Neutron

There are various customizations you can do to tailor the deployment of OpenStack Neutron. You can find those below.

General Parameters

  • bootstrap.enabled

    • Type: bool

    • Description:

    • false

  • bootstrap.ks_user

    • Type: string

    • Description:

    • “neutron”

  • bootstrap.script

    • Type: string

    • Description:

    • openstack token issue
      
  • conf.api_audit_map.DEFAULT.target_endpoint_type

    • Type: string

    • Description:

    • “None”

  • conf.api_audit_map.custom_actions.add_router_interface

    • Type: string

    • Description:

    • “update/add”

  • conf.api_audit_map.custom_actions.remove_router_interface

    • Type: string

    • Description:

    • “update/remove”

  • conf.api_audit_map.path_keywords.floatingips

    • Type: string

    • Description:

    • “ip”

  • conf.api_audit_map.path_keywords.health_monitors

    • Type: string

    • Description:

    • “health_monitor”

  • conf.api_audit_map.path_keywords.healthmonitors

    • Type: string

    • Description:

    • “healthmonitor”

  • conf.api_audit_map.path_keywords.lb

    • Type: string

    • Description:

    • “None”

  • conf.api_audit_map.path_keywords.members

    • Type: string

    • Description:

    • “member”

  • conf.api_audit_map.path_keywords.metering-label-rules

    • Type: string

    • Description:

    • “rule”

  • conf.api_audit_map.path_keywords.metering-labels

    • Type: string

    • Description:

    • “label”

  • conf.api_audit_map.path_keywords.networks

    • Type: string

    • Description:

    • “network”

  • conf.api_audit_map.path_keywords.pools

    • Type: string

    • Description:

    • “pool”

  • conf.api_audit_map.path_keywords.ports

    • Type: string

    • Description:

    • “port”

  • conf.api_audit_map.path_keywords.quotas

    • Type: string

    • Description:

    • “quota”

  • conf.api_audit_map.path_keywords.routers

    • Type: string

    • Description:

    • “router”

  • conf.api_audit_map.path_keywords.security-group-rules

    • Type: string

    • Description:

    • “rule”

  • conf.api_audit_map.path_keywords.security-groups

    • Type: string

    • Description:

    • “security-group”

  • conf.api_audit_map.path_keywords.subnets

    • Type: string

    • Description:

    • “subnet”

  • conf.api_audit_map.path_keywords.vips

    • Type: string

    • Description:

    • “vip”

  • conf.api_audit_map.service_endpoints.network

    • Type: string

    • Description:

    • “service/network”

  • conf.auto_bridge_add.br-ex

    • Type: string

    • Description:

    • nil

  • conf.bagpipe_bgp

    • Type: object

    • Description:

    • {}

  • conf.bgp_dragent

    • Type: object

    • Description:

    • {}

  • conf.dhcp_agent.DEFAULT.dnsmasq_config_file

    • Type: string

    • Description:

    • “/etc/neutron/dnsmasq.conf”

  • conf.dhcp_agent.DEFAULT.force_metadata

    • Type: bool

    • Description:

    • true

  • conf.dhcp_agent.DEFAULT.interface_driver

    • Type: string

    • Description:

    • nil

  • conf.dnsmasq

    • Type: string

    • Description:

    • #no-hosts
      #port=5353
      #cache-size=500
      #no-negcache
      #dns-forward-max=100
      #resolve-file=
      #strict-order
      #bind-interface
      #bind-dynamic
      #domain=
      #dhcp-range=10.10.10.10,10.10.10.100,24h
      #dhcp-lease-max=150
      #dhcp-host=11:22:33:44:55:66,ignore
      #dhcp-option=3,10.10.10.1
      #dhcp-option-force=26,1450
      
  • conf.l3_agent.DEFAULT.agent_mode

    • Type: string

    • Description:

    • “legacy”

  • conf.l3_agent.DEFAULT.interface_driver

    • Type: string

    • Description:

    • nil

  • conf.logging.formatter_context.class

    • Type: string

    • Description:

    • “oslo_log.formatters.ContextFormatter”

  • conf.logging.formatter_context.datefmt

    • Type: string

    • Description:

    • “%Y-%m-%d %H:%M:%S”

  • conf.logging.formatter_default.datefmt

    • Type: string

    • Description:

    • “%Y-%m-%d %H:%M:%S”

  • conf.logging.formatter_default.format

    • Type: string

    • Description:

    • “%(message)s”

  • conf.logging.formatters.keys[0]

    • Type: string

    • Description:

    • “context”

  • conf.logging.formatters.keys[1]

    • Type: string

    • Description:

    • “default”

  • conf.logging.handler_null.args

    • Type: string

    • Description:

    • “()”

  • conf.logging.handler_null.class

    • Type: string

    • Description:

    • “logging.NullHandler”

  • conf.logging.handler_null.formatter

    • Type: string

    • Description:

    • “default”

  • conf.logging.handler_stderr.args

    • Type: string

    • Description:

    • “(sys.stderr,)”

  • conf.logging.handler_stderr.class

    • Type: string

    • Description:

    • “StreamHandler”

  • conf.logging.handler_stderr.formatter

    • Type: string

    • Description:

    • “context”

  • conf.logging.handler_stdout.args

    • Type: string

    • Description:

    • “(sys.stdout,)”

  • conf.logging.handler_stdout.class

    • Type: string

    • Description:

    • “StreamHandler”

  • conf.logging.handler_stdout.formatter

    • Type: string

    • Description:

    • “context”

  • conf.logging.handlers.keys[0]

    • Type: string

    • Description:

    • “stdout”

  • conf.logging.handlers.keys[1]

    • Type: string

    • Description:

    • “stderr”

  • conf.logging.handlers.keys[2]

    • Type: string

    • Description:

    • “null”

  • conf.logging.logger_amqp.handlers

    • Type: string

    • Description:

    • “stderr”

  • conf.logging.logger_amqp.level

    • Type: string

    • Description:

    • “WARNING”

  • conf.logging.logger_amqp.qualname

    • Type: string

    • Description:

    • “amqp”

  • conf.logging.logger_amqplib.handlers

    • Type: string

    • Description:

    • “stderr”

  • conf.logging.logger_amqplib.level

    • Type: string

    • Description:

    • “WARNING”

  • conf.logging.logger_amqplib.qualname

    • Type: string

    • Description:

    • “amqplib”

  • conf.logging.logger_boto.handlers

    • Type: string

    • Description:

    • “stderr”

  • conf.logging.logger_boto.level

    • Type: string

    • Description:

    • “WARNING”

  • conf.logging.logger_boto.qualname

    • Type: string

    • Description:

    • “boto”

  • conf.logging.logger_eventletwsgi.handlers

    • Type: string

    • Description:

    • “stderr”

  • conf.logging.logger_eventletwsgi.level

    • Type: string

    • Description:

    • “WARNING”

  • conf.logging.logger_eventletwsgi.qualname

    • Type: string

    • Description:

    • “eventlet.wsgi.server”

  • conf.logging.logger_neutron.handlers[0]

    • Type: string

    • Description:

    • “stdout”

  • conf.logging.logger_neutron.level

    • Type: string

    • Description:

    • “INFO”

  • conf.logging.logger_neutron.qualname

    • Type: string

    • Description:

    • “neutron”

  • conf.logging.logger_neutron_taas.handlers[0]

    • Type: string

    • Description:

    • “stdout”

  • conf.logging.logger_neutron_taas.level

    • Type: string

    • Description:

    • “INFO”

  • conf.logging.logger_neutron_taas.qualname

    • Type: string

    • Description:

    • “neutron_taas”

  • conf.logging.logger_root.handlers

    • Type: string

    • Description:

    • “null”

  • conf.logging.logger_root.level

    • Type: string

    • Description:

    • “WARNING”

  • conf.logging.logger_sqlalchemy.handlers

    • Type: string

    • Description:

    • “stderr”

  • conf.logging.logger_sqlalchemy.level

    • Type: string

    • Description:

    • “WARNING”

  • conf.logging.logger_sqlalchemy.qualname

    • Type: string

    • Description:

    • “sqlalchemy”

  • conf.logging.loggers.keys[0]

    • Type: string

    • Description:

    • “root”

  • conf.logging.loggers.keys[1]

    • Type: string

    • Description:

    • “neutron”

  • conf.logging.loggers.keys[2]

    • Type: string

    • Description:

    • “neutron_taas”

  • conf.metadata_agent.DEFAULT.metadata_proxy_shared_secret

    • Type: string

    • Description:

    • “password”

  • conf.metadata_agent.DEFAULT.metadata_proxy_socket

    • Type: string

    • Description:

    • “/var/lib/neutron/openstack-helm/metadata_proxy”

  • conf.metadata_agent.cache.backend

    • Type: string

    • Description:

    • “dogpile.cache.memcached”

  • conf.metadata_agent.cache.enabled

    • Type: bool

    • Description:

    • true

  • conf.metering_agent

    • Type: string

    • Description:

    • nil

  • conf.netoffload.asap2

    • Type: string

    • Description:

    • nil

  • conf.netoffload.enabled

    • Type: bool

    • Description:

    • false

  • conf.neutron.DEFAULT.allow_automatic_l3agent_failover

    • Type: bool

    • Description:

    • true

  • conf.neutron.DEFAULT.allow_overlapping_ips

    • Type: bool

    • Description:

    • true

  • conf.neutron.DEFAULT.api_workers

    • Type: int

    • Description:

    • 1

  • conf.neutron.DEFAULT.bind_port

    • Type: string

    • Description:

    • nil

  • conf.neutron.DEFAULT.core_plugin

    • Type: string

    • Description:

    • “ml2”

  • conf.neutron.DEFAULT.default_availability_zones

    • Type: string

    • Description:

    • “nova”

  • conf.neutron.DEFAULT.interface_driver

    • Type: string

    • Description:

    • nil

  • conf.neutron.DEFAULT.l3_ha

    • Type: bool

    • Description:

    • true

  • conf.neutron.DEFAULT.l3_ha_network_type

    • Type: string

    • Description:

    • “vxlan”

  • conf.neutron.DEFAULT.log_config_append

    • Type: string

    • Description:

    • “/etc/neutron/logging.conf”

  • conf.neutron.DEFAULT.max_l3_agents_per_router

    • Type: int

    • Description:

    • 2

  • conf.neutron.DEFAULT.metadata_proxy_socket

    • Type: string

    • Description:

    • “/var/lib/neutron/openstack-helm/metadata_proxy”

  • conf.neutron.DEFAULT.network_auto_schedule

    • Type: bool

    • Description:

    • true

  • conf.neutron.DEFAULT.router_auto_schedule

    • Type: bool

    • Description:

    • true

  • conf.neutron.DEFAULT.rpc_workers

    • Type: int

    • Description:

    • 4

  • conf.neutron.DEFAULT.service_plugins

    • Type: string

    • Description:

    • “router”

  • conf.neutron.DEFAULT.state_path

    • Type: string

    • Description:

    • “/var/lib/neutron”

  • conf.neutron.agent.root_helper

    • Type: string

    • Description:

    • “sudo /var/lib/openstack/bin/neutron-rootwrap /etc/neutron/rootwrap.conf”

  • conf.neutron.agent.root_helper_daemon

    • Type: string

    • Description:

    • “sudo /var/lib/openstack/bin/neutron-rootwrap-daemon /etc/neutron/rootwrap.conf”

  • conf.neutron.database.max_retries

    • Type: int

    • Description:

    • -1

  • conf.neutron.designate.allow_reverse_dns_lookup

    • Type: bool

    • Description:

    • true

  • conf.neutron.designate.auth_type

    • Type: string

    • Description:

    • “password”

  • conf.neutron.designate.auth_version

    • Type: string

    • Description:

    • “v3”

  • conf.neutron.designate.endpoint_type

    • Type: string

    • Description:

    • “internal”

  • conf.neutron.ironic.auth_type

    • Type: string

    • Description:

    • “password”

  • conf.neutron.ironic.auth_version

    • Type: string

    • Description:

    • “v3”

  • conf.neutron.ironic.endpoint_type

    • Type: string

    • Description:

    • “internal”

  • conf.neutron.keystone_authtoken.auth_type

    • Type: string

    • Description:

    • “password”

  • conf.neutron.keystone_authtoken.auth_version

    • Type: string

    • Description:

    • “v3”

  • conf.neutron.keystone_authtoken.memcache_security_strategy

    • Type: string

    • Description:

    • “ENCRYPT”

  • conf.neutron.keystone_authtoken.service_token_roles

    • Type: string

    • Description:

    • “service”

  • conf.neutron.keystone_authtoken.service_token_roles_required

    • Type: bool

    • Description:

    • true

  • conf.neutron.keystone_authtoken.service_type

    • Type: string

    • Description:

    • “network”

  • conf.neutron.nova.auth_type

    • Type: string

    • Description:

    • “password”

  • conf.neutron.nova.auth_version

    • Type: string

    • Description:

    • “v3”

  • conf.neutron.nova.endpoint_type

    • Type: string

    • Description:

    • “internal”

  • conf.neutron.octavia.request_poll_timeout

    • Type: int

    • Description:

    • 3000

  • conf.neutron.oslo_concurrency.lock_path

    • Type: string

    • Description:

    • “/var/lib/neutron/tmp”

  • conf.neutron.oslo_messaging_notifications.driver

    • Type: string

    • Description:

    • “messagingv2”

  • conf.neutron.oslo_messaging_rabbit.rabbit_ha_queues

    • Type: bool

    • Description:

    • true

  • conf.neutron.oslo_middleware.enable_proxy_headers_parsing

    • Type: bool

    • Description:

    • true

  • conf.neutron.oslo_policy.policy_file

    • Type: string

    • Description:

    • “/etc/neutron/policy.yaml”

  • conf.neutron.ovn.ovn_metadata_enabled

    • Type: bool

    • Description:

    • true

  • conf.neutron.placement.auth_type

    • Type: string

    • Description:

    • “password”

  • conf.neutron.placement.auth_version

    • Type: string

    • Description:

    • “v3”

  • conf.neutron.placement.endpoint_type

    • Type: string

    • Description:

    • “internal”

  • conf.neutron_api_uwsgi.uwsgi.add-header

    • Type: string

    • Description:

    • “Connection: close”

  • conf.neutron_api_uwsgi.uwsgi.buffer-size

    • Type: int

    • Description:

    • 65535

  • conf.neutron_api_uwsgi.uwsgi.die-on-term

    • Type: bool

    • Description:

    • true

  • conf.neutron_api_uwsgi.uwsgi.enable-threads

    • Type: bool

    • Description:

    • true

  • conf.neutron_api_uwsgi.uwsgi.exit-on-reload

    • Type: bool

    • Description:

    • false

  • conf.neutron_api_uwsgi.uwsgi.hook-master-start

    • Type: string

    • Description:

    • “unix_signal:15 gracefully_kill_them_all”

  • conf.neutron_api_uwsgi.uwsgi.lazy-apps

    • Type: bool

    • Description:

    • true

  • conf.neutron_api_uwsgi.uwsgi.log-x-forwarded-for

    • Type: bool

    • Description:

    • true

  • conf.neutron_api_uwsgi.uwsgi.master

    • Type: bool

    • Description:

    • true

  • conf.neutron_api_uwsgi.uwsgi.procname-prefix-spaced

    • Type: string

    • Description:

    • “neutron-api:”

  • conf.neutron_api_uwsgi.uwsgi.route-user-agent

    • Type: string

    • Description:

    • “^kube-probe.* donotlog:”

  • conf.neutron_api_uwsgi.uwsgi.thunder-lock

    • Type: bool

    • Description:

    • true

  • conf.neutron_api_uwsgi.uwsgi.worker-reload-mercy

    • Type: int

    • Description:

    • 80

  • conf.neutron_api_uwsgi.uwsgi.wsgi-file

    • Type: string

    • Description:

    • “/var/lib/openstack/bin/neutron-api”

  • conf.neutron_sudoers

    • Type: string

    • Description:

    • # This sudoers file supports rootwrap for both Kolla and LOCI Images.
      Defaults !requiretty
      Defaults secure_path=\"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin:/var/lib/openstack/bin:/var/lib/kolla/venv/bin\"
      neutron ALL = (root) NOPASSWD: /var/lib/kolla/venv/bin/neutron-rootwrap /etc/neutron/rootwrap.conf *, /var/lib/openstack/bin/neutron-rootwrap /etc/neutron/rootwrap.conf *
      neutron ALL = (root) NOPASSWD: /var/lib/kolla/venv/bin/neutron-rootwrap-daemon /etc/neutron/rootwrap.conf, /var/lib/openstack/bin/neutron-rootwrap-daemon /etc/neutron/rootwrap.conf
      
  • conf.neutron_vpnaas

    • Type: string

    • Description:

    • nil

  • conf.ovn_metadata_agent.DEFAULT.metadata_proxy_shared_secret

    • Type: string

    • Description:

    • “password”

  • conf.ovn_metadata_agent.DEFAULT.metadata_proxy_socket

    • Type: string

    • Description:

    • “/var/lib/neutron/openstack-helm/metadata_proxy”

  • conf.ovn_metadata_agent.DEFAULT.metadata_workers

    • Type: int

    • Description:

    • 2

  • conf.ovn_metadata_agent.cache.backend

    • Type: string

    • Description:

    • “dogpile.cache.memcached”

  • conf.ovn_metadata_agent.cache.enabled

    • Type: bool

    • Description:

    • true

  • conf.ovn_metadata_agent.ovs.ovsdb_connection

    • Type: string

    • Description:

    • “unix:/run/openvswitch/db.sock”

  • conf.ovn_vpn_agent.DEFAULT.interface_driver

    • Type: string

    • Description:

    • “openvswitch”

  • conf.ovn_vpn_agent.ovs.ovsdb_connection

    • Type: string

    • Description:

    • “unix:/run/openvswitch/db.sock”

  • conf.ovn_vpn_agent.vpnagent.vpn_device_driver

    • Type: string

    • Description:

    • “neutron_vpnaas.services.vpn.device_drivers.ovn_ipsec.OvnStrongSwanDriver”

  • conf.ovs_dpdk.bridges[0].name

    • Type: string

    • Description:

    • “br-phy”

  • conf.ovs_dpdk.driver

    • Type: string

    • Description:

    • “uio_pci_generic”

  • conf.ovs_dpdk.enabled

    • Type: bool

    • Description:

    • false

  • conf.ovs_dpdk.nics[0].bridge

    • Type: string

    • Description:

    • “br-phy”

  • conf.ovs_dpdk.nics[0].migrate_ip

    • Type: bool

    • Description:

    • true

  • conf.ovs_dpdk.nics[0].n_rxq

    • Type: int

    • Description:

    • 2

  • conf.ovs_dpdk.nics[0].n_txq

    • Type: int

    • Description:

    • 2

  • conf.ovs_dpdk.nics[0].name

    • Type: string

    • Description:

    • “dpdk0”

  • conf.ovs_dpdk.nics[0].ofport_request

    • Type: int

    • Description:

    • 1

  • conf.ovs_dpdk.nics[0].pci_id

    • Type: string

    • Description:

    • “0000:05:00.0”

  • conf.ovs_dpdk.nics[0].pmd_rxq_affinity

    • Type: string

    • Description:

    • “0:3,1:27”

  • conf.ovs_dpdk.update_dpdk_bond_config

    • Type: bool

    • Description:

    • true

  • conf.paste.app:neutronapiapp_v2_0.”paste.app_factory”

    • Type: string

    • Description:

    • “neutron.api.v2.router:APIRouter.factory”

  • conf.paste.app:neutronversions.”paste.app_factory”

    • Type: string

    • Description:

    • “neutron.pecan_wsgi.app:versions_factory”

  • conf.paste.composite:neutron.”/v2.0”

    • Type: string

    • Description:

    • “neutronapi_v2_0”

  • conf.paste.composite:neutron./

    • Type: string

    • Description:

    • “neutronversions_composite”

  • conf.paste.composite:neutron.use

    • Type: string

    • Description:

    • “egg:Paste#urlmap”

  • conf.paste.composite:neutronapi_v2_0.keystone

    • Type: string

    • Description:

    • “cors http_proxy_to_wsgi request_id catch_errors authtoken audit keystonecontext extensions neutronapiapp_v2_0”

  • conf.paste.composite:neutronapi_v2_0.noauth

    • Type: string

    • Description:

    • “cors http_proxy_to_wsgi request_id catch_errors extensions neutronapiapp_v2_0”

  • conf.paste.composite:neutronapi_v2_0.use

    • Type: string

    • Description:

    • “call:neutron.auth:pipeline_factory”

  • conf.paste.composite:neutronversions_composite.keystone

    • Type: string

    • Description:

    • “cors http_proxy_to_wsgi neutronversions”

  • conf.paste.composite:neutronversions_composite.noauth

    • Type: string

    • Description:

    • “cors http_proxy_to_wsgi neutronversions”

  • conf.paste.composite:neutronversions_composite.use

    • Type: string

    • Description:

    • “call:neutron.auth:pipeline_factory”

  • conf.paste.filter:audit.”paste.filter_factory”

    • Type: string

    • Description:

    • “keystonemiddleware.audit:filter_factory”

  • conf.paste.filter:audit.audit_map_file

    • Type: string

    • Description:

    • “/etc/neutron/api_audit_map.conf”

  • conf.paste.filter:authtoken.”paste.filter_factory”

    • Type: string

    • Description:

    • “keystonemiddleware.auth_token:filter_factory”

  • conf.paste.filter:catch_errors.”paste.filter_factory”

    • Type: string

    • Description:

    • “oslo_middleware:CatchErrors.factory”

  • conf.paste.filter:cors.”paste.filter_factory”

    • Type: string

    • Description:

    • “oslo_middleware.cors:filter_factory”

  • conf.paste.filter:cors.oslo_config_project

    • Type: string

    • Description:

    • “neutron”

  • conf.paste.filter:extensions.”paste.filter_factory”

    • Type: string

    • Description:

    • “neutron.api.extensions:plugin_aware_extension_middleware_factory”

  • conf.paste.filter:http_proxy_to_wsgi.”paste.filter_factory”

    • Type: string

    • Description:

    • “oslo_middleware.http_proxy_to_wsgi:HTTPProxyToWSGI.factory”

  • conf.paste.filter:keystonecontext.”paste.filter_factory”

    • Type: string

    • Description:

    • “neutron.auth:NeutronKeystoneContext.factory”

  • conf.paste.filter:osprofiler.”paste.filter_factory”

    • Type: string

    • Description:

    • “osprofiler.web:WsgiMiddleware.factory”

  • conf.paste.filter:request_id.”paste.filter_factory”

    • Type: string

    • Description:

    • “oslo_middleware:RequestId.factory”

  • conf.plugins.linuxbridge_agent.linux_bridge.bridge_mappings

    • Type: string

    • Description:

    • “external:br-ex”

  • conf.plugins.linuxbridge_agent.securitygroup.firewall_driver

    • Type: string

    • Description:

    • “iptables”

  • conf.plugins.linuxbridge_agent.vxlan.arp_responder

    • Type: bool

    • Description:

    • true

  • conf.plugins.linuxbridge_agent.vxlan.l2_population

    • Type: bool

    • Description:

    • true

  • conf.plugins.macvtap_agent

    • Type: string

    • Description:

    • nil

  • conf.plugins.ml2_conf.agent.extensions

    • Type: string

    • Description:

    • “”

  • conf.plugins.ml2_conf.ml2.extension_drivers

    • Type: string

    • Description:

    • “port_security”

  • conf.plugins.ml2_conf.ml2.mechanism_drivers

    • Type: string

    • Description:

    • nil

  • conf.plugins.ml2_conf.ml2.tenant_network_types

    • Type: string

    • Description:

    • “vxlan”

  • conf.plugins.ml2_conf.ml2.type_drivers

    • Type: string

    • Description:

    • “flat,vlan,vxlan,local”

  • conf.plugins.ml2_conf.ml2_type_flat.flat_networks

    • Type: string

    • Description:

    • “*”

  • conf.plugins.ml2_conf.ml2_type_geneve.max_header_size

    • Type: int

    • Description:

    • 38

  • conf.plugins.ml2_conf.ml2_type_geneve.vni_ranges

    • Type: string

    • Description:

    • “1:65536”

  • conf.plugins.ml2_conf.ml2_type_vxlan.vni_ranges

    • Type: string

    • Description:

    • “1:1000”

  • conf.plugins.ml2_conf.ml2_type_vxlan.vxlan_group

    • Type: string

    • Description:

    • “239.1.1.1”

  • conf.plugins.ml2_conf_sriov

    • Type: string

    • Description:

    • nil

  • conf.plugins.openvswitch_agent.agent.arp_responder

    • Type: bool

    • Description:

    • true

  • conf.plugins.openvswitch_agent.agent.l2_population

    • Type: bool

    • Description:

    • true

  • conf.plugins.openvswitch_agent.agent.tunnel_types

    • Type: string

    • Description:

    • “vxlan”

  • conf.plugins.openvswitch_agent.ovs.bridge_mappings

    • Type: string

    • Description:

    • “external:br-ex”

  • conf.plugins.openvswitch_agent.securitygroup.firewall_driver

    • Type: string

    • Description:

    • “neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver”

  • conf.plugins.sriov_agent.securitygroup.firewall_driver

    • Type: string

    • Description:

    • “neutron.agent.firewall.NoopFirewallDriver”

  • conf.plugins.sriov_agent.sriov_nic.exclude_devices

    • Type: string

    • Description:

    • “”

  • conf.plugins.sriov_agent.sriov_nic.physical_device_mappings

    • Type: string

    • Description:

    • “physnet2:enp3s0f1”

  • conf.plugins.taas.taas.enabled

    • Type: bool

    • Description:

    • false

  • conf.policy

    • Type: object

    • Description:

    • {}

  • conf.rabbitmq.policies[0].apply-to

    • Type: string

    • Description:

    • “all”

  • conf.rabbitmq.policies[0].definition.ha-mode

    • Type: string

    • Description:

    • “all”

  • conf.rabbitmq.policies[0].definition.ha-sync-mode

    • Type: string

    • Description:

    • “automatic”

  • conf.rabbitmq.policies[0].definition.message-ttl

    • Type: int

    • Description:

    • 70000

  • conf.rabbitmq.policies[0].name

    • Type: string

    • Description:

    • “ha_ttl_neutron”

  • conf.rabbitmq.policies[0].pattern

    • Type: string

    • Description:

    • “^(?!(amq\.|reply_)).*”

  • conf.rabbitmq.policies[0].priority

    • Type: int

    • Description:

    • 0

  • conf.rabbitmq.policies[0].vhost

    • Type: string

    • Description:

    • “neutron”

  • conf.rally_tests.clean_up

    • Type: string

    • Description:

    • # NOTE: We will make the best effort to clean up rally generated networks and routers,
      # but should not block further automated deployment.
      set +e
      PATTERN=\"^[sc]_rally_\"
      
      ROUTERS=$(openstack router list --format=value -c Name | grep -e $PATTERN | sort | tr -d '\\r')
      NETWORKS=$(openstack network list --format=value -c Name | grep -e $PATTERN | sort | tr -d '\\r')
      
      for ROUTER in $ROUTERS
      do
        openstack router unset --external-gateway $ROUTER
        openstack router set --disable --no-ha $ROUTER
      
        SUBNS=$(openstack router show $ROUTER -c interfaces_info --format=value | python -m json.tool | grep -oP '(?<=\"subnet_id\": \")[a-f0-9\\-]{36}(?=\")' | sort | uniq)
        for SUBN in $SUBNS
        do
          openstack router remove subnet $ROUTER $SUBN
        done
      
        for PORT in $(openstack port list --router $ROUTER --format=value -c ID | tr -d '\\r')
        do
          openstack router remove port $ROUTER $PORT
        done
      
        openstack router delete $ROUTER
      done
      
      for NETWORK in $NETWORKS
      do
        for PORT in $(openstack port list --network $NETWORK --format=value -c ID | tr -d '\\r')
        do
          openstack port delete $PORT
        done
        openstack network delete $NETWORK
      done
      set -e
      
  • conf.rally_tests.force_project_purge

    • Type: bool

    • Description:

    • false

  • conf.rally_tests.run_tempest

    • Type: bool

    • Description:

    • false

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_networks”[0].args.network_create_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_networks”[0].context.quotas.neutron.network

    • Type: int

    • Description:

    • -1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_networks”[0].runner.concurrency

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_networks”[0].runner.times

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_networks”[0].runner.type

    • Type: string

    • Description:

    • “constant”

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_networks”[0].sla.failure_rate.max

    • Type: int

    • Description:

    • 0

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_ports”[0].args.network_create_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_ports”[0].args.port_create_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_ports”[0].args.ports_per_network

    • Type: int

    • Description:

    • 10

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_ports”[0].context.network

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_ports”[0].context.quotas.neutron.network

    • Type: int

    • Description:

    • -1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_ports”[0].context.quotas.neutron.port

    • Type: int

    • Description:

    • -1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_ports”[0].runner.concurrency

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_ports”[0].runner.times

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_ports”[0].runner.type

    • Type: string

    • Description:

    • “constant”

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_ports”[0].sla.failure_rate.max

    • Type: int

    • Description:

    • 0

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_routers”[0].args.network_create_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_routers”[0].args.router_create_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_routers”[0].args.subnet_cidr_start

    • Type: string

    • Description:

    • “1.1.0.0/30”

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_routers”[0].args.subnet_create_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_routers”[0].args.subnets_per_network

    • Type: int

    • Description:

    • 2

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_routers”[0].context.network

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_routers”[0].context.quotas.neutron.network

    • Type: int

    • Description:

    • -1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_routers”[0].context.quotas.neutron.router

    • Type: int

    • Description:

    • -1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_routers”[0].context.quotas.neutron.subnet

    • Type: int

    • Description:

    • -1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_routers”[0].runner.concurrency

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_routers”[0].runner.times

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_routers”[0].runner.type

    • Type: string

    • Description:

    • “constant”

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_routers”[0].sla.failure_rate.max

    • Type: int

    • Description:

    • 0

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_subnets”[0].args.network_create_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_subnets”[0].args.subnet_cidr_start

    • Type: string

    • Description:

    • “1.1.0.0/30”

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_subnets”[0].args.subnet_create_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_subnets”[0].args.subnets_per_network

    • Type: int

    • Description:

    • 2

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_subnets”[0].context.network

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_subnets”[0].context.quotas.neutron.network

    • Type: int

    • Description:

    • -1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_subnets”[0].context.quotas.neutron.subnet

    • Type: int

    • Description:

    • -1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_subnets”[0].runner.concurrency

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_subnets”[0].runner.times

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_subnets”[0].runner.type

    • Type: string

    • Description:

    • “constant”

  • conf.rally_tests.tests.”NeutronNetworks.create_and_delete_subnets”[0].sla.failure_rate.max

    • Type: int

    • Description:

    • 0

  • conf.rally_tests.tests.”NeutronNetworks.create_and_list_routers”[0].args.network_create_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_list_routers”[0].args.router_create_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_list_routers”[0].args.subnet_cidr_start

    • Type: string

    • Description:

    • “1.1.0.0/30”

  • conf.rally_tests.tests.”NeutronNetworks.create_and_list_routers”[0].args.subnet_create_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_list_routers”[0].args.subnets_per_network

    • Type: int

    • Description:

    • 2

  • conf.rally_tests.tests.”NeutronNetworks.create_and_list_routers”[0].context.network

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_list_routers”[0].context.quotas.neutron.network

    • Type: int

    • Description:

    • -1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_list_routers”[0].context.quotas.neutron.router

    • Type: int

    • Description:

    • -1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_list_routers”[0].context.quotas.neutron.subnet

    • Type: int

    • Description:

    • -1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_list_routers”[0].runner.concurrency

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_list_routers”[0].runner.times

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_list_routers”[0].runner.type

    • Type: string

    • Description:

    • “constant”

  • conf.rally_tests.tests.”NeutronNetworks.create_and_list_routers”[0].sla.failure_rate.max

    • Type: int

    • Description:

    • 0

  • conf.rally_tests.tests.”NeutronNetworks.create_and_list_subnets”[0].args.network_create_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_list_subnets”[0].args.subnet_cidr_start

    • Type: string

    • Description:

    • “1.1.0.0/30”

  • conf.rally_tests.tests.”NeutronNetworks.create_and_list_subnets”[0].args.subnet_create_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_list_subnets”[0].args.subnets_per_network

    • Type: int

    • Description:

    • 2

  • conf.rally_tests.tests.”NeutronNetworks.create_and_list_subnets”[0].context.network

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_list_subnets”[0].context.quotas.neutron.network

    • Type: int

    • Description:

    • -1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_list_subnets”[0].context.quotas.neutron.subnet

    • Type: int

    • Description:

    • -1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_list_subnets”[0].runner.concurrency

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_list_subnets”[0].runner.times

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_list_subnets”[0].runner.type

    • Type: string

    • Description:

    • “constant”

  • conf.rally_tests.tests.”NeutronNetworks.create_and_list_subnets”[0].sla.failure_rate.max

    • Type: int

    • Description:

    • 0

  • conf.rally_tests.tests.”NeutronNetworks.create_and_show_network”[0].args.network_create_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_show_network”[0].context.quotas.neutron.network

    • Type: int

    • Description:

    • -1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_show_network”[0].runner.concurrency

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_show_network”[0].runner.times

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_show_network”[0].runner.type

    • Type: string

    • Description:

    • “constant”

  • conf.rally_tests.tests.”NeutronNetworks.create_and_show_network”[0].sla.failure_rate.max

    • Type: int

    • Description:

    • 0

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_networks”[0].args.network_create_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_networks”[0].args.network_update_args.admin_state_up

    • Type: bool

    • Description:

    • false

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_networks”[0].context.quotas.neutron.network

    • Type: int

    • Description:

    • -1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_networks”[0].runner.concurrency

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_networks”[0].runner.times

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_networks”[0].runner.type

    • Type: string

    • Description:

    • “constant”

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_networks”[0].sla.failure_rate.max

    • Type: int

    • Description:

    • 0

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_ports”[0].args.network_create_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_ports”[0].args.port_create_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_ports”[0].args.port_update_args.admin_state_up

    • Type: bool

    • Description:

    • false

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_ports”[0].args.port_update_args.device_id

    • Type: string

    • Description:

    • “dummy_id”

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_ports”[0].args.port_update_args.device_owner

    • Type: string

    • Description:

    • “dummy_owner”

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_ports”[0].args.ports_per_network

    • Type: int

    • Description:

    • 5

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_ports”[0].context.network

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_ports”[0].context.quotas.neutron.network

    • Type: int

    • Description:

    • -1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_ports”[0].context.quotas.neutron.port

    • Type: int

    • Description:

    • -1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_ports”[0].runner.concurrency

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_ports”[0].runner.times

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_ports”[0].runner.type

    • Type: string

    • Description:

    • “constant”

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_ports”[0].sla.failure_rate.max

    • Type: int

    • Description:

    • 0

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_routers”[0].args.network_create_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_routers”[0].args.router_create_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_routers”[0].args.router_update_args.admin_state_up

    • Type: bool

    • Description:

    • false

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_routers”[0].args.subnet_cidr_start

    • Type: string

    • Description:

    • “1.1.0.0/30”

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_routers”[0].args.subnet_create_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_routers”[0].args.subnets_per_network

    • Type: int

    • Description:

    • 2

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_routers”[0].context.network

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_routers”[0].context.quotas.neutron.network

    • Type: int

    • Description:

    • -1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_routers”[0].context.quotas.neutron.router

    • Type: int

    • Description:

    • -1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_routers”[0].context.quotas.neutron.subnet

    • Type: int

    • Description:

    • -1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_routers”[0].runner.concurrency

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_routers”[0].runner.times

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_routers”[0].runner.type

    • Type: string

    • Description:

    • “constant”

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_routers”[0].sla.failure_rate.max

    • Type: int

    • Description:

    • 0

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_subnets”[0].args.network_create_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_subnets”[0].args.subnet_cidr_start

    • Type: string

    • Description:

    • “1.4.0.0/16”

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_subnets”[0].args.subnet_create_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_subnets”[0].args.subnet_update_args.enable_dhcp

    • Type: bool

    • Description:

    • false

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_subnets”[0].args.subnets_per_network

    • Type: int

    • Description:

    • 2

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_subnets”[0].context.network

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_subnets”[0].context.quotas.neutron.network

    • Type: int

    • Description:

    • -1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_subnets”[0].context.quotas.neutron.subnet

    • Type: int

    • Description:

    • -1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_subnets”[0].runner.concurrency

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_subnets”[0].runner.times

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_subnets”[0].runner.type

    • Type: string

    • Description:

    • “constant”

  • conf.rally_tests.tests.”NeutronNetworks.create_and_update_subnets”[0].sla.failure_rate.max

    • Type: int

    • Description:

    • 0

  • conf.rally_tests.tests.”NeutronNetworks.list_agents”[0].args.agent_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronNetworks.list_agents”[0].runner.concurrency

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronNetworks.list_agents”[0].runner.times

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronNetworks.list_agents”[0].runner.type

    • Type: string

    • Description:

    • “constant”

  • conf.rally_tests.tests.”NeutronNetworks.list_agents”[0].sla.failure_rate.max

    • Type: int

    • Description:

    • 0

  • conf.rally_tests.tests.”NeutronSecurityGroup.create_and_list_security_groups”[0].args.security_group_create_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronSecurityGroup.create_and_list_security_groups”[0].context.quotas.neutron.security_group

    • Type: int

    • Description:

    • -1

  • conf.rally_tests.tests.”NeutronSecurityGroup.create_and_list_security_groups”[0].runner.concurrency

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronSecurityGroup.create_and_list_security_groups”[0].runner.times

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronSecurityGroup.create_and_list_security_groups”[0].runner.type

    • Type: string

    • Description:

    • “constant”

  • conf.rally_tests.tests.”NeutronSecurityGroup.create_and_list_security_groups”[0].sla.failure_rate.max

    • Type: int

    • Description:

    • 0

  • conf.rally_tests.tests.”NeutronSecurityGroup.create_and_update_security_groups”[0].args.security_group_create_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronSecurityGroup.create_and_update_security_groups”[0].args.security_group_update_args

    • Type: object

    • Description:

    • {}

  • conf.rally_tests.tests.”NeutronSecurityGroup.create_and_update_security_groups”[0].context.quotas.neutron.security_group

    • Type: int

    • Description:

    • -1

  • conf.rally_tests.tests.”NeutronSecurityGroup.create_and_update_security_groups”[0].runner.concurrency

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronSecurityGroup.create_and_update_security_groups”[0].runner.times

    • Type: int

    • Description:

    • 1

  • conf.rally_tests.tests.”NeutronSecurityGroup.create_and_update_security_groups”[0].runner.type

    • Type: string

    • Description:

    • “constant”

  • conf.rally_tests.tests.”NeutronSecurityGroup.create_and_update_security_groups”[0].sla.failure_rate.max

    • Type: int

    • Description:

    • 0

  • conf.rootwrap

    • Type: string

    • Description:

    • # Configuration for neutron-rootwrap
      # This file should be owned by (and only-writeable by) the root user
      
      [DEFAULT]
      # List of directories to load filter definitions from (separated by ',').
      # These directories MUST all be only writeable by root !
      filters_path=/etc/neutron/rootwrap.d,/usr/share/neutron/rootwrap,/var/lib/openstack/etc/neutron/rootwrap.d
      
      # List of directories to search executables in, in case filters do not
      # explicitely specify a full path (separated by ',')
      # If not specified, defaults to system PATH environment variable.
      # These directories MUST all be only writeable by root !
      exec_dirs=/sbin,/usr/sbin,/bin,/usr/bin,/usr/local/bin,/usr/local/sbin,/var/lib/openstack/bin,/var/lib/kolla/venv/bin
      
      # Enable logging to syslog
      # Default value is False
      use_syslog=False
      
      # Which syslog facility to use.
      # Valid values include auth, authpriv, syslog, local0, local1...
      # Default value is 'syslog'
      syslog_log_facility=syslog
      
      # Which messages to log.
      # INFO means log all usage
      # ERROR means only log unsuccessful attempts
      syslog_log_level=ERROR
      
      [xenapi]
      # XenAPI configuration is only required by the L2 agent if it is to
      # target a XenServer/XCP compute host's dom0.
      xenapi_connection_url=<None>
      xenapi_connection_username=root
      xenapi_connection_password=<None>
      
  • conf.rootwrap_filters.debug.content

    • Type: string

    • Description:

    • # neutron-rootwrap command filters for nodes on which neutron is
      # expected to control network
      #
      # This file should be owned by (and only-writeable by) the root user
      
      # format seems to be
      # cmd-name: filter-name, raw-command, user, args
      
      [Filters]
      
      # This is needed because we should ping
      # from inside a namespace which requires root
      # _alt variants allow to match -c and -w in any order
      #   (used by NeutronDebugAgent.ping_all)
      ping: RegExpFilter, ping, root, ping, -w, \\d+, -c, \\d+, [0-9\\.]+
      ping_alt: RegExpFilter, ping, root, ping, -c, \\d+, -w, \\d+, [0-9\\.]+
      ping6: RegExpFilter, ping6, root, ping6, -w, \\d+, -c, \\d+, [0-9A-Fa-f:]+
      ping6_alt: RegExpFilter, ping6, root, ping6, -c, \\d+, -w, \\d+, [0-9A-Fa-f:]+
      
  • conf.rootwrap_filters.debug.pods[0]

    • Type: string

    • Description:

    • “dhcp_agent”

  • conf.rootwrap_filters.debug.pods[1]

    • Type: string

    • Description:

    • “l3_agent”

  • conf.rootwrap_filters.debug.pods[2]

    • Type: string

    • Description:

    • “lb_agent”

  • conf.rootwrap_filters.debug.pods[3]

    • Type: string

    • Description:

    • “metadata_agent”

  • conf.rootwrap_filters.debug.pods[4]

    • Type: string

    • Description:

    • “ovn_metadata_agent”

  • conf.rootwrap_filters.debug.pods[5]

    • Type: string

    • Description:

    • “ovn_vpn_agent”

  • conf.rootwrap_filters.debug.pods[6]

    • Type: string

    • Description:

    • “ovs_agent”

  • conf.rootwrap_filters.debug.pods[7]

    • Type: string

    • Description:

    • “sriov_agent”

  • conf.rootwrap_filters.dhcp.content

    • Type: string

    • Description:

    • # neutron-rootwrap command filters for nodes on which neutron is
      # expected to control network
      #
      # This file should be owned by (and only-writeable by) the root user
      
      # format seems to be
      # cmd-name: filter-name, raw-command, user, args
      
      [Filters]
      
      # dhcp-agent
      dnsmasq: CommandFilter, dnsmasq, root
      # dhcp-agent uses kill as well, that's handled by the generic KillFilter
      # it looks like these are the only signals needed, per
      # neutron/agent/linux/dhcp.py
      kill_dnsmasq: KillFilter, root, /sbin/dnsmasq, -9, -HUP, -15
      kill_dnsmasq_usr: KillFilter, root, /usr/sbin/dnsmasq, -9, -HUP, -15
      
      ovs-vsctl: CommandFilter, ovs-vsctl, root
      ivs-ctl: CommandFilter, ivs-ctl, root
      mm-ctl: CommandFilter, mm-ctl, root
      dhcp_release: CommandFilter, dhcp_release, root
      dhcp_release6: CommandFilter, dhcp_release6, root
      
      # metadata proxy
      metadata_proxy: CommandFilter, neutron-ns-metadata-proxy, root
      # RHEL invocation of the metadata proxy will report /usr/bin/python
      kill_metadata: KillFilter, root, python, -9
      kill_metadata2: KillFilter, root, python2, -9
      kill_metadata7: KillFilter, root, python2.7, -9
      kill_metadata3: KillFilter, root, python3, -9
      kill_metadata35: KillFilter, root, python3.5, -9
      kill_metadata36: KillFilter, root, python3.6, -9
      kill_metadata37: KillFilter, root, python3.7, -9
      
      # ip_lib
      ip: IpFilter, ip, root
      find: RegExpFilter, find, root, find, /sys/class/net, -maxdepth, 1, -type, l, -printf, %.*
      ip_exec: IpNetnsExecFilter, ip, root
      
  • conf.rootwrap_filters.dhcp.pods[0]

    • Type: string

    • Description:

    • “dhcp_agent”

  • conf.rootwrap_filters.dhcp.pods[1]

    • Type: string

    • Description:

    • “l3_agent”

  • conf.rootwrap_filters.dhcp.pods[2]

    • Type: string

    • Description:

    • “lb_agent”

  • conf.rootwrap_filters.dhcp.pods[3]

    • Type: string

    • Description:

    • “metadata_agent”

  • conf.rootwrap_filters.dhcp.pods[4]

    • Type: string

    • Description:

    • “ovn_metadata_agent”

  • conf.rootwrap_filters.dhcp.pods[5]

    • Type: string

    • Description:

    • “ovn_vpn_agent”

  • conf.rootwrap_filters.dhcp.pods[6]

    • Type: string

    • Description:

    • “ovs_agent”

  • conf.rootwrap_filters.dhcp.pods[7]

    • Type: string

    • Description:

    • “sriov_agent”

  • conf.rootwrap_filters.dhcp.pods[8]

    • Type: string

    • Description:

    • “netns_cleanup_cron”

  • conf.rootwrap_filters.dibbler.content

    • Type: string

    • Description:

    • # neutron-rootwrap command filters for nodes on which neutron is
      # expected to control network
      #
      # This file should be owned by (and only-writeable by) the root user
      
      # format seems to be
      # cmd-name: filter-name, raw-command, user, args
      
      [Filters]
      
      # Filters for the dibbler-based reference implementation of the pluggable
      # Prefix Delegation driver. Other implementations using an alternative agent
      # should include a similar filter in this folder.
      
      # prefix_delegation_agent
      dibbler-client: CommandFilter, dibbler-client, root
      
  • conf.rootwrap_filters.dibbler.pods[0]

    • Type: string

    • Description:

    • “dhcp_agent”

  • conf.rootwrap_filters.dibbler.pods[1]

    • Type: string

    • Description:

    • “l3_agent”

  • conf.rootwrap_filters.dibbler.pods[2]

    • Type: string

    • Description:

    • “lb_agent”

  • conf.rootwrap_filters.dibbler.pods[3]

    • Type: string

    • Description:

    • “metadata_agent”

  • conf.rootwrap_filters.dibbler.pods[4]

    • Type: string

    • Description:

    • “ovn_metadata_agent”

  • conf.rootwrap_filters.dibbler.pods[5]

    • Type: string

    • Description:

    • “ovn_vpn_agent”

  • conf.rootwrap_filters.dibbler.pods[6]

    • Type: string

    • Description:

    • “ovs_agent”

  • conf.rootwrap_filters.dibbler.pods[7]

    • Type: string

    • Description:

    • “sriov_agent”

  • conf.rootwrap_filters.ebtables.content

    • Type: string

    • Description:

    • # neutron-rootwrap command filters for nodes on which neutron is
      # expected to control network
      #
      # This file should be owned by (and only-writeable by) the root user
      
      # format seems to be
      # cmd-name: filter-name, raw-command, user, args
      
      [Filters]
      
      ebtables: CommandFilter, ebtables, root
      
  • conf.rootwrap_filters.ebtables.pods[0]

    • Type: string

    • Description:

    • “dhcp_agent”

  • conf.rootwrap_filters.ebtables.pods[1]

    • Type: string

    • Description:

    • “l3_agent”

  • conf.rootwrap_filters.ebtables.pods[2]

    • Type: string

    • Description:

    • “lb_agent”

  • conf.rootwrap_filters.ebtables.pods[3]

    • Type: string

    • Description:

    • “metadata_agent”

  • conf.rootwrap_filters.ebtables.pods[4]

    • Type: string

    • Description:

    • “ovn_metadata_agent”

  • conf.rootwrap_filters.ebtables.pods[5]

    • Type: string

    • Description:

    • “ovn_vpn_agent”

  • conf.rootwrap_filters.ebtables.pods[6]

    • Type: string

    • Description:

    • “ovs_agent”

  • conf.rootwrap_filters.ebtables.pods[7]

    • Type: string

    • Description:

    • “sriov_agent”

  • conf.rootwrap_filters.ipset_firewall.content

    • Type: string

    • Description:

    • # neutron-rootwrap command filters for nodes on which neutron is
      # expected to control network
      #
      # This file should be owned by (and only-writeable by) the root user
      
      # format seems to be
      # cmd-name: filter-name, raw-command, user, args
      
      [Filters]
      # neutron/agent/linux/iptables_firewall.py
      #   \"ipset\", \"-A\", ...
      ipset: CommandFilter, ipset, root
      
  • conf.rootwrap_filters.ipset_firewall.pods[0]

    • Type: string

    • Description:

    • “dhcp_agent”

  • conf.rootwrap_filters.ipset_firewall.pods[1]

    • Type: string

    • Description:

    • “l3_agent”

  • conf.rootwrap_filters.ipset_firewall.pods[2]

    • Type: string

    • Description:

    • “lb_agent”

  • conf.rootwrap_filters.ipset_firewall.pods[3]

    • Type: string

    • Description:

    • “metadata_agent”

  • conf.rootwrap_filters.ipset_firewall.pods[4]

    • Type: string

    • Description:

    • “ovn_metadata_agent”

  • conf.rootwrap_filters.ipset_firewall.pods[5]

    • Type: string

    • Description:

    • “ovn_vpn_agent”

  • conf.rootwrap_filters.ipset_firewall.pods[6]

    • Type: string

    • Description:

    • “ovs_agent”

  • conf.rootwrap_filters.ipset_firewall.pods[7]

    • Type: string

    • Description:

    • “sriov_agent”

  • conf.rootwrap_filters.iptables_firewall.content

    • Type: string

    • Description:

    • # neutron-rootwrap command filters for nodes on which neutron is
      # expected to control network
      #
      # This file should be owned by (and only-writeable by) the root user
      
      # format seems to be
      # cmd-name: filter-name, raw-command, user, args
      
      [Filters]
      
      # neutron/agent/linux/iptables_firewall.py
      #   \"iptables-save\", ...
      iptables-save: CommandFilter, iptables-save, root
      iptables-restore: CommandFilter, iptables-restore, root
      ip6tables-save: CommandFilter, ip6tables-save, root
      ip6tables-restore: CommandFilter, ip6tables-restore, root
      
      # neutron/agent/linux/iptables_firewall.py
      #   \"iptables\", \"-A\", ...
      iptables: CommandFilter, iptables, root
      ip6tables: CommandFilter, ip6tables, root
      
      # neutron/agent/linux/iptables_firewall.py
      sysctl: CommandFilter, sysctl, root
      
      # neutron/agent/linux/ip_conntrack.py
      conntrack: CommandFilter, conntrack, root
      
  • conf.rootwrap_filters.iptables_firewall.pods[0]

    • Type: string

    • Description:

    • “dhcp_agent”

  • conf.rootwrap_filters.iptables_firewall.pods[1]

    • Type: string

    • Description:

    • “l3_agent”

  • conf.rootwrap_filters.iptables_firewall.pods[2]

    • Type: string

    • Description:

    • “lb_agent”

  • conf.rootwrap_filters.iptables_firewall.pods[3]

    • Type: string

    • Description:

    • “metadata_agent”

  • conf.rootwrap_filters.iptables_firewall.pods[4]

    • Type: string

    • Description:

    • “ovn_metadata_agent”

  • conf.rootwrap_filters.iptables_firewall.pods[5]

    • Type: string

    • Description:

    • “ovn_vpn_agent”

  • conf.rootwrap_filters.iptables_firewall.pods[6]

    • Type: string

    • Description:

    • “ovs_agent”

  • conf.rootwrap_filters.iptables_firewall.pods[7]

    • Type: string

    • Description:

    • “sriov_agent”

  • conf.rootwrap_filters.l3.content

    • Type: string

    • Description:

    • # neutron-rootwrap command filters for nodes on which neutron is
      # expected to control network
      #
      # This file should be owned by (and only-writeable by) the root user
      
      # format seems to be
      # cmd-name: filter-name, raw-command, user, args
      
      [Filters]
      
      # arping
      arping: CommandFilter, arping, root
      
      # l3_agent
      sysctl: CommandFilter, sysctl, root
      route: CommandFilter, route, root
      radvd: CommandFilter, radvd, root
      
      # haproxy
      haproxy: RegExpFilter, haproxy, root, haproxy, -f, .*
      kill_haproxy: KillFilter, root, haproxy, -15, -9, -HUP
      
      # metadata proxy
      metadata_proxy: CommandFilter, neutron-ns-metadata-proxy, root
      # RHEL invocation of the metadata proxy will report /usr/bin/python
      kill_metadata: KillFilter, root, python, -15, -9
      kill_metadata2: KillFilter, root, python2, -15, -9
      kill_metadata7: KillFilter, root, python2.7, -15, -9
      kill_metadata3: KillFilter, root, python3, -15, -9
      kill_metadata35: KillFilter, root, python3.5, -15, -9
      kill_metadata36: KillFilter, root, python3.6, -15, -9
      kill_metadata37: KillFilter, root, python3.7, -15, -9
      kill_radvd_usr: KillFilter, root, /usr/sbin/radvd, -15, -9, -HUP
      kill_radvd: KillFilter, root, /sbin/radvd, -15, -9, -HUP
      
      # ip_lib
      ip: IpFilter, ip, root
      find: RegExpFilter, find, root, find, /sys/class/net, -maxdepth, 1, -type, l, -printf, %.*
      ip_exec: IpNetnsExecFilter, ip, root
      
      # l3_tc_lib
      l3_tc_show_qdisc: RegExpFilter, tc, root, tc, qdisc, show, dev, .+
      l3_tc_add_qdisc_ingress: RegExpFilter, tc, root, tc, qdisc, add, dev, .+, ingress
      l3_tc_add_qdisc_egress: RegExpFilter, tc, root, tc, qdisc, add, dev, .+, root, handle, 1:, htb
      l3_tc_show_filters: RegExpFilter, tc, root, tc, -p, -s, -d, filter, show, dev, .+, parent, .+, prio, 1
      l3_tc_delete_filters: RegExpFilter, tc, root, tc, filter, del, dev, .+, parent, .+, prio, 1, handle, .+, u32
      l3_tc_add_filter_ingress: RegExpFilter, tc, root, tc, filter, add, dev, .+, parent, .+, protocol, ip, prio, 1, u32, match, ip, dst, .+, police, rate, .+, burst, .+, drop, flowid, :1
      l3_tc_add_filter_egress:  RegExpFilter, tc, root, tc, filter, add, dev, .+, parent, .+, protocol, ip, prio, 1, u32, match, ip, src, .+, police, rate, .+, burst, .+, drop, flowid, :1
      
      # For ip monitor
      kill_ip_monitor: KillFilter, root, ip, -9
      
      # ovs_lib (if OVSInterfaceDriver is used)
      ovs-vsctl: CommandFilter, ovs-vsctl, root
      
      # iptables_manager
      iptables-save: CommandFilter, iptables-save, root
      iptables-restore: CommandFilter, iptables-restore, root
      ip6tables-save: CommandFilter, ip6tables-save, root
      ip6tables-restore: CommandFilter, ip6tables-restore, root
      
      # Keepalived
      keepalived: CommandFilter, keepalived, root
      kill_keepalived: KillFilter, root, keepalived, -HUP, -15, -9
      
      # l3 agent to delete floatingip's conntrack state
      conntrack: CommandFilter, conntrack, root
      
      # keepalived state change monitor
      keepalived_state_change: CommandFilter, neutron-keepalived-state-change, root
      # The following filters are used to kill the keepalived state change monitor.
      # Since the monitor runs as a Python script, the system reports that the
      # command of the process to be killed is python.
      # TODO(mlavalle) These kill filters will be updated once we come up with a
      # mechanism to kill using the name of the script being executed by Python
      kill_keepalived_monitor_py: KillFilter, root, python, -15
      kill_keepalived_monitor_py27: KillFilter, root, python2.7, -15
      kill_keepalived_monitor_py3: KillFilter, root, python3, -15
      kill_keepalived_monitor_py35: KillFilter, root, python3.5, -15
      kill_keepalived_monitor_py36: KillFilter, root, python3.6, -15
      kill_keepalived_monitor_py37: KillFilter, root, python3.7, -15
      
  • conf.rootwrap_filters.l3.pods[0]

    • Type: string

    • Description:

    • “dhcp_agent”

  • conf.rootwrap_filters.l3.pods[1]

    • Type: string

    • Description:

    • “l3_agent”

  • conf.rootwrap_filters.l3.pods[2]

    • Type: string

    • Description:

    • “lb_agent”

  • conf.rootwrap_filters.l3.pods[3]

    • Type: string

    • Description:

    • “metadata_agent”

  • conf.rootwrap_filters.l3.pods[4]

    • Type: string

    • Description:

    • “ovn_metadata_agent”

  • conf.rootwrap_filters.l3.pods[5]

    • Type: string

    • Description:

    • “ovn_vpn_agent”

  • conf.rootwrap_filters.l3.pods[6]

    • Type: string

    • Description:

    • “ovs_agent”

  • conf.rootwrap_filters.l3.pods[7]

    • Type: string

    • Description:

    • “sriov_agent”

  • conf.rootwrap_filters.linux_vxlan.content

    • Type: string

    • Description:

    • # bagpipe-bgp-rootwrap command filters for nodes on which bagpipe-bgp is
      # expected to control VXLAN Linux Bridge dataplane
      #
      # This file should be owned by (and only-writeable by) the root user
      
      # format seems to be
      # cmd-name: filter-name, raw-command, user, args
      
      [Filters]
      
      #
      modprobe: CommandFilter, modprobe, root
      
      #
      brctl: CommandFilter, brctl, root
      bridge: CommandFilter, bridge, root
      
      # ip_lib
      ip: IpFilter, ip, root
      ip_exec: IpNetnsExecFilter, ip, root
      
      # shell (for piped commands)
      sh: CommandFilter, sh, root
      
  • conf.rootwrap_filters.linux_vxlan.pods[0]

    • Type: string

    • Description:

    • “bagpipe_bgp”

  • conf.rootwrap_filters.linuxbridge_plugin.content

    • Type: string

    • Description:

    • # neutron-rootwrap command filters for nodes on which neutron is
      # expected to control network
      #
      # This file should be owned by (and only-writeable by) the root user
      
      # format seems to be
      # cmd-name: filter-name, raw-command, user, args
      
      [Filters]
      
      # linuxbridge-agent
      # unclear whether both variants are necessary, but I'm transliterating
      # from the old mechanism
      brctl: CommandFilter, brctl, root
      bridge: CommandFilter, bridge, root
      
      # ip_lib
      ip: IpFilter, ip, root
      find: RegExpFilter, find, root, find, /sys/class/net, -maxdepth, 1, -type, l, -printf, %.*
      ip_exec: IpNetnsExecFilter, ip, root
      
      # tc commands needed for QoS support
      tc_replace_tbf: RegExpFilter, tc, root, tc, qdisc, replace, dev, .+, root, tbf, rate, .+, latency, .+, burst, .+
      tc_add_ingress: RegExpFilter, tc, root, tc, qdisc, add, dev, .+, ingress, handle, .+
      tc_delete: RegExpFilter, tc, root, tc, qdisc, del, dev, .+, .+
      tc_show_qdisc: RegExpFilter, tc, root, tc, qdisc, show, dev, .+
      tc_show_filters: RegExpFilter, tc, root, tc, filter, show, dev, .+, parent, .+
      tc_add_filter: RegExpFilter, tc, root, tc, filter, add, dev, .+, parent, .+, protocol, all, prio, .+, basic, police, rate, .+, burst, .+, mtu, .+, drop
      
  • conf.rootwrap_filters.linuxbridge_plugin.pods[0]

    • Type: string

    • Description:

    • “dhcp_agent”

  • conf.rootwrap_filters.linuxbridge_plugin.pods[1]

    • Type: string

    • Description:

    • “l3_agent”

  • conf.rootwrap_filters.linuxbridge_plugin.pods[2]

    • Type: string

    • Description:

    • “lb_agent”

  • conf.rootwrap_filters.linuxbridge_plugin.pods[3]

    • Type: string

    • Description:

    • “metadata_agent”

  • conf.rootwrap_filters.linuxbridge_plugin.pods[4]

    • Type: string

    • Description:

    • “ovn_metadata_agent”

  • conf.rootwrap_filters.linuxbridge_plugin.pods[5]

    • Type: string

    • Description:

    • “ovn_vpn_agent”

  • conf.rootwrap_filters.linuxbridge_plugin.pods[6]

    • Type: string

    • Description:

    • “ovs_agent”

  • conf.rootwrap_filters.linuxbridge_plugin.pods[7]

    • Type: string

    • Description:

    • “sriov_agent”

  • conf.rootwrap_filters.mpls_ovs_dataplane.content

    • Type: string

    • Description:

    • # bagpipe-bgp-rootwrap command filters for nodes on which bagpipe-bgp is
      # expected to control MPLS OpenVSwitch dataplane
      #
      # This file should be owned by (and only-writeable by) the root user
      
      # format seems to be
      # cmd-name: filter-name, raw-command, user, args
      
      [Filters]
      
      # openvswitch
      ovs-vsctl: CommandFilter, ovs-vsctl, root
      ovs-ofctl: CommandFilter, ovs-ofctl, root
      
      # ip_lib
      ip: IpFilter, ip, root
      ip_exec: IpNetnsExecFilter, ip, root
      
      # shell (for piped commands)
      sh: CommandFilter, sh, root
      
  • conf.rootwrap_filters.mpls_ovs_dataplane.pods[0]

    • Type: string

    • Description:

    • “bagpipe_bgp”

  • conf.rootwrap_filters.netns_cleanup.content

    • Type: string

    • Description:

    • # neutron-rootwrap command filters for nodes on which neutron is
      # expected to control network
      #
      # This file should be owned by (and only-writeable by) the root user
      
      # format seems to be
      # cmd-name: filter-name, raw-command, user, args
      
      [Filters]
      
      # netns-cleanup
      netstat: CommandFilter, netstat, root
      
  • conf.rootwrap_filters.netns_cleanup.pods[0]

    • Type: string

    • Description:

    • “dhcp_agent”

  • conf.rootwrap_filters.netns_cleanup.pods[1]

    • Type: string

    • Description:

    • “l3_agent”

  • conf.rootwrap_filters.netns_cleanup.pods[2]

    • Type: string

    • Description:

    • “lb_agent”

  • conf.rootwrap_filters.netns_cleanup.pods[3]

    • Type: string

    • Description:

    • “metadata_agent”

  • conf.rootwrap_filters.netns_cleanup.pods[4]

    • Type: string

    • Description:

    • “ovn_metadata_agent”

  • conf.rootwrap_filters.netns_cleanup.pods[5]

    • Type: string

    • Description:

    • “ovn_vpn_agent”

  • conf.rootwrap_filters.netns_cleanup.pods[6]

    • Type: string

    • Description:

    • “ovs_agent”

  • conf.rootwrap_filters.netns_cleanup.pods[7]

    • Type: string

    • Description:

    • “sriov_agent”

  • conf.rootwrap_filters.netns_cleanup.pods[8]

    • Type: string

    • Description:

    • “netns_cleanup_cron”

  • conf.rootwrap_filters.openvswitch_plugin.content

    • Type: string

    • Description:

    • # neutron-rootwrap command filters for nodes on which neutron is
      # expected to control network
      #
      # This file should be owned by (and only-writeable by) the root user
      
      # format seems to be
      # cmd-name: filter-name, raw-command, user, args
      
      [Filters]
      
      # openvswitch-agent
      # unclear whether both variants are necessary, but I'm transliterating
      # from the old mechanism
      ovs-vsctl: CommandFilter, ovs-vsctl, root
      # NOTE(yamamoto): of_interface=native doesn't use ovs-ofctl
      ovs-ofctl: CommandFilter, ovs-ofctl, root
      ovs-appctl: CommandFilter, ovs-appctl, root
      kill_ovsdb_client: KillFilter, root, /usr/bin/ovsdb-client, -9
      ovsdb-client: CommandFilter, ovsdb-client, root
      xe: CommandFilter, xe, root
      
      # ip_lib
      ip: IpFilter, ip, root
      find: RegExpFilter, find, root, find, /sys/class/net, -maxdepth, 1, -type, l, -printf, %.*
      ip_exec: IpNetnsExecFilter, ip, root
      
      # needed for FDB extension
      bridge: CommandFilter, bridge, root
      
  • conf.rootwrap_filters.openvswitch_plugin.pods[0]

    • Type: string

    • Description:

    • “dhcp_agent”

  • conf.rootwrap_filters.openvswitch_plugin.pods[1]

    • Type: string

    • Description:

    • “l3_agent”

  • conf.rootwrap_filters.openvswitch_plugin.pods[2]

    • Type: string

    • Description:

    • “lb_agent”

  • conf.rootwrap_filters.openvswitch_plugin.pods[3]

    • Type: string

    • Description:

    • “metadata_agent”

  • conf.rootwrap_filters.openvswitch_plugin.pods[4]

    • Type: string

    • Description:

    • “ovn_metadata_agent”

  • conf.rootwrap_filters.openvswitch_plugin.pods[5]

    • Type: string

    • Description:

    • “ovn_vpn_agent”

  • conf.rootwrap_filters.openvswitch_plugin.pods[6]

    • Type: string

    • Description:

    • “ovs_agent”

  • conf.rootwrap_filters.openvswitch_plugin.pods[7]

    • Type: string

    • Description:

    • “sriov_agent”

  • conf.rootwrap_filters.privsep.content

    • Type: string

    • Description:

    • # Command filters to allow privsep daemon to be started via rootwrap.
      #
      # This file should be owned by (and only-writeable by) the root user
      
      [Filters]
      
      # By installing the following, the local admin is asserting that:
      #
      # 1. The python module load path used by privsep-helper
      #    command as root (as started by sudo/rootwrap) is trusted.
      # 2. Any oslo.config files matching the --config-file
      #    arguments below are trusted.
      # 3. Users allowed to run sudo/rootwrap with this configuration(*) are
      #    also allowed to invoke python \"entrypoint\" functions from
      #    --privsep_context with the additional (possibly root) privileges
      #    configured for that context.
      #
      # (*) ie: the user is allowed by /etc/sudoers to run rootwrap as root
      #
      # In particular, the oslo.config and python module path must not
      # be writeable by the unprivileged user.
      
      # oslo.privsep default neutron context
      privsep: PathFilter, privsep-helper, root,
       --config-file, /etc,
       --privsep_context, neutron.privileged.default,
       --privsep_sock_path, /
      
      # NOTE: A second `--config-file` arg can also be added above. Since
      # many neutron components are installed like that (eg: by devstack).
      # Adjust to suit local requirements.
      
  • conf.rootwrap_filters.privsep.pods[0]

    • Type: string

    • Description:

    • “dhcp_agent”

  • conf.rootwrap_filters.privsep.pods[1]

    • Type: string

    • Description:

    • “l3_agent”

  • conf.rootwrap_filters.privsep.pods[2]

    • Type: string

    • Description:

    • “lb_agent”

  • conf.rootwrap_filters.privsep.pods[3]

    • Type: string

    • Description:

    • “metadata_agent”

  • conf.rootwrap_filters.privsep.pods[4]

    • Type: string

    • Description:

    • “ovn_metadata_agent”

  • conf.rootwrap_filters.privsep.pods[5]

    • Type: string

    • Description:

    • “ovn_vpn_agent”

  • conf.rootwrap_filters.privsep.pods[6]

    • Type: string

    • Description:

    • “ovs_agent”

  • conf.rootwrap_filters.privsep.pods[7]

    • Type: string

    • Description:

    • “sriov_agent”

  • conf.rootwrap_filters.privsep.pods[8]

    • Type: string

    • Description:

    • “netns_cleanup_cron”

  • conf.sriov_init[0]

    • Type: string

    • Description:

    • nil

  • dependencies.dynamic.common.local_image_registry.jobs[0]

    • Type: string

    • Description:

    • “neutron-image-repo-sync”

  • dependencies.dynamic.common.local_image_registry.services[0].endpoint

    • Type: string

    • Description:

    • “node”

  • dependencies.dynamic.common.local_image_registry.services[0].service

    • Type: string

    • Description:

    • “local_image_registry”

  • dependencies.dynamic.targeted.bagpipe_bgp

    • Type: object

    • Description:

    • {}

  • dependencies.dynamic.targeted.bgp_dragent

    • Type: object

    • Description:

    • {}

  • dependencies.dynamic.targeted.l2gateway

    • Type: object

    • Description:

    • {}

  • dependencies.dynamic.targeted.linuxbridge.dhcp.pod[0].labels.application

    • Type: string

    • Description:

    • “neutron”

  • dependencies.dynamic.targeted.linuxbridge.dhcp.pod[0].labels.component

    • Type: string

    • Description:

    • “neutron-lb-agent”

  • dependencies.dynamic.targeted.linuxbridge.dhcp.pod[0].requireSameNode

    • Type: bool

    • Description:

    • true

  • dependencies.dynamic.targeted.linuxbridge.l3.pod[0].labels.application

    • Type: string

    • Description:

    • “neutron”

  • dependencies.dynamic.targeted.linuxbridge.l3.pod[0].labels.component

    • Type: string

    • Description:

    • “neutron-lb-agent”

  • dependencies.dynamic.targeted.linuxbridge.l3.pod[0].requireSameNode

    • Type: bool

    • Description:

    • true

  • dependencies.dynamic.targeted.linuxbridge.lb_agent.pod

    • Type: string

    • Description:

    • nil

  • dependencies.dynamic.targeted.linuxbridge.metadata.pod[0].labels.application

    • Type: string

    • Description:

    • “neutron”

  • dependencies.dynamic.targeted.linuxbridge.metadata.pod[0].labels.component

    • Type: string

    • Description:

    • “neutron-lb-agent”

  • dependencies.dynamic.targeted.linuxbridge.metadata.pod[0].requireSameNode

    • Type: bool

    • Description:

    • true

  • dependencies.dynamic.targeted.openvswitch.dhcp.pod[0].labels.application

    • Type: string

    • Description:

    • “neutron”

  • dependencies.dynamic.targeted.openvswitch.dhcp.pod[0].labels.component

    • Type: string

    • Description:

    • “neutron-ovs-agent”

  • dependencies.dynamic.targeted.openvswitch.dhcp.pod[0].requireSameNode

    • Type: bool

    • Description:

    • true

  • dependencies.dynamic.targeted.openvswitch.l3.pod[0].labels.application

    • Type: string

    • Description:

    • “neutron”

  • dependencies.dynamic.targeted.openvswitch.l3.pod[0].labels.component

    • Type: string

    • Description:

    • “neutron-ovs-agent”

  • dependencies.dynamic.targeted.openvswitch.l3.pod[0].requireSameNode

    • Type: bool

    • Description:

    • true

  • dependencies.dynamic.targeted.openvswitch.metadata.pod[0].labels.application

    • Type: string

    • Description:

    • “neutron”

  • dependencies.dynamic.targeted.openvswitch.metadata.pod[0].labels.component

    • Type: string

    • Description:

    • “neutron-ovs-agent”

  • dependencies.dynamic.targeted.openvswitch.metadata.pod[0].requireSameNode

    • Type: bool

    • Description:

    • true

  • dependencies.dynamic.targeted.ovn.server.pod

    • Type: string

    • Description:

    • nil

  • dependencies.dynamic.targeted.sriov

    • Type: object

    • Description:

    • {}

  • dependencies.static.bootstrap.services[0].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.bootstrap.services[0].service

    • Type: string

    • Description:

    • “network”

  • dependencies.static.bootstrap.services[1].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.bootstrap.services[1].service

    • Type: string

    • Description:

    • “compute”

  • dependencies.static.db_drop.services[0].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.db_drop.services[0].service

    • Type: string

    • Description:

    • “oslo_db”

  • dependencies.static.db_init.services[0].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.db_init.services[0].service

    • Type: string

    • Description:

    • “oslo_db”

  • dependencies.static.db_sync.jobs[0]

    • Type: string

    • Description:

    • “neutron-db-init”

  • dependencies.static.db_sync.services[0].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.db_sync.services[0].service

    • Type: string

    • Description:

    • “oslo_db”

  • dependencies.static.dhcp.jobs[0]

    • Type: string

    • Description:

    • “neutron-rabbit-init”

  • dependencies.static.dhcp.pod

    • Type: string

    • Description:

    • nil

  • dependencies.static.dhcp.services[0].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.dhcp.services[0].service

    • Type: string

    • Description:

    • “oslo_messaging”

  • dependencies.static.dhcp.services[1].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.dhcp.services[1].service

    • Type: string

    • Description:

    • “network”

  • dependencies.static.dhcp.services[2].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.dhcp.services[2].service

    • Type: string

    • Description:

    • “compute”

  • dependencies.static.image_repo_sync.services[0].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.image_repo_sync.services[0].service

    • Type: string

    • Description:

    • “local_image_registry”

  • dependencies.static.ironic_agent.jobs[0]

    • Type: string

    • Description:

    • “neutron-db-sync”

  • dependencies.static.ironic_agent.jobs[1]

    • Type: string

    • Description:

    • “neutron-ks-user”

  • dependencies.static.ironic_agent.jobs[2]

    • Type: string

    • Description:

    • “neutron-ks-endpoints”

  • dependencies.static.ironic_agent.jobs[3]

    • Type: string

    • Description:

    • “neutron-rabbit-init”

  • dependencies.static.ironic_agent.services[0].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.ironic_agent.services[0].service

    • Type: string

    • Description:

    • “oslo_db”

  • dependencies.static.ironic_agent.services[1].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.ironic_agent.services[1].service

    • Type: string

    • Description:

    • “oslo_messaging”

  • dependencies.static.ironic_agent.services[2].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.ironic_agent.services[2].service

    • Type: string

    • Description:

    • “oslo_cache”

  • dependencies.static.ironic_agent.services[3].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.ironic_agent.services[3].service

    • Type: string

    • Description:

    • “identity”

  • dependencies.static.ks_endpoints.jobs[0]

    • Type: string

    • Description:

    • “neutron-ks-service”

  • dependencies.static.ks_endpoints.services[0].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.ks_endpoints.services[0].service

    • Type: string

    • Description:

    • “identity”

  • dependencies.static.ks_service.services[0].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.ks_service.services[0].service

    • Type: string

    • Description:

    • “identity”

  • dependencies.static.ks_user.services[0].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.ks_user.services[0].service

    • Type: string

    • Description:

    • “identity”

  • dependencies.static.l3.jobs[0]

    • Type: string

    • Description:

    • “neutron-rabbit-init”

  • dependencies.static.l3.pod

    • Type: string

    • Description:

    • nil

  • dependencies.static.l3.services[0].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.l3.services[0].service

    • Type: string

    • Description:

    • “oslo_messaging”

  • dependencies.static.l3.services[1].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.l3.services[1].service

    • Type: string

    • Description:

    • “network”

  • dependencies.static.l3.services[2].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.l3.services[2].service

    • Type: string

    • Description:

    • “compute”

  • dependencies.static.lb_agent.jobs[0]

    • Type: string

    • Description:

    • “neutron-rabbit-init”

  • dependencies.static.lb_agent.pod

    • Type: string

    • Description:

    • nil

  • dependencies.static.lb_agent.services[0].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.lb_agent.services[0].service

    • Type: string

    • Description:

    • “oslo_messaging”

  • dependencies.static.lb_agent.services[1].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.lb_agent.services[1].service

    • Type: string

    • Description:

    • “network”

  • dependencies.static.metadata.jobs[0]

    • Type: string

    • Description:

    • “neutron-rabbit-init”

  • dependencies.static.metadata.pod

    • Type: string

    • Description:

    • nil

  • dependencies.static.metadata.services[0].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.metadata.services[0].service

    • Type: string

    • Description:

    • “oslo_messaging”

  • dependencies.static.metadata.services[1].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.metadata.services[1].service

    • Type: string

    • Description:

    • “network”

  • dependencies.static.metadata.services[2].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.metadata.services[2].service

    • Type: string

    • Description:

    • “compute”

  • dependencies.static.metadata.services[3].endpoint

    • Type: string

    • Description:

    • “public”

  • dependencies.static.metadata.services[3].service

    • Type: string

    • Description:

    • “compute_metadata”

  • dependencies.static.ovn_metadata.pod[0].labels.application

    • Type: string

    • Description:

    • “ovn”

  • dependencies.static.ovn_metadata.pod[0].labels.component

    • Type: string

    • Description:

    • “ovn-controller”

  • dependencies.static.ovn_metadata.pod[0].requireSameNode

    • Type: bool

    • Description:

    • true

  • dependencies.static.ovn_metadata.services[0].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.ovn_metadata.services[0].service

    • Type: string

    • Description:

    • “compute_metadata”

  • dependencies.static.ovn_metadata.services[1].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.ovn_metadata.services[1].service

    • Type: string

    • Description:

    • “network”

  • dependencies.static.ovn_vpn_agent.pod[0].labels.application

    • Type: string

    • Description:

    • “ovn”

  • dependencies.static.ovn_vpn_agent.pod[0].labels.component

    • Type: string

    • Description:

    • “ovn-controller”

  • dependencies.static.ovn_vpn_agent.pod[0].requireSameNode

    • Type: bool

    • Description:

    • true

  • dependencies.static.ovn_vpn_agent.services[0].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.ovn_vpn_agent.services[0].service

    • Type: string

    • Description:

    • “oslo_messaging”

  • dependencies.static.ovn_vpn_agent.services[1].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.ovn_vpn_agent.services[1].service

    • Type: string

    • Description:

    • “network”

  • dependencies.static.ovs_agent.jobs[0]

    • Type: string

    • Description:

    • “neutron-rabbit-init”

  • dependencies.static.ovs_agent.pod[0].labels.application

    • Type: string

    • Description:

    • “openvswitch”

  • dependencies.static.ovs_agent.pod[0].labels.component

    • Type: string

    • Description:

    • “server”

  • dependencies.static.ovs_agent.pod[0].requireSameNode

    • Type: bool

    • Description:

    • true

  • dependencies.static.ovs_agent.services[0].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.ovs_agent.services[0].service

    • Type: string

    • Description:

    • “oslo_messaging”

  • dependencies.static.ovs_agent.services[1].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.ovs_agent.services[1].service

    • Type: string

    • Description:

    • “network”

  • dependencies.static.rabbit_init.services[0].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.rabbit_init.services[0].service

    • Type: string

    • Description:

    • “oslo_messaging”

  • dependencies.static.rpc_server.jobs[0]

    • Type: string

    • Description:

    • “neutron-db-sync”

  • dependencies.static.rpc_server.jobs[1]

    • Type: string

    • Description:

    • “neutron-rabbit-init”

  • dependencies.static.rpc_server.services[0].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.rpc_server.services[0].service

    • Type: string

    • Description:

    • “oslo_db”

  • dependencies.static.rpc_server.services[1].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.rpc_server.services[1].service

    • Type: string

    • Description:

    • “oslo_messaging”

  • dependencies.static.rpc_server.services[2].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.rpc_server.services[2].service

    • Type: string

    • Description:

    • “oslo_cache”

  • dependencies.static.rpc_server.services[3].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.rpc_server.services[3].service

    • Type: string

    • Description:

    • “identity”

  • dependencies.static.server.jobs[0]

    • Type: string

    • Description:

    • “neutron-db-sync”

  • dependencies.static.server.jobs[1]

    • Type: string

    • Description:

    • “neutron-ks-user”

  • dependencies.static.server.jobs[2]

    • Type: string

    • Description:

    • “neutron-ks-endpoints”

  • dependencies.static.server.jobs[3]

    • Type: string

    • Description:

    • “neutron-rabbit-init”

  • dependencies.static.server.services[0].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.server.services[0].service

    • Type: string

    • Description:

    • “oslo_db”

  • dependencies.static.server.services[1].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.server.services[1].service

    • Type: string

    • Description:

    • “oslo_messaging”

  • dependencies.static.server.services[2].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.server.services[2].service

    • Type: string

    • Description:

    • “oslo_cache”

  • dependencies.static.server.services[3].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.server.services[3].service

    • Type: string

    • Description:

    • “identity”

  • dependencies.static.tests.services[0].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.tests.services[0].service

    • Type: string

    • Description:

    • “network”

  • dependencies.static.tests.services[1].endpoint

    • Type: string

    • Description:

    • “internal”

  • dependencies.static.tests.services[1].service

    • Type: string

    • Description:

    • “compute”

  • endpoints.baremetal.host_fqdn_override.default

    • Type: string

    • Description:

    • nil

  • endpoints.baremetal.hosts.default

    • Type: string

    • Description:

    • “ironic-api”

  • endpoints.baremetal.hosts.public

    • Type: string

    • Description:

    • “ironic”

  • endpoints.baremetal.name

    • Type: string

    • Description:

    • “ironic”

  • endpoints.baremetal.path.default

    • Type: string

    • Description:

    • nil

  • endpoints.baremetal.port.api.default

    • Type: int

    • Description:

    • 6385

  • endpoints.baremetal.port.api.public

    • Type: int

    • Description:

    • 80

  • endpoints.baremetal.scheme.default

    • Type: string

    • Description:

    • “http”

  • endpoints.cluster_domain_suffix

    • Type: string

    • Description:

    • “cluster.local”

  • endpoints.compute.host_fqdn_override.default

    • Type: string

    • Description:

    • nil

  • endpoints.compute.hosts.default

    • Type: string

    • Description:

    • “nova-api”

  • endpoints.compute.hosts.public

    • Type: string

    • Description:

    • “nova”

  • endpoints.compute.name

    • Type: string

    • Description:

    • “nova”

  • endpoints.compute.path.default

    • Type: string

    • Description:

    • “/v2.1/%(tenant_id)s”

  • endpoints.compute.port.api.default

    • Type: int

    • Description:

    • 8774

  • endpoints.compute.port.api.public

    • Type: int

    • Description:

    • 80

  • endpoints.compute.port.novncproxy.default

    • Type: int

    • Description:

    • 6080

  • endpoints.compute.scheme.default

    • Type: string

    • Description:

    • “http”

  • endpoints.compute_metadata.host_fqdn_override.default

    • Type: string

    • Description:

    • nil

  • endpoints.compute_metadata.hosts.default

    • Type: string

    • Description:

    • “nova-metadata”

  • endpoints.compute_metadata.hosts.public

    • Type: string

    • Description:

    • “metadata”

  • endpoints.compute_metadata.name

    • Type: string

    • Description:

    • “nova”

  • endpoints.compute_metadata.path.default

    • Type: string

    • Description:

    • “/”

  • endpoints.compute_metadata.port.metadata.default

    • Type: int

    • Description:

    • 8775

  • endpoints.compute_metadata.port.metadata.public

    • Type: int

    • Description:

    • 80

  • endpoints.compute_metadata.scheme.default

    • Type: string

    • Description:

    • “http”

  • endpoints.dns.host_fqdn_override.default

    • Type: string

    • Description:

    • nil

  • endpoints.dns.hosts.default

    • Type: string

    • Description:

    • “designate-api”

  • endpoints.dns.hosts.public

    • Type: string

    • Description:

    • “designate”

  • endpoints.dns.name

    • Type: string

    • Description:

    • “designate”

  • endpoints.dns.path.default

    • Type: string

    • Description:

    • “/”

  • endpoints.dns.port.api.default

    • Type: int

    • Description:

    • 9001

  • endpoints.dns.port.api.public

    • Type: int

    • Description:

    • 80

  • endpoints.dns.scheme.default

    • Type: string

    • Description:

    • “http”

  • endpoints.fluentd.host_fqdn_override.default

    • Type: string

    • Description:

    • nil

  • endpoints.fluentd.hosts.default

    • Type: string

    • Description:

    • “fluentd-logging”

  • endpoints.fluentd.name

    • Type: string

    • Description:

    • “fluentd”

  • endpoints.fluentd.namespace

    • Type: string

    • Description:

    • “osh-infra”

  • endpoints.fluentd.path.default

    • Type: string

    • Description:

    • nil

  • endpoints.fluentd.port.metrics.default

    • Type: int

    • Description:

    • 24220

  • endpoints.fluentd.port.service.default

    • Type: int

    • Description:

    • 24224

  • endpoints.fluentd.scheme

    • Type: string

    • Description:

    • “http”

  • endpoints.identity.auth.admin.password

    • Type: string

    • Description:

    • “password”

  • endpoints.identity.auth.admin.project_domain_name

    • Type: string

    • Description:

    • “default”

  • endpoints.identity.auth.admin.project_name

    • Type: string

    • Description:

    • “admin”

  • endpoints.identity.auth.admin.region_name

    • Type: string

    • Description:

    • “RegionOne”

  • endpoints.identity.auth.admin.user_domain_name

    • Type: string

    • Description:

    • “default”

  • endpoints.identity.auth.admin.username

    • Type: string

    • Description:

    • “admin”

  • endpoints.identity.auth.designate.password

    • Type: string

    • Description:

    • “password”

  • endpoints.identity.auth.designate.project_domain_name

    • Type: string

    • Description:

    • “service”

  • endpoints.identity.auth.designate.project_name

    • Type: string

    • Description:

    • “service”

  • endpoints.identity.auth.designate.region_name

    • Type: string

    • Description:

    • “RegionOne”

  • endpoints.identity.auth.designate.user_domain_name

    • Type: string

    • Description:

    • “service”

  • endpoints.identity.auth.designate.username

    • Type: string

    • Description:

    • “designate”

  • endpoints.identity.auth.ironic.password

    • Type: string

    • Description:

    • “password”

  • endpoints.identity.auth.ironic.project_domain_name

    • Type: string

    • Description:

    • “service”

  • endpoints.identity.auth.ironic.project_name

    • Type: string

    • Description:

    • “service”

  • endpoints.identity.auth.ironic.region_name

    • Type: string

    • Description:

    • “RegionOne”

  • endpoints.identity.auth.ironic.user_domain_name

    • Type: string

    • Description:

    • “service”

  • endpoints.identity.auth.ironic.username

    • Type: string

    • Description:

    • “ironic”

  • endpoints.identity.auth.neutron.password

    • Type: string

    • Description:

    • “password”

  • endpoints.identity.auth.neutron.project_domain_name

    • Type: string

    • Description:

    • “service”

  • endpoints.identity.auth.neutron.project_name

    • Type: string

    • Description:

    • “service”

  • endpoints.identity.auth.neutron.region_name

    • Type: string

    • Description:

    • “RegionOne”

  • endpoints.identity.auth.neutron.role

    • Type: string

    • Description:

    • “admin,service”

  • endpoints.identity.auth.neutron.user_domain_name

    • Type: string

    • Description:

    • “service”

  • endpoints.identity.auth.neutron.username

    • Type: string

    • Description:

    • “neutron”

  • endpoints.identity.auth.nova.password

    • Type: string

    • Description:

    • “password”

  • endpoints.identity.auth.nova.project_domain_name

    • Type: string

    • Description:

    • “service”

  • endpoints.identity.auth.nova.project_name

    • Type: string

    • Description:

    • “service”

  • endpoints.identity.auth.nova.region_name

    • Type: string

    • Description:

    • “RegionOne”

  • endpoints.identity.auth.nova.user_domain_name

    • Type: string

    • Description:

    • “service”

  • endpoints.identity.auth.nova.username

    • Type: string

    • Description:

    • “nova”

  • endpoints.identity.auth.placement.password

    • Type: string

    • Description:

    • “password”

  • endpoints.identity.auth.placement.project_domain_name

    • Type: string

    • Description:

    • “service”

  • endpoints.identity.auth.placement.project_name

    • Type: string

    • Description:

    • “service”

  • endpoints.identity.auth.placement.region_name

    • Type: string

    • Description:

    • “RegionOne”

  • endpoints.identity.auth.placement.user_domain_name

    • Type: string

    • Description:

    • “service”

  • endpoints.identity.auth.placement.username

    • Type: string

    • Description:

    • “placement”

  • endpoints.identity.auth.test.password

    • Type: string

    • Description:

    • “password”

  • endpoints.identity.auth.test.project_domain_name

    • Type: string

    • Description:

    • “service”

  • endpoints.identity.auth.test.project_name

    • Type: string

    • Description:

    • “test”

  • endpoints.identity.auth.test.region_name

    • Type: string

    • Description:

    • “RegionOne”

  • endpoints.identity.auth.test.role

    • Type: string

    • Description:

    • “admin”

  • endpoints.identity.auth.test.user_domain_name

    • Type: string

    • Description:

    • “service”

  • endpoints.identity.auth.test.username

    • Type: string

    • Description:

    • “neutron-test”

  • endpoints.identity.host_fqdn_override.default

    • Type: string

    • Description:

    • nil

  • endpoints.identity.hosts.default

    • Type: string

    • Description:

    • “keystone”

  • endpoints.identity.hosts.internal

    • Type: string

    • Description:

    • “keystone-api”

  • endpoints.identity.name

    • Type: string

    • Description:

    • “keystone”

  • endpoints.identity.path.default

    • Type: string

    • Description:

    • “/v3”

  • endpoints.identity.port.api.default

    • Type: int

    • Description:

    • 80

  • endpoints.identity.port.api.internal

    • Type: int

    • Description:

    • 5000

  • endpoints.identity.scheme.default

    • Type: string

    • Description:

    • “http”

  • endpoints.ingress.hosts.default

    • Type: string

    • Description:

    • “ingress”

  • endpoints.ingress.name

    • Type: string

    • Description:

    • “ingress”

  • endpoints.ingress.namespace

    • Type: string

    • Description:

    • nil

  • endpoints.ingress.port.ingress.default

    • Type: int

    • Description:

    • 80

  • endpoints.kube_dns.host_fqdn_override.default

    • Type: string

    • Description:

    • nil

  • endpoints.kube_dns.hosts.default

    • Type: string

    • Description:

    • “kube-dns”

  • endpoints.kube_dns.name

    • Type: string

    • Description:

    • “kubernetes-dns”

  • endpoints.kube_dns.namespace

    • Type: string

    • Description:

    • “kube-system”

  • endpoints.kube_dns.path.default

    • Type: string

    • Description:

    • nil

  • endpoints.kube_dns.port.dns.default

    • Type: int

    • Description:

    • 53

  • endpoints.kube_dns.port.dns.protocol

    • Type: string

    • Description:

    • “UDP”

  • endpoints.kube_dns.scheme

    • Type: string

    • Description:

    • “http”

  • endpoints.load_balancer.host_fqdn_override.default

    • Type: string

    • Description:

    • nil

  • endpoints.load_balancer.hosts.default

    • Type: string

    • Description:

    • “octavia-api”

  • endpoints.load_balancer.hosts.public

    • Type: string

    • Description:

    • “octavia”

  • endpoints.load_balancer.name

    • Type: string

    • Description:

    • “octavia”

  • endpoints.load_balancer.path.default

    • Type: string

    • Description:

    • nil

  • endpoints.load_balancer.port.api.default

    • Type: int

    • Description:

    • 9876

  • endpoints.load_balancer.port.api.public

    • Type: int

    • Description:

    • 80

  • endpoints.load_balancer.scheme.default

    • Type: string

    • Description:

    • “http”

  • endpoints.local_image_registry.host_fqdn_override.default

    • Type: string

    • Description:

    • nil

  • endpoints.local_image_registry.hosts.default

    • Type: string

    • Description:

    • “localhost”

  • endpoints.local_image_registry.hosts.internal

    • Type: string

    • Description:

    • “docker-registry”

  • endpoints.local_image_registry.hosts.node

    • Type: string

    • Description:

    • “localhost”

  • endpoints.local_image_registry.name

    • Type: string

    • Description:

    • “docker-registry”

  • endpoints.local_image_registry.namespace

    • Type: string

    • Description:

    • “docker-registry”

  • endpoints.local_image_registry.port.registry.node

    • Type: int

    • Description:

    • 5000

  • endpoints.network.host_fqdn_override.default

    • Type: string

    • Description:

    • nil

  • endpoints.network.hosts.default

    • Type: string

    • Description:

    • “neutron-server”

  • endpoints.network.hosts.public

    • Type: string

    • Description:

    • “neutron”

  • endpoints.network.name

    • Type: string

    • Description:

    • “neutron”

  • endpoints.network.path.default

    • Type: string

    • Description:

    • nil

  • endpoints.network.port.api.default

    • Type: int

    • Description:

    • 9696

  • endpoints.network.port.api.public

    • Type: int

    • Description:

    • 80

  • endpoints.network.port.api.service

    • Type: int

    • Description:

    • 9696

  • endpoints.network.scheme.default

    • Type: string

    • Description:

    • “http”

  • endpoints.network.scheme.service

    • Type: string

    • Description:

    • “http”

  • endpoints.oci_image_registry.auth.enabled

    • Type: bool

    • Description:

    • false

  • endpoints.oci_image_registry.auth.neutron.password

    • Type: string

    • Description:

    • “password”

  • endpoints.oci_image_registry.auth.neutron.username

    • Type: string

    • Description:

    • “neutron”

  • endpoints.oci_image_registry.host_fqdn_override.default

    • Type: string

    • Description:

    • nil

  • endpoints.oci_image_registry.hosts.default

    • Type: string

    • Description:

    • “localhost”

  • endpoints.oci_image_registry.name

    • Type: string

    • Description:

    • “oci-image-registry”

  • endpoints.oci_image_registry.namespace

    • Type: string

    • Description:

    • “oci-image-registry”

  • endpoints.oci_image_registry.port.registry.default

    • Type: string

    • Description:

    • nil

  • endpoints.oslo_cache.auth.memcache_secret_key

    • Type: string

    • Description:

    • nil

  • endpoints.oslo_cache.host_fqdn_override.default

    • Type: string

    • Description:

    • nil

  • endpoints.oslo_cache.hosts.default

    • Type: string

    • Description:

    • “memcached”

  • endpoints.oslo_cache.port.memcache.default

    • Type: int

    • Description:

    • 11211

  • endpoints.oslo_db.auth.admin.password

    • Type: string

    • Description:

    • “password”

  • endpoints.oslo_db.auth.admin.secret.tls.internal

    • Type: string

    • Description:

    • “mariadb-tls-direct”

  • endpoints.oslo_db.auth.admin.username

    • Type: string

    • Description:

    • “root”

  • endpoints.oslo_db.auth.neutron.password

    • Type: string

    • Description:

    • “password”

  • endpoints.oslo_db.auth.neutron.username

    • Type: string

    • Description:

    • “neutron”

  • endpoints.oslo_db.host_fqdn_override.default

    • Type: string

    • Description:

    • nil

  • endpoints.oslo_db.hosts.default

    • Type: string

    • Description:

    • “mariadb”

  • endpoints.oslo_db.path

    • Type: string

    • Description:

    • “/neutron”

  • endpoints.oslo_db.port.mysql.default

    • Type: int

    • Description:

    • 3306

  • endpoints.oslo_db.scheme

    • Type: string

    • Description:

    • “mysql+pymysql”

  • endpoints.oslo_messaging.auth.admin.password

    • Type: string

    • Description:

    • “password”

  • endpoints.oslo_messaging.auth.admin.secret.tls.internal

    • Type: string

    • Description:

    • “rabbitmq-tls-direct”

  • endpoints.oslo_messaging.auth.admin.username

    • Type: string

    • Description:

    • “rabbitmq”

  • endpoints.oslo_messaging.auth.neutron.password

    • Type: string

    • Description:

    • “password”

  • endpoints.oslo_messaging.auth.neutron.username

    • Type: string

    • Description:

    • “neutron”

  • endpoints.oslo_messaging.host_fqdn_override.default

    • Type: string

    • Description:

    • nil

  • endpoints.oslo_messaging.hosts.default

    • Type: string

    • Description:

    • “rabbitmq”

  • endpoints.oslo_messaging.path

    • Type: string

    • Description:

    • “/neutron”

  • endpoints.oslo_messaging.port.amqp.default

    • Type: int

    • Description:

    • 5672

  • endpoints.oslo_messaging.port.http.default

    • Type: int

    • Description:

    • 15672

  • endpoints.oslo_messaging.scheme

    • Type: string

    • Description:

    • “rabbit”

  • endpoints.oslo_messaging.statefulset.name

    • Type: string

    • Description:

    • “rabbitmq-rabbitmq”

  • endpoints.oslo_messaging.statefulset.replicas

    • Type: int

    • Description:

    • 2

  • health_probe.logging.level

    • Type: string

    • Description:

    • “ERROR”

  • helm3_hook

    • Type: bool

    • Description:

    • true

  • images.local_registry.active

    • Type: bool

    • Description:

    • false

  • images.local_registry.exclude[0]

    • Type: string

    • Description:

    • “dep_check”

  • images.local_registry.exclude[1]

    • Type: string

    • Description:

    • “image_repo_sync”

  • images.pull_policy

    • Type: string

    • Description:

    • “IfNotPresent”

  • images.tags.bootstrap

    • Type: string

    • Description:

    • “docker.io/openstackhelm/heat:2024.1-ubuntu_jammy”

  • images.tags.db_drop

    • Type: string

    • Description:

    • “docker.io/openstackhelm/heat:2024.1-ubuntu_jammy”

  • images.tags.db_init

    • Type: string

    • Description:

    • “docker.io/openstackhelm/heat:2024.1-ubuntu_jammy”

  • images.tags.dep_check

    • Type: string

    • Description:

    • “quay.io/airshipit/kubernetes-entrypoint:latest-ubuntu_focal”

  • images.tags.image_repo_sync

    • Type: string

    • Description:

    • “docker.io/docker:17.07.0”

  • images.tags.ks_endpoints

    • Type: string

    • Description:

    • “docker.io/openstackhelm/heat:2024.1-ubuntu_jammy”

  • images.tags.ks_service

    • Type: string

    • Description:

    • “docker.io/openstackhelm/heat:2024.1-ubuntu_jammy”

  • images.tags.ks_user

    • Type: string

    • Description:

    • “docker.io/openstackhelm/heat:2024.1-ubuntu_jammy”

  • images.tags.netoffload

    • Type: string

    • Description:

    • “ghcr.io/vexxhost/netoffload:v1.0.1”

  • images.tags.neutron_bagpipe_bgp

    • Type: string

    • Description:

    • “docker.io/openstackhelm/neutron:2024.1-ubuntu_jammy”

  • images.tags.neutron_bgp_dragent

    • Type: string

    • Description:

    • “docker.io/openstackhelm/neutron:2024.1-ubuntu_jammy”

  • images.tags.neutron_db_sync

    • Type: string

    • Description:

    • “docker.io/openstackhelm/neutron:2024.1-ubuntu_jammy”

  • images.tags.neutron_dhcp

    • Type: string

    • Description:

    • “docker.io/openstackhelm/neutron:2024.1-ubuntu_jammy”

  • images.tags.neutron_ironic_agent

    • Type: string

    • Description:

    • “docker.io/openstackhelm/neutron:2024.1-ubuntu_jammy”

  • images.tags.neutron_l2gw

    • Type: string

    • Description:

    • “docker.io/openstackhelm/neutron:2024.1-ubuntu_jammy”

  • images.tags.neutron_l3

    • Type: string

    • Description:

    • “docker.io/openstackhelm/neutron:2024.1-ubuntu_jammy”

  • images.tags.neutron_linuxbridge_agent

    • Type: string

    • Description:

    • “docker.io/openstackhelm/neutron:2024.1-ubuntu_jammy”

  • images.tags.neutron_metadata

    • Type: string

    • Description:

    • “docker.io/openstackhelm/neutron:2024.1-ubuntu_jammy”

  • images.tags.neutron_netns_cleanup_cron

    • Type: string

    • Description:

    • “docker.io/openstackhelm/neutron:2024.1-ubuntu_jammy”

  • images.tags.neutron_openvswitch_agent

    • Type: string

    • Description:

    • “docker.io/openstackhelm/neutron:2024.1-ubuntu_jammy”

  • images.tags.neutron_ovn_metadata

    • Type: string

    • Description:

    • “docker.io/openstackhelm/neutron:2024.1-ubuntu_jammy”

  • images.tags.neutron_ovn_vpn

    • Type: string

    • Description:

    • “docker.io/openstackhelm/neutron:2024.1-ubuntu_jammy”

  • images.tags.neutron_rpc_server

    • Type: string

    • Description:

    • “docker.io/openstackhelm/neutron:2024.1-ubuntu_jammy”

  • images.tags.neutron_server

    • Type: string

    • Description:

    • “docker.io/openstackhelm/neutron:2024.1-ubuntu_jammy”

  • images.tags.neutron_sriov_agent

    • Type: string

    • Description:

    • “docker.io/openstackhelm/neutron:stein-18.04-sriov”

  • images.tags.neutron_sriov_agent_init

    • Type: string

    • Description:

    • “docker.io/openstackhelm/neutron:stein-18.04-sriov”

  • images.tags.purge_test

    • Type: string

    • Description:

    • “docker.io/openstackhelm/ospurge:latest”

  • images.tags.rabbit_init

    • Type: string

    • Description:

    • “docker.io/rabbitmq:3.13-management”

  • images.tags.test

    • Type: string

    • Description:

    • “docker.io/xrally/xrally-openstack:2.0.0”

  • labels.agent.dhcp.node_selector_key

    • Type: string

    • Description:

    • “openstack-control-plane”

  • labels.agent.dhcp.node_selector_value

    • Type: string

    • Description:

    • “enabled”

  • labels.agent.l2gw.node_selector_key

    • Type: string

    • Description:

    • “openstack-control-plane”

  • labels.agent.l2gw.node_selector_value

    • Type: string

    • Description:

    • “enabled”

  • labels.agent.l3.node_selector_key

    • Type: string

    • Description:

    • “openstack-control-plane”

  • labels.agent.l3.node_selector_value

    • Type: string

    • Description:

    • “enabled”

  • labels.agent.metadata.node_selector_key

    • Type: string

    • Description:

    • “openstack-control-plane”

  • labels.agent.metadata.node_selector_value

    • Type: string

    • Description:

    • “enabled”

  • labels.agent.ovn_vpn.node_selector_key

    • Type: string

    • Description:

    • “openstack-control-plane”

  • labels.agent.ovn_vpn.node_selector_value

    • Type: string

    • Description:

    • “enabled”

  • labels.bagpipe_bgp.node_selector_key

    • Type: string

    • Description:

    • “openstack-compute-node”

  • labels.bagpipe_bgp.node_selector_value

    • Type: string

    • Description:

    • “enabled”

  • labels.bgp_dragent.node_selector_key

    • Type: string

    • Description:

    • “openstack-compute-node”

  • labels.bgp_dragent.node_selector_value

    • Type: string

    • Description:

    • “enabled”

  • labels.ironic_agent.node_selector_key

    • Type: string

    • Description:

    • “openstack-control-plane”

  • labels.ironic_agent.node_selector_value

    • Type: string

    • Description:

    • “enabled”

  • labels.job.node_selector_key

    • Type: string

    • Description:

    • “openstack-control-plane”

  • labels.job.node_selector_value

    • Type: string

    • Description:

    • “enabled”

  • labels.lb.node_selector_key

    • Type: string

    • Description:

    • “linuxbridge”

  • labels.lb.node_selector_value

    • Type: string

    • Description:

    • “enabled”

  • labels.netns_cleanup_cron.node_selector_key

    • Type: string

    • Description:

    • “openstack-control-plane”

  • labels.netns_cleanup_cron.node_selector_value

    • Type: string

    • Description:

    • “enabled”

  • labels.ovs.node_selector_key

    • Type: string

    • Description:

    • “openvswitch”

  • labels.ovs.node_selector_value

    • Type: string

    • Description:

    • “enabled”

  • labels.rpc_server.node_selector_key

    • Type: string

    • Description:

    • “openstack-control-plane”

  • labels.rpc_server.node_selector_value

    • Type: string

    • Description:

    • “enabled”

  • labels.server.node_selector_key

    • Type: string

    • Description:

    • “openstack-control-plane”

  • labels.server.node_selector_value

    • Type: string

    • Description:

    • “enabled”

  • labels.sriov.node_selector_key

    • Type: string

    • Description:

    • “sriov”

  • labels.sriov.node_selector_value

    • Type: string

    • Description:

    • “enabled”

  • labels.test.node_selector_key

    • Type: string

    • Description:

    • “openstack-control-plane”

  • labels.test.node_selector_value

    • Type: string

    • Description:

    • “enabled”

  • manifests.certificates

    • Type: bool

    • Description:

    • false

  • manifests.configmap_bin

    • Type: bool

    • Description:

    • true

  • manifests.configmap_etc

    • Type: bool

    • Description:

    • true

  • manifests.daemonset_bagpipe_bgp

    • Type: bool

    • Description:

    • false

  • manifests.daemonset_bgp_dragent

    • Type: bool

    • Description:

    • false

  • manifests.daemonset_dhcp_agent

    • Type: bool

    • Description:

    • true

  • manifests.daemonset_l2gw_agent

    • Type: bool

    • Description:

    • false

  • manifests.daemonset_l3_agent

    • Type: bool

    • Description:

    • true

  • manifests.daemonset_lb_agent

    • Type: bool

    • Description:

    • true

  • manifests.daemonset_metadata_agent

    • Type: bool

    • Description:

    • true

  • manifests.daemonset_netns_cleanup_cron

    • Type: bool

    • Description:

    • true

  • manifests.daemonset_ovn_metadata_agent

    • Type: bool

    • Description:

    • false

  • manifests.daemonset_ovn_vpn_agent

    • Type: bool

    • Description:

    • false

  • manifests.daemonset_ovs_agent

    • Type: bool

    • Description:

    • true

  • manifests.daemonset_sriov_agent

    • Type: bool

    • Description:

    • true

  • manifests.deployment_ironic_agent

    • Type: bool

    • Description:

    • false

  • manifests.deployment_rpc_server

    • Type: bool

    • Description:

    • true

  • manifests.deployment_server

    • Type: bool

    • Description:

    • true

  • manifests.ingress_server

    • Type: bool

    • Description:

    • true

  • manifests.job_bootstrap

    • Type: bool

    • Description:

    • true

  • manifests.job_db_drop

    • Type: bool

    • Description:

    • false

  • manifests.job_db_init

    • Type: bool

    • Description:

    • true

  • manifests.job_db_sync

    • Type: bool

    • Description:

    • true

  • manifests.job_image_repo_sync

    • Type: bool

    • Description:

    • true

  • manifests.job_ks_endpoints

    • Type: bool

    • Description:

    • true

  • manifests.job_ks_service

    • Type: bool

    • Description:

    • true

  • manifests.job_ks_user

    • Type: bool

    • Description:

    • true

  • manifests.job_rabbit_init

    • Type: bool

    • Description:

    • true

  • manifests.network_policy

    • Type: bool

    • Description:

    • false

  • manifests.pdb_server

    • Type: bool

    • Description:

    • true

  • manifests.pod_rally_test

    • Type: bool

    • Description:

    • true

  • manifests.secret_db

    • Type: bool

    • Description:

    • true

  • manifests.secret_ingress_tls

    • Type: bool

    • Description:

    • true

  • manifests.secret_keystone

    • Type: bool

    • Description:

    • true

  • manifests.secret_rabbitmq

    • Type: bool

    • Description:

    • true

  • manifests.secret_registry

    • Type: bool

    • Description:

    • true

  • manifests.service_ingress_server

    • Type: bool

    • Description:

    • true

  • manifests.service_server

    • Type: bool

    • Description:

    • true

  • network.backend[0]

    • Type: string

    • Description:

    • “openvswitch”

  • network.interface.tunnel

    • Type: string

    • Description:

    • nil

  • network.interface.tunnel_network_cidr

    • Type: string

    • Description:

    • “0/0”

  • network.server.external_policy_local

    • Type: bool

    • Description:

    • false

  • network.server.ingress.annotations.”nginx.ingress.kubernetes.io/rewrite-target”

    • Type: string

    • Description:

    • “/”

  • network.server.ingress.classes.cluster

    • Type: string

    • Description:

    • “nginx-cluster”

  • network.server.ingress.classes.namespace

    • Type: string

    • Description:

    • “nginx”

  • network.server.ingress.public

    • Type: bool

    • Description:

    • true

  • network.server.node_port.enabled

    • Type: bool

    • Description:

    • false

  • network.server.node_port.port

    • Type: int

    • Description:

    • 30096

  • network.share_namespaces

    • Type: bool

    • Description:

    • true

  • network_policy.neutron.egress[0]

    • Type: object

    • Description:

    • {}

  • network_policy.neutron.ingress[0]

    • Type: object

    • Description:

    • {}

  • pod.affinity.anti.topologyKey.default

    • Type: string

    • Description:

    • “kubernetes.io/hostname”

  • pod.affinity.anti.type.default

    • Type: string

    • Description:

    • “preferredDuringSchedulingIgnoredDuringExecution”

  • pod.affinity.anti.weight.default

    • Type: int

    • Description:

    • 10

  • pod.lifecycle.disruption_budget.server.min_available

    • Type: int

    • Description:

    • 0

  • pod.lifecycle.termination_grace_period.ironic_agent.timeout

    • Type: int

    • Description:

    • 30

  • pod.lifecycle.termination_grace_period.rpc_server.timeout

    • Type: int

    • Description:

    • 30

  • pod.lifecycle.termination_grace_period.server.timeout

    • Type: int

    • Description:

    • 30

  • pod.lifecycle.upgrades.daemonsets.dhcp_agent.enabled

    • Type: bool

    • Description:

    • true

  • pod.lifecycle.upgrades.daemonsets.dhcp_agent.max_unavailable

    • Type: int

    • Description:

    • 1

  • pod.lifecycle.upgrades.daemonsets.dhcp_agent.min_ready_seconds

    • Type: int

    • Description:

    • 0

  • pod.lifecycle.upgrades.daemonsets.l3_agent.enabled

    • Type: bool

    • Description:

    • true

  • pod.lifecycle.upgrades.daemonsets.l3_agent.max_unavailable

    • Type: int

    • Description:

    • 1

  • pod.lifecycle.upgrades.daemonsets.l3_agent.min_ready_seconds

    • Type: int

    • Description:

    • 0

  • pod.lifecycle.upgrades.daemonsets.lb_agent.enabled

    • Type: bool

    • Description:

    • true

  • pod.lifecycle.upgrades.daemonsets.lb_agent.max_unavailable

    • Type: int

    • Description:

    • 1

  • pod.lifecycle.upgrades.daemonsets.lb_agent.min_ready_seconds

    • Type: int

    • Description:

    • 0

  • pod.lifecycle.upgrades.daemonsets.metadata_agent.enabled

    • Type: bool

    • Description:

    • true

  • pod.lifecycle.upgrades.daemonsets.metadata_agent.max_unavailable

    • Type: int

    • Description:

    • 1

  • pod.lifecycle.upgrades.daemonsets.metadata_agent.min_ready_seconds

    • Type: int

    • Description:

    • 0

  • pod.lifecycle.upgrades.daemonsets.netns_cleanup_cron.enabled

    • Type: bool

    • Description:

    • true

  • pod.lifecycle.upgrades.daemonsets.netns_cleanup_cron.max_unavailable

    • Type: int

    • Description:

    • 1

  • pod.lifecycle.upgrades.daemonsets.netns_cleanup_cron.min_ready_seconds

    • Type: int

    • Description:

    • 0

  • pod.lifecycle.upgrades.daemonsets.ovn_metadata_agent.enabled

    • Type: bool

    • Description:

    • true

  • pod.lifecycle.upgrades.daemonsets.ovn_metadata_agent.max_unavailable

    • Type: int

    • Description:

    • 1

  • pod.lifecycle.upgrades.daemonsets.ovn_metadata_agent.min_ready_seconds

    • Type: int

    • Description:

    • 0

  • pod.lifecycle.upgrades.daemonsets.ovn_vpn_agent.enabled

    • Type: bool

    • Description:

    • true

  • pod.lifecycle.upgrades.daemonsets.ovn_vpn_agent.max_unavailable

    • Type: int

    • Description:

    • 1

  • pod.lifecycle.upgrades.daemonsets.ovn_vpn_agent.min_ready_seconds

    • Type: int

    • Description:

    • 0

  • pod.lifecycle.upgrades.daemonsets.ovs_agent.enabled

    • Type: bool

    • Description:

    • true

  • pod.lifecycle.upgrades.daemonsets.ovs_agent.max_unavailable

    • Type: int

    • Description:

    • 1

  • pod.lifecycle.upgrades.daemonsets.ovs_agent.min_ready_seconds

    • Type: int

    • Description:

    • 0

  • pod.lifecycle.upgrades.daemonsets.pod_replacement_strategy

    • Type: string

    • Description:

    • “RollingUpdate”

  • pod.lifecycle.upgrades.daemonsets.sriov_agent.enabled

    • Type: bool

    • Description:

    • true

  • pod.lifecycle.upgrades.daemonsets.sriov_agent.max_unavailable

    • Type: int

    • Description:

    • 1

  • pod.lifecycle.upgrades.daemonsets.sriov_agent.min_ready_seconds

    • Type: int

    • Description:

    • 0

  • pod.lifecycle.upgrades.deployments.pod_replacement_strategy

    • Type: string

    • Description:

    • “RollingUpdate”

  • pod.lifecycle.upgrades.deployments.revision_history

    • Type: int

    • Description:

    • 3

  • pod.lifecycle.upgrades.deployments.rolling_update.max_surge

    • Type: int

    • Description:

    • 3

  • pod.lifecycle.upgrades.deployments.rolling_update.max_unavailable

    • Type: int

    • Description:

    • 1

  • pod.mounts.bagpipe_bgp.bagpipe_bgp.volumeMounts

    • Type: string

    • Description:

    • nil

  • pod.mounts.bagpipe_bgp.bagpipe_bgp.volumes

    • Type: string

    • Description:

    • nil

  • pod.mounts.bagpipe_bgp.init_container

    • Type: string

    • Description:

    • nil

  • pod.mounts.bgp_dragent.bgp_dragent.volumeMounts

    • Type: string

    • Description:

    • nil

  • pod.mounts.bgp_dragent.bgp_dragent.volumes

    • Type: string

    • Description:

    • nil

  • pod.mounts.bgp_dragent.init_container

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_bootstrap.init_container

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_bootstrap.neutron_bootstrap.volumeMounts

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_bootstrap.neutron_bootstrap.volumes

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_db_sync.neutron_db_sync.volumeMounts[0].mountPath

    • Type: string

    • Description:

    • “/etc/neutron/plugins/ml2/ml2_conf.ini”

  • pod.mounts.neutron_db_sync.neutron_db_sync.volumeMounts[0].name

    • Type: string

    • Description:

    • “db-sync-conf”

  • pod.mounts.neutron_db_sync.neutron_db_sync.volumeMounts[0].readOnly

    • Type: bool

    • Description:

    • true

  • pod.mounts.neutron_db_sync.neutron_db_sync.volumeMounts[0].subPath

    • Type: string

    • Description:

    • “ml2_conf.ini”

  • pod.mounts.neutron_db_sync.neutron_db_sync.volumes

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_dhcp_agent.init_container

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_dhcp_agent.neutron_dhcp_agent.volumeMounts

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_dhcp_agent.neutron_dhcp_agent.volumes

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_ironic_agent.init_container

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_ironic_agent.neutron_ironic_agent.volumeMounts

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_ironic_agent.neutron_ironic_agent.volumes

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_l2gw_agent.init_container

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_l2gw_agent.neutron_l2gw_agent.volumeMounts

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_l2gw_agent.neutron_l2gw_agent.volumes

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_l3_agent.init_container

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_l3_agent.neutron_l3_agent.volumeMounts

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_l3_agent.neutron_l3_agent.volumes

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_lb_agent.init_container

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_lb_agent.neutron_lb_agent.volumeMounts

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_lb_agent.neutron_lb_agent.volumes

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_metadata_agent.init_container

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_metadata_agent.neutron_metadata_agent.volumeMounts

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_metadata_agent.neutron_metadata_agent.volumes

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_netns_cleanup_cron.init_container

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_netns_cleanup_cron.neutron_netns_cleanup_cron.volumeMounts

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_netns_cleanup_cron.neutron_netns_cleanup_cron.volumes

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_ovn_metadata_agent.init_container

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_ovn_metadata_agent.neutron_ovn_metadata_agent.volumeMounts

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_ovn_metadata_agent.neutron_ovn_metadata_agent.volumes

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_ovs_agent.init_container

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_ovs_agent.neutron_ovs_agent.volumeMounts

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_ovs_agent.neutron_ovs_agent.volumes

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_rpc_server.init_container

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_rpc_server.neutron_rpc_server.volumeMounts

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_rpc_server.neutron_rpc_server.volumes

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_server.init_container

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_server.neutron_server.volumeMounts

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_server.neutron_server.volumes

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_sriov_agent.init_container

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_sriov_agent.neutron_sriov_agent.volumeMounts

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_sriov_agent.neutron_sriov_agent.volumes

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_tests.init_container

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_tests.neutron_tests.volumeMounts

    • Type: string

    • Description:

    • nil

  • pod.mounts.neutron_tests.neutron_tests.volumes

    • Type: string

    • Description:

    • nil

  • pod.mounts.ovn_vpn_agent.init_container

    • Type: string

    • Description:

    • nil

  • pod.mounts.ovn_vpn_agent.ovn_vpn_agent.volumeMounts

    • Type: string

    • Description:

    • nil

  • pod.mounts.ovn_vpn_agent.ovn_vpn_agent.volumes

    • Type: string

    • Description:

    • nil

  • pod.probes.bagpipe_bgp.bagpipe_bgp.liveness.enabled

    • Type: bool

    • Description:

    • true

  • pod.probes.bagpipe_bgp.bagpipe_bgp.liveness.params.initialDelaySeconds

    • Type: int

    • Description:

    • 60

  • pod.probes.bagpipe_bgp.bagpipe_bgp.readiness.enabled

    • Type: bool

    • Description:

    • true

  • pod.probes.bagpipe_bgp.bagpipe_bgp.readiness.params

    • Type: string

    • Description:

    • nil

  • pod.probes.bgp_dragent.bgp_dragent.liveness.enabled

    • Type: bool

    • Description:

    • true

  • pod.probes.bgp_dragent.bgp_dragent.liveness.params.initialDelaySeconds

    • Type: int

    • Description:

    • 60

  • pod.probes.bgp_dragent.bgp_dragent.readiness.enabled

    • Type: bool

    • Description:

    • false

  • pod.probes.bgp_dragent.bgp_dragent.readiness.params

    • Type: string

    • Description:

    • nil

  • pod.probes.dhcp_agent.dhcp_agent.liveness.enabled

    • Type: bool

    • Description:

    • true

  • pod.probes.dhcp_agent.dhcp_agent.liveness.params.initialDelaySeconds

    • Type: int

    • Description:

    • 120

  • pod.probes.dhcp_agent.dhcp_agent.liveness.params.periodSeconds

    • Type: int

    • Description:

    • 600

  • pod.probes.dhcp_agent.dhcp_agent.liveness.params.timeoutSeconds

    • Type: int

    • Description:

    • 580

  • pod.probes.dhcp_agent.dhcp_agent.readiness.enabled

    • Type: bool

    • Description:

    • true

  • pod.probes.dhcp_agent.dhcp_agent.readiness.params.initialDelaySeconds

    • Type: int

    • Description:

    • 30

  • pod.probes.dhcp_agent.dhcp_agent.readiness.params.periodSeconds

    • Type: int

    • Description:

    • 190

  • pod.probes.dhcp_agent.dhcp_agent.readiness.params.timeoutSeconds

    • Type: int

    • Description:

    • 185

  • pod.probes.l2gw_agent.l2gw_agent.liveness.enabled

    • Type: bool

    • Description:

    • true

  • pod.probes.l2gw_agent.l2gw_agent.liveness.params.initialDelaySeconds

    • Type: int

    • Description:

    • 120

  • pod.probes.l2gw_agent.l2gw_agent.liveness.params.periodSeconds

    • Type: int

    • Description:

    • 90

  • pod.probes.l2gw_agent.l2gw_agent.liveness.params.timeoutSeconds

    • Type: int

    • Description:

    • 70

  • pod.probes.l2gw_agent.l2gw_agent.readiness.enabled

    • Type: bool

    • Description:

    • true

  • pod.probes.l2gw_agent.l2gw_agent.readiness.params.initialDelaySeconds

    • Type: int

    • Description:

    • 30

  • pod.probes.l2gw_agent.l2gw_agent.readiness.params.periodSeconds

    • Type: int

    • Description:

    • 15

  • pod.probes.l2gw_agent.l2gw_agent.readiness.params.timeoutSeconds

    • Type: int

    • Description:

    • 65

  • pod.probes.l3_agent.l3_agent.liveness.enabled

    • Type: bool

    • Description:

    • true

  • pod.probes.l3_agent.l3_agent.liveness.params.initialDelaySeconds

    • Type: int

    • Description:

    • 120

  • pod.probes.l3_agent.l3_agent.liveness.params.periodSeconds

    • Type: int

    • Description:

    • 600

  • pod.probes.l3_agent.l3_agent.liveness.params.timeoutSeconds

    • Type: int

    • Description:

    • 580

  • pod.probes.l3_agent.l3_agent.readiness.enabled

    • Type: bool

    • Description:

    • true

  • pod.probes.l3_agent.l3_agent.readiness.params.initialDelaySeconds

    • Type: int

    • Description:

    • 30

  • pod.probes.l3_agent.l3_agent.readiness.params.periodSeconds

    • Type: int

    • Description:

    • 190

  • pod.probes.l3_agent.l3_agent.readiness.params.timeoutSeconds

    • Type: int

    • Description:

    • 185

  • pod.probes.lb_agent.lb_agent.readiness.enabled

    • Type: bool

    • Description:

    • true

  • pod.probes.metadata_agent.metadata_agent.liveness.enabled

    • Type: bool

    • Description:

    • true

  • pod.probes.metadata_agent.metadata_agent.liveness.params.initialDelaySeconds

    • Type: int

    • Description:

    • 120

  • pod.probes.metadata_agent.metadata_agent.liveness.params.periodSeconds

    • Type: int

    • Description:

    • 600

  • pod.probes.metadata_agent.metadata_agent.liveness.params.timeoutSeconds

    • Type: int

    • Description:

    • 580

  • pod.probes.metadata_agent.metadata_agent.readiness.enabled

    • Type: bool

    • Description:

    • true

  • pod.probes.metadata_agent.metadata_agent.readiness.params.initialDelaySeconds

    • Type: int

    • Description:

    • 30

  • pod.probes.metadata_agent.metadata_agent.readiness.params.periodSeconds

    • Type: int

    • Description:

    • 190

  • pod.probes.metadata_agent.metadata_agent.readiness.params.timeoutSeconds

    • Type: int

    • Description:

    • 185

  • pod.probes.ovn_metadata_agent.ovn_metadata_agent.liveness.enabled

    • Type: bool

    • Description:

    • true

  • pod.probes.ovn_metadata_agent.ovn_metadata_agent.liveness.params.initialDelaySeconds

    • Type: int

    • Description:

    • 120

  • pod.probes.ovn_metadata_agent.ovn_metadata_agent.liveness.params.periodSeconds

    • Type: int

    • Description:

    • 600

  • pod.probes.ovn_metadata_agent.ovn_metadata_agent.liveness.params.timeoutSeconds

    • Type: int

    • Description:

    • 580

  • pod.probes.ovn_metadata_agent.ovn_metadata_agent.readiness.enabled

    • Type: bool

    • Description:

    • true

  • pod.probes.ovn_metadata_agent.ovn_metadata_agent.readiness.params.initialDelaySeconds

    • Type: int

    • Description:

    • 30

  • pod.probes.ovn_metadata_agent.ovn_metadata_agent.readiness.params.periodSeconds

    • Type: int

    • Description:

    • 190

  • pod.probes.ovn_metadata_agent.ovn_metadata_agent.readiness.params.timeoutSeconds

    • Type: int

    • Description:

    • 185

  • pod.probes.ovn_vpn_agent.ovn_vpn_agent.liveness.enabled

    • Type: bool

    • Description:

    • true

  • pod.probes.ovn_vpn_agent.ovn_vpn_agent.liveness.params.initialDelaySeconds

    • Type: int

    • Description:

    • 120

  • pod.probes.ovn_vpn_agent.ovn_vpn_agent.liveness.params.periodSeconds

    • Type: int

    • Description:

    • 600

  • pod.probes.ovn_vpn_agent.ovn_vpn_agent.liveness.params.timeoutSeconds

    • Type: int

    • Description:

    • 580

  • pod.probes.ovn_vpn_agent.ovn_vpn_agent.readiness.enabled

    • Type: bool

    • Description:

    • true

  • pod.probes.ovn_vpn_agent.ovn_vpn_agent.readiness.params.initialDelaySeconds

    • Type: int

    • Description:

    • 30

  • pod.probes.ovn_vpn_agent.ovn_vpn_agent.readiness.params.periodSeconds

    • Type: int

    • Description:

    • 190

  • pod.probes.ovn_vpn_agent.ovn_vpn_agent.readiness.params.timeoutSeconds

    • Type: int

    • Description:

    • 185

  • pod.probes.ovs_agent.ovs_agent.liveness.enabled

    • Type: bool

    • Description:

    • true

  • pod.probes.ovs_agent.ovs_agent.liveness.params.initialDelaySeconds

    • Type: int

    • Description:

    • 120

  • pod.probes.ovs_agent.ovs_agent.liveness.params.periodSeconds

    • Type: int

    • Description:

    • 600

  • pod.probes.ovs_agent.ovs_agent.liveness.params.timeoutSeconds

    • Type: int

    • Description:

    • 580

  • pod.probes.ovs_agent.ovs_agent.readiness.enabled

    • Type: bool

    • Description:

    • true

  • pod.probes.ovs_agent.ovs_agent.readiness.params.timeoutSeconds

    • Type: int

    • Description:

    • 10

  • pod.probes.rpc_retries

    • Type: int

    • Description:

    • 2

  • pod.probes.rpc_server.rpc_server.liveness.enabled

    • Type: bool

    • Description:

    • true

  • pod.probes.rpc_server.rpc_server.liveness.params.initialDelaySeconds

    • Type: int

    • Description:

    • 60

  • pod.probes.rpc_server.rpc_server.liveness.params.periodSeconds

    • Type: int

    • Description:

    • 15

  • pod.probes.rpc_server.rpc_server.liveness.params.timeoutSeconds

    • Type: int

    • Description:

    • 10

  • pod.probes.rpc_server.rpc_server.readiness.enabled

    • Type: bool

    • Description:

    • true

  • pod.probes.rpc_server.rpc_server.readiness.params.periodSeconds

    • Type: int

    • Description:

    • 15

  • pod.probes.rpc_server.rpc_server.readiness.params.timeoutSeconds

    • Type: int

    • Description:

    • 10

  • pod.probes.rpc_timeout

    • Type: int

    • Description:

    • 60

  • pod.probes.server.server.liveness.enabled

    • Type: bool

    • Description:

    • true

  • pod.probes.server.server.liveness.params.initialDelaySeconds

    • Type: int

    • Description:

    • 60

  • pod.probes.server.server.liveness.params.periodSeconds

    • Type: int

    • Description:

    • 15

  • pod.probes.server.server.liveness.params.timeoutSeconds

    • Type: int

    • Description:

    • 10

  • pod.probes.server.server.readiness.enabled

    • Type: bool

    • Description:

    • true

  • pod.probes.server.server.readiness.params.periodSeconds

    • Type: int

    • Description:

    • 15

  • pod.probes.server.server.readiness.params.timeoutSeconds

    • Type: int

    • Description:

    • 10

  • pod.probes.sriov_agent.sriov_agent.readiness.enabled

    • Type: bool

    • Description:

    • true

  • pod.probes.sriov_agent.sriov_agent.readiness.params.initialDelaySeconds

    • Type: int

    • Description:

    • 30

  • pod.probes.sriov_agent.sriov_agent.readiness.params.periodSeconds

    • Type: int

    • Description:

    • 190

  • pod.probes.sriov_agent.sriov_agent.readiness.params.timeoutSeconds

    • Type: int

    • Description:

    • 185

  • pod.replicas.ironic_agent

    • Type: int

    • Description:

    • 1

  • pod.replicas.rpc_server

    • Type: int

    • Description:

    • 1

  • pod.replicas.server

    • Type: int

    • Description:

    • 1

  • pod.resources.agent.bagpipe_bgp.limits.cpu

    • Type: string

    • Description:

    • “2000m”

  • pod.resources.agent.bagpipe_bgp.limits.memory

    • Type: string

    • Description:

    • “1024Mi”

  • pod.resources.agent.bagpipe_bgp.requests.cpu

    • Type: string

    • Description:

    • “100m”

  • pod.resources.agent.bagpipe_bgp.requests.memory

    • Type: string

    • Description:

    • “128Mi”

  • pod.resources.agent.bgp_dragent.limits.cpu

    • Type: string

    • Description:

    • “2000m”

  • pod.resources.agent.bgp_dragent.limits.memory

    • Type: string

    • Description:

    • “1024Mi”

  • pod.resources.agent.bgp_dragent.requests.cpu

    • Type: string

    • Description:

    • “100m”

  • pod.resources.agent.bgp_dragent.requests.memory

    • Type: string

    • Description:

    • “128Mi”

  • pod.resources.agent.dhcp.limits.cpu

    • Type: string

    • Description:

    • “2000m”

  • pod.resources.agent.dhcp.limits.memory

    • Type: string

    • Description:

    • “1024Mi”

  • pod.resources.agent.dhcp.requests.cpu

    • Type: string

    • Description:

    • “100m”

  • pod.resources.agent.dhcp.requests.memory

    • Type: string

    • Description:

    • “128Mi”

  • pod.resources.agent.l2gw.limits.cpu

    • Type: string

    • Description:

    • “2000m”

  • pod.resources.agent.l2gw.limits.memory

    • Type: string

    • Description:

    • “1024Mi”

  • pod.resources.agent.l2gw.requests.cpu

    • Type: string

    • Description:

    • “100m”

  • pod.resources.agent.l2gw.requests.memory

    • Type: string

    • Description:

    • “128Mi”

  • pod.resources.agent.l3.limits.cpu

    • Type: string

    • Description:

    • “2000m”

  • pod.resources.agent.l3.limits.memory

    • Type: string

    • Description:

    • “1024Mi”

  • pod.resources.agent.l3.requests.cpu

    • Type: string

    • Description:

    • “100m”

  • pod.resources.agent.l3.requests.memory

    • Type: string

    • Description:

    • “128Mi”

  • pod.resources.agent.lb.limits.cpu

    • Type: string

    • Description:

    • “2000m”

  • pod.resources.agent.lb.limits.memory

    • Type: string

    • Description:

    • “1024Mi”

  • pod.resources.agent.lb.requests.cpu

    • Type: string

    • Description:

    • “100m”

  • pod.resources.agent.lb.requests.memory

    • Type: string

    • Description:

    • “128Mi”

  • pod.resources.agent.metadata.limits.cpu

    • Type: string

    • Description:

    • “2000m”

  • pod.resources.agent.metadata.limits.memory

    • Type: string

    • Description:

    • “1024Mi”

  • pod.resources.agent.metadata.requests.cpu

    • Type: string

    • Description:

    • “100m”

  • pod.resources.agent.metadata.requests.memory

    • Type: string

    • Description:

    • “128Mi”

  • pod.resources.agent.ovn_metadata.limits.cpu

    • Type: string

    • Description:

    • “2000m”

  • pod.resources.agent.ovn_metadata.limits.memory

    • Type: string

    • Description:

    • “1024Mi”

  • pod.resources.agent.ovn_metadata.requests.cpu

    • Type: string

    • Description:

    • “100m”

  • pod.resources.agent.ovn_metadata.requests.memory

    • Type: string

    • Description:

    • “128Mi”

  • pod.resources.agent.ovn_vpn.limits.cpu

    • Type: string

    • Description:

    • “2000m”

  • pod.resources.agent.ovn_vpn.limits.memory

    • Type: string

    • Description:

    • “1024Mi”

  • pod.resources.agent.ovn_vpn.requests.cpu

    • Type: string

    • Description:

    • “100m”

  • pod.resources.agent.ovn_vpn.requests.memory

    • Type: string

    • Description:

    • “128Mi”

  • pod.resources.agent.ovs.limits.cpu

    • Type: string

    • Description:

    • “2000m”

  • pod.resources.agent.ovs.limits.memory

    • Type: string

    • Description:

    • “1024Mi”

  • pod.resources.agent.ovs.requests.cpu

    • Type: string

    • Description:

    • “100m”

  • pod.resources.agent.ovs.requests.memory

    • Type: string

    • Description:

    • “128Mi”

  • pod.resources.agent.sriov.limits.cpu

    • Type: string

    • Description:

    • “2000m”

  • pod.resources.agent.sriov.limits.memory

    • Type: string

    • Description:

    • “1024Mi”

  • pod.resources.agent.sriov.requests.cpu

    • Type: string

    • Description:

    • “100m”

  • pod.resources.agent.sriov.requests.memory

    • Type: string

    • Description:

    • “128Mi”

  • pod.resources.enabled

    • Type: bool

    • Description:

    • false

  • pod.resources.ironic_agent.limits.cpu

    • Type: string

    • Description:

    • “2000m”

  • pod.resources.ironic_agent.limits.memory

    • Type: string

    • Description:

    • “1024Mi”

  • pod.resources.ironic_agent.requests.cpu

    • Type: string

    • Description:

    • “100m”

  • pod.resources.ironic_agent.requests.memory

    • Type: string

    • Description:

    • “128Mi”

  • pod.resources.jobs.bootstrap.limits.cpu

    • Type: string

    • Description:

    • “2000m”

  • pod.resources.jobs.bootstrap.limits.memory

    • Type: string

    • Description:

    • “1024Mi”

  • pod.resources.jobs.bootstrap.requests.cpu

    • Type: string

    • Description:

    • “100m”

  • pod.resources.jobs.bootstrap.requests.memory

    • Type: string

    • Description:

    • “128Mi”

  • pod.resources.jobs.db_drop.limits.cpu

    • Type: string

    • Description:

    • “2000m”

  • pod.resources.jobs.db_drop.limits.memory

    • Type: string

    • Description:

    • “1024Mi”

  • pod.resources.jobs.db_drop.requests.cpu

    • Type: string

    • Description:

    • “100m”

  • pod.resources.jobs.db_drop.requests.memory

    • Type: string

    • Description:

    • “128Mi”

  • pod.resources.jobs.db_init.limits.cpu

    • Type: string

    • Description:

    • “2000m”

  • pod.resources.jobs.db_init.limits.memory

    • Type: string

    • Description:

    • “1024Mi”

  • pod.resources.jobs.db_init.requests.cpu

    • Type: string

    • Description:

    • “100m”

  • pod.resources.jobs.db_init.requests.memory

    • Type: string

    • Description:

    • “128Mi”

  • pod.resources.jobs.db_sync.limits.cpu

    • Type: string

    • Description:

    • “2000m”

  • pod.resources.jobs.db_sync.limits.memory

    • Type: string

    • Description:

    • “1024Mi”

  • pod.resources.jobs.db_sync.requests.cpu

    • Type: string

    • Description:

    • “100m”

  • pod.resources.jobs.db_sync.requests.memory

    • Type: string

    • Description:

    • “128Mi”

  • pod.resources.jobs.image_repo_sync.limits.cpu

    • Type: string

    • Description:

    • “2000m”

  • pod.resources.jobs.image_repo_sync.limits.memory

    • Type: string

    • Description:

    • “1024Mi”

  • pod.resources.jobs.image_repo_sync.requests.cpu

    • Type: string

    • Description:

    • “100m”

  • pod.resources.jobs.image_repo_sync.requests.memory

    • Type: string

    • Description:

    • “128Mi”

  • pod.resources.jobs.ks_endpoints.limits.cpu

    • Type: string

    • Description:

    • “2000m”

  • pod.resources.jobs.ks_endpoints.limits.memory

    • Type: string

    • Description:

    • “1024Mi”

  • pod.resources.jobs.ks_endpoints.requests.cpu

    • Type: string

    • Description:

    • “100m”

  • pod.resources.jobs.ks_endpoints.requests.memory

    • Type: string

    • Description:

    • “128Mi”

  • pod.resources.jobs.ks_service.limits.cpu

    • Type: string

    • Description:

    • “2000m”

  • pod.resources.jobs.ks_service.limits.memory

    • Type: string

    • Description:

    • “1024Mi”

  • pod.resources.jobs.ks_service.requests.cpu

    • Type: string

    • Description:

    • “100m”

  • pod.resources.jobs.ks_service.requests.memory

    • Type: string

    • Description:

    • “128Mi”

  • pod.resources.jobs.ks_user.limits.cpu

    • Type: string

    • Description:

    • “2000m”

  • pod.resources.jobs.ks_user.limits.memory

    • Type: string

    • Description:

    • “1024Mi”

  • pod.resources.jobs.ks_user.requests.cpu

    • Type: string

    • Description:

    • “100m”

  • pod.resources.jobs.ks_user.requests.memory

    • Type: string

    • Description:

    • “128Mi”

  • pod.resources.jobs.rabbit_init.limits.cpu

    • Type: string

    • Description:

    • “2000m”

  • pod.resources.jobs.rabbit_init.limits.memory

    • Type: string

    • Description:

    • “1024Mi”

  • pod.resources.jobs.rabbit_init.requests.cpu

    • Type: string

    • Description:

    • “100m”

  • pod.resources.jobs.rabbit_init.requests.memory

    • Type: string

    • Description:

    • “128Mi”

  • pod.resources.jobs.tests.limits.cpu

    • Type: string

    • Description:

    • “2000m”

  • pod.resources.jobs.tests.limits.memory

    • Type: string

    • Description:

    • “1024Mi”

  • pod.resources.jobs.tests.requests.cpu

    • Type: string

    • Description:

    • “100m”

  • pod.resources.jobs.tests.requests.memory

    • Type: string

    • Description:

    • “128Mi”

  • pod.resources.netns_cleanup_cron.limits.cpu

    • Type: string

    • Description:

    • “2000m”

  • pod.resources.netns_cleanup_cron.limits.memory

    • Type: string

    • Description:

    • “1024Mi”

  • pod.resources.netns_cleanup_cron.requests.cpu

    • Type: string

    • Description:

    • “100m”

  • pod.resources.netns_cleanup_cron.requests.memory

    • Type: string

    • Description:

    • “128Mi”

  • pod.resources.server.limits.cpu

    • Type: string

    • Description:

    • “2000m”

  • pod.resources.server.limits.memory

    • Type: string

    • Description:

    • “1024Mi”

  • pod.resources.server.requests.cpu

    • Type: string

    • Description:

    • “100m”

  • pod.resources.server.requests.memory

    • Type: string

    • Description:

    • “128Mi”

  • pod.security_context.neutron_bagpipe_bgp.container.neutron_bagpipe_bgp.privileged

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_bagpipe_bgp.container.neutron_bagpipe_bgp.readOnlyRootFilesystem

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_bagpipe_bgp.pod.runAsUser

    • Type: int

    • Description:

    • 42424

  • pod.security_context.neutron_bgp_dragent.container.neutron_bgp_dragent.privileged

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_bgp_dragent.container.neutron_bgp_dragent.readOnlyRootFilesystem

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_bgp_dragent.pod.runAsUser

    • Type: int

    • Description:

    • 42424

  • pod.security_context.neutron_dhcp_agent.container.neutron_dhcp_agent.privileged

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_dhcp_agent.container.neutron_dhcp_agent.readOnlyRootFilesystem

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_dhcp_agent.pod.runAsUser

    • Type: int

    • Description:

    • 42424

  • pod.security_context.neutron_ironic_agent.container.neutron_ironic_agent.allowPrivilegeEscalation

    • Type: bool

    • Description:

    • false

  • pod.security_context.neutron_ironic_agent.container.neutron_ironic_agent.readOnlyRootFilesystem

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_ironic_agent.pod.runAsUser

    • Type: int

    • Description:

    • 42424

  • pod.security_context.neutron_l2gw_agent.container.neutron_l2gw_agent.privileged

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_l2gw_agent.container.neutron_l2gw_agent.readOnlyRootFilesystem

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_l2gw_agent.pod.runAsUser

    • Type: int

    • Description:

    • 42424

  • pod.security_context.neutron_l3_agent.container.neutron_l3_agent.privileged

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_l3_agent.container.neutron_l3_agent.readOnlyRootFilesystem

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_l3_agent.pod.runAsUser

    • Type: int

    • Description:

    • 42424

  • pod.security_context.neutron_lb_agent.container.neutron_lb_agent.privileged

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_lb_agent.container.neutron_lb_agent.readOnlyRootFilesystem

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_lb_agent.container.neutron_lb_agent_init.privileged

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_lb_agent.container.neutron_lb_agent_init.readOnlyRootFilesystem

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_lb_agent.container.neutron_lb_agent_init.runAsUser

    • Type: int

    • Description:

    • 0

  • pod.security_context.neutron_lb_agent.container.neutron_lb_agent_kernel_modules.capabilities.add[0]

    • Type: string

    • Description:

    • “SYS_MODULE”

  • pod.security_context.neutron_lb_agent.container.neutron_lb_agent_kernel_modules.capabilities.add[1]

    • Type: string

    • Description:

    • “SYS_CHROOT”

  • pod.security_context.neutron_lb_agent.container.neutron_lb_agent_kernel_modules.readOnlyRootFilesystem

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_lb_agent.container.neutron_lb_agent_kernel_modules.runAsUser

    • Type: int

    • Description:

    • 0

  • pod.security_context.neutron_lb_agent.pod.runAsUser

    • Type: int

    • Description:

    • 42424

  • pod.security_context.neutron_metadata_agent.container.neutron_metadata_agent_init.readOnlyRootFilesystem

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_metadata_agent.container.neutron_metadata_agent_init.runAsUser

    • Type: int

    • Description:

    • 0

  • pod.security_context.neutron_metadata_agent.pod.runAsUser

    • Type: int

    • Description:

    • 42424

  • pod.security_context.neutron_netns_cleanup_cron.container.neutron_netns_cleanup_cron.privileged

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_netns_cleanup_cron.container.neutron_netns_cleanup_cron.readOnlyRootFilesystem

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_netns_cleanup_cron.pod.runAsUser

    • Type: int

    • Description:

    • 42424

  • pod.security_context.neutron_ovn_metadata_agent.container.neutron_ovn_metadata_agent_init.readOnlyRootFilesystem

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_ovn_metadata_agent.container.neutron_ovn_metadata_agent_init.runAsUser

    • Type: int

    • Description:

    • 0

  • pod.security_context.neutron_ovn_metadata_agent.pod.runAsUser

    • Type: int

    • Description:

    • 42424

  • pod.security_context.neutron_ovs_agent.container.netoffload.privileged

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_ovs_agent.container.netoffload.readOnlyRootFilesystem

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_ovs_agent.container.netoffload.runAsUser

    • Type: int

    • Description:

    • 0

  • pod.security_context.neutron_ovs_agent.container.neutron_openvswitch_agent_kernel_modules.capabilities.add[0]

    • Type: string

    • Description:

    • “SYS_MODULE”

  • pod.security_context.neutron_ovs_agent.container.neutron_openvswitch_agent_kernel_modules.capabilities.add[1]

    • Type: string

    • Description:

    • “SYS_CHROOT”

  • pod.security_context.neutron_ovs_agent.container.neutron_openvswitch_agent_kernel_modules.readOnlyRootFilesystem

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_ovs_agent.container.neutron_openvswitch_agent_kernel_modules.runAsUser

    • Type: int

    • Description:

    • 0

  • pod.security_context.neutron_ovs_agent.container.neutron_ovs_agent.privileged

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_ovs_agent.container.neutron_ovs_agent.readOnlyRootFilesystem

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_ovs_agent.container.neutron_ovs_agent_init.privileged

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_ovs_agent.container.neutron_ovs_agent_init.readOnlyRootFilesystem

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_ovs_agent.container.neutron_ovs_agent_init.runAsUser

    • Type: int

    • Description:

    • 0

  • pod.security_context.neutron_ovs_agent.pod.runAsUser

    • Type: int

    • Description:

    • 42424

  • pod.security_context.neutron_rpc_server.container.neutron_rpc_server.allowPrivilegeEscalation

    • Type: bool

    • Description:

    • false

  • pod.security_context.neutron_rpc_server.container.neutron_rpc_server.readOnlyRootFilesystem

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_rpc_server.pod.runAsUser

    • Type: int

    • Description:

    • 42424

  • pod.security_context.neutron_server.container.neutron_server.allowPrivilegeEscalation

    • Type: bool

    • Description:

    • false

  • pod.security_context.neutron_server.container.neutron_server.readOnlyRootFilesystem

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_server.container.nginx.readOnlyRootFilesystem

    • Type: bool

    • Description:

    • false

  • pod.security_context.neutron_server.container.nginx.runAsUser

    • Type: int

    • Description:

    • 0

  • pod.security_context.neutron_server.pod.runAsUser

    • Type: int

    • Description:

    • 42424

  • pod.security_context.neutron_sriov_agent.container.neutron_sriov_agent.privileged

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_sriov_agent.container.neutron_sriov_agent.readOnlyRootFilesystem

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_sriov_agent.container.neutron_sriov_agent_init.privileged

    • Type: bool

    • Description:

    • true

  • pod.security_context.neutron_sriov_agent.container.neutron_sriov_agent_init.readOnlyRootFilesystem

    • Type: bool

    • Description:

    • false

  • pod.security_context.neutron_sriov_agent.container.neutron_sriov_agent_init.runAsUser

    • Type: int

    • Description:

    • 0

  • pod.security_context.neutron_sriov_agent.pod.runAsUser

    • Type: int

    • Description:

    • 42424

  • pod.security_context.ovn_vpn_agent.container.ovn_vpn_agent_init.readOnlyRootFilesystem

    • Type: bool

    • Description:

    • true

  • pod.security_context.ovn_vpn_agent.container.ovn_vpn_agent_init.runAsUser

    • Type: int

    • Description:

    • 0

  • pod.security_context.ovn_vpn_agent.pod.runAsUser

    • Type: int

    • Description:

    • 42424

  • pod.tolerations.neutron.enabled

    • Type: bool

    • Description:

    • false

  • pod.tolerations.neutron.tolerations[0].effect

    • Type: string

    • Description:

    • “NoSchedule”

  • pod.tolerations.neutron.tolerations[0].key

    • Type: string

    • Description:

    • “node-role.kubernetes.io/master”

  • pod.tolerations.neutron.tolerations[0].operator

    • Type: string

    • Description:

    • “Exists”

  • pod.tolerations.neutron.tolerations[1].effect

    • Type: string

    • Description:

    • “NoSchedule”

  • pod.tolerations.neutron.tolerations[1].key

    • Type: string

    • Description:

    • “node-role.kubernetes.io/control-plane”

  • pod.tolerations.neutron.tolerations[1].operator

    • Type: string

    • Description:

    • “Exists”

  • pod.use_fqdn.neutron_agent

    • Type: bool

    • Description:

    • true

  • release_group

    • Type: string

    • Description:

    • nil

  • secrets.identity.admin

    • Type: string

    • Description:

    • “neutron-keystone-admin”

  • secrets.identity.neutron

    • Type: string

    • Description:

    • “neutron-keystone-user”

  • secrets.identity.test

    • Type: string

    • Description:

    • “neutron-keystone-test”

  • secrets.oci_image_registry.neutron

    • Type: string

    • Description:

    • “neutron-oci-image-registry”

  • secrets.oslo_db.admin

    • Type: string

    • Description:

    • “neutron-db-admin”

  • secrets.oslo_db.neutron

    • Type: string

    • Description:

    • “neutron-db-user”

  • secrets.oslo_messaging.admin

    • Type: string

    • Description:

    • “neutron-rabbitmq-admin”

  • secrets.oslo_messaging.neutron

    • Type: string

    • Description:

    • “neutron-rabbitmq-user”

  • secrets.tls.compute_metadata.metadata.internal

    • Type: string

    • Description:

    • “metadata-tls-metadata”

  • secrets.tls.network.server.internal

    • Type: string

    • Description:

    • “neutron-tls-server”

  • secrets.tls.network.server.public

    • Type: string

    • Description:

    • “neutron-tls-public”

  • tls.identity

    • Type: bool

    • Description:

    • false

  • tls.oslo_db

    • Type: bool

    • Description:

    • false

  • tls.oslo_messaging

    • Type: bool

    • Description:

    • false