Cinder¶
There are various customizations you can do to tailor the deployment of OpenStack Cinder. You can find those below.
General Parameters¶
backup.external_ceph_rbd.admin_keyring
Type: string
Description:
nil
backup.external_ceph_rbd.conf.global
Type: string
Description:
nil
backup.external_ceph_rbd.conf.osd
Type: string
Description:
nil
backup.external_ceph_rbd.configmap
Type: string
Description:
nil
backup.external_ceph_rbd.enabled
Type: bool
Description:
false
backup.posix.volume.class_name
Type: string
Description:
“general”
backup.posix.volume.size
Type: string
Description:
“10Gi”
bootstrap.bootstrap_conf_backends
Type: bool
Description:
true
bootstrap.enabled
Type: bool
Description:
true
bootstrap.ks_user
Type: string
Description:
“admin”
bootstrap.volume_types.name.group
Type: string
Description:
nil
bootstrap.volume_types.name.volume_backend_name
Type: string
Description:
nil
ceph_client.configmap
Type: string
Description:
“ceph-etc”
ceph_client.enable_external_ceph_backend
Type: bool
Description:
false
ceph_client.external_ceph.conf.global
Type: string
Description:
nil
ceph_client.external_ceph.conf.osd
Type: string
Description:
nil
ceph_client.external_ceph.configmap
Type: string
Description:
nil
ceph_client.external_ceph.rbd_user
Type: string
Description:
nil
ceph_client.external_ceph.rbd_user_keyring
Type: string
Description:
nil
ceph_client.internal_ceph_backend
Type: string
Description:
“rbd1”
ceph_client.user_secret_name
Type: string
Description:
“pvc-ceph-client-key”
conf.api_audit_map.DEFAULT.target_endpoint_type
Type: string
Description:
“None”
conf.api_audit_map.custom_actions.associate
Type: string
Description:
“update/associate”
conf.api_audit_map.custom_actions.associations
Type: string
Description:
“read/list/associations”
conf.api_audit_map.custom_actions.disassociate
Type: string
Description:
“update/disassociate_all”
conf.api_audit_map.custom_actions.disassociate_all
Type: string
Description:
“update/disassociate_all”
conf.api_audit_map.path_keywords.defaults
Type: string
Description:
“None”
conf.api_audit_map.path_keywords.detail
Type: string
Description:
“None”
conf.api_audit_map.path_keywords.limits
Type: string
Description:
“None”
conf.api_audit_map.path_keywords.os-quota-specs
Type: string
Description:
“project”
conf.api_audit_map.path_keywords.qos-specs
Type: string
Description:
“qos-spec”
conf.api_audit_map.path_keywords.snapshots
Type: string
Description:
“snapshot”
conf.api_audit_map.path_keywords.types
Type: string
Description:
“type”
conf.api_audit_map.path_keywords.volumes
Type: string
Description:
“volume”
conf.api_audit_map.service_endpoints.volume
Type: string
Description:
“service/storage/block”
conf.api_audit_map.service_endpoints.volumev2
Type: string
Description:
“service/storage/block”
conf.api_audit_map.service_endpoints.volumev3
Type: string
Description:
“service/storage/block”
conf.backends.rbd1.image_volume_cache_enabled
Type: bool
Description:
true
conf.backends.rbd1.image_volume_cache_max_count
Type: int
Description:
50
conf.backends.rbd1.image_volume_cache_max_size_gb
Type: int
Description:
200
conf.backends.rbd1.rados_connect_timeout
Type: int
Description:
-1
conf.backends.rbd1.rbd_ceph_conf
Type: string
Description:
“/etc/ceph/ceph.conf”
conf.backends.rbd1.rbd_flatten_volume_from_snapshot
Type: bool
Description:
false
conf.backends.rbd1.rbd_max_clone_depth
Type: int
Description:
5
conf.backends.rbd1.rbd_pool
Type: string
Description:
“cinder.volumes”
conf.backends.rbd1.rbd_secret_uuid
Type: string
Description:
“457eb676-33da-42ec-9a8c-9293d545c337”
conf.backends.rbd1.rbd_store_chunk_size
Type: int
Description:
4
conf.backends.rbd1.rbd_user
Type: string
Description:
“cinder”
conf.backends.rbd1.report_discard_supported
Type: bool
Description:
true
conf.backends.rbd1.volume_backend_name
Type: string
Description:
“rbd1”
conf.backends.rbd1.volume_driver
Type: string
Description:
“cinder.volume.drivers.rbd.RBDDriver”
conf.ceph.admin_keyring
Type: string
Description:
nil
conf.ceph.append
Type: string
Description:
nil
conf.ceph.monitors
Type: list
Description:
[]
conf.ceph.override
Type: string
Description:
nil
conf.ceph.pools.”cinder.volumes”.app_name
Type: string
Description:
“cinder-volume”
conf.ceph.pools.”cinder.volumes”.chunk_size
Type: int
Description:
8
conf.ceph.pools.”cinder.volumes”.crush_rule
Type: string
Description:
“replicated_rule”
conf.ceph.pools.”cinder.volumes”.replication
Type: int
Description:
3
conf.ceph.pools.backup.app_name
Type: string
Description:
“cinder-backup”
conf.ceph.pools.backup.chunk_size
Type: int
Description:
8
conf.ceph.pools.backup.crush_rule
Type: string
Description:
“replicated_rule”
conf.ceph.pools.backup.replication
Type: int
Description:
3
conf.cinder.DEFAULT.auth_strategy
Type: string
Description:
“keystone”
conf.cinder.DEFAULT.backup_ceph_conf
Type: string
Description:
“/etc/ceph/ceph.conf”
conf.cinder.DEFAULT.backup_ceph_pool
Type: string
Description:
“cinder.backups”
conf.cinder.DEFAULT.backup_ceph_user
Type: string
Description:
“cinderbackup”
conf.cinder.DEFAULT.backup_driver
Type: string
Description:
“cinder.backup.drivers.swift.SwiftBackupDriver”
conf.cinder.DEFAULT.backup_posix_path
Type: string
Description:
“/var/lib/cinder/backup”
conf.cinder.DEFAULT.default_volume_type
Type: string
Description:
“rbd1”
conf.cinder.DEFAULT.enable_v1_api
Type: bool
Description:
false
conf.cinder.DEFAULT.enable_v2_api
Type: bool
Description:
false
conf.cinder.DEFAULT.enabled_backends
Type: string
Description:
“rbd1”
conf.cinder.DEFAULT.glance_api_version
Type: int
Description:
2
conf.cinder.DEFAULT.host
Type: string
Description:
“cinder-volume-worker”
conf.cinder.DEFAULT.internal_project_name
Type: string
Description:
“internal_cinder”
conf.cinder.DEFAULT.internal_user_name
Type: string
Description:
“internal_cinder”
conf.cinder.DEFAULT.log_config_append
Type: string
Description:
“/etc/cinder/logging.conf”
conf.cinder.DEFAULT.os_region_name
Type: string
Description:
“RegionOne”
conf.cinder.DEFAULT.osapi_volume_listen_port
Type: string
Description:
nil
conf.cinder.DEFAULT.osapi_volume_workers
Type: int
Description:
1
conf.cinder.DEFAULT.resource_query_filters_file
Type: string
Description:
“/etc/cinder/resource_filters.json”
conf.cinder.DEFAULT.use_stderr
Type: bool
Description:
true
conf.cinder.DEFAULT.use_syslog
Type: bool
Description:
false
conf.cinder.DEFAULT.volume_name_template
Type: string
Description:
“%s”
conf.cinder.DEFAULT.volume_usage_audit_period
Type: string
Description:
“hour”
conf.cinder.coordination.backend_url
Type: string
Description:
“file:///var/lib/cinder/coordination”
conf.cinder.database.max_retries
Type: int
Description:
-1
conf.cinder.keystone_authtoken.auth_type
Type: string
Description:
“password”
conf.cinder.keystone_authtoken.auth_version
Type: string
Description:
“v3”
conf.cinder.keystone_authtoken.memcache_security_strategy
Type: string
Description:
“ENCRYPT”
conf.cinder.keystone_authtoken.service_token_roles
Type: string
Description:
“service”
conf.cinder.keystone_authtoken.service_token_roles_required
Type: bool
Description:
true
conf.cinder.keystone_authtoken.service_type
Type: string
Description:
“volumev3”
conf.cinder.nova.auth_type
Type: string
Description:
“password”
conf.cinder.nova.auth_version
Type: string
Description:
“v3”
conf.cinder.nova.interface
Type: string
Description:
“internal”
conf.cinder.oslo_concurrency.lock_path
Type: string
Description:
“/var/lib/cinder/tmp”
conf.cinder.oslo_messaging_notifications.driver
Type: string
Description:
“messagingv2”
conf.cinder.oslo_messaging_rabbit.rabbit_ha_queues
Type: bool
Description:
true
conf.cinder.oslo_middleware.enable_proxy_headers_parsing
Type: bool
Description:
true
conf.cinder.oslo_policy.policy_file
Type: string
Description:
“/etc/cinder/policy.yaml”
conf.cinder.service_user.auth_type
Type: string
Description:
“password”
conf.cinder.service_user.send_service_user_token
Type: bool
Description:
true
conf.cinder_api_uwsgi.uwsgi.add-header
Type: string
Description:
“Connection: close”
conf.cinder_api_uwsgi.uwsgi.buffer-size
Type: int
Description:
65535
conf.cinder_api_uwsgi.uwsgi.die-on-term
Type: bool
Description:
true
conf.cinder_api_uwsgi.uwsgi.enable-threads
Type: bool
Description:
true
conf.cinder_api_uwsgi.uwsgi.exit-on-reload
Type: bool
Description:
false
conf.cinder_api_uwsgi.uwsgi.hook-master-start
Type: string
Description:
“unix_signal:15 gracefully_kill_them_all”
conf.cinder_api_uwsgi.uwsgi.lazy-apps
Type: bool
Description:
true
conf.cinder_api_uwsgi.uwsgi.log-x-forwarded-for
Type: bool
Description:
true
conf.cinder_api_uwsgi.uwsgi.master
Type: bool
Description:
true
conf.cinder_api_uwsgi.uwsgi.procname-prefix-spaced
Type: string
Description:
“cinder-api:”
conf.cinder_api_uwsgi.uwsgi.route-user-agent
Type: string
Description:
“^kube-probe.* donotlog:”
conf.cinder_api_uwsgi.uwsgi.thunder-lock
Type: bool
Description:
true
conf.cinder_api_uwsgi.uwsgi.worker-reload-mercy
Type: int
Description:
80
conf.cinder_api_uwsgi.uwsgi.wsgi-file
Type: string
Description:
“/var/lib/openstack/bin/cinder-wsgi”
conf.cinder_sudoers
Type: string
Description:
# This sudoers file supports rootwrap for both Kolla and LOCI Images. Defaults !requiretty Defaults secure_path=\"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin:/var/lib/openstack/bin:/var/lib/kolla/venv/bin\" cinder ALL = (root) NOPASSWD: /var/lib/kolla/venv/bin/cinder-rootwrap /etc/cinder/rootwrap.conf *, /var/lib/openstack/bin/cinder-rootwrap /etc/cinder/rootwrap.conf *conf.conversion_tmpfs_size
Type: string
Description:
“10Gi”
conf.enable_conversion_tmpfs
Type: bool
Description:
false
conf.enable_iscsi
Type: bool
Description:
false
conf.logging.formatter_context.class
Type: string
Description:
“oslo_log.formatters.ContextFormatter”
conf.logging.formatter_context.datefmt
Type: string
Description:
“%Y-%m-%d %H:%M:%S”
conf.logging.formatter_default.datefmt
Type: string
Description:
“%Y-%m-%d %H:%M:%S”
conf.logging.formatter_default.format
Type: string
Description:
“%(message)s”
conf.logging.formatters.keys[0]
Type: string
Description:
“context”
conf.logging.formatters.keys[1]
Type: string
Description:
“default”
conf.logging.handler_null.args
Type: string
Description:
“()”
conf.logging.handler_null.class
Type: string
Description:
“logging.NullHandler”
conf.logging.handler_null.formatter
Type: string
Description:
“default”
conf.logging.handler_stderr.args
Type: string
Description:
“(sys.stderr,)”
conf.logging.handler_stderr.class
Type: string
Description:
“StreamHandler”
conf.logging.handler_stderr.formatter
Type: string
Description:
“context”
conf.logging.handler_stdout.args
Type: string
Description:
“(sys.stdout,)”
conf.logging.handler_stdout.class
Type: string
Description:
“StreamHandler”
conf.logging.handler_stdout.formatter
Type: string
Description:
“context”
conf.logging.handlers.keys[0]
Type: string
Description:
“stdout”
conf.logging.handlers.keys[1]
Type: string
Description:
“stderr”
conf.logging.handlers.keys[2]
Type: string
Description:
“null”
conf.logging.logger_amqp.handlers
Type: string
Description:
“stderr”
conf.logging.logger_amqp.level
Type: string
Description:
“WARNING”
conf.logging.logger_amqp.qualname
Type: string
Description:
“amqp”
conf.logging.logger_amqplib.handlers
Type: string
Description:
“stderr”
conf.logging.logger_amqplib.level
Type: string
Description:
“WARNING”
conf.logging.logger_amqplib.qualname
Type: string
Description:
“amqplib”
conf.logging.logger_boto.handlers
Type: string
Description:
“stderr”
conf.logging.logger_boto.level
Type: string
Description:
“WARNING”
conf.logging.logger_boto.qualname
Type: string
Description:
“boto”
conf.logging.logger_cinder.handlers[0]
Type: string
Description:
“stdout”
conf.logging.logger_cinder.level
Type: string
Description:
“INFO”
conf.logging.logger_cinder.qualname
Type: string
Description:
“cinder”
conf.logging.logger_eventletwsgi.handlers
Type: string
Description:
“stderr”
conf.logging.logger_eventletwsgi.level
Type: string
Description:
“WARNING”
conf.logging.logger_eventletwsgi.qualname
Type: string
Description:
“eventlet.wsgi.server”
conf.logging.logger_root.handlers
Type: string
Description:
“null”
conf.logging.logger_root.level
Type: string
Description:
“WARNING”
conf.logging.logger_sqlalchemy.handlers
Type: string
Description:
“stderr”
conf.logging.logger_sqlalchemy.level
Type: string
Description:
“WARNING”
conf.logging.logger_sqlalchemy.qualname
Type: string
Description:
“sqlalchemy”
conf.logging.loggers.keys[0]
Type: string
Description:
“root”
conf.logging.loggers.keys[1]
Type: string
Description:
“cinder”
conf.paste.app:apiv1.”paste.app_factory”
Type: string
Description:
“cinder.api.v1.router:APIRouter.factory”
conf.paste.app:apiv2.”paste.app_factory”
Type: string
Description:
“cinder.api.v2.router:APIRouter.factory”
conf.paste.app:apiv3.”paste.app_factory”
Type: string
Description:
“cinder.api.v3.router:APIRouter.factory”
conf.paste.app:osvolumeversionapp.”paste.app_factory”
Type: string
Description:
“cinder.api.versions:Versions.factory”
conf.paste.composite:openstack_volume_api_v1.keystone
Type: string
Description:
“cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler authtoken audit keystonecontext apiv1”
conf.paste.composite:openstack_volume_api_v1.keystone_nolimit
Type: string
Description:
“cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler authtoken audit keystonecontext apiv1”
conf.paste.composite:openstack_volume_api_v1.noauth
Type: string
Description:
“cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler noauth apiv1”
conf.paste.composite:openstack_volume_api_v1.use
Type: string
Description:
“call:cinder.api.middleware.auth:pipeline_factory”
conf.paste.composite:openstack_volume_api_v2.keystone
Type: string
Description:
“cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler authtoken audit keystonecontext apiv2”
conf.paste.composite:openstack_volume_api_v2.keystone_nolimit
Type: string
Description:
“cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler authtoken audit keystonecontext apiv2”
conf.paste.composite:openstack_volume_api_v2.noauth
Type: string
Description:
“cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler noauth apiv2”
conf.paste.composite:openstack_volume_api_v2.use
Type: string
Description:
“call:cinder.api.middleware.auth:pipeline_factory”
conf.paste.composite:openstack_volume_api_v3.keystone
Type: string
Description:
“cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler authtoken audit keystonecontext apiv3”
conf.paste.composite:openstack_volume_api_v3.keystone_nolimit
Type: string
Description:
“cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler authtoken audit keystonecontext apiv3”
conf.paste.composite:openstack_volume_api_v3.noauth
Type: string
Description:
“cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler noauth apiv3”
conf.paste.composite:openstack_volume_api_v3.use
Type: string
Description:
“call:cinder.api.middleware.auth:pipeline_factory”
conf.paste.composite:osapi_volume./
Type: string
Description:
“apiversions”
conf.paste.composite:osapi_volume./v1
Type: string
Description:
“openstack_volume_api_v1”
conf.paste.composite:osapi_volume./v2
Type: string
Description:
“openstack_volume_api_v2”
conf.paste.composite:osapi_volume./v3
Type: string
Description:
“openstack_volume_api_v3”
conf.paste.composite:osapi_volume.use
Type: string
Description:
“call:cinder.api:root_app_factory”
conf.paste.filter:audit.”paste.filter_factory”
Type: string
Description:
“keystonemiddleware.audit:filter_factory”
conf.paste.filter:audit.audit_map_file
Type: string
Description:
“/etc/cinder/api_audit_map.conf”
conf.paste.filter:authtoken.”paste.filter_factory”
Type: string
Description:
“keystonemiddleware.auth_token:filter_factory”
conf.paste.filter:cors.”paste.filter_factory”
Type: string
Description:
“oslo_middleware.cors:filter_factory”
conf.paste.filter:cors.oslo_config_project
Type: string
Description:
“cinder”
conf.paste.filter:faultwrap.”paste.filter_factory”
Type: string
Description:
“cinder.api.middleware.fault:FaultWrapper.factory”
conf.paste.filter:http_proxy_to_wsgi.”paste.filter_factory”
Type: string
Description:
“oslo_middleware.http_proxy_to_wsgi:HTTPProxyToWSGI.factory”
conf.paste.filter:keystonecontext.”paste.filter_factory”
Type: string
Description:
“cinder.api.middleware.auth:CinderKeystoneContext.factory”
conf.paste.filter:noauth.”paste.filter_factory”
Type: string
Description:
“cinder.api.middleware.auth:NoAuthMiddleware.factory”
conf.paste.filter:osprofiler.”paste.filter_factory”
Type: string
Description:
“osprofiler.web:WsgiMiddleware.factory”
conf.paste.filter:request_id.”paste.filter_factory”
Type: string
Description:
“oslo_middleware.request_id:RequestId.factory”
conf.paste.filter:sizelimit.”paste.filter_factory”
Type: string
Description:
“oslo_middleware.sizelimit:RequestBodySizeLimiter.factory”
conf.paste.pipeline:apiversions.pipeline
Type: string
Description:
“cors http_proxy_to_wsgi faultwrap osvolumeversionapp”
conf.policy
Type: object
Description:
{}
conf.rabbitmq.policies[0].apply-to
Type: string
Description:
“all”
conf.rabbitmq.policies[0].definition.ha-mode
Type: string
Description:
“all”
conf.rabbitmq.policies[0].definition.ha-sync-mode
Type: string
Description:
“automatic”
conf.rabbitmq.policies[0].definition.message-ttl
Type: int
Description:
70000
conf.rabbitmq.policies[0].name
Type: string
Description:
“ha_ttl_cinder”
conf.rabbitmq.policies[0].pattern
Type: string
Description:
“^(?!(amq\.|reply_)).*”
conf.rabbitmq.policies[0].priority
Type: int
Description:
0
conf.rabbitmq.policies[0].vhost
Type: string
Description:
“cinder”
conf.rally_tests.clean_up
Type: string
Description:
VOLUMES=$(openstack volume list -f value | grep -e \"^s_rally_\" | awk '{ print $1 }') if [ -n \"$VOLUMES\" ]; then echo $VOLUMES | xargs openstack volume delete ficonf.rally_tests.run_tempest
Type: bool
Description:
false
conf.rally_tests.tests.”CinderVolumes.create_and_delete_volume”[0].args.size
Type: int
Description:
1
conf.rally_tests.tests.”CinderVolumes.create_and_delete_volume”[0].runner.concurrency
Type: int
Description:
1
conf.rally_tests.tests.”CinderVolumes.create_and_delete_volume”[0].runner.times
Type: int
Description:
1
conf.rally_tests.tests.”CinderVolumes.create_and_delete_volume”[0].runner.type
Type: string
Description:
“constant”
conf.rally_tests.tests.”CinderVolumes.create_and_delete_volume”[0].sla.failure_rate.max
Type: int
Description:
0
conf.rally_tests.tests.”CinderVolumes.create_and_delete_volume”[1].args.size.max
Type: int
Description:
5
conf.rally_tests.tests.”CinderVolumes.create_and_delete_volume”[1].args.size.min
Type: int
Description:
1
conf.rally_tests.tests.”CinderVolumes.create_and_delete_volume”[1].runner.concurrency
Type: int
Description:
1
conf.rally_tests.tests.”CinderVolumes.create_and_delete_volume”[1].runner.times
Type: int
Description:
1
conf.rally_tests.tests.”CinderVolumes.create_and_delete_volume”[1].runner.type
Type: string
Description:
“constant”
conf.rally_tests.tests.”CinderVolumes.create_and_delete_volume”[1].sla.failure_rate.max
Type: int
Description:
0
conf.resource_filters.attachment[0]
Type: string
Description:
“volume_id”
conf.resource_filters.attachment[1]
Type: string
Description:
“status”
conf.resource_filters.attachment[2]
Type: string
Description:
“instance_id”
conf.resource_filters.attachment[3]
Type: string
Description:
“attach_status”
conf.resource_filters.backup[0]
Type: string
Description:
“name”
conf.resource_filters.backup[1]
Type: string
Description:
“status”
conf.resource_filters.backup[2]
Type: string
Description:
“volume_id”
conf.resource_filters.group
Type: list
Description:
[]
conf.resource_filters.group_snapshot[0]
Type: string
Description:
“status”
conf.resource_filters.group_snapshot[1]
Type: string
Description:
“group_id”
conf.resource_filters.message[0]
Type: string
Description:
“resource_uuid”
conf.resource_filters.message[1]
Type: string
Description:
“resource_type”
conf.resource_filters.message[2]
Type: string
Description:
“event_id”
conf.resource_filters.message[3]
Type: string
Description:
“request_id”
conf.resource_filters.message[4]
Type: string
Description:
“message_level”
conf.resource_filters.pool[0]
Type: string
Description:
“name”
conf.resource_filters.pool[1]
Type: string
Description:
“volume_type”
conf.resource_filters.snapshot[0]
Type: string
Description:
“name”
conf.resource_filters.snapshot[1]
Type: string
Description:
“status”
conf.resource_filters.snapshot[2]
Type: string
Description:
“volume_id”
conf.resource_filters.snapshot[3]
Type: string
Description:
“metadata”
conf.resource_filters.snapshot[4]
Type: string
Description:
“availability_zone”
conf.resource_filters.volume[0]
Type: string
Description:
“name”
conf.resource_filters.volume[1]
Type: string
Description:
“status”
conf.resource_filters.volume[2]
Type: string
Description:
“metadata”
conf.resource_filters.volume[3]
Type: string
Description:
“bootable”
conf.resource_filters.volume[4]
Type: string
Description:
“migration_status”
conf.resource_filters.volume[5]
Type: string
Description:
“availability_zone”
conf.resource_filters.volume[6]
Type: string
Description:
“group_id”
conf.resource_filters.volume_type
Type: list
Description:
[]
conf.rootwrap
Type: string
Description:
# Configuration for cinder-rootwrap # This file should be owned by (and only-writeable by) the root user [DEFAULT] # List of directories to load filter definitions from (separated by ','). # These directories MUST all be only writeable by root ! filters_path=/etc/cinder/rootwrap.d # List of directories to search executables in, in case filters do not # explicitely specify a full path (separated by ',') # If not specified, defaults to system PATH environment variable. # These directories MUST all be only writeable by root ! exec_dirs=/sbin,/usr/sbin,/bin,/usr/bin,/usr/local/bin,/usr/local/sbin,/var/lib/openstack/bin,/var/lib/kolla/venv/bin # Enable logging to syslog # Default value is False use_syslog=False # Which syslog facility to use. # Valid values include auth, authpriv, syslog, local0, local1... # Default value is 'syslog' syslog_log_facility=syslog # Which messages to log. # INFO means log all usage # ERROR means only log unsuccessful attempts syslog_log_level=ERRORconf.rootwrap_filters.volume.content
Type: string
Description:
# cinder-rootwrap command filters for volume nodes # This file should be owned by (and only-writeable by) the root user [Filters] # cinder/volume/iscsi.py: iscsi_helper '--op' ... ietadm: CommandFilter, ietadm, root tgtadm: CommandFilter, tgtadm, root iscsictl: CommandFilter, iscsictl, root tgt-admin: CommandFilter, tgt-admin, root cinder-rtstool: CommandFilter, cinder-rtstool, root scstadmin: CommandFilter, scstadmin, root # LVM related show commands pvs: EnvFilter, env, root, LC_ALL=C, pvs vgs: EnvFilter, env, root, LC_ALL=C, vgs lvs: EnvFilter, env, root, LC_ALL=C, lvs lvdisplay: EnvFilter, env, root, LC_ALL=C, lvdisplay # -LVM related show commands with suppress fd warnings pvs_fdwarn: EnvFilter, env, root, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, pvs vgs_fdwarn: EnvFilter, env, root, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, vgs lvs_fdwarn: EnvFilter, env, root, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, lvs lvdisplay_fdwarn: EnvFilter, env, root, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, lvdisplay # -LVM related show commands conf var pvs_lvmconf: EnvFilter, env, root, LVM_SYSTEM_DIR=, LC_ALL=C, pvs vgs_lvmconf: EnvFilter, env, root, LVM_SYSTEM_DIR=, LC_ALL=C, vgs lvs_lvmconf: EnvFilter, env, root, LVM_SYSTEM_DIR=, LC_ALL=C, lvs lvdisplay_lvmconf: EnvFilter, env, root, LVM_SYSTEM_DIR=, LC_ALL=C, lvdisplay # -LVM conf var with suppress fd_warnings pvs_lvmconf: EnvFilter, env, root, LVM_SYSTEM_DIR=, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, pvs vgs_lvmconf: EnvFilter, env, root, LVM_SYSTEM_DIR=, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, vgs lvs_lvmconf: EnvFilter, env, root, LVM_SYSTEM_DIR=, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, lvs lvdisplay_lvmconf: EnvFilter, env, root, LVM_SYSTEM_DIR=, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, lvdisplay # os-brick library commands # os_brick.privileged.run_as_root oslo.privsep context # This line ties the superuser privs with the config files, context name, # and (implicitly) the actual python code invoked. privsep-rootwrap: RegExpFilter, privsep-helper, root, privsep-helper, --config-file, /etc/(?!\\.\\.).*, --privsep_context, os_brick.privileged.default, --privsep_sock_path, /tmp/.* # The following and any cinder/brick/* entries should all be obsoleted # by privsep, and may be removed once the os-brick version requirement # is updated appropriately. scsi_id: CommandFilter, /lib/udev/scsi_id, root drbdadm: CommandFilter, drbdadm, root # cinder/brick/local_dev/lvm.py: 'vgcreate', vg_name, pv_list vgcreate: CommandFilter, vgcreate, root # cinder/brick/local_dev/lvm.py: 'lvcreate', '-L', sizestr, '-n', volume_name,.. # cinder/brick/local_dev/lvm.py: 'lvcreate', '-L', ... lvcreate: EnvFilter, env, root, LC_ALL=C, lvcreate lvcreate_lvmconf: EnvFilter, env, root, LVM_SYSTEM_DIR=, LC_ALL=C, lvcreate lvcreate_fdwarn: EnvFilter, env, root, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, lvcreate lvcreate_lvmconf_fdwarn: EnvFilter, env, root, LVM_SYSTEM_DIR=, LVM_SUPPRESS_FD_WARNINGS=, LC_ALL=C, lvcreate # cinder/volume/driver.py: 'dd', 'if=%s' % srcstr, 'of=%s' % deststr,... dd: CommandFilter, dd, root # cinder/volume/driver.py: 'lvremove', '-f', %s/%s % ... lvremove: CommandFilter, lvremove, root # cinder/volume/driver.py: 'lvrename', '%(vg)s', '%(orig)s' '(new)s'... lvrename: CommandFilter, lvrename, root # cinder/brick/local_dev/lvm.py: 'lvextend', '-L' '%(new_size)s', '%(lv_name)s' ... # cinder/brick/local_dev/lvm.py: 'lvextend', '-L' '%(new_size)s', '%(thin_pool)s' ... lvextend: EnvFilter, env, root, LC_ALL=C, lvextend lvextend_lvmconf: EnvFilter, env, root, LVM_SYSTEM_DIR=, LC_ALL=C, lvextend lvextend_fdwarn: EnvFilter, env, root, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, lvextend lvextend_lvmconf_fdwarn: EnvFilter, env, root, LVM_SYSTEM_DIR=, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, lvextend # cinder/brick/local_dev/lvm.py: 'lvchange -a y -K <lv>' lvchange: CommandFilter, lvchange, root # cinder/brick/local_dev/lvm.py: 'lvconvert', '--merge', snapshot_name lvconvert: CommandFilter, lvconvert, root # cinder/volume/driver.py: 'iscsiadm', '-m', 'discovery', '-t',... # cinder/volume/driver.py: 'iscsiadm', '-m', 'node', '-T', ... iscsiadm: CommandFilter, iscsiadm, root # cinder/volume/utils.py: utils.temporary_chown(path, 0) chown: CommandFilter, chown, root # cinder/volume/utils.py: copy_volume(..., ionice='...') ionice_1: ChainingRegExpFilter, ionice, root, ionice, -c[0-3], -n[0-7] ionice_2: ChainingRegExpFilter, ionice, root, ionice, -c[0-3] # cinder/volume/utils.py: setup_blkio_cgroup() cgcreate: CommandFilter, cgcreate, root cgset: CommandFilter, cgset, root cgexec: ChainingRegExpFilter, cgexec, root, cgexec, -g, blkio:\\S+ # cinder/volume/driver.py dmsetup: CommandFilter, dmsetup, root ln: CommandFilter, ln, root # cinder/image/image_utils.py qemu-img: EnvFilter, env, root, LC_ALL=C, qemu-img qemu-img_convert: CommandFilter, qemu-img, root udevadm: CommandFilter, udevadm, root # cinder/volume/driver.py: utils.read_file_as_root() cat: CommandFilter, cat, root # cinder/volume/nfs.py stat: CommandFilter, stat, root mount: CommandFilter, mount, root df: CommandFilter, df, root du: CommandFilter, du, root truncate: CommandFilter, truncate, root chmod: CommandFilter, chmod, root rm: CommandFilter, rm, root # cinder/volume/drivers/remotefs.py mkdir: CommandFilter, mkdir, root # cinder/volume/drivers/netapp/nfs.py: netapp_nfs_find: RegExpFilter, find, root, find, ^[/]*([^/\\0]+(/+)?)*$, -maxdepth, \\d+, -name, img-cache.*, -amin, \\+\\d+ # cinder/volume/drivers/glusterfs.py chgrp: CommandFilter, chgrp, root umount: CommandFilter, umount, root fallocate: CommandFilter, fallocate, root # cinder/volumes/drivers/hds/hds.py: hus-cmd: CommandFilter, hus-cmd, root hus-cmd_local: CommandFilter, /usr/local/bin/hus-cmd, root # cinder/volumes/drivers/hds/hnas_backend.py ssc: CommandFilter, ssc, root # cinder/brick/initiator/connector.py: ls: CommandFilter, ls, root tee: CommandFilter, tee, root multipath: CommandFilter, multipath, root multipathd: CommandFilter, multipathd, root systool: CommandFilter, systool, root # cinder/volume/drivers/block_device.py blockdev: CommandFilter, blockdev, root # cinder/volume/drivers/ibm/gpfs.py # cinder/volume/drivers/tintri.py mv: CommandFilter, mv, root # cinder/volume/drivers/ibm/gpfs.py cp: CommandFilter, cp, root mmgetstate: CommandFilter, /usr/lpp/mmfs/bin/mmgetstate, root mmclone: CommandFilter, /usr/lpp/mmfs/bin/mmclone, root mmlsattr: CommandFilter, /usr/lpp/mmfs/bin/mmlsattr, root mmchattr: CommandFilter, /usr/lpp/mmfs/bin/mmchattr, root mmlsconfig: CommandFilter, /usr/lpp/mmfs/bin/mmlsconfig, root mmlsfs: CommandFilter, /usr/lpp/mmfs/bin/mmlsfs, root mmlspool: CommandFilter, /usr/lpp/mmfs/bin/mmlspool, root mkfs: CommandFilter, mkfs, root mmcrfileset: CommandFilter, /usr/lpp/mmfs/bin/mmcrfileset, root mmlinkfileset: CommandFilter, /usr/lpp/mmfs/bin/mmlinkfileset, root mmunlinkfileset: CommandFilter, /usr/lpp/mmfs/bin/mmunlinkfileset, root mmdelfileset: CommandFilter, /usr/lpp/mmfs/bin/mmdelfileset, root mmcrsnapshot: CommandFilter, /usr/lpp/mmfs/bin/mmcrsnapshot, root mmdelsnapshot: CommandFilter, /usr/lpp/mmfs/bin/mmdelsnapshot, root # cinder/volume/drivers/ibm/gpfs.py # cinder/volume/drivers/ibm/ibmnas.py find_maxdepth_inum: RegExpFilter, find, root, find, ^[/]*([^/\\0]+(/+)?)*$, -maxdepth, \\d+, -ignore_readdir_race, -inum, \\d+, -print0, -quit # cinder/brick/initiator/connector.py: aoe-revalidate: CommandFilter, aoe-revalidate, root aoe-discover: CommandFilter, aoe-discover, root aoe-flush: CommandFilter, aoe-flush, root # cinder/brick/initiator/linuxscsi.py: sg_scan: CommandFilter, sg_scan, root #cinder/backup/services/tsm.py dsmc:CommandFilter,/usr/bin/dsmc,root # cinder/volume/drivers/hitachi/hbsd_horcm.py raidqry: CommandFilter, raidqry, root raidcom: CommandFilter, raidcom, root pairsplit: CommandFilter, pairsplit, root paircreate: CommandFilter, paircreate, root pairdisplay: CommandFilter, pairdisplay, root pairevtwait: CommandFilter, pairevtwait, root horcmstart.sh: CommandFilter, horcmstart.sh, root horcmshutdown.sh: CommandFilter, horcmshutdown.sh, root horcmgr: EnvFilter, env, root, HORCMINST=, /etc/horcmgr # cinder/volume/drivers/hitachi/hbsd_snm2.py auman: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/auman auluref: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/auluref auhgdef: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/auhgdef aufibre1: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/aufibre1 auhgwwn: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/auhgwwn auhgmap: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/auhgmap autargetmap: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/autargetmap aureplicationvvol: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/aureplicationvvol auluadd: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/auluadd auludel: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/auludel auluchgsize: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/auluchgsize auchapuser: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/auchapuser autargetdef: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/autargetdef autargetopt: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/autargetopt autargetini: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/autargetini auiscsi: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/auiscsi audppool: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/audppool aureplicationlocal: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/aureplicationlocal aureplicationmon: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/aureplicationmon # cinder/volume/drivers/hgst.py vgc-cluster: CommandFilter, vgc-cluster, root # cinder/volume/drivers/vzstorage.py pstorage-mount: CommandFilter, pstorage-mount, root pstorage: CommandFilter, pstorage, root ploop: CommandFilter, ploop, root # initiator/connector.py: drv_cfg: CommandFilter, /opt/emc/scaleio/sdc/bin/drv_cfg, root, /opt/emc/scaleio/sdc/bin/drv_cfg, --query_guidconf.rootwrap_filters.volume.pods[0]
Type: string
Description:
“volume”
dependencies.dynamic.common.local_image_registry.jobs[0]
Type: string
Description:
“cinder-image-repo-sync”
dependencies.dynamic.common.local_image_registry.services[0].endpoint
Type: string
Description:
“node”
dependencies.dynamic.common.local_image_registry.services[0].service
Type: string
Description:
“local_image_registry”
dependencies.static.api.jobs[0]
Type: string
Description:
“cinder-db-sync”
dependencies.static.api.jobs[1]
Type: string
Description:
“cinder-ks-user”
dependencies.static.api.jobs[2]
Type: string
Description:
“cinder-ks-endpoints”
dependencies.static.api.jobs[3]
Type: string
Description:
“cinder-rabbit-init”
dependencies.static.api.jobs[4]
Type: string
Description:
“cinder-storage-init”
dependencies.static.api.services[0].endpoint
Type: string
Description:
“internal”
dependencies.static.api.services[0].service
Type: string
Description:
“oslo_db”
dependencies.static.api.services[1].endpoint
Type: string
Description:
“internal”
dependencies.static.api.services[1].service
Type: string
Description:
“identity”
dependencies.static.backup.jobs[0]
Type: string
Description:
“cinder-db-sync”
dependencies.static.backup.jobs[1]
Type: string
Description:
“cinder-ks-user”
dependencies.static.backup.jobs[2]
Type: string
Description:
“cinder-ks-endpoints”
dependencies.static.backup.jobs[3]
Type: string
Description:
“cinder-rabbit-init”
dependencies.static.backup.jobs[4]
Type: string
Description:
“cinder-storage-init”
dependencies.static.backup.jobs[5]
Type: string
Description:
“cinder-backup-storage-init”
dependencies.static.backup.services[0].endpoint
Type: string
Description:
“internal”
dependencies.static.backup.services[0].service
Type: string
Description:
“identity”
dependencies.static.backup.services[1].endpoint
Type: string
Description:
“internal”
dependencies.static.backup.services[1].service
Type: string
Description:
“volume”
dependencies.static.backup_storage_init.jobs
Type: string
Description:
nil
dependencies.static.bootstrap.pod[0].labels.application
Type: string
Description:
“cinder”
dependencies.static.bootstrap.pod[0].labels.component
Type: string
Description:
“volume”
dependencies.static.bootstrap.pod[0].requireSameNode
Type: bool
Description:
false
dependencies.static.bootstrap.services[0].endpoint
Type: string
Description:
“internal”
dependencies.static.bootstrap.services[0].service
Type: string
Description:
“identity”
dependencies.static.bootstrap.services[1].endpoint
Type: string
Description:
“internal”
dependencies.static.bootstrap.services[1].service
Type: string
Description:
“volume”
dependencies.static.clean.jobs
Type: string
Description:
nil
dependencies.static.create_internal_tenant.services[0].endpoint
Type: string
Description:
“internal”
dependencies.static.create_internal_tenant.services[0].service
Type: string
Description:
“identity”
dependencies.static.db_drop.services[0].endpoint
Type: string
Description:
“internal”
dependencies.static.db_drop.services[0].service
Type: string
Description:
“oslo_db”
dependencies.static.db_init.services[0].endpoint
Type: string
Description:
“internal”
dependencies.static.db_init.services[0].service
Type: string
Description:
“oslo_db”
dependencies.static.db_sync.jobs[0]
Type: string
Description:
“cinder-db-init”
dependencies.static.db_sync.services[0].endpoint
Type: string
Description:
“internal”
dependencies.static.db_sync.services[0].service
Type: string
Description:
“oslo_db”
dependencies.static.image_repo_sync.services[0].endpoint
Type: string
Description:
“internal”
dependencies.static.image_repo_sync.services[0].service
Type: string
Description:
“local_image_registry”
dependencies.static.ks_endpoints.jobs[0]
Type: string
Description:
“cinder-ks-service”
dependencies.static.ks_endpoints.services[0].endpoint
Type: string
Description:
“internal”
dependencies.static.ks_endpoints.services[0].service
Type: string
Description:
“identity”
dependencies.static.ks_service.services[0].endpoint
Type: string
Description:
“internal”
dependencies.static.ks_service.services[0].service
Type: string
Description:
“identity”
dependencies.static.ks_user.services[0].endpoint
Type: string
Description:
“internal”
dependencies.static.ks_user.services[0].service
Type: string
Description:
“identity”
dependencies.static.rabbit_init.services[0].endpoint
Type: string
Description:
“internal”
dependencies.static.rabbit_init.services[0].service
Type: string
Description:
“oslo_messaging”
dependencies.static.scheduler.jobs[0]
Type: string
Description:
“cinder-db-sync”
dependencies.static.scheduler.jobs[1]
Type: string
Description:
“cinder-ks-user”
dependencies.static.scheduler.jobs[2]
Type: string
Description:
“cinder-ks-endpoints”
dependencies.static.scheduler.jobs[3]
Type: string
Description:
“cinder-rabbit-init”
dependencies.static.scheduler.jobs[4]
Type: string
Description:
“cinder-storage-init”
dependencies.static.scheduler.services[0].endpoint
Type: string
Description:
“internal”
dependencies.static.scheduler.services[0].service
Type: string
Description:
“identity”
dependencies.static.scheduler.services[1].endpoint
Type: string
Description:
“internal”
dependencies.static.scheduler.services[1].service
Type: string
Description:
“volume”
dependencies.static.storage_init.jobs
Type: string
Description:
nil
dependencies.static.tests.services[0].endpoint
Type: string
Description:
“internal”
dependencies.static.tests.services[0].service
Type: string
Description:
“identity”
dependencies.static.tests.services[1].endpoint
Type: string
Description:
“internal”
dependencies.static.tests.services[1].service
Type: string
Description:
“volume”
dependencies.static.volume.jobs[0]
Type: string
Description:
“cinder-db-sync”
dependencies.static.volume.jobs[1]
Type: string
Description:
“cinder-ks-user”
dependencies.static.volume.jobs[2]
Type: string
Description:
“cinder-ks-endpoints”
dependencies.static.volume.jobs[3]
Type: string
Description:
“cinder-rabbit-init”
dependencies.static.volume.jobs[4]
Type: string
Description:
“cinder-storage-init”
dependencies.static.volume.services[0].endpoint
Type: string
Description:
“internal”
dependencies.static.volume.services[0].service
Type: string
Description:
“identity”
dependencies.static.volume.services[1].endpoint
Type: string
Description:
“internal”
dependencies.static.volume.services[1].service
Type: string
Description:
“volume”
dependencies.static.volume_usage_audit.jobs[0]
Type: string
Description:
“cinder-db-sync”
dependencies.static.volume_usage_audit.jobs[1]
Type: string
Description:
“cinder-ks-user”
dependencies.static.volume_usage_audit.jobs[2]
Type: string
Description:
“cinder-ks-endpoints”
dependencies.static.volume_usage_audit.jobs[3]
Type: string
Description:
“cinder-rabbit-init”
dependencies.static.volume_usage_audit.jobs[4]
Type: string
Description:
“cinder-storage-init”
dependencies.static.volume_usage_audit.services[0].endpoint
Type: string
Description:
“internal”
dependencies.static.volume_usage_audit.services[0].service
Type: string
Description:
“identity”
dependencies.static.volume_usage_audit.services[1].endpoint
Type: string
Description:
“internal”
dependencies.static.volume_usage_audit.services[1].service
Type: string
Description:
“volume”
endpoints.cluster_domain_suffix
Type: string
Description:
“cluster.local”
endpoints.fluentd.host_fqdn_override.default
Type: string
Description:
nil
endpoints.fluentd.hosts.default
Type: string
Description:
“fluentd-logging”
endpoints.fluentd.name
Type: string
Description:
“fluentd”
endpoints.fluentd.namespace
Type: string
Description:
nil
endpoints.fluentd.path.default
Type: string
Description:
nil
endpoints.fluentd.port.metrics.default
Type: int
Description:
24220
endpoints.fluentd.port.service.default
Type: int
Description:
24224
endpoints.fluentd.scheme
Type: string
Description:
“http”
endpoints.identity.auth.admin.password
Type: string
Description:
“password”
endpoints.identity.auth.admin.project_domain_name
Type: string
Description:
“default”
endpoints.identity.auth.admin.project_name
Type: string
Description:
“admin”
endpoints.identity.auth.admin.region_name
Type: string
Description:
“RegionOne”
endpoints.identity.auth.admin.user_domain_name
Type: string
Description:
“default”
endpoints.identity.auth.admin.username
Type: string
Description:
“admin”
endpoints.identity.auth.cinder.password
Type: string
Description:
“password”
endpoints.identity.auth.cinder.project_domain_name
Type: string
Description:
“service”
endpoints.identity.auth.cinder.project_name
Type: string
Description:
“service”
endpoints.identity.auth.cinder.region_name
Type: string
Description:
“RegionOne”
endpoints.identity.auth.cinder.role
Type: string
Description:
“admin,service”
endpoints.identity.auth.cinder.user_domain_name
Type: string
Description:
“service”
endpoints.identity.auth.cinder.username
Type: string
Description:
“cinder”
endpoints.identity.auth.test.password
Type: string
Description:
“password”
endpoints.identity.auth.test.project_domain_name
Type: string
Description:
“service”
endpoints.identity.auth.test.project_name
Type: string
Description:
“test”
endpoints.identity.auth.test.region_name
Type: string
Description:
“RegionOne”
endpoints.identity.auth.test.role
Type: string
Description:
“admin”
endpoints.identity.auth.test.user_domain_name
Type: string
Description:
“service”
endpoints.identity.auth.test.username
Type: string
Description:
“cinder-test”
endpoints.identity.host_fqdn_override.default
Type: string
Description:
nil
endpoints.identity.hosts.default
Type: string
Description:
“keystone”
endpoints.identity.hosts.internal
Type: string
Description:
“keystone-api”
endpoints.identity.name
Type: string
Description:
“keystone”
endpoints.identity.path.default
Type: string
Description:
“/v3”
endpoints.identity.port.api.default
Type: int
Description:
80
endpoints.identity.port.api.internal
Type: int
Description:
5000
endpoints.identity.scheme.default
Type: string
Description:
“http”
endpoints.image.host_fqdn_override.default
Type: string
Description:
nil
endpoints.image.hosts.default
Type: string
Description:
“glance-api”
endpoints.image.hosts.public
Type: string
Description:
“glance”
endpoints.image.name
Type: string
Description:
“glance”
endpoints.image.path.default
Type: string
Description:
nil
endpoints.image.port.api.default
Type: int
Description:
9292
endpoints.image.port.api.public
Type: int
Description:
80
endpoints.image.scheme.default
Type: string
Description:
“http”
endpoints.ingress.hosts.default
Type: string
Description:
“ingress”
endpoints.ingress.name
Type: string
Description:
“ingress”
endpoints.ingress.namespace
Type: string
Description:
nil
endpoints.ingress.port.ingress.default
Type: int
Description:
80
endpoints.kube_dns.host_fqdn_override.default
Type: string
Description:
nil
endpoints.kube_dns.hosts.default
Type: string
Description:
“kube-dns”
endpoints.kube_dns.name
Type: string
Description:
“kubernetes-dns”
endpoints.kube_dns.namespace
Type: string
Description:
“kube-system”
endpoints.kube_dns.path.default
Type: string
Description:
nil
endpoints.kube_dns.port.dns.default
Type: int
Description:
53
endpoints.kube_dns.port.dns.protocol
Type: string
Description:
“UDP”
endpoints.kube_dns.scheme
Type: string
Description:
“http”
endpoints.local_image_registry.host_fqdn_override.default
Type: string
Description:
nil
endpoints.local_image_registry.hosts.default
Type: string
Description:
“localhost”
endpoints.local_image_registry.hosts.internal
Type: string
Description:
“docker-registry”
endpoints.local_image_registry.hosts.node
Type: string
Description:
“localhost”
endpoints.local_image_registry.name
Type: string
Description:
“docker-registry”
endpoints.local_image_registry.namespace
Type: string
Description:
“docker-registry”
endpoints.local_image_registry.port.registry.node
Type: int
Description:
5000
endpoints.oci_image_registry.auth.cinder.password
Type: string
Description:
“password”
endpoints.oci_image_registry.auth.cinder.username
Type: string
Description:
“cinder”
endpoints.oci_image_registry.auth.enabled
Type: bool
Description:
false
endpoints.oci_image_registry.host_fqdn_override.default
Type: string
Description:
nil
endpoints.oci_image_registry.hosts.default
Type: string
Description:
“localhost”
endpoints.oci_image_registry.name
Type: string
Description:
“oci-image-registry”
endpoints.oci_image_registry.namespace
Type: string
Description:
“oci-image-registry”
endpoints.oci_image_registry.port.registry.default
Type: string
Description:
nil
endpoints.oslo_cache.auth.memcache_secret_key
Type: string
Description:
nil
endpoints.oslo_cache.host_fqdn_override.default
Type: string
Description:
nil
endpoints.oslo_cache.hosts.default
Type: string
Description:
“memcached”
endpoints.oslo_cache.port.memcache.default
Type: int
Description:
11211
endpoints.oslo_db.auth.admin.password
Type: string
Description:
“password”
endpoints.oslo_db.auth.admin.secret.tls.internal
Type: string
Description:
“mariadb-tls-direct”
endpoints.oslo_db.auth.admin.username
Type: string
Description:
“root”
endpoints.oslo_db.auth.cinder.password
Type: string
Description:
“password”
endpoints.oslo_db.auth.cinder.username
Type: string
Description:
“cinder”
endpoints.oslo_db.host_fqdn_override.default
Type: string
Description:
nil
endpoints.oslo_db.hosts.default
Type: string
Description:
“mariadb”
endpoints.oslo_db.path
Type: string
Description:
“/cinder”
endpoints.oslo_db.port.mysql.default
Type: int
Description:
3306
endpoints.oslo_db.scheme
Type: string
Description:
“mysql+pymysql”
endpoints.oslo_messaging.auth.admin.password
Type: string
Description:
“password”
endpoints.oslo_messaging.auth.admin.secret.tls.internal
Type: string
Description:
“rabbitmq-tls-direct”
endpoints.oslo_messaging.auth.admin.username
Type: string
Description:
“rabbitmq”
endpoints.oslo_messaging.auth.cinder.password
Type: string
Description:
“password”
endpoints.oslo_messaging.auth.cinder.username
Type: string
Description:
“cinder”
endpoints.oslo_messaging.host_fqdn_override.default
Type: string
Description:
nil
endpoints.oslo_messaging.hosts.default
Type: string
Description:
“rabbitmq”
endpoints.oslo_messaging.path
Type: string
Description:
“/cinder”
endpoints.oslo_messaging.port.amqp.default
Type: int
Description:
5672
endpoints.oslo_messaging.port.http.default
Type: int
Description:
15672
endpoints.oslo_messaging.scheme
Type: string
Description:
“rabbit”
endpoints.oslo_messaging.statefulset.name
Type: string
Description:
“rabbitmq-rabbitmq”
endpoints.oslo_messaging.statefulset.replicas
Type: int
Description:
2
endpoints.volume.host_fqdn_override.default
Type: string
Description:
nil
endpoints.volume.hosts.default
Type: string
Description:
“cinder-api”
endpoints.volume.hosts.public
Type: string
Description:
“cinder”
endpoints.volume.name
Type: string
Description:
“cinder”
endpoints.volume.path.default
Type: string
Description:
“/v1/%(tenant_id)s”
endpoints.volume.port.api.default
Type: int
Description:
8776
endpoints.volume.port.api.public
Type: int
Description:
80
endpoints.volume.scheme.default
Type: string
Description:
“http”
endpoints.volumev2.host_fqdn_override.default
Type: string
Description:
nil
endpoints.volumev2.hosts.default
Type: string
Description:
“cinder-api”
endpoints.volumev2.hosts.public
Type: string
Description:
“cinder”
endpoints.volumev2.name
Type: string
Description:
“cinderv2”
endpoints.volumev2.path.default
Type: string
Description:
“/v2/%(tenant_id)s”
endpoints.volumev2.port.api.default
Type: int
Description:
8776
endpoints.volumev2.port.api.public
Type: int
Description:
80
endpoints.volumev2.scheme.default
Type: string
Description:
“http”
endpoints.volumev3.host_fqdn_override.default
Type: string
Description:
nil
endpoints.volumev3.hosts.default
Type: string
Description:
“cinder-api”
endpoints.volumev3.hosts.public
Type: string
Description:
“cinder”
endpoints.volumev3.name
Type: string
Description:
“cinderv3”
endpoints.volumev3.path.default
Type: string
Description:
“/v3/%(tenant_id)s”
endpoints.volumev3.port.api.default
Type: int
Description:
8776
endpoints.volumev3.port.api.public
Type: int
Description:
80
endpoints.volumev3.scheme.default
Type: string
Description:
“http”
helm3_hook
Type: bool
Description:
true
images.local_registry.active
Type: bool
Description:
false
images.local_registry.exclude[0]
Type: string
Description:
“dep_check”
images.local_registry.exclude[1]
Type: string
Description:
“image_repo_sync”
images.pull_policy
Type: string
Description:
“IfNotPresent”
images.tags.bootstrap
Type: string
Description:
“docker.io/openstackhelm/heat:2024.1-ubuntu_jammy”
images.tags.cinder_api
Type: string
Description:
“docker.io/openstackhelm/cinder:2024.1-ubuntu_jammy”
images.tags.cinder_backup
Type: string
Description:
“docker.io/openstackhelm/cinder:2024.1-ubuntu_jammy”
images.tags.cinder_backup_storage_init
Type: string
Description:
“docker.io/openstackhelm/ceph-config-helper:latest-ubuntu_jammy”
images.tags.cinder_db_sync
Type: string
Description:
“docker.io/openstackhelm/cinder:2024.1-ubuntu_jammy”
images.tags.cinder_scheduler
Type: string
Description:
“docker.io/openstackhelm/cinder:2024.1-ubuntu_jammy”
images.tags.cinder_storage_init
Type: string
Description:
“docker.io/openstackhelm/ceph-config-helper:latest-ubuntu_jammy”
images.tags.cinder_volume
Type: string
Description:
“docker.io/openstackhelm/cinder:2024.1-ubuntu_jammy”
images.tags.cinder_volume_usage_audit
Type: string
Description:
“docker.io/openstackhelm/cinder:2024.1-ubuntu_jammy”
images.tags.db_drop
Type: string
Description:
“docker.io/openstackhelm/heat:2024.1-ubuntu_jammy”
images.tags.db_init
Type: string
Description:
“docker.io/openstackhelm/heat:2024.1-ubuntu_jammy”
images.tags.dep_check
Type: string
Description:
“quay.io/airshipit/kubernetes-entrypoint:latest-ubuntu_focal”
images.tags.image_repo_sync
Type: string
Description:
“docker.io/docker:17.07.0”
images.tags.ks_endpoints
Type: string
Description:
“docker.io/openstackhelm/heat:2024.1-ubuntu_jammy”
images.tags.ks_service
Type: string
Description:
“docker.io/openstackhelm/heat:2024.1-ubuntu_jammy”
images.tags.ks_user
Type: string
Description:
“docker.io/openstackhelm/heat:2024.1-ubuntu_jammy”
images.tags.rabbit_init
Type: string
Description:
“docker.io/rabbitmq:3.13-management”
images.tags.test
Type: string
Description:
“docker.io/xrally/xrally-openstack:2.0.0”
jobs.volume_usage_audit.cron
Type: string
Description:
“5 * * * *”
jobs.volume_usage_audit.history.failed
Type: int
Description:
1
jobs.volume_usage_audit.history.success
Type: int
Description:
3
jobs.volume_usage_audit.starting_deadline
Type: int
Description:
600
labels.api.node_selector_key
Type: string
Description:
“openstack-control-plane”
labels.api.node_selector_value
Type: string
Description:
“enabled”
labels.backup.node_selector_key
Type: string
Description:
“openstack-control-plane”
labels.backup.node_selector_value
Type: string
Description:
“enabled”
labels.job.node_selector_key
Type: string
Description:
“openstack-control-plane”
labels.job.node_selector_value
Type: string
Description:
“enabled”
labels.scheduler.node_selector_key
Type: string
Description:
“openstack-control-plane”
labels.scheduler.node_selector_value
Type: string
Description:
“enabled”
labels.test.node_selector_key
Type: string
Description:
“openstack-control-plane”
labels.test.node_selector_value
Type: string
Description:
“enabled”
labels.volume.node_selector_key
Type: string
Description:
“openstack-control-plane”
labels.volume.node_selector_value
Type: string
Description:
“enabled”
manifests.certificates
Type: bool
Description:
false
manifests.configmap_bin
Type: bool
Description:
true
manifests.configmap_etc
Type: bool
Description:
true
manifests.cron_volume_usage_audit
Type: bool
Description:
true
manifests.deployment_api
Type: bool
Description:
true
manifests.deployment_backup
Type: bool
Description:
true
manifests.deployment_scheduler
Type: bool
Description:
true
manifests.deployment_volume
Type: bool
Description:
true
manifests.ingress_api
Type: bool
Description:
true
manifests.job_backup_storage_init
Type: bool
Description:
true
manifests.job_bootstrap
Type: bool
Description:
true
manifests.job_clean
Type: bool
Description:
true
manifests.job_create_internal_tenant
Type: bool
Description:
true
manifests.job_db_drop
Type: bool
Description:
false
manifests.job_db_init
Type: bool
Description:
true
manifests.job_db_sync
Type: bool
Description:
true
manifests.job_image_repo_sync
Type: bool
Description:
true
manifests.job_ks_endpoints
Type: bool
Description:
true
manifests.job_ks_service
Type: bool
Description:
true
manifests.job_ks_user
Type: bool
Description:
true
manifests.job_rabbit_init
Type: bool
Description:
true
manifests.job_storage_init
Type: bool
Description:
true
manifests.network_policy
Type: bool
Description:
false
manifests.pdb_api
Type: bool
Description:
true
manifests.pod_rally_test
Type: bool
Description:
true
manifests.pvc_backup
Type: bool
Description:
true
manifests.secret_db
Type: bool
Description:
true
manifests.secret_ingress_tls
Type: bool
Description:
true
manifests.secret_keystone
Type: bool
Description:
true
manifests.secret_rabbitmq
Type: bool
Description:
true
manifests.secret_registry
Type: bool
Description:
true
manifests.service_api
Type: bool
Description:
true
manifests.service_ingress_api
Type: bool
Description:
true
network.api.external_policy_local
Type: bool
Description:
false
network.api.ingress.annotations.”nginx.ingress.kubernetes.io/rewrite-target”
Type: string
Description:
“/”
network.api.ingress.classes.cluster
Type: string
Description:
“nginx-cluster”
network.api.ingress.classes.namespace
Type: string
Description:
“nginx”
network.api.ingress.public
Type: bool
Description:
true
network.api.node_port.enabled
Type: bool
Description:
false
network.api.node_port.port
Type: int
Description:
30877
network_policy.cinder.egress[0]
Type: object
Description:
{}
network_policy.cinder.ingress[0]
Type: object
Description:
{}
pod.affinity.anti.topologyKey.default
Type: string
Description:
“kubernetes.io/hostname”
pod.affinity.anti.type.default
Type: string
Description:
“preferredDuringSchedulingIgnoredDuringExecution”
pod.affinity.anti.weight.default
Type: int
Description:
10
pod.lifecycle.disruption_budget.api.min_available
Type: int
Description:
0
pod.lifecycle.termination_grace_period.api.timeout
Type: int
Description:
30
pod.lifecycle.upgrades.deployments.pod_replacement_strategy
Type: string
Description:
“RollingUpdate”
pod.lifecycle.upgrades.deployments.revision_history
Type: int
Description:
3
pod.lifecycle.upgrades.deployments.rolling_update.max_surge
Type: int
Description:
3
pod.lifecycle.upgrades.deployments.rolling_update.max_unavailable
Type: int
Description:
1
pod.mounts.cinder_api.cinder_api.volumeMounts
Type: string
Description:
nil
pod.mounts.cinder_api.cinder_api.volumes
Type: string
Description:
nil
pod.mounts.cinder_api.init_container
Type: string
Description:
nil
pod.mounts.cinder_backup.cinder_backup.volumeMounts
Type: string
Description:
nil
pod.mounts.cinder_backup.cinder_backup.volumes
Type: string
Description:
nil
pod.mounts.cinder_backup.init_container
Type: string
Description:
nil
pod.mounts.cinder_db_sync.cinder_db_sync.volumeMounts
Type: string
Description:
nil
pod.mounts.cinder_db_sync.cinder_db_sync.volumes
Type: string
Description:
nil
pod.mounts.cinder_scheduler.cinder_scheduler.volumeMounts
Type: string
Description:
nil
pod.mounts.cinder_scheduler.cinder_scheduler.volumes
Type: string
Description:
nil
pod.mounts.cinder_scheduler.init_container
Type: string
Description:
nil
pod.mounts.cinder_tests.cinder_tests.volumeMounts
Type: string
Description:
nil
pod.mounts.cinder_tests.cinder_tests.volumes
Type: string
Description:
nil
pod.mounts.cinder_tests.init_container
Type: string
Description:
nil
pod.mounts.cinder_volume.cinder_volume.volumeMounts
Type: string
Description:
nil
pod.mounts.cinder_volume.cinder_volume.volumes
Type: string
Description:
nil
pod.mounts.cinder_volume.init_container
Type: string
Description:
nil
pod.mounts.cinder_volume_usage_audit.cinder_volume_usage_audit.volumeMounts
Type: string
Description:
nil
pod.mounts.cinder_volume_usage_audit.cinder_volume_usage_audit.volumes
Type: string
Description:
nil
pod.mounts.cinder_volume_usage_audit.init_container
Type: string
Description:
nil
pod.replicas.api
Type: int
Description:
1
pod.replicas.backup
Type: int
Description:
1
pod.replicas.scheduler
Type: int
Description:
1
pod.replicas.volume
Type: int
Description:
1
pod.resources.api.limits.cpu
Type: string
Description:
“2000m”
pod.resources.api.limits.memory
Type: string
Description:
“1024Mi”
pod.resources.api.requests.cpu
Type: string
Description:
“100m”
pod.resources.api.requests.memory
Type: string
Description:
“128Mi”
pod.resources.enabled
Type: bool
Description:
false
pod.resources.jobs.backup_storage_init.limits.cpu
Type: string
Description:
“2000m”
pod.resources.jobs.backup_storage_init.limits.memory
Type: string
Description:
“1024Mi”
pod.resources.jobs.backup_storage_init.requests.cpu
Type: string
Description:
“100m”
pod.resources.jobs.backup_storage_init.requests.memory
Type: string
Description:
“128Mi”
pod.resources.jobs.bootstrap.limits.cpu
Type: string
Description:
“2000m”
pod.resources.jobs.bootstrap.limits.memory
Type: string
Description:
“1024Mi”
pod.resources.jobs.bootstrap.requests.cpu
Type: string
Description:
“100m”
pod.resources.jobs.bootstrap.requests.memory
Type: string
Description:
“128Mi”
pod.resources.jobs.clean.limits.cpu
Type: string
Description:
“2000m”
pod.resources.jobs.clean.limits.memory
Type: string
Description:
“1024Mi”
pod.resources.jobs.clean.requests.cpu
Type: string
Description:
“100m”
pod.resources.jobs.clean.requests.memory
Type: string
Description:
“128Mi”
pod.resources.jobs.db_drop.limits.cpu
Type: string
Description:
“2000m”
pod.resources.jobs.db_drop.limits.memory
Type: string
Description:
“1024Mi”
pod.resources.jobs.db_drop.requests.cpu
Type: string
Description:
“100m”
pod.resources.jobs.db_drop.requests.memory
Type: string
Description:
“128Mi”
pod.resources.jobs.db_init.limits.cpu
Type: string
Description:
“2000m”
pod.resources.jobs.db_init.limits.memory
Type: string
Description:
“1024Mi”
pod.resources.jobs.db_init.requests.cpu
Type: string
Description:
“100m”
pod.resources.jobs.db_init.requests.memory
Type: string
Description:
“128Mi”
pod.resources.jobs.db_sync.limits.cpu
Type: string
Description:
“2000m”
pod.resources.jobs.db_sync.limits.memory
Type: string
Description:
“1024Mi”
pod.resources.jobs.db_sync.requests.cpu
Type: string
Description:
“100m”
pod.resources.jobs.db_sync.requests.memory
Type: string
Description:
“128Mi”
pod.resources.jobs.image_repo_sync.limits.cpu
Type: string
Description:
“2000m”
pod.resources.jobs.image_repo_sync.limits.memory
Type: string
Description:
“1024Mi”
pod.resources.jobs.image_repo_sync.requests.cpu
Type: string
Description:
“100m”
pod.resources.jobs.image_repo_sync.requests.memory
Type: string
Description:
“128Mi”
pod.resources.jobs.ks_endpoints.limits.cpu
Type: string
Description:
“2000m”
pod.resources.jobs.ks_endpoints.limits.memory
Type: string
Description:
“1024Mi”
pod.resources.jobs.ks_endpoints.requests.cpu
Type: string
Description:
“100m”
pod.resources.jobs.ks_endpoints.requests.memory
Type: string
Description:
“128Mi”
pod.resources.jobs.ks_service.limits.cpu
Type: string
Description:
“2000m”
pod.resources.jobs.ks_service.limits.memory
Type: string
Description:
“1024Mi”
pod.resources.jobs.ks_service.requests.cpu
Type: string
Description:
“100m”
pod.resources.jobs.ks_service.requests.memory
Type: string
Description:
“128Mi”
pod.resources.jobs.ks_user.limits.cpu
Type: string
Description:
“2000m”
pod.resources.jobs.ks_user.limits.memory
Type: string
Description:
“1024Mi”
pod.resources.jobs.ks_user.requests.cpu
Type: string
Description:
“100m”
pod.resources.jobs.ks_user.requests.memory
Type: string
Description:
“128Mi”
pod.resources.jobs.rabbit_init.limits.cpu
Type: string
Description:
“2000m”
pod.resources.jobs.rabbit_init.limits.memory
Type: string
Description:
“1024Mi”
pod.resources.jobs.rabbit_init.requests.cpu
Type: string
Description:
“100m”
pod.resources.jobs.rabbit_init.requests.memory
Type: string
Description:
“128Mi”
pod.resources.jobs.storage_init.limits.cpu
Type: string
Description:
“2000m”
pod.resources.jobs.storage_init.limits.memory
Type: string
Description:
“1024Mi”
pod.resources.jobs.storage_init.requests.cpu
Type: string
Description:
“100m”
pod.resources.jobs.storage_init.requests.memory
Type: string
Description:
“128Mi”
pod.resources.jobs.tests.limits.cpu
Type: string
Description:
“2000m”
pod.resources.jobs.tests.limits.memory
Type: string
Description:
“1024Mi”
pod.resources.jobs.tests.requests.cpu
Type: string
Description:
“100m”
pod.resources.jobs.tests.requests.memory
Type: string
Description:
“128Mi”
pod.resources.jobs.volume_usage_audit.limits.cpu
Type: string
Description:
“2000m”
pod.resources.jobs.volume_usage_audit.limits.memory
Type: string
Description:
“1024Mi”
pod.resources.jobs.volume_usage_audit.requests.cpu
Type: string
Description:
“100m”
pod.resources.jobs.volume_usage_audit.requests.memory
Type: string
Description:
“128Mi”
pod.resources.scheduler.limits.cpu
Type: string
Description:
“2000m”
pod.resources.scheduler.limits.memory
Type: string
Description:
“1024Mi”
pod.resources.scheduler.requests.cpu
Type: string
Description:
“100m”
pod.resources.scheduler.requests.memory
Type: string
Description:
“128Mi”
pod.resources.volume.limits.cpu
Type: string
Description:
“2000m”
pod.resources.volume.limits.memory
Type: string
Description:
“1024Mi”
pod.resources.volume.requests.cpu
Type: string
Description:
“100m”
pod.resources.volume.requests.memory
Type: string
Description:
“128Mi”
pod.security_context.cinder_api.container.ceph_coordination_volume_perms.readOnlyRootFilesystem
Type: bool
Description:
true
pod.security_context.cinder_api.container.ceph_coordination_volume_perms.runAsUser
Type: int
Description:
0
pod.security_context.cinder_api.container.cinder_api.allowPrivilegeEscalation
Type: bool
Description:
false
pod.security_context.cinder_api.container.cinder_api.readOnlyRootFilesystem
Type: bool
Description:
true
pod.security_context.cinder_api.pod.runAsUser
Type: int
Description:
42424
pod.security_context.cinder_backup.container.ceph_backup_keyring_placement.readOnlyRootFilesystem
Type: bool
Description:
true
pod.security_context.cinder_backup.container.ceph_backup_keyring_placement.runAsUser
Type: int
Description:
0
pod.security_context.cinder_backup.container.ceph_backup_volume_perms.readOnlyRootFilesystem
Type: bool
Description:
true
pod.security_context.cinder_backup.container.ceph_backup_volume_perms.runAsUser
Type: int
Description:
0
pod.security_context.cinder_backup.container.ceph_coordination_volume_perms.readOnlyRootFilesystem
Type: bool
Description:
true
pod.security_context.cinder_backup.container.ceph_coordination_volume_perms.runAsUser
Type: int
Description:
0
pod.security_context.cinder_backup.container.ceph_keyring_placement.readOnlyRootFilesystem
Type: bool
Description:
true
pod.security_context.cinder_backup.container.ceph_keyring_placement.runAsUser
Type: int
Description:
0
pod.security_context.cinder_backup.container.cinder_backup.capabilities.add[0]
Type: string
Description:
“SYS_ADMIN”
pod.security_context.cinder_backup.container.cinder_backup.readOnlyRootFilesystem
Type: bool
Description:
true
pod.security_context.cinder_backup.container.cinder_backup.runAsUser
Type: int
Description:
0
pod.security_context.cinder_backup.pod.runAsUser
Type: int
Description:
42424
pod.security_context.cinder_scheduler.container.ceph_coordination_volume_perms.readOnlyRootFilesystem
Type: bool
Description:
true
pod.security_context.cinder_scheduler.container.ceph_coordination_volume_perms.runAsUser
Type: int
Description:
0
pod.security_context.cinder_scheduler.container.cinder_scheduler.allowPrivilegeEscalation
Type: bool
Description:
false
pod.security_context.cinder_scheduler.container.cinder_scheduler.readOnlyRootFilesystem
Type: bool
Description:
true
pod.security_context.cinder_scheduler.pod.runAsUser
Type: int
Description:
42424
pod.security_context.cinder_volume.container.ceph_coordination_volume_perms.readOnlyRootFilesystem
Type: bool
Description:
true
pod.security_context.cinder_volume.container.ceph_coordination_volume_perms.runAsUser
Type: int
Description:
0
pod.security_context.cinder_volume.container.ceph_keyring_placement.readOnlyRootFilesystem
Type: bool
Description:
true
pod.security_context.cinder_volume.container.ceph_keyring_placement.runAsUser
Type: int
Description:
0
pod.security_context.cinder_volume.container.cinder_volume.capabilities.add[0]
Type: string
Description:
“SYS_ADMIN”
pod.security_context.cinder_volume.container.cinder_volume.readOnlyRootFilesystem
Type: bool
Description:
true
pod.security_context.cinder_volume.container.init_cinder_conf.readOnlyRootFilesystem
Type: bool
Description:
true
pod.security_context.cinder_volume.container.init_cinder_conf.runAsUser
Type: int
Description:
0
pod.security_context.cinder_volume.pod.runAsUser
Type: int
Description:
42424
pod.security_context.clean.container.cinder_volume_rbd_secret_clean.allowPrivilegeEscalation
Type: bool
Description:
false
pod.security_context.clean.container.cinder_volume_rbd_secret_clean.readOnlyRootFilesystem
Type: bool
Description:
true
pod.security_context.clean.pod.runAsUser
Type: int
Description:
42424
pod.security_context.create_internal_tenant.container.create_internal_tenant.allowPrivilegeEscalation
Type: bool
Description:
false
pod.security_context.create_internal_tenant.container.create_internal_tenant.readOnlyRootFilesystem
Type: bool
Description:
true
pod.security_context.create_internal_tenant.pod.runAsUser
Type: int
Description:
42424
pod.security_context.storage_init.container.ceph_keyring_placement.readOnlyRootFilesystem
Type: bool
Description:
true
pod.security_context.storage_init.container.ceph_keyring_placement.runAsUser
Type: int
Description:
0
pod.security_context.storage_init.container.cinder_backup_storage_init.allowPrivilegeEscalation
Type: bool
Description:
false
pod.security_context.storage_init.container.cinder_backup_storage_init.readOnlyRootFilesystem
Type: bool
Description:
true
pod.security_context.storage_init.pod.runAsUser
Type: int
Description:
42424
pod.security_context.volume_usage_audit.container.cinder_volume_usage_audit.allowPrivilegeEscalation
Type: bool
Description:
false
pod.security_context.volume_usage_audit.container.cinder_volume_usage_audit.readOnlyRootFilesystem
Type: bool
Description:
true
pod.security_context.volume_usage_audit.pod.runAsUser
Type: int
Description:
42424
pod.tolerations.cinder.enabled
Type: bool
Description:
false
pod.tolerations.cinder.tolerations[0].effect
Type: string
Description:
“NoSchedule”
pod.tolerations.cinder.tolerations[0].key
Type: string
Description:
“node-role.kubernetes.io/master”
pod.tolerations.cinder.tolerations[0].operator
Type: string
Description:
“Exists”
pod.tolerations.cinder.tolerations[1].effect
Type: string
Description:
“NoSchedule”
pod.tolerations.cinder.tolerations[1].key
Type: string
Description:
“node-role.kubernetes.io/control-plane”
pod.tolerations.cinder.tolerations[1].operator
Type: string
Description:
“Exists”
pod.useHostNetwork.backup
Type: bool
Description:
false
pod.useHostNetwork.volume
Type: bool
Description:
false
release_group
Type: string
Description:
nil
secrets.identity.admin
Type: string
Description:
“cinder-keystone-admin”
secrets.identity.cinder
Type: string
Description:
“cinder-keystone-user”
secrets.identity.test
Type: string
Description:
“cinder-keystone-test”
secrets.oci_image_registry.cinder
Type: string
Description:
“cinder-oci-image-registry”
secrets.oslo_db.admin
Type: string
Description:
“cinder-db-admin”
secrets.oslo_db.cinder
Type: string
Description:
“cinder-db-user”
secrets.oslo_messaging.admin
Type: string
Description:
“cinder-rabbitmq-admin”
secrets.oslo_messaging.cinder
Type: string
Description:
“cinder-rabbitmq-user”
secrets.rbd.backup
Type: string
Description:
“cinder-backup-rbd-keyring”
secrets.rbd.volume
Type: string
Description:
“cinder-volume-rbd-keyring”
secrets.rbd.volume_external
Type: string
Description:
“cinder-volume-external-rbd-keyring”
secrets.tls.volume.api.internal
Type: string
Description:
“cinder-tls-api”
secrets.tls.volume.api.public
Type: string
Description:
“cinder-tls-public”
storage
Type: string
Description:
“ceph”
tls.identity
Type: bool
Description:
false
tls.oslo_db
Type: bool
Description:
false
tls.oslo_messaging
Type: bool
Description:
false