||||
"maximum": 65535,
|
||||
"default": 80
|
||||
},
|
||||
"sw_webserver_apache_https_port": {
|
||||
"title": "HTTPS Port",
|
||||
"description": "The configured TCP/IP port on which the web server listens for incoming HTTPS connections.",
|
||||
"type": "integer",
|
||||
"minimum": 1,
|
||||
"maximum": 65535,
|
||||
"default": 443
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "Nginx",
|
||||
"description": "Nginx (pronounced 'engine-x') is an open source reverse proxy server for HTTP, HTTPS, SMTP, POP3, and IMAP protocols, as well as a load balancer, HTTP cache, and a web server (origin server). The nginx project started with a strong focus on high concurrency, high performance and low memory usage. It is licensed under the 2-clause BSD-like license and it runs on Linux, BSD variants, Mac OS X, Solaris, AIX, HP-UX, as well as on other *nix flavors. It also has a proof of concept port for Microsoft Windows. (http://en.wikipedia.org/wiki/Nginx)",
|
||||
"properties": {
|
||||
"sw_webserver_nginx_version": {
|
||||
"title": "Version",
|
||||
"description": "The specific version of Nginx.",
|
||||
"type": "string"
|
||||
},
|
||||
"sw_webserver_nginx_http_port": {
|
||||
"title": "HTTP Port",
|
||||
"description": "The configured TCP/IP port on which the web server listens for incoming HTTP connections.",
|
||||
"type": "integer",
|
||||
"minimum": 1,
|
||||
"maximum": 65535,
|
||||
"default": 80
|
||||
},
|
||||
"sw_webserver_nginx_https_port": {
|
||||
"title": "HTTPS Port",
|
||||
"description": "The configured TCP/IP port on which the web server listens for incoming HTTPS connections.",
|
||||
"type": "integer",
|
||||
"minimum": 1,
|
||||
"maximum": 65535,
|
||||
"default": 443
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "IIS",
|
||||
"description": "Internet Information Services (IIS, formerly Internet Information Server) is an extensible web server created by Microsoft. IIS supports HTTP, HTTPS, FTP, FTPS, SMTP and NNTP. IIS is not turned on by default when Windows is installed. The IIS Manager is accessed through the Microsoft Management Console or Administrative Tools in the Control Panel. (http://en.wikipedia.org/wiki/Internet_Information_Services)",
|
||||
"properties": {
|
||||
"sw_webserver_iis_version": {
|
||||
"title": "Version",
|
||||
"description": "The specific version of IIS.",
|
||||
"type": "string"
|
||||
},
|
||||
"sw_webserver_iis_http_port": {
|
||||
"title": "HTTP Port",
|
||||
"description": "The configured TCP/IP port on which the web server listens for incoming HTTP connections.",
|
||||
"type": "integer",
|
||||
"minimum": 1,
|
||||
"maximum": 65535,
|
||||
"default": 80
|
||||
},
|
||||
"sw_webserver_iis_https_port": {
|
||||
"title": "HTTPS Port",
|
||||
"description": "The configured TCP/IP port on which the web server listens for incoming HTTPS connections.",
|
||||
"type": "integer",
|
||||
"minimum": 1,
|
||||
"maximum": 65535,
|
||||
"default": 443
|
||||
}
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,20 @@
|
||||
{
|
||||
"namespace": "OS::Cinder::Volumetype",
|
||||
"display_name": "Cinder Volume Type",
|
||||
"description": "The Cinder volume type configuration option. Volume type assignment provides a mechanism not only to provide scheduling to a specific storage back-end, but also can be used to specify specific information for a back-end storage device to act upon.",
|
||||
"visibility": "public",
|
||||
"protected": true,
|
||||
"resource_type_associations": [
|
||||
{
|
||||
"name": "OS::Glance::Image",
|
||||
"prefix": "cinder_"
|
||||
}
|
||||
],
|
||||
"properties": {
|
||||
"img_volume_type": {
|
||||
"title": "Image Volume Type",
|
||||
"description": "Specifies the volume type that should be applied during new volume creation with a image. This value is passed to Cinder when creating a new volume. Priority of volume type related parameters are 1.volume_type(via API or CLI), 2.cinder_img_volume_type, 3.default_volume_type(via cinder.conf). If not specified, volume_type or default_volume_type will be referred based on their priority.",
|
||||
"type": "string"
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,63 @@
|
||||
{
|
||||
"context_is_admin": "role:admin",
|
||||
"default": "role:admin",
|
||||
|
||||
"add_image": "",
|
||||
"delete_image": "",
|
||||
"get_image": "",
|
||||
"get_images": "",
|
||||
"modify_image": "",
|
||||
"publicize_image": "role:admin",
|
||||
"communitize_image": "",
|
||||
"copy_from": "",
|
||||
|
||||
"download_image": "",
|
||||
"upload_image": "",
|
||||
|
||||
"delete_image_location": "",
|
||||
"get_image_location": "",
|
||||
"set_image_location": "",
|
||||
|
||||
"add_member": "",
|
||||
"delete_member": "",
|
||||
"get_member": "",
|
||||
"get_members": "",
|
||||
"modify_member": "",
|
||||
|
||||
"manage_image_cache": "role:admin",
|
||||
|
||||
"get_task": "",
|
||||
"get_tasks": "",
|
||||
"add_task": "",
|
||||
"modify_task": "",
|
||||
"tasks_api_access": "role:admin",
|
||||
|
||||
"deactivate": "",
|
||||
"reactivate": "",
|
||||
|
||||
"get_metadef_namespace": "",
|
||||
"get_metadef_namespaces":"",
|
||||
"modify_metadef_namespace":"",
|
||||
"add_metadef_namespace":"",
|
||||
|
||||
"get_metadef_object":"",
|
||||
"get_metadef_objects":"",
|
||||
"modify_metadef_object":"",
|
||||
"add_metadef_object":"",
|
||||
|
||||
"list_metadef_resource_types":"",
|
||||
"get_metadef_resource_type":"",
|
||||
"add_metadef_resource_type_association":"",
|
||||
|
||||
"get_metadef_property":"",
|
||||
"get_metadef_properties":"",
|
||||
"modify_metadef_property":"",
|
||||
"add_metadef_property":"",
|
||||
|
||||
"get_metadef_tag":"",
|
||||
"get_metadef_tags":"",
|
||||
"modify_metadef_tag":"",
|
||||
"add_metadef_tag":"",
|
||||
"add_metadef_tags":""
|
||||
|
||||
}
|
||||
@@ -0,0 +1,27 @@
|
||||
# Configuration for glance-rootwrap
|
||||
# This file should be owned by (and only-writable by) the root user
|
||||
|
||||
[DEFAULT]
|
||||
# List of directories to load filter definitions from (separated by ',').
|
||||
# These directories MUST all be only writeable by root !
|
||||
filters_path=/etc/glance/rootwrap.d,/usr/share/glance/rootwrap
|
||||
|
||||
# List of directories to search executables in, in case filters do not
|
||||
# explicitely specify a full path (separated by ',')
|
||||
# If not specified, defaults to system PATH environment variable.
|
||||
# These directories MUST all be only writeable by root !
|
||||
exec_dirs=/sbin,/usr/sbin,/bin,/usr/bin,/usr/local/bin,/usr/local/sbin
|
||||
|
||||
# Enable logging to syslog
|
||||
# Default value is False
|
||||
use_syslog=False
|
||||
|
||||
# Which syslog facility to use.
|
||||
# Valid values include auth, authpriv, syslog, local0, local1...
|
||||
# Default value is 'syslog'
|
||||
syslog_log_facility=syslog
|
||||
|
||||
# Which messages to log.
|
||||
# INFO means log all usage
|
||||
# ERROR means only log unsuccessful attempts
|
||||
syslog_log_level=ERROR
|
||||
@@ -0,0 +1,29 @@
|
||||
# glance-rootwrap command filters for glance cinder store
|
||||
# This file should be owned by (and only-writable by) the root user
|
||||
|
||||
[Filters]
|
||||
# cinder store driver
|
||||
disk_chown: RegExpFilter, chown, root, chown, \d+, /dev/(?!.*/\.\.).*
|
||||
|
||||
# os-brick
|
||||
mount: CommandFilter, mount, root
|
||||
blockdev: RegExpFilter, blockdev, root, blockdev, (--getsize64|--flushbufs), /dev/.*
|
||||
tee: CommandFilter, tee, root
|
||||
mkdir: CommandFilter, mkdir, root
|
||||
chown: RegExpFilter, chown, root, chown root:root /etc/pstorage/clusters/(?!.*/\.\.).*
|
||||
ip: CommandFilter, ip, root
|
||||
dd: CommandFilter, dd, root
|
||||
iscsiadm: CommandFilter, iscsiadm, root
|
||||
aoe-revalidate: CommandFilter, aoe-revalidate, root
|
||||
aoe-discover: CommandFilter, aoe-discover, root
|
||||
aoe-flush: CommandFilter, aoe-flush, root
|
||||
read_initiator: ReadFileFilter, /etc/iscsi/initiatorname.iscsi
|
||||
multipath: CommandFilter, multipath, root
|
||||
multipathd: CommandFilter, multipathd, root
|
||||
systool: CommandFilter, systool, root
|
||||
sg_scan: CommandFilter, sg_scan, root
|
||||
cp: CommandFilter, cp, root
|
||||
drv_cfg: CommandFilter, /opt/emc/scaleio/sdc/bin/drv_cfg, root, /opt/emc/scaleio/sdc/bin/drv_cfg, --query_guid
|
||||
sds_cli: CommandFilter, /usr/local/bin/sds/sds_cli, root
|
||||
vgc-cluster: CommandFilter, vgc-cluster, root
|
||||
scsi_id: CommandFilter, /lib/udev/scsi_id, root
|
||||
@@ -0,0 +1,28 @@
|
||||
{
|
||||
"kernel_id": {
|
||||
"type": ["null", "string"],
|
||||
"pattern": "^([0-9a-fA-F]){8}-([0-9a-fA-F]){4}-([0-9a-fA-F]){4}-([0-9a-fA-F]){4}-([0-9a-fA-F]){12}$",
|
||||
"description": "ID of image stored in Glance that should be used as the kernel when booting an AMI-style image."
|
||||
},
|
||||
"ramdisk_id": {
|
||||
"type": ["null", "string"],
|
||||
"pattern": "^([0-9a-fA-F]){8}-([0-9a-fA-F]){4}-([0-9a-fA-F]){4}-([0-9a-fA-F]){4}-([0-9a-fA-F]){12}$",
|
||||
"description": "ID of image stored in Glance that should be used as the ramdisk when booting an AMI-style image."
|
||||
},
|
||||
"instance_uuid": {
|
||||
"type": "string",
|
||||
"description": "Metadata which can be used to record which instance this image is associated with. (Informational only, does not create an instance snapshot.)"
|
||||
},
|
||||
"architecture": {
|
||||
"description": "Operating system architecture as specified in https://docs.openstack.org/python-glanceclient/latest/cli/property-keys.html",
|
||||
"type": "string"
|
||||
},
|
||||
"os_distro": {
|
||||
"description": "Common name of operating system distribution as specified in https://docs.openstack.org/python-glanceclient/latest/cli/property-keys.html",
|
||||
"type": "string"
|
||||
},
|
||||
"os_version": {
|
||||
"description": "Operating system version as specified by the distributor",
|
||||
"type": "string"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1 @@
|
||||
gJtdriWV8c99gz1V9gvF20QnaHhv0lTNpv24nTaibxw=
|
||||
@@ -0,0 +1 @@
|
||||
XFzzDnlkbPNLEXKdQTlprhKksDUIuO2oKeA5Qs2a1ds=
|
||||
@@ -0,0 +1,42 @@
|
||||
# config for templated.Catalog, using camelCase because I don't want to do
|
||||
# translations for keystone compat
|
||||
catalog.RegionOne.identity.publicURL = http://localhost:$(public_port)s/v2.0
|
||||
catalog.RegionOne.identity.adminURL = http://localhost:$(admin_port)s/v2.0
|
||||
catalog.RegionOne.identity.internalURL = http://localhost:$(public_port)s/v2.0
|
||||
catalog.RegionOne.identity.name = Identity Service
|
||||
|
||||
# fake compute service for now to help novaclient tests work
|
||||
catalog.RegionOne.computev21.publicURL = http://localhost:8774/v2.1/$(tenant_id)s
|
||||
catalog.RegionOne.computev21.adminURL = http://localhost:8774/v2.1/$(tenant_id)s
|
||||
catalog.RegionOne.computev21.internalURL = http://localhost:8774/v2.1/$(tenant_id)s
|
||||
catalog.RegionOne.computev21.name = Compute Service V2.1
|
||||
|
||||
catalog.RegionOne.volumev2.publicURL = http://localhost:8776/v2/$(tenant_id)s
|
||||
catalog.RegionOne.volumev2.adminURL = http://localhost:8776/v2/$(tenant_id)s
|
||||
catalog.RegionOne.volumev2.internalURL = http://localhost:8776/v2/$(tenant_id)s
|
||||
catalog.RegionOne.volumev2.name = Volume Service V2
|
||||
|
||||
catalog.RegionOne.ec2.publicURL = http://localhost:8773/services/Cloud
|
||||
catalog.RegionOne.ec2.adminURL = http://localhost:8773/services/Admin
|
||||
catalog.RegionOne.ec2.internalURL = http://localhost:8773/services/Cloud
|
||||
catalog.RegionOne.ec2.name = EC2 Service
|
||||
|
||||
catalog.RegionOne.image.publicURL = http://localhost:9292
|
||||
catalog.RegionOne.image.adminURL = http://localhost:9292
|
||||
catalog.RegionOne.image.internalURL = http://localhost:9292
|
||||
catalog.RegionOne.image.name = Image Service
|
||||
|
||||
catalog.RegionOne.network.publicURL = http://localhost:9696
|
||||
catalog.RegionOne.network.adminURL = http://localhost:9696
|
||||
catalog.RegionOne.network.internalURL = http://localhost:9696
|
||||
catalog.RegionOne.network.name = Network Service
|
||||
|
||||
catalog.RegionOne.orchestration.publicURL = http://localhost:8004/v1/$(tenant_id)s
|
||||
catalog.RegionOne.orchestration.adminURL = http://localhost:8004/v1/$(tenant_id)s
|
||||
catalog.RegionOne.orchestration.internalURL = http://localhost:8004/v1/$(tenant_id)s
|
||||
catalog.RegionOne.orchestration.name = Orchestration Service
|
||||
|
||||
catalog.RegionOne.metering.publicURL = http://localhost:8777
|
||||
catalog.RegionOne.metering.adminURL = http://localhost:8777
|
||||
catalog.RegionOne.metering.internalURL = http://localhost:8777
|
||||
catalog.RegionOne.metering.name = Telemetry Service
|
||||
@@ -0,0 +1 @@
|
||||
aqF-v9fByg1EgLEzkU0zEfXtckJckUGEBOPG9vSexmY=
|
||||
@@ -0,0 +1 @@
|
||||
3W1YJkyIxRiEQqQwLIw-QCESwjT06M0BBKCS9rvTVDg=
|
||||
@@ -0,0 +1,92 @@
|
||||
# Keystone PasteDeploy configuration file.
|
||||
|
||||
[filter:debug]
|
||||
use = egg:oslo.middleware#debug
|
||||
|
||||
[filter:request_id]
|
||||
use = egg:oslo.middleware#request_id
|
||||
|
||||
[filter:build_auth_context]
|
||||
use = egg:keystone#build_auth_context
|
||||
|
||||
[filter:token_auth]
|
||||
use = egg:keystone#token_auth
|
||||
|
||||
[filter:json_body]
|
||||
use = egg:keystone#json_body
|
||||
|
||||
[filter:cors]
|
||||
use = egg:oslo.middleware#cors
|
||||
oslo_config_project = keystone
|
||||
|
||||
[filter:http_proxy_to_wsgi]
|
||||
use = egg:oslo.middleware#http_proxy_to_wsgi
|
||||
|
||||
[filter:healthcheck]
|
||||
use = egg:oslo.middleware#healthcheck
|
||||
|
||||
[filter:ec2_extension]
|
||||
use = egg:keystone#ec2_extension
|
||||
|
||||
[filter:ec2_extension_v3]
|
||||
use = egg:keystone#ec2_extension_v3
|
||||
|
||||
[filter:s3_extension]
|
||||
use = egg:keystone#s3_extension
|
||||
|
||||
[filter:url_normalize]
|
||||
use = egg:keystone#url_normalize
|
||||
|
||||
[filter:sizelimit]
|
||||
use = egg:oslo.middleware#sizelimit
|
||||
|
||||
[filter:osprofiler]
|
||||
use = egg:osprofiler#osprofiler
|
||||
|
||||
[app:public_service]
|
||||
use = egg:keystone#public_service
|
||||
|
||||
[app:service_v3]
|
||||
use = egg:keystone#service_v3
|
||||
|
||||
[app:admin_service]
|
||||
use = egg:keystone#admin_service
|
||||
|
||||
[pipeline:public_api]
|
||||
# The last item in this pipeline must be public_service or an equivalent
|
||||
# application. It cannot be a filter.
|
||||
pipeline = healthcheck cors sizelimit http_proxy_to_wsgi osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension public_service
|
||||
|
||||
[pipeline:admin_api]
|
||||
# The last item in this pipeline must be admin_service or an equivalent
|
||||
# application. It cannot be a filter.
|
||||
pipeline = healthcheck cors sizelimit http_proxy_to_wsgi osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension s3_extension admin_service
|
||||
|
||||
[pipeline:api_v3]
|
||||
# The last item in this pipeline must be service_v3 or an equivalent
|
||||
# application. It cannot be a filter.
|
||||
pipeline = healthcheck cors sizelimit http_proxy_to_wsgi osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension_v3 s3_extension service_v3
|
||||
|
||||
[app:public_version_service]
|
||||
use = egg:keystone#public_version_service
|
||||
|
||||
[app:admin_version_service]
|
||||
use = egg:keystone#admin_version_service
|
||||
|
||||
[pipeline:public_version_api]
|
||||
pipeline = healthcheck cors sizelimit osprofiler url_normalize public_version_service
|
||||
|
||||
[pipeline:admin_version_api]
|
||||
pipeline = healthcheck cors sizelimit osprofiler url_normalize admin_version_service
|
||||
|
||||
[composite:main]
|
||||
use = egg:Paste#urlmap
|
||||
/v2.0 = public_api
|
||||
/v3 = api_v3
|
||||
/ = public_version_api
|
||||
|
||||
[composite:admin]
|
||||
use = egg:Paste#urlmap
|
||||
/v2.0 = admin_api
|
||||
/v3 = api_v3
|
||||
/ = admin_version_api
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,65 @@
|
||||
[loggers]
|
||||
keys=root,access
|
||||
|
||||
[handlers]
|
||||
keys=production,file,access_file,devel
|
||||
|
||||
[formatters]
|
||||
keys=minimal,normal,debug
|
||||
|
||||
|
||||
###########
|
||||
# Loggers #
|
||||
###########
|
||||
|
||||
[logger_root]
|
||||
level=WARNING
|
||||
handlers=file
|
||||
|
||||
[logger_access]
|
||||
level=INFO
|
||||
qualname=access
|
||||
handlers=access_file
|
||||
|
||||
|
||||
################
|
||||
# Log Handlers #
|
||||
################
|
||||
|
||||
[handler_production]
|
||||
class=handlers.SysLogHandler
|
||||
level=ERROR
|
||||
formatter=normal
|
||||
args=(('localhost', handlers.SYSLOG_UDP_PORT), handlers.SysLogHandler.LOG_USER)
|
||||
|
||||
[handler_file]
|
||||
class=handlers.WatchedFileHandler
|
||||
level=WARNING
|
||||
formatter=normal
|
||||
args=('error.log',)
|
||||
|
||||
[handler_access_file]
|
||||
class=handlers.WatchedFileHandler
|
||||
level=INFO
|
||||
formatter=minimal
|
||||
args=('access.log',)
|
||||
|
||||
[handler_devel]
|
||||
class=StreamHandler
|
||||
level=NOTSET
|
||||
formatter=debug
|
||||
args=(sys.stdout,)
|
||||
|
||||
|
||||
##################
|
||||
# Log Formatters #
|
||||
##################
|
||||
|
||||
[formatter_minimal]
|
||||
format=%(message)s
|
||||
|
||||
[formatter_normal]
|
||||
format=(%(name)s): %(asctime)s %(levelname)s %(message)s
|
||||
|
||||
[formatter_debug]
|
||||
format=(%(name)s): %(asctime)s %(levelname)s %(module)s %(funcName)s %(message)s
|
||||
@@ -0,0 +1,22 @@
|
||||
<!DOCTYPE html>
|
||||
<html xmlns="http://www.w3.org/1999/xhtml">
|
||||
<head>
|
||||
<title>Keystone WebSSO redirect</title>
|
||||
</head>
|
||||
<body>
|
||||
<form id="sso" name="sso" action="$host" method="post">
|
||||
Please wait...
|
||||
<br/>
|
||||
<input type="hidden" name="token" id="token" value="$token"/>
|
||||
<noscript>
|
||||
<input type="submit" name="submit_no_javascript" id="submit_no_javascript"
|
||||
value="If your JavaScript is disabled, please click to continue"/>
|
||||
</noscript>
|
||||
</form>
|
||||
<script type="text/javascript">
|
||||
window.onload = function() {
|
||||
document.forms['sso'].submit();
|
||||
}
|
||||
</script>
|
||||
</body>
|
||||
</html>
|
||||
@@ -0,0 +1,45 @@
|
||||
[composite:neutron]
|
||||
use = egg:Paste#urlmap
|
||||
/: neutronversions_composite
|
||||
/v2.0: neutronapi_v2_0
|
||||
|
||||
[composite:neutronapi_v2_0]
|
||||
use = call:neutron.auth:pipeline_factory
|
||||
noauth = cors http_proxy_to_wsgi request_id catch_errors extensions neutronapiapp_v2_0
|
||||
keystone = cors http_proxy_to_wsgi request_id catch_errors authtoken keystonecontext extensions neutronapiapp_v2_0
|
||||
|
||||
[composite:neutronversions_composite]
|
||||
use = call:neutron.auth:pipeline_factory
|
||||
noauth = cors http_proxy_to_wsgi neutronversions
|
||||
keystone = cors http_proxy_to_wsgi neutronversions
|
||||
|
||||
[filter:request_id]
|
||||
paste.filter_factory = oslo_middleware:RequestId.factory
|
||||
|
||||
[filter:catch_errors]
|
||||
paste.filter_factory = oslo_middleware:CatchErrors.factory
|
||||
|
||||
[filter:cors]
|
||||
paste.filter_factory = oslo_middleware.cors:filter_factory
|
||||
oslo_config_project = neutron
|
||||
|
||||
[filter:http_proxy_to_wsgi]
|
||||
paste.filter_factory = oslo_middleware.http_proxy_to_wsgi:HTTPProxyToWSGI.factory
|
||||
|
||||
[filter:keystonecontext]
|
||||
paste.filter_factory = neutron.auth:NeutronKeystoneContext.factory
|
||||
|
||||
[filter:authtoken]
|
||||
paste.filter_factory = keystonemiddleware.auth_token:filter_factory
|
||||
|
||||
[filter:extensions]
|
||||
paste.filter_factory = neutron.api.extensions:plugin_aware_extension_middleware_factory
|
||||
|
||||
[app:neutronversions]
|
||||
paste.app_factory = neutron.pecan_wsgi.app:versions_factory
|
||||
|
||||
[app:neutronapiapp_v2_0]
|
||||
paste.app_factory = neutron.api.v2.router:APIRouter.factory
|
||||
|
||||
[filter:osprofiler]
|
||||
paste.filter_factory = osprofiler.web:WsgiMiddleware.factory
|
||||
@@ -0,0 +1,269 @@
|
||||
[DEFAULT]
|
||||
dnsmasq_config_file = /etc/neutron/dnsmasq-neutron.conf
|
||||
enable_isolated_metadata = true
|
||||
dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq
|
||||
interface_driver = linuxbridge
|
||||
|
||||
#
|
||||
# From neutron.base.agent
|
||||
#
|
||||
|
||||
# Name of Open vSwitch bridge to use (string value)
|
||||
#ovs_integration_bridge = br-int
|
||||
|
||||
# Uses veth for an OVS interface or not. Support kernels with limited namespace
|
||||
# support (e.g. RHEL 6.5) and rate limiting on router's gateway port so long as
|
||||
# ovs_use_veth is set to True. (boolean value)
|
||||
#ovs_use_veth = false
|
||||
|
||||
# The driver used to manage the virtual interface. (string value)
|
||||
#interface_driver = <None>
|
||||
|
||||
#
|
||||
# From neutron.dhcp.agent
|
||||
#
|
||||
|
||||
# The DHCP agent will resync its state with Neutron to recover from any
|
||||
# transient notification or RPC errors. The interval is number of seconds
|
||||
# between attempts. (integer value)
|
||||
#resync_interval = 5
|
||||
|
||||
# The driver used to manage the DHCP server. (string value)
|
||||
#dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq
|
||||
|
||||
# The DHCP server can assist with providing metadata support on isolated
|
||||
# networks. Setting this value to True will cause the DHCP server to append
|
||||
# specific host routes to the DHCP request. The metadata service will only be
|
||||
# activated when the subnet does not contain any router port. The guest
|
||||
# instance must be configured to request host routes via DHCP (Option 121).
|
||||
# This option doesn't have any effect when force_metadata is set to True.
|
||||
# (boolean value)
|
||||
#enable_isolated_metadata = false
|
||||
|
||||
# In some cases the Neutron router is not present to provide the metadata IP
|
||||
# but the DHCP server can be used to provide this info. Setting this value will
|
||||
# force the DHCP server to append specific host routes to the DHCP request. If
|
||||
# this option is set, then the metadata service will be activated for all the
|
||||
# networks. (boolean value)
|
||||
#force_metadata = false
|
||||
|
||||
# Allows for serving metadata requests coming from a dedicated metadata access
|
||||
# network whose CIDR is 169.254.169.254/16 (or larger prefix), and is connected
|
||||
# to a Neutron router from which the VMs send metadata:1 request. In this case
|
||||
# DHCP Option 121 will not be injected in VMs, as they will be able to reach
|
||||
# 169.254.169.254 through a router. This option requires
|
||||
# enable_isolated_metadata = True. (boolean value)
|
||||
#enable_metadata_network = false
|
||||
|
||||
# Number of threads to use during sync process. Should not exceed connection
|
||||
# pool size configured on server. (integer value)
|
||||
#num_sync_threads = 4
|
||||
|
||||
# Location to store DHCP server config files. (string value)
|
||||
#dhcp_confs = $state_path/dhcp
|
||||
|
||||
# Override the default dnsmasq settings with this file. (string value)
|
||||
#dnsmasq_config_file =
|
||||
|
||||
# Comma-separated list of the DNS servers which will be used as forwarders.
|
||||
# (list value)
|
||||
#dnsmasq_dns_servers =
|
||||
|
||||
# Base log dir for dnsmasq logging. The log contains DHCP and DNS log
|
||||
# information and is useful for debugging issues with either DHCP or DNS. If
|
||||
# this section is null, disable dnsmasq log. (string value)
|
||||
#dnsmasq_base_log_dir = <None>
|
||||
|
||||
# Enables the dnsmasq service to provide name resolution for instances via DNS
|
||||
# resolvers on the host running the DHCP agent. Effectively removes the '--no-
|
||||
# resolv' option from the dnsmasq process arguments. Adding custom DNS
|
||||
# resolvers to the 'dnsmasq_dns_servers' option disables this feature. (boolean
|
||||
# value)
|
||||
#dnsmasq_local_resolv = false
|
||||
|
||||
# Limit number of leases to prevent a denial-of-service. (integer value)
|
||||
#dnsmasq_lease_max = 16777216
|
||||
|
||||
# Use broadcast in DHCP replies. (boolean value)
|
||||
#dhcp_broadcast_reply = false
|
||||
|
||||
# DHCP renewal time T1 (in seconds). If set to 0, it will default to half of
|
||||
# the lease time. (integer value)
|
||||
#dhcp_renewal_time = 0
|
||||
|
||||
# DHCP rebinding time T2 (in seconds). If set to 0, it will default to 7/8 of
|
||||
# the lease time. (integer value)
|
||||
#dhcp_rebinding_time = 0
|
||||
|
||||
#
|
||||
# From oslo.log
|
||||
#
|
||||
|
||||
# If set to true, the logging level will be set to DEBUG instead of the default
|
||||
# INFO level. (boolean value)
|
||||
# Note: This option can be changed without restarting.
|
||||
#debug = false
|
||||
|
||||
# The name of a logging configuration file. This file is appended to any
|
||||
# existing logging configuration files. For details about logging configuration
|
||||
# files, see the Python logging module documentation. Note that when logging
|
||||
# configuration files are used then all logging configuration is set in the
|
||||
# configuration file and other logging configuration options are ignored (for
|
||||
# example, logging_context_format_string). (string value)
|
||||
# Note: This option can be changed without restarting.
|
||||
# Deprecated group/name - [DEFAULT]/log_config
|
||||
#log_config_append = <None>
|
||||
|
||||
# Defines the format string for %%(asctime)s in log records. Default:
|
||||
# %(default)s . This option is ignored if log_config_append is set. (string
|
||||
# value)
|
||||
#log_date_format = %Y-%m-%d %H:%M:%S
|
||||
|
||||
# (Optional) Name of log file to send logging output to. If no default is set,
|
||||
# logging will go to stderr as defined by use_stderr. This option is ignored if
|
||||
# log_config_append is set. (string value)
|
||||
# Deprecated group/name - [DEFAULT]/logfile
|
||||
#log_file = <None>
|
||||
|
||||
# (Optional) The base directory used for relative log_file paths. This option
|
||||
# is ignored if log_config_append is set. (string value)
|
||||
# Deprecated group/name - [DEFAULT]/logdir
|
||||
#log_dir = <None>
|
||||
|
||||
# Uses logging handler designed to watch file system. When log file is moved or
|
||||
# removed this handler will open a new log file with specified path
|
||||
# instantaneously. It makes sense only if log_file option is specified and
|
||||
# Linux platform is used. This option is ignored if log_config_append is set.
|
||||
# (boolean value)
|
||||
#watch_log_file = false
|
||||
|
||||
# Use syslog for logging. Existing syslog format is DEPRECATED and will be
|
||||
# changed later to honor RFC5424. This option is ignored if log_config_append
|
||||
# is set. (boolean value)
|
||||
#use_syslog = false
|
||||
|
||||
# Enable journald for logging. If running in a systemd environment you may wish
|
||||
# to enable journal support. Doing so will use the journal native protocol
|
||||
# which includes structured metadata in addition to log messages.This option is
|
||||
# ignored if log_config_append is set. (boolean value)
|
||||
#use_journal = false
|
||||
|
||||
# Syslog facility to receive log lines. This option is ignored if
|
||||
# log_config_append is set. (string value)
|
||||
#syslog_log_facility = LOG_USER
|
||||
|
||||
# Use JSON formatting for logging. This option is ignored if log_config_append
|
||||
# is set. (boolean value)
|
||||
#use_json = false
|
||||
|
||||
# Log output to standard error. This option is ignored if log_config_append is
|
||||
# set. (boolean value)
|
||||
#use_stderr = false
|
||||
|
||||
# Format string to use for log messages with context. (string value)
|
||||
#logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
|
||||
|
||||
# Format string to use for log messages when context is undefined. (string
|
||||
# value)
|
||||
#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
|
||||
|
||||
# Additional data to append to log message when logging level for the message
|
||||
# is DEBUG. (string value)
|
||||
#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
|
||||
|
||||
# Prefix each line of exception output with this format. (string value)
|
||||
#logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
|
||||
|
||||
# Defines the format string for %(user_identity)s that is used in
|
||||
# logging_context_format_string. (string value)
|
||||
#logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
|
||||
|
||||
# List of package logging levels in logger=LEVEL pairs. This option is ignored
|
||||
# if log_config_append is set. (list value)
|
||||
#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
|
||||
|
||||
# Enables or disables publication of error events. (boolean value)
|
||||
#publish_errors = false
|
||||
|
||||
# The format for an instance that is passed with the log message. (string
|
||||
# value)
|
||||
#instance_format = "[instance: %(uuid)s] "
|
||||
|
||||
# The format for an instance UUID that is passed with the log message. (string
|
||||
# value)
|
||||
#instance_uuid_format = "[instance: %(uuid)s] "
|
||||
|
||||
# Interval, number of seconds, of log rate limiting. (integer value)
|
||||
#rate_limit_interval = 0
|
||||
|
||||
# Maximum number of logged messages per rate_limit_interval. (integer value)
|
||||
#rate_limit_burst = 0
|
||||
|
||||
# Log level name used by rate limiting: CRITICAL, ERROR, INFO, WARNING, DEBUG
|
||||
# or empty string. Logs with level greater or equal to rate_limit_except_level
|
||||
# are not filtered. An empty string means that all levels are filtered. (string
|
||||
# value)
|
||||
#rate_limit_except_level = CRITICAL
|
||||
|
||||
# Enables or disables fatal status of deprecations. (boolean value)
|
||||
#fatal_deprecations = false
|
||||
|
||||
|
||||
[agent]
|
||||
|
||||
#
|
||||
# From neutron.az.agent
|
||||
#
|
||||
|
||||
# Availability zone of this node (string value)
|
||||
#availability_zone = nova
|
||||
|
||||
#
|
||||
# From neutron.base.agent
|
||||
#
|
||||
|
||||
# Seconds between nodes reporting state to server; should be less than
|
||||
# agent_down_time, best if it is half or less than agent_down_time. (floating
|
||||
# point value)
|
||||
#report_interval = 30
|
||||
|
||||
# Log agent heartbeats (boolean value)
|
||||
#log_agent_heartbeats = false
|
||||
|
||||
|
||||
[ovs]
|
||||
|
||||
#
|
||||
# From neutron.base.agent
|
||||
#
|
||||
|
||||
# DEPRECATED: The interface for interacting with the OVSDB (string value)
|
||||
# Possible values:
|
||||
# vsctl - <No description provided>
|
||||
# native - <No description provided>
|
||||
# This option is deprecated for removal.
|
||||
# Its value may be silently ignored in the future.
|
||||
#ovsdb_interface = native
|
||||
|
||||
# The connection string for the OVSDB backend. Will be used by ovsdb-client
|
||||
# when monitoring and used for the all ovsdb commands when native
|
||||
# ovsdb_interface is enabled (string value)
|
||||
#ovsdb_connection = tcp:127.0.0.1:6640
|
||||
|
||||
# The SSL private key file to use when interacting with OVSDB. Required when
|
||||
# using an "ssl:" prefixed ovsdb_connection (string value)
|
||||
#ssl_key_file = <None>
|
||||
|
||||
# The SSL certificate file to use when interacting with OVSDB. Required when
|
||||
# using an "ssl:" prefixed ovsdb_connection (string value)
|
||||
#ssl_cert_file = <None>
|
||||
|
||||
# The Certificate Authority (CA) certificate to use when interacting with
|
||||
# OVSDB. Required when using an "ssl:" prefixed ovsdb_connection (string
|
||||
# value)
|
||||
#ssl_ca_cert_file = <None>
|
||||
|
||||
# Timeout in seconds for ovsdb commands. If the timeout expires, ovsdb commands
|
||||
# will fail with ALARMCLOCK error. (integer value)
|
||||
# Deprecated group/name - [DEFAULT]/ovs_vsctl_timeout
|
||||
#ovsdb_timeout = 10
|
||||
@@ -0,0 +1,8 @@
|
||||
# Override --no-hosts dnsmasq option supplied by neutron
|
||||
addn-hosts=/etc/hosts
|
||||
|
||||
# Log dnsmasq queries to syslog
|
||||
log-queries
|
||||
|
||||
# Verbose logging for DHCP
|
||||
log-dhcp
|
||||
@@ -0,0 +1,23 @@
|
||||
[DEFAULT]
|
||||
|
||||
|
||||
[fwaas]
|
||||
|
||||
#
|
||||
# From firewall.agent
|
||||
#
|
||||
|
||||
# Name of the FWaaS Driver (string value)
|
||||
#driver =
|
||||
|
||||
# Enable FWaaS (boolean value)
|
||||
#enabled = false
|
||||
|
||||
# Firewall agent class (string value)
|
||||
#agent_version = v2
|
||||
|
||||
# Name of the FWaaS Conntrack Driver (string value)
|
||||
#conntrack_driver = conntrack
|
||||
|
||||
# Name of the firewall l2 driver (string value)
|
||||
#firewall_l2_driver = noop
|
||||
@@ -0,0 +1,346 @@
|
||||
[DEFAULT]
|
||||
external_network_bridge =
|
||||
interface_driver = linuxbridge
|
||||
|
||||
#
|
||||
# From neutron.base.agent
|
||||
#
|
||||
|
||||
# Name of Open vSwitch bridge to use (string value)
|
||||
#ovs_integration_bridge = br-int
|
||||
|
||||
# Uses veth for an OVS interface or not. Support kernels with limited namespace
|
||||
# support (e.g. RHEL 6.5) and rate limiting on router's gateway port so long as
|
||||
# ovs_use_veth is set to True. (boolean value)
|
||||
#ovs_use_veth = false
|
||||
|
||||
# The driver used to manage the virtual interface. (string value)
|
||||
#interface_driver = <None>
|
||||
|
||||
#
|
||||
# From neutron.l3.agent
|
||||
#
|
||||
|
||||
# The working mode for the agent. Allowed modes are: 'legacy' - this preserves
|
||||
# the existing behavior where the L3 agent is deployed on a centralized
|
||||
# networking node to provide L3 services like DNAT, and SNAT. Use this mode if
|
||||
# you do not want to adopt DVR. 'dvr' - this mode enables DVR functionality and
|
||||
# must be used for an L3 agent that runs on a compute host. 'dvr_snat' - this
|
||||
# enables centralized SNAT support in conjunction with DVR. This mode must be
|
||||
# used for an L3 agent running on a centralized node (or in single-host
|
||||
# deployments, e.g. devstack). 'dvr_no_external' - this mode enables only
|
||||
# East/West DVR routing functionality for a L3 agent that runs on a compute
|
||||
# host, the North/South functionality such as DNAT and SNAT will be provided by
|
||||
# the centralized network node that is running in 'dvr_snat' mode. This mode
|
||||
# should be used when there is no external network connectivity on the compute
|
||||
# host. (string value)
|
||||
# Possible values:
|
||||
# dvr - <No description provided>
|
||||
# dvr_snat - <No description provided>
|
||||
# legacy - <No description provided>
|
||||
# dvr_no_external - <No description provided>
|
||||
#agent_mode = legacy
|
||||
|
||||
# TCP Port used by Neutron metadata namespace proxy. (port value)
|
||||
# Minimum value: 0
|
||||
# Maximum value: 65535
|
||||
#metadata_port = 9697
|
||||
|
||||
# Indicates that this L3 agent should also handle routers that do not have an
|
||||
# external network gateway configured. This option should be True only for a
|
||||
# single agent in a Neutron deployment, and may be False for all agents if all
|
||||
# routers must have an external network gateway. (boolean value)
|
||||
#handle_internal_only_routers = true
|
||||
|
||||
# DEPRECATED: When external_network_bridge is set, each L3 agent can be
|
||||
# associated with no more than one external network. This value should be set
|
||||
# to the UUID of that external network. To allow L3 agent support multiple
|
||||
# external networks, both the external_network_bridge and
|
||||
# gateway_external_network_id must be left empty. (string value)
|
||||
# This option is deprecated for removal.
|
||||
# Its value may be silently ignored in the future.
|
||||
#gateway_external_network_id =
|
||||
|
||||
# With IPv6, the network used for the external gateway does not need to have an
|
||||
# associated subnet, since the automatically assigned link-local address (LLA)
|
||||
# can be used. However, an IPv6 gateway address is needed for use as the next-
|
||||
# hop for the default route. If no IPv6 gateway address is configured here,
|
||||
# (and only then) the neutron router will be configured to get its default
|
||||
# route from router advertisements (RAs) from the upstream router; in which
|
||||
# case the upstream router must also be configured to send these RAs. The
|
||||
# ipv6_gateway, when configured, should be the LLA of the interface on the
|
||||
# upstream router. If a next-hop using a global unique address (GUA) is
|
||||
# desired, it needs to be done via a subnet allocated to the network and not
|
||||
# through this parameter. (string value)
|
||||
#ipv6_gateway =
|
||||
|
||||
# Driver used for ipv6 prefix delegation. This needs to be an entry point
|
||||
# defined in the neutron.agent.linux.pd_drivers namespace. See setup.cfg for
|
||||
# entry points included with the neutron source. (string value)
|
||||
#prefix_delegation_driver = dibbler
|
||||
|
||||
# Allow running metadata proxy. (boolean value)
|
||||
#enable_metadata_proxy = true
|
||||
|
||||
# Iptables mangle mark used to mark metadata valid requests. This mark will be
|
||||
# masked with 0xffff so that only the lower 16 bits will be used. (string
|
||||
# value)
|
||||
#metadata_access_mark = 0x1
|
||||
|
||||
# Iptables mangle mark used to mark ingress from external network. This mark
|
||||
# will be masked with 0xffff so that only the lower 16 bits will be used.
|
||||
# (string value)
|
||||
#external_ingress_mark = 0x2
|
||||
|
||||
# DEPRECATED: Name of bridge used for external network traffic. When this
|
||||
# parameter is set, the L3 agent will plug an interface directly into an
|
||||
# external bridge which will not allow any wiring by the L2 agent. Using this
|
||||
# will result in incorrect port statuses. This option is deprecated and will be
|
||||
# removed in Ocata. (string value)
|
||||
# This option is deprecated for removal.
|
||||
# Its value may be silently ignored in the future.
|
||||
#external_network_bridge =
|
||||
|
||||
# Seconds between running periodic tasks. (integer value)
|
||||
#periodic_interval = 40
|
||||
|
||||
# Number of separate API worker processes for service. If not specified, the
|
||||
# default is equal to the number of CPUs available for best performance.
|
||||
# (integer value)
|
||||
#api_workers = <None>
|
||||
|
||||
# Number of RPC worker processes for service. (integer value)
|
||||
#rpc_workers = 1
|
||||
|
||||
# Number of RPC worker processes dedicated to state reports queue. (integer
|
||||
# value)
|
||||
#rpc_state_report_workers = 1
|
||||
|
||||
# Range of seconds to randomly delay when starting the periodic task scheduler
|
||||
# to reduce stampeding. (Disable by setting to 0) (integer value)
|
||||
#periodic_fuzzy_delay = 5
|
||||
|
||||
# Location to store keepalived/conntrackd config files (string value)
|
||||
#ha_confs_path = $state_path/ha_confs
|
||||
|
||||
# VRRP authentication type (string value)
|
||||
# Possible values:
|
||||
# AH - <No description provided>
|
||||
# PASS - <No description provided>
|
||||
#ha_vrrp_auth_type = PASS
|
||||
|
||||
# VRRP authentication password (string value)
|
||||
#ha_vrrp_auth_password = <None>
|
||||
|
||||
# The advertisement interval in seconds (integer value)
|
||||
#ha_vrrp_advert_int = 2
|
||||
|
||||
# Number of concurrent threads for keepalived server connection requests. More
|
||||
# threads create a higher CPU load on the agent node. (integer value)
|
||||
# Minimum value: 1
|
||||
#ha_keepalived_state_change_server_threads = (1 + <num_of_cpus>) / 2
|
||||
|
||||
# The VRRP health check interval in seconds. Values > 0 enable VRRP health
|
||||
# checks. Setting it to 0 disables VRRP health checks. Recommended value is 5.
|
||||
# This will cause pings to be sent to the gateway IP address(es) - requires
|
||||
# ICMP_ECHO_REQUEST to be enabled on the gateway. If gateway fails, all routers
|
||||
# will be reported as master, and master election will be repeated in round-
|
||||
# robin fashion, until one of the router restore the gateway connection.
|
||||
# (integer value)
|
||||
#ha_vrrp_health_check_interval = 0
|
||||
|
||||
# Location to store IPv6 PD files. (string value)
|
||||
#pd_confs = $state_path/pd
|
||||
|
||||
# A decimal value as Vendor's Registered Private Enterprise Number as required
|
||||
# by RFC3315 DUID-EN. (string value)
|
||||
#vendor_pen = 8888
|
||||
|
||||
# Location to store IPv6 RA config files (string value)
|
||||
#ra_confs = $state_path/ra
|
||||
|
||||
# MinRtrAdvInterval setting for radvd.conf (integer value)
|
||||
#min_rtr_adv_interval = 30
|
||||
|
||||
# MaxRtrAdvInterval setting for radvd.conf (integer value)
|
||||
#max_rtr_adv_interval = 100
|
||||
|
||||
#
|
||||
# From oslo.log
|
||||
#
|
||||
|
||||
# If set to true, the logging level will be set to DEBUG instead of the default
|
||||
# INFO level. (boolean value)
|
||||
# Note: This option can be changed without restarting.
|
||||
#debug = false
|
||||
|
||||
# The name of a logging configuration file. This file is appended to any
|
||||
# existing logging configuration files. For details about logging configuration
|
||||
# files, see the Python logging module documentation. Note that when logging
|
||||
# configuration files are used then all logging configuration is set in the
|
||||
# configuration file and other logging configuration options are ignored (for
|
||||
# example, logging_context_format_string). (string value)
|
||||
# Note: This option can be changed without restarting.
|
||||
# Deprecated group/name - [DEFAULT]/log_config
|
||||
#log_config_append = <None>
|
||||
|
||||
# Defines the format string for %%(asctime)s in log records. Default:
|
||||
# %(default)s . This option is ignored if log_config_append is set. (string
|
||||
# value)
|
||||
#log_date_format = %Y-%m-%d %H:%M:%S
|
||||
|
||||
# (Optional) Name of log file to send logging output to. If no default is set,
|
||||
# logging will go to stderr as defined by use_stderr. This option is ignored if
|
||||
# log_config_append is set. (string value)
|
||||
# Deprecated group/name - [DEFAULT]/logfile
|
||||
#log_file = <None>
|
||||
|
||||
# (Optional) The base directory used for relative log_file paths. This option
|
||||
# is ignored if log_config_append is set. (string value)
|
||||
# Deprecated group/name - [DEFAULT]/logdir
|
||||
#log_dir = <None>
|
||||
|
||||
# Uses logging handler designed to watch file system. When log file is moved or
|
||||
# removed this handler will open a new log file with specified path
|
||||
# instantaneously. It makes sense only if log_file option is specified and
|
||||
# Linux platform is used. This option is ignored if log_config_append is set.
|
||||
# (boolean value)
|
||||
#watch_log_file = false
|
||||
|
||||
# Use syslog for logging. Existing syslog format is DEPRECATED and will be
|
||||
# changed later to honor RFC5424. This option is ignored if log_config_append
|
||||
# is set. (boolean value)
|
||||
#use_syslog = false
|
||||
|
||||
# Enable journald for logging. If running in a systemd environment you may wish
|
||||
# to enable journal support. Doing so will use the journal native protocol
|
||||
# which includes structured metadata in addition to log messages.This option is
|
||||
# ignored if log_config_append is set. (boolean value)
|
||||
#use_journal = false
|
||||
|
||||
# Syslog facility to receive log lines. This option is ignored if
|
||||
# log_config_append is set. (string value)
|
||||
#syslog_log_facility = LOG_USER
|
||||
|
||||
# Use JSON formatting for logging. This option is ignored if log_config_append
|
||||
# is set. (boolean value)
|
||||
#use_json = false
|
||||
|
||||
# Log output to standard error. This option is ignored if log_config_append is
|
||||
# set. (boolean value)
|
||||
#use_stderr = false
|
||||
|
||||
# Format string to use for log messages with context. (string value)
|
||||
#logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
|
||||
|
||||
# Format string to use for log messages when context is undefined. (string
|
||||
# value)
|
||||
#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
|
||||
|
||||
# Additional data to append to log message when logging level for the message
|
||||
# is DEBUG. (string value)
|
||||
#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
|
||||
|
||||
# Prefix each line of exception output with this format. (string value)
|
||||
#logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
|
||||
|
||||
# Defines the format string for %(user_identity)s that is used in
|
||||
# logging_context_format_string. (string value)
|
||||
#logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
|
||||
|
||||
# List of package logging levels in logger=LEVEL pairs. This option is ignored
|
||||
# if log_config_append is set. (list value)
|
||||
#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
|
||||
|
||||
# Enables or disables publication of error events. (boolean value)
|
||||
#publish_errors = false
|
||||
|
||||
# The format for an instance that is passed with the log message. (string
|
||||
# value)
|
||||
#instance_format = "[instance: %(uuid)s] "
|
||||
|
||||
# The format for an instance UUID that is passed with the log message. (string
|
||||
# value)
|
||||
#instance_uuid_format = "[instance: %(uuid)s] "
|
||||
|
||||
# Interval, number of seconds, of log rate limiting. (integer value)
|
||||
#rate_limit_interval = 0
|
||||
|
||||
# Maximum number of logged messages per rate_limit_interval. (integer value)
|
||||
#rate_limit_burst = 0
|
||||
|
||||
# Log level name used by rate limiting: CRITICAL, ERROR, INFO, WARNING, DEBUG
|
||||
# or empty string. Logs with level greater or equal to rate_limit_except_level
|
||||
# are not filtered. An empty string means that all levels are filtered. (string
|
||||
# value)
|
||||
#rate_limit_except_level = CRITICAL
|
||||
|
||||
# Enables or disables fatal status of deprecations. (boolean value)
|
||||
#fatal_deprecations = false
|
||||
|
||||
|
||||
[agent]
|
||||
|
||||
#
|
||||
# From neutron.az.agent
|
||||
#
|
||||
|
||||
# Availability zone of this node (string value)
|
||||
#availability_zone = nova
|
||||
|
||||
#
|
||||
# From neutron.base.agent
|
||||
#
|
||||
|
||||
# Seconds between nodes reporting state to server; should be less than
|
||||
# agent_down_time, best if it is half or less than agent_down_time. (floating
|
||||
# point value)
|
||||
#report_interval = 30
|
||||
|
||||
# Log agent heartbeats (boolean value)
|
||||
#log_agent_heartbeats = false
|
||||
|
||||
#
|
||||
# From neutron.l3.agent
|
||||
#
|
||||
|
||||
# Extensions list to use (list value)
|
||||
#extensions =
|
||||
|
||||
|
||||
[ovs]
|
||||
|
||||
#
|
||||
# From neutron.base.agent
|
||||
#
|
||||
|
||||
# DEPRECATED: The interface for interacting with the OVSDB (string value)
|
||||
# Possible values:
|
||||
# vsctl - <No description provided>
|
||||
# native - <No description provided>
|
||||
# This option is deprecated for removal.
|
||||
# Its value may be silently ignored in the future.
|
||||
#ovsdb_interface = native
|
||||
|
||||
# The connection string for the OVSDB backend. Will be used by ovsdb-client
|
||||
# when monitoring and used for the all ovsdb commands when native
|
||||
# ovsdb_interface is enabled (string value)
|
||||
#ovsdb_connection = tcp:127.0.0.1:6640
|
||||
|
||||
# The SSL private key file to use when interacting with OVSDB. Required when
|
||||
# using an "ssl:" prefixed ovsdb_connection (string value)
|
||||
#ssl_key_file = <None>
|
||||
|
||||
# The SSL certificate file to use when interacting with OVSDB. Required when
|
||||
# using an "ssl:" prefixed ovsdb_connection (string value)
|
||||
#ssl_cert_file = <None>
|
||||
|
||||
# The Certificate Authority (CA) certificate to use when interacting with
|
||||
# OVSDB. Required when using an "ssl:" prefixed ovsdb_connection (string
|
||||
# value)
|
||||
#ssl_ca_cert_file = <None>
|
||||
|
||||
# Timeout in seconds for ovsdb commands. If the timeout expires, ovsdb commands
|
||||
# will fail with ALARMCLOCK error. (integer value)
|
||||
# Deprecated group/name - [DEFAULT]/ovs_vsctl_timeout
|
||||
#ovsdb_timeout = 10
|
||||
@@ -0,0 +1,283 @@
|
||||
[DEFAULT]
|
||||
metadata_proxy_shared_secret = osbash_training
|
||||
nova_metadata_host = controller
|
||||
|
||||
#
|
||||
# From neutron.metadata.agent
|
||||
#
|
||||
|
||||
# Location for Metadata Proxy UNIX domain socket. (string value)
|
||||
#metadata_proxy_socket = $state_path/metadata_proxy
|
||||
|
||||
# User (uid or name) running metadata proxy after its initialization (if empty:
|
||||
# agent effective user). (string value)
|
||||
#metadata_proxy_user =
|
||||
|
||||
# Group (gid or name) running metadata proxy after its initialization (if
|
||||
# empty: agent effective group). (string value)
|
||||
#metadata_proxy_group =
|
||||
|
||||
# Certificate Authority public key (CA cert) file for ssl (string value)
|
||||
#auth_ca_cert = <None>
|
||||
|
||||
# IP address or DNS name of Nova metadata server. (unknown value)
|
||||
#nova_metadata_host = 127.0.0.1
|
||||
|
||||
# TCP Port used by Nova metadata server. (port value)
|
||||
# Minimum value: 0
|
||||
# Maximum value: 65535
|
||||
#nova_metadata_port = 8775
|
||||
|
||||
# When proxying metadata requests, Neutron signs the Instance-ID header with a
|
||||
# shared secret to prevent spoofing. You may select any string for a secret,
|
||||
# but it must match here and in the configuration used by the Nova Metadata
|
||||
# Server. NOTE: Nova uses the same config key, but in [neutron] section.
|
||||
# (string value)
|
||||
#metadata_proxy_shared_secret =
|
||||
|
||||
# Protocol to access nova metadata, http or https (string value)
|
||||
# Possible values:
|
||||
# http - <No description provided>
|
||||
# https - <No description provided>
|
||||
#nova_metadata_protocol = http
|
||||
|
||||
# Allow to perform insecure SSL (https) requests to nova metadata (boolean
|
||||
# value)
|
||||
#nova_metadata_insecure = false
|
||||
|
||||
# Client certificate for nova metadata api server. (string value)
|
||||
#nova_client_cert =
|
||||
|
||||
# Private key of client certificate. (string value)
|
||||
#nova_client_priv_key =
|
||||
|
||||
# Metadata Proxy UNIX domain socket mode, 4 values allowed: 'deduce': deduce
|
||||
# mode from metadata_proxy_user/group values, 'user': set metadata proxy socket
|
||||
# mode to 0o644, to use when metadata_proxy_user is agent effective user or
|
||||
# root, 'group': set metadata proxy socket mode to 0o664, to use when
|
||||
# metadata_proxy_group is agent effective group or root, 'all': set metadata
|
||||
# proxy socket mode to 0o666, to use otherwise. (string value)
|
||||
# Possible values:
|
||||
# deduce - <No description provided>
|
||||
# user - <No description provided>
|
||||
# group - <No description provided>
|
||||
# all - <No description provided>
|
||||
#metadata_proxy_socket_mode = deduce
|
||||
|
||||
# Number of separate worker processes for metadata server (defaults to half of
|
||||
# the number of CPUs) (integer value)
|
||||
#metadata_workers = <num_of_cpus> / 2
|
||||
|
||||
# Number of backlog requests to configure the metadata server socket with
|
||||
# (integer value)
|
||||
#metadata_backlog = 4096
|
||||
|
||||
#
|
||||
# From oslo.log
|
||||
#
|
||||
|
||||
# If set to true, the logging level will be set to DEBUG instead of the default
|
||||
# INFO level. (boolean value)
|
||||
# Note: This option can be changed without restarting.
|
||||
#debug = false
|
||||
|
||||
# The name of a logging configuration file. This file is appended to any
|
||||
# existing logging configuration files. For details about logging configuration
|
||||
# files, see the Python logging module documentation. Note that when logging
|
||||
# configuration files are used then all logging configuration is set in the
|
||||
# configuration file and other logging configuration options are ignored (for
|
||||
# example, logging_context_format_string). (string value)
|
||||
# Note: This option can be changed without restarting.
|
||||
# Deprecated group/name - [DEFAULT]/log_config
|
||||
#log_config_append = <None>
|
||||
|
||||
# Defines the format string for %%(asctime)s in log records. Default:
|
||||
# %(default)s . This option is ignored if log_config_append is set. (string
|
||||
# value)
|
||||
#log_date_format = %Y-%m-%d %H:%M:%S
|
||||
|
||||
# (Optional) Name of log file to send logging output to. If no default is set,
|
||||
# logging will go to stderr as defined by use_stderr. This option is ignored if
|
||||
# log_config_append is set. (string value)
|
||||
# Deprecated group/name - [DEFAULT]/logfile
|
||||
#log_file = <None>
|
||||
|
||||
# (Optional) The base directory used for relative log_file paths. This option
|
||||
# is ignored if log_config_append is set. (string value)
|
||||
# Deprecated group/name - [DEFAULT]/logdir
|
||||
#log_dir = <None>
|
||||
|
||||
# Uses logging handler designed to watch file system. When log file is moved or
|
||||
# removed this handler will open a new log file with specified path
|
||||
# instantaneously. It makes sense only if log_file option is specified and
|
||||
# Linux platform is used. This option is ignored if log_config_append is set.
|
||||
# (boolean value)
|
||||
#watch_log_file = false
|
||||
|
||||
# Use syslog for logging. Existing syslog format is DEPRECATED and will be
|
||||
# changed later to honor RFC5424. This option is ignored if log_config_append
|
||||
# is set. (boolean value)
|
||||
#use_syslog = false
|
||||
|
||||
# Enable journald for logging. If running in a systemd environment you may wish
|
||||
# to enable journal support. Doing so will use the journal native protocol
|
||||
# which includes structured metadata in addition to log messages.This option is
|
||||
# ignored if log_config_append is set. (boolean value)
|
||||
#use_journal = false
|
||||
|
||||
# Syslog facility to receive log lines. This option is ignored if
|
||||
# log_config_append is set. (string value)
|
||||
#syslog_log_facility = LOG_USER
|
||||
|
||||
# Use JSON formatting for logging. This option is ignored if log_config_append
|
||||
# is set. (boolean value)
|
||||
#use_json = false
|
||||
|
||||
# Log output to standard error. This option is ignored if log_config_append is
|
||||
# set. (boolean value)
|
||||
#use_stderr = false
|
||||
|
||||
# Format string to use for log messages with context. (string value)
|
||||
#logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
|
||||
|
||||
# Format string to use for log messages when context is undefined. (string
|
||||
# value)
|
||||
#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
|
||||
|
||||
# Additional data to append to log message when logging level for the message
|
||||
# is DEBUG. (string value)
|
||||
#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
|
||||
|
||||
# Prefix each line of exception output with this format. (string value)
|
||||
#logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
|
||||
|
||||
# Defines the format string for %(user_identity)s that is used in
|
||||
# logging_context_format_string. (string value)
|
||||
#logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
|
||||
|
||||
# List of package logging levels in logger=LEVEL pairs. This option is ignored
|
||||
# if log_config_append is set. (list value)
|
||||
#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
|
||||
|
||||
# Enables or disables publication of error events. (boolean value)
|
||||
#publish_errors = false
|
||||
|
||||
# The format for an instance that is passed with the log message. (string
|
||||
# value)
|
||||
#instance_format = "[instance: %(uuid)s] "
|
||||
|
||||
# The format for an instance UUID that is passed with the log message. (string
|
||||
# value)
|
||||
#instance_uuid_format = "[instance: %(uuid)s] "
|
||||
|
||||
# Interval, number of seconds, of log rate limiting. (integer value)
|
||||
#rate_limit_interval = 0
|
||||
|
||||
# Maximum number of logged messages per rate_limit_interval. (integer value)
|
||||
#rate_limit_burst = 0
|
||||
|
||||
# Log level name used by rate limiting: CRITICAL, ERROR, INFO, WARNING, DEBUG
|
||||
# or empty string. Logs with level greater or equal to rate_limit_except_level
|
||||
# are not filtered. An empty string means that all levels are filtered. (string
|
||||
# value)
|
||||
#rate_limit_except_level = CRITICAL
|
||||
|
||||
# Enables or disables fatal status of deprecations. (boolean value)
|
||||
#fatal_deprecations = false
|
||||
|
||||
|
||||
[agent]
|
||||
|
||||
#
|
||||
# From neutron.metadata.agent
|
||||
#
|
||||
|
||||
# Seconds between nodes reporting state to server; should be less than
|
||||
# agent_down_time, best if it is half or less than agent_down_time. (floating
|
||||
# point value)
|
||||
#report_interval = 30
|
||||
|
||||
# Log agent heartbeats (boolean value)
|
||||
#log_agent_heartbeats = false
|
||||
|
||||
|
||||
[cache]
|
||||
|
||||
#
|
||||
# From oslo.cache
|
||||
#
|
||||
|
||||
# Prefix for building the configuration dictionary for the cache region. This
|
||||
# should not need to be changed unless there is another dogpile.cache region
|
||||
# with the same configuration name. (string value)
|
||||
#config_prefix = cache.oslo
|
||||
|
||||
# Default TTL, in seconds, for any cached item in the dogpile.cache region.
|
||||
# This applies to any cached method that doesn't have an explicit cache
|
||||
# expiration time defined for it. (integer value)
|
||||
#expiration_time = 600
|
||||
|
||||
# Cache backend module. For eventlet-based or environments with hundreds of
|
||||
# threaded servers, Memcache with pooling (oslo_cache.memcache_pool) is
|
||||
# recommended. For environments with less than 100 threaded servers, Memcached
|
||||
# (dogpile.cache.memcached) or Redis (dogpile.cache.redis) is recommended. Test
|
||||
# environments with a single instance of the server can use the
|
||||
# dogpile.cache.memory backend. (string value)
|
||||
# Possible values:
|
||||
# oslo_cache.memcache_pool - <No description provided>
|
||||
# oslo_cache.dict - <No description provided>
|
||||
# oslo_cache.mongo - <No description provided>
|
||||
# oslo_cache.etcd3gw - <No description provided>
|
||||
# dogpile.cache.memcached - <No description provided>
|
||||
# dogpile.cache.pylibmc - <No description provided>
|
||||
# dogpile.cache.bmemcached - <No description provided>
|
||||
# dogpile.cache.dbm - <No description provided>
|
||||
# dogpile.cache.redis - <No description provided>
|
||||
# dogpile.cache.memory - <No description provided>
|
||||
# dogpile.cache.memory_pickle - <No description provided>
|
||||
# dogpile.cache.null - <No description provided>
|
||||
#backend = dogpile.cache.null
|
||||
|
||||
# Arguments supplied to the backend module. Specify this option once per
|
||||
# argument to be passed to the dogpile.cache backend. Example format:
|
||||
# "<argname>:<value>". (multi valued)
|
||||
#backend_argument =
|
||||
|
||||
# Proxy classes to import that will affect the way the dogpile.cache backend
|
||||
# functions. See the dogpile.cache documentation on changing-backend-behavior.
|
||||
# (list value)
|
||||
#proxies =
|
||||
|
||||
# Global toggle for caching. (boolean value)
|
||||
#enabled = false
|
||||
|
||||
# Extra debugging from the cache backend (cache keys, get/set/delete/etc
|
||||
# calls). This is only really useful if you need to see the specific cache-
|
||||
# backend get/set/delete calls with the keys/values. Typically this should be
|
||||
# left set to false. (boolean value)
|
||||
#debug_cache_backend = false
|
||||
|
||||
# Memcache servers in the format of "host:port". (dogpile.cache.memcache and
|
||||
# oslo_cache.memcache_pool backends only). (list value)
|
||||
#memcache_servers = localhost:11211
|
||||
|
||||
# Number of seconds memcached server is considered dead before it is tried
|
||||
# again. (dogpile.cache.memcache and oslo_cache.memcache_pool backends only).
|
||||
# (integer value)
|
||||
#memcache_dead_retry = 300
|
||||
|
||||
# Timeout in seconds for every call to a server. (dogpile.cache.memcache and
|
||||
# oslo_cache.memcache_pool backends only). (integer value)
|
||||
#memcache_socket_timeout = 3
|
||||
|
||||
# Max total number of open connections to every memcached server.
|
||||
# (oslo_cache.memcache_pool backend only). (integer value)
|
||||
#memcache_pool_maxsize = 10
|
||||
|
||||
# Number of seconds a connection to memcached is held unused in the pool before
|
||||
# it is closed. (oslo_cache.memcache_pool backend only). (integer value)
|
||||
#memcache_pool_unused_timeout = 60
|
||||
|
||||
# Number of seconds that an operation will wait to get a memcache client
|
||||
# connection. (integer value)
|
||||
#memcache_pool_connection_get_timeout = 10
|
||||
+2080
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,275 @@
|
||||
[DEFAULT]
|
||||
|
||||
#
|
||||
# From oslo.log
|
||||
#
|
||||
|
||||
# If set to true, the logging level will be set to DEBUG instead of the default
|
||||
# INFO level. (boolean value)
|
||||
# Note: This option can be changed without restarting.
|
||||
#debug = false
|
||||
|
||||
# The name of a logging configuration file. This file is appended to any
|
||||
# existing logging configuration files. For details about logging configuration
|
||||
# files, see the Python logging module documentation. Note that when logging
|
||||
# configuration files are used then all logging configuration is set in the
|
||||
# configuration file and other logging configuration options are ignored (for
|
||||
# example, logging_context_format_string). (string value)
|
||||
# Note: This option can be changed without restarting.
|
||||
# Deprecated group/name - [DEFAULT]/log_config
|
||||
#log_config_append = <None>
|
||||
|
||||
# Defines the format string for %%(asctime)s in log records. Default:
|
||||
# %(default)s . This option is ignored if log_config_append is set. (string
|
||||
# value)
|
||||
#log_date_format = %Y-%m-%d %H:%M:%S
|
||||
|
||||
# (Optional) Name of log file to send logging output to. If no default is set,
|
||||
# logging will go to stderr as defined by use_stderr. This option is ignored if
|
||||
# log_config_append is set. (string value)
|
||||
# Deprecated group/name - [DEFAULT]/logfile
|
||||
#log_file = <None>
|
||||
|
||||
# (Optional) The base directory used for relative log_file paths. This option
|
||||
# is ignored if log_config_append is set. (string value)
|
||||
# Deprecated group/name - [DEFAULT]/logdir
|
||||
#log_dir = <None>
|
||||
|
||||
# Uses logging handler designed to watch file system. When log file is moved or
|
||||
# removed this handler will open a new log file with specified path
|
||||
# instantaneously. It makes sense only if log_file option is specified and
|
||||
# Linux platform is used. This option is ignored if log_config_append is set.
|
||||
# (boolean value)
|
||||
#watch_log_file = false
|
||||
|
||||
# Use syslog for logging. Existing syslog format is DEPRECATED and will be
|
||||
# changed later to honor RFC5424. This option is ignored if log_config_append
|
||||
# is set. (boolean value)
|
||||
#use_syslog = false
|
||||
|
||||
# Enable journald for logging. If running in a systemd environment you may wish
|
||||
# to enable journal support. Doing so will use the journal native protocol
|
||||
# which includes structured metadata in addition to log messages.This option is
|
||||
# ignored if log_config_append is set. (boolean value)
|
||||
#use_journal = false
|
||||
|
||||
# Syslog facility to receive log lines. This option is ignored if
|
||||
# log_config_append is set. (string value)
|
||||
#syslog_log_facility = LOG_USER
|
||||
|
||||
# Use JSON formatting for logging. This option is ignored if log_config_append
|
||||
# is set. (boolean value)
|
||||
#use_json = false
|
||||
|
||||
# Log output to standard error. This option is ignored if log_config_append is
|
||||
# set. (boolean value)
|
||||
#use_stderr = false
|
||||
|
||||
# Format string to use for log messages with context. (string value)
|
||||
#logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
|
||||
|
||||
# Format string to use for log messages when context is undefined. (string
|
||||
# value)
|
||||
#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
|
||||
|
||||
# Additional data to append to log message when logging level for the message
|
||||
# is DEBUG. (string value)
|
||||
#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
|
||||
|
||||
# Prefix each line of exception output with this format. (string value)
|
||||
#logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
|
||||
|
||||
# Defines the format string for %(user_identity)s that is used in
|
||||
# logging_context_format_string. (string value)
|
||||
#logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
|
||||
|
||||
# List of package logging levels in logger=LEVEL pairs. This option is ignored
|
||||
# if log_config_append is set. (list value)
|
||||
#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
|
||||
|
||||
# Enables or disables publication of error events. (boolean value)
|
||||
#publish_errors = false
|
||||
|
||||
# The format for an instance that is passed with the log message. (string
|
||||
# value)
|
||||
#instance_format = "[instance: %(uuid)s] "
|
||||
|
||||
# The format for an instance UUID that is passed with the log message. (string
|
||||
# value)
|
||||
#instance_uuid_format = "[instance: %(uuid)s] "
|
||||
|
||||
# Interval, number of seconds, of log rate limiting. (integer value)
|
||||
#rate_limit_interval = 0
|
||||
|
||||
# Maximum number of logged messages per rate_limit_interval. (integer value)
|
||||
#rate_limit_burst = 0
|
||||
|
||||
# Log level name used by rate limiting: CRITICAL, ERROR, INFO, WARNING, DEBUG
|
||||
# or empty string. Logs with level greater or equal to rate_limit_except_level
|
||||
# are not filtered. An empty string means that all levels are filtered. (string
|
||||
# value)
|
||||
#rate_limit_except_level = CRITICAL
|
||||
|
||||
# Enables or disables fatal status of deprecations. (boolean value)
|
||||
#fatal_deprecations = false
|
||||
|
||||
|
||||
[agent]
|
||||
|
||||
#
|
||||
# From neutron.ml2.linuxbridge.agent
|
||||
#
|
||||
|
||||
# The number of seconds the agent will wait between polling for local device
|
||||
# changes. (integer value)
|
||||
#polling_interval = 2
|
||||
|
||||
# Set new timeout in seconds for new rpc calls after agent receives SIGTERM. If
|
||||
# value is set to 0, rpc timeout won't be changed (integer value)
|
||||
#quitting_rpc_timeout = 10
|
||||
|
||||
# The DSCP value to use for outer headers during tunnel encapsulation. (integer
|
||||
# value)
|
||||
# Minimum value: 0
|
||||
# Maximum value: 63
|
||||
#dscp = <None>
|
||||
|
||||
# If set to True, the DSCP value of tunnel interfaces is overwritten and set to
|
||||
# inherit. The DSCP value of the inner header is then copied to the outer
|
||||
# header. (boolean value)
|
||||
#dscp_inherit = false
|
||||
|
||||
# Extensions list to use (list value)
|
||||
#extensions =
|
||||
|
||||
|
||||
[linux_bridge]
|
||||
physical_interface_mappings = provider:enp0s9
|
||||
|
||||
#
|
||||
# From neutron.ml2.linuxbridge.agent
|
||||
#
|
||||
|
||||
# Comma-separated list of <physical_network>:<physical_interface> tuples
|
||||
# mapping physical network names to the agent's node-specific physical network
|
||||
# interfaces to be used for flat and VLAN networks. All physical networks
|
||||
# listed in network_vlan_ranges on the server should have mappings to
|
||||
# appropriate interfaces on each agent. (list value)
|
||||
#physical_interface_mappings =
|
||||
|
||||
# List of <physical_network>:<physical_bridge> (list value)
|
||||
#bridge_mappings =
|
||||
|
||||
|
||||
[network_log]
|
||||
|
||||
#
|
||||
# From neutron.ml2.linuxbridge.agent
|
||||
#
|
||||
|
||||
# Maximum packets logging per second. (integer value)
|
||||
# Minimum value: 100
|
||||
#rate_limit = 100
|
||||
|
||||
# Maximum number of packets per rate_limit. (integer value)
|
||||
# Minimum value: 25
|
||||
#burst_limit = 25
|
||||
|
||||
# Output logfile path on agent side, default syslog file. (string value)
|
||||
#local_output_log_base = <None>
|
||||
|
||||
|
||||
[securitygroup]
|
||||
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
|
||||
enable_security_group = true
|
||||
|
||||
#
|
||||
# From neutron.ml2.linuxbridge.agent
|
||||
#
|
||||
|
||||
# Driver for security groups firewall in the L2 agent (string value)
|
||||
#firewall_driver = <None>
|
||||
|
||||
# Controls whether the neutron security group API is enabled in the server. It
|
||||
# should be false when using no security groups or using the nova security
|
||||
# group API. (boolean value)
|
||||
#enable_security_group = true
|
||||
|
||||
# Use ipset to speed-up the iptables based security groups. Enabling ipset
|
||||
# support requires that ipset is installed on L2 agent node. (boolean value)
|
||||
#enable_ipset = true
|
||||
|
||||
|
||||
[vxlan]
|
||||
l2_population = true
|
||||
local_ip = 10.0.0.11
|
||||
enable_vxlan = true
|
||||
|
||||
#
|
||||
# From neutron.ml2.linuxbridge.agent
|
||||
#
|
||||
|
||||
# Enable VXLAN on the agent. Can be enabled when agent is managed by ml2 plugin
|
||||
# using linuxbridge mechanism driver (boolean value)
|
||||
#enable_vxlan = true
|
||||
|
||||
# TTL for vxlan interface protocol packets. (integer value)
|
||||
#ttl = <None>
|
||||
|
||||
# DEPRECATED: TOS for vxlan interface protocol packets. This option is
|
||||
# deprecated in favor of the dscp option in the AGENT section and will be
|
||||
# removed in a future release. To convert the TOS value to DSCP, divide by 4.
|
||||
# (integer value)
|
||||
# This option is deprecated for removal.
|
||||
# Its value may be silently ignored in the future.
|
||||
#tos = <None>
|
||||
|
||||
# Multicast group(s) for vxlan interface. A range of group addresses may be
|
||||
# specified by using CIDR notation. Specifying a range allows different VNIs to
|
||||
# use different group addresses, reducing or eliminating spurious broadcast
|
||||
# traffic to the tunnel endpoints. To reserve a unique group for each possible
|
||||
# (24-bit) VNI, use a /8 such as 239.0.0.0/8. This setting must be the same on
|
||||
# all the agents. (string value)
|
||||
#vxlan_group = 224.0.0.1
|
||||
|
||||
# IP address of local overlay (tunnel) network endpoint. Use either an IPv4 or
|
||||
# IPv6 address that resides on one of the host network interfaces. The IP
|
||||
# version of this value must match the value of the 'overlay_ip_version' option
|
||||
# in the ML2 plug-in configuration file on the neutron server node(s). (IP
|
||||
# address value)
|
||||
#local_ip = <None>
|
||||
|
||||
# The minimum of the UDP source port range used for VXLAN communication. (port
|
||||
# value)
|
||||
# Minimum value: 0
|
||||
# Maximum value: 65535
|
||||
#udp_srcport_min = 0
|
||||
|
||||
# The maximum of the UDP source port range used for VXLAN communication. (port
|
||||
# value)
|
||||
# Minimum value: 0
|
||||
# Maximum value: 65535
|
||||
#udp_srcport_max = 0
|
||||
|
||||
# The UDP port used for VXLAN communication. By default, the Linux kernel
|
||||
# doesn't use the IANA assigned standard value, so if you want to use it, this
|
||||
# option must be set to 4789. It is not set by default because of backward
|
||||
# compatibiltiy. (port value)
|
||||
# Minimum value: 0
|
||||
# Maximum value: 65535
|
||||
#udp_dstport = <None>
|
||||
|
||||
# Extension to use alongside ml2 plugin's l2population mechanism driver. It
|
||||
# enables the plugin to populate VXLAN forwarding table. (boolean value)
|
||||
#l2_population = false
|
||||
|
||||
# Enable local ARP responder which provides local responses instead of
|
||||
# performing ARP broadcast into the overlay. Enabling local ARP responder is
|
||||
# not fully compatible with the allowed-address-pairs extension. (boolean
|
||||
# value)
|
||||
#arp_responder = false
|
||||
|
||||
# Optional comma-separated list of <multicast address>:<vni_min>:<vni_max>
|
||||
# triples describing how to assign a multicast address to VXLAN according to
|
||||
# its VNI ID. (list value)
|
||||
#multicast_ranges =
|
||||
@@ -0,0 +1,270 @@
|
||||
[DEFAULT]
|
||||
|
||||
#
|
||||
# From oslo.log
|
||||
#
|
||||
|
||||
# If set to true, the logging level will be set to DEBUG instead of the default
|
||||
# INFO level. (boolean value)
|
||||
# Note: This option can be changed without restarting.
|
||||
#debug = false
|
||||
|
||||
# The name of a logging configuration file. This file is appended to any
|
||||
# existing logging configuration files. For details about logging configuration
|
||||
# files, see the Python logging module documentation. Note that when logging
|
||||
# configuration files are used then all logging configuration is set in the
|
||||
# configuration file and other logging configuration options are ignored (for
|
||||
# example, logging_context_format_string). (string value)
|
||||
# Note: This option can be changed without restarting.
|
||||
# Deprecated group/name - [DEFAULT]/log_config
|
||||
#log_config_append = <None>
|
||||
|
||||
# Defines the format string for %%(asctime)s in log records. Default:
|
||||
# %(default)s . This option is ignored if log_config_append is set. (string
|
||||
# value)
|
||||
#log_date_format = %Y-%m-%d %H:%M:%S
|
||||
|
||||
# (Optional) Name of log file to send logging output to. If no default is set,
|
||||
# logging will go to stderr as defined by use_stderr. This option is ignored if
|
||||
# log_config_append is set. (string value)
|
||||
# Deprecated group/name - [DEFAULT]/logfile
|
||||
#log_file = <None>
|
||||
|
||||
# (Optional) The base directory used for relative log_file paths. This option
|
||||
# is ignored if log_config_append is set. (string value)
|
||||
# Deprecated group/name - [DEFAULT]/logdir
|
||||
#log_dir = <None>
|
||||
|
||||
# Uses logging handler designed to watch file system. When log file is moved or
|
||||
# removed this handler will open a new log file with specified path
|
||||
# instantaneously. It makes sense only if log_file option is specified and
|
||||
# Linux platform is used. This option is ignored if log_config_append is set.
|
||||
# (boolean value)
|
||||
#watch_log_file = false
|
||||
|
||||
# Use syslog for logging. Existing syslog format is DEPRECATED and will be
|
||||
# changed later to honor RFC5424. This option is ignored if log_config_append
|
||||
# is set. (boolean value)
|
||||
#use_syslog = false
|
||||
|
||||
# Enable journald for logging. If running in a systemd environment you may wish
|
||||
# to enable journal support. Doing so will use the journal native protocol
|
||||
# which includes structured metadata in addition to log messages.This option is
|
||||
# ignored if log_config_append is set. (boolean value)
|
||||
#use_journal = false
|
||||
|
||||
# Syslog facility to receive log lines. This option is ignored if
|
||||
# log_config_append is set. (string value)
|
||||
#syslog_log_facility = LOG_USER
|
||||
|
||||
# Use JSON formatting for logging. This option is ignored if log_config_append
|
||||
# is set. (boolean value)
|
||||
#use_json = false
|
||||
|
||||
# Log output to standard error. This option is ignored if log_config_append is
|
||||
# set. (boolean value)
|
||||
#use_stderr = false
|
||||
|
||||
# Format string to use for log messages with context. (string value)
|
||||
#logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
|
||||
|
||||
# Format string to use for log messages when context is undefined. (string
|
||||
# value)
|
||||
#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
|
||||
|
||||
# Additional data to append to log message when logging level for the message
|
||||
# is DEBUG. (string value)
|
||||
#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
|
||||
|
||||
# Prefix each line of exception output with this format. (string value)
|
||||
#logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
|
||||
|
||||
# Defines the format string for %(user_identity)s that is used in
|
||||
# logging_context_format_string. (string value)
|
||||
#logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
|
||||
|
||||
# List of package logging levels in logger=LEVEL pairs. This option is ignored
|
||||
# if log_config_append is set. (list value)
|
||||
#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
|
||||
|
||||
# Enables or disables publication of error events. (boolean value)
|
||||
#publish_errors = false
|
||||
|
||||
# The format for an instance that is passed with the log message. (string
|
||||
# value)
|
||||
#instance_format = "[instance: %(uuid)s] "
|
||||
|
||||
# The format for an instance UUID that is passed with the log message. (string
|
||||
# value)
|
||||
#instance_uuid_format = "[instance: %(uuid)s] "
|
||||
|
||||
# Interval, number of seconds, of log rate limiting. (integer value)
|
||||
#rate_limit_interval = 0
|
||||
|
||||
# Maximum number of logged messages per rate_limit_interval. (integer value)
|
||||
#rate_limit_burst = 0
|
||||
|
||||
# Log level name used by rate limiting: CRITICAL, ERROR, INFO, WARNING, DEBUG
|
||||
# or empty string. Logs with level greater or equal to rate_limit_except_level
|
||||
# are not filtered. An empty string means that all levels are filtered. (string
|
||||
# value)
|
||||
#rate_limit_except_level = CRITICAL
|
||||
|
||||
# Enables or disables fatal status of deprecations. (boolean value)
|
||||
#fatal_deprecations = false
|
||||
|
||||
|
||||
[l2pop]
|
||||
|
||||
#
|
||||
# From neutron.ml2
|
||||
#
|
||||
|
||||
# Delay within which agent is expected to update existing ports when it
|
||||
# restarts (integer value)
|
||||
#agent_boot_time = 180
|
||||
|
||||
|
||||
[ml2]
|
||||
extension_drivers = port_security
|
||||
mechanism_drivers = linuxbridge,l2population
|
||||
tenant_network_types = vxlan
|
||||
type_drivers = flat,vlan,vxlan
|
||||
|
||||
#
|
||||
# From neutron.ml2
|
||||
#
|
||||
|
||||
# List of network type driver entrypoints to be loaded from the
|
||||
# neutron.ml2.type_drivers namespace. (list value)
|
||||
#type_drivers = local,flat,vlan,gre,vxlan,geneve
|
||||
|
||||
# Ordered list of network_types to allocate as tenant networks. The default
|
||||
# value 'local' is useful for single-box testing but provides no connectivity
|
||||
# between hosts. (list value)
|
||||
#tenant_network_types = local
|
||||
|
||||
# An ordered list of networking mechanism driver entrypoints to be loaded from
|
||||
# the neutron.ml2.mechanism_drivers namespace. (list value)
|
||||
#mechanism_drivers =
|
||||
|
||||
# An ordered list of extension driver entrypoints to be loaded from the
|
||||
# neutron.ml2.extension_drivers namespace. For example: extension_drivers =
|
||||
# port_security,qos (list value)
|
||||
#extension_drivers =
|
||||
|
||||
# Maximum size of an IP packet (MTU) that can traverse the underlying physical
|
||||
# network infrastructure without fragmentation when using an overlay/tunnel
|
||||
# protocol. This option allows specifying a physical network MTU value that
|
||||
# differs from the default global_physnet_mtu value. (integer value)
|
||||
#path_mtu = 0
|
||||
|
||||
# A list of mappings of physical networks to MTU values. The format of the
|
||||
# mapping is <physnet>:<mtu val>. This mapping allows specifying a physical
|
||||
# network MTU value that differs from the default global_physnet_mtu value.
|
||||
# (list value)
|
||||
#physical_network_mtus =
|
||||
|
||||
# Default network type for external networks when no provider attributes are
|
||||
# specified. By default it is None, which means that if provider attributes are
|
||||
# not specified while creating external networks then they will have the same
|
||||
# type as tenant networks. Allowed values for external_network_type config
|
||||
# option depend on the network type values configured in type_drivers config
|
||||
# option. (string value)
|
||||
#external_network_type = <None>
|
||||
|
||||
# IP version of all overlay (tunnel) network endpoints. Use a value of 4 for
|
||||
# IPv4 or 6 for IPv6. (integer value)
|
||||
#overlay_ip_version = 4
|
||||
|
||||
|
||||
[ml2_type_flat]
|
||||
flat_networks = provider
|
||||
|
||||
#
|
||||
# From neutron.ml2
|
||||
#
|
||||
|
||||
# List of physical_network names with which flat networks can be created. Use
|
||||
# default '*' to allow flat networks with arbitrary physical_network names. Use
|
||||
# an empty list to disable flat networks. (list value)
|
||||
#flat_networks = *
|
||||
|
||||
|
||||
[ml2_type_geneve]
|
||||
|
||||
#
|
||||
# From neutron.ml2
|
||||
#
|
||||
|
||||
# Comma-separated list of <vni_min>:<vni_max> tuples enumerating ranges of
|
||||
# Geneve VNI IDs that are available for tenant network allocation (list value)
|
||||
#vni_ranges =
|
||||
|
||||
# Geneve encapsulation header size is dynamic, this value is used to calculate
|
||||
# the maximum MTU for the driver. This is the sum of the sizes of the outer ETH
|
||||
# + IP + UDP + GENEVE header sizes. The default size for this field is 50,
|
||||
# which is the size of the Geneve header without any additional option headers.
|
||||
# (integer value)
|
||||
#max_header_size = 30
|
||||
|
||||
|
||||
[ml2_type_gre]
|
||||
|
||||
#
|
||||
# From neutron.ml2
|
||||
#
|
||||
|
||||
# Comma-separated list of <tun_min>:<tun_max> tuples enumerating ranges of GRE
|
||||
# tunnel IDs that are available for tenant network allocation (list value)
|
||||
#tunnel_id_ranges =
|
||||
|
||||
|
||||
[ml2_type_vlan]
|
||||
|
||||
#
|
||||
# From neutron.ml2
|
||||
#
|
||||
|
||||
# List of <physical_network>:<vlan_min>:<vlan_max> or <physical_network>
|
||||
# specifying physical_network names usable for VLAN provider and tenant
|
||||
# networks, as well as ranges of VLAN tags on each available for allocation to
|
||||
# tenant networks. (list value)
|
||||
#network_vlan_ranges =
|
||||
|
||||
|
||||
[ml2_type_vxlan]
|
||||
vni_ranges = 1:1000
|
||||
|
||||
#
|
||||
# From neutron.ml2
|
||||
#
|
||||
|
||||
# Comma-separated list of <vni_min>:<vni_max> tuples enumerating ranges of
|
||||
# VXLAN VNI IDs that are available for tenant network allocation (list value)
|
||||
#vni_ranges =
|
||||
|
||||
# Multicast group for VXLAN. When configured, will enable sending all broadcast
|
||||
# traffic to this multicast group. When left unconfigured, will disable
|
||||
# multicast VXLAN mode. (string value)
|
||||
#vxlan_group = <None>
|
||||
|
||||
|
||||
[securitygroup]
|
||||
enable_ipset = true
|
||||
|
||||
#
|
||||
# From neutron.ml2
|
||||
#
|
||||
|
||||
# Driver for security groups firewall in the L2 agent (string value)
|
||||
#firewall_driver = <None>
|
||||
|
||||
# Controls whether the neutron security group API is enabled in the server. It
|
||||
# should be false when using no security groups or using the nova security
|
||||
# group API. (boolean value)
|
||||
#enable_security_group = true
|
||||
|
||||
# Use ipset to speed-up the iptables based security groups. Enabling ipset
|
||||
# support requires that ipset is installed on L2 agent node. (boolean value)
|
||||
#enable_ipset = true
|
||||
@@ -0,0 +1,235 @@
|
||||
{
|
||||
"context_is_admin": "role:admin",
|
||||
"owner": "tenant_id:%(tenant_id)s",
|
||||
"admin_or_owner": "rule:context_is_admin or rule:owner",
|
||||
"context_is_advsvc": "role:advsvc",
|
||||
"admin_or_network_owner": "rule:context_is_admin or tenant_id:%(network:tenant_id)s",
|
||||
"admin_owner_or_network_owner": "rule:owner or rule:admin_or_network_owner",
|
||||
"admin_only": "rule:context_is_admin",
|
||||
"regular_user": "",
|
||||
"admin_or_data_plane_int": "rule:context_is_admin or role:data_plane_integrator",
|
||||
"shared": "field:networks:shared=True",
|
||||
"shared_subnetpools": "field:subnetpools:shared=True",
|
||||
"shared_address_scopes": "field:address_scopes:shared=True",
|
||||
"external": "field:networks:router:external=True",
|
||||
"default": "rule:admin_or_owner",
|
||||
|
||||
"create_subnet": "rule:admin_or_network_owner",
|
||||
"create_subnet:segment_id": "rule:admin_only",
|
||||
"create_subnet:service_types": "rule:admin_only",
|
||||
"get_subnet": "rule:admin_or_owner or rule:shared",
|
||||
"get_subnet:segment_id": "rule:admin_only",
|
||||
"update_subnet": "rule:admin_or_network_owner",
|
||||
"update_subnet:service_types": "rule:admin_only",
|
||||
"delete_subnet": "rule:admin_or_network_owner",
|
||||
|
||||
"create_subnetpool": "",
|
||||
"create_subnetpool:shared": "rule:admin_only",
|
||||
"create_subnetpool:is_default": "rule:admin_only",
|
||||
"get_subnetpool": "rule:admin_or_owner or rule:shared_subnetpools",
|
||||
"update_subnetpool": "rule:admin_or_owner",
|
||||
"update_subnetpool:is_default": "rule:admin_only",
|
||||
"delete_subnetpool": "rule:admin_or_owner",
|
||||
|
||||
"create_address_scope": "",
|
||||
"create_address_scope:shared": "rule:admin_only",
|
||||
"get_address_scope": "rule:admin_or_owner or rule:shared_address_scopes",
|
||||
"update_address_scope": "rule:admin_or_owner",
|
||||
"update_address_scope:shared": "rule:admin_only",
|
||||
"delete_address_scope": "rule:admin_or_owner",
|
||||
|
||||
"create_network": "",
|
||||
"get_network": "rule:admin_or_owner or rule:shared or rule:external or rule:context_is_advsvc",
|
||||
"get_network:router:external": "rule:regular_user",
|
||||
"get_network:segments": "rule:admin_only",
|
||||
"get_network:provider:network_type": "rule:admin_only",
|
||||
"get_network:provider:physical_network": "rule:admin_only",
|
||||
"get_network:provider:segmentation_id": "rule:admin_only",
|
||||
"get_network:queue_id": "rule:admin_only",
|
||||
"get_network_ip_availabilities": "rule:admin_only",
|
||||
"get_network_ip_availability": "rule:admin_only",
|
||||
"create_network:shared": "rule:admin_only",
|
||||
"create_network:router:external": "rule:admin_only",
|
||||
"create_network:is_default": "rule:admin_only",
|
||||
"create_network:segments": "rule:admin_only",
|
||||
"create_network:provider:network_type": "rule:admin_only",
|
||||
"create_network:provider:physical_network": "rule:admin_only",
|
||||
"create_network:provider:segmentation_id": "rule:admin_only",
|
||||
"update_network": "rule:admin_or_owner",
|
||||
"update_network:segments": "rule:admin_only",
|
||||
"update_network:shared": "rule:admin_only",
|
||||
"update_network:provider:network_type": "rule:admin_only",
|
||||
"update_network:provider:physical_network": "rule:admin_only",
|
||||
"update_network:provider:segmentation_id": "rule:admin_only",
|
||||
"update_network:router:external": "rule:admin_only",
|
||||
"delete_network": "rule:admin_or_owner",
|
||||
|
||||
"create_segment": "rule:admin_only",
|
||||
"get_segment": "rule:admin_only",
|
||||
"update_segment": "rule:admin_only",
|
||||
"delete_segment": "rule:admin_only",
|
||||
|
||||
"network_device": "field:port:device_owner=~^network:",
|
||||
"create_port": "",
|
||||
"create_port:device_owner": "not rule:network_device or rule:context_is_advsvc or rule:admin_or_network_owner",
|
||||
"create_port:mac_address": "rule:context_is_advsvc or rule:admin_or_network_owner",
|
||||
"create_port:fixed_ips:ip_address": "rule:context_is_advsvc or rule:admin_or_network_owner",
|
||||
"create_port:fixed_ips:subnet_id": "rule:context_is_advsvc or rule:admin_or_network_owner or rule:shared",
|
||||
"create_port:port_security_enabled": "rule:context_is_advsvc or rule:admin_or_network_owner",
|
||||
"create_port:binding:host_id": "rule:admin_only",
|
||||
"create_port:binding:profile": "rule:admin_only",
|
||||
"create_port:mac_learning_enabled": "rule:context_is_advsvc or rule:admin_or_network_owner",
|
||||
"create_port:allowed_address_pairs": "rule:admin_or_network_owner",
|
||||
"get_port": "rule:context_is_advsvc or rule:admin_owner_or_network_owner",
|
||||
"get_port:queue_id": "rule:admin_only",
|
||||
"get_port:binding:vif_type": "rule:admin_only",
|
||||
"get_port:binding:vif_details": "rule:admin_only",
|
||||
"get_port:binding:host_id": "rule:admin_only",
|
||||
"get_port:binding:profile": "rule:admin_only",
|
||||
"update_port": "rule:admin_or_owner or rule:context_is_advsvc",
|
||||
"update_port:device_owner": "not rule:network_device or rule:context_is_advsvc or rule:admin_or_network_owner",
|
||||
"update_port:mac_address": "rule:admin_only or rule:context_is_advsvc",
|
||||
"update_port:fixed_ips:ip_address": "rule:context_is_advsvc or rule:admin_or_network_owner",
|
||||
"update_port:fixed_ips:subnet_id": "rule:context_is_advsvc or rule:admin_or_network_owner or rule:shared",
|
||||
"update_port:port_security_enabled": "rule:context_is_advsvc or rule:admin_or_network_owner",
|
||||
"update_port:binding:host_id": "rule:admin_only",
|
||||
"update_port:binding:profile": "rule:admin_only",
|
||||
"update_port:mac_learning_enabled": "rule:context_is_advsvc or rule:admin_or_network_owner",
|
||||
"update_port:allowed_address_pairs": "rule:admin_or_network_owner",
|
||||
"update_port:data_plane_status": "rule:admin_or_data_plane_int",
|
||||
"delete_port": "rule:context_is_advsvc or rule:admin_owner_or_network_owner",
|
||||
|
||||
"get_router:ha": "rule:admin_only",
|
||||
"create_router": "rule:regular_user",
|
||||
"create_router:external_gateway_info:enable_snat": "rule:admin_only",
|
||||
"create_router:distributed": "rule:admin_only",
|
||||
"create_router:ha": "rule:admin_only",
|
||||
"get_router": "rule:admin_or_owner",
|
||||
"get_router:distributed": "rule:admin_only",
|
||||
"update_router": "rule:admin_or_owner",
|
||||
"update_router:external_gateway_info": "rule:admin_or_owner",
|
||||
"update_router:external_gateway_info:network_id": "rule:admin_or_owner",
|
||||
"update_router:external_gateway_info:enable_snat": "rule:admin_only",
|
||||
"update_router:distributed": "rule:admin_only",
|
||||
"update_router:ha": "rule:admin_only",
|
||||
"delete_router": "rule:admin_or_owner",
|
||||
|
||||
"add_router_interface": "rule:admin_or_owner",
|
||||
"remove_router_interface": "rule:admin_or_owner",
|
||||
|
||||
"create_router:external_gateway_info:external_fixed_ips": "rule:admin_only",
|
||||
"update_router:external_gateway_info:external_fixed_ips": "rule:admin_only",
|
||||
|
||||
"create_qos_queue": "rule:admin_only",
|
||||
"get_qos_queue": "rule:admin_only",
|
||||
|
||||
"update_agent": "rule:admin_only",
|
||||
"delete_agent": "rule:admin_only",
|
||||
"get_agent": "rule:admin_only",
|
||||
|
||||
"create_dhcp-network": "rule:admin_only",
|
||||
"delete_dhcp-network": "rule:admin_only",
|
||||
"get_dhcp-networks": "rule:admin_only",
|
||||
"create_l3-router": "rule:admin_only",
|
||||
"delete_l3-router": "rule:admin_only",
|
||||
"get_l3-routers": "rule:admin_only",
|
||||
"get_dhcp-agents": "rule:admin_only",
|
||||
"get_l3-agents": "rule:admin_only",
|
||||
"get_loadbalancer-agent": "rule:admin_only",
|
||||
"get_loadbalancer-pools": "rule:admin_only",
|
||||
"get_agent-loadbalancers": "rule:admin_only",
|
||||
"get_loadbalancer-hosting-agent": "rule:admin_only",
|
||||
|
||||
"create_floatingip": "rule:regular_user",
|
||||
"create_floatingip:floating_ip_address": "rule:admin_only",
|
||||
"update_floatingip": "rule:admin_or_owner",
|
||||
"delete_floatingip": "rule:admin_or_owner",
|
||||
"get_floatingip": "rule:admin_or_owner",
|
||||
|
||||
"create_network_profile": "rule:admin_only",
|
||||
"update_network_profile": "rule:admin_only",
|
||||
"delete_network_profile": "rule:admin_only",
|
||||
"get_network_profiles": "",
|
||||
"get_network_profile": "",
|
||||
"update_policy_profiles": "rule:admin_only",
|
||||
"get_policy_profiles": "",
|
||||
"get_policy_profile": "",
|
||||
|
||||
"create_metering_label": "rule:admin_only",
|
||||
"delete_metering_label": "rule:admin_only",
|
||||
"get_metering_label": "rule:admin_only",
|
||||
|
||||
"create_metering_label_rule": "rule:admin_only",
|
||||
"delete_metering_label_rule": "rule:admin_only",
|
||||
"get_metering_label_rule": "rule:admin_only",
|
||||
|
||||
"get_service_provider": "rule:regular_user",
|
||||
"get_lsn": "rule:admin_only",
|
||||
"create_lsn": "rule:admin_only",
|
||||
|
||||
"create_flavor": "rule:admin_only",
|
||||
"update_flavor": "rule:admin_only",
|
||||
"delete_flavor": "rule:admin_only",
|
||||
"get_flavors": "rule:regular_user",
|
||||
"get_flavor": "rule:regular_user",
|
||||
"create_service_profile": "rule:admin_only",
|
||||
"update_service_profile": "rule:admin_only",
|
||||
"delete_service_profile": "rule:admin_only",
|
||||
"get_service_profiles": "rule:admin_only",
|
||||
"get_service_profile": "rule:admin_only",
|
||||
|
||||
"get_policy": "rule:regular_user",
|
||||
"create_policy": "rule:admin_only",
|
||||
"update_policy": "rule:admin_only",
|
||||
"delete_policy": "rule:admin_only",
|
||||
"get_policy_bandwidth_limit_rule": "rule:regular_user",
|
||||
"create_policy_bandwidth_limit_rule": "rule:admin_only",
|
||||
"delete_policy_bandwidth_limit_rule": "rule:admin_only",
|
||||
"update_policy_bandwidth_limit_rule": "rule:admin_only",
|
||||
"get_policy_dscp_marking_rule": "rule:regular_user",
|
||||
"create_policy_dscp_marking_rule": "rule:admin_only",
|
||||
"delete_policy_dscp_marking_rule": "rule:admin_only",
|
||||
"update_policy_dscp_marking_rule": "rule:admin_only",
|
||||
"get_rule_type": "rule:regular_user",
|
||||
"get_policy_minimum_bandwidth_rule": "rule:regular_user",
|
||||
"create_policy_minimum_bandwidth_rule": "rule:admin_only",
|
||||
"delete_policy_minimum_bandwidth_rule": "rule:admin_only",
|
||||
"update_policy_minimum_bandwidth_rule": "rule:admin_only",
|
||||
|
||||
"restrict_wildcard": "(not field:rbac_policy:target_tenant=*) or rule:admin_only",
|
||||
"create_rbac_policy": "",
|
||||
"create_rbac_policy:target_tenant": "rule:restrict_wildcard",
|
||||
"update_rbac_policy": "rule:admin_or_owner",
|
||||
"update_rbac_policy:target_tenant": "rule:restrict_wildcard and rule:admin_or_owner",
|
||||
"get_rbac_policy": "rule:admin_or_owner",
|
||||
"delete_rbac_policy": "rule:admin_or_owner",
|
||||
|
||||
"create_flavor_service_profile": "rule:admin_only",
|
||||
"delete_flavor_service_profile": "rule:admin_only",
|
||||
"get_flavor_service_profile": "rule:regular_user",
|
||||
"get_auto_allocated_topology": "rule:admin_or_owner",
|
||||
|
||||
"create_trunk": "rule:regular_user",
|
||||
"get_trunk": "rule:admin_or_owner",
|
||||
"delete_trunk": "rule:admin_or_owner",
|
||||
"get_subports": "",
|
||||
"add_subports": "rule:admin_or_owner",
|
||||
"remove_subports": "rule:admin_or_owner",
|
||||
|
||||
"get_security_groups": "rule:admin_or_owner",
|
||||
"get_security_group": "rule:admin_or_owner",
|
||||
"create_security_group": "rule:admin_or_owner",
|
||||
"update_security_group": "rule:admin_or_owner",
|
||||
"delete_security_group": "rule:admin_or_owner",
|
||||
"get_security_group_rules": "rule:admin_or_owner",
|
||||
"get_security_group_rule": "rule:admin_or_owner",
|
||||
"create_security_group_rule": "rule:admin_or_owner",
|
||||
"delete_security_group_rule": "rule:admin_or_owner",
|
||||
|
||||
"get_loggable_resources": "rule:admin_only",
|
||||
"create_log": "rule:admin_only",
|
||||
"update_log": "rule:admin_only",
|
||||
"delete_log": "rule:admin_only",
|
||||
"get_logs": "rule:admin_only",
|
||||
"get_log": "rule:admin_only"
|
||||
}
|
||||
@@ -0,0 +1,34 @@
|
||||
# Configuration for neutron-rootwrap
|
||||
# This file should be owned by (and only-writeable by) the root user
|
||||
|
||||
[DEFAULT]
|
||||
# List of directories to load filter definitions from (separated by ',').
|
||||
# These directories MUST all be only writeable by root !
|
||||
filters_path=/etc/neutron/rootwrap.d,/usr/share/neutron/rootwrap
|
||||
|
||||
# List of directories to search executables in, in case filters do not
|
||||
# explicitely specify a full path (separated by ',')
|
||||
# If not specified, defaults to system PATH environment variable.
|
||||
# These directories MUST all be only writeable by root !
|
||||
exec_dirs=/sbin,/usr/sbin,/bin,/usr/bin,/usr/local/bin,/usr/local/sbin
|
||||
|
||||
# Enable logging to syslog
|
||||
# Default value is False
|
||||
use_syslog=False
|
||||
|
||||
# Which syslog facility to use.
|
||||
# Valid values include auth, authpriv, syslog, local0, local1...
|
||||
# Default value is 'syslog'
|
||||
syslog_log_facility=syslog
|
||||
|
||||
# Which messages to log.
|
||||
# INFO means log all usage
|
||||
# ERROR means only log unsuccessful attempts
|
||||
syslog_log_level=ERROR
|
||||
|
||||
[xenapi]
|
||||
# XenAPI configuration is only required by the L2 agent if it is to
|
||||
# target a XenServer/XCP compute host's dom0.
|
||||
xenapi_connection_url=<None>
|
||||
xenapi_connection_username=root
|
||||
xenapi_connection_password=<None>
|
||||
@@ -0,0 +1,18 @@
|
||||
# neutron-rootwrap command filters for nodes on which neutron is
|
||||
# expected to control network
|
||||
#
|
||||
# This file should be owned by (and only-writeable by) the root user
|
||||
|
||||
# format seems to be
|
||||
# cmd-name: filter-name, raw-command, user, args
|
||||
|
||||
[Filters]
|
||||
|
||||
# This is needed because we should ping
|
||||
# from inside a namespace which requires root
|
||||
# _alt variants allow to match -c and -w in any order
|
||||
# (used by NeutronDebugAgent.ping_all)
|
||||
ping: RegExpFilter, ping, root, ping, -w, \d+, -c, \d+, [0-9\.]+
|
||||
ping_alt: RegExpFilter, ping, root, ping, -c, \d+, -w, \d+, [0-9\.]+
|
||||
ping6: RegExpFilter, ping6, root, ping6, -w, \d+, -c, \d+, [0-9A-Fa-f:]+
|
||||
ping6_alt: RegExpFilter, ping6, root, ping6, -c, \d+, -w, \d+, [0-9A-Fa-f:]+
|
||||
@@ -0,0 +1,39 @@
|
||||
# neutron-rootwrap command filters for nodes on which neutron is
|
||||
# expected to control network
|
||||
#
|
||||
# This file should be owned by (and only-writeable by) the root user
|
||||
|
||||
# format seems to be
|
||||
# cmd-name: filter-name, raw-command, user, args
|
||||
|
||||
[Filters]
|
||||
|
||||
# dhcp-agent
|
||||
dnsmasq: CommandFilter, dnsmasq, root
|
||||
# dhcp-agent uses kill as well, that's handled by the generic KillFilter
|
||||
# it looks like these are the only signals needed, per
|
||||
# neutron/agent/linux/dhcp.py
|
||||
kill_dnsmasq: KillFilter, root, /sbin/dnsmasq, -9, -HUP, -15
|
||||
kill_dnsmasq_usr: KillFilter, root, /usr/sbin/dnsmasq, -9, -HUP, -15
|
||||
|
||||
ovs-vsctl: CommandFilter, ovs-vsctl, root
|
||||
ivs-ctl: CommandFilter, ivs-ctl, root
|
||||
mm-ctl: CommandFilter, mm-ctl, root
|
||||
dhcp_release: CommandFilter, dhcp_release, root
|
||||
dhcp_release6: CommandFilter, dhcp_release6, root
|
||||
|
||||
# haproxy
|
||||
haproxy: RegExpFilter, haproxy, root, haproxy, -f, .*
|
||||
kill_haproxy: KillFilter, root, haproxy, -15, -9, -HUP
|
||||
# RHEL invocation of the metadata proxy will report /usr/bin/python
|
||||
# TODO(dalvarez): Remove kill_metadata* filters in Q release since
|
||||
# neutron-ns-metadata-proxy is now replaced by haproxy. We keep them for now
|
||||
# for the migration process
|
||||
kill_metadata: KillFilter, root, python, -9
|
||||
kill_metadata7: KillFilter, root, python2.7, -9
|
||||
kill_metadata35: KillFilter, root, python3.5, -9
|
||||
|
||||
# ip_lib
|
||||
ip: IpFilter, ip, root
|
||||
find: RegExpFilter, find, root, find, /sys/class/net, -maxdepth, 1, -type, l, -printf, %.*
|
||||
ip_exec: IpNetnsExecFilter, ip, root
|
||||
@@ -0,0 +1,17 @@
|
||||
# neutron-rootwrap command filters for nodes on which neutron is
|
||||
# expected to control network
|
||||
#
|
||||
# This file should be owned by (and only-writeable by) the root user
|
||||
|
||||
# format seems to be
|
||||
# cmd-name: filter-name, raw-command, user, args
|
||||
|
||||
[Filters]
|
||||
|
||||
# Filters for the dibbler-based reference implementation of the pluggable
|
||||
# Prefix Delegation driver. Other implementations using an alternative agent
|
||||
# should include a similar filter in this folder.
|
||||
|
||||
# prefix_delegation_agent
|
||||
dibbler-client: CommandFilter, dibbler-client, root
|
||||
kill_dibbler-client: KillFilter, root, dibbler-client, -9
|
||||
@@ -0,0 +1,11 @@
|
||||
# neutron-rootwrap command filters for nodes on which neutron is
|
||||
# expected to control network
|
||||
#
|
||||
# This file should be owned by (and only-writeable by) the root user
|
||||
|
||||
# format seems to be
|
||||
# cmd-name: filter-name, raw-command, user, args
|
||||
|
||||
[Filters]
|
||||
|
||||
ebtables: CommandFilter, ebtables, root
|
||||
@@ -0,0 +1,12 @@
|
||||
# neutron-rootwrap command filters for nodes on which neutron is
|
||||
# expected to control network
|
||||
#
|
||||
# This file should be owned by (and only-writeable by) the root user
|
||||
|
||||
# format seems to be
|
||||
# cmd-name: filter-name, raw-command, user, args
|
||||
|
||||
[Filters]
|
||||
# neutron/agent/linux/iptables_firewall.py
|
||||
# "ipset", "-A", ...
|
||||
ipset: CommandFilter, ipset, root
|
||||
@@ -0,0 +1,24 @@
|
||||
# neutron-rootwrap command filters for nodes on which neutron is
|
||||
# expected to control network
|
||||
#
|
||||
# This file should be owned by (and only-writeable by) the root user
|
||||
|
||||
# format seems to be
|
||||
# cmd-name: filter-name, raw-command, user, args
|
||||
|
||||
[Filters]
|
||||
|
||||
# neutron/agent/linux/iptables_firewall.py
|
||||
# "iptables-save", ...
|
||||
iptables-save: CommandFilter, iptables-save, root
|
||||
iptables-restore: CommandFilter, iptables-restore, root
|
||||
ip6tables-save: CommandFilter, ip6tables-save, root
|
||||
ip6tables-restore: CommandFilter, ip6tables-restore, root
|
||||
|
||||
# neutron/agent/linux/iptables_firewall.py
|
||||
# "iptables", "-A", ...
|
||||
iptables: CommandFilter, iptables, root
|
||||
ip6tables: CommandFilter, ip6tables, root
|
||||
|
||||
# neutron/agent/linux/ip_conntrack.py
|
||||
conntrack: CommandFilter, conntrack, root
|
||||
@@ -0,0 +1,66 @@
|
||||
# neutron-rootwrap command filters for nodes on which neutron is
|
||||
# expected to control network
|
||||
#
|
||||
# This file should be owned by (and only-writeable by) the root user
|
||||
|
||||
# format seems to be
|
||||
# cmd-name: filter-name, raw-command, user, args
|
||||
|
||||
[Filters]
|
||||
|
||||
# arping
|
||||
arping: CommandFilter, arping, root
|
||||
|
||||
# l3_agent
|
||||
sysctl: CommandFilter, sysctl, root
|
||||
route: CommandFilter, route, root
|
||||
radvd: CommandFilter, radvd, root
|
||||
|
||||
# haproxy
|
||||
haproxy: RegExpFilter, haproxy, root, haproxy, -f, .*
|
||||
kill_haproxy: KillFilter, root, haproxy, -15, -9, -HUP
|
||||
# RHEL invocation of the metadata proxy will report /usr/bin/python
|
||||
# TODO(dalvarez): Remove kill_metadata* filters in Q release since
|
||||
# neutron-ns-metadata-proxy is now replaced by haproxy. We keep them for now
|
||||
# for the migration process
|
||||
kill_metadata: KillFilter, root, python, -15, -9
|
||||
kill_metadata7: KillFilter, root, python2.7, -15, -9
|
||||
kill_metadata35: KillFilter, root, python3.5, -15, -9
|
||||
kill_radvd_usr: KillFilter, root, /usr/sbin/radvd, -15, -9, -HUP
|
||||
kill_radvd: KillFilter, root, /sbin/radvd, -15, -9, -HUP
|
||||
|
||||
# ip_lib
|
||||
ip: IpFilter, ip, root
|
||||
find: RegExpFilter, find, root, find, /sys/class/net, -maxdepth, 1, -type, l, -printf, %.*
|
||||
ip_exec: IpNetnsExecFilter, ip, root
|
||||
|
||||
# l3_tc_lib
|
||||
l3_tc_show_qdisc: RegExpFilter, tc, root, tc, qdisc, show, dev, .+
|
||||
l3_tc_add_qdisc_ingress: RegExpFilter, tc, root, tc, qdisc, add, dev, .+, ingress
|
||||
l3_tc_add_qdisc_egress: RegExpFilter, tc, root, tc, qdisc, add, dev, .+, root, handle, 1:, htb
|
||||
l3_tc_show_filters: RegExpFilter, tc, root, tc, -p, -s, -d, filter, show, dev, .+, parent, .+, prio, 1
|
||||
l3_tc_delete_filters: RegExpFilter, tc, root, tc, filter, del, dev, .+, parent, .+, prio, 1, handle, .+, u32
|
||||
l3_tc_add_filter_ingress: RegExpFilter, tc, root, tc, filter, add, dev, .+, parent, .+, protocol, ip, prio, 1, u32, match, ip, dst, .+, police, rate, .+, burst, .+, drop, flowid, :1
|
||||
l3_tc_add_filter_egress: RegExpFilter, tc, root, tc, filter, add, dev, .+, parent, .+, protocol, ip, prio, 1, u32, match, ip, src, .+, police, rate, .+, burst, .+, drop, flowid, :1
|
||||
|
||||
# For ip monitor
|
||||
kill_ip_monitor: KillFilter, root, ip, -9
|
||||
|
||||
# ovs_lib (if OVSInterfaceDriver is used)
|
||||
ovs-vsctl: CommandFilter, ovs-vsctl, root
|
||||
|
||||
# iptables_manager
|
||||
iptables-save: CommandFilter, iptables-save, root
|
||||
iptables-restore: CommandFilter, iptables-restore, root
|
||||
ip6tables-save: CommandFilter, ip6tables-save, root
|
||||
ip6tables-restore: CommandFilter, ip6tables-restore, root
|
||||
|
||||
# Keepalived
|
||||
keepalived: CommandFilter, keepalived, root
|
||||
kill_keepalived: KillFilter, root, /usr/sbin/keepalived, -HUP, -15, -9
|
||||
|
||||
# l3 agent to delete floatingip's conntrack state
|
||||
conntrack: CommandFilter, conntrack, root
|
||||
|
||||
# keepalived state change monitor
|
||||
keepalived_state_change: CommandFilter, neutron-keepalived-state-change, root
|
||||
@@ -0,0 +1,29 @@
|
||||
# neutron-rootwrap command filters for nodes on which neutron is
|
||||
# expected to control network
|
||||
#
|
||||
# This file should be owned by (and only-writeable by) the root user
|
||||
|
||||
# format seems to be
|
||||
# cmd-name: filter-name, raw-command, user, args
|
||||
|
||||
[Filters]
|
||||
|
||||
# linuxbridge-agent
|
||||
# unclear whether both variants are necessary, but I'm transliterating
|
||||
# from the old mechanism
|
||||
brctl: CommandFilter, brctl, root
|
||||
bridge: CommandFilter, bridge, root
|
||||
sysctl: CommandFilter, sysctl, root
|
||||
|
||||
# ip_lib
|
||||
ip: IpFilter, ip, root
|
||||
find: RegExpFilter, find, root, find, /sys/class/net, -maxdepth, 1, -type, l, -printf, %.*
|
||||
ip_exec: IpNetnsExecFilter, ip, root
|
||||
|
||||
# tc commands needed for QoS support
|
||||
tc_replace_tbf: RegExpFilter, tc, root, tc, qdisc, replace, dev, .+, root, tbf, rate, .+, latency, .+, burst, .+
|
||||
tc_add_ingress: RegExpFilter, tc, root, tc, qdisc, add, dev, .+, ingress, handle, .+
|
||||
tc_delete: RegExpFilter, tc, root, tc, qdisc, del, dev, .+, .+
|
||||
tc_show_qdisc: RegExpFilter, tc, root, tc, qdisc, show, dev, .+
|
||||
tc_show_filters: RegExpFilter, tc, root, tc, filter, show, dev, .+, parent, .+
|
||||
tc_add_filter: RegExpFilter, tc, root, tc, filter, add, dev, .+, parent, .+, protocol, all, prio, .+, basic, police, rate, .+, burst, .+, mtu, .+, drop
|
||||
+84
@@ -0,0 +1,84 @@
|
||||
############
|
||||
# Metadata #
|
||||
############
|
||||
[composite:metadata]
|
||||
use = egg:Paste#urlmap
|
||||
/: meta
|
||||
|
||||
[pipeline:meta]
|
||||
pipeline = cors metaapp
|
||||
|
||||
[app:metaapp]
|
||||
paste.app_factory = nova.api.metadata.handler:MetadataRequestHandler.factory
|
||||
|
||||
#############
|
||||
# OpenStack #
|
||||
#############
|
||||
|
||||
[composite:osapi_compute]
|
||||
use = call:nova.api.openstack.urlmap:urlmap_factory
|
||||
/: oscomputeversions
|
||||
# v21 is an exactly feature match for v2, except it has more stringent
|
||||
# input validation on the wsgi surface (prevents fuzzing early on the
|
||||
# API). It also provides new features via API microversions which are
|
||||
# opt into for clients. Unaware clients will receive the same frozen
|
||||
# v2 API feature set, but with some relaxed validation
|
||||
/v2: openstack_compute_api_v21_legacy_v2_compatible
|
||||
/v2.1: openstack_compute_api_v21
|
||||
|
||||
[composite:openstack_compute_api_v21]
|
||||
use = call:nova.api.auth:pipeline_factory_v21
|
||||
noauth2 = cors http_proxy_to_wsgi compute_req_id faultwrap request_log sizelimit osprofiler noauth2 osapi_compute_app_v21
|
||||
keystone = cors http_proxy_to_wsgi compute_req_id faultwrap request_log sizelimit osprofiler authtoken keystonecontext osapi_compute_app_v21
|
||||
|
||||
[composite:openstack_compute_api_v21_legacy_v2_compatible]
|
||||
use = call:nova.api.auth:pipeline_factory_v21
|
||||
noauth2 = cors http_proxy_to_wsgi compute_req_id faultwrap request_log sizelimit osprofiler noauth2 legacy_v2_compatible osapi_compute_app_v21
|
||||
keystone = cors http_proxy_to_wsgi compute_req_id faultwrap request_log sizelimit osprofiler authtoken keystonecontext legacy_v2_compatible osapi_compute_app_v21
|
||||
|
||||
[filter:request_log]
|
||||
paste.filter_factory = nova.api.openstack.requestlog:RequestLog.factory
|
||||
|
||||
[filter:compute_req_id]
|
||||
paste.filter_factory = nova.api.compute_req_id:ComputeReqIdMiddleware.factory
|
||||
|
||||
[filter:faultwrap]
|
||||
paste.filter_factory = nova.api.openstack:FaultWrapper.factory
|
||||
|
||||
[filter:noauth2]
|
||||
paste.filter_factory = nova.api.openstack.auth:NoAuthMiddleware.factory
|
||||
|
||||
[filter:osprofiler]
|
||||
paste.filter_factory = nova.profiler:WsgiMiddleware.factory
|
||||
|
||||
[filter:sizelimit]
|
||||
paste.filter_factory = oslo_middleware:RequestBodySizeLimiter.factory
|
||||
|
||||
[filter:http_proxy_to_wsgi]
|
||||
paste.filter_factory = oslo_middleware.http_proxy_to_wsgi:HTTPProxyToWSGI.factory
|
||||
|
||||
[filter:legacy_v2_compatible]
|
||||
paste.filter_factory = nova.api.openstack:LegacyV2CompatibleWrapper.factory
|
||||
|
||||
[app:osapi_compute_app_v21]
|
||||
paste.app_factory = nova.api.openstack.compute:APIRouterV21.factory
|
||||
|
||||
[pipeline:oscomputeversions]
|
||||
pipeline = cors faultwrap request_log http_proxy_to_wsgi oscomputeversionapp
|
||||
|
||||
[app:oscomputeversionapp]
|
||||
paste.app_factory = nova.api.openstack.compute.versions:Versions.factory
|
||||
|
||||
##########
|
||||
# Shared #
|
||||
##########
|
||||
|
||||
[filter:cors]
|
||||
paste.filter_factory = oslo_middleware.cors:filter_factory
|
||||
oslo_config_project = nova
|
||||
|
||||
[filter:keystonecontext]
|
||||
paste.filter_factory = nova.api.auth:NovaKeystoneContext.factory
|
||||
|
||||
[filter:authtoken]
|
||||
paste.filter_factory = keystonemiddleware.auth_token:filter_factory
|
||||
@@ -0,0 +1,84 @@
|
||||
[loggers]
|
||||
keys = root, nova
|
||||
|
||||
[handlers]
|
||||
keys = stderr, stdout, watchedfile, syslog, null
|
||||
|
||||
[formatters]
|
||||
keys = context, default
|
||||
|
||||
[logger_root]
|
||||
level = WARNING
|
||||
handlers = null
|
||||
|
||||
[logger_nova]
|
||||
level = INFO
|
||||
handlers = stderr
|
||||
qualname = nova
|
||||
|
||||
[logger_amqp]
|
||||
level = WARNING
|
||||
handlers = stderr
|
||||
qualname = amqp
|
||||
|
||||
[logger_amqplib]
|
||||
level = WARNING
|
||||
handlers = stderr
|
||||
qualname = amqplib
|
||||
|
||||
[logger_sqlalchemy]
|
||||
level = WARNING
|
||||
handlers = stderr
|
||||
qualname = sqlalchemy
|
||||
# "level = INFO" logs SQL queries.
|
||||
# "level = DEBUG" logs SQL queries and results.
|
||||
# "level = WARNING" logs neither. (Recommended for production systems.)
|
||||
|
||||
[logger_boto]
|
||||
level = WARNING
|
||||
handlers = stderr
|
||||
qualname = boto
|
||||
|
||||
# NOTE(mikal): suds is used by the vmware driver, removing this will
|
||||
# cause many extraneous log lines for their tempest runs. Refer to
|
||||
# https://review.openstack.org/#/c/219225/ for details.
|
||||
[logger_suds]
|
||||
level = INFO
|
||||
handlers = stderr
|
||||
qualname = suds
|
||||
|
||||
[logger_eventletwsgi]
|
||||
level = WARNING
|
||||
handlers = stderr
|
||||
qualname = eventlet.wsgi.server
|
||||
|
||||
[handler_stderr]
|
||||
class = StreamHandler
|
||||
args = (sys.stderr,)
|
||||
formatter = context
|
||||
|
||||
[handler_stdout]
|
||||
class = StreamHandler
|
||||
args = (sys.stdout,)
|
||||
formatter = context
|
||||
|
||||
[handler_watchedfile]
|
||||
class = handlers.WatchedFileHandler
|
||||
args = ('nova.log',)
|
||||
formatter = context
|
||||
|
||||
[handler_syslog]
|
||||
class = handlers.SysLogHandler
|
||||
args = ('/dev/log', handlers.SysLogHandler.LOG_USER)
|
||||
formatter = context
|
||||
|
||||
[handler_null]
|
||||
class = logging.NullHandler
|
||||
formatter = default
|
||||
args = ()
|
||||
|
||||
[formatter_context]
|
||||
class = oslo_log.formatters.ContextFormatter
|
||||
|
||||
[formatter_default]
|
||||
format = %(message)s
|
||||
+11229
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,27 @@
|
||||
# Configuration for nova-rootwrap
|
||||
# This file should be owned by (and only-writeable by) the root user
|
||||
|
||||
[DEFAULT]
|
||||
# List of directories to load filter definitions from (separated by ',').
|
||||
# These directories MUST all be only writeable by root !
|
||||
filters_path=/etc/nova/rootwrap.d,/usr/share/nova/rootwrap
|
||||
|
||||
# List of directories to search executables in, in case filters do not
|
||||
# explicitly specify a full path (separated by ',')
|
||||
# If not specified, defaults to system PATH environment variable.
|
||||
# These directories MUST all be only writeable by root !
|
||||
exec_dirs=/sbin,/usr/sbin,/bin,/usr/bin,/usr/local/sbin,/usr/local/bin
|
||||
|
||||
# Enable logging to syslog
|
||||
# Default value is False
|
||||
use_syslog=False
|
||||
|
||||
# Which syslog facility to use.
|
||||
# Valid values include auth, authpriv, syslog, local0, local1...
|
||||
# Default value is 'syslog'
|
||||
syslog_log_facility=syslog
|
||||
|
||||
# Which messages to log.
|
||||
# INFO means log all usage
|
||||
# ERROR means only log unsuccessful attempts
|
||||
syslog_log_level=ERROR
|
||||
@@ -0,0 +1,13 @@
|
||||
# nova-rootwrap command filters for api-metadata nodes
|
||||
# This is needed on nova-api hosts running with "metadata" in enabled_apis
|
||||
# or when running nova-api-metadata
|
||||
# This file should be owned by (and only-writeable by) the root user
|
||||
|
||||
[Filters]
|
||||
# nova/network/linux_net.py: 'ip[6]tables-save' % (cmd, '-t', ...
|
||||
iptables-save: CommandFilter, iptables-save, root
|
||||
ip6tables-save: CommandFilter, ip6tables-save, root
|
||||
|
||||
# nova/network/linux_net.py: 'ip[6]tables-restore' % (cmd,)
|
||||
iptables-restore: CommandFilter, iptables-restore, root
|
||||
ip6tables-restore: CommandFilter, ip6tables-restore, root
|
||||
Reference in New Issue
Block a user