Table 12.35. New options
        | Option = default value | 
        (Type) Help string | 
      
      | [DEFAULT] encrypt_parameters_and_properties = False | 
      (BoolOpt) Encrypt template parameters that were marked as hidden and also all the resource properties before storing them in database. | 
    
      | [DEFAULT] executor_thread_pool_size = 64 | 
      (IntOpt) Size of executor thread pool. | 
    
      | [DEFAULT] hidden_stack_tags = data-processing-cluster | 
      (ListOpt) Stacks containing these tag names will be hidden. Multiple tags should be given in a comma-delimited list (eg. hidden_stack_tags=hide_me,me_too). | 
    
      | [DEFAULT] password =  | 
      (StrOpt) Password for Redis server (optional). | 
    
      | [DEFAULT] port = 6379 | 
      (IntOpt) Use this port to connect to redis host. | 
    
      | [DEFAULT] rpc_conn_pool_size = 30 | 
      (IntOpt) Size of RPC connection pool. | 
    
      | [DEFAULT] rpc_poll_timeout = 1 | 
      (IntOpt) The default number of seconds that poll should wait. Poll raises timeout exception when timeout expired. | 
    
      | [DEFAULT] rpc_zmq_all_req_rep = True | 
      (BoolOpt) Use REQ/REP pattern for all methods CALL/CAST/FANOUT. | 
    
      | [DEFAULT] rpc_zmq_concurrency = eventlet | 
      (StrOpt) Type of concurrency used. Either "native" or "eventlet" | 
    
      | [DEFAULT] watch_log_file = False | 
      (BoolOpt) (Optional) Uses logging handler designed to watch file system. When log file is moved or removed this handler will open a new log file with specified path instantaneously. It makes sense only if log-file option is specified and Linux platform is used. This option is ignored if log_config_append is set. | 
    
      | [DEFAULT] zmq_use_broker = True | 
      (BoolOpt) Shows whether zmq-messaging uses broker or not. | 
    
      | [cache] backend = dogpile.cache.null | 
      (StrOpt) Dogpile.cache backend module. It is recommended that Memcache with pooling (oslo_cache.memcache_pool) or Redis (dogpile.cache.redis) be used in production deployments.  Small workloads (single process) like devstack can use the dogpile.cache.memory backend. | 
    
      | [cache] backend_argument = [] | 
      (MultiStrOpt) Arguments supplied to the backend module. Specify this option once per argument to be passed to the dogpile.cache backend. Example format: "<argname>:<value>". | 
    
      | [cache] config_prefix = cache.oslo | 
      (StrOpt) Prefix for building the configuration dictionary for the cache region. This should not need to be changed unless there is another dogpile.cache region with the same configuration name. | 
    
      | [cache] debug_cache_backend = False | 
      (BoolOpt) Extra debugging from the cache backend (cache keys, get/set/delete/etc calls). This is only really useful if you need to see the specific cache-backend get/set/delete calls with the keys/values.  Typically this should be left set to false. | 
    
      | [cache] enabled = False | 
      (BoolOpt) Global toggle for caching. | 
    
      | [cache] expiration_time = 600 | 
      (IntOpt) Default TTL, in seconds, for any cached item in the dogpile.cache region. This applies to any cached method that doesn't have an explicit cache expiration time defined for it. | 
    
      | [cache] memcache_dead_retry = 300 | 
      (IntOpt) Number of seconds memcached server is considered dead before it is tried again. (dogpile.cache.memcache and oslo_cache.memcache_pool backends only). | 
    
      | [cache] memcache_pool_connection_get_timeout = 10 | 
      (IntOpt) Number of seconds that an operation will wait to get a memcache client connection. | 
    
      | [cache] memcache_pool_maxsize = 10 | 
      (IntOpt) Max total number of open connections to every memcached server. (oslo_cache.memcache_pool backend only). | 
    
      | [cache] memcache_pool_unused_timeout = 60 | 
      (IntOpt) Number of seconds a connection to memcached is held unused in the pool before it is closed. (oslo_cache.memcache_pool backend only). | 
    
      | [cache] memcache_servers = localhost:11211 | 
      (ListOpt) Memcache servers in the format of "host:port". (dogpile.cache.memcache and oslo_cache.memcache_pool backends only). | 
    
      | [cache] memcache_socket_timeout = 3 | 
      (IntOpt) Timeout in seconds for every call to a server. (dogpile.cache.memcache and oslo_cache.memcache_pool backends only). | 
    
      | [cache] proxies =  | 
      (ListOpt) Proxy classes to import that will affect the way the dogpile.cache backend functions. See the dogpile.cache documentation on changing-backend-behavior. | 
    
      | [clients_keystone] auth_uri =  | 
      (StrOpt) Unversioned keystone url in format like http://0.0.0.0:5000. | 
    
      | [constraint_validation_cache] caching = True | 
      (BoolOpt) Toggle to enable/disable caching when Orchestration Engine validates property constraints of stack.During property validation with constraints Orchestration Engine caches requests to other OpenStack services. Please note that the global toggle for oslo.cache(enabled=True in [cache] group) must be enabled to use this feature. | 
    
      | [constraint_validation_cache] expiration_time = 60 | 
      (IntOpt) TTL, in seconds, for any cached item in the dogpile.cache region used for caching of validation constraints. | 
    
      | [cors] allow_credentials = True | 
      (BoolOpt) Indicate that the actual request can include user credentials | 
    
      | [cors] allow_headers = Content-Type, Cache-Control, Content-Language, Expires, Last-Modified, Pragma | 
      (ListOpt) Indicate which header field names may be used during the actual request. | 
    
      | [cors] allow_methods = GET, POST, PUT, DELETE, OPTIONS | 
      (ListOpt) Indicate which methods can be used during the actual request. | 
    
      | [cors] allowed_origin = None | 
      (StrOpt) Indicate whether this resource may be shared with the domain received in the requests "origin" header. | 
    
      | [cors] expose_headers = Content-Type, Cache-Control, Content-Language, Expires, Last-Modified, Pragma | 
      (ListOpt) Indicate which headers are safe to expose to the API. Defaults to HTTP Simple Headers. | 
    
      | [cors] max_age = 3600 | 
      (IntOpt) Maximum cache age of CORS preflight requests. | 
    
      | [cors.subdomain] allow_credentials = True | 
      (BoolOpt) Indicate that the actual request can include user credentials | 
    
      | [cors.subdomain] allow_headers = Content-Type, Cache-Control, Content-Language, Expires, Last-Modified, Pragma | 
      (ListOpt) Indicate which header field names may be used during the actual request. | 
    
      | [cors.subdomain] allow_methods = GET, POST, PUT, DELETE, OPTIONS | 
      (ListOpt) Indicate which methods can be used during the actual request. | 
    
      | [cors.subdomain] allowed_origin = None | 
      (StrOpt) Indicate whether this resource may be shared with the domain received in the requests "origin" header. | 
    
      | [cors.subdomain] expose_headers = Content-Type, Cache-Control, Content-Language, Expires, Last-Modified, Pragma | 
      (ListOpt) Indicate which headers are safe to expose to the API. Defaults to HTTP Simple Headers. | 
    
      | [cors.subdomain] max_age = 3600 | 
      (IntOpt) Maximum cache age of CORS preflight requests. | 
    
      | [heat_api] tcp_keepidle = 600 | 
      (IntOpt) The value for the socket option TCP_KEEPIDLE.  This is the time in seconds that the connection must be idle before TCP starts sending keepalive probes. | 
    
      | [heat_api_cfn] tcp_keepidle = 600 | 
      (IntOpt) The value for the socket option TCP_KEEPIDLE.  This is the time in seconds that the connection must be idle before TCP starts sending keepalive probes. | 
    
      | [heat_api_cloudwatch] tcp_keepidle = 600 | 
      (IntOpt) The value for the socket option TCP_KEEPIDLE.  This is the time in seconds that the connection must be idle before TCP starts sending keepalive probes. | 
    
      | [keystone_authtoken] region_name = None | 
      (StrOpt) The region in which the identity server can be found. | 
    
      | [oslo_messaging_amqp] password =  | 
      (StrOpt) Password for message broker authentication | 
    
      | [oslo_messaging_amqp] sasl_config_dir =  | 
      (StrOpt) Path to directory that contains the SASL configuration | 
    
      | [oslo_messaging_amqp] sasl_config_name =  | 
      (StrOpt) Name of configuration file (without .conf suffix) | 
    
      | [oslo_messaging_amqp] sasl_mechanisms =  | 
      (StrOpt) Space separated list of acceptable SASL mechanisms | 
    
      | [oslo_messaging_amqp] username =  | 
      (StrOpt) User name for message broker authentication | 
    
      | [oslo_messaging_qpid] send_single_reply = False | 
      (BoolOpt) Send a single AMQP reply to call message. The current behaviour since oslo-incubator is to send two AMQP replies - first one with the payload, a second one to ensure the other has finished to send the payload. We are going to remove it in the N release, but we must keep backward compatible at the same time. This option provides such compatibility - it defaults to False in Liberty and can be turned on for early adopters with new installations or for testing. This option will be removed in the Mitaka release. | 
    
      | [oslo_messaging_rabbit] kombu_reconnect_timeout = 60 | 
      (IntOpt) How long to wait before considering a reconnect attempt to have failed. This value should not be longer than rpc_response_timeout. | 
    
      | [oslo_messaging_rabbit] send_single_reply = False | 
      (BoolOpt) Send a single AMQP reply to call message. The current behaviour since oslo-incubator is to send two AMQP replies - first one with the payload, a second one to ensure the other has finished to send the payload. We are going to remove it in the N release, but we must keep backward compatible at the same time. This option provides such compatibility - it defaults to False in Liberty and can be turned on for early adopters with new installations or for testing. This option will be removed in the Mitaka release. | 
    
      | [oslo_middleware] secure_proxy_ssl_header = X-Forwarded-Proto | 
      (StrOpt) The HTTP Header that will be used to determine what the original request protocol scheme was, even if it was hidden by an SSL termination proxy. | 
    
      | [oslo_policy] policy_default_rule = default | 
      (StrOpt) Default rule. Enforced when a requested rule is not found. | 
    
      | [oslo_policy] policy_dirs = ['policy.d'] | 
      (MultiStrOpt) Directories where policy configuration files are stored. They can be relative to any directory in the search path defined by the config_dir option, or absolute paths. The file defined by policy_file must exist for these directories to be searched.  Missing or empty directories are ignored. | 
    
      | [oslo_policy] policy_file = policy.json | 
      (StrOpt) The JSON file that defines policies. | 
    
      | [oslo_versionedobjects] fatal_exception_format_errors = False | 
      (BoolOpt) Make exception message format errors fatal | 
    
      | [trustee] auth_plugin = None | 
      (StrOpt) Name of the plugin to load | 
    
      | [trustee] auth_section = None | 
      (StrOpt) Config Section from which to load plugin specific options |