Advertisement
Guest User

answer.txt

a guest
Feb 1st, 2022
278
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 51.36 KB | None | 0 0
  1. [general]
  2.  
  3. # Path to a public key to install on servers. If a usable key has not
  4. # been installed on the remote servers, the user is prompted for a
  5. # password and this key is installed so the password will not be
  6. # required again.
  7. CONFIG_SSH_KEY=/root/.ssh/id_rsa.pub
  8.  
  9. # Default password to be used everywhere (overridden by passwords set
  10. # for individual services or users).
  11. CONFIG_DEFAULT_PASSWORD=root
  12.  
  13. # The amount of service workers/threads to use for each service.
  14. # Useful to tweak when you have memory constraints. Defaults to the
  15. # amount of cores on the system.
  16. CONFIG_SERVICE_WORKERS=%{::processorcount}
  17.  
  18. # Specify 'y' to install MariaDB. ['y', 'n']
  19. CONFIG_MARIADB_INSTALL=y
  20.  
  21. # Specify 'y' to install OpenStack Image Service (glance). ['y', 'n']
  22. CONFIG_GLANCE_INSTALL=y
  23.  
  24. # Specify 'y' to install OpenStack Block Storage (cinder). ['y', 'n']
  25. CONFIG_CINDER_INSTALL=y
  26.  
  27. # Specify 'y' to install OpenStack Shared File System (manila). ['y',
  28. # 'n']
  29. CONFIG_MANILA_INSTALL=n
  30.  
  31. # Specify 'y' to install OpenStack Compute (nova). ['y', 'n']
  32. CONFIG_NOVA_INSTALL=y
  33.  
  34. # Specify 'y' to install OpenStack Networking (neutron) ['y']
  35. CONFIG_NEUTRON_INSTALL=y
  36.  
  37. # Specify 'y' to install OpenStack Dashboard (horizon). ['y', 'n']
  38. CONFIG_HORIZON_INSTALL=y
  39.  
  40. # Specify 'y' to install OpenStack Object Storage (swift). ['y', 'n']
  41. CONFIG_SWIFT_INSTALL=y
  42.  
  43. # Specify 'y' to install OpenStack Metering (ceilometer). Note this
  44. # will also automatically install gnocchi service and configures it as
  45. # the metrics backend. ['y', 'n']
  46. CONFIG_CEILOMETER_INSTALL=y
  47.  
  48. # Specify 'y' to install OpenStack Telemetry Alarming (Aodh). Note
  49. # Aodh requires Ceilometer to be installed as well. ['y', 'n']
  50. CONFIG_AODH_INSTALL=y
  51.  
  52. # Specify 'y' to install OpenStack Events Service (panko). ['y', 'n']
  53. CONFIG_PANKO_INSTALL=n
  54.  
  55. # Specify 'y' to install OpenStack Data Processing (sahara). In case
  56. # of sahara installation packstack also installs heat.['y', 'n']
  57. CONFIG_SAHARA_INSTALL=n
  58.  
  59. # Specify 'y' to install OpenStack Orchestration (heat). ['y', 'n']
  60. CONFIG_HEAT_INSTALL=y
  61.  
  62. # Specify 'y' to install OpenStack Container Infrastructure
  63. # Management Service (magnum). ['y', 'n']
  64. CONFIG_MAGNUM_INSTALL=n
  65.  
  66. # Specify 'y' to install OpenStack Database (trove) ['y', 'n']
  67. CONFIG_TROVE_INSTALL=n
  68.  
  69. # Specify 'y' to install OpenStack Bare Metal Provisioning (ironic).
  70. # ['y', 'n']
  71. CONFIG_IRONIC_INSTALL=n
  72.  
  73. # Specify 'y' to install the OpenStack Client packages (command-line
  74. # tools). An admin "rc" file will also be installed. ['y', 'n']
  75. CONFIG_CLIENT_INSTALL=y
  76.  
  77. # Comma-separated list of NTP servers. Leave plain if Packstack
  78. # should not install ntpd on instances.
  79. CONFIG_NTP_SERVERS=
  80.  
  81. # Comma-separated list of servers to be excluded from the
  82. # installation. This is helpful if you are running Packstack a second
  83. # time with the same answer file and do not want Packstack to
  84. # overwrite these server's configurations. Leave empty if you do not
  85. # need to exclude any servers.
  86. EXCLUDE_SERVERS=
  87.  
  88. # Specify 'y' if you want to run OpenStack services in debug mode;
  89. # otherwise, specify 'n'. ['y', 'n']
  90. CONFIG_DEBUG_MODE=n
  91.  
  92. # Server on which to install OpenStack services specific to the
  93. # controller role (for example, API servers or dashboard).
  94. CONFIG_CONTROLLER_HOST=192.168.15.61
  95.  
  96. # List the servers on which to install the Compute service.
  97. CONFIG_COMPUTE_HOSTS=192.168.15.61
  98.  
  99. # List of servers on which to install the network service such as
  100. # Compute networking (nova network) or OpenStack Networking (neutron).
  101. CONFIG_NETWORK_HOSTS=192.168.15.61
  102.  
  103. # Specify 'y' if you want to use VMware vCenter as hypervisor and
  104. # storage; otherwise, specify 'n'. ['y', 'n']
  105. CONFIG_VMWARE_BACKEND=n
  106.  
  107. # Specify 'y' if you want to use unsupported parameters. This should
  108. # be used only if you know what you are doing. Issues caused by using
  109. # unsupported options will not be fixed before the next major release.
  110. # ['y', 'n']
  111. CONFIG_UNSUPPORTED=n
  112.  
  113. # Specify 'y' if you want to use subnet addresses (in CIDR format)
  114. # instead of interface names in following options:
  115. # CONFIG_NEUTRON_OVS_BRIDGE_IFACES,
  116. # CONFIG_NEUTRON_LB_INTERFACE_MAPPINGS, CONFIG_NEUTRON_OVS_TUNNEL_IF.
  117. # This is useful for cases when interface names are not same on all
  118. # installation hosts.
  119. CONFIG_USE_SUBNETS=n
  120.  
  121. # IP address of the VMware vCenter server.
  122. CONFIG_VCENTER_HOST=
  123.  
  124. # User name for VMware vCenter server authentication.
  125. CONFIG_VCENTER_USER=
  126.  
  127. # Password for VMware vCenter server authentication.
  128. CONFIG_VCENTER_PASSWORD=
  129.  
  130. # Comma separated list of names of the VMware vCenter clusters. Note:
  131. # if multiple clusters are specified each one is mapped to one
  132. # compute, otherwise all computes are mapped to same cluster.
  133. CONFIG_VCENTER_CLUSTER_NAMES=
  134.  
  135. # (Unsupported!) Server on which to install OpenStack services
  136. # specific to storage servers such as Image or Block Storage services.
  137. CONFIG_STORAGE_HOST=192.168.15.61
  138.  
  139. # (Unsupported!) Server on which to install OpenStack services
  140. # specific to OpenStack Data Processing (sahara).
  141. CONFIG_SAHARA_HOST=192.168.15.61
  142.  
  143. # Comma-separated list of URLs for any additional yum repositories,
  144. # to use for installation.
  145. CONFIG_REPO=
  146.  
  147. # Specify 'y' to enable the RDO testing repository. ['y', 'n']
  148. CONFIG_ENABLE_RDO_TESTING=n
  149.  
  150. # To subscribe each server with Red Hat Subscription Manager, include
  151. # this with CONFIG_RH_PW.
  152. CONFIG_RH_USER=
  153.  
  154. # To subscribe each server to receive updates from a Satellite
  155. # server, provide the URL of the Satellite server. You must also
  156. # provide a user name (CONFIG_SATELLITE_USERNAME) and password
  157. # (CONFIG_SATELLITE_PASSWORD) or an access key (CONFIG_SATELLITE_AKEY)
  158. # for authentication.
  159. CONFIG_SATELLITE_URL=
  160.  
  161. # Specify a Satellite 6 Server to register to. If not specified,
  162. # Packstack will register the system to the Red Hat server. When this
  163. # option is specified, you also need to set the Satellite 6
  164. # organization (CONFIG_RH_SAT6_ORG) and an activation key
  165. # (CONFIG_RH_SAT6_KEY).
  166. CONFIG_RH_SAT6_SERVER=
  167.  
  168. # To subscribe each server with Red Hat Subscription Manager, include
  169. # this with CONFIG_RH_USER.
  170. CONFIG_RH_PW=
  171.  
  172. # Specify 'y' to enable RHEL optional repositories. ['y', 'n']
  173. CONFIG_RH_OPTIONAL=y
  174.  
  175. # HTTP proxy to use with Red Hat Subscription Manager.
  176. CONFIG_RH_PROXY=
  177.  
  178. # Specify a Satellite 6 Server organization to use when registering
  179. # the system.
  180. CONFIG_RH_SAT6_ORG=
  181.  
  182. # Specify a Satellite 6 Server activation key to use when registering
  183. # the system.
  184. CONFIG_RH_SAT6_KEY=
  185.  
  186. # Port to use for Red Hat Subscription Manager's HTTP proxy.
  187. CONFIG_RH_PROXY_PORT=
  188.  
  189. # User name to use for Red Hat Subscription Manager's HTTP proxy.
  190. CONFIG_RH_PROXY_USER=
  191.  
  192. # Password to use for Red Hat Subscription Manager's HTTP proxy.
  193. CONFIG_RH_PROXY_PW=
  194.  
  195. # User name to authenticate with the RHN Satellite server; if you
  196. # intend to use an access key for Satellite authentication, leave this
  197. # blank.
  198. CONFIG_SATELLITE_USER=
  199.  
  200. # Password to authenticate with the RHN Satellite server; if you
  201. # intend to use an access key for Satellite authentication, leave this
  202. # blank.
  203. CONFIG_SATELLITE_PW=
  204.  
  205. # Access key for the Satellite server; if you intend to use a user
  206. # name and password for Satellite authentication, leave this blank.
  207. CONFIG_SATELLITE_AKEY=
  208.  
  209. # Certificate path or URL of the certificate authority to verify that
  210. # the connection with the Satellite server is secure. If you are not
  211. # using Satellite in your deployment, leave this blank.
  212. CONFIG_SATELLITE_CACERT=
  213.  
  214. # Profile name that should be used as an identifier for the system in
  215. # RHN Satellite (if required).
  216. CONFIG_SATELLITE_PROFILE=
  217.  
  218. # Comma-separated list of flags passed to the rhnreg_ks command.
  219. # Valid flags are: novirtinfo, norhnsd, nopackages ['novirtinfo',
  220. # 'norhnsd', 'nopackages']
  221. CONFIG_SATELLITE_FLAGS=
  222.  
  223. # HTTP proxy to use when connecting to the RHN Satellite server (if
  224. # required).
  225. CONFIG_SATELLITE_PROXY=
  226.  
  227. # User name to authenticate with the Satellite-server HTTP proxy.
  228. CONFIG_SATELLITE_PROXY_USER=
  229.  
  230. # User password to authenticate with the Satellite-server HTTP proxy.
  231. CONFIG_SATELLITE_PROXY_PW=
  232.  
  233. # Specify filepath for CA cert file. If CONFIG_SSL_CACERT_SELFSIGN is
  234. # set to 'n' it has to be preexisting file.
  235. CONFIG_SSL_CACERT_FILE=/etc/pki/tls/certs/selfcert.crt
  236.  
  237. # Specify filepath for CA cert key file. If
  238. # CONFIG_SSL_CACERT_SELFSIGN is set to 'n' it has to be preexisting
  239. # file.
  240. CONFIG_SSL_CACERT_KEY_FILE=/etc/pki/tls/private/selfkey.key
  241.  
  242. # Enter the path to use to store generated SSL certificates in.
  243. CONFIG_SSL_CERT_DIR=~/packstackca/
  244.  
  245. # Specify 'y' if you want Packstack to pregenerate the CA
  246. # Certificate.
  247. CONFIG_SSL_CACERT_SELFSIGN=y
  248.  
  249. # Enter the ssl certificates subject country.
  250. CONFIG_SSL_CERT_SUBJECT_C=--
  251.  
  252. # Enter the ssl certificates subject state.
  253. CONFIG_SSL_CERT_SUBJECT_ST=State
  254.  
  255. # Enter the ssl certificates subject location.
  256. CONFIG_SSL_CERT_SUBJECT_L=City
  257.  
  258. # Enter the ssl certificates subject organization.
  259. CONFIG_SSL_CERT_SUBJECT_O=openstack
  260.  
  261. # Enter the ssl certificates subject organizational unit.
  262. CONFIG_SSL_CERT_SUBJECT_OU=packstack
  263.  
  264. # Enter the ssl certificates subject common name.
  265. CONFIG_SSL_CERT_SUBJECT_CN=openstacklarge1
  266.  
  267. CONFIG_SSL_CERT_SUBJECT_MAIL=admin@openstacklarge1
  268.  
  269. # Service to be used as the AMQP broker. Allowed values are: rabbitmq
  270. # ['rabbitmq']
  271. CONFIG_AMQP_BACKEND=rabbitmq
  272.  
  273. # IP address of the server on which to install the AMQP service.
  274. CONFIG_AMQP_HOST=192.168.15.61
  275.  
  276. # Specify 'y' to enable SSL for the AMQP service. ['y', 'n']
  277. CONFIG_AMQP_ENABLE_SSL=n
  278.  
  279. # Specify 'y' to enable authentication for the AMQP service. ['y',
  280. # 'n']
  281. CONFIG_AMQP_ENABLE_AUTH=n
  282.  
  283. # Password for the NSS certificate database of the AMQP service.
  284. CONFIG_AMQP_NSS_CERTDB_PW=PW_PLACEHOLDER
  285.  
  286. # User for AMQP authentication.
  287. CONFIG_AMQP_AUTH_USER=amqp_user
  288.  
  289. # Password for AMQP authentication.
  290. CONFIG_AMQP_AUTH_PASSWORD=PW_PLACEHOLDER
  291.  
  292. # IP address of the server on which to install MariaDB. If a MariaDB
  293. # installation was not specified in CONFIG_MARIADB_INSTALL, specify
  294. # the IP address of an existing database server (a MariaDB cluster can
  295. # also be specified).
  296. CONFIG_MARIADB_HOST=192.168.15.61
  297.  
  298. # User name for the MariaDB administrative user.
  299. CONFIG_MARIADB_USER=root
  300.  
  301. # Password for the MariaDB administrative user.
  302. CONFIG_MARIADB_PW=root
  303.  
  304. # Password to use for the Identity service (keystone) to access the
  305. # database.
  306. CONFIG_KEYSTONE_DB_PW=root
  307.  
  308. # Enter y if cron job to rotate Fernet tokens should be created.
  309. CONFIG_KEYSTONE_FERNET_TOKEN_ROTATE_ENABLE=True
  310.  
  311. # Default region name to use when creating tenants in the Identity
  312. # service.
  313. CONFIG_KEYSTONE_REGION=RegionOne
  314.  
  315. # Email address for the Identity service 'admin' user. Defaults to
  316. CONFIG_KEYSTONE_ADMIN_EMAIL=root@openstacklarge1
  317.  
  318. # User name for the Identity service 'admin' user. Defaults to
  319. # 'admin'.
  320. CONFIG_KEYSTONE_ADMIN_USERNAME=admin
  321.  
  322. # Password to use for the Identity service 'admin' user.
  323. CONFIG_KEYSTONE_ADMIN_PW=root
  324.  
  325. # Password to use for the Identity service 'demo' user.
  326. CONFIG_KEYSTONE_DEMO_PW=root
  327.  
  328. # Identity service API version string. ['v2.0', 'v3']
  329. CONFIG_KEYSTONE_API_VERSION=v3
  330.  
  331. # Identity service token format (FERNET). Since Rocky, only FERNET is
  332. # supported. ['FERNET']
  333. CONFIG_KEYSTONE_TOKEN_FORMAT=FERNET
  334.  
  335. # Type of Identity service backend (sql or ldap). ['sql', 'ldap']
  336. CONFIG_KEYSTONE_IDENTITY_BACKEND=sql
  337.  
  338. # URL for the Identity service LDAP backend.
  339. CONFIG_KEYSTONE_LDAP_URL=ldap://192.168.15.61
  340.  
  341. # User DN for the Identity service LDAP backend. Used to bind to the
  342. # LDAP server if the LDAP server does not allow anonymous
  343. # authentication.
  344. CONFIG_KEYSTONE_LDAP_USER_DN=
  345.  
  346. # User DN password for the Identity service LDAP backend.
  347. CONFIG_KEYSTONE_LDAP_USER_PASSWORD=
  348.  
  349. # Base suffix for the Identity service LDAP backend.
  350. CONFIG_KEYSTONE_LDAP_SUFFIX=
  351.  
  352. # Query scope for the Identity service LDAP backend. Use 'one' for
  353. # onelevel/singleLevel or 'sub' for subtree/wholeSubtree ('base' is
  354. # not actually used by the Identity service and is therefore
  355. # deprecated). ['base', 'one', 'sub']
  356. CONFIG_KEYSTONE_LDAP_QUERY_SCOPE=one
  357.  
  358. # Query page size for the Identity service LDAP backend.
  359. CONFIG_KEYSTONE_LDAP_PAGE_SIZE=-1
  360.  
  361. # User subtree for the Identity service LDAP backend.
  362. CONFIG_KEYSTONE_LDAP_USER_SUBTREE=
  363.  
  364. # User query filter for the Identity service LDAP backend.
  365. CONFIG_KEYSTONE_LDAP_USER_FILTER=
  366.  
  367. # User object class for the Identity service LDAP backend.
  368. CONFIG_KEYSTONE_LDAP_USER_OBJECTCLASS=
  369.  
  370. # User ID attribute for the Identity service LDAP backend.
  371. CONFIG_KEYSTONE_LDAP_USER_ID_ATTRIBUTE=
  372.  
  373. # User name attribute for the Identity service LDAP backend.
  374. CONFIG_KEYSTONE_LDAP_USER_NAME_ATTRIBUTE=
  375.  
  376. # User email address attribute for the Identity service LDAP backend.
  377. CONFIG_KEYSTONE_LDAP_USER_MAIL_ATTRIBUTE=
  378.  
  379. # User-enabled attribute for the Identity service LDAP backend.
  380. CONFIG_KEYSTONE_LDAP_USER_ENABLED_ATTRIBUTE=
  381.  
  382. # Bit mask integer applied to user-enabled attribute for the Identity
  383. # service LDAP backend. Indicate the bit that the enabled value is
  384. # stored in if the LDAP server represents "enabled" as a bit on an
  385. # integer rather than a boolean. A value of "0" indicates the mask is
  386. # not used (default). If this is not set to "0", the typical value is
  387. # "2", typically used when
  388. # "CONFIG_KEYSTONE_LDAP_USER_ENABLED_ATTRIBUTE = userAccountControl".
  389. CONFIG_KEYSTONE_LDAP_USER_ENABLED_MASK=-1
  390.  
  391. # Value of enabled attribute which indicates user is enabled for the
  392. # Identity service LDAP backend. This should match an appropriate
  393. # integer value if the LDAP server uses non-boolean (bitmask) values
  394. # to indicate whether a user is enabled or disabled. If this is not
  395. # set as 'y', the typical value is "512". This is typically used when
  396. # "CONFIG_KEYSTONE_LDAP_USER_ENABLED_ATTRIBUTE = userAccountControl".
  397. CONFIG_KEYSTONE_LDAP_USER_ENABLED_DEFAULT=TRUE
  398.  
  399. # Specify 'y' if users are disabled (not enabled) in the Identity
  400. # service LDAP backend (inverts boolean-enalbed values). Some LDAP
  401. # servers use a boolean lock attribute where "y" means an account is
  402. # disabled. Setting this to 'y' allows these lock attributes to be
  403. # used. This setting will have no effect if
  404. # "CONFIG_KEYSTONE_LDAP_USER_ENABLED_MASK" is in use. ['n', 'y']
  405. CONFIG_KEYSTONE_LDAP_USER_ENABLED_INVERT=n
  406.  
  407. # Comma-separated list of attributes stripped from LDAP user entry
  408. # upon update.
  409. CONFIG_KEYSTONE_LDAP_USER_ATTRIBUTE_IGNORE=
  410.  
  411. # Identity service LDAP attribute mapped to default_project_id for
  412. # users.
  413. CONFIG_KEYSTONE_LDAP_USER_DEFAULT_PROJECT_ID_ATTRIBUTE=
  414.  
  415. # Specify 'y' if you want to be able to create Identity service users
  416. # through the Identity service interface; specify 'n' if you will
  417. # create directly in the LDAP backend. ['n', 'y']
  418. CONFIG_KEYSTONE_LDAP_USER_ALLOW_CREATE=n
  419.  
  420. # Specify 'y' if you want to be able to update Identity service users
  421. # through the Identity service interface; specify 'n' if you will
  422. # update directly in the LDAP backend. ['n', 'y']
  423. CONFIG_KEYSTONE_LDAP_USER_ALLOW_UPDATE=n
  424.  
  425. # Specify 'y' if you want to be able to delete Identity service users
  426. # through the Identity service interface; specify 'n' if you will
  427. # delete directly in the LDAP backend. ['n', 'y']
  428. CONFIG_KEYSTONE_LDAP_USER_ALLOW_DELETE=n
  429.  
  430. # Identity service LDAP attribute mapped to password.
  431. CONFIG_KEYSTONE_LDAP_USER_PASS_ATTRIBUTE=
  432.  
  433. # DN of the group entry to hold enabled LDAP users when using enabled
  434. # emulation.
  435. CONFIG_KEYSTONE_LDAP_USER_ENABLED_EMULATION_DN=
  436.  
  437. # List of additional LDAP attributes for mapping additional attribute
  438. # mappings for users. The attribute-mapping format is
  439. # <ldap_attr>:<user_attr>, where ldap_attr is the attribute in the
  440. # LDAP entry and user_attr is the Identity API attribute.
  441. CONFIG_KEYSTONE_LDAP_USER_ADDITIONAL_ATTRIBUTE_MAPPING=
  442.  
  443. # Group subtree for the Identity service LDAP backend.
  444. CONFIG_KEYSTONE_LDAP_GROUP_SUBTREE=
  445.  
  446. # Group query filter for the Identity service LDAP backend.
  447. CONFIG_KEYSTONE_LDAP_GROUP_FILTER=
  448.  
  449. # Group object class for the Identity service LDAP backend.
  450. CONFIG_KEYSTONE_LDAP_GROUP_OBJECTCLASS=
  451.  
  452. # Group ID attribute for the Identity service LDAP backend.
  453. CONFIG_KEYSTONE_LDAP_GROUP_ID_ATTRIBUTE=
  454.  
  455. # Group name attribute for the Identity service LDAP backend.
  456. CONFIG_KEYSTONE_LDAP_GROUP_NAME_ATTRIBUTE=
  457.  
  458. # Group member attribute for the Identity service LDAP backend.
  459. CONFIG_KEYSTONE_LDAP_GROUP_MEMBER_ATTRIBUTE=
  460.  
  461. # Group description attribute for the Identity service LDAP backend.
  462. CONFIG_KEYSTONE_LDAP_GROUP_DESC_ATTRIBUTE=
  463.  
  464. # Comma-separated list of attributes stripped from LDAP group entry
  465. # upon update.
  466. CONFIG_KEYSTONE_LDAP_GROUP_ATTRIBUTE_IGNORE=
  467.  
  468. # Specify 'y' if you want to be able to create Identity service
  469. # groups through the Identity service interface; specify 'n' if you
  470. # will create directly in the LDAP backend. ['n', 'y']
  471. CONFIG_KEYSTONE_LDAP_GROUP_ALLOW_CREATE=n
  472.  
  473. # Specify 'y' if you want to be able to update Identity service
  474. # groups through the Identity service interface; specify 'n' if you
  475. # will update directly in the LDAP backend. ['n', 'y']
  476. CONFIG_KEYSTONE_LDAP_GROUP_ALLOW_UPDATE=n
  477.  
  478. # Specify 'y' if you want to be able to delete Identity service
  479. # groups through the Identity service interface; specify 'n' if you
  480. # will delete directly in the LDAP backend. ['n', 'y']
  481. CONFIG_KEYSTONE_LDAP_GROUP_ALLOW_DELETE=n
  482.  
  483. # List of additional LDAP attributes used for mapping additional
  484. # attribute mappings for groups. The attribute=mapping format is
  485. # <ldap_attr>:<group_attr>, where ldap_attr is the attribute in the
  486. # LDAP entry and group_attr is the Identity API attribute.
  487. CONFIG_KEYSTONE_LDAP_GROUP_ADDITIONAL_ATTRIBUTE_MAPPING=
  488.  
  489. # Specify 'y' if the Identity service LDAP backend should use TLS.
  490. # ['n', 'y']
  491. CONFIG_KEYSTONE_LDAP_USE_TLS=n
  492.  
  493. # CA certificate directory for Identity service LDAP backend (if TLS
  494. # is used).
  495. CONFIG_KEYSTONE_LDAP_TLS_CACERTDIR=
  496.  
  497. # CA certificate file for Identity service LDAP backend (if TLS is
  498. # used).
  499. CONFIG_KEYSTONE_LDAP_TLS_CACERTFILE=
  500.  
  501. # Certificate-checking strictness level for Identity service LDAP
  502. # backend; valid options are: never, allow, demand. ['never', 'allow',
  503. # 'demand']
  504. CONFIG_KEYSTONE_LDAP_TLS_REQ_CERT=demand
  505.  
  506. # Password to use for the Image service (glance) to access the
  507. # database.
  508. CONFIG_GLANCE_DB_PW=root
  509.  
  510. # Password to use for the Image service to authenticate with the
  511. # Identity service.
  512. CONFIG_GLANCE_KS_PW=root
  513.  
  514. # Storage backend for the Image service (controls how the Image
  515. # service stores disk images). Valid options are: file or swift
  516. # (Object Storage). The Object Storage service must be enabled to use
  517. # it as a working backend; otherwise, Packstack falls back to 'file'.
  518. # ['file', 'swift']
  519. CONFIG_GLANCE_BACKEND=file
  520.  
  521. # Password to use for the Block Storage service (cinder) to access
  522. # the database.
  523. CONFIG_CINDER_DB_PW=root
  524.  
  525. # Enter y if cron job for removing soft deleted DB rows should be
  526. # created.
  527. CONFIG_CINDER_DB_PURGE_ENABLE=True
  528.  
  529. # Password to use for the Block Storage service to authenticate with
  530. # the Identity service.
  531. CONFIG_CINDER_KS_PW=root
  532.  
  533. # Storage backend to use for the Block Storage service; valid options
  534. # are: lvm, nfs, vmdk, netapp, solidfire. ['lvm', 'nfs', 'vmdk',
  535. # 'netapp', 'solidfire']
  536. CONFIG_CINDER_BACKEND=lvm
  537.  
  538. # Specify 'y' to create the Block Storage volumes group. That is,
  539. # Packstack creates a raw disk image in /var/lib/cinder, and mounts it
  540. # using a loopback device. This should only be used for testing on a
  541. # proof-of-concept installation of the Block Storage service (a file-
  542. # backed volume group is not suitable for production usage). ['y',
  543. # 'n']
  544. CONFIG_CINDER_VOLUMES_CREATE=y
  545.  
  546. # Specify a custom name for the lvm cinder volume group
  547. CONFIG_CINDER_VOLUME_NAME=cinder-volumes
  548.  
  549. # Size of Block Storage volumes group. Actual volume size will be
  550. # extended with 3% more space for VG metadata. Remember that the size
  551. # of the volume group will restrict the amount of disk space that you
  552. # can expose to Compute instances, and that the specified amount must
  553. # be available on the device used for /var/lib/cinder.
  554. CONFIG_CINDER_VOLUMES_SIZE=4500G
  555.  
  556. # A single or comma-separated list of NFS exports to mount. Example:
  557. # 'ip-address:/export-name'
  558. CONFIG_CINDER_NFS_MOUNTS=
  559.  
  560. # Administrative user account name used to access the NetApp storage
  561. # system or proxy server.
  562. CONFIG_CINDER_NETAPP_LOGIN=
  563.  
  564. # Password for the NetApp administrative user account specified in
  565. # the CONFIG_CINDER_NETAPP_LOGIN parameter.
  566. CONFIG_CINDER_NETAPP_PASSWORD=
  567.  
  568. # Hostname (or IP address) for the NetApp storage system or proxy
  569. # server.
  570. CONFIG_CINDER_NETAPP_HOSTNAME=
  571.  
  572. # The TCP port to use for communication with the storage system or
  573. # proxy. If not specified, Data ONTAP drivers will use 80 for HTTP and
  574. # 443 for HTTPS; E-Series will use 8080 for HTTP and 8443 for HTTPS.
  575. # Defaults to 80.
  576. CONFIG_CINDER_NETAPP_SERVER_PORT=80
  577.  
  578. # Storage family type used on the NetApp storage system; valid
  579. # options are ontap_7mode for using Data ONTAP operating in 7-Mode,
  580. # ontap_cluster for using clustered Data ONTAP, or E-Series for NetApp
  581. # E-Series. Defaults to ontap_cluster. ['ontap_7mode',
  582. # 'ontap_cluster', 'eseries']
  583. CONFIG_CINDER_NETAPP_STORAGE_FAMILY=ontap_cluster
  584.  
  585. # The transport protocol used when communicating with the NetApp
  586. # storage system or proxy server. Valid values are http or https.
  587. # Defaults to 'http'. ['http', 'https']
  588. CONFIG_CINDER_NETAPP_TRANSPORT_TYPE=http
  589.  
  590. # Storage protocol to be used on the data path with the NetApp
  591. # storage system; valid options are iscsi, fc, nfs. Defaults to nfs.
  592. # ['iscsi', 'fc', 'nfs']
  593. CONFIG_CINDER_NETAPP_STORAGE_PROTOCOL=nfs
  594.  
  595. # Quantity to be multiplied by the requested volume size to ensure
  596. # enough space is available on the virtual storage server (Vserver) to
  597. # fulfill the volume creation request. Defaults to 1.0.
  598. CONFIG_CINDER_NETAPP_SIZE_MULTIPLIER=1.0
  599.  
  600. # Time period (in minutes) that is allowed to elapse after the image
  601. # is last accessed, before it is deleted from the NFS image cache.
  602. # When a cache-cleaning cycle begins, images in the cache that have
  603. # not been accessed in the last M minutes, where M is the value of
  604. # this parameter, are deleted from the cache to create free space on
  605. # the NFS share. Defaults to 720.
  606. CONFIG_CINDER_NETAPP_EXPIRY_THRES_MINUTES=720
  607.  
  608. # If the percentage of available space for an NFS share has dropped
  609. # below the value specified by this parameter, the NFS image cache is
  610. # cleaned. Defaults to 20.
  611. CONFIG_CINDER_NETAPP_THRES_AVL_SIZE_PERC_START=20
  612.  
  613. # When the percentage of available space on an NFS share has reached
  614. # the percentage specified by this parameter, the driver stops
  615. # clearing files from the NFS image cache that have not been accessed
  616. # in the last M minutes, where M is the value of the
  617. # CONFIG_CINDER_NETAPP_EXPIRY_THRES_MINUTES parameter. Defaults to 60.
  618. CONFIG_CINDER_NETAPP_THRES_AVL_SIZE_PERC_STOP=60
  619.  
  620. # Single or comma-separated list of NetApp NFS shares for Block
  621. # Storage to use. Format: ip-address:/export-name. Defaults to ''.
  622. CONFIG_CINDER_NETAPP_NFS_SHARES=
  623.  
  624. # File with the list of available NFS shares. Defaults to
  625. # '/etc/cinder/shares.conf'.
  626. CONFIG_CINDER_NETAPP_NFS_SHARES_CONFIG=/etc/cinder/shares.conf
  627.  
  628. # This parameter is only utilized when the storage protocol is
  629. # configured to use iSCSI or FC. This parameter is used to restrict
  630. # provisioning to the specified controller volumes. Specify the value
  631. # of this parameter to be a comma separated list of NetApp controller
  632. # volume names to be used for provisioning. Defaults to ''.
  633. CONFIG_CINDER_NETAPP_VOLUME_LIST=
  634.  
  635. # The vFiler unit on which provisioning of block storage volumes will
  636. # be done. This parameter is only used by the driver when connecting
  637. # to an instance with a storage family of Data ONTAP operating in
  638. # 7-Mode Only use this parameter when utilizing the MultiStore feature
  639. # on the NetApp storage system. Defaults to ''.
  640. CONFIG_CINDER_NETAPP_VFILER=
  641.  
  642. # The name of the config.conf stanza for a Data ONTAP (7-mode) HA
  643. # partner. This option is only used by the driver when connecting to
  644. # an instance with a storage family of Data ONTAP operating in 7-Mode,
  645. # and it is required if the storage protocol selected is FC. Defaults
  646. # to ''.
  647. CONFIG_CINDER_NETAPP_PARTNER_BACKEND_NAME=
  648.  
  649. # This option specifies the virtual storage server (Vserver) name on
  650. # the storage cluster on which provisioning of block storage volumes
  651. # should occur. Defaults to ''.
  652. CONFIG_CINDER_NETAPP_VSERVER=
  653.  
  654. # Restricts provisioning to the specified controllers. Value must be
  655. # a comma-separated list of controller hostnames or IP addresses to be
  656. # used for provisioning. This option is only utilized when the storage
  657. # family is configured to use E-Series. Defaults to ''.
  658. CONFIG_CINDER_NETAPP_CONTROLLER_IPS=
  659.  
  660. # Password for the NetApp E-Series storage array. Defaults to ''.
  661. CONFIG_CINDER_NETAPP_SA_PASSWORD=
  662.  
  663. # This option is used to define how the controllers in the E-Series
  664. # storage array will work with the particular operating system on the
  665. # hosts that are connected to it. Defaults to 'linux_dm_mp'
  666. CONFIG_CINDER_NETAPP_ESERIES_HOST_TYPE=linux_dm_mp
  667.  
  668. # Path to the NetApp E-Series proxy application on a proxy server.
  669. # The value is combined with the value of the
  670. # CONFIG_CINDER_NETAPP_TRANSPORT_TYPE, CONFIG_CINDER_NETAPP_HOSTNAME,
  671. # and CONFIG_CINDER_NETAPP_HOSTNAME options to create the URL used by
  672. # the driver to connect to the proxy application. Defaults to
  673. # '/devmgr/v2'.
  674. CONFIG_CINDER_NETAPP_WEBSERVICE_PATH=/devmgr/v2
  675.  
  676. # Restricts provisioning to the specified storage pools. Only dynamic
  677. # disk pools are currently supported. The value must be a comma-
  678. # separated list of disk pool names to be used for provisioning.
  679. # Defaults to ''.
  680. CONFIG_CINDER_NETAPP_STORAGE_POOLS=
  681.  
  682. # Cluster admin account name used to access the SolidFire storage
  683. # system.
  684. CONFIG_CINDER_SOLIDFIRE_LOGIN=
  685.  
  686. # Password for the SolidFire cluster admin user account specified in
  687. # the CONFIG_CINDER_SOLIDFIRE_LOGIN parameter.
  688. CONFIG_CINDER_SOLIDFIRE_PASSWORD=
  689.  
  690. # Hostname (or IP address) for the SolidFire storage system's MVIP.
  691. CONFIG_CINDER_SOLIDFIRE_HOSTNAME=
  692.  
  693. # Password to use for OpenStack Bare Metal Provisioning (ironic) to
  694. # access the database.
  695. CONFIG_IRONIC_DB_PW=PW_PLACEHOLDER
  696.  
  697. # Password to use for OpenStack Bare Metal Provisioning to
  698. # authenticate with the Identity service.
  699. CONFIG_IRONIC_KS_PW=PW_PLACEHOLDER
  700.  
  701. # Enter y if cron job for removing soft deleted DB rows should be
  702. # created.
  703. CONFIG_NOVA_DB_PURGE_ENABLE=True
  704.  
  705. # Password to use for the Compute service (nova) to access the
  706. # database.
  707. CONFIG_NOVA_DB_PW=root
  708.  
  709. # Password to use for the Compute service to authenticate with the
  710. # Identity service.
  711. CONFIG_NOVA_KS_PW=root
  712.  
  713. # Whether or not Packstack should manage a default initial set of
  714. # Nova flavors. Defaults to 'y'.
  715. CONFIG_NOVA_MANAGE_FLAVORS=y
  716.  
  717. # Overcommitment ratio for virtual to physical CPUs. Specify 1.0 to
  718. # disable CPU overcommitment.
  719. CONFIG_NOVA_SCHED_CPU_ALLOC_RATIO=16.0
  720.  
  721. # Overcommitment ratio for virtual to physical RAM. Specify 1.0 to
  722. # disable RAM overcommitment.
  723. CONFIG_NOVA_SCHED_RAM_ALLOC_RATIO=1.5
  724.  
  725. # Protocol used for instance migration. Valid options are: ssh and
  726. # tcp. Note that the tcp protocol is not encrypted, so it is insecure.
  727. # ['ssh', 'tcp']
  728. CONFIG_NOVA_COMPUTE_MIGRATE_PROTOCOL=ssh
  729.  
  730. # PEM encoded certificate to be used for ssl on the https server,
  731. # leave blank if one should be generated, this certificate should not
  732. # require a passphrase. If CONFIG_HORIZON_SSL is set to 'n' this
  733. # parameter is ignored.
  734. CONFIG_VNC_SSL_CERT=
  735.  
  736. # SSL keyfile corresponding to the certificate if one was entered. If
  737. # CONFIG_HORIZON_SSL is set to 'n' this parameter is ignored.
  738. CONFIG_VNC_SSL_KEY=
  739.  
  740. # Enter the PCI passthrough array of hash in JSON style for
  741. # controller eg. [{"vendor_id":"1234", "product_id":"5678",
  742. # "name":"default"}, {...}]
  743. CONFIG_NOVA_PCI_ALIAS=
  744.  
  745. # Enter the PCI passthrough whitelist array of hash in JSON style for
  746. # controller eg. [{"vendor_id":"1234", "product_id":"5678",
  747. # "name':"default"}, {...}]
  748. CONFIG_NOVA_PCI_PASSTHROUGH_WHITELIST=
  749.  
  750. # The hypervisor driver to use with Nova. Can be either 'qemu' or
  751. # 'kvm'. Defaults to 'qemu' on virtual machines and 'kvm' on bare
  752. # metal hardware. For nested KVM set it explicitly to 'kvm'.
  753. CONFIG_NOVA_LIBVIRT_VIRT_TYPE=kvm
  754.  
  755. # Password to use for OpenStack Networking (neutron) to authenticate
  756. # with the Identity service.
  757. CONFIG_NEUTRON_KS_PW=root
  758.  
  759. # The password to use for OpenStack Networking to access the
  760. # database.
  761. CONFIG_NEUTRON_DB_PW=root
  762.  
  763. # The name of the Open vSwitch bridge (or empty for linuxbridge) for
  764. # the OpenStack Networking L3 agent to use for external traffic.
  765. # Specify 'provider' if you intend to use a provider network to handle
  766. # external traffic.
  767. CONFIG_NEUTRON_L3_EXT_BRIDGE=br-ex
  768.  
  769. # Password for the OpenStack Networking metadata agent.
  770. CONFIG_NEUTRON_METADATA_PW=root
  771.  
  772. # Specify 'y' to install OpenStack Networking's L3 Metering agent
  773. # ['y', 'n']
  774. CONFIG_NEUTRON_METERING_AGENT_INSTALL=y
  775.  
  776. # Specify 'y' to configure OpenStack Networking's VPN-as-a-Service
  777. # (VPNaaS). ['y', 'n']
  778. CONFIG_NEUTRON_VPNAAS=n
  779.  
  780. # Comma-separated list of network-type driver entry points to be
  781. # loaded from the neutron.ml2.type_drivers namespace. ['local',
  782. # 'flat', 'vlan', 'gre', 'vxlan', 'geneve']
  783. CONFIG_NEUTRON_ML2_TYPE_DRIVERS=vxlan,flat,vlan
  784.  
  785. # Comma-separated, ordered list of network types to allocate as
  786. # tenant networks. The 'local' value is only useful for single-box
  787. # testing and provides no connectivity between hosts. ['local',
  788. # 'vlan', 'gre', 'vxlan', 'geneve']
  789. CONFIG_NEUTRON_ML2_TENANT_NETWORK_TYPES=vxlan,vlan
  790.  
  791. # Comma-separated ordered list of networking mechanism driver entry
  792. # points to be loaded from the neutron.ml2.mechanism_drivers
  793. # namespace. ['logger', 'test', 'linuxbridge', 'openvswitch',
  794. # 'hyperv', 'ncs', 'arista', 'cisco_nexus', 'mlnx', 'l2population',
  795. # 'sriovnicswitch', 'ovn']
  796. CONFIG_NEUTRON_ML2_MECHANISM_DRIVERS=openvswitch,linuxbridge,l2population
  797.  
  798. # Comma-separated list of physical_network names with which flat
  799. # networks can be created. Use * to allow flat networks with arbitrary
  800. # physical_network names.
  801. CONFIG_NEUTRON_ML2_FLAT_NETWORKS=*
  802.  
  803. # Comma-separated list of <physical_network>:<vlan_min>:<vlan_max> or
  804. # <physical_network> specifying physical_network names usable for VLAN
  805. # provider and tenant networks, as well as ranges of VLAN tags on each
  806. # available for allocation to tenant networks.
  807. CONFIG_NEUTRON_ML2_VLAN_RANGES=vlan:684:684
  808.  
  809. # Comma-separated list of <tun_min>:<tun_max> tuples enumerating
  810. # ranges of GRE tunnel IDs that are available for tenant-network
  811. # allocation. A tuple must be an array with tun_max +1 - tun_min >
  812. # 1000000.
  813. CONFIG_NEUTRON_ML2_TUNNEL_ID_RANGES=
  814.  
  815. # Comma-separated list of addresses for VXLAN multicast group. If
  816. # left empty, disables VXLAN from sending allocate broadcast traffic
  817. # (disables multicast VXLAN mode). Should be a Multicast IP (v4 or v6)
  818. # address.
  819. CONFIG_NEUTRON_ML2_VXLAN_GROUP=
  820.  
  821. # Comma-separated list of <vni_min>:<vni_max> tuples enumerating
  822. # ranges of VXLAN VNI IDs that are available for tenant network
  823. # allocation. Minimum value is 0 and maximum value is 16777215.
  824. CONFIG_NEUTRON_ML2_VNI_RANGES=10:100
  825.  
  826. # Name of the L2 agent to be used with OpenStack Networking.
  827. # ['linuxbridge', 'openvswitch', 'ovn']
  828. CONFIG_NEUTRON_L2_AGENT=openvswitch
  829.  
  830. # Comma-separated list of interface mappings for the OpenStack
  831. # Networking ML2 SRIOV agent. Each tuple in the list must be in the
  832. # format <physical_network>:<net_interface>. Example:
  833. # physnet1:eth1,physnet2:eth2,physnet3:eth3.
  834. CONFIG_NEUTRON_ML2_SRIOV_INTERFACE_MAPPINGS=
  835.  
  836. # Comma-separated list of interface mappings for the OpenStack
  837. # Networking linuxbridge plugin. Each tuple in the list must be in the
  838. # format <physical_network>:<net_interface>. Example:
  839. # physnet1:eth1,physnet2:eth2,physnet3:eth3.
  840. CONFIG_NEUTRON_LB_INTERFACE_MAPPINGS=
  841.  
  842. # Comma-separated list of bridge mappings for the OpenStack
  843. # Networking Open vSwitch plugin. Each tuple in the list must be in
  844. # the format <physical_network>:<ovs_bridge>. Example: physnet1:br-
  845. # eth1,physnet2:br-eth2,physnet3:br-eth3
  846. CONFIG_NEUTRON_OVS_BRIDGE_MAPPINGS=extnet:br-ex,vlan:br-ex1,securenet:br-ex2
  847.  
  848. # Comma-separated list of colon-separated Open vSwitch
  849. # <bridge>:<interface> pairs. The interface will be added to the
  850. # associated bridge. If you desire the bridge to be persistent a value
  851. # must be added to this directive, also
  852. # CONFIG_NEUTRON_OVS_BRIDGE_MAPPINGS must be set in order to create
  853. # the proper port. This can be achieved from the command line by
  854. # issuing the following command: packstack --allinone --os-neutron-
  855. # ovs-bridge-mappings=ext-net:br-ex --os-neutron-ovs-bridge-
  856. # interfaces=br-ex:eth0
  857. CONFIG_NEUTRON_OVS_BRIDGE_IFACES=br-ex:eno3, br-ex1:eno1, br-ex2:eno2
  858.  
  859. # Comma-separated list of Open vSwitch bridges that must be created
  860. # and connected to interfaces in compute nodes when flat or vlan type
  861. # drivers are enabled. These bridges must exist in
  862. # CONFIG_NEUTRON_OVS_BRIDGE_MAPPINGS and
  863. # CONFIG_NEUTRON_OVS_BRIDGE_IFACES. Example: --os-neutron-ovs-bridges-
  864. # compute=br-vlan --os-neutron-ovs-bridge-mappings="extnet:br-
  865. # ex,physnet1:br-vlan" --os-neutron-ovs-bridge-interfaces="br-
  866. # ex:eth1,br-vlan:eth2"
  867. CONFIG_NEUTRON_OVS_BRIDGES_COMPUTE=br-ex,br-ex1,br-ex2
  868.  
  869. # Name of physical network used for external network when enabling
  870. # CONFIG_PROVISION_DEMO. Name must be one of the included in
  871. # CONFIG_NEUTRON_OVS_BRIDGE_MAPPINGS. Example: --os-neutron-ovs-
  872. # bridge-mappings="extnet:br-ex,physnet1:br-vlan" --os-neutron-ovs-
  873. # bridge-interfaces="br-ex:eth1,br-vlan:eth2" --os-neutron-ovs-
  874. # external-physnet="extnet"
  875. CONFIG_NEUTRON_OVS_EXTERNAL_PHYSNET=extnet,vlan,securenet
  876.  
  877. # Interface for the Open vSwitch tunnel. Packstack overrides the IP
  878. # address used for tunnels on this hypervisor to the IP found on the
  879. # specified interface (for example, eth1).
  880. CONFIG_NEUTRON_OVS_TUNNEL_IF=
  881.  
  882. # Comma-separated list of subnets (for example,
  883. # 192.168.10.0/24,192.168.11.0/24) used for sending tunneling packets.
  884. # This is used to configure IP filtering to accept tunneling packets
  885. # from these subnets instead of specific IP addresses of peer nodes.
  886. # This is useful when you add existing nodes to EXCLUDE_SERVERS
  887. # because, in this case, packstack cannot modify the IP filtering of
  888. # the existing nodes.
  889. CONFIG_NEUTRON_OVS_TUNNEL_SUBNETS=
  890.  
  891. # VXLAN UDP port.
  892. CONFIG_NEUTRON_OVS_VXLAN_UDP_PORT=4789
  893.  
  894. # Comma-separated list of bridge mappings for the OpenStack
  895. # Networking Open Virtual Network plugin. Each tuple in the list must
  896. # be in the format <physical_network>:<ovs_bridge>. Example:
  897. # physnet1:br-eth1,physnet2:br-eth2,physnet3:br-eth3
  898. CONFIG_NEUTRON_OVN_BRIDGE_MAPPINGS=extnet:br-ex
  899.  
  900. # Comma-separated list of colon-separated Open vSwitch
  901. # <bridge>:<interface> pairs. The interface will be added to the
  902. # associated bridge. If you desire the bridge to be persistent a value
  903. # must be added to this directive, also
  904. # CONFIG_NEUTRON_OVN_BRIDGE_MAPPINGS must be set in order to create
  905. # the proper port. This can be achieved from the command line by
  906. # issuing the following command: packstack --allinone --os-neutron-
  907. # ovn-bridge-mappings=ext-net:br-ex --os-neutron-ovn-bridge-
  908. # interfaces=br-ex:eth0
  909. CONFIG_NEUTRON_OVN_BRIDGE_IFACES=
  910.  
  911. # Comma-separated list of Open vSwitch bridges that must be created
  912. # and connected to interfaces in compute nodes when flat or vlan type
  913. # drivers are enabled. These bridges must exist in
  914. # CONFIG_NEUTRON_OVN_BRIDGE_MAPPINGS and
  915. # CONFIG_NEUTRON_OVN_BRIDGE_IFACES. Example: --os-neutron-ovn-bridges-
  916. # compute=br-vlan --os-neutron-ovn-bridge-mappings="extnet:br-
  917. # ex,physnet1:br-vlan" --os-neutron-ovn-bridge-interfaces="br-
  918. # ex:eth1,br-vlan:eth2"
  919. CONFIG_NEUTRON_OVN_BRIDGES_COMPUTE=
  920.  
  921. # Name of physical network used for external network when enabling
  922. # CONFIG_PROVISION_DEMO. Name must be one of the included in
  923. # CONFIG_NEUTRON_OVN_BRIDGE_MAPPINGS. Example: --os-neutron-ovn-
  924. # bridge-mappings="extnet:br-ex,physnet1:br-vlan" --os-neutron-ovn-
  925. # bridge-interfaces="br-ex:eth1,br-vlan:eth2" --os-neutron-ovn-
  926. # external-physnet="extnet"
  927. CONFIG_NEUTRON_OVN_EXTERNAL_PHYSNET=extnet
  928.  
  929. # Interface for the Open vSwitch tunnel. Packstack overrides the IP
  930. # address used for tunnels on this hypervisor to the IP found on the
  931. # specified interface (for example, eth1).
  932. CONFIG_NEUTRON_OVN_TUNNEL_IF=
  933.  
  934. # Comma-separated list of subnets (for example,
  935. # 192.168.10.0/24,192.168.11.0/24) used for sending tunneling packets.
  936. # This is used to configure IP filtering to accept tunneling packets
  937. # from these subnets instead of specific IP addresses of peer nodes.
  938. # This is useful when you add existing nodes to EXCLUDE_SERVERS
  939. # because, in this case, packstack cannot modify the IP filtering of
  940. # the existing nodes.
  941. CONFIG_NEUTRON_OVN_TUNNEL_SUBNETS=
  942.  
  943. # Password to use for the OpenStack File Share service (manila) to
  944. # access the database.
  945. CONFIG_MANILA_DB_PW=PW_PLACEHOLDER
  946.  
  947. # Password to use for the OpenStack File Share service (manila) to
  948. # authenticate with the Identity service.
  949. CONFIG_MANILA_KS_PW=PW_PLACEHOLDER
  950.  
  951. # Backend for the OpenStack File Share service (manila); valid
  952. # options are: generic, netapp, glusternative, or glusternfs.
  953. # ['generic', 'netapp', 'glusternative', 'glusternfs']
  954. CONFIG_MANILA_BACKEND=generic
  955.  
  956. # Denotes whether the driver should handle the responsibility of
  957. # managing share servers. This must be set to false if the driver is
  958. # to operate without managing share servers. Defaults to 'false'
  959. # ['true', 'false']
  960. CONFIG_MANILA_NETAPP_DRV_HANDLES_SHARE_SERVERS=false
  961.  
  962. # The transport protocol used when communicating with the storage
  963. # system or proxy server. Valid values are 'http' and 'https'.
  964. # Defaults to 'https'. ['https', 'http']
  965. CONFIG_MANILA_NETAPP_TRANSPORT_TYPE=https
  966.  
  967. # Administrative user account name used to access the NetApp storage
  968. # system. Defaults to ''.
  969. CONFIG_MANILA_NETAPP_LOGIN=admin
  970.  
  971. # Password for the NetApp administrative user account specified in
  972. # the CONFIG_MANILA_NETAPP_LOGIN parameter. Defaults to ''.
  973. CONFIG_MANILA_NETAPP_PASSWORD=
  974.  
  975. # Hostname (or IP address) for the NetApp storage system or proxy
  976. # server. Defaults to ''.
  977. CONFIG_MANILA_NETAPP_SERVER_HOSTNAME=
  978.  
  979. # The storage family type used on the storage system; valid values
  980. # are ontap_cluster for clustered Data ONTAP. Defaults to
  981. # 'ontap_cluster'. ['ontap_cluster']
  982. CONFIG_MANILA_NETAPP_STORAGE_FAMILY=ontap_cluster
  983.  
  984. # The TCP port to use for communication with the storage system or
  985. # proxy server. If not specified, Data ONTAP drivers will use 80 for
  986. # HTTP and 443 for HTTPS. Defaults to '443'.
  987. CONFIG_MANILA_NETAPP_SERVER_PORT=443
  988.  
  989. # Pattern for searching available aggregates for NetApp provisioning.
  990. # Defaults to '(.*)'.
  991. CONFIG_MANILA_NETAPP_AGGREGATE_NAME_SEARCH_PATTERN=(.*)
  992.  
  993. # Name of aggregate on which to create the NetApp root volume. This
  994. # option only applies when the option
  995. # CONFIG_MANILA_NETAPP_DRV_HANDLES_SHARE_SERVERS is set to True.
  996. CONFIG_MANILA_NETAPP_ROOT_VOLUME_AGGREGATE=
  997.  
  998. # NetApp root volume name. Defaults to 'root'.
  999. CONFIG_MANILA_NETAPP_ROOT_VOLUME_NAME=root
  1000.  
  1001. # This option specifies the storage virtual machine (previously
  1002. # called a Vserver) name on the storage cluster on which provisioning
  1003. # of shared file systems should occur. This option only applies when
  1004. # the option driver_handles_share_servers is set to False. Defaults to
  1005. # ''.
  1006. CONFIG_MANILA_NETAPP_VSERVER=
  1007.  
  1008. # Denotes whether the driver should handle the responsibility of
  1009. # managing share servers. This must be set to false if the driver is
  1010. # to operate without managing share servers. Defaults to 'true'.
  1011. # ['true', 'false']
  1012. CONFIG_MANILA_GENERIC_DRV_HANDLES_SHARE_SERVERS=true
  1013.  
  1014. # Volume name template for Manila service. Defaults to 'manila-
  1015. # share-%s'.
  1016. CONFIG_MANILA_GENERIC_VOLUME_NAME_TEMPLATE=manila-share-%s
  1017.  
  1018. # Share mount path for Manila service. Defaults to '/shares'.
  1019. CONFIG_MANILA_GENERIC_SHARE_MOUNT_PATH=/shares
  1020.  
  1021. # Location of disk image for Manila service instance. Defaults to '
  1022. CONFIG_MANILA_SERVICE_IMAGE_LOCATION=https://www.dropbox.com/s/vi5oeh10q1qkckh/ubuntu_1204_nfs_cifs.qcow2
  1023.  
  1024. # User in Manila service instance.
  1025. CONFIG_MANILA_SERVICE_INSTANCE_USER=ubuntu
  1026.  
  1027. # Password to service instance user.
  1028. CONFIG_MANILA_SERVICE_INSTANCE_PASSWORD=ubuntu
  1029.  
  1030. # Type of networking that the backend will use. A more detailed
  1031. # description of each option is available in the Manila docs. Defaults
  1032. # to 'neutron'. ['neutron', 'nova-network', 'standalone']
  1033. CONFIG_MANILA_NETWORK_TYPE=neutron
  1034.  
  1035. # Gateway IPv4 address that should be used. Required. Defaults to ''.
  1036. CONFIG_MANILA_NETWORK_STANDALONE_GATEWAY=
  1037.  
  1038. # Network mask that will be used. Can be either decimal like '24' or
  1039. # binary like '255.255.255.0'. Required. Defaults to ''.
  1040. CONFIG_MANILA_NETWORK_STANDALONE_NETMASK=
  1041.  
  1042. # Set it if network has segmentation (VLAN, VXLAN, etc). It will be
  1043. # assigned to share-network and share drivers will be able to use this
  1044. # for network interfaces within provisioned share servers. Optional.
  1045. # Example: 1001. Defaults to ''.
  1046. CONFIG_MANILA_NETWORK_STANDALONE_SEG_ID=
  1047.  
  1048. # Can be IP address, range of IP addresses or list of addresses or
  1049. # ranges. Contains addresses from IP network that are allowed to be
  1050. # used. If empty, then will be assumed that all host addresses from
  1051. # network can be used. Optional. Examples: 10.0.0.10 or
  1052. # 10.0.0.10-10.0.0.20 or
  1053. # 10.0.0.10-10.0.0.20,10.0.0.30-10.0.0.40,10.0.0.50. Defaults to ''.
  1054. CONFIG_MANILA_NETWORK_STANDALONE_IP_RANGE=
  1055.  
  1056. # IP version of network. Optional. Defaults to '4'. ['4', '6']
  1057. CONFIG_MANILA_NETWORK_STANDALONE_IP_VERSION=4
  1058.  
  1059. # List of GlusterFS servers that can be used to create shares. Each
  1060. # GlusterFS server should be of the form [remoteuser@]<volserver>, and
  1061. # they are assumed to belong to distinct Gluster clusters.
  1062. CONFIG_MANILA_GLUSTERFS_SERVERS=
  1063.  
  1064. # Path of Manila host's private SSH key file.
  1065. CONFIG_MANILA_GLUSTERFS_NATIVE_PATH_TO_PRIVATE_KEY=
  1066.  
  1067. # Regular expression template used to filter GlusterFS volumes for
  1068. # share creation. The regex template can optionally (ie. with support
  1069. # of the GlusterFS backend) contain the #{size} parameter which
  1070. # matches an integer (sequence of digits) in which case the value
  1071. # shall be intepreted as size of the volume in GB. Examples: "manila-
  1072. # share-volume-d+$", "manila-share-volume-#{size}G-d+$"; with matching
  1073. # volume names, respectively: "manila-share-volume-12", "manila-share-
  1074. # volume-3G-13". In latter example, the number that matches "#{size}",
  1075. # that is, 3, is an indication that the size of volume is 3G.
  1076. CONFIG_MANILA_GLUSTERFS_VOLUME_PATTERN=
  1077.  
  1078. # Specifies the GlusterFS volume to be mounted on the Manila host.
  1079. # For e.g: [remoteuser@]<volserver>:/<volid>
  1080. CONFIG_MANILA_GLUSTERFS_TARGET=
  1081.  
  1082. # Base directory containing mount points for Gluster volumes.
  1083. CONFIG_MANILA_GLUSTERFS_MOUNT_POINT_BASE=
  1084.  
  1085. # Type of NFS server that mediate access to the Gluster volumes
  1086. # (Gluster or Ganesha).
  1087. CONFIG_MANILA_GLUSTERFS_NFS_SERVER_TYPE=gluster
  1088.  
  1089. # Path of Manila host's private SSH key file.
  1090. CONFIG_MANILA_GLUSTERFS_PATH_TO_PRIVATE_KEY=
  1091.  
  1092. # Remote Ganesha server node's IP address.
  1093. CONFIG_MANILA_GLUSTERFS_GANESHA_SERVER_IP=
  1094.  
  1095. # Specify 'y' to set up Horizon communication over https. ['y', 'n']
  1096. CONFIG_HORIZON_SSL=n
  1097.  
  1098. # Secret key to use for Horizon Secret Encryption Key.
  1099. CONFIG_HORIZON_SECRET_KEY=0a4eb9ce4df54d07b2bca65928b1ac43
  1100.  
  1101. # PEM-encoded certificate to be used for SSL connections on the https
  1102. # server. To generate a certificate, leave blank.
  1103. CONFIG_HORIZON_SSL_CERT=
  1104.  
  1105. # SSL keyfile corresponding to the certificate if one was specified.
  1106. # The certificate should not require a passphrase.
  1107. CONFIG_HORIZON_SSL_KEY=
  1108.  
  1109. CONFIG_HORIZON_SSL_CACERT=
  1110.  
  1111. # Password to use for the Object Storage service to authenticate with
  1112. # the Identity service.
  1113. CONFIG_SWIFT_KS_PW=root
  1114.  
  1115. # Comma-separated list of devices to use as storage device for Object
  1116. # Storage. Each entry must take the format /path/to/dev (for example,
  1117. # specifying /dev/vdb installs /dev/vdb as the Object Storage storage
  1118. # device; Packstack does not create the filesystem, you must do this
  1119. # first). If left empty, Packstack creates a loopback device for test
  1120. # setup.
  1121. CONFIG_SWIFT_STORAGES=
  1122.  
  1123. # Number of Object Storage storage zones; this number MUST be no
  1124. # larger than the number of configured storage devices.
  1125. CONFIG_SWIFT_STORAGE_ZONES=1
  1126.  
  1127. # Number of Object Storage storage replicas; this number MUST be no
  1128. # larger than the number of configured storage zones.
  1129. CONFIG_SWIFT_STORAGE_REPLICAS=1
  1130.  
  1131. # File system type for storage nodes. ['xfs', 'ext4']
  1132. CONFIG_SWIFT_STORAGE_FSTYPE=ext4
  1133.  
  1134. # Custom seed number to use for swift_hash_path_suffix in
  1135. # /etc/swift/swift.conf. If you do not provide a value, a seed number
  1136. # is automatically generated.
  1137. CONFIG_SWIFT_HASH=ed13bfdcbe3d435a
  1138.  
  1139. # Size of the Object Storage loopback file storage device.
  1140. CONFIG_SWIFT_STORAGE_SIZE=2G
  1141.  
  1142. # Password used by Orchestration service user to authenticate against
  1143. # the database.
  1144. CONFIG_HEAT_DB_PW=root
  1145.  
  1146. # Encryption key to use for authentication in the Orchestration
  1147. # database (16, 24, or 32 chars).
  1148. CONFIG_HEAT_AUTH_ENC_KEY=389ca6ac137b41b1
  1149.  
  1150. # Password to use for the Orchestration service to authenticate with
  1151. # the Identity service.
  1152. CONFIG_HEAT_KS_PW=root
  1153.  
  1154. # Specify 'y' to install the Orchestration CloudFormation API. ['y',
  1155. # 'n']
  1156. CONFIG_HEAT_CFN_INSTALL=y
  1157.  
  1158. # Name of the Identity domain for Orchestration.
  1159. CONFIG_HEAT_DOMAIN=heat
  1160.  
  1161. # Name of the Identity domain administrative user for Orchestration.
  1162. CONFIG_HEAT_DOMAIN_ADMIN=heat_admin
  1163.  
  1164. # Password for the Identity domain administrative user for
  1165. # Orchestration.
  1166. CONFIG_HEAT_DOMAIN_PASSWORD=root
  1167.  
  1168. # Specify 'y' to provision for demo usage and testing. ['y', 'n']
  1169. CONFIG_PROVISION_DEMO=n
  1170.  
  1171. # Specify 'y' to configure the OpenStack Integration Test Suite
  1172. # (tempest) for testing. The test suite requires OpenStack Networking
  1173. # to be installed. ['y', 'n']
  1174. CONFIG_PROVISION_TEMPEST=n
  1175.  
  1176. # CIDR network address for the floating IP subnet.
  1177. CONFIG_PROVISION_DEMO_FLOATRANGE=172.24.4.0/24
  1178.  
  1179. # Allocation pools in the floating IP subnet.
  1180. CONFIG_PROVISION_DEMO_ALLOCATION_POOLS=[]
  1181.  
  1182. # The name to be assigned to the demo image in Glance (default
  1183. # "cirros").
  1184. CONFIG_PROVISION_IMAGE_NAME=cirros
  1185.  
  1186. # A URL or local file location for an image to download and provision
  1187. # in Glance (defaults to a URL for a recent "cirros" image).
  1188. CONFIG_PROVISION_IMAGE_URL=https://download.cirros-cloud.net/0.3.5/cirros-0.3.5-x86_64-disk.img
  1189.  
  1190. # Format for the demo image (default "qcow2").
  1191. CONFIG_PROVISION_IMAGE_FORMAT=qcow2
  1192.  
  1193. # Properties of the demo image (none by default).
  1194. CONFIG_PROVISION_IMAGE_PROPERTIES=
  1195.  
  1196. # User to use when connecting to instances booted from the demo
  1197. # image.
  1198. CONFIG_PROVISION_IMAGE_SSH_USER=cirros
  1199.  
  1200. # Name of the uec image created in Glance used in tempest tests
  1201. # (default "cirros-uec").
  1202. CONFIG_PROVISION_UEC_IMAGE_NAME=cirros-uec
  1203.  
  1204. # URL of the kernel image copied to Glance image for uec image
  1205. # (defaults to a URL for a recent "cirros" uec image).
  1206. CONFIG_PROVISION_UEC_IMAGE_KERNEL_URL=https://download.cirros-cloud.net/0.3.5/cirros-0.3.5-x86_64-kernel
  1207.  
  1208. # URL of the ramdisk image copied to Glance image for uec image
  1209. # (defaults to a URL for a recent "cirros" uec image).
  1210. CONFIG_PROVISION_UEC_IMAGE_RAMDISK_URL=https://download.cirros-cloud.net/0.3.5/cirros-0.3.5-x86_64-initramfs
  1211.  
  1212. # URL of the disk image copied to Glance image for uec image
  1213. # (defaults to a URL for a recent "cirros" uec image).
  1214. CONFIG_PROVISION_UEC_IMAGE_DISK_URL=https://download.cirros-cloud.net/0.3.5/cirros-0.3.5-x86_64-disk.img
  1215.  
  1216. CONFIG_TEMPEST_HOST=
  1217.  
  1218. # Name of the Integration Test Suite provisioning user. If you do not
  1219. # provide a user name, Tempest is configured in a standalone mode.
  1220. CONFIG_PROVISION_TEMPEST_USER=
  1221.  
  1222. # Password to use for the Integration Test Suite provisioning user.
  1223. CONFIG_PROVISION_TEMPEST_USER_PW=PW_PLACEHOLDER
  1224.  
  1225. # CIDR network address for the floating IP subnet.
  1226. CONFIG_PROVISION_TEMPEST_FLOATRANGE=172.24.4.0/24
  1227.  
  1228. # Primary flavor name to use in Tempest.
  1229. CONFIG_PROVISION_TEMPEST_FLAVOR_NAME=m1.nano
  1230.  
  1231. # Primary flavor's disk quota in Gb.
  1232. CONFIG_PROVISION_TEMPEST_FLAVOR_DISK=1
  1233.  
  1234. # Primary flavor's ram in Mb.
  1235. CONFIG_PROVISION_TEMPEST_FLAVOR_RAM=128
  1236.  
  1237. # Primary flavor's vcpus number.
  1238. CONFIG_PROVISION_TEMPEST_FLAVOR_VCPUS=1
  1239.  
  1240. # Alternative flavor name to use in Tempest.
  1241. CONFIG_PROVISION_TEMPEST_FLAVOR_ALT_NAME=m1.micro
  1242.  
  1243. # Alternative flavor's disk quota in Gb.
  1244. CONFIG_PROVISION_TEMPEST_FLAVOR_ALT_DISK=1
  1245.  
  1246. # Alternative flavor's ram in Mb.
  1247. CONFIG_PROVISION_TEMPEST_FLAVOR_ALT_RAM=128
  1248.  
  1249. # Alternative flavor's vcpus number.
  1250. CONFIG_PROVISION_TEMPEST_FLAVOR_ALT_VCPUS=1
  1251.  
  1252. # Specify 'y' to run Tempest smoke test as last step of installation.
  1253. CONFIG_RUN_TEMPEST=n
  1254.  
  1255. # Test suites to run, example: "smoke dashboard TelemetryAlarming".
  1256. # Optional, defaults to "smoke".
  1257. CONFIG_RUN_TEMPEST_TESTS=smoke
  1258.  
  1259. # Tests to skip, example: "test_basic_scenario test_volume".
  1260. # Optional, defaults to "".
  1261. CONFIG_SKIP_TEMPEST_TESTS=
  1262.  
  1263. # Specify 'y' to configure the Open vSwitch external bridge for an
  1264. # all-in-one deployment (the L3 external bridge acts as the gateway
  1265. # for virtual machines). ['y', 'n']
  1266. CONFIG_PROVISION_OVS_BRIDGE=y
  1267.  
  1268. # Password to use for Gnocchi to access the database.
  1269. CONFIG_GNOCCHI_DB_PW=root
  1270.  
  1271. # Password to use for Gnocchi to authenticate with the Identity
  1272. # service.
  1273. CONFIG_GNOCCHI_KS_PW=root
  1274.  
  1275. # Secret key for signing Telemetry service (ceilometer) messages.
  1276. CONFIG_CEILOMETER_SECRET=dde4b7b966db464e
  1277.  
  1278. # Password to use for Telemetry to authenticate with the Identity
  1279. # service.
  1280. CONFIG_CEILOMETER_KS_PW=root
  1281.  
  1282. # Ceilometer service name. ['httpd', 'ceilometer']
  1283. CONFIG_CEILOMETER_SERVICE_NAME=httpd
  1284.  
  1285. # Backend driver for Telemetry's group membership coordination.
  1286. # ['redis', 'none']
  1287. CONFIG_CEILOMETER_COORDINATION_BACKEND=redis
  1288.  
  1289. # Whether to enable ceilometer middleware in swift proxy. By default
  1290. # this should be false to avoid unnecessary load.
  1291. CONFIG_ENABLE_CEILOMETER_MIDDLEWARE=n
  1292.  
  1293. # IP address of the server on which to install the Redis server.
  1294. CONFIG_REDIS_HOST=192.168.15.61
  1295.  
  1296. # Port on which the Redis server listens.
  1297. CONFIG_REDIS_PORT=6379
  1298.  
  1299. # Password to use for Telemetry Alarming to authenticate with the
  1300. # Identity service.
  1301. CONFIG_AODH_KS_PW=root
  1302.  
  1303. # Password to use for Telemetry Alarming (AODH) to access the
  1304. # database.
  1305. CONFIG_AODH_DB_PW=root
  1306.  
  1307. # Password to use for Panko to access the database.
  1308. CONFIG_PANKO_DB_PW=PW_PLACEHOLDER
  1309.  
  1310. # Password to use for Panko to authenticate with the Identity
  1311. # service.
  1312. CONFIG_PANKO_KS_PW=PW_PLACEHOLDER
  1313.  
  1314. # Password to use for OpenStack Database-as-a-Service (trove) to
  1315. # access the database.
  1316. CONFIG_TROVE_DB_PW=PW_PLACEHOLDER
  1317.  
  1318. # Password to use for OpenStack Database-as-a-Service to authenticate
  1319. # with the Identity service.
  1320. CONFIG_TROVE_KS_PW=PW_PLACEHOLDER
  1321.  
  1322. # User name to use when OpenStack Database-as-a-Service connects to
  1323. # the Compute service.
  1324. CONFIG_TROVE_NOVA_USER=trove
  1325.  
  1326. # Tenant to use when OpenStack Database-as-a-Service connects to the
  1327. # Compute service.
  1328. CONFIG_TROVE_NOVA_TENANT=services
  1329.  
  1330. # Password to use when OpenStack Database-as-a-Service connects to
  1331. # the Compute service.
  1332. CONFIG_TROVE_NOVA_PW=PW_PLACEHOLDER
  1333.  
  1334. # Password to use for OpenStack Data Processing (sahara) to access
  1335. # the database.
  1336. CONFIG_SAHARA_DB_PW=PW_PLACEHOLDER
  1337.  
  1338. # Password to use for OpenStack Data Processing to authenticate with
  1339. # the Identity service.
  1340. CONFIG_SAHARA_KS_PW=PW_PLACEHOLDER
  1341.  
  1342. # Password to use for the Magnum to access the database.
  1343. CONFIG_MAGNUM_DB_PW=PW_PLACEHOLDER
  1344.  
  1345. # Password to use for the Magnum to authenticate with the Identity
  1346. # service.
  1347. CONFIG_MAGNUM_KS_PW=PW_PLACEHOLDER
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement