summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorFrancisco Redondo Marchena <francisco.marchena@codethink.co.uk>2015-05-21 13:49:43 (GMT)
committerFrancisco Redondo Marchena <francisco.marchena@codethink.co.uk>2015-05-21 15:30:22 (GMT)
commit257904f42060622cad2aef53d8f4782dc871997c (patch)
tree081d53fc56e8a54a41c680276cc1318782c0c12f
parent2fddf3914b0f46988bbeb6258b6ace13a2e32134 (diff)
downloaddefinitions-257904f42060622cad2aef53d8f4782dc871997c.tar.gz
Openstack: Update nova.conf to its Kilo version
The version of nova.conf where taken from http://pkgs.fedoraproject.org/cgit/openstack-nova.git/tree/nova.conf.sample from the commit 69755b4a072edff0957ee256290395600edbab9e Change-Id: I7250bec46ae7d5096fe8b34cd2e785beaf6c3086
-rw-r--r--openstack/usr/share/openstack/nova/nova.conf1648
1 files changed, 923 insertions, 725 deletions
diff --git a/openstack/usr/share/openstack/nova/nova.conf b/openstack/usr/share/openstack/nova/nova.conf
index 43343cd..67004c9 100644
--- a/openstack/usr/share/openstack/nova/nova.conf
+++ b/openstack/usr/share/openstack/nova/nova.conf
@@ -1,188 +1,68 @@
[DEFAULT]
#
-# Options defined in oslo.messaging
+# From oslo.messaging
#
-# Use durable queues in amqp. (boolean value)
-# Deprecated group/name - [DEFAULT]/rabbit_durable_queues
-#amqp_durable_queues=false
-
-# Auto-delete queues in amqp. (boolean value)
-#amqp_auto_delete=false
-
-# Size of RPC connection pool. (integer value)
-#rpc_conn_pool_size=30
-
-# Qpid broker hostname. (string value)
-#qpid_hostname=localhost
-
-# Qpid broker port. (integer value)
-#qpid_port=5672
-
-# Qpid HA cluster host:port pairs. (list value)
-#qpid_hosts=$qpid_hostname:$qpid_port
-
-# Username for Qpid connection. (string value)
-#qpid_username=
-
-# Password for Qpid connection. (string value)
-#qpid_password=
-
-# Space separated list of SASL mechanisms to use for auth.
-# (string value)
-#qpid_sasl_mechanisms=
-
-# Seconds between connection keepalive heartbeats. (integer
-# value)
-#qpid_heartbeat=60
-
-# Transport to use, either 'tcp' or 'ssl'. (string value)
-#qpid_protocol=tcp
-
-# Whether to disable the Nagle algorithm. (boolean value)
-#qpid_tcp_nodelay=true
-
-# The number of prefetched messages held by receiver. (integer
-# value)
-#qpid_receiver_capacity=1
-
-# The qpid topology version to use. Version 1 is what was
-# originally used by impl_qpid. Version 2 includes some
-# backwards-incompatible changes that allow broker federation
-# to work. Users should update to version 2 when they are
-# able to take everything down, as it requires a clean break.
-# (integer value)
-#qpid_topology_version=1
-
-# SSL version to use (valid only if SSL enabled). valid values
-# are TLSv1, SSLv23 and SSLv3. SSLv2 may be available on some
-# distributions. (string value)
-#kombu_ssl_version=
-
-# SSL key file (valid only if SSL enabled). (string value)
-#kombu_ssl_keyfile=
-
-# SSL cert file (valid only if SSL enabled). (string value)
-#kombu_ssl_certfile=
-
-# SSL certification authority file (valid only if SSL
-# enabled). (string value)
-#kombu_ssl_ca_certs=
-
-# How long to wait before reconnecting in response to an AMQP
-# consumer cancel notification. (floating point value)
-#kombu_reconnect_delay=1.0
-
-# The RabbitMQ broker address where a single node is used.
-# (string value)
-rabbit_host={{ RABBITMQ_HOST }}
-
-# The RabbitMQ broker port where a single node is used.
-# (integer value)
-rabbit_port={{ RABBITMQ_PORT }}
-
-# RabbitMQ HA cluster host:port pairs. (list value)
-#rabbit_hosts=$rabbit_host:$rabbit_port
-
-# Connect over SSL for RabbitMQ. (boolean value)
-rabbit_use_ssl=false
-
-# The RabbitMQ userid. (string value)
-rabbit_userid={{ RABBITMQ_USER }}
-
-# The RabbitMQ password. (string value)
-rabbit_password={{ RABBITMQ_PASSWORD }}
-
-# the RabbitMQ login method (string value)
-#rabbit_login_method=AMQPLAIN
-
-# The RabbitMQ virtual host. (string value)
-#rabbit_virtual_host=/
-
-# How frequently to retry connecting with RabbitMQ. (integer
-# value)
-#rabbit_retry_interval=1
-
-# How long to backoff for between retries when connecting to
-# RabbitMQ. (integer value)
-#rabbit_retry_backoff=2
-
-# Maximum number of RabbitMQ connection retries. Default is 0
-# (infinite retry count). (integer value)
-#rabbit_max_retries=0
-
-# Use HA queues in RabbitMQ (x-ha-policy: all). If you change
-# this option, you must wipe the RabbitMQ database. (boolean
-# value)
-#rabbit_ha_queues=false
-
-# If passed, use a fake RabbitMQ provider. (boolean value)
-#fake_rabbit=false
-
-# ZeroMQ bind address. Should be a wildcard (*), an ethernet
-# interface, or IP. The "host" option should point or resolve
-# to this address. (string value)
-#rpc_zmq_bind_address=*
+# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
+# The "host" option should point or resolve to this address. (string value)
+#rpc_zmq_bind_address = *
# MatchMaker driver. (string value)
-#rpc_zmq_matchmaker=oslo.messaging._drivers.matchmaker.MatchMakerLocalhost
+#rpc_zmq_matchmaker = oslo_messaging._drivers.matchmaker.MatchMakerLocalhost
# ZeroMQ receiver listening port. (integer value)
-#rpc_zmq_port=9501
+#rpc_zmq_port = 9501
# Number of ZeroMQ contexts, defaults to 1. (integer value)
-#rpc_zmq_contexts=1
+#rpc_zmq_contexts = 1
-# Maximum number of ingress messages to locally buffer per
-# topic. Default is unlimited. (integer value)
-#rpc_zmq_topic_backlog=<None>
+# Maximum number of ingress messages to locally buffer per topic. Default is
+# unlimited. (integer value)
+#rpc_zmq_topic_backlog = <None>
# Directory for holding IPC sockets. (string value)
-#rpc_zmq_ipc_dir=/var/run/openstack
+#rpc_zmq_ipc_dir = /var/run/openstack
-# Name of this node. Must be a valid hostname, FQDN, or IP
-# address. Must match "host" option, if running Nova. (string
-# value)
-#rpc_zmq_host=nova
+# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
+# "host" option, if running Nova. (string value)
+#rpc_zmq_host = localhost
-# Seconds to wait before a cast expires (TTL). Only supported
-# by impl_zmq. (integer value)
-#rpc_cast_timeout=30
+# Seconds to wait before a cast expires (TTL). Only supported by impl_zmq.
+# (integer value)
+#rpc_cast_timeout = 30
# Heartbeat frequency. (integer value)
-#matchmaker_heartbeat_freq=300
+#matchmaker_heartbeat_freq = 300
# Heartbeat time-to-live. (integer value)
-#matchmaker_heartbeat_ttl=600
+#matchmaker_heartbeat_ttl = 600
-# Size of RPC greenthread pool. (integer value)
-#rpc_thread_pool_size=64
+# Size of RPC thread pool. (integer value)
+#rpc_thread_pool_size = 64
-# Driver or drivers to handle sending notifications. (multi
-# valued)
-notification_driver=messagingv2
+# Driver or drivers to handle sending notifications. (multi valued)
+notification_driver = messagingv2
# AMQP topic used for OpenStack notifications. (list value)
# Deprecated group/name - [rpc_notifier2]/topics
-#notification_topics=notifications
+#notification_topics = notifications
# Seconds to wait for a response from a call. (integer value)
-#rpc_response_timeout=60
+#rpc_response_timeout = 60
-# A URL representing the messaging driver to use and its full
-# configuration. If not set, we fall back to the rpc_backend
-# option and driver specific configuration. (string value)
-#transport_url=<None>
+# A URL representing the messaging driver to use and its full configuration. If
+# not set, we fall back to the rpc_backend option and driver specific
+# configuration. (string value)
+#transport_url = <None>
-# The messaging driver to use, defaults to rabbit. Other
-# drivers include qpid and zmq. (string value)
-rpc_backend=rabbit
+# The messaging driver to use, defaults to rabbit. Other drivers include qpid
+# and zmq. (string value)
+rpc_backend = rabbit
-# The default exchange under which topics are scoped. May be
-# overridden by an exchange name specified in the
-# transport_url option. (string value)
-#control_exchange=openstack
+# The default exchange under which topics are scoped. May be overridden by an
+# exchange name specified in the transport_url option. (string value)
+#control_exchange = openstack
#
@@ -243,6 +123,9 @@ rpc_backend=rabbit
# IP address of this host (string value)
my_ip={{ MANAGEMENT_INTERFACE_IP_ADDRESS }}
+# Block storage IP address of this host (string value)
+#my_block_storage_ip=$my_ip
+
# Name of this node. This can be an opaque identifier. It is
# not necessarily a hostname, FQDN, or IP address. However,
# the node name must be valid within an AMQP key, and if using
@@ -325,7 +208,6 @@ state_path=/var/lib/nova
#quota_injected_file_content_bytes=10240
# Length of injected file path (integer value)
-# Deprecated group/name - [DEFAULT]/quota_injected_file_path_bytes
#quota_injected_file_path_length=255
# Number of security groups per project (integer value)
@@ -347,11 +229,18 @@ state_path=/var/lib/nova
# value)
#reservation_expire=86400
-# Count of reservations until usage is refreshed (integer
-# value)
+# Count of reservations until usage is refreshed. This
+# defaults to 0(off) to avoid additional load but it is useful
+# to turn on to help keep quota usage up to date and reduce
+# the impact of out of sync usage issues. (integer value)
#until_refresh=0
-# Number of seconds between subsequent usage refreshes
+# Number of seconds between subsequent usage refreshes. This
+# defaults to 0(off) to avoid additional load but it is useful
+# to turn on to help keep quota usage up to date and reduce
+# the impact of out of sync usage issues. Note that quotas are
+# not updated on a periodic task, they will update on a new
+# reservation if max_age has passed since the last reservation
# (integer value)
#max_age=0
@@ -444,14 +333,6 @@ compute_manager={{ COMPUTE_MANAGER }}
#
-# Options defined in nova.test
-#
-
-# File name of clean sqlite db (string value)
-#sqlite_clean_db=clean.sqlite
-
-
-#
# Options defined in nova.utils
#
@@ -515,6 +396,16 @@ api_paste_config=api-paste.ini
# with big service catalogs). (integer value)
#max_header_line=16384
+# If False, closes the client socket connection explicitly.
+# (boolean value)
+#wsgi_keep_alive=true
+
+# Timeout for client connections' socket operations. If an
+# incoming connection is idle for this number of seconds it
+# will be closed. A value of '0' means wait forever. (integer
+# value)
+#client_socket_timeout=900
+
#
# Options defined in nova.api.auth
@@ -525,8 +416,12 @@ api_paste_config=api-paste.ini
# v3 api. (boolean value)
#api_rate_limit=false
-# The strategy to use for auth: noauth or keystone. (string
-# value)
+# The strategy to use for auth: keystone, noauth
+# (deprecated), or noauth2. Both noauth and noauth2 are
+# designed for testing only, as they do no actual credential
+# checking. noauth provides administrative credentials
+# regardless of the passed in user, noauth2 only does if
+# 'admin' is specified as the username. (string value)
auth_strategy=keystone
# Treat X-Forwarded-For as the canonical remote address. Only
@@ -561,6 +456,9 @@ auth_strategy=keystone
# Time in seconds before ec2 timestamp expires (integer value)
#ec2_timestamp_expiry=300
+# Disable SSL certificate verification. (boolean value)
+#keystone_ec2_insecure=false
+
#
# Options defined in nova.api.ec2.cloud
@@ -581,7 +479,7 @@ auth_strategy=keystone
# The path prefix used to call the ec2 API server (string
# value)
-#ec2_path=/services/Cloud
+#ec2_path=/
# List of region=fqdn pairs separated by commas (list value)
#region_list=
@@ -600,6 +498,19 @@ auth_strategy=keystone
#
+# Options defined in nova.api.metadata.handler
+#
+
+# Time in seconds to cache metadata; 0 to disable metadata
+# caching entirely (not recommended). Increasingthis should
+# improve response times of the metadata API when under heavy
+# load. Higher values may increase memoryusage and result in
+# longer times for host metadata changes to take effect.
+# (integer value)
+#metadata_cache_expiration=15
+
+
+#
# Options defined in nova.api.metadata.vendordata_json
#
@@ -640,7 +551,7 @@ auth_strategy=keystone
# osapi_compute_extension option with
# nova.api.openstack.compute.contrib.select_extensions (list
# value)
-osapi_compute_extension=nova.api.openstack.compute.contrib.standard_extensions
+#osapi_compute_ext_list=
#
@@ -666,13 +577,17 @@ osapi_compute_extension=nova.api.openstack.compute.contrib.standard_extensions
# value)
#neutron_default_tenant_id=default
+# Number of private networks allowed per project (integer
+# value)
+#quota_networks=3
+
#
# Options defined in nova.api.openstack.compute.extensions
#
# osapi compute extension to load (multi valued)
-#osapi_compute_extension=nova.api.openstack.compute.contrib.standard_extensions
+osapi_compute_extension=nova.api.openstack.compute.contrib.standard_extensions
#
@@ -696,15 +611,6 @@ osapi_compute_extension=nova.api.openstack.compute.contrib.standard_extensions
#
-# Options defined in nova.api.sizelimit
-#
-
-# The maximum body size per each osapi request(bytes) (integer
-# value)
-#osapi_max_request_body_size=114688
-
-
-#
# Options defined in nova.cert.rpcapi
#
@@ -807,7 +713,7 @@ osapi_compute_extension=nova.api.openstack.compute.contrib.standard_extensions
# hostnames. To restore legacy behavior of every instance
# having the same name, set this option to "%(name)s". Valid
# keys for the template are: name, uuid, count. (string value)
-#multi_instance_display_name_template=%(name)s-%(uuid)s
+#multi_instance_display_name_template=%(name)s-%(count)d
# Maximum number of devices that will result in a local image
# being created on the hypervisor node. Setting this to 0
@@ -847,7 +753,7 @@ osapi_compute_extension=nova.api.openstack.compute.contrib.standard_extensions
# Generate periodic compute.instance.exists notifications
# (boolean value)
-instance_usage_audit=True
+instance_usage_audit= True
# Number of 1 second retries needed in live_migration (integer
# value)
@@ -861,6 +767,10 @@ instance_usage_audit=True
# (integer value)
#network_allocate_retries=0
+# Maximum number of instance builds to run concurrently
+# (integer value)
+#max_concurrent_builds=10
+
# Number of times to retry block device allocation on failures
# (integer value)
#block_device_allocate_retries=60
@@ -871,17 +781,15 @@ instance_usage_audit=True
# Interval to pull network bandwidth usage info. Not supported
# on all hypervisors. Set to -1 to disable. Setting this to 0
-# will disable, but this will change in the K release to mean
-# "run at the default rate". (integer value)
+# will run at the default rate. (integer value)
#bandwidth_poll_interval=600
# Interval to sync power states between the database and the
-# hypervisor. Set to -1 to disable. Setting this to 0 will
-# disable, but this will change in Juno to mean "run at the
-# default rate". (integer value)
+# hypervisor. Set to -1 to disable. Setting this to 0 will run
+# at the default rate. (integer value)
#sync_power_state_interval=600
-# Number of seconds between instance info_cache self healing
+# Number of seconds between instance network information cache
# updates (integer value)
#heal_instance_info_cache_interval=60
@@ -894,9 +802,8 @@ instance_usage_audit=True
#volume_usage_poll_interval=0
# Interval in seconds for polling shelved instances to
-# offload. Set to -1 to disable.Setting this to 0 will
-# disable, but this will change in Juno to mean "run at the
-# default rate". (integer value)
+# offload. Set to -1 to disable.Setting this to 0 will run at
+# the default rate. (integer value)
#shelved_poll_interval=3600
# Time in seconds before a shelved instance is eligible for
@@ -905,16 +812,24 @@ instance_usage_audit=True
#shelved_offload_time=0
# Interval in seconds for retrying failed instance file
-# deletes (integer value)
+# deletes. Set to -1 to disable. Setting this to 0 will run at
+# the default rate. (integer value)
#instance_delete_interval=300
# Waiting time interval (seconds) between block device
# allocation retries on failures (integer value)
#block_device_allocate_retries_interval=3
-# Action to take if a running deleted instance is
-# detected.Valid options are 'noop', 'log', 'shutdown', or
-# 'reap'. Set to 'noop' to take no action. (string value)
+# Waiting time interval (seconds) between sending the
+# scheduler a list of current instance UUIDs to verify that
+# its view of instances is in sync with nova. If the CONF
+# option `scheduler_tracks_instance_changes` is False,
+# changing this option will have no effect. (integer value)
+#scheduler_instance_sync_interval=120
+
+# Action to take if a running deleted instance is detected.
+# Valid options are 'noop', 'log', 'shutdown', or 'reap'. Set
+# to 'noop' to take no action. (string value)
#running_deleted_instance_action=reap
# Number of seconds to wait between runs of the cleanup task.
@@ -932,7 +847,8 @@ instance_usage_audit=True
#reboot_timeout=0
# Amount of time in seconds an instance can be in BUILD before
-# going into ERROR status.Set to 0 to disable. (integer value)
+# going into ERROR status. Set to 0 to disable. (integer
+# value)
#instance_build_timeout=0
# Automatically unrescue an instance after N seconds. Set to 0
@@ -1021,18 +937,6 @@ reserved_host_memory_mb={{ RESERVED_HOST_MEMORY_MB }}
#
-# Options defined in nova.console.vmrc
-#
-
-# DEPRECATED. Port for VMware VMRC connections (integer value)
-#console_vmrc_port=443
-
-# DEPRECATED. Number of retries for retrieving VMRC
-# information (integer value)
-#console_vmrc_error_retries=10
-
-
-#
# Options defined in nova.console.xvp
#
@@ -1251,7 +1155,7 @@ network_api_class=nova.network.neutronv2.api.API
# servers. (boolean value)
#use_network_dns_servers=false
-# A list of dmz range that should be accepted (list value)
+# A list of dmz ranges that should be accepted (list value)
#dmz_cidr=
# Traffic to this range will always be snatted to the fallback
@@ -1291,12 +1195,12 @@ linuxnet_interface_driver=nova.network.linux_net.LinuxOVSInterfaceDriver
# The port for the metadata API port (integer value)
#metadata_port=8775
-# Regular expression to match iptables rule that should always
-# be on the top. (string value)
+# Regular expression to match the iptables rule that should
+# always be on the top. (string value)
#iptables_top_regex=
-# Regular expression to match iptables rule that should always
-# be on the bottom. (string value)
+# Regular expression to match the iptables rule that should
+# always be on the bottom. (string value)
#iptables_bottom_regex=
# The table that iptables to jump to when a packet is to be
@@ -1312,6 +1216,14 @@ linuxnet_interface_driver=nova.network.linux_net.LinuxOVSInterfaceDriver
# value)
#fake_network=false
+# Number of times to retry ebtables commands on failure.
+# (integer value)
+#ebtables_exec_attempts=3
+
+# Number of seconds to wait between ebtables retries.
+# (floating point value)
+#ebtables_retry_interval=1.0
+
#
# Options defined in nova.network.manager
@@ -1450,156 +1362,91 @@ security_group_api=neutron
#
-# Options defined in nova.openstack.common.eventlet_backdoor
+# From oslo.log
#
-# Enable eventlet backdoor. Acceptable values are 0, <port>,
-# and <start>:<end>, where 0 results in listening on a random
-# tcp port number; <port> results in listening on the
-# specified port number (and not enabling backdoor if that
-# port is in use); and <start>:<end> results in listening on
-# the smallest unused port number within the specified range
-# of port numbers. The chosen port is displayed in the
-# service's log file. (string value)
-#backdoor_port=<None>
-
-
-#
-# Options defined in nova.openstack.common.lockutils
-#
-
-# Enables or disables inter-process locks. (boolean value)
-#disable_process_locking=false
-
-# Directory to use for lock files. (string value)
-lock_path=/var/lock/nova
+# Print debugging output (set logging level to DEBUG instead of default WARNING
+# level). (boolean value)
+#debug = false
+# Print more verbose output (set logging level to INFO instead of default
+# WARNING level). (boolean value)
+#verbose = false
-#
-# Options defined in nova.openstack.common.log
-#
-
-# Print debugging output (set logging level to DEBUG instead
-# of default WARNING level). (boolean value)
-#debug=false
-
-# Print more verbose output (set logging level to INFO instead
-# of default WARNING level). (boolean value)
-#verbose=false
-
-# Log output to standard error. (boolean value)
-#use_stderr=true
-
-# Format string to use for log messages with context. (string
-# value)
-#logging_context_format_string=%(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
-
-# Format string to use for log messages without context.
-# (string value)
-#logging_default_format_string=%(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
-
-# Data to append to log format when level is DEBUG. (string
-# value)
-#logging_debug_format_suffix=%(funcName)s %(pathname)s:%(lineno)d
-
-# Prefix each line of exception output with this format.
-# (string value)
-#logging_exception_prefix=%(asctime)s.%(msecs)03d %(process)d TRACE %(name)s %(instance)s
-
-# List of logger=LEVEL pairs. (list value)
-#default_log_levels=amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN
-
-# Enables or disables publication of error events. (boolean
-# value)
-#publish_errors=false
-
-# Enables or disables fatal status of deprecations. (boolean
-# value)
-#fatal_deprecations=false
-
-# The format for an instance that is passed with the log
-# message. (string value)
-#instance_format="[instance: %(uuid)s] "
-
-# The format for an instance UUID that is passed with the log
-# message. (string value)
-#instance_uuid_format="[instance: %(uuid)s] "
-
-# The name of a logging configuration file. This file is
-# appended to any existing logging configuration files. For
-# details about logging configuration files, see the Python
-# logging module documentation. (string value)
+# The name of a logging configuration file. This file is appended to any
+# existing logging configuration files. For details about logging configuration
+# files, see the Python logging module documentation. (string value)
# Deprecated group/name - [DEFAULT]/log_config
-#log_config_append=<None>
+#log_config_append = <None>
-# DEPRECATED. A logging.Formatter log message format string
-# which may use any of the available logging.LogRecord
-# attributes. This option is deprecated. Please use
-# logging_context_format_string and
-# logging_default_format_string instead. (string value)
-#log_format=<None>
+# DEPRECATED. A logging.Formatter log message format string which may use any
+# of the available logging.LogRecord attributes. This option is deprecated.
+# Please use logging_context_format_string and logging_default_format_string
+# instead. (string value)
+#log_format = <None>
-# Format string for %%(asctime)s in log records. Default:
-# %(default)s . (string value)
-#log_date_format=%Y-%m-%d %H:%M:%S
+# Format string for %%(asctime)s in log records. Default: %(default)s . (string
+# value)
+#log_date_format = %Y-%m-%d %H:%M:%S
-# (Optional) Name of log file to output to. If no default is
-# set, logging will go to stdout. (string value)
+# (Optional) Name of log file to output to. If no default is set, logging will
+# go to stdout. (string value)
# Deprecated group/name - [DEFAULT]/logfile
-#log_file=<None>
+#log_file = <None>
-# (Optional) The base directory used for relative --log-file
-# paths. (string value)
+# (Optional) The base directory used for relative --log-file paths. (string
+# value)
# Deprecated group/name - [DEFAULT]/logdir
-#log_dir=<None>
+#log_dir = <None>
-# Use syslog for logging. Existing syslog format is DEPRECATED
-# during I, and will change in J to honor RFC5424. (boolean
-# value)
-use_syslog=True
+# Use syslog for logging. Existing syslog format is DEPRECATED during I, and
+# will change in J to honor RFC5424. (boolean value)
+use_syslog = True
-# (Optional) Enables or disables syslog rfc5424 format for
-# logging. If enabled, prefixes the MSG part of the syslog
-# message with APP-NAME (RFC5424). The format without the APP-
-# NAME is deprecated in I, and will be removed in J. (boolean
-# value)
-#use_syslog_rfc_format=false
+# (Optional) Enables or disables syslog rfc5424 format for logging. If enabled,
+# prefixes the MSG part of the syslog message with APP-NAME (RFC5424). The
+# format without the APP-NAME is deprecated in I, and will be removed in J.
+# (boolean value)
+#use_syslog_rfc_format = false
# Syslog facility to receive log lines. (string value)
-#syslog_log_facility=LOG_USER
+#syslog_log_facility = LOG_USER
+# Log output to standard error. (boolean value)
+#use_stderr = true
-#
-# Options defined in nova.openstack.common.memorycache
-#
+# Format string to use for log messages with context. (string value)
+#logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
-# Memcached servers or None for in process cache. (list value)
-#memcached_servers=<None>
+# Format string to use for log messages without context. (string value)
+#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
+# Data to append to log format when level is DEBUG. (string value)
+#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
-#
-# Options defined in nova.openstack.common.periodic_task
-#
+# Prefix each line of exception output with this format. (string value)
+#logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d TRACE %(name)s %(instance)s
-# Some periodic tasks can be run in a separate process. Should
-# we run them here? (boolean value)
-#run_external_periodic_tasks=true
+# List of logger=LEVEL pairs. (list value)
+#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN
+# Enables or disables publication of error events. (boolean value)
+#publish_errors = false
-#
-# Options defined in nova.openstack.common.policy
-#
+# Enables or disables fatal status of deprecations. (boolean value)
+#fatal_deprecations = false
-# The JSON file that defines policies. (string value)
-#policy_file=policy.json
+# The format for an instance that is passed with the log message. (string
+# value)
+#instance_format = "[instance: %(uuid)s] "
-# Default rule. Enforced when a requested rule is not found.
-# (string value)
-#policy_default_rule=default
+# The format for an instance UUID that is passed with the log message. (string
+# value)
+#instance_uuid_format = "[instance: %(uuid)s] "
#
-# Options defined in nova.pci.pci_request
+# Options defined in nova.pci.request
#
# An alias for a PCI passthrough device requirement. This
@@ -1613,7 +1460,7 @@ use_syslog=True
#
-# Options defined in nova.pci.pci_whitelist
+# Options defined in nova.pci.whitelist
#
# White list of PCI devices available to VMs. For example:
@@ -1728,8 +1575,8 @@ ram_allocation_ratio={{ RAM_ALLOCATION_RATIO }}
# Filter classes available to the scheduler which may be
# specified more than once. An entry of
-# "nova.scheduler.filters.standard_filters" maps to all
-# filters included with nova. (multi valued)
+# "nova.scheduler.filters.all_filters" maps to all filters
+# included with nova. (multi valued)
#scheduler_available_filters=nova.scheduler.filters.all_filters
# Which filter class names to use for filtering hosts when not
@@ -1740,6 +1587,10 @@ scheduler_default_filters=RetryFilter,AvailabilityZoneFilter,RamFilter,ComputeFi
# value)
#scheduler_weight_classes=nova.scheduler.weights.all_weighers
+# Determines if the Scheduler tracks changes to instances to
+# help with its filtering decisions. (boolean value)
+#scheduler_tracks_instance_changes=true
+
#
# Options defined in nova.scheduler.ironic_host_manager
@@ -1796,6 +1647,16 @@ scheduler_driver=nova.scheduler.filter_scheduler.FilterScheduler
#
+# Options defined in nova.scheduler.weights.io_ops
+#
+
+# Multiplier used for weighing host io ops. Negative numbers
+# mean a preference to choose light workload compute hosts.
+# (floating point value)
+#io_ops_weight_multiplier=-1.0
+
+
+#
# Options defined in nova.scheduler.weights.ram
#
@@ -1821,12 +1682,9 @@ scheduler_driver=nova.scheduler.filter_scheduler.FilterScheduler
# (string value)
#config_drive_format=iso9660
-# DEPRECATED (not needed any more): Where to put temporary
-# files associated with config drive creation (string value)
-#config_drive_tempdir=<None>
-
-# Set to force injection to take place on a config drive (if
-# set, valid options are: always) (string value)
+# Set to "always" to force injection to take place on a config
+# drive. NOTE: The "always" will be deprecated in the Liberty
+# release cycle. (string value)
#force_config_drive=<None>
# Name and optionally path of the tool used for ISO image
@@ -1919,9 +1777,8 @@ firewall_driver=nova.virt.firewall.NoopFirewallDriver
#
# Number of seconds to wait between runs of the image cache
-# manager. Set to -1 to disable. Setting this to 0 will
-# disable, but this will change in the K release to mean "run
-# at the default rate". (integer value)
+# manager. Set to -1 to disable. Setting this to 0 will run at
+# the default rate. (integer value)
#image_cache_manager_interval=2400
# Where cached images are stored under $instances_path. This
@@ -2000,169 +1857,140 @@ vnc_keymap=en-us
#volume_api_class=nova.volume.cinder.API
-[baremetal]
-
#
-# Options defined in nova.virt.baremetal.db.api
+# Options defined in nova.openstack.common.eventlet_backdoor
#
-# The backend to use for bare-metal database (string value)
-#db_backend=sqlalchemy
+# Enable eventlet backdoor. Acceptable values are 0, <port>,
+# and <start>:<end>, where 0 results in listening on a random
+# tcp port number; <port> results in listening on the
+# specified port number (and not enabling backdoor if that
+# port is in use); and <start>:<end> results in listening on
+# the smallest unused port number within the specified range
+# of port numbers. The chosen port is displayed in the
+# service's log file. (string value)
+#backdoor_port=<None>
#
-# Options defined in nova.virt.baremetal.db.sqlalchemy.session
+# Options defined in nova.openstack.common.memorycache
#
-# The SQLAlchemy connection string used to connect to the
-# bare-metal database (string value)
-#sql_connection=sqlite:///$state_path/baremetal_nova.sqlite
+# Memcached servers or None for in process cache. (list value)
+#memcached_servers=<None>
#
-# Options defined in nova.virt.baremetal.driver
+# Options defined in nova.openstack.common.periodic_task
#
-# Baremetal VIF driver. (string value)
-#vif_driver=nova.virt.baremetal.vif_driver.BareMetalVIFDriver
-
-# Baremetal volume driver. (string value)
-#volume_driver=nova.virt.baremetal.volume_driver.LibvirtVolumeDriver
-
-# A list of additional capabilities corresponding to
-# flavor_extra_specs for this compute host to advertise. Valid
-# entries are name=value, pairs For example, "key1:val1,
-# key2:val2" (list value)
-#flavor_extra_specs=
-
-# Baremetal driver back-end (pxe or tilera) (string value)
-#driver=nova.virt.baremetal.pxe.PXE
-
-# Baremetal power management method (string value)
-#power_manager=nova.virt.baremetal.ipmi.IPMI
-
-# Baremetal compute node's tftp root path (string value)
-#tftp_root=/tftpboot
+# Some periodic tasks can be run in a separate process. Should
+# we run them here? (boolean value)
+#run_external_periodic_tasks=true
#
-# Options defined in nova.virt.baremetal.ipmi
+# Options defined in nova.openstack.common.policy
#
-# Path to baremetal terminal program (string value)
-#terminal=shellinaboxd
-
-# Path to baremetal terminal SSL cert(PEM) (string value)
-#terminal_cert_dir=<None>
+# The JSON file that defines policies. (string value)
+#policy_file=policy.json
-# Path to directory stores pidfiles of baremetal_terminal
+# Default rule. Enforced when a requested rule is not found.
# (string value)
-#terminal_pid_dir=$state_path/baremetal/console
+#policy_default_rule=default
-# Maximal number of retries for IPMI operations (integer
-# value)
-#ipmi_power_retry=10
+# Directories where policy configuration files are stored.
+# They can be relative to any directory in the search path
+# defined by the config_dir option, or absolute paths. The
+# file defined by policy_file must exist for these directories
+# to be searched. Missing or empty directories are ignored.
+# (multi valued)
+#policy_dirs=policy.d
#
-# Options defined in nova.virt.baremetal.pxe
+# Options defined in nova.openstack.common.versionutils
#
-# Default kernel image ID used in deployment phase (string
+# Enables or disables fatal status of deprecations. (boolean
# value)
-#deploy_kernel=<None>
+#fatal_deprecations=false
-# Default ramdisk image ID used in deployment phase (string
-# value)
-#deploy_ramdisk=<None>
-# Template file for injected network config (string value)
-#net_config_template=$pybasedir/nova/virt/baremetal/net-dhcp.ubuntu.template
+[api_database]
-# Additional append parameters for baremetal PXE boot (string
-# value)
-#pxe_append_params=nofb nomodeset vga=normal
+#
+# Options defined in nova.db.sqlalchemy.api
+#
-# Template file for PXE configuration (string value)
-#pxe_config_template=$pybasedir/nova/virt/baremetal/pxe_config.template
+# The SQLAlchemy connection string to use to connect to the
+# Nova API database. (string value)
+connection=postgresql://{{ NOVA_DB_USER }}:{{ NOVA_DB_PASSWORD }}@{{ CONTROLLER_HOST_ADDRESS }}/nova
-# If True, enable file injection for network info, files and
-# admin password (boolean value)
-#use_file_injection=false
+# If True, SQLite uses synchronous mode. (boolean value)
+#sqlite_synchronous=true
-# Timeout for PXE deployments. Default: 0 (unlimited) (integer
+# Timeout before idle SQL connections are reaped. (integer
# value)
-#pxe_deploy_timeout=0
-
-# If set, pass the network configuration details to the
-# initramfs via cmdline. (boolean value)
-#pxe_network_config=false
-
-# This gets passed to Neutron as the bootfile dhcp parameter.
-# (string value)
-#pxe_bootfile_name=pxelinux.0
+#idle_timeout=3600
+# Maximum number of SQL connections to keep open in a pool.
+# (integer value)
+#max_pool_size=<None>
-#
-# Options defined in nova.virt.baremetal.tilera_pdu
-#
+# Maximum number of database connection retries during
+# startup. Set to -1 to specify an infinite retry count.
+# (integer value)
+#max_retries=10
-# IP address of tilera pdu (string value)
-#tile_pdu_ip=10.0.100.1
+# Interval between retries of opening a SQL connection.
+# (integer value)
+#retry_interval=10
-# Management script for tilera pdu (string value)
-#tile_pdu_mgr=/tftpboot/pdu_mgr
+# If set, use this value for max_overflow with SQLAlchemy.
+# (integer value)
+#max_overflow=<None>
-# Power status of tilera PDU is OFF (integer value)
-#tile_pdu_off=2
+# Verbosity of SQL debugging information: 0=None,
+# 100=Everything. (integer value)
+#connection_debug=0
-# Power status of tilera PDU is ON (integer value)
-#tile_pdu_on=1
+# Add Python stack traces to SQL as comment strings. (boolean
+# value)
+#connection_trace=false
-# Power status of tilera PDU (integer value)
-#tile_pdu_status=9
+# If set, use this value for pool_timeout with SQLAlchemy.
+# (integer value)
+#pool_timeout=<None>
-# Wait time in seconds until check the result after tilera
-# power operations (integer value)
-#tile_power_wait=9
+[barbican]
#
-# Options defined in nova.virt.baremetal.virtual_power_driver
+# Options defined in nova.keymgr.barbican
#
-# IP or name to virtual power host (string value)
-#virtual_power_ssh_host=
-
-# Port to use for ssh to virtual power host (integer value)
-#virtual_power_ssh_port=22
-
-# Base command to use for virtual power(vbox, virsh) (string
-# value)
-#virtual_power_type=virsh
-
-# User to execute virtual power commands as (string value)
-#virtual_power_host_user=
+# Info to match when looking for barbican in the service
+# catalog. Format is: separated values of the form:
+# <service_type>:<service_name>:<endpoint_type> (string value)
+#catalog_info=key-manager:barbican:public
-# Password for virtual power host_user (string value)
-#virtual_power_host_pass=
+# Override service catalog lookup with template for barbican
+# endpoint e.g. http://localhost:9311/v1/%(project_id)s
+# (string value)
+#endpoint_template=<None>
-# The ssh key for virtual power host_user (string value)
-#virtual_power_host_key=<None>
+# Region name of this node (string value)
+#os_region_name=<None>
#
-# Options defined in nova.virt.baremetal.volume_driver
+# Options defined in nova.volume.cinder
#
-# Do not set this out of dev/test environments. If a node does
-# not have a fixed PXE IP address, volumes are exported with
-# globally opened ACL (boolean value)
-#use_unsafe_iscsi=false
-
-# The iSCSI IQN prefix used in baremetal volume connections.
-# (string value)
-#iscsi_iqn_prefix=iqn.2010-10.org.openstack.baremetal
+# Region name of this node (string value)
+#os_region_name=<None>
[cells]
@@ -2321,41 +2149,19 @@ vnc_keymap=en-us
# Info to match when looking for cinder in the service
# catalog. Format is: separated values of the form:
# <service_type>:<service_name>:<endpoint_type> (string value)
-# Deprecated group/name - [DEFAULT]/cinder_catalog_info
-#catalog_info=volume:cinder:publicURL
+#catalog_info=volumev2:cinderv2:publicURL
# Override service catalog lookup with template for cinder
# endpoint e.g. http://localhost:8776/v1/%(project_id)s
# (string value)
-# Deprecated group/name - [DEFAULT]/cinder_endpoint_template
#endpoint_template=<None>
-# Region name of this node (string value)
-# Deprecated group/name - [DEFAULT]/os_region_name
-#os_region_name=<None>
-
-# Location of ca certificates file to use for cinder client
-# requests. (string value)
-# Deprecated group/name - [DEFAULT]/cinder_ca_certificates_file
-#ca_certificates_file=<None>
-
# Number of cinderclient retries on failed http calls (integer
# value)
-# Deprecated group/name - [DEFAULT]/cinder_http_retries
#http_retries=3
-# HTTP inactivity timeout (in seconds) (integer value)
-# Deprecated group/name - [DEFAULT]/cinder_http_timeout
-#http_timeout=<None>
-
-# Allow to perform insecure SSL requests to cinder (boolean
-# value)
-# Deprecated group/name - [DEFAULT]/cinder_api_insecure
-#api_insecure=false
-
# Allow attach between instance and volume in different
# availability zones. (boolean value)
-# Deprecated group/name - [DEFAULT]/cinder_cross_az_attach
#cross_az_attach=true
@@ -2380,6 +2186,122 @@ use_local=true
#workers=<None>
+[database]
+
+#
+# From oslo.db
+#
+
+# The file name to use with SQLite. (string value)
+# Deprecated group/name - [DEFAULT]/sqlite_db
+#sqlite_db = oslo.sqlite
+
+# If True, SQLite uses synchronous mode. (boolean value)
+# Deprecated group/name - [DEFAULT]/sqlite_synchronous
+#sqlite_synchronous = true
+
+# The back end to use for the database. (string value)
+# Deprecated group/name - [DEFAULT]/db_backend
+#backend = sqlalchemy
+
+# The SQLAlchemy connection string to use to connect to the database. (string
+# value)
+# Deprecated group/name - [DEFAULT]/sql_connection
+# Deprecated group/name - [DATABASE]/sql_connection
+# Deprecated group/name - [sql]/connection
+#connection = <None>
+
+# The SQLAlchemy connection string to use to connect to the slave database.
+# (string value)
+#slave_connection = <None>
+
+# The SQL mode to be used for MySQL sessions. This option, including the
+# default, overrides any server-set SQL mode. To use whatever SQL mode is set
+# by the server configuration, set this to no value. Example: mysql_sql_mode=
+# (string value)
+#mysql_sql_mode = TRADITIONAL
+
+# Timeout before idle SQL connections are reaped. (integer value)
+# Deprecated group/name - [DEFAULT]/sql_idle_timeout
+# Deprecated group/name - [DATABASE]/sql_idle_timeout
+# Deprecated group/name - [sql]/idle_timeout
+#idle_timeout = 3600
+
+# Minimum number of SQL connections to keep open in a pool. (integer value)
+# Deprecated group/name - [DEFAULT]/sql_min_pool_size
+# Deprecated group/name - [DATABASE]/sql_min_pool_size
+#min_pool_size = 1
+
+# Maximum number of SQL connections to keep open in a pool. (integer value)
+# Deprecated group/name - [DEFAULT]/sql_max_pool_size
+# Deprecated group/name - [DATABASE]/sql_max_pool_size
+#max_pool_size = <None>
+
+# Maximum number of database connection retries during startup. Set to -1 to
+# specify an infinite retry count. (integer value)
+# Deprecated group/name - [DEFAULT]/sql_max_retries
+# Deprecated group/name - [DATABASE]/sql_max_retries
+#max_retries = 10
+
+# Interval between retries of opening a SQL connection. (integer value)
+# Deprecated group/name - [DEFAULT]/sql_retry_interval
+# Deprecated group/name - [DATABASE]/reconnect_interval
+#retry_interval = 10
+
+# If set, use this value for max_overflow with SQLAlchemy. (integer value)
+# Deprecated group/name - [DEFAULT]/sql_max_overflow
+# Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
+#max_overflow = <None>
+
+# Verbosity of SQL debugging information: 0=None, 100=Everything. (integer
+# value)
+# Deprecated group/name - [DEFAULT]/sql_connection_debug
+#connection_debug = 0
+
+# Add Python stack traces to SQL as comment strings. (boolean value)
+# Deprecated group/name - [DEFAULT]/sql_connection_trace
+#connection_trace = false
+
+# If set, use this value for pool_timeout with SQLAlchemy. (integer value)
+# Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
+#pool_timeout = <None>
+
+# Enable the experimental use of database reconnect on connection lost.
+# (boolean value)
+#use_db_reconnect = false
+
+# Seconds between retries of a database transaction. (integer value)
+#db_retry_interval = 1
+
+# If True, increases the interval between retries of a database operation up to
+# db_max_retry_interval. (boolean value)
+#db_inc_retry_interval = true
+
+# If db_inc_retry_interval is set, the maximum seconds between retries of a
+# database operation. (integer value)
+#db_max_retry_interval = 10
+
+# Maximum retries in case of connection error or deadlock error before error is
+# raised. Set to -1 to specify an infinite retry count. (integer value)
+#db_max_retries = 20
+
+
+#
+# Options defined in nova.db.sqlalchemy.api
+#
+
+# The SQLAlchemy connection string to use to connect to the
+# slave database. (string value)
+#slave_connection=<None>
+
+# The SQL mode to be used for MySQL sessions. This option,
+# including the default, overrides any server-set SQL mode. To
+# use whatever SQL mode is set by the server configuration,
+# set this to no value. Example: mysql_sql_mode= (string
+# value)
+#mysql_sql_mode=TRADITIONAL
+
+
[ephemeral_storage_encryption]
#
@@ -2408,32 +2330,26 @@ use_local=true
#
# Default glance hostname or IP address (string value)
-# Deprecated group/name - [DEFAULT]/glance_host
host={{ CONTROLLER_HOST_ADDRESS }}
# Default glance port (integer value)
-# Deprecated group/name - [DEFAULT]/glance_port
port=9292
# Default protocol to use when connecting to glance. Set to
# https for SSL. (string value)
-# Deprecated group/name - [DEFAULT]/glance_protocol
protocol=http
# A list of the glance api servers available to nova. Prefix
# with https:// for ssl-based glance api servers.
# ([hostname|ip]:port) (list value)
-# Deprecated group/name - [DEFAULT]/glance_api_servers
api_servers=$host:$port
# Allow to perform insecure SSL (https) requests to glance
# (boolean value)
-# Deprecated group/name - [DEFAULT]/glance_api_insecure
#api_insecure=false
-# Number of retries when downloading an image from glance
-# (integer value)
-# Deprecated group/name - [DEFAULT]/glance_num_retries
+# Number of retries when uploading / downloading an image to /
+# from glance. (integer value)
#num_retries=0
# A list of url scheme that can be downloaded directly via the
@@ -2442,6 +2358,16 @@ api_servers=$host:$port
#allowed_direct_url_schemes=
+[guestfs]
+
+#
+# Options defined in nova.virt.disk.vfs.guestfs
+#
+
+# Enable guestfs debug (boolean value)
+#debug=false
+
+
[hyperv]
#
@@ -2575,7 +2501,8 @@ admin_url=http://{{ CONTROLLER_HOST_ADDRESS }}:35357/v2.0
# Log level override for ironicclient. Set this in order to
# override the global "default_log_levels", "verbose", and
-# "debug" settings. (string value)
+# "debug" settings. DEPRECATED: use standard logging
+# configuration. (string value)
#client_log_level=<None>
# Ironic keystone tenant name. (string value)
@@ -2613,182 +2540,161 @@ admin_tenant_name=service
[keystone_authtoken]
#
-# Options defined in keystonemiddleware.auth_token
+# From keystonemiddleware.auth_token
#
-# Prefix to prepend at the beginning of the path. Deprecated,
-# use identity_uri. (string value)
-#auth_admin_prefix=
-
-# Host providing the admin Identity API endpoint. Deprecated,
-# use identity_uri. (string value)
-#auth_host=127.0.0.1
+# Complete public Identity API endpoint. (string value)
+auth_uri = http://{{ CONTROLLER_HOST_ADDRESS }}:5000/v2.0
-# Port of the admin Identity API endpoint. Deprecated, use
-# identity_uri. (integer value)
-auth_port=35357
+# API version of the admin Identity API endpoint. (string value)
+auth_version = v2.0
-# Protocol of the admin Identity API endpoint (http or https).
-# Deprecated, use identity_uri. (string value)
-auth_protocol=http
+# Do not handle authorization requests within the middleware, but delegate the
+# authorization decision to downstream WSGI components. (boolean value)
+#delay_auth_decision = false
-# Complete public Identity API endpoint (string value)
-auth_uri=http://{{ CONTROLLER_HOST_ADDRESS }}:5000/v2.0
-
-# Complete admin Identity API endpoint. This should specify
-# the unversioned root endpoint e.g. https://localhost:35357/
-# (string value)
-identity_uri=http://{{ CONTROLLER_HOST_ADDRESS }}:35357
-
-# API version of the admin Identity API endpoint (string
+# Request timeout value for communicating with Identity API server. (integer
# value)
-auth_version=v2.0
-
-# Do not handle authorization requests within the middleware,
-# but delegate the authorization decision to downstream WSGI
-# components (boolean value)
-#delay_auth_decision=false
+#http_connect_timeout = <None>
-# Request timeout value for communicating with Identity API
-# server. (boolean value)
-#http_connect_timeout=<None>
+# How many times are we trying to reconnect when communicating with Identity
+# API Server. (integer value)
+#http_request_max_retries = 3
-# How many times are we trying to reconnect when communicating
-# with Identity API Server. (integer value)
-#http_request_max_retries=3
+# Env key for the swift cache. (string value)
+#cache = <None>
-# This option is deprecated and may be removed in a future
-# release. Single shared secret with the Keystone
-# configuration used for bootstrapping a Keystone
-# installation, or otherwise bypassing the normal
-# authentication process. This option should not be used, use
-# `admin_user` and `admin_password` instead. (string value)
-#admin_token=<None>
+# Required if identity server requires client certificate (string value)
+#certfile = <None>
-# Keystone account username (string value)
-admin_user={{ NOVA_SERVICE_USER }}
-
-# Keystone account password (string value)
-admin_password={{ NOVA_SERVICE_PASSWORD }}
-
-# Keystone service account tenant name to validate user tokens
-# (string value)
-admin_tenant_name=service
+# Required if identity server requires client certificate (string value)
+#keyfile = <None>
-# Env key for the swift cache (string value)
-#cache=<None>
-
-# Required if Keystone server requires client certificate
-# (string value)
-#certfile=<None>
-
-# Required if Keystone server requires client certificate
-# (string value)
-#keyfile=<None>
-
-# A PEM encoded Certificate Authority to use when verifying
-# HTTPs connections. Defaults to system CAs. (string value)
-#cafile=<None>
+# A PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# Defaults to system CAs. (string value)
+#cafile = <None>
# Verify HTTPS connections. (boolean value)
-#insecure=false
+#insecure = false
-# Directory used to cache files related to PKI tokens (string
-# value)
-#signing_dir=<None>
+# Directory used to cache files related to PKI tokens. (string value)
+#signing_dir = <None>
-# Optionally specify a list of memcached server(s) to use for
-# caching. If left undefined, tokens will instead be cached
-# in-process. (list value)
+# Optionally specify a list of memcached server(s) to use for caching. If left
+# undefined, tokens will instead be cached in-process. (list value)
# Deprecated group/name - [DEFAULT]/memcache_servers
-#memcached_servers=<None>
+#memcached_servers = <None>
-# In order to prevent excessive effort spent validating
-# tokens, the middleware caches previously-seen tokens for a
-# configurable duration (in seconds). Set to -1 to disable
-# caching completely. (integer value)
-#token_cache_time=300
+# In order to prevent excessive effort spent validating tokens, the middleware
+# caches previously-seen tokens for a configurable duration (in seconds). Set
+# to -1 to disable caching completely. (integer value)
+#token_cache_time = 300
-# Determines the frequency at which the list of revoked tokens
-# is retrieved from the Identity service (in seconds). A high
-# number of revocation events combined with a low cache
-# duration may significantly reduce performance. (integer
-# value)
-#revocation_cache_time=10
+# Determines the frequency at which the list of revoked tokens is retrieved
+# from the Identity service (in seconds). A high number of revocation events
+# combined with a low cache duration may significantly reduce performance.
+# (integer value)
+#revocation_cache_time = 10
-# (optional) if defined, indicate whether token data should be
-# authenticated or authenticated and encrypted. Acceptable
-# values are MAC or ENCRYPT. If MAC, token data is
-# authenticated (with HMAC) in the cache. If ENCRYPT, token
-# data is encrypted and authenticated in the cache. If the
-# value is not one of these options or empty, auth_token will
-# raise an exception on initialization. (string value)
-#memcache_security_strategy=<None>
+# (Optional) If defined, indicate whether token data should be authenticated or
+# authenticated and encrypted. Acceptable values are MAC or ENCRYPT. If MAC,
+# token data is authenticated (with HMAC) in the cache. If ENCRYPT, token data
+# is encrypted and authenticated in the cache. If the value is not one of these
+# options or empty, auth_token will raise an exception on initialization.
+# (string value)
+#memcache_security_strategy = <None>
+
+# (Optional, mandatory if memcache_security_strategy is defined) This string is
+# used for key derivation. (string value)
+#memcache_secret_key = <None>
+
+# (Optional) Number of seconds memcached server is considered dead before it is
+# tried again. (integer value)
+#memcache_pool_dead_retry = 300
+
+# (Optional) Maximum total number of open connections to every memcached
+# server. (integer value)
+#memcache_pool_maxsize = 10
+
+# (Optional) Socket timeout in seconds for communicating with a memcache
+# server. (integer value)
+#memcache_pool_socket_timeout = 3
+
+# (Optional) Number of seconds a connection to memcached is held unused in the
+# pool before it is closed. (integer value)
+#memcache_pool_unused_timeout = 60
+
+# (Optional) Number of seconds that an operation will wait to get a memcache
+# client connection from the pool. (integer value)
+#memcache_pool_conn_get_timeout = 10
+
+# (Optional) Use the advanced (eventlet safe) memcache client pool. The
+# advanced pool will only work under python 2.x. (boolean value)
+#memcache_use_advanced_pool = false
+
+# (Optional) Indicate whether to set the X-Service-Catalog header. If False,
+# middleware will not ask for service catalog on token validation and will not
+# set the X-Service-Catalog header. (boolean value)
+#include_service_catalog = true
+
+# Used to control the use and type of token binding. Can be set to: "disabled"
+# to not check token binding. "permissive" (default) to validate binding
+# information if the bind type is of a form known to the server and ignore it
+# if not. "strict" like "permissive" but if the bind type is unknown the token
+# will be rejected. "required" any form of token binding is needed to be
+# allowed. Finally the name of a binding method that must be present in tokens.
+# (string value)
+#enforce_token_bind = permissive
+
+# If true, the revocation list will be checked for cached tokens. This requires
+# that PKI tokens are configured on the identity server. (boolean value)
+#check_revocations_for_cached = false
+
+# Hash algorithms to use for hashing PKI tokens. This may be a single algorithm
+# or multiple. The algorithms are those supported by Python standard
+# hashlib.new(). The hashes will be tried in the order given, so put the
+# preferred one first for performance. The result of the first hash will be
+# stored in the cache. This will typically be set to multiple values only while
+# migrating from a less secure algorithm to a more secure one. Once all the old
+# tokens are expired this option should be set to a single value for better
+# performance. (list value)
+#hash_algorithms = md5
+
+# Prefix to prepend at the beginning of the path. Deprecated, use identity_uri.
+# (string value)
+#auth_admin_prefix =
-# (optional, mandatory if memcache_security_strategy is
-# defined) this string is used for key derivation. (string
-# value)
-#memcache_secret_key=<None>
+# Host providing the admin Identity API endpoint. Deprecated, use identity_uri.
+# (string value)
+#auth_host = 127.0.0.1
+
+# Port of the admin Identity API endpoint. Deprecated, use identity_uri.
+# (integer value)
+#auth_port = 35357
-# (optional) number of seconds memcached server is considered
-# dead before it is tried again. (integer value)
-#memcache_pool_dead_retry=300
+# Protocol of the admin Identity API endpoint (http or https). Deprecated, use
+# identity_uri. (string value)
+#auth_protocol = https
-# (optional) max total number of open connections to every
-# memcached server. (integer value)
-#memcache_pool_maxsize=10
+# Complete admin Identity API endpoint. This should specify the unversioned
+# root endpoint e.g. https://localhost:35357/ (string value)
+identity_uri = http://{{ CONTROLLER_HOST_ADDRESS }}:35357
-# (optional) socket timeout in seconds for communicating with
-# a memcache server. (integer value)
-#memcache_pool_socket_timeout=3
+# This option is deprecated and may be removed in a future release. Single
+# shared secret with the Keystone configuration used for bootstrapping a
+# Keystone installation, or otherwise bypassing the normal authentication
+# process. This option should not be used, use `admin_user` and
+# `admin_password` instead. (string value)
+#admin_token = <None>
-# (optional) number of seconds a connection to memcached is
-# held unused in the pool before it is closed. (integer value)
-#memcache_pool_unused_timeout=60
+# Service username. (string value)
+admin_user = {{ NOVA_SERVICE_USER }}
-# (optional) number of seconds that an operation will wait to
-# get a memcache client connection from the pool. (integer
-# value)
-#memcache_pool_conn_get_timeout=10
+# Service user password. (string value)
+admin_password = {{ NOVA_SERVICE_PASSWORD }}
-# (optional) use the advanced (eventlet safe) memcache client
-# pool. The advanced pool will only work under python 2.x.
-# (boolean value)
-#memcache_use_advanced_pool=false
-
-# (optional) indicate whether to set the X-Service-Catalog
-# header. If False, middleware will not ask for service
-# catalog on token validation and will not set the X-Service-
-# Catalog header. (boolean value)
-#include_service_catalog=true
-
-# Used to control the use and type of token binding. Can be
-# set to: "disabled" to not check token binding. "permissive"
-# (default) to validate binding information if the bind type
-# is of a form known to the server and ignore it if not.
-# "strict" like "permissive" but if the bind type is unknown
-# the token will be rejected. "required" any form of token
-# binding is needed to be allowed. Finally the name of a
-# binding method that must be present in tokens. (string
-# value)
-#enforce_token_bind=permissive
-
-# If true, the revocation list will be checked for cached
-# tokens. This requires that PKI tokens are configured on the
-# Keystone server. (boolean value)
-#check_revocations_for_cached=false
-
-# Hash algorithms to use for hashing PKI tokens. This may be a
-# single algorithm or multiple. The algorithms are those
-# supported by Python standard hashlib.new(). The hashes will
-# be tried in the order given, so put the preferred one first
-# for performance. The result of the first hash will be stored
-# in the cache. This will typically be set to multiple values
-# only while migrating from a less secure algorithm to a more
-# secure one. Once all the old tokens are expired this option
-# should be set to a single value for better performance.
-# (list value)
-#hash_algorithms=md5
+# Service tenant name. (string value)
+admin_tenant_name = service
[libvirt]
@@ -2808,7 +2714,7 @@ admin_tenant_name=service
#rescue_ramdisk_id=<None>
# Libvirt domain type (valid options are: kvm, lxc, qemu, uml,
-# xen) (string value)
+# xen and parallels) (string value)
virt_type={{ NOVA_VIRT_TYPE }}
# Override the default libvirt URI (which is dependent on
@@ -2849,11 +2755,6 @@ virt_type={{ NOVA_VIRT_TYPE }}
# vdi). Defaults to same as source image (string value)
#snapshot_image_format=<None>
-# DEPRECATED. Libvirt handlers for remote volumes. This option
-# is deprecated and will be removed in the Kilo release. (list
-# value)
-#volume_drivers=iscsi=nova.virt.libvirt.volume.LibvirtISCSIVolumeDriver,iser=nova.virt.libvirt.volume.LibvirtISERVolumeDriver,local=nova.virt.libvirt.volume.LibvirtVolumeDriver,fake=nova.virt.libvirt.volume.LibvirtFakeVolumeDriver,rbd=nova.virt.libvirt.volume.LibvirtNetVolumeDriver,sheepdog=nova.virt.libvirt.volume.LibvirtNetVolumeDriver,nfs=nova.virt.libvirt.volume.LibvirtNFSVolumeDriver,aoe=nova.virt.libvirt.volume.LibvirtAOEVolumeDriver,glusterfs=nova.virt.libvirt.volume.LibvirtGlusterfsVolumeDriver,fibre_channel=nova.virt.libvirt.volume.LibvirtFibreChannelVolumeDriver,scality=nova.virt.libvirt.volume.LibvirtScalityVolumeDriver
-
# Override the default disk prefix for the devices attached to
# a server, which is dependent on virt_type. (valid options
# are: sd, xvd, uvd, vd) (string value)
@@ -2939,14 +2840,6 @@ virt_type={{ NOVA_VIRT_TYPE }}
# flag is set to True. (boolean value)
#sparse_logical_volumes=false
-# Method used to wipe old volumes (valid options are: none,
-# zero, shred) (string value)
-#volume_clear=zero
-
-# Size in MiB to wipe at start of old volumes. 0 => all
-# (integer value)
-#volume_clear_size=0
-
# The RADOS pool in which rbd volumes are stored (string
# value)
#images_rbd_pool=rbd
@@ -2986,6 +2879,19 @@ virt_type={{ NOVA_VIRT_TYPE }}
#
+# Options defined in nova.virt.libvirt.lvm
+#
+
+# Method used to wipe old volumes (valid options are: none,
+# zero, shred) (string value)
+#volume_clear=zero
+
+# Size in MiB to wipe at start of old volumes. 0 => all
+# (integer value)
+#volume_clear_size=0
+
+
+#
# Options defined in nova.virt.libvirt.utils
#
@@ -3027,10 +2933,19 @@ virt_type={{ NOVA_VIRT_TYPE }}
# node (string value)
#nfs_mount_point_base=$state_path/mnt
-# Mount options passedf to the NFS client. See section of the
+# Mount options passed to the NFS client. See section of the
# nfs man page for details (string value)
#nfs_mount_options=<None>
+# Directory where the SMBFS shares are mounted on the compute
+# node (string value)
+#smbfs_mount_point_base=$state_path/mnt
+
+# Mount options passed to the SMBFS client. See mount.cifs man
+# page for details. Note that the libvirt-qemu uid and gid
+# must be specified. (string value)
+#smbfs_mount_options=
+
# Number of times to rediscover AoE target to find volume
# (integer value)
#num_aoe_discover_tries=3
@@ -3056,32 +2971,20 @@ virt_type={{ NOVA_VIRT_TYPE }}
# Currently supported protocols: [gluster] (list value)
#qemu_allowed_storage_drivers=
+# Directory where the Quobyte volume is mounted on the compute
+# node (string value)
+#quobyte_mount_point_base=$state_path/mnt
-[matchmaker_redis]
-
-#
-# Options defined in oslo.messaging
-#
-
-# Host to locate redis. (string value)
-#host=127.0.0.1
-
-# Use this port to connect to redis host. (integer value)
-#port=6379
-
-# Password for Redis server (optional). (string value)
-#password=<None>
-
-
-[matchmaker_ring]
-
-#
-# Options defined in oslo.messaging
-#
+# Path to a Quobyte Client configuration file. (string value)
+#quobyte_client_cfg=<None>
-# Matchmaker ring file (JSON). (string value)
-# Deprecated group/name - [DEFAULT]/matchmaker_ringfile
-#ringfile=/etc/oslo/matchmaker_ring.json
+# The iSCSI transport iface to use to connect to target in
+# case offload support is desired. Supported transports are
+# be2iscsi, bnx2i, cxgb3i, cxgb4i, qla4xxx and ocs. Default
+# format is transport_name.hwaddress and can be generated
+# manually or via iscsiadm -m iface (string value)
+# Deprecated group/name - [DEFAULT]/iscsi_transport
+#iscsi_iface=<None>
[metrics]
@@ -3125,12 +3028,10 @@ virt_type={{ NOVA_VIRT_TYPE }}
# Set flag to indicate Neutron will proxy metadata requests
# and resolve instance ids. (boolean value)
-# Deprecated group/name - [DEFAULT]/service_neutron_metadata_proxy
service_metadata_proxy=True
# Shared secret to validate proxies Neutron metadata requests
# (string value)
-# Deprecated group/name - [DEFAULT]/neutron_metadata_proxy_shared_secret
metadata_proxy_shared_secret={{ METADATA_PROXY_SHARED_SECRET }}
@@ -3139,76 +3040,64 @@ metadata_proxy_shared_secret={{ METADATA_PROXY_SHARED_SECRET }}
#
# URL for connecting to neutron (string value)
-# Deprecated group/name - [DEFAULT]/neutron_url
url=http://{{ CONTROLLER_HOST_ADDRESS }}:9696
-# Timeout value for connecting to neutron in seconds (integer
-# value)
-# Deprecated group/name - [DEFAULT]/neutron_url_timeout
-#url_timeout=30
-
-# User id for connecting to neutron in admin context (string
-# value)
+# User id for connecting to neutron in admin context.
+# DEPRECATED: specify an auth_plugin and appropriate
+# credentials instead. (string value)
#admin_user_id=<None>
-# Username for connecting to neutron in admin context (string
-# value)
-# Deprecated group/name - [DEFAULT]/neutron_admin_username
+# Username for connecting to neutron in admin context
+# DEPRECATED: specify an auth_plugin and appropriate
+# credentials instead. (string value)
admin_username={{ NEUTRON_SERVICE_USER }}
-# Password for connecting to neutron in admin context (string
-# value)
-# Deprecated group/name - [DEFAULT]/neutron_admin_password
+# Password for connecting to neutron in admin context
+# DEPRECATED: specify an auth_plugin and appropriate
+# credentials instead. (string value)
admin_password={{ NEUTRON_SERVICE_PASSWORD }}
-# Tenant id for connecting to neutron in admin context (string
-# value)
-# Deprecated group/name - [DEFAULT]/neutron_admin_tenant_id
+# Tenant id for connecting to neutron in admin context
+# DEPRECATED: specify an auth_plugin and appropriate
+# credentials instead. (string value)
#admin_tenant_id=<None>
# Tenant name for connecting to neutron in admin context. This
# option will be ignored if neutron_admin_tenant_id is set.
# Note that with Keystone V3 tenant names are only unique
-# within a domain. (string value)
-# Deprecated group/name - [DEFAULT]/neutron_admin_tenant_name
+# within a domain. DEPRECATED: specify an auth_plugin and
+# appropriate credentials instead. (string value)
admin_tenant_name=service
# Region name for connecting to neutron in admin context
# (string value)
-# Deprecated group/name - [DEFAULT]/neutron_region_name
#region_name=<None>
-# Authorization URL for connecting to neutron in admin context
-# (string value)
-# Deprecated group/name - [DEFAULT]/neutron_admin_auth_url
+# Authorization URL for connecting to neutron in admin
+# context. DEPRECATED: specify an auth_plugin and appropriate
+# credentials instead. (string value)
admin_auth_url=http://{{ CONTROLLER_HOST_ADDRESS }}:35357/v2.0
-# If set, ignore any SSL validation issues (boolean value)
-# Deprecated group/name - [DEFAULT]/neutron_api_insecure
-#api_insecure=false
-
# Authorization strategy for connecting to neutron in admin
-# context (string value)
-# Deprecated group/name - [DEFAULT]/neutron_auth_strategy
+# context. DEPRECATED: specify an auth_plugin and appropriate
+# credentials instead. If an auth_plugin is specified strategy
+# will be ignored. (string value)
auth_strategy=keystone
# Name of Integration Bridge used by Open vSwitch (string
# value)
-# Deprecated group/name - [DEFAULT]/neutron_ovs_bridge
#ovs_bridge=br-int
# Number of seconds before querying neutron for extensions
# (integer value)
-# Deprecated group/name - [DEFAULT]/neutron_extension_sync_interval
#extension_sync_interval=600
-# Location of CA certificates file to use for neutron client
-# requests. (string value)
-# Deprecated group/name - [DEFAULT]/neutron_ca_certificates_file
-#ca_certificates_file=<None>
-
-# Allow an instance to have multiple vNICs attached to the
-# same Neutron network. (boolean value)
+# DEPRECATED: Allow an instance to have multiple vNICs
+# attached to the same Neutron network. This option is
+# deprecated in the 2015.1 release and will be removed in the
+# 2015.2 release where the default behavior will be to always
+# allow multiple ports from the same network to be attached to
+# an instance. (boolean value)
#allow_duplicate_networks=false
@@ -3289,12 +3178,10 @@ enabled=false
#
# Host on which to listen for incoming requests (string value)
-# Deprecated group/name - [DEFAULT]/spicehtml5proxy_host
#html5proxy_host=0.0.0.0
# Port on which to listen for incoming requests (integer
# value)
-# Deprecated group/name - [DEFAULT]/spicehtml5proxy_port
#html5proxy_port=6082
@@ -3473,6 +3360,20 @@ enabled=false
# Options defined in nova.virt.vmwareapi.driver
#
+# The PBM status. (boolean value)
+#pbm_enabled=false
+
+# PBM service WSDL file location URL. e.g.
+# file:///opt/SDK/spbm/wsdl/pbmService.wsdl Not setting this
+# will disable storage policy based placement of instances.
+# (string value)
+#pbm_wsdl_location=<None>
+
+# The PBM default policy. If pbm_wsdl_location is set and
+# there is no defined storage policy for the specific request
+# then this policy will be used. (string value)
+#pbm_default_policy=<None>
+
# Hostname or IP address for connection to VMware VC host.
# (string value)
#host_ip=<None>
@@ -3541,6 +3442,42 @@ enabled=false
#maximum_objects=100
+#
+# Options defined in nova.virt.vmwareapi.vmops
+#
+
+# The prefix for Where cached images are stored. This is NOT
+# the full path - just a folder prefix. This should only be
+# used when a datastore cache should be shared between compute
+# nodes. Note: this should only be used when the compute nodes
+# have a shared file system. (string value)
+#cache_prefix=<None>
+
+
+[workarounds]
+
+#
+# Options defined in nova.utils
+#
+
+# This option allows a fallback to sudo for performance
+# reasons. For example see
+# https://bugs.launchpad.net/nova/+bug/1415106 (boolean value)
+#disable_rootwrap=false
+
+# When using libvirt 1.2.2 fails live snapshots intermittently
+# under load. This config option provides mechanism to
+# disable livesnapshot while this is resolved. See
+# https://bugs.launchpad.net/nova/+bug/1334398 (boolean value)
+#disable_libvirt_livesnapshot=true
+
+# Whether to destroy instances on startup when we suspect they
+# have previously been evacuated. This can result in data loss
+# if undesired. See https://launchpad.net/bugs/1419785
+# (boolean value)
+#destroy_after_evacuate=true
+
+
[xenserver]
#
@@ -3736,7 +3673,8 @@ enabled=false
# rsynced (boolean value)
#sparse_copy=true
-# Maximum number of retries to unplug VBD (integer value)
+# Maximum number of retries to unplug VBD. if <=0, should try
+# once and no retry (integer value)
#num_vbd_unplug_retries=10
# Whether or not to download images via Bit Torrent
@@ -3802,8 +3740,268 @@ enabled=false
# (integer value)
#sg_retry_interval=5
-[database]
-# The SQLAlchemy connection string to use to connect to the
-# database. (string value)
-connection=postgresql://{{ NOVA_DB_USER }}:{{ NOVA_DB_PASSWORD }}@{{ CONTROLLER_HOST_ADDRESS }}/nova
+[matchmaker_redis]
+
+#
+# From oslo.messaging
+#
+
+# Host to locate redis. (string value)
+#host = 127.0.0.1
+
+# Use this port to connect to redis host. (integer value)
+#port = 6379
+
+# Password for Redis server (optional). (string value)
+#password = <None>
+
+
+[matchmaker_ring]
+
+#
+# From oslo.messaging
+#
+
+# Matchmaker ring file (JSON). (string value)
+# Deprecated group/name - [DEFAULT]/matchmaker_ringfile
+#ringfile = /etc/oslo/matchmaker_ring.json
+
+
+[oslo_concurrency]
+
+#
+# From oslo.concurrency
+#
+
+# Enables or disables inter-process locks. (boolean value)
+# Deprecated group/name - [DEFAULT]/disable_process_locking
+#disable_process_locking = false
+
+# Directory to use for lock files. For security, the specified directory
+# should only be writable by the user running the processes that need locking.
+# Defaults to environment variable OSLO_LOCK_PATH. If external locks are used,
+# a lock path must be set. (string value)
+# Deprecated group/name - [DEFAULT]/lock_path
+lock_path = /var/lock/nova
+
+
+[oslo_messaging_amqp]
+
+#
+# From oslo.messaging
+#
+
+# address prefix used when sending to a specific server (string value)
+# Deprecated group/name - [amqp1]/server_request_prefix
+#server_request_prefix = exclusive
+
+# address prefix used when broadcasting to all servers (string value)
+# Deprecated group/name - [amqp1]/broadcast_prefix
+#broadcast_prefix = broadcast
+
+# address prefix when sending to any server in group (string value)
+# Deprecated group/name - [amqp1]/group_request_prefix
+#group_request_prefix = unicast
+
+# Name for the AMQP container (string value)
+# Deprecated group/name - [amqp1]/container_name
+#container_name = <None>
+
+# Timeout for inactive connections (in seconds) (integer value)
+# Deprecated group/name - [amqp1]/idle_timeout
+#idle_timeout = 0
+
+# Debug: dump AMQP frames to stdout (boolean value)
+# Deprecated group/name - [amqp1]/trace
+#trace = false
+
+# CA certificate PEM file for verifing server certificate (string value)
+# Deprecated group/name - [amqp1]/ssl_ca_file
+#ssl_ca_file =
+
+# Identifying certificate PEM file to present to clients (string value)
+# Deprecated group/name - [amqp1]/ssl_cert_file
+#ssl_cert_file =
+
+# Private key PEM file used to sign cert_file certificate (string value)
+# Deprecated group/name - [amqp1]/ssl_key_file
+#ssl_key_file =
+
+# Password for decrypting ssl_key_file (if encrypted) (string value)
+# Deprecated group/name - [amqp1]/ssl_key_password
+#ssl_key_password = <None>
+
+# Accept clients using either SSL or plain TCP (boolean value)
+# Deprecated group/name - [amqp1]/allow_insecure_clients
+#allow_insecure_clients = false
+
+
+[oslo_messaging_qpid]
+
+#
+# From oslo.messaging
+#
+
+# Use durable queues in AMQP. (boolean value)
+# Deprecated group/name - [DEFAULT]/rabbit_durable_queues
+#amqp_durable_queues = false
+
+# Auto-delete queues in AMQP. (boolean value)
+# Deprecated group/name - [DEFAULT]/amqp_auto_delete
+#amqp_auto_delete = false
+
+# Size of RPC connection pool. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_conn_pool_size
+#rpc_conn_pool_size = 30
+
+# Qpid broker hostname. (string value)
+# Deprecated group/name - [DEFAULT]/qpid_hostname
+#qpid_hostname = localhost
+
+# Qpid broker port. (integer value)
+# Deprecated group/name - [DEFAULT]/qpid_port
+#qpid_port = 5672
+
+# Qpid HA cluster host:port pairs. (list value)
+# Deprecated group/name - [DEFAULT]/qpid_hosts
+#qpid_hosts = $qpid_hostname:$qpid_port
+
+# Username for Qpid connection. (string value)
+# Deprecated group/name - [DEFAULT]/qpid_username
+#qpid_username =
+
+# Password for Qpid connection. (string value)
+# Deprecated group/name - [DEFAULT]/qpid_password
+#qpid_password =
+
+# Space separated list of SASL mechanisms to use for auth. (string value)
+# Deprecated group/name - [DEFAULT]/qpid_sasl_mechanisms
+#qpid_sasl_mechanisms =
+
+# Seconds between connection keepalive heartbeats. (integer value)
+# Deprecated group/name - [DEFAULT]/qpid_heartbeat
+#qpid_heartbeat = 60
+
+# Transport to use, either 'tcp' or 'ssl'. (string value)
+# Deprecated group/name - [DEFAULT]/qpid_protocol
+#qpid_protocol = tcp
+
+# Whether to disable the Nagle algorithm. (boolean value)
+# Deprecated group/name - [DEFAULT]/qpid_tcp_nodelay
+#qpid_tcp_nodelay = true
+
+# The number of prefetched messages held by receiver. (integer value)
+# Deprecated group/name - [DEFAULT]/qpid_receiver_capacity
+#qpid_receiver_capacity = 1
+
+# The qpid topology version to use. Version 1 is what was originally used by
+# impl_qpid. Version 2 includes some backwards-incompatible changes that allow
+# broker federation to work. Users should update to version 2 when they are
+# able to take everything down, as it requires a clean break. (integer value)
+# Deprecated group/name - [DEFAULT]/qpid_topology_version
+#qpid_topology_version = 1
+
+
+[oslo_messaging_rabbit]
+
+#
+# From oslo.messaging
+#
+
+# Use durable queues in AMQP. (boolean value)
+# Deprecated group/name - [DEFAULT]/rabbit_durable_queues
+#amqp_durable_queues = false
+
+# Auto-delete queues in AMQP. (boolean value)
+# Deprecated group/name - [DEFAULT]/amqp_auto_delete
+#amqp_auto_delete = false
+
+# Size of RPC connection pool. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_conn_pool_size
+#rpc_conn_pool_size = 30
+
+# SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and
+# SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some
+# distributions. (string value)
+# Deprecated group/name - [DEFAULT]/kombu_ssl_version
+#kombu_ssl_version =
+
+# SSL key file (valid only if SSL enabled). (string value)
+# Deprecated group/name - [DEFAULT]/kombu_ssl_keyfile
+#kombu_ssl_keyfile =
+
+# SSL cert file (valid only if SSL enabled). (string value)
+# Deprecated group/name - [DEFAULT]/kombu_ssl_certfile
+#kombu_ssl_certfile =
+
+# SSL certification authority file (valid only if SSL enabled). (string value)
+# Deprecated group/name - [DEFAULT]/kombu_ssl_ca_certs
+#kombu_ssl_ca_certs =
+
+# How long to wait before reconnecting in response to an AMQP consumer cancel
+# notification. (floating point value)
+# Deprecated group/name - [DEFAULT]/kombu_reconnect_delay
+#kombu_reconnect_delay = 1.0
+
+# The RabbitMQ broker address where a single node is used. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_host
+rabbit_host = {{ RABBITMQ_HOST }}
+
+# The RabbitMQ broker port where a single node is used. (integer value)
+# Deprecated group/name - [DEFAULT]/rabbit_port
+rabbit_port = {{ RABBITMQ_PORT }}
+
+# RabbitMQ HA cluster host:port pairs. (list value)
+# Deprecated group/name - [DEFAULT]/rabbit_hosts
+#rabbit_hosts = $rabbit_host:$rabbit_port
+
+# Connect over SSL for RabbitMQ. (boolean value)
+# Deprecated group/name - [DEFAULT]/rabbit_use_ssl
+rabbit_use_ssl = false
+
+# The RabbitMQ userid. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_userid
+rabbit_userid = {{ RABBITMQ_USER }}
+
+# The RabbitMQ password. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_password
+rabbit_password = {{ RABBITMQ_PASSWORD }}
+
+# The RabbitMQ login method. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_login_method
+#rabbit_login_method = AMQPLAIN
+
+# The RabbitMQ virtual host. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_virtual_host
+#rabbit_virtual_host = /
+
+# How frequently to retry connecting with RabbitMQ. (integer value)
+#rabbit_retry_interval = 1
+
+# How long to backoff for between retries when connecting to RabbitMQ. (integer
+# value)
+# Deprecated group/name - [DEFAULT]/rabbit_retry_backoff
+#rabbit_retry_backoff = 2
+
+# Maximum number of RabbitMQ connection retries. Default is 0 (infinite retry
+# count). (integer value)
+# Deprecated group/name - [DEFAULT]/rabbit_max_retries
+#rabbit_max_retries = 0
+
+# Use HA queues in RabbitMQ (x-ha-policy: all). If you change this option, you
+# must wipe the RabbitMQ database. (boolean value)
+# Deprecated group/name - [DEFAULT]/rabbit_ha_queues
+#rabbit_ha_queues = false
+
+# Number of seconds after which the Rabbit broker is considered down if
+# heartbeat's keep-alive fails (0 disable the heartbeat). (integer value)
+#heartbeat_timeout_threshold = 60
+
+# How often times during the heartbeat_timeout_threshold we check the
+# heartbeat. (integer value)
+#heartbeat_rate = 2
+
+# Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake (boolean value)
+# Deprecated group/name - [DEFAULT]/fake_rabbit
+#fake_rabbit = false