2019-08-27 23:07:54,429 [salt.utils       :831 ][ERROR   ][1642] DNS lookup or connection check of 'salt' failed.
2019-08-27 23:07:54,429 [salt.minion      :152 ][ERROR   ][1642] Master hostname: 'salt' not found or not responsive. Retrying in 30 seconds
2019-08-27 23:07:57,060 [salt.utils.parsers:1051][WARNING ][1642] Minion received a SIGTERM. Exiting.
2019-08-27 23:09:05,822 [salt.utils.decorators:613 ][WARNING ][2210] The function "module.run" is using its deprecated version and will expire in version "Sodium".
2019-08-27 23:09:48,638 [salt.loaded.int.states.file:2298][WARNING ][2210] State for file: /boot/grub/grub.cfg - Neither 'source' nor 'contents' nor 'contents_pillar' nor 'contents_grains' was defined, yet 'replace' was set to 'True'. As there is no source to replace the file with, 'replace' has been set to 'False' to avoid reading the file unnecessarily.
2019-08-27 23:09:59,693 [salt.utils.decorators:613 ][WARNING ][2210] The function "module.run" is using its deprecated version and will expire in version "Sodium".
2019-08-27 23:09:59,834 [salt.loaded.int.states.file:2298][WARNING ][2210] State for file: /etc/shadow - Neither 'source' nor 'contents' nor 'contents_pillar' nor 'contents_grains' was defined, yet 'replace' was set to 'True'. As there is no source to replace the file with, 'replace' has been set to 'False' to avoid reading the file unnecessarily.
2019-08-27 23:09:59,836 [salt.loaded.int.states.file:2298][WARNING ][2210] State for file: /etc/gshadow - Neither 'source' nor 'contents' nor 'contents_pillar' nor 'contents_grains' was defined, yet 'replace' was set to 'True'. As there is no source to replace the file with, 'replace' has been set to 'False' to avoid reading the file unnecessarily.
2019-08-27 23:09:59,838 [salt.loaded.int.states.file:2298][WARNING ][2210] State for file: /etc/group- - Neither 'source' nor 'contents' nor 'contents_pillar' nor 'contents_grains' was defined, yet 'replace' was set to 'True'. As there is no source to replace the file with, 'replace' has been set to 'False' to avoid reading the file unnecessarily.
2019-08-27 23:09:59,840 [salt.loaded.int.states.file:2298][WARNING ][2210] State for file: /etc/group - Neither 'source' nor 'contents' nor 'contents_pillar' nor 'contents_grains' was defined, yet 'replace' was set to 'True'. As there is no source to replace the file with, 'replace' has been set to 'False' to avoid reading the file unnecessarily.
2019-08-27 23:09:59,841 [salt.loaded.int.states.file:2298][WARNING ][2210] State for file: /etc/passwd- - Neither 'source' nor 'contents' nor 'contents_pillar' nor 'contents_grains' was defined, yet 'replace' was set to 'True'. As there is no source to replace the file with, 'replace' has been set to 'False' to avoid reading the file unnecessarily.
2019-08-27 23:09:59,843 [salt.loaded.int.states.file:2298][WARNING ][2210] State for file: /etc/passwd - Neither 'source' nor 'contents' nor 'contents_pillar' nor 'contents_grains' was defined, yet 'replace' was set to 'True'. As there is no source to replace the file with, 'replace' has been set to 'False' to avoid reading the file unnecessarily.
2019-08-27 23:09:59,845 [salt.loaded.int.states.file:2298][WARNING ][2210] State for file: /etc/gshadow- - Neither 'source' nor 'contents' nor 'contents_pillar' nor 'contents_grains' was defined, yet 'replace' was set to 'True'. As there is no source to replace the file with, 'replace' has been set to 'False' to avoid reading the file unnecessarily.
2019-08-27 23:09:59,846 [salt.loaded.int.states.file:2298][WARNING ][2210] State for file: /etc/shadow- - Neither 'source' nor 'contents' nor 'contents_pillar' nor 'contents_grains' was defined, yet 'replace' was set to 'True'. As there is no source to replace the file with, 'replace' has been set to 'False' to avoid reading the file unnecessarily.
2019-08-27 23:10:09,748 [salt.loaded.int.module.cmdmod:730 ][ERROR   ][2210] Command '['ovs-vsctl', 'br-exists', 'br-floating']' failed with return code: 2
2019-08-27 23:10:09,749 [salt.loaded.int.module.cmdmod:736 ][ERROR   ][2210] retcode: 2
2019-08-27 23:10:17,970 [salt.loaded.int.module.cmdmod:730 ][ERROR   ][2210] Command '['pvdisplay', '-c', '/dev/vdb']' failed with return code: 5
2019-08-27 23:10:17,971 [salt.loaded.int.module.cmdmod:734 ][ERROR   ][2210] stderr:   Failed to find physical volume "/dev/vdb".
2019-08-27 23:10:17,971 [salt.loaded.int.module.cmdmod:736 ][ERROR   ][2210] retcode: 5
2019-08-27 23:10:18,002 [salt.loaded.int.module.cmdmod:730 ][ERROR   ][2210] Command '['pvdisplay', '-c', '/dev/vdb']' failed with return code: 5
2019-08-27 23:10:18,003 [salt.loaded.int.module.cmdmod:734 ][ERROR   ][2210] stderr:   Failed to find physical volume "/dev/vdb".
2019-08-27 23:10:18,004 [salt.loaded.int.module.cmdmod:736 ][ERROR   ][2210] retcode: 5
2019-08-27 23:10:18,127 [salt.loaded.int.module.cmdmod:730 ][ERROR   ][2210] Command '['vgdisplay', '-c', 'vgroot']' failed with return code: 5
2019-08-27 23:10:18,127 [salt.loaded.int.module.cmdmod:734 ][ERROR   ][2210] stderr:   Volume group "vgroot" not found
  Cannot process volume group vgroot
2019-08-27 23:10:18,128 [salt.loaded.int.module.cmdmod:736 ][ERROR   ][2210] retcode: 5
2019-08-27 23:10:18,379 [salt.loaded.int.module.cmdmod:730 ][ERROR   ][2210] Command '['umount', '/dev/shm']' failed with return code: 32
2019-08-27 23:10:18,380 [salt.loaded.int.module.cmdmod:734 ][ERROR   ][2210] stderr: umount: /dev/shm: target is busy.
2019-08-27 23:10:18,380 [salt.loaded.int.module.cmdmod:736 ][ERROR   ][2210] retcode: 32
2019-08-27 23:10:31,125 [salt.utils.parsers:1051][WARNING ][1998] Minion received a SIGTERM. Exiting.
2019-08-27 23:11:44,600 [salt.utils.decorators:613 ][WARNING ][3244] The function "module.run" is using its deprecated version and will expire in version "Sodium".
2019-08-27 23:11:56,796 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4854] Executing command ['systemctl', 'status', 'salt-minion.service', '-n', '0'] in directory '/root'
2019-08-27 23:11:56,828 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4854] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'salt-minion.service'] in directory '/root'
2019-08-27 23:11:56,853 [salt.utils.parsers:1051][WARNING ][3105] Minion received a SIGTERM. Exiting.
2019-08-27 23:11:57,758 [salt.cli.daemons :293 ][INFO    ][4909] Setting up the Salt Minion "cmp001.mcp-ovn-noha.local"
2019-08-27 23:11:57,904 [salt.cli.daemons :82  ][INFO    ][4909] Starting up the Salt Minion
2019-08-27 23:11:57,905 [salt.utils.event :1017][INFO    ][4909] Starting pull socket on /var/run/salt/minion/minion_event_44671ad1de_pull.ipc
2019-08-27 23:11:58,695 [salt.minion      :976 ][INFO    ][4909] Creating minion process manager
2019-08-27 23:12:00,021 [salt.loader.192.168.11.2.int.module.cmdmod:395 ][INFO    ][4909] Executing command ['date', '+%z'] in directory '/root'
2019-08-27 23:12:00,043 [salt.utils.schedule:568 ][INFO    ][4909] Updating job settings for scheduled job: __mine_interval
2019-08-27 23:12:00,045 [salt.minion      :1108][INFO    ][4909] Added mine.update to scheduler
2019-08-27 23:12:00,050 [salt.minion      :1975][INFO    ][4909] Minion is starting as user 'root'
2019-08-27 23:12:00,064 [salt.minion      :2336][INFO    ][4909] Minion is ready to receive requests!
2019-08-27 23:12:57,692 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command state.sls with jid 20190827231257683415
2019-08-27 23:12:57,709 [salt.minion      :1432][INFO    ][4998] Starting a new job with PID 4998
2019-08-27 23:13:03,822 [salt.state       :915 ][INFO    ][4998] Loading fresh modules for state activity
2019-08-27 23:13:03,889 [salt.fileclient  :1219][INFO    ][4998] Fetching file from saltenv 'base', ** done ** 'nfs/init.sls'
2019-08-27 23:13:03,923 [salt.fileclient  :1219][INFO    ][4998] Fetching file from saltenv 'base', ** done ** 'nfs/client.sls'
2019-08-27 23:13:03,949 [salt.fileclient  :1219][INFO    ][4998] Fetching file from saltenv 'base', ** done ** 'nfs/map.jinja'
2019-08-27 23:13:04,636 [salt.state       :1780][INFO    ][4998] Running state [rpcbind] at time 23:13:04.636646
2019-08-27 23:13:04,637 [salt.state       :1813][INFO    ][4998] Executing state pkg.installed for [rpcbind]
2019-08-27 23:13:04,637 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4998] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2019-08-27 23:13:05,528 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4998] Executing command ['apt-cache', '-q', 'policy', 'rpcbind'] in directory '/root'
2019-08-27 23:13:05,939 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4998] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2019-08-27 23:13:08,658 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4998] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2019-08-27 23:13:08,686 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4998] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'rpcbind'] in directory '/root'
2019-08-27 23:13:12,730 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command saltutil.find_job with jid 20190827231312720862
2019-08-27 23:13:12,747 [salt.minion      :1432][INFO    ][5839] Starting a new job with PID 5839
2019-08-27 23:13:12,761 [salt.minion      :1711][INFO    ][5839] Returning information for job: 20190827231312720862
2019-08-27 23:13:14,313 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4998] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2019-08-27 23:13:14,354 [salt.state       :300 ][INFO    ][4998] Made the following changes:
'rpcbind' changed from 'absent' to '0.2.3-0.6'
'libtirpc1' changed from 'absent' to '0.2.5-1.2ubuntu0.1'
'portmap' changed from 'absent' to '1'

2019-08-27 23:13:14,382 [salt.state       :915 ][INFO    ][4998] Loading fresh modules for state activity
2019-08-27 23:13:14,478 [salt.state       :1951][INFO    ][4998] Completed state [rpcbind] at time 23:13:14.478409 duration_in_ms=9841.763
2019-08-27 23:13:14,488 [salt.state       :1780][INFO    ][4998] Running state [nfs-common] at time 23:13:14.488111
2019-08-27 23:13:14,488 [salt.state       :1813][INFO    ][4998] Executing state pkg.installed for [nfs-common]
2019-08-27 23:13:15,224 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4998] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2019-08-27 23:13:15,246 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4998] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'nfs-common'] in directory '/root'
2019-08-27 23:13:22,301 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4998] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2019-08-27 23:13:22,339 [salt.state       :300 ][INFO    ][4998] Made the following changes:
'keyutils' changed from 'absent' to '1.5.9-9.2ubuntu2'
'nfs-common' changed from 'absent' to '1:1.3.4-2.1ubuntu5.2'
'libnfsidmap2' changed from 'absent' to '0.25-5.1'
'nfs-client' changed from 'absent' to '1'

2019-08-27 23:13:22,353 [salt.state       :915 ][INFO    ][4998] Loading fresh modules for state activity
2019-08-27 23:13:22,405 [salt.state       :1951][INFO    ][4998] Completed state [nfs-common] at time 23:13:22.405364 duration_in_ms=7917.253
2019-08-27 23:13:22,411 [salt.state       :1780][INFO    ][4998] Running state [/var/lib/nova/instances] at time 23:13:22.411560
2019-08-27 23:13:22,412 [salt.state       :1813][INFO    ][4998] Executing state file.directory for [/var/lib/nova/instances]
2019-08-27 23:13:22,417 [salt.state       :300 ][INFO    ][4998] {'/var/lib/nova/instances': 'New Dir'}
2019-08-27 23:13:22,417 [salt.state       :1951][INFO    ][4998] Completed state [/var/lib/nova/instances] at time 23:13:22.417764 duration_in_ms=6.204
2019-08-27 23:13:22,419 [salt.state       :1780][INFO    ][4998] Running state [/var/lib/nova/instances] at time 23:13:22.419759
2019-08-27 23:13:22,420 [salt.state       :1813][INFO    ][4998] Executing state mount.mounted for [/var/lib/nova/instances]
2019-08-27 23:13:22,425 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4998] Executing command 'mount -l' in directory '/root'
2019-08-27 23:13:22,472 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4998] Executing command 'blkid' in directory '/root'
2019-08-27 23:13:22,512 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4998] Executing command 'mount -o defaults -t nfs 172.16.10.36:/srv/nova/instances /var/lib/nova/instances' in directory '/root'
2019-08-27 23:13:22,665 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4998] Executing command 'mount -l' in directory '/root'
2019-08-27 23:13:22,683 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4998] Executing command 'blkid' in directory '/root'
2019-08-27 23:13:22,700 [salt.state       :300 ][INFO    ][4998] {'mount': True, 'persist': 'new'}
2019-08-27 23:13:22,701 [salt.state       :1951][INFO    ][4998] Completed state [/var/lib/nova/instances] at time 23:13:22.701220 duration_in_ms=281.46
2019-08-27 23:13:22,702 [salt.minion      :1711][INFO    ][4998] Returning information for job: 20190827231257683415
2019-08-27 23:27:36,720 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command state.sls with jid 20190827232736710453
2019-08-27 23:27:36,737 [salt.minion      :1432][INFO    ][6713] Starting a new job with PID 6713
2019-08-27 23:27:43,426 [salt.state       :915 ][INFO    ][6713] Loading fresh modules for state activity
2019-08-27 23:27:43,483 [salt.fileclient  :1219][INFO    ][6713] Fetching file from saltenv 'base', ** done ** 'cinder/init.sls'
2019-08-27 23:27:43,516 [salt.fileclient  :1219][INFO    ][6713] Fetching file from saltenv 'base', ** done ** 'cinder/volume.sls'
2019-08-27 23:27:43,646 [salt.fileclient  :1219][INFO    ][6713] Fetching file from saltenv 'base', ** done ** 'cinder/user.sls'
2019-08-27 23:27:44,426 [salt.fileclient  :1219][INFO    ][6713] Fetching file from saltenv 'base', ** done ** 'cinder/_ssl/volume_mysql.sls'
2019-08-27 23:27:44,527 [salt.fileclient  :1219][INFO    ][6713] Fetching file from saltenv 'base', ** done ** 'cinder/_ssl/rabbitmq.sls'
2019-08-27 23:27:45,342 [salt.state       :1780][INFO    ][6713] Running state [cinder] at time 23:27:45.342054
2019-08-27 23:27:45,342 [salt.state       :1813][INFO    ][6713] Executing state group.present for [cinder]
2019-08-27 23:27:45,344 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['groupadd', '-g 304', '-r', 'cinder'] in directory '/root'
2019-08-27 23:27:45,390 [salt.state       :300 ][INFO    ][6713] {'passwd': 'x', 'gid': 304, 'name': 'cinder', 'members': []}
2019-08-27 23:27:45,391 [salt.state       :1951][INFO    ][6713] Completed state [cinder] at time 23:27:45.391555 duration_in_ms=49.501
2019-08-27 23:27:45,392 [salt.state       :1780][INFO    ][6713] Running state [cinder] at time 23:27:45.392282
2019-08-27 23:27:45,392 [salt.state       :1813][INFO    ][6713] Executing state user.present for [cinder]
2019-08-27 23:27:45,395 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['useradd', '-s', '/bin/false', '-u', '304', '-g', '304', '-m', '-d', '/var/lib/cinder', '-r', 'cinder'] in directory '/root'
2019-08-27 23:27:45,439 [salt.state       :300 ][INFO    ][6713] {'shell': '/bin/false', 'workphone': '', 'uid': 304, 'passwd': 'x', 'roomnumber': '', 'groups': ['cinder'], 'home': '/var/lib/cinder', 'name': 'cinder', 'gid': 304, 'fullname': '', 'homephone': ''}
2019-08-27 23:27:45,440 [salt.state       :1951][INFO    ][6713] Completed state [cinder] at time 23:27:45.440041 duration_in_ms=47.758
2019-08-27 23:27:45,441 [salt.state       :1780][INFO    ][6713] Running state [cinder-volume] at time 23:27:45.441039
2019-08-27 23:27:45,441 [salt.state       :1813][INFO    ][6713] Executing state pkg.installed for [cinder-volume]
2019-08-27 23:27:45,443 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2019-08-27 23:27:46,325 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['apt-cache', '-q', 'policy', 'cinder-volume'] in directory '/root'
2019-08-27 23:27:46,786 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2019-08-27 23:27:49,312 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2019-08-27 23:27:49,362 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'cinder-volume'] in directory '/root'
2019-08-27 23:27:51,843 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command saltutil.find_job with jid 20190827232751832103
2019-08-27 23:27:51,857 [salt.minion      :1432][INFO    ][7295] Starting a new job with PID 7295
2019-08-27 23:27:51,872 [salt.minion      :1711][INFO    ][7295] Returning information for job: 20190827232751832103
2019-08-27 23:28:21,912 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command saltutil.find_job with jid 20190827232821897321
2019-08-27 23:28:21,929 [salt.minion      :1432][INFO    ][8633] Starting a new job with PID 8633
2019-08-27 23:28:21,947 [salt.minion      :1711][INFO    ][8633] Returning information for job: 20190827232821897321
2019-08-27 23:28:51,961 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command saltutil.find_job with jid 20190827232851949081
2019-08-27 23:28:51,977 [salt.minion      :1432][INFO    ][9961] Starting a new job with PID 9961
2019-08-27 23:28:51,992 [salt.minion      :1711][INFO    ][9961] Returning information for job: 20190827232851949081
2019-08-27 23:29:21,979 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command saltutil.find_job with jid 20190827232921970579
2019-08-27 23:29:21,992 [salt.minion      :1432][INFO    ][11527] Starting a new job with PID 11527
2019-08-27 23:29:22,008 [salt.minion      :1711][INFO    ][11527] Returning information for job: 20190827232921970579
2019-08-27 23:29:24,035 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2019-08-27 23:29:24,082 [salt.state       :300 ][INFO    ][6713] Made the following changes:
'python3-oslo.privsep' changed from 'absent' to '1.32.1-0ubuntu1~cloud0'
'python3-contextlib2' changed from 'absent' to '0.5.5-1'
'libnl-route-3-200' changed from 'absent' to '3.2.29-0ubuntu3'
'python3-retrying' changed from 'absent' to '1.3.3-3'
'libtiff5' changed from 'absent' to '4.0.9-5ubuntu0.2'
'python3-paste' changed from 'absent' to '2.0.3+dfsg-4ubuntu1'
'python3-oslo.serialization' changed from 'absent' to '2.28.2-0ubuntu1~cloud0'
'python3-oslo.vmware' changed from 'absent' to '2.32.2-0ubuntu1~cloud0'
'python3-testresources' changed from 'absent' to '2.0.0-2'
'gcc-7-base' changed from 'absent' to '7.4.0-1ubuntu1~18.04.1'
'python3-sqlalchemy' changed from 'absent' to '1.2.15+ds1-1~cloud0'
'python3-pyinotify' changed from 'absent' to '0.9.6-1'
'python3.7-lib2to3' changed from 'absent' to '1'
'python3-msgpack' changed from 'absent' to '0.5.6-1'
'python3-defusedxml' changed from 'absent' to '0.5.0-1ubuntu1'
'python3-oslo.upgradecheck' changed from 'absent' to '0.2.1-0ubuntu1~cloud0'
'python3.6-distutils' changed from 'absent' to '1'
'python3-iso8601' changed from 'absent' to '0.1.11-1'
'sg3-utils' changed from 'absent' to '1.42-2ubuntu1'
'python3-oslo-utils' changed from 'absent' to '1'
'python3-mako' changed from 'absent' to '1.0.7+ds1-1'
'python3-os-win' changed from 'absent' to '4.2.0-0ubuntu1~cloud0'
'python3-rfc3986' changed from 'absent' to '1.2.0-0ubuntu1~cloud0'
'python3-os-service-types' changed from 'absent' to '1.6.0-0ubuntu1~cloud0'
'python3-psycopg2' changed from 'absent' to '2.7.4-1'
'python3-oslo.rootwrap' changed from 'absent' to '5.15.2-0ubuntu1~cloud0'
'python3-olefile' changed from 'absent' to '0.45.1-1'
'python3-secretstorage' changed from 'absent' to '2.3.1-2'
'cinder-common' changed from 'absent' to '2:14.0.0-0ubuntu1~cloud0'
'ibverbs-providers' changed from 'absent' to '22.1-1ubuntu0.1~cloud0'
'python3-monotonic' changed from 'absent' to '1.5-0ubuntu1~cloud0'
'python3-kombu' changed from 'absent' to '4.1.0-1'
'python3-oslo.cache' changed from 'absent' to '1.33.2-0ubuntu1~cloud0'
'libblas3' changed from 'absent' to '3.7.1-4ubuntu1'
'python3-keystoneauth1' changed from 'absent' to '3.13.1-0ubuntu1~cloud0'
'python3-os-brick' changed from 'absent' to '2.8.1-0ubuntu1~cloud0'
'python3-keyring' changed from 'absent' to '10.6.0-1'
'python3-cachetools' changed from 'absent' to '2.0.0-2'
'libmlx5-1' changed from 'absent' to '1'
'python3-lib2to3' changed from 'absent' to '3.6.8-1~18.04'
'python3-futurist' changed from 'absent' to '1.6.0-0ubuntu1'
'python3-tempita' changed from 'absent' to '0.5.2-2'
'python3.6-lib2to3' changed from 'absent' to '1'
'python3-pycparser' changed from 'absent' to '2.18-2'
'python3-dnspython' changed from 'absent' to '1.15.0-1'
'libnspr4' changed from 'absent' to '2:4.18-1ubuntu1'
'python3-kazoo' changed from 'absent' to '2.2.1-1ubuntu1'
'python3-eventlet' changed from 'absent' to '0.24.1-0ubuntu3~cloud0'
'python3-migrate' changed from 'absent' to '0.11.0-5~cloud0'
'python3-sqlalchemy-ext' changed from 'absent' to '1.2.15+ds1-1~cloud0'
'python3-oslo.context' changed from 'absent' to '1:2.22.1-0ubuntu1~cloud0'
'python3-posix-ipc' changed from 'absent' to '0.9.8-3'
'python3-sqlparse' changed from 'absent' to '0.2.4-0.1'
'python3-oslo.middleware' changed from 'absent' to '3.37.1-0ubuntu1~cloud0'
'python3-testtools' changed from 'absent' to '2.3.0-3ubuntu2'
'python3-glanceclient' changed from 'absent' to '1:2.16.0-0ubuntu1~cloud0'
'python3-tz' changed from 'absent' to '2018.3-2'
'os-brick-common' changed from 'absent' to '2.8.1-0ubuntu1~cloud0'
'liblapack.so.3' changed from 'absent' to '1'
'python3-testscenarios' changed from 'absent' to '0.5.0-2~cloud0'
'python3-ply-lex-3.10' changed from 'absent' to '1'
'python3-pil' changed from 'absent' to '5.1.0-1'
'python3-novaclient' changed from 'absent' to '2:13.0.0-0ubuntu1~cloud0'
'python3-pyparsing' changed from 'absent' to '2.2.0+dfsg1-2'
'python3-dogpile.cache' changed from 'absent' to '0.6.2-5'
'python3-cffi' changed from 'absent' to '1.11.5-1'
'python3-pyperclip' changed from 'absent' to '1.6.0-1'
'docutils' changed from 'absent' to '1'
'ieee-data' changed from 'absent' to '20180204.1'
'python3-tenacity' changed from 'absent' to '5.0.3-0ubuntu1~cloud0'
'python3-webencodings' changed from 'absent' to '0.5-2'
'python3-netaddr' changed from 'absent' to '0.7.19-1'
'libcxgb3-1' changed from 'absent' to '1'
'python3-f2py' changed from 'absent' to '1'
'sgml-base' changed from 'absent' to '1.29'
'sharutils' changed from 'absent' to '1:4.15.2-3'
'python3-oslo.i18n' changed from 'absent' to '3.23.1-0ubuntu1~cloud0'
'python3-pillow' changed from 'absent' to '1'
'python3-roman' changed from 'absent' to '2.0.0-3'
'liblcms2-2' changed from 'absent' to '2.9-1ubuntu0.1'
'python3-oslo.utils' changed from 'absent' to '3.40.3-0ubuntu1~cloud0'
'docutils-common' changed from 'absent' to '0.14+dfsg-3'
'python3-dateutil' changed from 'absent' to '2.7.3-3~cloud0'
'librdmacm1' changed from 'absent' to '22.1-1ubuntu0.1~cloud0'
'qemu-block-extra' changed from 'absent' to '1:3.1+dfsg-2ubuntu3.2~cloud0'
'python3-oslo.db' changed from 'absent' to '4.44.0-0ubuntu1~cloud0'
'qemu-utils' changed from 'absent' to '1:3.1+dfsg-2ubuntu3.2~cloud0'
'libpaper1' changed from 'absent' to '1.1.24+nmu5ubuntu1'
'python3-debtcollector' changed from 'absent' to '1.20.0-2~cloud0'
'python-babel-localedata' changed from 'absent' to '2.6.0+dfsg.1-1~cloud0'
'python3-prettytable' changed from 'absent' to '0.7.2-3'
'python3-simplejson' changed from 'absent' to '3.13.2-1'
'python3-memcache' changed from 'absent' to '1.59-1~cloud0'
'python3-zake' changed from 'absent' to '0.2.2-2'
'python3-crypto' changed from 'absent' to '2.6.1-8ubuntu2'
'python3-suds' changed from 'absent' to '0.7~git20150727.94664dd-5'
'libconfig-general-perl' changed from 'absent' to '2.63-1'
'libnl-3-200' changed from 'absent' to '3.2.29-0ubuntu3'
'python3-oslo.versionedobjects' changed from 'absent' to '1.35.1-0ubuntu1~cloud0'
'python3-networkx' changed from 'absent' to '1.11-1ubuntu3'
'python3-numpy' changed from 'absent' to '1:1.13.3-2ubuntu1'
'python3-numpy-abi9' changed from 'absent' to '1'
'alembic' changed from 'absent' to '1.0.0-2ubuntu2~cloud0'
'python3-oslo.messaging' changed from 'absent' to '9.5.0-0ubuntu1~cloud0'
'python3.5-psycopg2' changed from 'absent' to '1'
'python3-cliff' changed from 'absent' to '2.14.1-0ubuntu1~cloud0'
'tgt' changed from 'absent' to '1:1.0.72-1ubuntu1'
'python-pastedeploy-tpl' changed from 'absent' to '1.5.2-4'
'python3-oslo.log' changed from 'absent' to '3.42.3-0ubuntu1~cloud0'
'python3-ply' changed from 'absent' to '3.11-1'
'python3.5-greenlet' changed from 'absent' to '1'
'xml-core' changed from 'absent' to '0.18'
'python3-docutils' changed from 'absent' to '0.14+dfsg-3'
'python3-pycadf' changed from 'absent' to '2.7.0-0ubuntu1'
'python3-funcsigs' changed from 'absent' to '1.0.2-4'
'libnss3' changed from 'absent' to '2:3.35-2ubuntu2.3'
'python3-html5lib' changed from 'absent' to '0.999999999-1'
'python3-oslo.reports' changed from 'absent' to '1.29.2-0ubuntu1~cloud0'
'python3-keyrings.alt' changed from 'absent' to '3.0-1'
'python3-decorator' changed from 'absent' to '4.3.0-1.1~cloud0'
'libquadmath0' changed from 'absent' to '8.3.0-6ubuntu1~18.04.1'
'python3-wrapt' changed from 'absent' to '1.9.0-3'
'python3-distutils' changed from 'absent' to '3.6.8-1~18.04'
'python3-automaton' changed from 'absent' to '1.14.0-0ubuntu1'
'libgfortran4' changed from 'absent' to '7.4.0-1ubuntu1~18.04.1'
'python3-mimeparse' changed from 'absent' to '0.1.4-3.1'
'libpq5' changed from 'absent' to '10.10-0ubuntu0.18.04.1'
'python3-cursive' changed from 'absent' to '0.2.1-0ubuntu1'
'python3-warlock' changed from 'absent' to '1.2.0-2'
'python3-statsd' changed from 'absent' to '3.2.1-2'
'python3-fixtures' changed from 'absent' to '3.0.0-2'
'libjpeg8' changed from 'absent' to '8c-2ubuntu8'
'python3-pymemcache' changed from 'absent' to '1.3.2-3'
'python3.6-psycopg2' changed from 'absent' to '1'
'python3-unittest2' changed from 'absent' to '1.1.0-6.1'
'libaio1' changed from 'absent' to '0.3.110-5ubuntu0.1'
'python3-psutil' changed from 'absent' to '5.5.1-1~cloud0'
'python3-extras' changed from 'absent' to '1.0.0-3'
'libipathverbs1' changed from 'absent' to '1'
'python3-oslo-log' changed from 'absent' to '1'
'pycadf-common' changed from 'absent' to '2.7.0-0ubuntu1'
'python3-webob' changed from 'absent' to '1:1.8.5-1~cloud0'
'python3-swiftclient' changed from 'absent' to '1:3.7.0-0ubuntu1~cloud0'
'libpaper-utils' changed from 'absent' to '1.1.24+nmu5ubuntu1'
'libmlx4-1' changed from 'absent' to '1'
'python3-pastedeploy' changed from 'absent' to '1.5.2-4'
'python3-linecache2' changed from 'absent' to '1.0.0-3'
'cinder-volume' changed from 'absent' to '2:14.0.0-0ubuntu1~cloud0'
'python3-routes' changed from 'absent' to '2.4.1-1'
'python3-tooz' changed from 'absent' to '1.64.2-0ubuntu1~cloud0'
'python3-setuptools' changed from 'absent' to '40.8.0-1~cloud0'
'python3.7-distutils' changed from 'absent' to '1'
'python3-oslo.concurrency' changed from 'absent' to '3.29.1-0ubuntu1~cloud0'
'python3-pastescript' changed from 'absent' to '2.0.2-2'
'libblas.so.3' changed from 'absent' to '1'
'libmthca1' changed from 'absent' to '1'
'python3-lxml' changed from 'absent' to '4.2.1-1ubuntu0.1'
'python3-osprofiler' changed from 'absent' to '2.3.0-3~cloud0'
'python3-pygments' changed from 'absent' to '2.2.0+dfsg-1'
'python3-barbicanclient' changed from 'absent' to '4.6.0-0ubuntu1'
'python3-greenlet' changed from 'absent' to '0.4.12-2'
'python3-unicodecsv' changed from 'absent' to '0.14.1-1'
'python3-keystonemiddleware' changed from 'absent' to '6.0.0-0ubuntu1~cloud0'
'python3-keystoneclient' changed from 'absent' to '1:3.19.0-0ubuntu1~cloud0'
'python3.6-lxml' changed from 'absent' to '1'
'python3-numpy-dev' changed from 'absent' to '1'
'python3-pbr' changed from 'absent' to '3.1.1-3ubuntu3'
'libjpeg-turbo8' changed from 'absent' to '1.5.2-0ubuntu5.18.04.1'
'python3-amqp' changed from 'absent' to '2.4.0-1~cloud0'
'python3-fasteners' changed from 'absent' to '0.12.0-3'
'python3-repoze.lru' changed from 'absent' to '0.7-1'
'liblapack3' changed from 'absent' to '3.7.1-4ubuntu1'
'python3-oslo.policy' changed from 'absent' to '2.1.1-0ubuntu1~cloud0'
'libwebp6' changed from 'absent' to '0.6.1-2'
'python3-redis' changed from 'absent' to '3.2.0-2~cloud0'
'libpaperg' changed from 'absent' to '1'
'python3-numpy-api11' changed from 'absent' to '1'
'python3-cinder' changed from 'absent' to '2:14.0.0-0ubuntu1~cloud0'
'python3-ply-yacc-3.10' changed from 'absent' to '1'
'libiscsi7' changed from 'absent' to '1.17.0-1.1'
'libnes1' changed from 'absent' to '1'
'librados2' changed from 'absent' to '13.2.6-0ubuntu0.19.04.2~cloud0'
'python3-oslo-rootwrap' changed from 'absent' to '1'
'python3-castellan' changed from 'absent' to '1.2.2-0ubuntu1~cloud0'
'python3-cmd2' changed from 'absent' to '0.7.9-0ubuntu1'
'librbd1' changed from 'absent' to '13.2.6-0ubuntu0.19.04.2~cloud0'
'libibverbs1' changed from 'absent' to '22.1-1ubuntu0.1~cloud0'
'libwebpdemux2' changed from 'absent' to '0.6.1-2'
'python3-ddt' changed from 'absent' to '1.1.0-2'
'libsgutils2-2' changed from 'absent' to '1.42-2ubuntu1'
'python3-babel' changed from 'absent' to '2.6.0+dfsg.1-1~cloud0'
'python3-oslo.service' changed from 'absent' to '1.38.0-0ubuntu1~cloud0'
'python3-anyjson' changed from 'absent' to '0.3.3-1build1'
'python3-stevedore' changed from 'absent' to '1:1.30.1-0ubuntu1~cloud0'
'python3-traceback2' changed from 'absent' to '1.4.0-5'
'python3-vine' changed from 'absent' to '1.1.4+dfsg-2'
'python3-oslo.config' changed from 'absent' to '1:6.8.1-0ubuntu1~cloud0'
'python3.6-numpy' changed from 'absent' to '1'
'libwebpmux3' changed from 'absent' to '0.6.1-2'
'python3-paramiko' changed from 'absent' to '2.0.0-1ubuntu1.2'
'python3-voluptuous' changed from 'absent' to '0.9.3-1'
'python3-alembic' changed from 'absent' to '1.0.0-2ubuntu2~cloud0'
'python3.6-crypto' changed from 'absent' to '1'
'python3-bs4' changed from 'absent' to '4.6.0-1'
'python3-taskflow' changed from 'absent' to '3.4.0-0ubuntu1~cloud0'
'python3-pymysql' changed from 'absent' to '0.8.0-1'
'libjbig0' changed from 'absent' to '2.1-3.1build1'

2019-08-27 23:29:24,114 [salt.state       :915 ][INFO    ][6713] Loading fresh modules for state activity
2019-08-27 23:29:24,155 [salt.state       :1951][INFO    ][6713] Completed state [cinder-volume] at time 23:29:24.155400 duration_in_ms=98714.361
2019-08-27 23:29:24,158 [salt.state       :1780][INFO    ][6713] Running state [cinder_volume_ssl_mysql] at time 23:29:24.158407
2019-08-27 23:29:24,158 [salt.state       :1813][INFO    ][6713] Executing state test.show_notification for [cinder_volume_ssl_mysql]
2019-08-27 23:29:24,159 [salt.state       :300 ][INFO    ][6713] Running cinder._ssl.volume_mysql
2019-08-27 23:29:24,159 [salt.state       :1951][INFO    ][6713] Completed state [cinder_volume_ssl_mysql] at time 23:29:24.159598 duration_in_ms=1.191
2019-08-27 23:29:24,160 [salt.state       :1780][INFO    ][6713] Running state [cinder_volume_ssl_rabbitmq] at time 23:29:24.160047
2019-08-27 23:29:24,160 [salt.state       :1813][INFO    ][6713] Executing state test.show_notification for [cinder_volume_ssl_rabbitmq]
2019-08-27 23:29:24,160 [salt.state       :300 ][INFO    ][6713] Running cinder._ssl.rabbitmq
2019-08-27 23:29:24,161 [salt.state       :1951][INFO    ][6713] Completed state [cinder_volume_ssl_rabbitmq] at time 23:29:24.161083 duration_in_ms=1.036
2019-08-27 23:29:24,163 [salt.state       :1780][INFO    ][6713] Running state [/var/lock/cinder] at time 23:29:24.163720
2019-08-27 23:29:24,164 [salt.state       :1813][INFO    ][6713] Executing state file.directory for [/var/lock/cinder]
2019-08-27 23:29:24,168 [salt.state       :300 ][INFO    ][6713] Directory /var/lock/cinder is in the correct state
Directory /var/lock/cinder updated
2019-08-27 23:29:24,169 [salt.state       :1951][INFO    ][6713] Completed state [/var/lock/cinder] at time 23:29:24.169008 duration_in_ms=5.288
2019-08-27 23:29:24,169 [salt.state       :1780][INFO    ][6713] Running state [/etc/cinder/cinder.conf] at time 23:29:24.169641
2019-08-27 23:29:24,170 [salt.state       :1813][INFO    ][6713] Executing state file.managed for [/etc/cinder/cinder.conf]
2019-08-27 23:29:24,211 [salt.fileclient  :1219][INFO    ][6713] Fetching file from saltenv 'base', ** done ** 'cinder/files/stein/cinder.conf.volume.Debian'
2019-08-27 23:29:24,395 [salt.fileclient  :1219][INFO    ][6713] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/stein/oslo/_log.conf'
2019-08-27 23:29:24,414 [salt.fileclient  :1219][INFO    ][6713] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/stein/oslo/messaging/_default.conf'
2019-08-27 23:29:24,447 [salt.fileclient  :1219][INFO    ][6713] Fetching file from saltenv 'base', ** done ** 'cinder/files/backend/_lvm.conf'
2019-08-27 23:29:24,462 [salt.fileclient  :1219][INFO    ][6713] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/stein/castellan/_barbican.conf'
2019-08-27 23:29:24,477 [salt.fileclient  :1219][INFO    ][6713] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/stein/oslo/_database.conf'
2019-08-27 23:29:24,504 [salt.fileclient  :1219][INFO    ][6713] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/stein/keystoneauth/_type_password.conf'
2019-08-27 23:29:24,537 [salt.fileclient  :1219][INFO    ][6713] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/stein/keystonemiddleware/_auth_token.conf'
2019-08-27 23:29:24,564 [salt.fileclient  :1219][INFO    ][6713] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/stein/oslo/messaging/_notifications.conf'
2019-08-27 23:29:24,580 [salt.fileclient  :1219][INFO    ][6713] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/stein/oslo/messaging/_rabbit.conf'
2019-08-27 23:29:24,613 [salt.fileclient  :1219][INFO    ][6713] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/stein/oslo/_middleware.conf'
2019-08-27 23:29:24,630 [salt.fileclient  :1219][INFO    ][6713] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/stein/oslo/_cache.conf'
2019-08-27 23:29:24,652 [salt.state       :300 ][INFO    ][6713] File changed:
--- 
+++ 
@@ -1,15 +1,5182 @@
+
 [DEFAULT]
-rootwrap_config = /etc/cinder/rootwrap.conf
-api_paste_confg = /etc/cinder/api-paste.ini
+
+#
+# From cinder
+#
+
+# The maximum number of items that a collection resource returns in a single
+# response (integer value)
+#osapi_max_limit = 1000
+
+# Json file indicating user visible filter parameters for list queries. (string
+# value)
+# Deprecated group/name - [DEFAULT]/query_volume_filters
+#resource_query_filters_file = /etc/cinder/resource_filters.json
+
+# DEPRECATED: Volume filter options which non-admin user could use to query
+# volumes. Default values are: ['name', 'status', 'metadata',
+# 'availability_zone' ,'bootable', 'group_id'] (list value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#query_volume_filters = name,status,metadata,availability_zone,bootable,group_id
+
+# Treat X-Forwarded-For as the canonical remote address. Only enable this if
+# you have a sanitizing proxy. (boolean value)
+#use_forwarded_for = false
+
+# Public url to use for versions endpoint. The default is None, which will use
+# the request's host_url attribute to populate the URL base. If Cinder is
+# operating behind a proxy, you will want to change this to represent the
+# proxy's URL. (string value)
+#public_endpoint = <None>
+
+# Backup services use same backend. (boolean value)
+#backup_use_same_host = false
+
+# Compression algorithm (None to disable) (string value)
+# Possible values:
+# none - <No description provided>
+# off - <No description provided>
+# no - <No description provided>
+# zlib - <No description provided>
+# gzip - <No description provided>
+# bz2 - <No description provided>
+# bzip2 - <No description provided>
+#backup_compression_algorithm = zlib
+
+# Backup metadata version to be used when backing up volume metadata. If this
+# number is bumped, make sure the service doing the restore supports the new
+# version. (integer value)
+#backup_metadata_version = 2
+
+# The number of chunks or objects, for which one Ceilometer notification will
+# be sent (integer value)
+#backup_object_number_per_notification = 10
+
+# Interval, in seconds, between two progress notifications reporting the backup
+# status (integer value)
+#backup_timer_interval = 120
+
+# Ceph configuration file to use. (string value)
+#backup_ceph_conf = /etc/ceph/ceph.conf
+
+# The Ceph user to connect with. Default here is to use the same user as for
+# Cinder volumes. If not using cephx this should be set to None. (string value)
+#backup_ceph_user = cinder
+
+# The chunk size, in bytes, that a backup is broken into before transfer to the
+# Ceph object store. (integer value)
+#backup_ceph_chunk_size = 134217728
+
+# The Ceph pool where volume backups are stored. (string value)
+#backup_ceph_pool = backups
+
+# RBD stripe unit to use when creating a backup image. (integer value)
+#backup_ceph_stripe_unit = 0
+
+# RBD stripe count to use when creating a backup image. (integer value)
+#backup_ceph_stripe_count = 0
+
+# If True, apply JOURNALING and EXCLUSIVE_LOCK feature bits to the backup RBD
+# objects to allow mirroring (boolean value)
+#backup_ceph_image_journals = false
+
+# If True, always discard excess bytes when restoring volumes i.e. pad with
+# zeroes. (boolean value)
+#restore_discard_excess_bytes = true
+
+# The GCS bucket to use. (string value)
+#backup_gcs_bucket = <None>
+
+# The size in bytes of GCS backup objects. (integer value)
+#backup_gcs_object_size = 52428800
+
+# The size in bytes that changes are tracked for incremental backups.
+# backup_gcs_object_size has to be multiple of backup_gcs_block_size. (integer
+# value)
+#backup_gcs_block_size = 32768
+
+# GCS object will be downloaded in chunks of bytes. (integer value)
+#backup_gcs_reader_chunk_size = 2097152
+
+# GCS object will be uploaded in chunks of bytes. Pass in a value of -1 if the
+# file is to be uploaded as a single chunk. (integer value)
+#backup_gcs_writer_chunk_size = 2097152
+
+# Number of times to retry. (integer value)
+#backup_gcs_num_retries = 3
+
+# List of GCS error codes. (list value)
+#backup_gcs_retry_error_codes = 429
+
+# Location of GCS bucket. (string value)
+#backup_gcs_bucket_location = US
+
+# Storage class of GCS bucket. (string value)
+#backup_gcs_storage_class = NEARLINE
+
+# Absolute path of GCS service account credential file. (string value)
+#backup_gcs_credential_file = <None>
+
+# Owner project id for GCS bucket. (string value)
+#backup_gcs_project_id = <None>
+
+# Http user-agent string for gcs api. (string value)
+#backup_gcs_user_agent = gcscinder
+
+# Enable or Disable the timer to send the periodic progress notifications to
+# Ceilometer when backing up the volume to the GCS backend storage. The default
+# value is True to enable the timer. (boolean value)
+#backup_gcs_enable_progress_timer = true
+
+# URL for http proxy access. (uri value)
+#backup_gcs_proxy_url = <None>
+
+# Base dir containing mount point for gluster share. (string value)
+#glusterfs_backup_mount_point = $state_path/backup_mount
+
+# GlusterFS share in <hostname|ipv4addr|ipv6addr>:<gluster_vol_name> format.
+# Eg: 1.2.3.4:backup_vol (string value)
+#glusterfs_backup_share = <None>
+
+# Base dir containing mount point for NFS share. (string value)
+#backup_mount_point_base = $state_path/backup_mount
+
+# NFS share in hostname:path, ipv4addr:path, or "[ipv6addr]:path" format.
+# (string value)
+#backup_share = <None>
+
+# Mount options passed to the NFS client. See NFS man page for details. (string
+# value)
+#backup_mount_options = <None>
+
+# The maximum size in bytes of the files used to hold backups. If the volume
+# being backed up exceeds this size, then it will be backed up into multiple
+# files.backup_file_size must be a multiple of backup_sha_block_size_bytes.
+# (integer value)
+#backup_file_size = 1999994880
+
+# The size in bytes that changes are tracked for incremental backups.
+# backup_file_size has to be multiple of backup_sha_block_size_bytes. (integer
+# value)
+#backup_sha_block_size_bytes = 32768
+
+# Enable or Disable the timer to send the periodic progress notifications to
+# Ceilometer when backing up the volume to the backend storage. The default
+# value is True to enable the timer. (boolean value)
+#backup_enable_progress_timer = true
+
+# Path specifying where to store backups. (string value)
+#backup_posix_path = $state_path/backup
+
+# Custom directory to use for backups. (string value)
+#backup_container = <None>
+
+# The URL of the Swift endpoint (uri value)
+#backup_swift_url = <None>
+
+# The URL of the Keystone endpoint (uri value)
+#backup_swift_auth_url = <None>
+
+# Info to match when looking for swift in the service catalog. Format is:
+# separated values of the form: <service_type>:<service_name>:<endpoint_type> -
+# Only used if backup_swift_url is unset (string value)
+#swift_catalog_info = object-store:swift:publicURL
+
+# Info to match when looking for keystone in the service catalog. Format is:
+# separated values of the form: <service_type>:<service_name>:<endpoint_type> -
+# Only used if backup_swift_auth_url is unset (string value)
+#keystone_catalog_info = identity:Identity Service:publicURL
+
+# Swift authentication mechanism (per_user or single_user). (string value)
+# Possible values:
+# per_user - <No description provided>
+# single_user - <No description provided>
+#backup_swift_auth = per_user
+
+# Swift authentication version. Specify "1" for auth 1.0, or "2" for auth 2.0
+# or "3" for auth 3.0 (string value)
+#backup_swift_auth_version = 1
+
+# Swift tenant/account name. Required when connecting to an auth 2.0 system
+# (string value)
+#backup_swift_tenant = <None>
+
+# Swift user domain name. Required when connecting to an auth 3.0 system
+# (string value)
+#backup_swift_user_domain = <None>
+
+# Swift project domain name. Required when connecting to an auth 3.0 system
+# (string value)
+#backup_swift_project_domain = <None>
+
+# Swift project/account name. Required when connecting to an auth 3.0 system
+# (string value)
+#backup_swift_project = <None>
+
+# Swift user name (string value)
+#backup_swift_user = <None>
+
+# Swift key for authentication (string value)
+#backup_swift_key = <None>
+
+# The default Swift container to use (string value)
+#backup_swift_container = volumebackups
+
+# The size in bytes of Swift backup objects (integer value)
+#backup_swift_object_size = 52428800
+
+# The size in bytes that changes are tracked for incremental backups.
+# backup_swift_object_size has to be multiple of backup_swift_block_size.
+# (integer value)
+#backup_swift_block_size = 32768
+
+# The number of retries to make for Swift operations (integer value)
+#backup_swift_retry_attempts = 3
+
+# The backoff time in seconds between Swift retries (integer value)
+#backup_swift_retry_backoff = 2
+
+# Enable or Disable the timer to send the periodic progress notifications to
+# Ceilometer when backing up the volume to the Swift backend storage. The
+# default value is True to enable the timer. (boolean value)
+#backup_swift_enable_progress_timer = true
+
+# Location of the CA certificate file to use for swift client requests. (string
+# value)
+#backup_swift_ca_cert_file = <None>
+
+# Bypass verification of server certificate when making SSL connection to
+# Swift. (boolean value)
+#backup_swift_auth_insecure = false
+
+# Volume prefix for the backup id when backing up to TSM (string value)
+#backup_tsm_volume_prefix = backup
+
+# TSM password for the running username (string value)
+#backup_tsm_password = password
+
+# Enable or Disable compression for backups (boolean value)
+#backup_tsm_compression = true
+
+# Driver to use for backups. (string value)
+#backup_driver = cinder.backup.drivers.swift.SwiftBackupDriver
+
+# Offload pending backup delete during backup service startup. If false, the
+# backup service will remain down until all pending backups are deleted.
+# (boolean value)
+#backup_service_inithost_offload = true
+
+# Size of the native threads pool for the backups.  Most backup drivers rely
+# heavily on this, it can be decreased for specific drivers that don't.
+# (integer value)
+# Minimum value: 20
+#backup_native_threads_pool_size = 60
+
+# Number of backup processes to launch. Improves performance with concurrent
+# backups. (integer value)
+# Minimum value: 1
+# Maximum value: 4
+#backup_workers = 1
+
+# Name of this cluster. Used to group volume hosts that share the same backend
+# configurations to work in HA Active-Active mode.  Active-Active is not yet
+# supported. (string value)
+#cluster = <None>
+
+# Top-level directory for maintaining cinder's state (string value)
+#state_path = /var/lib/cinder
+
+# IP address of this host (host address value)
+#my_ip = <HOST_IP_ADDRESS>
+my_ip = 172.16.10.55
+
+# A list of the URLs of glance API servers available to cinder
+# ([http[s]://][hostname|ip]:port). If protocol is not specified it defaults to
+# http. (list value)
+glance_api_servers = http://172.16.10.36:9292
+
+# Number retries when downloading an image from glance (integer value)
+# Minimum value: 0
+#glance_num_retries = 0
+
+# Allow to perform insecure SSL (https) requests to glance (https will be used
+# but cert validation will not be performed). (boolean value)
+#glance_api_insecure = false
+
+# Enables or disables negotiation of SSL layer compression. In some cases
+# disabling compression can improve data throughput, such as when high network
+# bandwidth is available and you use compressed image formats like qcow2.
+# (boolean value)
+#glance_api_ssl_compression = false
+
+# Location of ca certificates file to use for glance client requests. (string
+# value)
+#glance_ca_certificates_file = <None>
+
+# http/https timeout value for glance operations. If no value (None) is
+# supplied here, the glanceclient default value is used. (integer value)
+#glance_request_timeout = <None>
+
+# DEPRECATED: Deploy v2 of the Cinder API. (boolean value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#enable_v2_api = true
+
+# Deploy v3 of the Cinder API. (boolean value)
+#enable_v3_api = true
+
+# Enables or disables rate limit of the API. (boolean value)
+#api_rate_limit = true
+
+# Specify list of extensions to load when using osapi_volume_extension option
+# with cinder.api.contrib.select_extensions (list value)
+#osapi_volume_ext_list =
+
+# osapi volume extension to load (multi valued)
+#osapi_volume_extension = cinder.api.contrib.standard_extensions
+
+# Full class name for the Manager for volume (string value)
+#volume_manager = cinder.volume.manager.VolumeManager
+
+# Full class name for the Manager for volume backup (string value)
+#backup_manager = cinder.backup.manager.BackupManager
+
+# Full class name for the Manager for scheduler (string value)
+#scheduler_manager = cinder.scheduler.manager.SchedulerManager
+
+# Name of this node.  This can be an opaque identifier. It is not necessarily a
+# host name, FQDN, or IP address. (host address value)
+#host = localhost
+
+# Availability zone of this node. Can be overridden per volume backend with the
+# option "backend_availability_zone". (string value)
+#storage_availability_zone = nova
+
+# Default availability zone for new volumes. If not set, the
+# storage_availability_zone option value is used as the default for new
+# volumes. (string value)
+#default_availability_zone = <None>
+
+# If the requested Cinder availability zone is unavailable, fall back to the
+# value of default_availability_zone, then storage_availability_zone, instead
+# of failing. (boolean value)
+allow_availability_zone_fallback = True
+
+# Default volume type to use (string value)
+#default_volume_type = <None>
+default_volume_type = lvm-driver
+
+# Default group type to use (string value)
+#default_group_type = <None>
+
+# Time period for which to generate volume usages. The options are hour, day,
+# month, or year. (string value)
+#volume_usage_audit_period = month
+
+# Path to the rootwrap configuration file to use for running commands as root
+# (string value)
+#rootwrap_config = /etc/cinder/rootwrap.conf
+
+# Enable monkey patching (boolean value)
+#monkey_patch = false
+
+# List of modules/decorators to monkey patch (list value)
+#monkey_patch_modules =
+
+# Maximum time since last check-in for a service to be considered up (integer
+# value)
+#service_down_time = 60
+
+# The full class name of the volume API class to use (string value)
+#volume_api_class = cinder.volume.api.API
+
+# The full class name of the volume backup API class (string value)
+#backup_api_class = cinder.backup.api.API
+
+# The strategy to use for auth. Supports noauth or keystone. (string value)
+# Possible values:
+# noauth - Do not perform authentication
+# keystone - Authenticate using keystone
+#auth_strategy = keystone
+
+# A list of backend names to use. These backend names should be backed by a
+# unique [CONFIG] group with its options (list value)
+#enabled_backends = <None>
+enabled_backends = lvm-driver
+
+# Whether snapshots count against gigabyte quota (boolean value)
+#no_snapshot_gb_quota = false
+
+# The full class name of the volume transfer API class (string value)
+#transfer_api_class = cinder.transfer.api.API
+
+# The full class name of the consistencygroup API class (string value)
+#consistencygroup_api_class = cinder.consistencygroup.api.API
+
+# The full class name of the group API class (string value)
+#group_api_class = cinder.group.api.API
+
+# Log requests to multiple loggers. (boolean value)
+#split_loggers = false
+
+# The full class name of the compute API class to use (string value)
+#compute_api_class = cinder.compute.nova.API
+
+# ID of the project which will be used as the Cinder internal tenant. (string
+# value)
+#cinder_internal_tenant_project_id = <None>
+
+# ID of the user to be used in volume operations as the Cinder internal tenant.
+# (string value)
+#cinder_internal_tenant_user_id = <None>
+
+# Services to be added to the available pool on create (boolean value)
+#enable_new_services = true
+
+# Template string to be used to generate volume names (string value)
+#volume_name_template = volume-%s
+
+# Template string to be used to generate snapshot names (string value)
+#snapshot_name_template = snapshot-%s
+
+# Template string to be used to generate backup names (string value)
+#backup_name_template = backup-%s
+
+# Driver to use for database access (string value)
+#db_driver = cinder.db
+
+# A list of url schemes that can be downloaded directly via the direct_url.
+# Currently supported schemes: [file, cinder]. (list value)
+#allowed_direct_url_schemes =
+
+#
+# Enable image signature verification.
+#
+# Cinder uses the image signature metadata from Glance and
+# verifies the signature of a signed image while downloading
+# that image. There are two options here.
+#
+# 1. ``enabled``: verify when image has signature metadata.
+# 2. ``disabled``: verification is turned off.
+#
+# If the image signature cannot be verified or if the image
+# signature metadata is incomplete when required, then Cinder
+# will not create the volume and update it into an error
+# state. This provides end users with stronger assurances
+# of the integrity of the image data they are using to
+# create volumes.
+#  (string value)
+# Possible values:
+# disabled - <No description provided>
+# enabled - <No description provided>
+#verify_glance_signatures = enabled
+
+# Info to match when looking for glance in the service catalog. Format is:
+# separated values of the form: <service_type>:<service_name>:<endpoint_type> -
+# Only used if glance_api_servers are not provided. (string value)
+#glance_catalog_info = image:glance:publicURL
+
+# Default core properties of image (list value)
+#glance_core_properties = checksum,container_format,disk_format,image_name,image_id,min_disk,min_ram,name,size
+
+# Directory used for temporary storage during image conversion (string value)
+#image_conversion_dir = $state_path/conversion
+
+# message minimum life in seconds. (integer value)
+#message_ttl = 2592000
+
+# interval between periodic task runs to clean expired messages in seconds.
+# (integer value)
+#message_reap_interval = 86400
+
+# Number of volumes allowed per project (integer value)
+#quota_volumes = 10
+
+# Number of volume snapshots allowed per project (integer value)
+#quota_snapshots = 10
+
+# Number of consistencygroups allowed per project (integer value)
+#quota_consistencygroups = 10
+
+# Number of groups allowed per project (integer value)
+#quota_groups = 10
+
+# Total amount of storage, in gigabytes, allowed for volumes and snapshots per
+# project (integer value)
+#quota_gigabytes = 1000
+
+# Number of volume backups allowed per project (integer value)
+#quota_backups = 10
+
+# Total amount of storage, in gigabytes, allowed for backups per project
+# (integer value)
+#quota_backup_gigabytes = 1000
+
+# Number of seconds until a reservation expires (integer value)
+#reservation_expire = 86400
+
+# Interval between periodic task runs to clean expired reservations in seconds.
+# (integer value)
+#reservation_clean_interval = $reservation_expire
+
+# Count of reservations until usage is refreshed (integer value)
+#until_refresh = 0
+
+# Number of seconds between subsequent usage refreshes (integer value)
+#max_age = 0
+
+# Default driver to use for quota checks (string value)
+#quota_driver = cinder.quota.DbQuotaDriver
+
+# Enables or disables use of default quota class with default quota. (boolean
+# value)
+#use_default_quota_class = true
+
+# Max size allowed per volume, in gigabytes (integer value)
+#per_volume_size_limit = -1
+
+# The scheduler host manager class to use (string value)
+#scheduler_host_manager = cinder.scheduler.host_manager.HostManager
+
+# Maximum number of attempts to schedule a volume (integer value)
+#scheduler_max_attempts = 3
+
+# Which filter class names to use for filtering hosts when not specified in the
+# request. (list value)
+#scheduler_default_filters = AvailabilityZoneFilter,CapacityFilter,CapabilitiesFilter
+
+# Which weigher class names to use for weighing hosts. (list value)
+#scheduler_default_weighers = CapacityWeigher
+
+# Which handler to use for selecting the host/pool after weighing (string
+# value)
+#scheduler_weight_handler = cinder.scheduler.weights.OrderedHostWeightHandler
+
+# Default scheduler driver to use (string value)
+#scheduler_driver = cinder.scheduler.filter_scheduler.FilterScheduler
+
+# Absolute path to scheduler configuration JSON file. (string value)
+#scheduler_json_config_location =
+
+# Multiplier used for weighing free capacity. Negative numbers mean to stack vs
+# spread. (floating point value)
+#capacity_weight_multiplier = 1.0
+
+# Multiplier used for weighing allocated capacity. Positive numbers mean to
+# stack vs spread. (floating point value)
+#allocated_capacity_weight_multiplier = -1.0
+
+# Multiplier used for weighing volume number. Negative numbers mean to spread
+# vs stack. (floating point value)
+#volume_number_multiplier = -1.0
+
+# Interval, in seconds, between nodes reporting state to datastore (integer
+# value)
+#report_interval = 10
+
+# Interval, in seconds, between running periodic tasks (integer value)
+#periodic_interval = 60
+
+# Range, in seconds, to randomly delay when starting the periodic task
+# scheduler to reduce stampeding. (Disable by setting to 0) (integer value)
+#periodic_fuzzy_delay = 60
+
+# IP address on which OpenStack Volume API listens (string value)
+osapi_volume_listen = 172.16.10.36
+
+# Port on which OpenStack Volume API listens (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#osapi_volume_listen_port = 8776
+
+# Number of workers for OpenStack Volume API service. The default is equal to
+# the number of CPUs available. (integer value)
+osapi_volume_workers = 4
+
+# Wraps the socket in a SSL context if True is set. A certificate file and key
+# file must be specified. (boolean value)
+#osapi_volume_use_ssl = false
+
+# Option to enable strict host key checking.  When set to "True" Cinder will
+# only connect to systems with a host key present in the configured
+# "ssh_hosts_key_file".  When set to "False" the host key will be saved upon
+# first connection and used for subsequent connections.  Default=False (boolean
+# value)
+#strict_ssh_host_key_policy = false
+
+# File containing SSH host keys for the systems with which Cinder needs to
+# communicate.  OPTIONAL: Default=$state_path/ssh_known_hosts (string value)
+#ssh_hosts_key_file = $state_path/ssh_known_hosts
+
+# The number of characters in the salt. (integer value)
+#volume_transfer_salt_length = 8
+
+# The number of characters in the autogenerated auth key. (integer value)
+#volume_transfer_key_length = 16
+
+# Enables the Force option on upload_to_image. This enables running
+# upload_volume on in-use volumes for backends that support it. (boolean value)
+enable_force_upload = false
+
+# Create volume from snapshot at the host where snapshot resides (boolean
+# value)
+#snapshot_same_host = true
+
+# Ensure that the new volumes are the same AZ as snapshot or source volume
+# (boolean value)
+#cloned_volume_same_az = true
+
+# Cache volume availability zones in memory for the provided duration in
+# seconds (integer value)
+#az_cache_duration = 3600
+
+# Number of times to attempt to run flakey shell commands (integer value)
+#num_shell_tries = 3
+
+# The percentage of backend capacity is reserved (integer value)
+# Minimum value: 0
+# Maximum value: 100
+#reserved_percentage = 0
+
+# Prefix for iSCSI volumes (string value)
+# Deprecated group/name - [DEFAULT]/iscsi_target_prefix
+#target_prefix = iqn.2010-10.org.openstack:
+
+# The IP address that the iSCSI daemon is listening on (string value)
+# Deprecated group/name - [DEFAULT]/iscsi_ip_address
+#target_ip_address = $my_ip
+
+# The list of secondary IP addresses of the iSCSI daemon (list value)
+#iscsi_secondary_ip_addresses =
+
+# The port that the iSCSI daemon is listening on (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/iscsi_port
+#target_port = 3260
+
+# The maximum number of times to rescan targets to find volume (integer value)
+#num_volume_device_scan_tries = 3
+
+# The backend name for a given driver implementation (string value)
+volume_backend_name = DEFAULT
+
+# Do we attach/detach volumes in cinder using multipath for volume to image and
+# image to volume transfers? (boolean value)
+#use_multipath_for_image_xfer = false
+
+# If this is set to True, attachment of volumes for image transfer will be
+# aborted when multipathd is not running. Otherwise, it will fallback to single
+# path. (boolean value)
+#enforce_multipath_for_image_xfer = false
+
+# Method used to wipe old volumes (string value)
+# Possible values:
+# none - <No description provided>
+# zero - <No description provided>
+volume_clear = none
+
+# Size in MiB to wipe at start of old volumes. 1024 MiBat max. 0 => all
+# (integer value)
+# Maximum value: 1024
+#volume_clear_size = 0
+
+# The flag to pass to ionice to alter the i/o priority of the process used to
+# zero a volume after deletion, for example "-c3" for idle only priority.
+# (string value)
+#volume_clear_ionice = <None>
+
+# Target user-land tool to use. tgtadm is default, use lioadm for LIO iSCSI
+# support, scstadmin for SCST target support, ietadm for iSCSI Enterprise
+# Target, iscsictl for Chelsio iSCSI Target, nvmet for NVMEoF support, or fake
+# for testing. (string value)
+# Possible values:
+# tgtadm - <No description provided>
+# lioadm - <No description provided>
+# scstadmin - <No description provided>
+# iscsictl - <No description provided>
+# ietadm - <No description provided>
+# nvmet - <No description provided>
+# fake - <No description provided>
+# Deprecated group/name - [DEFAULT]/iscsi_helper
+#target_helper = tgtadm
+
+# Volume configuration file storage directory (string value)
+#volumes_dir = $state_path/volumes
+
+# IET configuration file (string value)
+#iet_conf = /etc/iet/ietd.conf
+
+# Chiscsi (CXT) global defaults configuration file (string value)
+#chiscsi_conf = /etc/chelsio-iscsi/chiscsi.conf
+
+# Sets the behavior of the iSCSI target to either perform blockio or fileio
+# optionally, auto can be set and Cinder will autodetect type of backing device
+# (string value)
+# Possible values:
+# blockio - <No description provided>
+# fileio - <No description provided>
+# auto - <No description provided>
+#iscsi_iotype = fileio
+
+# The default block size used when copying/clearing volumes (string value)
+#volume_dd_blocksize = 1M
+
+# The blkio cgroup name to be used to limit bandwidth of volume copy (string
+# value)
+#volume_copy_blkio_cgroup_name = cinder-volume-copy
+
+# The upper limit of bandwidth of volume copy. 0 => unlimited (integer value)
+#volume_copy_bps_limit = 0
+
+# Sets the behavior of the iSCSI target to either perform write-back(on) or
+# write-through(off). This parameter is valid if target_helper is set to
+# tgtadm. (string value)
+# Possible values:
+# on - <No description provided>
+# off - <No description provided>
+#iscsi_write_cache = on
+
+# Sets the target-specific flags for the iSCSI target. Only used for tgtadm to
+# specify backing device flags using bsoflags option. The specified string is
+# passed as is to the underlying tool. (string value)
+#iscsi_target_flags =
+
+# Determines the target protocol for new volumes, created with tgtadm, lioadm
+# and nvmet target helpers. In order to enable RDMA, this parameter should be
+# set with the value "iser". The supported iSCSI protocol values are "iscsi"
+# and "iser", in case of nvmet target set to "nvmet_rdma". (string value)
+# Possible values:
+# iscsi - <No description provided>
+# iser - <No description provided>
+# nvmet_rdma - <No description provided>
+# Deprecated group/name - [DEFAULT]/iscsi_protocol
+#target_protocol = iscsi
+
+# The path to the client certificate key for verification, if the driver
+# supports it. (string value)
+#driver_client_cert_key = <None>
+
+# The path to the client certificate for verification, if the driver supports
+# it. (string value)
+#driver_client_cert = <None>
+
+# Tell driver to use SSL for connection to backend storage if the driver
+# supports it. (boolean value)
+#driver_use_ssl = false
+
+# Representation of the over subscription ratio when thin provisioning is
+# enabled. Default ratio is 20.0, meaning provisioned capacity can be 20 times
+# of the total physical capacity. If the ratio is 10.5, it means provisioned
+# capacity can be 10.5 times of the total physical capacity. A ratio of 1.0
+# means provisioned capacity cannot exceed the total physical capacity. If
+# ratio is 'auto', Cinder will automatically calculate the ratio based on the
+# provisioned capacity and the used space. If not set to auto, the ratio has to
+# be a minimum of 1.0. (string value)
+#max_over_subscription_ratio = 20.0
+
+# Certain ISCSI targets have predefined target names, SCST target driver uses
+# this name. (string value)
+#scst_target_iqn_name = <None>
+
+# SCST target implementation can choose from multiple SCST target drivers.
+# (string value)
+#scst_target_driver = iscsi
+
+# Option to enable/disable CHAP authentication for targets. (boolean value)
+#use_chap_auth = false
+
+# CHAP user name. (string value)
+#chap_username =
+
+# Password for specified CHAP account name. (string value)
+#chap_password =
+
+# Namespace for driver private data values to be saved in. (string value)
+#driver_data_namespace = <None>
+
+# String representation for an equation that will be used to filter hosts. Only
+# used when the driver filter is set to be used by the Cinder scheduler.
+# (string value)
+#filter_function = <None>
+
+# String representation for an equation that will be used to determine the
+# goodness of a host. Only used when using the goodness weigher is set to be
+# used by the Cinder scheduler. (string value)
+#goodness_function = <None>
+
+# If set to True the http client will validate the SSL certificate of the
+# backend endpoint. (boolean value)
+#driver_ssl_cert_verify = false
+
+# Can be used to specify a non default path to a CA_BUNDLE file or directory
+# with certificates of trusted CAs, which will be used to validate the backend
+# (string value)
+#driver_ssl_cert_path = <None>
+
+# List of options that control which trace info is written to the DEBUG log
+# level to assist developers. Valid values are method and api. (list value)
+#trace_flags = <None>
+
+# Multi opt of dictionaries to represent a replication target device.  This
+# option may be specified multiple times in a single config section to specify
+# multiple replication target devices.  Each entry takes the standard dict
+# config form: replication_device =
+# target_device_id:<required>,key1:value1,key2:value2... (dict value)
+#replication_device = <None>
+
+# If set to True, upload-to-image in raw format will create a cloned volume and
+# register its location to the image service, instead of uploading the volume
+# content. The cinder backend and locations support must be enabled in the
+# image service. (boolean value)
+#image_upload_use_cinder_backend = false
+
+# If set to True, the image volume created by upload-to-image will be placed in
+# the internal tenant. Otherwise, the image volume is created in the current
+# context's tenant. (boolean value)
+#image_upload_use_internal_tenant = false
+
+# Enable the image volume cache for this backend. (boolean value)
+#image_volume_cache_enabled = false
+
+# Max size of the image volume cache for this backend in GB. 0 => unlimited.
+# (integer value)
+#image_volume_cache_max_size_gb = 0
+
+# Max number of entries allowed in the image volume cache. 0 => unlimited.
+# (integer value)
+#image_volume_cache_max_count = 0
+
+# Report to clients of Cinder that the backend supports discard (aka.
+# trim/unmap). This will not actually change the behavior of the backend or the
+# client directly, it will only notify that it can be used. (boolean value)
+#report_discard_supported = false
+
+# Protocol for transferring data between host and storage back-end. (string
+# value)
+# Possible values:
+# iscsi - <No description provided>
+# fc - <No description provided>
+#storage_protocol = iscsi
+
+# If this is set to True, a temporary snapshot will be created for performing
+# non-disruptive backups. Otherwise a temporary volume will be cloned in order
+# to perform a backup. (boolean value)
+#backup_use_temp_snapshot = false
+
+# Set this to True when you want to allow an unsupported driver to start.
+# Drivers that haven't maintained a working CI system and testing are marked as
+# unsupported until CI is working again.  This also marks a driver as
+# deprecated and may be removed in the next release. (boolean value)
+#enable_unsupported_driver = false
+
+# Availability zone for this volume backend. If not set, the
+# storage_availability_zone option value is used as the default for all
+# backends. (string value)
+#backend_availability_zone = <None>
+
+# The maximum number of times to rescan iSER targetto find volume (integer
+# value)
+#num_iser_scan_tries = 3
+
+# Prefix for iSER volumes (string value)
+#iser_target_prefix = iqn.2010-10.org.openstack:
+
+# The IP address that the iSER daemon is listening on (string value)
+#iser_ip_address = $my_ip
+
+# The port that the iSER daemon is listening on (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#iser_port = 3260
+
+# The name of the iSER target user-land tool to use (string value)
+#iser_helper = tgtadm
+
+# The port that the NVMe target is listening on. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#nvmet_port_id = 1
+
+# The namespace id associated with the subsystem that will be created with the
+# path for the LVM volume. (integer value)
+#nvmet_ns_id = 10
+
+# DataCore virtual disk type (single/mirrored). Mirrored virtual disks require
+# two storage servers in the server group. (string value)
+# Possible values:
+# single - <No description provided>
+# mirrored - <No description provided>
+#datacore_disk_type = single
+
+# DataCore virtual disk storage profile. (string value)
+#datacore_storage_profile = <None>
+
+# List of DataCore disk pools that can be used by volume driver. (list value)
+#datacore_disk_pools =
+
+# Seconds to wait for a response from a DataCore API call. (integer value)
+# Minimum value: 1
+#datacore_api_timeout = 300
+
+# Seconds to wait for DataCore virtual disk to come out of the "Failed" state.
+# (integer value)
+# Minimum value: 0
+#datacore_disk_failed_delay = 15
+
+# List of iSCSI targets that cannot be used to attach volume. To prevent the
+# DataCore iSCSI volume driver from using some front-end targets in volume
+# attachment, specify this option and list the iqn and target machine for each
+# target as the value, such as <iqn:target name>, <iqn:target name>,
+# <iqn:target name>. (list value)
+#datacore_iscsi_unallowed_targets =
+
+# Configure CHAP authentication for iSCSI connections. (boolean value)
+#datacore_iscsi_chap_enabled = false
+
+# iSCSI CHAP authentication password storage file. (string value)
+#datacore_iscsi_chap_storage = <None>
+
+# Storage system autoexpand parameter for volumes (True/False) (boolean value)
+#instorage_mcs_vol_autoexpand = true
+
+# Storage system compression option for volumes (boolean value)
+#instorage_mcs_vol_compression = false
+
+# Enable InTier for volumes (boolean value)
+#instorage_mcs_vol_intier = true
+
+# Allow tenants to specify QOS on create (boolean value)
+#instorage_mcs_allow_tenant_qos = false
+
+# Storage system grain size parameter for volumes (32/64/128/256) (integer
+# value)
+# Minimum value: 32
+# Maximum value: 256
+#instorage_mcs_vol_grainsize = 256
+
+# Storage system space-efficiency parameter for volumes (percentage) (integer
+# value)
+# Minimum value: -1
+# Maximum value: 100
+#instorage_mcs_vol_rsize = 2
+
+# Storage system threshold for volume capacity warnings (percentage) (integer
+# value)
+# Minimum value: -1
+# Maximum value: 100
+#instorage_mcs_vol_warning = 0
+
+# Maximum number of seconds to wait for LocalCopy to be prepared. (integer
+# value)
+# Minimum value: 1
+# Maximum value: 600
+#instorage_mcs_localcopy_timeout = 120
+
+# Specifies the InStorage LocalCopy copy rate to be used when creating a full
+# volume copy. The default is rate is 50, and the valid rates are 1-100.
+# (integer value)
+# Minimum value: 1
+# Maximum value: 100
+#instorage_mcs_localcopy_rate = 50
+
+# The I/O group in which to allocate volumes. It can be a comma-separated list
+# in which case the driver will select an io_group based on least number of
+# volumes associated with the io_group. (string value)
+#instorage_mcs_vol_iogrp = 0
+
+# Specifies secondary management IP or hostname to be used if san_ip is invalid
+# or becomes inaccessible. (string value)
+#instorage_san_secondary_ip = <None>
+
+# Comma separated list of storage system storage pools for volumes. (list
+# value)
+#instorage_mcs_volpool_name = volpool
+
+# Configure CHAP authentication for iSCSI connections (Default: Enabled)
+# (boolean value)
+#instorage_mcs_iscsi_chap_enabled = true
+
+# The StorPool template for volumes with no type. (string value)
+#storpool_template = <None>
+
+# The default StorPool chain replication value.  Used when creating a volume
+# with no specified type if storpool_template is not set.  Also used for
+# calculating the apparent free space reported in the stats. (integer value)
+#storpool_replication = 3
+
+# Create sparse Lun. (boolean value)
+#vrts_lun_sparse = true
+
+# VA config file. (string value)
+#vrts_target_config = /etc/cinder/vrts_target.xml
+
+# Timeout for creating the volume to migrate to when performing volume
+# migration (seconds) (integer value)
+#migration_create_volume_timeout_secs = 300
+
+# Offload pending volume delete during volume service startup (boolean value)
+#volume_service_inithost_offload = false
+
+# FC Zoning mode configured, only 'fabric' is supported now. (string value)
+#zoning_mode = <None>
+
+# Sets the value of TCP_KEEPALIVE (True/False) for each server socket. (boolean
+# value)
+#tcp_keepalive = true
+
+# Sets the value of TCP_KEEPINTVL in seconds for each server socket. Not
+# supported on OS X. (integer value)
+#tcp_keepalive_interval = <None>
+
+# Sets the value of TCP_KEEPCNT for each server socket. Not supported on OS X.
+# (integer value)
+#tcp_keepalive_count = <None>
+
+#
+# From oslo.config
+#
+
+# Path to a config file to use. Multiple config files can be specified, with
+# values in later files taking precedence. Defaults to %(default)s. (unknown
+# value)
+#config_file = ~/.project/project.conf,~/project.conf,/etc/project/project.conf,/etc/project.conf
+
+# Path to a config directory to pull `*.conf` files from. This file set is
+# sorted, so as to provide a predictable parse order if individual options are
+# over-ridden. The set is parsed after the file(s) specified via previous
+# --config-file, arguments hence over-ridden options in the directory take
+# precedence. (list value)
+#config_dir = ~/.project/project.conf.d/,~/project.conf.d/,/etc/project/project.conf.d/,/etc/project.conf.d/
+
+# Lists configuration groups that provide more details for accessing
+# configuration settings from locations other than local files. (list value)
+#config_source =
+#
+# From oslo.log
+#
+
+# If set to true, the logging level will be set to DEBUG instead of the default
+# INFO level. (boolean value)
+# Note: This option can be changed without restarting.
+#debug = false
+
+# The name of a logging configuration file. This file is appended to any
+# existing logging configuration files. For details about logging configuration
+# files, see the Python logging module documentation. Note that when logging
+# configuration files are used then all logging configuration is set in the
+# configuration file and other logging configuration options are ignored (for
+# example, logging_context_format_string). (string value)
+# Note: This option can be changed without restarting.
+# Deprecated group/name - [DEFAULT]/log_config
+#log_config_append = <None>
+
+# Defines the format string for %%(asctime)s in log records. Default:
+# %(default)s . This option is ignored if log_config_append is set. (string
+# value)
+#log_date_format = %Y-%m-%d %H:%M:%S
+
+# (Optional) Name of log file to send logging output to. If no default is set,
+# logging will go to stderr as defined by use_stderr. This option is ignored if
+# log_config_append is set. (string value)
+# Deprecated group/name - [DEFAULT]/logfile
+#log_file = <None>
+
+# (Optional) The base directory used for relative log_file  paths. This option
+# is ignored if log_config_append is set. (string value)
+# Deprecated group/name - [DEFAULT]/logdir
+#log_dir = <None>
+
+# Uses logging handler designed to watch file system. When log file is moved or
+# removed this handler will open a new log file with specified path
+# instantaneously. It makes sense only if log_file option is specified and
+# Linux platform is used. This option is ignored if log_config_append is set.
+# (boolean value)
+#watch_log_file = false
+
+# Use syslog for logging. Existing syslog format is DEPRECATED and will be
+# changed later to honor RFC5424. This option is ignored if log_config_append
+# is set. (boolean value)
+#use_syslog = false
+
+# Enable journald for logging. If running in a systemd environment you may wish
+# to enable journal support. Doing so will use the journal native protocol
+# which includes structured metadata in addition to log messages.This option is
+# ignored if log_config_append is set. (boolean value)
+#use_journal = false
+
+# Syslog facility to receive log lines. This option is ignored if
+# log_config_append is set. (string value)
+#syslog_log_facility = LOG_USER
+
+# Use JSON formatting for logging. This option is ignored if log_config_append
+# is set. (boolean value)
+#use_json = false
+
+# Log output to standard error. This option is ignored if log_config_append is
+# set. (boolean value)
+#use_stderr = false
+
+# Format string to use for log messages with context. (string value)
+#logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
+
+# Format string to use for log messages when context is undefined. (string
+# value)
+#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
+
+# Additional data to append to log message when logging level for the message
+# is DEBUG. (string value)
+#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
+
+# Prefix each line of exception output with this format. (string value)
+#logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
+
+# Defines the format string for %(user_identity)s that is used in
+# logging_context_format_string. (string value)
+#logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
+
+# List of package logging levels in logger=LEVEL pairs. This option is ignored
+# if log_config_append is set. (list value)
+#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
+
+# Enables or disables publication of error events. (boolean value)
+#publish_errors = false
+
+# The format for an instance that is passed with the log message. (string
+# value)
+#instance_format = "[instance: %(uuid)s] "
+
+# The format for an instance UUID that is passed with the log message. (string
+# value)
+#instance_uuid_format = "[instance: %(uuid)s] "
+
+# Interval, number of seconds, of log rate limiting. (integer value)
+#rate_limit_interval = 0
+
+# Maximum number of logged messages per rate_limit_interval. (integer value)
+#rate_limit_burst = 0
+
+# Log level name used by rate limiting: CRITICAL, ERROR, INFO, WARNING, DEBUG
+# or empty string. Logs with level greater or equal to rate_limit_except_level
+# are not filtered. An empty string means that all levels are filtered. (string
+# value)
+#rate_limit_except_level = CRITICAL
+
+# Enables or disables fatal status of deprecations. (boolean value)
+#fatal_deprecations = false
+
+#
+# From oslo.messaging
+#
+
+# Size of RPC connection pool. (integer value)
+#rpc_conn_pool_size = 30
+
+# The pool size limit for connections expiration policy (integer value)
+#conn_pool_min_size = 2
+
+# The time-to-live in sec of idle connections in the pool (integer value)
+#conn_pool_ttl = 1200
+
+# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
+# The "host" option should point or resolve to this address. (string value)
+#rpc_zmq_bind_address = *
+
+# MatchMaker driver. (string value)
+# Possible values:
+# redis - <No description provided>
+# sentinel - <No description provided>
+# dummy - <No description provided>
+#rpc_zmq_matchmaker = redis
+
+# Number of ZeroMQ contexts, defaults to 1. (integer value)
+#rpc_zmq_contexts = 1
+
+# Maximum number of ingress messages to locally buffer per topic. Default is
+# unlimited. (integer value)
+#rpc_zmq_topic_backlog = <None>
+
+# Directory for holding IPC sockets. (string value)
+#rpc_zmq_ipc_dir = /var/run/openstack
+
+# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
+# "host" option, if running Nova. (string value)
+#rpc_zmq_host = localhost
+
+# Number of seconds to wait before all pending messages will be sent after
+# closing a socket. The default value of -1 specifies an infinite linger
+# period. The value of 0 specifies no linger period. Pending messages shall be
+# discarded immediately when the socket is closed. Positive values specify an
+# upper bound for the linger period. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_cast_timeout
+#zmq_linger = -1
+
+# The default number of seconds that poll should wait. Poll raises timeout
+# exception when timeout expired. (integer value)
+#rpc_poll_timeout = 1
+
+
+# Expiration timeout in seconds of a name service record about existing target
+# ( < 0 means no timeout). (integer value)
+#zmq_target_expire = 300
+
+# Update period in seconds of a name service record about existing target.
+# (integer value)
+#zmq_target_update = 180
+
+# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
+# value)
+#use_pub_sub = false
+
+# Use ROUTER remote proxy. (boolean value)
+#use_router_proxy = false
+
+# This option makes direct connections dynamic or static. It makes sense only
+# with use_router_proxy=False which means to use direct connections for direct
+# message types (ignored otherwise). (boolean value)
+#use_dynamic_connections = false
+
+# How many additional connections to a host will be made for failover reasons.
+# This option is actual only in dynamic connections mode. (integer value)
+#zmq_failover_connections = 2
+
+# Minimal port number for random ports range. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#rpc_zmq_min_port = 49153
+
+# Maximal port number for random ports range. (integer value)
+# Minimum value: 1
+# Maximum value: 65536
+#rpc_zmq_max_port = 65536
+
+# Number of retries to find free port number before fail with ZMQBindError.
+# (integer value)
+#rpc_zmq_bind_port_retries = 100
+
+# Default serialization mechanism for serializing/deserializing
+# outgoing/incoming messages (string value)
+# Possible values:
+# json - <No description provided>
+# msgpack - <No description provided>
+#rpc_zmq_serialization = json
+
+# This option configures round-robin mode in zmq socket. True means not keeping
+# a queue when server side disconnects. False means to keep queue and messages
+# even if server is disconnected, when the server appears we send all
+# accumulated messages to it. (boolean value)
+#zmq_immediate = true
+
+# Enable/disable TCP keepalive (KA) mechanism. The default value of -1 (or any
+# other negative value) means to skip any overrides and leave it to OS default;
+# 0 and 1 (or any other positive value) mean to disable and enable the option
+# respectively. (integer value)
+#zmq_tcp_keepalive = -1
+
+# The duration between two keepalive transmissions in idle condition. The unit
+# is platform dependent, for example, seconds in Linux, milliseconds in Windows
+# etc. The default value of -1 (or any other negative value and 0) means to
+# skip any overrides and leave it to OS default. (integer value)
+#zmq_tcp_keepalive_idle = -1
+
+# The number of retransmissions to be carried out before declaring that remote
+# end is not available. The default value of -1 (or any other negative value
+# and 0) means to skip any overrides and leave it to OS default. (integer
+# value)
+#zmq_tcp_keepalive_cnt = -1
+
+# The duration between two successive keepalive retransmissions, if
+# acknowledgement to the previous keepalive transmission is not received. The
+# unit is platform dependent, for example, seconds in Linux, milliseconds in
+# Windows etc. The default value of -1 (or any other negative value and 0)
+# means to skip any overrides and leave it to OS default. (integer value)
+#zmq_tcp_keepalive_intvl = -1
+
+# Maximum number of (green) threads to work concurrently. (integer value)
+#rpc_thread_pool_size = 100
+
+# Expiration timeout in seconds of a sent/received message after which it is
+# not tracked anymore by a client/server. (integer value)
+#rpc_message_ttl = 300
+
+# Wait for message acknowledgements from receivers. This mechanism works only
+# via proxy without PUB/SUB. (boolean value)
+#rpc_use_acks = false
+
+# Number of seconds to wait for an ack from a cast/call. After each retry
+# attempt this timeout is multiplied by some specified multiplier. (integer
+# value)
+#rpc_ack_timeout_base = 15
+
+# Number to multiply base ack timeout by after each retry attempt. (integer
+# value)
+#rpc_ack_timeout_multiplier = 2
+
+# Default number of message sending attempts in case of any problems occurred:
+# positive value N means at most N retries, 0 means no retries, None or -1 (or
+# any other negative values) mean to retry forever. This option is used only if
+# acknowledgments are enabled. (integer value)
+#rpc_retry_attempts = 3
+
+# List of publisher hosts SubConsumer can subscribe on. This option has higher
+# priority then the default publishers list taken from the matchmaker. (list
+# value)
+#subscribe_on =
+
+# Size of executor thread pool when executor is threading or eventlet. (integer
+# value)
+# Deprecated group/name - [DEFAULT]/rpc_thread_pool_size
+#executor_thread_pool_size = 64
+
+# Seconds to wait for a response from a call. (integer value)
+#rpc_response_timeout = 60
+rpc_response_timeout = 3600
+
+# The network address and optional user credentials for connecting to the
+# messaging backend, in URL format. The expected format is:
+#
+# driver://[user:pass@]host:port[,[userN:passN@]hostN:portN]/virtual_host?query
+#
+# Example: rabbit://rabbitmq:password@127.0.0.1:5672//
+#
+# For full details on the fields in the URL see the documentation of
+# oslo_messaging.TransportURL at
+# https://docs.openstack.org/oslo.messaging/latest/reference/transport.html
+# (string value)
+#transport_url = <None>
+transport_url = rabbit://openstack:opnfv_secret@172.16.10.36:5672//openstack
+
+# DEPRECATED: The messaging driver to use, defaults to rabbit. Other drivers
+# include amqp and zmq. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rpc_backend = rabbit
+
+# The default exchange under which topics are scoped. May be overridden by an
+# exchange name specified in the transport_url option. (string value)
+#control_exchange = keystone
+control_exchange = cinder
+
+
+#
+# From oslo.service.periodic_task
+#
+
+# Some periodic tasks can be run in a separate process. Should we run them
+# here? (boolean value)
+#run_external_periodic_tasks = true
+
+#
+# From oslo.service.service
+#
+
+# Enable eventlet backdoor.  Acceptable values are 0, <port>, and
+# <start>:<end>, where 0 results in listening on a random tcp port number;
+# <port> results in listening on the specified port number (and not enabling
+# backdoor if that port is in use); and <start>:<end> results in listening on
+# the smallest unused port number within the specified range of port numbers.
+# The chosen port is displayed in the service's log file. (string value)
+#backdoor_port = <None>
+
+# Enable eventlet backdoor, using the provided path as a unix socket that can
+# receive connections. This option is mutually exclusive with 'backdoor_port'
+# in that only one should be provided. If both are provided then the existence
+# of this option overrides the usage of that option. (string value)
+#backdoor_socket = <None>
+
+# Enables or disables logging values of all registered options when starting a
+# service (at DEBUG level). (boolean value)
+#log_options = true
+
+# Specify a timeout after which a gracefully shutdown server will exit. Zero
+# value means endless wait. (integer value)
+#graceful_shutdown_timeout = 60
+
+#
+# From oslo.service.wsgi
+#
+
+# File name for the paste.deploy config for api service (string value)
+#api_paste_config = api-paste.ini
+
+# A python format string that is used as the template to generate log lines.
+# The following values can beformatted into it: client_ip, date_time,
+# request_line, status_code, body_length, wall_seconds. (string value)
+#wsgi_log_format = %(client_ip)s "%(request_line)s" status: %(status_code)s  len: %(body_length)s time: %(wall_seconds).7f
+
+# Sets the value of TCP_KEEPIDLE in seconds for each server socket. Not
+# supported on OS X. (integer value)
+#tcp_keepidle = 600
+
+# Size of the pool of greenthreads used by wsgi (integer value)
+#wsgi_default_pool_size = 100
+
+# Maximum line size of message headers to be accepted. max_header_line may need
+# to be increased when using large tokens (typically those generated when
+# keystone is configured to use PKI tokens with big service catalogs). (integer
+# value)
+#max_header_line = 16384
+
+# If False, closes the client socket connection explicitly. (boolean value)
+#wsgi_keep_alive = true
+
+# Timeout for client connections' socket operations. If an incoming connection
+# is idle for this number of seconds it will be closed. A value of '0' means
+# wait forever. (integer value)
+#client_socket_timeout = 900
+
+
+[backend]
+
+#
+# From cinder
+#
+
+# Backend override of host value. (string value)
+#backend_host = <None>
+[lvm-driver]
+host=cmp001
+volume_driver = cinder.volume.drivers.lvm.LVMVolumeDriver
+volume_backend_name=lvm-driver
 iscsi_helper = tgtadm
-volume_name_template = volume-%s
-volume_group = cinder-volumes
-verbose = True
-auth_strategy = keystone
-state_path = /var/lib/cinder
-lock_path = /var/lock/cinder
-volumes_dir = /var/lib/cinder/volumes
-enabled_backends = lvm
+volume_group = vgroot
+
+
+[backend_defaults]
+
+#
+# From cinder
+#
+
+# Number of times to attempt to run flakey shell commands (integer value)
+#num_shell_tries = 3
+
+# The percentage of backend capacity is reserved (integer value)
+# Minimum value: 0
+# Maximum value: 100
+#reserved_percentage = 0
+
+# Prefix for iSCSI volumes (string value)
+# Deprecated group/name - [backend_defaults]/iscsi_target_prefix
+#target_prefix = iqn.2010-10.org.openstack:
+
+# The IP address that the iSCSI daemon is listening on (string value)
+# Deprecated group/name - [backend_defaults]/iscsi_ip_address
+#target_ip_address = $my_ip
+
+# The list of secondary IP addresses of the iSCSI daemon (list value)
+#iscsi_secondary_ip_addresses =
+
+# The port that the iSCSI daemon is listening on (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# Deprecated group/name - [backend_defaults]/iscsi_port
+#target_port = 3260
+
+# The maximum number of times to rescan targets to find volume (integer value)
+#num_volume_device_scan_tries = 3
+
+# The backend name for a given driver implementation (string value)
+#volume_backend_name = <None>
+
+# Do we attach/detach volumes in cinder using multipath for volume to image and
+# image to volume transfers? (boolean value)
+#use_multipath_for_image_xfer = false
+
+# If this is set to True, attachment of volumes for image transfer will be
+# aborted when multipathd is not running. Otherwise, it will fallback to single
+# path. (boolean value)
+#enforce_multipath_for_image_xfer = false
+
+# Method used to wipe old volumes (string value)
+# Possible values:
+# none - <No description provided>
+# zero - <No description provided>
+#volume_clear = zero
+
+# Size in MiB to wipe at start of old volumes. 1024 MiBat max. 0 => all
+# (integer value)
+# Maximum value: 1024
+#volume_clear_size = 0
+
+# The flag to pass to ionice to alter the i/o priority of the process used to
+# zero a volume after deletion, for example "-c3" for idle only priority.
+# (string value)
+#volume_clear_ionice = <None>
+
+# Target user-land tool to use. tgtadm is default, use lioadm for LIO iSCSI
+# support, scstadmin for SCST target support, ietadm for iSCSI Enterprise
+# Target, iscsictl for Chelsio iSCSI Target, nvmet for NVMEoF support, or fake
+# for testing. (string value)
+# Possible values:
+# tgtadm - <No description provided>
+# lioadm - <No description provided>
+# scstadmin - <No description provided>
+# iscsictl - <No description provided>
+# ietadm - <No description provided>
+# nvmet - <No description provided>
+# fake - <No description provided>
+# Deprecated group/name - [backend_defaults]/iscsi_helper
+#target_helper = tgtadm
+
+# Volume configuration file storage directory (string value)
+#volumes_dir = $state_path/volumes
+
+# IET configuration file (string value)
+#iet_conf = /etc/iet/ietd.conf
+
+# Chiscsi (CXT) global defaults configuration file (string value)
+#chiscsi_conf = /etc/chelsio-iscsi/chiscsi.conf
+
+# Sets the behavior of the iSCSI target to either perform blockio or fileio
+# optionally, auto can be set and Cinder will autodetect type of backing device
+# (string value)
+# Possible values:
+# blockio - <No description provided>
+# fileio - <No description provided>
+# auto - <No description provided>
+#iscsi_iotype = fileio
+
+# The default block size used when copying/clearing volumes (string value)
+#volume_dd_blocksize = 1M
+
+# The blkio cgroup name to be used to limit bandwidth of volume copy (string
+# value)
+#volume_copy_blkio_cgroup_name = cinder-volume-copy
+
+# The upper limit of bandwidth of volume copy. 0 => unlimited (integer value)
+#volume_copy_bps_limit = 0
+
+# Sets the behavior of the iSCSI target to either perform write-back(on) or
+# write-through(off). This parameter is valid if target_helper is set to
+# tgtadm. (string value)
+# Possible values:
+# on - <No description provided>
+# off - <No description provided>
+#iscsi_write_cache = on
+
+# Sets the target-specific flags for the iSCSI target. Only used for tgtadm to
+# specify backing device flags using bsoflags option. The specified string is
+# passed as is to the underlying tool. (string value)
+#iscsi_target_flags =
+
+# Determines the target protocol for new volumes, created with tgtadm, lioadm
+# and nvmet target helpers. In order to enable RDMA, this parameter should be
+# set with the value "iser". The supported iSCSI protocol values are "iscsi"
+# and "iser", in case of nvmet target set to "nvmet_rdma". (string value)
+# Possible values:
+# iscsi - <No description provided>
+# iser - <No description provided>
+# nvmet_rdma - <No description provided>
+# Deprecated group/name - [backend_defaults]/iscsi_protocol
+#target_protocol = iscsi
+
+# The path to the client certificate key for verification, if the driver
+# supports it. (string value)
+#driver_client_cert_key = <None>
+
+# The path to the client certificate for verification, if the driver supports
+# it. (string value)
+#driver_client_cert = <None>
+
+# Tell driver to use SSL for connection to backend storage if the driver
+# supports it. (boolean value)
+#driver_use_ssl = false
+
+# Representation of the over subscription ratio when thin provisioning is
+# enabled. Default ratio is 20.0, meaning provisioned capacity can be 20 times
+# of the total physical capacity. If the ratio is 10.5, it means provisioned
+# capacity can be 10.5 times of the total physical capacity. A ratio of 1.0
+# means provisioned capacity cannot exceed the total physical capacity. If
+# ratio is 'auto', Cinder will automatically calculate the ratio based on the
+# provisioned capacity and the used space. If not set to auto, the ratio has to
+# be a minimum of 1.0. (string value)
+#max_over_subscription_ratio = 20.0
+
+# Certain ISCSI targets have predefined target names, SCST target driver uses
+# this name. (string value)
+#scst_target_iqn_name = <None>
+
+# SCST target implementation can choose from multiple SCST target drivers.
+# (string value)
+#scst_target_driver = iscsi
+
+# Option to enable/disable CHAP authentication for targets. (boolean value)
+#use_chap_auth = false
+
+# CHAP user name. (string value)
+#chap_username =
+
+# Password for specified CHAP account name. (string value)
+#chap_password =
+
+# Namespace for driver private data values to be saved in. (string value)
+#driver_data_namespace = <None>
+
+# String representation for an equation that will be used to filter hosts. Only
+# used when the driver filter is set to be used by the Cinder scheduler.
+# (string value)
+#filter_function = <None>
+
+# String representation for an equation that will be used to determine the
+# goodness of a host. Only used when using the goodness weigher is set to be
+# used by the Cinder scheduler. (string value)
+#goodness_function = <None>
+
+# If set to True the http client will validate the SSL certificate of the
+# backend endpoint. (boolean value)
+#driver_ssl_cert_verify = false
+
+# Can be used to specify a non default path to a CA_BUNDLE file or directory
+# with certificates of trusted CAs, which will be used to validate the backend
+# (string value)
+#driver_ssl_cert_path = <None>
+
+# List of options that control which trace info is written to the DEBUG log
+# level to assist developers. Valid values are method and api. (list value)
+#trace_flags = <None>
+
+# Multi opt of dictionaries to represent a replication target device.  This
+# option may be specified multiple times in a single config section to specify
+# multiple replication target devices.  Each entry takes the standard dict
+# config form: replication_device =
+# target_device_id:<required>,key1:value1,key2:value2... (dict value)
+#replication_device = <None>
+
+# If set to True, upload-to-image in raw format will create a cloned volume and
+# register its location to the image service, instead of uploading the volume
+# content. The cinder backend and locations support must be enabled in the
+# image service. (boolean value)
+#image_upload_use_cinder_backend = false
+
+# If set to True, the image volume created by upload-to-image will be placed in
+# the internal tenant. Otherwise, the image volume is created in the current
+# context's tenant. (boolean value)
+#image_upload_use_internal_tenant = false
+
+# Enable the image volume cache for this backend. (boolean value)
+#image_volume_cache_enabled = false
+
+# Max size of the image volume cache for this backend in GB. 0 => unlimited.
+# (integer value)
+#image_volume_cache_max_size_gb = 0
+
+# Max number of entries allowed in the image volume cache. 0 => unlimited.
+# (integer value)
+#image_volume_cache_max_count = 0
+
+# Report to clients of Cinder that the backend supports discard (aka.
+# trim/unmap). This will not actually change the behavior of the backend or the
+# client directly, it will only notify that it can be used. (boolean value)
+#report_discard_supported = false
+
+# Protocol for transferring data between host and storage back-end. (string
+# value)
+# Possible values:
+# iscsi - <No description provided>
+# fc - <No description provided>
+#storage_protocol = iscsi
+
+# If this is set to True, a temporary snapshot will be created for performing
+# non-disruptive backups. Otherwise a temporary volume will be cloned in order
+# to perform a backup. (boolean value)
+#backup_use_temp_snapshot = false
+
+# Set this to True when you want to allow an unsupported driver to start.
+# Drivers that haven't maintained a working CI system and testing are marked as
+# unsupported until CI is working again.  This also marks a driver as
+# deprecated and may be removed in the next release. (boolean value)
+#enable_unsupported_driver = false
+
+# Availability zone for this volume backend. If not set, the
+# storage_availability_zone option value is used as the default for all
+# backends. (string value)
+#backend_availability_zone = <None>
+
+# The maximum number of times to rescan iSER targetto find volume (integer
+# value)
+#num_iser_scan_tries = 3
+
+# Prefix for iSER volumes (string value)
+#iser_target_prefix = iqn.2010-10.org.openstack:
+
+# The IP address that the iSER daemon is listening on (string value)
+#iser_ip_address = $my_ip
+
+# The port that the iSER daemon is listening on (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#iser_port = 3260
+
+# The name of the iSER target user-land tool to use (string value)
+#iser_helper = tgtadm
+
+# The port that the NVMe target is listening on. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#nvmet_port_id = 1
+
+# The namespace id associated with the subsystem that will be created with the
+# path for the LVM volume. (integer value)
+#nvmet_ns_id = 10
+
+# Hostname for the CoprHD Instance (string value)
+#coprhd_hostname = <None>
+
+# Port for the CoprHD Instance (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#coprhd_port = 4443
+
+# Username for accessing the CoprHD Instance (string value)
+#coprhd_username = <None>
+
+# Password for accessing the CoprHD Instance (string value)
+#coprhd_password = <None>
+
+# Tenant to utilize within the CoprHD Instance (string value)
+#coprhd_tenant = <None>
+
+# Project to utilize within the CoprHD Instance (string value)
+#coprhd_project = <None>
+
+# Virtual Array to utilize within the CoprHD Instance (string value)
+#coprhd_varray = <None>
+
+# True | False to indicate if the storage array in CoprHD is VMAX or VPLEX
+# (boolean value)
+#coprhd_emulate_snapshot = false
+
+# Rest Gateway IP or FQDN for Scaleio (string value)
+#coprhd_scaleio_rest_gateway_host = None
+
+# Rest Gateway Port for Scaleio (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#coprhd_scaleio_rest_gateway_port = 4984
+
+# Username for Rest Gateway (string value)
+#coprhd_scaleio_rest_server_username = <None>
+
+# Rest Gateway Password (string value)
+#coprhd_scaleio_rest_server_password = <None>
+
+# verify server certificate (boolean value)
+#scaleio_verify_server_certificate = false
+
+# Server certificate path (string value)
+#scaleio_server_certificate_path = <None>
+
+# Datera API port. (string value)
+#datera_api_port = 7717
+
+# DEPRECATED: Datera API version. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#datera_api_version = 2
+
+# Timeout for HTTP 503 retry messages (integer value)
+#datera_503_timeout = 120
+
+# Interval between 503 retries (integer value)
+#datera_503_interval = 5
+
+# True to set function arg and return logging (boolean value)
+#datera_debug = false
+
+# ONLY FOR DEBUG/TESTING PURPOSES
+# True to set replica_count to 1 (boolean value)
+#datera_debug_replica_count_override = false
+
+# If set to 'Map' --> OpenStack project ID will be mapped implicitly to Datera
+# tenant ID
+# If set to 'None' --> Datera tenant ID will not be used during volume
+# provisioning
+# If set to anything else --> Datera tenant ID will be the provided value
+# (string value)
+#datera_tenant_id = <None>
+
+# Set to True to disable profiling in the Datera driver (boolean value)
+#datera_disable_profiler = false
+
+# Group name to use for creating volumes. Defaults to "group-0". (string value)
+#eqlx_group_name = group-0
+
+# Maximum retry count for reconnection. Default is 5. (integer value)
+# Minimum value: 0
+#eqlx_cli_max_retries = 5
+
+# Pool in which volumes will be created. Defaults to "default". (string value)
+#eqlx_pool = default
+
+# Storage Center System Serial Number (integer value)
+#dell_sc_ssn = 64702
+
+# Dell API port (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#dell_sc_api_port = 3033
+
+# Name of the server folder to use on the Storage Center (string value)
+#dell_sc_server_folder = openstack
+
+# Name of the volume folder to use on the Storage Center (string value)
+#dell_sc_volume_folder = openstack
+
+# Enable HTTPS SC certificate verification (boolean value)
+#dell_sc_verify_cert = false
+
+# IP address of secondary DSM volume (string value)
+#secondary_san_ip =
+
+# Secondary DSM user name (string value)
+#secondary_san_login = Admin
+
+# Secondary DSM user password name (string value)
+#secondary_san_password =
+
+# Secondary Dell API port (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#secondary_sc_api_port = 3033
+
+# Dell SC API async call default timeout in seconds. (integer value)
+#dell_api_async_rest_timeout = 15
+
+# Dell SC API sync call default timeout in seconds. (integer value)
+#dell_api_sync_rest_timeout = 30
+
+# Domain IP to be excluded from iSCSI returns. (IP address value)
+#excluded_domain_ip = <None>
+
+# Server OS type to use when creating a new server on the Storage Center.
+# (string value)
+#dell_server_os = Red Hat Linux 6.x
+
+# Gateway REST server port. (string value)
+#sio_rest_server_port = 443
+
+# Verify server certificate. (boolean value)
+#sio_verify_server_certificate = false
+
+# Server certificate path. (string value)
+#sio_server_certificate_path = <None>
+
+# Round volume sizes up to 8GB boundaries. VxFlex OS/ScaleIO requires volumes
+# to be sized in multiples of 8GB. If set to False, volume creation will fail
+# for volumes not sized properly (boolean value)
+#sio_round_volume_capacity = true
+
+# Unmap volumes before deletion. (boolean value)
+#sio_unmap_volume_before_deletion = false
+
+# Storage Pools. Comma separated list of storage pools used to provide volumes.
+# Each pool should be specified as a protection_domain_name:storage_pool_name
+# value (string value)
+#sio_storage_pools = <None>
+
+# DEPRECATED: Protection Domain ID. (string value)
+# This option is deprecated for removal since Pike.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by sio_storage_pools option
+#sio_protection_domain_id = <None>
+
+# DEPRECATED: Protection Domain name. (string value)
+# This option is deprecated for removal since Pike.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by sio_storage_pools option
+#sio_protection_domain_name = <None>
+
+# DEPRECATED: Storage Pool name. (string value)
+# This option is deprecated for removal since Pike.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by sio_storage_pools option
+#sio_storage_pool_name = <None>
+
+# DEPRECATED: Storage Pool ID. (string value)
+# This option is deprecated for removal since Pike.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by sio_storage_pools option
+#sio_storage_pool_id = <None>
+
+# VxFlex OS/ScaleIO API version. This value should be left as the default value
+# unless otherwise instructed by technical support. (string value)
+#sio_server_api_version = <None>
+
+# max_over_subscription_ratio setting for the driver. Maximum value allowed is
+# 10.0. (floating point value)
+#sio_max_over_subscription_ratio = 10.0
+
+# Allow volumes to be created in Storage Pools when zero padding is disabled.
+# This option should not be enabled if multiple tenants will utilize volumes
+# from a shared Storage Pool. (boolean value)
+#sio_allow_non_padded_volumes = false
+
+# A comma-separated list of storage pool names to be used. (list value)
+#unity_storage_pool_names =
+
+# A comma-separated list of iSCSI or FC ports to be used. Each port can be
+# Unix-style glob expressions. (list value)
+#unity_io_ports =
+
+# To remove the host from Unity when the last LUN is detached from it. By
+# default, it is False. (boolean value)
+#remove_empty_host = false
+
+# Use this value to specify length of the interval in seconds. (integer value)
+#interval = 3
+
+# Use this value to specify number of retries. (integer value)
+#retries = 200
+
+# Use this value to specify the maximum number of unlinks for the temporary
+# snapshots before a clone operation. (integer value)
+#vmax_snapvx_unlink_limit = 3
+
+# Use this value to enable the initiator_check. (boolean value)
+#initiator_check = false
+
+# DEPRECATED: REST server port number. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# This option is deprecated for removal since 13.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Unisphere port should now be set using the common san_api_port config
+# option instead.
+#san_rest_port = 8443
+
+# Serial number of the array to connect to. (string value)
+#vmax_array = <None>
+
+# Storage resource pool on array to use for provisioning. (string value)
+#vmax_srp = <None>
+
+# Service level to use for provisioning storage. Setting this as an extra spec
+# in pool_name is preferable. (string value)
+#vmax_service_level = <None>
+
+# Workload, setting this as an extra spec in pool_name is preferable. (string
+# value)
+#vmax_workload = <None>
+
+# List of port groups containing frontend ports configured prior for server
+# connection. (list value)
+#vmax_port_groups = <None>
+
+# VNX authentication scope type. By default, the value is global. (string
+# value)
+#storage_vnx_authentication_type = global
+
+# Directory path that contains the VNX security file. Make sure the security
+# file is generated first. (string value)
+#storage_vnx_security_file_dir = <None>
+
+# Naviseccli Path. (string value)
+#naviseccli_path = <None>
+
+# Comma-separated list of storage pool names to be used. (list value)
+#storage_vnx_pool_names = <None>
+
+# Default timeout for CLI operations in minutes. For example, LUN migration is
+# a typical long running operation, which depends on the LUN size and the load
+# of the array. An upper bound in the specific deployment can be set to avoid
+# unnecessary long wait. By default, it is 365 days long. (integer value)
+#default_timeout = 31536000
+
+# Default max number of LUNs in a storage group. By default, the value is 255.
+# (integer value)
+#max_luns_per_storage_group = 255
+
+# To destroy storage group when the last LUN is removed from it. By default,
+# the value is False. (boolean value)
+#destroy_empty_storage_group = false
+
+# Mapping between hostname and its iSCSI initiator IP addresses. (string value)
+#iscsi_initiators = <None>
+
+# Comma separated iSCSI or FC ports to be used in Nova or Cinder. (list value)
+#io_port_list = <None>
+
+# Automatically register initiators. By default, the value is False. (boolean
+# value)
+#initiator_auto_registration = false
+
+# Automatically deregister initiators after the related storage group is
+# destroyed. By default, the value is False. (boolean value)
+#initiator_auto_deregistration = false
+
+# DEPRECATED: Report free_capacity_gb as 0 when the limit to maximum number of
+# pool LUNs is reached. By default, the value is False. (boolean value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#check_max_pool_luns_threshold = false
+
+# Delete a LUN even if it is in Storage Groups. By default, the value is False.
+# (boolean value)
+#force_delete_lun_in_storagegroup = false
+
+# Force LUN creation even if the full threshold of pool is reached. By default,
+# the value is False. (boolean value)
+#ignore_pool_full_threshold = false
+
+# XMS cluster id in multi-cluster environment (string value)
+#xtremio_cluster_name =
+
+# Number of retries in case array is busy (integer value)
+#xtremio_array_busy_retry_count = 5
+
+# Interval between retries in case array is busy (integer value)
+#xtremio_array_busy_retry_interval = 5
+
+# Number of volumes created from each cached glance image (integer value)
+#xtremio_volumes_per_glance_cache = 100
+
+# Should the driver remove initiator groups with no volumes after the last
+# connection was terminated. Since the behavior till now was to leave the IG
+# be, we default to False (not deleting IGs without connected volumes); setting
+# this parameter to True will remove any IG after terminating its connection to
+# the last volume. (boolean value)
+#xtremio_clean_unused_ig = false
+
+# The IP of DMS client socket server (IP address value)
+#disco_client = 127.0.0.1
+
+# The port to connect DMS client socket server (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#disco_client_port = 9898
+
+# DEPRECATED: Path to the wsdl file to communicate with DISCO request manager
+# (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#disco_wsdl_path = /etc/cinder/DISCOService.wsdl
+
+# DEPRECATED: The IP address of the REST server (IP address value)
+# Deprecated group/name - [DEFAULT]/rest_ip
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Using san_ip later
+#disco_rest_ip = <None>
+
+# Use soap client or rest client for communicating with DISCO. Possible values
+# are "soap" or "rest". (string value)
+# Possible values:
+# soap - <No description provided>
+# rest - <No description provided>
+# Deprecated group/name - [DEFAULT]/choice_client
+#disco_choice_client = <None>
+
+# DEPRECATED: The port of DISCO source API (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Using san_api_port later
+#disco_src_api_port = 8080
+
+# Prefix before volume name to differentiate DISCO volume created through
+# openstack and the other ones (string value)
+# Deprecated group/name - [backend_defaults]/volume_name_prefix
+#disco_volume_name_prefix = openstack-
+
+# How long we check whether a snapshot is finished before we give up (integer
+# value)
+# Deprecated group/name - [backend_defaults]/snapshot_check_timeout
+#disco_snapshot_check_timeout = 3600
+
+# How long we check whether a restore is finished before we give up (integer
+# value)
+# Deprecated group/name - [backend_defaults]/restore_check_timeout
+#disco_restore_check_timeout = 3600
+
+# How long we check whether a clone is finished before we give up (integer
+# value)
+# Deprecated group/name - [backend_defaults]/clone_check_timeout
+#disco_clone_check_timeout = 3600
+
+# How long we wait before retrying to get an item detail (integer value)
+# Deprecated group/name - [backend_defaults]/retry_interval
+#disco_retry_interval = 1
+
+# Number of nodes that should replicate the data. (integer value)
+#drbdmanage_redundancy = 1
+
+# Resource deployment completion wait policy. (string value)
+#drbdmanage_resource_policy = {"ratio": "0.51", "timeout": "60"}
+
+# Disk options to set on new resources. See http://www.drbd.org/en/doc/users-
+# guide-90/re-drbdconf for all the details. (string value)
+#drbdmanage_disk_options = {"c-min-rate": "4M"}
+
+# Net options to set on new resources. See http://www.drbd.org/en/doc/users-
+# guide-90/re-drbdconf for all the details. (string value)
+#drbdmanage_net_options = {"connect-int": "4", "allow-two-primaries": "yes", "ko-count": "30", "max-buffers": "20000", "ping-timeout": "100"}
+
+# Resource options to set on new resources. See http://www.drbd.org/en/doc
+# /users-guide-90/re-drbdconf for all the details. (string value)
+#drbdmanage_resource_options = {"auto-promote-timeout": "300"}
+
+# Snapshot completion wait policy. (string value)
+#drbdmanage_snapshot_policy = {"count": "1", "timeout": "60"}
+
+# Volume resize completion wait policy. (string value)
+#drbdmanage_resize_policy = {"timeout": "60"}
+
+# Resource deployment completion wait plugin. (string value)
+#drbdmanage_resource_plugin = drbdmanage.plugins.plugins.wait_for.WaitForResource
+
+# Snapshot completion wait plugin. (string value)
+#drbdmanage_snapshot_plugin = drbdmanage.plugins.plugins.wait_for.WaitForSnapshot
+
+# Volume resize completion wait plugin. (string value)
+#drbdmanage_resize_plugin = drbdmanage.plugins.plugins.wait_for.WaitForVolumeSize
+
+# If set, the c-vol node will receive a useable /dev/drbdX device, even if the
+# actual data is stored on other nodes only. This is useful for debugging,
+# maintenance, and to be able to do the iSCSI export from the c-vol node.
+# (boolean value)
+#drbdmanage_devs_on_volume = true
+
+# config file for cinder eternus_dx volume driver (string value)
+#cinder_eternus_config_file = /etc/cinder/cinder_fujitsu_eternus_dx.xml
+
+# The flag of thin storage allocation. (boolean value)
+#dsware_isthin = false
+
+# Fusionstorage manager ip addr for cinder-volume. (string value)
+#dsware_manager =
+
+# Fusionstorage agent ip addr range. (string value)
+#fusionstorageagent =
+
+# Pool type, like sata-2copy. (string value)
+#pool_type = default
+
+# Pool id permit to use. (list value)
+#pool_id_filter =
+
+# Create clone volume timeout. (integer value)
+#clone_volume_timeout = 680
+
+# Space network name to use for data transfer (string value)
+#hgst_net = Net 1 (IPv4)
+
+# Comma separated list of Space storage servers:devices. ex:
+# os1_stor:gbd0,os2_stor:gbd0 (string value)
+#hgst_storage_servers = os:gbd0
+
+# Should spaces be redundantly stored (1/0) (string value)
+#hgst_redundancy = 0
+
+# User to own created spaces (string value)
+#hgst_space_user = root
+
+# Group to own created spaces (string value)
+#hgst_space_group = disk
+
+# UNIX mode for created spaces (string value)
+#hgst_space_mode = 0600
+
+# 3PAR WSAPI Server Url like https://<3par ip>:8080/api/v1 (string value)
+#hpe3par_api_url =
+
+# 3PAR username with the 'edit' role (string value)
+#hpe3par_username =
+
+# 3PAR password for the user specified in hpe3par_username (string value)
+#hpe3par_password =
+
+# List of the CPG(s) to use for volume creation (list value)
+#hpe3par_cpg = OpenStack
+
+# The CPG to use for Snapshots for volumes. If empty the userCPG will be used.
+# (string value)
+#hpe3par_cpg_snap =
+
+# The time in hours to retain a snapshot.  You can't delete it before this
+# expires. (string value)
+#hpe3par_snapshot_retention =
+
+# The time in hours when a snapshot expires  and is deleted.  This must be
+# larger than expiration (string value)
+#hpe3par_snapshot_expiration =
+
+# Enable HTTP debugging to 3PAR (boolean value)
+#hpe3par_debug = false
+
+# List of target iSCSI addresses to use. (list value)
+#hpe3par_iscsi_ips =
+
+# Enable CHAP authentication for iSCSI connections. (boolean value)
+#hpe3par_iscsi_chap_enabled = false
+
+# HPE LeftHand WSAPI Server Url like https://<LeftHand ip>:8081/lhos (uri
+# value)
+# Deprecated group/name - [backend_defaults]/hplefthand_api_url
+#hpelefthand_api_url = <None>
+
+# HPE LeftHand Super user username (string value)
+# Deprecated group/name - [backend_defaults]/hplefthand_username
+#hpelefthand_username = <None>
+
+# HPE LeftHand Super user password (string value)
+# Deprecated group/name - [backend_defaults]/hplefthand_password
+#hpelefthand_password = <None>
+
+# HPE LeftHand cluster name (string value)
+# Deprecated group/name - [backend_defaults]/hplefthand_clustername
+#hpelefthand_clustername = <None>
+
+# Configure CHAP authentication for iSCSI connections (Default: Disabled)
+# (boolean value)
+# Deprecated group/name - [backend_defaults]/hplefthand_iscsi_chap_enabled
+#hpelefthand_iscsi_chap_enabled = false
+
+# Enable HTTP debugging to LeftHand (boolean value)
+# Deprecated group/name - [backend_defaults]/hplefthand_debug
+#hpelefthand_debug = false
+
+# Port number of SSH service. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#hpelefthand_ssh_port = 16022
+
+# The configuration file for the Cinder Huawei driver. (string value)
+#cinder_huawei_conf_file = /etc/cinder/cinder_huawei_conf.xml
+
+# The remote device hypermetro will use. (string value)
+#hypermetro_devices = <None>
+
+# The remote metro device san user. (string value)
+#metro_san_user = <None>
+
+# The remote metro device san password. (string value)
+#metro_san_password = <None>
+
+# The remote metro device domain name. (string value)
+#metro_domain_name = <None>
+
+# The remote metro device request url. (string value)
+#metro_san_address = <None>
+
+# The remote metro device pool names. (string value)
+#metro_storage_pools = <None>
+
+# Connection protocol should be FC. (Default is FC.) (string value)
+#flashsystem_connection_protocol = FC
+
+# Allows vdisk to multi host mapping. (Default is True) (boolean value)
+#flashsystem_multihostmap_enabled = true
+
+# DEPRECATED: This option no longer has any affect. It is deprecated and will
+# be removed in the next release. (boolean value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#flashsystem_multipath_enabled = false
+
+# Default iSCSI Port ID of FlashSystem. (Default port is 0.) (integer value)
+#flashsystem_iscsi_portid = 0
+
+# Specifies the path of the GPFS directory where Block Storage volume and
+# snapshot files are stored. (string value)
+#gpfs_mount_point_base = <None>
+
+# Specifies the path of the Image service repository in GPFS.  Leave undefined
+# if not storing images in GPFS. (string value)
+#gpfs_images_dir = <None>
+
+# Specifies the type of image copy to be used.  Set this when the Image service
+# repository also uses GPFS so that image files can be transferred efficiently
+# from the Image service to the Block Storage service. There are two valid
+# values: "copy" specifies that a full copy of the image is made;
+# "copy_on_write" specifies that copy-on-write optimization strategy is used
+# and unmodified blocks of the image file are shared efficiently. (string
+# value)
+# Possible values:
+# copy - <No description provided>
+# copy_on_write - <No description provided>
+# <None> - <No description provided>
+#gpfs_images_share_mode = <None>
+
+# Specifies an upper limit on the number of indirections required to reach a
+# specific block due to snapshots or clones.  A lengthy chain of copy-on-write
+# snapshots or clones can have a negative impact on performance, but improves
+# space utilization.  0 indicates unlimited clone depth. (integer value)
+#gpfs_max_clone_depth = 0
+
+# Specifies that volumes are created as sparse files which initially consume no
+# space. If set to False, the volume is created as a fully allocated file, in
+# which case, creation may take a significantly longer time. (boolean value)
+#gpfs_sparse_volumes = true
+
+# Specifies the storage pool that volumes are assigned to. By default, the
+# system storage pool is used. (string value)
+#gpfs_storage_pool = system
+
+# Comma-separated list of IP address or hostnames of GPFS nodes. (list value)
+#gpfs_hosts =
+
+# Username for GPFS nodes. (string value)
+#gpfs_user_login = root
+
+# Password for GPFS node user. (string value)
+#gpfs_user_password =
+
+# Filename of private key to use for SSH authentication. (string value)
+#gpfs_private_key =
+
+# SSH port to use. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#gpfs_ssh_port = 22
+
+# File containing SSH host keys for the gpfs nodes with which driver needs to
+# communicate. Default=$state_path/ssh_known_hosts (string value)
+#gpfs_hosts_key_file = $state_path/ssh_known_hosts
+
+# Option to enable strict gpfs host key checking while connecting to gpfs
+# nodes. Default=False (boolean value)
+#gpfs_strict_host_key_policy = false
+
+# Mapping between IODevice address and unit address. (string value)
+#ds8k_devadd_unitadd_mapping =
+
+# Set the first two digits of SSID. (string value)
+#ds8k_ssid_prefix = FF
+
+# Reserve LSSs for consistency group. (string value)
+#lss_range_for_cg =
+
+# Set to zLinux if your OpenStack version is prior to Liberty and you're
+# connecting to zLinux systems. Otherwise set to auto. Valid values for this
+# parameter are: 'auto', 'AMDLinuxRHEL', 'AMDLinuxSuse', 'AppleOSX', 'Fujitsu',
+# 'Hp', 'HpTru64', 'HpVms', 'LinuxDT', 'LinuxRF', 'LinuxRHEL', 'LinuxSuse',
+# 'Novell', 'SGI', 'SVC', 'SanFsAIX', 'SanFsLinux', 'Sun', 'VMWare', 'Win2000',
+# 'Win2003', 'Win2008', 'Win2012', 'iLinux', 'nSeries', 'pLinux', 'pSeries',
+# 'pSeriesPowerswap', 'zLinux', 'iSeries'. (string value)
+#ds8k_host_type = auto
+
+# Proxy driver that connects to the IBM Storage Array (string value)
+#proxy = cinder.volume.drivers.ibm.ibm_storage.proxy.IBMStorageProxy
+
+# Connection type to the IBM Storage Array (string value)
+# Possible values:
+# fibre_channel - <No description provided>
+# iscsi - <No description provided>
+#connection_type = iscsi
+
+# CHAP authentication mode, effective only for iscsi (disabled|enabled) (string
+# value)
+# Possible values:
+# disabled - <No description provided>
+# enabled - <No description provided>
+#chap = disabled
+
+# List of Management IP addresses (separated by commas) (string value)
+#management_ips =
+
+# Comma separated list of storage system storage pools for volumes. (list
+# value)
+#storwize_svc_volpool_name = volpool
+
+# Storage system space-efficiency parameter for volumes (percentage) (integer
+# value)
+# Minimum value: -1
+# Maximum value: 100
+#storwize_svc_vol_rsize = 2
+
+# Storage system threshold for volume capacity warnings (percentage) (integer
+# value)
+# Minimum value: -1
+# Maximum value: 100
+#storwize_svc_vol_warning = 0
+
+# Storage system autoexpand parameter for volumes (True/False) (boolean value)
+#storwize_svc_vol_autoexpand = true
+
+# Storage system grain size parameter for volumes (8/32/64/128/256) (integer
+# value)
+#storwize_svc_vol_grainsize = 256
+
+# Storage system compression option for volumes (boolean value)
+#storwize_svc_vol_compression = false
+
+# Enable Easy Tier for volumes (boolean value)
+#storwize_svc_vol_easytier = true
+
+# The I/O group in which to allocate volumes. It can be a comma-separated list
+# in which case the driver will select an io_group based on least number of
+# volumes associated with the io_group. (string value)
+#storwize_svc_vol_iogrp = 0
+
+# Maximum number of seconds to wait for FlashCopy to be prepared. (integer
+# value)
+# Minimum value: 1
+# Maximum value: 600
+#storwize_svc_flashcopy_timeout = 120
+
+# DEPRECATED: This option no longer has any affect. It is deprecated and will
+# be removed in the next release. (boolean value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#storwize_svc_multihostmap_enabled = true
+
+# Allow tenants to specify QOS on create (boolean value)
+#storwize_svc_allow_tenant_qos = false
+
+# If operating in stretched cluster mode, specify the name of the pool in which
+# mirrored copies are stored.Example: "pool2" (string value)
+#storwize_svc_stretched_cluster_partner = <None>
+
+# Specifies secondary management IP or hostname to be used if san_ip is invalid
+# or becomes inaccessible. (string value)
+#storwize_san_secondary_ip = <None>
+
+# Specifies that the volume not be formatted during creation. (boolean value)
+#storwize_svc_vol_nofmtdisk = false
+
+# Specifies the Storwize FlashCopy copy rate to be used when creating a full
+# volume copy. The default is rate is 50, and the valid rates are 1-150.
+# (integer value)
+# Minimum value: 1
+# Maximum value: 150
+#storwize_svc_flashcopy_rate = 50
+
+# Specifies the name of the pool in which mirrored copy is stored. Example:
+# "pool2" (string value)
+#storwize_svc_mirror_pool = <None>
+
+# Specifies the name of the peer pool for hyperswap volume, the peer pool must
+# exist on the other site. (string value)
+#storwize_peer_pool = <None>
+
+# Specifies the site information for host. One WWPN or multi WWPNs used in the
+# host can be specified. For example:
+# storwize_preferred_host_site=site1:wwpn1,site2:wwpn2&wwpn3 or
+# storwize_preferred_host_site=site1:iqn1,site2:iqn2 (dict value)
+#storwize_preferred_host_site =
+
+# This defines an optional cycle period that applies to Global Mirror
+# relationships with a cycling mode of multi. A Global Mirror relationship
+# using the multi cycling_mode performs a complete cycle at most once each
+# period. The default is 300 seconds, and the valid seconds are 60-86400.
+# (integer value)
+# Minimum value: 60
+# Maximum value: 86400
+#cycle_period_seconds = 300
+
+# Connect with multipath (FC only; iSCSI multipath is controlled by Nova)
+# (boolean value)
+#storwize_svc_multipath_enabled = false
+
+# Configure CHAP authentication for iSCSI connections (Default: Enabled)
+# (boolean value)
+#storwize_svc_iscsi_chap_enabled = true
+
+# Name of the pool from which volumes are allocated (string value)
+#infinidat_pool_name = <None>
+
+# Protocol for transferring data between host and storage back-end. (string
+# value)
+# Possible values:
+# iscsi - <No description provided>
+# fc - <No description provided>
+#infinidat_storage_protocol = fc
+
+# List of names of network spaces to use for iSCSI connectivity (list value)
+#infinidat_iscsi_netspaces =
+
+# Specifies whether to turn on compression for newly created volumes. (boolean
+# value)
+#infinidat_use_compression = false
+
+# K2 driver will calculate max_oversubscription_ratio on setting this option as
+# True. (boolean value)
+#auto_calc_max_oversubscription_ratio = false
+
+# Whether or not our private network has unique FQDN on each initiator or not.
+# For example networks with QA systems usually have multiple servers/VMs with
+# the same FQDN.  When true this will create host entries on K2 using the FQDN,
+# when false it will use the reversed IQN/WWNN. (boolean value)
+#unique_fqdn_network = true
+
+# Disabling iSCSI discovery (sendtargets) for multipath connections on K2
+# driver. (boolean value)
+#disable_discovery = false
+
+# Pool or Vdisk name to use for volume creation. (string value)
+#lenovo_backend_name = A
+
+# linear (for VDisk) or virtual (for Pool). (string value)
+# Possible values:
+# linear - <No description provided>
+# virtual - <No description provided>
+#lenovo_backend_type = virtual
+
+# Lenovo api interface protocol. (string value)
+# Possible values:
+# http - <No description provided>
+# https - <No description provided>
+#lenovo_api_protocol = https
+
+# Whether to verify Lenovo array SSL certificate. (boolean value)
+#lenovo_verify_certificate = false
+
+# Lenovo array SSL certificate path. (string value)
+#lenovo_verify_certificate_path = <None>
+
+# List of comma-separated target iSCSI IP addresses. (list value)
+#lenovo_iscsi_ips =
+
+# Name for the VG that will contain exported volumes (string value)
+#volume_group = cinder-volumes
+
+# If >0, create LVs with multiple mirrors. Note that this requires lvm_mirrors
+# + 2 PVs with available space (integer value)
+#lvm_mirrors = 0
+
+# Type of LVM volumes to deploy; (default, thin, or auto). Auto defaults to
+# thin if thin is supported. (string value)
+# Possible values:
+# default - <No description provided>
+# thin - <No description provided>
+# auto - <No description provided>
+#lvm_type = auto
+
+# LVM conf file to use for the LVM driver in Cinder; this setting is ignored if
+# the specified file does not exist (You can also specify 'None' to not use a
+# conf file even if one exists). (string value)
+#lvm_conf_file = /etc/cinder/lvm.conf
+
+# Suppress leaked file descriptor warnings in LVM commands. (boolean value)
+#lvm_suppress_fd_warnings = false
+
+# The storage family type used on the storage system; valid values are
+# ontap_cluster for using clustered Data ONTAP, or eseries for using E-Series.
+# (string value)
+# Possible values:
+# ontap_cluster - <No description provided>
+# eseries - <No description provided>
+#netapp_storage_family = ontap_cluster
+
+# The storage protocol to be used on the data path with the storage system.
+# (string value)
+# Possible values:
+# iscsi - <No description provided>
+# fc - <No description provided>
+# nfs - <No description provided>
+#netapp_storage_protocol = <None>
+
+# The hostname (or IP address) for the storage system or proxy server. (string
+# value)
+#netapp_server_hostname = <None>
+
+# The TCP port to use for communication with the storage system or proxy
+# server. If not specified, Data ONTAP drivers will use 80 for HTTP and 443 for
+# HTTPS; E-Series will use 8080 for HTTP and 8443 for HTTPS. (integer value)
+#netapp_server_port = <None>
+
+# The transport protocol used when communicating with the storage system or
+# proxy server. (string value)
+# Possible values:
+# http - <No description provided>
+# https - <No description provided>
+#netapp_transport_type = http
+
+# Administrative user account name used to access the storage system or proxy
+# server. (string value)
+#netapp_login = <None>
+
+# Password for the administrative user account specified in the netapp_login
+# option. (string value)
+#netapp_password = <None>
+
+# This option specifies the virtual storage server (Vserver) name on the
+# storage cluster on which provisioning of block storage volumes should occur.
+# (string value)
+#netapp_vserver = <None>
+
+# The quantity to be multiplied by the requested volume size to ensure enough
+# space is available on the virtual storage server (Vserver) to fulfill the
+# volume creation request.  Note: this option is deprecated and will be removed
+# in favor of "reserved_percentage" in the Mitaka release. (floating point
+# value)
+#netapp_size_multiplier = 1.2
+
+# This option determines if storage space is reserved for LUN allocation. If
+# enabled, LUNs are thick provisioned. If space reservation is disabled,
+# storage space is allocated on demand. (string value)
+# Possible values:
+# enabled - <No description provided>
+# disabled - <No description provided>
+#netapp_lun_space_reservation = enabled
+
+# If the percentage of available space for an NFS share has dropped below the
+# value specified by this option, the NFS image cache will be cleaned. (integer
+# value)
+#thres_avl_size_perc_start = 20
+
+# When the percentage of available space on an NFS share has reached the
+# percentage specified by this option, the driver will stop clearing files from
+# the NFS image cache that have not been accessed in the last M minutes, where
+# M is the value of the expiry_thres_minutes configuration option. (integer
+# value)
+#thres_avl_size_perc_stop = 60
+
+# This option specifies the threshold for last access time for images in the
+# NFS image cache. When a cache cleaning cycle begins, images in the cache that
+# have not been accessed in the last M minutes, where M is the value of this
+# parameter, will be deleted from the cache to create free space on the NFS
+# share. (integer value)
+#expiry_thres_minutes = 720
+
+# This option is used to specify the path to the E-Series proxy application on
+# a proxy server. The value is combined with the value of the
+# netapp_transport_type, netapp_server_hostname, and netapp_server_port options
+# to create the URL used by the driver to connect to the proxy application.
+# (string value)
+#netapp_webservice_path = /devmgr/v2
+
+# This option is only utilized when the storage family is configured to
+# eseries. This option is used to restrict provisioning to the specified
+# volumes. Specify the value of this option to be a comma separated list of
+# volume hostnames or IP addresses to be used for provisioning. (string
+# value)
+#netapp_volume_ips = <None>
+
+# Password for the NetApp E-Series storage array. (string value)
+#netapp_sa_password = <None>
+
+# This option specifies whether the driver should allow operations that require
+# multiple attachments to a volume. An example would be live migration of
+# servers that have volumes attached. When enabled, this backend is limited to
+# 256 total volumes in order to guarantee volumes can be accessed by more than
+# one host. (boolean value)
+#netapp_enable_multiattach = false
+
+# This option specifies the path of the NetApp copy offload tool binary. Ensure
+# that the binary has execute permissions set which allow the effective user of
+# the cinder-volume process to execute the file. (string value)
+#netapp_copyoffload_tool_path = <None>
+
+# This option defines the type of operating system that will access a LUN
+# exported from Data ONTAP; it is assigned to the LUN at the time it is
+# created. (string value)
+#netapp_lun_ostype = <None>
+
+# This option defines the type of operating system for all initiators that can
+# access a LUN. This information is used when mapping LUNs to individual hosts
+# or groups of hosts. (string value)
+#netapp_host_type = <None>
+
+# This option is used to restrict provisioning to the specified pools. Specify
+# the value of this option to be a regular expression which will be applied to
+# the names of objects from the storage backend which represent pools in
+# Cinder. This option is only utilized when the storage protocol is configured
+# to use iSCSI or FC. (string value)
+# Deprecated group/name - [backend_defaults]/netapp_volume_list
+# Deprecated group/name - [backend_defaults]/netapp_storage_pools
+#netapp_pool_name_search_pattern = (.+)
+
+# Multi opt of dictionaries to represent the aggregate mapping between source
+# and destination back ends when using whole back end replication. For every
+# source aggregate associated with a cinder pool (NetApp FlexVol), you would
+# need to specify the destination aggregate on the replication target device. A
+# replication target device is configured with the configuration option
+# replication_device. Specify this option as many times as you have replication
+# devices. Each entry takes the standard dict config form:
+# netapp_replication_aggregate_map =
+# backend_id:<name_of_replication_device_section>,src_aggr_name1:dest_aggr_name1,src_aggr_name2:dest_aggr_name2,...
+# (dict value)
+#netapp_replication_aggregate_map = <None>
+
+# The maximum time in seconds to wait for existing SnapMirror transfers to
+# complete before aborting during a failover. (integer value)
+# Minimum value: 0
+#netapp_snapmirror_quiesce_timeout = 3600
+
+# A regular expression to limit the API tracing. This option is honored only if
+# enabling ``api`` tracing with the ``trace_flags`` option. By default, all
+# APIs will be traced. (string value)
+#netapp_api_trace_pattern = (.*)
+
+# DEPRECATED: IP address of NexentaEdge management REST API endpoint (string
+# value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Rest address should now be set using the common param depending on
+# driver type, san_ip or nas_host
+#nexenta_rest_address =
+
+# IP address of Nexenta SA (string value)
+#nexenta_host =
+
+# DEPRECATED: HTTP(S) port to connect to Nexenta REST API server. If it is
+# equal zero, 8443 for HTTPS and 8080 for HTTP is used (integer value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Rest address should now be set using the common param san_api_port.
+#nexenta_rest_port = 0
+
+# Use http or https for REST connection (default auto) (string value)
+# Possible values:
+# http - <No description provided>
+# https - <No description provided>
+# auto - <No description provided>
+#nexenta_rest_protocol = auto
+
+# Use secure HTTP for REST connection (default True) (boolean value)
+#nexenta_use_https = true
+
+# Postponed write to backing store or not (boolean value)
+#nexenta_lu_writebackcache_disabled = false
+
+# DEPRECATED: User name to connect to Nexenta SA (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Common user parameters should be used depending on the driver type:
+# san_login or nas_login
+#nexenta_user = admin
+
+# DEPRECATED: Password to connect to Nexenta SA (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Common password parameters should be used depending on the driver
+# type: san_password or nas_password
+#nexenta_password = nexenta
+
+# Nexenta target portal groups (string value)
+#nexenta_iscsi_target_portal_groups =
+
+# Comma separated list of portals for NexentaStor5, informat of
+# IP1:port1,IP2:port2. Port is optional, default=3260. Example:
+# 10.10.10.1:3267,10.10.1.2 (string value)
+#nexenta_iscsi_target_portals =
+
+# Group of hosts which are allowed to access volumes (string value)
+#nexenta_iscsi_target_host_group = all
+
+# Nexenta target portal port (integer value)
+#nexenta_iscsi_target_portal_port = 3260
+
+# Amount of iSCSI LUNs per each target (integer value)
+#nexenta_luns_per_target = 100
+
+# SA Pool that holds all volumes (string value)
+#nexenta_volume = cinder
+
+# IQN prefix for iSCSI targets (string value)
+#nexenta_target_prefix = iqn.1986-03.com.sun:02:cinder
+
+# Prefix for iSCSI target groups on SA (string value)
+#nexenta_target_group_prefix = cinder
+
+# Prefix for iSCSI host groups on SA (string value)
+#nexenta_host_group_prefix = cinder
+
+# Volume group for NexentaStor5 iSCSI (string value)
+#nexenta_volume_group = iscsi
+
+# Compression value for new ZFS folders. (string value)
+# Possible values:
+# on - <No description provided>
+# off - <No description provided>
+# gzip - <No description provided>
+# gzip-1 - <No description provided>
+# gzip-2 - <No description provided>
+# gzip-3 - <No description provided>
+# gzip-4 - <No description provided>
+# gzip-5 - <No description provided>
+# gzip-6 - <No description provided>
+# gzip-7 - <No description provided>
+# gzip-8 - <No description provided>
+# gzip-9 - <No description provided>
+# lzjb - <No description provided>
+# zle - <No description provided>
+# lz4 - <No description provided>
+#nexenta_dataset_compression = on
+
+# Deduplication value for new ZFS folders. (string value)
+# Possible values:
+# on - <No description provided>
+# off - <No description provided>
+# sha256 - <No description provided>
+# verify - <No description provided>
+# sha256, verify - <No description provided>
+#nexenta_dataset_dedup = off
+
+# A folder where cinder created datasets will reside. (string value)
+#nexenta_folder =
+
+# Human-readable description for the folder. (string value)
+#nexenta_dataset_description =
+
+# Block size for datasets (integer value)
+#nexenta_blocksize = 4096
+
+# Block size for datasets (integer value)
+#nexenta_ns5_blocksize = 32
+
+# Enables or disables the creation of sparse datasets (boolean value)
+#nexenta_sparse = false
+
+# File with the list of available nfs shares (string value)
+#nexenta_shares_config = /etc/cinder/nfs_shares
+
+# Base directory that contains NFS share mount points (string value)
+#nexenta_mount_point_base = $state_path/mnt
+
+# Enables or disables the creation of volumes as sparsed files that take no
+# space. If disabled (False), volume is created as a regular file, which takes
+# a long time. (boolean value)
+#nexenta_sparsed_volumes = true
+
+# If set True cache NexentaStor appliance volroot option value. (boolean value)
+#nexenta_nms_cache_volroot = true
+
+# Enable stream compression, level 1..9. 1 - gives best speed; 9 - gives best
+# compression. (integer value)
+#nexenta_rrmgr_compression = 0
+
+# TCP Buffer size in KiloBytes. (integer value)
+#nexenta_rrmgr_tcp_buf_size = 4096
+
+# Number of TCP connections. (integer value)
+#nexenta_rrmgr_connections = 2
+
+# NexentaEdge logical path of directory to store symbolic links to NBDs (string
+# value)
+#nexenta_nbd_symlinks_dir = /dev/disk/by-path
+
+# User name to connect to NexentaEdge. (string value)
+#nexenta_rest_user = admin
+
+# Password to connect to NexentaEdge. (string value)
+#nexenta_rest_password = nexenta
+
+# NexentaEdge logical path of bucket for LUNs (string value)
+#nexenta_lun_container =
+
+# NexentaEdge iSCSI service name (string value)
+#nexenta_iscsi_service =
+
+# DEPRECATED: NexentaEdge iSCSI Gateway client address for non-VIP service
+# (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: iSCSI target address should now be set using the common param
+# target_ip_address.
+#nexenta_client_address =
+
+# NexentaEdge iSCSI LUN object IOPS limit (integer value)
+#nexenta_iops_limit = 0
+
+# NexentaEdge iSCSI LUN object chunk size (integer value)
+#nexenta_chunksize = 32768
+
+# NexentaEdge iSCSI LUN object replication count. (integer value)
+#nexenta_replication_count = 3
+
+# Defines whether NexentaEdge iSCSI LUN object has encryption enabled. (boolean
+# value)
+#nexenta_encryption = false
+
+# File with the list of available NFS shares. (string value)
+#nfs_shares_config = /etc/cinder/nfs_shares
+
+# Create volumes as sparsed files which take no space. If set to False volume
+# is created as regular file. In such case volume creation takes a lot of time.
+# (boolean value)
+#nfs_sparsed_volumes = true
+
+# Create volumes as QCOW2 files rather than raw files. (boolean value)
+#nfs_qcow2_volumes = false
+
+# Base dir containing mount points for NFS shares. (string value)
+#nfs_mount_point_base = $state_path/mnt
+
+# Mount options passed to the NFS client. See section of the NFS man page for
+# details. (string value)
+#nfs_mount_options = <None>
+
+# The number of attempts to mount NFS shares before raising an error.  At least
+# one attempt will be made to mount an NFS share, regardless of the value
+# specified. (integer value)
+#nfs_mount_attempts = 3
+
+# Enable support for snapshots on the NFS driver. Platforms using libvirt
+# <1.2.7 will encounter issues with this feature. (boolean value)
+#nfs_snapshot_support = false
+
+# Nimble volume pool name (string value)
+#nimble_pool_name = default
+
+# Nimble Subnet Label (string value)
+#nimble_subnet_label = *
+
+# Whether to verify Nimble SSL Certificate (boolean value)
+#nimble_verify_certificate = false
+
+# Path to Nimble Array SSL certificate (string value)
+#nimble_verify_cert_path = <None>
+
+# DPL pool uuid in which DPL volumes are stored. (string value)
+#dpl_pool =
+
+# DPL port number. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#dpl_port = 8357
+
+# REST API authorization token. (string value)
+#pure_api_token = <None>
+
+# Automatically determine an oversubscription ratio based on the current total
+# data reduction values. If used this calculated value will override the
+# max_over_subscription_ratio config option. (boolean value)
+#pure_automatic_max_oversubscription_ratio = true
+
+# Snapshot replication interval in seconds. (integer value)
+#pure_replica_interval_default = 3600
+
+# Retain all snapshots on target for this time (in seconds.) (integer value)
+#pure_replica_retention_short_term_default = 14400
+
+# Retain how many snapshots for each day. (integer value)
+#pure_replica_retention_long_term_per_day_default = 3
+
+# Retain snapshots per day on target for this time (in days.) (integer value)
+#pure_replica_retention_long_term_default = 7
+
+# When enabled, all Pure volumes, snapshots, and protection groups will be
+# eradicated at the time of deletion in Cinder. Data will NOT be recoverable
+# after a delete with this set to True! When disabled, volumes and snapshots
+# will go into pending eradication state and can be recovered. (boolean value)
+#pure_eradicate_on_delete = false
+
+# The URL to management QNAP Storage. Driver does not support IPv6 address in
+# URL. (uri value)
+#qnap_management_url = <None>
+
+# The pool name in the QNAP Storage (string value)
+#qnap_poolname = <None>
+
+# Communication protocol to access QNAP storage (string value)
+#qnap_storage_protocol = iscsi
+
+# Quobyte URL to the Quobyte volume using e.g. a DNS SRV record (preferred) or
+# a host list (alternatively) like quobyte://<DIR host1>, <DIR host2>/<volume
+# name> (string value)
+#quobyte_volume_url = <None>
+
+# Path to a Quobyte Client configuration file. (string value)
+#quobyte_client_cfg = <None>
+
+# Create volumes as sparse files which take no space. If set to False, volume
+# is created as regular file. (boolean value)
+#quobyte_sparsed_volumes = true
+
+# Create volumes as QCOW2 files rather than raw files. (boolean value)
+#quobyte_qcow2_volumes = true
+
+# Base dir containing the mount point for the Quobyte volume. (string value)
+#quobyte_mount_point_base = $state_path/mnt
+
+# Create a cache of volumes from merged snapshots to speed up creation of
+# multiple volumes from a single snapshot. (boolean value)
+#quobyte_volume_from_snapshot_cache = false
+
+# The name of ceph cluster (string value)
+#rbd_cluster_name = ceph
+
+# The RADOS pool where rbd volumes are stored (string value)
+#rbd_pool = rbd
+
+# The RADOS client name for accessing rbd volumes - only set when using cephx
+# authentication (string value)
+#rbd_user = <None>
+
+# Path to the ceph configuration file (string value)
+#rbd_ceph_conf =
+
+# Path to the ceph keyring file (string value)
+#rbd_keyring_conf =
+
+# Flatten volumes created from snapshots to remove dependency from volume to
+# snapshot (boolean value)
+#rbd_flatten_volume_from_snapshot = false
+
+# The libvirt uuid of the secret for the rbd_user volumes (string value)
+#rbd_secret_uuid = <None>
+
+# Maximum number of nested volume clones that are taken before a flatten
+# occurs. Set to 0 to disable cloning. (integer value)
+#rbd_max_clone_depth = 5
+
+# Volumes will be chunked into objects of this size (in megabytes). (integer
+# value)
+#rbd_store_chunk_size = 4
+
+# Timeout value (in seconds) used when connecting to ceph cluster. If value <
+# 0, no timeout is set and default librados value is used. (integer value)
+#rados_connect_timeout = -1
+
+# Number of retries if connection to ceph cluster failed. (integer value)
+#rados_connection_retries = 3
+
+# Interval value (in seconds) between connection retries to ceph cluster.
+# (integer value)
+#rados_connection_interval = 5
+
+# Timeout value (in seconds) used when connecting to ceph cluster to do a
+# demotion/promotion of volumes. If value < 0, no timeout is set and default
+# librados value is used. (integer value)
+#replication_connect_timeout = 5
+
+# Set to True for driver to report total capacity as a dynamic value (used +
+# current free) and to False to report a static value (quota max bytes if
+# defined and global size of cluster if not). (boolean value)
+#report_dynamic_total_capacity = true
+
+# Set to True if the pool is used exclusively by Cinder. On exclusive use
+# driver won't query images' provisioned size as they will match the value
+# calculated by the Cinder core code for allocated_capacity_gb. This reduces
+# the load on the Ceph cluster as well as on the volume service. (boolean
+# value)
+#rbd_exclusive_cinder_pool = false
+
+# IP address or Hostname of NAS system. (string value)
+#nas_host =
+
+# User name to connect to NAS system. (string value)
+#nas_login = admin
+
+# Password to connect to NAS system. (string value)
+#nas_password =
+
+# SSH port to use to connect to NAS system. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#nas_ssh_port = 22
+
+# Filename of private key to use for SSH authentication. (string value)
+#nas_private_key =
+
+# Allow network-attached storage systems to operate in a secure environment
+# where root level access is not permitted. If set to False, access is as the
+# root user and insecure. If set to True, access is not as root. If set to
+# auto, a check is done to determine if this is a new installation: True is
+# used if so, otherwise False. Default is auto. (string value)
+#nas_secure_file_operations = auto
+
+# Set more secure file permissions on network-attached storage volume files to
+# restrict broad other/world access. If set to False, volumes are created with
+# open permissions. If set to True, volumes are created with permissions for
+# the cinder user and group (660). If set to auto, a check is done to determine
+# if this is a new installation: True is used if so, otherwise False. Default
+# is auto. (string value)
+#nas_secure_file_permissions = auto
+
+# Path to the share to use for storing Cinder volumes. For example:
+# "/srv/export1" for an NFS server export available at 10.0.5.10:/srv/export1 .
+# (string value)
+#nas_share_path =
+
+# Options used to mount the storage backend file system where Cinder volumes
+# are stored. (string value)
+#nas_mount_options = <None>
+
+# Provisioning type that will be used when creating volumes. (string value)
+# Possible values:
+# thin - <No description provided>
+# thick - <No description provided>
+#nas_volume_prov_type = thin
+
+# Pool or Vdisk name to use for volume creation. (string value)
+#hpmsa_backend_name = A
+
+# linear (for Vdisk) or virtual (for Pool). (string value)
+# Possible values:
+# linear - <No description provided>
+# virtual - <No description provided>
+#hpmsa_backend_type = virtual
+
+# HPMSA API interface protocol. (string value)
+# Possible values:
+# http - <No description provided>
+# https - <No description provided>
+#hpmsa_api_protocol = https
+
+# Whether to verify HPMSA array SSL certificate. (boolean value)
+#hpmsa_verify_certificate = false
+
+# HPMSA array SSL certificate path. (string value)
+#hpmsa_verify_certificate_path = <None>
+
+# List of comma-separated target iSCSI IP addresses. (list value)
+#hpmsa_iscsi_ips =
+
+# Use thin provisioning for SAN volumes? (boolean value)
+#san_thin_provision = true
+
+# IP address of SAN volume (string value)
+#san_ip =
+
+# Username for SAN volume (string value)
+#san_login = admin
+
+# Password for SAN volume (string value)
+#san_password =
+
+# Filename of private key to use for SSH authentication (string value)
+#san_private_key =
+
+# Cluster name to use for creating volumes (string value)
+#san_clustername =
+
+# SSH port to use with SAN (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#san_ssh_port = 22
+
+# Port to use to access the SAN API (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#san_api_port = <None>
+
+# Execute commands locally instead of over SSH; use if the volume service is
+# running on the SAN device (boolean value)
+#san_is_local = false
+
+# SSH connection timeout in seconds (integer value)
+#ssh_conn_timeout = 30
+
+# Minimum ssh connections in the pool (integer value)
+#ssh_min_pool_conn = 1
+
+# Maximum ssh connections in the pool (integer value)
+#ssh_max_pool_conn = 5
+
+# IP address of sheep daemon. (string value)
+#sheepdog_store_address = 127.0.0.1
+
+# Port of sheep daemon. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#sheepdog_store_port = 7000
+
+# Set 512 byte emulation on volume creation;  (boolean value)
+#sf_emulate_512 = true
+
+# Allow tenants to specify QOS on create (boolean value)
+#sf_allow_tenant_qos = false
+
+# Create SolidFire accounts with this prefix. Any string can be used here, but
+# the string "hostname" is special and will create a prefix using the cinder
+# node hostname (previous default behavior).  The default is NO prefix. (string
+# value)
+#sf_account_prefix = <None>
+
+# Create SolidFire volumes with this prefix. Volume names are of the form
+# <sf_volume_prefix><cinder-volume-id>.  The default is to use a prefix of
+# 'UUID-'. (string value)
+#sf_volume_prefix = UUID-
+
+# Account name on the SolidFire Cluster to use as owner of template/cache
+# volumes (created if does not exist). (string value)
+#sf_template_account_name = openstack-vtemplate
+
+# DEPRECATED: This option is deprecated and will be removed in the next
+# OpenStack release.  Please use the general cinder image-caching feature
+# instead. (boolean value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: The Cinder caching feature should be used rather than this driver
+# specific implementation.
+#sf_allow_template_caching = false
+
+# Overrides default cluster SVIP with the one specified. This is required or
+# deployments that have implemented the use of VLANs for iSCSI networks in
+# their cloud. (string value)
+#sf_svip = <None>
+
+# SolidFire API port. Useful if the device api is behind a proxy on a different
+# port. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#sf_api_port = 443
+
+# Utilize volume access groups on a per-tenant basis. (boolean value)
+#sf_enable_vag = false
+
+# Volume on Synology storage to be used for creating lun. (string value)
+#synology_pool_name =
+
+# Management port for Synology storage. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#synology_admin_port = 5000
+
+# Administrator of Synology storage. (string value)
+#synology_username = admin
+
+# Password of administrator for logging in Synology storage. (string value)
+#synology_password =
+
+# Do certificate validation or not if $driver_use_ssl is True (boolean value)
+#synology_ssl_verify = true
+
+# One time password of administrator for logging in Synology storage if OTP is
+# enabled. (string value)
+#synology_one_time_pass = <None>
+
+# Device id for skip one time password check for logging in Synology storage if
+# OTP is enabled. (string value)
+#synology_device_id = <None>
+
+# The hostname (or IP address) for the storage system (string value)
+#tintri_server_hostname = <None>
+
+# User name for the storage system (string value)
+#tintri_server_username = <None>
+
+# Password for the storage system (string value)
+#tintri_server_password = <None>
+
+# API version for the storage system (string value)
+#tintri_api_version = v310
+
+# Delete unused image snapshots older than mentioned days (integer value)
+#tintri_image_cache_expiry_days = 30
+
+# Path to image nfs shares file (string value)
+#tintri_image_shares_config = <None>
+
+# IP address for connecting to VMware vCenter server. (string value)
+#vmware_host_ip = <None>
+
+# Port number for connecting to VMware vCenter server. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#vmware_host_port = 443
+
+# Username for authenticating with VMware vCenter server. (string value)
+#vmware_host_username = <None>
+
+# Password for authenticating with VMware vCenter server. (string value)
+#vmware_host_password = <None>
+
+# Optional VIM service WSDL Location e.g http://<server>/vimService.wsdl.
+# Optional over-ride to default location for bug work-arounds. (string value)
+#vmware_wsdl_location = <None>
+
+# Number of times VMware vCenter server API must be retried upon connection
+# related issues. (integer value)
+#vmware_api_retry_count = 10
+
+# The interval (in seconds) for polling remote tasks invoked on VMware vCenter
+# server. (floating point value)
+#vmware_task_poll_interval = 2.0
+
+# Name of the vCenter inventory folder that will contain Cinder volumes. This
+# folder will be created under "OpenStack/<project_folder>", where
+# project_folder is of format "Project (<volume_project_id>)". (string value)
+#vmware_volume_folder = Volumes
+
+# Timeout in seconds for VMDK volume transfer between Cinder and Glance.
+# (integer value)
+#vmware_image_transfer_timeout_secs = 7200
+
+# Max number of objects to be retrieved per batch. Query results will be
+# obtained in batches from the server and not in one shot. Server may still
+# limit the count to something less than the configured value. (integer value)
+#vmware_max_objects_retrieval = 100
+
+# Optional string specifying the VMware vCenter server version. The driver
+# attempts to retrieve the version from VMware vCenter server. Set this
+# configuration only if you want to override the vCenter server version.
+# (string value)
+#vmware_host_version = <None>
+
+# Directory where virtual disks are stored during volume backup and restore.
+# (string value)
+#vmware_tmp_dir = /tmp
+
+# CA bundle file to use in verifying the vCenter server certificate. (string
+# value)
+#vmware_ca_file = <None>
+
+# If true, the vCenter server certificate is not verified. If false, then the
+# default CA truststore is used for verification. This option is ignored if
+# "vmware_ca_file" is set. (boolean value)
+#vmware_insecure = false
+
+# Name of a vCenter compute cluster where volumes should be created. (multi
+# valued)
+#vmware_cluster_name =
+
+# Maximum number of connections in http connection pool. (integer value)
+#vmware_connection_pool_size = 10
+
+# Default adapter type to be used for attaching volumes. (string value)
+# Possible values:
+# lsiLogic - <No description provided>
+# busLogic - <No description provided>
+# lsiLogicsas - <No description provided>
+# paraVirtual - <No description provided>
+# ide - <No description provided>
+#vmware_adapter_type = lsiLogic
+
+# Volume snapshot format in vCenter server. (string value)
+# Possible values:
+# template - <No description provided>
+# COW - <No description provided>
+#vmware_snapshot_format = template
+
+# If true, the backend volume in vCenter server is created lazily when the
+# volume is created without any source. The backend volume is created when the
+# volume is attached, uploaded to image service or during backup. (boolean
+# value)
+#vmware_lazy_create = true
+
+# Regular expression pattern to match the name of datastores where backend
+# volumes are created. (string value)
+#vmware_datastore_regex = <None>
+
+# File with the list of available vzstorage shares. (string value)
+#vzstorage_shares_config = /etc/cinder/vzstorage_shares
+
+# Create volumes as sparsed files which take no space rather than regular files
+# when using raw format, in which case volume creation takes lot of time.
+# (boolean value)
+#vzstorage_sparsed_volumes = true
+
+# Percent of ACTUAL usage of the underlying volume before no new volumes can be
+# allocated to the volume destination. (floating point value)
+#vzstorage_used_ratio = 0.95
+
+# Base dir containing mount points for vzstorage shares. (string value)
+#vzstorage_mount_point_base = $state_path/mnt
+
+# Mount options passed to the vzstorage client. See section of the pstorage-
+# mount man page for details. (list value)
+#vzstorage_mount_options = <None>
+
+# Default format that will be used when creating volumes if no volume format is
+# specified. (string value)
+#vzstorage_default_volume_format = raw
+
+# Path to store VHD backed volumes (string value)
+#windows_iscsi_lun_path = C:\iSCSIVirtualDisks
+
+# File with the list of available smbfs shares. (string value)
+#smbfs_shares_config = C:\OpenStack\smbfs_shares.txt
+
+# Default format that will be used when creating volumes if no volume format is
+# specified. (string value)
+# Possible values:
+# vhd - <No description provided>
+# vhdx - <No description provided>
+#smbfs_default_volume_format = vhd
+
+# Base dir containing mount points for smbfs shares. (string value)
+#smbfs_mount_point_base = C:\OpenStack\_mnt
+
+# Mappings between share locations and pool names. If not specified, the share
+# names will be used as pool names. Example:
+# //addr/share:pool_name,//addr/share2:pool_name2 (dict value)
+#smbfs_pool_mappings =
+
+# VPSA - Use ISER instead of iSCSI (boolean value)
+#zadara_use_iser = true
+
+# VPSA - Management Host name or IP address (string value)
+#zadara_vpsa_host = <None>
+
+# VPSA - Port number (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#zadara_vpsa_port = <None>
+
+# VPSA - Use SSL connection (boolean value)
+#zadara_vpsa_use_ssl = false
+
+# If set to True the http client will validate the SSL certificate of the VPSA
+# endpoint. (boolean value)
+#zadara_ssl_cert_verify = true
+
+# VPSA - Username (string value)
+#zadara_user = <None>
+
+# VPSA - Password (string value)
+#zadara_password = <None>
+
+# VPSA - Storage Pool assigned for volumes (string value)
+#zadara_vpsa_poolname = <None>
+
+# VPSA - Default encryption policy for volumes (boolean value)
+#zadara_vol_encrypt = false
+
+# VPSA - Default template for VPSA volume names (string value)
+#zadara_vol_name_template = OS_%s
+
+# VPSA - Attach snapshot policy for volumes (boolean value)
+#zadara_default_snap_policy = false
+
+# Storage pool name. (string value)
+#zfssa_pool = <None>
+
+# Project name. (string value)
+#zfssa_project = <None>
+
+# Block size. (string value)
+# Possible values:
+# 512 - <No description provided>
+# 1k - <No description provided>
+# 2k - <No description provided>
+# 4k - <No description provided>
+# 8k - <No description provided>
+# 16k - <No description provided>
+# 32k - <No description provided>
+# 64k - <No description provided>
+# 128k - <No description provided>
+#zfssa_lun_volblocksize = 8k
+
+# Flag to enable sparse (thin-provisioned): True, False. (boolean value)
+#zfssa_lun_sparse = false
+
+# Data compression. (string value)
+# Possible values:
+# off - <No description provided>
+# lzjb - <No description provided>
+# gzip-2 - <No description provided>
+# gzip - <No description provided>
+# gzip-9 - <No description provided>
+#zfssa_lun_compression = off
+
+# Synchronous write bias. (string value)
+# Possible values:
+# latency - <No description provided>
+# throughput - <No description provided>
+#zfssa_lun_logbias = latency
+
+# iSCSI initiator group. (string value)
+#zfssa_initiator_group =
+
+# iSCSI initiator IQNs. (comma separated) (string value)
+#zfssa_initiator =
+
+# iSCSI initiator CHAP user (name). (string value)
+#zfssa_initiator_user =
+
+# Secret of the iSCSI initiator CHAP user. (string value)
+#zfssa_initiator_password =
+
+# iSCSI initiators configuration. (string value)
+#zfssa_initiator_config =
+
+# iSCSI target group name. (string value)
+#zfssa_target_group = tgt-grp
+
+# iSCSI target CHAP user (name). (string value)
+#zfssa_target_user =
+
+# Secret of the iSCSI target CHAP user. (string value)
+#zfssa_target_password =
+
+# iSCSI target portal (Data-IP:Port, w.x.y.z:3260). (string value)
+#zfssa_target_portal = <None>
+
+# Network interfaces of iSCSI targets. (comma separated) (string value)
+#zfssa_target_interfaces = <None>
+
+# REST connection timeout. (seconds) (integer value)
+#zfssa_rest_timeout = <None>
+
+# IP address used for replication data. (maybe the same as data ip) (string
+# value)
+#zfssa_replication_ip =
+
+# Flag to enable local caching: True, False. (boolean value)
+#zfssa_enable_local_cache = true
+
+# Name of ZFSSA project where cache volumes are stored. (string value)
+#zfssa_cache_project = os-cinder-cache
+
+# Driver policy for volume manage. (string value)
+# Possible values:
+# loose - <No description provided>
+# strict - <No description provided>
+#zfssa_manage_policy = loose
+
+# Data path IP address (string value)
+#zfssa_data_ip = <None>
+
+# HTTPS port number (string value)
+#zfssa_https_port = 443
+
+# Options to be passed while mounting share over nfs (string value)
+#zfssa_nfs_mount_options =
+
+# Storage pool name. (string value)
+#zfssa_nfs_pool =
+
+# Project name. (string value)
+#zfssa_nfs_project = NFSProject
+
+# Share name. (string value)
+#zfssa_nfs_share = nfs_share
+
+# Data compression. (string value)
+# Possible values:
+# off - <No description provided>
+# lzjb - <No description provided>
+# gzip-2 - <No description provided>
+# gzip - <No description provided>
+# gzip-9 - <No description provided>
+#zfssa_nfs_share_compression = off
+
+# Synchronous write bias-latency, throughput. (string value)
+# Possible values:
+# latency - <No description provided>
+# throughput - <No description provided>
+#zfssa_nfs_share_logbias = latency
+
+# Name of directory inside zfssa_nfs_share where cache volumes are stored.
+# (string value)
+#zfssa_cache_directory = os-cinder-cache
+
+# Driver to use for volume creation (string value)
+#volume_driver = cinder.volume.drivers.lvm.LVMVolumeDriver
+
+# User defined capabilities, a JSON formatted string specifying key/value
+# pairs. The key/value pairs can be used by the CapabilitiesFilter to select
+# between backends when requests specify volume types. For example, specifying
+# a service level or the geographical location of a backend, then creating a
+# volume type to allow the user to select by these different properties.
+# (string value)
+#extra_capabilities = {}
+
+# Suppress requests library SSL certificate warnings. (boolean value)
+#suppress_requests_ssl_warnings = false
+
+# Size of the native threads pool for the backend.  Increase for backends that
+# heavily rely on this, like the RBD driver. (integer value)
+# Minimum value: 20
+#backend_native_threads_pool_size = 20
+
+
+[barbican]
+#
+# From castellan.config
+#
+
+# Use this endpoint to connect to Barbican, for example:
+# "http://localhost:9311/" (string value)
+#barbican_endpoint = <None>
+
+# Version of the Barbican API, for example: "v1" (string value)
+#barbican_api_version = <None>
+
+# Use this endpoint to connect to Keystone (string value)
+# Deprecated group/name - [key_manager]/auth_url
+#auth_endpoint = http://localhost/identity/v3
+auth_endpoint = http://172.16.10.36:35357/v3
+
+# Number of seconds to wait before retrying poll for key creation completion
+# (integer value)
+#retry_delay = 1
+
+# Number of times to retry poll for key creation completion (integer value)
+#number_of_retries = 60
+
+# Specifies if insecure TLS (https) requests. If False, the server's
+# certificate will not be validated (boolean value)
+#verify_ssl = true
+
+# Specifies the type of endpoint.  Allowed values are: public, internal, and
+# admin (string value)
+# Possible values:
+# public - <No description provided>
+# internal - <No description provided>
+# admin - <No description provided>
+#barbican_endpoint_type = public
+barbican_endpoint_type = internal
+
+
+[brcd_fabric_example]
+
+#
+# From cinder
+#
+
+# South bound connector for the fabric. (string value)
+# Possible values:
+# SSH - <No description provided>
+# HTTP - <No description provided>
+# HTTPS - <No description provided>
+#fc_southbound_protocol = HTTP
+
+# Management IP of fabric. (string value)
+#fc_fabric_address =
+
+# Fabric user ID. (string value)
+#fc_fabric_user =
+
+# Password for user. (string value)
+#fc_fabric_password =
+
+# Connecting port (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#fc_fabric_port = 22
+
+# Local SSH certificate Path. (string value)
+#fc_fabric_ssh_cert_path =
+
+# Overridden zoning policy. (string value)
+#zoning_policy = initiator-target
+
+# Overridden zoning activation state. (boolean value)
+#zone_activate = true
+
+# Overridden zone name prefix. (string value)
+#zone_name_prefix = openstack
+
+# Virtual Fabric ID. (string value)
+#fc_virtual_fabric_id = <None>
+
+
+[cisco_fabric_example]
+
+#
+# From cinder
+#
+
+# Management IP of fabric (string value)
+#cisco_fc_fabric_address =
+
+# Fabric user ID (string value)
+#cisco_fc_fabric_user =
+
+# Password for user (string value)
+#cisco_fc_fabric_password =
+
+# Connecting port (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#cisco_fc_fabric_port = 22
+
+# overridden zoning policy (string value)
+#cisco_zoning_policy = initiator-target
+
+# overridden zoning activation state (boolean value)
+#cisco_zone_activate = true
+
+# overridden zone name prefix (string value)
+#cisco_zone_name_prefix = <None>
+
+# VSAN of the Fabric (string value)
+#cisco_zoning_vsan = <None>
+
+
+[coordination]
+
+#
+# From cinder
+#
+
+# The backend URL to use for distributed coordination. (string value)
+#backend_url = file://$state_path
+
+
+[cors]
+
 
 [database]
-connection = sqlite:////var/lib/cinder/cinder.sqlite
+#
+# From oslo.db
+#
+
+# If True, SQLite uses synchronous mode. (boolean value)
+#sqlite_synchronous = true
+
+# The back end to use for the database. (string value)
+# Deprecated group/name - [DEFAULT]/db_backend
+#backend = sqlalchemy
+
+# The SQLAlchemy connection string to use to connect to the database. (string
+# value)
+# Deprecated group/name - [DEFAULT]/sql_connection
+# Deprecated group/name - [DATABASE]/sql_connection
+# Deprecated group/name - [sql]/connection
+#connection = <None>
+connection = mysql+pymysql://cinder:opnfv_secret@172.16.10.36/cinder?charset=utf8
+# The SQLAlchemy connection string to use to connect to the slave
+# database. (string value)
+#slave_connection = <None>
+
+# The SQL mode to be used for MySQL sessions. This option, including the
+# default, overrides any server-set SQL mode. To use whatever SQL mode is set
+# by the server configuration, set this to no value. Example: mysql_sql_mode=
+# (string value)
+#mysql_sql_mode = TRADITIONAL
+
+# If True, transparently enables support for handling MySQL Cluster (NDB).
+# (boolean value)
+#mysql_enable_ndb = false
+
+# Connections which have been present in the connection pool longer than this
+# number of seconds will be replaced with a new one the next time they are
+# checked out from the pool. (integer value)
+# Deprecated group/name - [DATABASE]/idle_timeout
+# Deprecated group/name - [database]/idle_timeout
+# Deprecated group/name - [DEFAULT]/sql_idle_timeout
+# Deprecated group/name - [DATABASE]/sql_idle_timeout
+# Deprecated group/name - [sql]/idle_timeout
+#connection_recycle_time = 3600
+
+# DEPRECATED: Minimum number of SQL connections to keep open in a pool.
+# (integer value)
+# Deprecated group/name - [DEFAULT]/sql_min_pool_size
+# Deprecated group/name - [DATABASE]/sql_min_pool_size
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: The option to set the minimum pool size is not supported by
+# sqlalchemy.
+#min_pool_size = 1
+
+# Maximum number of SQL connections to keep open in a pool. Setting a value of
+# 0 indicates no limit. (integer value)
+# Deprecated group/name - [DEFAULT]/sql_max_pool_size
+# Deprecated group/name - [DATABASE]/sql_max_pool_size
+#max_pool_size = 5
+max_pool_size = 10
+
+# Maximum number of database connection retries during startup. Set to -1 to
+# specify an infinite retry count. (integer value)
+# Deprecated group/name - [DEFAULT]/sql_max_retries
+# Deprecated group/name - [DATABASE]/sql_max_retries
+#max_retries = 10
+max_retries = -1
+
+# Interval between retries of opening a SQL connection. (integer value)
+# Deprecated group/name - [DEFAULT]/sql_retry_interval
+# Deprecated group/name - [DATABASE]/reconnect_interval
+#retry_interval = 10
+
+# If set, use this value for max_overflow with SQLAlchemy. (integer value)
+# Deprecated group/name - [DEFAULT]/sql_max_overflow
+# Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
+#max_overflow = 50
+max_overflow = 30
+
+# Verbosity of SQL debugging information: 0=None, 100=Everything. (integer
+# value)
+# Minimum value: 0
+# Maximum value: 100
+# Deprecated group/name - [DEFAULT]/sql_connection_debug
+#connection_debug = 0
+
+# Add Python stack traces to SQL as comment strings. (boolean value)
+# Deprecated group/name - [DEFAULT]/sql_connection_trace
+#connection_trace = false
+
+# If set, use this value for pool_timeout with SQLAlchemy. (integer value)
+# Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
+#pool_timeout = <None>
+
+# Enable the experimental use of database reconnect on connection lost.
+# (boolean value)
+#use_db_reconnect = false
+
+# Seconds between retries of a database transaction. (integer value)
+#db_retry_interval = 1
+
+# If True, increases the interval between retries of a database operation up to
+# db_max_retry_interval. (boolean value)
+#db_inc_retry_interval = true
+
+# If db_inc_retry_interval is set, the maximum seconds between retries of a
+# database operation. (integer value)
+#db_max_retry_interval = 10
+
+# Maximum retries in case of connection error or deadlock error before error is
+# raised. Set to -1 to specify an infinite retry count. (integer value)
+#db_max_retries = 20
+
+# Optional URL parameters to append onto the connection URL at connect time;
+# specify as param1=value1&param2=value2&... (string value)
+#connection_parameters =
+
+
+
+[fc-zone-manager]
+
+#
+# From cinder
+#
+
+# South bound connector for zoning operation (string value)
+#brcd_sb_connector = HTTP
+
+# Southbound connector for zoning operation (string value)
+#cisco_sb_connector = cinder.zonemanager.drivers.cisco.cisco_fc_zone_client_cli.CiscoFCZoneClientCLI
+
+# FC Zone Driver responsible for zone management (string value)
+#zone_driver = cinder.zonemanager.drivers.brocade.brcd_fc_zone_driver.BrcdFCZoneDriver
+
+# Zoning policy configured by user; valid values include "initiator-target" or
+# "initiator" (string value)
+#zoning_policy = initiator-target
+
+# Comma separated list of Fibre Channel fabric names. This list of names is
+# used to retrieve other SAN credentials for connecting to each SAN fabric
+# (string value)
+#fc_fabric_names = <None>
+
+# FC SAN Lookup Service (string value)
+#fc_san_lookup_service = cinder.zonemanager.drivers.brocade.brcd_fc_san_lookup_service.BrcdFCSanLookupService
+
+# Set this to True when you want to allow an unsupported zone manager driver to
+# start.  Drivers that haven't maintained a working CI system and testing are
+# marked as unsupported until CI is working again.  This also marks a driver as
+# deprecated and may be removed in the next release. (boolean value)
+#enable_unsupported_driver = false
+
+
+[healthcheck]
+
+#
+# From oslo.middleware
+#
+
+# DEPRECATED: The path to respond to healtcheck requests on. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#path = /healthcheck
+
+# Show more detailed information as part of the response (boolean value)
+#detailed = false
+
+# Additional backends that can perform health checks and report that
+# information back as part of a request. (list value)
+#backends =
+
+# Check the presence of a file to determine if an application is running on a
+# port. Used by DisableByFileHealthcheck plugin. (string value)
+#disable_by_file_path = <None>
+
+# Check the presence of a file based on a port to determine if an application
+# is running on a port. Expects a "port:path" list of strings. Used by
+# DisableByFilesPortsHealthcheck plugin. (list value)
+#disable_by_file_paths =
+
+
+[key_manager]
+
+#
+# From castellan.config
+#
+
+# Specify the key manager implementation. Options are "barbican" and "vault".
+# Default is  "barbican". Will support the  values earlier set using
+# [key_manager]/api_class for some time. (string value)
+# Deprecated group/name - [key_manager]/api_class
+#backend = barbican
+backend = barbican
+# Name of nova region to use. Useful if keystone manages more than one region.
+# (string value)
+#region_name = <None>
+region_name = RegionOne
+
+# Type of the nova endpoint to use.  This endpoint will be looked up in the
+# keystone catalog and should be one of public, internal or admin. (string
+# value)
+# Possible values:
+# public - <No description provided>
+# admin - <No description provided>
+# internal - <No description provided>
+#endpoint_type = public
+endpoint_type = internalURL
+
+# API version of the admin Identity API endpoint. (string value)
+#auth_version = <None>
+
+
+# Authentication URL (string value)
+#auth_url = <None>
+auth_url = http://172.16.10.36:35357
+
+# Authentication type to load (string value)
+# Deprecated group/name - [nova]/auth_plugin
+#auth_type = <None>
+auth_type = password
+
+# Required if identity server requires client certificate (string value)
+#certfile = <None>
+
+# A PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# Defaults to system CAs. (string value)
+#cafile = <None>
+
+# Optional domain ID to use with v3 and v2 parameters. It will be used for both
+# the user and project domain in v3 and ignored in v2 authentication. (string
+# value)
+#default_domain_id = <None>
+
+# Optional domain name to use with v3 API and v2 parameters. It will be used for
+# both the user and project domain in v3 and ignored in v2 authentication.
+# (string value)
+#default_domain_name = <None>
+
+# Domain ID to scope to (string value)
+#domain_id = <None>
+
+# Domain name to scope to (string value)
+#domain_name = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# Required if identity server requires client certificate (string value)
+#keyfile = <None>
+
+# User's password (string value)
+#password = <None>
+password = opnfv_secret
+
+# Domain ID containing project (string value)
+#project_domain_id = <None>
+project_domain_id = default
+
+# Domain name containing project (string value)
+#project_domain_name = <None>
+
+# Project ID to scope to (string value)
+#project_id = <None>
+
+# Project name to scope to (string value)
+#project_name = <None>
+project_name = service
+
+# Scope for system operations (string value)
+#system_scope = <None>
+
+# Tenant ID (string value)
+#tenant_id = <None>
+
+# Tenant Name (string value)
+#tenant_name = <None>
+
+# Timeout value for http requests (integer value)
+#timeout = <None>
+
+# Trust ID (string value)
+#trust_id = <None>
+
+# User's domain id (string value)
+#user_domain_id = <None>
+user_domain_id = default
+
+# User's domain name (string value)
+#user_domain_name = <None>
+
+# User ID (string value)
+#user_id = <None>
+
+# Username (string value)
+# Deprecated group/name - [neutron]/user_name
+#username = <None>
+username = cinder
+
+
+[keystone_authtoken]
+
+#
+# From keystonemiddleware.auth_token
+#
+
+# Complete "public" Identity API endpoint. This endpoint should not be an
+# "admin" endpoint, as it should be accessible by all end users.
+# Unauthenticated clients are redirected to this endpoint to authenticate.
+# Although this endpoint should ideally be unversioned, client support in the
+# wild varies. If you're using a versioned v2 endpoint here, then this should
+# *not* be the same endpoint the service user utilizes for validating tokens,
+# because normal end users may not be able to reach that endpoint. (string
+# value)
+# Deprecated group/name - [keystone_authtoken]/auth_uri
+#www_authenticate_uri = <None>
+www_authenticate_uri = http://172.16.10.36:5000
+
+# DEPRECATED: Complete "public" Identity API endpoint. This endpoint should not
+# be an "admin" endpoint, as it should be accessible by all end users.
+# Unauthenticated clients are redirected to this endpoint to authenticate.
+# Although this endpoint should ideally be unversioned, client support in the
+# wild varies. If you're using a versioned v2 endpoint here, then this should
+# *not* be the same endpoint the service user utilizes for validating tokens,
+# because normal end users may not be able to reach that endpoint. This option
+# is deprecated in favor of www_authenticate_uri and will be removed in the S
+# release. (string value)
+# This option is deprecated for removal since Queens.
+# Its value may be silently ignored in the future.
+# Reason: The auth_uri option is deprecated in favor of www_authenticate_uri
+# and will be removed in the S  release.
+#auth_uri = <None>
+auth_uri = http://172.16.10.36:5000
+
+# API version of the admin Identity API endpoint. (string value)
+#auth_version = <None>
+
+# Do not handle authorization requests within the middleware, but delegate the
+# authorization decision to downstream WSGI components. (boolean value)
+#delay_auth_decision = false
+
+# Request timeout value for communicating with Identity API server. (integer
+# value)
+#http_connect_timeout = <None>
+
+# How many times are we trying to reconnect when communicating with Identity
+# API Server. (integer value)
+#http_request_max_retries = 3
+
+# Request environment key where the Swift cache object is stored. When
+# auth_token middleware is deployed with a Swift cache, use this option to have
+# the middleware share a caching backend with swift. Otherwise, use the
+# ``memcached_servers`` option instead. (string value)
+#cache = <None>
+
+# Required if identity server requires client certificate (string value)
+#certfile = <None>
+
+# Required if identity server requires client certificate (string value)
+#keyfile = <None>
+
+# A PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# Defaults to system CAs. (string value)
+#cafile = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# The region in which the identity server can be found. (string value)
+#region_name = <None>
+region_name = RegionOne
+
+# DEPRECATED: Directory used to cache files related to PKI tokens. This option
+# has been deprecated in the Ocata release and will be removed in the P
+# release. (string value)
+# This option is deprecated for removal since Ocata.
+# Its value may be silently ignored in the future.
+# Reason: PKI token format is no longer supported.
+#signing_dir = <None>
+
+# Optionally specify a list of memcached server(s) to use for caching. If left
+# undefined, tokens will instead be cached in-process. (list value)
+# Deprecated group/name - [keystone_authtoken]/memcache_servers
+#memcached_servers = <None>
+memcached_servers=172.16.10.36:11211,172.16.10.37:11211,172.16.10.38:11211
+
+# In order to prevent excessive effort spent validating tokens, the middleware
+# caches previously-seen tokens for a configurable duration (in seconds). Set
+# to -1 to disable caching completely. (integer value)
+#token_cache_time = 300
+
+# DEPRECATED: Determines the frequency at which the list of revoked tokens is
+# retrieved from the Identity service (in seconds). A high number of revocation
+# events combined with a low cache duration may significantly reduce
+# performance. Only valid for PKI tokens. This option has been deprecated in
+# the Ocata release and will be removed in the P release. (integer value)
+# This option is deprecated for removal since Ocata.
+# Its value may be silently ignored in the future.
+# Reason: PKI token format is no longer supported.
+#revocation_cache_time = 10
+
+# (Optional) Number of seconds memcached server is considered dead before it is
+# tried again. (integer value)
+#memcache_pool_dead_retry = 300
+
+# (Optional) Maximum total number of open connections to every memcached
+# server. (integer value)
+#memcache_pool_maxsize = 10
+
+# (Optional) Socket timeout in seconds for communicating with a memcached
+# server. (integer value)
+#memcache_pool_socket_timeout = 3
+
+# (Optional) Number of seconds a connection to memcached is held unused in the
+# pool before it is closed. (integer value)
+#memcache_pool_unused_timeout = 60
+
+# (Optional) Number of seconds that an operation will wait to get a memcached
+# client connection from the pool. (integer value)
+#memcache_pool_conn_get_timeout = 10
+
+# (Optional) Use the advanced (eventlet safe) memcached client pool. The
+# advanced pool will only work under python 2.x. (boolean value)
+#memcache_use_advanced_pool = false
+
+# (Optional) Indicate whether to set the X-Service-Catalog header. If False,
+# middleware will not ask for service catalog on token validation and will not
+# set the X-Service-Catalog header. (boolean value)
+#include_service_catalog = true
+
+# Used to control the use and type of token binding. Can be set to: "disabled"
+# to not check token binding. "permissive" (default) to validate binding
+# information if the bind type is of a form known to the server and ignore it
+# if not. "strict" like "permissive" but if the bind type is unknown the token
+# will be rejected. "required" any form of token binding is needed to be
+# allowed. Finally the name of a binding method that must be present in tokens.
+# (string value)
+#enforce_token_bind = permissive
+
+# DEPRECATED: If true, the revocation list will be checked for cached tokens.
+# This requires that PKI tokens are configured on the identity server. (boolean
+# value)
+# This option is deprecated for removal since Ocata.
+# Its value may be silently ignored in the future.
+# Reason: PKI token format is no longer supported.
+#check_revocations_for_cached = false
+
+# DEPRECATED: Hash algorithms to use for hashing PKI tokens. This may be a
+# single algorithm or multiple. The algorithms are those supported by Python
+# standard hashlib.new(). The hashes will be tried in the order given, so put
+# the preferred one first for performance. The result of the first hash will be
+# stored in the cache. This will typically be set to multiple values only while
+# migrating from a less secure algorithm to a more secure one. Once all the old
+# tokens are expired this option should be set to a single value for better
+# performance. (list value)
+# This option is deprecated for removal since Ocata.
+# Its value may be silently ignored in the future.
+# Reason: PKI token format is no longer supported.
+#hash_algorithms = md5
+
+# A choice of roles that must be present in a service token. Service tokens are
+# allowed to request that an expired token can be used and so this check should
+# tightly control that only actual services should be sending this token. Roles
+# here are applied as an ANY check so any role in this list must be present.
+# For backwards compatibility reasons this currently only affects the
+# allow_expired check. (list value)
+#service_token_roles = service
+
+# For backwards compatibility reasons we must let valid service tokens pass
+# that don't pass the service_token_roles check as valid. Setting this true
+# will become the default in a future release and should be enabled if
+# possible. (boolean value)
+#service_token_roles_required = false
+
+# Authentication type to load (string value)
+# Deprecated group/name - [keystone_authtoken]/auth_plugin
+#auth_type = <None>
+auth_type = password
+
+# Config Section from which to load plugin specific options (string value)
+#auth_section = <None>
+
+# Name of nova region to use. Useful if keystone manages more than one region.
+# (string value)
+#region_name = <None>
+region_name = RegionOne
+
+# Type of the nova endpoint to use.  This endpoint will be looked up in the
+# keystone catalog and should be one of public, internal or admin. (string
+# value)
+# Possible values:
+# public - <No description provided>
+# admin - <No description provided>
+# internal - <No description provided>
+#endpoint_type = public
+endpoint_type = internalURL
+
+# API version of the admin Identity API endpoint. (string value)
+#auth_version = <None>
+
+
+# Authentication URL (string value)
+#auth_url = <None>
+auth_url = http://172.16.10.36:35357
+
+# Authentication type to load (string value)
+# Deprecated group/name - [nova]/auth_plugin
+#auth_type = <None>
+auth_type = password
+
+# Required if identity server requires client certificate (string value)
+#certfile = <None>
+
+# A PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# Defaults to system CAs. (string value)
+#cafile = <None>
+
+# Optional domain ID to use with v3 and v2 parameters. It will be used for both
+# the user and project domain in v3 and ignored in v2 authentication. (string
+# value)
+#default_domain_id = <None>
+
+# Optional domain name to use with v3 API and v2 parameters. It will be used for
+# both the user and project domain in v3 and ignored in v2 authentication.
+# (string value)
+#default_domain_name = <None>
+
+# Domain ID to scope to (string value)
+#domain_id = <None>
+
+# Domain name to scope to (string value)
+#domain_name = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# Required if identity server requires client certificate (string value)
+#keyfile = <None>
+
+# User's password (string value)
+#password = <None>
+password = opnfv_secret
+
+# Domain ID containing project (string value)
+#project_domain_id = <None>
+project_domain_id = default
+
+# Domain name containing project (string value)
+#project_domain_name = <None>
+
+# Project ID to scope to (string value)
+#project_id = <None>
+
+# Project name to scope to (string value)
+#project_name = <None>
+project_name = service
+
+# Scope for system operations (string value)
+#system_scope = <None>
+
+# Tenant ID (string value)
+#tenant_id = <None>
+
+# Tenant Name (string value)
+#tenant_name = <None>
+
+# Timeout value for http requests (integer value)
+#timeout = <None>
+
+# Trust ID (string value)
+#trust_id = <None>
+
+# User's domain id (string value)
+#user_domain_id = <None>
+user_domain_id = default
+
+# User's domain name (string value)
+#user_domain_name = <None>
+
+# User ID (string value)
+#user_id = <None>
+
+# Username (string value)
+# Deprecated group/name - [neutron]/user_name
+#username = <None>
+username = cinder
+
+
+[matchmaker_redis]
+
+#
+# From oslo.messaging
+#
+
+# DEPRECATED: Host to locate redis. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#host = 127.0.0.1
+
+# DEPRECATED: Use this port to connect to redis host. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#port = 6379
+
+# DEPRECATED: Password for Redis server (optional). (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#password =
+
+# DEPRECATED: List of Redis Sentinel hosts (fault tolerance mode), e.g.,
+# [host:port, host1:port ... ] (list value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#sentinel_hosts =
+
+# Redis replica set name. (string value)
+#sentinel_group_name = oslo-messaging-zeromq
+
+# Time in ms to wait between connection attempts. (integer value)
+#wait_timeout = 2000
+
+# Time in ms to wait before the transaction is killed. (integer value)
+#check_timeout = 20000
+
+# Timeout in ms on blocking socket operations. (integer value)
+#socket_timeout = 10000
+
+
+[nova]
+
+#
+# From cinder
+#
+
+# Name of nova region to use. Useful if keystone manages more than one region.
+# (string value)
+#region_name = <None>
+
+# Type of the nova endpoint to use.  This endpoint will be looked up in the
+# keystone catalog and should be one of public, internal or admin. (string
+# value)
+# Possible values:
+# public - <No description provided>
+# admin - <No description provided>
+# internal - <No description provided>
+#interface = public
+
+# The authentication URL for the nova connection when using the current users
+# token (string value)
+#token_auth_url = <None>
+
+# PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# (string value)
+#cafile = <None>
+
+# PEM encoded client certificate cert file (string value)
+#certfile = <None>
+
+# PEM encoded client certificate key file (string value)
+#keyfile = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# Timeout value for http requests (integer value)
+#timeout = <None>
+
+# Collect per-API call timing information. (boolean value)
+#collect_timing = false
+
+# Log requests to multiple loggers. (boolean value)
+#split_loggers = false
+
+# Authentication type to load (string value)
+# Deprecated group/name - [nova]/auth_plugin
+#auth_type = <None>
+
+# Config Section from which to load plugin specific options (string value)
+#auth_section = <None>
+
+
+[oslo_concurrency]
+
+
+[oslo_messaging_amqp]
+
+#
+# From oslo.messaging
+#
+
+# Name for the AMQP container. must be globally unique. Defaults to a generated
+# UUID (string value)
+#container_name = <None>
+
+# Timeout for inactive connections (in seconds) (integer value)
+#idle_timeout = 0
+
+# Debug: dump AMQP frames to stdout (boolean value)
+#trace = false
+
+# Attempt to connect via SSL. If no other ssl-related parameters are given, it
+# will use the system's CA-bundle to verify the server's certificate. (boolean
+# value)
+#ssl = false
+
+# CA certificate PEM file used to verify the server's certificate (string
+# value)
+#ssl_ca_file =
+
+# Self-identifying certificate PEM file for client authentication (string
+# value)
+#ssl_cert_file =
+
+# Private key PEM file used to sign ssl_cert_file certificate (optional)
+# (string value)
+#ssl_key_file =
+
+# Password for decrypting ssl_key_file (if encrypted) (string value)
+#ssl_key_password = <None>
+
+# By default SSL checks that the name in the server's certificate matches the
+# hostname in the transport_url. In some configurations it may be preferable to
+# use the virtual hostname instead, for example if the server uses the Server
+# Name Indication TLS extension (rfc6066) to provide a certificate per virtual
+# host. Set ssl_verify_vhost to True if the server's SSL certificate uses the
+# virtual host name instead of the DNS name. (boolean value)
+#ssl_verify_vhost = false
+
+# DEPRECATED: Accept clients using either SSL or plain TCP (boolean value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Not applicable - not a SSL server
+#allow_insecure_clients = false
+
+# Space separated list of acceptable SASL mechanisms (string value)
+#sasl_mechanisms =
+
+# Path to directory that contains the SASL configuration (string value)
+#sasl_config_dir =
+
+# Name of configuration file (without .conf suffix) (string value)
+#sasl_config_name =
+
+# SASL realm to use if no realm present in username (string value)
+#sasl_default_realm =
+
+# DEPRECATED: User name for message broker authentication (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Should use configuration option transport_url to provide the
+# username.
+#username =
+
+# DEPRECATED: Password for message broker authentication (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Should use configuration option transport_url to provide the
+# password.
+#password =
+
+# Seconds to pause before attempting to re-connect. (integer value)
+# Minimum value: 1
+#connection_retry_interval = 1
+
+# Increase the connection_retry_interval by this many seconds after each
+# unsuccessful failover attempt. (integer value)
+# Minimum value: 0
+#connection_retry_backoff = 2
+
+# Maximum limit for connection_retry_interval + connection_retry_backoff
+# (integer value)
+# Minimum value: 1
+#connection_retry_interval_max = 30
+
+# Time to pause between re-connecting an AMQP 1.0 link that failed due to a
+# recoverable error. (integer value)
+# Minimum value: 1
+#link_retry_delay = 10
+
+# The maximum number of attempts to re-send a reply message which failed due to
+# a recoverable error. (integer value)
+# Minimum value: -1
+#default_reply_retry = 0
+
+# The deadline for an rpc reply message delivery. (integer value)
+# Minimum value: 5
+#default_reply_timeout = 30
+
+# The deadline for an rpc cast or call message delivery. Only used when caller
+# does not provide a timeout expiry. (integer value)
+# Minimum value: 5
+#default_send_timeout = 30
+
+# The deadline for a sent notification message delivery. Only used when caller
+# does not provide a timeout expiry. (integer value)
+# Minimum value: 5
+#default_notify_timeout = 30
+
+# The duration to schedule a purge of idle sender links. Detach link after
+# expiry. (integer value)
+# Minimum value: 1
+#default_sender_link_timeout = 600
+
+# Indicates the addressing mode used by the driver.
+# Permitted values:
+# 'legacy'   - use legacy non-routable addressing
+# 'routable' - use routable addresses
+# 'dynamic'  - use legacy addresses if the message bus does not support routing
+# otherwise use routable addressing (string value)
+#addressing_mode = dynamic
+
+# Enable virtual host support for those message buses that do not natively
+# support virtual hosting (such as qpidd). When set to true the virtual host
+# name will be added to all message bus addresses, effectively creating a
+# private 'subnet' per virtual host. Set to False if the message bus supports
+# virtual hosting using the 'hostname' field in the AMQP 1.0 Open performative
+# as the name of the virtual host. (boolean value)
+#pseudo_vhost = true
+
+# address prefix used when sending to a specific server (string value)
+#server_request_prefix = exclusive
+
+# address prefix used when broadcasting to all servers (string value)
+#broadcast_prefix = broadcast
+
+# address prefix when sending to any server in group (string value)
+#group_request_prefix = unicast
+
+# Address prefix for all generated RPC addresses (string value)
+#rpc_address_prefix = openstack.org/om/rpc
+
+# Address prefix for all generated Notification addresses (string value)
+#notify_address_prefix = openstack.org/om/notify
+
+# Appended to the address prefix when sending a fanout message. Used by the
+# message bus to identify fanout messages. (string value)
+#multicast_address = multicast
+
+# Appended to the address prefix when sending to a particular RPC/Notification
+# server. Used by the message bus to identify messages sent to a single
+# destination. (string value)
+#unicast_address = unicast
+
+# Appended to the address prefix when sending to a group of consumers. Used by
+# the message bus to identify messages that should be delivered in a round-
+# robin fashion across consumers. (string value)
+#anycast_address = anycast
+
+# Exchange name used in notification addresses.
+# Exchange name resolution precedence:
+# Target.exchange if set
+# else default_notification_exchange if set
+# else control_exchange if set
+# else 'notify' (string value)
+#default_notification_exchange = <None>
+
+# Exchange name used in RPC addresses.
+# Exchange name resolution precedence:
+# Target.exchange if set
+# else default_rpc_exchange if set
+# else control_exchange if set
+# else 'rpc' (string value)
+#default_rpc_exchange = <None>
+
+# Window size for incoming RPC Reply messages. (integer value)
+# Minimum value: 1
+#reply_link_credit = 200
+
+# Window size for incoming RPC Request messages (integer value)
+# Minimum value: 1
+#rpc_server_credit = 100
+
+# Window size for incoming Notification messages (integer value)
+# Minimum value: 1
+#notify_server_credit = 100
+
+# Send messages of this type pre-settled.
+# Pre-settled messages will not receive acknowledgement
+# from the peer. Note well: pre-settled messages may be
+# silently discarded if the delivery fails.
+# Permitted values:
+# 'rpc-call' - send RPC Calls pre-settled
+# 'rpc-reply'- send RPC Replies pre-settled
+# 'rpc-cast' - Send RPC Casts pre-settled
+# 'notify'   - Send Notifications pre-settled
+#  (multi valued)
+#pre_settled = rpc-cast
+#pre_settled = rpc-reply
+
+
+[oslo_messaging_kafka]
+
+#
+# From oslo.messaging
+#
+
+# DEPRECATED: Default Kafka broker Host (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#kafka_default_host = localhost
+
+# DEPRECATED: Default Kafka broker Port (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#kafka_default_port = 9092
+
+# Max fetch bytes of Kafka consumer (integer value)
+#kafka_max_fetch_bytes = 1048576
+
+# Default timeout(s) for Kafka consumers (floating point value)
+#kafka_consumer_timeout = 1.0
+
+# DEPRECATED: Pool Size for Kafka Consumers (integer value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Driver no longer uses connection pool.
+#pool_size = 10
+
+# DEPRECATED: The pool size limit for connections expiration policy (integer
+# value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Driver no longer uses connection pool.
+#conn_pool_min_size = 2
+
+# DEPRECATED: The time-to-live in sec of idle connections in the pool (integer
+# value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Driver no longer uses connection pool.
+#conn_pool_ttl = 1200
+
+# Group id for Kafka consumer. Consumers in one group will coordinate message
+# consumption (string value)
+#consumer_group = oslo_messaging_consumer
+
+# Upper bound on the delay for KafkaProducer batching in seconds (floating
+# point value)
+#producer_batch_timeout = 0.0
+
+# Size of batch for the producer async send (integer value)
+#producer_batch_size = 16384
+
+# Enable asynchronous consumer commits (boolean value)
+#enable_auto_commit = false
+
+# The maximum number of records returned in a poll call (integer value)
+#max_poll_records = 500
+
+# Protocol used to communicate with brokers (string value)
+# Possible values:
+# PLAINTEXT - <No description provided>
+# SASL_PLAINTEXT - <No description provided>
+# SSL - <No description provided>
+# SASL_SSL - <No description provided>
+#security_protocol = PLAINTEXT
+
+# Mechanism when security protocol is SASL (string value)
+#sasl_mechanism = PLAIN
+
+# CA certificate PEM file used to verify the server certificate (string value)
+#ssl_cafile =
+
+
+[oslo_messaging_notifications]
+#
+# From oslo.messaging
+#
+
+# The Drivers(s) to handle sending notifications. Possible values are
+# messaging, messagingv2, routing, log, test, noop (multi valued)
+# Deprecated group/name - [DEFAULT]/notification_driver
+#driver =
+driver=messagingv2
+
+# A URL representing the messaging driver to use for notifications. If not set,
+# we fall back to the same configuration used for RPC. (string value)
+# Deprecated group/name - [DEFAULT]/notification_transport_url
+#transport_url = <None>
+
+# AMQP topic used for OpenStack notifications. (list value)
+# Deprecated group/name - [rpc_notifier2]/topics
+# Deprecated group/name - [DEFAULT]/notification_topics
+#topics = notifications
+
+# The maximum number of attempts to re-send a notification message which failed
+# to be delivered due to a recoverable error. 0 - No retry, -1 - indefinite
+# (integer value)
+#retry = -1
+[oslo_messaging_rabbit]
+#
+# From oslo.messaging
+#
+
+# Use durable queues in AMQP. (boolean value)
+# Deprecated group/name - [DEFAULT]/amqp_durable_queues
+# Deprecated group/name - [DEFAULT]/rabbit_durable_queues
+#amqp_durable_queues = false
+
+# Auto-delete queues in AMQP. (boolean value)
+#amqp_auto_delete = false
+
+# Connect over SSL. (boolean value)
+# Deprecated group/name - [oslo_messaging_rabbit]/rabbit_use_ssl
+#ssl = false
+
+# How long to wait before reconnecting in response to an AMQP consumer cancel
+# notification. (floating point value)
+#kombu_reconnect_delay = 1.0
+
+# EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression will not
+# be used. This option may not be available in future versions. (string value)
+#kombu_compression = <None>
+
+# How long to wait a missing client before abandoning to send it its replies.
+# This value should not be longer than rpc_response_timeout. (integer value)
+# Deprecated group/name - [oslo_messaging_rabbit]/kombu_reconnect_timeout
+#kombu_missing_consumer_retry_timeout = 60
+
+# Determines how the next RabbitMQ node is chosen in case the one we are
+# currently connected to becomes unavailable. Takes effect only if more than
+# one RabbitMQ node is provided in config. (string value)
+# Possible values:
+# round-robin - <No description provided>
+# shuffle - <No description provided>
+#kombu_failover_strategy = round-robin
+
+# DEPRECATED: The RabbitMQ broker address where a single node is used. (string
+# value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_host = localhost
+
+# DEPRECATED: The RabbitMQ broker port where a single node is used. (port
+# value)
+# Minimum value: 0
+# Maximum value: 65535
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_port = 5672
+
+# DEPRECATED: RabbitMQ HA cluster host:port pairs. (list value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_hosts = $rabbit_host:$rabbit_port
+
+# DEPRECATED: The RabbitMQ userid. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_userid = guest
+
+# DEPRECATED: The RabbitMQ password. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_password = guest
+
+# The RabbitMQ login method. (string value)
+# Possible values:
+# PLAIN - <No description provided>
+# AMQPLAIN - <No description provided>
+# RABBIT-CR-DEMO - <No description provided>
+#rabbit_login_method = AMQPLAIN
+
+# DEPRECATED: The RabbitMQ virtual host. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_virtual_host = /
+
+# How frequently to retry connecting with RabbitMQ. (integer value)
+#rabbit_retry_interval = 1
+
+# How long to backoff for between retries when connecting to RabbitMQ. (integer
+# value)
+#rabbit_retry_backoff = 2
+
+# Maximum interval of RabbitMQ connection retries. Default is 30 seconds.
+# (integer value)
+#rabbit_interval_max = 30
+
+# DEPRECATED: Maximum number of RabbitMQ connection retries. Default is 0
+# (infinite retry count). (integer value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#rabbit_max_retries = 0
+
+# Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change this
+# option, you must wipe the RabbitMQ database. In RabbitMQ 3.0, queue mirroring
+# is no longer controlled by the x-ha-policy argument when declaring a queue.
+# If you just want to make sure that all queues (except those with auto-
+# generated names) are mirrored across all nodes, run: "rabbitmqctl set_policy
+# HA '^(?!amq\.).*' '{"ha-mode": "all"}' " (boolean value)
+#rabbit_ha_queues = false
+
+# Positive integer representing duration in seconds for queue TTL (x-expires).
+# Queues which are unused for the duration of the TTL are automatically
+# deleted. The parameter affects only reply and fanout queues. (integer value)
+# Minimum value: 1
+#rabbit_transient_queues_ttl = 1800
+
+# Specifies the number of messages to prefetch. Setting to zero allows
+# unlimited messages. (integer value)
+#rabbit_qos_prefetch_count = 0
+
+# Number of seconds after which the Rabbit broker is considered down if
+# heartbeat's keep-alive fails (0 disable the heartbeat). EXPERIMENTAL (integer
+# value)
+#heartbeat_timeout_threshold = 60
+
+# How often times during the heartbeat_timeout_threshold we check the
+# heartbeat. (integer value)
+#heartbeat_rate = 2
+
+
+
+[oslo_middleware]
+#
+# From oslo.middleware
+#
+
+# The maximum body size for each  request, in bytes. (integer value)
+# Deprecated group/name - [DEFAULT]/osapi_max_request_body_size
+# Deprecated group/name - [DEFAULT]/max_request_body_size
+#max_request_body_size = 114688
+
+# DEPRECATED: The HTTP Header that will be used to determine what the original
+# request protocol scheme was, even if it was hidden by a SSL termination
+# proxy. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#secure_proxy_ssl_header = X-Forwarded-Proto
+
+# Whether the application is behind a proxy or not. This determines if the
+# middleware should parse the headers or not. (boolean value)
+#enable_proxy_headers_parsing = false
+enable_proxy_headers_parsing = True
+
+
+
+[oslo_policy]
+
+
+[oslo_reports]
+
+[cache]
+#
+# From oslo.cache
+#
+
+# Prefix for building the configuration dictionary for the cache region. This
+# should not need to be changed unless there is another dogpile.cache region
+# with the same configuration name. (string value)
+#config_prefix = cache.oslo
+
+# Default TTL, in seconds, for any cached item in the dogpile.cache region.
+# This applies to any cached method that doesn't have an explicit cache
+# expiration time defined for it. (integer value)
+#expiration_time = 600
+
+# Cache backend module. For eventlet-based or environments with hundreds of
+# threaded servers, Memcache with pooling (oslo_cache.memcache_pool) is
+# recommended. For environments with less than 100 threaded servers, Memcached
+# (dogpile.cache.memcached) or Redis (dogpile.cache.redis) is recommended. Test
+# environments with a single instance of the server can use the
+# dogpile.cache.memory backend. (string value)
+# Possible values:
+# oslo_cache.memcache_pool - <No description provided>
+# oslo_cache.dict - <No description provided>
+# oslo_cache.mongo - <No description provided>
+# oslo_cache.etcd3gw - <No description provided>
+# dogpile.cache.memcached - <No description provided>
+# dogpile.cache.pylibmc - <No description provided>
+# dogpile.cache.bmemcached - <No description provided>
+# dogpile.cache.dbm - <No description provided>
+# dogpile.cache.redis - <No description provided>
+# dogpile.cache.memory - <No description provided>
+# dogpile.cache.memory_pickle - <No description provided>
+# dogpile.cache.null - <No description provided>
+#backend = dogpile.cache.null
+backend = oslo_cache.memcache_pool
+
+# Arguments supplied to the backend module. Specify this option once per
+# argument to be passed to the dogpile.cache backend. Example format:
+# "<argname>:<value>". (multi valued)
+#backend_argument =
+
+# Proxy classes to import that will affect the way the dogpile.cache backend
+# functions. See the dogpile.cache documentation on changing-backend-behavior.
+# (list value)
+#proxies =
+
+# Global toggle for caching. (boolean value)
+#enabled = true
+enabled = True
+
+# Extra debugging from the cache backend (cache keys, get/set/delete/etc
+# calls). This is only really useful if you need to see the specific cache-
+# backend get/set/delete calls with the keys/values.  Typically this should be
+# left set to false. (boolean value)
+#debug_cache_backend = false
+
+# Memcache servers in the format of "host:port". (dogpile.cache.memcache and
+# oslo_cache.memcache_pool backends only). (list value)
+#memcache_servers = localhost:11211
+memcache_servers =172.16.10.36:11211,172.16.10.37:11211,172.16.10.38:11211
+
+# Number of seconds memcached server is considered dead before it is tried
+# again. (dogpile.cache.memcache and oslo_cache.memcache_pool backends only).
+# (integer value)
+#memcache_dead_retry = 300
+
+# Timeout in seconds for every call to a server. (dogpile.cache.memcache and
+# oslo_cache.memcache_pool backends only). (floating point value)
+#memcache_socket_timeout = 3.0
+
+# Max total number of open connections to every memcached server.
+# (oslo_cache.memcache_pool backend only). (integer value)
+#memcache_pool_maxsize = 10
+
+# Number of seconds a connection to memcached is held unused in the pool before
+# it is closed. (oslo_cache.memcache_pool backend only). (integer value)
+#memcache_pool_unused_timeout = 60
+
+# Number of seconds that an operation will wait to get a memcache client
+# connection. (integer value)
+#memcache_pool_connection_get_timeout = 10
+
+
+[oslo_versionedobjects]
+
+#
+# From oslo.versionedobjects
+#
+
+# Make exception message format errors fatal (boolean value)
+#fatal_exception_format_errors = false
+
+
+[profiler]
+
+
+[sample_remote_file_source]
+# Example of using a remote_file source
+#
+# remote_file: A backend driver for remote files served through http[s].
+#
+# Required options:
+#   - uri: URI containing the file location.
+#
+# Non-required options:
+#   - ca_path: The path to a CA_BUNDLE file or directory with
+#              certificates of trusted CAs.
+#
+#   - client_cert: Client side certificate, as a single file path
+#                  containing either the certificate only or the
+#                  private key and the certificate.
+#
+#   - client_key: Client side private key, in case client_cert is
+#                 specified but does not includes the private key.
+
+#
+# From oslo.config
+#
+
+# The name of the driver that can load this configuration source. (string
+# value)
+#driver = remote_file
+
+# Required option with the URI of the extra configuration file's location. (uri
+# value)
+#uri = https://example.com/my-configuration.ini
+
+# The path to a CA_BUNDLE file or directory with certificates of trusted CAs.
+# (string value)
+#ca_path = /etc/ca-certificates
+
+# Client side certificate, as a single file path containing either the
+# certificate only or the private key and the certificate. (string value)
+#client_cert = /etc/ca-certificates/service-client-keystore
+
+# Client side private key, in case client_cert is specified but does not
+# includes the private key. (string value)
+#client_key = <None>
+
+
+[service_user]
+
+#
+# From cinder
+#
+
+#
+# When True, if sending a user token to an REST API, also send a service token.
+#  (boolean value)
+#send_service_user_token = false
+send_service_user_token = True
+# Name of nova region to use. Useful if keystone manages more than one region.
+# (string value)
+#region_name = <None>
+region_name = RegionOne
+
+# Type of the nova endpoint to use.  This endpoint will be looked up in the
+# keystone catalog and should be one of public, internal or admin. (string
+# value)
+# Possible values:
+# public - <No description provided>
+# admin - <No description provided>
+# internal - <No description provided>
+#endpoint_type = public
+endpoint_type = internalURL
+
+# API version of the admin Identity API endpoint. (string value)
+#auth_version = <None>
+
+
+# Authentication URL (string value)
+#auth_url = <None>
+auth_url = http://172.16.10.36:5000
+
+# Authentication type to load (string value)
+# Deprecated group/name - [nova]/auth_plugin
+#auth_type = <None>
+auth_type = password
+
+# Required if identity server requires client certificate (string value)
+#certfile = <None>
+
+# A PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# Defaults to system CAs. (string value)
+#cafile = <None>
+
+# Optional domain ID to use with v3 and v2 parameters. It will be used for both
+# the user and project domain in v3 and ignored in v2 authentication. (string
+# value)
+#default_domain_id = <None>
+
+# Optional domain name to use with v3 API and v2 parameters. It will be used for
+# both the user and project domain in v3 and ignored in v2 authentication.
+# (string value)
+#default_domain_name = <None>
+
+# Domain ID to scope to (string value)
+#domain_id = <None>
+
+# Domain name to scope to (string value)
+#domain_name = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# Required if identity server requires client certificate (string value)
+#keyfile = <None>
+
+# User's password (string value)
+#password = <None>
+password = opnfv_secret
+
+# Domain ID containing project (string value)
+#project_domain_id = <None>
+project_domain_id = default
+
+# Domain name containing project (string value)
+#project_domain_name = <None>
+
+# Project ID to scope to (string value)
+#project_id = <None>
+
+# Project name to scope to (string value)
+#project_name = <None>
+project_name = service
+
+# Scope for system operations (string value)
+#system_scope = <None>
+
+# Tenant ID (string value)
+#tenant_id = <None>
+
+# Tenant Name (string value)
+#tenant_name = <None>
+
+# Timeout value for http requests (integer value)
+#timeout = <None>
+
+# Trust ID (string value)
+#trust_id = <None>
+
+# User's domain id (string value)
+#user_domain_id = <None>
+user_domain_id = default
+
+# User's domain name (string value)
+#user_domain_name = <None>
+
+# User ID (string value)
+#user_id = <None>
+
+# Username (string value)
+# Deprecated group/name - [neutron]/user_name
+#username = <None>
+username = cinder
+
+# PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# (string value)
+#cafile = <None>
+
+# PEM encoded client certificate cert file (string value)
+#certfile = <None>
+
+# PEM encoded client certificate key file (string value)
+#keyfile = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# Timeout value for http requests (integer value)
+#timeout = <None>
+
+# Collect per-API call timing information. (boolean value)
+#collect_timing = false
+
+# Log requests to multiple loggers. (boolean value)
+#split_loggers = false
+
+
+[ssl]
+
+#
+# From oslo.service.sslutils
+#
+
+# CA certificate file to use to verify connecting clients. (string value)
+# Deprecated group/name - [DEFAULT]/ssl_ca_file
+#ca_file = <None>
+
+# Certificate file to use when starting the server securely. (string value)
+# Deprecated group/name - [DEFAULT]/ssl_cert_file
+#cert_file = <None>
+
+# Private key file to use when starting the server securely. (string value)
+# Deprecated group/name - [DEFAULT]/ssl_key_file
+#key_file = <None>
+
+# SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and
+# SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some
+# distributions. (string value)
+#version = <None>
+
+# Sets the list of available ciphers. value should be a string in the OpenSSL
+# cipher list format. (string value)
+#ciphers = <None>
+
+
+[vault]
+
+#
+# From castellan.config
+#
+
+# root token for vault (string value)
+#root_token_id = <None>
+
+# Use this endpoint to connect to Vault, for example: "http://127.0.0.1:8200"
+# (string value)
+#vault_url = http://127.0.0.1:8200
+
+# Absolute path to ca cert file (string value)
+#ssl_ca_crt_file = <None>
+
+# SSL Enabled/Disabled (boolean value)
+#use_ssl = false

2019-08-27 23:29:24,659 [salt.state       :1951][INFO    ][6713] Completed state [/etc/cinder/cinder.conf] at time 23:29:24.659787 duration_in_ms=490.144
2019-08-27 23:29:24,660 [salt.state       :1780][INFO    ][6713] Running state [/etc/cinder/api-paste.ini] at time 23:29:24.660549
2019-08-27 23:29:24,661 [salt.state       :1813][INFO    ][6713] Executing state file.managed for [/etc/cinder/api-paste.ini]
2019-08-27 23:29:24,681 [salt.fileclient  :1219][INFO    ][6713] Fetching file from saltenv 'base', ** done ** 'cinder/files/stein/api-paste.ini.volume.Debian'
2019-08-27 23:29:24,754 [salt.state       :300 ][INFO    ][6713] {'mode': '0640'}
2019-08-27 23:29:24,754 [salt.state       :1951][INFO    ][6713] Completed state [/etc/cinder/api-paste.ini] at time 23:29:24.754735 duration_in_ms=94.185
2019-08-27 23:29:24,755 [salt.state       :1780][INFO    ][6713] Running state [/etc/default/cinder-volume] at time 23:29:24.755131
2019-08-27 23:29:24,755 [salt.state       :1813][INFO    ][6713] Executing state file.managed for [/etc/default/cinder-volume]
2019-08-27 23:29:24,775 [salt.fileclient  :1219][INFO    ][6713] Fetching file from saltenv 'base', ** done ** 'cinder/files/default'
2019-08-27 23:29:24,784 [salt.state       :300 ][INFO    ][6713] File changed:
New file
2019-08-27 23:29:24,784 [salt.state       :1951][INFO    ][6713] Completed state [/etc/default/cinder-volume] at time 23:29:24.784212 duration_in_ms=29.08
2019-08-27 23:29:25,284 [salt.state       :1780][INFO    ][6713] Running state [cinder-volume] at time 23:29:25.284327
2019-08-27 23:29:25,284 [salt.state       :1813][INFO    ][6713] Executing state service.running for [cinder-volume]
2019-08-27 23:29:25,285 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['systemctl', 'status', 'cinder-volume.service', '-n', '0'] in directory '/root'
2019-08-27 23:29:25,301 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['systemctl', 'is-active', 'cinder-volume.service'] in directory '/root'
2019-08-27 23:29:25,315 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['systemctl', 'is-enabled', 'cinder-volume.service'] in directory '/root'
2019-08-27 23:29:25,328 [salt.state       :300 ][INFO    ][6713] The service cinder-volume is already running
2019-08-27 23:29:25,328 [salt.state       :1951][INFO    ][6713] Completed state [cinder-volume] at time 23:29:25.328667 duration_in_ms=44.341
2019-08-27 23:29:25,328 [salt.state       :1780][INFO    ][6713] Running state [cinder-volume] at time 23:29:25.328940
2019-08-27 23:29:25,329 [salt.state       :1813][INFO    ][6713] Executing state service.mod_watch for [cinder-volume]
2019-08-27 23:29:25,329 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['systemctl', 'is-active', 'cinder-volume.service'] in directory '/root'
2019-08-27 23:29:25,343 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'cinder-volume.service'] in directory '/root'
2019-08-27 23:29:25,366 [salt.state       :300 ][INFO    ][6713] {'cinder-volume': True}
2019-08-27 23:29:25,367 [salt.state       :1951][INFO    ][6713] Completed state [cinder-volume] at time 23:29:25.367127 duration_in_ms=38.187
2019-08-27 23:29:25,369 [salt.state       :1780][INFO    ][6713] Running state [open-iscsi] at time 23:29:25.369039
2019-08-27 23:29:25,369 [salt.state       :1813][INFO    ][6713] Executing state pkg.installed for [open-iscsi]
2019-08-27 23:29:25,555 [salt.state       :300 ][INFO    ][6713] All specified packages are already installed
2019-08-27 23:29:25,556 [salt.state       :1951][INFO    ][6713] Completed state [open-iscsi] at time 23:29:25.556237 duration_in_ms=187.197
2019-08-27 23:29:25,556 [salt.state       :1780][INFO    ][6713] Running state [tgt] at time 23:29:25.556716
2019-08-27 23:29:25,556 [salt.state       :1813][INFO    ][6713] Executing state pkg.installed for [tgt]
2019-08-27 23:29:25,614 [salt.state       :300 ][INFO    ][6713] All specified packages are already installed
2019-08-27 23:29:25,614 [salt.state       :1951][INFO    ][6713] Completed state [tgt] at time 23:29:25.614727 duration_in_ms=58.011
2019-08-27 23:29:25,615 [salt.state       :1780][INFO    ][6713] Running state [thin-provisioning-tools] at time 23:29:25.615123
2019-08-27 23:29:25,615 [salt.state       :1813][INFO    ][6713] Executing state pkg.installed for [thin-provisioning-tools]
2019-08-27 23:29:25,642 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2019-08-27 23:29:25,668 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'thin-provisioning-tools'] in directory '/root'
2019-08-27 23:29:30,213 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2019-08-27 23:29:30,266 [salt.state       :300 ][INFO    ][6713] Made the following changes:
'thin-provisioning-tools' changed from 'absent' to '0.7.4-2ubuntu3'

2019-08-27 23:29:30,283 [salt.state       :915 ][INFO    ][6713] Loading fresh modules for state activity
2019-08-27 23:29:30,328 [salt.state       :1951][INFO    ][6713] Completed state [thin-provisioning-tools] at time 23:29:30.328098 duration_in_ms=4712.974
2019-08-27 23:29:30,844 [salt.state       :1780][INFO    ][6713] Running state [tgt] at time 23:29:30.844879
2019-08-27 23:29:30,845 [salt.state       :1813][INFO    ][6713] Executing state service.running for [tgt]
2019-08-27 23:29:30,846 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['systemctl', 'status', 'tgt.service', '-n', '0'] in directory '/root'
2019-08-27 23:29:30,864 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['systemctl', 'is-active', 'tgt.service'] in directory '/root'
2019-08-27 23:29:30,885 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['systemctl', 'is-enabled', 'tgt.service'] in directory '/root'
2019-08-27 23:29:30,904 [salt.state       :300 ][INFO    ][6713] The service tgt is already running
2019-08-27 23:29:30,904 [salt.state       :1951][INFO    ][6713] Completed state [tgt] at time 23:29:30.904402 duration_in_ms=59.523
2019-08-27 23:29:30,905 [salt.state       :1780][INFO    ][6713] Running state [iscsid] at time 23:29:30.905157
2019-08-27 23:29:30,905 [salt.state       :1813][INFO    ][6713] Executing state service.running for [iscsid]
2019-08-27 23:29:30,906 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['systemctl', 'status', 'iscsid.service', '-n', '0'] in directory '/root'
2019-08-27 23:29:30,933 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['systemctl', 'is-active', 'iscsid.service'] in directory '/root'
2019-08-27 23:29:30,951 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['systemctl', 'is-enabled', 'iscsid.service'] in directory '/root'
2019-08-27 23:29:30,976 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['systemd-run', '--scope', 'systemctl', 'start', 'iscsid.service'] in directory '/root'
2019-08-27 23:29:31,040 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['systemctl', 'is-active', 'iscsid.service'] in directory '/root'
2019-08-27 23:29:31,058 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['systemctl', 'is-enabled', 'iscsid.service'] in directory '/root'
2019-08-27 23:29:31,084 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['systemctl', 'is-enabled', 'iscsid.service'] in directory '/root'
2019-08-27 23:29:31,112 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['systemd-run', '--scope', 'systemctl', 'enable', 'iscsid.service'] in directory '/root'
2019-08-27 23:29:31,790 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6713] Executing command ['systemctl', 'is-enabled', 'iscsid.service'] in directory '/root'
2019-08-27 23:29:31,807 [salt.state       :300 ][INFO    ][6713] {'iscsid': True}
2019-08-27 23:29:31,807 [salt.state       :1951][INFO    ][6713] Completed state [iscsid] at time 23:29:31.807843 duration_in_ms=902.686
2019-08-27 23:29:31,811 [salt.minion      :1711][INFO    ][6713] Returning information for job: 20190827232736710453
2019-08-27 23:30:31,871 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command state.sls with jid 20190827233031861800
2019-08-27 23:30:31,889 [salt.minion      :1432][INFO    ][12409] Starting a new job with PID 12409
2019-08-27 23:30:38,470 [salt.state       :915 ][INFO    ][12409] Loading fresh modules for state activity
2019-08-27 23:30:38,533 [salt.fileclient  :1219][INFO    ][12409] Fetching file from saltenv 'base', ** done ** 'neutron/init.sls'
2019-08-27 23:30:38,567 [salt.fileclient  :1219][INFO    ][12409] Fetching file from saltenv 'base', ** done ** 'neutron/compute.sls'
2019-08-27 23:30:38,610 [salt.fileclient  :1219][INFO    ][12409] Fetching file from saltenv 'base', ** done ** 'neutron/map.jinja'
2019-08-27 23:30:38,782 [salt.fileclient  :1219][INFO    ][12409] Fetching file from saltenv 'base', ** done ** 'neutron/agents/ovn_metadata.sls'
2019-08-27 23:30:38,940 [salt.fileclient  :1219][INFO    ][12409] Fetching file from saltenv 'base', ** done ** 'neutron/_ssl/rabbitmq.sls'
2019-08-27 23:30:39,084 [salt.state       :1780][INFO    ][12409] Running state [neutron] at time 23:30:39.084904
2019-08-27 23:30:39,085 [salt.state       :1813][INFO    ][12409] Executing state group.present for [neutron]
2019-08-27 23:30:39,090 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['groupadd', '-r', 'neutron'] in directory '/root'
2019-08-27 23:30:39,133 [salt.state       :300 ][INFO    ][12409] {'passwd': 'x', 'gid': 999, 'name': 'neutron', 'members': []}
2019-08-27 23:30:39,133 [salt.state       :1951][INFO    ][12409] Completed state [neutron] at time 23:30:39.133826 duration_in_ms=48.923
2019-08-27 23:30:39,134 [salt.state       :1780][INFO    ][12409] Running state [neutron] at time 23:30:39.134260
2019-08-27 23:30:39,134 [salt.state       :1813][INFO    ][12409] Executing state user.present for [neutron]
2019-08-27 23:30:39,145 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['useradd', '-s', '/bin/false', '-g', '999', '-m', '-d', '/var/lib/neutron', '-r', 'neutron'] in directory '/root'
2019-08-27 23:30:39,192 [salt.state       :300 ][INFO    ][12409] {'shell': '/bin/false', 'workphone': '', 'uid': 999, 'passwd': 'x', 'roomnumber': '', 'groups': ['neutron'], 'home': '/var/lib/neutron', 'name': 'neutron', 'gid': 999, 'fullname': '', 'homephone': ''}
2019-08-27 23:30:39,193 [salt.state       :1951][INFO    ][12409] Completed state [neutron] at time 23:30:39.193112 duration_in_ms=58.85
2019-08-27 23:30:39,193 [salt.state       :1780][INFO    ][12409] Running state [neutron_compute_ssl_rabbitmq] at time 23:30:39.193638
2019-08-27 23:30:39,193 [salt.state       :1813][INFO    ][12409] Executing state test.show_notification for [neutron_compute_ssl_rabbitmq]
2019-08-27 23:30:39,194 [salt.state       :300 ][INFO    ][12409] Running neutron._ssl.rabbitmq
2019-08-27 23:30:39,194 [salt.state       :1951][INFO    ][12409] Completed state [neutron_compute_ssl_rabbitmq] at time 23:30:39.194522 duration_in_ms=0.884
2019-08-27 23:30:39,825 [salt.state       :1780][INFO    ][12409] Running state [ovn-common] at time 23:30:39.825243
2019-08-27 23:30:39,825 [salt.state       :1813][INFO    ][12409] Executing state pkg.installed for [ovn-common]
2019-08-27 23:30:39,826 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2019-08-27 23:30:40,735 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['apt-cache', '-q', 'policy', 'ovn-common'] in directory '/root'
2019-08-27 23:30:41,187 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2019-08-27 23:30:43,682 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2019-08-27 23:30:43,711 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'ovn-common'] in directory '/root'
2019-08-27 23:30:46,898 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command saltutil.find_job with jid 20190827233046889303
2019-08-27 23:30:46,910 [salt.minion      :1432][INFO    ][13166] Starting a new job with PID 13166
2019-08-27 23:30:46,925 [salt.minion      :1711][INFO    ][13166] Returning information for job: 20190827233046889303
2019-08-27 23:30:47,992 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2019-08-27 23:30:48,036 [salt.state       :300 ][INFO    ][12409] Made the following changes:
'ovn-common' changed from 'absent' to '2.11.1-1~u18.04+mcp'

2019-08-27 23:30:48,059 [salt.state       :915 ][INFO    ][12409] Loading fresh modules for state activity
2019-08-27 23:30:48,108 [salt.state       :1951][INFO    ][12409] Completed state [ovn-common] at time 23:30:48.108150 duration_in_ms=8282.907
2019-08-27 23:30:48,113 [salt.state       :1780][INFO    ][12409] Running state [ovn-host] at time 23:30:48.113756
2019-08-27 23:30:48,114 [salt.state       :1813][INFO    ][12409] Executing state pkg.installed for [ovn-host]
2019-08-27 23:30:48,840 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2019-08-27 23:30:48,868 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'ovn-host'] in directory '/root'
2019-08-27 23:30:53,602 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2019-08-27 23:30:53,656 [salt.state       :300 ][INFO    ][12409] Made the following changes:
'ovn-host' changed from 'absent' to '2.11.1-1~u18.04+mcp'

2019-08-27 23:30:53,673 [salt.state       :915 ][INFO    ][12409] Loading fresh modules for state activity
2019-08-27 23:30:53,718 [salt.state       :1951][INFO    ][12409] Completed state [ovn-host] at time 23:30:53.718446 duration_in_ms=5604.69
2019-08-27 23:30:53,724 [salt.state       :1780][INFO    ][12409] Running state [neutron-common] at time 23:30:53.724640
2019-08-27 23:30:53,724 [salt.state       :1813][INFO    ][12409] Executing state pkg.installed for [neutron-common]
2019-08-27 23:30:54,483 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2019-08-27 23:30:54,527 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'neutron-common'] in directory '/root'
2019-08-27 23:30:58,924 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2019-08-27 23:30:58,977 [salt.state       :300 ][INFO    ][12409] Made the following changes:
'ipset' changed from 'absent' to '6.34-1'
'libipset3' changed from 'absent' to '6.34-1'
'ipset-6.34' changed from 'absent' to '1'
'neutron-common' changed from 'absent' to '2:14.0.2-0ubuntu1~cloud0'

2019-08-27 23:30:58,993 [salt.state       :915 ][INFO    ][12409] Loading fresh modules for state activity
2019-08-27 23:30:59,035 [salt.state       :1951][INFO    ][12409] Completed state [neutron-common] at time 23:30:59.035728 duration_in_ms=5311.086
2019-08-27 23:30:59,041 [salt.state       :1780][INFO    ][12409] Running state [python3-networking-ovn] at time 23:30:59.041778
2019-08-27 23:30:59,042 [salt.state       :1813][INFO    ][12409] Executing state pkg.installed for [python3-networking-ovn]
2019-08-27 23:30:59,764 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2019-08-27 23:30:59,792 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'python3-networking-ovn'] in directory '/root'
2019-08-27 23:31:16,935 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command saltutil.find_job with jid 20190827233116921784
2019-08-27 23:31:16,953 [salt.minion      :1432][INFO    ][14284] Starting a new job with PID 14284
2019-08-27 23:31:16,972 [salt.minion      :1711][INFO    ][14284] Returning information for job: 20190827233116921784
2019-08-27 23:31:21,532 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2019-08-27 23:31:21,585 [salt.state       :300 ][INFO    ][12409] Made the following changes:
'python3-openstacksdk' changed from 'absent' to '0.26.0-0ubuntu1~cloud0'
'python3-pyroute2' changed from 'absent' to '0.5.2-1~cloud0'
'python3-munch' changed from 'absent' to '2.2.0-1ubuntu2'
'python3-singledispatch' changed from 'absent' to '3.4.0.3-2'
'python3-neutron' changed from 'absent' to '2:14.0.2-0ubuntu1~cloud0'
'python3-webtest' changed from 'absent' to '2.0.28-1ubuntu1'
'python3-jmespath' changed from 'absent' to '0.9.3-1ubuntu1'
'python3-tinyrpc' changed from 'absent' to '0.6-1'
'python3-os-traits' changed from 'absent' to '0.11.0-0ubuntu1~cloud0'
'python3-requestsexceptions' changed from 'absent' to '1.3.0-3'
'python3-pecan' changed from 'absent' to '1.3.2-0ubuntu1~cloud0'
'networking-ovn-common' changed from 'absent' to '6.0.0-0ubuntu1~cloud0'
'python3-setproctitle' changed from 'absent' to '1.1.10-1build2'
'python3-ovsdbapp' changed from 'absent' to '0.15.0-0ubuntu1~cloud0'
'python3-waitress' changed from 'absent' to '1.0.1-1'
'python3-logutils' changed from 'absent' to '0.3.3-5'
'python3-appdirs' changed from 'absent' to '1.4.3-1'
'python3-networking-ovn' changed from 'absent' to '6.0.0-0ubuntu1~cloud0'
'python3-os-xenapi' changed from 'absent' to '0.3.4-0ubuntu1~cloud0'
'python3-designateclient' changed from 'absent' to '2.9.0-0ubuntu1'
'python3-deprecation' changed from 'absent' to '1.0.1-0ubuntu1'
'python3-octavia-lib' changed from 'absent' to '1.1.1-0ubuntu1~cloud0.1'
'python3-neutronclient' changed from 'absent' to '1:6.7.0-0ubuntu1'
'python3-os-ken' changed from 'absent' to '0.3.1-0ubuntu2~cloud0'
'python3-osc-lib' changed from 'absent' to '1.12.1-0ubuntu1~cloud0'
'python3-simplegeneric' changed from 'absent' to '0.8.1-1'
'python3-os-client-config' changed from 'absent' to '1.29.0-0ubuntu1'
'python3-neutron-lib' changed from 'absent' to '1.25.0-0ubuntu1~cloud0'

2019-08-27 23:31:21,602 [salt.state       :915 ][INFO    ][12409] Loading fresh modules for state activity
2019-08-27 23:31:21,655 [salt.state       :1951][INFO    ][12409] Completed state [python3-networking-ovn] at time 23:31:21.655749 duration_in_ms=22613.969
2019-08-27 23:31:21,663 [salt.state       :1780][INFO    ][12409] Running state [haproxy] at time 23:31:21.663624
2019-08-27 23:31:21,664 [salt.state       :1813][INFO    ][12409] Executing state pkg.installed for [haproxy]
2019-08-27 23:31:22,395 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2019-08-27 23:31:22,432 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'haproxy'] in directory '/root'
2019-08-27 23:31:28,504 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2019-08-27 23:31:28,561 [salt.state       :300 ][INFO    ][12409] Made the following changes:
'haproxy' changed from 'absent' to '1.8.8-1ubuntu0.4'
'liblua5.3-0' changed from 'absent' to '5.3.3-1ubuntu0.18.04.1'

2019-08-27 23:31:28,579 [salt.state       :915 ][INFO    ][12409] Loading fresh modules for state activity
2019-08-27 23:31:28,625 [salt.state       :1951][INFO    ][12409] Completed state [haproxy] at time 23:31:28.625026 duration_in_ms=6961.401
2019-08-27 23:31:28,629 [salt.state       :1780][INFO    ][12409] Running state [ovs-vsctl set open . external-ids:ovn-remote=tcp:172.16.10.36:6642] at time 23:31:28.629281
2019-08-27 23:31:28,629 [salt.state       :1813][INFO    ][12409] Executing state cmd.run for [ovs-vsctl set open . external-ids:ovn-remote=tcp:172.16.10.36:6642]
2019-08-27 23:31:28,634 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command 'ovs-vsctl set open . external-ids:ovn-remote=tcp:172.16.10.36:6642' in directory '/root'
2019-08-27 23:31:28,680 [salt.state       :300 ][INFO    ][12409] {'pid': 14814, 'retcode': 0, 'stderr': '', 'stdout': ''}
2019-08-27 23:31:28,680 [salt.state       :1951][INFO    ][12409] Completed state [ovs-vsctl set open . external-ids:ovn-remote=tcp:172.16.10.36:6642] at time 23:31:28.680775 duration_in_ms=51.495
2019-08-27 23:31:28,681 [salt.state       :1780][INFO    ][12409] Running state [ovs-vsctl set open . external-ids:ovn-encap-type=geneve,vxlan] at time 23:31:28.681269
2019-08-27 23:31:28,681 [salt.state       :1813][INFO    ][12409] Executing state cmd.run for [ovs-vsctl set open . external-ids:ovn-encap-type=geneve,vxlan]
2019-08-27 23:31:28,682 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command 'ovs-vsctl set open . external-ids:ovn-encap-type=geneve,vxlan' in directory '/root'
2019-08-27 23:31:28,703 [salt.state       :300 ][INFO    ][12409] {'pid': 14820, 'retcode': 0, 'stderr': '', 'stdout': ''}
2019-08-27 23:31:28,703 [salt.state       :1951][INFO    ][12409] Completed state [ovs-vsctl set open . external-ids:ovn-encap-type=geneve,vxlan] at time 23:31:28.703697 duration_in_ms=22.427
2019-08-27 23:31:28,704 [salt.state       :1780][INFO    ][12409] Running state [ovs-vsctl set open . external-ids:ovn-encap-ip=10.1.0.5] at time 23:31:28.704241
2019-08-27 23:31:28,704 [salt.state       :1813][INFO    ][12409] Executing state cmd.run for [ovs-vsctl set open . external-ids:ovn-encap-ip=10.1.0.5]
2019-08-27 23:31:28,705 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command 'ovs-vsctl set open . external-ids:ovn-encap-ip=10.1.0.5' in directory '/root'
2019-08-27 23:31:28,736 [salt.state       :300 ][INFO    ][12409] {'pid': 14829, 'retcode': 0, 'stderr': '', 'stdout': ''}
2019-08-27 23:31:28,737 [salt.state       :1951][INFO    ][12409] Completed state [ovs-vsctl set open . external-ids:ovn-encap-ip=10.1.0.5] at time 23:31:28.737398 duration_in_ms=33.156
2019-08-27 23:31:28,737 [salt.state       :1780][INFO    ][12409] Running state [ovs-vsctl --no-wait br-set-external-id br-floating bridge-id br-floating] at time 23:31:28.737829
2019-08-27 23:31:28,738 [salt.state       :1813][INFO    ][12409] Executing state cmd.run for [ovs-vsctl --no-wait br-set-external-id br-floating bridge-id br-floating]
2019-08-27 23:31:28,739 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command 'ovs-vsctl --no-wait br-set-external-id br-floating bridge-id br-floating' in directory '/root'
2019-08-27 23:31:28,761 [salt.state       :300 ][INFO    ][12409] {'pid': 14889, 'retcode': 0, 'stderr': '', 'stdout': ''}
2019-08-27 23:31:28,762 [salt.state       :1951][INFO    ][12409] Completed state [ovs-vsctl --no-wait br-set-external-id br-floating bridge-id br-floating] at time 23:31:28.762259 duration_in_ms=24.43
2019-08-27 23:31:28,762 [salt.state       :1780][INFO    ][12409] Running state [ovs-vsctl set open . external-ids:ovn-bridge-mappings=physnet1:br-floating] at time 23:31:28.762641
2019-08-27 23:31:28,763 [salt.state       :1813][INFO    ][12409] Executing state cmd.run for [ovs-vsctl set open . external-ids:ovn-bridge-mappings=physnet1:br-floating]
2019-08-27 23:31:28,763 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command 'ovs-vsctl set open . external-ids:ovn-bridge-mappings=physnet1:br-floating' in directory '/root'
2019-08-27 23:31:28,786 [salt.state       :300 ][INFO    ][12409] {'pid': 14929, 'retcode': 0, 'stderr': '', 'stdout': ''}
2019-08-27 23:31:28,787 [salt.state       :1951][INFO    ][12409] Completed state [ovs-vsctl set open . external-ids:ovn-bridge-mappings=physnet1:br-floating] at time 23:31:28.787117 duration_in_ms=24.475
2019-08-27 23:31:28,787 [salt.state       :1780][INFO    ][12409] Running state [ovs-vsctl set Bridge br-floating other-config:mac-table-size=16384] at time 23:31:28.787524
2019-08-27 23:31:28,787 [salt.state       :1813][INFO    ][12409] Executing state cmd.run for [ovs-vsctl set Bridge br-floating other-config:mac-table-size=16384]
2019-08-27 23:31:28,788 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command 'ovs-vsctl get Bridge br-floating other-config:mac-table-size | grep -qF 16384' in directory '/root'
2019-08-27 23:31:28,814 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command 'ovs-vsctl set Bridge br-floating other-config:mac-table-size=16384' in directory '/root'
2019-08-27 23:31:28,834 [salt.state       :300 ][INFO    ][12409] {'pid': 14980, 'retcode': 0, 'stderr': '', 'stdout': ''}
2019-08-27 23:31:28,835 [salt.state       :1951][INFO    ][12409] Completed state [ovs-vsctl set Bridge br-floating other-config:mac-table-size=16384] at time 23:31:28.835627 duration_in_ms=48.102
2019-08-27 23:31:29,493 [salt.state       :1780][INFO    ][12409] Running state [ovn-host] at time 23:31:29.493323
2019-08-27 23:31:29,493 [salt.state       :1813][INFO    ][12409] Executing state service.running for [ovn-host]
2019-08-27 23:31:29,494 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['systemctl', 'status', 'ovn-host.service', '-n', '0'] in directory '/root'
2019-08-27 23:31:29,521 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['systemctl', 'is-active', 'ovn-host.service'] in directory '/root'
2019-08-27 23:31:29,541 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['systemctl', 'is-enabled', 'ovn-host.service'] in directory '/root'
2019-08-27 23:31:29,566 [salt.state       :300 ][INFO    ][12409] The service ovn-host is already running
2019-08-27 23:31:29,566 [salt.state       :1951][INFO    ][12409] Completed state [ovn-host] at time 23:31:29.566688 duration_in_ms=73.366
2019-08-27 23:31:29,570 [salt.state       :1780][INFO    ][12409] Running state [/lib/systemd/system/ovn-metadata-agent.service] at time 23:31:29.570332
2019-08-27 23:31:29,570 [salt.state       :1813][INFO    ][12409] Executing state file.managed for [/lib/systemd/system/ovn-metadata-agent.service]
2019-08-27 23:31:29,593 [salt.fileclient  :1219][INFO    ][12409] Fetching file from saltenv 'base', ** done ** 'neutron/files/stein/ovn/metadata-agent.systemd'
2019-08-27 23:31:29,596 [salt.state       :300 ][INFO    ][12409] File changed:
New file
2019-08-27 23:31:29,597 [salt.state       :1951][INFO    ][12409] Completed state [/lib/systemd/system/ovn-metadata-agent.service] at time 23:31:29.596982 duration_in_ms=26.65
2019-08-27 23:31:29,597 [salt.state       :1780][INFO    ][12409] Running state [/etc/neutron/plugins/ovn/metadata-agent.ini] at time 23:31:29.597534
2019-08-27 23:31:29,597 [salt.state       :1813][INFO    ][12409] Executing state file.managed for [/etc/neutron/plugins/ovn/metadata-agent.ini]
2019-08-27 23:31:29,614 [salt.fileclient  :1219][INFO    ][12409] Fetching file from saltenv 'base', ** done ** 'neutron/files/stein/ovn/metadata-agent.ini'
2019-08-27 23:31:29,719 [salt.state       :300 ][INFO    ][12409] File changed:
New file
2019-08-27 23:31:29,720 [salt.state       :1951][INFO    ][12409] Completed state [/etc/neutron/plugins/ovn/metadata-agent.ini] at time 23:31:29.720205 duration_in_ms=122.67
2019-08-27 23:31:29,720 [salt.state       :1780][INFO    ][12409] Running state [/etc/neutron/neutron.conf] at time 23:31:29.720712
2019-08-27 23:31:29,721 [salt.state       :1813][INFO    ][12409] Executing state file.managed for [/etc/neutron/neutron.conf]
2019-08-27 23:31:29,739 [salt.fileclient  :1219][INFO    ][12409] Fetching file from saltenv 'base', ** done ** 'neutron/files/stein/neutron-generic.conf'
2019-08-27 23:31:29,910 [salt.fileclient  :1219][INFO    ][12409] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/stein/oslo/service/_wsgi_default.conf'
2019-08-27 23:31:29,923 [salt.fileclient  :1219][INFO    ][12409] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/stein/oslo/_concurrency.conf'
2019-08-27 23:31:29,959 [salt.fileclient  :1219][INFO    ][12409] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/stein/oslo/service/_ssl.conf'
2019-08-27 23:31:29,969 [salt.state       :300 ][INFO    ][12409] File changed:
--- 
+++ 
@@ -1,5 +1,5 @@
+
 [DEFAULT]
-core_plugin = ml2
 
 #
 # From neutron
@@ -27,12 +27,6 @@
 # The type of authentication to use (string value)
 #auth_strategy = keystone
 
-# The core plugin Neutron will use (string value)
-#core_plugin = <None>
-
-# The service plugins Neutron will use (list value)
-#service_plugins =
-
 # The base MAC address Neutron will use for VIFs. The first 3 octets will
 # remain unchanged. If the 4th octet is not 00, it will also be used. The
 # others will be randomly generated. (string value)
@@ -43,7 +37,7 @@
 
 # The maximum number of items returned in a single response, value was
 # 'infinite' or negative integer means no limit (string value)
-#pagination_max_limit = -1
+pagination_max_limit = -1
 
 # Default value of availability zone hints. The availability zone aware
 # schedulers use this when the resources availability_zone_hints is empty.
@@ -69,7 +63,7 @@
 
 # DHCP lease duration (in seconds). Use -1 to tell dnsmasq to use infinite
 # lease times. (integer value)
-#dhcp_lease_duration = 86400
+dhcp_lease_duration = 600
 
 # Domain to use for building the hostnames (string value)
 #dns_domain = openstacklocal
@@ -83,15 +77,11 @@
 # Allow overlapping IP support in Neutron. Attention: the following parameter
 # MUST be set to False if Neutron is being used in conjunction with Nova
 # security groups. (boolean value)
-#allow_overlapping_ips = false
+allow_overlapping_ips = true
 
 # Hostname to be used by the Neutron server, agents and services running on
 # this machine. All the agents and services running on this machine must use
 # the same host value. (host address value)
-#
-# This option has a sample default set, which means that
-# its actual default value may vary from the one documented
-# below.
 #host = example.domain
 
 # This string is prepended to the normal URL that is returned in links to the
@@ -100,22 +90,16 @@
 #network_link_prefix = <None>
 
 # Send notification to nova when port status changes (boolean value)
-#notify_nova_on_port_status_changes = true
+notify_nova_on_port_status_changes = true
 
 # Send notification to nova when port data (fixed_ips/floatingip) changes so
 # nova can update its cache. (boolean value)
-#notify_nova_on_port_data_changes = true
+notify_nova_on_port_data_changes = true
 
 # Number of seconds between sending events to nova if there are any events to
 # send. (integer value)
 #send_events_interval = 2
 
-# Set process name to match child worker role. Available options are: 'off' -
-# retains the previous behavior; 'on' - renames processes to 'neutron-server:
-# role (original string)'; 'brief' - renames the same as 'on', but without the
-# original string, such as 'neutron-server: role'. (string value)
-#setproctitle = on
-
 # Neutron IPAM (IP address management) driver to use. By default, the reference
 # implementation of the Neutron IPAM driver is used. (string value)
 #ipam_driver = internal
@@ -125,7 +109,7 @@
 #vlan_transparent = false
 
 # If True, then allow plugins to decide whether to perform validations on
-# filter parameters. Filter validation is enabled if this config is turned on
+# filter parameters. Filter validation is enabled if this configis turned on
 # and it is supported by all plugins (boolean value)
 #filter_validation = true
 
@@ -135,7 +119,7 @@
 # neutron automatically subtracts the overlay protocol overhead from this
 # value. Defaults to 1500, the standard value for Ethernet. (integer value)
 # Deprecated group/name - [ml2]/segment_mtu
-#global_physnet_mtu = 1500
+global_physnet_mtu = 1500
 
 # Number of backlog requests to configure the socket with (integer value)
 #backlog = 4096
@@ -150,25 +134,21 @@
 #periodic_interval = 40
 
 # Number of separate API worker processes for service. If not specified, the
-# default is equal to the number of CPUs available for best performance, capped
-# by potential RAM usage. (integer value)
+# default is equal to the number of CPUs available for best performance.
+# (integer value)
 #api_workers = <None>
 
-# Number of RPC worker processes for service. If not specified, the default is
-# equal to half the number of API workers. (integer value)
-#rpc_workers = <None>
+# Number of RPC worker processes for service. (integer value)
+rpc_workers = 6
 
 # Number of RPC worker processes dedicated to state reports queue. (integer
 # value)
-#rpc_state_report_workers = 1
+rpc_state_report_workers = 4
 
 # Range of seconds to randomly delay when starting the periodic task scheduler
 # to reduce stampeding. (Disable by setting to 0) (integer value)
 #periodic_fuzzy_delay = 5
 
-# Maximum seconds to wait for a response from an RPC call. (integer value)
-#rpc_response_max_timeout = 600
-
 #
 # From neutron.agent
 #
@@ -190,10 +170,6 @@
 #
 # From neutron.db
 #
-
-# Seconds to regard the agent is down; should be at least twice
-# report_interval, to be sure the agent is down for good. (integer value)
-#agent_down_time = 75
 
 # Representing the resource type whose load is being reported by the agent.
 # This can be "networks", "subnets" or "ports". When specified (Default is
@@ -236,7 +212,7 @@
 # greater than 1, the scheduler automatically assigns multiple DHCP agents for
 # a given tenant network, providing high availability for DHCP service.
 # (integer value)
-#dhcp_agents_per_network = 1
+dhcp_agents_per_network = 2
 
 # Enable services on an agent with admin_state_up False. If this option is
 # False, when admin_state_up of an agent is turned False, services on it will
@@ -255,28 +231,28 @@
 
 # System-wide flag to determine the type of router that tenants can create.
 # Only admin can override. (boolean value)
-#router_distributed = false
+router_distributed = false
 
 # Determine if setup is configured for DVR. If False, DVR API extension will be
 # disabled. (boolean value)
-#enable_dvr = true
+enable_dvr = false
 
 # Driver to use for scheduling router to a default L3 agent (string value)
-#router_scheduler_driver = neutron.scheduler.l3_agent_scheduler.LeastRoutersScheduler
+router_scheduler_driver = neutron.scheduler.l3_agent_scheduler.ChanceScheduler
 
 # Allow auto scheduling of routers to L3 agent. (boolean value)
 #router_auto_schedule = true
 
 # Automatically reschedule routers from offline L3 agents to online L3 agents.
 # (boolean value)
-#allow_automatic_l3agent_failover = false
+allow_automatic_l3agent_failover = true
 
 # Enable HA mode for virtual routers. (boolean value)
-#l3_ha = false
+l3_ha = false
 
 # Maximum number of L3 agents which a HA router will be scheduled on. If it is
 # set to 0 then the router will be scheduled on every agent. (integer value)
-#max_l3_agents_per_router = 3
+max_l3_agents_per_router = 0
 
 # Subnet used for the l3 HA admin network. (string value)
 #l3_ha_net_cidr = 169.254.192.0/18
@@ -297,7 +273,6 @@
 
 # Maximum number of allowed address pairs (integer value)
 #max_allowed_address_pair = 10
-
 #
 # From oslo.log
 #
@@ -312,7 +287,7 @@
 # files, see the Python logging module documentation. Note that when logging
 # configuration files are used then all logging configuration is set in the
 # configuration file and other logging configuration options are ignored (for
-# example, log-date-format). (string value)
+# example, logging_context_format_string). (string value)
 # Note: This option can be changed without restarting.
 # Deprecated group/name - [DEFAULT]/log_config
 #log_config_append = <None>
@@ -363,63 +338,27 @@
 # set. (boolean value)
 #use_stderr = false
 
-# Log output to Windows Event Log. (boolean value)
-#use_eventlog = false
-
-# The amount of time before the log files are rotated. This option is ignored
-# unless log_rotation_type is setto "interval". (integer value)
-#log_rotate_interval = 1
-
-# Rotation interval type. The time of the last file change (or the time when
-# the service was started) is used when scheduling the next rotation. (string
-# value)
-# Possible values:
-# Seconds - <No description provided>
-# Minutes - <No description provided>
-# Hours - <No description provided>
-# Days - <No description provided>
-# Weekday - <No description provided>
-# Midnight - <No description provided>
-#log_rotate_interval_type = days
-
-# Maximum number of rotated log files. (integer value)
-#max_logfile_count = 30
-
-# Log file maximum size in MB. This option is ignored if "log_rotation_type" is
-# not set to "size". (integer value)
-#max_logfile_size_mb = 200
-
-# Log rotation type. (string value)
-# Possible values:
-# interval - Rotate logs at predefined time intervals.
-# size - Rotate logs once they reach a predefined size.
-# none - Do not rotate log files.
-#log_rotation_type = none
-
-# Format string to use for log messages with context. Used by
-# oslo_log.formatters.ContextFormatter (string value)
+# Format string to use for log messages with context. (string value)
 #logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
 
-# Format string to use for log messages when context is undefined. Used by
-# oslo_log.formatters.ContextFormatter (string value)
+# Format string to use for log messages when context is undefined. (string
+# value)
 #logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
 
 # Additional data to append to log message when logging level for the message
-# is DEBUG. Used by oslo_log.formatters.ContextFormatter (string value)
+# is DEBUG. (string value)
 #logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
 
-# Prefix each line of exception output with this format. Used by
-# oslo_log.formatters.ContextFormatter (string value)
+# Prefix each line of exception output with this format. (string value)
 #logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
 
 # Defines the format string for %(user_identity)s that is used in
-# logging_context_format_string. Used by oslo_log.formatters.ContextFormatter
-# (string value)
+# logging_context_format_string. (string value)
 #logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
 
 # List of package logging levels in logger=LEVEL pairs. This option is ignored
 # if log_config_append is set. (list value)
-#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,oslo_policy=INFO,dogpile.core.dogpile=INFO
+#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
 
 # Enables or disables publication of error events. (boolean value)
 #publish_errors = false
@@ -446,45 +385,6 @@
 
 # Enables or disables fatal status of deprecations. (boolean value)
 #fatal_deprecations = false
-
-#
-# From oslo.messaging
-#
-
-# Size of RPC connection pool. (integer value)
-#rpc_conn_pool_size = 30
-
-# The pool size limit for connections expiration policy (integer value)
-#conn_pool_min_size = 2
-
-# The time-to-live in sec of idle connections in the pool (integer value)
-#conn_pool_ttl = 1200
-
-# Size of executor thread pool when executor is threading or eventlet. (integer
-# value)
-# Deprecated group/name - [DEFAULT]/rpc_thread_pool_size
-#executor_thread_pool_size = 64
-
-# Seconds to wait for a response from a call. (integer value)
-#rpc_response_timeout = 60
-
-# The network address and optional user credentials for connecting to the
-# messaging backend, in URL format. The expected format is:
-#
-# driver://[user:pass@]host:port[,[userN:passN@]hostN:portN]/virtual_host?query
-#
-# Example: rabbit://rabbitmq:password@127.0.0.1:5672//
-#
-# For full details on the fields in the URL see the documentation of
-# oslo_messaging.TransportURL at
-# https://docs.openstack.org/oslo.messaging/latest/reference/transport.html
-# (string value)
-#transport_url = rabbit://
-
-# The default exchange under which topics are scoped. May be overridden by an
-# exchange name specified in the transport_url option. (string value)
-#control_exchange = neutron
-
 #
 # From oslo.service.wsgi
 #
@@ -520,7 +420,6 @@
 
 
 [agent]
-root_helper = "sudo /usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf"
 
 #
 # From neutron.agent
@@ -530,7 +429,7 @@
 # /etc/neutron/rootwrap.conf' to use the real root filter facility. Change to
 # 'sudo' to skip the filtering and just run the command directly. (string
 # value)
-#root_helper = sudo
+root_helper = sudo /usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf
 
 # Use the root helper when listing the namespaces on a system. This may not be
 # required depending on the security configuration. If the root helper is not
@@ -555,7 +454,7 @@
 # Seconds between nodes reporting state to server; should be less than
 # agent_down_time, best if it is half or less than agent_down_time. (floating
 # point value)
-#report_interval = 30
+report_interval = 120
 
 # Log agent heartbeats (boolean value)
 #log_agent_heartbeats = false
@@ -582,459 +481,17 @@
 # (integer value)
 #check_child_processes_interval = 60
 
-# Location of scripts used to kill external processes. Names of scripts here
-# must follow the pattern: "<process-name>-kill" where <process-name> is name
-# of the process which should be killed using this script. For example, kill
-# script for dnsmasq process should be named "dnsmasq-kill". If path is set to
-# None, then default "kill" command will be used to stop processes. (string
-# value)
-#kill_scripts_path = /etc/neutron/kill_scripts/
-
 # Availability zone of this node (string value)
 #availability_zone = nova
 
 
 [cors]
 
-#
-# From oslo.middleware.cors
-#
-
-# Indicate whether this resource may be shared with the domain received in the
-# requests "origin" header. Format: "<protocol>://<host>[:<port>]", no trailing
-# slash. Example: https://horizon.example.com (list value)
-#allowed_origin = <None>
-
-# Indicate that the actual request can include user credentials (boolean value)
-#allow_credentials = true
-
-# Indicate which headers are safe to expose to the API. Defaults to HTTP Simple
-# Headers. (list value)
-#expose_headers = X-Auth-Token,X-Subject-Token,X-Service-Token,X-OpenStack-Request-ID,OpenStack-Volume-microversion
-
-# Maximum cache age of CORS preflight requests. (integer value)
-#max_age = 3600
-
-# Indicate which methods can be used during the actual request. (list value)
-#allow_methods = GET,PUT,POST,DELETE,PATCH
-
-# Indicate which header field names may be used during the actual request.
-# (list value)
-#allow_headers = X-Auth-Token,X-Identity-Status,X-Roles,X-Service-Catalog,X-User-Id,X-Tenant-Id,X-OpenStack-Request-ID
-
-
-[database]
-connection = sqlite:////var/lib/neutron/neutron.sqlite
-
-#
-# From neutron.db
-#
-
-# Database engine for which script will be generated when using offline
-# migration. (string value)
-#engine =
-
-#
-# From oslo.db
-#
-
-# If True, SQLite uses synchronous mode. (boolean value)
-#sqlite_synchronous = true
-
-# The back end to use for the database. (string value)
-# Deprecated group/name - [DEFAULT]/db_backend
-#backend = sqlalchemy
-
-# The SQLAlchemy connection string to use to connect to the database. (string
-# value)
-# Deprecated group/name - [DEFAULT]/sql_connection
-# Deprecated group/name - [DATABASE]/sql_connection
-# Deprecated group/name - [sql]/connection
-#connection = <None>
-
-# The SQLAlchemy connection string to use to connect to the slave database.
-# (string value)
-#slave_connection = <None>
-
-# The SQL mode to be used for MySQL sessions. This option, including the
-# default, overrides any server-set SQL mode. To use whatever SQL mode is set
-# by the server configuration, set this to no value. Example: mysql_sql_mode=
-# (string value)
-#mysql_sql_mode = TRADITIONAL
-
-# If True, transparently enables support for handling MySQL Cluster (NDB).
-# (boolean value)
-#mysql_enable_ndb = false
-
-# Connections which have been present in the connection pool longer than this
-# number of seconds will be replaced with a new one the next time they are
-# checked out from the pool. (integer value)
-# Deprecated group/name - [DATABASE]/idle_timeout
-# Deprecated group/name - [database]/idle_timeout
-# Deprecated group/name - [DEFAULT]/sql_idle_timeout
-# Deprecated group/name - [DATABASE]/sql_idle_timeout
-# Deprecated group/name - [sql]/idle_timeout
-#connection_recycle_time = 3600
-
-# DEPRECATED: Minimum number of SQL connections to keep open in a pool.
-# (integer value)
-# Deprecated group/name - [DEFAULT]/sql_min_pool_size
-# Deprecated group/name - [DATABASE]/sql_min_pool_size
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: The option to set the minimum pool size is not supported by
-# sqlalchemy.
-#min_pool_size = 1
-
-# Maximum number of SQL connections to keep open in a pool. Setting a value of
-# 0 indicates no limit. (integer value)
-# Deprecated group/name - [DEFAULT]/sql_max_pool_size
-# Deprecated group/name - [DATABASE]/sql_max_pool_size
-#max_pool_size = 5
-
-# Maximum number of database connection retries during startup. Set to -1 to
-# specify an infinite retry count. (integer value)
-# Deprecated group/name - [DEFAULT]/sql_max_retries
-# Deprecated group/name - [DATABASE]/sql_max_retries
-#max_retries = 10
-
-# Interval between retries of opening a SQL connection. (integer value)
-# Deprecated group/name - [DEFAULT]/sql_retry_interval
-# Deprecated group/name - [DATABASE]/reconnect_interval
-#retry_interval = 10
-
-# If set, use this value for max_overflow with SQLAlchemy. (integer value)
-# Deprecated group/name - [DEFAULT]/sql_max_overflow
-# Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
-#max_overflow = 50
-
-# Verbosity of SQL debugging information: 0=None, 100=Everything. (integer
-# value)
-# Minimum value: 0
-# Maximum value: 100
-# Deprecated group/name - [DEFAULT]/sql_connection_debug
-#connection_debug = 0
-
-# Add Python stack traces to SQL as comment strings. (boolean value)
-# Deprecated group/name - [DEFAULT]/sql_connection_trace
-#connection_trace = false
-
-# If set, use this value for pool_timeout with SQLAlchemy. (integer value)
-# Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
-#pool_timeout = <None>
-
-# Enable the experimental use of database reconnect on connection lost.
-# (boolean value)
-#use_db_reconnect = false
-
-# Seconds between retries of a database transaction. (integer value)
-#db_retry_interval = 1
-
-# If True, increases the interval between retries of a database operation up to
-# db_max_retry_interval. (boolean value)
-#db_inc_retry_interval = true
-
-# If db_inc_retry_interval is set, the maximum seconds between retries of a
-# database operation. (integer value)
-#db_max_retry_interval = 10
-
-# Maximum retries in case of connection error or deadlock error before error is
-# raised. Set to -1 to specify an infinite retry count. (integer value)
-#db_max_retries = 20
-
-# Optional URL parameters to append onto the connection URL at connect time;
-# specify as param1=value1&param2=value2&... (string value)
-#connection_parameters =
-
 
 [keystone_authtoken]
 
-#
-# From keystonemiddleware.auth_token
-#
-
-# Complete "public" Identity API endpoint. This endpoint should not be an
-# "admin" endpoint, as it should be accessible by all end users.
-# Unauthenticated clients are redirected to this endpoint to authenticate.
-# Although this endpoint should ideally be unversioned, client support in the
-# wild varies. If you're using a versioned v2 endpoint here, then this should
-# *not* be the same endpoint the service user utilizes for validating tokens,
-# because normal end users may not be able to reach that endpoint. (string
-# value)
-# Deprecated group/name - [keystone_authtoken]/auth_uri
-#www_authenticate_uri = <None>
-
-# DEPRECATED: Complete "public" Identity API endpoint. This endpoint should not
-# be an "admin" endpoint, as it should be accessible by all end users.
-# Unauthenticated clients are redirected to this endpoint to authenticate.
-# Although this endpoint should ideally be unversioned, client support in the
-# wild varies. If you're using a versioned v2 endpoint here, then this should
-# *not* be the same endpoint the service user utilizes for validating tokens,
-# because normal end users may not be able to reach that endpoint. This option
-# is deprecated in favor of www_authenticate_uri and will be removed in the S
-# release. (string value)
-# This option is deprecated for removal since Queens.
-# Its value may be silently ignored in the future.
-# Reason: The auth_uri option is deprecated in favor of www_authenticate_uri
-# and will be removed in the S  release.
-#auth_uri = <None>
-
-# API version of the admin Identity API endpoint. (string value)
-#auth_version = <None>
-
-# Do not handle authorization requests within the middleware, but delegate the
-# authorization decision to downstream WSGI components. (boolean value)
-#delay_auth_decision = false
-
-# Request timeout value for communicating with Identity API server. (integer
-# value)
-#http_connect_timeout = <None>
-
-# How many times are we trying to reconnect when communicating with Identity
-# API Server. (integer value)
-#http_request_max_retries = 3
-
-# Request environment key where the Swift cache object is stored. When
-# auth_token middleware is deployed with a Swift cache, use this option to have
-# the middleware share a caching backend with swift. Otherwise, use the
-# ``memcached_servers`` option instead. (string value)
-#cache = <None>
-
-# Required if identity server requires client certificate (string value)
-#certfile = <None>
-
-# Required if identity server requires client certificate (string value)
-#keyfile = <None>
-
-# A PEM encoded Certificate Authority to use when verifying HTTPs connections.
-# Defaults to system CAs. (string value)
-#cafile = <None>
-
-# Verify HTTPS connections. (boolean value)
-#insecure = false
-
-# The region in which the identity server can be found. (string value)
-#region_name = <None>
-
-# DEPRECATED: Directory used to cache files related to PKI tokens. This option
-# has been deprecated in the Ocata release and will be removed in the P
-# release. (string value)
-# This option is deprecated for removal since Ocata.
-# Its value may be silently ignored in the future.
-# Reason: PKI token format is no longer supported.
-#signing_dir = <None>
-
-# Optionally specify a list of memcached server(s) to use for caching. If left
-# undefined, tokens will instead be cached in-process. (list value)
-# Deprecated group/name - [keystone_authtoken]/memcache_servers
-#memcached_servers = <None>
-
-# In order to prevent excessive effort spent validating tokens, the middleware
-# caches previously-seen tokens for a configurable duration (in seconds). Set
-# to -1 to disable caching completely. (integer value)
-#token_cache_time = 300
-
-# (Optional) If defined, indicate whether token data should be authenticated or
-# authenticated and encrypted. If MAC, token data is authenticated (with HMAC)
-# in the cache. If ENCRYPT, token data is encrypted and authenticated in the
-# cache. If the value is not one of these options or empty, auth_token will
-# raise an exception on initialization. (string value)
-# Possible values:
-# None - <No description provided>
-# MAC - <No description provided>
-# ENCRYPT - <No description provided>
-#memcache_security_strategy = None
-
-# (Optional, mandatory if memcache_security_strategy is defined) This string is
-# used for key derivation. (string value)
-#memcache_secret_key = <None>
-
-# (Optional) Number of seconds memcached server is considered dead before it is
-# tried again. (integer value)
-#memcache_pool_dead_retry = 300
-
-# (Optional) Maximum total number of open connections to every memcached
-# server. (integer value)
-#memcache_pool_maxsize = 10
-
-# (Optional) Socket timeout in seconds for communicating with a memcached
-# server. (integer value)
-#memcache_pool_socket_timeout = 3
-
-# (Optional) Number of seconds a connection to memcached is held unused in the
-# pool before it is closed. (integer value)
-#memcache_pool_unused_timeout = 60
-
-# (Optional) Number of seconds that an operation will wait to get a memcached
-# client connection from the pool. (integer value)
-#memcache_pool_conn_get_timeout = 10
-
-# (Optional) Use the advanced (eventlet safe) memcached client pool. The
-# advanced pool will only work under python 2.x. (boolean value)
-#memcache_use_advanced_pool = false
-
-# (Optional) Indicate whether to set the X-Service-Catalog header. If False,
-# middleware will not ask for service catalog on token validation and will not
-# set the X-Service-Catalog header. (boolean value)
-#include_service_catalog = true
-
-# Used to control the use and type of token binding. Can be set to: "disabled"
-# to not check token binding. "permissive" (default) to validate binding
-# information if the bind type is of a form known to the server and ignore it
-# if not. "strict" like "permissive" but if the bind type is unknown the token
-# will be rejected. "required" any form of token binding is needed to be
-# allowed. Finally the name of a binding method that must be present in tokens.
-# (string value)
-#enforce_token_bind = permissive
-
-# DEPRECATED: Hash algorithms to use for hashing PKI tokens. This may be a
-# single algorithm or multiple. The algorithms are those supported by Python
-# standard hashlib.new(). The hashes will be tried in the order given, so put
-# the preferred one first for performance. The result of the first hash will be
-# stored in the cache. This will typically be set to multiple values only while
-# migrating from a less secure algorithm to a more secure one. Once all the old
-# tokens are expired this option should be set to a single value for better
-# performance. (list value)
-# This option is deprecated for removal since Ocata.
-# Its value may be silently ignored in the future.
-# Reason: PKI token format is no longer supported.
-#hash_algorithms = md5
-
-# A choice of roles that must be present in a service token. Service tokens are
-# allowed to request that an expired token can be used and so this check should
-# tightly control that only actual services should be sending this token. Roles
-# here are applied as an ANY check so any role in this list must be present.
-# For backwards compatibility reasons this currently only affects the
-# allow_expired check. (list value)
-#service_token_roles = service
-
-# For backwards compatibility reasons we must let valid service tokens pass
-# that don't pass the service_token_roles check as valid. Setting this true
-# will become the default in a future release and should be enabled if
-# possible. (boolean value)
-#service_token_roles_required = false
-
-# Authentication type to load (string value)
-# Deprecated group/name - [keystone_authtoken]/auth_plugin
-#auth_type = <None>
-
-# Config Section from which to load plugin specific options (string value)
-#auth_section = <None>
-
-
-[nova]
-
-#
-# From neutron
-#
-
-# Name of nova region to use. Useful if keystone manages more than one region.
-# (string value)
-#region_name = <None>
-
-# Type of the nova endpoint to use.  This endpoint will be looked up in the
-# keystone catalog and should be one of public, internal or admin. (string
-# value)
-# Possible values:
-# public - <No description provided>
-# admin - <No description provided>
-# internal - <No description provided>
-#endpoint_type = public
-
-#
-# From nova.auth
-#
-
-# Authentication URL (string value)
-#auth_url = <None>
-
-# Authentication type to load (string value)
-# Deprecated group/name - [nova]/auth_plugin
-#auth_type = <None>
-
-# PEM encoded Certificate Authority to use when verifying HTTPs connections.
-# (string value)
-#cafile = <None>
-
-# PEM encoded client certificate cert file (string value)
-#certfile = <None>
-
-# Collect per-API call timing information. (boolean value)
-#collect_timing = false
-
-# Optional domain ID to use with v3 and v2 parameters. It will be used for both
-# the user and project domain in v3 and ignored in v2 authentication. (string
-# value)
-#default_domain_id = <None>
-
-# Optional domain name to use with v3 API and v2 parameters. It will be used
-# for both the user and project domain in v3 and ignored in v2 authentication.
-# (string value)
-#default_domain_name = <None>
-
-# Domain ID to scope to (string value)
-#domain_id = <None>
-
-# Domain name to scope to (string value)
-#domain_name = <None>
-
-# Verify HTTPS connections. (boolean value)
-#insecure = false
-
-# PEM encoded client certificate key file (string value)
-#keyfile = <None>
-
-# User's password (string value)
-#password = <None>
-
-# Domain ID containing project (string value)
-#project_domain_id = <None>
-
-# Domain name containing project (string value)
-#project_domain_name = <None>
-
-# Project ID to scope to (string value)
-# Deprecated group/name - [nova]/tenant_id
-#project_id = <None>
-
-# Project name to scope to (string value)
-# Deprecated group/name - [nova]/tenant_name
-#project_name = <None>
-
-# Log requests to multiple loggers. (boolean value)
-#split_loggers = false
-
-# Scope for system operations (string value)
-#system_scope = <None>
-
-# Tenant ID (string value)
-#tenant_id = <None>
-
-# Tenant Name (string value)
-#tenant_name = <None>
-
-# Timeout value for http requests (integer value)
-#timeout = <None>
-
-# Trust ID (string value)
-#trust_id = <None>
-
-# User's domain id (string value)
-#user_domain_id = <None>
-
-# User's domain name (string value)
-#user_domain_name = <None>
-
-# User id (string value)
-#user_id = <None>
-
-# Username (string value)
-# Deprecated group/name - [nova]/user_name
-#username = <None>
-
 
 [oslo_concurrency]
-
 #
 # From oslo.concurrency
 #
@@ -1042,265 +499,17 @@
 # Enables or disables inter-process locks. (boolean value)
 #disable_process_locking = false
 
-# Directory to use for lock files.  For security, the specified directory
-# should only be writable by the user running the processes that need locking.
-# Defaults to environment variable OSLO_LOCK_PATH. If external locks are used,
-# a lock path must be set. (string value)
-#lock_path = <None>
-
-
-[oslo_messaging_amqp]
-
-#
-# From oslo.messaging
-#
-
-# Name for the AMQP container. must be globally unique. Defaults to a generated
-# UUID (string value)
-#container_name = <None>
-
-# Timeout for inactive connections (in seconds) (integer value)
-#idle_timeout = 0
-
-# Debug: dump AMQP frames to stdout (boolean value)
-#trace = false
-
-# Attempt to connect via SSL. If no other ssl-related parameters are given, it
-# will use the system's CA-bundle to verify the server's certificate. (boolean
-# value)
-#ssl = false
-
-# CA certificate PEM file used to verify the server's certificate (string
-# value)
-#ssl_ca_file =
-
-# Self-identifying certificate PEM file for client authentication (string
-# value)
-#ssl_cert_file =
-
-# Private key PEM file used to sign ssl_cert_file certificate (optional)
-# (string value)
-#ssl_key_file =
-
-# Password for decrypting ssl_key_file (if encrypted) (string value)
-#ssl_key_password = <None>
-
-# By default SSL checks that the name in the server's certificate matches the
-# hostname in the transport_url. In some configurations it may be preferable to
-# use the virtual hostname instead, for example if the server uses the Server
-# Name Indication TLS extension (rfc6066) to provide a certificate per virtual
-# host. Set ssl_verify_vhost to True if the server's SSL certificate uses the
-# virtual host name instead of the DNS name. (boolean value)
-#ssl_verify_vhost = false
-
-# Space separated list of acceptable SASL mechanisms (string value)
-#sasl_mechanisms =
-
-# Path to directory that contains the SASL configuration (string value)
-#sasl_config_dir =
-
-# Name of configuration file (without .conf suffix) (string value)
-#sasl_config_name =
-
-# SASL realm to use if no realm present in username (string value)
-#sasl_default_realm =
-
-# Seconds to pause before attempting to re-connect. (integer value)
-# Minimum value: 1
-#connection_retry_interval = 1
-
-# Increase the connection_retry_interval by this many seconds after each
-# unsuccessful failover attempt. (integer value)
-# Minimum value: 0
-#connection_retry_backoff = 2
-
-# Maximum limit for connection_retry_interval + connection_retry_backoff
-# (integer value)
-# Minimum value: 1
-#connection_retry_interval_max = 30
-
-# Time to pause between re-connecting an AMQP 1.0 link that failed due to a
-# recoverable error. (integer value)
-# Minimum value: 1
-#link_retry_delay = 10
-
-# The maximum number of attempts to re-send a reply message which failed due to
-# a recoverable error. (integer value)
-# Minimum value: -1
-#default_reply_retry = 0
-
-# The deadline for an rpc reply message delivery. (integer value)
-# Minimum value: 5
-#default_reply_timeout = 30
-
-# The deadline for an rpc cast or call message delivery. Only used when caller
-# does not provide a timeout expiry. (integer value)
-# Minimum value: 5
-#default_send_timeout = 30
-
-# The deadline for a sent notification message delivery. Only used when caller
-# does not provide a timeout expiry. (integer value)
-# Minimum value: 5
-#default_notify_timeout = 30
-
-# The duration to schedule a purge of idle sender links. Detach link after
-# expiry. (integer value)
-# Minimum value: 1
-#default_sender_link_timeout = 600
-
-# Indicates the addressing mode used by the driver.
-# Permitted values:
-# 'legacy'   - use legacy non-routable addressing
-# 'routable' - use routable addresses
-# 'dynamic'  - use legacy addresses if the message bus does not support routing
-# otherwise use routable addressing (string value)
-#addressing_mode = dynamic
-
-# Enable virtual host support for those message buses that do not natively
-# support virtual hosting (such as qpidd). When set to true the virtual host
-# name will be added to all message bus addresses, effectively creating a
-# private 'subnet' per virtual host. Set to False if the message bus supports
-# virtual hosting using the 'hostname' field in the AMQP 1.0 Open performative
-# as the name of the virtual host. (boolean value)
-#pseudo_vhost = true
-
-# address prefix used when sending to a specific server (string value)
-#server_request_prefix = exclusive
-
-# address prefix used when broadcasting to all servers (string value)
-#broadcast_prefix = broadcast
-
-# address prefix when sending to any server in group (string value)
-#group_request_prefix = unicast
-
-# Address prefix for all generated RPC addresses (string value)
-#rpc_address_prefix = openstack.org/om/rpc
-
-# Address prefix for all generated Notification addresses (string value)
-#notify_address_prefix = openstack.org/om/notify
-
-# Appended to the address prefix when sending a fanout message. Used by the
-# message bus to identify fanout messages. (string value)
-#multicast_address = multicast
-
-# Appended to the address prefix when sending to a particular RPC/Notification
-# server. Used by the message bus to identify messages sent to a single
-# destination. (string value)
-#unicast_address = unicast
-
-# Appended to the address prefix when sending to a group of consumers. Used by
-# the message bus to identify messages that should be delivered in a round-
-# robin fashion across consumers. (string value)
-#anycast_address = anycast
-
-# Exchange name used in notification addresses.
-# Exchange name resolution precedence:
-# Target.exchange if set
-# else default_notification_exchange if set
-# else control_exchange if set
-# else 'notify' (string value)
-#default_notification_exchange = <None>
-
-# Exchange name used in RPC addresses.
-# Exchange name resolution precedence:
-# Target.exchange if set
-# else default_rpc_exchange if set
-# else control_exchange if set
-# else 'rpc' (string value)
-#default_rpc_exchange = <None>
-
-# Window size for incoming RPC Reply messages. (integer value)
-# Minimum value: 1
-#reply_link_credit = 200
-
-# Window size for incoming RPC Request messages (integer value)
-# Minimum value: 1
-#rpc_server_credit = 100
-
-# Window size for incoming Notification messages (integer value)
-# Minimum value: 1
-#notify_server_credit = 100
-
-# Send messages of this type pre-settled.
-# Pre-settled messages will not receive acknowledgement
-# from the peer. Note well: pre-settled messages may be
-# silently discarded if the delivery fails.
-# Permitted values:
-# 'rpc-call' - send RPC Calls pre-settled
-# 'rpc-reply'- send RPC Replies pre-settled
-# 'rpc-cast' - Send RPC Casts pre-settled
-# 'notify'   - Send Notifications pre-settled
-#  (multi valued)
-#pre_settled = rpc-cast
-#pre_settled = rpc-reply
-
-
-[oslo_messaging_kafka]
-
-#
-# From oslo.messaging
-#
-
-# Max fetch bytes of Kafka consumer (integer value)
-#kafka_max_fetch_bytes = 1048576
-
-# Default timeout(s) for Kafka consumers (floating point value)
-#kafka_consumer_timeout = 1.0
-
-# DEPRECATED: Pool Size for Kafka Consumers (integer value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#pool_size = 10
-
-# DEPRECATED: The pool size limit for connections expiration policy (integer
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#conn_pool_min_size = 2
-
-# DEPRECATED: The time-to-live in sec of idle connections in the pool (integer
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#conn_pool_ttl = 1200
-
-# Group id for Kafka consumer. Consumers in one group will coordinate message
-# consumption (string value)
-#consumer_group = oslo_messaging_consumer
-
-# Upper bound on the delay for KafkaProducer batching in seconds (floating
-# point value)
-#producer_batch_timeout = 0.0
-
-# Size of batch for the producer async send (integer value)
-#producer_batch_size = 16384
-
-# Enable asynchronous consumer commits (boolean value)
-#enable_auto_commit = false
-
-# The maximum number of records returned in a poll call (integer value)
-#max_poll_records = 500
-
-# Protocol used to communicate with brokers (string value)
-# Possible values:
-# PLAINTEXT - <No description provided>
-# SASL_PLAINTEXT - <No description provided>
-# SSL - <No description provided>
-# SASL_SSL - <No description provided>
-#security_protocol = PLAINTEXT
-
-# Mechanism when security protocol is SASL (string value)
-#sasl_mechanism = PLAIN
-
-# CA certificate PEM file used to verify the server certificate (string value)
-#ssl_cafile =
+# Directory to use for lock files.  For security, the specified
+# directory should only be writable by the user running the processes
+# that need locking. Defaults to environment variable OSLO_LOCK_PATH.
+# If OSLO_LOCK_PATH is not set in the environment, use the Python
+# tempfile.gettempdir function to find a suitable location. If
+# external locks are used, a lock path must be set. (string value)
+#lock_path = /tmp
+lock_path = /var/lock/neutron
 
 
 [oslo_messaging_notifications]
-
 #
 # From oslo.messaging
 #
@@ -1309,6 +518,7 @@
 # messaging, messagingv2, routing, log, test, noop (multi valued)
 # Deprecated group/name - [DEFAULT]/notification_driver
 #driver =
+driver=messagingv2
 
 # A URL representing the messaging driver to use for notifications. If not set,
 # we fall back to the same configuration used for RPC. (string value)
@@ -1326,194 +536,31 @@
 #retry = -1
 
 
-[oslo_messaging_rabbit]
-
-#
-# From oslo.messaging
-#
-
-# Use durable queues in AMQP. (boolean value)
-#amqp_durable_queues = false
-
-# Auto-delete queues in AMQP. (boolean value)
-#amqp_auto_delete = false
-
-# Connect over SSL. (boolean value)
-# Deprecated group/name - [oslo_messaging_rabbit]/rabbit_use_ssl
-#ssl = false
-
-# SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and
-# SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some
-# distributions. (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_version
-#ssl_version =
-
-# SSL key file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_keyfile
-#ssl_key_file =
-
-# SSL cert file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_certfile
-#ssl_cert_file =
-
-# SSL certification authority file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_ca_certs
-#ssl_ca_file =
-
-# How long to wait before reconnecting in response to an AMQP consumer cancel
-# notification. (floating point value)
-#kombu_reconnect_delay = 1.0
-
-# EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression will not
-# be used. This option may not be available in future versions. (string value)
-#kombu_compression = <None>
-
-# How long to wait a missing client before abandoning to send it its replies.
-# This value should not be longer than rpc_response_timeout. (integer value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_reconnect_timeout
-#kombu_missing_consumer_retry_timeout = 60
-
-# Determines how the next RabbitMQ node is chosen in case the one we are
-# currently connected to becomes unavailable. Takes effect only if more than
-# one RabbitMQ node is provided in config. (string value)
-# Possible values:
-# round-robin - <No description provided>
-# shuffle - <No description provided>
-#kombu_failover_strategy = round-robin
-
-# The RabbitMQ login method. (string value)
-# Possible values:
-# PLAIN - <No description provided>
-# AMQPLAIN - <No description provided>
-# RABBIT-CR-DEMO - <No description provided>
-#rabbit_login_method = AMQPLAIN
-
-# How frequently to retry connecting with RabbitMQ. (integer value)
-#rabbit_retry_interval = 1
-
-# How long to backoff for between retries when connecting to RabbitMQ. (integer
-# value)
-#rabbit_retry_backoff = 2
-
-# Maximum interval of RabbitMQ connection retries. Default is 30 seconds.
-# (integer value)
-#rabbit_interval_max = 30
-
-# Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change this
-# option, you must wipe the RabbitMQ database. In RabbitMQ 3.0, queue mirroring
-# is no longer controlled by the x-ha-policy argument when declaring a queue.
-# If you just want to make sure that all queues (except those with auto-
-# generated names) are mirrored across all nodes, run: "rabbitmqctl set_policy
-# HA '^(?!amq\.).*' '{"ha-mode": "all"}' " (boolean value)
-#rabbit_ha_queues = false
-
-# Positive integer representing duration in seconds for queue TTL (x-expires).
-# Queues which are unused for the duration of the TTL are automatically
-# deleted. The parameter affects only reply and fanout queues. (integer value)
-# Minimum value: 1
-#rabbit_transient_queues_ttl = 1800
-
-# Specifies the number of messages to prefetch. Setting to zero allows
-# unlimited messages. (integer value)
-#rabbit_qos_prefetch_count = 0
-
-# Number of seconds after which the Rabbit broker is considered down if
-# heartbeat's keep-alive fails (0 disable the heartbeat). EXPERIMENTAL (integer
-# value)
-#heartbeat_timeout_threshold = 60
-
-# How often times during the heartbeat_timeout_threshold we check the
-# heartbeat. (integer value)
-#heartbeat_rate = 2
-
-
 [oslo_middleware]
-
-#
-# From oslo.middleware.http_proxy_to_wsgi
-#
+#
+# From oslo.middleware
+#
+
+# The maximum body size for each  request, in bytes. (integer value)
+# Deprecated group/name - [DEFAULT]/osapi_max_request_body_size
+# Deprecated group/name - [DEFAULT]/max_request_body_size
+#max_request_body_size = 114688
+
+# DEPRECATED: The HTTP Header that will be used to determine what the original
+# request protocol scheme was, even if it was hidden by a SSL termination
+# proxy. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#secure_proxy_ssl_header = X-Forwarded-Proto
 
 # Whether the application is behind a proxy or not. This determines if the
 # middleware should parse the headers or not. (boolean value)
 #enable_proxy_headers_parsing = false
+enable_proxy_headers_parsing = True
+
 
 
 [oslo_policy]
-
-#
-# From oslo.policy
-#
-
-# This option controls whether or not to enforce scope when evaluating
-# policies. If ``True``, the scope of the token used in the request is compared
-# to the ``scope_types`` of the policy being enforced. If the scopes do not
-# match, an ``InvalidScope`` exception will be raised. If ``False``, a message
-# will be logged informing operators that policies are being invoked with
-# mismatching scope. (boolean value)
-#enforce_scope = false
-
-# The file that defines policies. (string value)
-#policy_file = policy.json
-
-# Default rule. Enforced when a requested rule is not found. (string value)
-#policy_default_rule = default
-
-# Directories where policy configuration files are stored. They can be relative
-# to any directory in the search path defined by the config_dir option, or
-# absolute paths. The file defined by policy_file must exist for these
-# directories to be searched.  Missing or empty directories are ignored. (multi
-# valued)
-#policy_dirs = policy.d
-
-# Content Type to send and receive data for REST based policy check (string
-# value)
-# Possible values:
-# application/x-www-form-urlencoded - <No description provided>
-# application/json - <No description provided>
-#remote_content_type = application/x-www-form-urlencoded
-
-# server identity verification for REST based policy check (boolean value)
-#remote_ssl_verify_server_crt = false
-
-# Absolute path to ca cert file for REST based policy check (string value)
-#remote_ssl_ca_crt_file = <None>
-
-# Absolute path to client cert for REST based policy check (string value)
-#remote_ssl_client_crt_file = <None>
-
-# Absolute path client key file REST based policy check (string value)
-#remote_ssl_client_key_file = <None>
-
-
-[privsep]
-# Configuration options for the oslo.privsep daemon. Note that this group name
-# can be changed by the consuming service. Check the service's docs to see if
-# this is the case.
-
-#
-# From oslo.privsep
-#
-
-# User that the privsep daemon should run as. (string value)
-#user = <None>
-
-# Group that the privsep daemon should run as. (string value)
-#group = <None>
-
-# List of Linux capabilities retained by the privsep daemon. (list value)
-#capabilities =
-
-# The number of threads available for privsep to concurrently run processes.
-# Defaults to the number of CPU cores in the system. (integer value)
-# Minimum value: 1
-#thread_pool_size = 4
-
-# Command to invoke to start the privsep daemon if not using the "fork" method.
-# If not specified, a default is generated using "sudo privsep-helper" and
-# arguments designed to recreate the current configuration. This command must
-# accept suitable --privsep_context and --privsep_sock_path arguments. (string
-# value)
-#helper_command = <None>
 
 
 [quotas]
@@ -1568,7 +615,6 @@
 
 
 [ssl]
-
 #
 # From oslo.service.sslutils
 #
@@ -1593,3 +639,7 @@
 # Sets the list of available ciphers. value should be a string in the OpenSSL
 # cipher list format. (string value)
 #ciphers = <None>
+
+
+[ovs]
+ovsdb_connection = tcp:127.0.0.1:6640

2019-08-27 23:31:29,971 [salt.state       :1951][INFO    ][12409] Completed state [/etc/neutron/neutron.conf] at time 23:31:29.971531 duration_in_ms=250.818
2019-08-27 23:31:29,971 [salt.state       :1780][INFO    ][12409] Running state [ovs-vsctl set-manager ptcp:6640:127.0.0.1] at time 23:31:29.971779
2019-08-27 23:31:29,972 [salt.state       :1813][INFO    ][12409] Executing state cmd.run for [ovs-vsctl set-manager ptcp:6640:127.0.0.1]
2019-08-27 23:31:29,972 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command 'ovs-vsctl get-manager | fgrep -qx ptcp:6640:127.0.0.1' in directory '/root'
2019-08-27 23:31:30,036 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command 'ovs-vsctl set-manager ptcp:6640:127.0.0.1' in directory '/root'
2019-08-27 23:31:30,055 [salt.state       :300 ][INFO    ][12409] {'pid': 15014, 'retcode': 0, 'stderr': '', 'stdout': ''}
2019-08-27 23:31:30,056 [salt.state       :1951][INFO    ][12409] Completed state [ovs-vsctl set-manager ptcp:6640:127.0.0.1] at time 23:31:30.056032 duration_in_ms=84.252
2019-08-27 23:31:30,058 [salt.state       :1780][INFO    ][12409] Running state [ovn-metadata-agent] at time 23:31:30.058327
2019-08-27 23:31:30,058 [salt.state       :1813][INFO    ][12409] Executing state service.running for [ovn-metadata-agent]
2019-08-27 23:31:30,059 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['systemctl', 'status', 'ovn-metadata-agent.service', '-n', '0'] in directory '/root'
2019-08-27 23:31:30,084 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['systemctl', 'is-active', 'ovn-metadata-agent.service'] in directory '/root'
2019-08-27 23:31:30,103 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['systemctl', 'is-enabled', 'ovn-metadata-agent.service'] in directory '/root'
2019-08-27 23:31:30,125 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['systemd-run', '--scope', 'systemctl', 'start', 'ovn-metadata-agent.service'] in directory '/root'
2019-08-27 23:31:30,158 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['systemctl', 'is-active', 'ovn-metadata-agent.service'] in directory '/root'
2019-08-27 23:31:30,174 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['systemctl', 'is-enabled', 'ovn-metadata-agent.service'] in directory '/root'
2019-08-27 23:31:30,195 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['systemctl', 'is-enabled', 'ovn-metadata-agent.service'] in directory '/root'
2019-08-27 23:31:30,220 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['systemd-run', '--scope', 'systemctl', 'enable', 'ovn-metadata-agent.service'] in directory '/root'
2019-08-27 23:31:30,404 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12409] Executing command ['systemctl', 'is-enabled', 'ovn-metadata-agent.service'] in directory '/root'
2019-08-27 23:31:30,421 [salt.state       :300 ][INFO    ][12409] {'ovn-metadata-agent': True}
2019-08-27 23:31:30,421 [salt.state       :1951][INFO    ][12409] Completed state [ovn-metadata-agent] at time 23:31:30.421458 duration_in_ms=363.131
2019-08-27 23:31:30,423 [salt.minion      :1711][INFO    ][12409] Returning information for job: 20190827233031861800
2019-08-27 23:31:31,130 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command state.sls with jid 20190827233131121916
2019-08-27 23:31:31,142 [salt.minion      :1432][INFO    ][15107] Starting a new job with PID 15107
2019-08-27 23:31:38,263 [salt.state       :915 ][INFO    ][15107] Loading fresh modules for state activity
2019-08-27 23:31:38,324 [salt.fileclient  :1219][INFO    ][15107] Fetching file from saltenv 'base', ** done ** 'nova/init.sls'
2019-08-27 23:31:38,359 [salt.fileclient  :1219][INFO    ][15107] Fetching file from saltenv 'base', ** done ** 'nova/compute.sls'
2019-08-27 23:31:38,727 [salt.fileclient  :1219][INFO    ][15107] Fetching file from saltenv 'base', ** done ** 'nova/_ssl/rabbitmq.sls'
2019-08-27 23:31:38,884 [salt.fileclient  :1219][INFO    ][15107] Fetching file from saltenv 'base', ** done ** 'armband/init.sls'
2019-08-27 23:31:38,925 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2019-08-27 23:31:39,794 [salt.fileclient  :1219][INFO    ][15107] Fetching file from saltenv 'base', ** done ** 'armband/qemu_efi.sls'
2019-08-27 23:31:39,818 [salt.fileclient  :1219][INFO    ][15107] Fetching file from saltenv 'base', ** done ** 'armband/vgabios.sls'
2019-08-27 23:31:39,885 [salt.state       :1780][INFO    ][15107] Running state [libvirtd] at time 23:31:39.884973
2019-08-27 23:31:39,886 [salt.state       :1813][INFO    ][15107] Executing state group.present for [libvirtd]
2019-08-27 23:31:39,888 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command ['groupadd', '-r', 'libvirtd'] in directory '/root'
2019-08-27 23:31:39,945 [salt.state       :300 ][INFO    ][15107] {'passwd': 'x', 'gid': 998, 'name': 'libvirtd', 'members': []}
2019-08-27 23:31:39,946 [salt.state       :1951][INFO    ][15107] Completed state [libvirtd] at time 23:31:39.946344 duration_in_ms=61.371
2019-08-27 23:31:39,946 [salt.state       :1780][INFO    ][15107] Running state [nova] at time 23:31:39.946771
2019-08-27 23:31:39,947 [salt.state       :1813][INFO    ][15107] Executing state group.present for [nova]
2019-08-27 23:31:39,948 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command ['groupadd', '-g 303', '-r', 'nova'] in directory '/root'
2019-08-27 23:31:39,971 [salt.state       :300 ][INFO    ][15107] {'passwd': 'x', 'gid': 303, 'name': 'nova', 'members': []}
2019-08-27 23:31:39,972 [salt.state       :1951][INFO    ][15107] Completed state [nova] at time 23:31:39.972230 duration_in_ms=25.459
2019-08-27 23:31:39,973 [salt.state       :1780][INFO    ][15107] Running state [nova] at time 23:31:39.973180
2019-08-27 23:31:39,973 [salt.state       :1813][INFO    ][15107] Executing state user.present for [nova]
2019-08-27 23:31:39,977 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command ['useradd', '-s', '/bin/bash', '-u', '303', '-g', '303', '-m', '-d', '/var/lib/nova', '-r', 'nova'] in directory '/root'
2019-08-27 23:31:40,009 [salt.state       :300 ][INFO    ][15107] {'shell': '/bin/bash', 'workphone': '', 'uid': 303, 'passwd': 'x', 'roomnumber': '', 'groups': ['nova'], 'home': '/var/lib/nova', 'name': 'nova', 'gid': 303, 'fullname': '', 'homephone': ''}
2019-08-27 23:31:40,010 [salt.state       :1951][INFO    ][15107] Completed state [nova] at time 23:31:40.010475 duration_in_ms=37.294
2019-08-27 23:31:40,011 [salt.state       :1780][INFO    ][15107] Running state [nova_compute_ssl_rabbitmq] at time 23:31:40.011635
2019-08-27 23:31:40,012 [salt.state       :1813][INFO    ][15107] Executing state test.show_notification for [nova_compute_ssl_rabbitmq]
2019-08-27 23:31:40,013 [salt.state       :300 ][INFO    ][15107] Running nova._ssl.rabbitmq
2019-08-27 23:31:40,013 [salt.state       :1951][INFO    ][15107] Completed state [nova_compute_ssl_rabbitmq] at time 23:31:40.013499 duration_in_ms=1.864
2019-08-27 23:31:40,661 [salt.state       :1780][INFO    ][15107] Running state [nova-compute] at time 23:31:40.661304
2019-08-27 23:31:40,662 [salt.state       :1813][INFO    ][15107] Executing state pkg.installed for [nova-compute]
2019-08-27 23:31:40,691 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command ['apt-cache', '-q', 'policy', 'nova-compute'] in directory '/root'
2019-08-27 23:31:41,153 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2019-08-27 23:31:43,645 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2019-08-27 23:31:43,676 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'nova-compute'] in directory '/root'
2019-08-27 23:31:46,233 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command saltutil.find_job with jid 20190827233146220057
2019-08-27 23:31:46,254 [salt.minion      :1432][INFO    ][15744] Starting a new job with PID 15744
2019-08-27 23:31:46,271 [salt.minion      :1711][INFO    ][15744] Returning information for job: 20190827233146220057
2019-08-27 23:32:16,320 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command saltutil.find_job with jid 20190827233216274158
2019-08-27 23:32:16,343 [salt.minion      :1432][INFO    ][17254] Starting a new job with PID 17254
2019-08-27 23:32:16,360 [salt.minion      :1711][INFO    ][17254] Returning information for job: 20190827233216274158
2019-08-27 23:32:46,360 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command saltutil.find_job with jid 20190827233246351333
2019-08-27 23:32:46,373 [salt.minion      :1432][INFO    ][19574] Starting a new job with PID 19574
2019-08-27 23:32:46,391 [salt.minion      :1711][INFO    ][19574] Returning information for job: 20190827233246351333
2019-08-27 23:32:49,729 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2019-08-27 23:32:49,797 [salt.state       :300 ][INFO    ][15107] Made the following changes:
'aalib1' changed from 'absent' to '1'
'libvirt-daemon' changed from 'absent' to '5.0.0-1ubuntu2.3~cloud0'
'zvmcloudconnector-common' changed from 'absent' to '1.4.1-0ubuntu1~cloud0'
'libxrender1' changed from 'absent' to '1:0.9.10-1'
'libavahi-common3' changed from 'absent' to '0.7-3.1ubuntu1.2'
'python3-keystone' changed from 'absent' to '2:15.0.0-0ubuntu1~cloud0'
'libjack-0.125' changed from 'absent' to '1'
'fonts-dejavu-core' changed from 'absent' to '2.37-1'
'xmlsec1' changed from 'absent' to '1.2.25-1build1'
'libcdparanoia0' changed from 'absent' to '3.10.2+debian-13'
'python3-aniso8601' changed from 'absent' to '2.0.0-1'
'libyajl2' changed from 'absent' to '2.1.0-2build1'
'gstreamer1.0-plugins-good' changed from 'absent' to '1.14.5-0ubuntu1~18.04.1'
'libxdamage1' changed from 'absent' to '1:1.1.4-3'
'python-ldap' changed from 'absent' to '3.0.0-1'
'python3-passlib' changed from 'absent' to '1.7.1-1'
'librsvg2-common' changed from 'absent' to '2.40.20-2'
'gstreamer1.0-plugins-base' changed from 'absent' to '1.14.5-0ubuntu1~18.04.1'
'fontconfig' changed from 'absent' to '2.12.6-0ubuntu2'
'libshout3' changed from 'absent' to '2.4.1-2build1'
'libcolord2' changed from 'absent' to '1.3.3-2build1'
'qemu-system-x86' changed from 'absent' to '1:3.1+dfsg-2ubuntu3.2~cloud0'
'humanity-icon-theme' changed from 'absent' to '0.6.15'
'libvirt-clients' changed from 'absent' to '5.0.0-1ubuntu2.3~cloud0'
'ipxe-qemu' changed from 'absent' to '1.0.0+git-20180124.fbe8c52d-0ubuntu2.2'
'libsndfile1' changed from 'absent' to '1.0.28-4ubuntu0.18.04.1'
'libxfixes3' changed from 'absent' to '1:5.0.3-1'
'libiec61883-0' changed from 'absent' to '1.2.0-2'
'libxml2-utils' changed from 'absent' to '2.9.4+dfsg1-6.1ubuntu1.2'
'python3-werkzeug' changed from 'absent' to '0.14.1+dfsg1-1'
'mkisofs' changed from 'absent' to '1'
'libvorbis0a' changed from 'absent' to '1.3.5-4.2'
'libgdk-pixbuf2.0-common' changed from 'absent' to '2.36.11-2'
'libspice-server1' changed from 'absent' to '0.14.0-1ubuntu2.4'
'libtag1v5' changed from 'absent' to '1.11.1+dfsg.1-0.2build2'
'libgtk-3-common' changed from 'absent' to '3.22.30-1ubuntu4'
'keystone-common' changed from 'absent' to '2:15.0.0-0ubuntu1~cloud0'
'genisoimage' changed from 'absent' to '9:1.1.11-3ubuntu2'
'libcaca0' changed from 'absent' to '0.99.beta19-2ubuntu0.18.04.1'
'qemu-keymaps' changed from 'absent' to '1'
'libtag1v5-vanilla' changed from 'absent' to '1.11.1+dfsg.1-0.2build2'
'qemu-system-common' changed from 'absent' to '1:3.1+dfsg-2ubuntu3.2~cloud0'
'qemu-system-i386' changed from 'absent' to '1'
'libvpx5' changed from 'absent' to '1.7.0-3'
'gstreamer1.0-videosource' changed from 'absent' to '1'
'libtwolame0' changed from 'absent' to '0.3.13-3'
'nova-compute-kvm' changed from 'absent' to '2:19.0.1-0ubuntu2.1~cloud0'
'libusbredirparser1' changed from 'absent' to '0.7.1-1'
'libdconf1' changed from 'absent' to '0.26.0-2ubuntu3'
'libxcursor1' changed from 'absent' to '1:1.1.15-1'
'libatspi2.0-0' changed from 'absent' to '2.28.0-1'
'libfontconfig1' changed from 'absent' to '2.12.6-0ubuntu2'
'libproxy1v5' changed from 'absent' to '0.4.15-1'
'libgraphite2-2.0.0' changed from 'absent' to '1'
'qemu-system-x86-64' changed from 'absent' to '1'
'python3-os-vif' changed from 'absent' to '1.15.1-0ubuntu1~cloud0'
'libavahi-client3' changed from 'absent' to '0.7-3.1ubuntu1.2'
'libatk1.0-data' changed from 'absent' to '2.28.1-1'
'libxen-4.9' changed from 'absent' to '4.9.2-0ubuntu1'
'libxcb-shm0' changed from 'absent' to '1.13-2~ubuntu18.04'
'python-pyasn1' changed from 'absent' to '0.4.2-3'
'glib-networking' changed from 'absent' to '2.56.0-1'
'libcacard0' changed from 'absent' to '1:2.6.1-1~cloud0'
'libxrandr2' changed from 'absent' to '2:1.5.1-1'
'libgdk-pixbuf2.0-0' changed from 'absent' to '2.36.11-2'
'libvte-2.91-common' changed from 'absent' to '0.52.2-1ubuntu1~18.04.2'
'libvorbisenc2' changed from 'absent' to '1.3.5-4.2'
'gstreamer1.0-visualization' changed from 'absent' to '1'
'python3-flask-restful' changed from 'absent' to '0.3.6-1'
'kpartx' changed from 'absent' to '0.7.4-2ubuntu3'
'nova-compute-libvirt' changed from 'absent' to '2:19.0.1-0ubuntu2.1~cloud0'
'python-pyldap' changed from 'absent' to '1'
'msr-tools' changed from 'absent' to '1.3-2build1'
'python3-microversion-parse' changed from 'absent' to '0.2.1-0ubuntu1~cloud0'
'glib-networking-common' changed from 'absent' to '2.56.0-1'
'libasyncns0' changed from 'absent' to '0.8-6'
'at-spi2-core' changed from 'absent' to '2.28.0-1'
'libfontconfig' changed from 'absent' to '1'
'python-pyasn1-modules' changed from 'absent' to '0.2.1-0.2'
'libaa1' changed from 'absent' to '1.4p5-44build2'
'libwayland-server0' changed from 'absent' to '1.16.0-1ubuntu1.1~18.04.1'
'libjack-jackd2-0' changed from 'absent' to '1.9.12~dfsg-2'
'python3.5-ldap' changed from 'absent' to '1'
'libdatrie1' changed from 'absent' to '0.2.10-7'
'libharfbuzz0b' changed from 'absent' to '1.7.2-1ubuntu1'
'libv4l-0' changed from 'absent' to '1.14.2-1'
'libavc1394-0' changed from 'absent' to '0.5.4-4build1'
'libwavpack1' changed from 'absent' to '5.1.0-2ubuntu1.4'
'libsoup-gnome2.4-1' changed from 'absent' to '2.62.1-1ubuntu0.1'
'python3-pyldap' changed from 'absent' to '1'
'libxv1' changed from 'absent' to '2:1.0.11-1'
'python3.6-ldap' changed from 'absent' to '1'
'fontconfig-config' changed from 'absent' to '2.12.6-0ubuntu2'
'gstreamer1.0-audiosink' changed from 'absent' to '1'
'libmpg123-0' changed from 'absent' to '1.25.10-1'
'libflac8' changed from 'absent' to '1.3.2-1'
'libbluetooth3' changed from 'absent' to '5.48-0ubuntu3.1'
'libxtst6' changed from 'absent' to '2:1.2.3-1'
'libxinerama1' changed from 'absent' to '2:1.1.3-1'
'nova-common' changed from 'absent' to '2:19.0.1-0ubuntu2.1~cloud0'
'libthai-data' changed from 'absent' to '0.1.27-2'
'libxcomposite1' changed from 'absent' to '1:0.4.4-2'
'libcups2' changed from 'absent' to '2.2.7-1ubuntu2.7'
'python3-pypowervm' changed from 'absent' to '1.1.20-0ubuntu1~cloud0'
'gtk-update-icon-cache' changed from 'absent' to '3.22.30-1ubuntu4'
'libxenstore3.0' changed from 'absent' to '4.9.2-0ubuntu1'
'gstreamer1.0-audiosource' changed from 'absent' to '1'
'python3-pysaml2' changed from 'absent' to '4.5.0+dfsg1-0ubuntu2~cloud0'
'glib-networking-services' changed from 'absent' to '2.56.0-1'
'libpciaccess0' changed from 'absent' to '0.14-1'
'libfdt1' changed from 'absent' to '1.4.5-3'
'libgdk-pixbuf2.0-bin' changed from 'absent' to '2.36.11-2'
'python3-websockify' changed from 'absent' to '0.8.0+dfsg1-9'
'libxi6' changed from 'absent' to '2:1.7.9-1'
'libcairo2' changed from 'absent' to '1.15.10-2ubuntu0.1'
'x11-common' changed from 'absent' to '1:7.7+19ubuntu7.1'
'libbrlapi0.6' changed from 'absent' to '5.5-4ubuntu2.0.1'
'python3-os-resource-classes' changed from 'absent' to '0.3.0-0ubuntu1~cloud0'
'libspeex1' changed from 'absent' to '1.2~rc1.2-1ubuntu2'
'gsettings-backend' changed from 'absent' to '1'
'libv4lconvert0' changed from 'absent' to '1.14.2-1'
'dconf-service' changed from 'absent' to '0.26.0-2ubuntu3'
'qemu-kvm' changed from 'absent' to '1:3.1+dfsg-2ubuntu3.2~cloud0'
'libpulse0' changed from 'absent' to '1:11.1-1ubuntu7.2'
'libepoxy0' changed from 'absent' to '1.4.3-1'
'libwayland-cursor0' changed from 'absent' to '1.16.0-1ubuntu1.1~18.04.1'
'libpangocairo-1.0-0' changed from 'absent' to '1.40.14-1ubuntu0.1'
'libvirt-daemon-system' changed from 'absent' to '5.0.0-1ubuntu2.3~cloud0'
'libgstreamer-plugins-good1.0-0' changed from 'absent' to '1.14.5-0ubuntu1~18.04.1'
'libraw1394-11' changed from 'absent' to '2.1.2-1'
'libvirt0' changed from 'absent' to '5.0.0-1ubuntu2.3~cloud0'
'libpango-1.0-0' changed from 'absent' to '1.40.14-1ubuntu0.1'
'gstreamer1.0-videosink' changed from 'absent' to '1'
'qemu-system-data' changed from 'absent' to '1:3.1+dfsg-2ubuntu3.2~cloud0'
'python3-future' changed from 'absent' to '0.15.2-4ubuntu2'
'python3-libvirt' changed from 'absent' to '5.0.0-1~cloud0'
'libgraphite2-3' changed from 'absent' to '1.3.11-2'
'libopus0' changed from 'absent' to '1.1.2-1ubuntu1'
'libvirt-daemon-driver-storage-rbd' changed from 'absent' to '5.0.0-1ubuntu2.3~cloud0'
'libmp3lame0' changed from 'absent' to '3.100-2'
'libcroco3' changed from 'absent' to '0.6.12-2'
'libxcb-render0' changed from 'absent' to '1.13-2~ubuntu18.04'
'libpangoft2-1.0-0' changed from 'absent' to '1.40.14-1ubuntu0.1'
'libdv4' changed from 'absent' to '1.0.0-11'
'python3-nova' changed from 'absent' to '2:19.0.1-0ubuntu2.1~cloud0'
'libgbm1' changed from 'absent' to '19.0.8-0ubuntu0~18.04.1'
'hicolor-icon-theme' changed from 'absent' to '0.17-2'
'libatk1.0-0' changed from 'absent' to '2.28.1-1'
'ipxe-qemu-256k-compat-efi-roms' changed from 'absent' to '1.0.0+git-20150424.a25a16d-0ubuntu2'
'libgtk-3-0' changed from 'absent' to '3.22.30-1ubuntu4'
'libsamplerate0' changed from 'absent' to '0.1.9-1'
'libpixman-1-0' changed from 'absent' to '0.34.0-2'
'seabios' changed from 'absent' to '1.10.2-1ubuntu1'
'libjson-glib-1.0-common' changed from 'absent' to '1.4.2-3'
'libwayland-egl1-mesa' changed from 'absent' to '1'
'python3-scrypt' changed from 'absent' to '0.8.0-0ubuntu3'
'python2.7-ldap' changed from 'absent' to '1'
'libgudev-1.0-0' changed from 'absent' to '1:232-2'
'gsettings-desktop-schemas' changed from 'absent' to '3.28.0-1ubuntu1'
'liborc-0.4-0' changed from 'absent' to '1:0.4.28-1'
'libthai0' changed from 'absent' to '0.1.27-2'
'python3-itsdangerous' changed from 'absent' to '0.24+dfsg1-2'
'python3-flask' changed from 'absent' to '1.0.2-3~cloud0'
'libvisual-0.4-0' changed from 'absent' to '0.4.0-11'
'libgstreamer1.0-0' changed from 'absent' to '1.14.5-0ubuntu1~18.04.1'
'libgtk-3-bin' changed from 'absent' to '3.22.30-1ubuntu4'
'dconf-gsettings-backend' changed from 'absent' to '0.26.0-2ubuntu3'
'nova-compute-hypervisor' changed from 'absent' to '1'
'python3-cinderclient' changed from 'absent' to '1:4.1.0-0ubuntu1~cloud0'
'ubuntu-mono' changed from 'absent' to '16.10+18.04.20181005-0ubuntu1'
'gtk3-binver-3.0.0' changed from 'absent' to '1'
'libtheora0' changed from 'absent' to '1.1.1+dfsg.1-14'
'libxkbcommon0' changed from 'absent' to '0.8.0-1ubuntu0.1'
'libgstreamer-plugins-base1.0-0' changed from 'absent' to '1.14.5-0ubuntu1~18.04.1'
'libwayland-client0' changed from 'absent' to '1.16.0-1ubuntu1.1~18.04.1'
'libasound2' changed from 'absent' to '1.1.3-5ubuntu0.2'
'libogg0' changed from 'absent' to '1.3.2-1'
'python3-zvmcloudconnector' changed from 'absent' to '1.4.1-0ubuntu1~cloud0'
'libasound2-data' changed from 'absent' to '1.1.3-5ubuntu0.2'
'libjack-0.116' changed from 'absent' to '1'
'gstreamer1.0-x' changed from 'absent' to '1.14.5-0ubuntu1~18.04.1'
'adwaita-icon-theme' changed from 'absent' to '3.28.0-1ubuntu1'
'python3-bcrypt' changed from 'absent' to '3.1.4-2'
'websockify-common' changed from 'absent' to '0.8.0+dfsg1-9'
'libvte-2.91-0' changed from 'absent' to '0.52.2-1ubuntu1~18.04.2'
'libavahi-common-data' changed from 'absent' to '0.7-3.1ubuntu1.2'
'libwayland-egl1' changed from 'absent' to '1.16.0-1ubuntu1.1~18.04.1'
'librsvg2-2' changed from 'absent' to '2.40.20-2'
'qemu-system-gui' changed from 'absent' to '1:3.1+dfsg-2ubuntu3.2~cloud0'
'libpcsclite1' changed from 'absent' to '1.8.23-1'
'nova-compute' changed from 'absent' to '2:19.0.1-0ubuntu2.1~cloud0'
'librest-0.7-0' changed from 'absent' to '0.8.0-2'
'libvirglrenderer0' changed from 'absent' to '0.6.0-2'
'python3-ldap' changed from 'absent' to '3.0.0-1'
'libatk-bridge2.0-0' changed from 'absent' to '2.26.2-1'
'libcairo-gobject2' changed from 'absent' to '1.15.10-2ubuntu0.1'
'libsoup2.4-1' changed from 'absent' to '2.62.1-1ubuntu0.1'
'libjson-glib-1.0-0' changed from 'absent' to '1.4.2-3'
'cpu-checker' changed from 'absent' to '0.7-0ubuntu7'

2019-08-27 23:32:49,817 [salt.state       :915 ][INFO    ][15107] Loading fresh modules for state activity
2019-08-27 23:32:49,866 [salt.state       :1951][INFO    ][15107] Completed state [nova-compute] at time 23:32:49.866385 duration_in_ms=69205.082
2019-08-27 23:32:49,872 [salt.state       :1780][INFO    ][15107] Running state [python3-novaclient] at time 23:32:49.872770
2019-08-27 23:32:49,873 [salt.state       :1813][INFO    ][15107] Executing state pkg.installed for [python3-novaclient]
2019-08-27 23:32:50,789 [salt.state       :300 ][INFO    ][15107] All specified packages are already installed
2019-08-27 23:32:50,789 [salt.state       :1951][INFO    ][15107] Completed state [python3-novaclient] at time 23:32:50.789910 duration_in_ms=917.139
2019-08-27 23:32:50,790 [salt.state       :1780][INFO    ][15107] Running state [pm-utils] at time 23:32:50.790404
2019-08-27 23:32:50,790 [salt.state       :1813][INFO    ][15107] Executing state pkg.installed for [pm-utils]
2019-08-27 23:32:50,817 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2019-08-27 23:32:50,854 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'pm-utils'] in directory '/root'
2019-08-27 23:32:55,426 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2019-08-27 23:32:55,479 [salt.state       :300 ][INFO    ][15107] Made the following changes:
'pm-utils' changed from 'absent' to '1.4.1-17'
'libx86-1' changed from 'absent' to '1.1+ds1-10.2'
'vbetool' changed from 'absent' to '1.1-4'

2019-08-27 23:32:55,496 [salt.state       :915 ][INFO    ][15107] Loading fresh modules for state activity
2019-08-27 23:32:55,540 [salt.state       :1951][INFO    ][15107] Completed state [pm-utils] at time 23:32:55.540815 duration_in_ms=4750.41
2019-08-27 23:32:55,547 [salt.state       :1780][INFO    ][15107] Running state [sysfsutils] at time 23:32:55.547053
2019-08-27 23:32:55,547 [salt.state       :1813][INFO    ][15107] Executing state pkg.installed for [sysfsutils]
2019-08-27 23:32:56,268 [salt.state       :300 ][INFO    ][15107] All specified packages are already installed
2019-08-27 23:32:56,269 [salt.state       :1951][INFO    ][15107] Completed state [sysfsutils] at time 23:32:56.269313 duration_in_ms=722.259
2019-08-27 23:32:56,272 [salt.state       :1780][INFO    ][15107] Running state [/var/log/nova] at time 23:32:56.272421
2019-08-27 23:32:56,272 [salt.state       :1813][INFO    ][15107] Executing state file.directory for [/var/log/nova]
2019-08-27 23:32:56,274 [salt.state       :300 ][INFO    ][15107] {'group': 'nova'}
2019-08-27 23:32:56,274 [salt.state       :1951][INFO    ][15107] Completed state [/var/log/nova] at time 23:32:56.274308 duration_in_ms=1.891
2019-08-27 23:32:56,275 [salt.state       :1780][INFO    ][15107] Running state [ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCltIn93BcTMzNK/n2eBze6PyTkmIgdDkeXNR9X4DqE48Va80ojv2pq8xuaBxiNITJzyl+4p4UvTTXo+HmuX8qbHvqgMGXvuPUCpndEfb2r67f6vpMqPwMgBrUg2ZKgN4OsSDHU+H0dia0cEaTjz5pvbUy9lIsSyhrqOUVF9reJq+boAvVEedm8fUqiZuiejAw2D27+rRtdEPgsKMnh3626YEsr963q4rjU/JssV/iKMNu7mk2a+koOrJ+aHvcVU8zJjfA0YghoeVT/I3GLU/MB/4tD/RyR8GM+UYbI4sgAC7ZOCdQyHdJgnEzx3SJIwcS65U0T2XYvn2qXHXqJ9iGZ root@mirantis.com] at time 23:32:56.275542
2019-08-27 23:32:56,275 [salt.state       :1813][INFO    ][15107] Executing state ssh_auth.present for [ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCltIn93BcTMzNK/n2eBze6PyTkmIgdDkeXNR9X4DqE48Va80ojv2pq8xuaBxiNITJzyl+4p4UvTTXo+HmuX8qbHvqgMGXvuPUCpndEfb2r67f6vpMqPwMgBrUg2ZKgN4OsSDHU+H0dia0cEaTjz5pvbUy9lIsSyhrqOUVF9reJq+boAvVEedm8fUqiZuiejAw2D27+rRtdEPgsKMnh3626YEsr963q4rjU/JssV/iKMNu7mk2a+koOrJ+aHvcVU8zJjfA0YghoeVT/I3GLU/MB/4tD/RyR8GM+UYbI4sgAC7ZOCdQyHdJgnEzx3SJIwcS65U0T2XYvn2qXHXqJ9iGZ root@mirantis.com]
2019-08-27 23:32:56,278 [salt.state       :300 ][INFO    ][15107] {'AAAAB3NzaC1yc2EAAAADAQABAAABAQCltIn93BcTMzNK/n2eBze6PyTkmIgdDkeXNR9X4DqE48Va80ojv2pq8xuaBxiNITJzyl+4p4UvTTXo+HmuX8qbHvqgMGXvuPUCpndEfb2r67f6vpMqPwMgBrUg2ZKgN4OsSDHU+H0dia0cEaTjz5pvbUy9lIsSyhrqOUVF9reJq+boAvVEedm8fUqiZuiejAw2D27+rRtdEPgsKMnh3626YEsr963q4rjU/JssV/iKMNu7mk2a+koOrJ+aHvcVU8zJjfA0YghoeVT/I3GLU/MB/4tD/RyR8GM+UYbI4sgAC7ZOCdQyHdJgnEzx3SJIwcS65U0T2XYvn2qXHXqJ9iGZ': 'New'}
2019-08-27 23:32:56,279 [salt.state       :1951][INFO    ][15107] Completed state [ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCltIn93BcTMzNK/n2eBze6PyTkmIgdDkeXNR9X4DqE48Va80ojv2pq8xuaBxiNITJzyl+4p4UvTTXo+HmuX8qbHvqgMGXvuPUCpndEfb2r67f6vpMqPwMgBrUg2ZKgN4OsSDHU+H0dia0cEaTjz5pvbUy9lIsSyhrqOUVF9reJq+boAvVEedm8fUqiZuiejAw2D27+rRtdEPgsKMnh3626YEsr963q4rjU/JssV/iKMNu7mk2a+koOrJ+aHvcVU8zJjfA0YghoeVT/I3GLU/MB/4tD/RyR8GM+UYbI4sgAC7ZOCdQyHdJgnEzx3SJIwcS65U0T2XYvn2qXHXqJ9iGZ root@mirantis.com] at time 23:32:56.279007 duration_in_ms=3.465
2019-08-27 23:32:56,279 [salt.state       :1780][INFO    ][15107] Running state [nova] at time 23:32:56.279742
2019-08-27 23:32:56,280 [salt.state       :1813][INFO    ][15107] Executing state user.present for [nova]
2019-08-27 23:32:56,282 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command ['usermod', '-G', 'libvirtd', 'nova'] in directory '/root'
2019-08-27 23:32:56,324 [salt.state       :300 ][INFO    ][15107] {'groups': ['libvirtd', 'nova']}
2019-08-27 23:32:56,324 [salt.state       :1951][INFO    ][15107] Completed state [nova] at time 23:32:56.324723 duration_in_ms=44.98
2019-08-27 23:32:56,325 [salt.state       :1780][INFO    ][15107] Running state [libvirt-qemu] at time 23:32:56.325223
2019-08-27 23:32:56,325 [salt.state       :1813][INFO    ][15107] Executing state user.present for [libvirt-qemu]
2019-08-27 23:32:56,329 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command ['usermod', '-G', 'nova', 'libvirt-qemu'] in directory '/root'
2019-08-27 23:32:56,387 [salt.state       :300 ][INFO    ][15107] {'groups': ['kvm', 'nova']}
2019-08-27 23:32:56,387 [salt.state       :1951][INFO    ][15107] Completed state [libvirt-qemu] at time 23:32:56.387882 duration_in_ms=62.658
2019-08-27 23:32:56,388 [salt.state       :1780][INFO    ][15107] Running state [/var/lib/nova] at time 23:32:56.388382
2019-08-27 23:32:56,388 [salt.state       :1813][INFO    ][15107] Executing state file.directory for [/var/lib/nova]
2019-08-27 23:32:56,391 [salt.state       :300 ][INFO    ][15107] {'mode': '0750'}
2019-08-27 23:32:56,391 [salt.state       :1951][INFO    ][15107] Completed state [/var/lib/nova] at time 23:32:56.391283 duration_in_ms=2.9
2019-08-27 23:32:56,392 [salt.state       :1780][INFO    ][15107] Running state [/var/lib/nova/.ssh/id_rsa] at time 23:32:56.392337
2019-08-27 23:32:56,392 [salt.state       :1813][INFO    ][15107] Executing state file.managed for [/var/lib/nova/.ssh/id_rsa]
2019-08-27 23:32:56,405 [salt.state       :300 ][INFO    ][15107] File changed:
New file
2019-08-27 23:32:56,406 [salt.state       :1951][INFO    ][15107] Completed state [/var/lib/nova/.ssh/id_rsa] at time 23:32:56.406055 duration_in_ms=13.718
2019-08-27 23:32:56,406 [salt.state       :1780][INFO    ][15107] Running state [/var/lib/nova/.ssh/config] at time 23:32:56.406533
2019-08-27 23:32:56,406 [salt.state       :1813][INFO    ][15107] Executing state file.managed for [/var/lib/nova/.ssh/config]
2019-08-27 23:32:56,409 [salt.state       :300 ][INFO    ][15107] File changed:
New file
2019-08-27 23:32:56,409 [salt.state       :1951][INFO    ][15107] Completed state [/var/lib/nova/.ssh/config] at time 23:32:56.409809 duration_in_ms=3.275
2019-08-27 23:32:56,410 [salt.state       :1780][INFO    ][15107] Running state [/etc/nova/nova.conf] at time 23:32:56.410627
2019-08-27 23:32:56,411 [salt.state       :1813][INFO    ][15107] Executing state file.managed for [/etc/nova/nova.conf]
2019-08-27 23:32:56,457 [salt.fileclient  :1219][INFO    ][15107] Fetching file from saltenv 'base', ** done ** 'nova/files/stein/nova-compute.conf.Debian'
2019-08-27 23:32:57,216 [salt.state       :300 ][INFO    ][15107] File changed:
--- 
+++ 
@@ -1,7 +1,5 @@
+
 [DEFAULT]
-log_dir = /var/log/nova
-lock_path = /var/lock/nova
-state_path = /var/lib/nova
 
 #
 # From nova.conf
@@ -63,7 +61,7 @@
 # *  period with offset, example: ``month@15`` will result in monthly audits
 #    starting on 15th day of month.
 #  (string value)
-#instance_usage_audit_period = month
+instance_usage_audit_period = hour
 
 #
 # Start and use a daemon that can run the commands that need to be run with
@@ -99,7 +97,7 @@
 # * ``powervm.PowerVMDriver``
 # * ``zvm.ZVMDriver``
 #  (string value)
-#compute_driver = <None>
+compute_driver = libvirt.LibvirtDriver
 
 #
 # Allow destination machine to match source for resize. Useful when
@@ -108,7 +106,7 @@
 # the same host to the destination options. Also set to true
 # if you allow the ServerGroupAffinityFilter and need to resize.
 #  (boolean value)
-#allow_resize_to_same_host = false
+allow_resize_to_same_host = true
 
 #
 # Image properties that should not be inherited from the instance
@@ -165,10 +163,10 @@
 # Possible values:
 #
 # * An empty list will disable the feature (Default).
-# * An example value that would enable the CPU
-#   bandwidth monitor that uses the virt driver variant::
-#
-#     compute_monitors = cpu.virt_driver
+# * An example value that would enable both the CPU and NUMA memory
+#   bandwidth monitors that use the virt driver variant:
+#
+#     compute_monitors = cpu.virt_driver, numa_mem_bw.virt_driver
 #  (list value)
 #compute_monitors =
 
@@ -204,7 +202,7 @@
 # * True: Instances should fail after VIF plugging timeout
 # * False: Instances should continue booting after VIF plugging timeout
 #  (boolean value)
-#vif_plugging_is_fatal = true
+vif_plugging_is_fatal = true
 
 #
 # Timeout for Neutron VIF plugging event message arrival.
@@ -223,7 +221,7 @@
 #   arrive at all.
 #  (integer value)
 # Minimum value: 0
-#vif_plugging_timeout = 300
+vif_plugging_timeout = 300
 
 # Path to '/etc/network/interfaces' template.
 #
@@ -262,10 +260,15 @@
 # given if enough space isn't available. In addition, it should significantly
 # improve performance on writes to new blocks and may even improve I/O
 # performance to prewritten blocks due to reduced fragmentation.
-#  (string value)
-# Possible values:
-# none - No storage provisioning is done up front
-# space - Storage is fully allocated at instance start
+#
+# Possible values:
+#
+# * "none"  => no storage provisioning is done up front
+# * "space" => storage is fully allocated at instance start
+#  (string value)
+# Possible values:
+# none - <No description provided>
+# space - <No description provided>
 #preallocate_images = none
 
 #
@@ -288,7 +291,7 @@
 #
 # * ``compute_driver``: Only the libvirt driver uses this option.
 #  (boolean value)
-#force_raw_images = true
+force_raw_images = true
 
 #
 # Name of the mkfs commands for ephemeral device.
@@ -336,6 +339,13 @@
 # If set, the 'hw_pointer_model' image property takes precedence over
 # this configuration option.
 #
+# Possible values:
+#
+# * None: Uses default behavior provided by drivers (mouse on PS2 for
+#         libvirt x86)
+# * ps2mouse: Uses relative movement. Mouse connected by PS2
+# * usbtablet: Uses absolute movement. Tablet connect by USB
+#
 # Related options:
 #
 # * usbtablet must be configured with VNC enabled or SPICE enabled and SPICE
@@ -343,10 +353,9 @@
 #   configured as HVM.
 #   (string value)
 # Possible values:
-# ps2mouse - Uses relative movement. Mouse connected by PS2
-# usbtablet - Uses absolute movement. Tablet connect by USB
-# <None> - Uses default behavior provided by drivers (mouse on PS2 for libvirt
-# x86)
+# <None> - <No description provided>
+# ps2mouse - <No description provided>
+# usbtablet - <No description provided>
 #pointer_model = usbtablet
 
 #
@@ -408,7 +417,7 @@
 #   for the host.
 #  (integer value)
 # Minimum value: 0
-#reserved_host_memory_mb = 512
+reserved_host_memory_mb = 512
 
 #
 # Number of physical CPUs to reserve for the host. The host resources usage is
@@ -436,23 +445,21 @@
 # per compute node. For AggregateCoreFilter, it will fall back to this
 # configuration value if no per-aggregate setting is found.
 #
-# NOTE: If this option is set to something *other than* ``None`` or ``0.0``, the
-# allocation ratio will be overwritten by the value of this option, otherwise,
-# the allocation ratio will not change. Once set to a non-default value, it is
-# not possible to "unset" the config to get back to the default behavior. If you
-# want to reset back to the initial value, explicitly specify it to the value of
-# ``initial_cpu_allocation_ratio``.
+# NOTE: This can be set per-compute, or if set to 0.0, the value
+# set on the scheduler node(s) or compute node(s) will be used
+# and defaulted to 16.0. Once set to a non-default value, it is not possible
+# to "unset" the config to get back to the default behavior. If you want
+# to reset back to the default, explicitly specify 16.0.
+#
+# NOTE: As of the 16.0.0 Pike release, this configuration option is ignored
+# for the ironic.IronicDriver compute driver and is hardcoded to 1.0.
 #
 # Possible values:
 #
 # * Any valid positive integer or float value
-#
-# Related options:
-#
-# * ``initial_cpu_allocation_ratio``
 #  (floating point value)
 # Minimum value: 0
-#cpu_allocation_ratio = <None>
+#cpu_allocation_ratio = 0.0
 
 #
 # This option helps you specify virtual RAM to physical RAM
@@ -467,23 +474,21 @@
 # per compute node. For AggregateRamFilter, it will fall back to this
 # configuration value if no per-aggregate setting found.
 #
-# NOTE: If this option is set to something *other than* ``None`` or ``0.0``, the
-# allocation ratio will be overwritten by the value of this option, otherwise,
-# the allocation ratio will not change. Once set to a non-default value, it is
-# not possible to "unset" the config to get back to the default behavior. If you
-# want to reset back to the initial value, explicitly specify it to the value of
-# ``initial_ram_allocation_ratio``.
+# NOTE: This can be set per-compute, or if set to 0.0, the value
+# set on the scheduler node(s) or compute node(s) will be used and
+# defaulted to 1.5. Once set to a non-default value, it is not possible
+# to "unset" the config to get back to the default behavior. If you want
+# to reset back to the default, explicitly specify 1.5.
+#
+# NOTE: As of the 16.0.0 Pike release, this configuration option is ignored
+# for the ironic.IronicDriver compute driver and is hardcoded to 1.0.
 #
 # Possible values:
 #
 # * Any valid positive integer or float value
-#
-# Related options:
-#
-# * ``initial_ram_allocation_ratio``
 #  (floating point value)
 # Minimum value: 0
-#ram_allocation_ratio = <None>
+#ram_allocation_ratio = 0.0
 
 #
 # This option helps you specify virtual disk to physical disk
@@ -502,74 +507,21 @@
 # to preserve a percentage of the disk for uses other than
 # instances.
 #
-# NOTE: If this option is set to something *other than* ``None`` or ``0.0``, the
-# allocation ratio will be overwritten by the value of this option, otherwise,
-# the allocation ratio will not change. Once set to a non-default value, it is
-# not possible to "unset" the config to get back to the default behavior. If you
-# want to reset back to the initial value, explicitly specify it to the value of
-# ``initial_disk_allocation_ratio``.
+# NOTE: This can be set per-compute, or if set to 0.0, the value
+# set on the scheduler node(s) or compute node(s) will be used and
+# defaulted to 1.0. Once set to a non-default value, it is not possible
+# to "unset" the config to get back to the default behavior. If you want
+# to reset back to the default, explicitly specify 1.0.
+#
+# NOTE: As of the 16.0.0 Pike release, this configuration option is ignored
+# for the ironic.IronicDriver compute driver and is hardcoded to 1.0.
 #
 # Possible values:
 #
 # * Any valid positive integer or float value
-#
-# Related options:
-#
-# * ``initial_disk_allocation_ratio``
 #  (floating point value)
 # Minimum value: 0
-#disk_allocation_ratio = <None>
-
-#
-# This option helps you specify initial virtual CPU to physical CPU allocation
-# ratio.
-#
-# This is only used when initially creating the ``computes_nodes`` table record
-# for a given nova-compute service.
-#
-# See https://docs.openstack.org/nova/latest/admin/configuration/schedulers.html
-# for more details and usage scenarios.
-#
-# Related options:
-#
-# * ``cpu_allocation_ratio``
-#  (floating point value)
-# Minimum value: 0
-#initial_cpu_allocation_ratio = 16.0
-
-#
-# This option helps you specify initial virtual RAM to physical RAM allocation
-# ratio.
-#
-# This is only used when initially creating the ``computes_nodes`` table record
-# for a given nova-compute service.
-#
-# See https://docs.openstack.org/nova/latest/admin/configuration/schedulers.html
-# for more details and usage scenarios.
-#
-# Related options:
-#
-# * ``ram_allocation_ratio``
-#  (floating point value)
-# Minimum value: 0
-#initial_ram_allocation_ratio = 1.5
-
-#
-# This option helps you specify initial virtual disk to physical disk allocation
-# ratio.
-#
-# This is only used when initially creating the ``computes_nodes`` table record
-# for a given nova-compute service.
-#
-# See https://docs.openstack.org/nova/latest/admin/configuration/schedulers.html
-# for more details and usage scenarios.
-#
-# Related options:
-#
-# * ``disk_allocation_ratio``
-#  (floating point value)
-# Minimum value: 0
-#initial_disk_allocation_ratio = 1.0
+#disk_allocation_ratio = 0.0
 
 #
 # Console proxy host to be used to connect to instances on this host. It is the
@@ -579,10 +531,6 @@
 #
 # * Current hostname (default) or any string representing hostname.
 #  (string value)
-#
-# This option has a sample default set, which means that
-# its actual default value may vary from the one documented
-# below.
 #console_host = <current_hostname>
 
 #
@@ -595,6 +543,12 @@
 # * Any string representing network name.
 #  (string value)
 #default_access_ip_network_name = <None>
+
+#
+# Whether to batch up the application of IPTables rules during a host restart
+# and apply all at the end of the init phase.
+#  (boolean value)
+#defer_iptables_apply = false
 
 #
 # Specifies where instances are stored on the hypervisor's disk.
@@ -605,16 +559,8 @@
 # * $state_path/instances where state_path is a config option that specifies
 #   the top-level directory for maintaining nova's state. (default) or
 #   Any string representing directory path.
-#
-# Related options:
-#
-# * ``[workarounds]/ensure_libvirt_rbd_instance_dir_cleanup``
-#  (string value)
-#
-# This option has a sample default set, which means that
-# its actual default value may vary from the one documented
-# below.
-#instances_path = $state_path/instances
+#  (string value)
+instances_path = $state_path/instances
 
 #
 # This option enables periodic compute.instance.exists notifications. Each
@@ -623,6 +569,7 @@
 #  (boolean value)
 #instance_usage_audit = false
 
+
 #
 # Maximum number of 1 second retries in live_migration. It specifies number
 # of retries to iptables when it complains. It happens when an user continuously
@@ -641,7 +588,7 @@
 # host rebooted. It ensures that all of the instances on a Nova compute node
 # resume their state each time the compute node boots or restarts.
 #  (boolean value)
-#resume_guests_state_on_host_boot = false
+resume_guests_state_on_host_boot = True
 
 #
 # Number of times to retry network allocation. It is required to attempt network
@@ -697,7 +644,7 @@
 # * Any negative value is treated as 0.
 # * For any value > 0, total attempts are (value + 1)
 #  (integer value)
-#block_device_allocate_retries = 60
+block_device_allocate_retries = 600
 
 #
 # Number of greenthreads available for use to sync power states.
@@ -755,7 +702,7 @@
 #
 # Related options:
 #
-# * If ``handle_virt_lifecycle_events`` in the ``workarounds`` group is
+# * If ``handle_virt_lifecycle_events`` in workarounds_group is
 #   false and this option is negative, then instances that get out
 #   of sync between the hypervisor and the Nova database will have
 #   to be synchronized manually.
@@ -778,7 +725,7 @@
 # * Any positive integer in seconds.
 # * Any value <=0 will disable the sync. This is not recommended.
 #  (integer value)
-#heal_instance_info_cache_interval = 60
+heal_instance_info_cache_interval = 300
 
 #
 # Interval for reclaiming deleted instances.
@@ -898,7 +845,7 @@
 # * ``block_device_allocate_retries`` in compute_manager_opts group.
 #  (integer value)
 # Minimum value: 0
-#block_device_allocate_retries_interval = 3
+block_device_allocate_retries_interval = 10
 
 #
 # Interval between sending the scheduler a list of current instance UUIDs to
@@ -1013,8 +960,7 @@
 # perform a clean shutdown. While performing stop, rescue and shelve,
 # rebuild operations, configuring this option gives the VM a chance
 # to perform a controlled shutdown before the instance is powered off.
-# The default timeout is 60 seconds. A value of 0 (zero) means the guest
-# will be powered off immediately with no opportunity for guest OS clean-up.
+# The default timeout is 60 seconds.
 #
 # The timeout value can be overridden on a per image basis by means
 # of os_shutdown_timeout that is an image metadata setting allowing
@@ -1023,9 +969,9 @@
 #
 # Possible values:
 #
-# * A positive integer or 0 (default value is 60).
-#  (integer value)
-# Minimum value: 0
+# * Any positive integer in seconds (default value is 60).
+#  (integer value)
+# Minimum value: 1
 #shutdown_timeout = 60
 
 #
@@ -1034,17 +980,24 @@
 # above option enables action to be taken when such instances are
 # identified.
 #
-# Related options:
-#
-# * ``running_deleted_instance_poll_interval``
-# * ``running_deleted_instance_timeout``
-#  (string value)
-# Possible values:
-# reap - Powers down the instances and deletes them
-# log - Logs warning message about deletion of the resource
-# shutdown - Powers down instances and marks them as non-bootable which can be
-# later used for debugging/analysis
-# noop - Takes no action
+# Possible values:
+#
+# * reap: Powers down the instances and deletes them(default)
+# * log: Logs warning message about deletion of the resource
+# * shutdown: Powers down instances and marks them as non-
+#   bootable which can be later used for debugging/analysis
+# * noop: Takes no action
+#
+# Related options:
+#
+# * running_deleted_instance_poll_interval
+# * running_deleted_instance_timeout
+#  (string value)
+# Possible values:
+# noop - <No description provided>
+# log - <No description provided>
+# shutdown - <No description provided>
+# reap - <No description provided>
 #running_deleted_instance_action = reap
 
 #
@@ -1087,12 +1040,13 @@
 # Possible values:
 #
 # * Any positive integer defines how many attempts are made.
+# * Any value <=0 means no delete attempts occur, but you should use
+#   ``instance_delete_interval`` to disable the delete attempts.
 #
 # Related options:
 #
 # * ``[DEFAULT] instance_delete_interval`` can be used to disable this option.
 #  (integer value)
-# Minimum value: 1
 #maximum_instance_delete_attempts = 5
 
 #
@@ -1104,14 +1058,20 @@
 # case-insensitive. Setting this option can increase the usability for end
 # users as they don't have to distinguish among instances with the same name
 # by their IDs.
-#  (string value)
-# Possible values:
-# '' - An empty value means that no uniqueness check is done and duplicate names
-# are possible
-# project - The instance name check is done only for instances within the same
-# project
-# global - The instance name check is done for all instances regardless of the
-# project
+#
+# Possible values:
+#
+# * '': An empty value means that no uniqueness check is done and duplicate
+#   names are possible.
+# * "project": The instance name check is done only for instances within the
+#   same project.
+# * "global": The instance name check is done for all instances regardless of
+#   the project.
+#  (string value)
+# Possible values:
+# '' - <No description provided>
+# project - <No description provided>
+# global - <No description provided>
 #osapi_compute_unique_server_name_scope =
 
 #
@@ -1166,11 +1126,21 @@
 # Minimum value: -1
 #migrate_max_retries = -1
 
-# DEPRECATED:
+#
 # Configuration drive format
 #
 # Configuration drive format that will contain metadata attached to the
 # instance when it boots.
+#
+# Possible values:
+#
+# * iso9660: A file system image standard that is widely supported across
+#   operating systems. NOTE: Mind the libvirt bug
+#   (https://bugs.launchpad.net/nova/+bug/1246201) - If your hypervisor
+#   driver is libvirt, and you want live migrate to work without shared storage,
+#   then use VFAT.
+# * vfat: For legacy reasons, you can configure the configuration drive to
+#   use VFAT format instead of ISO 9660.
 #
 # Related options:
 #
@@ -1187,17 +1157,9 @@
 #   drive, set the ``[hyperv] config_drive_cdrom`` option to true.
 #  (string value)
 # Possible values:
-# iso9660 - A file system image standard that is widely supported across
-# operating systems.
-# vfat - Provided for legacy reasons and to enable live migration with the
-# libvirt driver and non-shared storage
-# This option is deprecated for removal since 19.0.0.
-# Its value may be silently ignored in the future.
-# Reason:
-# This option was originally added as a workaround for bug in libvirt, #1246201,
-# that was resolved in libvirt v1.2.17. As a result, this option is no longer
-# necessary or useful.
-#config_drive_format = iso9660
+# iso9660 - <No description provided>
+# vfat - <No description provided>
+config_drive_format = vfat
 
 #
 # Force injection to take place on a config drive
@@ -1224,7 +1186,7 @@
 #   configuration section to the full path to an qemu-img command
 #   installation.
 #  (boolean value)
-#force_config_drive = false
+force_config_drive = true
 
 #
 # Name or path of the tool used for ISO image creation
@@ -1276,11 +1238,8 @@
 # * routing_source_ip
 # * vpn_ip
 #  (string value)
-#
-# This option has a sample default set, which means that
-# its actual default value may vary from the one documented
-# below.
 #my_ip = <host_ipv4>
+my_ip = 172.16.10.55
 
 #
 # The IP address which is used to connect to the block storage network.
@@ -1312,10 +1271,6 @@
 #
 # * String with hostname, FQDN or IP address. Default is hostname of this host.
 #  (string value)
-#
-# This option has a sample default set, which means that
-# its actual default value may vary from the one documented
-# below.
 #host = <current_hostname>
 
 # DEPRECATED:
@@ -1666,28 +1621,6 @@
 # Reason:
 # nova-network is deprecated, as are any related configuration options.
 #iptables_drop_action = DROP
-
-# DEPRECATED:
-# Defer application of IPTables rules until after init phase.
-#
-# When a compute service is restarted each instance running on the host has its
-# iptables rules built and applied sequentially during the host init stage. The
-# impact of this, especially on a host running many instances, can be observed
-# as
-# a period where some instances are not accessible as the existing iptables
-# rules
-# have been torn down and not yet re-applied.
-#
-# This is a workaround that prevents the application of the iptables rules until
-# all instances on the host had been initialised then the rules for all
-# instances
-# are applied all at once preventing a 'blackout' period.
-#  (boolean value)
-# This option is deprecated for removal since 19.0.0.
-# Its value may be silently ignored in the future.
-# Reason:
-# nova-network is deprecated, as are any related configuration options.
-#defer_iptables_apply = false
 
 # DEPRECATED:
 # This option represents the period of time, in seconds, that the ovs_vsctl
@@ -2153,7 +2086,7 @@
 # Its value may be silently ignored in the future.
 # Reason:
 # nova-network is deprecated, as are any related configuration options.
-#force_dhcp_release = true
+force_dhcp_release = true
 
 # DEPRECATED:
 # When this option is True, whenever a DNS entry must be updated, a fanout cast
@@ -2205,7 +2138,7 @@
 # Its value may be silently ignored in the future.
 # Reason:
 # nova-network is deprecated, as are any related configuration options.
-#dhcp_domain = novalocal
+dhcp_domain = novalocal
 
 # DEPRECATED:
 # This option allows you to specify the L3 management library to be used.
@@ -2692,10 +2625,6 @@
 #
 # * ``state_path``
 #  (string value)
-#
-# This option has a sample default set, which means that
-# its actual default value may vary from the one documented
-# below.
 #pybasedir = <Path>
 
 #
@@ -2710,7 +2639,7 @@
 #
 # * The full path to a directory.
 #  (string value)
-#bindir = /usr/local/bin
+#bindir = /tmp/nova/.tox/shared/local/bin
 
 #
 # The top-level directory for maintaining Nova's state.
@@ -2726,7 +2655,7 @@
 #
 # * The full path to a directory. Defaults to value provided in ``pybasedir``.
 #  (string value)
-#state_path = $pybasedir
+state_path = /var/lib/nova
 
 #
 # This option allows setting an alternate timeout value for RPC calls
@@ -2737,7 +2666,6 @@
 # Operations with RPC calls that utilize this value:
 #
 # * live migration
-# * scheduling
 #
 # Related options:
 #
@@ -2757,7 +2685,7 @@
 #   is less than report_interval, services will routinely be considered down,
 #   because they report in too rarely.
 #  (integer value)
-#report_interval = 10
+report_interval = 60
 
 #
 # Maximum time in seconds since last check-in for up service
@@ -2771,7 +2699,7 @@
 # * report_interval (service_down_time should not be less than report_interval)
 # * scheduler.periodic_task_interval
 #  (integer value)
-#service_down_time = 60
+service_down_time = 90
 
 #
 # Enable periodic tasks.
@@ -2896,15 +2824,19 @@
 # driver
 # and Memcache ServiceGroup driver.
 #
+# Possible Values:
+#
+#     * db : Database ServiceGroup driver
+#     * mc : Memcache ServiceGroup driver
+#
 # Related Options:
 #
-# * ``service_down_time`` (maximum time since last check-in for up service)
-#  (string value)
-# Possible values:
-# db - Database ServiceGroup driver
-# mc - Memcache ServiceGroup driver
+#     * service_down_time (maximum time since last check-in for up service)
+#  (string value)
+# Possible values:
+# db - <No description provided>
+# mc - <No description provided>
 #servicegroup_driver = db
-
 #
 # From oslo.log
 #
@@ -2919,7 +2851,7 @@
 # files, see the Python logging module documentation. Note that when logging
 # configuration files are used then all logging configuration is set in the
 # configuration file and other logging configuration options are ignored (for
-# example, log-date-format). (string value)
+# example, logging_context_format_string). (string value)
 # Note: This option can be changed without restarting.
 # Deprecated group/name - [DEFAULT]/log_config
 #log_config_append = <None>
@@ -2942,19 +2874,19 @@
 
 # Uses logging handler designed to watch file system. When log file is moved or
 # removed this handler will open a new log file with specified path
-# instantaneously. It makes sense only if log_file option is specified and Linux
-# platform is used. This option is ignored if log_config_append is set. (boolean
-# value)
+# instantaneously. It makes sense only if log_file option is specified and
+# Linux platform is used. This option is ignored if log_config_append is set.
+# (boolean value)
 #watch_log_file = false
 
 # Use syslog for logging. Existing syslog format is DEPRECATED and will be
-# changed later to honor RFC5424. This option is ignored if log_config_append is
-# set. (boolean value)
+# changed later to honor RFC5424. This option is ignored if log_config_append
+# is set. (boolean value)
 #use_syslog = false
 
 # Enable journald for logging. If running in a systemd environment you may wish
-# to enable journal support. Doing so will use the journal native protocol which
-# includes structured metadata in addition to log messages.This option is
+# to enable journal support. Doing so will use the journal native protocol
+# which includes structured metadata in addition to log messages.This option is
 # ignored if log_config_append is set. (boolean value)
 #use_journal = false
 
@@ -2970,67 +2902,33 @@
 # set. (boolean value)
 #use_stderr = false
 
-# Log output to Windows Event Log. (boolean value)
-#use_eventlog = false
-
-# The amount of time before the log files are rotated. This option is ignored
-# unless log_rotation_type is setto "interval". (integer value)
-#log_rotate_interval = 1
-
-# Rotation interval type. The time of the last file change (or the time when the
-# service was started) is used when scheduling the next rotation. (string value)
-# Possible values:
-# Seconds - <No description provided>
-# Minutes - <No description provided>
-# Hours - <No description provided>
-# Days - <No description provided>
-# Weekday - <No description provided>
-# Midnight - <No description provided>
-#log_rotate_interval_type = days
-
-# Maximum number of rotated log files. (integer value)
-#max_logfile_count = 30
-
-# Log file maximum size in MB. This option is ignored if "log_rotation_type" is
-# not set to "size". (integer value)
-#max_logfile_size_mb = 200
-
-# Log rotation type. (string value)
-# Possible values:
-# interval - Rotate logs at predefined time intervals.
-# size - Rotate logs once they reach a predefined size.
-# none - Do not rotate log files.
-#log_rotation_type = none
-
-# Format string to use for log messages with context. Used by
-# oslo_log.formatters.ContextFormatter (string value)
+# Format string to use for log messages with context. (string value)
 #logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
 
-# Format string to use for log messages when context is undefined. Used by
-# oslo_log.formatters.ContextFormatter (string value)
+# Format string to use for log messages when context is undefined. (string
+# value)
 #logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
 
-# Additional data to append to log message when logging level for the message is
-# DEBUG. Used by oslo_log.formatters.ContextFormatter (string value)
+# Additional data to append to log message when logging level for the message
+# is DEBUG. (string value)
 #logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
 
-# Prefix each line of exception output with this format. Used by
-# oslo_log.formatters.ContextFormatter (string value)
+# Prefix each line of exception output with this format. (string value)
 #logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
 
 # Defines the format string for %(user_identity)s that is used in
-# logging_context_format_string. Used by oslo_log.formatters.ContextFormatter
-# (string value)
+# logging_context_format_string. (string value)
 #logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
 
 # List of package logging levels in logger=LEVEL pairs. This option is ignored
 # if log_config_append is set. (list value)
-#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,oslo_policy=INFO,dogpile.core.dogpile=INFO
+#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
 
 # Enables or disables publication of error events. (boolean value)
 #publish_errors = false
 
-# The format for an instance that is passed with the log message. (string value)
+# The format for an instance that is passed with the log message. (string
+# value)
 #instance_format = "[instance: %(uuid)s] "
 
 # The format for an instance UUID that is passed with the log message. (string
@@ -3043,9 +2941,9 @@
 # Maximum number of logged messages per rate_limit_interval. (integer value)
 #rate_limit_burst = 0
 
-# Log level name used by rate limiting: CRITICAL, ERROR, INFO, WARNING, DEBUG or
-# empty string. Logs with level greater or equal to rate_limit_except_level are
-# not filtered. An empty string means that all levels are filtered. (string
+# Log level name used by rate limiting: CRITICAL, ERROR, INFO, WARNING, DEBUG
+# or empty string. Logs with level greater or equal to rate_limit_except_level
+# are not filtered. An empty string means that all levels are filtered. (string
 # value)
 #rate_limit_except_level = CRITICAL
 
@@ -3064,6 +2962,151 @@
 
 # The time-to-live in sec of idle connections in the pool (integer value)
 #conn_pool_ttl = 1200
+
+# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
+# The "host" option should point or resolve to this address. (string value)
+#rpc_zmq_bind_address = *
+
+# MatchMaker driver. (string value)
+# Possible values:
+# redis - <No description provided>
+# sentinel - <No description provided>
+# dummy - <No description provided>
+#rpc_zmq_matchmaker = redis
+
+# Number of ZeroMQ contexts, defaults to 1. (integer value)
+#rpc_zmq_contexts = 1
+
+# Maximum number of ingress messages to locally buffer per topic. Default is
+# unlimited. (integer value)
+#rpc_zmq_topic_backlog = <None>
+
+# Directory for holding IPC sockets. (string value)
+#rpc_zmq_ipc_dir = /var/run/openstack
+
+# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
+# "host" option, if running Nova. (string value)
+#rpc_zmq_host = localhost
+
+# Number of seconds to wait before all pending messages will be sent after
+# closing a socket. The default value of -1 specifies an infinite linger
+# period. The value of 0 specifies no linger period. Pending messages shall be
+# discarded immediately when the socket is closed. Positive values specify an
+# upper bound for the linger period. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_cast_timeout
+#zmq_linger = -1
+
+# The default number of seconds that poll should wait. Poll raises timeout
+# exception when timeout expired. (integer value)
+#rpc_poll_timeout = 1
+
+
+# Expiration timeout in seconds of a name service record about existing target
+# ( < 0 means no timeout). (integer value)
+#zmq_target_expire = 300
+
+# Update period in seconds of a name service record about existing target.
+# (integer value)
+#zmq_target_update = 180
+
+# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
+# value)
+#use_pub_sub = false
+
+# Use ROUTER remote proxy. (boolean value)
+#use_router_proxy = false
+
+# This option makes direct connections dynamic or static. It makes sense only
+# with use_router_proxy=False which means to use direct connections for direct
+# message types (ignored otherwise). (boolean value)
+#use_dynamic_connections = false
+
+# How many additional connections to a host will be made for failover reasons.
+# This option is actual only in dynamic connections mode. (integer value)
+#zmq_failover_connections = 2
+
+# Minimal port number for random ports range. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#rpc_zmq_min_port = 49153
+
+# Maximal port number for random ports range. (integer value)
+# Minimum value: 1
+# Maximum value: 65536
+#rpc_zmq_max_port = 65536
+
+# Number of retries to find free port number before fail with ZMQBindError.
+# (integer value)
+#rpc_zmq_bind_port_retries = 100
+
+# Default serialization mechanism for serializing/deserializing
+# outgoing/incoming messages (string value)
+# Possible values:
+# json - <No description provided>
+# msgpack - <No description provided>
+#rpc_zmq_serialization = json
+
+# This option configures round-robin mode in zmq socket. True means not keeping
+# a queue when server side disconnects. False means to keep queue and messages
+# even if server is disconnected, when the server appears we send all
+# accumulated messages to it. (boolean value)
+#zmq_immediate = true
+
+# Enable/disable TCP keepalive (KA) mechanism. The default value of -1 (or any
+# other negative value) means to skip any overrides and leave it to OS default;
+# 0 and 1 (or any other positive value) mean to disable and enable the option
+# respectively. (integer value)
+#zmq_tcp_keepalive = -1
+
+# The duration between two keepalive transmissions in idle condition. The unit
+# is platform dependent, for example, seconds in Linux, milliseconds in Windows
+# etc. The default value of -1 (or any other negative value and 0) means to
+# skip any overrides and leave it to OS default. (integer value)
+#zmq_tcp_keepalive_idle = -1
+
+# The number of retransmissions to be carried out before declaring that remote
+# end is not available. The default value of -1 (or any other negative value
+# and 0) means to skip any overrides and leave it to OS default. (integer
+# value)
+#zmq_tcp_keepalive_cnt = -1
+
+# The duration between two successive keepalive retransmissions, if
+# acknowledgement to the previous keepalive transmission is not received. The
+# unit is platform dependent, for example, seconds in Linux, milliseconds in
+# Windows etc. The default value of -1 (or any other negative value and 0)
+# means to skip any overrides and leave it to OS default. (integer value)
+#zmq_tcp_keepalive_intvl = -1
+
+# Maximum number of (green) threads to work concurrently. (integer value)
+#rpc_thread_pool_size = 100
+
+# Expiration timeout in seconds of a sent/received message after which it is
+# not tracked anymore by a client/server. (integer value)
+#rpc_message_ttl = 300
+
+# Wait for message acknowledgements from receivers. This mechanism works only
+# via proxy without PUB/SUB. (boolean value)
+#rpc_use_acks = false
+
+# Number of seconds to wait for an ack from a cast/call. After each retry
+# attempt this timeout is multiplied by some specified multiplier. (integer
+# value)
+#rpc_ack_timeout_base = 15
+
+# Number to multiply base ack timeout by after each retry attempt. (integer
+# value)
+#rpc_ack_timeout_multiplier = 2
+
+# Default number of message sending attempts in case of any problems occurred:
+# positive value N means at most N retries, 0 means no retries, None or -1 (or
+# any other negative values) mean to retry forever. This option is used only if
+# acknowledgments are enabled. (integer value)
+#rpc_retry_attempts = 3
+
+# List of publisher hosts SubConsumer can subscribe on. This option has higher
+# priority then the default publishers list taken from the matchmaker. (list
+# value)
+#subscribe_on =
 
 # Size of executor thread pool when executor is threading or eventlet. (integer
 # value)
@@ -3072,6 +3115,7 @@
 
 # Seconds to wait for a response from a call. (integer value)
 #rpc_response_timeout = 60
+rpc_response_timeout = 30
 
 # The network address and optional user credentials for connecting to the
 # messaging backend, in URL format. The expected format is:
@@ -3084,11 +3128,20 @@
 # oslo_messaging.TransportURL at
 # https://docs.openstack.org/oslo.messaging/latest/reference/transport.html
 # (string value)
-#transport_url = rabbit://
+#transport_url = <None>
+transport_url = rabbit://openstack:opnfv_secret@172.16.10.36:5672//openstack
+
+# DEPRECATED: The messaging driver to use, defaults to rabbit. Other drivers
+# include amqp and zmq. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rpc_backend = rabbit
 
 # The default exchange under which topics are scoped. May be overridden by an
 # exchange name specified in the transport_url option. (string value)
-#control_exchange = openstack
+#control_exchange = keystone
+
 
 #
 # From oslo.service.periodic_task
@@ -3134,13 +3187,14 @@
 #
 
 #
-# Determine the strategy to use for authentication.
-#  (string value)
-# Possible values:
-# keystone - Use keystone for authentication.
-# noauth2 - Designed for testing only, as it does no actual credential checking.
-# 'noauth2' provides administrative credentials only if 'admin' is specified as
-# the username.
+# This determines the strategy to use for authentication: keystone or noauth2.
+# 'noauth2' is designed for testing only, as it does no actual credential
+# checking. 'noauth2' provides administrative credentials only if 'admin' is
+# specified as the username.
+#  (string value)
+# Possible values:
+# keystone - <No description provided>
+# noauth2 - <No description provided>
 #auth_strategy = keystone
 
 #
@@ -3179,25 +3233,39 @@
 # A list of vendordata providers.
 #
 # vendordata providers are how deployers can provide metadata via configdrive
-# and metadata that is specific to their deployment.
+# and metadata that is specific to their deployment. There are currently two
+# supported providers: StaticJSON and DynamicJSON.
+#
+# StaticJSON reads a JSON file configured by the flag vendordata_jsonfile_path
+# and places the JSON from that file into vendor_data.json and
+# vendor_data2.json.
+#
+# DynamicJSON is configured via the vendordata_dynamic_targets flag, which is
+# documented separately. For each of the endpoints specified in that flag, a
+# section is added to the vendor_data2.json.
 #
 # For more information on the requirements for implementing a vendordata
 # dynamic endpoint, please see the vendordata.rst file in the nova developer
 # reference.
 #
-# Related options:
-#
-# * ``vendordata_dynamic_targets``
-# * ``vendordata_dynamic_ssl_certfile``
-# * ``vendordata_dynamic_connect_timeout``
-# * ``vendordata_dynamic_read_timeout``
-# * ``vendordata_dynamic_failure_fatal``
+# Possible values:
+#
+# * A list of vendordata providers, with StaticJSON and DynamicJSON being
+#   current options.
+#
+# Related options:
+#
+# * vendordata_dynamic_targets
+# * vendordata_dynamic_ssl_certfile
+# * vendordata_dynamic_connect_timeout
+# * vendordata_dynamic_read_timeout
+# * vendordata_dynamic_failure_fatal
 #  (list value)
 #vendordata_providers = StaticJSON
 
 #
 # A list of targets for the dynamic vendordata provider. These targets are of
-# the form ``<name>@<url>``.
+# the form <name>@<url>.
 #
 # The dynamic vendordata provider collects metadata by contacting external REST
 # services and querying them for information about the instance. This behaviour
@@ -3286,33 +3354,16 @@
 #metadata_cache_expiration = 15
 
 #
-# Indicates that the nova-metadata API service has been deployed per-cell, so
-# that we can have better performance and data isolation in a multi-cell
-# deployment. Users should consider the use of this configuration depending on
-# how neutron is setup. If you have networks that span cells, you might need to
-# run nova-metadata API service globally. If your networks are segmented along
-# cell boundaries, then you can run nova-metadata API service per cell. When
-# running nova-metadata API service per cell, you should also configure each
-# Neutron metadata-agent to point to the corresponding nova-metadata API
-# service.
-#  (boolean value)
-#local_metadata_per_cell = false
-
-#
 # Cloud providers may store custom data in vendor data file that will then be
 # available to the instances via the metadata service, and to the rendering of
 # config-drive. The default class for this, JsonFileVendorData, loads this
 # information from a JSON file, whose path is configured by this option. If
 # there is no path set by this option, the class returns an empty dictionary.
 #
-# Note that when using this to provide static vendor data to a configuration
-# drive, the nova-compute service must be configured with this option and the
-# file must be accessible from the nova-compute host.
-#
 # Possible values:
 #
 # * Any string representing the path to the data file, or an empty string
-#   (default).
+#     (default).
 #  (string value)
 #vendordata_jsonfile_path = <None>
 
@@ -3360,68 +3411,36 @@
 #  (boolean value)
 #instance_list_per_project_cells = false
 
-#
-# This controls the method by which the API queries cell databases in
-# smaller batches during large instance list operations. If batching is
-# performed, a large instance list operation will request some fraction
-# of the overall API limit from each cell database initially, and will
-# re-request that same batch size as records are consumed (returned)
-# from each cell as necessary. Larger batches mean less chattiness
-# between the API and the database, but potentially more wasted effort
-# processing the results from the database which will not be returned to
-# the user. Any strategy will yield a batch size of at least 100 records,
-# to avoid a user causing many tiny database queries in their request.
-#
-# Related options:
-#
-# * instance_list_cells_batch_fixed_size
-# * max_limit
-#  (string value)
-# Possible values:
-# distributed - Divide the limit requested by the user by the number of cells in
-# the system. This requires counting the cells in the system initially, which
-# will not be refreshed until service restart or SIGHUP. The actual batch size
-# will be increased by 10% over the result of ($limit / $num_cells).
-# fixed - Request fixed-size batches from each cell, as defined by
-# ``instance_list_cells_batch_fixed_size``. If the limit is smaller than the
-# batch size, the limit will be used instead. If you do not wish batching to be
-# used at all, setting the fixed size equal to the ``max_limit`` value will
-# cause only one request per cell database to be issued.
-#instance_list_cells_batch_strategy = distributed
-
-#
-# This controls the batch size of instances requested from each cell
-# database if ``instance_list_cells_batch_strategy``` is set to ``fixed``.
-# This integral value will define the limit issued to each cell every time
-# a batch of instances is requested, regardless of the number of cells in
-# the system or any other factors. Per the general logic called out in
-# the documentation for ``instance_list_cells_batch_strategy``, the
-# minimum value for this is 100 records per batch.
-#
-# Related options:
-#
-# * instance_list_cells_batch_strategy
-# * max_limit
-#  (integer value)
-# Minimum value: 100
-#instance_list_cells_batch_fixed_size = 100
-
-#
-# When set to False, this will cause the API to return a 500 error if there is
-# an
-# infrastructure failure like non-responsive cells. If you want the API to skip
-# the down cells and return the results from the up cells set this option to
-# True.
-#
-# Note that from API microversion 2.69 there could be transient conditions in
-# the
-# deployment where certain records are not available and the results could be
-# partial for certain requests containing those records. In those cases this
-# option will be ignored. See "Handling Down Cells" section of the Compute API
-# guide (https://developer.openstack.org/api-guide/compute/down_cells.html) for
-# more information.
-#  (boolean value)
-#list_records_by_skipping_down_cells = true
+# DEPRECATED:
+# This option is a list of all instance states for which network address
+# information should not be returned from the API.
+#
+# Possible values:
+#
+#   A list of strings, where each string is a valid VM state, as defined in
+#   nova/compute/vm_states.py. As of the Newton release, they are:
+#
+# * "active"
+# * "building"
+# * "paused"
+# * "suspended"
+# * "stopped"
+# * "rescued"
+# * "resized"
+# * "soft-delete"
+# * "deleted"
+# * "error"
+# * "shelved"
+# * "shelved_offloaded"
+#  (list value)
+# Deprecated group/name - [DEFAULT]/osapi_hide_server_address_states
+# This option is deprecated for removal since 17.0.0.
+# Its value may be silently ignored in the future.
+# Reason: This option hide the server address in server representation for
+# configured server states. Which makes GET server API controlled by this config
+# options. Due to this config options, user would not be able to discover the
+# API behavior on different clouds which leads to the interop issue.
+#hide_server_address_states = building
 
 #
 # When True, the TenantNetworkController will query the Neutron API to get the
@@ -3453,72 +3472,126 @@
 
 
 [api_database]
-connection = sqlite:////var/lib/nova/nova_api.sqlite
-#
-# The *Nova API Database* is a separate database which is used for information
-# which is used across *cells*. This database is mandatory since the Mitaka
-# release (13.0.0).
-
-#
-# From nova.conf
-#
+#
+# From oslo.db
+#
+
+# If True, SQLite uses synchronous mode. (boolean value)
+#sqlite_synchronous = true
+
+# The back end to use for the database. (string value)
+# Deprecated group/name - [DEFAULT]/db_backend
+#backend = sqlalchemy
 
 # The SQLAlchemy connection string to use to connect to the database. (string
 # value)
+# Deprecated group/name - [DEFAULT]/sql_connection
+# Deprecated group/name - [DATABASE]/sql_connection
+# Deprecated group/name - [sql]/connection
 #connection = <None>
+connection = mysql+pymysql://nova:opnfv_secret@172.16.10.36/nova_api?charset=utf8
+# The SQLAlchemy connection string to use to connect to the slave
+# database. (string value)
+#slave_connection = <None>
+
+# The SQL mode to be used for MySQL sessions. This option, including the
+# default, overrides any server-set SQL mode. To use whatever SQL mode is set
+# by the server configuration, set this to no value. Example: mysql_sql_mode=
+# (string value)
+#mysql_sql_mode = TRADITIONAL
+
+# If True, transparently enables support for handling MySQL Cluster (NDB).
+# (boolean value)
+#mysql_enable_ndb = false
+
+# Connections which have been present in the connection pool longer than this
+# number of seconds will be replaced with a new one the next time they are
+# checked out from the pool. (integer value)
+# Deprecated group/name - [DATABASE]/idle_timeout
+# Deprecated group/name - [database]/idle_timeout
+# Deprecated group/name - [DEFAULT]/sql_idle_timeout
+# Deprecated group/name - [DATABASE]/sql_idle_timeout
+# Deprecated group/name - [sql]/idle_timeout
+#connection_recycle_time = 3600
+
+# DEPRECATED: Minimum number of SQL connections to keep open in a pool.
+# (integer value)
+# Deprecated group/name - [DEFAULT]/sql_min_pool_size
+# Deprecated group/name - [DATABASE]/sql_min_pool_size
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: The option to set the minimum pool size is not supported by
+# sqlalchemy.
+#min_pool_size = 1
+
+# Maximum number of SQL connections to keep open in a pool. Setting a value of
+# 0 indicates no limit. (integer value)
+# Deprecated group/name - [DEFAULT]/sql_max_pool_size
+# Deprecated group/name - [DATABASE]/sql_max_pool_size
+#max_pool_size = 5
+max_pool_size = 10
+
+# Maximum number of database connection retries during startup. Set to -1 to
+# specify an infinite retry count. (integer value)
+# Deprecated group/name - [DEFAULT]/sql_max_retries
+# Deprecated group/name - [DATABASE]/sql_max_retries
+#max_retries = 10
+max_retries = -1
+
+# Interval between retries of opening a SQL connection. (integer value)
+# Deprecated group/name - [DEFAULT]/sql_retry_interval
+# Deprecated group/name - [DATABASE]/reconnect_interval
+#retry_interval = 10
+
+# If set, use this value for max_overflow with SQLAlchemy. (integer value)
+# Deprecated group/name - [DEFAULT]/sql_max_overflow
+# Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
+#max_overflow = 50
+max_overflow = 30
+
+# Verbosity of SQL debugging information: 0=None, 100=Everything. (integer
+# value)
+# Minimum value: 0
+# Maximum value: 100
+# Deprecated group/name - [DEFAULT]/sql_connection_debug
+#connection_debug = 0
+
+# Add Python stack traces to SQL as comment strings. (boolean value)
+# Deprecated group/name - [DEFAULT]/sql_connection_trace
+#connection_trace = false
+
+# If set, use this value for pool_timeout with SQLAlchemy. (integer value)
+# Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
+#pool_timeout = <None>
+
+# Enable the experimental use of database reconnect on connection lost.
+# (boolean value)
+#use_db_reconnect = false
+
+# Seconds between retries of a database transaction. (integer value)
+#db_retry_interval = 1
+
+# If True, increases the interval between retries of a database operation up to
+# db_max_retry_interval. (boolean value)
+#db_inc_retry_interval = true
+
+# If db_inc_retry_interval is set, the maximum seconds between retries of a
+# database operation. (integer value)
+#db_max_retry_interval = 10
+
+# Maximum retries in case of connection error or deadlock error before error is
+# raised. Set to -1 to specify an infinite retry count. (integer value)
+#db_max_retries = 20
 
 # Optional URL parameters to append onto the connection URL at connect time;
 # specify as param1=value1&param2=value2&... (string value)
 #connection_parameters =
 
-# If True, SQLite uses synchronous mode. (boolean value)
-#sqlite_synchronous = true
-
-# The SQLAlchemy connection string to use to connect to the slave database.
-# (string value)
-#slave_connection = <None>
-
-# The SQL mode to be used for MySQL sessions. This option, including the
-# default, overrides any server-set SQL mode. To use whatever SQL mode is set by
-# the server configuration, set this to no value. Example: mysql_sql_mode=
-# (string value)
-#mysql_sql_mode = TRADITIONAL
-
-# Connections which have been present in the connection pool longer than this
-# number of seconds will be replaced with a new one the next time they are
-# checked out from the pool. (integer value)
-# Deprecated group/name - [api_database]/idle_timeout
-#connection_recycle_time = 3600
-
-# Maximum number of SQL connections to keep open in a pool. Setting a value of 0
-# indicates no limit. (integer value)
-#max_pool_size = <None>
-
-# Maximum number of database connection retries during startup. Set to -1 to
-# specify an infinite retry count. (integer value)
-#max_retries = 10
-
-# Interval between retries of opening a SQL connection. (integer value)
-#retry_interval = 10
-
-# If set, use this value for max_overflow with SQLAlchemy. (integer value)
-#max_overflow = <None>
-
-# Verbosity of SQL debugging information: 0=None, 100=Everything. (integer
-# value)
-#connection_debug = 0
-
-# Add Python stack traces to SQL as comment strings. (boolean value)
-#connection_trace = false
-
-# If set, use this value for pool_timeout with SQLAlchemy. (integer value)
-#pool_timeout = <None>
 
 
 [barbican]
-
-#
-# From nova.conf
+#
+# From castellan.config
 #
 
 # Use this endpoint to connect to Barbican, for example:
@@ -3531,6 +3604,7 @@
 # Use this endpoint to connect to Keystone (string value)
 # Deprecated group/name - [key_manager]/auth_url
 #auth_endpoint = http://localhost/identity/v3
+auth_endpoint = http://172.16.10.36:35357/v3
 
 # Number of seconds to wait before retrying poll for key creation completion
 # (integer value)
@@ -3539,23 +3613,23 @@
 # Number of times to retry poll for key creation completion (integer value)
 #number_of_retries = 60
 
-# Specifies if insecure TLS (https) requests. If False, the server's certificate
-# will not be validated (boolean value)
+# Specifies if insecure TLS (https) requests. If False, the server's
+# certificate will not be validated (boolean value)
 #verify_ssl = true
 
-# Specifies the type of endpoint.  Allowed values are: public, private, and
+# Specifies the type of endpoint.  Allowed values are: public, internal, and
 # admin (string value)
 # Possible values:
 # public - <No description provided>
 # internal - <No description provided>
 # admin - <No description provided>
 #barbican_endpoint_type = public
+barbican_endpoint_type = internal
 
 
 [cache]
-
-#
-# From nova.conf
+#
+# From oslo.cache
 #
 
 # Prefix for building the configuration dictionary for the cache region. This
@@ -3563,9 +3637,9 @@
 # with the same configuration name. (string value)
 #config_prefix = cache.oslo
 
-# Default TTL, in seconds, for any cached item in the dogpile.cache region. This
-# applies to any cached method that doesn't have an explicit cache expiration
-# time defined for it. (integer value)
+# Default TTL, in seconds, for any cached item in the dogpile.cache region.
+# This applies to any cached method that doesn't have an explicit cache
+# expiration time defined for it. (integer value)
 #expiration_time = 600
 
 # Cache backend module. For eventlet-based or environments with hundreds of
@@ -3588,6 +3662,7 @@
 # dogpile.cache.memory_pickle - <No description provided>
 # dogpile.cache.null - <No description provided>
 #backend = dogpile.cache.null
+backend = oslo_cache.memcache_pool
 
 # Arguments supplied to the backend module. Specify this option once per
 # argument to be passed to the dogpile.cache backend. Example format:
@@ -3600,17 +3675,19 @@
 #proxies =
 
 # Global toggle for caching. (boolean value)
-#enabled = false
-
-# Extra debugging from the cache backend (cache keys, get/set/delete/etc calls).
-# This is only really useful if you need to see the specific cache-backend
-# get/set/delete calls with the keys/values.  Typically this should be left set
-# to false. (boolean value)
+#enabled = true
+enabled = True
+
+# Extra debugging from the cache backend (cache keys, get/set/delete/etc
+# calls). This is only really useful if you need to see the specific cache-
+# backend get/set/delete calls with the keys/values.  Typically this should be
+# left set to false. (boolean value)
 #debug_cache_backend = false
 
 # Memcache servers in the format of "host:port". (dogpile.cache.memcache and
 # oslo_cache.memcache_pool backends only). (list value)
 #memcache_servers = localhost:11211
+memcache_servers =172.16.10.36:11211,172.16.10.37:11211,172.16.10.38:11211,127.0.0.1:11211
 
 # Number of seconds memcached server is considered dead before it is tried
 # again. (dogpile.cache.memcache and oslo_cache.memcache_pool backends only).
@@ -3634,8 +3711,8 @@
 #memcache_pool_connection_get_timeout = 10
 
 
+
 [cells]
-enable = False
 #
 # DEPRECATED: Cells options allow you to use cells v1 functionality in an
 # OpenStack deployment.
@@ -4161,9 +4238,6 @@
 #
 # Info to match when looking for cinder in the service catalog.
 #
-# The ``<service_name>`` is optional and omitted by default since it should
-# not be necessary in most deployments.
-#
 # Possible values:
 #
 # * Format is separated values of the form:
@@ -4176,7 +4250,7 @@
 #
 # * endpoint_template - Setting this option will override catalog_info
 #  (string value)
-#catalog_info = volumev3::publicURL
+catalog_info = volumev3:cinderv3:internalURL
 
 #
 # If this option is set then it will override service catalog lookup with
@@ -4204,7 +4278,7 @@
 #
 # * Any string representing region name
 #  (string value)
-#os_region_name = <None>
+os_region_name = RegionOne
 
 #
 # Number of times cinderclient should retry on any failed http call.
@@ -4234,62 +4308,40 @@
 # By default there is no availability zone restriction on volume attach.
 #  (boolean value)
 #cross_az_attach = true
-
-# PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# Name of nova region to use. Useful if keystone manages more than one region.
 # (string value)
-#cafile = <None>
-
-# PEM encoded client certificate cert file (string value)
-#certfile = <None>
-
-# PEM encoded client certificate key file (string value)
-#keyfile = <None>
-
-# Verify HTTPS connections. (boolean value)
-#insecure = false
-
-# Timeout value for http requests (integer value)
-#timeout = <None>
-
-# Collect per-API call timing information. (boolean value)
-#collect_timing = false
-
-# Log requests to multiple loggers. (boolean value)
-#split_loggers = false
-
-# Authentication type to load (string value)
-# Deprecated group/name - [cinder]/auth_plugin
-#auth_type = <None>
-
-# Config Section from which to load plugin specific options (string value)
-#auth_section = <None>
+#region_name = <None>
+region_name = RegionOne
+
+# Type of the nova endpoint to use.  This endpoint will be looked up in the
+# keystone catalog and should be one of public, internal or admin. (string
+# value)
+# Possible values:
+# public - <No description provided>
+# admin - <No description provided>
+# internal - <No description provided>
+#endpoint_type = public
+endpoint_type = internal
+
+# API version of the admin Identity API endpoint. (string value)
+#auth_version = <None>
+
 
 # Authentication URL (string value)
 #auth_url = <None>
-
-# Scope for system operations (string value)
-#system_scope = <None>
-
-# Domain ID to scope to (string value)
-#domain_id = <None>
-
-# Domain name to scope to (string value)
-#domain_name = <None>
-
-# Project ID to scope to (string value)
-#project_id = <None>
-
-# Project name to scope to (string value)
-#project_name = <None>
-
-# Domain ID containing project (string value)
-#project_domain_id = <None>
-
-# Domain name containing project (string value)
-#project_domain_name = <None>
-
-# Trust ID (string value)
-#trust_id = <None>
+auth_url = http://172.16.10.36:35357
+
+# Authentication type to load (string value)
+# Deprecated group/name - [nova]/auth_plugin
+#auth_type = <None>
+auth_type = password
+
+# Required if identity server requires client certificate (string value)
+#certfile = <None>
+
+# A PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# Defaults to system CAs. (string value)
+#cafile = <None>
 
 # Optional domain ID to use with v3 and v2 parameters. It will be used for both
 # the user and project domain in v3 and ignored in v2 authentication. (string
@@ -4301,27 +4353,65 @@
 # (string value)
 #default_domain_name = <None>
 
+# Domain ID to scope to (string value)
+#domain_id = <None>
+
+# Domain name to scope to (string value)
+#domain_name = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# Required if identity server requires client certificate (string value)
+#keyfile = <None>
+
+# User's password (string value)
+#password = <None>
+password = opnfv_secret
+
+# Domain ID containing project (string value)
+#project_domain_id = <None>
+project_domain_id = default
+
+# Domain name containing project (string value)
+#project_domain_name = <None>
+
+# Project ID to scope to (string value)
+#project_id = <None>
+
+# Project name to scope to (string value)
+#project_name = <None>
+project_name = service
+
+# Scope for system operations (string value)
+#system_scope = <None>
+
+# Tenant ID (string value)
+#tenant_id = <None>
+
+# Tenant Name (string value)
+#tenant_name = <None>
+
+# Timeout value for http requests (integer value)
+#timeout = <None>
+
+# Trust ID (string value)
+#trust_id = <None>
+
+# User's domain id (string value)
+#user_domain_id = <None>
+user_domain_id = default
+
+# User's domain name (string value)
+#user_domain_name = <None>
+
 # User ID (string value)
 #user_id = <None>
 
 # Username (string value)
-# Deprecated group/name - [cinder]/user_name
+# Deprecated group/name - [neutron]/user_name
 #username = <None>
-
-# User's domain id (string value)
-#user_domain_id = <None>
-
-# User's domain name (string value)
-#user_domain_name = <None>
-
-# User's password (string value)
-#password = <None>
-
-# Tenant ID (string value)
-#tenant_id = <None>
-
-# Tenant Name (string value)
-#tenant_name = <None>
+username = nova
 
 
 [compute]
@@ -4367,24 +4457,17 @@
 
 #
 # Interval for updating nova-compute-side cache of the compute node resource
-# provider's inventories, aggregates, and traits.
+# provider's aggregates and traits info.
 #
 # This option specifies the number of seconds between attempts to update a
-# provider's inventories, aggregates and traits in the local cache of the
-# compute
+# provider's aggregates and traits information in the local cache of the compute
 # node.
 #
-# A value of zero disables cache refresh completely.
-#
-# The cache can be cleared manually at any time by sending SIGHUP to the compute
-# process, causing it to be repopulated the next time the data is accessed.
-#
-# Possible values:
-#
-# * Any positive integer in seconds, or zero to disable refresh.
-#  (integer value)
-# Minimum value: 0
-# Note: This option can be changed without restarting.
+# Possible values:
+#
+# * Any positive integer in seconds.
+#  (integer value)
+# Minimum value: 1
 #resource_provider_association_refresh = 300
 
 #
@@ -4392,10 +4475,9 @@
 # resources.
 #
 # Currently only used by libvirt driver to place guest emulator threads when
-# the flavor extra spec is set to ``hw:emulator_threads_policy=share``.
-#
-# For example::
-#
+# hw:emulator_threads_policy:share.
+#
+# ::
 #     cpu_shared_set = "4-12,^8,15"
 #  (string value)
 #cpu_shared_set = <None>
@@ -4419,9 +4501,13 @@
 # source compute can wait for that event to ensure networking is set up on the
 # destination host before starting the guest transfer in the hypervisor.
 #
-# .. note::
-#
-#    The compute service cannot reliably determine which types of virtual
+# By default, this is False for two reasons:
+#
+# 1. Backward compatibility: deployments should test this out and ensure it
+# works
+#    for them before enabling it.
+#
+# 2. The compute service cannot reliably determine which types of virtual
 #    interfaces (``port.binding:vif_type``) will send ``network-vif-plugged``
 #    events without an accompanying port ``binding:host_id`` change.
 #    Open vSwitch and linuxbridge should be OK, but OpenDaylight is at least
@@ -4432,7 +4518,8 @@
 #
 # * True: wait for ``network-vif-plugged`` events before starting guest transfer
 # * False: do not wait for ``network-vif-plugged`` events before starting guest
-#   transfer (this is the legacy behavior)
+#   transfer (this is how things have always worked before this option
+#   was introduced)
 #
 # Related options:
 #
@@ -4445,65 +4532,7 @@
 #   failing if ``vif_plugging_is_fatal`` is True, or simply continuing with the
 #   live migration
 #  (boolean value)
-#live_migration_wait_for_vif_plug = true
-
-#
-# Number of concurrent disk-IO-intensive operations (glance image downloads,
-# image format conversions, etc.) that we will do in parallel.  If this is set
-# too high then response time suffers.
-# The default value of 0 means no limit.
-#   (integer value)
-# Minimum value: 0
-#max_concurrent_disk_ops = 0
-
-#
-# Maximum number of disk devices allowed to attach to a single server. Note
-# that the number of disks supported by an server depends on the bus used. For
-# example, the ``ide`` disk bus is limited to 4 attached devices. The configured
-# maximum is enforced during server create, rebuild, evacuate, unshelve, live
-# migrate, and attach volume.
-#
-# Usually, disk bus is determined automatically from the device type or disk
-# device, and the virtualization type. However, disk bus
-# can also be specified via a block device mapping or an image property.
-# See the ``disk_bus`` field in :doc:`/user/block-device-mapping` for more
-# information about specifying disk bus in a block device mapping, and
-# see https://docs.openstack.org/glance/latest/admin/useful-image-
-# properties.html
-# for more information about the ``hw_disk_bus`` image property.
-#
-# Operators changing the ``[compute]/max_disk_devices_to_attach`` on a compute
-# service that is hosting servers should be aware that it could cause rebuilds
-# to
-# fail, if the maximum is decreased lower than the number of devices already
-# attached to servers. For example, if server A has 26 devices attached and an
-# operators changes ``[compute]/max_disk_devices_to_attach`` to 20, a request to
-# rebuild server A will fail and go into ERROR state because 26 devices are
-# already attached and exceed the new configured maximum of 20.
-#
-# Operators setting ``[compute]/max_disk_devices_to_attach`` should also be
-# aware
-# that during a cold migration, the configured maximum is only enforced in-place
-# and the destination is not checked before the move. This means if an operator
-# has set a maximum of 26 on compute host A and a maximum of 20 on compute host
-# B, a cold migration of a server with 26 attached devices from compute host A
-# to
-# compute host B will succeed. Then, once the server is on compute host B, a
-# subsequent request to rebuild the server will fail and go into ERROR state
-# because 26 devices are already attached and exceed the configured maximum of
-# 20
-# on compute host B.
-#
-# The configured maximum is not enforced on shelved offloaded servers, as they
-# have no compute host.
-#
-# Possible values:
-#
-# * -1 means unlimited
-# * Any integer >= 0 represents the maximum allowed
-#  (integer value)
-# Minimum value: -1
-#max_disk_devices_to_attach = -1
+#live_migration_wait_for_vif_plug = false
 
 
 [conductor]
@@ -4572,6 +4601,7 @@
 #token_ttl = 600
 
 
+
 [cors]
 
 #
@@ -4602,8 +4632,6 @@
 
 
 [database]
-connection = sqlite:////var/lib/nova/nova.sqlite
-
 #
 # From oslo.db
 #
@@ -4621,14 +4649,14 @@
 # Deprecated group/name - [DATABASE]/sql_connection
 # Deprecated group/name - [sql]/connection
 #connection = <None>
-
-# The SQLAlchemy connection string to use to connect to the slave database.
-# (string value)
+connection = mysql+pymysql://nova:opnfv_secret@172.16.10.36/nova?charset=utf8
+# The SQLAlchemy connection string to use to connect to the slave
+# database. (string value)
 #slave_connection = <None>
 
 # The SQL mode to be used for MySQL sessions. This option, including the
-# default, overrides any server-set SQL mode. To use whatever SQL mode is set by
-# the server configuration, set this to no value. Example: mysql_sql_mode=
+# default, overrides any server-set SQL mode. To use whatever SQL mode is set
+# by the server configuration, set this to no value. Example: mysql_sql_mode=
 # (string value)
 #mysql_sql_mode = TRADITIONAL
 
@@ -4646,8 +4674,8 @@
 # Deprecated group/name - [sql]/idle_timeout
 #connection_recycle_time = 3600
 
-# DEPRECATED: Minimum number of SQL connections to keep open in a pool. (integer
-# value)
+# DEPRECATED: Minimum number of SQL connections to keep open in a pool.
+# (integer value)
 # Deprecated group/name - [DEFAULT]/sql_min_pool_size
 # Deprecated group/name - [DATABASE]/sql_min_pool_size
 # This option is deprecated for removal.
@@ -4656,17 +4684,19 @@
 # sqlalchemy.
 #min_pool_size = 1
 
-# Maximum number of SQL connections to keep open in a pool. Setting a value of 0
-# indicates no limit. (integer value)
+# Maximum number of SQL connections to keep open in a pool. Setting a value of
+# 0 indicates no limit. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_max_pool_size
 # Deprecated group/name - [DATABASE]/sql_max_pool_size
 #max_pool_size = 5
+max_pool_size = 10
 
 # Maximum number of database connection retries during startup. Set to -1 to
 # specify an infinite retry count. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_max_retries
 # Deprecated group/name - [DATABASE]/sql_max_retries
 #max_retries = 10
+max_retries = -1
 
 # Interval between retries of opening a SQL connection. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_retry_interval
@@ -4677,6 +4707,7 @@
 # Deprecated group/name - [DEFAULT]/sql_max_overflow
 # Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
 #max_overflow = 50
+max_overflow = 30
 
 # Verbosity of SQL debugging information: 0=None, 100=Everything. (integer
 # value)
@@ -4693,8 +4724,8 @@
 # Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
 #pool_timeout = <None>
 
-# Enable the experimental use of database reconnect on connection lost. (boolean
-# value)
+# Enable the experimental use of database reconnect on connection lost.
+# (boolean value)
 #use_db_reconnect = false
 
 # Seconds between retries of a database transaction. (integer value)
@@ -4716,14 +4747,6 @@
 # specify as param1=value1&param2=value2&... (string value)
 #connection_parameters =
 
-#
-# From oslo.db.concurrency
-#
-
-# Enable the experimental use of thread pooling for all DB API calls (boolean
-# value)
-# Deprecated group/name - [DEFAULT]/dbapi_use_tpool
-#use_tpool = false
 
 
 [devices]
@@ -5062,10 +5085,10 @@
 #
 # Possible values:
 #
-# * A non-negative integer or float value, where the value corresponds to
-#   weight multiplier for hosts with group soft affinity.
+# * An integer or float value, where the value corresponds to weight multiplier
+#   for hosts with group soft affinity. Only a positive value are meaningful, as
+#   negative values would make this behave as a soft anti-affinity weigher.
 #  (floating point value)
-# Minimum value: 0
 #soft_affinity_weight_multiplier = 1.0
 
 #
@@ -5073,10 +5096,11 @@
 #
 # Possible values:
 #
-# * A non-negative integer or float value, where the value corresponds to
-#   weight multiplier for hosts with group soft anti-affinity.
+# * An integer or float value, where the value corresponds to weight multiplier
+#   for hosts with group soft anti-affinity. Only a positive value are
+#   meaningful, as negative values would make this behave as a soft affinity
+#   weigher.
 #  (floating point value)
-# Minimum value: 0
 #soft_anti_affinity_weight_multiplier = 1.0
 
 #
@@ -5304,6 +5328,8 @@
 #   (i.e. "http://10.0.1.0:9292" or "https://my.glance.server/image").
 #  (list value)
 #api_servers = <None>
+api_servers = http://172.16.10.36:9292
+
 
 #
 # Enable glance operation retries.
@@ -5353,7 +5379,7 @@
 # * Both enable_certificate_validation and default_trusted_certificate_ids
 #   below depend on this option being enabled.
 #  (boolean value)
-#verify_glance_signatures = false
+verify_glance_signatures = False
 
 # DEPRECATED:
 # Enable certificate validation for image signature verification.
@@ -5488,10 +5514,7 @@
 # Its value may be silently ignored in the future.
 #path = /healthcheck
 
-# Show more detailed information as part of the response. Security note:
-# Enabling this option may expose sensitive details about the service being
-# monitored. Be sure to verify that it will not violate your security policies.
-# (boolean value)
+# Show more detailed information as part of the response (boolean value)
 #detailed = false
 
 # Additional backends that can perform health checks and report that information
@@ -5731,7 +5754,7 @@
 # * You can configure the Compute service to always create a configuration
 #   drive by setting the force_config_drive option to 'True'.
 #  (boolean value)
-#config_drive_cdrom = false
+config_drive_cdrom = false
 
 #
 # Configuration drive inject password
@@ -5744,7 +5767,7 @@
 #   configuration drive usage with Hyper-V, such as force_config_drive.
 # * Currently, the only accepted config_drive_format is 'iso9660'.
 #  (boolean value)
-#config_drive_inject_password = false
+config_drive_inject_password = false
 
 #
 # Volume attach retry count
@@ -5828,167 +5851,6 @@
 #iscsi_initiator_list =
 
 
-[ironic]
-#
-# Configuration options for Ironic driver (Bare Metal).
-# If using the Ironic driver following options must be set:
-# * auth_type
-# * auth_url
-# * project_name
-# * username
-# * password
-# * project_domain_id or project_domain_name
-# * user_domain_id or user_domain_name
-
-#
-# From nova.conf
-#
-
-# DEPRECATED: URL override for the Ironic API endpoint. (uri value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Endpoint lookup uses the service catalog via common keystoneauth1
-# Adapter configuration options. In the current release, api_endpoint will
-# override this behavior, but will be ignored and/or removed in a future
-# release. To achieve the same result, use the endpoint_override option instead.
-#
-# This option has a sample default set, which means that
-# its actual default value may vary from the one documented
-# below.
-#api_endpoint = http://ironic.example.org:6385/
-
-#
-# The number of times to retry when a request conflicts.
-# If set to 0, only try once, no retries.
-#
-# Related options:
-#
-# * api_retry_interval
-#  (integer value)
-# Minimum value: 0
-#api_max_retries = 60
-
-#
-# The number of seconds to wait before retrying the request.
-#
-# Related options:
-#
-# * api_max_retries
-#  (integer value)
-# Minimum value: 0
-#api_retry_interval = 2
-
-# Timeout (seconds) to wait for node serial console state changed. Set to 0 to
-# disable timeout. (integer value)
-# Minimum value: 0
-#serial_console_state_timeout = 10
-
-# Case-insensitive key to limit the set of nodes that may be managed by this
-# service to the set of nodes in Ironic which have a matching conductor_group
-# property. If unset, all available nodes will be eligible to be managed by this
-# service. Note that setting this to the empty string (``""``) will match the
-# default conductor group, and is different than leaving the option unset.
-# (string value)
-# Note: This option can be changed without restarting.
-#partition_key = <None>
-
-# List of hostnames for all nova-compute services (including this host) with
-# this partition_key config value. Nodes matching the partition_key value will
-# be distributed between all services specified here. If partition_key is unset,
-# this option is ignored. (list value)
-# Note: This option can be changed without restarting.
-#peer_list =
-
-# PEM encoded Certificate Authority to use when verifying HTTPs connections.
-# (string value)
-#cafile = <None>
-
-# PEM encoded client certificate cert file (string value)
-#certfile = <None>
-
-# PEM encoded client certificate key file (string value)
-#keyfile = <None>
-
-# Verify HTTPS connections. (boolean value)
-#insecure = false
-
-# Timeout value for http requests (integer value)
-#timeout = <None>
-
-# Collect per-API call timing information. (boolean value)
-#collect_timing = false
-
-# Log requests to multiple loggers. (boolean value)
-#split_loggers = false
-
-# Authentication type to load (string value)
-# Deprecated group/name - [ironic]/auth_plugin
-#auth_type = <None>
-
-# Config Section from which to load plugin specific options (string value)
-#auth_section = <None>
-
-# Authentication URL (string value)
-#auth_url = <None>
-
-# Scope for system operations (string value)
-#system_scope = <None>
-
-# Domain ID to scope to (string value)
-#domain_id = <None>
-
-# Domain name to scope to (string value)
-#domain_name = <None>
-
-# Project ID to scope to (string value)
-#project_id = <None>
-
-# Project name to scope to (string value)
-#project_name = <None>
-
-# Domain ID containing project (string value)
-#project_domain_id = <None>
-
-# Domain name containing project (string value)
-#project_domain_name = <None>
-
-# Trust ID (string value)
-#trust_id = <None>
-
-# User ID (string value)
-#user_id = <None>
-
-# Username (string value)
-# Deprecated group/name - [ironic]/user_name
-#username = <None>
-
-# User's domain id (string value)
-#user_domain_id = <None>
-
-# User's domain name (string value)
-#user_domain_name = <None>
-
-# User's password (string value)
-#password = <None>
-
-# The default service_type for endpoint URL discovery. (string value)
-#service_type = baremetal
-
-# The default service_name for endpoint URL discovery. (string value)
-#service_name = <None>
-
-# List of interfaces, in order of preference, for endpoint URL. (list value)
-#valid_interfaces = internal,public
-
-# The default region_name for endpoint URL discovery. (string value)
-#region_name = <None>
-
-# Always use this endpoint URL for requests for this client. NOTE: The
-# unversioned endpoint should be specified here; to request a particular API
-# version, use the `version`, `min-version`, and/or `max-version` options.
-# (string value)
-# Deprecated group/name - [ironic]/api_endpoint
-#endpoint_override = <None>
 
 
 [key_manager]
@@ -6132,14 +5994,16 @@
 #
 
 # Complete "public" Identity API endpoint. This endpoint should not be an
-# "admin" endpoint, as it should be accessible by all end users. Unauthenticated
-# clients are redirected to this endpoint to authenticate. Although this
-# endpoint should ideally be unversioned, client support in the wild varies. If
-# you're using a versioned v2 endpoint here, then this should *not* be the same
-# endpoint the service user utilizes for validating tokens, because normal end
-# users may not be able to reach that endpoint. (string value)
+# "admin" endpoint, as it should be accessible by all end users.
+# Unauthenticated clients are redirected to this endpoint to authenticate.
+# Although this endpoint should ideally be unversioned, client support in the
+# wild varies. If you're using a versioned v2 endpoint here, then this should
+# *not* be the same endpoint the service user utilizes for validating tokens,
+# because normal end users may not be able to reach that endpoint. (string
+# value)
 # Deprecated group/name - [keystone_authtoken]/auth_uri
 #www_authenticate_uri = <None>
+www_authenticate_uri = http://172.16.10.36:5000
 
 # DEPRECATED: Complete "public" Identity API endpoint. This endpoint should not
 # be an "admin" endpoint, as it should be accessible by all end users.
@@ -6152,9 +6016,10 @@
 # release. (string value)
 # This option is deprecated for removal since Queens.
 # Its value may be silently ignored in the future.
-# Reason: The auth_uri option is deprecated in favor of www_authenticate_uri and
-# will be removed in the S  release.
+# Reason: The auth_uri option is deprecated in favor of www_authenticate_uri
+# and will be removed in the S  release.
 #auth_uri = <None>
+auth_uri = http://172.16.10.36:5000
 
 # API version of the admin Identity API endpoint. (string value)
 #auth_version = <None>
@@ -6167,8 +6032,8 @@
 # value)
 #http_connect_timeout = <None>
 
-# How many times are we trying to reconnect when communicating with Identity API
-# Server. (integer value)
+# How many times are we trying to reconnect when communicating with Identity
+# API Server. (integer value)
 #http_request_max_retries = 3
 
 # Request environment key where the Swift cache object is stored. When
@@ -6192,10 +6057,11 @@
 
 # The region in which the identity server can be found. (string value)
 #region_name = <None>
+region_name = RegionOne
 
 # DEPRECATED: Directory used to cache files related to PKI tokens. This option
-# has been deprecated in the Ocata release and will be removed in the P release.
-# (string value)
+# has been deprecated in the Ocata release and will be removed in the P
+# release. (string value)
 # This option is deprecated for removal since Ocata.
 # Its value may be silently ignored in the future.
 # Reason: PKI token format is no longer supported.
@@ -6205,33 +6071,29 @@
 # undefined, tokens will instead be cached in-process. (list value)
 # Deprecated group/name - [keystone_authtoken]/memcache_servers
 #memcached_servers = <None>
+memcached_servers=172.16.10.36:11211,172.16.10.37:11211,172.16.10.38:11211,127.0.0.1:11211
 
 # In order to prevent excessive effort spent validating tokens, the middleware
-# caches previously-seen tokens for a configurable duration (in seconds). Set to
-# -1 to disable caching completely. (integer value)
+# caches previously-seen tokens for a configurable duration (in seconds). Set
+# to -1 to disable caching completely. (integer value)
 #token_cache_time = 300
 
-# (Optional) If defined, indicate whether token data should be authenticated or
-# authenticated and encrypted. If MAC, token data is authenticated (with HMAC)
-# in the cache. If ENCRYPT, token data is encrypted and authenticated in the
-# cache. If the value is not one of these options or empty, auth_token will
-# raise an exception on initialization. (string value)
-# Possible values:
-# None - <No description provided>
-# MAC - <No description provided>
-# ENCRYPT - <No description provided>
-#memcache_security_strategy = None
-
-# (Optional, mandatory if memcache_security_strategy is defined) This string is
-# used for key derivation. (string value)
-#memcache_secret_key = <None>
+# DEPRECATED: Determines the frequency at which the list of revoked tokens is
+# retrieved from the Identity service (in seconds). A high number of revocation
+# events combined with a low cache duration may significantly reduce
+# performance. Only valid for PKI tokens. This option has been deprecated in
+# the Ocata release and will be removed in the P release. (integer value)
+# This option is deprecated for removal since Ocata.
+# Its value may be silently ignored in the future.
+# Reason: PKI token format is no longer supported.
+#revocation_cache_time = 10
 
 # (Optional) Number of seconds memcached server is considered dead before it is
 # tried again. (integer value)
 #memcache_pool_dead_retry = 300
 
-# (Optional) Maximum total number of open connections to every memcached server.
-# (integer value)
+# (Optional) Maximum total number of open connections to every memcached
+# server. (integer value)
 #memcache_pool_maxsize = 10
 
 # (Optional) Socket timeout in seconds for communicating with a memcached
@@ -6257,12 +6119,20 @@
 
 # Used to control the use and type of token binding. Can be set to: "disabled"
 # to not check token binding. "permissive" (default) to validate binding
-# information if the bind type is of a form known to the server and ignore it if
-# not. "strict" like "permissive" but if the bind type is unknown the token will
-# be rejected. "required" any form of token binding is needed to be allowed.
-# Finally the name of a binding method that must be present in tokens. (string
+# information if the bind type is of a form known to the server and ignore it
+# if not. "strict" like "permissive" but if the bind type is unknown the token
+# will be rejected. "required" any form of token binding is needed to be
+# allowed. Finally the name of a binding method that must be present in tokens.
+# (string value)
+#enforce_token_bind = permissive
+
+# DEPRECATED: If true, the revocation list will be checked for cached tokens.
+# This requires that PKI tokens are configured on the identity server. (boolean
 # value)
-#enforce_token_bind = permissive
+# This option is deprecated for removal since Ocata.
+# Its value may be silently ignored in the future.
+# Reason: PKI token format is no longer supported.
+#check_revocations_for_cached = false
 
 # DEPRECATED: Hash algorithms to use for hashing PKI tokens. This may be a
 # single algorithm or multiple. The algorithms are those supported by Python
@@ -6280,23 +6150,129 @@
 # A choice of roles that must be present in a service token. Service tokens are
 # allowed to request that an expired token can be used and so this check should
 # tightly control that only actual services should be sending this token. Roles
-# here are applied as an ANY check so any role in this list must be present. For
-# backwards compatibility reasons this currently only affects the allow_expired
-# check. (list value)
+# here are applied as an ANY check so any role in this list must be present.
+# For backwards compatibility reasons this currently only affects the
+# allow_expired check. (list value)
 #service_token_roles = service
 
-# For backwards compatibility reasons we must let valid service tokens pass that
-# don't pass the service_token_roles check as valid. Setting this true will
-# become the default in a future release and should be enabled if possible.
-# (boolean value)
+# For backwards compatibility reasons we must let valid service tokens pass
+# that don't pass the service_token_roles check as valid. Setting this true
+# will become the default in a future release and should be enabled if
+# possible. (boolean value)
 #service_token_roles_required = false
 
 # Authentication type to load (string value)
 # Deprecated group/name - [keystone_authtoken]/auth_plugin
 #auth_type = <None>
+auth_type = password
 
 # Config Section from which to load plugin specific options (string value)
 #auth_section = <None>
+
+# Name of nova region to use. Useful if keystone manages more than one region.
+# (string value)
+#region_name = <None>
+region_name = RegionOne
+
+# Type of the nova endpoint to use.  This endpoint will be looked up in the
+# keystone catalog and should be one of public, internal or admin. (string
+# value)
+# Possible values:
+# public - <No description provided>
+# admin - <No description provided>
+# internal - <No description provided>
+#endpoint_type = public
+endpoint_type = internal
+
+# API version of the admin Identity API endpoint. (string value)
+#auth_version = <None>
+
+
+# Authentication URL (string value)
+#auth_url = <None>
+auth_url = http://172.16.10.36:35357
+
+# Authentication type to load (string value)
+# Deprecated group/name - [nova]/auth_plugin
+#auth_type = <None>
+auth_type = password
+
+# Required if identity server requires client certificate (string value)
+#certfile = <None>
+
+# A PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# Defaults to system CAs. (string value)
+#cafile = <None>
+
+# Optional domain ID to use with v3 and v2 parameters. It will be used for both
+# the user and project domain in v3 and ignored in v2 authentication. (string
+# value)
+#default_domain_id = <None>
+
+# Optional domain name to use with v3 API and v2 parameters. It will be used for
+# both the user and project domain in v3 and ignored in v2 authentication.
+# (string value)
+#default_domain_name = <None>
+
+# Domain ID to scope to (string value)
+#domain_id = <None>
+
+# Domain name to scope to (string value)
+#domain_name = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# Required if identity server requires client certificate (string value)
+#keyfile = <None>
+
+# User's password (string value)
+#password = <None>
+password = opnfv_secret
+
+# Domain ID containing project (string value)
+#project_domain_id = <None>
+project_domain_id = default
+
+# Domain name containing project (string value)
+#project_domain_name = <None>
+
+# Project ID to scope to (string value)
+#project_id = <None>
+
+# Project name to scope to (string value)
+#project_name = <None>
+project_name = service
+
+# Scope for system operations (string value)
+#system_scope = <None>
+
+# Tenant ID (string value)
+#tenant_id = <None>
+
+# Tenant Name (string value)
+#tenant_name = <None>
+
+# Timeout value for http requests (integer value)
+#timeout = <None>
+
+# Trust ID (string value)
+#trust_id = <None>
+
+# User's domain id (string value)
+#user_domain_id = <None>
+user_domain_id = default
+
+# User's domain name (string value)
+#user_domain_name = <None>
+
+# User ID (string value)
+#user_id = <None>
+
+# Username (string value)
+# Deprecated group/name - [neutron]/user_name
+#username = <None>
+username = nova
 
 
 [libvirt]
@@ -6384,6 +6360,10 @@
 # The choice of this type must match the underlying virtualization strategy
 # you have chosen for this host.
 #
+# Possible values:
+#
+# * See the predefined set of case-sensitive values.
+#
 # Related options:
 #
 # * ``connection_uri``: depends on this
@@ -6398,7 +6378,7 @@
 # uml - <No description provided>
 # xen - <No description provided>
 # parallels - <No description provided>
-#virt_type = kvm
+virt_type = kvm
 
 #
 # Overrides the default libvirt URI of the chosen virtualization type.
@@ -6416,57 +6396,6 @@
 # * ``virt_type``: Influences what is used as default value here.
 #  (string value)
 #connection_uri =
-
-#
-# Allow the injection of an admin password for instance only at ``create`` and
-# ``rebuild`` process.
-#
-# There is no agent needed within the image to do this. If *libguestfs* is
-# available on the host, it will be used. Otherwise *nbd* is used. The file
-# system of the image will be mounted and the admin password, which is provided
-# in the REST API call will be injected as password for the root user. If no
-# root user is available, the instance won't be launched and an error is thrown.
-# Be aware that the injection is *not* possible when the instance gets launched
-# from a volume.
-#
-# *Linux* distribution guest only.
-#
-# Possible values:
-#
-# * True: Allows the injection.
-# * False: Disallows the injection. Any via the REST API provided admin password
-#   will be silently ignored.
-#
-# Related options:
-#
-# * ``inject_partition``: That option will decide about the discovery and usage
-#   of the file system. It also can disable the injection at all.
-#  (boolean value)
-#inject_password = false
-
-#
-# Allow the injection of an SSH key at boot time.
-#
-# There is no agent needed within the image to do this. If *libguestfs* is
-# available on the host, it will be used. Otherwise *nbd* is used. The file
-# system of the image will be mounted and the SSH key, which is provided
-# in the REST API call will be injected as SSH key for the root user and
-# appended to the ``authorized_keys`` of that user. The SELinux context will
-# be set if necessary. Be aware that the injection is *not* possible when the
-# instance gets launched from a volume.
-#
-# This config option will enable directly modifying the instance disk and does
-# not affect what cloud-init may do using data from config_drive option or the
-# metadata service.
-#
-# *Linux* distribution guest only.
-#
-# Related options:
-#
-# * ``inject_partition``: That option will decide about the discovery and usage
-#   of the file system. It also can disable the injection at all.
-#  (boolean value)
-#inject_key = false
 
 #
 # Determines the way how the file system is chosen to inject data into it.
@@ -6499,7 +6428,7 @@
 #   single partition image
 #  (integer value)
 # Minimum value: -2
-#inject_partition = -2
+inject_partition = -2
 
 # DEPRECATED:
 # Enable a mouse cursor within a graphical VNC or SPICE sessions.
@@ -6519,27 +6448,60 @@
 # Its value may be silently ignored in the future.
 # Reason: This option is being replaced by the 'pointer_model' option.
 #use_usb_tablet = true
-
-#
-# URI scheme used for live migration.
-#
-# Override the default libvirt live migration scheme (which is dependent on
-# virt_type). If this option is set to None, nova will automatically choose a
-# sensible default based on the hypervisor. It is not recommended that you
-# change
-# this unless you are very sure that hypervisor supports a particular scheme.
-#
-# Related options:
-#
-# * ``virt_type``: This option is meaningful only when ``virt_type`` is set to
-#   `kvm` or `qemu`.
-# * ``live_migration_uri``: If ``live_migration_uri`` value is not None, the
-#   scheme used for live migration is taken from ``live_migration_uri`` instead.
-#  (string value)
-#live_migration_scheme = <None>
-
-#
-# Target used for live migration traffic.
+#
+# Allow the injection of an admin password for instance only at ``create`` and
+# ``rebuild`` process.
+#
+# There is no agent needed within the image to do this. If *libguestfs* is
+# available on the host, it will be used. Otherwise *nbd* is used. The file
+# system of the image will be mounted and the admin password, which is provided
+# in the REST API call will be injected as password for the root user. If no
+# root user is available, the instance won't be launched and an error is thrown.
+# Be aware that the injection is *not* possible when the instance gets launched
+# from a volume.
+#
+# *Linux* distribution guest only.
+#
+# Possible values:
+#
+# * True: Allows the injection.
+# * False: Disallows the injection. Any via the REST API provided admin password
+#   will be silently ignored.
+#
+# Related options:
+#
+# * ``inject_partition``: That option will decide about the discovery and usage
+#   of the file system. It also can disable the injection at all.
+#  (boolean value)
+inject_password = false
+
+#
+# Allow the injection of an SSH key at boot time.
+#
+# There is no agent needed within the image to do this. If *libguestfs* is
+# available on the host, it will be used. Otherwise *nbd* is used. The file
+# system of the image will be mounted and the SSH key, which is provided
+# in the REST API call will be injected as SSH key for the root user and
+# appended to the ``authorized_keys`` of that user. The SELinux context will
+# be set if necessary. Be aware that the injection is *not* possible when the
+# instance gets launched from a volume.
+#
+# This config option will enable directly modifying the instance disk and does
+# not affect what cloud-init may do using data from config_drive option or the
+# metadata service.
+#
+# *Linux* distribution guest only.
+#
+# Related options:
+#
+# * ``inject_partition``: That option will decide about the discovery and usage
+#   of the file system. It also can disable the injection at all.
+#  (boolean value)
+inject_key = true
+
+#
+# The IP address or hostname to be used as the target for live migration
+# traffic.
 #
 # If this option is set to None, the hostname of the migration target compute
 # node will be used.
@@ -6549,12 +6511,17 @@
 # traffic can then use this config option and avoids the impact on the
 # management network.
 #
+# Possible values:
+#
+# * A valid IP address or hostname, else None.
+#
 # Related options:
 #
 # * ``live_migration_tunnelled``: The live_migration_inbound_addr value is
 #   ignored if tunneling is enabled.
-#  (host address value)
+#  (string value)
 #live_migration_inbound_addr = <None>
+live_migration_inbound_addr = 172.16.10.55
 
 # DEPRECATED:
 # Live migration target URI to use.
@@ -6590,6 +6557,23 @@
 # ``live_migration_scheme``
 # and ``live_migration_inbound_addr`` respectively.
 #live_migration_uri = <None>
+
+#
+# URI scheme used for live migration.
+#
+# Override the default libvirt live migration scheme (which is dependent on
+# virt_type). If this option is set to None, nova will automatically choose a
+# sensible default based on the hypervisor. It is not recommended that you
+# change
+# this unless you are very sure that hypervisor supports a particular scheme.
+#
+# Related options:
+#
+# * ``virt_type``: This option is meaningful only when ``virt_type`` is set to
+#   `kvm` or `qemu`.
+# * ``live_migration_uri``: If ``live_migration_uri`` value is not None, the
+#   scheme used for live migration is taken from ``live_migration_uri`` instead.
+#  (string value)
 
 #
 # Enable tunnelled migration.
@@ -6669,28 +6653,24 @@
 # * live_migration_downtime_steps
 # * live_migration_downtime_delay
 #  (integer value)
-# Minimum value: 0
 # Note: This option can be changed without restarting.
 #live_migration_completion_timeout = 800
 
-#
-# This option will be used to determine what action will be taken against a
-# VM after ``live_migration_completion_timeout`` expires. By default, the live
-# migrate operation will be aborted after completion timeout. If it is set to
-# ``force_complete``, the compute service will either pause the VM or trigger
-# post-copy depending on if post copy is enabled and available
-# (``live_migration_permit_post_copy`` is set to True).
-#
-# Related options:
-#
-# * live_migration_completion_timeout
-# * live_migration_permit_post_copy
-#  (string value)
-# Possible values:
-# abort - <No description provided>
-# force_complete - <No description provided>
+# DEPRECATED:
+# Time to wait, in seconds, for migration to make forward progress in
+# transferring data before aborting the operation.
+#
+# Set to 0 to disable timeouts.
+#
+# This is deprecated, and now disabled by default because we have found serious
+# bugs in this feature that caused false live-migration timeout failures. This
+# feature will be removed or replaced in a future release.
+#  (integer value)
 # Note: This option can be changed without restarting.
-#live_migration_timeout_action = abort
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Serious bugs found in this feature.
+#live_migration_progress_timeout = 0
 
 #
 # This option allows nova to switch an on-going live migration to post-copy
@@ -6698,12 +6678,9 @@
 # migration is complete, therefore ensuring an upper bound on the memory that
 # needs to be transferred. Post-copy requires libvirt>=1.3.3 and QEMU>=2.5.0.
 #
-# When permitted, post-copy mode will be automatically activated if
-# we reach the timeout defined by ``live_migration_completion_timeout`` and
-# ``live_migration_timeout_action`` is set to 'force_complete'. Note if you
-# change to no timeout or choose to use 'abort',
-# i.e. ``live_migration_completion_timeout = 0``, then there will be no
-# automatic switch to post-copy.
+# When permitted, post-copy mode will be automatically activated if a
+# live-migration memory copy iteration does not make percentage increase of at
+# least 10% over the last iteration.
 #
 # The live-migration force complete API also uses post-copy when permitted. If
 # post-copy mode is not available, force complete falls back to pausing the VM
@@ -6715,8 +6692,7 @@
 #
 # Related options:
 #
-# * live_migration_permit_auto_converge
-# * live_migration_timeout_action
+#     * live_migration_permit_auto_converge
 #  (boolean value)
 #live_migration_permit_post_copy = false
 
@@ -6738,55 +6714,23 @@
 # Determine the snapshot image format when sending to the image service.
 #
 # If set, this decides what format is used when sending the snapshot to the
-# image service. If not set, defaults to same type as source image.
-#  (string value)
-# Possible values:
-# raw - RAW disk format
-# qcow2 - KVM default disk format
-# vmdk - VMWare default disk format
-# vdi - VirtualBox default disk format
+# image service.
+# If not set, defaults to same type as source image.
+#
+# Possible values:
+#
+# * ``raw``: RAW disk format
+# * ``qcow2``: KVM default disk format
+# * ``vmdk``: VMWare default disk format
+# * ``vdi``: VirtualBox default disk format
+# * If not set, defaults to same type as source image.
+#  (string value)
+# Possible values:
+# raw - <No description provided>
+# qcow2 - <No description provided>
+# vmdk - <No description provided>
+# vdi - <No description provided>
 #snapshot_image_format = <None>
-
-#
-# Use QEMU-native TLS encryption when live migrating.
-#
-# This option will allow both migration stream (guest RAM plus device
-# state) *and* disk stream to be transported over native TLS, i.e. TLS
-# support built into QEMU.
-#
-# Prerequisite: TLS environment is configured correctly on all relevant
-# Compute nodes.  This means, Certificate Authority (CA), server, client
-# certificates, their corresponding keys, and their file permisssions are
-# in place, and are validated.
-#
-# Notes:
-#
-# * To have encryption for migration stream and disk stream (also called:
-#   "block migration"), ``live_migration_with_native_tls`` is the
-#   preferred config attribute instead of ``live_migration_tunnelled``.
-#
-# * The ``live_migration_tunnelled`` will be deprecated in the long-term
-#   for two main reasons: (a) it incurs a huge performance penalty; and
-#   (b) it is not compatible with block migration.  Therefore, if your
-#   compute nodes have at least libvirt 4.4.0 and QEMU 2.11.0, it is
-#   strongly recommended to use ``live_migration_with_native_tls``.
-#
-# * The ``live_migration_tunnelled`` and
-#   ``live_migration_with_native_tls`` should not be used at the same
-#   time.
-#
-# * Unlike ``live_migration_tunnelled``, the
-#   ``live_migration_with_native_tls`` *is* compatible with block
-#   migration.  That is, with this option, NBD stream, over which disks
-#   are migrated to a target host, will be encrypted.
-#
-# Related options:
-#
-# ``live_migration_tunnelled``: This transports migration stream (but not
-# disk stream) over libvirtd.
-#
-#  (boolean value)
-#live_migration_with_native_tls = false
 
 #
 # Override the default disk prefix for the devices attached to an instance.
@@ -6815,8 +6759,18 @@
 #
 # Is used to set the CPU mode an instance should have.
 #
-# If ``virt_type="kvm|qemu"``, it will default to ``host-model``, otherwise it
-# will default to ``none``.
+# If virt_type="kvm|qemu", it will default to "host-model", otherwise it will
+# default to "none".
+#
+# Possible values:
+#
+# * ``host-model``: Clones the host CPU feature flags
+# * ``host-passthrough``: Use the host CPU model exactly
+# * ``custom``: Use a named CPU model
+# * ``none``: Don't set a specific CPU model. For instances with
+#   ``virt_type`` as KVM/QEMU, the default CPU model from QEMU will be used,
+#   which provides a basic set of CPU features that are compatible with most
+#   hosts.
 #
 # Related options:
 #
@@ -6825,13 +6779,11 @@
 #   will fail.
 #  (string value)
 # Possible values:
-# host-model - Clone the host CPU feature flags
-# host-passthrough - Use the host CPU model exactly
-# custom - Use the CPU model in ``[libvirt]cpu_model``
-# none - Don't set a specific CPU model. For instances with ``[libvirt]
-# virt_type`` as KVM/QEMU, the default CPU model from QEMU will be used, which
-# provides a basic set of CPU features that are compatible with most hosts
-#cpu_mode = <None>
+# host-model - <No description provided>
+# host-passthrough - <No description provided>
+# custom - <No description provided>
+# none - <No description provided>
+cpu_mode = host-passthrough
 
 #
 # Set the name of the libvirt CPU model the instance should use.
@@ -6976,7 +6928,7 @@
 #   speeding up guest installations, but you should switch to another caching
 #   mode in production environments.
 #  (list value)
-#disk_cachemodes =
+disk_cachemodes = "file=directsync,block=none"
 
 #
 # The path to an RNG (Random Number Generator) device that will be used as
@@ -6994,43 +6946,30 @@
 
 # For qemu or KVM guests, set this option to specify a default machine type per
 # host architecture. You can find a list of supported machine types in your
-# environment by checking the output of the "virsh capabilities" command. The
+# environment by checking the output of the "virsh capabilities"command. The
 # format of the value for this config option is host-arch=machine-type. For
 # example: x86_64=machinetype1,armv7l=machinetype2 (list value)
 #hw_machine_type = <None>
 
-#
 # The data source used to the populate the host "serial" UUID exposed to guest
-# in the virtual BIOS. All choices except ``unique`` will change the serial when
-# migrating the instance to another host. Changing the choice of this option
-# will
-# also affect existing instances on this host once they are stopped and started
-# again. It is recommended to use the default choice (``unique``) since that
-# will
-# not change when an instance is migrated. However, if you have a need for
-# per-host serials in addition to per-instance serial numbers, then consider
-# restricting flavors via host aggregates.
-#  (string value)
-# Possible values:
-# none - A serial number entry is not added to the guest domain xml.
-# os - A UUID serial number is generated from the host ``/etc/machine-id`` file.
-# hardware - A UUID for the host hardware as reported by libvirt. This is
-# typically from the host SMBIOS data, unless it has been overridden in
-# ``libvirtd.conf``.
-# auto - Uses the "os" source if possible, else "hardware".
-# unique - Uses instance UUID as the serial number.
-#sysinfo_serial = unique
+# in the virtual BIOS. (string value)
+# Possible values:
+# none - <No description provided>
+# os - <No description provided>
+# hardware - <No description provided>
+# auto - <No description provided>
+#sysinfo_serial = auto
 
 # A number of seconds to memory usage statistics period. Zero or negative value
 # mean to disable memory usage statistics. (integer value)
 #mem_stats_period_seconds = 10
 
-# List of uid targets and ranges.Syntax is guest-uid:host-uid:count. Maximum of
-# 5 allowed. (list value)
+# List of uid targets and ranges.Syntax is guest-uid:host-uid:countMaximum of 5
+# allowed. (list value)
 #uid_maps =
 
-# List of guid targets and ranges.Syntax is guest-gid:host-gid:count. Maximum of
-# 5 allowed. (list value)
+# List of guid targets and ranges.Syntax is guest-gid:host-gid:countMaximum of 5
+# allowed. (list value)
 #gid_maps =
 
 # In a realtime host context vCPUs for guest will run in that scheduling
@@ -7118,9 +7057,8 @@
 #
 # Related options:
 #
-# * compute.use_cow_images
+# * virt.use_cow_images
 # * images_volume_group
-# * [workarounds]/ensure_libvirt_rbd_instance_dir_cleanup
 #  (string value)
 # Possible values:
 # raw - <No description provided>
@@ -7132,15 +7070,6 @@
 # default - <No description provided>
 #images_type = default
 
-#
-# LVM Volume Group that is used for VM images, when you specify images_type=lvm
-#
-# Related options:
-#
-# * images_type
-#  (string value)
-#images_volume_group = <None>
-
 # DEPRECATED:
 # Create sparse logical volumes (with virtualsize) if this flag is set to True.
 #  (boolean value)
@@ -7153,12 +7082,6 @@
 # use Cinder thin-provisioned volumes.
 #sparse_logical_volumes = false
 
-# The RADOS pool in which rbd volumes are stored (string value)
-#images_rbd_pool = rbd
-
-# Path to the ceph configuration file to use (string value)
-#images_rbd_ceph_conf =
-
 #
 # Discard option for nova managed disks.
 #
@@ -7197,39 +7120,6 @@
 # Reason: The image cache no longer periodically calculates checksums of stored
 # images. Data integrity can be checked at the block or filesystem level.
 #checksum_interval_seconds = 3600
-
-#
-# Method used to wipe ephemeral disks when they are deleted. Only takes effect
-# if LVM is set as backing storage.
-#
-# Related options:
-#
-# * images_type - must be set to ``lvm``
-# * volume_clear_size
-#  (string value)
-# Possible values:
-# zero - Overwrite volumes with zeroes
-# shred - Overwrite volumes repeatedly
-# none - Do not wipe deleted volumes
-#volume_clear = zero
-
-#
-# Size of area in MiB, counting from the beginning of the allocated volume,
-# that will be cleared using method set in ``volume_clear`` option.
-#
-# Possible values:
-#
-# * 0 - clear whole volume
-# * >0 - clear specified amount of MiB
-#
-# Related options:
-#
-# * images_type - must be set to ``lvm``
-# * volume_clear - must be set and the value must be different than ``none``
-#   for this option to have any impact
-#  (integer value)
-# Minimum value: 0
-#volume_clear_size = 0
 
 #
 # Enable snapshot compression for ``qcow2`` images.
@@ -7301,19 +7191,6 @@
 # availability and fault tolerance.
 #  (boolean value)
 #iser_use_multipath = false
-
-#
-# The RADOS client name for accessing rbd(RADOS Block Devices) volumes.
-#
-# Libvirt will refer to this user when connecting and authenticating with
-# the Ceph RBD server.
-#  (string value)
-#rbd_user = <None>
-
-#
-# The libvirt UUID of the secret for the rbd_user volumes.
-#  (string value)
-#rbd_secret_uuid = <None>
 
 #
 # Directory where the NFS volume is mounted on the compute node.
@@ -7522,6 +7399,52 @@
 #num_nvme_discover_tries = 5
 
 
+[matchmaker_redis]
+
+#
+# From oslo.messaging
+#
+
+# DEPRECATED: Host to locate redis. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#host = 127.0.0.1
+
+# DEPRECATED: Use this port to connect to redis host. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#port = 6379
+
+# DEPRECATED: Password for Redis server (optional). (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#password =
+
+# DEPRECATED: List of Redis Sentinel hosts (fault tolerance mode), e.g.,
+# [host:port, host1:port ... ] (list value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#sentinel_hosts =
+
+# Redis replica set name. (string value)
+#sentinel_group_name = oslo-messaging-zeromq
+
+# Time in ms to wait between connection attempts. (integer value)
+#wait_timeout = 2000
+
+# Time in ms to wait before the transaction is killed. (integer value)
+#check_timeout = 20000
+
+# Timeout in ms on blocking socket operations. (integer value)
+#socket_timeout = 10000
+
+
 [metrics]
 #
 # Configuration options for metrics
@@ -7702,10 +7625,6 @@
 # Adapter configuration options. In the current release, "url" will override
 # this behavior, but will be ignored and/or removed in a future release. To
 # achieve the same result, use the endpoint_override option instead.
-#
-# This option has a sample default set, which means that
-# its actual default value may vary from the one documented
-# below.
 #url = http://127.0.0.1:9696
 
 #
@@ -7734,7 +7653,7 @@
 # extensions with no wait.
 #  (integer value)
 # Minimum value: 0
-#extension_sync_interval = 600
+extension_sync_interval = 600
 
 #
 # List of physnets present on this host.
@@ -7809,7 +7728,7 @@
 #insecure = false
 
 # Timeout value for http requests (integer value)
-#timeout = <None>
+timeout = 300
 
 # Collect per-API call timing information. (boolean value)
 #collect_timing = false
@@ -7819,13 +7738,13 @@
 
 # Authentication type to load (string value)
 # Deprecated group/name - [neutron]/auth_plugin
-#auth_type = <None>
+auth_type = v3password
 
 # Config Section from which to load plugin specific options (string value)
 #auth_section = <None>
 
 # Authentication URL (string value)
-#auth_url = <None>
+auth_url = http://172.16.10.36:35357/v3
 
 # Scope for system operations (string value)
 #system_scope = <None>
@@ -7840,13 +7759,13 @@
 #project_id = <None>
 
 # Project name to scope to (string value)
-#project_name = <None>
+project_name = service
 
 # Domain ID containing project (string value)
 #project_domain_id = <None>
 
 # Domain name containing project (string value)
-#project_domain_name = <None>
+project_domain_name = Default
 
 # Trust ID (string value)
 #trust_id = <None>
@@ -7866,16 +7785,16 @@
 
 # Username (string value)
 # Deprecated group/name - [neutron]/user_name
-#username = <None>
+username = neutron
 
 # User's domain id (string value)
 #user_domain_id = <None>
 
 # User's domain name (string value)
-#user_domain_name = <None>
+user_domain_name = Default
 
 # User's password (string value)
-#password = <None>
+password = opnfv_secret
 
 # Tenant ID (string value)
 #tenant_id = <None>
@@ -7893,7 +7812,7 @@
 #valid_interfaces = internal,public
 
 # The default region_name for endpoint URL discovery. (string value)
-#region_name = <None>
+region_name= RegionOne
 
 # Always use this endpoint URL for requests for this client. NOTE: The
 # unversioned endpoint should be specified here; to request a particular API
@@ -7920,16 +7839,23 @@
 # Please refer to
 # https://docs.openstack.org/nova/latest/reference/notifications.html for
 # additional information on notifications.
-#  (string value)
-# Possible values:
-# <None> - no notifications
-# vm_state - Notifications are sent with VM state transition information in the
-# ``old_state`` and ``state`` fields. The ``old_task_state`` and
-# ``new_task_state`` fields will be set to the current task_state of the
-# instance
-# vm_and_task_state - Notifications are sent with VM and task state transition
-# information
+#
+# Possible values:
+#
+# * None - no notifications
+# * "vm_state" - notifications are sent with VM state transition information in
+#   the ``old_state`` and ``state`` fields. The ``old_task_state`` and
+#   ``new_task_state`` fields will be set to the current task_state of the
+#   instance.
+# * "vm_and_task_state" - notifications are sent with VM and task state
+#   transition information.
+#  (string value)
+# Possible values:
+# <None> - <No description provided>
+# vm_state - <No description provided>
+# vm_and_task_state - <No description provided>
 #notify_on_state_change = <None>
+notify_on_state_change = vm_and_task_state
 
 # Default notification level for outgoing notifications. (string value)
 # Possible values:
@@ -7952,14 +7878,20 @@
 # Note that notifications can be completely disabled by setting ``driver=noop``
 # in the ``[oslo_messaging_notifications]`` group.
 #
+# Possible values:
+#
+# * unversioned: Only the legacy unversioned notifications are emitted.
+# * versioned: Only the new versioned notifications are emitted.
+# * both: Both the legacy unversioned and the new versioned notifications are
+#   emitted. (Default)
+#
 # The list of versioned notifications is visible in
 # https://docs.openstack.org/nova/latest/reference/notifications.html
 #  (string value)
 # Possible values:
-# both - Both the legacy unversioned and the new versioned notifications are
-# emitted
-# versioned - Only the new versioned notifications are emitted
-# unversioned - Only the legacy unversioned notifications are emitted
+# unversioned - <No description provided>
+# versioned - <No description provided>
+# both - <No description provided>
 #notification_format = both
 
 #
@@ -8026,264 +7958,16 @@
 #lock_path = <None>
 
 
-[oslo_messaging_amqp]
-
+[oslo_messaging_notifications]
 #
 # From oslo.messaging
 #
 
-# Name for the AMQP container. must be globally unique. Defaults to a generated
-# UUID (string value)
-#container_name = <None>
-
-# Timeout for inactive connections (in seconds) (integer value)
-#idle_timeout = 0
-
-# Debug: dump AMQP frames to stdout (boolean value)
-#trace = false
-
-# Attempt to connect via SSL. If no other ssl-related parameters are given, it
-# will use the system's CA-bundle to verify the server's certificate. (boolean
-# value)
-#ssl = false
-
-# CA certificate PEM file used to verify the server's certificate (string value)
-#ssl_ca_file =
-
-# Self-identifying certificate PEM file for client authentication (string value)
-#ssl_cert_file =
-
-# Private key PEM file used to sign ssl_cert_file certificate (optional) (string
-# value)
-#ssl_key_file =
-
-# Password for decrypting ssl_key_file (if encrypted) (string value)
-#ssl_key_password = <None>
-
-# By default SSL checks that the name in the server's certificate matches the
-# hostname in the transport_url. In some configurations it may be preferable to
-# use the virtual hostname instead, for example if the server uses the Server
-# Name Indication TLS extension (rfc6066) to provide a certificate per virtual
-# host. Set ssl_verify_vhost to True if the server's SSL certificate uses the
-# virtual host name instead of the DNS name. (boolean value)
-#ssl_verify_vhost = false
-
-# Space separated list of acceptable SASL mechanisms (string value)
-#sasl_mechanisms =
-
-# Path to directory that contains the SASL configuration (string value)
-#sasl_config_dir =
-
-# Name of configuration file (without .conf suffix) (string value)
-#sasl_config_name =
-
-# SASL realm to use if no realm present in username (string value)
-#sasl_default_realm =
-
-# Seconds to pause before attempting to re-connect. (integer value)
-# Minimum value: 1
-#connection_retry_interval = 1
-
-# Increase the connection_retry_interval by this many seconds after each
-# unsuccessful failover attempt. (integer value)
-# Minimum value: 0
-#connection_retry_backoff = 2
-
-# Maximum limit for connection_retry_interval + connection_retry_backoff
-# (integer value)
-# Minimum value: 1
-#connection_retry_interval_max = 30
-
-# Time to pause between re-connecting an AMQP 1.0 link that failed due to a
-# recoverable error. (integer value)
-# Minimum value: 1
-#link_retry_delay = 10
-
-# The maximum number of attempts to re-send a reply message which failed due to
-# a recoverable error. (integer value)
-# Minimum value: -1
-#default_reply_retry = 0
-
-# The deadline for an rpc reply message delivery. (integer value)
-# Minimum value: 5
-#default_reply_timeout = 30
-
-# The deadline for an rpc cast or call message delivery. Only used when caller
-# does not provide a timeout expiry. (integer value)
-# Minimum value: 5
-#default_send_timeout = 30
-
-# The deadline for a sent notification message delivery. Only used when caller
-# does not provide a timeout expiry. (integer value)
-# Minimum value: 5
-#default_notify_timeout = 30
-
-# The duration to schedule a purge of idle sender links. Detach link after
-# expiry. (integer value)
-# Minimum value: 1
-#default_sender_link_timeout = 600
-
-# Indicates the addressing mode used by the driver.
-# Permitted values:
-# 'legacy'   - use legacy non-routable addressing
-# 'routable' - use routable addresses
-# 'dynamic'  - use legacy addresses if the message bus does not support routing
-# otherwise use routable addressing (string value)
-#addressing_mode = dynamic
-
-# Enable virtual host support for those message buses that do not natively
-# support virtual hosting (such as qpidd). When set to true the virtual host
-# name will be added to all message bus addresses, effectively creating a
-# private 'subnet' per virtual host. Set to False if the message bus supports
-# virtual hosting using the 'hostname' field in the AMQP 1.0 Open performative
-# as the name of the virtual host. (boolean value)
-#pseudo_vhost = true
-
-# address prefix used when sending to a specific server (string value)
-#server_request_prefix = exclusive
-
-# address prefix used when broadcasting to all servers (string value)
-#broadcast_prefix = broadcast
-
-# address prefix when sending to any server in group (string value)
-#group_request_prefix = unicast
-
-# Address prefix for all generated RPC addresses (string value)
-#rpc_address_prefix = openstack.org/om/rpc
-
-# Address prefix for all generated Notification addresses (string value)
-#notify_address_prefix = openstack.org/om/notify
-
-# Appended to the address prefix when sending a fanout message. Used by the
-# message bus to identify fanout messages. (string value)
-#multicast_address = multicast
-
-# Appended to the address prefix when sending to a particular RPC/Notification
-# server. Used by the message bus to identify messages sent to a single
-# destination. (string value)
-#unicast_address = unicast
-
-# Appended to the address prefix when sending to a group of consumers. Used by
-# the message bus to identify messages that should be delivered in a round-robin
-# fashion across consumers. (string value)
-#anycast_address = anycast
-
-# Exchange name used in notification addresses.
-# Exchange name resolution precedence:
-# Target.exchange if set
-# else default_notification_exchange if set
-# else control_exchange if set
-# else 'notify' (string value)
-#default_notification_exchange = <None>
-
-# Exchange name used in RPC addresses.
-# Exchange name resolution precedence:
-# Target.exchange if set
-# else default_rpc_exchange if set
-# else control_exchange if set
-# else 'rpc' (string value)
-#default_rpc_exchange = <None>
-
-# Window size for incoming RPC Reply messages. (integer value)
-# Minimum value: 1
-#reply_link_credit = 200
-
-# Window size for incoming RPC Request messages (integer value)
-# Minimum value: 1
-#rpc_server_credit = 100
-
-# Window size for incoming Notification messages (integer value)
-# Minimum value: 1
-#notify_server_credit = 100
-
-# Send messages of this type pre-settled.
-# Pre-settled messages will not receive acknowledgement
-# from the peer. Note well: pre-settled messages may be
-# silently discarded if the delivery fails.
-# Permitted values:
-# 'rpc-call' - send RPC Calls pre-settled
-# 'rpc-reply'- send RPC Replies pre-settled
-# 'rpc-cast' - Send RPC Casts pre-settled
-# 'notify'   - Send Notifications pre-settled
-#  (multi valued)
-#pre_settled = rpc-cast
-#pre_settled = rpc-reply
-
-
-[oslo_messaging_kafka]
-
-#
-# From oslo.messaging
-#
-
-# Max fetch bytes of Kafka consumer (integer value)
-#kafka_max_fetch_bytes = 1048576
-
-# Default timeout(s) for Kafka consumers (floating point value)
-#kafka_consumer_timeout = 1.0
-
-# DEPRECATED: Pool Size for Kafka Consumers (integer value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#pool_size = 10
-
-# DEPRECATED: The pool size limit for connections expiration policy (integer
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#conn_pool_min_size = 2
-
-# DEPRECATED: The time-to-live in sec of idle connections in the pool (integer
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#conn_pool_ttl = 1200
-
-# Group id for Kafka consumer. Consumers in one group will coordinate message
-# consumption (string value)
-#consumer_group = oslo_messaging_consumer
-
-# Upper bound on the delay for KafkaProducer batching in seconds (floating point
-# value)
-#producer_batch_timeout = 0.0
-
-# Size of batch for the producer async send (integer value)
-#producer_batch_size = 16384
-
-# Enable asynchronous consumer commits (boolean value)
-#enable_auto_commit = false
-
-# The maximum number of records returned in a poll call (integer value)
-#max_poll_records = 500
-
-# Protocol used to communicate with brokers (string value)
-# Possible values:
-# PLAINTEXT - <No description provided>
-# SASL_PLAINTEXT - <No description provided>
-# SSL - <No description provided>
-# SASL_SSL - <No description provided>
-#security_protocol = PLAINTEXT
-
-# Mechanism when security protocol is SASL (string value)
-#sasl_mechanism = PLAIN
-
-# CA certificate PEM file used to verify the server certificate (string value)
-#ssl_cafile =
-
-
-[oslo_messaging_notifications]
-
-#
-# From oslo.messaging
-#
-
-# The Drivers(s) to handle sending notifications. Possible values are messaging,
-# messagingv2, routing, log, test, noop (multi valued)
+# The Drivers(s) to handle sending notifications. Possible values are
+# messaging, messagingv2, routing, log, test, noop (multi valued)
 # Deprecated group/name - [DEFAULT]/notification_driver
 #driver =
+driver = messagingv2
 
 # A URL representing the messaging driver to use for notifications. If not set,
 # we fall back to the same configuration used for RPC. (string value)
@@ -8299,15 +7983,14 @@
 # to be delivered due to a recoverable error. 0 - No retry, -1 - indefinite
 # (integer value)
 #retry = -1
-
-
 [oslo_messaging_rabbit]
-
 #
 # From oslo.messaging
 #
 
 # Use durable queues in AMQP. (boolean value)
+# Deprecated group/name - [DEFAULT]/amqp_durable_queues
+# Deprecated group/name - [DEFAULT]/rabbit_durable_queues
 #amqp_durable_queues = false
 
 # Auto-delete queues in AMQP. (boolean value)
@@ -8316,24 +7999,6 @@
 # Connect over SSL. (boolean value)
 # Deprecated group/name - [oslo_messaging_rabbit]/rabbit_use_ssl
 #ssl = false
-
-# SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and
-# SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some
-# distributions. (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_version
-#ssl_version =
-
-# SSL key file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_keyfile
-#ssl_key_file =
-
-# SSL cert file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_certfile
-#ssl_cert_file =
-
-# SSL certification authority file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_ca_certs
-#ssl_ca_file =
 
 # How long to wait before reconnecting in response to an AMQP consumer cancel
 # notification. (floating point value)
@@ -8349,12 +8014,46 @@
 #kombu_missing_consumer_retry_timeout = 60
 
 # Determines how the next RabbitMQ node is chosen in case the one we are
-# currently connected to becomes unavailable. Takes effect only if more than one
-# RabbitMQ node is provided in config. (string value)
+# currently connected to becomes unavailable. Takes effect only if more than
+# one RabbitMQ node is provided in config. (string value)
 # Possible values:
 # round-robin - <No description provided>
 # shuffle - <No description provided>
 #kombu_failover_strategy = round-robin
+
+# DEPRECATED: The RabbitMQ broker address where a single node is used. (string
+# value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_host = localhost
+
+# DEPRECATED: The RabbitMQ broker port where a single node is used. (port
+# value)
+# Minimum value: 0
+# Maximum value: 65535
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_port = 5672
+
+# DEPRECATED: RabbitMQ HA cluster host:port pairs. (list value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_hosts = $rabbit_host:$rabbit_port
+
+# DEPRECATED: The RabbitMQ userid. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_userid = guest
+
+# DEPRECATED: The RabbitMQ password. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_password = guest
 
 # The RabbitMQ login method. (string value)
 # Possible values:
@@ -8363,6 +8062,12 @@
 # RABBIT-CR-DEMO - <No description provided>
 #rabbit_login_method = AMQPLAIN
 
+# DEPRECATED: The RabbitMQ virtual host. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_virtual_host = /
+
 # How frequently to retry connecting with RabbitMQ. (integer value)
 #rabbit_retry_interval = 1
 
@@ -8374,22 +8079,28 @@
 # (integer value)
 #rabbit_interval_max = 30
 
+# DEPRECATED: Maximum number of RabbitMQ connection retries. Default is 0
+# (infinite retry count). (integer value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#rabbit_max_retries = 0
+
 # Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change this
 # option, you must wipe the RabbitMQ database. In RabbitMQ 3.0, queue mirroring
-# is no longer controlled by the x-ha-policy argument when declaring a queue. If
-# you just want to make sure that all queues (except those with auto-generated
-# names) are mirrored across all nodes, run: "rabbitmqctl set_policy HA
-# '^(?!amq\.).*' '{"ha-mode": "all"}' " (boolean value)
+# is no longer controlled by the x-ha-policy argument when declaring a queue.
+# If you just want to make sure that all queues (except those with auto-
+# generated names) are mirrored across all nodes, run: "rabbitmqctl set_policy
+# HA '^(?!amq\.).*' '{"ha-mode": "all"}' " (boolean value)
 #rabbit_ha_queues = false
 
 # Positive integer representing duration in seconds for queue TTL (x-expires).
-# Queues which are unused for the duration of the TTL are automatically deleted.
-# The parameter affects only reply and fanout queues. (integer value)
+# Queues which are unused for the duration of the TTL are automatically
+# deleted. The parameter affects only reply and fanout queues. (integer value)
 # Minimum value: 1
 #rabbit_transient_queues_ttl = 1800
 
-# Specifies the number of messages to prefetch. Setting to zero allows unlimited
-# messages. (integer value)
+# Specifies the number of messages to prefetch. Setting to zero allows
+# unlimited messages. (integer value)
 #rabbit_qos_prefetch_count = 0
 
 # Number of seconds after which the Rabbit broker is considered down if
@@ -8397,13 +8108,13 @@
 # value)
 #heartbeat_timeout_threshold = 60
 
-# How often times during the heartbeat_timeout_threshold we check the heartbeat.
-# (integer value)
+# How often times during the heartbeat_timeout_threshold we check the
+# heartbeat. (integer value)
 #heartbeat_rate = 2
 
 
+
 [oslo_middleware]
-
 #
 # From oslo.middleware
 #
@@ -8414,8 +8125,8 @@
 #max_request_body_size = 114688
 
 # DEPRECATED: The HTTP Header that will be used to determine what the original
-# request protocol scheme was, even if it was hidden by a SSL termination proxy.
-# (string value)
+# request protocol scheme was, even if it was hidden by a SSL termination
+# proxy. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 #secure_proxy_ssl_header = X-Forwarded-Proto
@@ -8423,53 +8134,11 @@
 # Whether the application is behind a proxy or not. This determines if the
 # middleware should parse the headers or not. (boolean value)
 #enable_proxy_headers_parsing = false
+enable_proxy_headers_parsing = True
+
 
 
 [oslo_policy]
-
-#
-# From oslo.policy
-#
-
-# This option controls whether or not to enforce scope when evaluating policies.
-# If ``True``, the scope of the token used in the request is compared to the
-# ``scope_types`` of the policy being enforced. If the scopes do not match, an
-# ``InvalidScope`` exception will be raised. If ``False``, a message will be
-# logged informing operators that policies are being invoked with mismatching
-# scope. (boolean value)
-#enforce_scope = false
-
-# The file that defines policies. (string value)
-#policy_file = policy.json
-
-# Default rule. Enforced when a requested rule is not found. (string value)
-#policy_default_rule = default
-
-# Directories where policy configuration files are stored. They can be relative
-# to any directory in the search path defined by the config_dir option, or
-# absolute paths. The file defined by policy_file must exist for these
-# directories to be searched.  Missing or empty directories are ignored. (multi
-# valued)
-#policy_dirs = policy.d
-
-# Content Type to send and receive data for REST based policy check (string
-# value)
-# Possible values:
-# application/x-www-form-urlencoded - <No description provided>
-# application/json - <No description provided>
-#remote_content_type = application/x-www-form-urlencoded
-
-# server identity verification for REST based policy check (boolean value)
-#remote_ssl_verify_server_crt = false
-
-# Absolute path to ca cert file for REST based policy check (string value)
-#remote_ssl_ca_crt_file = <None>
-
-# Absolute path to client cert for REST based policy check (string value)
-#remote_ssl_client_crt_file = <None>
-
-# Absolute path client key file REST based policy check (string value)
-#remote_ssl_client_key_file = <None>
 
 
 [pci]
@@ -8485,12 +8154,9 @@
 # without
 # needing to repeat all the PCI property requirements.
 #
-# This should be configured for the ``nova-api`` service and, assuming you wish
-# to use move operations, for each ``nova-compute`` service.
-#
 # Possible Values:
 #
-# * A dictionary of JSON values which describe the aliases. For example::
+# * A list of JSON values which describe the aliases. For example::
 #
 #     alias = {
 #       "name": "QuickAssist",
@@ -8519,24 +8185,6 @@
 #   ``numa_policy``
 #     Required NUMA affinity of device. Valid values are: ``legacy``,
 #     ``preferred`` and ``required``.
-#
-# * Supports multiple aliases by repeating the option (not by specifying
-#   a list value)::
-#
-#     alias = {
-#       "name": "QuickAssist-1",
-#       "product_id": "0443",
-#       "vendor_id": "8086",
-#       "device_type": "type-PCI",
-#       "numa_policy": "required"
-#     }
-#     alias = {
-#       "name": "QuickAssist-2",
-#       "product_id": "0444",
-#       "vendor_id": "8086",
-#       "device_type": "type-PCI",
-#       "numa_policy": "required"
-#     }
 #  (multi valued)
 # Deprecated group/name - [DEFAULT]/pci_alias
 #alias =
@@ -8622,7 +8270,6 @@
 
 
 [placement]
-os_region_name = openstack
 
 #
 # From nova.conf
@@ -8684,13 +8331,13 @@
 
 # Authentication type to load (string value)
 # Deprecated group/name - [placement]/auth_plugin
-#auth_type = <None>
+auth_type = password
 
 # Config Section from which to load plugin specific options (string value)
 #auth_section = <None>
 
 # Authentication URL (string value)
-#auth_url = <None>
+auth_url = http://172.16.10.36:35357/v3
 
 # Scope for system operations (string value)
 #system_scope = <None>
@@ -8705,10 +8352,10 @@
 #project_id = <None>
 
 # Project name to scope to (string value)
-#project_name = <None>
+project_name = service
 
 # Domain ID containing project (string value)
-#project_domain_id = <None>
+project_domain_id = default
 
 # Domain name containing project (string value)
 #project_domain_name = <None>
@@ -8731,16 +8378,16 @@
 
 # Username (string value)
 # Deprecated group/name - [placement]/user_name
-#username = <None>
+username = nova
 
 # User's domain id (string value)
-#user_domain_id = <None>
+user_domain_id = default
 
 # User's domain name (string value)
 #user_domain_name = <None>
 
 # User's password (string value)
-#password = <None>
+password = opnfv_secret
 
 # Tenant ID (string value)
 #tenant_id = <None>
@@ -8755,10 +8402,10 @@
 #service_name = <None>
 
 # List of interfaces, in order of preference, for endpoint URL. (list value)
-#valid_interfaces = internal,public
+valid_interfaces = internal
 
 # The default region_name for endpoint URL discovery. (string value)
-#region_name = <None>
+region_name = RegionOne
 
 # Always use this endpoint URL for requests for this client. NOTE: The
 # unversioned endpoint should be specified here; to request a particular API
@@ -8869,37 +8516,6 @@
 # failures.
 #  (string value)
 #volume_group_name =
-
-
-[privsep]
-# Configuration options for the oslo.privsep daemon. Note that this group name
-# can be changed by the consuming service. Check the service's docs to see if
-# this is the case.
-
-#
-# From oslo.privsep
-#
-
-# User that the privsep daemon should run as. (string value)
-#user = <None>
-
-# Group that the privsep daemon should run as. (string value)
-#group = <None>
-
-# List of Linux capabilities retained by the privsep daemon. (list value)
-#capabilities =
-
-# The number of threads available for privsep to concurrently run processes.
-# Defaults to the number of CPU cores in the system. (integer value)
-# Minimum value: 1
-#thread_pool_size = 4
-
-# Command to invoke to start the privsep daemon if not using the "fork" method.
-# If not specified, a default is generated using "sudo privsep-helper" and
-# arguments designed to recreate the current configuration. This command must
-# accept suitable --privsep_context and --privsep_sock_path arguments. (string
-# value)
-#helper_command = <None>
 
 
 [profiler]
@@ -9240,15 +8856,48 @@
 #server_group_members = 10
 
 #
+# The number of seconds until a reservation expires.
+#
+# This quota represents the time period for invalidating quota reservations.
+#  (integer value)
+#reservation_expire = 86400
+
+#
+# The count of reservations until usage is refreshed.
+#
+# This defaults to 0 (off) to avoid additional load but it is useful to turn on
+# to help keep quota usage up-to-date and reduce the impact of out of sync usage
+# issues.
+#  (integer value)
+# Minimum value: 0
+#until_refresh = 0
+
+#
+# The number of seconds between subsequent usage refreshes.
+#
+# This defaults to 0 (off) to avoid additional load but it is useful to turn on
+# to help keep quota usage up-to-date and reduce the impact of out of sync usage
+# issues. Note that quotas are not updated on a periodic task, they will update
+# on a new reservation if max_age has passed since the last reservation.
+#  (integer value)
+# Minimum value: 0
+#max_age = 0
+
+#
 # Provides abstraction for quota checks. Users can configure a specific
 # driver to use for quota checks.
-#  (string value)
-# Possible values:
-# nova.quota.DbQuotaDriver - Stores quota limit information in the database and
-# relies on the ``quota_*`` configuration options for default quota limit
-# values. Counts quota usage on-demand.
-# nova.quota.NoopQuotaDriver - Ignores quota and treats all resources as
-# unlimited.
+#
+# Possible values:
+#
+# * nova.quota.DbQuotaDriver: Stores quota limit information
+#   in the database and relies on the quota_* configuration options for default
+#   quota limit values. Counts quota usage on-demand.
+# * nova.quota.NoopQuotaDriver: Ignores quota and treats all resources as
+#   unlimited.
+#  (string value)
+# Possible values:
+# nova.quota.DbQuotaDriver - <No description provided>
+# nova.quota.NoopQuotaDriver - <No description provided>
 #driver = nova.quota.DbQuotaDriver
 
 #
@@ -9407,6 +9056,10 @@
 #
 # Other options are:
 #
+# * 'caching_scheduler' which aggressively caches the system state for better
+#   individual scheduler performance at the risk of more retries when running
+#   multiple schedulers. [DEPRECATED]
+# * 'chance_scheduler' which simply picks a host at random. [DEPRECATED]
 # * 'fake_scheduler' which is used for testing.
 #
 # Possible values:
@@ -9414,6 +9067,8 @@
 # * Any of the drivers included in Nova:
 #
 #   * filter_scheduler
+#   * caching_scheduler
+#   * chance_scheduler
 #   * fake_scheduler
 #
 # * You may also set this to the entry point name of a custom scheduler driver,
@@ -9433,8 +9088,8 @@
 #
 # This value controls how often (in seconds) to run periodic tasks in the
 # scheduler. The specific tasks that are run for each period are determined by
-# the particular scheduler being used. Currently there are no in-tree scheduler
-# driver that use this option.
+# the particular scheduler being used. Currently the only in-tree scheduler
+# driver that uses this option is the ``caching_scheduler``.
 #
 # If this is larger than the nova-service 'service_down_time' setting, the
 # ComputeFilter (if enabled) may think the compute service is down. As each
@@ -9584,8 +9239,7 @@
 #
 # Possible values:
 #
-# * Each string which passes the regex ``^\d+:\d+$`` For example
-# ``10000:20000``.
+# * Each string which passes the regex ``\d+:\d+`` For example ``10000:20000``.
 #   Be sure that the first port number is lower than the second port number
 #   and that both are in range from 0 to 65535.
 #  (string value)
@@ -9675,62 +9329,41 @@
 # middleware.
 #  (boolean value)
 #send_service_user_token = false
-
-# PEM encoded Certificate Authority to use when verifying HTTPs connections.
+send_service_user_token = True
+# Name of nova region to use. Useful if keystone manages more than one region.
 # (string value)
-#cafile = <None>
-
-# PEM encoded client certificate cert file (string value)
-#certfile = <None>
-
-# PEM encoded client certificate key file (string value)
-#keyfile = <None>
-
-# Verify HTTPS connections. (boolean value)
-#insecure = false
-
-# Timeout value for http requests (integer value)
-#timeout = <None>
-
-# Collect per-API call timing information. (boolean value)
-#collect_timing = false
-
-# Log requests to multiple loggers. (boolean value)
-#split_loggers = false
-
-# Authentication type to load (string value)
-# Deprecated group/name - [service_user]/auth_plugin
-#auth_type = <None>
-
-# Config Section from which to load plugin specific options (string value)
-#auth_section = <None>
+#region_name = <None>
+region_name = RegionOne
+
+# Type of the nova endpoint to use.  This endpoint will be looked up in the
+# keystone catalog and should be one of public, internal or admin. (string
+# value)
+# Possible values:
+# public - <No description provided>
+# admin - <No description provided>
+# internal - <No description provided>
+#endpoint_type = public
+endpoint_type = internal
+
+# API version of the admin Identity API endpoint. (string value)
+#auth_version = <None>
+
 
 # Authentication URL (string value)
 #auth_url = <None>
-
-# Scope for system operations (string value)
-#system_scope = <None>
-
-# Domain ID to scope to (string value)
-#domain_id = <None>
-
-# Domain name to scope to (string value)
-#domain_name = <None>
-
-# Project ID to scope to (string value)
-#project_id = <None>
-
-# Project name to scope to (string value)
-#project_name = <None>
-
-# Domain ID containing project (string value)
-#project_domain_id = <None>
-
-# Domain name containing project (string value)
-#project_domain_name = <None>
-
-# Trust ID (string value)
-#trust_id = <None>
+auth_url = http://172.16.10.36:5000
+
+# Authentication type to load (string value)
+# Deprecated group/name - [nova]/auth_plugin
+#auth_type = <None>
+auth_type = password
+
+# Required if identity server requires client certificate (string value)
+#certfile = <None>
+
+# A PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# Defaults to system CAs. (string value)
+#cafile = <None>
 
 # Optional domain ID to use with v3 and v2 parameters. It will be used for both
 # the user and project domain in v3 and ignored in v2 authentication. (string
@@ -9742,27 +9375,65 @@
 # (string value)
 #default_domain_name = <None>
 
+# Domain ID to scope to (string value)
+#domain_id = <None>
+
+# Domain name to scope to (string value)
+#domain_name = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# Required if identity server requires client certificate (string value)
+#keyfile = <None>
+
+# User's password (string value)
+#password = <None>
+password = opnfv_secret
+
+# Domain ID containing project (string value)
+#project_domain_id = <None>
+project_domain_id = default
+
+# Domain name containing project (string value)
+#project_domain_name = <None>
+
+# Project ID to scope to (string value)
+#project_id = <None>
+
+# Project name to scope to (string value)
+#project_name = <None>
+project_name = service
+
+# Scope for system operations (string value)
+#system_scope = <None>
+
+# Tenant ID (string value)
+#tenant_id = <None>
+
+# Tenant Name (string value)
+#tenant_name = <None>
+
+# Timeout value for http requests (integer value)
+#timeout = <None>
+
+# Trust ID (string value)
+#trust_id = <None>
+
+# User's domain id (string value)
+#user_domain_id = <None>
+user_domain_id = default
+
+# User's domain name (string value)
+#user_domain_name = <None>
+
 # User ID (string value)
 #user_id = <None>
 
 # Username (string value)
-# Deprecated group/name - [service_user]/user_name
+# Deprecated group/name - [neutron]/user_name
 #username = <None>
-
-# User's domain id (string value)
-#user_domain_id = <None>
-
-# User's domain name (string value)
-#user_domain_name = <None>
-
-# User's password (string value)
-#password = <None>
-
-# Tenant ID (string value)
-#tenant_id = <None>
-
-# Tenant Name (string value)
-#tenant_name = <None>
+username = nova
 
 
 [spice]
@@ -9833,6 +9504,7 @@
 #   and port where the ``nova-spicehtml5proxy`` service is listening.
 #  (uri value)
 #html5proxy_base_url = http://127.0.0.1:6082/spice_auto.html
+html5proxy_base_url = http://10.16.0.107:6080/spice_auto.html
 
 #
 # The  address where the SPICE server running on the instances should listen.
@@ -10101,15 +9773,6 @@
 # root token for vault (string value)
 #root_token_id = <None>
 
-# AppRole role_id for authentication with vault (string value)
-#approle_role_id = <None>
-
-# AppRole secret_id for authentication with vault (string value)
-#approle_secret_id = <None>
-
-# Mountpoint of KV store in Vault to use, for example: secret (string value)
-#kv_mountpoint = secret
-
 # Use this endpoint to connect to Vault, for example: "http://127.0.0.1:8200"
 # (string value)
 #vault_url = http://127.0.0.1:8200
@@ -10217,287 +9880,6 @@
 
 # Tenant Name (string value)
 #tenant_name = <None>
-
-
-[vmware]
-#
-# Related options:
-# Following options must be set in order to launch VMware-based
-# virtual machines.
-#
-# * compute_driver: Must use vmwareapi.VMwareVCDriver.
-# * vmware.host_username
-# * vmware.host_password
-# * vmware.cluster_name
-
-#
-# From nova.conf
-#
-
-#
-# This option specifies the physical ethernet adapter name for VLAN
-# networking.
-#
-# Set the vlan_interface configuration option to match the ESX host
-# interface that handles VLAN-tagged VM traffic.
-#
-# Possible values:
-#
-# * Any valid string representing VLAN interface name
-#  (string value)
-#vlan_interface = vmnic0
-
-#
-# This option should be configured only when using the NSX-MH Neutron
-# plugin. This is the name of the integration bridge on the ESXi server
-# or host. This should not be set for any other Neutron plugin. Hence
-# the default value is not set.
-#
-# Possible values:
-#
-# * Any valid string representing the name of the integration bridge
-#  (string value)
-#integration_bridge = <None>
-
-#
-# Set this value if affected by an increased network latency causing
-# repeated characters when typing in a remote console.
-#  (integer value)
-# Minimum value: 0
-#console_delay_seconds = <None>
-
-#
-# Identifies the remote system where the serial port traffic will
-# be sent.
-#
-# This option adds a virtual serial port which sends console output to
-# a configurable service URI. At the service URI address there will be
-# virtual serial port concentrator that will collect console logs.
-# If this is not set, no serial ports will be added to the created VMs.
-#
-# Possible values:
-#
-# * Any valid URI
-#  (string value)
-#serial_port_service_uri = <None>
-
-#
-# Identifies a proxy service that provides network access to the
-# serial_port_service_uri.
-#
-# Possible values:
-#
-# * Any valid URI (The scheme is 'telnet' or 'telnets'.)
-#
-# Related options:
-# This option is ignored if serial_port_service_uri is not specified.
-# * serial_port_service_uri
-#  (uri value)
-#serial_port_proxy_uri = <None>
-
-#
-# Specifies the directory where the Virtual Serial Port Concentrator is
-# storing console log files. It should match the 'serial_log_dir' config
-# value of VSPC.
-#  (string value)
-#serial_log_dir = /opt/vmware/vspc
-
-#
-# Hostname or IP address for connection to VMware vCenter host. (host address
-# value)
-#host_ip = <None>
-
-# Port for connection to VMware vCenter host. (port value)
-# Minimum value: 0
-# Maximum value: 65535
-#host_port = 443
-
-# Username for connection to VMware vCenter host. (string value)
-#host_username = <None>
-
-# Password for connection to VMware vCenter host. (string value)
-#host_password = <None>
-
-#
-# Specifies the CA bundle file to be used in verifying the vCenter
-# server certificate.
-#  (string value)
-#ca_file = <None>
-
-#
-# If true, the vCenter server certificate is not verified. If false,
-# then the default CA truststore is used for verification.
-#
-# Related options:
-# * ca_file: This option is ignored if "ca_file" is set.
-#  (boolean value)
-#insecure = false
-
-# Name of a VMware Cluster ComputeResource. (string value)
-#cluster_name = <None>
-
-#
-# Regular expression pattern to match the name of datastore.
-#
-# The datastore_regex setting specifies the datastores to use with
-# Compute. For example, datastore_regex="nas.*" selects all the data
-# stores that have a name starting with "nas".
-#
-# NOTE: If no regex is given, it just picks the datastore with the
-# most freespace.
-#
-# Possible values:
-#
-# * Any matching regular expression to a datastore must be given
-#  (string value)
-#datastore_regex = <None>
-
-#
-# Time interval in seconds to poll remote tasks invoked on
-# VMware VC server.
-#  (floating point value)
-#task_poll_interval = 0.5
-
-#
-# Number of times VMware vCenter server API must be retried on connection
-# failures, e.g. socket error, etc.
-#  (integer value)
-# Minimum value: 0
-#api_retry_count = 10
-
-#
-# This option specifies VNC starting port.
-#
-# Every VM created by ESX host has an option of enabling VNC client
-# for remote connection. Above option 'vnc_port' helps you to set
-# default starting port for the VNC client.
-#
-# Possible values:
-#
-# * Any valid port number within 5900 -(5900 + vnc_port_total)
-#
-# Related options:
-# Below options should be set to enable VNC client.
-# * vnc.enabled = True
-# * vnc_port_total
-#  (port value)
-# Minimum value: 0
-# Maximum value: 65535
-#vnc_port = 5900
-
-#
-# Total number of VNC ports.
-#  (integer value)
-# Minimum value: 0
-#vnc_port_total = 10000
-
-#
-# Keymap for VNC.
-#
-# The keyboard mapping (keymap) determines which keyboard layout a VNC
-# session should use by default.
-#
-# Possible values:
-#
-# * A keyboard layout which is supported by the underlying hypervisor on
-#   this node. This is usually an 'IETF language tag' (for example
-#   'en-us').
-#  (string value)
-#vnc_keymap = en-us
-
-#
-# This option enables/disables the use of linked clone.
-#
-# The ESX hypervisor requires a copy of the VMDK file in order to boot
-# up a virtual machine. The compute driver must download the VMDK via
-# HTTP from the OpenStack Image service to a datastore that is visible
-# to the hypervisor and cache it. Subsequent virtual machines that need
-# the VMDK use the cached version and don't have to copy the file again
-# from the OpenStack Image service.
-#
-# If set to false, even with a cached VMDK, there is still a copy
-# operation from the cache location to the hypervisor file directory
-# in the shared datastore. If set to true, the above copy operation
-# is avoided as it creates copy of the virtual machine that shares
-# virtual disks with its parent VM.
-#  (boolean value)
-#use_linked_clone = true
-
-#
-# This option sets the http connection pool size
-#
-# The connection pool size is the maximum number of connections from nova to
-# vSphere.  It should only be increased if there are warnings indicating that
-# the connection pool is full, otherwise, the default should suffice.
-#  (integer value)
-# Minimum value: 10
-#connection_pool_size = 10
-
-#
-# This option enables or disables storage policy based placement
-# of instances.
-#
-# Related options:
-#
-# * pbm_default_policy
-#  (boolean value)
-#pbm_enabled = false
-
-#
-# This option specifies the PBM service WSDL file location URL.
-#
-# Setting this will disable storage policy based placement
-# of instances.
-#
-# Possible values:
-#
-# * Any valid file path
-#   e.g file:///opt/SDK/spbm/wsdl/pbmService.wsdl
-#  (string value)
-#pbm_wsdl_location = <None>
-
-#
-# This option specifies the default policy to be used.
-#
-# If pbm_enabled is set and there is no defined storage policy for the
-# specific request, then this policy will be used.
-#
-# Possible values:
-#
-# * Any valid storage policy such as VSAN default storage policy
-#
-# Related options:
-#
-# * pbm_enabled
-#  (string value)
-#pbm_default_policy = <None>
-
-#
-# This option specifies the limit on the maximum number of objects to
-# return in a single result.
-#
-# A positive value will cause the operation to suspend the retrieval
-# when the count of objects reaches the specified limit. The server may
-# still limit the count to something less than the configured value.
-# Any remaining objects may be retrieved with additional requests.
-#  (integer value)
-# Minimum value: 0
-#maximum_objects = 100
-
-#
-# This option adds a prefix to the folder where cached images are stored
-#
-# This is not the full path - just a folder prefix. This should only be
-# used when a datastore cache is shared between compute nodes.
-#
-# Note: This should only be used when the compute nodes are running on same
-# host or they have a shared file system.
-#
-# Possible values:
-#
-# * Any string representing the cache prefix to the folder
-#  (string value)
-#cache_prefix = <None>
 
 
 [vnc]
@@ -10541,7 +9923,7 @@
 # keyboards. You should instead use a VNC client that supports Extended Key
 # Event
 # messages, such as noVNC 1.0.0. Refer to bug #1682020 for more information.
-#keymap = <None>
+keymap = en-us
 
 #
 # The IP address or hostname on which an instance should listen to for
@@ -10550,6 +9932,7 @@
 # Deprecated group/name - [DEFAULT]/vncserver_listen
 # Deprecated group/name - [vnc]/vncserver_listen
 #server_listen = 127.0.0.1
+server_listen = 172.16.10.55
 
 #
 # Private, internal IP address or hostname of VNC console proxy.
@@ -10558,11 +9941,11 @@
 # users to access their instances through VNC clients.
 #
 # This option sets the private address to which proxy clients, such as
-# ``nova-novncproxy``, should connect to.
+# ``nova-xvpvncproxy``, should connect to.
 #  (host address value)
 # Deprecated group/name - [DEFAULT]/vncserver_proxyclient_address
 # Deprecated group/name - [vnc]/vncserver_proxyclient_address
-#server_proxyclient_address = 127.0.0.1
+server_proxyclient_address = 172.16.10.55
 
 #
 # Public address of noVNC VNC console proxy.
@@ -10584,8 +9967,9 @@
 # * novncproxy_port
 #  (uri value)
 #novncproxy_base_url = http://127.0.0.1:6080/vnc_auto.html
-
-# DEPRECATED:
+novncproxy_base_url = http://10.16.0.107:6080/vnc_auto.html
+
+#
 # IP address or hostname that the XVP VNC console proxy should bind to.
 #
 # The VNC proxy is an OpenStack component that enables compute service
@@ -10602,14 +9986,9 @@
 # * xvpvncproxy_port
 # * xvpvncproxy_base_url
 #  (host address value)
-# This option is deprecated for removal since 19.0.0.
-# Its value may be silently ignored in the future.
-# Reason:
-# The ``nova-xvpvnxproxy`` service is deprecated and will be removed in an
-# upcoming release.
 #xvpvncproxy_host = 0.0.0.0
 
-# DEPRECATED:
+#
 # Port that the XVP VNC console proxy should bind to.
 #
 # The VNC proxy is an OpenStack component that enables compute service
@@ -10628,14 +10007,9 @@
 #  (port value)
 # Minimum value: 0
 # Maximum value: 65535
-# This option is deprecated for removal since 19.0.0.
-# Its value may be silently ignored in the future.
-# Reason:
-# The ``nova-xvpvnxproxy`` service is deprecated and will be removed in an
-# upcoming release.
 #xvpvncproxy_port = 6081
 
-# DEPRECATED:
+#
 # Public URL address of XVP VNC console proxy.
 #
 # The VNC proxy is an OpenStack component that enables compute service
@@ -10653,11 +10027,6 @@
 # * xvpvncproxy_host
 # * xvpvncproxy_port
 #  (uri value)
-# This option is deprecated for removal since 19.0.0.
-# Its value may be silently ignored in the future.
-# Reason:
-# The ``nova-xvpvnxproxy`` service is deprecated and will be removed in an
-# upcoming release.
 #xvpvncproxy_base_url = http://127.0.0.1:6081/console
 
 #
@@ -10695,6 +10064,7 @@
 # Minimum value: 0
 # Maximum value: 65535
 #novncproxy_port = 6080
+novncproxy_port = 6080
 
 #
 # The authentication schemes to use with the compute node.
@@ -10704,6 +10074,11 @@
 # matching scheme will be used, thus the strongest schemes should be listed
 # first.
 #
+# Possible values:
+#
+# * ``none``: allow connection without authentication
+# * ``vencrypt``: use VeNCrypt authentication scheme
+#
 # Related options:
 #
 # * ``[vnc]vencrypt_client_key``, ``[vnc]vencrypt_client_cert``: must also be
@@ -10780,7 +10155,7 @@
 #  (boolean value)
 #disable_rootwrap = false
 
-# DEPRECATED:
+#
 # Disable live snapshots when using the libvirt driver.
 #
 # Live snapshots allow the snapshot of the disk to happen without an
@@ -10803,13 +10178,7 @@
 # * False: Live snapshots are always used when snapshotting (as long as
 #   there is a new enough libvirt and the backend storage supports it)
 #  (boolean value)
-# This option is deprecated for removal since 19.0.0.
-# Its value may be silently ignored in the future.
-# Reason:
-# This option was added to work around issues with libvirt 1.2.2. We no longer
-# support this version of libvirt, which means this workaround is no longer
-# necessary. It will be removed in a future release.
-#disable_libvirt_livesnapshot = false
+disable_libvirt_livesnapshot = true
 
 #
 # Enable handling of events emitted from compute drivers.
@@ -10832,7 +10201,8 @@
 # will have to be synchronized manually.
 #
 # For more information, refer to the bug report:
-# https://bugs.launchpad.net/bugs/1444630
+#
+#   https://bugs.launchpad.net/bugs/1444630
 #
 # Interdependencies to other options:
 #
@@ -10905,58 +10275,35 @@
 #enable_consoleauth = false
 
 #
-# Enable live migration of instances with NUMA topologies.
-#
-# Live migration of instances with NUMA topologies is disabled by default
-# when using the libvirt driver. This includes live migration of instances with
-# CPU pinning or hugepages. CPU pinning and huge page information for such
-# instances is not currently re-calculated, as noted in `bug #1289064`_.  This
-# means that if instances were already present on the destination host, the
-# migrated instance could be placed on the same dedicated cores as these
-# instances or use hugepages allocated for another instance. Alternately, if the
-# host platforms were not homogeneous, the instance could be assigned to
-# non-existent cores or be inadvertently split across host NUMA nodes.
-#
-# Despite these known issues, there may be cases where live migration is
-# necessary. By enabling this option, operators that are aware of the issues and
-# are willing to manually work around them can enable live migration support for
-# these instances.
-#
-# Related options:
-#
-# * ``compute_driver``: Only the libvirt driver is affected.
-#
-# .. _bug #1289064: https://bugs.launchpad.net/nova/+bug/1289064
+# Starting in the 16.0.0 Pike release, ironic nodes can be scheduled using
+# custom resource classes rather than the standard resource classes VCPU,
+# MEMORY_MB and DISK_GB:
+#
+# https://docs.openstack.org/ironic/rocky/install/configure-nova-flavors.html
+#
+# However, existing ironic instances require a data migration which can be
+# achieved either by restarting ``nova-compute`` services managing ironic nodes
+# or running ``nova-manage db ironic_flavor_migration``. The completion of the
+# data migration can be checked by running the ``nova-status upgrade check``
+# command and checking the "Ironic Flavor Migration" result.
+#
+# Once all data migrations are complete, you can set this option to False to
+# stop reporting VCPU, MEMORY_MB and DISK_GB resource class inventory to the
+# Placement service so that scheduling will only rely on the custom resource
+# class for each ironic node, as described in the document above.
+#
+# Note that this option does not apply starting in the 19.0.0 Stein release
+# since the ironic compute driver no longer reports standard resource class
+# inventory regardless of configuration.
+#
+# Alternatives to this workaround would be unsetting ``memory_mb`` and/or
+# ``vcpus`` properties from ironic nodes, or using host aggregates to segregate
+# VM from BM compute hosts and restrict flavors to those aggregates, but those
+# alternatives might not be feasible at large scale.
+#
+# See related bug https://bugs.launchpad.net/nova/+bug/1796920 for more details.
 #  (boolean value)
-#enable_numa_live_migration = false
-
-#
-# Ensure the instance directory is removed during clean up when using rbd.
-#
-# When enabled this workaround will ensure that the instance directory is always
-# removed during cleanup on hosts using ``[libvirt]/images_type=rbd``. This
-# avoids the following bugs with evacuation and revert resize clean up that lead
-# to the instance directory remaining on the host:
-#
-# https://bugs.launchpad.net/nova/+bug/1414895
-#
-# https://bugs.launchpad.net/nova/+bug/1761062
-#
-# Both of these bugs can then result in ``DestinationDiskExists`` errors being
-# raised if the instances ever attempt to return to the host.
-#
-# .. warning:: Operators will need to ensure that the instance directory itself,
-#   specified by ``[DEFAULT]/instances_path``, is not shared between computes
-#   before enabling this workaround otherwise the console.log, kernels, ramdisks
-#   and any additional files being used by the running instance will be lost.
-#
-# Related options:
-#
-# * ``compute_driver`` (libvirt)
-# * ``[libvirt]/images_type`` (rbd)
-# * ``instances_path``
-#  (boolean value)
-#ensure_libvirt_rbd_instance_dir_cleanup = false
+#report_ironic_standard_resource_class_inventory = true
 
 
 [wsgi]
@@ -10988,7 +10335,7 @@
 #
 # Possible values:
 #
-# * '%(client_ip)s "%(request_line)s" status: %(status_code)s '
+# * '%(client_ip)s "%(request_line)s" status: %(status_code)s'
 #   'len: %(body_length)s time: %(wall_seconds).7f' (default)
 # * Any formatted string formed by specific values.
 #  (string value)
@@ -11277,12 +10624,18 @@
 # here. Configuring a value other than these will default to 'all'.
 #
 # Note: There is nothing that deletes these images.
-#  (string value)
-# Possible values:
-# all - Will cache all images
-# some - Will only cache images that have the image_property
-# ``cache_in_nova=True``
-# none - Turns off caching entirely
+#
+# Possible values:
+#
+# * `all`: will cache all images.
+# * `some`: will only cache images that have the
+#   image_property `cache_in_nova=True`.
+# * `none`: turns off caching entirely.
+#  (string value)
+# Possible values:
+# all - <No description provided>
+# some - <No description provided>
+# none - <No description provided>
 #cache_images = all
 
 #
@@ -11546,21 +10899,26 @@
 #
 # Provide a short name representing an image driver required to
 # handle the image between compute host and glance.
-#  (string value)
-# Possible values:
-# direct_vhd - This plugin directly processes the VHD files in XenServer
-# SR(Storage Repository). So this plugin only works when the host's SR type is
-# file system based e.g. ext, nfs.
-# vdi_local_dev - This plugin implements an image handler which attaches the
-# instance's VDI as a local disk to the VM where the OpenStack Compute service
-# runs. It uploads the raw disk to glance when creating image; when booting an
-# instance from a glance image, it downloads the image and streams it into the
-# disk which is attached to the compute VM.
-# vdi_remote_stream - This plugin implements an image handler which works as a
-# proxy between glance and XenServer. The VHD streams to XenServer via a remote
-# import API supplied by XAPI for image download; and for image upload, the VHD
-# streams from XenServer via a remote export API supplied by XAPI. This plugin
-# works for all SR types supported by XenServer.
+#
+# Description for the allowed values:
+# * ``direct_vhd``: This plugin directly processes the VHD files in XenServer
+# SR(Storage Repository). So this plugin only works when the host's SR
+# type is file system based e.g. ext, nfs.
+# * ``vdi_local_dev``: This plugin implements an image handler which attaches
+# the instance's VDI as a local disk to the VM where the OpenStack Compute
+# service runs in. It uploads the raw disk to glance when creating image;
+# When booting an instance from a glance image, it downloads the image and
+# streams it into the disk which is attached to the compute VM.
+# * ``vdi_remote_stream``: This plugin implements an image handler which works
+# as a proxy between glance and XenServer. The VHD streams to XenServer via
+# a remote import API supplied by XAPI for image download; and for image
+# upload, the VHD streams from XenServer via a remote export API supplied
+# by XAPI. This plugin works for all SR types supported by XenServer.
+#  (string value)
+# Possible values:
+# direct_vhd - <No description provided>
+# vdi_local_dev - <No description provided>
+# vdi_remote_stream - <No description provided>
 #image_handler = direct_vhd
 
 #
@@ -11609,10 +10967,6 @@
 #
 # * Current hostname (default) or any string representing hostname.
 #  (string value)
-#
-# This option has a sample default set, which means that
-# its actual default value may vary from the one documented
-# below.
 #console_public_hostname = <current_hostname>
 
 
@@ -11660,10 +11014,6 @@
 #
 # URL to be used to communicate with z/VM Cloud Connector.
 #  (uri value)
-#
-# This option has a sample default set, which means that
-# its actual default value may vary from the one documented
-# below.
 #cloud_connector_url = http://zvm.example.org:8080/
 
 #
@@ -11683,10 +11033,6 @@
 # Possible values:
 #     A file system path on the host running the compute service.
 #  (string value)
-#
-# This option has a sample default set, which means that
-# its actual default value may vary from the one documented
-# below.
 #image_tmp_path = $state_path/images
 
 #

2019-08-27 23:32:57,219 [salt.state       :1951][INFO    ][15107] Completed state [/etc/nova/nova.conf] at time 23:32:57.219379 duration_in_ms=808.751
2019-08-27 23:32:57,219 [salt.state       :1780][INFO    ][15107] Running state [/etc/default/nova-compute] at time 23:32:57.219915
2019-08-27 23:32:57,220 [salt.state       :1813][INFO    ][15107] Executing state file.managed for [/etc/default/nova-compute]
2019-08-27 23:32:57,241 [salt.fileclient  :1219][INFO    ][15107] Fetching file from saltenv 'base', ** done ** 'nova/files/default'
2019-08-27 23:32:57,251 [salt.state       :300 ][INFO    ][15107] File changed:
New file
2019-08-27 23:32:57,251 [salt.state       :1951][INFO    ][15107] Completed state [/etc/default/nova-compute] at time 23:32:57.251250 duration_in_ms=31.334
2019-08-27 23:32:57,257 [salt.state       :1780][INFO    ][15107] Running state [virsh net-destroy default; virsh net-undefine default] at time 23:32:57.257816
2019-08-27 23:32:57,258 [salt.state       :1813][INFO    ][15107] Executing state cmd.run for [virsh net-destroy default; virsh net-undefine default]
2019-08-27 23:32:57,258 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command 'virsh net-list --all --name |grep -w default' in directory '/root'
2019-08-27 23:32:57,291 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command 'virsh net-destroy default; virsh net-undefine default' in directory '/root'
2019-08-27 23:32:57,566 [salt.state       :300 ][INFO    ][15107] {'pid': 19966, 'retcode': 0, 'stderr': '', 'stdout': 'Network default destroyed\n\nNetwork default has been undefined'}
2019-08-27 23:32:57,566 [salt.state       :1951][INFO    ][15107] Completed state [virsh net-destroy default; virsh net-undefine default] at time 23:32:57.566557 duration_in_ms=308.74
2019-08-27 23:32:57,568 [salt.state       :1780][INFO    ][15107] Running state [/etc/default/libvirtd] at time 23:32:57.568510
2019-08-27 23:32:57,568 [salt.state       :1813][INFO    ][15107] Executing state file.managed for [/etc/default/libvirtd]
2019-08-27 23:32:57,586 [salt.fileclient  :1219][INFO    ][15107] Fetching file from saltenv 'base', ** done ** 'nova/files/stein/libvirt.Debian'
2019-08-27 23:32:57,597 [salt.state       :300 ][INFO    ][15107] File changed:
--- 
+++ 
@@ -1,17 +1,13 @@
-# Defaults for libvirtd initscript (/etc/init.d/libvirtd)
+# Defaults for libvirt-bin initscript (/etc/init.d/libvirt-bin)
 # This is a POSIX shell fragment
 
 # Start libvirtd to handle qemu/kvm:
 start_libvirtd="yes"
 
 # options passed to libvirtd, add "-l" to listen on tcp
-#libvirtd_opts=""
-
+# Don't use "-d" option with systemd
+libvirtd_opts="-l"
+LIBVIRTD_ARGS="--listen"
 # pass in location of kerberos keytab
 #export KRB5_KTNAME=/etc/libvirt/libvirt.keytab
 
-# Whether to mount a systemd like cgroup layout (only
-# useful when not running systemd)
-#mount_cgroups=yes
-# Which cgroups to mount
-#cgroups="memory devices"

2019-08-27 23:32:57,598 [salt.state       :1951][INFO    ][15107] Completed state [/etc/default/libvirtd] at time 23:32:57.598682 duration_in_ms=30.172
2019-08-27 23:32:57,599 [salt.state       :1780][INFO    ][15107] Running state [service.systemctl_reload] at time 23:32:57.599251
2019-08-27 23:32:57,599 [salt.state       :1813][INFO    ][15107] Executing state module.wait for [service.systemctl_reload]
2019-08-27 23:32:57,599 [salt.state       :300 ][INFO    ][15107] No changes made for service.systemctl_reload
2019-08-27 23:32:57,600 [salt.state       :1951][INFO    ][15107] Completed state [service.systemctl_reload] at time 23:32:57.600235 duration_in_ms=0.984
2019-08-27 23:32:57,600 [salt.state       :1780][INFO    ][15107] Running state [service.systemctl_reload] at time 23:32:57.600529
2019-08-27 23:32:57,600 [salt.state       :1813][INFO    ][15107] Executing state module.mod_watch for [service.systemctl_reload]
2019-08-27 23:32:57,601 [salt.utils.decorators:613 ][WARNING ][15107] The function "module.run" is using its deprecated version and will expire in version "Sodium".
2019-08-27 23:32:57,601 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command ['systemctl', '--system', 'daemon-reload'] in directory '/root'
2019-08-27 23:32:57,775 [salt.state       :300 ][INFO    ][15107] {'ret': True}
2019-08-27 23:32:57,775 [salt.state       :1951][INFO    ][15107] Completed state [service.systemctl_reload] at time 23:32:57.775681 duration_in_ms=175.151
2019-08-27 23:32:57,776 [salt.state       :1780][INFO    ][15107] Running state [/etc/libvirt/libvirtd.conf] at time 23:32:57.776526
2019-08-27 23:32:57,776 [salt.state       :1813][INFO    ][15107] Executing state file.managed for [/etc/libvirt/libvirtd.conf]
2019-08-27 23:32:57,794 [salt.fileclient  :1219][INFO    ][15107] Fetching file from saltenv 'base', ** done ** 'nova/files/stein/libvirtd.conf.Debian'
2019-08-27 23:32:57,960 [salt.state       :300 ][INFO    ][15107] File changed:
--- 
+++ 
@@ -1,6 +1,7 @@
+
 # Master libvirt daemon configuration file
 #
-# For further information consult https://libvirt.org/format.html
+# For further information consult http://libvirt.org/format.html
 #
 # NOTE: the tests/daemon-conf regression test script requires
 # that each "PARAMETER = VALUE" line in this file have the parameter
@@ -18,8 +19,9 @@
 # It is necessary to setup a CA and issue server certificates before
 # using this capability.
 #
+
 # This is enabled by default, uncomment this to disable it
-#listen_tls = 0
+listen_tls = 0
 
 # Listen for unencrypted TCP connections on the public TCP/IP port.
 # NB, must pass the --listen flag to the libvirtd process for this to
@@ -33,6 +35,7 @@
 #listen_tcp = 1
 
 
+listen_tcp = 1
 
 # Override the port for accepting secure TLS connections
 # This can be a port number, or service name
@@ -48,10 +51,6 @@
 # Override the default configuration which binds to all network
 # interfaces. This can be a numeric IPv4/6 address, or hostname
 #
-# If the libvirtd service is started in parallel with network
-# startup (e.g. with systemd), binding to addresses other than
-# the wildcards (0.0.0.0/::) might not be available yet.
-#
 #listen_addr = "192.168.0.1"
 
 
@@ -67,7 +66,7 @@
 # unique on the immediate broadcast network.
 #
 # The default is "Virtualization Host HOSTNAME", where HOSTNAME
-# is substituted for the short hostname of the machine (without domain)
+# is subsituted for the short hostname of the machine (without domain)
 #
 #mdns_name = "Virtualization Host Joe Demo"
 
@@ -82,13 +81,14 @@
 # without becoming root.
 #
 # This is restricted to 'root' by default.
-unix_sock_group = "libvirt"
+unix_sock_group = "libvirtd"
 
 # Set the UNIX socket permissions for the R/O socket. This is used
 # for monitoring VM status only
 #
-# Default allows any user. If setting group ownership, you may want to
-# restrict this too.
+# Default allows any user. If setting group ownership may want to
+# restrict this to:
+#unix_sock_ro_perms = "0777"
 unix_sock_ro_perms = "0777"
 
 # Set the UNIX socket permissions for the R/W socket. This is used
@@ -98,19 +98,11 @@
 # the default will change to allow everyone (eg, 0777)
 #
 # If not using PolicyKit and setting group ownership for access
-# control, then you may want to relax this too.
+# control then you may want to relax this to:
 unix_sock_rw_perms = "0770"
-
-# Set the UNIX socket permissions for the admin interface socket.
-#
-# Default allows only owner (root), do not change it unless you are
-# sure to whom you are exposing the access to.
-#unix_sock_admin_perms = "0700"
 
 # Set the name of the directory in which sockets will be found/created.
 #unix_sock_dir = "/var/run/libvirt"
-
-
 
 #################################################################
 #
@@ -125,7 +117,7 @@
 #  - sasl: use SASL infrastructure. The actual auth scheme is then
 #          controlled from /etc/sasl2/libvirt.conf. For the TCP
 #          socket only GSSAPI & DIGEST-MD5 mechanisms will be used.
-#          For non-TCP or TLS sockets, any scheme is allowed.
+#          For non-TCP or TLS sockets,  any scheme is allowed.
 #
 #  - polkit: use PolicyKit to authenticate. This is only suitable
 #            for use on the UNIX sockets. The default policy will
@@ -156,6 +148,8 @@
 # use, always enable SASL and use the GSSAPI or DIGEST-MD5
 # mechanism in /etc/sasl2/libvirt.conf
 #auth_tcp = "sasl"
+#auth_tcp = "none"
+auth_tcp = "none"
 
 # Change the authentication scheme for TLS sockets.
 #
@@ -167,35 +161,12 @@
 #auth_tls = "none"
 
 
-# Change the API access control scheme
-#
-# By default an authenticated user is allowed access
-# to all APIs. Access drivers can place restrictions
-# on this. By default the 'nop' driver is enabled,
-# meaning no access control checks are done once a
-# client has authenticated with libvirtd
-#
-#access_drivers = [ "polkit" ]
 
 #################################################################
 #
 # TLS x509 certificate configuration
 #
 
-# Use of TLS requires that x509 certificates be issued. The default locations
-# for the certificate files is as follows:
-#
-#   /etc/pki/CA/cacert.pem                 - The CA master certificate
-#   /etc/pki/libvirt/servercert.pem        - The server certificate signed with
-#                                            the cacert.pem
-#   /etc/pki/libvirt/private/serverkey.pem - The server private key
-#
-# It is possible to override the default locations by altering the 'key_file',
-# 'cert_file', and 'ca_file' values and uncommenting them below.
-#
-# NB, overriding the default of one location requires uncommenting and
-# possibly additionally overriding the other settings.
-#
 
 # Override the default server key file path
 #
@@ -242,7 +213,7 @@
 #tls_no_verify_certificate = 1
 
 
-# A whitelist of allowed x509 Distinguished Names
+# A whitelist of allowed x509  Distinguished Names
 # This list may contain wildcards such as
 #
 #    "C=GB,ST=London,L=London,O=Red Hat,CN=*"
@@ -255,8 +226,7 @@
 # By default, no DN's are checked
 #tls_allowed_dn_list = ["DN1", "DN2"]
 
-
-# A whitelist of allowed SASL usernames. The format for username
+# A whitelist of allowed SASL usernames. The format for usernames
 # depends on the SASL authentication mechanism. Kerberos usernames
 # look like username@REALM
 #
@@ -273,13 +243,6 @@
 #sasl_allowed_username_list = ["joe@EXAMPLE.COM", "fred@EXAMPLE.COM" ]
 
 
-# Override the compile time default TLS priority string. The
-# default is usually "NORMAL" unless overridden at build time.
-# Only set this is it is desired for libvirt to deviate from
-# the global default settings.
-#
-#tls_priority="NORMAL"
-
 
 #################################################################
 #
@@ -288,22 +251,12 @@
 
 # The maximum number of concurrent client connections to allow
 # over all sockets combined.
-#max_clients = 5000
-
-# The maximum length of queue of connections waiting to be
-# accepted by the daemon. Note, that some protocols supporting
-# retransmission may obey this so that a later reattempt at
-# connection succeeds.
-#max_queued_clients = 1000
-
-# The maximum length of queue of accepted but not yet
-# authenticated clients. The default value is 20. Set this to
-# zero to turn this feature off.
-#max_anonymous_clients = 20
+#max_clients = 20
+
 
 # The minimum limit sets the number of workers to start up
 # initially. If the number of active clients exceeds this,
-# then more threads are spawned, up to max_workers limit.
+# then more threads are spawned, upto max_workers limit.
 # Typically you'd want max_workers to equal maximum number
 # of clients allowed
 #min_workers = 5
@@ -311,25 +264,25 @@
 
 
 # The number of priority workers. If all workers from above
-# pool are stuck, some calls marked as high priority
+# pool will stuck, some calls marked as high priority
 # (notably domainDestroy) can be executed in this pool.
 #prio_workers = 5
 
+# Total global limit on concurrent RPC calls. Should be
+# at least as large as max_workers. Beyond this, RPC requests
+# will be read into memory and queued. This directly impact
+# memory usage, currently each request requires 256 KB of
+# memory. So by default upto 5 MB of memory is used
+#
+# XXX this isn't actually enforced yet, only the per-client
+# limit is used so far
+#max_requests = 20
+
 # Limit on concurrent requests from a single client
 # connection. To avoid one client monopolizing the server
-# this should be a small fraction of the global max_workers
-# parameter.
+# this should be a small fraction of the global max_requests
+# and max_workers parameter
 #max_client_requests = 5
-
-# Same processing controls, but this time for the admin interface.
-# For description of each option, be so kind to scroll few lines
-# upwards.
-
-#admin_min_workers = 1
-#admin_max_workers = 5
-#admin_max_clients = 5
-#admin_max_queued_clients = 5
-#admin_max_client_requests = 5
 
 #################################################################
 #
@@ -338,80 +291,55 @@
 
 # Logging level: 4 errors, 3 warnings, 2 information, 1 debug
 # basically 1 will log everything possible
-#
-# WARNING: USE OF THIS IS STRONGLY DISCOURAGED.
-#
-# WARNING: It outputs too much information to practically read.
-# WARNING: The "log_filters" setting is recommended instead.
-#
-# WARNING: Journald applies rate limiting of messages and so libvirt
-# WARNING: will limit "log_level" to only allow values 3 or 4 if
-# WARNING: journald is the current output.
-#
-# WARNING: USE OF THIS IS STRONGLY DISCOURAGED.
 #log_level = 3
-
 # Logging filters:
 # A filter allows to select a different logging level for a given category
-# of logs. The format for a filter is one of:
-#
-#    level:match
-#    level:+match
-#
-# where 'match' is a string which is matched against the category
-# given in the VIR_LOG_INIT() at the top of each libvirt source
-# file, e.g., "remote", "qemu", or "util.json". The 'match' in the
-# filter matches using shell wildcard syntax (see 'man glob(7)').
-# The 'match' is always treated as a substring match. IOW a match
-# string 'foo' is equivalent to '*foo*'.
-#
-# If 'match' contains the optional "+" prefix, it tells libvirt
-# to log stack trace for each message matching name.
-#
-# 'level' is the minimal level where matching messages should
-#  be logged:
-#
+# of logs
+# The format for a filter is one of:
+#    x:name
+#    x:+name
+#      where name is a string which is matched against source file name,
+#      e.g., "remote", "qemu", or "util/json", the optional "+" prefix
+#      tells libvirt to log stack trace for each message matching name,
+#      and x is the minimal level where matching messages should be logged:
 #    1: DEBUG
 #    2: INFO
 #    3: WARNING
 #    4: ERROR
 #
-# Multiple filters can be defined in a single @log_filters, they just need
-# to be separated by spaces. Note that libvirt performs "first" match, i.e.
-# if there are concurrent filters, the first one that matches will be applied,
-# given the order in @log_filters.
-#
-# A typical need is to capture information from a hypervisor driver,
-# public API entrypoints and some of the utility code. Some utility
-# code is very verbose and is generally not desired. Taking the QEMU
-# hypervisor as an example, a suitable filter string for debugging
-# might be to turn off object, json & event logging, but enable the
-# rest of the util code:
-#
-#log_filters="1:qemu 1:libvirt 4:object 4:json 4:event 1:util"
+# Multiple filter can be defined in a single @filters, they just need to be
+# separated by spaces.
+#
+# e.g. to only get warning or errors from the remote layer and only errors
+# from the event layer:
+#log_filters="3:remote 4:event"
 
 # Logging outputs:
 # An output is one of the places to save logging information
 # The format for an output can be:
-#    level:stderr
+#    x:stderr
 #      output goes to stderr
-#    level:syslog:name
+#    x:syslog:name
 #      use syslog for the output and use the given name as the ident
-#    level:file:file_path
+#    x:file:file_path
 #      output to a file, with the given filepath
-#    level:journald
-#      output to journald logging system
-# In all cases 'level' is the minimal priority, acting as a filter
+# In all case the x prefix is the minimal level, acting as a filter
 #    1: DEBUG
 #    2: INFO
 #    3: WARNING
 #    4: ERROR
 #
-# Multiple outputs can be defined, they just need to be separated by spaces.
+# Multiple output can be defined, they just need to be separated by spaces.
 # e.g. to log all warnings and errors to syslog under the libvirtd ident:
 #log_outputs="3:syslog:libvirtd"
 #
 
+# Log debug buffer size: default 64
+# The daemon keeps an internal debug log buffer which will be dumped in case
+# of crash or upon receiving a SIGUSR2 signal. This setting allows to override
+# the default buffer size in kilobytes.
+# If value is 0 or less the debug log buffer is deactivated
+#log_buffer_size = 64
 
 ##################################################################
 #
@@ -432,16 +360,10 @@
 
 ###################################################################
 # UUID of the host:
-# Host UUID is read from one of the sources specified in host_uuid_source.
-#
-# - 'smbios': fetch the UUID from 'dmidecode -s system-uuid'
-# - 'machine-id': fetch the UUID from /etc/machine-id
-#
-# The host_uuid_source default is 'smbios'. If 'dmidecode' does not provide
-# a valid UUID a temporary UUID will be generated.
-#
-# Another option is to specify host UUID in host_uuid.
-#
+# Provide the UUID of the host here in case the command
+# 'dmidecode -s system-uuid' does not provide a valid uuid. In case
+# 'dmidecode' does not provide a valid UUID and none is provided here, a
+# temporary UUID will be generated.
 # Keep the format of the example UUID below. UUID must not have all digits
 # be the same.
 
@@ -449,12 +371,11 @@
 # it with the output of the 'uuidgen' command and then
 # uncomment this entry
 #host_uuid = "00000000-0000-0000-0000-000000000000"
-#host_uuid_source = "smbios"
 
 ###################################################################
 # Keepalive protocol:
 # This allows libvirtd to detect broken client connections or even
-# dead clients.  A keepalive message is sent to a client after
+# dead client.  A keepalive message is sent to a client after
 # keepalive_interval seconds of inactivity to check if the client is
 # still responding; keepalive_count is a maximum number of keepalive
 # messages that are allowed to be sent to the client without getting
@@ -463,31 +384,15 @@
 # keepalive_interval * (keepalive_count + 1) seconds since the last
 # message received from the client.  If keepalive_interval is set to
 # -1, libvirtd will never send keepalive requests; however clients
-# can still send them and the daemon will send responses.  When
+# can still send them and the deamon will send responses.  When
 # keepalive_count is set to 0, connections will be automatically
 # closed after keepalive_interval seconds of inactivity without
 # sending any keepalive messages.
 #
 #keepalive_interval = 5
 #keepalive_count = 5
-
-#
-# These configuration options are no longer used.  There is no way to
-# restrict such clients from connecting since they first need to
-# connect in order to ask for keepalive.
+#
+# If set to 1, libvirtd will refuse to talk to clients that do not
+# support keepalive protocol.  Defaults to 0.
 #
 #keepalive_required = 1
-#admin_keepalive_required = 1
-
-# Keepalive settings for the admin interface
-#admin_keepalive_interval = 5
-#admin_keepalive_count = 5
-
-###################################################################
-# Open vSwitch:
-# This allows to specify a timeout for openvswitch calls made by
-# libvirt. The ovs-vsctl utility is used for the configuration and
-# its timeout option is set by default to 5 seconds to avoid
-# potential infinite waits blocking libvirt.
-#
-#ovs_timeout = 5

2019-08-27 23:32:57,965 [salt.state       :1951][INFO    ][15107] Completed state [/etc/libvirt/libvirtd.conf] at time 23:32:57.965109 duration_in_ms=188.581
2019-08-27 23:32:57,966 [salt.state       :1780][INFO    ][15107] Running state [/etc/libvirt/qemu.conf] at time 23:32:57.966175
2019-08-27 23:32:57,966 [salt.state       :1813][INFO    ][15107] Executing state file.managed for [/etc/libvirt/qemu.conf]
2019-08-27 23:32:57,984 [salt.fileclient  :1219][INFO    ][15107] Fetching file from saltenv 'base', ** done ** 'nova/files/stein/qemu.conf.Debian'
2019-08-27 23:32:58,138 [salt.state       :300 ][INFO    ][15107] File changed:
--- 
+++ 
@@ -1,61 +1,8 @@
+
 # Master configuration file for the QEMU driver.
 # All settings described here are optional - if omitted, sensible
 # defaults are used.
 
-# Use of TLS requires that x509 certificates be issued. The default is
-# to keep them in /etc/pki/qemu. This directory must contain
-#
-#  ca-cert.pem - the CA master certificate
-#  server-cert.pem - the server certificate signed with ca-cert.pem
-#  server-key.pem  - the server private key
-#
-# and optionally may contain
-#
-#  dh-params.pem - the DH params configuration file
-#
-# If the directory does not exist, libvirtd will fail to start. If the
-# directory doesn't contain the necessary files, QEMU domains will fail
-# to start if they are configured to use TLS.
-#
-# In order to overwrite the default path alter the following. This path
-# definition will be used as the default path for other *_tls_x509_cert_dir
-# configuration settings if their default path does not exist or is not
-# specifically set.
-#
-#default_tls_x509_cert_dir = "/etc/pki/qemu"
-
-
-# The default TLS configuration only uses certificates for the server
-# allowing the client to verify the server's identity and establish
-# an encrypted channel.
-#
-# It is possible to use x509 certificates for authentication too, by
-# issuing an x509 certificate to every client who needs to connect.
-#
-# Enabling this option will reject any client who does not have a
-# certificate signed by the CA in /etc/pki/qemu/ca-cert.pem
-#
-# The default_tls_x509_cert_dir directory must also contain
-#
-#  client-cert.pem - the client certificate signed with the ca-cert.pem
-#  client-key.pem - the client private key
-#
-#default_tls_x509_verify = 1
-
-#
-# Libvirt assumes the server-key.pem file is unencrypted by default.
-# To use an encrypted server-key.pem file, the password to decrypt
-# the PEM file is required. This can be provided by creating a secret
-# object in libvirt and then to uncomment this setting to set the UUID
-# of the secret.
-#
-# NB This default all-zeros UUID will not work. Replace it with the
-# output from the UUID for the TLS secret from a 'virsh secret-list'
-# command and then uncomment the entry
-#
-#default_tls_x509_secret_uuid = "00000000-0000-0000-0000-000000000000"
-
-
 # VNC is configured to listen on 127.0.0.1 by default.
 # To make it listen on all public interfaces, uncomment
 # this next option.
@@ -69,9 +16,9 @@
 # unix socket. This prevents unprivileged access from users on the
 # host machine, though most VNC clients do not support it.
 #
-# This will only be enabled for VNC configurations that have listen
-# type=address but without any address specified. This setting takes
-# preference over vnc_listen.
+# This will only be enabled for VNC configurations that do not have
+# a hardcoded 'listen' or 'socket' value. This setting takes preference
+# over vnc_listen.
 #
 #vnc_auto_unix_socket = 1
 
@@ -85,12 +32,15 @@
 #
 #vnc_tls = 1
 
-
-# In order to override the default TLS certificate location for
-# vnc certificates, supply a valid path to the certificate directory.
-# If the provided path does not exist, libvirtd will fail to start.
-# If the path is not provided, but vnc_tls = 1, then the
-# default_tls_x509_cert_dir path will be used.
+# Use of TLS requires that x509 certificates be issued. The
+# default it to keep them in /etc/pki/libvirt-vnc. This directory
+# must contain
+#
+#  ca-cert.pem - the CA master certificate
+#  server-cert.pem - the server certificate signed with ca-cert.pem
+#  server-key.pem  - the server private key
+#
+# This option allows the certificate directory to be changed
 #
 #vnc_tls_x509_cert_dir = "/etc/pki/libvirt-vnc"
 
@@ -100,15 +50,10 @@
 # an encrypted channel.
 #
 # It is possible to use x509 certificates for authentication too, by
-# issuing an x509 certificate to every client who needs to connect.
-#
-# Enabling this option will reject any client that does not have a
-# ca-cert.pem certificate signed by the CA in the vnc_tls_x509_cert_dir
-# (or default_tls_x509_cert_dir) as well as the corresponding client-*.pem
-# files described in default_tls_x509_cert_dir.
-#
-# If this option is not supplied, it will be set to the value of
-# "default_tls_x509_verify".
+# issuing a x509 certificate to every client who needs to connect.
+#
+# Enabling this option will reject any client who does not have a
+# certificate signed by the CA in /etc/pki/libvirt-vnc/ca-cert.pem
 #
 #vnc_tls_x509_verify = 1
 
@@ -172,24 +117,17 @@
 #spice_tls = 1
 
 
-# In order to override the default TLS certificate location for
-# spice certificates, supply a valid path to the certificate directory.
-# If the provided path does not exist, libvirtd will fail to start.
-# If the path is not provided, but spice_tls = 1, then the
-# default_tls_x509_cert_dir path will be used.
+# Use of TLS requires that x509 certificates be issued. The
+# default it to keep them in /etc/pki/libvirt-spice. This directory
+# must contain
+#
+#  ca-cert.pem - the CA master certificate
+#  server-cert.pem - the server certificate signed with ca-cert.pem
+#  server-key.pem  - the server private key
+#
+# This option allows the certificate directory to be changed.
 #
 #spice_tls_x509_cert_dir = "/etc/pki/libvirt-spice"
-
-
-# Enable this option to have SPICE served over an automatically created
-# unix socket. This prevents unprivileged access from users on the
-# host machine.
-#
-# This will only be enabled for SPICE configurations that have listen
-# type=address but without any address specified. This setting takes
-# preference over spice_listen.
-#
-#spice_auto_unix_socket = 1
 
 
 # The default SPICE password. This parameter is only used if the
@@ -216,157 +154,6 @@
 # point to the directory, and create a qemu.conf in that location
 #
 #spice_sasl_dir = "/some/directory/sasl2"
-
-# Enable use of TLS encryption on the chardev TCP transports.
-#
-# It is necessary to setup CA and issue a server certificate
-# before enabling this.
-#
-#chardev_tls = 1
-
-
-# In order to override the default TLS certificate location for character
-# device TCP certificates, supply a valid path to the certificate directory.
-# If the provided path does not exist, libvirtd will fail to start.
-# If the path is not provided, but chardev_tls = 1, then the
-# default_tls_x509_cert_dir path will be used.
-#
-#chardev_tls_x509_cert_dir = "/etc/pki/libvirt-chardev"
-
-
-# The default TLS configuration only uses certificates for the server
-# allowing the client to verify the server's identity and establish
-# an encrypted channel.
-#
-# It is possible to use x509 certificates for authentication too, by
-# issuing an x509 certificate to every client who needs to connect.
-#
-# Enabling this option will reject any client that does not have a
-# ca-cert.pem certificate signed by the CA in the chardev_tls_x509_cert_dir
-# (or default_tls_x509_cert_dir) as well as the corresponding client-*.pem
-# files described in default_tls_x509_cert_dir.
-#
-# If this option is not supplied, it will be set to the value of
-# "default_tls_x509_verify".
-#
-#chardev_tls_x509_verify = 1
-
-
-# Uncomment and use the following option to override the default secret
-# UUID provided in the default_tls_x509_secret_uuid parameter.
-#
-# NB This default all-zeros UUID will not work. Replace it with the
-# output from the UUID for the TLS secret from a 'virsh secret-list'
-# command and then uncomment the entry
-#
-#chardev_tls_x509_secret_uuid = "00000000-0000-0000-0000-000000000000"
-
-
-# Enable use of TLS encryption for all VxHS network block devices that
-# don't specifically disable.
-#
-# When the VxHS network block device server is set up appropriately,
-# x509 certificates are required for authentication between the clients
-# (qemu processes) and the remote VxHS server.
-#
-# It is necessary to setup CA and issue the client certificate before
-# enabling this.
-#
-#vxhs_tls = 1
-
-
-# In order to override the default TLS certificate location for VxHS
-# backed storage, supply a valid path to the certificate directory.
-# This is used to authenticate the VxHS block device clients to the VxHS
-# server.
-#
-# If the provided path does not exist, libvirtd will fail to start.
-# If the path is not provided, but vxhs_tls = 1, then the
-# default_tls_x509_cert_dir path will be used.
-#
-# VxHS block device clients expect the client certificate and key to be
-# present in the certificate directory along with the CA master certificate.
-# If using the default environment, default_tls_x509_verify must be configured.
-# Since this is only a client the server-key.pem certificate is not needed.
-# Thus a VxHS directory must contain the following:
-#
-#  ca-cert.pem - the CA master certificate
-#  client-cert.pem - the client certificate signed with the ca-cert.pem
-#  client-key.pem - the client private key
-#
-#vxhs_tls_x509_cert_dir = "/etc/pki/libvirt-vxhs"
-
-
-
-# Enable use of TLS encryption for all NBD disk devices that don't
-# specifically disable it.
-#
-# When the NBD server is set up appropriately, x509 certificates are required
-# for authentication between the client and the remote NBD server.
-#
-# It is necessary to setup CA and issue the client certificate before
-# enabling this.
-#
-#nbd_tls = 1
-
-
-# In order to override the default TLS certificate location for NBD
-# backed storage, supply a valid path to the certificate directory.
-# This is used to authenticate the NBD block device clients to the NBD
-# server.
-#
-# If the provided path does not exist, libvirtd will fail to start.
-# If the path is not provided, but nbd_tls = 1, then the
-# default_tls_x509_cert_dir path will be used.
-#
-# NBD block device clients expect the client certificate and key to be
-# present in the certificate directory along with the CA certificate.
-# Since this is only a client the server-key.pem certificate is not needed.
-# Thus a NBD directory must contain the following:
-#
-#  ca-cert.pem - the CA master certificate
-#  client-cert.pem - the client certificate signed with the ca-cert.pem
-#  client-key.pem - the client private key
-#
-#nbd_tls_x509_cert_dir = "/etc/pki/libvirt-nbd"
-
-
-# In order to override the default TLS certificate location for migration
-# certificates, supply a valid path to the certificate directory. If the
-# provided path does not exist, libvirtd will fail to start. If the path is
-# not provided, but migrate_tls = 1, then the default_tls_x509_cert_dir path
-# will be used. Once/if a default certificate is enabled/defined, migration
-# will then be able to use the certificate via migration API flags.
-#
-#migrate_tls_x509_cert_dir = "/etc/pki/libvirt-migrate"
-
-
-# The default TLS configuration only uses certificates for the server
-# allowing the client to verify the server's identity and establish
-# an encrypted channel.
-#
-# It is possible to use x509 certificates for authentication too, by
-# issuing an x509 certificate to every client who needs to connect.
-#
-# Enabling this option will reject any client that does not have a
-# ca-cert.pem certificate signed by the CA in the migrate_tls_x509_cert_dir
-# (or default_tls_x509_cert_dir) as well as the corresponding client-*.pem
-# files described in default_tls_x509_cert_dir.
-#
-# If this option is not supplied, it will be set to the value of
-# "default_tls_x509_verify".
-#
-#migrate_tls_x509_verify = 1
-
-
-# Uncomment and use the following option to override the default secret
-# UUID provided in the default_tls_x509_secret_uuid parameter.
-#
-# NB This default all-zeros UUID will not work. Replace it with the
-# output from the UUID for the TLS secret from a 'virsh secret-list'
-# command and then uncomment the entry
-#
-#migrate_tls_x509_secret_uuid = "00000000-0000-0000-0000-000000000000"
 
 
 # By default, if no graphical front end is configured, libvirt will disable
@@ -452,7 +239,7 @@
 
 # What cgroup controllers to make use of with QEMU guests
 #
-#  - 'cpu' - use for scheduler tunables
+#  - 'cpu' - use for schedular tunables
 #  - 'devices' - use for device whitelisting
 #  - 'memory' - use for memory tunables
 #  - 'blkio' - use for block devices I/O tunables
@@ -484,19 +271,11 @@
 #    "/dev/null", "/dev/full", "/dev/zero",
 #    "/dev/random", "/dev/urandom",
 #    "/dev/ptmx", "/dev/kvm", "/dev/kqemu",
-#    "/dev/rtc","/dev/hpet", "/dev/sev"
+#    "/dev/rtc","/dev/hpet", "/dev/vfio/vfio"
 #]
-#
-# RDMA migration requires the following extra files to be added to the list:
-#   "/dev/infiniband/rdma_cm",
-#   "/dev/infiniband/issm0",
-#   "/dev/infiniband/issm1",
-#   "/dev/infiniband/umad0",
-#   "/dev/infiniband/umad1",
-#   "/dev/infiniband/uverbs0"
-
-
-# The default format for QEMU/KVM guest save images is raw; that is, the
+
+
+# The default format for Qemu/KVM guest save images is raw; that is, the
 # memory from the domain is dumped out directly to a file.  If you have
 # guests with a large amount of memory, however, this can take up quite
 # a bit of space.  If you would like to compress the images while they
@@ -550,20 +329,13 @@
 # unspecified here, determination of a host mount point in /proc/mounts
 # will be attempted.  Specifying an explicit mount overrides detection
 # of the same in /proc/mounts.  Setting the mount point to "" will
-# disable guest hugepage backing. If desired, multiple mount points can
-# be specified at once, separated by comma and enclosed in square
-# brackets, for example:
-#
-#     hugetlbfs_mount = ["/dev/hugepages2M", "/dev/hugepages1G"]
-#
-# The size of huge page served by specific mount point is determined by
-# libvirt at the daemon startup.
-#
-# NB, within these mount points, guests will create memory backing
-# files in a location of $MOUNTPOINT/libvirt/qemu
+# disable guest hugepage backing.
+#
+# NB, within this mount point, guests will create memory backing files
+# in a location of $MOUNTPOINT/libvirt/qemu
 #
 #hugetlbfs_mount = "/dev/hugepages"
-
+#hugetlbfs_mount = ["/run/hugepages/kvm", "/mnt/hugepages_1GB"]
 
 # Path to the setuid helper for creating tap devices.  This executable
 # is used to create <source type='bridge'> interfaces when libvirtd is
@@ -574,7 +346,7 @@
 
 
 # If clear_emulator_capabilities is enabled, libvirt will drop all
-# privileged capabilities of the QEMU/KVM emulator. This is enabled by
+# privileged capabilities of the QEmu/KVM emulator. This is enabled by
 # default.
 #
 # Warning: Disabling this option means that a compromised guest can
@@ -599,42 +371,6 @@
 # The same applies to max_files which sets the limit on the maximum
 # number of opened files.
 #
-#max_processes = 0
-#max_files = 0
-
-# If max_core is set to a non-zero integer, then QEMU will be
-# permitted to create core dumps when it crashes, provided its
-# RAM size is smaller than the limit set.
-#
-# Be warned that the core dump will include a full copy of the
-# guest RAM, if the 'dump_guest_core' setting has been enabled,
-# or if the guest XML contains
-#
-#   <memory dumpcore="on">...guest ram...</memory>
-#
-# If guest RAM is to be included, ensure the max_core limit
-# is set to at least the size of the largest expected guest
-# plus another 1GB for any QEMU host side memory mappings.
-#
-# As a special case it can be set to the string "unlimited" to
-# to allow arbitrarily sized core dumps.
-#
-# By default the core dump size is set to 0 disabling all dumps
-#
-# Size is a positive integer specifying bytes or the
-# string "unlimited"
-#
-#max_core = "unlimited"
-
-# Determine if guest RAM is included in QEMU core dumps. By
-# default guest RAM will be excluded if a new enough QEMU is
-# present. Setting this to '1' will force guest RAM to always
-# be included in QEMU core dumps.
-#
-# This setting will be ignored if the guest XML has set the
-# dumpcore attribute on the <memory> element.
-#
-#dump_guest_core = 1
 
 # mac_filter enables MAC addressed based filtering on bridge ports.
 # This currently requires ebtables to be installed.
@@ -649,13 +385,24 @@
 #relaxed_acs_check = 1
 
 
-# In order to prevent accidentally starting two domains that
-# share one writable disk, libvirt offers two approaches for
-# locking files. The first one is sanlock, the other one,
-# virtlockd, is then our own implementation. Accepted values
-# are "sanlock" and "lockd".
-#
-#lock_manager = "lockd"
+# If allow_disk_format_probing is enabled, libvirt will probe disk
+# images to attempt to identify their format, when not otherwise
+# specified in the XML. This is disabled by default.
+#
+# WARNING: Enabling probing is a security hole in almost all
+# deployments. It is strongly recommended that users update their
+# guest XML <disk> elements to include  <driver type='XXXX'/>
+# elements instead of enabling this option.
+#
+#allow_disk_format_probing = 1
+
+
+# To enable 'Sanlock' project based locking of the file
+# content (to prevent two VMs writing to the same
+# disk), uncomment this
+#
+#lock_manager = "sanlock"
+
 
 
 # Set limit of maximum APIs queued on one domain. All other APIs
@@ -689,28 +436,17 @@
 
 
 
-# Use seccomp syscall sandbox in QEMU.
-# 1 == seccomp enabled, 0 == seccomp disabled
-#
-# If it is unset (or -1), then seccomp will be enabled
-# only if QEMU >= 2.11.0 is detected, otherwise it is
-# left disabled. This ensures the default config gets
-# protection for new QEMU using the blacklist approach.
+# Use seccomp syscall whitelisting in QEMU.
+# 1 = on, 0 = off, -1 = use QEMU default
+# Defaults to -1.
 #
 #seccomp_sandbox = 1
+
 
 
 # Override the listen address for all incoming migrations. Defaults to
 # 0.0.0.0, or :: if both host and qemu are capable of IPv6.
-#migration_address = "0.0.0.0"
-
-
-# The default hostname or IP address which will be used by a migration
-# source for transferring migration data to this host.  The migration
-# source has to be able to resolve this hostname and connect to it so
-# setting "localhost" will not work.  By default, the host's configured
-# hostname is used.
-#migration_host = "host.example.com"
+#migration_address = "127.0.0.1"
 
 
 # Override the port range used for incoming migrations.
@@ -722,37 +458,12 @@
 #
 #migration_port_min = 49152
 #migration_port_max = 49215
-
-
-
-# Timestamp QEMU's log messages (if QEMU supports it)
-#
-# Defaults to 1.
-#
-#log_timestamp = 0
-
-
-# Location of master nvram file
-#
-# When a domain is configured to use UEFI instead of standard
-# BIOS it may use a separate storage for UEFI variables. If
-# that's the case libvirt creates the variable store per domain
-# using this master file as image. Each UEFI firmware can,
-# however, have different variables store. Therefore the nvram is
-# a list of strings when a single item is in form of:
-#   ${PATH_TO_UEFI_FW}:${PATH_TO_UEFI_VARS}.
-# Later, when libvirt creates per domain variable store, this list is
-# searched for the master image. The UEFI firmware can be called
-# differently for different guest architectures. For instance, it's OVMF
-# for x86_64 and i686, but it's AAVMF for aarch64. The libvirt default
-# follows this scheme.
-#nvram = [
-#   "/usr/share/OVMF/OVMF_CODE.fd:/usr/share/OVMF/OVMF_VARS.fd",
-#   "/usr/share/OVMF/OVMF_CODE.secboot.fd:/usr/share/OVMF/OVMF_VARS.fd",
-#   "/usr/share/AAVMF/AAVMF_CODE.fd:/usr/share/AAVMF/AAVMF_VARS.fd",
-#   "/usr/share/AAVMF/AAVMF32_CODE.fd:/usr/share/AAVMF/AAVMF32_VARS.fd",
-#   "/usr/share/OVMF/OVMF_CODE.ms.fd:/usr/share/OVMF/OVMF_VARS.ms.fd"
-#]
+cgroup_device_acl = [
+    "/dev/null", "/dev/full", "/dev/zero",
+    "/dev/random", "/dev/urandom",
+    "/dev/ptmx", "/dev/kvm", "/dev/kqemu",
+    "/dev/rtc", "/dev/hpet","/dev/net/tun",
+]
 
 # The backend to use for handling stdout/stderr output from
 # QEMU processes.
@@ -768,47 +479,3 @@
 #          rollover when a size limit is hit.
 #
 #stdio_handler = "logd"
-
-# QEMU gluster libgfapi log level, debug levels are 0-9, with 9 being the
-# most verbose, and 0 representing no debugging output.
-#
-# The current logging levels defined in the gluster GFAPI are:
-#
-#    0 - None
-#    1 - Emergency
-#    2 - Alert
-#    3 - Critical
-#    4 - Error
-#    5 - Warning
-#    6 - Notice
-#    7 - Info
-#    8 - Debug
-#    9 - Trace
-#
-# Defaults to 4
-#
-#gluster_debug_level = 9
-
-# To enhance security, QEMU driver is capable of creating private namespaces
-# for each domain started. Well, so far only "mount" namespace is supported. If
-# enabled it means qemu process is unable to see all the devices on the system,
-# only those configured for the domain in question. Libvirt then manages
-# devices entries throughout the domain lifetime. This namespace is turned on
-# by default.
-#namespaces = [ "mount" ]
-
-# This directory is used for memoryBacking source if configured as file.
-# NOTE: big files will be stored here
-#memory_backing_dir = "/var/lib/libvirt/qemu/ram"
-
-# Path to the SCSI persistent reservations helper. This helper is
-# used whenever <reservations/> are enabled for SCSI LUN devices.
-#pr_helper = "/usr/bin/qemu-pr-helper"
-
-# User for the swtpm TPM Emulator
-#
-# Default is 'tss'; this is the same user that tcsd (TrouSerS) installs
-# and uses; alternative is 'root'
-#
-#swtpm_user = "tss"
-#swtpm_group = "tss"

2019-08-27 23:32:58,139 [salt.state       :1951][INFO    ][15107] Completed state [/etc/libvirt/qemu.conf] at time 23:32:58.139840 duration_in_ms=173.665
2019-08-27 23:32:58,142 [salt.state       :1780][INFO    ][15107] Running state [libvirtd] at time 23:32:58.142376
2019-08-27 23:32:58,143 [salt.state       :1813][INFO    ][15107] Executing state service.running for [libvirtd]
2019-08-27 23:32:58,144 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command ['systemctl', 'status', 'libvirtd.service', '-n', '0'] in directory '/root'
2019-08-27 23:32:58,165 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command ['systemctl', 'is-active', 'libvirtd.service'] in directory '/root'
2019-08-27 23:32:58,180 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command ['systemctl', 'is-enabled', 'libvirtd.service'] in directory '/root'
2019-08-27 23:32:58,194 [salt.state       :300 ][INFO    ][15107] The service libvirtd is already running
2019-08-27 23:32:58,194 [salt.state       :1951][INFO    ][15107] Completed state [libvirtd] at time 23:32:58.194878 duration_in_ms=52.501
2019-08-27 23:32:58,195 [salt.state       :1780][INFO    ][15107] Running state [libvirtd] at time 23:32:58.195217
2019-08-27 23:32:58,195 [salt.state       :1813][INFO    ][15107] Executing state service.mod_watch for [libvirtd]
2019-08-27 23:32:58,196 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command ['systemctl', 'is-active', 'libvirtd.service'] in directory '/root'
2019-08-27 23:32:58,211 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'libvirtd.service'] in directory '/root'
2019-08-27 23:32:58,290 [salt.state       :300 ][INFO    ][15107] {'libvirtd': True}
2019-08-27 23:32:58,290 [salt.state       :1951][INFO    ][15107] Completed state [libvirtd] at time 23:32:58.290863 duration_in_ms=95.645
2019-08-27 23:32:58,292 [salt.state       :1780][INFO    ][15107] Running state [nova-compute] at time 23:32:58.292170
2019-08-27 23:32:58,292 [salt.state       :1813][INFO    ][15107] Executing state service.running for [nova-compute]
2019-08-27 23:32:58,293 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command ['systemctl', 'status', 'nova-compute.service', '-n', '0'] in directory '/root'
2019-08-27 23:32:58,310 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command ['systemctl', 'is-active', 'nova-compute.service'] in directory '/root'
2019-08-27 23:32:58,325 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command ['systemctl', 'is-enabled', 'nova-compute.service'] in directory '/root'
2019-08-27 23:32:58,340 [salt.state       :300 ][INFO    ][15107] The service nova-compute is already running
2019-08-27 23:32:58,341 [salt.state       :1951][INFO    ][15107] Completed state [nova-compute] at time 23:32:58.341248 duration_in_ms=49.078
2019-08-27 23:32:58,341 [salt.state       :1780][INFO    ][15107] Running state [nova-compute] at time 23:32:58.341539
2019-08-27 23:32:58,341 [salt.state       :1813][INFO    ][15107] Executing state service.mod_watch for [nova-compute]
2019-08-27 23:32:58,342 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command ['systemctl', 'is-active', 'nova-compute.service'] in directory '/root'
2019-08-27 23:32:58,358 [salt.loaded.int.module.cmdmod:395 ][INFO    ][15107] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'nova-compute.service'] in directory '/root'
2019-08-27 23:32:58,386 [salt.state       :300 ][INFO    ][15107] {'nova-compute': True}
2019-08-27 23:32:58,386 [salt.state       :1951][INFO    ][15107] Completed state [nova-compute] at time 23:32:58.386779 duration_in_ms=45.24
2019-08-27 23:32:58,390 [salt.minion      :1711][INFO    ][15107] Returning information for job: 20190827233131121916
2019-08-27 23:33:48,996 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command state.sls with jid 20190827233348982166
2019-08-27 23:33:49,018 [salt.minion      :1432][INFO    ][20199] Starting a new job with PID 20199
2019-08-27 23:33:56,100 [salt.state       :915 ][INFO    ][20199] Loading fresh modules for state activity
2019-08-27 23:33:56,181 [salt.fileclient  :1219][INFO    ][20199] Fetching file from saltenv 'base', ** done ** 'barbican/init.sls'
2019-08-27 23:33:56,217 [salt.fileclient  :1219][INFO    ][20199] Fetching file from saltenv 'base', ** done ** 'barbican/client/init.sls'
2019-08-27 23:33:56,239 [salt.fileclient  :1219][INFO    ][20199] Fetching file from saltenv 'base', ** done ** 'barbican/client/service.sls'
2019-08-27 23:33:56,263 [salt.fileclient  :1219][INFO    ][20199] Fetching file from saltenv 'base', ** done ** 'barbican/map.jinja'
2019-08-27 23:33:56,305 [salt.fileclient  :1219][INFO    ][20199] Fetching file from saltenv 'base', ** done ** 'barbican/client/resources/init.sls'
2019-08-27 23:33:56,327 [salt.fileclient  :1219][INFO    ][20199] Fetching file from saltenv 'base', ** done ** 'barbican/client/resources/v1.sls'
2019-08-27 23:33:56,404 [salt.fileclient  :1219][INFO    ][20199] Fetching file from saltenv 'base', ** done ** 'barbican/client/image_sign.sls'
2019-08-27 23:33:57,253 [salt.state       :1780][INFO    ][20199] Running state [python-barbicanclient] at time 23:33:57.253108
2019-08-27 23:33:57,253 [salt.state       :1813][INFO    ][20199] Executing state pkg.installed for [python-barbicanclient]
2019-08-27 23:33:57,254 [salt.loaded.int.module.cmdmod:395 ][INFO    ][20199] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2019-08-27 23:33:58,206 [salt.loaded.int.module.cmdmod:395 ][INFO    ][20199] Executing command ['apt-cache', '-q', 'policy', 'python-barbicanclient'] in directory '/root'
2019-08-27 23:33:58,657 [salt.loaded.int.module.cmdmod:395 ][INFO    ][20199] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2019-08-27 23:34:01,180 [salt.loaded.int.module.cmdmod:395 ][INFO    ][20199] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2019-08-27 23:34:01,213 [salt.loaded.int.module.cmdmod:395 ][INFO    ][20199] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'python-barbicanclient'] in directory '/root'
2019-08-27 23:34:04,061 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command saltutil.find_job with jid 20190827233404049895
2019-08-27 23:34:04,078 [salt.minion      :1432][INFO    ][20858] Starting a new job with PID 20858
2019-08-27 23:34:04,094 [salt.minion      :1711][INFO    ][20858] Returning information for job: 20190827233404049895
2019-08-27 23:34:16,856 [salt.loaded.int.module.cmdmod:395 ][INFO    ][20199] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2019-08-27 23:34:16,919 [salt.state       :300 ][INFO    ][20199] Made the following changes:
'python2.7-pil' changed from 'absent' to '1'
'python-roman' changed from 'absent' to '2.0.0-3'
'python-os-service-types' changed from 'absent' to '1.6.0-0ubuntu1~cloud0'
'python-pyperclip' changed from 'absent' to '1.6.0-1'
'python-oslo.serialization' changed from 'absent' to '2.28.2-0ubuntu1~cloud0'
'python-unicodecsv' changed from 'absent' to '0.14.1-1'
'python-netaddr' changed from 'absent' to '0.7.19-1'
'python-wrapt' changed from 'absent' to '1.9.0-3'
'python-tz' changed from 'absent' to '2018.3-2'
'python2.7-pyparsing' changed from 'absent' to '1'
'libice6' changed from 'absent' to '2:1.0.9-2'
'python-lxml' changed from 'absent' to '4.2.1-1ubuntu0.1'
'python-pbr' changed from 'absent' to '3.1.1-3ubuntu3'
'python-jwt' changed from 'absent' to '1.7.0-2~cloud0'
'libsm6' changed from 'absent' to '2:1.2.2-1'
'python-netifaces' changed from 'absent' to '0.10.4-0.1build4'
'python-webencodings' changed from 'absent' to '0.5-2'
'python-oauthlib' changed from 'absent' to '2.0.6-1'
'python-debtcollector' changed from 'absent' to '1.20.0-2~cloud0'
'python-blinker' changed from 'absent' to '1.4+dfsg1-0.1'
'python2.7-cmd2' changed from 'absent' to '1'
'python-prettytable' changed from 'absent' to '0.7.2-3'
'python-bs4' changed from 'absent' to '4.6.0-1'
'python-pillow' changed from 'absent' to '1'
'python2.7-lxml' changed from 'absent' to '1'
'python2.7-netifaces' changed from 'absent' to '1'
'python-oslo.utils' changed from 'absent' to '3.40.3-0ubuntu1~cloud0'
'python-olefile' changed from 'absent' to '0.45.1-1'
'python-funcsigs' changed from 'absent' to '1.0.2-4'
'python-keystoneauth1' changed from 'absent' to '3.13.1-0ubuntu1~cloud0'
'docutils-doc' changed from 'absent' to '0.14+dfsg-3'
'python2.7-iso8601' changed from 'absent' to '1'
'python-monotonic' changed from 'absent' to '1.5-0ubuntu1~cloud0'
'python-docutils' changed from 'absent' to '0.14+dfsg-3'
'libxmu6' changed from 'absent' to '2:1.1.2-2'
'python-stevedore' changed from 'absent' to '1:1.30.1-0ubuntu1~cloud0'
'python-pyparsing' changed from 'absent' to '2.2.0+dfsg1-2'
'python-barbicanclient' changed from 'absent' to '4.6.0-0ubuntu1'
'xclip' changed from 'absent' to '0.12+svn84-4build1'
'python-cmd2' changed from 'absent' to '0.7.9-0ubuntu1'
'libxt6' changed from 'absent' to '1:1.1.5-1'
'python-cliff' changed from 'absent' to '2.14.1-0ubuntu1~cloud0'
'python-oslo.i18n' changed from 'absent' to '3.23.1-0ubuntu1~cloud0'
'python-oslo-utils' changed from 'absent' to '1'
'python-babel' changed from 'absent' to '2.6.0+dfsg.1-1~cloud0'
'python-html5lib' changed from 'absent' to '0.999999999-1'
'python-pil' changed from 'absent' to '5.1.0-1'
'python-pygments' changed from 'absent' to '2.2.0+dfsg-1'
'python-iso8601' changed from 'absent' to '0.1.11-1'

2019-08-27 23:34:16,939 [salt.state       :915 ][INFO    ][20199] Loading fresh modules for state activity
2019-08-27 23:34:16,985 [salt.state       :1951][INFO    ][20199] Completed state [python-barbicanclient] at time 23:34:16.985678 duration_in_ms=19732.571
2019-08-27 23:34:16,986 [salt.minion      :1711][INFO    ][20199] Returning information for job: 20190827233348982166
2019-08-27 23:38:28,837 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command state.sls with jid 20190827233828827616
2019-08-27 23:38:28,852 [salt.minion      :1432][INFO    ][21707] Starting a new job with PID 21707
2019-08-27 23:38:35,495 [salt.state       :915 ][INFO    ][21707] Loading fresh modules for state activity
2019-08-27 23:38:35,599 [salt.fileclient  :1219][INFO    ][21707] Fetching file from saltenv 'base', ** done ** 'ceilometer/init.sls'
2019-08-27 23:38:35,634 [salt.fileclient  :1219][INFO    ][21707] Fetching file from saltenv 'base', ** done ** 'ceilometer/agent.sls'
2019-08-27 23:38:35,814 [salt.fileclient  :1219][INFO    ][21707] Fetching file from saltenv 'base', ** done ** 'ceilometer/_ssl/rabbitmq.sls'
2019-08-27 23:38:36,860 [salt.state       :1780][INFO    ][21707] Running state [ceilometer-agent-compute] at time 23:38:36.859937
2019-08-27 23:38:36,860 [salt.state       :1813][INFO    ][21707] Executing state pkg.installed for [ceilometer-agent-compute]
2019-08-27 23:38:36,861 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21707] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2019-08-27 23:38:37,794 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21707] Executing command ['apt-cache', '-q', 'policy', 'ceilometer-agent-compute'] in directory '/root'
2019-08-27 23:38:38,304 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21707] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2019-08-27 23:38:41,017 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21707] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2019-08-27 23:38:41,051 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21707] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'ceilometer-agent-compute'] in directory '/root'
2019-08-27 23:38:43,903 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command saltutil.find_job with jid 20190827233843888669
2019-08-27 23:38:43,922 [salt.minion      :1432][INFO    ][22360] Starting a new job with PID 22360
2019-08-27 23:38:43,940 [salt.minion      :1711][INFO    ][22360] Returning information for job: 20190827233843888669
2019-08-27 23:38:51,223 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21707] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2019-08-27 23:38:51,290 [salt.state       :300 ][INFO    ][21707] Made the following changes:
'python3-croniter' changed from 'absent' to '0.3.24-2~cloud0'
'python3-ceilometer' changed from 'absent' to '1:12.0.0-0ubuntu1~cloud0'
'python3-pysnmp4' changed from 'absent' to '4.4.6+repack1-1~cloud0'
'python3-jsonpath-rw' changed from 'absent' to '1.4.0-3'
'python3-pycryptodome' changed from 'absent' to '3.4.7-1ubuntu1'
'python3-cotyledon' changed from 'absent' to '1.6.8-0ubuntu1'
'ceilometer-agent-compute' changed from 'absent' to '1:12.0.0-0ubuntu1~cloud0'
'python3-jsonpath-rw-ext' changed from 'absent' to '1.1.3-1'
'python3-pysmi' changed from 'absent' to '0.2.2-1'
'ceilometer-common' changed from 'absent' to '1:12.0.0-0ubuntu1~cloud0'

2019-08-27 23:38:51,311 [salt.state       :915 ][INFO    ][21707] Loading fresh modules for state activity
2019-08-27 23:38:51,358 [salt.state       :1951][INFO    ][21707] Completed state [ceilometer-agent-compute] at time 23:38:51.358232 duration_in_ms=14498.295
2019-08-27 23:38:51,360 [salt.state       :1780][INFO    ][21707] Running state [ceilometer_ssl_rabbitmq] at time 23:38:51.360936
2019-08-27 23:38:51,361 [salt.state       :1813][INFO    ][21707] Executing state test.show_notification for [ceilometer_ssl_rabbitmq]
2019-08-27 23:38:51,361 [salt.state       :300 ][INFO    ][21707] Running ceilometer._ssl.rabbitmq
2019-08-27 23:38:51,361 [salt.state       :1951][INFO    ][21707] Completed state [ceilometer_ssl_rabbitmq] at time 23:38:51.361741 duration_in_ms=0.805
2019-08-27 23:38:51,364 [salt.state       :1780][INFO    ][21707] Running state [/etc/ceilometer/ceilometer.conf] at time 23:38:51.364230
2019-08-27 23:38:51,364 [salt.state       :1813][INFO    ][21707] Executing state file.managed for [/etc/ceilometer/ceilometer.conf]
2019-08-27 23:38:51,397 [salt.fileclient  :1219][INFO    ][21707] Fetching file from saltenv 'base', ** done ** 'ceilometer/files/stein/ceilometer-agent.conf.Debian'
2019-08-27 23:38:51,527 [salt.fileclient  :1219][INFO    ][21707] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/rocky/oslo/messaging/_default.conf'
2019-08-27 23:38:51,567 [salt.fileclient  :1219][INFO    ][21707] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/rocky/oslo/_log.conf'
2019-08-27 23:38:51,588 [salt.fileclient  :1219][INFO    ][21707] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/rocky/keystoneauth/_type_password.conf'
2019-08-27 23:38:51,624 [salt.fileclient  :1219][INFO    ][21707] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/rocky/oslo/messaging/_notifications.conf'
2019-08-27 23:38:51,642 [salt.fileclient  :1219][INFO    ][21707] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/rocky/oslo/messaging/_rabbit.conf'
2019-08-27 23:38:51,670 [salt.state       :300 ][INFO    ][21707] File changed:
--- 
+++ 
@@ -1,8 +1,320 @@
 [DEFAULT]
-
-#
-# From ceilometer
-#
+#
+# From oslo.messaging
+#
+
+# Size of RPC connection pool. (integer value)
+#rpc_conn_pool_size = 30
+
+# The pool size limit for connections expiration policy (integer value)
+#conn_pool_min_size = 2
+
+# The time-to-live in sec of idle connections in the pool (integer value)
+#conn_pool_ttl = 1200
+
+# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
+# The "host" option should point or resolve to this address. (string value)
+#rpc_zmq_bind_address = *
+
+# MatchMaker driver. (string value)
+# Possible values:
+# redis - <No description provided>
+# sentinel - <No description provided>
+# dummy - <No description provided>
+#rpc_zmq_matchmaker = redis
+
+# Number of ZeroMQ contexts, defaults to 1. (integer value)
+#rpc_zmq_contexts = 1
+
+# Maximum number of ingress messages to locally buffer per topic. Default is
+# unlimited. (integer value)
+#rpc_zmq_topic_backlog = <None>
+
+# Directory for holding IPC sockets. (string value)
+#rpc_zmq_ipc_dir = /var/run/openstack
+
+# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
+# "host" option, if running Nova. (string value)
+#rpc_zmq_host = localhost
+
+# Number of seconds to wait before all pending messages will be sent after
+# closing a socket. The default value of -1 specifies an infinite linger
+# period. The value of 0 specifies no linger period. Pending messages shall be
+# discarded immediately when the socket is closed. Positive values specify an
+# upper bound for the linger period. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_cast_timeout
+#zmq_linger = -1
+
+# The default number of seconds that poll should wait. Poll raises timeout
+# exception when timeout expired. (integer value)
+#rpc_poll_timeout = 1
+
+
+# Expiration timeout in seconds of a name service record about existing target
+# ( < 0 means no timeout). (integer value)
+#zmq_target_expire = 300
+
+# Update period in seconds of a name service record about existing target.
+# (integer value)
+#zmq_target_update = 180
+
+# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
+# value)
+#use_pub_sub = false
+
+# Use ROUTER remote proxy. (boolean value)
+#use_router_proxy = false
+
+# This option makes direct connections dynamic or static. It makes sense only
+# with use_router_proxy=False which means to use direct connections for direct
+# message types (ignored otherwise). (boolean value)
+#use_dynamic_connections = false
+
+# How many additional connections to a host will be made for failover reasons.
+# This option is actual only in dynamic connections mode. (integer value)
+#zmq_failover_connections = 2
+
+# Minimal port number for random ports range. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#rpc_zmq_min_port = 49153
+
+# Maximal port number for random ports range. (integer value)
+# Minimum value: 1
+# Maximum value: 65536
+#rpc_zmq_max_port = 65536
+
+# Number of retries to find free port number before fail with ZMQBindError.
+# (integer value)
+#rpc_zmq_bind_port_retries = 100
+
+# Default serialization mechanism for serializing/deserializing
+# outgoing/incoming messages (string value)
+# Possible values:
+# json - <No description provided>
+# msgpack - <No description provided>
+#rpc_zmq_serialization = json
+
+# This option configures round-robin mode in zmq socket. True means not keeping
+# a queue when server side disconnects. False means to keep queue and messages
+# even if server is disconnected, when the server appears we send all
+# accumulated messages to it. (boolean value)
+#zmq_immediate = true
+
+# Enable/disable TCP keepalive (KA) mechanism. The default value of -1 (or any
+# other negative value) means to skip any overrides and leave it to OS default;
+# 0 and 1 (or any other positive value) mean to disable and enable the option
+# respectively. (integer value)
+#zmq_tcp_keepalive = -1
+
+# The duration between two keepalive transmissions in idle condition. The unit
+# is platform dependent, for example, seconds in Linux, milliseconds in Windows
+# etc. The default value of -1 (or any other negative value and 0) means to
+# skip any overrides and leave it to OS default. (integer value)
+#zmq_tcp_keepalive_idle = -1
+
+# The number of retransmissions to be carried out before declaring that remote
+# end is not available. The default value of -1 (or any other negative value
+# and 0) means to skip any overrides and leave it to OS default. (integer
+# value)
+#zmq_tcp_keepalive_cnt = -1
+
+# The duration between two successive keepalive retransmissions, if
+# acknowledgement to the previous keepalive transmission is not received. The
+# unit is platform dependent, for example, seconds in Linux, milliseconds in
+# Windows etc. The default value of -1 (or any other negative value and 0)
+# means to skip any overrides and leave it to OS default. (integer value)
+#zmq_tcp_keepalive_intvl = -1
+
+# Maximum number of (green) threads to work concurrently. (integer value)
+#rpc_thread_pool_size = 100
+
+# Expiration timeout in seconds of a sent/received message after which it is
+# not tracked anymore by a client/server. (integer value)
+#rpc_message_ttl = 300
+
+# Wait for message acknowledgements from receivers. This mechanism works only
+# via proxy without PUB/SUB. (boolean value)
+#rpc_use_acks = false
+
+# Number of seconds to wait for an ack from a cast/call. After each retry
+# attempt this timeout is multiplied by some specified multiplier. (integer
+# value)
+#rpc_ack_timeout_base = 15
+
+# Number to multiply base ack timeout by after each retry attempt. (integer
+# value)
+#rpc_ack_timeout_multiplier = 2
+
+# Default number of message sending attempts in case of any problems occurred:
+# positive value N means at most N retries, 0 means no retries, None or -1 (or
+# any other negative values) mean to retry forever. This option is used only if
+# acknowledgments are enabled. (integer value)
+#rpc_retry_attempts = 3
+
+# List of publisher hosts SubConsumer can subscribe on. This option has higher
+# priority then the default publishers list taken from the matchmaker. (list
+# value)
+#subscribe_on =
+
+# Size of executor thread pool when executor is threading or eventlet. (integer
+# value)
+# Deprecated group/name - [DEFAULT]/rpc_thread_pool_size
+#executor_thread_pool_size = 64
+
+# Seconds to wait for a response from a call. (integer value)
+#rpc_response_timeout = 60
+
+# The network address and optional user credentials for connecting to the
+# messaging backend, in URL format. The expected format is:
+#
+# driver://[user:pass@]host:port[,[userN:passN@]hostN:portN]/virtual_host?query
+#
+# Example: rabbit://rabbitmq:password@127.0.0.1:5672//
+#
+# For full details on the fields in the URL see the documentation of
+# oslo_messaging.TransportURL at
+# https://docs.openstack.org/oslo.messaging/latest/reference/transport.html
+# (string value)
+#transport_url = <None>
+transport_url = rabbit://openstack:opnfv_secret@172.16.10.36:5672,openstack:opnfv_secret@172.16.10.37:5672,openstack:opnfv_secret@172.16.10.38:5672//openstack
+
+# DEPRECATED: The messaging driver to use, defaults to rabbit. Other drivers
+# include amqp and zmq. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rpc_backend = rabbit
+
+# The default exchange under which topics are scoped. May be overridden by an
+# exchange name specified in the transport_url option. (string value)
+#control_exchange = keystone
+
+#
+# From oslo.log
+#
+
+# If set to true, the logging level will be set to DEBUG instead of the default
+# INFO level. (boolean value)
+# Note: This option can be changed without restarting.
+#debug = false
+
+# The name of a logging configuration file. This file is appended to any
+# existing logging configuration files. For details about logging configuration
+# files, see the Python logging module documentation. Note that when logging
+# configuration files are used then all logging configuration is set in the
+# configuration file and other logging configuration options are ignored (for
+# example, logging_context_format_string). (string value)
+# Note: This option can be changed without restarting.
+# Deprecated group/name - [DEFAULT]/log_config
+#log_config_append = <None>
+
+# Defines the format string for %%(asctime)s in log records. Default:
+# %(default)s . This option is ignored if log_config_append is set. (string
+# value)
+#log_date_format = %Y-%m-%d %H:%M:%S
+
+# (Optional) Name of log file to send logging output to. If no default is set,
+# logging will go to stderr as defined by use_stderr. This option is ignored if
+# log_config_append is set. (string value)
+# Deprecated group/name - [DEFAULT]/logfile
+#log_file = <None>
+
+# (Optional) The base directory used for relative log_file  paths. This option
+# is ignored if log_config_append is set. (string value)
+# Deprecated group/name - [DEFAULT]/logdir
+#log_dir = <None>
+
+# Uses logging handler designed to watch file system. When log file is moved or
+# removed this handler will open a new log file with specified path
+# instantaneously. It makes sense only if log_file option is specified and
+# Linux platform is used. This option is ignored if log_config_append is set.
+# (boolean value)
+#watch_log_file = false
+
+# Use syslog for logging. Existing syslog format is DEPRECATED and will be
+# changed later to honor RFC5424. This option is ignored if log_config_append
+# is set. (boolean value)
+#use_syslog = false
+
+# Enable journald for logging. If running in a systemd environment you may wish
+# to enable journal support. Doing so will use the journal native protocol
+# which includes structured metadata in addition to log messages.This option is
+# ignored if log_config_append is set. (boolean value)
+#use_journal = false
+
+# Syslog facility to receive log lines. This option is ignored if
+# log_config_append is set. (string value)
+#syslog_log_facility = LOG_USER
+
+# Use JSON formatting for logging. This option is ignored if log_config_append
+# is set. (boolean value)
+#use_json = false
+
+# Log output to standard error. This option is ignored if log_config_append is
+# set. (boolean value)
+#use_stderr = false
+
+# Format string to use for log messages with context. (string value)
+#logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
+
+# Format string to use for log messages when context is undefined. (string
+# value)
+#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
+
+# Additional data to append to log message when logging level for the message
+# is DEBUG. (string value)
+#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
+
+# Prefix each line of exception output with this format. (string value)
+#logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
+
+# Defines the format string for %(user_identity)s that is used in
+# logging_context_format_string. (string value)
+#logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
+
+# List of package logging levels in logger=LEVEL pairs. This option is ignored
+# if log_config_append is set. (list value)
+#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
+
+# Enables or disables publication of error events. (boolean value)
+#publish_errors = false
+
+# The format for an instance that is passed with the log message. (string
+# value)
+#instance_format = "[instance: %(uuid)s] "
+
+# The format for an instance UUID that is passed with the log message. (string
+# value)
+#instance_uuid_format = "[instance: %(uuid)s] "
+
+# Interval, number of seconds, of log rate limiting. (integer value)
+#rate_limit_interval = 0
+
+# Maximum number of logged messages per rate_limit_interval. (integer value)
+#rate_limit_burst = 0
+
+# Log level name used by rate limiting: CRITICAL, ERROR, INFO, WARNING, DEBUG
+# or empty string. Logs with level greater or equal to rate_limit_except_level
+# are not filtered. An empty string means that all levels are filtered. (string
+# value)
+#rate_limit_except_level = CRITICAL
+
+# Enables or disables fatal status of deprecations. (boolean value)
+#fatal_deprecations = false
+
+
+#
+# From ceilometer
+#
+
+# DEPRECATED: To reduce polling agent load, samples are sent to the
+# notification agent in a batch. To gain higher throughput at the cost of load
+# set this to False. This option is deprecated, to disable batching set
+# batch_size = 0 in the polling group. (boolean value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#batch_polled_samples = true
 
 # Inspector to use for inspecting the hypervisor layer. Known inspectors are
 # libvirt, hyperv, vsphere and xenapi. (string value)
@@ -22,15 +334,13 @@
 #libvirt_uri =
 
 # Swift reseller prefix. Must be on par with reseller_prefix in proxy-
-# server.conf. (string value)
+# agent.conf. (string value)
 #reseller_prefix = AUTH_
 
 # Configuration file for pipeline definition. (string value)
 #pipeline_cfg_file = pipeline.yaml
 
-# DEPRECATED: Configuration file for event pipeline definition. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
+# Configuration file for event pipeline definition. (string value)
 #event_pipeline_cfg_file = event_pipeline.yaml
 
 # Source for samples emitted on this instance. (string value)
@@ -53,10 +363,6 @@
 # Name of this node, which must be valid in an AMQP key. Can be an opaque
 # identifier. For ZeroMQ only, must be a valid host name, FQDN, or IP address.
 # (host address value)
-#
-# This option has a sample default set, which means that
-# its actual default value may vary from the one documented
-# below.
 #host = <your_hostname>
 
 # Timeout seconds for HTTP requests. Set it to None to disable timeout.
@@ -67,219 +373,6 @@
 # (integer value)
 # Minimum value: 1
 #max_parallel_requests = 64
-
-#
-# From oslo.log
-#
-
-# If set to true, the logging level will be set to DEBUG instead of the default
-# INFO level. (boolean value)
-# Note: This option can be changed without restarting.
-#debug = false
-
-# The name of a logging configuration file. This file is appended to any
-# existing logging configuration files. For details about logging configuration
-# files, see the Python logging module documentation. Note that when logging
-# configuration files are used then all logging configuration is set in the
-# configuration file and other logging configuration options are ignored (for
-# example, log-date-format). (string value)
-# Note: This option can be changed without restarting.
-# Deprecated group/name - [DEFAULT]/log_config
-#log_config_append = <None>
-
-# Defines the format string for %%(asctime)s in log records. Default:
-# %(default)s . This option is ignored if log_config_append is set. (string
-# value)
-#log_date_format = %Y-%m-%d %H:%M:%S
-
-# (Optional) Name of log file to send logging output to. If no default is set,
-# logging will go to stderr as defined by use_stderr. This option is ignored if
-# log_config_append is set. (string value)
-# Deprecated group/name - [DEFAULT]/logfile
-#log_file = <None>
-
-# (Optional) The base directory used for relative log_file  paths. This option
-# is ignored if log_config_append is set. (string value)
-# Deprecated group/name - [DEFAULT]/logdir
-#log_dir = <None>
-
-# Uses logging handler designed to watch file system. When log file is moved or
-# removed this handler will open a new log file with specified path
-# instantaneously. It makes sense only if log_file option is specified and
-# Linux platform is used. This option is ignored if log_config_append is set.
-# (boolean value)
-#watch_log_file = false
-
-# Use syslog for logging. Existing syslog format is DEPRECATED and will be
-# changed later to honor RFC5424. This option is ignored if log_config_append
-# is set. (boolean value)
-#use_syslog = false
-
-# Enable journald for logging. If running in a systemd environment you may wish
-# to enable journal support. Doing so will use the journal native protocol
-# which includes structured metadata in addition to log messages.This option is
-# ignored if log_config_append is set. (boolean value)
-#use_journal = false
-
-# Syslog facility to receive log lines. This option is ignored if
-# log_config_append is set. (string value)
-#syslog_log_facility = LOG_USER
-
-# Use JSON formatting for logging. This option is ignored if log_config_append
-# is set. (boolean value)
-#use_json = false
-
-# Log output to standard error. This option is ignored if log_config_append is
-# set. (boolean value)
-#use_stderr = false
-
-# Log output to Windows Event Log. (boolean value)
-#use_eventlog = false
-
-# The amount of time before the log files are rotated. This option is ignored
-# unless log_rotation_type is setto "interval". (integer value)
-#log_rotate_interval = 1
-
-# Rotation interval type. The time of the last file change (or the time when
-# the service was started) is used when scheduling the next rotation. (string
-# value)
-# Possible values:
-# Seconds - <No description provided>
-# Minutes - <No description provided>
-# Hours - <No description provided>
-# Days - <No description provided>
-# Weekday - <No description provided>
-# Midnight - <No description provided>
-#log_rotate_interval_type = days
-
-# Maximum number of rotated log files. (integer value)
-#max_logfile_count = 30
-
-# Log file maximum size in MB. This option is ignored if "log_rotation_type" is
-# not set to "size". (integer value)
-#max_logfile_size_mb = 200
-
-# Log rotation type. (string value)
-# Possible values:
-# interval - Rotate logs at predefined time intervals.
-# size - Rotate logs once they reach a predefined size.
-# none - Do not rotate log files.
-#log_rotation_type = none
-
-# Format string to use for log messages with context. Used by
-# oslo_log.formatters.ContextFormatter (string value)
-#logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
-
-# Format string to use for log messages when context is undefined. Used by
-# oslo_log.formatters.ContextFormatter (string value)
-#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
-
-# Additional data to append to log message when logging level for the message
-# is DEBUG. Used by oslo_log.formatters.ContextFormatter (string value)
-#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
-
-# Prefix each line of exception output with this format. Used by
-# oslo_log.formatters.ContextFormatter (string value)
-#logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
-
-# Defines the format string for %(user_identity)s that is used in
-# logging_context_format_string. Used by oslo_log.formatters.ContextFormatter
-# (string value)
-#logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
-
-# List of package logging levels in logger=LEVEL pairs. This option is ignored
-# if log_config_append is set. (list value)
-#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,oslo_policy=INFO,dogpile.core.dogpile=INFO
-
-# Enables or disables publication of error events. (boolean value)
-#publish_errors = false
-
-# The format for an instance that is passed with the log message. (string
-# value)
-#instance_format = "[instance: %(uuid)s] "
-
-# The format for an instance UUID that is passed with the log message. (string
-# value)
-#instance_uuid_format = "[instance: %(uuid)s] "
-
-# Interval, number of seconds, of log rate limiting. (integer value)
-#rate_limit_interval = 0
-
-# Maximum number of logged messages per rate_limit_interval. (integer value)
-#rate_limit_burst = 0
-
-# Log level name used by rate limiting: CRITICAL, ERROR, INFO, WARNING, DEBUG
-# or empty string. Logs with level greater or equal to rate_limit_except_level
-# are not filtered. An empty string means that all levels are filtered. (string
-# value)
-#rate_limit_except_level = CRITICAL
-
-# Enables or disables fatal status of deprecations. (boolean value)
-#fatal_deprecations = false
-
-#
-# From oslo.messaging
-#
-
-# Size of RPC connection pool. (integer value)
-#rpc_conn_pool_size = 30
-
-# The pool size limit for connections expiration policy (integer value)
-#conn_pool_min_size = 2
-
-# The time-to-live in sec of idle connections in the pool (integer value)
-#conn_pool_ttl = 1200
-
-# Size of executor thread pool when executor is threading or eventlet. (integer
-# value)
-# Deprecated group/name - [DEFAULT]/rpc_thread_pool_size
-#executor_thread_pool_size = 64
-
-# Seconds to wait for a response from a call. (integer value)
-#rpc_response_timeout = 60
-
-# The network address and optional user credentials for connecting to the
-# messaging backend, in URL format. The expected format is:
-#
-# driver://[user:pass@]host:port[,[userN:passN@]hostN:portN]/virtual_host?query
-#
-# Example: rabbit://rabbitmq:password@127.0.0.1:5672//
-#
-# For full details on the fields in the URL see the documentation of
-# oslo_messaging.TransportURL at
-# https://docs.openstack.org/oslo.messaging/latest/reference/transport.html
-# (string value)
-#transport_url = rabbit://
-
-# The default exchange under which topics are scoped. May be overridden by an
-# exchange name specified in the transport_url option. (string value)
-#control_exchange = openstack
-
-#
-# From oslo.service.service
-#
-
-# Enable eventlet backdoor.  Acceptable values are 0, <port>, and
-# <start>:<end>, where 0 results in listening on a random tcp port number;
-# <port> results in listening on the specified port number (and not enabling
-# backdoor if that port is in use); and <start>:<end> results in listening on
-# the smallest unused port number within the specified range of port numbers.
-# The chosen port is displayed in the service's log file. (string value)
-#backdoor_port = <None>
-
-# Enable eventlet backdoor, using the provided path as a unix socket that can
-# receive connections. This option is mutually exclusive with 'backdoor_port'
-# in that only one should be provided. If both are provided then the existence
-# of this option overrides the usage of that option. (string value)
-#backdoor_socket = <None>
-
-# Enables or disables logging values of all registered options when starting a
-# service (at DEBUG level). (boolean value)
-#log_options = true
-
-# Specify a timeout after which a gracefully shutdown server will exit. Zero
-# value means endless wait. (integer value)
-#graceful_shutdown_timeout = 60
 
 
 [compute]
@@ -299,6 +392,7 @@
 # workload_partitioning - <No description provided>
 # libvirt_metadata - <No description provided>
 #instance_discovery_method = libvirt_metadata
+instance_discovery_method = libvirt_metadata
 
 # New instances will be discovered periodically based on this option (in
 # seconds). By default, the agent discovers instances according to pipeline
@@ -343,21 +437,15 @@
 # From ceilometer
 #
 
-# DEPRECATED: Configuration file for event definitions. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
+# Configuration file for event definitions. (string value)
 #definitions_cfg_file = event_definitions.yaml
 
-# DEPRECATED: Drop notifications if no event definition matches. (Otherwise, we
-# convert them with just the default traits) (boolean value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
+# Drop notifications if no event definition matches. (Otherwise, we convert
+# them with just the default traits) (boolean value)
 #drop_unmatched_notifications = false
 
-# DEPRECATED: Store the raw notification for select priority levels (info
-# and/or error). By default, raw details are not captured. (multi valued)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
+# Store the raw notification for select priority levels (info and/or error). By
+# default, raw details are not captured. (multi valued)
 #store_raw =
 
 
@@ -426,9 +514,17 @@
 # From ceilometer
 #
 
+# DEPRECATED: Configuration file for defining meter notifications. This option
+# is deprecated and use meter_definitions_dirs to configure meter notification
+# file. Meter definitions configuration file will be sought according to the
+# parameter. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#meter_definitions_cfg_file = <None>
+
 # List directory to find files of defining meter notifications. (multi valued)
 #meter_definitions_dirs = /etc/ceilometer/meters.d
-#meter_definitions_dirs = /build/ceilometer-_h5L8s/ceilometer-12.0.0/ceilometer/data/meters.d
+#meter_definitions_dirs = /build/ceilometer-yNzi7g/ceilometer-11.0.1/ceilometer/data/meters.d
 
 
 [notification]
@@ -436,9 +532,24 @@
 #
 # From ceilometer
 #
+
+# DEPRECATED: Number of queues to parallelize workload across. This value
+# should be larger than the number of active notification agents for optimal
+# results. WARNING: Once set, lowering this value may result in lost data.
+# (integer value)
+# Minimum value: 1
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#pipeline_processing_queues = 10
 
 # Acknowledge message when event persistence fails. (boolean value)
 #ack_on_event_error = true
+
+# DEPRECATED: Enable workload partitioning, allowing multiple notification
+# agents to be run simultaneously. (boolean value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#workload_partitioning = false
 
 # Messaging URLs to listen for notifications. Example:
 # rabbit://user:pass@host1:port1[,user:pass@hostN:portN]/virtual_host
@@ -452,6 +563,10 @@
 # advised when transformations are applied in pipeline. (integer value)
 # Minimum value: 1
 #batch_size = 100
+
+# Number of seconds to wait before publishing samples when batch_size is not
+# reached (None means indefinitely) (integer value)
+#batch_timeout = 5
 
 # Number of workers for notification service, default value is 1. (integer
 # value)
@@ -482,399 +597,6 @@
 #notification_control_exchanges = aodh
 
 
-[oslo_concurrency]
-
-#
-# From oslo.concurrency
-#
-
-# Enables or disables inter-process locks. (boolean value)
-#disable_process_locking = false
-
-# Directory to use for lock files.  For security, the specified directory
-# should only be writable by the user running the processes that need locking.
-# Defaults to environment variable OSLO_LOCK_PATH. If external locks are used,
-# a lock path must be set. (string value)
-#lock_path = <None>
-
-
-[oslo_messaging_amqp]
-
-#
-# From oslo.messaging
-#
-
-# Name for the AMQP container. must be globally unique. Defaults to a generated
-# UUID (string value)
-#container_name = <None>
-
-# Timeout for inactive connections (in seconds) (integer value)
-#idle_timeout = 0
-
-# Debug: dump AMQP frames to stdout (boolean value)
-#trace = false
-
-# Attempt to connect via SSL. If no other ssl-related parameters are given, it
-# will use the system's CA-bundle to verify the server's certificate. (boolean
-# value)
-#ssl = false
-
-# CA certificate PEM file used to verify the server's certificate (string
-# value)
-#ssl_ca_file =
-
-# Self-identifying certificate PEM file for client authentication (string
-# value)
-#ssl_cert_file =
-
-# Private key PEM file used to sign ssl_cert_file certificate (optional)
-# (string value)
-#ssl_key_file =
-
-# Password for decrypting ssl_key_file (if encrypted) (string value)
-#ssl_key_password = <None>
-
-# By default SSL checks that the name in the server's certificate matches the
-# hostname in the transport_url. In some configurations it may be preferable to
-# use the virtual hostname instead, for example if the server uses the Server
-# Name Indication TLS extension (rfc6066) to provide a certificate per virtual
-# host. Set ssl_verify_vhost to True if the server's SSL certificate uses the
-# virtual host name instead of the DNS name. (boolean value)
-#ssl_verify_vhost = false
-
-# Space separated list of acceptable SASL mechanisms (string value)
-#sasl_mechanisms =
-
-# Path to directory that contains the SASL configuration (string value)
-#sasl_config_dir =
-
-# Name of configuration file (without .conf suffix) (string value)
-#sasl_config_name =
-
-# SASL realm to use if no realm present in username (string value)
-#sasl_default_realm =
-
-# Seconds to pause before attempting to re-connect. (integer value)
-# Minimum value: 1
-#connection_retry_interval = 1
-
-# Increase the connection_retry_interval by this many seconds after each
-# unsuccessful failover attempt. (integer value)
-# Minimum value: 0
-#connection_retry_backoff = 2
-
-# Maximum limit for connection_retry_interval + connection_retry_backoff
-# (integer value)
-# Minimum value: 1
-#connection_retry_interval_max = 30
-
-# Time to pause between re-connecting an AMQP 1.0 link that failed due to a
-# recoverable error. (integer value)
-# Minimum value: 1
-#link_retry_delay = 10
-
-# The maximum number of attempts to re-send a reply message which failed due to
-# a recoverable error. (integer value)
-# Minimum value: -1
-#default_reply_retry = 0
-
-# The deadline for an rpc reply message delivery. (integer value)
-# Minimum value: 5
-#default_reply_timeout = 30
-
-# The deadline for an rpc cast or call message delivery. Only used when caller
-# does not provide a timeout expiry. (integer value)
-# Minimum value: 5
-#default_send_timeout = 30
-
-# The deadline for a sent notification message delivery. Only used when caller
-# does not provide a timeout expiry. (integer value)
-# Minimum value: 5
-#default_notify_timeout = 30
-
-# The duration to schedule a purge of idle sender links. Detach link after
-# expiry. (integer value)
-# Minimum value: 1
-#default_sender_link_timeout = 600
-
-# Indicates the addressing mode used by the driver.
-# Permitted values:
-# 'legacy'   - use legacy non-routable addressing
-# 'routable' - use routable addresses
-# 'dynamic'  - use legacy addresses if the message bus does not support routing
-# otherwise use routable addressing (string value)
-#addressing_mode = dynamic
-
-# Enable virtual host support for those message buses that do not natively
-# support virtual hosting (such as qpidd). When set to true the virtual host
-# name will be added to all message bus addresses, effectively creating a
-# private 'subnet' per virtual host. Set to False if the message bus supports
-# virtual hosting using the 'hostname' field in the AMQP 1.0 Open performative
-# as the name of the virtual host. (boolean value)
-#pseudo_vhost = true
-
-# address prefix used when sending to a specific server (string value)
-#server_request_prefix = exclusive
-
-# address prefix used when broadcasting to all servers (string value)
-#broadcast_prefix = broadcast
-
-# address prefix when sending to any server in group (string value)
-#group_request_prefix = unicast
-
-# Address prefix for all generated RPC addresses (string value)
-#rpc_address_prefix = openstack.org/om/rpc
-
-# Address prefix for all generated Notification addresses (string value)
-#notify_address_prefix = openstack.org/om/notify
-
-# Appended to the address prefix when sending a fanout message. Used by the
-# message bus to identify fanout messages. (string value)
-#multicast_address = multicast
-
-# Appended to the address prefix when sending to a particular RPC/Notification
-# server. Used by the message bus to identify messages sent to a single
-# destination. (string value)
-#unicast_address = unicast
-
-# Appended to the address prefix when sending to a group of consumers. Used by
-# the message bus to identify messages that should be delivered in a round-
-# robin fashion across consumers. (string value)
-#anycast_address = anycast
-
-# Exchange name used in notification addresses.
-# Exchange name resolution precedence:
-# Target.exchange if set
-# else default_notification_exchange if set
-# else control_exchange if set
-# else 'notify' (string value)
-#default_notification_exchange = <None>
-
-# Exchange name used in RPC addresses.
-# Exchange name resolution precedence:
-# Target.exchange if set
-# else default_rpc_exchange if set
-# else control_exchange if set
-# else 'rpc' (string value)
-#default_rpc_exchange = <None>
-
-# Window size for incoming RPC Reply messages. (integer value)
-# Minimum value: 1
-#reply_link_credit = 200
-
-# Window size for incoming RPC Request messages (integer value)
-# Minimum value: 1
-#rpc_server_credit = 100
-
-# Window size for incoming Notification messages (integer value)
-# Minimum value: 1
-#notify_server_credit = 100
-
-# Send messages of this type pre-settled.
-# Pre-settled messages will not receive acknowledgement
-# from the peer. Note well: pre-settled messages may be
-# silently discarded if the delivery fails.
-# Permitted values:
-# 'rpc-call' - send RPC Calls pre-settled
-# 'rpc-reply'- send RPC Replies pre-settled
-# 'rpc-cast' - Send RPC Casts pre-settled
-# 'notify'   - Send Notifications pre-settled
-#  (multi valued)
-#pre_settled = rpc-cast
-#pre_settled = rpc-reply
-
-
-[oslo_messaging_kafka]
-
-#
-# From oslo.messaging
-#
-
-# Max fetch bytes of Kafka consumer (integer value)
-#kafka_max_fetch_bytes = 1048576
-
-# Default timeout(s) for Kafka consumers (floating point value)
-#kafka_consumer_timeout = 1.0
-
-# DEPRECATED: Pool Size for Kafka Consumers (integer value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#pool_size = 10
-
-# DEPRECATED: The pool size limit for connections expiration policy (integer
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#conn_pool_min_size = 2
-
-# DEPRECATED: The time-to-live in sec of idle connections in the pool (integer
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#conn_pool_ttl = 1200
-
-# Group id for Kafka consumer. Consumers in one group will coordinate message
-# consumption (string value)
-#consumer_group = oslo_messaging_consumer
-
-# Upper bound on the delay for KafkaProducer batching in seconds (floating
-# point value)
-#producer_batch_timeout = 0.0
-
-# Size of batch for the producer async send (integer value)
-#producer_batch_size = 16384
-
-# Enable asynchronous consumer commits (boolean value)
-#enable_auto_commit = false
-
-# The maximum number of records returned in a poll call (integer value)
-#max_poll_records = 500
-
-# Protocol used to communicate with brokers (string value)
-# Possible values:
-# PLAINTEXT - <No description provided>
-# SASL_PLAINTEXT - <No description provided>
-# SSL - <No description provided>
-# SASL_SSL - <No description provided>
-#security_protocol = PLAINTEXT
-
-# Mechanism when security protocol is SASL (string value)
-#sasl_mechanism = PLAIN
-
-# CA certificate PEM file used to verify the server certificate (string value)
-#ssl_cafile =
-
-
-[oslo_messaging_notifications]
-
-#
-# From oslo.messaging
-#
-
-# The Drivers(s) to handle sending notifications. Possible values are
-# messaging, messagingv2, routing, log, test, noop (multi valued)
-# Deprecated group/name - [DEFAULT]/notification_driver
-#driver =
-
-# A URL representing the messaging driver to use for notifications. If not set,
-# we fall back to the same configuration used for RPC. (string value)
-# Deprecated group/name - [DEFAULT]/notification_transport_url
-#transport_url = <None>
-
-# AMQP topic used for OpenStack notifications. (list value)
-# Deprecated group/name - [rpc_notifier2]/topics
-# Deprecated group/name - [DEFAULT]/notification_topics
-#topics = notifications
-
-# The maximum number of attempts to re-send a notification message which failed
-# to be delivered due to a recoverable error. 0 - No retry, -1 - indefinite
-# (integer value)
-#retry = -1
-
-
-[oslo_messaging_rabbit]
-
-#
-# From oslo.messaging
-#
-
-# Use durable queues in AMQP. (boolean value)
-#amqp_durable_queues = false
-
-# Auto-delete queues in AMQP. (boolean value)
-#amqp_auto_delete = false
-
-# Connect over SSL. (boolean value)
-# Deprecated group/name - [oslo_messaging_rabbit]/rabbit_use_ssl
-#ssl = false
-
-# SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and
-# SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some
-# distributions. (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_version
-#ssl_version =
-
-# SSL key file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_keyfile
-#ssl_key_file =
-
-# SSL cert file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_certfile
-#ssl_cert_file =
-
-# SSL certification authority file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_ca_certs
-#ssl_ca_file =
-
-# How long to wait before reconnecting in response to an AMQP consumer cancel
-# notification. (floating point value)
-#kombu_reconnect_delay = 1.0
-
-# EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression will not
-# be used. This option may not be available in future versions. (string value)
-#kombu_compression = <None>
-
-# How long to wait a missing client before abandoning to send it its replies.
-# This value should not be longer than rpc_response_timeout. (integer value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_reconnect_timeout
-#kombu_missing_consumer_retry_timeout = 60
-
-# Determines how the next RabbitMQ node is chosen in case the one we are
-# currently connected to becomes unavailable. Takes effect only if more than
-# one RabbitMQ node is provided in config. (string value)
-# Possible values:
-# round-robin - <No description provided>
-# shuffle - <No description provided>
-#kombu_failover_strategy = round-robin
-
-# The RabbitMQ login method. (string value)
-# Possible values:
-# PLAIN - <No description provided>
-# AMQPLAIN - <No description provided>
-# RABBIT-CR-DEMO - <No description provided>
-#rabbit_login_method = AMQPLAIN
-
-# How frequently to retry connecting with RabbitMQ. (integer value)
-#rabbit_retry_interval = 1
-
-# How long to backoff for between retries when connecting to RabbitMQ. (integer
-# value)
-#rabbit_retry_backoff = 2
-
-# Maximum interval of RabbitMQ connection retries. Default is 30 seconds.
-# (integer value)
-#rabbit_interval_max = 30
-
-# Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change this
-# option, you must wipe the RabbitMQ database. In RabbitMQ 3.0, queue mirroring
-# is no longer controlled by the x-ha-policy argument when declaring a queue.
-# If you just want to make sure that all queues (except those with auto-
-# generated names) are mirrored across all nodes, run: "rabbitmqctl set_policy
-# HA '^(?!amq\.).*' '{"ha-mode": "all"}' " (boolean value)
-#rabbit_ha_queues = false
-
-# Positive integer representing duration in seconds for queue TTL (x-expires).
-# Queues which are unused for the duration of the TTL are automatically
-# deleted. The parameter affects only reply and fanout queues. (integer value)
-# Minimum value: 1
-#rabbit_transient_queues_ttl = 1800
-
-# Specifies the number of messages to prefetch. Setting to zero allows
-# unlimited messages. (integer value)
-#rabbit_qos_prefetch_count = 0
-
-# Number of seconds after which the Rabbit broker is considered down if
-# heartbeat's keep-alive fails (0 disable the heartbeat). EXPERIMENTAL (integer
-# value)
-#heartbeat_timeout_threshold = 60
-
-# How often times during the heartbeat_timeout_threshold we check the
-# heartbeat. (integer value)
-#heartbeat_rate = 2
-
 
 [polling]
 
@@ -908,6 +630,7 @@
 # Deprecated group/name - [publisher_rpc]/metering_secret
 # Deprecated group/name - [publisher]/metering_secret
 #telemetry_secret = change this for valid signing
+telemetry_secret=opnfv_secret
 
 
 [publisher_notifier]
@@ -916,16 +639,10 @@
 # From ceilometer
 #
 
-# DEPRECATED: The topic that ceilometer uses for metering notifications.
-# (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
+# The topic that ceilometer uses for metering notifications. (string value)
 #metering_topic = metering
 
-# DEPRECATED: The topic that ceilometer uses for event notifications. (string
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
+# The topic that ceilometer uses for event notifications. (string value)
 #event_topic = event
 
 # The driver that ceilometer uses for metering notifications. (string value)
@@ -961,72 +678,110 @@
 #
 # From ceilometer-auth
 #
-
-# Authentication type to load (string value)
-# Deprecated group/name - [service_credentials]/auth_plugin
-#auth_type = <None>
-
-# Config Section from which to load plugin specific options (string value)
-#auth_section = <None>
+# Name of nova region to use. Useful if keystone manages more than one region.
+# (string value)
+#region_name = <None>
+region_name = RegionOne
+
+# Type of the nova endpoint to use.  This endpoint will be looked up in the
+# keystone catalog and should be one of public, internal or admin. (string
+# value)
+# Possible values:
+# public - <No description provided>
+# admin - <No description provided>
+# internal - <No description provided>
+#endpoint_type = public
+endpoint_type = internalURL
+
+# API version of the admin Identity API endpoint. (string value)
+#auth_version = <None>
+
 
 # Authentication URL (string value)
 #auth_url = <None>
+auth_url = http://172.16.10.36:35357
+
+# Authentication type to load (string value)
+# Deprecated group/name - [nova]/auth_plugin
+#auth_type = <None>
+auth_type = password
+
+# Required if identity server requires client certificate (string value)
+#certfile = <None>
+
+# A PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# Defaults to system CAs. (string value)
+#cafile = <None>
+
+# Optional domain ID to use with v3 and v2 parameters. It will be used for both
+# the user and project domain in v3 and ignored in v2 authentication. (string
+# value)
+#default_domain_id = <None>
+
+# Optional domain name to use with v3 API and v2 parameters. It will be used for
+# both the user and project domain in v3 and ignored in v2 authentication.
+# (string value)
+#default_domain_name = <None>
+
+# Domain ID to scope to (string value)
+#domain_id = <None>
+
+# Domain name to scope to (string value)
+#domain_name = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# Required if identity server requires client certificate (string value)
+#keyfile = <None>
+
+# User's password (string value)
+#password = <None>
+password = opnfv_secret
+
+# Domain ID containing project (string value)
+#project_domain_id = <None>
+project_domain_id = default
+
+# Domain name containing project (string value)
+#project_domain_name = <None>
+
+# Project ID to scope to (string value)
+#project_id = <None>
+
+# Project name to scope to (string value)
+#project_name = <None>
+project_name = service
 
 # Scope for system operations (string value)
 #system_scope = <None>
 
-# Domain ID to scope to (string value)
-#domain_id = <None>
-
-# Domain name to scope to (string value)
-#domain_name = <None>
-
-# Project ID to scope to (string value)
-# Deprecated group/name - [service_credentials]/tenant_id
-#project_id = <None>
-
-# Project name to scope to (string value)
-# Deprecated group/name - [service_credentials]/tenant_name
-#project_name = <None>
-
-# Domain ID containing project (string value)
-#project_domain_id = <None>
-
-# Domain name containing project (string value)
-#project_domain_name = <None>
+# Tenant ID (string value)
+#tenant_id = <None>
+
+# Tenant Name (string value)
+#tenant_name = <None>
+
+# Timeout value for http requests (integer value)
+#timeout = <None>
 
 # Trust ID (string value)
 #trust_id = <None>
 
-# Optional domain ID to use with v3 and v2 parameters. It will be used for both
-# the user and project domain in v3 and ignored in v2 authentication. (string
-# value)
-#default_domain_id = <None>
-
-# Optional domain name to use with v3 API and v2 parameters. It will be used
-# for both the user and project domain in v3 and ignored in v2 authentication.
-# (string value)
-#default_domain_name = <None>
-
-# User id (string value)
-#user_id = <None>
-
-# Username (string value)
-# Deprecated group/name - [service_credentials]/user_name
-#username = <None>
-
 # User's domain id (string value)
 #user_domain_id = <None>
+user_domain_id = default
 
 # User's domain name (string value)
 #user_domain_name = <None>
 
-# User's password (string value)
-#password = <None>
-
-# Region name to use for OpenStack service endpoints. (string value)
-# Deprecated group/name - [DEFAULT]/os_region_name
-#region_name = <None>
+# User ID (string value)
+#user_id = <None>
+
+# Username (string value)
+# Deprecated group/name - [neutron]/user_name
+#username = <None>
+username = ceilometer
 
 # Type of endpoint in Identity service catalog to use for communication with
 # OpenStack services. (string value)
@@ -1039,7 +794,7 @@
 # internalURL - <No description provided>
 # adminURL - <No description provided>
 # Deprecated group/name - [service_credentials]/os_endpoint_type
-#interface = public
+interface = internal
 
 
 [service_types]
@@ -1073,59 +828,175 @@
 # Deprecated group/name - [service_types]/cinderv2
 #cinder = volumev3
 
-
-[vmware]
-
-#
-# From ceilometer
-#
-
-# IP address of the VMware vSphere host. (host address value)
-#host_ip = 127.0.0.1
-
-# Port of the VMware vSphere host. (port value)
+[xenapi]
+
+#
+# From ceilometer
+#
+
+# URL for connection to XenServer/Xen Cloud Platform. (string value)
+#connection_url = <None>
+
+# Username for connection to XenServer/Xen Cloud Platform. (string value)
+#connection_username = root
+
+# Password for connection to XenServer/Xen Cloud Platform. (string value)
+#connection_password = <None>
+
+[oslo_concurrency]
+
+[oslo_messaging_notifications]
+#
+# From oslo.messaging
+#
+
+# The Drivers(s) to handle sending notifications. Possible values are
+# messaging, messagingv2, routing, log, test, noop (multi valued)
+# Deprecated group/name - [DEFAULT]/notification_driver
+#driver =
+driver = messagingv2
+
+# A URL representing the messaging driver to use for notifications. If not set,
+# we fall back to the same configuration used for RPC. (string value)
+# Deprecated group/name - [DEFAULT]/notification_transport_url
+#transport_url = <None>
+
+# AMQP topic used for OpenStack notifications. (list value)
+# Deprecated group/name - [rpc_notifier2]/topics
+# Deprecated group/name - [DEFAULT]/notification_topics
+#topics = notifications
+topics = notifications
+
+# The maximum number of attempts to re-send a notification message which failed
+# to be delivered due to a recoverable error. 0 - No retry, -1 - indefinite
+# (integer value)
+#retry = -1
+[oslo_messaging_rabbit]
+#
+# From oslo.messaging
+#
+
+# Use durable queues in AMQP. (boolean value)
+# Deprecated group/name - [DEFAULT]/amqp_durable_queues
+# Deprecated group/name - [DEFAULT]/rabbit_durable_queues
+#amqp_durable_queues = false
+
+# Auto-delete queues in AMQP. (boolean value)
+#amqp_auto_delete = false
+
+# Connect over SSL. (boolean value)
+# Deprecated group/name - [oslo_messaging_rabbit]/rabbit_use_ssl
+#ssl = false
+
+# How long to wait before reconnecting in response to an AMQP consumer cancel
+# notification. (floating point value)
+#kombu_reconnect_delay = 1.0
+
+# EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression will not
+# be used. This option may not be available in future versions. (string value)
+#kombu_compression = <None>
+
+# How long to wait a missing client before abandoning to send it its replies.
+# This value should not be longer than rpc_response_timeout. (integer value)
+# Deprecated group/name - [oslo_messaging_rabbit]/kombu_reconnect_timeout
+#kombu_missing_consumer_retry_timeout = 60
+
+# Determines how the next RabbitMQ node is chosen in case the one we are
+# currently connected to becomes unavailable. Takes effect only if more than
+# one RabbitMQ node is provided in config. (string value)
+# Possible values:
+# round-robin - <No description provided>
+# shuffle - <No description provided>
+#kombu_failover_strategy = round-robin
+
+# DEPRECATED: The RabbitMQ broker address where a single node is used. (string
+# value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_host = localhost
+
+# DEPRECATED: The RabbitMQ broker port where a single node is used. (port
+# value)
 # Minimum value: 0
 # Maximum value: 65535
-#host_port = 443
-
-# Username of VMware vSphere. (string value)
-#host_username =
-
-# Password of VMware vSphere. (string value)
-#host_password =
-
-# CA bundle file to use in verifying the vCenter server certificate. (string
-# value)
-#ca_file = <None>
-
-# If true, the vCenter server certificate is not verified. If false, then the
-# default CA truststore is used for verification. This option is ignored if
-# "ca_file" is set. (boolean value)
-#insecure = false
-
-# Number of times a VMware vSphere API may be retried. (integer value)
-#api_retry_count = 10
-
-# Sleep time in seconds for polling an ongoing async task. (floating point
-# value)
-#task_poll_interval = 0.5
-
-# Optional vim service WSDL location e.g http://<server>/vimService.wsdl.
-# Optional over-ride to default location for bug work-arounds. (string value)
-#wsdl_location = <None>
-
-
-[xenapi]
-
-#
-# From ceilometer
-#
-
-# URL for connection to XenServer/Xen Cloud Platform. (string value)
-#connection_url = <None>
-
-# Username for connection to XenServer/Xen Cloud Platform. (string value)
-#connection_username = root
-
-# Password for connection to XenServer/Xen Cloud Platform. (string value)
-#connection_password = <None>
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_port = 5672
+
+# DEPRECATED: RabbitMQ HA cluster host:port pairs. (list value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_hosts = $rabbit_host:$rabbit_port
+
+# DEPRECATED: The RabbitMQ userid. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_userid = guest
+
+# DEPRECATED: The RabbitMQ password. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_password = guest
+
+# The RabbitMQ login method. (string value)
+# Possible values:
+# PLAIN - <No description provided>
+# AMQPLAIN - <No description provided>
+# RABBIT-CR-DEMO - <No description provided>
+#rabbit_login_method = AMQPLAIN
+
+# DEPRECATED: The RabbitMQ virtual host. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_virtual_host = /
+
+# How frequently to retry connecting with RabbitMQ. (integer value)
+#rabbit_retry_interval = 1
+
+# How long to backoff for between retries when connecting to RabbitMQ. (integer
+# value)
+#rabbit_retry_backoff = 2
+
+# Maximum interval of RabbitMQ connection retries. Default is 30 seconds.
+# (integer value)
+#rabbit_interval_max = 30
+
+# DEPRECATED: Maximum number of RabbitMQ connection retries. Default is 0
+# (infinite retry count). (integer value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#rabbit_max_retries = 0
+
+# Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change this
+# option, you must wipe the RabbitMQ database. In RabbitMQ 3.0, queue mirroring
+# is no longer controlled by the x-ha-policy argument when declaring a queue.
+# If you just want to make sure that all queues (except those with auto-
+# generated names) are mirrored across all nodes, run: "rabbitmqctl set_policy
+# HA '^(?!amq\.).*' '{"ha-mode": "all"}' " (boolean value)
+#rabbit_ha_queues = false
+
+# Positive integer representing duration in seconds for queue TTL (x-expires).
+# Queues which are unused for the duration of the TTL are automatically
+# deleted. The parameter affects only reply and fanout queues. (integer value)
+# Minimum value: 1
+#rabbit_transient_queues_ttl = 1800
+
+# Specifies the number of messages to prefetch. Setting to zero allows
+# unlimited messages. (integer value)
+#rabbit_qos_prefetch_count = 0
+
+# Number of seconds after which the Rabbit broker is considered down if
+# heartbeat's keep-alive fails (0 disable the heartbeat). EXPERIMENTAL (integer
+# value)
+#heartbeat_timeout_threshold = 60
+
+# How often times during the heartbeat_timeout_threshold we check the
+# heartbeat. (integer value)
+#heartbeat_rate = 2
+

2019-08-27 23:38:51,673 [salt.state       :1951][INFO    ][21707] Completed state [/etc/ceilometer/ceilometer.conf] at time 23:38:51.673135 duration_in_ms=308.903
2019-08-27 23:38:51,674 [salt.state       :1780][INFO    ][21707] Running state [/etc/default/ceilometer-agent-compute] at time 23:38:51.673933
2019-08-27 23:38:51,674 [salt.state       :1813][INFO    ][21707] Executing state file.managed for [/etc/default/ceilometer-agent-compute]
2019-08-27 23:38:51,693 [salt.fileclient  :1219][INFO    ][21707] Fetching file from saltenv 'base', ** done ** 'ceilometer/files/default'
2019-08-27 23:38:51,706 [salt.state       :300 ][INFO    ][21707] File changed:
New file
2019-08-27 23:38:51,706 [salt.state       :1951][INFO    ][21707] Completed state [/etc/default/ceilometer-agent-compute] at time 23:38:51.706508 duration_in_ms=32.574
2019-08-27 23:38:51,706 [salt.state       :1780][INFO    ][21707] Running state [/etc/ceilometer/pipeline.yaml] at time 23:38:51.706907
2019-08-27 23:38:51,707 [salt.state       :1813][INFO    ][21707] Executing state file.managed for [/etc/ceilometer/pipeline.yaml]
2019-08-27 23:38:51,723 [salt.fileclient  :1219][INFO    ][21707] Fetching file from saltenv 'base', ** done ** 'ceilometer/files/stein/pipeline.yaml'
2019-08-27 23:38:51,798 [salt.state       :300 ][INFO    ][21707] File changed:
New file
2019-08-27 23:38:51,798 [salt.state       :1951][INFO    ][21707] Completed state [/etc/ceilometer/pipeline.yaml] at time 23:38:51.798733 duration_in_ms=91.826
2019-08-27 23:38:51,799 [salt.state       :1780][INFO    ][21707] Running state [/etc/ceilometer/event_pipeline.yaml] at time 23:38:51.799082
2019-08-27 23:38:51,799 [salt.state       :1813][INFO    ][21707] Executing state file.managed for [/etc/ceilometer/event_pipeline.yaml]
2019-08-27 23:38:51,813 [salt.fileclient  :1219][INFO    ][21707] Fetching file from saltenv 'base', ** done ** 'ceilometer/files/stein/event_pipeline.yaml'
2019-08-27 23:38:51,870 [salt.state       :300 ][INFO    ][21707] File changed:
New file
2019-08-27 23:38:51,870 [salt.state       :1951][INFO    ][21707] Completed state [/etc/ceilometer/event_pipeline.yaml] at time 23:38:51.870625 duration_in_ms=71.542
2019-08-27 23:38:51,871 [salt.state       :1780][INFO    ][21707] Running state [/etc/ceilometer/polling.yaml] at time 23:38:51.870965
2019-08-27 23:38:51,871 [salt.state       :1813][INFO    ][21707] Executing state file.managed for [/etc/ceilometer/polling.yaml]
2019-08-27 23:38:51,885 [salt.fileclient  :1219][INFO    ][21707] Fetching file from saltenv 'base', ** done ** 'ceilometer/files/stein/polling.yaml'
2019-08-27 23:38:51,948 [salt.state       :300 ][INFO    ][21707] File changed:
--- 
+++ 
@@ -1,34 +1,7 @@
+
 ---
 sources:
-    - name: some_pollsters
-      interval: 300
+    - name: default_pollsters
+      interval: 180
       meters:
-        - cpu
-        - cpu_l3_cache
-        - memory.usage
-        - network.incoming.bytes
-        - network.incoming.packets
-        - network.outgoing.bytes
-        - network.outgoing.packets
-        - disk.device.read.bytes
-        - disk.device.read.requests
-        - disk.device.write.bytes
-        - disk.device.write.requests
-        - hardware.cpu.util
-        - hardware.cpu.user
-        - hardware.cpu.nice
-        - hardware.cpu.system
-        - hardware.cpu.idle
-        - hardware.cpu.wait
-        - hardware.cpu.kernel
-        - hardware.cpu.interrupt
-        - hardware.memory.used
-        - hardware.memory.total
-        - hardware.memory.buffer
-        - hardware.memory.cached
-        - hardware.memory.swap.avail
-        - hardware.memory.swap.total
-        - hardware.system_stats.io.outgoing.blocks
-        - hardware.system_stats.io.incoming.blocks
-        - hardware.network.ip.incoming.datagrams
-        - hardware.network.ip.outgoing.datagrams
+        - "*"

2019-08-27 23:38:51,949 [salt.state       :1951][INFO    ][21707] Completed state [/etc/ceilometer/polling.yaml] at time 23:38:51.949088 duration_in_ms=78.121
2019-08-27 23:38:52,492 [salt.state       :1780][INFO    ][21707] Running state [ceilometer-agent-compute] at time 23:38:52.492097
2019-08-27 23:38:52,492 [salt.state       :1813][INFO    ][21707] Executing state service.running for [ceilometer-agent-compute]
2019-08-27 23:38:52,493 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21707] Executing command ['systemctl', 'status', 'ceilometer-agent-compute.service', '-n', '0'] in directory '/root'
2019-08-27 23:38:52,522 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21707] Executing command ['systemctl', 'is-active', 'ceilometer-agent-compute.service'] in directory '/root'
2019-08-27 23:38:52,543 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21707] Executing command ['systemctl', 'is-enabled', 'ceilometer-agent-compute.service'] in directory '/root'
2019-08-27 23:38:52,563 [salt.state       :300 ][INFO    ][21707] The service ceilometer-agent-compute is already running
2019-08-27 23:38:52,564 [salt.state       :1951][INFO    ][21707] Completed state [ceilometer-agent-compute] at time 23:38:52.564334 duration_in_ms=72.236
2019-08-27 23:38:52,564 [salt.state       :1780][INFO    ][21707] Running state [ceilometer-agent-compute] at time 23:38:52.564878
2019-08-27 23:38:52,565 [salt.state       :1813][INFO    ][21707] Executing state service.mod_watch for [ceilometer-agent-compute]
2019-08-27 23:38:52,567 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21707] Executing command ['systemctl', 'is-active', 'ceilometer-agent-compute.service'] in directory '/root'
2019-08-27 23:38:52,586 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21707] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'ceilometer-agent-compute.service'] in directory '/root'
2019-08-27 23:38:52,793 [salt.state       :300 ][INFO    ][21707] {'ceilometer-agent-compute': True}
2019-08-27 23:38:52,794 [salt.state       :1951][INFO    ][21707] Completed state [ceilometer-agent-compute] at time 23:38:52.794288 duration_in_ms=229.41
2019-08-27 23:38:52,797 [salt.minion      :1711][INFO    ][21707] Returning information for job: 20190827233828827616
2019-08-27 23:40:19,412 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command pillar.get with jid 20190827234019399512
2019-08-27 23:40:19,436 [salt.minion      :1432][INFO    ][22851] Starting a new job with PID 22851
2019-08-27 23:40:19,446 [salt.minion      :1711][INFO    ][22851] Returning information for job: 20190827234019399512
2019-08-27 23:40:20,025 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command pillar.get with jid 20190827234020015432
2019-08-27 23:40:20,042 [salt.minion      :1432][INFO    ][22856] Starting a new job with PID 22856
2019-08-27 23:40:20,049 [salt.minion      :1711][INFO    ][22856] Returning information for job: 20190827234020015432
2019-08-27 23:40:20,624 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command pillar.get with jid 20190827234020612822
2019-08-27 23:40:20,650 [salt.minion      :1432][INFO    ][22861] Starting a new job with PID 22861
2019-08-27 23:40:20,659 [salt.minion      :1711][INFO    ][22861] Returning information for job: 20190827234020612822
2019-08-27 23:40:21,419 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command pillar.get with jid 20190827234021407377
2019-08-27 23:40:21,440 [salt.minion      :1432][INFO    ][22866] Starting a new job with PID 22866
2019-08-27 23:40:21,451 [salt.minion      :1711][INFO    ][22866] Returning information for job: 20190827234021407377
2019-08-27 23:41:41,632 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command cp.push_dir with jid 20190827234141616047
2019-08-27 23:41:41,658 [salt.minion      :1432][INFO    ][22891] Starting a new job with PID 22891
2019-08-27 23:41:44,412 [salt.minion      :1711][INFO    ][22891] Returning information for job: 20190827234141616047
2019-08-27 23:42:09,287 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command grains.get with jid 20190827234209275633
2019-08-27 23:42:09,305 [salt.minion      :1432][INFO    ][22977] Starting a new job with PID 22977
2019-08-27 23:42:09,311 [salt.minion      :1711][INFO    ][22977] Returning information for job: 20190827234209275633
2019-08-28 00:12:01,068 [salt.utils.schedule:1377][INFO    ][4909] Running scheduled job: __mine_interval
2019-08-28 01:12:01,067 [salt.utils.schedule:1377][INFO    ][4909] Running scheduled job: __mine_interval
2019-08-28 02:12:01,068 [salt.utils.schedule:1377][INFO    ][4909] Running scheduled job: __mine_interval
2019-08-28 03:12:01,068 [salt.utils.schedule:1377][INFO    ][4909] Running scheduled job: __mine_interval
2019-08-28 04:12:01,067 [salt.utils.schedule:1377][INFO    ][4909] Running scheduled job: __mine_interval
2019-08-28 05:12:01,068 [salt.utils.schedule:1377][INFO    ][4909] Running scheduled job: __mine_interval
2019-08-28 06:12:01,068 [salt.utils.schedule:1377][INFO    ][4909] Running scheduled job: __mine_interval
2019-08-28 07:12:01,069 [salt.utils.schedule:1377][INFO    ][4909] Running scheduled job: __mine_interval
2019-08-28 08:12:01,068 [salt.utils.schedule:1377][INFO    ][4909] Running scheduled job: __mine_interval
2019-08-28 09:12:01,069 [salt.utils.schedule:1377][INFO    ][4909] Running scheduled job: __mine_interval
2019-08-28 09:43:45,132 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command grains.get with jid 20190828094345118719
2019-08-28 09:43:45,159 [salt.minion      :1432][INFO    ][25687] Starting a new job with PID 25687
2019-08-28 09:43:45,170 [salt.minion      :1711][INFO    ][25687] Returning information for job: 20190828094345118719
2019-08-28 09:44:03,636 [salt.minion      :1308][INFO    ][4909] User sudo_ubuntu Executing command cp.push_dir with jid 20190828094403622526
2019-08-28 09:44:03,662 [salt.minion      :1432][INFO    ][25692] Starting a new job with PID 25692
