|
1
by Adam Gandelman
init |
1 |
options: |
2 |
debug: |
|
3 |
default: "false" |
|
4 |
type: string |
|
|
6
by Adam Gandelman
Update config.yaml |
5 |
description: "Enable verbose logging" |
|
1
by Adam Gandelman
init |
6 |
verbose: |
7 |
default: "false" |
|
8 |
type: string |
|
|
6
by Adam Gandelman
Update config.yaml |
9 |
description: "Enable debug logging" |
|
34.1.5
by Adam Gandelman
Rename config option for consistency across charms: keystone-release -> openstack-origin. |
10 |
openstack-origin: |
11 |
default: distro |
|
12 |
type: "string" |
|
13 |
description: | |
|
14 |
Repository from which to install. May be one of the following:
|
|
15 |
distro (default), ppa:somecustom/ppa, a deb url sources entry,
|
|
16 |
or a supported Cloud Archive release pocket.
|
|
17 |
||
18 |
Supported Cloud Archive sources include: cloud:precise-folsom,
|
|
19 |
cloud:precise-folsom/updates, cloud:precise-folsom/staging,
|
|
20 |
cloud:precise-folsom/proposed.
|
|
21 |
||
22 |
Note that updating this setting to a source that is known to
|
|
23 |
provide a later version of OpenStack will trigger a software
|
|
24 |
upgrade.
|
|
|
1
by Adam Gandelman
init |
25 |
config-file: |
26 |
default: "/etc/keystone/keystone.conf" |
|
27 |
type: string |
|
|
6
by Adam Gandelman
Update config.yaml |
28 |
description: "Location of keystone configuration file" |
|
38.1.2
by Adam Gandelman
Allow setting log-level via config, drop horrid config parsing in favor of ConfigParser use. |
29 |
log-level: |
30 |
default: WARNING |
|
31 |
type: string |
|
32 |
description: Log level (WARNING, INFO, DEBUG, ERROR) |
|
|
1
by Adam Gandelman
init |
33 |
service-port: |
34 |
default: 5000 |
|
35 |
type: int |
|
|
6
by Adam Gandelman
Update config.yaml |
36 |
description: "Port the bind the API server to" |
|
1
by Adam Gandelman
init |
37 |
admin-port: |
38 |
default: 35357 |
|
39 |
type: int |
|
|
6
by Adam Gandelman
Update config.yaml |
40 |
description: "Port the bind the Admin API server to" |
|
1
by Adam Gandelman
init |
41 |
keystone-admin-role: |
42 |
default: "Admin" |
|
43 |
type: string |
|
44 |
description: "Role that allows admin operations (access to all operations)" |
|
45 |
keystone-service-admin-role: |
|
46 |
default: "KeystoneServiceAdmin" |
|
47 |
type: string |
|
48 |
description: "Role that allows acting as service admin" |
|
49 |
admin-user: |
|
50 |
default: admin |
|
51 |
type: string |
|
|
6
by Adam Gandelman
Update config.yaml |
52 |
description: "Default admin user to create and manage" |
53 |
admin-password: |
|
54 |
default: None |
|
55 |
type: string |
|
56 |
description: "Admin password. To be used *for testing only*. Randomly generated by default." |
|
|
13
by Adam Gandelman
Optional config parameter: admin-token |
57 |
admin-token: |
58 |
default: None |
|
59 |
type: string |
|
60 |
description: "Admin token. If set, this token will be used for all services instead of being generated per service." |
|
|
26
by Adam Gandelman
Generate credentials in addition to token for new services |
61 |
admin-role: |
62 |
default: 'Admin' |
|
63 |
type: string |
|
64 |
description: 'Admin role to be associated with admin and service users' |
|
|
1
by Adam Gandelman
init |
65 |
token-expiry: |
66 |
default: "2017-02-05T00:00" |
|
67 |
type: string |
|
|
6
by Adam Gandelman
Update config.yaml |
68 |
description: "Expiration date of generated admin tokens" |
|
26
by Adam Gandelman
Generate credentials in addition to token for new services |
69 |
service-tenant: |
70 |
default: "services" |
|
71 |
type: string |
|
72 |
description: "Name of tenant to associate service credentials." |
|
|
1
by Adam Gandelman
init |
73 |
# Database settings used to request access via shared-db-relation-* relations
|
74 |
database: |
|
75 |
default: "keystone" |
|
76 |
type: string |
|
|
6
by Adam Gandelman
Update config.yaml |
77 |
description: "Database name" |
|
1
by Adam Gandelman
init |
78 |
database-user: |
79 |
default: "keystone" |
|
80 |
type: string |
|
|
6
by Adam Gandelman
Update config.yaml |
81 |
description: "Database username" |
|
48
by James Page
Add support for multi-region configuration |
82 |
region: |
83 |
default: RegionOne |
|
84 |
type: string |
|
85 |
description: "OpenStack Region(s) - separate multiple regions with single space" |
|
|
34.2.5
by James Page
Initial cut of ha support |
86 |
# HA configuration settings
|
87 |
vip: |
|
88 |
type: string |
|
89 |
description: "Virtual IP to use to front keystone in ha configuration" |
|
|
34.2.8
by Andres Rodriguez
nex fixes |
90 |
vip_iface: |
91 |
type: string |
|
92 |
default: eth0 |
|
93 |
description: "Network Interface where to place the Virtual IP" |
|
94 |
vip_cidr: |
|
95 |
type: int |
|
96 |
default: 24 |
|
97 |
description: "Netmask that will be used for the Virtual IP" |
|
|
34.2.7
by Andres Rodriguez
Add support for HA - hacluster relation and related |
98 |
ha-bindiface: |
99 |
type: string |
|
100 |
default: eth0 |
|
101 |
description: | |
|
102 |
Default network interface on which HA cluster will bind to communication
|
|
103 |
with the other members of the HA Cluster.
|
|
104 |
ha-mcastport: |
|
105 |
type: int |
|
|
46
by James Page
Updated default ha port to avoid conflicts |
106 |
default: 5403 |
|
34.2.7
by Andres Rodriguez
Add support for HA - hacluster relation and related |
107 |
description: | |
108 |
Default multicast port number that will be used to communicate between
|
|
109 |
HA Cluster nodes.
|
|
|
38.1.3
by Adam Gandelman
Add placeholder for PKI configuration, default to UUID for now. |
110 |
# PKI enablement and configuration (Grizzly and beyond)
|
111 |
enable-pki: |
|
112 |
default: "false" |
|
113 |
type: string |
|
114 |
description: "Enable PKI token signing (Grizzly and beyond)" |