Overcloud Parameters
Parameters for customizing the core template collection for a Red Hat OpenStack Platform overcloud
Abstract
Chapter 1. Core Overcloud Parameters
| Parameter | Description |
|---|---|
|
|
Set to true to append per network VIPs to |
|
|
The DNS domain used for the hosts. This should match the |
|
|
The DNS name of this cloud. The default value is: |
|
|
The DNS name of this cloud’s control plane endpoint. The default value is: |
|
|
The DNS name of this cloud’s internal API endpoint. The default value is: |
|
|
The DNS name of this cloud’s storage endpoint. E.g. ci-overcloud.storage.tripleo.org. The default value is: |
|
|
The DNS name of this cloud’s storage management endpoint. The default value is: |
|
|
Defines a fixed VIP for the Control Plane. Value uses the following format: |
|
|
The name of the undercloud OpenStack Networking (neutron) control plane subnet. The default value is: |
|
|
Setting this to a unique value will re-run any deployment tasks that perform configuration on a Heat |
|
| List of server hostnames to blacklist from any triggered deployments. |
|
| Can be used to override the calcluated EndpointMap. |
|
| Additional hiera configuration to inject into the cluster. |
|
| List of extra hosts entries to be appended to /etc/hosts. |
|
|
An Open vSwitch bridge to create on each hypervisor. This defaults to |
|
|
What interface to add to the |
|
|
Control the IP allocation for the InternalApiVirtualInterface port. Value uses the following format: |
|
|
ID or name for Control Plane ctlplane network. The default value is: |
|
|
The interface to attach to the external bridge. The default value is: |
|
|
Maximum batch size for creating nodes. It is recommended to not exceed a batch size of 32 nodes. The default value is: |
|
|
Control the IP allocation for the PublicVirtualInterface port. Value uses the following format: |
|
|
Salt for the RabbitMQ cookie. Change to force the randomly generated RabbitMQ cookie to change. The default value is: |
|
|
Control the IP allocation for the virtual IP used by Redis. Value uses the following format: |
|
| Extra properties or metadata passed to Nova for the created nodes in the overcloud. Accessible through the Nova metadata API. |
|
|
Control the IP allocation for the StorageMgmgVirtualInterface port. Value uses the following format: |
|
|
Control the IP allocation for the StorageVirtualInterface port. Value uses the following format: |
|
|
Set to a previously unused value during |
Chapter 2. Role-Based Parameters
Substitute _ROLE_ with the name of the role. For example, for _ROLE_Count use ControllerCount.
| Parameter | Description |
|---|---|
|
| The number of nodes to deploy in a role. |
|
| Role specific additional hiera configuration to inject into the cluster. |
|
|
Format for node hostnames. Note that |
|
| Optional Role Specific parameters to be provided to service. |
|
|
List of resources to be removed from the role’s |
|
| Optional scheduler hints to pass to OpenStack Compute (nova). |
|
| A list of service resources (configured in the OpenStack Orchestration (heat) resource_registry) which represent nested stacks for each service that should get installed on the ROLE role. |
Chapter 3. Debug Parameters
These parameters allow you to set debug mode on a per-service basis. The Debug parameter acts as a global parameter for all services and the per-service parameters can override the effects of global parameter on individual services.
| Parameter | Description |
|---|---|
|
| Set to True to enable debugging OpenStack Telemetry Alarming (aodh) services. |
|
| Set to True to enable debugging OpenStack Key Manager (barbican) service. |
|
| Set to True to enable debugging OpenStack Telemetry (ceilometer) services. |
|
| Set to True to enable debugging on OpenStack Block Storage (cinder) services. |
|
| Set to True to enable debugging for OpenStack Policy-as-a-Service (congress) service. |
|
|
Set to True to enable debugging on all services. The default value is: |
|
| Set to True to enable debugging OpenStack Image Storage (glance) service. |
|
| Set to True to enable debugging OpenStack Telemetry Metrics (gnocchi) services. |
|
| Set to True to enable debugging OpenStack Orchestration (heat) services. |
|
| Set to True to enable debugging OpenStack Dashboard (horizon) service. |
|
| Set to True to enable debugging OpenStack Bare Metal (ironic) services. |
|
| Set to True to enable debugging OpenStack Identity (keystone) service. |
|
| Set to True to enable debugging OpenStack Shared File Systems (manila) services. |
|
| Set to True to enable debugging OpenStack Workflow (mistral) services. |
|
| Set to True to enable debugging OpenStack Networking (neutron) services. |
|
| Set to True to enable debugging for OpenStack Networking (neutron) L3 agent. |
|
| Set to True to enable debugging OpenStack Compute (nova) services. |
|
| Set to True to enable debugging OpenStack Load Balancing-as-a-Service (octavia) services. |
|
| Set to True to enable debugging OpenStack Telemetry Event Storage (panko) services. |
|
| Set to True to enable debugging OpenStack Clustering (sahara) services. |
|
| Set to True to enable debugging OpenStack Messaging (zaqar) service. |
Chapter 4. Policy Parameters
These parameters allow you to set policies on a per-service basis.
| Parameter | Description |
|---|---|
|
| A hash of policies to configure for OpenStack Telemetry Alarming (aodh) API. |
|
| A hash of policies to configure for OpenStack Key Manager (barbican). |
|
| A hash of policies to configure for OpenStack Block Storage (cinder) API. |
|
| A hash of policies to configure for OpenStack Policy Framework (congress). |
|
| A hash of policies to configure for EC2-API. |
|
| A hash of policies to configure for OpenStack Image Storage (glance) API. |
|
| A hash of policies to configure for OpenStack Telemetry Metrics (gnocchi) API. |
|
| A hash of policies to configure for OpenStack Orchestration (heat) API. |
|
| A hash of policies to configure for OpenStack Bare Metal (ironic) API. |
|
| A hash of policies to configure for OpenStack Identity (keystone). |
|
| A hash of policies to configure for OpenStack Workflow (mistral) API. |
|
| A hash of policies to configure for OpenStack Networking (neutron) API. |
|
| A hash of policies to configure for OpenStack Compute (nova) API. |
|
| A hash of policies to configure for OpenStack Load Balancing-as-a-Service (octavia) API. |
|
| A hash of policies to configure for OpenStack Telemetry Event Storage (panko) API. |
|
| A hash of policies to configure for OpenStack Clustering (sahara) API. |
|
| A hash of policies to configure for OpenStack Messaging (zaqar). |
Chapter 5. Ceph Storage Parameters
| Parameter | Description |
|---|---|
|
|
The Ceph admin client key. Can be created with: |
|
|
The Ceph client key. Currently only used for external Ceph deployments to create the openstack user keyring. Can be created with: |
|
| The Ceph cluster FSID. Must be a UUID. |
|
|
Enables Ceph daemons to bind to IPv6 addresses. The default is: |
|
|
The Ceph client key. Can be created with: |
|
|
The Ceph monitors key. Can be created with: |
|
|
Default minimum replication for RBD copies. The default value is: |
|
|
Override settings for one of the predefined pools or to create additional ones. Example: |
|
|
Interval (in seconds) in between validation checks. The default value is: |
|
|
Number of retry attempts for Ceph validation. The default value is: |
|
|
Pool to use if Block Storage (cinder) Backup is enabled. The default is: |
|
| List of extra Ceph pools for use with RBD backends for OpenStack Block Storage (cinder). An extra OpenStack Block Storage (cinder) RBD backend driver is created for each pool in the list. This is in addition to the standard RBD backend driver associated with the CinderRbdPoolName. |
|
|
Pool to use for Block Storage (cinder) service. The default is: |
|
|
Whether to deploy Ceph Storage (OSD) on the Controller. The default value is: |
|
|
Pool to use for Image Storage (glance) service. The default is: |
|
|
Pool to use for Telemetry storage. The default is: |
|
|
If enabled, Ceph upgrade will be forced even though cluster or PGs status is not clean. The default value is: |
|
|
Pool to use for file share storage. The default is: |
|
|
Pool to use for file share metadata storage. The default is: |
|
|
The Cephx user id for manila. The default is: |
|
|
Pool to use for Compute storage. The default is: |
Chapter 6. Ceph RadosGW Parameters
| Parameter | Description |
|---|---|
|
|
The cephx key for the radosgw client. Can be created with: |
Chapter 7. Block Storage (cinder) Parameters
| Parameter | Description |
|---|---|
|
|
Cron to move deleted instances to another table - Age. The default value is: |
|
|
Cron to move deleted instances to another table - Log destination. The default value is: |
|
|
Cron to move deleted instances to another table - Hour. The default value is: |
|
|
Cron to move deleted instances to another table - Minute. The default value is: |
|
|
Cron to move deleted instances to another table - Month. The default value is: |
|
|
Cron to move deleted instances to another table - Month Day. The default value is: |
|
|
Cron to move deleted instances to another table - User. The default value is: |
|
|
Cron to move deleted instances to another table - Week Day. The default value is: |
|
|
Whether to create cron job for purging soft deleted rows in OpenStack Block Storage (cinder) database. The default value is: |
|
| The password for the cinder service account, used by cinder-api. |
|
| Set the number of workers for the block storage service. The default value is equal to the number of CPU cores on the node. Note that more workers creates a larger number of processes on systems, which results in excess memory consumption. It is recommended to choose a suitable non-default value on systems with high CPU core counts. |
|
|
Driver or drivers to handle sending notifications. The default value is: |
Chapter 8. Image Storage (glance) Parameters
| Parameter | Description |
|---|---|
|
|
The Ceph cluster name. The default value is: |
|
|
The short name of the backend to use. Should be one of |
|
|
List of enabled Image Import Methods. Valid values in the list are glance-direct and web-download. The default value is: |
|
|
Maximum number of image members per image. Negative values evaluate to unlimited. The default value is: |
|
| The filepath of the file to use for logging messages from OpenStack Image Storage (glance). |
|
|
When using |
|
|
When using |
|
|
NFS mount options for image storage when |
|
|
NFS share to mount for image storage when |
|
|
URI that specifies the staging location to use when importing images. The default value is: |
|
|
Strategy to use for OpenStack Image Storage (glance) notification queue. The default value is: |
|
| The password for the image storage service and database account. |
|
|
NFS mount options for NFS image import staging. The default value is: |
|
| NFS share to mount for image import staging. |
|
| Set the number of workers for the image storage service. The default value is equal to the number of CPU cores on the node. Note that more workers creates a larger number of processes on systems, which results in excess memory consumption. It is recommended to choose a suitable non-default value on systems with high CPU core counts. |
|
| Netapp share to mount for image storage (when GlanceNetappNfsEnabled is true). |
|
|
Driver or drivers to handle sending notifications. The default value is: |
Chapter 9. Orchestration (heat) Parameters
| Parameter | Description |
|---|---|
|
| Auth encryption key for heat-engine. |
|
|
Enables the heat engine with the convergence architecture. The default value is: |
|
|
Cron to purge database entries marked as deleted and older than $age - Age. The default value is: |
|
|
Cron to purge database entries marked as deleted and older than $age - Age type. The default value is: |
|
|
Cron to purge database entries marked as deleted and older than $age - Log destination. The default value is: |
|
|
Cron to purge database entries marked as deleted and older than $age - Ensure. The default value is: |
|
|
Cron to purge database entries marked as deleted and older than $age - Hour. The default value is: |
|
|
Cron to purge database entries marked as deleted and older than $age - Max Delay. The default value is: |
|
|
Cron to purge database entries marked as deleted and older than $age - Minute. The default value is: |
|
|
Cron to purge database entries marked as deleted and older than $age - Month. The default value is: |
|
|
Cron to purge database entries marked as deleted and older than $age - Month Day. The default value is: |
|
|
Cron to purge database entries marked as deleted and older than $age - User. The default value is: |
|
|
Cron to purge database entries marked as deleted and older than $age - Week Day. The default value is: |
|
|
Whether to create cron job for purging soft deleted rows in the OpenStack Orchestration (heat) database. The default value is: |
|
| An array of directories to search for plug-ins. |
|
|
Maximum raw byte size of the OpenStack Orchestration (heat) API JSON request body. The default value is: |
|
|
Maximum resources allowed per top-level stack. -1 stands for unlimited. The default value is: |
|
| The password for the Orchestration service and database account. |
|
| The admin password for the OpenStack Orchestration (heat) domain in OpenStack Identity (keystone). |
|
| Number of workers for Heat service. The default value is: 0. Note that more workers creates a larger number of processes on systems, which results in excess memory consumption. It is recommended to choose a suitable non-default value on systems with high CPU core counts. |
|
|
Driver or drivers to handle sending notifications. The default value is: |
Chapter 10. Dashboard (horizon) Parameters
| Parameter | Description |
|---|---|
|
|
A list of IP/Hostname for the server OpenStack Dashboard (horizon) is running on. Used for header checks. The default value is: |
|
| OpenStack Dashboard (horizon) has a global overrides mechanism available to perform customizations. |
|
| Regex for password validation. |
|
| Help text for password validation. |
|
| Secret key for the webserver. |
|
|
Set CSRF_COOKIE_SECURE / SESSION_COOKIE_SECURE in OpenStack Dashboard (horizon). The default value is: |
|
|
Extra parameters for OpenStack Dashboard (horizon) vhost configuration. The default value is: |
|
|
Specifies the default CA cert to use if TLS is used for services in the internal network. The default value is: |
|
|
Enable IPv6 features in Memcached. The default value is: |
Chapter 11. Bare Metal (ironic) Parameters
| Parameter | Description |
|---|---|
|
|
Type of disk cleaning before and between deployments. |
|
|
Name or UUID of the overcloud network used for cleaning bare metal nodes. The default value of |
|
|
How to boot the bare metal instances. Set to |
|
|
Network interface implementation to use by default. Set to |
|
| Default resource class to use for new nodes. |
|
|
Backend to use to store ramdisk logs, either "local" or "swift". The default value is: |
|
|
Whether to enable use of staging drivers. The default value is: |
|
|
Enabled boot interface implementations. Each hardware type must have at least one valid implementation enabled. The default value is: |
|
|
Enabled console interface implementations. Each hardware type must have at least one valid implementation enabled. The default value is: |
|
|
Enabled deploy interface implementations. Each hardware type must have at least one valid implementation enabled. The default value is: |
|
|
Enabled OpenStack Bare Metal (ironic) drivers. The default value is: |
|
|
Enabled OpenStack Bare Metal (ironic) hardware types. The default value is: |
|
|
Enabled inspect interface implementations. Each hardware type must have at least one valid implementation enabled. The default value is: |
|
|
Enabled management interface implementations. Each hardware type must have at least one valid implementation enabled. The default value is: |
|
|
Enabled network interface implementations. Each hardware type must have at least one valid implementation enabled. The default value is: |
|
|
Enabled power interface implementations. Each hardware type must have at least one valid implementation enabled. The default value is: |
|
|
Enabled RAID interface implementations. Each hardware type must have at least one valid implementation enabled. The default value is: |
|
|
Enabled storage interface implementations. Each hardware type must have at least one valid implementation enabled. The default value is: |
|
|
Enabled vendor interface implementations. Each hardware type must have at least one valid implementation enabled. The default value is: |
|
|
Whether to use iPXE instead of PXE for deployment. The default value is: |
|
|
Port to use for serving images when iPXE is used. The default value is: |
|
|
Comma-separated list of IPA inspection collectors. The default value is: |
|
|
The default driver to use for newly discovered nodes (requires IronicInspectorEnableNodeDiscovery set to True). This driver is automatically added to enabled_drivers. The default value is: |
|
|
Makes ironic-inspector enroll any unknown node that PXE-boots introspection ramdisk in OpenStack Bare Metal (ironic). The default driver to use for new nodes is specified by the IronicInspectorDiscoveryDefaultDriver parameter. Introspection rules can also be used to specify it. The default value is: |
|
|
Comma-separated list of processing hooks to append to the default list. The default value is: |
|
|
Whether to use iPXE for inspection. The default value is: |
|
|
Network interface on which inspection dnsmasq will listen. The default value is: |
|
|
Temporary IP range that will be given to nodes during the inspection process. This should not overlap with any range that OpenStack Networking (neutron) DHCP allocates, but it has to be routeable back to |
|
|
Kernel args for the OpenStack Bare Metal (ironic) inspector. The default value is: |
|
|
Whether to use Swift for storing introspection data. The default value is: |
|
| The password for the Bare Metal service and database account. |
|
|
Name or UUID of the overcloud network used for provisioning of bare metal nodes if |
Chapter 12. Identity (keystone) Parameters
| Parameter | Description |
|---|---|
|
|
The email for the OpenStack Identity (keystone) admin account. The default value is: |
|
| The password for the OpenStack Identity (keystone) admin account. |
|
| The OpenStack Identity (keystone) secret and database password. |
|
| Enabling this option requires users to change their password when the user is created, or upon administrative reset. |
|
| The first OpenStack Identity (keystone) credential key. Must be a valid key. |
|
| The second OpenStack Identity (keystone) credential key. Must be a valid key. |
|
|
Cron to purge expired tokens - Log destination. The default value is: |
|
|
Cron to purge expired tokens - Ensure. The default value is: |
|
|
Cron to purge expired tokens - Hour. The default value is: |
|
|
Cron to purge expired tokens - Max Delay. The default value is: |
|
|
Cron to purge expired tokens - Minute. The default value is: |
|
|
Cron to purge expired tokens - Month. The default value is: |
|
|
Cron to purge expired tokens - Month Day. The default value is: |
|
|
Cron to purge expired tokens - User. The default value is: |
|
|
Cron to purge expired tokens - Week Day. The default value is: |
|
| The maximum number of days a user can go without authenticating before being considered "inactive" and automatically disabled (locked). |
|
|
Whether to create cron job for purging soft deleted rows in OpenStack Identity (keystone) database. The default value is: |
|
| The first OpenStack Identity (keystone) fernet key. Must be a valid key. |
|
| The second OpenStack Identity (keystone) fernet key. Must be a valid key. |
|
| Mapping containing OpenStack Identity (keystone) fernet keys and their paths. |
|
|
The maximum active keys in the OpenStack Identity (keystone) fernet key repository. The default value is: |
|
| Hash containing the configurations for the LDAP backends configured in keystone. |
|
|
Trigger to call ldap_backend puppet keystone define. The default value is: |
|
| The number of seconds a user account will be locked when the maximum number of failed authentication attempts (as specified by KeystoneLockoutFailureAttempts) is exceeded. |
|
| The maximum number of times that a user can fail to authenticate before the user account is locked for the number of seconds specified by KeystoneLockoutDuration. |
|
| The number of days that a password must be used before the user can change it. This prevents users from changing their passwords immediately in order to wipe out their password history and reuse an old password. |
|
|
Comma-separated list of Oslo notification drivers used by Keystone. The default value is: |
|
|
The OpenStack Identity (keystone) notification format. The default value is: |
|
| OpenStack Identity (keystone) notification topics to enable. |
|
| The number of days for which a password will be considered valid before requiring it to be changed. |
|
| The regular expression used to validate password strength requirements. |
|
| Describe your password regular expression here in language for humans. |
|
| Keystone certificate for verifying token validity. |
|
| Keystone key for signing tokens. |
|
|
The OpenStack Identity (keystone) token format. The default value is: |
|
| This controls the number of previous user password iterations to keep in history, in order to enforce that newly created passwords are unique. |
|
| Set the number of workers for the OpenStack Identity (keystone) service. The default value is equal to the number of CPU cores on the node. Note that more workers creates a larger number of processes on systems, which results in excess memory consumption. It is recommended to choose a suitable non-default value on systems with high CPU core counts. |
|
|
Whether director should manage the OpenStack Identity (keystone) fernet keys or not. If set to True, the fernet keys will get the values from the saved keys repository in OpenStack Workflow (mistral) from the |
|
|
Driver or drivers to handle sending notifications. The default value is: |
Chapter 13. Key Manager (barabican) Parameters
| Parameter | Description |
|---|---|
|
| The password for the OpenStack Key Manager (barbican) service account. |
|
|
Whether this plugin is the global default plugin. The default value is: |
|
| KEK used to encrypt secrets. |
|
|
Set the number of workers for barbican::wsgi::apache. The default value is: |
|
|
Driver or drivers to handle sending notifications. The default value is: |
Chapter 15. Networking (neutron) Parameters
| Parameter | Description |
|---|---|
|
|
Database synchronization timeout default. The default value is: |
|
|
Enables DHCP agent notifications. The default value is: |
|
|
Remove configuration that is not generated by the director. Used to avoid configuration remnants after upgrades. The default value is: |
|
|
Specifies the default CA cert to use if TLS is used for services in the internal network. The default value is: |
|
|
Comma-separated list of extensions enabled for the OpenStack Networking (neutron) agents. The default value is: |
|
|
Allow automatic l3-agent failover. The default value is: |
|
|
The logical to physical bridge mappings to use. The default ( |
|
|
The core plugin for networking. The value should be the entrypoint to be loaded from |
|
|
String of extra command line parameters to append to the |
|
| List of servers to use as dnsmasq forwarders. |
|
|
The number of DHCP agents to schedule per network. The default value is: |
|
|
Domain to use for building the hostnames. The default value is: |
|
|
Enable ARP responder feature in the OVS Agent. The default value is: |
|
|
Enable Distributed Virtual Router. The default value is: |
|
|
If True, DHCP always provides metadata route to VM. The default value is: |
|
|
If True, DHCP allows metadata support on isolated networks. The default value is: |
|
|
Enable/disable the L2 population feature in the OpenStack Networking (neutron) agents. The default value is: |
|
|
If True, DHCP provides metadata network. Requires either |
|
| Name of bridge used for external network traffic. Usually L2 agent handles port wiring into external bridge, and hence the parameter should be unset. |
|
|
Firewall driver for realizing OpenStack Networking (neutron) security group function. The default value is: |
|
|
Sets the flat network name to configure in plugins. The default value is: |
|
|
MTU of the underlying physical network. OpenStack Networking (neutron) uses this value to calculate MTU for all virtual network components. For flat and VLAN networks, OpenStack Networking uses this value without modification. For overlay networks such as VXLAN, OpenStack Networking automatically subtracts the overlay protocol overhead from this value. The default value is: |
|
|
OpenStack Networking (neutron) DHCP Agent interface driver. The default value is: |
|
|
Agent mode for L3 agent. Must be |
|
|
The mechanism drivers for the tenant network. The default value is: |
|
| Shared secret to prevent spoofing. |
|
|
The tenant network type. The default value is: |
|
|
The OpenStack Networking (neutron) ML2 and Open vSwitch VLAN mapping range to support. Defaults to permitting any VLAN on the |
|
|
Configure the classname of the firewall driver to use for implementing security groups. Possible values depend on system configuration. Some examples are: |
|
|
IP version used for all overlay network endpoints. The default value is: |
|
| Name of Open vSwitch bridge to use. |
|
| The password for the OpenStack Networking (neutron) service and database account. |
|
|
Comma-separated list of enabled extension plugins. The default value is: |
|
|
Comma-separated list of service plugin entrypoints. The default value is: |
|
|
Comma-separated list of <tun_min>:<tun_max> tuples enumerating ranges of GRE tunnel IDs that are available for tenant network allocation. The default value is: |
|
|
The tunnel types for the tenant network. The default value is: |
|
|
Comma-separated list of network type driver entrypoints to be loaded. The default value is: |
|
|
Comma-separated list of <vni_min>:<vni_max> tuples enumerating ranges of VXLAN VNI IDs that are available for tenant network allocation. The default value is: |
|
| Sets the number of API and RPC workers for the OpenStack Networking service. The default value is equal to the number of CPU cores on the node. Note that more workers creates a larger number of processes on systems, which results in excess memory consumption. It is recommended to choose a suitable non-default value on systems with high CPU core counts. |
|
|
Driver or drivers to handle sending notifications. The default value is: |
|
|
Enable OVS Hardware Offload. This feature supported from OVS 2.8.0. The default value is: |
Chapter 16. Compute (nova) Parameters
| Parameter | Description |
|---|---|
|
|
Database synchronization timeout default. The default value is: |
|
|
Remove configuration that is not generated by the director. Used to avoid configuration remnants after upgrades. The default value is: |
|
|
Template string to be used to generate instance names. The default value is: |
|
|
Specifies the default CA cert to use if TLS is used for services in the internal network. The default value is: |
|
|
Specifies the CA cert to use for VNC TLS. The default value is: |
|
| This specifies the CA certificate to use for TLS in libvirt. This file will be symlinked to the default CA path in libvirt, which is /etc/pki/CA/cacert.pem. Note that due to limitations GNU TLS, which is the TLS backend for libvirt, the file must be less than 65K (so we can’t use the system’s CA bundle). This parameter should be used if the default (which comes from the InternalTLSCAFile parameter) is not desired. The current default reflects TripleO’s default CA, which is FreeIPA. It will only be used if internal TLS is enabled. |
|
|
This is a performance event list which could be used as monitor. For example: |
|
| The password for the libvirt service when TLS is enabled. |
|
| This specifies the CA certificate to use for VNC TLS. This file will be symlinked to the default CA path, which is /etc/pki/libvirt-vnc/ca-cert.pem. This parameter should be used if the default (which comes from the InternalTLSVncCAFile parameter) is not desired. The current default reflects TripleO’s default CA, which is FreeIPA. It will only be used if internal TLS is enabled. |
|
|
SSH key for migration. Expects a dictionary with keys public_key and private_key. Values should be identical to SSH public/private key files. The default value is: |
|
|
Target port for migration over ssh. The default value is: |
|
| Shared secret to prevent spoofing. |
|
|
Driver or drivers to handle sending notifications. The default value is: |
|
| Libvirt domain type. Defaults to kvm. |
|
| Libvirt VIF driver configuration for the network. |
|
|
Cron to move deleted instances to another table - Log destination. The default value is: |
|
|
Cron to move deleted instances to another table - Hour. The default value is: |
|
|
Cron to move deleted instances to another table - Max Rows. The default value is: |
|
|
Cron to move deleted instances to another table - Minute. The default value is: |
|
|
Cron to move deleted instances to another table - Month. The default value is: |
|
|
Cron to move deleted instances to another table - Month Day. The default value is: |
|
|
Cron to move deleted instances to another table - Until complete. The default value is: |
|
|
Cron to move deleted instances to another table - User. The default value is: |
|
|
Cron to move deleted instances to another table - Week Day. The default value is: |
|
|
Timeout for OpenStack Compute (nova) database synchronization in seconds. The default value is: |
|
|
Default pool for floating IP addresses. The default value is: |
|
|
Whether to create cron job for purging soft deleted rows in OpenStack Compute (nova) database. The default value is: |
|
|
Enable IPv6 features for OpenStack Compute (nova). The default is: |
|
|
Virtio-net RX queue size. Valid values are 256, 512, 1024. The default value is: |
|
|
Virtio-net TX queue size. Valid values are 256, 512, 1024. The default value is: |
|
|
Whether to enable or not the NFS backend for OpenStack Compute (nova). The default value is: |
|
|
NFS mount options for nova storage (when NovaNfsEnabled is true). The default value is: |
|
| NFS share to mount for nova storage (when NovaNfsEnabled is true). |
|
|
Name of integration bridge used by Open vSwitch. The default value is: |
|
| YAML list of PCI passthrough whitelist parameters. |
|
| The password for the OpenStack Compute (nova) service and database account. |
|
|
Endpoint interface to be used for the placement API. The default value is: |
|
|
Reserved RAM for host processes. The default value is: |
|
| List of available filters for OpenStack Compute (nova) to use to filter nodes. |
|
| An array of filters OpenStack Compute (nova) uses to filter a node. OpenStack Compute applies these filters in the order they are listed. Place your most restrictive filters first to make the filtering process more efficient. |
|
|
This value controls how often (in seconds) the scheduler should attempt to discover new hosts that have been added to cells. The default value of -1 disables the periodic task completely. It is recommended to set this parameter for deployments using OpenStack Bare Metal (ironic). The default value is: |
|
|
Maximum number of attempts the scheduler will make when deploying the instance. You should keep it greater or equal to the number of bare metal nodes you expect to deploy at once to work around potential race conditions when scheduling. The default value is: |
|
|
A list or range of physical CPU cores to reserve for virtual machine processes. For example, |
|
|
Number of workers for the Compute’s Conductor service. The default value is: |
|
| Type of update, to differentiate between UPGRADE and UPDATE cases when StackAction is UPDATE (both are the same stack action). |
|
|
OpenStack Compute upgrade level. The default value is: |
|
|
If set to true and if EnableInternalTLS is enabled, it will enable TLS transport for libvirt VNC and configure the relevant keys for libvirt. The default value is: |
|
|
Whether to verify image signatures. The default value is: |
Chapter 17. Clustering (sahara) Parameters
| Parameter | Description |
|---|---|
|
|
Driver or drivers to handle sending notifications. The default value is: |
|
| The password for the clusting service and database account. |
|
|
Clustering enabled plugin list. The default value is: |
|
|
Set the number of workers for the clustering service. The default value is: |
Chapter 18. Object Storage (swift) Parameters
| Parameter | Description |
|---|---|
|
|
Whether to enable object storage on Controller nodes. The default value is: |
|
|
Number of workers for Swift account service. The default value is: |
|
|
Comma-separated list of project names to ignore. The default value is: |
|
|
Set to |
|
|
Number of workers for Swift account service. The default value is: |
|
|
Set to True to enable data-at-rest encryption in Swift. The default value is: |
|
| A random string to be used as a salt when hashing to determine mappings in the ring. |
|
|
The minimum time (in hours) before a partition in a ring can be moved following a rebalance. The default value is: |
|
|
Check if the devices are mounted to prevent accidentally writing to the root device. The default value is: |
|
|
Number of workers for Swift account service. The default value is: |
|
|
Partition power to use when building object storage rings. The default value is: |
|
| The password for the object storage service account. |
|
|
Timeout for requests going from |
|
|
Additional raw devices to use for the object storage backend. For example: |
|
|
Number of replicas to use in the object storage rings. The default value is: |
|
|
Whether to manage object storage rings or not. The default value is: |
|
| A temporary Swift URL to download rings from. |
|
| A temporary Swift URL to upload rings to. |
|
|
Use a local directory for object storage services when building rings. The default value is: |
|
|
Number of workers for object storage service. The default value is: |
Chapter 19. Telemetry Parameters
| Parameter | Description |
|---|---|
|
| The password for the OpenStack Telemetry Alarming (aodh) services. |
|
| Whether to create or skip legacy Telemetry API endpoint. Set this to false to disable legacy Telemetry API service. The default value is: True. |
|
| Secret shared by the Telemetry services. |
|
| The password for the Telemetry service account. |
|
|
Number of workers for the Telemetry service. The default value is: |
|
|
The Ceph cluster name. The default value is: |
|
|
Enable panko expirer to periodically delete events from db. The default value is: |
|
|
Archive policy to use with OpenStack Telemetry Metrics (gnocchi) backend. The default value is: |
|
|
The short name of the OpenStack Telemetry Metrics (gnocchi) backend to use. Should be one of |
|
|
Project name of resources creator in OpenStack Telemetry Metrics (gnocchi). The default value is: |
|
|
Path to use when file driver is used. This could be NFS or a flat file. The default value is: |
|
|
Storage driver to use for incoming metric data. The default value is: |
|
|
The short name of the OpenStack Telemetry Metrics (gnocchi) indexer backend to use. The default value is: |
|
| Number of workers for OpenStack Telemetry Metrics (gnocchi). The default value is equal to the number of CPU cores on the node. Note that more workers creates a larger number of processes on systems, which results in excess memory consumption. It is recommended to choose a suitable non-default value on systems with high CPU core counts. |
|
| The password for the OpenStack Telemetry Metrics (gnocchi) service and database account. |
|
| S3 storage access key Id. |
|
| S3 storage access key secret. |
|
| The endpoint url for S3 storage. |
|
| S3 Region name. |
|
|
Set to modify which endpoint type is OpenStack Telemetry Metrics (gnocchi) accessing swift from. The default value is: |
|
|
Specifies the default CA cert to use if TLS is used for services in the internal network. The default value is: |
|
|
Whether to manage event_pipeline.yaml. The default value is: |
|
|
Whether to manage pipeline.yaml. The default value is: |
|
|
Whether to manage polling.yaml. The default value is: |
|
|
Delay between processing metrics. The default value is: |
|
|
Enable IPv6 if MongoDB VIP is IPv6. The default value is: |
|
|
Should MongoDb journaling be disabled. The default value is: |
|
|
Limit the amount of memory mongodb uses with systemd. The default value is: |
|
|
Driver or drivers to handle sending notifications. The default value is: |
|
|
Number of storage sacks to create. The default value is: |
|
|
Number of seconds that events are kept in the database. The default value is: |
|
|
Cron to delete events data from database - Hour. The default value is: |
|
|
Cron to delete events data from database - Minute. The default value is: |
|
|
Cron to delete events data from database - Month. The default value is: |
|
|
Cron to delete events data from database - Month Day. The default value is: |
|
|
Cron to delete events from database - Week Day. The default value is: |
|
| The password for the panko services. |
|
|
A list of publishers to put in pipeline.yaml. When the collector is used, override this with notifier:// publisher. Set ManagePipeline to true for override to take effect. The default value is: |
|
|
The user name for SNMPd with readonly rights running on all Overcloud nodes. The default value is: |
|
| The user password for SNMPd with readonly rights running on all Overcloud nodes. |
Chapter 20. Time Parameters
| Parameter | Description |
|---|---|
|
|
Set to true to enable package installation at deploy time. The default value is: |
|
|
Specify maximum poll interval of upstream servers for NTP messages, in seconds to the power of two. Allowed values are 4 to 17. The default value is: |
|
|
Specify minimum poll interval of upstream servers for NTP messages, in seconds to the power of two. The minimum poll interval defaults to 6 (64 s). Allowed values are 4 to 17. The default value is: |
|
|
Specifies whether to enable the iburst option for every NTP peer. If iburst is enabled, when the NTP server is unreachable NTP will send a burst of eight packages instead of one. This is designed to speed up the initial syncrhonization. The default value is: |
|
|
NTP servers list. The default value is: |
|
|
PTP interface name. The default value is: |
|
|
Configure PTP message transport protocol. The default value is: |
|
|
Configure PTP clock in slave mode. The default value is: |
|
|
The timezone to be set on the overcloud. The default value is: |
