2018-06-01 02:49:37,953 [salt.utils.decorators][ERROR   ][1861] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-06-01 02:49:37,956 [salt.utils.decorators][ERROR   ][1861] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-06-01 02:49:37,959 [salt.utils.decorators][ERROR   ][1861] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-06-01 02:49:38,336 [salt.utils.decorators][ERROR   ][1861] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-06-01 02:49:38,414 [salt.utils.decorators][ERROR   ][1861] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-06-01 02:49:38,478 [salt.utils.decorators][ERROR   ][1861] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-06-01 02:49:38,481 [salt.utils.decorators][ERROR   ][1861] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-06-01 02:49:38,485 [salt.utils.decorators][ERROR   ][1861] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-06-01 02:49:38,488 [salt.utils.decorators][ERROR   ][1861] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-06-01 02:49:38,512 [salt.utils.decorators][ERROR   ][1861] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-06-01 02:49:38,516 [salt.utils.decorators][ERROR   ][1861] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-06-01 02:49:38,519 [salt.utils.decorators][ERROR   ][1861] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-06-01 02:49:38,522 [salt.utils.decorators][ERROR   ][1861] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-06-01 02:50:19,009 [salt.loaded.int.module.cmdmod][ERROR   ][1861] Command 'while true; do salt-call saltutil.running|grep fun: && continue; salt-call --local service.restart salt-minion; break; done' failed with return code: None
2018-06-01 02:51:15,359 [salt.loaded.int.module.cmdmod][INFO    ][11538] Executing command ['systemctl', 'status', 'salt-minion.service', '-n', '0'] in directory '/root'
2018-06-01 02:51:15,378 [salt.loaded.int.module.cmdmod][INFO    ][11538] Executing command ['systemctl', 'is-enabled', 'salt-minion.service'] in directory '/root'
2018-06-01 02:51:15,415 [salt.loaded.int.module.cmdmod][INFO    ][11538] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'salt-minion.service'] in directory '/root'
2018-06-01 02:51:15,442 [salt.utils.parsers][WARNING ][1594] Minion received a SIGTERM. Exiting.
2018-06-01 02:51:16,037 [salt.cli.daemons ][INFO    ][11617] Setting up the Salt Minion "ctl03.mcp-pike-odl-ha.local"
2018-06-01 02:51:16,156 [salt.cli.daemons ][INFO    ][11617] Starting up the Salt Minion
2018-06-01 02:51:16,157 [salt.utils.event ][INFO    ][11617] Starting pull socket on /var/run/salt/minion/minion_event_63ddba6829_pull.ipc
2018-06-01 02:51:16,847 [salt.minion      ][INFO    ][11617] Creating minion process manager
2018-06-01 02:51:18,364 [salt.loader.192.168.11.2.int.module.cmdmod][INFO    ][11617] Executing command ['date', '+%z'] in directory '/root'
2018-06-01 02:51:18,391 [salt.utils.schedule][INFO    ][11617] Updating job settings for scheduled job: __mine_interval
2018-06-01 02:51:18,393 [salt.minion      ][INFO    ][11617] Added mine.update to scheduler
2018-06-01 02:51:18,399 [salt.minion      ][INFO    ][11617] Minion is starting as user 'root'
2018-06-01 02:51:18,427 [salt.minion      ][INFO    ][11617] Minion is ready to receive requests!
2018-06-01 02:51:19,429 [salt.utils.schedule][INFO    ][11617] Running scheduled job: __mine_interval
2018-06-01 02:51:42,973 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command state.apply with jid 20180601025142955488
2018-06-01 02:51:42,994 [salt.minion      ][INFO    ][11732] Starting a new job with PID 11732
2018-06-01 02:51:47,988 [salt.state       ][INFO    ][11732] Loading fresh modules for state activity
2018-06-01 02:51:50,900 [salt.state       ][INFO    ][11732] Running state [/etc/environment] at time 02:51:50.900184
2018-06-01 02:51:50,901 [salt.state       ][INFO    ][11732] Executing state file.blockreplace for /etc/environment
2018-06-01 02:51:50,938 [salt.state       ][INFO    ][11732] File changed:
--- 
+++ 
@@ -1,3 +1,4 @@
 PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games"
 # SALT MANAGED VARIABLES - DO NOT EDIT - START
+# 
 # # SALT MANAGED VARIABLES - END

2018-06-01 02:51:50,940 [salt.state       ][INFO    ][11732] Completed state [/etc/environment] at time 02:51:50.940793 duration_in_ms=40.609
2018-06-01 02:51:50,941 [salt.state       ][INFO    ][11732] Running state [/etc/profile.d] at time 02:51:50.941312
2018-06-01 02:51:50,941 [salt.state       ][INFO    ][11732] Executing state file.directory for /etc/profile.d
2018-06-01 02:51:50,943 [salt.state       ][INFO    ][11732] Directory /etc/profile.d is in the correct state
2018-06-01 02:51:50,944 [salt.state       ][INFO    ][11732] Completed state [/etc/profile.d] at time 02:51:50.944016 duration_in_ms=2.703
2018-06-01 02:51:51,819 [salt.state       ][INFO    ][11732] Running state [/etc/apt/apt.conf.d/99prefer_ipv4-salt] at time 02:51:51.819271
2018-06-01 02:51:51,820 [salt.state       ][INFO    ][11732] Executing state file.managed for /etc/apt/apt.conf.d/99prefer_ipv4-salt
2018-06-01 02:51:51,849 [salt.state       ][INFO    ][11732] File /etc/apt/apt.conf.d/99prefer_ipv4-salt is in the correct state
2018-06-01 02:51:51,849 [salt.state       ][INFO    ][11732] Completed state [/etc/apt/apt.conf.d/99prefer_ipv4-salt] at time 02:51:51.849619 duration_in_ms=30.349
2018-06-01 02:51:51,850 [salt.state       ][INFO    ][11732] Running state [linux_repo_prereq_pkgs] at time 02:51:51.850703
2018-06-01 02:51:51,851 [salt.state       ][INFO    ][11732] Executing state pkg.installed for linux_repo_prereq_pkgs
2018-06-01 02:51:51,852 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 02:51:52,262 [salt.state       ][INFO    ][11732] All specified packages are already installed
2018-06-01 02:51:52,263 [salt.state       ][INFO    ][11732] Completed state [linux_repo_prereq_pkgs] at time 02:51:52.263451 duration_in_ms=412.748
2018-06-01 02:51:52,264 [salt.state       ][INFO    ][11732] Running state [/etc/apt/apt.conf.d/99proxies-salt-glusterfs-ppa] at time 02:51:52.264470
2018-06-01 02:51:52,265 [salt.state       ][INFO    ][11732] Executing state file.absent for /etc/apt/apt.conf.d/99proxies-salt-glusterfs-ppa
2018-06-01 02:51:52,265 [salt.state       ][INFO    ][11732] File /etc/apt/apt.conf.d/99proxies-salt-glusterfs-ppa is not present
2018-06-01 02:51:52,266 [salt.state       ][INFO    ][11732] Completed state [/etc/apt/apt.conf.d/99proxies-salt-glusterfs-ppa] at time 02:51:52.266304 duration_in_ms=1.834
2018-06-01 02:51:52,266 [salt.state       ][INFO    ][11732] Running state [/etc/apt/preferences.d/glusterfs-ppa] at time 02:51:52.266803
2018-06-01 02:51:52,267 [salt.state       ][INFO    ][11732] Executing state file.absent for /etc/apt/preferences.d/glusterfs-ppa
2018-06-01 02:51:52,267 [salt.state       ][INFO    ][11732] File /etc/apt/preferences.d/glusterfs-ppa is not present
2018-06-01 02:51:52,268 [salt.state       ][INFO    ][11732] Completed state [/etc/apt/preferences.d/glusterfs-ppa] at time 02:51:52.268329 duration_in_ms=1.526
2018-06-01 02:51:52,271 [salt.state       ][INFO    ][11732] Running state [apt-key adv --keyserver keyserver.ubuntu.com --recv 3FE869A9] at time 02:51:52.271073
2018-06-01 02:51:52,271 [salt.state       ][INFO    ][11732] Executing state cmd.run for apt-key adv --keyserver keyserver.ubuntu.com --recv 3FE869A9
2018-06-01 02:51:52,272 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'apt-key adv --keyserver keyserver.ubuntu.com --recv 3FE869A9' in directory '/root'
2018-06-01 02:51:52,485 [salt.state       ][INFO    ][11732] {'pid': 11791, 'retcode': 0, 'stderr': 'gpg: requesting key 3FE869A9 from hkp server keyserver.ubuntu.com\ngpg: key 3FE869A9: "Launchpad PPA for Gluster" not changed\ngpg: Total number processed: 1\ngpg:              unchanged: 1', 'stdout': 'Executing: /tmp/tmp.fTK1ReDUtw/gpg.1.sh --keyserver\nkeyserver.ubuntu.com\n--recv\n3FE869A9'}
2018-06-01 02:51:52,486 [salt.state       ][INFO    ][11732] Completed state [apt-key adv --keyserver keyserver.ubuntu.com --recv 3FE869A9] at time 02:51:52.485980 duration_in_ms=214.907
2018-06-01 02:51:52,493 [salt.state       ][INFO    ][11732] Running state [deb http://ppa.launchpad.net/gluster/glusterfs-3.13/ubuntu xenial main] at time 02:51:52.493387
2018-06-01 02:51:52,494 [salt.state       ][INFO    ][11732] Executing state pkgrepo.managed for deb http://ppa.launchpad.net/gluster/glusterfs-3.13/ubuntu xenial main
2018-06-01 02:51:52,612 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-06-01 02:51:53,078 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601025153058305
2018-06-01 02:51:53,097 [salt.minion      ][INFO    ][12086] Starting a new job with PID 12086
2018-06-01 02:51:53,117 [salt.minion      ][INFO    ][12086] Returning information for job: 20180601025153058305
2018-06-01 02:51:56,825 [salt.state       ][INFO    ][11732] Configured package repo 'deb http://ppa.launchpad.net/gluster/glusterfs-3.13/ubuntu xenial main'
2018-06-01 02:51:56,826 [salt.state       ][INFO    ][11732] Completed state [deb http://ppa.launchpad.net/gluster/glusterfs-3.13/ubuntu xenial main] at time 02:51:56.826266 duration_in_ms=4332.879
2018-06-01 02:51:56,826 [salt.state       ][INFO    ][11732] Running state [/etc/apt/apt.conf.d/99proxies-salt-mk_openstack] at time 02:51:56.826944
2018-06-01 02:51:56,827 [salt.state       ][INFO    ][11732] Executing state file.absent for /etc/apt/apt.conf.d/99proxies-salt-mk_openstack
2018-06-01 02:51:56,828 [salt.state       ][INFO    ][11732] File /etc/apt/apt.conf.d/99proxies-salt-mk_openstack is not present
2018-06-01 02:51:56,828 [salt.state       ][INFO    ][11732] Completed state [/etc/apt/apt.conf.d/99proxies-salt-mk_openstack] at time 02:51:56.828851 duration_in_ms=1.907
2018-06-01 02:51:56,829 [salt.state       ][INFO    ][11732] Running state [/etc/apt/preferences.d/mk_openstack] at time 02:51:56.829358
2018-06-01 02:51:56,829 [salt.state       ][INFO    ][11732] Executing state file.managed for /etc/apt/preferences.d/mk_openstack
2018-06-01 02:51:56,949 [salt.state       ][INFO    ][11732] File /etc/apt/preferences.d/mk_openstack is in the correct state
2018-06-01 02:51:56,950 [salt.state       ][INFO    ][11732] Completed state [/etc/apt/preferences.d/mk_openstack] at time 02:51:56.950369 duration_in_ms=121.011
2018-06-01 02:51:56,950 [salt.state       ][INFO    ][11732] Running state [curl -s http://apt.mirantis.com/public.gpg | apt-key add -] at time 02:51:56.950910
2018-06-01 02:51:56,951 [salt.state       ][INFO    ][11732] Executing state cmd.run for curl -s http://apt.mirantis.com/public.gpg | apt-key add -
2018-06-01 02:51:56,952 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'curl -s http://apt.mirantis.com/public.gpg | apt-key add -' in directory '/root'
2018-06-01 02:51:57,123 [salt.state       ][INFO    ][11732] {'pid': 12342, 'retcode': 0, 'stderr': '', 'stdout': 'OK'}
2018-06-01 02:51:57,125 [salt.state       ][INFO    ][11732] Completed state [curl -s http://apt.mirantis.com/public.gpg | apt-key add -] at time 02:51:57.125751 duration_in_ms=174.84
2018-06-01 02:51:57,128 [salt.state       ][INFO    ][11732] Running state [deb [arch=amd64] http://apt.mirantis.com/xenial/ nightly pike] at time 02:51:57.128855
2018-06-01 02:51:57,129 [salt.state       ][INFO    ][11732] Executing state pkgrepo.managed for deb [arch=amd64] http://apt.mirantis.com/xenial/ nightly pike
2018-06-01 02:51:57,175 [salt.state       ][INFO    ][11732] Package repo 'deb [arch=amd64] http://apt.mirantis.com/xenial/ nightly pike' already configured
2018-06-01 02:51:57,175 [salt.state       ][INFO    ][11732] Completed state [deb [arch=amd64] http://apt.mirantis.com/xenial/ nightly pike] at time 02:51:57.175565 duration_in_ms=46.711
2018-06-01 02:51:57,176 [salt.state       ][INFO    ][11732] Running state [/etc/apt/apt.conf.d/99proxies-salt-mirantis_openstack] at time 02:51:57.176944
2018-06-01 02:51:57,177 [salt.state       ][INFO    ][11732] Executing state file.absent for /etc/apt/apt.conf.d/99proxies-salt-mirantis_openstack
2018-06-01 02:51:57,178 [salt.state       ][INFO    ][11732] File /etc/apt/apt.conf.d/99proxies-salt-mirantis_openstack is not present
2018-06-01 02:51:57,178 [salt.state       ][INFO    ][11732] Completed state [/etc/apt/apt.conf.d/99proxies-salt-mirantis_openstack] at time 02:51:57.178569 duration_in_ms=1.626
2018-06-01 02:51:57,179 [salt.state       ][INFO    ][11732] Running state [/etc/apt/preferences.d/mirantis_openstack] at time 02:51:57.179058
2018-06-01 02:51:57,179 [salt.state       ][INFO    ][11732] Executing state file.managed for /etc/apt/preferences.d/mirantis_openstack
2018-06-01 02:51:57,300 [salt.state       ][INFO    ][11732] File /etc/apt/preferences.d/mirantis_openstack is in the correct state
2018-06-01 02:51:57,301 [salt.state       ][INFO    ][11732] Completed state [/etc/apt/preferences.d/mirantis_openstack] at time 02:51:57.301100 duration_in_ms=122.042
2018-06-01 02:51:57,301 [salt.state       ][INFO    ][11732] Running state [curl -s http://mirror.fuel-infra.org/mcp-repos/pike/xenial/archive-mcppike.key | apt-key add -] at time 02:51:57.301631
2018-06-01 02:51:57,302 [salt.state       ][INFO    ][11732] Executing state cmd.run for curl -s http://mirror.fuel-infra.org/mcp-repos/pike/xenial/archive-mcppike.key | apt-key add -
2018-06-01 02:51:57,303 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'curl -s http://mirror.fuel-infra.org/mcp-repos/pike/xenial/archive-mcppike.key | apt-key add -' in directory '/root'
2018-06-01 02:51:57,482 [salt.state       ][INFO    ][11732] {'pid': 12461, 'retcode': 0, 'stderr': '', 'stdout': 'OK'}
2018-06-01 02:51:57,483 [salt.state       ][INFO    ][11732] Completed state [curl -s http://mirror.fuel-infra.org/mcp-repos/pike/xenial/archive-mcppike.key | apt-key add -] at time 02:51:57.483312 duration_in_ms=181.68
2018-06-01 02:51:57,485 [salt.state       ][INFO    ][11732] Running state [deb http://mirror.fuel-infra.org/mcp-repos/pike/xenial pike main] at time 02:51:57.485825
2018-06-01 02:51:57,486 [salt.state       ][INFO    ][11732] Executing state pkgrepo.managed for deb http://mirror.fuel-infra.org/mcp-repos/pike/xenial pike main
2018-06-01 02:51:57,568 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-06-01 02:52:01,778 [salt.state       ][INFO    ][11732] Configured package repo 'deb http://mirror.fuel-infra.org/mcp-repos/pike/xenial pike main'
2018-06-01 02:52:01,778 [salt.state       ][INFO    ][11732] Completed state [deb http://mirror.fuel-infra.org/mcp-repos/pike/xenial pike main] at time 02:52:01.778422 duration_in_ms=4292.596
2018-06-01 02:52:01,779 [salt.state       ][INFO    ][11732] Running state [/etc/apt/apt.conf.d/99proxies-salt-uca] at time 02:52:01.779076
2018-06-01 02:52:01,779 [salt.state       ][INFO    ][11732] Executing state file.absent for /etc/apt/apt.conf.d/99proxies-salt-uca
2018-06-01 02:52:01,780 [salt.state       ][INFO    ][11732] File /etc/apt/apt.conf.d/99proxies-salt-uca is not present
2018-06-01 02:52:01,781 [salt.state       ][INFO    ][11732] Completed state [/etc/apt/apt.conf.d/99proxies-salt-uca] at time 02:52:01.781035 duration_in_ms=1.959
2018-06-01 02:52:01,781 [salt.state       ][INFO    ][11732] Running state [/etc/apt/preferences.d/uca] at time 02:52:01.781548
2018-06-01 02:52:01,782 [salt.state       ][INFO    ][11732] Executing state file.absent for /etc/apt/preferences.d/uca
2018-06-01 02:52:01,782 [salt.state       ][INFO    ][11732] File /etc/apt/preferences.d/uca is not present
2018-06-01 02:52:01,783 [salt.state       ][INFO    ][11732] Completed state [/etc/apt/preferences.d/uca] at time 02:52:01.783085 duration_in_ms=1.537
2018-06-01 02:52:01,783 [salt.state       ][INFO    ][11732] Running state [apt-key adv --keyserver keyserver.ubuntu.com --recv EC4926EA] at time 02:52:01.783598
2018-06-01 02:52:01,784 [salt.state       ][INFO    ][11732] Executing state cmd.run for apt-key adv --keyserver keyserver.ubuntu.com --recv EC4926EA
2018-06-01 02:52:01,785 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'apt-key adv --keyserver keyserver.ubuntu.com --recv EC4926EA' in directory '/root'
2018-06-01 02:52:02,008 [salt.state       ][INFO    ][11732] {'pid': 13004, 'retcode': 0, 'stderr': 'gpg: requesting key EC4926EA from hkp server keyserver.ubuntu.com\ngpg: key EC4926EA: "Canonical Cloud Archive Signing Key <ftpmaster@canonical.com>" not changed\ngpg: Total number processed: 1\ngpg:              unchanged: 1', 'stdout': 'Executing: /tmp/tmp.WUMejKsshn/gpg.1.sh --keyserver\nkeyserver.ubuntu.com\n--recv\nEC4926EA'}
2018-06-01 02:52:02,009 [salt.state       ][INFO    ][11732] Completed state [apt-key adv --keyserver keyserver.ubuntu.com --recv EC4926EA] at time 02:52:02.009108 duration_in_ms=225.509
2018-06-01 02:52:02,011 [salt.state       ][INFO    ][11732] Running state [deb http://ubuntu-cloud.archive.canonical.com/ubuntu xenial-updates/pike main] at time 02:52:02.011906
2018-06-01 02:52:02,012 [salt.state       ][INFO    ][11732] Executing state pkgrepo.managed for deb http://ubuntu-cloud.archive.canonical.com/ubuntu xenial-updates/pike main
2018-06-01 02:52:02,053 [salt.state       ][INFO    ][11732] Package repo 'deb http://ubuntu-cloud.archive.canonical.com/ubuntu xenial-updates/pike main' already configured
2018-06-01 02:52:02,054 [salt.state       ][INFO    ][11732] Completed state [deb http://ubuntu-cloud.archive.canonical.com/ubuntu xenial-updates/pike main] at time 02:52:02.054379 duration_in_ms=42.473
2018-06-01 02:52:02,054 [salt.state       ][INFO    ][11732] Running state [linux_extra_packages_latest] at time 02:52:02.054892
2018-06-01 02:52:02,055 [salt.state       ][INFO    ][11732] Executing state pkg.latest for linux_extra_packages_latest
2018-06-01 02:52:02,068 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command ['apt-cache', '-q', 'policy', 'python-pymysql'] in directory '/root'
2018-06-01 02:52:02,125 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command ['apt-cache', '-q', 'policy', 'python-cryptography'] in directory '/root'
2018-06-01 02:52:02,186 [salt.state       ][INFO    ][11732] All packages are up-to-date (python-cryptography, python-pymysql).
2018-06-01 02:52:02,188 [salt.state       ][INFO    ][11732] Completed state [linux_extra_packages_latest] at time 02:52:02.188264 duration_in_ms=133.371
2018-06-01 02:52:02,190 [salt.state       ][INFO    ][11732] Running state [UTC] at time 02:52:02.190618
2018-06-01 02:52:02,191 [salt.state       ][INFO    ][11732] Executing state timezone.system for UTC
2018-06-01 02:52:02,193 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command ['timedatectl'] in directory '/root'
2018-06-01 02:52:02,228 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command ['timedatectl'] in directory '/root'
2018-06-01 02:52:02,253 [salt.state       ][INFO    ][11732] Timezone UTC already set, UTC already set to UTC
2018-06-01 02:52:02,254 [salt.state       ][INFO    ][11732] Completed state [UTC] at time 02:52:02.253992 duration_in_ms=63.374
2018-06-01 02:52:02,255 [salt.state       ][INFO    ][11732] Running state [nf_conntrack] at time 02:52:02.255437
2018-06-01 02:52:02,256 [salt.state       ][INFO    ][11732] Executing state kmod.present for nf_conntrack
2018-06-01 02:52:02,258 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'lsmod' in directory '/root'
2018-06-01 02:52:02,278 [salt.state       ][INFO    ][11732] Kernel module nf_conntrack is already present
2018-06-01 02:52:02,279 [salt.state       ][INFO    ][11732] Completed state [nf_conntrack] at time 02:52:02.279075 duration_in_ms=23.638
2018-06-01 02:52:02,281 [salt.state       ][INFO    ][11732] Running state [net.ipv4.tcp_keepalive_probes] at time 02:52:02.280941
2018-06-01 02:52:02,281 [salt.state       ][INFO    ][11732] Executing state sysctl.present for net.ipv4.tcp_keepalive_probes
2018-06-01 02:52:02,299 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'sysctl -a' in directory '/root'
2018-06-01 02:52:02,341 [salt.state       ][INFO    ][11732] Sysctl value net.ipv4.tcp_keepalive_probes = 8 is already set
2018-06-01 02:52:02,342 [salt.state       ][INFO    ][11732] Completed state [net.ipv4.tcp_keepalive_probes] at time 02:52:02.342219 duration_in_ms=61.278
2018-06-01 02:52:02,343 [salt.state       ][INFO    ][11732] Running state [fs.file-max] at time 02:52:02.343438
2018-06-01 02:52:02,344 [salt.state       ][INFO    ][11732] Executing state sysctl.present for fs.file-max
2018-06-01 02:52:02,345 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'sysctl -a' in directory '/root'
2018-06-01 02:52:02,380 [salt.state       ][INFO    ][11732] Sysctl value fs.file-max = 124165 is already set
2018-06-01 02:52:02,381 [salt.state       ][INFO    ][11732] Completed state [fs.file-max] at time 02:52:02.381446 duration_in_ms=38.009
2018-06-01 02:52:02,382 [salt.state       ][INFO    ][11732] Running state [net.core.somaxconn] at time 02:52:02.382192
2018-06-01 02:52:02,382 [salt.state       ][INFO    ][11732] Executing state sysctl.present for net.core.somaxconn
2018-06-01 02:52:02,383 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'sysctl -a' in directory '/root'
2018-06-01 02:52:02,418 [salt.state       ][INFO    ][11732] Sysctl value net.core.somaxconn = 4096 is already set
2018-06-01 02:52:02,419 [salt.state       ][INFO    ][11732] Completed state [net.core.somaxconn] at time 02:52:02.419674 duration_in_ms=37.481
2018-06-01 02:52:02,420 [salt.state       ][INFO    ][11732] Running state [net.ipv4.tcp_max_syn_backlog] at time 02:52:02.420564
2018-06-01 02:52:02,421 [salt.state       ][INFO    ][11732] Executing state sysctl.present for net.ipv4.tcp_max_syn_backlog
2018-06-01 02:52:02,422 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'sysctl -a' in directory '/root'
2018-06-01 02:52:02,459 [salt.state       ][INFO    ][11732] Sysctl value net.ipv4.tcp_max_syn_backlog = 8192 is already set
2018-06-01 02:52:02,460 [salt.state       ][INFO    ][11732] Completed state [net.ipv4.tcp_max_syn_backlog] at time 02:52:02.460138 duration_in_ms=39.573
2018-06-01 02:52:02,461 [salt.state       ][INFO    ][11732] Running state [net.ipv4.tcp_tw_reuse] at time 02:52:02.461197
2018-06-01 02:52:02,462 [salt.state       ][INFO    ][11732] Executing state sysctl.present for net.ipv4.tcp_tw_reuse
2018-06-01 02:52:02,464 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'sysctl -a' in directory '/root'
2018-06-01 02:52:02,502 [salt.state       ][INFO    ][11732] Sysctl value net.ipv4.tcp_tw_reuse = 1 is already set
2018-06-01 02:52:02,504 [salt.state       ][INFO    ][11732] Completed state [net.ipv4.tcp_tw_reuse] at time 02:52:02.504112 duration_in_ms=42.915
2018-06-01 02:52:02,505 [salt.state       ][INFO    ][11732] Running state [net.ipv4.tcp_congestion_control] at time 02:52:02.505211
2018-06-01 02:52:02,506 [salt.state       ][INFO    ][11732] Executing state sysctl.present for net.ipv4.tcp_congestion_control
2018-06-01 02:52:02,508 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'sysctl -a' in directory '/root'
2018-06-01 02:52:02,543 [salt.state       ][INFO    ][11732] Sysctl value net.ipv4.tcp_congestion_control = yeah is already set
2018-06-01 02:52:02,544 [salt.state       ][INFO    ][11732] Completed state [net.ipv4.tcp_congestion_control] at time 02:52:02.544247 duration_in_ms=39.037
2018-06-01 02:52:02,544 [salt.state       ][INFO    ][11732] Running state [net.nf_conntrack_max] at time 02:52:02.544922
2018-06-01 02:52:02,545 [salt.state       ][INFO    ][11732] Executing state sysctl.present for net.nf_conntrack_max
2018-06-01 02:52:02,546 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'sysctl -a' in directory '/root'
2018-06-01 02:52:02,584 [salt.state       ][INFO    ][11732] Sysctl value net.nf_conntrack_max = 1048576 is already set
2018-06-01 02:52:02,585 [salt.state       ][INFO    ][11732] Completed state [net.nf_conntrack_max] at time 02:52:02.585480 duration_in_ms=40.557
2018-06-01 02:52:02,586 [salt.state       ][INFO    ][11732] Running state [net.ipv4.tcp_retries2] at time 02:52:02.586137
2018-06-01 02:52:02,586 [salt.state       ][INFO    ][11732] Executing state sysctl.present for net.ipv4.tcp_retries2
2018-06-01 02:52:02,587 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'sysctl -a' in directory '/root'
2018-06-01 02:52:02,623 [salt.state       ][INFO    ][11732] Sysctl value net.ipv4.tcp_retries2 = 5 is already set
2018-06-01 02:52:02,624 [salt.state       ][INFO    ][11732] Completed state [net.ipv4.tcp_retries2] at time 02:52:02.624305 duration_in_ms=38.168
2018-06-01 02:52:02,625 [salt.state       ][INFO    ][11732] Running state [net.ipv4.tcp_fin_timeout] at time 02:52:02.625322
2018-06-01 02:52:02,626 [salt.state       ][INFO    ][11732] Executing state sysctl.present for net.ipv4.tcp_fin_timeout
2018-06-01 02:52:02,628 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'sysctl -a' in directory '/root'
2018-06-01 02:52:02,665 [salt.state       ][INFO    ][11732] Sysctl value net.ipv4.tcp_fin_timeout = 30 is already set
2018-06-01 02:52:02,666 [salt.state       ][INFO    ][11732] Completed state [net.ipv4.tcp_fin_timeout] at time 02:52:02.666808 duration_in_ms=41.485
2018-06-01 02:52:02,668 [salt.state       ][INFO    ][11732] Running state [net.ipv4.tcp_slow_start_after_idle] at time 02:52:02.668256
2018-06-01 02:52:02,668 [salt.state       ][INFO    ][11732] Executing state sysctl.present for net.ipv4.tcp_slow_start_after_idle
2018-06-01 02:52:02,669 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'sysctl -a' in directory '/root'
2018-06-01 02:52:02,704 [salt.state       ][INFO    ][11732] Sysctl value net.ipv4.tcp_slow_start_after_idle = 0 is already set
2018-06-01 02:52:02,705 [salt.state       ][INFO    ][11732] Completed state [net.ipv4.tcp_slow_start_after_idle] at time 02:52:02.704948 duration_in_ms=36.692
2018-06-01 02:52:02,705 [salt.state       ][INFO    ][11732] Running state [vm.swappiness] at time 02:52:02.705646
2018-06-01 02:52:02,706 [salt.state       ][INFO    ][11732] Executing state sysctl.present for vm.swappiness
2018-06-01 02:52:02,707 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'sysctl -a' in directory '/root'
2018-06-01 02:52:02,746 [salt.state       ][INFO    ][11732] Sysctl value vm.swappiness = 10 is already set
2018-06-01 02:52:02,747 [salt.state       ][INFO    ][11732] Completed state [vm.swappiness] at time 02:52:02.747461 duration_in_ms=41.815
2018-06-01 02:52:02,748 [salt.state       ][INFO    ][11732] Running state [net.ipv4.tcp_keepalive_intvl] at time 02:52:02.748668
2018-06-01 02:52:02,749 [salt.state       ][INFO    ][11732] Executing state sysctl.present for net.ipv4.tcp_keepalive_intvl
2018-06-01 02:52:02,751 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'sysctl -a' in directory '/root'
2018-06-01 02:52:02,788 [salt.state       ][INFO    ][11732] Sysctl value net.ipv4.tcp_keepalive_intvl = 3 is already set
2018-06-01 02:52:02,789 [salt.state       ][INFO    ][11732] Completed state [net.ipv4.tcp_keepalive_intvl] at time 02:52:02.789200 duration_in_ms=40.533
2018-06-01 02:52:02,789 [salt.state       ][INFO    ][11732] Running state [net.ipv4.neigh.default.gc_thresh1] at time 02:52:02.789834
2018-06-01 02:52:02,790 [salt.state       ][INFO    ][11732] Executing state sysctl.present for net.ipv4.neigh.default.gc_thresh1
2018-06-01 02:52:02,791 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'sysctl -a' in directory '/root'
2018-06-01 02:52:02,827 [salt.state       ][INFO    ][11732] Sysctl value net.ipv4.neigh.default.gc_thresh1 = 4096 is already set
2018-06-01 02:52:02,828 [salt.state       ][INFO    ][11732] Completed state [net.ipv4.neigh.default.gc_thresh1] at time 02:52:02.828397 duration_in_ms=38.563
2018-06-01 02:52:02,829 [salt.state       ][INFO    ][11732] Running state [net.ipv4.neigh.default.gc_thresh2] at time 02:52:02.829523
2018-06-01 02:52:02,830 [salt.state       ][INFO    ][11732] Executing state sysctl.present for net.ipv4.neigh.default.gc_thresh2
2018-06-01 02:52:02,832 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'sysctl -a' in directory '/root'
2018-06-01 02:52:02,867 [salt.state       ][INFO    ][11732] Sysctl value net.ipv4.neigh.default.gc_thresh2 = 8192 is already set
2018-06-01 02:52:02,868 [salt.state       ][INFO    ][11732] Completed state [net.ipv4.neigh.default.gc_thresh2] at time 02:52:02.868532 duration_in_ms=39.01
2018-06-01 02:52:02,869 [salt.state       ][INFO    ][11732] Running state [net.ipv4.neigh.default.gc_thresh3] at time 02:52:02.869151
2018-06-01 02:52:02,869 [salt.state       ][INFO    ][11732] Executing state sysctl.present for net.ipv4.neigh.default.gc_thresh3
2018-06-01 02:52:02,870 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'sysctl -a' in directory '/root'
2018-06-01 02:52:02,906 [salt.state       ][INFO    ][11732] Sysctl value net.ipv4.neigh.default.gc_thresh3 = 16384 is already set
2018-06-01 02:52:02,907 [salt.state       ][INFO    ][11732] Completed state [net.ipv4.neigh.default.gc_thresh3] at time 02:52:02.907189 duration_in_ms=38.037
2018-06-01 02:52:02,907 [salt.state       ][INFO    ][11732] Running state [net.core.netdev_max_backlog] at time 02:52:02.907862
2018-06-01 02:52:02,908 [salt.state       ][INFO    ][11732] Executing state sysctl.present for net.core.netdev_max_backlog
2018-06-01 02:52:02,909 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'sysctl -a' in directory '/root'
2018-06-01 02:52:02,948 [salt.state       ][INFO    ][11732] Sysctl value net.core.netdev_max_backlog = 261144 is already set
2018-06-01 02:52:02,949 [salt.state       ][INFO    ][11732] Completed state [net.core.netdev_max_backlog] at time 02:52:02.949852 duration_in_ms=41.989
2018-06-01 02:52:02,951 [salt.state       ][INFO    ][11732] Running state [net.ipv4.tcp_keepalive_time] at time 02:52:02.951028
2018-06-01 02:52:02,952 [salt.state       ][INFO    ][11732] Executing state sysctl.present for net.ipv4.tcp_keepalive_time
2018-06-01 02:52:02,953 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'sysctl -a' in directory '/root'
2018-06-01 02:52:02,988 [salt.state       ][INFO    ][11732] Sysctl value net.ipv4.tcp_keepalive_time = 30 is already set
2018-06-01 02:52:02,990 [salt.state       ][INFO    ][11732] Completed state [net.ipv4.tcp_keepalive_time] at time 02:52:02.990317 duration_in_ms=39.288
2018-06-01 02:52:02,990 [salt.state       ][INFO    ][11732] Running state [kernel.panic] at time 02:52:02.990945
2018-06-01 02:52:02,991 [salt.state       ][INFO    ][11732] Executing state sysctl.present for kernel.panic
2018-06-01 02:52:02,992 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'sysctl -a' in directory '/root'
2018-06-01 02:52:03,028 [salt.state       ][INFO    ][11732] Sysctl value kernel.panic = 60 is already set
2018-06-01 02:52:03,029 [salt.state       ][INFO    ][11732] Completed state [kernel.panic] at time 02:52:03.029741 duration_in_ms=38.795
2018-06-01 02:52:03,030 [salt.state       ][INFO    ][11732] Running state [linux_sysfs_package] at time 02:52:03.030611
2018-06-01 02:52:03,031 [salt.state       ][INFO    ][11732] Executing state pkg.installed for linux_sysfs_package
2018-06-01 02:52:03,045 [salt.state       ][INFO    ][11732] All specified packages are already installed
2018-06-01 02:52:03,046 [salt.state       ][INFO    ][11732] Completed state [linux_sysfs_package] at time 02:52:03.046007 duration_in_ms=15.396
2018-06-01 02:52:03,048 [salt.state       ][INFO    ][11732] Running state [/etc/sysfs.d] at time 02:52:03.048053
2018-06-01 02:52:03,048 [salt.state       ][INFO    ][11732] Executing state file.directory for /etc/sysfs.d
2018-06-01 02:52:03,049 [salt.state       ][INFO    ][11732] Directory /etc/sysfs.d is in the correct state
2018-06-01 02:52:03,050 [salt.state       ][INFO    ][11732] Completed state [/etc/sysfs.d] at time 02:52:03.050072 duration_in_ms=2.019
2018-06-01 02:52:03,051 [salt.state       ][INFO    ][11732] Running state [ondemand] at time 02:52:03.051141
2018-06-01 02:52:03,051 [salt.state       ][INFO    ][11732] Executing state service.dead for ondemand
2018-06-01 02:52:03,052 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command ['systemctl', 'status', 'ondemand.service', '-n', '0'] in directory '/root'
2018-06-01 02:52:03,069 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command ['systemctl', 'is-active', 'ondemand.service'] in directory '/root'
2018-06-01 02:52:03,086 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command ['systemctl', 'is-enabled', 'ondemand.service'] in directory '/root'
2018-06-01 02:52:03,114 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'runlevel' in directory '/root'
2018-06-01 02:52:03,129 [salt.state       ][INFO    ][11732] The service ondemand is already dead
2018-06-01 02:52:03,130 [salt.state       ][INFO    ][11732] Completed state [ondemand] at time 02:52:03.130516 duration_in_ms=79.374
2018-06-01 02:52:03,132 [salt.state       ][INFO    ][11732] Running state [cs_CZ.UTF-8] at time 02:52:03.132367
2018-06-01 02:52:03,133 [salt.state       ][INFO    ][11732] Executing state locale.present for cs_CZ.UTF-8
2018-06-01 02:52:03,134 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'locale -a' in directory '/root'
2018-06-01 02:52:03,152 [salt.state       ][INFO    ][11732] Locale cs_CZ.UTF-8 is already present
2018-06-01 02:52:03,154 [salt.state       ][INFO    ][11732] Completed state [cs_CZ.UTF-8] at time 02:52:03.153902 duration_in_ms=21.534
2018-06-01 02:52:03,155 [salt.state       ][INFO    ][11732] Running state [en_US.UTF-8] at time 02:52:03.155120
2018-06-01 02:52:03,156 [salt.state       ][INFO    ][11732] Executing state locale.present for en_US.UTF-8
2018-06-01 02:52:03,157 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'locale -a' in directory '/root'
2018-06-01 02:52:03,166 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601025203145034
2018-06-01 02:52:03,173 [salt.state       ][INFO    ][11732] Locale en_US.UTF-8 is already present
2018-06-01 02:52:03,174 [salt.state       ][INFO    ][11732] Completed state [en_US.UTF-8] at time 02:52:03.174120 duration_in_ms=19.001
2018-06-01 02:52:03,177 [salt.state       ][INFO    ][11732] Running state [en_US.UTF-8] at time 02:52:03.176494
2018-06-01 02:52:03,177 [salt.state       ][INFO    ][11732] Executing state locale.system for en_US.UTF-8
2018-06-01 02:52:03,178 [salt.minion      ][INFO    ][13168] Starting a new job with PID 13168
2018-06-01 02:52:03,194 [salt.state       ][INFO    ][11732] System locale en_US.UTF-8 already set
2018-06-01 02:52:03,194 [salt.state       ][INFO    ][11732] Completed state [en_US.UTF-8] at time 02:52:03.194713 duration_in_ms=18.218
2018-06-01 02:52:03,196 [salt.state       ][INFO    ][11732] Running state [glance] at time 02:52:03.196265
2018-06-01 02:52:03,196 [salt.state       ][INFO    ][11732] Executing state group.present for glance
2018-06-01 02:52:03,197 [salt.state       ][INFO    ][11732] Group glance is present and up to date
2018-06-01 02:52:03,198 [salt.state       ][INFO    ][11732] Completed state [glance] at time 02:52:03.197990 duration_in_ms=1.725
2018-06-01 02:52:03,198 [salt.minion      ][INFO    ][13168] Returning information for job: 20180601025203145034
2018-06-01 02:52:03,198 [salt.state       ][INFO    ][11732] Running state [keystone] at time 02:52:03.198512
2018-06-01 02:52:03,199 [salt.state       ][INFO    ][11732] Executing state group.present for keystone
2018-06-01 02:52:03,199 [salt.state       ][INFO    ][11732] Group keystone is present and up to date
2018-06-01 02:52:03,200 [salt.state       ][INFO    ][11732] Completed state [keystone] at time 02:52:03.200295 duration_in_ms=1.783
2018-06-01 02:52:03,200 [salt.state       ][INFO    ][11732] Running state [root] at time 02:52:03.200810
2018-06-01 02:52:03,201 [salt.state       ][INFO    ][11732] Executing state group.present for root
2018-06-01 02:52:03,201 [salt.state       ][INFO    ][11732] Group root is present and up to date
2018-06-01 02:52:03,202 [salt.state       ][INFO    ][11732] Completed state [root] at time 02:52:03.202276 duration_in_ms=1.466
2018-06-01 02:52:03,205 [salt.state       ][INFO    ][11732] Running state [root] at time 02:52:03.205638
2018-06-01 02:52:03,206 [salt.state       ][INFO    ][11732] Executing state user.present for root
2018-06-01 02:52:03,208 [salt.state       ][INFO    ][11732] User root is present and up to date
2018-06-01 02:52:03,208 [salt.state       ][INFO    ][11732] Completed state [root] at time 02:52:03.208934 duration_in_ms=3.296
2018-06-01 02:52:03,210 [salt.state       ][INFO    ][11732] Running state [/root] at time 02:52:03.210316
2018-06-01 02:52:03,210 [salt.state       ][INFO    ][11732] Executing state file.directory for /root
2018-06-01 02:52:03,211 [salt.state       ][INFO    ][11732] Directory /root is in the correct state
2018-06-01 02:52:03,212 [salt.state       ][INFO    ][11732] Completed state [/root] at time 02:52:03.212381 duration_in_ms=2.065
2018-06-01 02:52:03,212 [salt.state       ][INFO    ][11732] Running state [/etc/sudoers.d/90-salt-user-root] at time 02:52:03.212842
2018-06-01 02:52:03,213 [salt.state       ][INFO    ][11732] Executing state file.absent for /etc/sudoers.d/90-salt-user-root
2018-06-01 02:52:03,213 [salt.state       ][INFO    ][11732] File /etc/sudoers.d/90-salt-user-root is not present
2018-06-01 02:52:03,214 [salt.state       ][INFO    ][11732] Completed state [/etc/sudoers.d/90-salt-user-root] at time 02:52:03.214220 duration_in_ms=1.378
2018-06-01 02:52:03,214 [salt.state       ][INFO    ][11732] Running state [glance] at time 02:52:03.214667
2018-06-01 02:52:03,215 [salt.state       ][INFO    ][11732] Executing state user.present for glance
2018-06-01 02:52:03,216 [salt.state       ][INFO    ][11732] User glance is present and up to date
2018-06-01 02:52:03,216 [salt.state       ][INFO    ][11732] Completed state [glance] at time 02:52:03.216874 duration_in_ms=2.206
2018-06-01 02:52:03,218 [salt.state       ][INFO    ][11732] Running state [/var/lib/glance] at time 02:52:03.218248
2018-06-01 02:52:03,218 [salt.state       ][INFO    ][11732] Executing state file.directory for /var/lib/glance
2018-06-01 02:52:03,219 [salt.state       ][INFO    ][11732] Directory /var/lib/glance is in the correct state
2018-06-01 02:52:03,220 [salt.state       ][INFO    ][11732] Completed state [/var/lib/glance] at time 02:52:03.220338 duration_in_ms=2.09
2018-06-01 02:52:03,220 [salt.state       ][INFO    ][11732] Running state [/etc/sudoers.d/90-salt-user-glance] at time 02:52:03.220834
2018-06-01 02:52:03,221 [salt.state       ][INFO    ][11732] Executing state file.absent for /etc/sudoers.d/90-salt-user-glance
2018-06-01 02:52:03,221 [salt.state       ][INFO    ][11732] File /etc/sudoers.d/90-salt-user-glance is not present
2018-06-01 02:52:03,222 [salt.state       ][INFO    ][11732] Completed state [/etc/sudoers.d/90-salt-user-glance] at time 02:52:03.222282 duration_in_ms=1.448
2018-06-01 02:52:03,222 [salt.state       ][INFO    ][11732] Running state [keystone] at time 02:52:03.222762
2018-06-01 02:52:03,223 [salt.state       ][INFO    ][11732] Executing state user.present for keystone
2018-06-01 02:52:03,224 [salt.state       ][INFO    ][11732] User keystone is present and up to date
2018-06-01 02:52:03,225 [salt.state       ][INFO    ][11732] Completed state [keystone] at time 02:52:03.225015 duration_in_ms=2.252
2018-06-01 02:52:03,226 [salt.state       ][INFO    ][11732] Running state [/var/lib/keystone] at time 02:52:03.226398
2018-06-01 02:52:03,226 [salt.state       ][INFO    ][11732] Executing state file.directory for /var/lib/keystone
2018-06-01 02:52:03,228 [salt.state       ][INFO    ][11732] Directory /var/lib/keystone is in the correct state
2018-06-01 02:52:03,228 [salt.state       ][INFO    ][11732] Completed state [/var/lib/keystone] at time 02:52:03.228468 duration_in_ms=2.07
2018-06-01 02:52:03,228 [salt.state       ][INFO    ][11732] Running state [/etc/sudoers.d/90-salt-user-keystone] at time 02:52:03.228950
2018-06-01 02:52:03,229 [salt.state       ][INFO    ][11732] Executing state file.absent for /etc/sudoers.d/90-salt-user-keystone
2018-06-01 02:52:03,230 [salt.state       ][INFO    ][11732] File /etc/sudoers.d/90-salt-user-keystone is not present
2018-06-01 02:52:03,230 [salt.state       ][INFO    ][11732] Completed state [/etc/sudoers.d/90-salt-user-keystone] at time 02:52:03.230427 duration_in_ms=1.477
2018-06-01 02:52:03,230 [salt.state       ][INFO    ][11732] Running state [ubuntu] at time 02:52:03.230909
2018-06-01 02:52:03,231 [salt.state       ][INFO    ][11732] Executing state group.present for ubuntu
2018-06-01 02:52:03,232 [salt.state       ][INFO    ][11732] Group ubuntu is present and up to date
2018-06-01 02:52:03,232 [salt.state       ][INFO    ][11732] Completed state [ubuntu] at time 02:52:03.232395 duration_in_ms=1.486
2018-06-01 02:52:03,233 [salt.state       ][INFO    ][11732] Running state [ubuntu] at time 02:52:03.233377
2018-06-01 02:52:03,233 [salt.state       ][INFO    ][11732] Executing state user.present for ubuntu
2018-06-01 02:52:03,235 [salt.state       ][INFO    ][11732] User ubuntu is present and up to date
2018-06-01 02:52:03,235 [salt.state       ][INFO    ][11732] Completed state [ubuntu] at time 02:52:03.235388 duration_in_ms=2.011
2018-06-01 02:52:03,237 [salt.state       ][INFO    ][11732] Running state [/home/ubuntu] at time 02:52:03.237224
2018-06-01 02:52:03,237 [salt.state       ][INFO    ][11732] Executing state file.directory for /home/ubuntu
2018-06-01 02:52:03,238 [salt.state       ][INFO    ][11732] Directory /home/ubuntu is in the correct state
2018-06-01 02:52:03,238 [salt.state       ][INFO    ][11732] Completed state [/home/ubuntu] at time 02:52:03.238856 duration_in_ms=1.632
2018-06-01 02:52:03,240 [salt.state       ][INFO    ][11732] Running state [/etc/sudoers.d/90-salt-user-ubuntu] at time 02:52:03.240104
2018-06-01 02:52:03,240 [salt.state       ][INFO    ][11732] Executing state file.managed for /etc/sudoers.d/90-salt-user-ubuntu
2018-06-01 02:52:03,268 [salt.state       ][INFO    ][11732] File /etc/sudoers.d/90-salt-user-ubuntu is in the correct state
2018-06-01 02:52:03,268 [salt.state       ][INFO    ][11732] Completed state [/etc/sudoers.d/90-salt-user-ubuntu] at time 02:52:03.268481 duration_in_ms=28.378
2018-06-01 02:52:03,268 [salt.state       ][INFO    ][11732] Running state [/etc/security/limits.d/90-salt-default.conf] at time 02:52:03.268732
2018-06-01 02:52:03,268 [salt.state       ][INFO    ][11732] Executing state file.managed for /etc/security/limits.d/90-salt-default.conf
2018-06-01 02:52:03,449 [salt.state       ][INFO    ][11732] File /etc/security/limits.d/90-salt-default.conf is in the correct state
2018-06-01 02:52:03,450 [salt.state       ][INFO    ][11732] Completed state [/etc/security/limits.d/90-salt-default.conf] at time 02:52:03.449957 duration_in_ms=181.225
2018-06-01 02:52:03,450 [salt.state       ][INFO    ][11732] Running state [/etc/systemd/system.conf.d/90-salt.conf] at time 02:52:03.450226
2018-06-01 02:52:03,450 [salt.state       ][INFO    ][11732] Executing state file.managed for /etc/systemd/system.conf.d/90-salt.conf
2018-06-01 02:52:03,558 [salt.state       ][INFO    ][11732] File /etc/systemd/system.conf.d/90-salt.conf is in the correct state
2018-06-01 02:52:03,558 [salt.state       ][INFO    ][11732] Completed state [/etc/systemd/system.conf.d/90-salt.conf] at time 02:52:03.558723 duration_in_ms=108.497
2018-06-01 02:52:03,560 [salt.state       ][INFO    ][11732] Running state [service.systemctl_reload] at time 02:52:03.560162
2018-06-01 02:52:03,560 [salt.state       ][INFO    ][11732] Executing state module.wait for service.systemctl_reload
2018-06-01 02:52:03,560 [salt.state       ][INFO    ][11732] No changes made for service.systemctl_reload
2018-06-01 02:52:03,560 [salt.state       ][INFO    ][11732] Completed state [service.systemctl_reload] at time 02:52:03.560911 duration_in_ms=0.749
2018-06-01 02:52:03,561 [salt.state       ][INFO    ][11732] Running state [/etc/hostname] at time 02:52:03.561152
2018-06-01 02:52:03,561 [salt.state       ][INFO    ][11732] Executing state file.managed for /etc/hostname
2018-06-01 02:52:03,580 [salt.state       ][INFO    ][11732] File /etc/hostname is in the correct state
2018-06-01 02:52:03,580 [salt.state       ][INFO    ][11732] Completed state [/etc/hostname] at time 02:52:03.580357 duration_in_ms=19.205
2018-06-01 02:52:03,581 [salt.state       ][INFO    ][11732] Running state [hostname ctl03] at time 02:52:03.581646
2018-06-01 02:52:03,582 [salt.state       ][INFO    ][11732] Executing state cmd.wait for hostname ctl03
2018-06-01 02:52:03,582 [salt.state       ][INFO    ][11732] No changes made for hostname ctl03
2018-06-01 02:52:03,582 [salt.state       ][INFO    ][11732] Completed state [hostname ctl03] at time 02:52:03.582699 duration_in_ms=1.053
2018-06-01 02:52:03,583 [salt.state       ][INFO    ][11732] Running state [mdb02] at time 02:52:03.583469
2018-06-01 02:52:03,583 [salt.state       ][INFO    ][11732] Executing state host.present for mdb02
2018-06-01 02:52:03,584 [salt.state       ][INFO    ][11732] Host mdb02 (192.168.10.33) already present
2018-06-01 02:52:03,584 [salt.state       ][INFO    ][11732] Completed state [mdb02] at time 02:52:03.584874 duration_in_ms=1.405
2018-06-01 02:52:03,585 [salt.state       ][INFO    ][11732] Running state [mdb02.mcp-pike-odl-ha.local] at time 02:52:03.585206
2018-06-01 02:52:03,585 [salt.state       ][INFO    ][11732] Executing state host.present for mdb02.mcp-pike-odl-ha.local
2018-06-01 02:52:03,586 [salt.state       ][INFO    ][11732] Host mdb02.mcp-pike-odl-ha.local (192.168.10.33) already present
2018-06-01 02:52:03,586 [salt.state       ][INFO    ][11732] Completed state [mdb02.mcp-pike-odl-ha.local] at time 02:52:03.586472 duration_in_ms=1.265
2018-06-01 02:52:03,586 [salt.state       ][INFO    ][11732] Running state [mdb03] at time 02:52:03.586801
2018-06-01 02:52:03,587 [salt.state       ][INFO    ][11732] Executing state host.present for mdb03
2018-06-01 02:52:03,587 [salt.state       ][INFO    ][11732] Host mdb03 (192.168.10.34) already present
2018-06-01 02:52:03,588 [salt.state       ][INFO    ][11732] Completed state [mdb03] at time 02:52:03.588067 duration_in_ms=1.266
2018-06-01 02:52:03,588 [salt.state       ][INFO    ][11732] Running state [mdb03.mcp-pike-odl-ha.local] at time 02:52:03.588423
2018-06-01 02:52:03,588 [salt.state       ][INFO    ][11732] Executing state host.present for mdb03.mcp-pike-odl-ha.local
2018-06-01 02:52:03,589 [salt.state       ][INFO    ][11732] Host mdb03.mcp-pike-odl-ha.local (192.168.10.34) already present
2018-06-01 02:52:03,589 [salt.state       ][INFO    ][11732] Completed state [mdb03.mcp-pike-odl-ha.local] at time 02:52:03.589672 duration_in_ms=1.249
2018-06-01 02:52:03,590 [salt.state       ][INFO    ][11732] Running state [mdb01] at time 02:52:03.589994
2018-06-01 02:52:03,590 [salt.state       ][INFO    ][11732] Executing state host.present for mdb01
2018-06-01 02:52:03,591 [salt.state       ][INFO    ][11732] Host mdb01 (192.168.10.32) already present
2018-06-01 02:52:03,591 [salt.state       ][INFO    ][11732] Completed state [mdb01] at time 02:52:03.591236 duration_in_ms=1.241
2018-06-01 02:52:03,592 [salt.state       ][INFO    ][11732] Running state [mdb01.mcp-pike-odl-ha.local] at time 02:52:03.592189
2018-06-01 02:52:03,592 [salt.state       ][INFO    ][11732] Executing state host.present for mdb01.mcp-pike-odl-ha.local
2018-06-01 02:52:03,592 [salt.state       ][INFO    ][11732] Host mdb01.mcp-pike-odl-ha.local (192.168.10.32) already present
2018-06-01 02:52:03,593 [salt.state       ][INFO    ][11732] Completed state [mdb01.mcp-pike-odl-ha.local] at time 02:52:03.593132 duration_in_ms=0.944
2018-06-01 02:52:03,593 [salt.state       ][INFO    ][11732] Running state [mdb] at time 02:52:03.593365
2018-06-01 02:52:03,593 [salt.state       ][INFO    ][11732] Executing state host.present for mdb
2018-06-01 02:52:03,594 [salt.state       ][INFO    ][11732] Host mdb (192.168.10.31) already present
2018-06-01 02:52:03,594 [salt.state       ][INFO    ][11732] Completed state [mdb] at time 02:52:03.594255 duration_in_ms=0.89
2018-06-01 02:52:03,594 [salt.state       ][INFO    ][11732] Running state [mdb.mcp-pike-odl-ha.local] at time 02:52:03.594487
2018-06-01 02:52:03,594 [salt.state       ][INFO    ][11732] Executing state host.present for mdb.mcp-pike-odl-ha.local
2018-06-01 02:52:03,595 [salt.state       ][INFO    ][11732] Host mdb.mcp-pike-odl-ha.local (192.168.10.31) already present
2018-06-01 02:52:03,595 [salt.state       ][INFO    ][11732] Completed state [mdb.mcp-pike-odl-ha.local] at time 02:52:03.595375 duration_in_ms=0.887
2018-06-01 02:52:03,595 [salt.state       ][INFO    ][11732] Running state [cfg01] at time 02:52:03.595957
2018-06-01 02:52:03,596 [salt.state       ][INFO    ][11732] Executing state host.present for cfg01
2018-06-01 02:52:03,596 [salt.state       ][INFO    ][11732] Host cfg01 (192.168.10.11) already present
2018-06-01 02:52:03,596 [salt.state       ][INFO    ][11732] Completed state [cfg01] at time 02:52:03.596886 duration_in_ms=0.93
2018-06-01 02:52:03,597 [salt.state       ][INFO    ][11732] Running state [cfg01.mcp-pike-odl-ha.local] at time 02:52:03.597117
2018-06-01 02:52:03,597 [salt.state       ][INFO    ][11732] Executing state host.present for cfg01.mcp-pike-odl-ha.local
2018-06-01 02:52:03,597 [salt.state       ][INFO    ][11732] Host cfg01.mcp-pike-odl-ha.local (192.168.10.11) already present
2018-06-01 02:52:03,598 [salt.state       ][INFO    ][11732] Completed state [cfg01.mcp-pike-odl-ha.local] at time 02:52:03.598005 duration_in_ms=0.888
2018-06-01 02:52:03,598 [salt.state       ][INFO    ][11732] Running state [prx01] at time 02:52:03.598233
2018-06-01 02:52:03,598 [salt.state       ][INFO    ][11732] Executing state host.present for prx01
2018-06-01 02:52:03,598 [salt.state       ][INFO    ][11732] Host prx01 (192.168.10.14) already present
2018-06-01 02:52:03,599 [salt.state       ][INFO    ][11732] Completed state [prx01] at time 02:52:03.599115 duration_in_ms=0.882
2018-06-01 02:52:03,599 [salt.state       ][INFO    ][11732] Running state [prx01.mcp-pike-odl-ha.local] at time 02:52:03.599345
2018-06-01 02:52:03,599 [salt.state       ][INFO    ][11732] Executing state host.present for prx01.mcp-pike-odl-ha.local
2018-06-01 02:52:03,600 [salt.state       ][INFO    ][11732] Host prx01.mcp-pike-odl-ha.local (192.168.10.14) already present
2018-06-01 02:52:03,600 [salt.state       ][INFO    ][11732] Completed state [prx01.mcp-pike-odl-ha.local] at time 02:52:03.600280 duration_in_ms=0.935
2018-06-01 02:52:03,600 [salt.state       ][INFO    ][11732] Running state [kvm01] at time 02:52:03.600516
2018-06-01 02:52:03,600 [salt.state       ][INFO    ][11732] Executing state host.present for kvm01
2018-06-01 02:52:03,601 [salt.state       ][INFO    ][11732] Host kvm01 (192.168.10.20) already present
2018-06-01 02:52:03,601 [salt.state       ][INFO    ][11732] Completed state [kvm01] at time 02:52:03.601402 duration_in_ms=0.886
2018-06-01 02:52:03,601 [salt.state       ][INFO    ][11732] Running state [kvm01.mcp-pike-odl-ha.local] at time 02:52:03.601631
2018-06-01 02:52:03,601 [salt.state       ][INFO    ][11732] Executing state host.present for kvm01.mcp-pike-odl-ha.local
2018-06-01 02:52:03,602 [salt.state       ][INFO    ][11732] Host kvm01.mcp-pike-odl-ha.local (192.168.10.20) already present
2018-06-01 02:52:03,602 [salt.state       ][INFO    ][11732] Completed state [kvm01.mcp-pike-odl-ha.local] at time 02:52:03.602517 duration_in_ms=0.886
2018-06-01 02:52:03,602 [salt.state       ][INFO    ][11732] Running state [kvm03] at time 02:52:03.602756
2018-06-01 02:52:03,602 [salt.state       ][INFO    ][11732] Executing state host.present for kvm03
2018-06-01 02:52:03,603 [salt.state       ][INFO    ][11732] Host kvm03 (192.168.10.22) already present
2018-06-01 02:52:03,603 [salt.state       ][INFO    ][11732] Completed state [kvm03] at time 02:52:03.603670 duration_in_ms=0.914
2018-06-01 02:52:03,603 [salt.state       ][INFO    ][11732] Running state [kvm03.mcp-pike-odl-ha.local] at time 02:52:03.603903
2018-06-01 02:52:03,604 [salt.state       ][INFO    ][11732] Executing state host.present for kvm03.mcp-pike-odl-ha.local
2018-06-01 02:52:03,604 [salt.state       ][INFO    ][11732] Host kvm03.mcp-pike-odl-ha.local (192.168.10.22) already present
2018-06-01 02:52:03,605 [salt.state       ][INFO    ][11732] Completed state [kvm03.mcp-pike-odl-ha.local] at time 02:52:03.605008 duration_in_ms=1.105
2018-06-01 02:52:03,605 [salt.state       ][INFO    ][11732] Running state [kvm02] at time 02:52:03.605245
2018-06-01 02:52:03,605 [salt.state       ][INFO    ][11732] Executing state host.present for kvm02
2018-06-01 02:52:03,605 [salt.state       ][INFO    ][11732] Host kvm02 (192.168.10.21) already present
2018-06-01 02:52:03,606 [salt.state       ][INFO    ][11732] Completed state [kvm02] at time 02:52:03.606132 duration_in_ms=0.888
2018-06-01 02:52:03,606 [salt.state       ][INFO    ][11732] Running state [kvm02.mcp-pike-odl-ha.local] at time 02:52:03.606362
2018-06-01 02:52:03,606 [salt.state       ][INFO    ][11732] Executing state host.present for kvm02.mcp-pike-odl-ha.local
2018-06-01 02:52:03,607 [salt.state       ][INFO    ][11732] Host kvm02.mcp-pike-odl-ha.local (192.168.10.21) already present
2018-06-01 02:52:03,607 [salt.state       ][INFO    ][11732] Completed state [kvm02.mcp-pike-odl-ha.local] at time 02:52:03.607247 duration_in_ms=0.886
2018-06-01 02:52:03,607 [salt.state       ][INFO    ][11732] Running state [dbs] at time 02:52:03.607485
2018-06-01 02:52:03,608 [salt.state       ][INFO    ][11732] Executing state host.present for dbs
2018-06-01 02:52:03,608 [salt.state       ][INFO    ][11732] Host dbs (192.168.10.23) already present
2018-06-01 02:52:03,608 [salt.state       ][INFO    ][11732] Completed state [dbs] at time 02:52:03.608750 duration_in_ms=1.265
2018-06-01 02:52:03,609 [salt.state       ][INFO    ][11732] Running state [dbs.mcp-pike-odl-ha.local] at time 02:52:03.609306
2018-06-01 02:52:03,609 [salt.state       ][INFO    ][11732] Executing state host.present for dbs.mcp-pike-odl-ha.local
2018-06-01 02:52:03,610 [salt.state       ][INFO    ][11732] Host dbs.mcp-pike-odl-ha.local (192.168.10.23) already present
2018-06-01 02:52:03,610 [salt.state       ][INFO    ][11732] Completed state [dbs.mcp-pike-odl-ha.local] at time 02:52:03.610191 duration_in_ms=0.885
2018-06-01 02:52:03,610 [salt.state       ][INFO    ][11732] Running state [prx] at time 02:52:03.610421
2018-06-01 02:52:03,610 [salt.state       ][INFO    ][11732] Executing state host.present for prx
2018-06-01 02:52:03,611 [salt.state       ][INFO    ][11732] Host prx (192.168.10.13) already present
2018-06-01 02:52:03,611 [salt.state       ][INFO    ][11732] Completed state [prx] at time 02:52:03.611306 duration_in_ms=0.885
2018-06-01 02:52:03,611 [salt.state       ][INFO    ][11732] Running state [prx.mcp-pike-odl-ha.local] at time 02:52:03.611547
2018-06-01 02:52:03,611 [salt.state       ][INFO    ][11732] Executing state host.present for prx.mcp-pike-odl-ha.local
2018-06-01 02:52:03,612 [salt.state       ][INFO    ][11732] Host prx.mcp-pike-odl-ha.local (192.168.10.13) already present
2018-06-01 02:52:03,612 [salt.state       ][INFO    ][11732] Completed state [prx.mcp-pike-odl-ha.local] at time 02:52:03.612458 duration_in_ms=0.91
2018-06-01 02:52:03,612 [salt.state       ][INFO    ][11732] Running state [prx02] at time 02:52:03.612685
2018-06-01 02:52:03,612 [salt.state       ][INFO    ][11732] Executing state host.present for prx02
2018-06-01 02:52:03,613 [salt.state       ][INFO    ][11732] Host prx02 (192.168.10.15) already present
2018-06-01 02:52:03,613 [salt.state       ][INFO    ][11732] Completed state [prx02] at time 02:52:03.613575 duration_in_ms=0.89
2018-06-01 02:52:03,613 [salt.state       ][INFO    ][11732] Running state [prx02.mcp-pike-odl-ha.local] at time 02:52:03.613804
2018-06-01 02:52:03,614 [salt.state       ][INFO    ][11732] Executing state host.present for prx02.mcp-pike-odl-ha.local
2018-06-01 02:52:03,614 [salt.state       ][INFO    ][11732] Host prx02.mcp-pike-odl-ha.local (192.168.10.15) already present
2018-06-01 02:52:03,614 [salt.state       ][INFO    ][11732] Completed state [prx02.mcp-pike-odl-ha.local] at time 02:52:03.614687 duration_in_ms=0.883
2018-06-01 02:52:03,614 [salt.state       ][INFO    ][11732] Running state [msg02] at time 02:52:03.614916
2018-06-01 02:52:03,615 [salt.state       ][INFO    ][11732] Executing state host.present for msg02
2018-06-01 02:52:03,615 [salt.state       ][INFO    ][11732] Host msg02 (192.168.10.29) already present
2018-06-01 02:52:03,615 [salt.state       ][INFO    ][11732] Completed state [msg02] at time 02:52:03.615827 duration_in_ms=0.911
2018-06-01 02:52:03,616 [salt.state       ][INFO    ][11732] Running state [msg02.mcp-pike-odl-ha.local] at time 02:52:03.616055
2018-06-01 02:52:03,616 [salt.state       ][INFO    ][11732] Executing state host.present for msg02.mcp-pike-odl-ha.local
2018-06-01 02:52:03,616 [salt.state       ][INFO    ][11732] Host msg02.mcp-pike-odl-ha.local (192.168.10.29) already present
2018-06-01 02:52:03,617 [salt.state       ][INFO    ][11732] Completed state [msg02.mcp-pike-odl-ha.local] at time 02:52:03.616964 duration_in_ms=0.908
2018-06-01 02:52:03,617 [salt.state       ][INFO    ][11732] Running state [msg03] at time 02:52:03.617191
2018-06-01 02:52:03,617 [salt.state       ][INFO    ][11732] Executing state host.present for msg03
2018-06-01 02:52:03,617 [salt.state       ][INFO    ][11732] Host msg03 (192.168.10.30) already present
2018-06-01 02:52:03,618 [salt.state       ][INFO    ][11732] Completed state [msg03] at time 02:52:03.618076 duration_in_ms=0.884
2018-06-01 02:52:03,618 [salt.state       ][INFO    ][11732] Running state [msg03.mcp-pike-odl-ha.local] at time 02:52:03.618304
2018-06-01 02:52:03,618 [salt.state       ][INFO    ][11732] Executing state host.present for msg03.mcp-pike-odl-ha.local
2018-06-01 02:52:03,619 [salt.state       ][INFO    ][11732] Host msg03.mcp-pike-odl-ha.local (192.168.10.30) already present
2018-06-01 02:52:03,619 [salt.state       ][INFO    ][11732] Completed state [msg03.mcp-pike-odl-ha.local] at time 02:52:03.619187 duration_in_ms=0.883
2018-06-01 02:52:03,619 [salt.state       ][INFO    ][11732] Running state [msg01] at time 02:52:03.619415
2018-06-01 02:52:03,619 [salt.state       ][INFO    ][11732] Executing state host.present for msg01
2018-06-01 02:52:03,620 [salt.state       ][INFO    ][11732] Host msg01 (192.168.10.28) already present
2018-06-01 02:52:03,620 [salt.state       ][INFO    ][11732] Completed state [msg01] at time 02:52:03.620674 duration_in_ms=1.259
2018-06-01 02:52:03,620 [salt.state       ][INFO    ][11732] Running state [msg01.mcp-pike-odl-ha.local] at time 02:52:03.620902
2018-06-01 02:52:03,621 [salt.state       ][INFO    ][11732] Executing state host.present for msg01.mcp-pike-odl-ha.local
2018-06-01 02:52:03,621 [salt.state       ][INFO    ][11732] Host msg01.mcp-pike-odl-ha.local (192.168.10.28) already present
2018-06-01 02:52:03,621 [salt.state       ][INFO    ][11732] Completed state [msg01.mcp-pike-odl-ha.local] at time 02:52:03.621788 duration_in_ms=0.886
2018-06-01 02:52:03,622 [salt.state       ][INFO    ][11732] Running state [msg] at time 02:52:03.622017
2018-06-01 02:52:03,622 [salt.state       ][INFO    ][11732] Executing state host.present for msg
2018-06-01 02:52:03,622 [salt.state       ][INFO    ][11732] Host msg (192.168.10.27) already present
2018-06-01 02:52:03,622 [salt.state       ][INFO    ][11732] Completed state [msg] at time 02:52:03.622902 duration_in_ms=0.885
2018-06-01 02:52:03,623 [salt.state       ][INFO    ][11732] Running state [msg.mcp-pike-odl-ha.local] at time 02:52:03.623136
2018-06-01 02:52:03,623 [salt.state       ][INFO    ][11732] Executing state host.present for msg.mcp-pike-odl-ha.local
2018-06-01 02:52:03,623 [salt.state       ][INFO    ][11732] Host msg.mcp-pike-odl-ha.local (192.168.10.27) already present
2018-06-01 02:52:03,624 [salt.state       ][INFO    ][11732] Completed state [msg.mcp-pike-odl-ha.local] at time 02:52:03.624031 duration_in_ms=0.895
2018-06-01 02:52:03,624 [salt.state       ][INFO    ][11732] Running state [cfg01] at time 02:52:03.624281
2018-06-01 02:52:03,624 [salt.state       ][INFO    ][11732] Executing state host.present for cfg01
2018-06-01 02:52:03,624 [salt.state       ][INFO    ][11732] Host cfg01 (192.168.10.11) already present
2018-06-01 02:52:03,625 [salt.state       ][INFO    ][11732] Completed state [cfg01] at time 02:52:03.625165 duration_in_ms=0.884
2018-06-01 02:52:03,625 [salt.state       ][INFO    ][11732] Running state [cfg01.mcp-pike-odl-ha.local] at time 02:52:03.625396
2018-06-01 02:52:03,625 [salt.state       ][INFO    ][11732] Executing state host.present for cfg01.mcp-pike-odl-ha.local
2018-06-01 02:52:03,626 [salt.state       ][INFO    ][11732] Host cfg01.mcp-pike-odl-ha.local (192.168.10.11) already present
2018-06-01 02:52:03,626 [salt.state       ][INFO    ][11732] Completed state [cfg01.mcp-pike-odl-ha.local] at time 02:52:03.626279 duration_in_ms=0.883
2018-06-01 02:52:03,626 [salt.state       ][INFO    ][11732] Running state [cmp002] at time 02:52:03.626509
2018-06-01 02:52:03,626 [salt.state       ][INFO    ][11732] Executing state host.present for cmp002
2018-06-01 02:52:03,627 [salt.state       ][INFO    ][11732] Host cmp002 (192.168.10.53) already present
2018-06-01 02:52:03,627 [salt.state       ][INFO    ][11732] Completed state [cmp002] at time 02:52:03.627390 duration_in_ms=0.882
2018-06-01 02:52:03,628 [salt.state       ][INFO    ][11732] Running state [cmp002.mcp-pike-odl-ha.local] at time 02:52:03.627990
2018-06-01 02:52:03,628 [salt.state       ][INFO    ][11732] Executing state host.present for cmp002.mcp-pike-odl-ha.local
2018-06-01 02:52:03,628 [salt.state       ][INFO    ][11732] Host cmp002.mcp-pike-odl-ha.local (192.168.10.53) already present
2018-06-01 02:52:03,629 [salt.state       ][INFO    ][11732] Completed state [cmp002.mcp-pike-odl-ha.local] at time 02:52:03.629051 duration_in_ms=1.061
2018-06-01 02:52:03,629 [salt.state       ][INFO    ][11732] Running state [cmp001] at time 02:52:03.629281
2018-06-01 02:52:03,629 [salt.state       ][INFO    ][11732] Executing state host.present for cmp001
2018-06-01 02:52:03,629 [salt.state       ][INFO    ][11732] Host cmp001 (192.168.10.52) already present
2018-06-01 02:52:03,630 [salt.state       ][INFO    ][11732] Completed state [cmp001] at time 02:52:03.630161 duration_in_ms=0.88
2018-06-01 02:52:03,630 [salt.state       ][INFO    ][11732] Running state [cmp001.mcp-pike-odl-ha.local] at time 02:52:03.630391
2018-06-01 02:52:03,630 [salt.state       ][INFO    ][11732] Executing state host.present for cmp001.mcp-pike-odl-ha.local
2018-06-01 02:52:03,631 [salt.state       ][INFO    ][11732] Host cmp001.mcp-pike-odl-ha.local (192.168.10.52) already present
2018-06-01 02:52:03,631 [salt.state       ][INFO    ][11732] Completed state [cmp001.mcp-pike-odl-ha.local] at time 02:52:03.631272 duration_in_ms=0.881
2018-06-01 02:52:03,631 [salt.state       ][INFO    ][11732] Running state [dbs01] at time 02:52:03.631513
2018-06-01 02:52:03,631 [salt.state       ][INFO    ][11732] Executing state host.present for dbs01
2018-06-01 02:52:03,632 [salt.state       ][INFO    ][11732] Host dbs01 (192.168.10.24) already present
2018-06-01 02:52:03,632 [salt.state       ][INFO    ][11732] Completed state [dbs01] at time 02:52:03.632420 duration_in_ms=0.908
2018-06-01 02:52:03,632 [salt.state       ][INFO    ][11732] Running state [dbs01.mcp-pike-odl-ha.local] at time 02:52:03.632647
2018-06-01 02:52:03,632 [salt.state       ][INFO    ][11732] Executing state host.present for dbs01.mcp-pike-odl-ha.local
2018-06-01 02:52:03,633 [salt.state       ][INFO    ][11732] Host dbs01.mcp-pike-odl-ha.local (192.168.10.24) already present
2018-06-01 02:52:03,633 [salt.state       ][INFO    ][11732] Completed state [dbs01.mcp-pike-odl-ha.local] at time 02:52:03.633536 duration_in_ms=0.889
2018-06-01 02:52:03,633 [salt.state       ][INFO    ][11732] Running state [dbs02] at time 02:52:03.633768
2018-06-01 02:52:03,634 [salt.state       ][INFO    ][11732] Executing state host.present for dbs02
2018-06-01 02:52:03,634 [salt.state       ][INFO    ][11732] Host dbs02 (192.168.10.25) already present
2018-06-01 02:52:03,634 [salt.state       ][INFO    ][11732] Completed state [dbs02] at time 02:52:03.634648 duration_in_ms=0.88
2018-06-01 02:52:03,634 [salt.state       ][INFO    ][11732] Running state [dbs02.mcp-pike-odl-ha.local] at time 02:52:03.634878
2018-06-01 02:52:03,635 [salt.state       ][INFO    ][11732] Executing state host.present for dbs02.mcp-pike-odl-ha.local
2018-06-01 02:52:03,635 [salt.state       ][INFO    ][11732] Host dbs02.mcp-pike-odl-ha.local (192.168.10.25) already present
2018-06-01 02:52:03,635 [salt.state       ][INFO    ][11732] Completed state [dbs02.mcp-pike-odl-ha.local] at time 02:52:03.635776 duration_in_ms=0.898
2018-06-01 02:52:03,636 [salt.state       ][INFO    ][11732] Running state [dbs03] at time 02:52:03.636005
2018-06-01 02:52:03,636 [salt.state       ][INFO    ][11732] Executing state host.present for dbs03
2018-06-01 02:52:03,636 [salt.state       ][INFO    ][11732] Host dbs03 (192.168.10.26) already present
2018-06-01 02:52:03,636 [salt.state       ][INFO    ][11732] Completed state [dbs03] at time 02:52:03.636923 duration_in_ms=0.918
2018-06-01 02:52:03,637 [salt.state       ][INFO    ][11732] Running state [dbs03.mcp-pike-odl-ha.local] at time 02:52:03.637152
2018-06-01 02:52:03,637 [salt.state       ][INFO    ][11732] Executing state host.present for dbs03.mcp-pike-odl-ha.local
2018-06-01 02:52:03,637 [salt.state       ][INFO    ][11732] Host dbs03.mcp-pike-odl-ha.local (192.168.10.26) already present
2018-06-01 02:52:03,638 [salt.state       ][INFO    ][11732] Completed state [dbs03.mcp-pike-odl-ha.local] at time 02:52:03.638037 duration_in_ms=0.886
2018-06-01 02:52:03,638 [salt.state       ][INFO    ][11732] Running state [odl01] at time 02:52:03.638268
2018-06-01 02:52:03,638 [salt.state       ][INFO    ][11732] Executing state host.present for odl01
2018-06-01 02:52:03,638 [salt.state       ][INFO    ][11732] Host odl01 (192.168.10.39) already present
2018-06-01 02:52:03,639 [salt.state       ][INFO    ][11732] Completed state [odl01] at time 02:52:03.639151 duration_in_ms=0.883
2018-06-01 02:52:03,639 [salt.state       ][INFO    ][11732] Running state [odl01.mcp-pike-odl-ha.local] at time 02:52:03.639381
2018-06-01 02:52:03,639 [salt.state       ][INFO    ][11732] Executing state host.present for odl01.mcp-pike-odl-ha.local
2018-06-01 02:52:03,640 [salt.state       ][INFO    ][11732] Host odl01.mcp-pike-odl-ha.local (192.168.10.39) already present
2018-06-01 02:52:03,640 [salt.state       ][INFO    ][11732] Completed state [odl01.mcp-pike-odl-ha.local] at time 02:52:03.640677 duration_in_ms=1.296
2018-06-01 02:52:03,640 [salt.state       ][INFO    ][11732] Running state [mas01] at time 02:52:03.640925
2018-06-01 02:52:03,641 [salt.state       ][INFO    ][11732] Executing state host.present for mas01
2018-06-01 02:52:03,641 [salt.state       ][INFO    ][11732] Host mas01 (192.168.10.12) already present
2018-06-01 02:52:03,641 [salt.state       ][INFO    ][11732] Completed state [mas01] at time 02:52:03.641806 duration_in_ms=0.882
2018-06-01 02:52:03,642 [salt.state       ][INFO    ][11732] Running state [mas01.mcp-pike-odl-ha.local] at time 02:52:03.642035
2018-06-01 02:52:03,642 [salt.state       ][INFO    ][11732] Executing state host.present for mas01.mcp-pike-odl-ha.local
2018-06-01 02:52:03,642 [salt.state       ][INFO    ][11732] Host mas01.mcp-pike-odl-ha.local (192.168.10.12) already present
2018-06-01 02:52:03,642 [salt.state       ][INFO    ][11732] Completed state [mas01.mcp-pike-odl-ha.local] at time 02:52:03.642915 duration_in_ms=0.881
2018-06-01 02:52:03,643 [salt.state       ][INFO    ][11732] Running state [ctl02] at time 02:52:03.643156
2018-06-01 02:52:03,643 [salt.state       ][INFO    ][11732] Executing state host.present for ctl02
2018-06-01 02:52:03,644 [salt.state       ][INFO    ][11732] Host ctl02 (192.168.10.37) already present
2018-06-01 02:52:03,644 [salt.state       ][INFO    ][11732] Completed state [ctl02] at time 02:52:03.644430 duration_in_ms=1.273
2018-06-01 02:52:03,644 [salt.state       ][INFO    ][11732] Running state [ctl02.mcp-pike-odl-ha.local] at time 02:52:03.644662
2018-06-01 02:52:03,644 [salt.state       ][INFO    ][11732] Executing state host.present for ctl02.mcp-pike-odl-ha.local
2018-06-01 02:52:03,645 [salt.state       ][INFO    ][11732] Host ctl02.mcp-pike-odl-ha.local (192.168.10.37) already present
2018-06-01 02:52:03,645 [salt.state       ][INFO    ][11732] Completed state [ctl02.mcp-pike-odl-ha.local] at time 02:52:03.645544 duration_in_ms=0.882
2018-06-01 02:52:03,645 [salt.state       ][INFO    ][11732] Running state [ctl03] at time 02:52:03.645771
2018-06-01 02:52:03,646 [salt.state       ][INFO    ][11732] Executing state host.present for ctl03
2018-06-01 02:52:03,646 [salt.state       ][INFO    ][11732] Host ctl03 (192.168.10.38) already present
2018-06-01 02:52:03,646 [salt.state       ][INFO    ][11732] Completed state [ctl03] at time 02:52:03.646647 duration_in_ms=0.876
2018-06-01 02:52:03,646 [salt.state       ][INFO    ][11732] Running state [ctl03.mcp-pike-odl-ha.local] at time 02:52:03.646874
2018-06-01 02:52:03,647 [salt.state       ][INFO    ][11732] Executing state host.present for ctl03.mcp-pike-odl-ha.local
2018-06-01 02:52:03,647 [salt.state       ][INFO    ][11732] Host ctl03.mcp-pike-odl-ha.local (192.168.10.38) already present
2018-06-01 02:52:03,647 [salt.state       ][INFO    ][11732] Completed state [ctl03.mcp-pike-odl-ha.local] at time 02:52:03.647771 duration_in_ms=0.897
2018-06-01 02:52:03,648 [salt.state       ][INFO    ][11732] Running state [file.replace] at time 02:52:03.648888
2018-06-01 02:52:03,649 [salt.state       ][INFO    ][11732] Executing state module.run for file.replace
2018-06-01 02:52:03,846 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command ['git', '--version'] in directory '/root'
2018-06-01 02:52:04,062 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command 'grep -q "ctl03 ctl03.mcp-pike-odl-ha.local" /etc/hosts' in directory '/root'
2018-06-01 02:52:04,086 [salt.state       ][INFO    ][11732] {'ret': '--- \n+++ \n@@ -30,6 +30,6 @@\n 192.168.10.39\t\todl01 odl01.mcp-pike-odl-ha.local\n 192.168.10.12\t\tmas01 mas01.mcp-pike-odl-ha.local\n 192.168.10.37\t\tctl02 ctl02.mcp-pike-odl-ha.local\n-192.168.10.38\t\tctl03 ctl03.mcp-pike-odl-ha.local\n+192.168.10.38\t\tctl03.mcp-pike-odl-ha.local ctl03\n 192.168.10.36\t\tctl01 ctl01.mcp-pike-odl-ha.local\n 192.168.10.35\t\tctl ctl.mcp-pike-odl-ha.local\n'}
2018-06-01 02:52:04,086 [salt.state       ][INFO    ][11732] Completed state [file.replace] at time 02:52:04.086483 duration_in_ms=437.594
2018-06-01 02:52:04,087 [salt.state       ][INFO    ][11732] Running state [ctl01] at time 02:52:04.086955
2018-06-01 02:52:04,087 [salt.state       ][INFO    ][11732] Executing state host.present for ctl01
2018-06-01 02:52:04,088 [salt.state       ][INFO    ][11732] Host ctl01 (192.168.10.36) already present
2018-06-01 02:52:04,088 [salt.state       ][INFO    ][11732] Completed state [ctl01] at time 02:52:04.088436 duration_in_ms=1.481
2018-06-01 02:52:04,088 [salt.state       ][INFO    ][11732] Running state [ctl01.mcp-pike-odl-ha.local] at time 02:52:04.088745
2018-06-01 02:52:04,089 [salt.state       ][INFO    ][11732] Executing state host.present for ctl01.mcp-pike-odl-ha.local
2018-06-01 02:52:04,089 [salt.state       ][INFO    ][11732] Host ctl01.mcp-pike-odl-ha.local (192.168.10.36) already present
2018-06-01 02:52:04,089 [salt.state       ][INFO    ][11732] Completed state [ctl01.mcp-pike-odl-ha.local] at time 02:52:04.089870 duration_in_ms=1.125
2018-06-01 02:52:04,090 [salt.state       ][INFO    ][11732] Running state [ctl] at time 02:52:04.090168
2018-06-01 02:52:04,090 [salt.state       ][INFO    ][11732] Executing state host.present for ctl
2018-06-01 02:52:04,091 [salt.state       ][INFO    ][11732] Host ctl (192.168.10.35) already present
2018-06-01 02:52:04,091 [salt.state       ][INFO    ][11732] Completed state [ctl] at time 02:52:04.091238 duration_in_ms=1.07
2018-06-01 02:52:04,091 [salt.state       ][INFO    ][11732] Running state [ctl.mcp-pike-odl-ha.local] at time 02:52:04.091547
2018-06-01 02:52:04,091 [salt.state       ][INFO    ][11732] Executing state host.present for ctl.mcp-pike-odl-ha.local
2018-06-01 02:52:04,092 [salt.state       ][INFO    ][11732] Host ctl.mcp-pike-odl-ha.local (192.168.10.35) already present
2018-06-01 02:52:04,092 [salt.state       ][INFO    ][11732] Completed state [ctl.mcp-pike-odl-ha.local] at time 02:52:04.092644 duration_in_ms=1.097
2018-06-01 02:52:04,093 [salt.state       ][INFO    ][11732] Running state [/etc/network/interfaces.d/50-cloud-init.cfg] at time 02:52:04.092946
2018-06-01 02:52:04,093 [salt.state       ][INFO    ][11732] Executing state file.absent for /etc/network/interfaces.d/50-cloud-init.cfg
2018-06-01 02:52:04,093 [salt.state       ][INFO    ][11732] File /etc/network/interfaces.d/50-cloud-init.cfg is not present
2018-06-01 02:52:04,093 [salt.state       ][INFO    ][11732] Completed state [/etc/network/interfaces.d/50-cloud-init.cfg] at time 02:52:04.093856 duration_in_ms=0.91
2018-06-01 02:52:04,094 [salt.state       ][INFO    ][11732] Running state [ens2] at time 02:52:04.094149
2018-06-01 02:52:04,094 [salt.state       ][INFO    ][11732] Executing state network.managed for ens2
2018-06-01 02:52:04,971 [salt.state       ][INFO    ][11732] Interface ens2 is up to date.
2018-06-01 02:52:04,971 [salt.state       ][INFO    ][11732] Completed state [ens2] at time 02:52:04.971533 duration_in_ms=877.383
2018-06-01 02:52:04,971 [salt.state       ][INFO    ][11732] Running state [ens3] at time 02:52:04.971907
2018-06-01 02:52:04,972 [salt.state       ][INFO    ][11732] Executing state network.managed for ens3
2018-06-01 02:52:05,741 [salt.state       ][INFO    ][11732] Interface ens3 is up to date.
2018-06-01 02:52:05,742 [salt.state       ][INFO    ][11732] Completed state [ens3] at time 02:52:05.742066 duration_in_ms=770.158
2018-06-01 02:52:05,742 [salt.state       ][INFO    ][11732] Running state [/etc/profile.d/proxy.sh] at time 02:52:05.742436
2018-06-01 02:52:05,742 [salt.state       ][INFO    ][11732] Executing state file.absent for /etc/profile.d/proxy.sh
2018-06-01 02:52:05,743 [salt.state       ][INFO    ][11732] File /etc/profile.d/proxy.sh is not present
2018-06-01 02:52:05,743 [salt.state       ][INFO    ][11732] Completed state [/etc/profile.d/proxy.sh] at time 02:52:05.743497 duration_in_ms=1.062
2018-06-01 02:52:05,743 [salt.state       ][INFO    ][11732] Running state [/etc/apt/apt.conf.d/95proxies] at time 02:52:05.743744
2018-06-01 02:52:05,743 [salt.state       ][INFO    ][11732] Executing state file.absent for /etc/apt/apt.conf.d/95proxies
2018-06-01 02:52:05,744 [salt.state       ][INFO    ][11732] File /etc/apt/apt.conf.d/95proxies is not present
2018-06-01 02:52:05,744 [salt.state       ][INFO    ][11732] Completed state [/etc/apt/apt.conf.d/95proxies] at time 02:52:05.744520 duration_in_ms=0.776
2018-06-01 02:52:05,744 [salt.state       ][INFO    ][11732] Running state [ntp] at time 02:52:05.744789
2018-06-01 02:52:05,745 [salt.state       ][INFO    ][11732] Executing state pkg.installed for ntp
2018-06-01 02:52:05,753 [salt.state       ][INFO    ][11732] All specified packages are already installed
2018-06-01 02:52:05,753 [salt.state       ][INFO    ][11732] Completed state [ntp] at time 02:52:05.753608 duration_in_ms=8.819
2018-06-01 02:52:05,755 [salt.state       ][INFO    ][11732] Running state [/etc/ntp.conf] at time 02:52:05.755390
2018-06-01 02:52:05,755 [salt.state       ][INFO    ][11732] Executing state file.managed for /etc/ntp.conf
2018-06-01 02:52:05,859 [salt.state       ][INFO    ][11732] File /etc/ntp.conf is in the correct state
2018-06-01 02:52:05,860 [salt.state       ][INFO    ][11732] Completed state [/etc/ntp.conf] at time 02:52:05.860001 duration_in_ms=104.611
2018-06-01 02:52:05,861 [salt.state       ][INFO    ][11732] Running state [ntp] at time 02:52:05.861173
2018-06-01 02:52:05,861 [salt.state       ][INFO    ][11732] Executing state service.running for ntp
2018-06-01 02:52:05,862 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command ['systemctl', 'status', 'ntp.service', '-n', '0'] in directory '/root'
2018-06-01 02:52:05,881 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command ['systemctl', 'is-active', 'ntp.service'] in directory '/root'
2018-06-01 02:52:05,901 [salt.loaded.int.module.cmdmod][INFO    ][11732] Executing command ['systemctl', 'is-enabled', 'ntp.service'] in directory '/root'
2018-06-01 02:52:05,926 [salt.state       ][INFO    ][11732] The service ntp is already running
2018-06-01 02:52:05,927 [salt.state       ][INFO    ][11732] Completed state [ntp] at time 02:52:05.927293 duration_in_ms=66.119
2018-06-01 02:52:05,935 [salt.minion      ][INFO    ][11732] Returning information for job: 20180601025142955488
2018-06-01 02:52:27,658 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command ssh.set_auth_key with jid 20180601025227641942
2018-06-01 02:52:27,674 [salt.minion      ][INFO    ][13334] Starting a new job with PID 13334
2018-06-01 02:52:27,689 [salt.loader.192.168.11.2.int.module.ssh][WARNING ][13334] Public Key hashing currently defaults to "md5". This will change to "sha256" in the Nitrogen release.
2018-06-01 02:52:27,692 [salt.minion      ][INFO    ][13334] Returning information for job: 20180601025227641942
2018-06-01 02:52:54,261 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command pkg.upgrade with jid 20180601025254251724
2018-06-01 02:52:54,285 [salt.minion      ][INFO    ][13357] Starting a new job with PID 13357
2018-06-01 02:52:54,313 [salt.loader.192.168.11.2.int.module.cmdmod][INFO    ][13357] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 02:52:54,690 [salt.loader.192.168.11.2.int.module.cmdmod][INFO    ][13357] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'upgrade'] in directory '/root'
2018-06-01 02:53:04,343 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601025304335103
2018-06-01 02:53:04,360 [salt.minion      ][INFO    ][14632] Starting a new job with PID 14632
2018-06-01 02:53:04,380 [salt.minion      ][INFO    ][14632] Returning information for job: 20180601025304335103
2018-06-01 02:53:08,488 [salt.loader.192.168.11.2.int.module.cmdmod][INFO    ][13357] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 02:53:08,534 [salt.minion      ][INFO    ][13357] Returning information for job: 20180601025254251724
2018-06-01 02:58:22,800 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command test.ping with jid 20180601025822782852
2018-06-01 02:58:22,824 [salt.minion      ][INFO    ][14826] Starting a new job with PID 14826
2018-06-01 02:58:22,900 [salt.minion      ][INFO    ][14826] Returning information for job: 20180601025822782852
2018-06-01 02:58:33,545 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command state.sls with jid 20180601025833521140
2018-06-01 02:58:33,569 [salt.minion      ][INFO    ][14831] Starting a new job with PID 14831
2018-06-01 02:58:34,358 [salt.state       ][INFO    ][14831] Loading fresh modules for state activity
2018-06-01 02:58:34,433 [salt.fileclient  ][INFO    ][14831] Fetching file from saltenv 'base', ** done ** 'keepalived/init.sls'
2018-06-01 02:58:34,472 [salt.fileclient  ][INFO    ][14831] Fetching file from saltenv 'base', ** done ** 'keepalived/cluster.sls'
2018-06-01 02:58:35,400 [salt.state       ][INFO    ][14831] Running state [keepalived] at time 02:58:35.400295
2018-06-01 02:58:35,401 [salt.state       ][INFO    ][14831] Executing state pkg.installed for keepalived
2018-06-01 02:58:35,402 [salt.loaded.int.module.cmdmod][INFO    ][14831] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 02:58:35,834 [salt.loaded.int.module.cmdmod][INFO    ][14831] Executing command ['apt-cache', '-q', 'policy', 'keepalived'] in directory '/root'
2018-06-01 02:58:35,923 [salt.loaded.int.module.cmdmod][INFO    ][14831] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-06-01 02:58:38,091 [salt.loaded.int.module.cmdmod][INFO    ][14831] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 02:58:38,122 [salt.loaded.int.module.cmdmod][INFO    ][14831] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'keepalived'] in directory '/root'
2018-06-01 02:58:42,128 [salt.loaded.int.module.cmdmod][INFO    ][14831] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 02:58:42,177 [salt.state       ][INFO    ][14831] Made the following changes:
'libsnmp30' changed from 'absent' to '5.7.3+dfsg-1ubuntu4.1'
'libsnmp-base' changed from 'absent' to '5.7.3+dfsg-1ubuntu4.1'
'keepalived' changed from 'absent' to '1:1.2.19-1ubuntu0.2'
'ipvsadm' changed from 'absent' to '1:1.28-3'
'libsensors4' changed from 'absent' to '1:3.4.0-2'

2018-06-01 02:58:42,207 [salt.state       ][INFO    ][14831] Loading fresh modules for state activity
2018-06-01 02:58:42,244 [salt.state       ][INFO    ][14831] Completed state [keepalived] at time 02:58:42.244718 duration_in_ms=6844.424
2018-06-01 02:58:42,253 [salt.state       ][INFO    ][14831] Running state [lsof] at time 02:58:42.253051
2018-06-01 02:58:42,253 [salt.state       ][INFO    ][14831] Executing state pkg.installed for lsof
2018-06-01 02:58:42,678 [salt.state       ][INFO    ][14831] All specified packages are already installed
2018-06-01 02:58:42,678 [salt.state       ][INFO    ][14831] Completed state [lsof] at time 02:58:42.678844 duration_in_ms=425.793
2018-06-01 02:58:42,681 [salt.state       ][INFO    ][14831] Running state [/etc/keepalived/keepalived.conf] at time 02:58:42.681509
2018-06-01 02:58:42,682 [salt.state       ][INFO    ][14831] Executing state file.managed for /etc/keepalived/keepalived.conf
2018-06-01 02:58:42,730 [salt.fileclient  ][INFO    ][14831] Fetching file from saltenv 'base', ** done ** 'keepalived/files/keepalived.conf'
2018-06-01 02:58:42,790 [salt.state       ][INFO    ][14831] File changed:
New file
2018-06-01 02:58:42,790 [salt.state       ][INFO    ][14831] Completed state [/etc/keepalived/keepalived.conf] at time 02:58:42.790779 duration_in_ms=109.27
2018-06-01 02:58:42,791 [salt.state       ][INFO    ][14831] Running state [keepalived] at time 02:58:42.791878
2018-06-01 02:58:42,792 [salt.state       ][INFO    ][14831] Executing state service.running for keepalived
2018-06-01 02:58:42,793 [salt.loaded.int.module.cmdmod][INFO    ][14831] Executing command ['systemctl', 'status', 'keepalived.service', '-n', '0'] in directory '/root'
2018-06-01 02:58:42,813 [salt.loaded.int.module.cmdmod][INFO    ][14831] Executing command ['systemctl', 'is-active', 'keepalived.service'] in directory '/root'
2018-06-01 02:58:42,828 [salt.loaded.int.module.cmdmod][INFO    ][14831] Executing command ['systemctl', 'is-enabled', 'keepalived.service'] in directory '/root'
2018-06-01 02:58:42,847 [salt.loaded.int.module.cmdmod][INFO    ][14831] Executing command ['systemctl', 'is-enabled', 'keepalived.service'] in directory '/root'
2018-06-01 02:58:42,867 [salt.loaded.int.module.cmdmod][INFO    ][14831] Executing command ['systemd-run', '--scope', 'systemctl', 'start', 'keepalived.service'] in directory '/root'
2018-06-01 02:58:42,933 [salt.loaded.int.module.cmdmod][INFO    ][14831] Executing command ['systemctl', 'is-active', 'keepalived.service'] in directory '/root'
2018-06-01 02:58:42,954 [salt.loaded.int.module.cmdmod][INFO    ][14831] Executing command ['systemctl', 'is-enabled', 'keepalived.service'] in directory '/root'
2018-06-01 02:58:42,975 [salt.loaded.int.module.cmdmod][INFO    ][14831] Executing command ['systemctl', 'is-enabled', 'keepalived.service'] in directory '/root'
2018-06-01 02:58:42,994 [salt.state       ][INFO    ][14831] {'keepalived': True}
2018-06-01 02:58:42,994 [salt.state       ][INFO    ][14831] Completed state [keepalived] at time 02:58:42.994554 duration_in_ms=202.676
2018-06-01 02:58:42,996 [salt.minion      ][INFO    ][14831] Returning information for job: 20180601025833521140
2018-06-01 03:01:08,285 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command pillar.get with jid 20180601030108276111
2018-06-01 03:01:08,308 [salt.minion      ][INFO    ][16238] Starting a new job with PID 16238
2018-06-01 03:01:08,318 [salt.minion      ][INFO    ][16238] Returning information for job: 20180601030108276111
2018-06-01 03:07:26,640 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command state.sls with jid 20180601030726623876
2018-06-01 03:07:26,664 [salt.minion      ][INFO    ][16260] Starting a new job with PID 16260
2018-06-01 03:07:27,466 [salt.state       ][INFO    ][16260] Loading fresh modules for state activity
2018-06-01 03:07:27,511 [salt.fileclient  ][INFO    ][16260] Fetching file from saltenv 'base', ** done ** 'glusterfs/client.sls'
2018-06-01 03:07:27,555 [salt.fileclient  ][INFO    ][16260] Fetching file from saltenv 'base', ** done ** 'glusterfs/map.jinja'
2018-06-01 03:07:27,573 [py.warnings      ][WARNING ][16260] /usr/lib/python2.7/dist-packages/salt/utils/templates.py:73: DeprecationWarning: Starting in 2015.5, cmd.run uses python_shell=False by default, which doesn't support shellisms (pipes, env variables, etc). cmd.run is currently aliased to cmd.shell to prevent breakage. Please switch to cmd.shell or set python_shell=True to avoid breakage in the future, when this aliasing is removed.

2018-06-01 03:07:27,574 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command 'systemd-escape -p --suffix=mount /var/lib/glance/images' in directory '/root'
2018-06-01 03:07:27,599 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command 'systemd-escape -p --suffix=mount /var/lib/keystone/fernet-keys' in directory '/root'
2018-06-01 03:07:27,620 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command 'systemd-escape -p --suffix=mount /var/lib/keystone/credential-keys' in directory '/root'
2018-06-01 03:07:28,599 [salt.state       ][INFO    ][16260] Running state [glusterfs-client] at time 03:07:28.599864
2018-06-01 03:07:28,600 [salt.state       ][INFO    ][16260] Executing state pkg.installed for glusterfs-client
2018-06-01 03:07:28,601 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:07:28,974 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['apt-cache', '-q', 'policy', 'glusterfs-client'] in directory '/root'
2018-06-01 03:07:29,065 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-06-01 03:07:31,314 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:07:31,356 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'glusterfs-client'] in directory '/root'
2018-06-01 03:07:36,711 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601030736689234
2018-06-01 03:07:36,730 [salt.minion      ][INFO    ][20484] Starting a new job with PID 20484
2018-06-01 03:07:36,748 [salt.minion      ][INFO    ][20484] Returning information for job: 20180601030736689234
2018-06-01 03:07:38,451 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:07:38,504 [salt.state       ][INFO    ][16260] Made the following changes:
'libaio1' changed from 'absent' to '0.3.110-2'
'libc-dev' changed from 'absent' to '1'
'glusterfs-common' changed from 'absent' to '3.8.15-1.0~u16.04+mcp2'
'libibverbs1' changed from 'absent' to '1.1.8-1.1ubuntu2'
'libattr1-dev' changed from 'absent' to '1:2.4.47-2'
'libc6-dev' changed from 'absent' to '2.23-0ubuntu10'
'attr-dev' changed from 'absent' to '1'
'linux-libc-dev' changed from 'absent' to '4.4.0-127.153'
'acl-dev' changed from 'absent' to '1'
'libacl1-dev' changed from 'absent' to '2.2.52-3'
'glusterfs-client' changed from 'absent' to '3.8.15-1.0~u16.04+mcp2'
'manpages-dev' changed from 'absent' to '4.04-2'
'attr' changed from 'absent' to '1:2.4.47-2'
'libpython2.7' changed from 'absent' to '2.7.12-1ubuntu0~16.04.3'
'liburcu4' changed from 'absent' to '0.9.1-3'
'linux-kernel-headers' changed from 'absent' to '1'
'librdmacm1' changed from 'absent' to '1.0.21-1'
'libc-dev-bin' changed from 'absent' to '2.23-0ubuntu10'

2018-06-01 03:07:38,536 [salt.state       ][INFO    ][16260] Loading fresh modules for state activity
2018-06-01 03:07:38,572 [salt.state       ][INFO    ][16260] Completed state [glusterfs-client] at time 03:07:38.572665 duration_in_ms=9972.801
2018-06-01 03:07:38,580 [salt.state       ][INFO    ][16260] Running state [attr] at time 03:07:38.580505
2018-06-01 03:07:38,581 [salt.state       ][INFO    ][16260] Executing state pkg.installed for attr
2018-06-01 03:07:39,010 [salt.state       ][INFO    ][16260] All specified packages are already installed
2018-06-01 03:07:39,011 [salt.state       ][INFO    ][16260] Completed state [attr] at time 03:07:39.011098 duration_in_ms=430.592
2018-06-01 03:07:39,013 [salt.state       ][INFO    ][16260] Running state [/etc/systemd/system/var-lib-glance-images.mount] at time 03:07:39.013496
2018-06-01 03:07:39,014 [salt.state       ][INFO    ][16260] Executing state file.managed for /etc/systemd/system/var-lib-glance-images.mount
2018-06-01 03:07:39,051 [salt.fileclient  ][INFO    ][16260] Fetching file from saltenv 'base', ** done ** 'glusterfs/files/glusterfs-client.mount'
2018-06-01 03:07:39,061 [salt.state       ][INFO    ][16260] File changed:
New file
2018-06-01 03:07:39,062 [salt.state       ][INFO    ][16260] Completed state [/etc/systemd/system/var-lib-glance-images.mount] at time 03:07:39.062470 duration_in_ms=48.974
2018-06-01 03:07:39,063 [salt.state       ][INFO    ][16260] Running state [var-lib-glance-images.mount] at time 03:07:39.063778
2018-06-01 03:07:39,064 [salt.state       ][INFO    ][16260] Executing state service.running for var-lib-glance-images.mount
2018-06-01 03:07:39,066 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'status', 'var-lib-glance-images.mount', '-n', '0'] in directory '/root'
2018-06-01 03:07:39,087 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'is-active', 'var-lib-glance-images.mount'] in directory '/root'
2018-06-01 03:07:39,104 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'is-enabled', 'var-lib-glance-images.mount'] in directory '/root'
2018-06-01 03:07:39,130 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'is-enabled', 'var-lib-glance-images.mount'] in directory '/root'
2018-06-01 03:07:39,153 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemd-run', '--scope', 'systemctl', 'start', 'var-lib-glance-images.mount'] in directory '/root'
2018-06-01 03:07:39,236 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'is-active', 'var-lib-glance-images.mount'] in directory '/root'
2018-06-01 03:07:39,257 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'is-enabled', 'var-lib-glance-images.mount'] in directory '/root'
2018-06-01 03:07:39,286 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'is-enabled', 'var-lib-glance-images.mount'] in directory '/root'
2018-06-01 03:07:39,313 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'is-enabled', 'var-lib-glance-images.mount'] in directory '/root'
2018-06-01 03:07:39,342 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemd-run', '--scope', 'systemctl', 'enable', 'var-lib-glance-images.mount'] in directory '/root'
2018-06-01 03:07:39,505 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'is-enabled', 'var-lib-glance-images.mount'] in directory '/root'
2018-06-01 03:07:39,526 [salt.state       ][INFO    ][16260] {'var-lib-glance-images.mount': True}
2018-06-01 03:07:39,526 [salt.state       ][INFO    ][16260] Completed state [var-lib-glance-images.mount] at time 03:07:39.526883 duration_in_ms=463.104
2018-06-01 03:07:39,528 [salt.state       ][INFO    ][16260] Running state [/var/lib/glance/images] at time 03:07:39.528174
2018-06-01 03:07:39,528 [salt.state       ][INFO    ][16260] Executing state file.directory for /var/lib/glance/images
2018-06-01 03:07:39,530 [salt.state       ][INFO    ][16260] Directory /var/lib/glance/images is in the correct state
2018-06-01 03:07:39,531 [salt.state       ][INFO    ][16260] Completed state [/var/lib/glance/images] at time 03:07:39.531051 duration_in_ms=2.877
2018-06-01 03:07:39,531 [salt.state       ][INFO    ][16260] Running state [/etc/systemd/system/var-lib-keystone-fernet\x2dkeys.mount] at time 03:07:39.531554
2018-06-01 03:07:39,532 [salt.state       ][INFO    ][16260] Executing state file.managed for /etc/systemd/system/var-lib-keystone-fernet\x2dkeys.mount
2018-06-01 03:07:39,571 [salt.state       ][INFO    ][16260] File changed:
New file
2018-06-01 03:07:39,572 [salt.state       ][INFO    ][16260] Completed state [/etc/systemd/system/var-lib-keystone-fernet\x2dkeys.mount] at time 03:07:39.572202 duration_in_ms=40.648
2018-06-01 03:07:39,573 [salt.state       ][INFO    ][16260] Running state [var-lib-keystone-fernet\x2dkeys.mount] at time 03:07:39.573234
2018-06-01 03:07:39,573 [salt.state       ][INFO    ][16260] Executing state service.running for var-lib-keystone-fernet\x2dkeys.mount
2018-06-01 03:07:39,574 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'status', 'var-lib-keystone-fernet\\x2dkeys.mount', '-n', '0'] in directory '/root'
2018-06-01 03:07:39,603 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'is-active', 'var-lib-keystone-fernet\\x2dkeys.mount'] in directory '/root'
2018-06-01 03:07:39,627 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'is-enabled', 'var-lib-keystone-fernet\\x2dkeys.mount'] in directory '/root'
2018-06-01 03:07:39,654 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'is-enabled', 'var-lib-keystone-fernet\\x2dkeys.mount'] in directory '/root'
2018-06-01 03:07:39,673 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemd-run', '--scope', 'systemctl', 'start', 'var-lib-keystone-fernet\\x2dkeys.mount'] in directory '/root'
2018-06-01 03:07:39,784 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'is-active', 'var-lib-keystone-fernet\\x2dkeys.mount'] in directory '/root'
2018-06-01 03:07:39,803 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'is-enabled', 'var-lib-keystone-fernet\\x2dkeys.mount'] in directory '/root'
2018-06-01 03:07:39,829 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'is-enabled', 'var-lib-keystone-fernet\\x2dkeys.mount'] in directory '/root'
2018-06-01 03:07:39,850 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'is-enabled', 'var-lib-keystone-fernet\\x2dkeys.mount'] in directory '/root'
2018-06-01 03:07:39,873 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemd-run', '--scope', 'systemctl', 'enable', 'var-lib-keystone-fernet\\x2dkeys.mount'] in directory '/root'
2018-06-01 03:07:39,992 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'is-enabled', 'var-lib-keystone-fernet\\x2dkeys.mount'] in directory '/root'
2018-06-01 03:07:40,008 [salt.state       ][INFO    ][16260] {'var-lib-keystone-fernet\\x2dkeys.mount': True}
2018-06-01 03:07:40,008 [salt.state       ][INFO    ][16260] Completed state [var-lib-keystone-fernet\x2dkeys.mount] at time 03:07:40.008534 duration_in_ms=435.29
2018-06-01 03:07:40,009 [salt.state       ][INFO    ][16260] Running state [/var/lib/keystone/fernet-keys] at time 03:07:40.009610
2018-06-01 03:07:40,010 [salt.state       ][INFO    ][16260] Executing state file.directory for /var/lib/keystone/fernet-keys
2018-06-01 03:07:40,011 [salt.state       ][INFO    ][16260] Directory /var/lib/keystone/fernet-keys is in the correct state
2018-06-01 03:07:40,011 [salt.state       ][INFO    ][16260] Completed state [/var/lib/keystone/fernet-keys] at time 03:07:40.011629 duration_in_ms=2.02
2018-06-01 03:07:40,011 [salt.state       ][INFO    ][16260] Running state [/etc/systemd/system/var-lib-keystone-credential\x2dkeys.mount] at time 03:07:40.011879
2018-06-01 03:07:40,012 [salt.state       ][INFO    ][16260] Executing state file.managed for /etc/systemd/system/var-lib-keystone-credential\x2dkeys.mount
2018-06-01 03:07:40,041 [salt.state       ][INFO    ][16260] File changed:
New file
2018-06-01 03:07:40,041 [salt.state       ][INFO    ][16260] Completed state [/etc/systemd/system/var-lib-keystone-credential\x2dkeys.mount] at time 03:07:40.041910 duration_in_ms=30.031
2018-06-01 03:07:40,042 [salt.state       ][INFO    ][16260] Running state [var-lib-keystone-credential\x2dkeys.mount] at time 03:07:40.042567
2018-06-01 03:07:40,042 [salt.state       ][INFO    ][16260] Executing state service.running for var-lib-keystone-credential\x2dkeys.mount
2018-06-01 03:07:40,043 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'status', 'var-lib-keystone-credential\\x2dkeys.mount', '-n', '0'] in directory '/root'
2018-06-01 03:07:40,062 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'is-active', 'var-lib-keystone-credential\\x2dkeys.mount'] in directory '/root'
2018-06-01 03:07:40,082 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'is-enabled', 'var-lib-keystone-credential\\x2dkeys.mount'] in directory '/root'
2018-06-01 03:07:40,112 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'is-enabled', 'var-lib-keystone-credential\\x2dkeys.mount'] in directory '/root'
2018-06-01 03:07:40,132 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemd-run', '--scope', 'systemctl', 'start', 'var-lib-keystone-credential\\x2dkeys.mount'] in directory '/root'
2018-06-01 03:07:40,239 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'is-active', 'var-lib-keystone-credential\\x2dkeys.mount'] in directory '/root'
2018-06-01 03:07:40,260 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'is-enabled', 'var-lib-keystone-credential\\x2dkeys.mount'] in directory '/root'
2018-06-01 03:07:40,293 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'is-enabled', 'var-lib-keystone-credential\\x2dkeys.mount'] in directory '/root'
2018-06-01 03:07:40,322 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'is-enabled', 'var-lib-keystone-credential\\x2dkeys.mount'] in directory '/root'
2018-06-01 03:07:40,343 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemd-run', '--scope', 'systemctl', 'enable', 'var-lib-keystone-credential\\x2dkeys.mount'] in directory '/root'
2018-06-01 03:07:40,462 [salt.loaded.int.module.cmdmod][INFO    ][16260] Executing command ['systemctl', 'is-enabled', 'var-lib-keystone-credential\\x2dkeys.mount'] in directory '/root'
2018-06-01 03:07:40,481 [salt.state       ][INFO    ][16260] {'var-lib-keystone-credential\\x2dkeys.mount': True}
2018-06-01 03:07:40,482 [salt.state       ][INFO    ][16260] Completed state [var-lib-keystone-credential\x2dkeys.mount] at time 03:07:40.482433 duration_in_ms=439.865
2018-06-01 03:07:40,484 [salt.state       ][INFO    ][16260] Running state [/var/lib/keystone/credential-keys] at time 03:07:40.484638
2018-06-01 03:07:40,485 [salt.state       ][INFO    ][16260] Executing state file.directory for /var/lib/keystone/credential-keys
2018-06-01 03:07:40,488 [salt.state       ][INFO    ][16260] Directory /var/lib/keystone/credential-keys is in the correct state
2018-06-01 03:07:40,488 [salt.state       ][INFO    ][16260] Completed state [/var/lib/keystone/credential-keys] at time 03:07:40.488607 duration_in_ms=3.969
2018-06-01 03:07:40,491 [salt.minion      ][INFO    ][16260] Returning information for job: 20180601030726623876
2018-06-01 03:11:39,855 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command state.sls with jid 20180601031139839472
2018-06-01 03:11:39,878 [salt.minion      ][INFO    ][21299] Starting a new job with PID 21299
2018-06-01 03:11:42,715 [salt.state       ][INFO    ][21299] Loading fresh modules for state activity
2018-06-01 03:11:43,025 [salt.fileclient  ][INFO    ][21299] Fetching file from saltenv 'base', ** done ** 'memcached/init.sls'
2018-06-01 03:11:43,054 [salt.fileclient  ][INFO    ][21299] Fetching file from saltenv 'base', ** done ** 'memcached/server.sls'
2018-06-01 03:11:43,083 [salt.fileclient  ][INFO    ][21299] Fetching file from saltenv 'base', ** done ** 'memcached/map.jinja'
2018-06-01 03:11:44,018 [salt.state       ][INFO    ][21299] Running state [memcached] at time 03:11:44.018914
2018-06-01 03:11:44,019 [salt.state       ][INFO    ][21299] Executing state pkg.installed for memcached
2018-06-01 03:11:44,019 [salt.loaded.int.module.cmdmod][INFO    ][21299] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:11:44,433 [salt.loaded.int.module.cmdmod][INFO    ][21299] Executing command ['apt-cache', '-q', 'policy', 'memcached'] in directory '/root'
2018-06-01 03:11:44,511 [salt.loaded.int.module.cmdmod][INFO    ][21299] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-06-01 03:11:46,820 [salt.loaded.int.module.cmdmod][INFO    ][21299] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:11:46,854 [salt.loaded.int.module.cmdmod][INFO    ][21299] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'memcached'] in directory '/root'
2018-06-01 03:11:49,973 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601031149953192
2018-06-01 03:11:49,989 [salt.minion      ][INFO    ][22161] Starting a new job with PID 22161
2018-06-01 03:11:50,009 [salt.minion      ][INFO    ][22161] Returning information for job: 20180601031149953192
2018-06-01 03:11:50,311 [salt.loaded.int.module.cmdmod][INFO    ][21299] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:11:50,356 [salt.state       ][INFO    ][21299] Made the following changes:
'memcached' changed from 'absent' to '1.4.25-2ubuntu1.4'

2018-06-01 03:11:50,388 [salt.state       ][INFO    ][21299] Loading fresh modules for state activity
2018-06-01 03:11:50,424 [salt.state       ][INFO    ][21299] Completed state [memcached] at time 03:11:50.424721 duration_in_ms=6405.808
2018-06-01 03:11:50,434 [salt.state       ][INFO    ][21299] Running state [python-memcache] at time 03:11:50.433973
2018-06-01 03:11:50,434 [salt.state       ][INFO    ][21299] Executing state pkg.installed for python-memcache
2018-06-01 03:11:50,872 [salt.loaded.int.module.cmdmod][INFO    ][21299] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:11:50,900 [salt.loaded.int.module.cmdmod][INFO    ][21299] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'python-memcache'] in directory '/root'
2018-06-01 03:11:52,753 [salt.loaded.int.module.cmdmod][INFO    ][21299] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:11:52,798 [salt.state       ][INFO    ][21299] Made the following changes:
'python-memcache' changed from 'absent' to '1.57-2~u16.04+mcp1'

2018-06-01 03:11:52,825 [salt.state       ][INFO    ][21299] Loading fresh modules for state activity
2018-06-01 03:11:52,859 [salt.state       ][INFO    ][21299] Completed state [python-memcache] at time 03:11:52.859791 duration_in_ms=2425.815
2018-06-01 03:11:52,864 [salt.state       ][INFO    ][21299] Running state [/etc/memcached.conf] at time 03:11:52.864698
2018-06-01 03:11:52,865 [salt.state       ][INFO    ][21299] Executing state file.managed for /etc/memcached.conf
2018-06-01 03:11:52,901 [salt.fileclient  ][INFO    ][21299] Fetching file from saltenv 'base', ** done ** 'memcached/files/memcached.conf'
2018-06-01 03:11:52,940 [salt.state       ][INFO    ][21299] File changed:
--- 
+++ 
@@ -1,11 +1,10 @@
+
 # memcached default config file
 # 2003 - Jay Bonci <jaybonci@debian.org>
-# This configuration file is read by the start-memcached script provided as
-# part of the Debian GNU/Linux distribution.
+# This configuration file is read by the start-memcached script provided as part of the Debian GNU/Linux distribution. 
 
 # Run memcached as a daemon. This command is implied, and is not needed for the
-# daemon to run. See the README.Debian that comes with this package for more
-# information.
+# daemon to run. See the README.Debian that comes with this package for more information.
 -d
 
 # Log memcached's output to /var/log/memcached
@@ -18,13 +17,13 @@
 # -vv
 
 # Start with a cap of 64 megs of memory. It's reasonable, and the daemon default
-# Note that the daemon will grow to this size, but does not start out holding this much
-# memory
+# Note that the daemon will grow to this size, but does not start out holding this much memory
 -m 64
 
 # Default connection port is 11211
 -p 11211
 
+-U 11211
 # Run the daemon as root. The start-memcached will default to running as root if no
 # -u command is present in this config file
 -u memcache
@@ -32,10 +31,12 @@
 # Specify which IP address to listen on. The default is to listen on all IP addresses
 # This parameter is one of the only security measures that memcached has, so make sure
 # it's listening on a firewalled interface.
--l 127.0.0.1
+-l 0.0.0.0
 
 # Limit the number of simultaneous incoming connections. The daemon default is 1024
 # -c 1024
+# Mirantis
+-c 8192
 
 # Lock down all paged memory. Consult with the README and homepage before you do this
 # -k
@@ -45,3 +46,9 @@
 
 # Maximize core file limit
 # -r
+
+# Number of threads to use to process incoming requests.
+-t 1
+
+# Set size of each slab page. Default value for this parameter is 1m, minimum is 1k, max is 128m.
+-I 1m

2018-06-01 03:11:52,943 [salt.state       ][INFO    ][21299] Completed state [/etc/memcached.conf] at time 03:11:52.943383 duration_in_ms=78.684
2018-06-01 03:11:53,207 [salt.state       ][INFO    ][21299] Running state [memcached] at time 03:11:53.207888
2018-06-01 03:11:53,208 [salt.state       ][INFO    ][21299] Executing state service.running for memcached
2018-06-01 03:11:53,211 [salt.loaded.int.module.cmdmod][INFO    ][21299] Executing command ['systemctl', 'status', 'memcached.service', '-n', '0'] in directory '/root'
2018-06-01 03:11:53,230 [salt.loaded.int.module.cmdmod][INFO    ][21299] Executing command ['systemctl', 'is-active', 'memcached.service'] in directory '/root'
2018-06-01 03:11:53,247 [salt.loaded.int.module.cmdmod][INFO    ][21299] Executing command ['systemctl', 'is-enabled', 'memcached.service'] in directory '/root'
2018-06-01 03:11:53,263 [salt.state       ][INFO    ][21299] The service memcached is already running
2018-06-01 03:11:53,264 [salt.state       ][INFO    ][21299] Completed state [memcached] at time 03:11:53.263877 duration_in_ms=55.988
2018-06-01 03:11:53,264 [salt.state       ][INFO    ][21299] Running state [memcached] at time 03:11:53.264312
2018-06-01 03:11:53,264 [salt.state       ][INFO    ][21299] Executing state service.mod_watch for memcached
2018-06-01 03:11:53,265 [salt.loaded.int.module.cmdmod][INFO    ][21299] Executing command ['systemctl', 'is-active', 'memcached.service'] in directory '/root'
2018-06-01 03:11:53,281 [salt.loaded.int.module.cmdmod][INFO    ][21299] Executing command ['systemctl', 'is-enabled', 'memcached.service'] in directory '/root'
2018-06-01 03:11:53,297 [salt.loaded.int.module.cmdmod][INFO    ][21299] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'memcached.service'] in directory '/root'
2018-06-01 03:11:53,325 [salt.state       ][INFO    ][21299] {'memcached': True}
2018-06-01 03:11:53,326 [salt.state       ][INFO    ][21299] Completed state [memcached] at time 03:11:53.326303 duration_in_ms=61.991
2018-06-01 03:11:53,329 [salt.minion      ][INFO    ][21299] Returning information for job: 20180601031139839472
2018-06-01 03:11:54,775 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command state.sls with jid 20180601031154758578
2018-06-01 03:11:54,794 [salt.minion      ][INFO    ][22372] Starting a new job with PID 22372
2018-06-01 03:11:56,553 [salt.state       ][INFO    ][22372] Loading fresh modules for state activity
2018-06-01 03:11:56,599 [salt.fileclient  ][INFO    ][22372] Fetching file from saltenv 'base', ** done ** 'haproxy/init.sls'
2018-06-01 03:11:56,624 [salt.fileclient  ][INFO    ][22372] Fetching file from saltenv 'base', ** done ** 'haproxy/proxy.sls'
2018-06-01 03:11:57,615 [salt.state       ][INFO    ][22372] Running state [haproxy] at time 03:11:57.615152
2018-06-01 03:11:57,616 [salt.state       ][INFO    ][22372] Executing state pkg.installed for haproxy
2018-06-01 03:11:57,617 [salt.loaded.int.module.cmdmod][INFO    ][22372] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:11:58,071 [salt.loaded.int.module.cmdmod][INFO    ][22372] Executing command ['apt-cache', '-q', 'policy', 'haproxy'] in directory '/root'
2018-06-01 03:11:58,168 [salt.loaded.int.module.cmdmod][INFO    ][22372] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-06-01 03:12:00,228 [salt.loaded.int.module.cmdmod][INFO    ][22372] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:12:00,261 [salt.loaded.int.module.cmdmod][INFO    ][22372] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'haproxy'] in directory '/root'
2018-06-01 03:12:03,813 [salt.loaded.int.module.cmdmod][INFO    ][22372] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:12:03,863 [salt.state       ][INFO    ][22372] Made the following changes:
'haproxy' changed from 'absent' to '1.6.3-1ubuntu0.1'
'liblua5.3-0' changed from 'absent' to '5.3.1-1ubuntu2'

2018-06-01 03:12:03,894 [salt.state       ][INFO    ][22372] Loading fresh modules for state activity
2018-06-01 03:12:03,930 [salt.state       ][INFO    ][22372] Completed state [haproxy] at time 03:12:03.930274 duration_in_ms=6315.122
2018-06-01 03:12:03,935 [salt.state       ][INFO    ][22372] Running state [/etc/default/haproxy] at time 03:12:03.935166
2018-06-01 03:12:03,935 [salt.state       ][INFO    ][22372] Executing state file.managed for /etc/default/haproxy
2018-06-01 03:12:03,968 [salt.fileclient  ][INFO    ][22372] Fetching file from saltenv 'base', ** done ** 'haproxy/files/haproxy.default'
2018-06-01 03:12:03,971 [salt.state       ][INFO    ][22372] File changed:
--- 
+++ 
@@ -1,10 +1,5 @@
-# Defaults file for HAProxy
-#
-# This is sourced by both, the initscript and the systemd unit file, so do not
-# treat it as a shell script fragment.
 
-# Change the config file location if needed
-#CONFIG="/etc/haproxy/haproxy.cfg"
-
-# Add extra flags here, see haproxy(1) for a few options
+# Set ENABLED to 1 if you want the init script to start haproxy.
+ENABLED=1
+# Add extra flags here.
 #EXTRAOPTS="-de -m 16"

2018-06-01 03:12:03,972 [salt.state       ][INFO    ][22372] Completed state [/etc/default/haproxy] at time 03:12:03.972056 duration_in_ms=36.89
2018-06-01 03:12:03,972 [salt.state       ][INFO    ][22372] Running state [/etc/haproxy/haproxy.cfg] at time 03:12:03.972463
2018-06-01 03:12:03,972 [salt.state       ][INFO    ][22372] Executing state file.managed for /etc/haproxy/haproxy.cfg
2018-06-01 03:12:03,996 [salt.fileclient  ][INFO    ][22372] Fetching file from saltenv 'base', ** done ** 'haproxy/files/haproxy.cfg'
2018-06-01 03:12:04,196 [salt.state       ][INFO    ][22372] File changed:
--- 
+++ 
@@ -1,35 +1,167 @@
 global
-	log /dev/log	local0
-	log /dev/log	local1 notice
-	chroot /var/lib/haproxy
-	stats socket /run/haproxy/admin.sock mode 660 level admin
-	stats timeout 30s
-	user haproxy
-	group haproxy
-	daemon
-
-	# Default SSL material locations
-	ca-base /etc/ssl/certs
-	crt-base /etc/ssl/private
-
-	# Default ciphers to use on SSL-enabled listening sockets.
-	# For more information, see ciphers(1SSL). This list is from:
-	#  https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
-	ssl-default-bind-ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
-	ssl-default-bind-options no-sslv3
+  log /dev/log  local0
+  log /dev/log  local1 notice
+  chroot /var/lib/haproxy
+  stats  socket /run/haproxy/admin.sock mode 660 level admin
+  stats timeout 30s
+  user  haproxy
+  group haproxy
+  daemon
+  pidfile  /var/run/haproxy.pid
+  spread-checks 4
+  tune.maxrewrite 1024
+  tune.bufsize 32768
+  maxconn  16000
+  # SSL options
+  ca-base /etc/haproxy/ssl
+  crt-base /etc/haproxy/ssl
+  tune.ssl.default-dh-param 2048
+  ssl-default-bind-ciphers ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS
+  ssl-default-bind-options no-sslv3 no-tls-tickets
+  ssl-default-server-ciphers ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS
+  ssl-default-server-options no-sslv3 no-tls-tickets
 
 defaults
-	log	global
-	mode	http
-	option	httplog
-	option	dontlognull
-        timeout connect 5000
-        timeout client  50000
-        timeout server  50000
-	errorfile 400 /etc/haproxy/errors/400.http
-	errorfile 403 /etc/haproxy/errors/403.http
-	errorfile 408 /etc/haproxy/errors/408.http
-	errorfile 500 /etc/haproxy/errors/500.http
-	errorfile 502 /etc/haproxy/errors/502.http
-	errorfile 503 /etc/haproxy/errors/503.http
-	errorfile 504 /etc/haproxy/errors/504.http
+  log  global
+  mode http
+
+  maxconn 8000
+  option  redispatch
+  retries  3
+  stats  enable
+
+  timeout http-request 10s
+  timeout queue 1m
+  timeout connect 10s
+  timeout client 1m
+  timeout server 1m
+  timeout check 10s
+
+listen keystone_public_api
+  bind 192.168.10.35:5000 
+  option  httpchk
+  option  httplog
+  option  httpclose
+  server ctl01 192.168.10.36:5000 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl02 192.168.10.37:5000 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl03 192.168.10.38:5000 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+
+listen nova_api
+  bind 192.168.10.35:8774 
+  option  httpchk
+  option  httplog
+  option  httpclose
+  server ctl01 192.168.10.36:8774 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl02 192.168.10.37:8774 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl03 192.168.10.38:8774 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+
+listen nova_placement_api
+  bind 192.168.10.35:8778 
+  
+  mode http
+  balance roundrobin
+  option httpclose
+  option httplog
+  option httpchk
+  http-check expect status 401
+  server ctl01 192.168.10.36:8778 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl02 192.168.10.37:8778 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl03 192.168.10.38:8778 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+
+listen keystone_admin_api
+  bind 192.168.10.35:35357 
+  option  httpchk
+  option  httplog
+  option  httpclose
+  server ctl01 192.168.10.36:35357 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl02 192.168.10.37:35357 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl03 192.168.10.38:35357 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+
+listen glance_registry_api
+  bind 192.168.10.35:9191 
+  mode http
+  balance roundrobin
+  option  httplog
+  server ctl01 192.168.10.36:9191 check
+  server ctl02 192.168.10.37:9191 check
+  server ctl03 192.168.10.38:9191 check
+
+listen heat_cloudwatch_api
+  bind 192.168.10.35:8003 
+  option  httpchk
+  option  httplog
+  option  httpclose
+  server ctl01 192.168.10.36:8003 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl02 192.168.10.37:8003 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl03 192.168.10.38:8003 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+
+listen cinder_api
+  bind 192.168.10.35:8776 
+  option  httpchk
+  option  httplog
+  option  httpclose
+  server ctl01 192.168.10.36:8776 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl02 192.168.10.37:8776 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl03 192.168.10.38:8776 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+
+listen nova_novnc
+  bind 192.168.10.35:6080 
+  mode http
+  balance roundrobin
+  option  httplog
+  server ctl01 192.168.10.36:6080 check
+  server ctl02 192.168.10.37:6080 check
+  server ctl03 192.168.10.38:6080 check
+
+listen designate_api
+  bind 192.168.10.35:9001 
+  option  httpchk
+  option  httplog
+  option  httpclose
+  server ctl01 192.168.10.36:9001 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl02 192.168.10.37:9001 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+
+listen glance_api
+  bind 192.168.10.35:9292 
+  option  httpchk
+  option  httplog
+  option  httpclose
+  server ctl01 192.168.10.36:9292 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl02 192.168.10.37:9292 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl03 192.168.10.38:9292 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+
+listen heat_api
+  bind 192.168.10.35:8004 
+  option  httpchk
+  option  httplog
+  option  httpclose
+  server ctl01 192.168.10.36:8004 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl02 192.168.10.37:8004 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl03 192.168.10.38:8004 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+
+listen heat_cfn_api
+  bind 192.168.10.35:8000 
+  option  httpchk
+  option  httplog
+  option  httpclose
+  server ctl01 192.168.10.36:8000 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl02 192.168.10.37:8000 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl03 192.168.10.38:8000 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+
+listen nova_metadata_api
+  bind 192.168.10.35:8775 
+  option  httpchk
+  option  httplog
+  option  httpclose
+  server ctl01 192.168.10.36:8775 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl02 192.168.10.37:8775 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl03 192.168.10.38:8775 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+
+listen neutron_api
+  bind 192.168.10.35:9696 
+  option  httpchk
+  option  httplog
+  option  httpclose
+  server ctl01 192.168.10.36:9696 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl02 192.168.10.37:9696 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl03 192.168.10.38:9696 check inter 10s fastinter 2s downinter 3s rise 3 fall 3

2018-06-01 03:12:04,196 [salt.state       ][INFO    ][22372] Completed state [/etc/haproxy/haproxy.cfg] at time 03:12:04.196431 duration_in_ms=223.968
2018-06-01 03:12:04,196 [salt.state       ][INFO    ][22372] Running state [/etc/haproxy/ssl] at time 03:12:04.196776
2018-06-01 03:12:04,197 [salt.state       ][INFO    ][22372] Executing state file.directory for /etc/haproxy/ssl
2018-06-01 03:12:04,198 [salt.state       ][INFO    ][22372] {'/etc/haproxy/ssl': 'New Dir'}
2018-06-01 03:12:04,199 [salt.state       ][INFO    ][22372] Completed state [/etc/haproxy/ssl] at time 03:12:04.199171 duration_in_ms=2.394
2018-06-01 03:12:04,199 [salt.state       ][INFO    ][22372] Running state [/etc/haproxy/errors/429.http11] at time 03:12:04.199490
2018-06-01 03:12:04,199 [salt.state       ][INFO    ][22372] Executing state file.managed for /etc/haproxy/errors/429.http11
2018-06-01 03:12:04,228 [salt.fileclient  ][INFO    ][22372] Fetching file from saltenv 'base', ** done ** 'haproxy/files/errors/429.http11'
2018-06-01 03:12:04,232 [salt.state       ][INFO    ][22372] File changed:
New file
2018-06-01 03:12:04,232 [salt.state       ][INFO    ][22372] Completed state [/etc/haproxy/errors/429.http11] at time 03:12:04.232546 duration_in_ms=33.056
2018-06-01 03:12:04,233 [salt.state       ][INFO    ][22372] Running state [haproxy_status_packages] at time 03:12:04.233612
2018-06-01 03:12:04,233 [salt.state       ][INFO    ][22372] Executing state pkg.installed for haproxy_status_packages
2018-06-01 03:12:04,678 [salt.loaded.int.module.cmdmod][INFO    ][22372] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:12:04,708 [salt.loaded.int.module.cmdmod][INFO    ][22372] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'socat'] in directory '/root'
2018-06-01 03:12:04,881 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601031204862870
2018-06-01 03:12:04,897 [salt.minion      ][INFO    ][23317] Starting a new job with PID 23317
2018-06-01 03:12:04,914 [salt.minion      ][INFO    ][23317] Returning information for job: 20180601031204862870
2018-06-01 03:12:06,662 [salt.loaded.int.module.cmdmod][INFO    ][22372] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:12:06,710 [salt.state       ][INFO    ][22372] Made the following changes:
'socat' changed from 'absent' to '1.7.3.1-1'

2018-06-01 03:12:06,736 [salt.state       ][INFO    ][22372] Loading fresh modules for state activity
2018-06-01 03:12:06,863 [salt.state       ][INFO    ][22372] Completed state [haproxy_status_packages] at time 03:12:06.863464 duration_in_ms=2629.852
2018-06-01 03:12:06,866 [salt.state       ][INFO    ][22372] Running state [/usr/bin/haproxy-status.sh] at time 03:12:06.866520
2018-06-01 03:12:06,866 [salt.state       ][INFO    ][22372] Executing state file.managed for /usr/bin/haproxy-status.sh
2018-06-01 03:12:06,906 [salt.fileclient  ][INFO    ][22372] Fetching file from saltenv 'base', ** done ** 'haproxy/files/haproxy-status.sh'
2018-06-01 03:12:06,948 [salt.state       ][INFO    ][22372] File changed:
New file
2018-06-01 03:12:06,949 [salt.state       ][INFO    ][22372] Completed state [/usr/bin/haproxy-status.sh] at time 03:12:06.949020 duration_in_ms=82.499
2018-06-01 03:12:06,951 [salt.state       ][INFO    ][22372] Running state [net.ipv4.ip_nonlocal_bind] at time 03:12:06.950965
2018-06-01 03:12:06,951 [salt.state       ][INFO    ][22372] Executing state sysctl.present for net.ipv4.ip_nonlocal_bind
2018-06-01 03:12:06,953 [salt.loaded.int.module.cmdmod][INFO    ][22372] Executing command 'sysctl -a' in directory '/root'
2018-06-01 03:12:06,996 [salt.loaded.int.module.cmdmod][INFO    ][22372] Executing command 'sysctl -w net.ipv4.ip_nonlocal_bind="1"' in directory '/root'
2018-06-01 03:12:07,016 [salt.state       ][INFO    ][22372] {'net.ipv4.ip_nonlocal_bind': 1}
2018-06-01 03:12:07,017 [salt.state       ][INFO    ][22372] Completed state [net.ipv4.ip_nonlocal_bind] at time 03:12:07.017107 duration_in_ms=66.142
2018-06-01 03:12:07,283 [salt.state       ][INFO    ][22372] Running state [haproxy] at time 03:12:07.283810
2018-06-01 03:12:07,284 [salt.state       ][INFO    ][22372] Executing state service.running for haproxy
2018-06-01 03:12:07,285 [salt.loaded.int.module.cmdmod][INFO    ][22372] Executing command ['systemctl', 'status', 'haproxy.service', '-n', '0'] in directory '/root'
2018-06-01 03:12:07,310 [salt.loaded.int.module.cmdmod][INFO    ][22372] Executing command ['systemctl', 'is-active', 'haproxy.service'] in directory '/root'
2018-06-01 03:12:07,327 [salt.loaded.int.module.cmdmod][INFO    ][22372] Executing command ['systemctl', 'is-enabled', 'haproxy.service'] in directory '/root'
2018-06-01 03:12:07,344 [salt.state       ][INFO    ][22372] The service haproxy is already running
2018-06-01 03:12:07,345 [salt.state       ][INFO    ][22372] Completed state [haproxy] at time 03:12:07.344973 duration_in_ms=61.164
2018-06-01 03:12:07,345 [salt.state       ][INFO    ][22372] Running state [haproxy] at time 03:12:07.345300
2018-06-01 03:12:07,345 [salt.state       ][INFO    ][22372] Executing state service.mod_watch for haproxy
2018-06-01 03:12:07,346 [salt.loaded.int.module.cmdmod][INFO    ][22372] Executing command ['systemctl', 'is-active', 'haproxy.service'] in directory '/root'
2018-06-01 03:12:07,363 [salt.loaded.int.module.cmdmod][INFO    ][22372] Executing command ['systemctl', 'is-enabled', 'haproxy.service'] in directory '/root'
2018-06-01 03:12:07,379 [salt.loaded.int.module.cmdmod][INFO    ][22372] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'haproxy.service'] in directory '/root'
2018-06-01 03:12:07,413 [salt.state       ][INFO    ][22372] {'haproxy': True}
2018-06-01 03:12:07,413 [salt.state       ][INFO    ][22372] Completed state [haproxy] at time 03:12:07.413417 duration_in_ms=68.117
2018-06-01 03:12:07,415 [salt.minion      ][INFO    ][22372] Returning information for job: 20180601031154758578
2018-06-01 03:12:08,413 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command service.status with jid 20180601031208395933
2018-06-01 03:12:08,437 [salt.minion      ][INFO    ][23646] Starting a new job with PID 23646
2018-06-01 03:12:09,073 [salt.loader.192.168.11.2.int.module.cmdmod][INFO    ][23646] Executing command ['systemctl', 'status', 'haproxy.service', '-n', '0'] in directory '/root'
2018-06-01 03:12:09,095 [salt.loader.192.168.11.2.int.module.cmdmod][INFO    ][23646] Executing command ['systemctl', 'is-active', 'haproxy.service'] in directory '/root'
2018-06-01 03:12:09,113 [salt.minion      ][INFO    ][23646] Returning information for job: 20180601031208395933
2018-06-01 03:12:09,848 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command service.restart with jid 20180601031209829837
2018-06-01 03:12:09,870 [salt.minion      ][INFO    ][23656] Starting a new job with PID 23656
2018-06-01 03:12:10,565 [salt.loader.192.168.11.2.int.module.cmdmod][INFO    ][23656] Executing command ['systemctl', 'status', 'rsyslog.service', '-n', '0'] in directory '/root'
2018-06-01 03:12:10,588 [salt.loader.192.168.11.2.int.module.cmdmod][INFO    ][23656] Executing command ['systemctl', 'is-enabled', 'rsyslog.service'] in directory '/root'
2018-06-01 03:12:10,629 [salt.loader.192.168.11.2.int.module.cmdmod][INFO    ][23656] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'rsyslog.service'] in directory '/root'
2018-06-01 03:12:10,666 [salt.minion      ][INFO    ][23656] Returning information for job: 20180601031209829837
2018-06-01 03:12:11,498 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command test.ping with jid 20180601031211476113
2018-06-01 03:12:11,520 [salt.minion      ][INFO    ][23706] Starting a new job with PID 23706
2018-06-01 03:12:11,593 [salt.minion      ][INFO    ][23706] Returning information for job: 20180601031211476113
2018-06-01 03:13:07,450 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command state.sls with jid 20180601031307431928
2018-06-01 03:13:07,469 [salt.minion      ][INFO    ][23711] Starting a new job with PID 23711
2018-06-01 03:13:10,287 [salt.state       ][INFO    ][23711] Loading fresh modules for state activity
2018-06-01 03:13:10,352 [salt.fileclient  ][INFO    ][23711] Fetching file from saltenv 'base', ** done ** 'keystone/server.sls'
2018-06-01 03:13:10,577 [salt.fileclient  ][INFO    ][23711] Fetching file from saltenv 'base', ** done ** 'apache/init.sls'
2018-06-01 03:13:10,618 [salt.fileclient  ][INFO    ][23711] Fetching file from saltenv 'base', ** done ** 'apache/server/init.sls'
2018-06-01 03:13:10,657 [salt.fileclient  ][INFO    ][23711] Fetching file from saltenv 'base', ** done ** 'apache/server/service/init.sls'
2018-06-01 03:13:10,748 [salt.fileclient  ][INFO    ][23711] Fetching file from saltenv 'base', ** done ** 'apache/server/service/modules.sls'
2018-06-01 03:13:10,847 [salt.fileclient  ][INFO    ][23711] Fetching file from saltenv 'base', ** done ** 'apache/server/service/mpm.sls'
2018-06-01 03:13:10,937 [salt.fileclient  ][INFO    ][23711] Fetching file from saltenv 'base', ** done ** 'apache/server/site.sls'
2018-06-01 03:13:11,081 [salt.fileclient  ][INFO    ][23711] Fetching file from saltenv 'base', ** done ** 'apache/server/users.sls'
2018-06-01 03:13:11,164 [salt.fileclient  ][INFO    ][23711] Fetching file from saltenv 'base', ** done ** 'apache/server/robots.sls'
2018-06-01 03:13:12,240 [salt.state       ][INFO    ][23711] Running state [keystone] at time 03:13:12.240188
2018-06-01 03:13:12,240 [salt.state       ][INFO    ][23711] Executing state pkg.installed for keystone
2018-06-01 03:13:12,241 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:13:12,656 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command ['apt-cache', '-q', 'policy', 'keystone'] in directory '/root'
2018-06-01 03:13:12,763 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-06-01 03:13:15,083 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:13:15,123 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'keystone'] in directory '/root'
2018-06-01 03:13:17,546 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601031317519198
2018-06-01 03:13:17,560 [salt.minion      ][INFO    ][24368] Starting a new job with PID 24368
2018-06-01 03:13:17,581 [salt.minion      ][INFO    ][24368] Returning information for job: 20180601031317519198
2018-06-01 03:13:27,724 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601031327705602
2018-06-01 03:13:27,740 [salt.minion      ][INFO    ][26058] Starting a new job with PID 26058
2018-06-01 03:13:27,760 [salt.minion      ][INFO    ][26058] Returning information for job: 20180601031327705602
2018-06-01 03:13:37,900 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601031337877213
2018-06-01 03:13:37,914 [salt.minion      ][INFO    ][26689] Starting a new job with PID 26689
2018-06-01 03:13:37,936 [salt.minion      ][INFO    ][26689] Returning information for job: 20180601031337877213
2018-06-01 03:13:43,143 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:13:43,194 [salt.state       ][INFO    ][23711] Made the following changes:
'python-routes' changed from 'absent' to '2.4.1-1~u16.04+mcp2'
'python-retrying' changed from 'absent' to '1.3.3-1'
'python-kombu' changed from 'absent' to '4.1.0-1~u16.04+mcp1'
'python-oslo.concurrency' changed from 'absent' to '3.21.1-1~u16.04+mcp2'
'python-oslo.service' changed from 'absent' to '1.25.1-1~u16.04+mcp2'
'python-sqlparse' changed from 'absent' to '0.2.2-1~u16.04+mcp1'
'python-pycadf' changed from 'absent' to '2.6.0-1~u16.04+mcp2'
'xmlsec1' changed from 'absent' to '1.2.20-2ubuntu4'
'python-paste' changed from 'absent' to '1.7.5.1-6ubuntu3'
'python2.7-bson' changed from 'absent' to '1'
'python-oslo-db' changed from 'absent' to '1'
'python-oslo.config' changed from '1:3.9.0-3' to '1:4.11.1-1~u16.04+mcp2'
'python-formencode' changed from 'absent' to '1.3.0-0ubuntu5'
'apache2-utils' changed from 'absent' to '2.4.18-2ubuntu3.8'
'python-futurist' changed from 'absent' to '0.13.0-2'
'libaprutil1-ldap' changed from 'absent' to '1.5.4-1build1'
'python-scrypt' changed from 'absent' to '0.8.0-1~u16.04+mcp2'
'python-migrate' changed from 'absent' to '0.11.0-1~u16.04+mcp2'
'python-cachetools' changed from 'absent' to '1.1.6-1.1~u16.04+mcp2'
'python-linecache2' changed from 'absent' to '1.0.0-2'
'python-mimeparse' changed from 'absent' to '0.1.4-1build1'
'python-pastedeploy-tpl' changed from 'absent' to '1.5.2-1'
'python-oauthlib' changed from 'absent' to '1.0.3-1'
'apache2' changed from 'absent' to '2.4.18-2ubuntu3.8'
'python-blinker' changed from 'absent' to '1.3.dfsg2-1build1'
'pycadf-common' changed from 'absent' to '2.6.0-1~u16.04+mcp2'
'python-pastescript' changed from 'absent' to '1.7.5-3build1'
'python-keystoneauth1' changed from '2.4.1-1ubuntu0.16.04.1' to '3.1.0-1~u16.04+mcp2'
'python2.7-pymongo-ext' changed from 'absent' to '1'
'python-tenacity' changed from 'absent' to '3.3.0-1.1~u16.04+mcp2'
'apache2-data' changed from 'absent' to '2.4.18-2ubuntu3.8'
'python-setuptools' changed from 'absent' to '36.2.7-2~cloud0'
'python-pika-pool' changed from 'absent' to '0.1.3-1ubuntu1'
'python-webob' changed from 'absent' to '1:1.7.2-1~u16.04+mcp2'
'python-bcrypt' changed from 'absent' to '3.1.3-1~u16.04+mcp3'
'libapr1' changed from 'absent' to '1.5.2-3'
'python-gridfs' changed from 'absent' to '3.2-1build1'
'python-keystonemiddleware' changed from 'absent' to '4.17.0-1~u16.04+mcp2'
'python-traceback2' changed from 'absent' to '1.4.0-3'
'python2.7-bson-ext' changed from 'absent' to '1'
'python-anyjson' changed from 'absent' to '0.3.3-1build1'
'python-openid' changed from 'absent' to '2.2.5-6'
'python-pastedeploy' changed from 'absent' to '1.5.2-1'
'python-keystone' changed from 'absent' to '2:12.0.0-3~u16.04+mcp28'
'apache2-bin' changed from 'absent' to '2.4.18-2ubuntu3.8'
'python2.7-pymongo' changed from 'absent' to '1'
'python-contextlib2' changed from 'absent' to '0.5.1-1'
'python2.7-zope.interface' changed from 'absent' to '1'
'python-dnspython' changed from 'absent' to '1.14.0-3.1~u16.04+mcp2'
'python-requests' changed from '2.9.1-3' to '2.18.1-2~u16.04+mcp1'
'python-certifi' changed from 'absent' to '2015.11.20.1-2'
'python-alembic' changed from 'absent' to '0.8.10-1.1~u16.04+mcp2'
'python-statsd' changed from 'absent' to '3.2.1-2~u16.04+mcp2'
'python-distribute' changed from 'absent' to '1'
'python-oslo.db' changed from 'absent' to '4.25.1-3~u16.04+mcp4'
'python2.7-sqlalchemy-ext' changed from 'absent' to '1'
'python-fasteners' changed from 'absent' to '0.12.0-2ubuntu1'
'libapache2-mod-wsgi' changed from 'absent' to '4.4.15-0.1.1~u16.04+mcp2'
'python-pymongo' changed from 'absent' to '3.2-1build1'
'python-rfc3986' changed from 'absent' to '0.3.1-2.1~u16.04+mcp2'
'python-eventlet' changed from 'absent' to '0.20.0-4~u16.04+mcp2'
'python-unittest2' changed from 'absent' to '1.1.0-6.1'
'python-keystoneclient' changed from '1:2.3.1-2' to '1:3.13.0-1~u16.04+mcp6'
'python-oslo.log' changed from 'absent' to '3.30.2-1~u16.04+mcp3'
'python-extras' changed from 'absent' to '0.0.3-3'
'python-pyinotify' changed from 'absent' to '0.9.6-1.1~u16.04+mcp2'
'python2.7-gridfs' changed from 'absent' to '1'
'python-bson-ext' changed from 'absent' to '3.2-1build1'
'python-amqp' changed from 'absent' to '2.2.1-1~exp1~u16.04+mcp1'
'python-scgi' changed from 'absent' to '1.13-1.1build1'
'python-jwt' changed from 'absent' to '1.3.0-1ubuntu0.1'
'python-zope.interface' changed from 'absent' to '4.1.3-1build1'
'libaprutil1' changed from 'absent' to '1.5.4-1build1'
'python-repoze.lru' changed from 'absent' to '0.6-6'
'python-posix-ipc' changed from 'absent' to '0.9.8-2build2'
'formencode-i18n' changed from 'absent' to '1.3.0-0ubuntu5'
'python-defusedxml' changed from 'absent' to '0.5.0-1~u16.04+mcp1'
'python2.7-testtools' changed from 'absent' to '1'
'python-decorator' changed from 'absent' to '4.0.6-1'
'python-osprofiler' changed from 'absent' to '1.11.0-1~u16.04+mcp2'
'httpd-wsgi' changed from 'absent' to '1'
'python-oslo.messaging' changed from 'absent' to '5.30.2-1~u16.04+mcp8'
'keystone' changed from 'absent' to '2:12.0.0-3~u16.04+mcp28'
'python-tempita' changed from 'absent' to '0.5.2-1build1'
'python-oslo.middleware' changed from 'absent' to '3.30.1-1~u16.04+mcp2'
'python-dogpile.cache' changed from 'absent' to '0.6.2-1.1~u16.04+mcp2'
'python-oslo.policy' changed from 'absent' to '1.25.1-1~u16.04+mcp2'
'python-pika' changed from 'absent' to '0.10.0-1'
'python-passlib' changed from 'absent' to '1.7.1-2.1~u16.04+mcp2'
'python-greenlet' changed from 'absent' to '0.4.9-2fakesync1'
'python-sqlalchemy-ext' changed from 'absent' to '1.0.13+ds1-1.1~u16.04+mcp2'
'python-oslo.context' changed from 'absent' to '1:2.17.0-1~u16.04+mcp2'
'httpd' changed from 'absent' to '1'
'python-pymongo-ext' changed from 'absent' to '3.2-1build1'
'apache2-api-20120211' changed from 'absent' to '1'
'python-ceilometerclient' changed from 'absent' to '2.9.0-2~u16.04+mcp2'
'python-urllib3' changed from '1.13.1-2ubuntu0.16.04.1' to '1.21.1-1~u16.04+mcp2'
'liblua5.1-0' changed from 'absent' to '5.1.5-8ubuntu1'
'python-oslo.cache' changed from 'absent' to '1.25.1-1~u16.04+mcp4'
'python-zopeinterface' changed from 'absent' to '1'
'python-fixtures' changed from 'absent' to '3.0.0-1.1~u16.04+mcp2'
'python-vine' changed from 'absent' to '1.1.3+dfsg-2~u16.04+mcp3'
'python2.7-pyinotify' changed from 'absent' to '1'
'python2.7-keystone' changed from 'absent' to '1'
'python-sqlalchemy' changed from 'absent' to '1.0.13+ds1-1.1~u16.04+mcp2'
'python-positional' changed from '1.0.1-2' to '1.1.1-3.1~u16.04+mcp2'
'python-bson' changed from 'absent' to '3.2-1build1'
'python-pysaml2' changed from 'absent' to '3.0.0-3ubuntu1.16.04.3'
'python-zope' changed from 'absent' to '1'
'libaprutil1-dbd-sqlite3' changed from 'absent' to '1.5.4-1build1'
'python-oslo-log' changed from 'absent' to '1'
'httpd-cgi' changed from 'absent' to '1'
'python-oslo-context' changed from 'absent' to '1'
'python-testtools' changed from 'absent' to '1.8.1-0ubuntu1'
'ssl-cert' changed from 'absent' to '1.0.37'
'alembic' changed from 'absent' to '0.8.10-1.1~u16.04+mcp2'

2018-06-01 03:13:43,223 [salt.state       ][INFO    ][23711] Loading fresh modules for state activity
2018-06-01 03:13:43,256 [salt.state       ][INFO    ][23711] Completed state [keystone] at time 03:13:43.256912 duration_in_ms=31016.725
2018-06-01 03:13:43,264 [salt.state       ][INFO    ][23711] Running state [python-keystone] at time 03:13:43.264809
2018-06-01 03:13:43,265 [salt.state       ][INFO    ][23711] Executing state pkg.installed for python-keystone
2018-06-01 03:13:43,739 [salt.state       ][INFO    ][23711] All specified packages are already installed
2018-06-01 03:13:43,739 [salt.state       ][INFO    ][23711] Completed state [python-keystone] at time 03:13:43.739613 duration_in_ms=474.804
2018-06-01 03:13:43,739 [salt.state       ][INFO    ][23711] Running state [python-keystoneclient] at time 03:13:43.739913
2018-06-01 03:13:43,740 [salt.state       ][INFO    ][23711] Executing state pkg.installed for python-keystoneclient
2018-06-01 03:13:43,748 [salt.state       ][INFO    ][23711] All specified packages are already installed
2018-06-01 03:13:43,749 [salt.state       ][INFO    ][23711] Completed state [python-keystoneclient] at time 03:13:43.748973 duration_in_ms=9.06
2018-06-01 03:13:43,749 [salt.state       ][INFO    ][23711] Running state [python-psycopg2] at time 03:13:43.749225
2018-06-01 03:13:43,749 [salt.state       ][INFO    ][23711] Executing state pkg.installed for python-psycopg2
2018-06-01 03:13:43,769 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:13:43,806 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'python-psycopg2'] in directory '/root'
2018-06-01 03:13:46,920 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:13:46,976 [salt.state       ][INFO    ][23711] Made the following changes:
'python-psycopg2' changed from 'absent' to '2.6.1-1build2'
'libpq5' changed from 'absent' to '9.5.12-0ubuntu0.16.04'
'python-egenix-mxdatetime' changed from 'absent' to '3.2.9-1'
'python-egenix-mxtools' changed from 'absent' to '3.2.9-1'

2018-06-01 03:13:47,004 [salt.state       ][INFO    ][23711] Loading fresh modules for state activity
2018-06-01 03:13:47,037 [salt.state       ][INFO    ][23711] Completed state [python-psycopg2] at time 03:13:47.036942 duration_in_ms=3287.716
2018-06-01 03:13:47,045 [salt.state       ][INFO    ][23711] Running state [python-mysqldb] at time 03:13:47.045521
2018-06-01 03:13:47,045 [salt.state       ][INFO    ][23711] Executing state pkg.installed for python-mysqldb
2018-06-01 03:13:47,509 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:13:47,541 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'python-mysqldb'] in directory '/root'
2018-06-01 03:13:48,072 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601031348053778
2018-06-01 03:13:48,091 [salt.minion      ][INFO    ][27304] Starting a new job with PID 27304
2018-06-01 03:13:48,114 [salt.minion      ][INFO    ][27304] Returning information for job: 20180601031348053778
2018-06-01 03:13:49,684 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:13:49,742 [salt.state       ][INFO    ][23711] Made the following changes:
'python2.7-mysqldb' changed from 'absent' to '1'
'mysql-common' changed from 'absent' to '5.7.22-0ubuntu0.16.04.1'
'mysql-common-5.6' changed from 'absent' to '1'
'libmysqlclient20' changed from 'absent' to '5.7.22-0ubuntu0.16.04.1'
'python-mysqldb' changed from 'absent' to '1.3.7-1build2'

2018-06-01 03:13:49,773 [salt.state       ][INFO    ][23711] Loading fresh modules for state activity
2018-06-01 03:13:49,806 [salt.state       ][INFO    ][23711] Completed state [python-mysqldb] at time 03:13:49.806841 duration_in_ms=2761.316
2018-06-01 03:13:49,815 [salt.state       ][INFO    ][23711] Running state [mysql-client] at time 03:13:49.815627
2018-06-01 03:13:49,816 [salt.state       ][INFO    ][23711] Executing state pkg.installed for mysql-client
2018-06-01 03:13:50,282 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:13:50,312 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'mysql-client'] in directory '/root'
2018-06-01 03:13:54,761 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:13:54,810 [salt.state       ][INFO    ][23711] Made the following changes:
'mysql-wsrep-common-5.6' changed from 'absent' to '5.6.35-0.1~u16.04+mcp3'
'mysql-client' changed from 'absent' to '5.6.35-0.1~u16.04+mcp3'
'libmysqlclient18' changed from 'absent' to '1'
'virtual-mysql-client' changed from 'absent' to '1'
'mysql-wsrep-client-5.6' changed from 'absent' to '5.6.35-0.1~u16.04+mcp3'
'mysql-wsrep-libmysqlclient18' changed from 'absent' to '5.6.35-0.1~u16.04+mcp3'
'libdbi-perl' changed from 'absent' to '1.634-1build1'
'libterm-readkey-perl' changed from 'absent' to '2.33-1build1'
'perl-dbdabi-94' changed from 'absent' to '1'
'libdbd-mysql-perl' changed from 'absent' to '4.033-1ubuntu0.1'

2018-06-01 03:13:54,842 [salt.state       ][INFO    ][23711] Loading fresh modules for state activity
2018-06-01 03:13:54,875 [salt.state       ][INFO    ][23711] Completed state [mysql-client] at time 03:13:54.875006 duration_in_ms=5059.375
2018-06-01 03:13:54,884 [salt.state       ][INFO    ][23711] Running state [python-six] at time 03:13:54.884071
2018-06-01 03:13:54,884 [salt.state       ][INFO    ][23711] Executing state pkg.installed for python-six
2018-06-01 03:13:55,457 [salt.state       ][INFO    ][23711] All specified packages are already installed
2018-06-01 03:13:55,458 [salt.state       ][INFO    ][23711] Completed state [python-six] at time 03:13:55.458118 duration_in_ms=574.046
2018-06-01 03:13:55,458 [salt.state       ][INFO    ][23711] Running state [python-memcache] at time 03:13:55.458714
2018-06-01 03:13:55,459 [salt.state       ][INFO    ][23711] Executing state pkg.installed for python-memcache
2018-06-01 03:13:55,466 [salt.state       ][INFO    ][23711] All specified packages are already installed
2018-06-01 03:13:55,466 [salt.state       ][INFO    ][23711] Completed state [python-memcache] at time 03:13:55.466797 duration_in_ms=8.083
2018-06-01 03:13:55,467 [salt.state       ][INFO    ][23711] Running state [python-openstackclient] at time 03:13:55.467313
2018-06-01 03:13:55,467 [salt.state       ][INFO    ][23711] Executing state pkg.installed for python-openstackclient
2018-06-01 03:13:55,474 [salt.state       ][INFO    ][23711] All specified packages are already installed
2018-06-01 03:13:55,475 [salt.state       ][INFO    ][23711] Completed state [python-openstackclient] at time 03:13:55.475316 duration_in_ms=8.003
2018-06-01 03:13:55,475 [salt.state       ][INFO    ][23711] Running state [gettext-base] at time 03:13:55.475840
2018-06-01 03:13:55,476 [salt.state       ][INFO    ][23711] Executing state pkg.installed for gettext-base
2018-06-01 03:13:55,483 [salt.state       ][INFO    ][23711] All specified packages are already installed
2018-06-01 03:13:55,483 [salt.state       ][INFO    ][23711] Completed state [gettext-base] at time 03:13:55.483685 duration_in_ms=7.845
2018-06-01 03:13:55,484 [salt.state       ][INFO    ][23711] Running state [python-pycadf] at time 03:13:55.484208
2018-06-01 03:13:55,484 [salt.state       ][INFO    ][23711] Executing state pkg.installed for python-pycadf
2018-06-01 03:13:55,491 [salt.state       ][INFO    ][23711] All specified packages are already installed
2018-06-01 03:13:55,492 [salt.state       ][INFO    ][23711] Completed state [python-pycadf] at time 03:13:55.492127 duration_in_ms=7.919
2018-06-01 03:13:55,493 [salt.state       ][INFO    ][23711] Running state [apache2] at time 03:13:55.493032
2018-06-01 03:13:55,493 [salt.state       ][INFO    ][23711] Executing state pkg.installed for apache2
2018-06-01 03:13:55,500 [salt.state       ][INFO    ][23711] All specified packages are already installed
2018-06-01 03:13:55,501 [salt.state       ][INFO    ][23711] Completed state [apache2] at time 03:13:55.501154 duration_in_ms=8.121
2018-06-01 03:13:55,502 [salt.state       ][INFO    ][23711] Running state [a2enmod ssl] at time 03:13:55.502463
2018-06-01 03:13:55,502 [salt.state       ][INFO    ][23711] Executing state cmd.run for a2enmod ssl
2018-06-01 03:13:55,503 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command 'a2enmod ssl' in directory '/root'
2018-06-01 03:13:55,571 [salt.state       ][INFO    ][23711] {'pid': 29254, 'retcode': 0, 'stderr': '', 'stdout': 'Considering dependency setenvif for ssl:\nModule setenvif already enabled\nConsidering dependency mime for ssl:\nModule mime already enabled\nConsidering dependency socache_shmcb for ssl:\nEnabling module socache_shmcb.\nEnabling module ssl.\nSee /usr/share/doc/apache2/README.Debian.gz on how to configure SSL and create self-signed certificates.\nTo activate the new configuration, you need to run:\n  service apache2 restart'}
2018-06-01 03:13:55,572 [salt.state       ][INFO    ][23711] Completed state [a2enmod ssl] at time 03:13:55.572258 duration_in_ms=69.794
2018-06-01 03:13:55,573 [salt.state       ][INFO    ][23711] Running state [a2enmod rewrite] at time 03:13:55.573543
2018-06-01 03:13:55,574 [salt.state       ][INFO    ][23711] Executing state cmd.run for a2enmod rewrite
2018-06-01 03:13:55,575 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command 'a2enmod rewrite' in directory '/root'
2018-06-01 03:13:55,636 [salt.state       ][INFO    ][23711] {'pid': 29269, 'retcode': 0, 'stderr': '', 'stdout': 'Enabling module rewrite.\nTo activate the new configuration, you need to run:\n  service apache2 restart'}
2018-06-01 03:13:55,637 [salt.state       ][INFO    ][23711] Completed state [a2enmod rewrite] at time 03:13:55.637425 duration_in_ms=63.881
2018-06-01 03:13:55,638 [salt.state       ][INFO    ][23711] Running state [libapache2-mod-wsgi] at time 03:13:55.638823
2018-06-01 03:13:55,639 [salt.state       ][INFO    ][23711] Executing state pkg.installed for libapache2-mod-wsgi
2018-06-01 03:13:55,650 [salt.state       ][INFO    ][23711] All specified packages are already installed
2018-06-01 03:13:55,650 [salt.state       ][INFO    ][23711] Completed state [libapache2-mod-wsgi] at time 03:13:55.650718 duration_in_ms=11.895
2018-06-01 03:13:55,651 [salt.state       ][INFO    ][23711] Running state [a2enmod wsgi] at time 03:13:55.651531
2018-06-01 03:13:55,652 [salt.state       ][INFO    ][23711] Executing state cmd.run for a2enmod wsgi
2018-06-01 03:13:55,653 [salt.state       ][INFO    ][23711] /etc/apache2/mods-enabled/wsgi.load exists
2018-06-01 03:13:55,653 [salt.state       ][INFO    ][23711] Completed state [a2enmod wsgi] at time 03:13:55.653896 duration_in_ms=2.365
2018-06-01 03:13:55,658 [salt.state       ][INFO    ][23711] Running state [/etc/apache2/mods-enabled/mpm_prefork.load] at time 03:13:55.658343
2018-06-01 03:13:55,658 [salt.state       ][INFO    ][23711] Executing state file.absent for /etc/apache2/mods-enabled/mpm_prefork.load
2018-06-01 03:13:55,659 [salt.state       ][INFO    ][23711] File /etc/apache2/mods-enabled/mpm_prefork.load is not present
2018-06-01 03:13:55,660 [salt.state       ][INFO    ][23711] Completed state [/etc/apache2/mods-enabled/mpm_prefork.load] at time 03:13:55.660063 duration_in_ms=1.721
2018-06-01 03:13:55,660 [salt.state       ][INFO    ][23711] Running state [/etc/apache2/mods-enabled/mpm_prefork.conf] at time 03:13:55.660613
2018-06-01 03:13:55,661 [salt.state       ][INFO    ][23711] Executing state file.absent for /etc/apache2/mods-enabled/mpm_prefork.conf
2018-06-01 03:13:55,661 [salt.state       ][INFO    ][23711] File /etc/apache2/mods-enabled/mpm_prefork.conf is not present
2018-06-01 03:13:55,662 [salt.state       ][INFO    ][23711] Completed state [/etc/apache2/mods-enabled/mpm_prefork.conf] at time 03:13:55.662132 duration_in_ms=1.519
2018-06-01 03:13:55,662 [salt.state       ][INFO    ][23711] Running state [/etc/apache2/mods-enabled/mpm_worker.load] at time 03:13:55.662631
2018-06-01 03:13:55,663 [salt.state       ][INFO    ][23711] Executing state file.absent for /etc/apache2/mods-enabled/mpm_worker.load
2018-06-01 03:13:55,664 [salt.state       ][INFO    ][23711] File /etc/apache2/mods-enabled/mpm_worker.load is not present
2018-06-01 03:13:55,664 [salt.state       ][INFO    ][23711] Completed state [/etc/apache2/mods-enabled/mpm_worker.load] at time 03:13:55.664532 duration_in_ms=1.901
2018-06-01 03:13:55,665 [salt.state       ][INFO    ][23711] Running state [/etc/apache2/mods-enabled/mpm_worker.conf] at time 03:13:55.665034
2018-06-01 03:13:55,665 [salt.state       ][INFO    ][23711] Executing state file.absent for /etc/apache2/mods-enabled/mpm_worker.conf
2018-06-01 03:13:55,666 [salt.state       ][INFO    ][23711] File /etc/apache2/mods-enabled/mpm_worker.conf is not present
2018-06-01 03:13:55,666 [salt.state       ][INFO    ][23711] Completed state [/etc/apache2/mods-enabled/mpm_worker.conf] at time 03:13:55.666534 duration_in_ms=1.499
2018-06-01 03:13:55,669 [salt.state       ][INFO    ][23711] Running state [/etc/apache2/mods-available/mpm_event.conf] at time 03:13:55.669359
2018-06-01 03:13:55,669 [salt.state       ][INFO    ][23711] Executing state file.managed for /etc/apache2/mods-available/mpm_event.conf
2018-06-01 03:13:55,724 [salt.fileclient  ][INFO    ][23711] Fetching file from saltenv 'base', ** done ** 'apache/files/mpm/mpm_event.conf'
2018-06-01 03:13:55,799 [salt.state       ][INFO    ][23711] File changed:
--- 
+++ 
@@ -5,14 +5,15 @@
 # ThreadsPerChild: constant number of worker threads in each server process
 # MaxRequestWorkers: maximum number of worker threads
 # MaxConnectionsPerChild: maximum number of requests a server process serves
+
 <IfModule mpm_event_module>
-	StartServers			 2
-	MinSpareThreads		 25
-	MaxSpareThreads		 75
-	ThreadLimit			 64
-	ThreadsPerChild		 25
-	MaxRequestWorkers	  150
-	MaxConnectionsPerChild   0
+    StartServers            5
+    MinSpareThreads         25
+    MaxSpareThreads         75
+    ThreadLimit             64
+    ThreadsPerChild         25
+    MaxRequestWorkers       150
+    MaxConnectionsPerChild  0
 </IfModule>
 
-# vim: syntax=apache ts=4 sw=4 sts=4 sr noet
+# vim: syntax=apache ts=4 sw=4 sts=4 sr et

2018-06-01 03:13:55,805 [salt.state       ][INFO    ][23711] Completed state [/etc/apache2/mods-available/mpm_event.conf] at time 03:13:55.804964 duration_in_ms=135.603
2018-06-01 03:13:55,806 [salt.state       ][INFO    ][23711] Running state [a2enmod mpm_event] at time 03:13:55.806765
2018-06-01 03:13:55,807 [salt.state       ][INFO    ][23711] Executing state cmd.run for a2enmod mpm_event
2018-06-01 03:13:55,808 [salt.state       ][INFO    ][23711] /etc/apache2/mods-enabled/mpm_event.load exists
2018-06-01 03:13:55,808 [salt.state       ][INFO    ][23711] Completed state [a2enmod mpm_event] at time 03:13:55.808491 duration_in_ms=1.727
2018-06-01 03:13:55,809 [salt.state       ][INFO    ][23711] Running state [/etc/apache2/ports.conf] at time 03:13:55.809055
2018-06-01 03:13:55,809 [salt.state       ][INFO    ][23711] Executing state file.managed for /etc/apache2/ports.conf
2018-06-01 03:13:55,849 [salt.fileclient  ][INFO    ][23711] Fetching file from saltenv 'base', ** done ** 'apache/files/ports.conf'
2018-06-01 03:13:55,908 [salt.state       ][INFO    ][23711] File /etc/apache2/ports.conf is in the correct state
2018-06-01 03:13:55,908 [salt.state       ][INFO    ][23711] Completed state [/etc/apache2/ports.conf] at time 03:13:55.908624 duration_in_ms=99.569
2018-06-01 03:13:55,909 [salt.state       ][INFO    ][23711] Running state [/etc/apache2/conf-available/security.conf] at time 03:13:55.909134
2018-06-01 03:13:55,909 [salt.state       ][INFO    ][23711] Executing state file.managed for /etc/apache2/conf-available/security.conf
2018-06-01 03:13:55,941 [salt.fileclient  ][INFO    ][23711] Fetching file from saltenv 'base', ** done ** 'apache/files/security.conf'
2018-06-01 03:13:56,004 [salt.state       ][INFO    ][23711] File changed:
--- 
+++ 
@@ -1,73 +1,14 @@
-#
-# Disable access to the entire file system except for the directories that
-# are explicitly allowed later.
-#
-# This currently breaks the configurations that come with some web application
-# Debian packages.
-#
-#<Directory />
-#   AllowOverride None
-#   Require all denied
-#</Directory>
+ServerSignature Off
+TraceEnable Off
+ServerTokens Prod
+<DirectoryMatch "/\.svn">
+    Require all denied
+</DirectoryMatch>
 
+<DirectoryMatch "/\.git">
+    Require all denied
+</DirectoryMatch>
 
-# Changing the following options will not really affect the security of the
-# server, but might make attacks slightly more difficult in some cases.
-
-#
-# ServerTokens
-# This directive configures what you return as the Server HTTP response
-# Header. The default is 'Full' which sends information about the OS-Type
-# and compiled in modules.
-# Set to one of:  Full | OS | Minimal | Minor | Major | Prod
-# where Full conveys the most information, and Prod the least.
-#ServerTokens Minimal
-ServerTokens OS
-#ServerTokens Full
-
-#
-# Optionally add a line containing the server version and virtual host
-# name to server-generated pages (internal error documents, FTP directory
-# listings, mod_status and mod_info output etc., but not CGI generated
-# documents or custom error documents).
-# Set to "EMail" to also include a mailto: link to the ServerAdmin.
-# Set to one of:  On | Off | EMail
-#ServerSignature Off
-ServerSignature On
-
-#
-# Allow TRACE method
-#
-# Set to "extended" to also reflect the request body (only for testing and
-# diagnostic purposes).
-#
-# Set to one of:  On | Off | extended
-TraceEnable Off
-#TraceEnable On
-
-#
-# Forbid access to version control directories
-#
-# If you use version control systems in your document root, you should
-# probably deny access to their directories. For example, for subversion:
-#
-#<DirectoryMatch "/\.svn">
-#   Require all denied
-#</DirectoryMatch>
-
-#
-# Setting this header will prevent MSIE from interpreting files as something
-# else than declared by the content type in the HTTP headers.
-# Requires mod_headers to be enabled.
-#
-#Header set X-Content-Type-Options: "nosniff"
-
-#
-# Setting this header will prevent other sites from embedding pages from this
-# site as frames. This defends against clickjacking attacks.
-# Requires mod_headers to be enabled.
-#
-#Header set X-Frame-Options: "sameorigin"
-
-
-# vim: syntax=apache ts=4 sw=4 sts=4 sr noet
+<DirectoryMatch "/\.hg">
+    Require all denied
+</DirectoryMatch>

2018-06-01 03:13:56,004 [salt.state       ][INFO    ][23711] Completed state [/etc/apache2/conf-available/security.conf] at time 03:13:56.004791 duration_in_ms=95.657
2018-06-01 03:13:56,016 [salt.state       ][INFO    ][23711] Running state [/etc/keystone/policy.json] at time 03:13:56.016132
2018-06-01 03:13:56,016 [salt.state       ][INFO    ][23711] Executing state file.managed for /etc/keystone/policy.json
2018-06-01 03:13:56,016 [salt.loaded.int.states.file][WARNING ][23711] State for file: /etc/keystone/policy.json - Neither 'source' nor 'contents' nor 'contents_pillar' nor 'contents_grains' was defined, yet 'replace' was set to 'True'. As there is no source to replace the file with, 'replace' has been set to 'False' to avoid reading the file unnecessarily.
2018-06-01 03:13:56,017 [salt.state       ][INFO    ][23711] {'new': 'file /etc/keystone/policy.json created', 'group': 'keystone', 'user': 'keystone'}
2018-06-01 03:13:56,018 [salt.state       ][INFO    ][23711] Completed state [/etc/keystone/policy.json] at time 03:13:56.018028 duration_in_ms=1.896
2018-06-01 03:13:56,018 [salt.state       ][INFO    ][23711] Running state [/etc/keystone/keystone-paste.ini] at time 03:13:56.018550
2018-06-01 03:13:56,018 [salt.state       ][INFO    ][23711] Executing state file.managed for /etc/keystone/keystone-paste.ini
2018-06-01 03:13:56,051 [salt.fileclient  ][INFO    ][23711] Fetching file from saltenv 'base', ** done ** 'keystone/files/pike/keystone-paste.ini.Debian'
2018-06-01 03:13:56,056 [salt.state       ][INFO    ][23711] {'group': 'keystone', 'user': 'keystone'}
2018-06-01 03:13:56,056 [salt.state       ][INFO    ][23711] Completed state [/etc/keystone/keystone-paste.ini] at time 03:13:56.056319 duration_in_ms=37.769
2018-06-01 03:13:56,056 [salt.state       ][INFO    ][23711] Running state [/etc/apache2/sites-enabled/000-default.conf] at time 03:13:56.056567
2018-06-01 03:13:56,056 [salt.state       ][INFO    ][23711] Executing state file.absent for /etc/apache2/sites-enabled/000-default.conf
2018-06-01 03:13:56,057 [salt.state       ][INFO    ][23711] {'removed': '/etc/apache2/sites-enabled/000-default.conf'}
2018-06-01 03:13:56,057 [salt.state       ][INFO    ][23711] Completed state [/etc/apache2/sites-enabled/000-default.conf] at time 03:13:56.057362 duration_in_ms=0.795
2018-06-01 03:13:56,057 [salt.state       ][INFO    ][23711] Running state [/etc/keystone/keystone.conf] at time 03:13:56.057870
2018-06-01 03:13:56,058 [salt.state       ][INFO    ][23711] Executing state file.managed for /etc/keystone/keystone.conf
2018-06-01 03:13:56,098 [salt.fileclient  ][INFO    ][23711] Fetching file from saltenv 'base', ** done ** 'keystone/files/pike/keystone.conf.Debian'
2018-06-01 03:13:56,287 [salt.state       ][INFO    ][23711] File changed:
--- 
+++ 
@@ -1,5 +1,5 @@
+
 [DEFAULT]
-log_dir = /var/log/keystone
 
 #
 # From keystone
@@ -16,6 +16,7 @@
 # `AdminTokenAuthMiddleware` (the `admin_token_auth` filter) from your paste
 # application pipelines (for example, in `keystone-paste.ini`). (string value)
 #admin_token = <None>
+admin_token=opnfv_secret
 
 # The base public endpoint URL for Keystone that is advertised to clients
 # (NOTE: this does NOT affect how Keystone listens for connections). Defaults
@@ -99,6 +100,7 @@
 # in the P release. Use oslo.middleware.http_proxy_to_wsgi configuration
 # instead.
 #secure_proxy_ssl_header = HTTP_X_FORWARDED_PROTO
+secure_proxy_ssl_header = "HTTP_X_FORWARDED_PROTO"
 
 # If set to true, then the server will return information in HTTP responses
 # that may allow an unauthenticated or authenticated user to get more
@@ -118,6 +120,7 @@
 # recommended for auditing use cases. (string value)
 # Allowed values: basic, cadf
 #notification_format = cadf
+notification_format = basic
 
 # You can reduce the number of notifications keystone emits by explicitly
 # opting out. Keystone will not emit notifications that match the patterns
@@ -140,6 +143,14 @@
 # INFO level. (boolean value)
 # Note: This option can be changed without restarting.
 #debug = false
+debug = false
+
+# DEPRECATED: If set to false, the logging level will be set to WARNING instead
+# of the default INFO level. (boolean value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#verbose = true
+verbose = true
 
 # The name of a logging configuration file. This file is appended to any
 # existing logging configuration files. For details about logging configuration
@@ -166,6 +177,7 @@
 # is ignored if log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logdir
 #log_dir = <None>
+log_dir = /var/log/keystone
 
 # Uses logging handler designed to watch file system. When log file is moved or
 # removed this handler will open a new log file with specified path
@@ -179,12 +191,6 @@
 # is set. (boolean value)
 #use_syslog = false
 
-# Enable journald for logging. If running in a systemd environment you may wish
-# to enable journal support. Doing so will use the journal native protocol
-# which includes structured metadata in addition to log messages.This option is
-# ignored if log_config_append is set. (boolean value)
-#use_journal = false
-
 # Syslog facility to receive log lines. This option is ignored if
 # log_config_append is set. (string value)
 #syslog_log_facility = LOG_USER
@@ -213,7 +219,7 @@
 
 # List of package logging levels in logger=LEVEL pairs. This option is ignored
 # if log_config_append is set. (list value)
-#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
+#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
 
 # Enables or disables publication of error events. (boolean value)
 #publish_errors = false
@@ -246,6 +252,7 @@
 #
 
 # Size of RPC connection pool. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_conn_pool_size
 #rpc_conn_pool_size = 30
 
 # The pool size limit for connections expiration policy (integer value)
@@ -256,24 +263,30 @@
 
 # ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
 # The "host" option should point or resolve to this address. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_address
 #rpc_zmq_bind_address = *
 
 # MatchMaker driver. (string value)
 # Allowed values: redis, sentinel, dummy
+# Deprecated group/name - [DEFAULT]/rpc_zmq_matchmaker
 #rpc_zmq_matchmaker = redis
 
 # Number of ZeroMQ contexts, defaults to 1. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_contexts
 #rpc_zmq_contexts = 1
 
 # Maximum number of ingress messages to locally buffer per topic. Default is
 # unlimited. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_topic_backlog
 #rpc_zmq_topic_backlog = <None>
 
 # Directory for holding IPC sockets. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_ipc_dir
 #rpc_zmq_ipc_dir = /var/run/openstack
 
 # Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
 # "host" option, if running Nova. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_host
 #rpc_zmq_host = localhost
 
 # Number of seconds to wait before all pending messages will be sent after
@@ -286,21 +299,26 @@
 
 # The default number of seconds that poll should wait. Poll raises timeout
 # exception when timeout expired. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_poll_timeout
 #rpc_poll_timeout = 1
 
 # Expiration timeout in seconds of a name service record about existing target
 # ( < 0 means no timeout). (integer value)
+# Deprecated group/name - [DEFAULT]/zmq_target_expire
 #zmq_target_expire = 300
 
 # Update period in seconds of a name service record about existing target.
 # (integer value)
+# Deprecated group/name - [DEFAULT]/zmq_target_update
 #zmq_target_update = 180
 
 # Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
 # value)
+# Deprecated group/name - [DEFAULT]/use_pub_sub
 #use_pub_sub = false
 
 # Use ROUTER remote proxy. (boolean value)
+# Deprecated group/name - [DEFAULT]/use_router_proxy
 #use_router_proxy = false
 
 # This option makes direct connections dynamic or static. It makes sense only
@@ -315,20 +333,24 @@
 # Minimal port number for random ports range. (port value)
 # Minimum value: 0
 # Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/rpc_zmq_min_port
 #rpc_zmq_min_port = 49153
 
 # Maximal port number for random ports range. (integer value)
 # Minimum value: 1
 # Maximum value: 65536
+# Deprecated group/name - [DEFAULT]/rpc_zmq_max_port
 #rpc_zmq_max_port = 65536
 
 # Number of retries to find free port number before fail with ZMQBindError.
 # (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_port_retries
 #rpc_zmq_bind_port_retries = 100
 
 # Default serialization mechanism for serializing/deserializing
 # outgoing/incoming messages (string value)
 # Allowed values: json, msgpack
+# Deprecated group/name - [DEFAULT]/rpc_zmq_serialization
 #rpc_zmq_serialization = json
 
 # This option configures round-robin mode in zmq socket. True means not keeping
@@ -393,17 +415,16 @@
 # value)
 #subscribe_on =
 
-# Size of executor thread pool when executor is threading or eventlet. (integer
-# value)
+# Size of executor thread pool. (integer value)
 # Deprecated group/name - [DEFAULT]/rpc_thread_pool_size
 #executor_thread_pool_size = 64
 
 # Seconds to wait for a response from a call. (integer value)
 #rpc_response_timeout = 60
-
 # A URL representing the messaging driver to use and its full configuration.
 # (string value)
-#transport_url = <None>
+#transport_url = rabbit://nova:3qVSI7a1m8AdaDQ7BpB0PJu4@192.168.0.4:5673/
+transport_url = rabbit://openstack:opnfv_secret@192.168.10.28:5672,openstack:opnfv_secret@192.168.10.29:5672,openstack:opnfv_secret@192.168.10.30:5672//openstack
 
 # DEPRECATED: The messaging driver to use, defaults to rabbit. Other drivers
 # include amqp and zmq. (string value)
@@ -411,7 +432,6 @@
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
 #rpc_backend = rabbit
-
 # The default exchange under which topics are scoped. May be overridden by an
 # exchange name specified in the transport_url option. (string value)
 #control_exchange = keystone
@@ -432,7 +452,7 @@
 # A list of role names which are prohibited from being an implied role. (list
 # value)
 #prohibited_implied_role = admin
-
+driver = sql
 
 [auth]
 
@@ -446,6 +466,8 @@
 # are being invoked to validate attributes in the request environment, it can
 # cause conflicts. (list value)
 #methods = external,password,token,oauth1,mapped
+
+methods = password,token
 
 # Entry point for the password auth plugin module in the
 # `keystone.auth.password` namespace. You do not need to set this unless you
@@ -497,14 +519,14 @@
 # expiration time defined for it. (integer value)
 #expiration_time = 600
 
-# Cache backend module. For eventlet-based or environments with hundreds of
-# threaded servers, Memcache with pooling (oslo_cache.memcache_pool) is
-# recommended. For environments with less than 100 threaded servers, Memcached
-# (dogpile.cache.memcached) or Redis (dogpile.cache.redis) is recommended. Test
-# environments with a single instance of the server can use the
-# dogpile.cache.memory backend. (string value)
-# Allowed values: oslo_cache.memcache_pool, oslo_cache.dict, dogpile.cache.memcached, dogpile.cache.redis, dogpile.cache.memory, dogpile.cache.null
+# Dogpile.cache backend module. It is recommended that Memcache or Redis
+# (dogpile.cache.redis) be used in production deployments. For eventlet-based
+# or highly threaded servers, Memcache with pooling (oslo_cache.memcache_pool)
+# is recommended. For low thread servers, dogpile.cache.memcached is
+# recommended. Test environments with a single instance of the server can use
+# the dogpile.cache.memory backend. (string value)
 #backend = dogpile.cache.null
+backend = oslo_cache.memcache_pool
 
 # Arguments supplied to the backend module. Specify this option once per
 # argument to be passed to the dogpile.cache backend. Example format:
@@ -518,6 +540,7 @@
 
 # Global toggle for caching. (boolean value)
 #enabled = true
+enabled = true
 
 # Extra debugging from the cache backend (cache keys, get/set/delete/etc
 # calls). This is only really useful if you need to see the specific cache-
@@ -528,23 +551,28 @@
 # Memcache servers in the format of "host:port". (dogpile.cache.memcache and
 # oslo_cache.memcache_pool backends only). (list value)
 #memcache_servers = localhost:11211
+memcache_servers =192.168.10.36:11211,192.168.10.37:11211,192.168.10.38:11211
 
 # Number of seconds memcached server is considered dead before it is tried
 # again. (dogpile.cache.memcache and oslo_cache.memcache_pool backends only).
 # (integer value)
 #memcache_dead_retry = 300
+memcache_dead_retry = 300
 
 # Timeout in seconds for every call to a server. (dogpile.cache.memcache and
 # oslo_cache.memcache_pool backends only). (integer value)
 #memcache_socket_timeout = 3
+memcache_socket_timeout = 1
 
 # Max total number of open connections to every memcached server.
 # (oslo_cache.memcache_pool backend only). (integer value)
 #memcache_pool_maxsize = 10
+memcache_pool_maxsize = 100
 
 # Number of seconds a connection to memcached is held unused in the pool before
 # it is closed. (oslo_cache.memcache_pool backend only). (integer value)
 #memcache_pool_unused_timeout = 60
+memcache_pool_unused_timeout = 60
 
 # Number of seconds that an operation will wait to get a memcache client
 # connection. (integer value)
@@ -560,6 +588,7 @@
 # Absolute path to the file used for the templated catalog backend. This option
 # is only used if the `[catalog] driver` is set to `templated`. (string value)
 #template_file = default_catalog.templates
+template_file = default_catalog.templates
 
 # Entry point for the catalog driver in the `keystone.catalog` namespace.
 # Keystone provides a `sql` option (which supports basic CRUD operations
@@ -567,6 +596,7 @@
 # catalog file on disk), and a `endpoint_filter.sql` option (which supports
 # arbitrary service catalogs per project). (string value)
 #driver = sql
+driver = sql
 
 # Toggle for catalog caching. This has no effect unless global caching is
 # enabled. In a typical deployment, there is no reason to disable this.
@@ -587,6 +617,42 @@
 
 
 [cors]
+
+#
+# From oslo.middleware
+#
+
+# Indicate whether this resource may be shared with the domain received in the
+# requests "origin" header. Format: "<protocol>://<host>[:<port>]", no trailing
+# slash. Example: https://horizon.example.com (list value)
+#allowed_origin = <None>
+
+
+# Indicate that the actual request can include user credentials (boolean value)
+#allow_credentials = true
+
+
+# Indicate which headers are safe to expose to the API. Defaults to HTTP Simple
+# Headers. (list value)
+#expose_headers = X-Auth-Token,X-Openstack-Request-Id,X-Subject-Token
+
+
+# Maximum cache age of CORS preflight requests. (integer value)
+#max_age = 3600
+
+
+
+# Indicate which methods can be used during the actual request. (list value)
+#allow_methods = GET,PUT,POST,DELETE,PATCH
+
+
+# Indicate which header field names may be used during the actual request.
+# (list value)
+#allow_headers = X-Auth-Token,X-Openstack-Request-Id,X-Subject-Token,X-Project-Id,X-Project-Name,X-Project-Domain-Id,X-Project-Domain-Name,X-Domain-Id,X-Domain-Name
+
+
+
+[cors.subdomain]
 
 #
 # From oslo.middleware
@@ -638,17 +704,25 @@
 # of keys should be managed separately and require different rotation policies.
 # Do not share this repository with the repository used to manage keys for
 # Fernet tokens. (string value)
-#key_repository = /etc/keystone/credential-keys/
+key_repository = /var/lib/keystone/credential-keys
 
 
 [database]
-connection = sqlite:////var/lib/keystone/keystone.db
 
 #
 # From oslo.db
 #
 
+# DEPRECATED: The file name to use with SQLite. (string value)
+# Deprecated group/name - [DEFAULT]/sqlite_db
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Should use config option connection or slave_connection to connect
+# the database.
+#sqlite_db = oslo.sqlite
+
 # If True, SQLite uses synchronous mode. (boolean value)
+# Deprecated group/name - [DEFAULT]/sqlite_synchronous
 #sqlite_synchronous = true
 
 # The back end to use for the database. (string value)
@@ -661,6 +735,7 @@
 # Deprecated group/name - [DATABASE]/sql_connection
 # Deprecated group/name - [sql]/connection
 #connection = <None>
+connection=mysql+pymysql://keystone:opnfv_secret@192.168.10.23/keystone
 
 # The SQLAlchemy connection string to use to connect to the slave database.
 # (string value)
@@ -672,15 +747,12 @@
 # (string value)
 #mysql_sql_mode = TRADITIONAL
 
-# If True, transparently enables support for handling MySQL Cluster (NDB).
-# (boolean value)
-#mysql_enable_ndb = false
-
 # Timeout before idle SQL connections are reaped. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_idle_timeout
 # Deprecated group/name - [DATABASE]/sql_idle_timeout
 # Deprecated group/name - [sql]/idle_timeout
 #idle_timeout = 3600
+idle_timeout = 3600
 
 # Minimum number of SQL connections to keep open in a pool. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_min_pool_size
@@ -692,6 +764,9 @@
 # Deprecated group/name - [DEFAULT]/sql_max_pool_size
 # Deprecated group/name - [DATABASE]/sql_max_pool_size
 #max_pool_size = 5
+max_pool_size=10
+max_overflow=30
+max_retries=-1
 
 # Maximum number of database connection retries during startup. Set to -1 to
 # specify an infinite retry count. (integer value)
@@ -805,7 +880,7 @@
 #
 
 # DEPRECATED: The IP address of the network interface for the public service to
-# listen on. (unknown value)
+# listen on. (string value)
 # Deprecated group/name - [DEFAULT]/bind_host
 # Deprecated group/name - [DEFAULT]/public_bind_host
 # This option is deprecated for removal since K.
@@ -814,6 +889,7 @@
 # Newton release. These options remain for backwards compatibility because they
 # are used for URL substitutions.
 #public_bind_host = 0.0.0.0
+public_bind_host=192.168.10.38
 
 # DEPRECATED: The port number for the public service to listen on. (port value)
 # Minimum value: 0
@@ -825,9 +901,10 @@
 # Newton release. These options remain for backwards compatibility because they
 # are used for URL substitutions.
 #public_port = 5000
+public_port = 5000
 
 # DEPRECATED: The IP address of the network interface for the admin service to
-# listen on. (unknown value)
+# listen on. (string value)
 # Deprecated group/name - [DEFAULT]/bind_host
 # Deprecated group/name - [DEFAULT]/admin_bind_host
 # This option is deprecated for removal since K.
@@ -836,6 +913,7 @@
 # Newton release. These options remain for backwards compatibility because they
 # are used for URL substitutions.
 #admin_bind_host = 0.0.0.0
+admin_bind_host=192.168.10.38
 
 # DEPRECATED: The port number for the admin service to listen on. (port value)
 # Minimum value: 0
@@ -847,7 +925,17 @@
 # Newton release. These options remain for backwards compatibility because they
 # are used for URL substitutions.
 #admin_port = 35357
-
+admin_port = 35357
+
+
+[extra_headers]
+
+#
+# From keystone
+#
+
+# Specifies the distribution of the keystone server. (string value)
+#Distribution = Ubuntu
 
 [federation]
 
@@ -866,7 +954,7 @@
 #assertion_prefix =
 
 # Value to be used to obtain the entity ID of the Identity Provider from the
-# environment. For `mod_shib`, this would be `Shib-Identity-Provider`. For
+# environment. For `mod_shib`, this would be `Shib-Identity-Provider`. For For
 # `mod_auth_openidc`, this could be `HTTP_OIDC_ISS`. For `mod_auth_mellon`,
 # this could be `MELLON_IDP`. (string value)
 #remote_id_attribute = <None>
@@ -924,6 +1012,7 @@
 # other nodes will result in tokens that can not be validated by all nodes.
 # (string value)
 #key_repository = /etc/keystone/fernet-keys/
+key_repository = /var/lib/keystone/fernet-keys
 
 # This controls how many keys are held in rotation by `keystone-manage
 # fernet_rotate` before they are discarded. The default value of 3 means that
@@ -933,7 +1022,7 @@
 # the rotation. (integer value)
 # Minimum value: 1
 #max_active_keys = 3
-
+max_active_keys=3
 
 [healthcheck]
 
@@ -1010,6 +1099,7 @@
 # deployment primarily relies on `ldap` AND is not using domain-specific
 # configuration, you should typically leave this set to `sql`. (string value)
 #driver = sql
+driver = sql
 
 # Toggle for identity caching. This has no effect unless global caching is
 # enabled. There is typically no reason to disable this. (boolean value)
@@ -1028,52 +1118,6 @@
 # Maximum number of entities that will be returned in an identity collection.
 # (integer value)
 #list_limit = <None>
-
-# The password hashing algorithm to use for passwords stored within keystone.
-# (string value)
-# Allowed values: bcrypt, scrypt, pbkdf2_sha512
-#password_hash_algorithm = bcrypt
-
-# This option represents a trade off between security and performance. Higher
-# values lead to slower performance, but higher security. Changing this option
-# will only affect newly created passwords as existing password hashes already
-# have a fixed number of rounds applied, so it is safe to tune this option in a
-# running cluster.  The default for bcrypt is 12, must be between 4 and 31,
-# inclusive.  The default for scrypt is 16, must be within `range(1,32)`.  The
-# default for pbkdf_sha512 is 60000, must be within `range(1,1<<32)`  WARNING:
-# If using scrypt, increasing this value increases BOTH time AND memory
-# requirements to hash a password. (integer value)
-#password_hash_rounds = <None>
-
-# Optional block size to pass to scrypt hash function (the `r` parameter).
-# Useful for tuning scrypt to optimal performance for your CPU architecture.
-# This option is only used when the `password_hash_algorithm` option is set to
-# `scrypt`. Defaults to 8. (integer value)
-#scrypt_block_size = <None>
-
-# Optional parallelism to pass to scrypt hash function (the `p` parameter).
-# This option is only used when the `password_hash_algorithm` option is set to
-# `scrypt`. Defaults to 1. (integer value)
-#scrypt_parallelism = <None>
-
-# Number of bytes to use in scrypt and pbkfd2_sha512 hashing salt.  Default for
-# scrypt is 16 bytes. Default for pbkfd2_sha512 is 16 bytes.  Limited to a
-# maximum of 96 bytes due to the size of the column used to store password
-# hashes. (integer value)
-# Minimum value: 0
-# Maximum value: 96
-#salt_bytesize = <None>
-
-# This option tells keystone to continue to hash passwords with the
-# sha512_crypt algorithm for supporting rolling upgrades. sha512_crypt is
-# typically more insecure than bcrypt, pbkdf2, and scrypt. This option should
-# be set to `False` except in the case of performing a rolling upgrade where
-# some Keystone servers may not know how to verify non-sha512_crypt based
-# password hashes.  This option will be removed in the Queens release and is
-# only to support rolling upgrades from Ocata release to Pike release. (boolean
-# value)
-#rolling_upgrade_password_hash_compat = false
-
 
 [identity_mapping]
 
@@ -1113,6 +1157,56 @@
 #backward_compatible_ids = true
 
 
+[kvs]
+
+#
+# From keystone
+#
+
+# DEPRECATED: Extra `dogpile.cache` backend modules to register with the
+# `dogpile.cache` library. It is not necessary to set this value unless you are
+# providing a custom KVS backend beyond what `dogpile.cache` already supports.
+# (list value)
+# This option is deprecated for removal since O.
+# Its value may be silently ignored in the future.
+# Reason: This option has been deprecated in the O release and will be removed
+# in the P release. Use SQL backends instead.
+#backends =
+
+# DEPRECATED: Prefix for building the configuration dictionary for the KVS
+# region. This should not need to be changed unless there is another
+# `dogpile.cache` region with the same configuration name. (string value)
+# This option is deprecated for removal since O.
+# Its value may be silently ignored in the future.
+# Reason: This option has been deprecated in the O release and will be removed
+# in the P release. Use SQL backends instead.
+#config_prefix = keystone.kvs
+
+# DEPRECATED: Set to false to disable using a key-mangling function, which
+# ensures fixed-length keys are used in the KVS store. This is configurable for
+# debugging purposes, and it is therefore highly recommended to always leave
+# this set to true. (boolean value)
+# This option is deprecated for removal since O.
+# Its value may be silently ignored in the future.
+# Reason: This option has been deprecated in the O release and will be removed
+# in the P release. Use SQL backends instead.
+#enable_key_mangler = true
+
+# DEPRECATED: Number of seconds after acquiring a distributed lock that the
+# backend should consider the lock to be expired. This option should be tuned
+# relative to the longest amount of time that it takes to perform a successful
+# operation. If this value is set too low, then a cluster will end up
+# performing work redundantly. If this value is set too high, then a cluster
+# will not be able to efficiently recover and retry after a failed operation. A
+# non-zero value is recommended if the backend supports lock timeouts, as zero
+# prevents locks from expiring altogether. (integer value)
+# Minimum value: 0
+# This option is deprecated for removal since O.
+# Its value may be silently ignored in the future.
+# Reason: This option has been deprecated in the O release and will be removed
+# in the P release. Use SQL backends instead.
+#default_lock_timeout = 5
+
 [ldap]
 
 #
@@ -1444,6 +1538,21 @@
 # From keystone
 #
 
+# DEPRECATED: Comma-separated list of memcached servers in the format of
+# `host:port,host:port` that keystone should use for the `memcache` token
+# persistence provider and other memcache-backed KVS drivers. This
+# configuration value is NOT used for intermediary caching between keystone and
+# other backends, such as SQL and LDAP (for that, see the `[cache]` section).
+# Multiple keystone servers in the same deployment should use the same set of
+# memcached servers to ensure that data (such as UUID tokens) created by one
+# node is available to the others. (list value)
+# This option is deprecated for removal since O.
+# Its value may be silently ignored in the future.
+# Reason: This option has been deprecated in the O release and will be removed
+# in the P release. Use oslo.cache instead.
+#servers = localhost:11211
+servers =192.168.10.36:11211,192.168.10.37:11211,192.168.10.38:11211
+
 # Number of seconds memcached server is considered dead before it is tried
 # again. This is used by the key value store system. (integer value)
 #dead_retry = 300
@@ -1499,72 +1608,61 @@
 
 # Name for the AMQP container. must be globally unique. Defaults to a generated
 # UUID (string value)
+# Deprecated group/name - [amqp1]/container_name
 #container_name = <None>
 
 # Timeout for inactive connections (in seconds) (integer value)
+# Deprecated group/name - [amqp1]/idle_timeout
 #idle_timeout = 0
 
 # Debug: dump AMQP frames to stdout (boolean value)
+# Deprecated group/name - [amqp1]/trace
 #trace = false
 
-# Attempt to connect via SSL. If no other ssl-related parameters are given, it
-# will use the system's CA-bundle to verify the server's certificate. (boolean
-# value)
-#ssl = false
-
 # CA certificate PEM file used to verify the server's certificate (string
 # value)
+# Deprecated group/name - [amqp1]/ssl_ca_file
 #ssl_ca_file =
 
 # Self-identifying certificate PEM file for client authentication (string
 # value)
+# Deprecated group/name - [amqp1]/ssl_cert_file
 #ssl_cert_file =
 
 # Private key PEM file used to sign ssl_cert_file certificate (optional)
 # (string value)
+# Deprecated group/name - [amqp1]/ssl_key_file
 #ssl_key_file =
 
 # Password for decrypting ssl_key_file (if encrypted) (string value)
+# Deprecated group/name - [amqp1]/ssl_key_password
 #ssl_key_password = <None>
 
-# By default SSL checks that the name in the server's certificate matches the
-# hostname in the transport_url. In some configurations it may be preferable to
-# use the virtual hostname instead, for example if the server uses the Server
-# Name Indication TLS extension (rfc6066) to provide a certificate per virtual
-# host. Set ssl_verify_vhost to True if the server's SSL certificate uses the
-# virtual host name instead of the DNS name. (boolean value)
-#ssl_verify_vhost = false
-
 # DEPRECATED: Accept clients using either SSL or plain TCP (boolean value)
+# Deprecated group/name - [amqp1]/allow_insecure_clients
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Not applicable - not a SSL server
 #allow_insecure_clients = false
 
 # Space separated list of acceptable SASL mechanisms (string value)
+# Deprecated group/name - [amqp1]/sasl_mechanisms
 #sasl_mechanisms =
 
 # Path to directory that contains the SASL configuration (string value)
+# Deprecated group/name - [amqp1]/sasl_config_dir
 #sasl_config_dir =
 
 # Name of configuration file (without .conf suffix) (string value)
+# Deprecated group/name - [amqp1]/sasl_config_name
 #sasl_config_name =
 
-# SASL realm to use if no realm present in username (string value)
-#sasl_default_realm =
-
-# DEPRECATED: User name for message broker authentication (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the
-# username.
+# User name for message broker authentication (string value)
+# Deprecated group/name - [amqp1]/username
 #username =
 
-# DEPRECATED: Password for message broker authentication (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the
-# password.
+# Password for message broker authentication (string value)
+# Deprecated group/name - [amqp1]/password
 #password =
 
 # Seconds to pause before attempting to re-connect. (integer value)
@@ -1618,21 +1716,16 @@
 # otherwise use routable addressing (string value)
 #addressing_mode = dynamic
 
-# Enable virtual host support for those message buses that do not natively
-# support virtual hosting (such as qpidd). When set to true the virtual host
-# name will be added to all message bus addresses, effectively creating a
-# private 'subnet' per virtual host. Set to False if the message bus supports
-# virtual hosting using the 'hostname' field in the AMQP 1.0 Open performative
-# as the name of the virtual host. (boolean value)
-#pseudo_vhost = true
-
 # address prefix used when sending to a specific server (string value)
+# Deprecated group/name - [amqp1]/server_request_prefix
 #server_request_prefix = exclusive
 
 # address prefix used when broadcasting to all servers (string value)
+# Deprecated group/name - [amqp1]/broadcast_prefix
 #broadcast_prefix = broadcast
 
 # address prefix when sending to any server in group (string value)
+# Deprecated group/name - [amqp1]/group_request_prefix
 #group_request_prefix = unicast
 
 # Address prefix for all generated RPC addresses (string value)
@@ -1720,7 +1813,7 @@
 # Max fetch bytes of Kafka consumer (integer value)
 #kafka_max_fetch_bytes = 1048576
 
-# Default timeout(s) for Kafka consumers (floating point value)
+# Default timeout(s) for Kafka consumers (integer value)
 #kafka_consumer_timeout = 1.0
 
 # Pool Size for Kafka Consumers (integer value)
@@ -1754,6 +1847,7 @@
 # messaging, messagingv2, routing, log, test, noop (multi valued)
 # Deprecated group/name - [DEFAULT]/notification_driver
 #driver =
+driver=messagingv2
 
 # A URL representing the messaging driver to use for notifications. If not set,
 # we fall back to the same configuration used for RPC. (string value)
@@ -1765,11 +1859,6 @@
 # Deprecated group/name - [DEFAULT]/notification_topics
 #topics = notifications
 
-# The maximum number of attempts to re-send a notification message which failed
-# to be delivered due to a recoverable error. 0 - No retry, -1 - indefinite
-# (integer value)
-#retry = -1
-
 
 [oslo_messaging_rabbit]
 
@@ -1783,31 +1872,30 @@
 #amqp_durable_queues = false
 
 # Auto-delete queues in AMQP. (boolean value)
+# Deprecated group/name - [DEFAULT]/amqp_auto_delete
 #amqp_auto_delete = false
-
-# Enable SSL (boolean value)
-#ssl = <None>
 
 # SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and
 # SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some
 # distributions. (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_version
-#ssl_version =
+# Deprecated group/name - [DEFAULT]/kombu_ssl_version
+#kombu_ssl_version =
 
 # SSL key file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_keyfile
-#ssl_key_file =
+# Deprecated group/name - [DEFAULT]/kombu_ssl_keyfile
+#kombu_ssl_keyfile =
 
 # SSL cert file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_certfile
-#ssl_cert_file =
+# Deprecated group/name - [DEFAULT]/kombu_ssl_certfile
+#kombu_ssl_certfile =
 
 # SSL certification authority file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_ca_certs
-#ssl_ca_file =
+# Deprecated group/name - [DEFAULT]/kombu_ssl_ca_certs
+#kombu_ssl_ca_certs =
 
 # How long to wait before reconnecting in response to an AMQP consumer cancel
 # notification. (floating point value)
+# Deprecated group/name - [DEFAULT]/kombu_reconnect_delay
 #kombu_reconnect_delay = 1.0
 
 # EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression will not
@@ -1827,6 +1915,7 @@
 
 # DEPRECATED: The RabbitMQ broker address where a single node is used. (string
 # value)
+# Deprecated group/name - [DEFAULT]/rabbit_host
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
@@ -1836,24 +1925,32 @@
 # value)
 # Minimum value: 0
 # Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/rabbit_port
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
 #rabbit_port = 5672
 
 # DEPRECATED: RabbitMQ HA cluster host:port pairs. (list value)
+# Deprecated group/name - [DEFAULT]/rabbit_hosts
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
 #rabbit_hosts = $rabbit_host:$rabbit_port
 
+# Connect over SSL for RabbitMQ. (boolean value)
+# Deprecated group/name - [DEFAULT]/rabbit_use_ssl
+#rabbit_use_ssl = false
+
 # DEPRECATED: The RabbitMQ userid. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_userid
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
 #rabbit_userid = guest
 
 # DEPRECATED: The RabbitMQ password. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_password
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
@@ -1861,9 +1958,11 @@
 
 # The RabbitMQ login method. (string value)
 # Allowed values: PLAIN, AMQPLAIN, RABBIT-CR-DEMO
+# Deprecated group/name - [DEFAULT]/rabbit_login_method
 #rabbit_login_method = AMQPLAIN
 
 # DEPRECATED: The RabbitMQ virtual host. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_virtual_host
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
@@ -1874,6 +1973,7 @@
 
 # How long to backoff for between retries when connecting to RabbitMQ. (integer
 # value)
+# Deprecated group/name - [DEFAULT]/rabbit_retry_backoff
 #rabbit_retry_backoff = 2
 
 # Maximum interval of RabbitMQ connection retries. Default is 30 seconds.
@@ -1882,6 +1982,7 @@
 
 # DEPRECATED: Maximum number of RabbitMQ connection retries. Default is 0
 # (infinite retry count). (integer value)
+# Deprecated group/name - [DEFAULT]/rabbit_max_retries
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 #rabbit_max_retries = 0
@@ -1892,6 +1993,7 @@
 # If you just want to make sure that all queues (except those with auto-
 # generated names) are mirrored across all nodes, run: "rabbitmqctl set_policy
 # HA '^(?!amq\.).*' '{"ha-mode": "all"}' " (boolean value)
+# Deprecated group/name - [DEFAULT]/rabbit_ha_queues
 #rabbit_ha_queues = false
 
 # Positive integer representing duration in seconds for queue TTL (x-expires).
@@ -1902,18 +2004,21 @@
 
 # Specifies the number of messages to prefetch. Setting to zero allows
 # unlimited messages. (integer value)
-#rabbit_qos_prefetch_count = 64
+#rabbit_qos_prefetch_count = 0
 
 # Number of seconds after which the Rabbit broker is considered down if
 # heartbeat's keep-alive fails (0 disable the heartbeat). EXPERIMENTAL (integer
 # value)
 #heartbeat_timeout_threshold = 60
+heartbeat_timeout_threshold = 0
 
 # How often times during the heartbeat_timeout_threshold we check the
 # heartbeat. (integer value)
 #heartbeat_rate = 2
+heartbeat_rate = 2
 
 # Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake (boolean value)
+# Deprecated group/name - [DEFAULT]/fake_rabbit
 #fake_rabbit = false
 
 # Maximum number of channels to allow (integer value)
@@ -1924,6 +2029,9 @@
 
 # How often to send heartbeats for consumer's connections (integer value)
 #heartbeat_interval = 3
+
+# Enable SSL (boolean value)
+#ssl = <None>
 
 # Arguments passed to ssl.wrap_socket (dict value)
 #ssl_options = <None>
@@ -2029,24 +2137,30 @@
 
 # ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
 # The "host" option should point or resolve to this address. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_address
 #rpc_zmq_bind_address = *
 
 # MatchMaker driver. (string value)
 # Allowed values: redis, sentinel, dummy
+# Deprecated group/name - [DEFAULT]/rpc_zmq_matchmaker
 #rpc_zmq_matchmaker = redis
 
 # Number of ZeroMQ contexts, defaults to 1. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_contexts
 #rpc_zmq_contexts = 1
 
 # Maximum number of ingress messages to locally buffer per topic. Default is
 # unlimited. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_topic_backlog
 #rpc_zmq_topic_backlog = <None>
 
 # Directory for holding IPC sockets. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_ipc_dir
 #rpc_zmq_ipc_dir = /var/run/openstack
 
 # Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
 # "host" option, if running Nova. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_host
 #rpc_zmq_host = localhost
 
 # Number of seconds to wait before all pending messages will be sent after
@@ -2059,21 +2173,26 @@
 
 # The default number of seconds that poll should wait. Poll raises timeout
 # exception when timeout expired. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_poll_timeout
 #rpc_poll_timeout = 1
 
 # Expiration timeout in seconds of a name service record about existing target
 # ( < 0 means no timeout). (integer value)
+# Deprecated group/name - [DEFAULT]/zmq_target_expire
 #zmq_target_expire = 300
 
 # Update period in seconds of a name service record about existing target.
 # (integer value)
+# Deprecated group/name - [DEFAULT]/zmq_target_update
 #zmq_target_update = 180
 
 # Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
 # value)
+# Deprecated group/name - [DEFAULT]/use_pub_sub
 #use_pub_sub = false
 
 # Use ROUTER remote proxy. (boolean value)
+# Deprecated group/name - [DEFAULT]/use_router_proxy
 #use_router_proxy = false
 
 # This option makes direct connections dynamic or static. It makes sense only
@@ -2088,20 +2207,24 @@
 # Minimal port number for random ports range. (port value)
 # Minimum value: 0
 # Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/rpc_zmq_min_port
 #rpc_zmq_min_port = 49153
 
 # Maximal port number for random ports range. (integer value)
 # Minimum value: 1
 # Maximum value: 65536
+# Deprecated group/name - [DEFAULT]/rpc_zmq_max_port
 #rpc_zmq_max_port = 65536
 
 # Number of retries to find free port number before fail with ZMQBindError.
 # (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_port_retries
 #rpc_zmq_bind_port_retries = 100
 
 # Default serialization mechanism for serializing/deserializing
 # outgoing/incoming messages (string value)
 # Allowed values: json, msgpack
+# Deprecated group/name - [DEFAULT]/rpc_zmq_serialization
 #rpc_zmq_serialization = json
 
 # This option configures round-robin mode in zmq socket. True means not keeping
@@ -2176,7 +2299,7 @@
 # The maximum body size for each  request, in bytes. (integer value)
 # Deprecated group/name - [DEFAULT]/osapi_max_request_body_size
 # Deprecated group/name - [DEFAULT]/max_request_body_size
-#max_request_body_size = 114688
+max_request_body_size= 114688
 
 # DEPRECATED: The HTTP Header that will be used to determine what the original
 # request protocol scheme was, even if it was hidden by a SSL termination
@@ -2197,9 +2320,11 @@
 #
 
 # The file that defines policies. (string value)
+# Deprecated group/name - [DEFAULT]/policy_file
 #policy_file = policy.json
 
 # Default rule. Enforced when a requested rule is not found. (string value)
+# Deprecated group/name - [DEFAULT]/policy_default_rule
 #policy_default_rule = default
 
 # Directories where policy configuration files are stored. They can be relative
@@ -2207,6 +2332,7 @@
 # absolute paths. The file defined by policy_file must exist for these
 # directories to be searched.  Missing or empty directories are ignored. (multi
 # valued)
+# Deprecated group/name - [DEFAULT]/policy_dirs
 #policy_dirs = policy.d
 
 
@@ -2233,7 +2359,11 @@
 # Supplied drivers are `rules` (which does not support any CRUD operations for
 # the v3 policy API) and `sql`. Typically, there is no reason to set this
 # option unless you are providing a custom entry point. (string value)
-#driver = sql
+driver = sql
+#
+# Explicit defintion of the driver is depricated
+#
+#driver = keystone.policy.backends.sql.Policy
 
 # Maximum number of entities that will be returned in a policy collection.
 # (integer value)
@@ -2344,15 +2474,10 @@
 # From keystone
 #
 
-# DEPRECATED: Entry point for the resource driver in the `keystone.resource`
-# namespace. Only a `sql` driver is supplied by keystone. Unless you are
-# writing proprietary drivers for keystone, you do not need to set this option.
-# (string value)
-# This option is deprecated for removal since P.
-# Its value may be silently ignored in the future.
-# Reason: Non-SQL resource cannot be used with SQL Identity and has been unable
-# to be used since Ocata. SQL Resource backend is a requirement as of Pike.
-# Setting this option no longer has an effect on how Keystone operates.
+# Entry point for the resource driver in the `keystone.resource` namespace.
+# Only a `sql` driver is supplied by keystone. Unless you are writing
+# proprietary drivers for keystone, you do not need to set this option. (string
+# value)
 #driver = sql
 
 # Toggle for resource caching. This has no effect unless global caching is
@@ -2585,6 +2710,20 @@
 # `[identity] driver`. (integer value)
 # Minimum value: 1
 #password_expires_days = <None>
+
+# DEPRECATED: Comma separated list of user IDs to be ignored when checking if a
+# password is expired. Passwords for users in this list will not expire. This
+# feature will only be enabled if `[security_compliance] password_expires_days`
+# is set. (list value)
+# This option is deprecated for removal since O.
+# Its value may be silently ignored in the future.
+# Reason: Functionality added as a per-user option "ignore_password_expiry" in
+# Ocata. Each user that should ignore password expiry should have the value set
+# to "true" in the user's `options` attribute (e.g.
+# `user['options']['ignore_password_expiry'] = True`) with an "update_user"
+# call. This avoids the need to restart keystone to adjust the users that
+# ignore password expiry. This option will be removed in the Pike release.
+#password_expires_ignore_user_ids =
 
 # This controls the number of previous user password iterations to keep in
 # history, in order to enforce that newly created passwords are unique. Setting
@@ -2650,82 +2789,51 @@
 # From keystone
 #
 
-# DEPRECATED: Absolute path to the public certificate file to use for signing
-# responses to revocation lists requests. Set this together with `[signing]
-# keyfile`. For non-production environments, you may be interested in using
-# `keystone-manage pki_setup` to generate self-signed certificates. (string
-# value)
-# This option is deprecated for removal since P.
-# Its value may be silently ignored in the future.
-# Reason: `keystone-manage pki_setup` was deprecated in Mitaka and removed in
-# Pike. These options remain for backwards compatibility.
+# Absolute path to the public certificate file to use for signing responses to
+# revocation lists requests. Set this together with `[signing] keyfile`. For
+# non-production environments, you may be interested in using `keystone-manage
+# pki_setup` to generate self-signed certificates. (string value)
 #certfile = /etc/keystone/ssl/certs/signing_cert.pem
 
-# DEPRECATED: Absolute path to the private key file to use for signing
-# responses to revocation lists requests. Set this together with `[signing]
-# certfile`. (string value)
-# This option is deprecated for removal since P.
-# Its value may be silently ignored in the future.
-# Reason: `keystone-manage pki_setup` was deprecated in Mitaka and removed in
-# Pike. These options remain for backwards compatibility.
+# Absolute path to the private key file to use for signing responses to
+# revocation lists requests. Set this together with `[signing] certfile`.
+# (string value)
 #keyfile = /etc/keystone/ssl/private/signing_key.pem
 
-# DEPRECATED: Absolute path to the public certificate authority (CA) file to
-# use when creating self-signed certificates with `keystone-manage pki_setup`.
-# Set this together with `[signing] ca_key`. There is no reason to set this
-# option unless you are requesting revocation lists in a non-production
-# environment. Use a `[signing] certfile` issued from a trusted certificate
-# authority instead. (string value)
-# This option is deprecated for removal since P.
-# Its value may be silently ignored in the future.
-# Reason: `keystone-manage pki_setup` was deprecated in Mitaka and removed in
-# Pike. These options remain for backwards compatibility.
+# Absolute path to the public certificate authority (CA) file to use when
+# creating self-signed certificates with `keystone-manage pki_setup`. Set this
+# together with `[signing] ca_key`. There is no reason to set this option
+# unless you are requesting revocation lists in a non-production environment.
+# Use a `[signing] certfile` issued from a trusted certificate authority
+# instead. (string value)
 #ca_certs = /etc/keystone/ssl/certs/ca.pem
 
-# DEPRECATED: Absolute path to the private certificate authority (CA) key file
-# to use when creating self-signed certificates with `keystone-manage
-# pki_setup`. Set this together with `[signing] ca_certs`. There is no reason
-# to set this option unless you are requesting revocation lists in a non-
-# production environment. Use a `[signing] certfile` issued from a trusted
-# certificate authority instead. (string value)
-# This option is deprecated for removal since P.
-# Its value may be silently ignored in the future.
-# Reason: `keystone-manage pki_setup` was deprecated in Mitaka and removed in
-# Pike. These options remain for backwards compatibility.
+# Absolute path to the private certificate authority (CA) key file to use when
+# creating self-signed certificates with `keystone-manage pki_setup`. Set this
+# together with `[signing] ca_certs`. There is no reason to set this option
+# unless you are requesting revocation lists in a non-production environment.
+# Use a `[signing] certfile` issued from a trusted certificate authority
+# instead. (string value)
 #ca_key = /etc/keystone/ssl/private/cakey.pem
 
-# DEPRECATED: Key size (in bits) to use when generating a self-signed token
+# Key size (in bits) to use when generating a self-signed token signing
+# certificate. There is no reason to set this option unless you are requesting
+# revocation lists in a non-production environment. Use a `[signing] certfile`
+# issued from a trusted certificate authority instead. (integer value)
+# Minimum value: 1024
+#key_size = 2048
+
+# The validity period (in days) to use when generating a self-signed token
 # signing certificate. There is no reason to set this option unless you are
 # requesting revocation lists in a non-production environment. Use a `[signing]
 # certfile` issued from a trusted certificate authority instead. (integer
 # value)
-# Minimum value: 1024
-# This option is deprecated for removal since P.
-# Its value may be silently ignored in the future.
-# Reason: `keystone-manage pki_setup` was deprecated in Mitaka and removed in
-# Pike. These options remain for backwards compatibility.
-#key_size = 2048
-
-# DEPRECATED: The validity period (in days) to use when generating a self-
-# signed token signing certificate. There is no reason to set this option
-# unless you are requesting revocation lists in a non-production environment.
-# Use a `[signing] certfile` issued from a trusted certificate authority
-# instead. (integer value)
-# This option is deprecated for removal since P.
-# Its value may be silently ignored in the future.
-# Reason: `keystone-manage pki_setup` was deprecated in Mitaka and removed in
-# Pike. These options remain for backwards compatibility.
 #valid_days = 3650
 
-# DEPRECATED: The certificate subject to use when generating a self-signed
-# token signing certificate. There is no reason to set this option unless you
-# are requesting revocation lists in a non-production environment. Use a
-# `[signing] certfile` issued from a trusted certificate authority instead.
-# (string value)
-# This option is deprecated for removal since P.
-# Its value may be silently ignored in the future.
-# Reason: `keystone-manage pki_setup` was deprecated in Mitaka and removed in
-# Pike. These options remain for backwards compatibility.
+# The certificate subject to use when generating a self-signed token signing
+# certificate. There is no reason to set this option unless you are requesting
+# revocation lists in a non-production environment. Use a `[signing] certfile`
+# issued from a trusted certificate authority instead. (string value)
 #cert_subject = /C=US/ST=Unset/L=Unset/O=Unset/CN=www.example.com
 
 
@@ -2740,18 +2848,16 @@
 # enforced according to the `[token] enforce_token_bind` option. (list value)
 #bind =
 
-# DEPRECATED: This controls the token binding enforcement policy on tokens
-# presented to keystone with token binding metadata (as specified by the
-# `[token] bind` option). `disabled` completely bypasses token binding
-# validation. `permissive` and `strict` do not require tokens to have binding
-# metadata (but will validate it if present), whereas `required` will always
-# demand tokens to having binding metadata. `permissive` will allow unsupported
-# binding metadata to pass through without validation (usually to be validated
-# at another time by another component), whereas `strict` and `required` will
-# demand that the included binding metadata be supported by keystone. (string
-# value)
-# This option is deprecated for removal since P.
-# Its value may be silently ignored in the future.
+# This controls the token binding enforcement policy on tokens presented to
+# keystone with token binding metadata (as specified by the `[token] bind`
+# option). `disabled` completely bypasses token binding validation.
+# `permissive` and `strict` do not require tokens to have binding metadata (but
+# will validate it if present), whereas `required` will always demand tokens to
+# having binding metadata. `permissive` will allow unsupported binding metadata
+# to pass through without validation (usually to be validated at another time
+# by another component), whereas `strict` and `required` will demand that the
+# included binding metadata be supported by keystone. (string value)
+# Allowed values: disabled, permissive, strict, required
 #enforce_token_bind = permissive
 
 # The amount of time that a token should remain valid (in seconds). Drastically
@@ -2764,6 +2870,7 @@
 # Minimum value: 0
 # Maximum value: 9223372036854775807
 #expiration = 3600
+expiration = 3600
 
 # Entry point for the token provider in the `keystone.token.provider`
 # namespace. The token provider controls the token construction, validation,
@@ -2773,20 +2880,25 @@
 # setup. `fernet` tokens do not need to be persisted at all, but require that
 # you run `keystone-manage fernet_setup` (also see the `keystone-manage
 # fernet_rotate` command). (string value)
-#provider = fernet
-
-# DEPRECATED: Entry point for the token persistence backend driver in the
-# `keystone.token.persistence` namespace. Keystone provides the `sql` driver.
-# The `sql` option (default) depends on the options in your `[database]`
-# section. If you're using the `fernet` `[token] provider`, this backend will
-# not be utilized to persist tokens at all. (string value)
-# This option is deprecated for removal since P.
-# Its value may be silently ignored in the future.
+
+provider = fernet
+
+# Depricated since previous version
+#provider = keystone.token.providers.fernet.Provider
+
+# Entry point for the token persistence backend driver in the
+# `keystone.token.persistence` namespace. Keystone provides `kvs` and `sql`
+# drivers. The `kvs` backend depends on the configuration in the `[kvs]`
+# section. The `sql` option (default) depends on the options in your
+# `[database]` section. If you're using the `fernet` `[token] provider`, this
+# backend will not be utilized to persist tokens at all. (string value)
 #driver = sql
+driver = keystone.token.persistence.backends.memcache_pool.Token
 
 # Toggle for caching token creation and validation data. This has no effect
 # unless global caching is enabled. (boolean value)
 #caching = true
+caching = false
 
 # The number of seconds to cache token creation and validation data. This has
 # no effect unless both global and `[token] caching` are enabled. (integer
@@ -2801,8 +2913,9 @@
 # of tokens to consider revoked. Do not disable this option if you're using the
 # `kvs` `[revoke] driver`. (boolean value)
 #revoke_by_id = true
-
-# This toggles whether scoped tokens may be re-scoped to a new project or
+revoke_by_id = False
+
+# This toggles whether scoped tokens may be be re-scoped to a new project or
 # domain, thereby preventing users from exchanging a scoped token (including
 # those with a default project scope) for any other token. This forces users to
 # either authenticate for unscoped tokens (and later exchange that unscoped
@@ -2827,6 +2940,7 @@
 # Defaults to two days. (integer value)
 #allow_expired_window = 172800
 
+hash_algorithm = sha256
 
 [tokenless_auth]
 
@@ -2883,3 +2997,7 @@
 # Keystone only provides a `sql` driver, so there is no reason to change this
 # unless you are providing a custom entry point. (string value)
 #driver = sql
+[extra_headers]
+Distribution = Ubuntu
+
+

2018-06-01 03:13:56,288 [salt.state       ][INFO    ][23711] Completed state [/etc/keystone/keystone.conf] at time 03:13:56.288336 duration_in_ms=230.466
2018-06-01 03:13:56,288 [salt.state       ][INFO    ][23711] Running state [/etc/apache2/sites-enabled/keystone.conf] at time 03:13:56.288599
2018-06-01 03:13:56,288 [salt.state       ][INFO    ][23711] Executing state file.absent for /etc/apache2/sites-enabled/keystone.conf
2018-06-01 03:13:56,289 [salt.state       ][INFO    ][23711] {'removed': '/etc/apache2/sites-enabled/keystone.conf'}
2018-06-01 03:13:56,289 [salt.state       ][INFO    ][23711] Completed state [/etc/apache2/sites-enabled/keystone.conf] at time 03:13:56.289375 duration_in_ms=0.776
2018-06-01 03:13:56,289 [salt.state       ][INFO    ][23711] Running state [/etc/apache2/sites-enabled/wsgi-keystone.conf] at time 03:13:56.289602
2018-06-01 03:13:56,289 [salt.state       ][INFO    ][23711] Executing state file.absent for /etc/apache2/sites-enabled/wsgi-keystone.conf
2018-06-01 03:13:56,290 [salt.state       ][INFO    ][23711] File /etc/apache2/sites-enabled/wsgi-keystone.conf is not present
2018-06-01 03:13:56,290 [salt.state       ][INFO    ][23711] Completed state [/etc/apache2/sites-enabled/wsgi-keystone.conf] at time 03:13:56.290301 duration_in_ms=0.699
2018-06-01 03:13:56,290 [salt.state       ][INFO    ][23711] Running state [/etc/apache2/sites-available/keystone_wsgi.conf] at time 03:13:56.290801
2018-06-01 03:13:56,291 [salt.state       ][INFO    ][23711] Executing state file.managed for /etc/apache2/sites-available/keystone_wsgi.conf
2018-06-01 03:13:56,322 [salt.fileclient  ][INFO    ][23711] Fetching file from saltenv 'base', ** done ** 'keystone/files/apache.conf'
2018-06-01 03:13:56,390 [salt.fileclient  ][INFO    ][23711] Fetching file from saltenv 'base', ** done ** 'keystone/files/pike/wsgi-keystone.conf'
2018-06-01 03:13:56,472 [salt.fileclient  ][INFO    ][23711] Fetching file from saltenv 'base', ** done ** 'apache/files/_name.conf'
2018-06-01 03:13:56,538 [salt.fileclient  ][INFO    ][23711] Fetching file from saltenv 'base', ** done ** 'apache/files/_core.conf'
2018-06-01 03:13:56,564 [salt.fileclient  ][INFO    ][23711] Fetching file from saltenv 'base', ** done ** 'apache/files/_ssl.conf'
2018-06-01 03:13:56,609 [salt.fileclient  ][INFO    ][23711] Fetching file from saltenv 'base', ** done ** 'apache/files/_locations.conf'
2018-06-01 03:13:56,646 [salt.fileclient  ][INFO    ][23711] Fetching file from saltenv 'base', ** done ** 'apache/files/_log.conf'
2018-06-01 03:13:56,660 [salt.state       ][INFO    ][23711] File changed:
New file
2018-06-01 03:13:56,660 [salt.state       ][INFO    ][23711] Completed state [/etc/apache2/sites-available/keystone_wsgi.conf] at time 03:13:56.660825 duration_in_ms=370.024
2018-06-01 03:13:56,661 [salt.state       ][INFO    ][23711] Running state [/etc/apache2/sites-enabled/keystone_wsgi.conf] at time 03:13:56.661362
2018-06-01 03:13:56,661 [salt.state       ][INFO    ][23711] Executing state file.symlink for /etc/apache2/sites-enabled/keystone_wsgi.conf
2018-06-01 03:13:56,663 [salt.state       ][INFO    ][23711] {'new': '/etc/apache2/sites-enabled/keystone_wsgi.conf'}
2018-06-01 03:13:56,663 [salt.state       ][INFO    ][23711] Completed state [/etc/apache2/sites-enabled/keystone_wsgi.conf] at time 03:13:56.663418 duration_in_ms=2.056
2018-06-01 03:13:56,666 [salt.state       ][INFO    ][23711] Running state [apache2] at time 03:13:56.666716
2018-06-01 03:13:56,666 [salt.state       ][INFO    ][23711] Executing state service.running for apache2
2018-06-01 03:13:56,667 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command ['systemctl', 'status', 'apache2.service', '-n', '0'] in directory '/root'
2018-06-01 03:13:56,691 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-06-01 03:13:56,716 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-06-01 03:13:56,741 [salt.state       ][INFO    ][23711] The service apache2 is already running
2018-06-01 03:13:56,742 [salt.state       ][INFO    ][23711] Completed state [apache2] at time 03:13:56.742578 duration_in_ms=75.855
2018-06-01 03:13:56,743 [salt.state       ][INFO    ][23711] Running state [apache2] at time 03:13:56.743247
2018-06-01 03:13:56,744 [salt.state       ][INFO    ][23711] Executing state service.mod_watch for apache2
2018-06-01 03:13:56,745 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-06-01 03:13:56,764 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-06-01 03:13:56,789 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command ['systemd-run', '--scope', 'systemctl', 'reload', 'apache2.service'] in directory '/root'
2018-06-01 03:13:56,981 [salt.state       ][INFO    ][23711] {'apache2': True}
2018-06-01 03:13:56,981 [salt.state       ][INFO    ][23711] Completed state [apache2] at time 03:13:56.981504 duration_in_ms=238.257
2018-06-01 03:13:56,982 [salt.state       ][INFO    ][23711] Running state [/etc/apache2/conf-enabled/security.conf] at time 03:13:56.982882
2018-06-01 03:13:56,983 [salt.state       ][INFO    ][23711] Executing state file.symlink for /etc/apache2/conf-enabled/security.conf
2018-06-01 03:13:56,986 [salt.state       ][INFO    ][23711] {'new': '/etc/apache2/conf-enabled/security.conf'}
2018-06-01 03:13:56,987 [salt.state       ][INFO    ][23711] Completed state [/etc/apache2/conf-enabled/security.conf] at time 03:13:56.986981 duration_in_ms=4.099
2018-06-01 03:13:56,987 [salt.state       ][INFO    ][23711] Running state [/etc/apache2/sites-enabled/keystone_wsgi] at time 03:13:56.987576
2018-06-01 03:13:56,988 [salt.state       ][INFO    ][23711] Executing state file.absent for /etc/apache2/sites-enabled/keystone_wsgi
2018-06-01 03:13:56,988 [salt.state       ][INFO    ][23711] File /etc/apache2/sites-enabled/keystone_wsgi is not present
2018-06-01 03:13:56,989 [salt.state       ][INFO    ][23711] Completed state [/etc/apache2/sites-enabled/keystone_wsgi] at time 03:13:56.989315 duration_in_ms=1.739
2018-06-01 03:13:56,990 [salt.state       ][INFO    ][23711] Running state [keystone] at time 03:13:56.990219
2018-06-01 03:13:56,990 [salt.state       ][INFO    ][23711] Executing state service.dead for keystone
2018-06-01 03:13:56,991 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command ['systemctl', 'status', 'keystone.service', '-n', '0'] in directory '/root'
2018-06-01 03:13:57,018 [salt.state       ][INFO    ][23711] The named service keystone is not available
2018-06-01 03:13:57,019 [salt.state       ][INFO    ][23711] Completed state [keystone] at time 03:13:57.019004 duration_in_ms=28.781
2018-06-01 03:13:57,019 [salt.state       ][INFO    ][23711] Running state [keystone] at time 03:13:57.019625
2018-06-01 03:13:57,020 [salt.state       ][INFO    ][23711] Executing state service.mod_watch for keystone
2018-06-01 03:13:57,021 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command ['systemctl', 'is-active', 'keystone.service'] in directory '/root'
2018-06-01 03:13:57,050 [salt.state       ][INFO    ][23711] Service is already stopped
2018-06-01 03:13:57,050 [salt.state       ][INFO    ][23711] Completed state [keystone] at time 03:13:57.050757 duration_in_ms=31.128
2018-06-01 03:13:57,051 [salt.state       ][INFO    ][23711] Running state [/root/keystonerc] at time 03:13:57.051944
2018-06-01 03:13:57,053 [salt.state       ][INFO    ][23711] Executing state file.managed for /root/keystonerc
2018-06-01 03:13:57,082 [salt.fileclient  ][INFO    ][23711] Fetching file from saltenv 'base', ** done ** 'keystone/files/keystonerc'
2018-06-01 03:13:57,157 [salt.state       ][INFO    ][23711] File changed:
New file
2018-06-01 03:13:57,160 [salt.state       ][INFO    ][23711] Completed state [/root/keystonerc] at time 03:13:57.160381 duration_in_ms=108.437
2018-06-01 03:13:57,161 [salt.state       ][INFO    ][23711] Running state [/root/keystonercv3] at time 03:13:57.161273
2018-06-01 03:13:57,161 [salt.state       ][INFO    ][23711] Executing state file.managed for /root/keystonercv3
2018-06-01 03:13:57,186 [salt.fileclient  ][INFO    ][23711] Fetching file from saltenv 'base', ** done ** 'keystone/files/keystonercv3'
2018-06-01 03:13:57,251 [salt.state       ][INFO    ][23711] File changed:
New file
2018-06-01 03:13:57,252 [salt.state       ][INFO    ][23711] Completed state [/root/keystonercv3] at time 03:13:57.252387 duration_in_ms=91.113
2018-06-01 03:13:57,253 [salt.state       ][INFO    ][23711] Running state [keystone-manage db_sync && sleep 1] at time 03:13:57.253249
2018-06-01 03:13:57,253 [salt.state       ][INFO    ][23711] Executing state cmd.run for keystone-manage db_sync && sleep 1
2018-06-01 03:13:57,254 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command 'keystone-manage db_sync && sleep 1' in directory '/root'
2018-06-01 03:13:58,261 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601031358241736
2018-06-01 03:13:58,280 [salt.minion      ][INFO    ][29452] Starting a new job with PID 29452
2018-06-01 03:13:58,301 [salt.minion      ][INFO    ][29452] Returning information for job: 20180601031358241736
2018-06-01 03:13:59,891 [salt.state       ][INFO    ][23711] {'pid': 29354, 'retcode': 0, 'stderr': '', 'stdout': ''}
2018-06-01 03:13:59,891 [salt.state       ][INFO    ][23711] Completed state [keystone-manage db_sync && sleep 1] at time 03:13:59.891860 duration_in_ms=2638.611
2018-06-01 03:13:59,893 [salt.state       ][INFO    ][23711] Running state [/var/lib/keystone/fernet-keys] at time 03:13:59.893881
2018-06-01 03:13:59,894 [salt.state       ][INFO    ][23711] Executing state file.directory for /var/lib/keystone/fernet-keys
2018-06-01 03:13:59,896 [salt.state       ][INFO    ][23711] Directory /var/lib/keystone/fernet-keys is in the correct state
2018-06-01 03:13:59,897 [salt.state       ][INFO    ][23711] Completed state [/var/lib/keystone/fernet-keys] at time 03:13:59.897138 duration_in_ms=3.257
2018-06-01 03:13:59,898 [salt.state       ][INFO    ][23711] Running state [keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone] at time 03:13:59.898322
2018-06-01 03:13:59,898 [salt.state       ][INFO    ][23711] Executing state cmd.run for keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone
2018-06-01 03:13:59,899 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command 'keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone' in directory '/root'
2018-06-01 03:14:01,446 [salt.state       ][INFO    ][23711] {'pid': 29567, 'retcode': 0, 'stderr': '', 'stdout': ''}
2018-06-01 03:14:01,448 [salt.state       ][INFO    ][23711] Completed state [keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone] at time 03:14:01.448455 duration_in_ms=1550.132
2018-06-01 03:14:01,450 [salt.state       ][INFO    ][23711] Running state [/var/lib/keystone/credential-keys] at time 03:14:01.450002
2018-06-01 03:14:01,450 [salt.state       ][INFO    ][23711] Executing state file.directory for /var/lib/keystone/credential-keys
2018-06-01 03:14:01,454 [salt.state       ][INFO    ][23711] Directory /var/lib/keystone/credential-keys is in the correct state
2018-06-01 03:14:01,455 [salt.state       ][INFO    ][23711] Completed state [/var/lib/keystone/credential-keys] at time 03:14:01.455012 duration_in_ms=5.01
2018-06-01 03:14:01,456 [salt.state       ][INFO    ][23711] Running state [keystone-manage credential_setup --keystone-user keystone --keystone-group keystone] at time 03:14:01.456596
2018-06-01 03:14:01,457 [salt.state       ][INFO    ][23711] Executing state cmd.run for keystone-manage credential_setup --keystone-user keystone --keystone-group keystone
2018-06-01 03:14:01,458 [salt.loaded.int.module.cmdmod][INFO    ][23711] Executing command 'keystone-manage credential_setup --keystone-user keystone --keystone-group keystone' in directory '/root'
2018-06-01 03:14:02,840 [salt.state       ][INFO    ][23711] {'pid': 29577, 'retcode': 0, 'stderr': '', 'stdout': ''}
2018-06-01 03:14:02,841 [salt.state       ][INFO    ][23711] Completed state [keystone-manage credential_setup --keystone-user keystone --keystone-group keystone] at time 03:14:02.841760 duration_in_ms=1385.163
2018-06-01 03:14:02,845 [salt.minion      ][INFO    ][23711] Returning information for job: 20180601031307431928
2018-06-01 03:14:58,106 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command service.restart with jid 20180601031458084286
2018-06-01 03:14:58,127 [salt.minion      ][INFO    ][29598] Starting a new job with PID 29598
2018-06-01 03:14:58,968 [salt.loader.192.168.11.2.int.module.cmdmod][INFO    ][29598] Executing command ['systemctl', 'status', 'apache2.service', '-n', '0'] in directory '/root'
2018-06-01 03:14:58,990 [salt.loader.192.168.11.2.int.module.cmdmod][INFO    ][29598] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-06-01 03:14:59,028 [salt.loader.192.168.11.2.int.module.cmdmod][INFO    ][29598] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'apache2.service'] in directory '/root'
2018-06-01 03:15:01,307 [salt.minion      ][INFO    ][29598] Returning information for job: 20180601031458084286
2018-06-01 03:15:02,145 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command test.ping with jid 20180601031502122765
2018-06-01 03:15:02,165 [salt.minion      ][INFO    ][29870] Starting a new job with PID 29870
2018-06-01 03:15:02,242 [salt.minion      ][INFO    ][29870] Returning information for job: 20180601031502122765
2018-06-01 03:15:13,131 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command state.sls with jid 20180601031513112802
2018-06-01 03:15:13,154 [salt.minion      ][INFO    ][29901] Starting a new job with PID 29901
2018-06-01 03:15:13,932 [salt.state       ][INFO    ][29901] Loading fresh modules for state activity
2018-06-01 03:15:15,993 [salt.state       ][INFO    ][29901] Running state [keystone] at time 03:15:15.993041
2018-06-01 03:15:15,994 [salt.state       ][INFO    ][29901] Executing state pkg.installed for keystone
2018-06-01 03:15:15,995 [salt.loaded.int.module.cmdmod][INFO    ][29901] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:15:16,363 [salt.state       ][INFO    ][29901] All specified packages are already installed
2018-06-01 03:15:16,364 [salt.state       ][INFO    ][29901] Completed state [keystone] at time 03:15:16.364798 duration_in_ms=371.757
2018-06-01 03:15:16,365 [salt.state       ][INFO    ][29901] Running state [python-keystone] at time 03:15:16.365523
2018-06-01 03:15:16,366 [salt.state       ][INFO    ][29901] Executing state pkg.installed for python-keystone
2018-06-01 03:15:16,373 [salt.state       ][INFO    ][29901] All specified packages are already installed
2018-06-01 03:15:16,373 [salt.state       ][INFO    ][29901] Completed state [python-keystone] at time 03:15:16.373783 duration_in_ms=8.26
2018-06-01 03:15:16,374 [salt.state       ][INFO    ][29901] Running state [python-keystoneclient] at time 03:15:16.374664
2018-06-01 03:15:16,375 [salt.state       ][INFO    ][29901] Executing state pkg.installed for python-keystoneclient
2018-06-01 03:15:16,381 [salt.state       ][INFO    ][29901] All specified packages are already installed
2018-06-01 03:15:16,382 [salt.state       ][INFO    ][29901] Completed state [python-keystoneclient] at time 03:15:16.382430 duration_in_ms=7.766
2018-06-01 03:15:16,382 [salt.state       ][INFO    ][29901] Running state [python-psycopg2] at time 03:15:16.382951
2018-06-01 03:15:16,383 [salt.state       ][INFO    ][29901] Executing state pkg.installed for python-psycopg2
2018-06-01 03:15:16,390 [salt.state       ][INFO    ][29901] All specified packages are already installed
2018-06-01 03:15:16,390 [salt.state       ][INFO    ][29901] Completed state [python-psycopg2] at time 03:15:16.390883 duration_in_ms=7.932
2018-06-01 03:15:16,391 [salt.state       ][INFO    ][29901] Running state [python-mysqldb] at time 03:15:16.391399
2018-06-01 03:15:16,391 [salt.state       ][INFO    ][29901] Executing state pkg.installed for python-mysqldb
2018-06-01 03:15:16,398 [salt.state       ][INFO    ][29901] All specified packages are already installed
2018-06-01 03:15:16,399 [salt.state       ][INFO    ][29901] Completed state [python-mysqldb] at time 03:15:16.399412 duration_in_ms=8.013
2018-06-01 03:15:16,399 [salt.state       ][INFO    ][29901] Running state [mysql-client] at time 03:15:16.399919
2018-06-01 03:15:16,400 [salt.state       ][INFO    ][29901] Executing state pkg.installed for mysql-client
2018-06-01 03:15:16,407 [salt.state       ][INFO    ][29901] All specified packages are already installed
2018-06-01 03:15:16,407 [salt.state       ][INFO    ][29901] Completed state [mysql-client] at time 03:15:16.407799 duration_in_ms=7.88
2018-06-01 03:15:16,408 [salt.state       ][INFO    ][29901] Running state [python-six] at time 03:15:16.408324
2018-06-01 03:15:16,408 [salt.state       ][INFO    ][29901] Executing state pkg.installed for python-six
2018-06-01 03:15:16,416 [salt.state       ][INFO    ][29901] All specified packages are already installed
2018-06-01 03:15:16,416 [salt.state       ][INFO    ][29901] Completed state [python-six] at time 03:15:16.416682 duration_in_ms=8.358
2018-06-01 03:15:16,417 [salt.state       ][INFO    ][29901] Running state [python-memcache] at time 03:15:16.417192
2018-06-01 03:15:16,417 [salt.state       ][INFO    ][29901] Executing state pkg.installed for python-memcache
2018-06-01 03:15:16,424 [salt.state       ][INFO    ][29901] All specified packages are already installed
2018-06-01 03:15:16,425 [salt.state       ][INFO    ][29901] Completed state [python-memcache] at time 03:15:16.424973 duration_in_ms=7.78
2018-06-01 03:15:16,425 [salt.state       ][INFO    ][29901] Running state [python-openstackclient] at time 03:15:16.425873
2018-06-01 03:15:16,426 [salt.state       ][INFO    ][29901] Executing state pkg.installed for python-openstackclient
2018-06-01 03:15:16,433 [salt.state       ][INFO    ][29901] All specified packages are already installed
2018-06-01 03:15:16,434 [salt.state       ][INFO    ][29901] Completed state [python-openstackclient] at time 03:15:16.434294 duration_in_ms=8.42
2018-06-01 03:15:16,434 [salt.state       ][INFO    ][29901] Running state [gettext-base] at time 03:15:16.434812
2018-06-01 03:15:16,435 [salt.state       ][INFO    ][29901] Executing state pkg.installed for gettext-base
2018-06-01 03:15:16,442 [salt.state       ][INFO    ][29901] All specified packages are already installed
2018-06-01 03:15:16,442 [salt.state       ][INFO    ][29901] Completed state [gettext-base] at time 03:15:16.442730 duration_in_ms=7.918
2018-06-01 03:15:16,443 [salt.state       ][INFO    ][29901] Running state [python-pycadf] at time 03:15:16.443233
2018-06-01 03:15:16,443 [salt.state       ][INFO    ][29901] Executing state pkg.installed for python-pycadf
2018-06-01 03:15:16,450 [salt.state       ][INFO    ][29901] All specified packages are already installed
2018-06-01 03:15:16,450 [salt.state       ][INFO    ][29901] Completed state [python-pycadf] at time 03:15:16.450911 duration_in_ms=7.678
2018-06-01 03:15:16,451 [salt.state       ][INFO    ][29901] Running state [apache2] at time 03:15:16.451807
2018-06-01 03:15:16,452 [salt.state       ][INFO    ][29901] Executing state pkg.installed for apache2
2018-06-01 03:15:16,459 [salt.state       ][INFO    ][29901] All specified packages are already installed
2018-06-01 03:15:16,459 [salt.state       ][INFO    ][29901] Completed state [apache2] at time 03:15:16.459647 duration_in_ms=7.84
2018-06-01 03:15:16,460 [salt.state       ][INFO    ][29901] Running state [a2enmod ssl] at time 03:15:16.460482
2018-06-01 03:15:16,461 [salt.state       ][INFO    ][29901] Executing state cmd.run for a2enmod ssl
2018-06-01 03:15:16,461 [salt.state       ][INFO    ][29901] /etc/apache2/mods-enabled/ssl.load exists
2018-06-01 03:15:16,462 [salt.state       ][INFO    ][29901] Completed state [a2enmod ssl] at time 03:15:16.462118 duration_in_ms=1.636
2018-06-01 03:15:16,462 [salt.state       ][INFO    ][29901] Running state [a2enmod rewrite] at time 03:15:16.462889
2018-06-01 03:15:16,463 [salt.state       ][INFO    ][29901] Executing state cmd.run for a2enmod rewrite
2018-06-01 03:15:16,464 [salt.state       ][INFO    ][29901] /etc/apache2/mods-enabled/rewrite.load exists
2018-06-01 03:15:16,464 [salt.state       ][INFO    ][29901] Completed state [a2enmod rewrite] at time 03:15:16.464465 duration_in_ms=1.576
2018-06-01 03:15:16,465 [salt.state       ][INFO    ][29901] Running state [libapache2-mod-wsgi] at time 03:15:16.465308
2018-06-01 03:15:16,465 [salt.state       ][INFO    ][29901] Executing state pkg.installed for libapache2-mod-wsgi
2018-06-01 03:15:16,472 [salt.state       ][INFO    ][29901] All specified packages are already installed
2018-06-01 03:15:16,473 [salt.state       ][INFO    ][29901] Completed state [libapache2-mod-wsgi] at time 03:15:16.473202 duration_in_ms=7.894
2018-06-01 03:15:16,474 [salt.state       ][INFO    ][29901] Running state [a2enmod wsgi] at time 03:15:16.473960
2018-06-01 03:15:16,474 [salt.state       ][INFO    ][29901] Executing state cmd.run for a2enmod wsgi
2018-06-01 03:15:16,475 [salt.state       ][INFO    ][29901] /etc/apache2/mods-enabled/wsgi.load exists
2018-06-01 03:15:16,475 [salt.state       ][INFO    ][29901] Completed state [a2enmod wsgi] at time 03:15:16.475486 duration_in_ms=1.526
2018-06-01 03:15:16,480 [salt.state       ][INFO    ][29901] Running state [/etc/apache2/mods-enabled/mpm_prefork.load] at time 03:15:16.480281
2018-06-01 03:15:16,480 [salt.state       ][INFO    ][29901] Executing state file.absent for /etc/apache2/mods-enabled/mpm_prefork.load
2018-06-01 03:15:16,481 [salt.state       ][INFO    ][29901] File /etc/apache2/mods-enabled/mpm_prefork.load is not present
2018-06-01 03:15:16,482 [salt.state       ][INFO    ][29901] Completed state [/etc/apache2/mods-enabled/mpm_prefork.load] at time 03:15:16.481972 duration_in_ms=1.691
2018-06-01 03:15:16,482 [salt.state       ][INFO    ][29901] Running state [/etc/apache2/mods-enabled/mpm_prefork.conf] at time 03:15:16.482465
2018-06-01 03:15:16,482 [salt.state       ][INFO    ][29901] Executing state file.absent for /etc/apache2/mods-enabled/mpm_prefork.conf
2018-06-01 03:15:16,483 [salt.state       ][INFO    ][29901] File /etc/apache2/mods-enabled/mpm_prefork.conf is not present
2018-06-01 03:15:16,483 [salt.state       ][INFO    ][29901] Completed state [/etc/apache2/mods-enabled/mpm_prefork.conf] at time 03:15:16.483937 duration_in_ms=1.472
2018-06-01 03:15:16,484 [salt.state       ][INFO    ][29901] Running state [/etc/apache2/mods-enabled/mpm_worker.load] at time 03:15:16.484463
2018-06-01 03:15:16,484 [salt.state       ][INFO    ][29901] Executing state file.absent for /etc/apache2/mods-enabled/mpm_worker.load
2018-06-01 03:15:16,485 [salt.state       ][INFO    ][29901] File /etc/apache2/mods-enabled/mpm_worker.load is not present
2018-06-01 03:15:16,486 [salt.state       ][INFO    ][29901] Completed state [/etc/apache2/mods-enabled/mpm_worker.load] at time 03:15:16.485954 duration_in_ms=1.491
2018-06-01 03:15:16,486 [salt.state       ][INFO    ][29901] Running state [/etc/apache2/mods-enabled/mpm_worker.conf] at time 03:15:16.486438
2018-06-01 03:15:16,486 [salt.state       ][INFO    ][29901] Executing state file.absent for /etc/apache2/mods-enabled/mpm_worker.conf
2018-06-01 03:15:16,487 [salt.state       ][INFO    ][29901] File /etc/apache2/mods-enabled/mpm_worker.conf is not present
2018-06-01 03:15:16,487 [salt.state       ][INFO    ][29901] Completed state [/etc/apache2/mods-enabled/mpm_worker.conf] at time 03:15:16.487912 duration_in_ms=1.474
2018-06-01 03:15:16,490 [salt.state       ][INFO    ][29901] Running state [/etc/apache2/mods-available/mpm_event.conf] at time 03:15:16.490575
2018-06-01 03:15:16,490 [salt.state       ][INFO    ][29901] Executing state file.managed for /etc/apache2/mods-available/mpm_event.conf
2018-06-01 03:15:16,587 [salt.state       ][INFO    ][29901] File /etc/apache2/mods-available/mpm_event.conf is in the correct state
2018-06-01 03:15:16,587 [salt.state       ][INFO    ][29901] Completed state [/etc/apache2/mods-available/mpm_event.conf] at time 03:15:16.587732 duration_in_ms=97.157
2018-06-01 03:15:16,588 [salt.state       ][INFO    ][29901] Running state [a2enmod mpm_event] at time 03:15:16.588748
2018-06-01 03:15:16,589 [salt.state       ][INFO    ][29901] Executing state cmd.run for a2enmod mpm_event
2018-06-01 03:15:16,589 [salt.state       ][INFO    ][29901] /etc/apache2/mods-enabled/mpm_event.load exists
2018-06-01 03:15:16,589 [salt.state       ][INFO    ][29901] Completed state [a2enmod mpm_event] at time 03:15:16.589570 duration_in_ms=0.821
2018-06-01 03:15:16,590 [salt.state       ][INFO    ][29901] Running state [/etc/apache2/ports.conf] at time 03:15:16.590066
2018-06-01 03:15:16,590 [salt.state       ][INFO    ][29901] Executing state file.managed for /etc/apache2/ports.conf
2018-06-01 03:15:16,668 [salt.state       ][INFO    ][29901] File /etc/apache2/ports.conf is in the correct state
2018-06-01 03:15:16,668 [salt.state       ][INFO    ][29901] Completed state [/etc/apache2/ports.conf] at time 03:15:16.668650 duration_in_ms=78.584
2018-06-01 03:15:16,669 [salt.state       ][INFO    ][29901] Running state [/etc/apache2/conf-available/security.conf] at time 03:15:16.669472
2018-06-01 03:15:16,669 [salt.state       ][INFO    ][29901] Executing state file.managed for /etc/apache2/conf-available/security.conf
2018-06-01 03:15:16,750 [salt.state       ][INFO    ][29901] File /etc/apache2/conf-available/security.conf is in the correct state
2018-06-01 03:15:16,750 [salt.state       ][INFO    ][29901] Completed state [/etc/apache2/conf-available/security.conf] at time 03:15:16.750521 duration_in_ms=81.049
2018-06-01 03:15:16,761 [salt.state       ][INFO    ][29901] Running state [/etc/keystone/policy.json] at time 03:15:16.761632
2018-06-01 03:15:16,761 [salt.state       ][INFO    ][29901] Executing state file.managed for /etc/keystone/policy.json
2018-06-01 03:15:16,762 [salt.loaded.int.states.file][WARNING ][29901] State for file: /etc/keystone/policy.json - Neither 'source' nor 'contents' nor 'contents_pillar' nor 'contents_grains' was defined, yet 'replace' was set to 'True'. As there is no source to replace the file with, 'replace' has been set to 'False' to avoid reading the file unnecessarily.
2018-06-01 03:15:16,762 [salt.state       ][INFO    ][29901] File /etc/keystone/policy.json exists with proper permissions. No changes made.
2018-06-01 03:15:16,763 [salt.state       ][INFO    ][29901] Completed state [/etc/keystone/policy.json] at time 03:15:16.763129 duration_in_ms=1.498
2018-06-01 03:15:16,763 [salt.state       ][INFO    ][29901] Running state [/etc/keystone/keystone-paste.ini] at time 03:15:16.763635
2018-06-01 03:15:16,763 [salt.state       ][INFO    ][29901] Executing state file.managed for /etc/keystone/keystone-paste.ini
2018-06-01 03:15:16,787 [salt.state       ][INFO    ][29901] File /etc/keystone/keystone-paste.ini is in the correct state
2018-06-01 03:15:16,787 [salt.state       ][INFO    ][29901] Completed state [/etc/keystone/keystone-paste.ini] at time 03:15:16.787680 duration_in_ms=24.045
2018-06-01 03:15:16,787 [salt.state       ][INFO    ][29901] Running state [/etc/apache2/sites-enabled/000-default.conf] at time 03:15:16.787923
2018-06-01 03:15:16,788 [salt.state       ][INFO    ][29901] Executing state file.absent for /etc/apache2/sites-enabled/000-default.conf
2018-06-01 03:15:16,788 [salt.state       ][INFO    ][29901] File /etc/apache2/sites-enabled/000-default.conf is not present
2018-06-01 03:15:16,788 [salt.state       ][INFO    ][29901] Completed state [/etc/apache2/sites-enabled/000-default.conf] at time 03:15:16.788724 duration_in_ms=0.801
2018-06-01 03:15:16,789 [salt.state       ][INFO    ][29901] Running state [/etc/keystone/keystone.conf] at time 03:15:16.789237
2018-06-01 03:15:16,789 [salt.state       ][INFO    ][29901] Executing state file.managed for /etc/keystone/keystone.conf
2018-06-01 03:15:16,967 [salt.state       ][INFO    ][29901] File /etc/keystone/keystone.conf is in the correct state
2018-06-01 03:15:16,967 [salt.state       ][INFO    ][29901] Completed state [/etc/keystone/keystone.conf] at time 03:15:16.967590 duration_in_ms=178.352
2018-06-01 03:15:16,967 [salt.state       ][INFO    ][29901] Running state [/etc/apache2/sites-enabled/keystone.conf] at time 03:15:16.967856
2018-06-01 03:15:16,968 [salt.state       ][INFO    ][29901] Executing state file.absent for /etc/apache2/sites-enabled/keystone.conf
2018-06-01 03:15:16,968 [salt.state       ][INFO    ][29901] File /etc/apache2/sites-enabled/keystone.conf is not present
2018-06-01 03:15:16,968 [salt.state       ][INFO    ][29901] Completed state [/etc/apache2/sites-enabled/keystone.conf] at time 03:15:16.968734 duration_in_ms=0.879
2018-06-01 03:15:16,969 [salt.state       ][INFO    ][29901] Running state [/etc/apache2/sites-enabled/wsgi-keystone.conf] at time 03:15:16.968970
2018-06-01 03:15:16,969 [salt.state       ][INFO    ][29901] Executing state file.absent for /etc/apache2/sites-enabled/wsgi-keystone.conf
2018-06-01 03:15:16,969 [salt.state       ][INFO    ][29901] File /etc/apache2/sites-enabled/wsgi-keystone.conf is not present
2018-06-01 03:15:16,970 [salt.state       ][INFO    ][29901] Completed state [/etc/apache2/sites-enabled/wsgi-keystone.conf] at time 03:15:16.970017 duration_in_ms=1.046
2018-06-01 03:15:16,970 [salt.state       ][INFO    ][29901] Running state [/etc/apache2/sites-available/keystone_wsgi.conf] at time 03:15:16.970523
2018-06-01 03:15:16,970 [salt.state       ][INFO    ][29901] Executing state file.managed for /etc/apache2/sites-available/keystone_wsgi.conf
2018-06-01 03:15:17,264 [salt.state       ][INFO    ][29901] File /etc/apache2/sites-available/keystone_wsgi.conf is in the correct state
2018-06-01 03:15:17,264 [salt.state       ][INFO    ][29901] Completed state [/etc/apache2/sites-available/keystone_wsgi.conf] at time 03:15:17.264729 duration_in_ms=294.205
2018-06-01 03:15:17,266 [salt.state       ][INFO    ][29901] Running state [/etc/apache2/sites-enabled/keystone_wsgi.conf] at time 03:15:17.265979
2018-06-01 03:15:17,266 [salt.state       ][INFO    ][29901] Executing state file.symlink for /etc/apache2/sites-enabled/keystone_wsgi.conf
2018-06-01 03:15:17,268 [salt.state       ][INFO    ][29901] Symlink /etc/apache2/sites-enabled/keystone_wsgi.conf is present and owned by root:root
2018-06-01 03:15:17,268 [salt.state       ][INFO    ][29901] Completed state [/etc/apache2/sites-enabled/keystone_wsgi.conf] at time 03:15:17.268343 duration_in_ms=2.364
2018-06-01 03:15:17,271 [salt.state       ][INFO    ][29901] Running state [apache2] at time 03:15:17.271632
2018-06-01 03:15:17,271 [salt.state       ][INFO    ][29901] Executing state service.running for apache2
2018-06-01 03:15:17,272 [salt.loaded.int.module.cmdmod][INFO    ][29901] Executing command ['systemctl', 'status', 'apache2.service', '-n', '0'] in directory '/root'
2018-06-01 03:15:17,306 [salt.loaded.int.module.cmdmod][INFO    ][29901] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-06-01 03:15:17,323 [salt.loaded.int.module.cmdmod][INFO    ][29901] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-06-01 03:15:17,347 [salt.state       ][INFO    ][29901] The service apache2 is already running
2018-06-01 03:15:17,348 [salt.state       ][INFO    ][29901] Completed state [apache2] at time 03:15:17.348170 duration_in_ms=76.536
2018-06-01 03:15:17,350 [salt.state       ][INFO    ][29901] Running state [/etc/apache2/conf-enabled/security.conf] at time 03:15:17.350426
2018-06-01 03:15:17,350 [salt.state       ][INFO    ][29901] Executing state file.symlink for /etc/apache2/conf-enabled/security.conf
2018-06-01 03:15:17,353 [salt.state       ][INFO    ][29901] Symlink /etc/apache2/conf-enabled/security.conf is present and owned by root:root
2018-06-01 03:15:17,354 [salt.state       ][INFO    ][29901] Completed state [/etc/apache2/conf-enabled/security.conf] at time 03:15:17.354193 duration_in_ms=3.768
2018-06-01 03:15:17,354 [salt.state       ][INFO    ][29901] Running state [/etc/apache2/sites-enabled/keystone_wsgi] at time 03:15:17.354552
2018-06-01 03:15:17,354 [salt.state       ][INFO    ][29901] Executing state file.absent for /etc/apache2/sites-enabled/keystone_wsgi
2018-06-01 03:15:17,355 [salt.state       ][INFO    ][29901] File /etc/apache2/sites-enabled/keystone_wsgi is not present
2018-06-01 03:15:17,355 [salt.state       ][INFO    ][29901] Completed state [/etc/apache2/sites-enabled/keystone_wsgi] at time 03:15:17.355530 duration_in_ms=0.978
2018-06-01 03:15:17,356 [salt.state       ][INFO    ][29901] Running state [keystone] at time 03:15:17.356246
2018-06-01 03:15:17,356 [salt.state       ][INFO    ][29901] Executing state service.dead for keystone
2018-06-01 03:15:17,357 [salt.loaded.int.module.cmdmod][INFO    ][29901] Executing command ['systemctl', 'status', 'keystone.service', '-n', '0'] in directory '/root'
2018-06-01 03:15:17,376 [salt.state       ][INFO    ][29901] The named service keystone is not available
2018-06-01 03:15:17,376 [salt.state       ][INFO    ][29901] Completed state [keystone] at time 03:15:17.376816 duration_in_ms=20.57
2018-06-01 03:15:17,377 [salt.state       ][INFO    ][29901] Running state [/root/keystonerc] at time 03:15:17.377797
2018-06-01 03:15:17,378 [salt.state       ][INFO    ][29901] Executing state file.managed for /root/keystonerc
2018-06-01 03:15:17,448 [salt.state       ][INFO    ][29901] File /root/keystonerc is in the correct state
2018-06-01 03:15:17,448 [salt.state       ][INFO    ][29901] Completed state [/root/keystonerc] at time 03:15:17.448613 duration_in_ms=70.816
2018-06-01 03:15:17,449 [salt.state       ][INFO    ][29901] Running state [/root/keystonercv3] at time 03:15:17.449233
2018-06-01 03:15:17,449 [salt.state       ][INFO    ][29901] Executing state file.managed for /root/keystonercv3
2018-06-01 03:15:17,516 [salt.state       ][INFO    ][29901] File /root/keystonercv3 is in the correct state
2018-06-01 03:15:17,516 [salt.state       ][INFO    ][29901] Completed state [/root/keystonercv3] at time 03:15:17.516388 duration_in_ms=67.154
2018-06-01 03:15:17,516 [salt.state       ][INFO    ][29901] Running state [keystone-manage db_sync && sleep 1] at time 03:15:17.516943
2018-06-01 03:15:17,517 [salt.state       ][INFO    ][29901] Executing state cmd.run for keystone-manage db_sync && sleep 1
2018-06-01 03:15:17,517 [salt.loaded.int.module.cmdmod][INFO    ][29901] Executing command 'keystone-manage db_sync && sleep 1' in directory '/root'
2018-06-01 03:15:20,103 [salt.state       ][INFO    ][29901] {'pid': 29955, 'retcode': 0, 'stderr': '', 'stdout': ''}
2018-06-01 03:15:20,104 [salt.state       ][INFO    ][29901] Completed state [keystone-manage db_sync && sleep 1] at time 03:15:20.104720 duration_in_ms=2587.775
2018-06-01 03:15:20,107 [salt.state       ][INFO    ][29901] Running state [/var/lib/keystone/fernet-keys] at time 03:15:20.107508
2018-06-01 03:15:20,108 [salt.state       ][INFO    ][29901] Executing state file.directory for /var/lib/keystone/fernet-keys
2018-06-01 03:15:20,112 [salt.state       ][INFO    ][29901] Directory /var/lib/keystone/fernet-keys is in the correct state
2018-06-01 03:15:20,112 [salt.state       ][INFO    ][29901] Completed state [/var/lib/keystone/fernet-keys] at time 03:15:20.112242 duration_in_ms=4.735
2018-06-01 03:15:20,113 [salt.state       ][INFO    ][29901] Running state [keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone] at time 03:15:20.113427
2018-06-01 03:15:20,113 [salt.state       ][INFO    ][29901] Executing state cmd.run for keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone
2018-06-01 03:15:20,114 [salt.loaded.int.module.cmdmod][INFO    ][29901] Executing command 'keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone' in directory '/root'
2018-06-01 03:15:21,516 [salt.state       ][INFO    ][29901] {'pid': 29969, 'retcode': 0, 'stderr': '', 'stdout': ''}
2018-06-01 03:15:21,517 [salt.state       ][INFO    ][29901] Completed state [keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone] at time 03:15:21.517659 duration_in_ms=1404.23
2018-06-01 03:15:21,518 [salt.state       ][INFO    ][29901] Running state [/var/lib/keystone/credential-keys] at time 03:15:21.518795
2018-06-01 03:15:21,519 [salt.state       ][INFO    ][29901] Executing state file.directory for /var/lib/keystone/credential-keys
2018-06-01 03:15:21,523 [salt.state       ][INFO    ][29901] Directory /var/lib/keystone/credential-keys is in the correct state
2018-06-01 03:15:21,523 [salt.state       ][INFO    ][29901] Completed state [/var/lib/keystone/credential-keys] at time 03:15:21.523404 duration_in_ms=4.609
2018-06-01 03:15:21,525 [salt.state       ][INFO    ][29901] Running state [keystone-manage credential_setup --keystone-user keystone --keystone-group keystone] at time 03:15:21.524947
2018-06-01 03:15:21,525 [salt.state       ][INFO    ][29901] Executing state cmd.run for keystone-manage credential_setup --keystone-user keystone --keystone-group keystone
2018-06-01 03:15:21,526 [salt.loaded.int.module.cmdmod][INFO    ][29901] Executing command 'keystone-manage credential_setup --keystone-user keystone --keystone-group keystone' in directory '/root'
2018-06-01 03:15:22,943 [salt.state       ][INFO    ][29901] {'pid': 29976, 'retcode': 0, 'stderr': '', 'stdout': ''}
2018-06-01 03:15:22,944 [salt.state       ][INFO    ][29901] Completed state [keystone-manage credential_setup --keystone-user keystone --keystone-group keystone] at time 03:15:22.944509 duration_in_ms=1419.562
2018-06-01 03:15:22,947 [salt.minion      ][INFO    ][29901] Returning information for job: 20180601031513112802
2018-06-01 03:15:57,399 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command cmd.run with jid 20180601031557378846
2018-06-01 03:15:57,415 [salt.minion      ][INFO    ][29994] Starting a new job with PID 29994
2018-06-01 03:15:57,423 [salt.loader.192.168.11.2.int.module.cmdmod][INFO    ][29994] Executing command '. /root/keystonercv3; openstack service list' in directory '/root'
2018-06-01 03:15:59,989 [salt.minion      ][INFO    ][29994] Returning information for job: 20180601031557378846
2018-06-01 03:16:00,896 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command test.ping with jid 20180601031600876162
2018-06-01 03:16:00,916 [salt.minion      ][INFO    ][30006] Starting a new job with PID 30006
2018-06-01 03:16:00,992 [salt.minion      ][INFO    ][30006] Returning information for job: 20180601031600876162
2018-06-01 03:16:33,038 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command state.sls with jid 20180601031633012568
2018-06-01 03:16:33,061 [salt.minion      ][INFO    ][30011] Starting a new job with PID 30011
2018-06-01 03:16:35,824 [salt.state       ][INFO    ][30011] Loading fresh modules for state activity
2018-06-01 03:16:35,899 [salt.fileclient  ][INFO    ][30011] Fetching file from saltenv 'base', ** done ** 'glance/init.sls'
2018-06-01 03:16:35,937 [salt.fileclient  ][INFO    ][30011] Fetching file from saltenv 'base', ** done ** 'glance/server.sls'
2018-06-01 03:16:37,328 [salt.state       ][INFO    ][30011] Running state [glance] at time 03:16:37.328617
2018-06-01 03:16:37,329 [salt.state       ][INFO    ][30011] Executing state pkg.installed for glance
2018-06-01 03:16:37,330 [salt.loaded.int.module.cmdmod][INFO    ][30011] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:16:37,724 [salt.loaded.int.module.cmdmod][INFO    ][30011] Executing command ['apt-cache', '-q', 'policy', 'glance'] in directory '/root'
2018-06-01 03:16:37,821 [salt.loaded.int.module.cmdmod][INFO    ][30011] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-06-01 03:16:40,153 [salt.loaded.int.module.cmdmod][INFO    ][30011] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:16:40,196 [salt.loaded.int.module.cmdmod][INFO    ][30011] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'glance'] in directory '/root'
2018-06-01 03:16:43,097 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601031643070126
2018-06-01 03:16:43,116 [salt.minion      ][INFO    ][30707] Starting a new job with PID 30707
2018-06-01 03:16:43,140 [salt.minion      ][INFO    ][30707] Returning information for job: 20180601031643070126
2018-06-01 03:16:50,347 [salt.loaded.int.module.cmdmod][INFO    ][30011] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:16:50,397 [salt.state       ][INFO    ][30011] Made the following changes:
'libblas.so.3' changed from 'absent' to '1'
'python-numpy-api10' changed from 'absent' to '1'
'python-ipaddr' changed from 'absent' to '2.1.11-2'
'python-wsme' changed from 'absent' to '0.8.0-2ubuntu2'
'glance' changed from 'absent' to '2:15.0.1-1~u16.04+mcp3'
'python2.7-numpy' changed from 'absent' to '1'
'glance-store-common' changed from 'absent' to '0.22.0-2~u16.04+mcp4'
'liblapack3' changed from 'absent' to '3.6.0-2ubuntu2'
'python-f2py' changed from 'absent' to '1'
'python2.7-glance' changed from 'absent' to '1'
'python-numpy-abi9' changed from 'absent' to '1'
'python-kazoo' changed from 'absent' to '2.2.1-1ubuntu1'
'python-semantic-version' changed from 'absent' to '2.3.1-1'
'libblas-common' changed from 'absent' to '3.6.0-2ubuntu2'
'libquadmath0' changed from 'absent' to '5.4.0-6ubuntu1~16.04.9'
'glance-common' changed from 'absent' to '2:15.0.1-1~u16.04+mcp3'
'python-glance-store' changed from 'absent' to '0.22.0-2~u16.04+mcp4'
'libgfortran3' changed from 'absent' to '5.4.0-6ubuntu1~16.04.9'
'python-numpy-dev' changed from 'absent' to '1'
'python-taskflow' changed from 'absent' to '2.9.0-1.1~u16.04+mcp2'
'liblapack.so.3' changed from 'absent' to '1'
'python-automaton' changed from 'absent' to '1.2.0-1'
'python-numpy' changed from 'absent' to '1:1.11.0-1ubuntu1'
'python-cursive' changed from 'absent' to '0.2.0-1~u16.04+mcp2'
'python-httplib2' changed from 'absent' to '0.9.1+dfsg-1'
'python-simplegeneric' changed from 'absent' to '0.8.1-1'
'python-glance' changed from 'absent' to '2:15.0.1-1~u16.04+mcp3'
'python-barbicanclient' changed from 'absent' to '4.5.2-1.1~u16.04+mcp8'
'python-castellan' changed from 'absent' to '0.12.2-1~u16.04+mcp5'
'libblas3' changed from 'absent' to '3.6.0-2ubuntu2'
'glance-api' changed from 'absent' to '2:15.0.1-1~u16.04+mcp3'
'python-networkx' changed from 'absent' to '1.11-1ubuntu1'
'glance-registry' changed from 'absent' to '2:15.0.1-1~u16.04+mcp3'

2018-06-01 03:16:50,431 [salt.state       ][INFO    ][30011] Loading fresh modules for state activity
2018-06-01 03:16:50,468 [salt.state       ][INFO    ][30011] Completed state [glance] at time 03:16:50.468801 duration_in_ms=13140.184
2018-06-01 03:16:50,477 [salt.state       ][INFO    ][30011] Running state [glance-api] at time 03:16:50.477637
2018-06-01 03:16:50,478 [salt.state       ][INFO    ][30011] Executing state pkg.installed for glance-api
2018-06-01 03:16:50,948 [salt.state       ][INFO    ][30011] All specified packages are already installed
2018-06-01 03:16:50,949 [salt.state       ][INFO    ][30011] Completed state [glance-api] at time 03:16:50.949261 duration_in_ms=471.624
2018-06-01 03:16:50,949 [salt.state       ][INFO    ][30011] Running state [glance-registry] at time 03:16:50.949838
2018-06-01 03:16:50,950 [salt.state       ][INFO    ][30011] Executing state pkg.installed for glance-registry
2018-06-01 03:16:50,957 [salt.state       ][INFO    ][30011] All specified packages are already installed
2018-06-01 03:16:50,958 [salt.state       ][INFO    ][30011] Completed state [glance-registry] at time 03:16:50.958396 duration_in_ms=8.558
2018-06-01 03:16:50,958 [salt.state       ][INFO    ][30011] Running state [glance-common] at time 03:16:50.958894
2018-06-01 03:16:50,959 [salt.state       ][INFO    ][30011] Executing state pkg.installed for glance-common
2018-06-01 03:16:50,966 [salt.state       ][INFO    ][30011] All specified packages are already installed
2018-06-01 03:16:50,967 [salt.state       ][INFO    ][30011] Completed state [glance-common] at time 03:16:50.966968 duration_in_ms=8.074
2018-06-01 03:16:50,967 [salt.state       ][INFO    ][30011] Running state [python-glance] at time 03:16:50.967479
2018-06-01 03:16:50,967 [salt.state       ][INFO    ][30011] Executing state pkg.installed for python-glance
2018-06-01 03:16:50,974 [salt.state       ][INFO    ][30011] All specified packages are already installed
2018-06-01 03:16:50,975 [salt.state       ][INFO    ][30011] Completed state [python-glance] at time 03:16:50.975395 duration_in_ms=7.916
2018-06-01 03:16:50,975 [salt.state       ][INFO    ][30011] Running state [python-glance-store] at time 03:16:50.975905
2018-06-01 03:16:50,976 [salt.state       ][INFO    ][30011] Executing state pkg.installed for python-glance-store
2018-06-01 03:16:50,988 [salt.state       ][INFO    ][30011] All specified packages are already installed
2018-06-01 03:16:50,988 [salt.state       ][INFO    ][30011] Completed state [python-glance-store] at time 03:16:50.988866 duration_in_ms=12.961
2018-06-01 03:16:50,989 [salt.state       ][INFO    ][30011] Running state [python-glanceclient] at time 03:16:50.989117
2018-06-01 03:16:50,989 [salt.state       ][INFO    ][30011] Executing state pkg.installed for python-glanceclient
2018-06-01 03:16:50,996 [salt.state       ][INFO    ][30011] All specified packages are already installed
2018-06-01 03:16:50,996 [salt.state       ][INFO    ][30011] Completed state [python-glanceclient] at time 03:16:50.996484 duration_in_ms=7.367
2018-06-01 03:16:50,996 [salt.state       ][INFO    ][30011] Running state [gettext-base] at time 03:16:50.996739
2018-06-01 03:16:50,996 [salt.state       ][INFO    ][30011] Executing state pkg.installed for gettext-base
2018-06-01 03:16:51,003 [salt.state       ][INFO    ][30011] All specified packages are already installed
2018-06-01 03:16:51,003 [salt.state       ][INFO    ][30011] Completed state [gettext-base] at time 03:16:51.003801 duration_in_ms=7.061
2018-06-01 03:16:51,004 [salt.state       ][INFO    ][30011] Running state [python-memcache] at time 03:16:51.004045
2018-06-01 03:16:51,004 [salt.state       ][INFO    ][30011] Executing state pkg.installed for python-memcache
2018-06-01 03:16:51,011 [salt.state       ][INFO    ][30011] All specified packages are already installed
2018-06-01 03:16:51,011 [salt.state       ][INFO    ][30011] Completed state [python-memcache] at time 03:16:51.011315 duration_in_ms=7.27
2018-06-01 03:16:51,011 [salt.state       ][INFO    ][30011] Running state [python-pycadf] at time 03:16:51.011580
2018-06-01 03:16:51,011 [salt.state       ][INFO    ][30011] Executing state pkg.installed for python-pycadf
2018-06-01 03:16:51,019 [salt.state       ][INFO    ][30011] All specified packages are already installed
2018-06-01 03:16:51,019 [salt.state       ][INFO    ][30011] Completed state [python-pycadf] at time 03:16:51.019349 duration_in_ms=7.769
2018-06-01 03:16:51,021 [salt.state       ][INFO    ][30011] Running state [/etc/glance/glance-cache.conf] at time 03:16:51.021910
2018-06-01 03:16:51,022 [salt.state       ][INFO    ][30011] Executing state file.managed for /etc/glance/glance-cache.conf
2018-06-01 03:16:51,066 [salt.fileclient  ][INFO    ][30011] Fetching file from saltenv 'base', ** done ** 'glance/files/pike/glance-cache.conf.Debian'
2018-06-01 03:16:51,155 [salt.state       ][INFO    ][30011] File changed:
--- 
+++ 
@@ -1,3 +1,4 @@
+
 [DEFAULT]
 
 #
@@ -226,8 +227,8 @@
 #  (boolean value)
 # This option is deprecated for removal since Newton.
 # Its value may be silently ignored in the future.
-# Reason: This option will be removed in the Pike release or later because the
-# same functionality can be achieved with greater granularity by using policies.
+# Reason: This option will be removed in the Ocata release because the same
+# functionality can be achieved with greater granularity by using policies.
 # Please see the Newton release notes for more information.
 #show_multiple_locations = false
 
@@ -409,7 +410,7 @@
 # Related options:
 #     * None
 #
-#  (unknown value)
+#  (string value)
 #pydev_worker_debug_host = localhost
 
 #
@@ -473,56 +474,6 @@
 #
 #  (string value)
 #digest_algorithm = sha256
-
-#
-# The URL provides location where the temporary data will be stored
-#
-# This option is for Glance internal use only. Glance will save the
-# image data uploaded by the user to 'staging' endpoint during the
-# image import process.
-#
-# This option does not change the 'staging' API endpoint by any means.
-#
-# NOTE: It is discouraged to use same path as [task]/work_dir
-#
-# NOTE: 'file://<absolute-directory-path>' is the only option
-# api_image_import flow will support for now.
-#
-# NOTE: The staging path must be on shared filesystem available to all
-# Glance API nodes.
-#
-# Possible values:
-#     * String starting with 'file://' followed by absolute FS path
-#
-# Related options:
-#     * [task]/work_dir
-#     * [DEFAULT]/enable_image_import (*deprecated*)
-#
-#  (string value)
-#node_staging_uri = file:///tmp/staging/
-
-# DEPRECATED:
-# Enables the Image Import workflow introduced in Pike
-#
-# As '[DEFAULT]/node_staging_uri' is required for the Image
-# Import, it's disabled per default in Pike, enabled per
-# default in Queens and removed in Rocky. This allows Glance to
-# operate with previous version configs upon upgrade.
-#
-# Setting this option to True will enable the endpoints related
-# to Image Import Refactoring work.
-#
-# Related options:
-#     * [DEFUALT]/node_staging_uri (boolean value)
-# This option is deprecated for removal since Pike.
-# Its value may be silently ignored in the future.
-# Reason:
-# This option is deprecated for removal in Rocky.
-#
-# It was introduced to make sure that the API is not enabled
-# before the '[DEFAULT]/node_staging_uri' is defined and is
-# long term redundant.
-#enable_image_import = false
 
 #
 # The relative path to sqlite file database that will be used for image cache
@@ -604,6 +555,10 @@
 # Minimum value: 0
 #image_cache_max_size = 10737418240
 
+
+
+os_region_name = RegionOne
+
 #
 # The amount of time, in seconds, an incomplete image remains in the cache.
 #
@@ -661,6 +616,7 @@
 #
 #  (string value)
 #image_cache_dir = <None>
+#image_cache_dir = /var/lib/glance/image-cache/
 
 #
 # Address the registry server is hosted on.
@@ -671,8 +627,9 @@
 # Related options:
 #     * None
 #
-#  (unknown value)
+#  (string value)
 #registry_host = 0.0.0.0
+registry_host = 192.168.10.35
 
 #
 # Port the registry server is listening on.
@@ -687,6 +644,7 @@
 # Minimum value: 0
 # Maximum value: 65535
 #registry_port = 9191
+registry_port = 9191
 
 #
 # Protocol to use for communication with the registry server.
@@ -909,6 +867,12 @@
 # Note: This option can be changed without restarting.
 #debug = false
 
+# DEPRECATED: If set to false, the logging level will be set to WARNING instead
+# of the default INFO level. (boolean value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#verbose = true
+
 # The name of a logging configuration file. This file is appended to any
 # existing logging configuration files. For details about logging configuration
 # files, see the Python logging module documentation. Note that when logging
@@ -929,6 +893,7 @@
 # log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logfile
 #log_file = <None>
+log_file = /var/log/glance/image-cache.log
 
 # (Optional) The base directory used for relative log_file  paths. This option
 # is ignored if log_config_append is set. (string value)
@@ -947,19 +912,13 @@
 # set. (boolean value)
 #use_syslog = false
 
-# Enable journald for logging. If running in a systemd environment you may wish
-# to enable journal support. Doing so will use the journal native protocol which
-# includes structured metadata in addition to log messages.This option is
-# ignored if log_config_append is set. (boolean value)
-#use_journal = false
-
 # Syslog facility to receive log lines. This option is ignored if
 # log_config_append is set. (string value)
 #syslog_log_facility = LOG_USER
 
 # Log output to standard error. This option is ignored if log_config_append is
 # set. (boolean value)
-#use_stderr = false
+#use_stderr = true
 
 # Format string to use for log messages with context. (string value)
 #logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
@@ -981,7 +940,7 @@
 
 # List of package logging levels in logger=LEVEL pairs. This option is ignored
 # if log_config_append is set. (list value)
-#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
+#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
 
 # Enables or disables publication of error events. (boolean value)
 #publish_errors = false
@@ -992,18 +951,6 @@
 # The format for an instance UUID that is passed with the log message. (string
 # value)
 #instance_uuid_format = "[instance: %(uuid)s] "
-
-# Interval, number of seconds, of log rate limiting. (integer value)
-#rate_limit_interval = 0
-
-# Maximum number of logged messages per rate_limit_interval. (integer value)
-#rate_limit_burst = 0
-
-# Log level name used by rate limiting: CRITICAL, ERROR, INFO, WARNING, DEBUG or
-# empty string. Logs with level greater or equal to rate_limit_except_level are
-# not filtered. An empty string means that all levels are filtered. (string
-# value)
-#rate_limit_except_level = CRITICAL
 
 # Enables or disables fatal status of deprecations. (boolean value)
 #fatal_deprecations = false
@@ -1090,7 +1037,7 @@
 # /store-capabilities.html
 #
 # For more information on setting up a particular store in your
-# deployment and help with the usage of this feature, please contact
+# deplyment and help with the usage of this feature, please contact
 # the storage driver maintainers listed here:
 # http://docs.openstack.org/developer/glance_store/drivers/index.html
 #
@@ -1119,8 +1066,8 @@
 #
 # Possible values:
 #     * A string of of the following form:
-#       ``<service_type>:<service_name>:<interface>``
-#       At least ``service_type`` and ``interface`` should be specified.
+#       ``<service_type>:<service_name>:<endpoint_type>``
+#       At least ``service_type`` and ``endpoint_type`` should be specified.
 #       ``service_name`` can be omitted.
 #
 # Related options:
@@ -1343,25 +1290,6 @@
 #
 #  (string value)
 #rootwrap_config = /etc/glance/rootwrap.conf
-
-#
-# Volume type that will be used for volume creation in cinder.
-#
-# Some cinder backends can have several volume types to optimize storage usage.
-# Adding this option allows an operator to choose a specific volume type
-# in cinder that can be optimized for images.
-#
-# If this is not set, then the default volume type specified in the cinder
-# configuration will be used for volume creation.
-#
-# Possible values:
-#     * A valid volume type from cinder
-#
-# Related options:
-#     * None
-#
-#  (string value)
-#cinder_volume_type = <None>
 
 #
 # Directory to which the filesystem backend store writes images.
@@ -1442,7 +1370,6 @@
 #     * None
 #
 #  (string value)
-#filesystem_store_metadata_file = <None>
 
 #
 # File access permissions for the image files.
@@ -1699,7 +1626,7 @@
 # Related Options:
 #     * sheepdog_store_port
 #
-#  (unknown value)
+#  (string value)
 #sheepdog_store_address = 127.0.0.1
 
 #
@@ -1944,16 +1871,12 @@
 # images in its own account. More details multi-tenant store can be found at
 # https://wiki.openstack.org/wiki/GlanceSwiftTenantSpecificStorage
 #
-# NOTE: If using multi-tenant swift store, please make sure
-# that you do not set a swift configuration file with the
-# 'swift_store_config_file' option.
-#
 # Possible values:
 #     * True
 #     * False
 #
 # Related options:
-#     * swift_store_config_file
+#     * None
 #
 #  (boolean value)
 #swift_store_multi_tenant = false
@@ -2169,15 +2092,12 @@
 # option is highly recommended while using Swift storage backend for
 # image storage as it avoids storage of credentials in the database.
 #
-# NOTE: Please do not configure this option if you have set
-# ``swift_store_multi_tenant`` to ``True``.
-#
 # Possible values:
 #     * String value representing an absolute path on the glance-api
 #       node
 #
 # Related options:
-#     * swift_store_multi_tenant
+#     * None
 #
 #  (string value)
 #swift_store_config_file = <None>
@@ -2198,7 +2118,7 @@
 #     * vmware_server_username
 #     * vmware_server_password
 #
-#  (unknown value)
+#  (string value)
 #vmware_server_host = 127.0.0.1
 
 #
@@ -2360,6 +2280,9 @@
 #  (multi valued)
 #vmware_datastores =
 
+os_region_name = RegionOne
+
+
 
 [oslo_policy]
 
@@ -2367,10 +2290,12 @@
 # From oslo.policy
 #
 
-# The file that defines policies. (string value)
+# The JSON file that defines policies. (string value)
+# Deprecated group/name - [DEFAULT]/policy_file
 #policy_file = policy.json
 
 # Default rule. Enforced when a requested rule is not found. (string value)
+# Deprecated group/name - [DEFAULT]/policy_default_rule
 #policy_default_rule = default
 
 # Directories where policy configuration files are stored. They can be relative
@@ -2378,4 +2303,5 @@
 # absolute paths. The file defined by policy_file must exist for these
 # directories to be searched.  Missing or empty directories are ignored. (multi
 # valued)
+# Deprecated group/name - [DEFAULT]/policy_dirs
 #policy_dirs = policy.d

2018-06-01 03:16:51,156 [salt.state       ][INFO    ][30011] Completed state [/etc/glance/glance-cache.conf] at time 03:16:51.156329 duration_in_ms=134.419
2018-06-01 03:16:51,156 [salt.state       ][INFO    ][30011] Running state [/etc/glance/glance-registry.conf] at time 03:16:51.156785
2018-06-01 03:16:51,157 [salt.state       ][INFO    ][30011] Executing state file.managed for /etc/glance/glance-registry.conf
2018-06-01 03:16:51,197 [salt.fileclient  ][INFO    ][30011] Fetching file from saltenv 'base', ** done ** 'glance/files/pike/glance-registry.conf.Debian'
2018-06-01 03:16:51,307 [salt.state       ][INFO    ][30011] File changed:
--- 
+++ 
@@ -1,3 +1,4 @@
+
 [DEFAULT]
 
 #
@@ -212,6 +213,7 @@
 #  (integer value)
 # Minimum value: 1
 #limit_param_default = 25
+limit_param_default = 25
 
 #
 # Maximum number of results that could be returned by a request.
@@ -237,6 +239,7 @@
 #  (integer value)
 # Minimum value: 1
 #api_limit_max = 1000
+api_limit_max = 1000
 
 #
 # Show direct image location when returning an image.
@@ -300,8 +303,8 @@
 #  (boolean value)
 # This option is deprecated for removal since Newton.
 # Its value may be silently ignored in the future.
-# Reason: This option will be removed in the Pike release or later because the
-# same functionality can be achieved with greater granularity by using policies.
+# Reason: This option will be removed in the Ocata release because the same
+# functionality can be achieved with greater granularity by using policies.
 # Please see the Newton release notes for more information.
 #show_multiple_locations = false
 
@@ -483,7 +486,7 @@
 # Related options:
 #     * None
 #
-#  (unknown value)
+#  (string value)
 #pydev_worker_debug_host = localhost
 
 #
@@ -549,56 +552,6 @@
 #digest_algorithm = sha256
 
 #
-# The URL provides location where the temporary data will be stored
-#
-# This option is for Glance internal use only. Glance will save the
-# image data uploaded by the user to 'staging' endpoint during the
-# image import process.
-#
-# This option does not change the 'staging' API endpoint by any means.
-#
-# NOTE: It is discouraged to use same path as [task]/work_dir
-#
-# NOTE: 'file://<absolute-directory-path>' is the only option
-# api_image_import flow will support for now.
-#
-# NOTE: The staging path must be on shared filesystem available to all
-# Glance API nodes.
-#
-# Possible values:
-#     * String starting with 'file://' followed by absolute FS path
-#
-# Related options:
-#     * [task]/work_dir
-#     * [DEFAULT]/enable_image_import (*deprecated*)
-#
-#  (string value)
-#node_staging_uri = file:///tmp/staging/
-
-# DEPRECATED:
-# Enables the Image Import workflow introduced in Pike
-#
-# As '[DEFAULT]/node_staging_uri' is required for the Image
-# Import, it's disabled per default in Pike, enabled per
-# default in Queens and removed in Rocky. This allows Glance to
-# operate with previous version configs upon upgrade.
-#
-# Setting this option to True will enable the endpoints related
-# to Image Import Refactoring work.
-#
-# Related options:
-#     * [DEFUALT]/node_staging_uri (boolean value)
-# This option is deprecated for removal since Pike.
-# Its value may be silently ignored in the future.
-# Reason:
-# This option is deprecated for removal in Rocky.
-#
-# It was introduced to make sure that the API is not enabled
-# before the '[DEFAULT]/node_staging_uri' is defined and is
-# long term redundant.
-#enable_image_import = false
-
-#
 # IP address to bind the glance servers to.
 #
 # Provide an IP address to bind the glance server to. The default
@@ -615,8 +568,9 @@
 # Related options:
 #     * None
 #
-#  (unknown value)
+#  (string value)
 #bind_host = 0.0.0.0
+bind_host = 192.168.10.38
 
 #
 # Port number on which the server will listen.
@@ -636,6 +590,7 @@
 # Minimum value: 0
 # Maximum value: 65535
 #bind_port = <None>
+bind_port = 9191
 
 #
 # Set the number of incoming connection requests.
@@ -767,6 +722,7 @@
 #  (integer value)
 # Minimum value: 0
 #workers = <None>
+workers = 8
 
 #
 # Maximum line size of message headers.
@@ -845,6 +801,14 @@
 # INFO level. (boolean value)
 # Note: This option can be changed without restarting.
 #debug = false
+debug = false
+
+# DEPRECATED: If set to false, the logging level will be set to WARNING instead
+# of the default INFO level. (boolean value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#verbose = true
+verbose = true
 
 # The name of a logging configuration file. This file is appended to any
 # existing logging configuration files. For details about logging configuration
@@ -866,6 +830,7 @@
 # log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logfile
 #log_file = <None>
+log_file = /var/log/glance/registry.log
 
 # (Optional) The base directory used for relative log_file  paths. This option
 # is ignored if log_config_append is set. (string value)
@@ -884,19 +849,13 @@
 # set. (boolean value)
 #use_syslog = false
 
-# Enable journald for logging. If running in a systemd environment you may wish
-# to enable journal support. Doing so will use the journal native protocol which
-# includes structured metadata in addition to log messages.This option is
-# ignored if log_config_append is set. (boolean value)
-#use_journal = false
-
 # Syslog facility to receive log lines. This option is ignored if
 # log_config_append is set. (string value)
 #syslog_log_facility = LOG_USER
 
 # Log output to standard error. This option is ignored if log_config_append is
 # set. (boolean value)
-#use_stderr = false
+#use_stderr = true
 
 # Format string to use for log messages with context. (string value)
 #logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
@@ -918,7 +877,7 @@
 
 # List of package logging levels in logger=LEVEL pairs. This option is ignored
 # if log_config_append is set. (list value)
-#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
+#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
 
 # Enables or disables publication of error events. (boolean value)
 #publish_errors = false
@@ -930,18 +889,6 @@
 # value)
 #instance_uuid_format = "[instance: %(uuid)s] "
 
-# Interval, number of seconds, of log rate limiting. (integer value)
-#rate_limit_interval = 0
-
-# Maximum number of logged messages per rate_limit_interval. (integer value)
-#rate_limit_burst = 0
-
-# Log level name used by rate limiting: CRITICAL, ERROR, INFO, WARNING, DEBUG or
-# empty string. Logs with level greater or equal to rate_limit_except_level are
-# not filtered. An empty string means that all levels are filtered. (string
-# value)
-#rate_limit_except_level = CRITICAL
-
 # Enables or disables fatal status of deprecations. (boolean value)
 #fatal_deprecations = false
 
@@ -950,6 +897,7 @@
 #
 
 # Size of RPC connection pool. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_conn_pool_size
 #rpc_conn_pool_size = 30
 
 # The pool size limit for connections expiration policy (integer value)
@@ -960,144 +908,93 @@
 
 # ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
 # The "host" option should point or resolve to this address. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_address
 #rpc_zmq_bind_address = *
 
 # MatchMaker driver. (string value)
-# Allowed values: redis, sentinel, dummy
+# Allowed values: redis, dummy
+# Deprecated group/name - [DEFAULT]/rpc_zmq_matchmaker
 #rpc_zmq_matchmaker = redis
 
 # Number of ZeroMQ contexts, defaults to 1. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_contexts
 #rpc_zmq_contexts = 1
 
 # Maximum number of ingress messages to locally buffer per topic. Default is
 # unlimited. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_topic_backlog
 #rpc_zmq_topic_backlog = <None>
 
 # Directory for holding IPC sockets. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_ipc_dir
 #rpc_zmq_ipc_dir = /var/run/openstack
 
 # Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
 # "host" option, if running Nova. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_host
 #rpc_zmq_host = localhost
 
-# Number of seconds to wait before all pending messages will be sent after
-# closing a socket. The default value of -1 specifies an infinite linger period.
-# The value of 0 specifies no linger period. Pending messages shall be discarded
-# immediately when the socket is closed. Positive values specify an upper bound
-# for the linger period. (integer value)
+# Seconds to wait before a cast expires (TTL). The default value of -1 specifies
+# an infinite linger period. The value of 0 specifies no linger period. Pending
+# messages shall be discarded immediately when the socket is closed. Only
+# supported by impl_zmq. (integer value)
 # Deprecated group/name - [DEFAULT]/rpc_cast_timeout
-#zmq_linger = -1
+#rpc_cast_timeout = -1
 
 # The default number of seconds that poll should wait. Poll raises timeout
 # exception when timeout expired. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_poll_timeout
 #rpc_poll_timeout = 1
 
 # Expiration timeout in seconds of a name service record about existing target (
 # < 0 means no timeout). (integer value)
+# Deprecated group/name - [DEFAULT]/zmq_target_expire
 #zmq_target_expire = 300
 
 # Update period in seconds of a name service record about existing target.
 # (integer value)
+# Deprecated group/name - [DEFAULT]/zmq_target_update
 #zmq_target_update = 180
 
 # Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
 # value)
-#use_pub_sub = false
+# Deprecated group/name - [DEFAULT]/use_pub_sub
+#use_pub_sub = true
 
 # Use ROUTER remote proxy. (boolean value)
-#use_router_proxy = false
-
-# This option makes direct connections dynamic or static. It makes sense only
-# with use_router_proxy=False which means to use direct connections for direct
-# message types (ignored otherwise). (boolean value)
-#use_dynamic_connections = false
-
-# How many additional connections to a host will be made for failover reasons.
-# This option is actual only in dynamic connections mode. (integer value)
-#zmq_failover_connections = 2
+# Deprecated group/name - [DEFAULT]/use_router_proxy
+#use_router_proxy = true
 
 # Minimal port number for random ports range. (port value)
 # Minimum value: 0
 # Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/rpc_zmq_min_port
 #rpc_zmq_min_port = 49153
 
 # Maximal port number for random ports range. (integer value)
 # Minimum value: 1
 # Maximum value: 65536
+# Deprecated group/name - [DEFAULT]/rpc_zmq_max_port
 #rpc_zmq_max_port = 65536
 
 # Number of retries to find free port number before fail with ZMQBindError.
 # (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_port_retries
 #rpc_zmq_bind_port_retries = 100
 
 # Default serialization mechanism for serializing/deserializing
 # outgoing/incoming messages (string value)
 # Allowed values: json, msgpack
+# Deprecated group/name - [DEFAULT]/rpc_zmq_serialization
 #rpc_zmq_serialization = json
 
 # This option configures round-robin mode in zmq socket. True means not keeping
 # a queue when server side disconnects. False means to keep queue and messages
 # even if server is disconnected, when the server appears we send all
 # accumulated messages to it. (boolean value)
-#zmq_immediate = true
-
-# Enable/disable TCP keepalive (KA) mechanism. The default value of -1 (or any
-# other negative value) means to skip any overrides and leave it to OS default;
-# 0 and 1 (or any other positive value) mean to disable and enable the option
-# respectively. (integer value)
-#zmq_tcp_keepalive = -1
-
-# The duration between two keepalive transmissions in idle condition. The unit
-# is platform dependent, for example, seconds in Linux, milliseconds in Windows
-# etc. The default value of -1 (or any other negative value and 0) means to skip
-# any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_idle = -1
-
-# The number of retransmissions to be carried out before declaring that remote
-# end is not available. The default value of -1 (or any other negative value and
-# 0) means to skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_cnt = -1
-
-# The duration between two successive keepalive retransmissions, if
-# acknowledgement to the previous keepalive transmission is not received. The
-# unit is platform dependent, for example, seconds in Linux, milliseconds in
-# Windows etc. The default value of -1 (or any other negative value and 0) means
-# to skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_intvl = -1
-
-# Maximum number of (green) threads to work concurrently. (integer value)
-#rpc_thread_pool_size = 100
-
-# Expiration timeout in seconds of a sent/received message after which it is not
-# tracked anymore by a client/server. (integer value)
-#rpc_message_ttl = 300
-
-# Wait for message acknowledgements from receivers. This mechanism works only
-# via proxy without PUB/SUB. (boolean value)
-#rpc_use_acks = false
-
-# Number of seconds to wait for an ack from a cast/call. After each retry
-# attempt this timeout is multiplied by some specified multiplier. (integer
-# value)
-#rpc_ack_timeout_base = 15
-
-# Number to multiply base ack timeout by after each retry attempt. (integer
-# value)
-#rpc_ack_timeout_multiplier = 2
-
-# Default number of message sending attempts in case of any problems occurred:
-# positive value N means at most N retries, 0 means no retries, None or -1 (or
-# any other negative values) mean to retry forever. This option is used only if
-# acknowledgments are enabled. (integer value)
-#rpc_retry_attempts = 3
-
-# List of publisher hosts SubConsumer can subscribe on. This option has higher
-# priority then the default publishers list taken from the matchmaker. (list
-# value)
-#subscribe_on =
-
-# Size of executor thread pool when executor is threading or eventlet. (integer
-# value)
+#zmq_immediate = false
+
+# Size of executor thread pool. (integer value)
 # Deprecated group/name - [DEFAULT]/rpc_thread_pool_size
 #executor_thread_pool_size = 64
 
@@ -1107,6 +1004,7 @@
 # A URL representing the messaging driver to use and its full configuration.
 # (string value)
 #transport_url = <None>
+transport_url = rabbit://openstack:opnfv_secret@192.168.10.28:5672,openstack:opnfv_secret@192.168.10.29:5672,openstack:opnfv_secret@192.168.10.30:5672//openstack
 
 # DEPRECATED: The messaging driver to use, defaults to rabbit. Other drivers
 # include amqp and zmq. (string value)
@@ -1118,6 +1016,7 @@
 # The default exchange under which topics are scoped. May be overridden by an
 # exchange name specified in the transport_url option. (string value)
 #control_exchange = openstack
+control_exchange = openstack
 
 
 [database]
@@ -1126,12 +1025,22 @@
 # From oslo.db
 #
 
+# DEPRECATED: The file name to use with SQLite. (string value)
+# Deprecated group/name - [DEFAULT]/sqlite_db
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Should use config option connection or slave_connection to connect the
+# database.
+#sqlite_db = oslo.sqlite
+
 # If True, SQLite uses synchronous mode. (boolean value)
+# Deprecated group/name - [DEFAULT]/sqlite_synchronous
 #sqlite_synchronous = true
 
 # The back end to use for the database. (string value)
 # Deprecated group/name - [DEFAULT]/db_backend
 #backend = sqlalchemy
+backend = sqlalchemy
 
 # The SQLAlchemy connection string to use to connect to the database. (string
 # value)
@@ -1139,6 +1048,7 @@
 # Deprecated group/name - [DATABASE]/sql_connection
 # Deprecated group/name - [sql]/connection
 #connection = <None>
+connection = mysql+pymysql://glance:opnfv_secret@192.168.10.23/glance
 
 # The SQLAlchemy connection string to use to connect to the slave database.
 # (string value)
@@ -1150,15 +1060,12 @@
 # (string value)
 #mysql_sql_mode = TRADITIONAL
 
-# If True, transparently enables support for handling MySQL Cluster (NDB).
-# (boolean value)
-#mysql_enable_ndb = false
-
 # Timeout before idle SQL connections are reaped. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_idle_timeout
 # Deprecated group/name - [DATABASE]/sql_idle_timeout
 # Deprecated group/name - [sql]/idle_timeout
 #idle_timeout = 3600
+idle_timeout = 3600
 
 # Minimum number of SQL connections to keep open in a pool. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_min_pool_size
@@ -1170,12 +1077,14 @@
 # Deprecated group/name - [DEFAULT]/sql_max_pool_size
 # Deprecated group/name - [DATABASE]/sql_max_pool_size
 #max_pool_size = 5
+max_pool_size = 10
 
 # Maximum number of database connection retries during startup. Set to -1 to
 # specify an infinite retry count. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_max_retries
 # Deprecated group/name - [DATABASE]/sql_max_retries
 #max_retries = 10
+max_retries = -1
 
 # Interval between retries of opening a SQL connection. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_retry_interval
@@ -1186,6 +1095,7 @@
 # Deprecated group/name - [DEFAULT]/sql_max_overflow
 # Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
 #max_overflow = 50
+max_overflow = 30
 
 # Verbosity of SQL debugging information: 0=None, 100=Everything. (integer
 # value)
@@ -1230,20 +1140,47 @@
 # Deprecated group/name - [DEFAULT]/dbapi_use_tpool
 #use_tpool = false
 
+[glance_store]
+filesystem_store_datadir = /var/lib/glance/images/
+
+swift_store_endpoint_type = internalURL
+
+cinder_catalog_info = volumev2::internalURL
+
+# Override service catalog lookup with template for cinder endpoint
+# e.g. http://localhost:8776/v2/%(tenant)s (string value)
+#cinder_endpoint_template = <None>
+
+# Region name of this node. If specified, it will be used to locate
+# OpenStack services for stores. (string value)
+# Deprecated group/name - [DEFAULT]/os_region_name
+#cinder_os_region_name = <None>
+
+cinder_os_region_name = RegionOne
+
 
 [keystone_authtoken]
 
 #
 # From keystonemiddleware.auth_token
 #
-
+revocation_cache_time = 10
+auth_type = password
+user_domain_id = default
+project_domain_id = default
+project_name = service
+username = glance
+password = opnfv_secret
+auth_uri=http://192.168.10.35:5000
+auth_url=http://192.168.10.35:35357
+memcached_servers=192.168.10.36:11211,192.168.10.37:11211,192.168.10.38:11211
 # Complete "public" Identity API endpoint. This endpoint should not be an
 # "admin" endpoint, as it should be accessible by all end users. Unauthenticated
 # clients are redirected to this endpoint to authenticate. Although this
-# endpoint should ideally be unversioned, client support in the wild varies. If
-# you're using a versioned v2 endpoint here, then this should *not* be the same
-# endpoint the service user utilizes for validating tokens, because normal end
-# users may not be able to reach that endpoint. (string value)
+# endpoint should  ideally be unversioned, client support in the wild varies.
+# If you're using a versioned v2 endpoint here, then this  should *not* be the
+# same endpoint the service user utilizes  for validating tokens, because normal
+# end users may not be  able to reach that endpoint. (string value)
 #auth_uri = <None>
 
 # API version of the admin Identity API endpoint. (string value)
@@ -1283,12 +1220,7 @@
 # The region in which the identity server can be found. (string value)
 #region_name = <None>
 
-# DEPRECATED: Directory used to cache files related to PKI tokens. This option
-# has been deprecated in the Ocata release and will be removed in the P release.
-# (string value)
-# This option is deprecated for removal since Ocata.
-# Its value may be silently ignored in the future.
-# Reason: PKI token format is no longer supported.
+# Directory used to cache files related to PKI tokens. (string value)
 #signing_dir = <None>
 
 # Optionally specify a list of memcached server(s) to use for caching. If left
@@ -1301,14 +1233,10 @@
 # -1 to disable caching completely. (integer value)
 #token_cache_time = 300
 
-# DEPRECATED: Determines the frequency at which the list of revoked tokens is
-# retrieved from the Identity service (in seconds). A high number of revocation
-# events combined with a low cache duration may significantly reduce
-# performance. Only valid for PKI tokens. This option has been deprecated in the
-# Ocata release and will be removed in the P release. (integer value)
-# This option is deprecated for removal since Ocata.
-# Its value may be silently ignored in the future.
-# Reason: PKI token format is no longer supported.
+# Determines the frequency at which the list of revoked tokens is retrieved from
+# the Identity service (in seconds). A high number of revocation events combined
+# with a low cache duration may significantly reduce performance. Only valid for
+# PKI tokens. (integer value)
 #revocation_cache_time = 10
 
 # (Optional) If defined, indicate whether token data should be authenticated or
@@ -1361,40 +1289,19 @@
 # value)
 #enforce_token_bind = permissive
 
-# DEPRECATED: If true, the revocation list will be checked for cached tokens.
-# This requires that PKI tokens are configured on the identity server. (boolean
-# value)
-# This option is deprecated for removal since Ocata.
-# Its value may be silently ignored in the future.
-# Reason: PKI token format is no longer supported.
+# If true, the revocation list will be checked for cached tokens. This requires
+# that PKI tokens are configured on the identity server. (boolean value)
 #check_revocations_for_cached = false
 
-# DEPRECATED: Hash algorithms to use for hashing PKI tokens. This may be a
-# single algorithm or multiple. The algorithms are those supported by Python
-# standard hashlib.new(). The hashes will be tried in the order given, so put
-# the preferred one first for performance. The result of the first hash will be
+# Hash algorithms to use for hashing PKI tokens. This may be a single algorithm
+# or multiple. The algorithms are those supported by Python standard
+# hashlib.new(). The hashes will be tried in the order given, so put the
+# preferred one first for performance. The result of the first hash will be
 # stored in the cache. This will typically be set to multiple values only while
 # migrating from a less secure algorithm to a more secure one. Once all the old
 # tokens are expired this option should be set to a single value for better
 # performance. (list value)
-# This option is deprecated for removal since Ocata.
-# Its value may be silently ignored in the future.
-# Reason: PKI token format is no longer supported.
 #hash_algorithms = md5
-
-# A choice of roles that must be present in a service token. Service tokens are
-# allowed to request that an expired token can be used and so this check should
-# tightly control that only actual services should be sending this token. Roles
-# here are applied as an ANY check so any role in this list must be present. For
-# backwards compatibility reasons this currently only affects the allow_expired
-# check. (list value)
-#service_token_roles = service
-
-# For backwards compatibility reasons we must let valid service tokens pass that
-# don't pass the service_token_roles check as valid. Setting this true will
-# become the default in a future release and should be enabled if possible.
-# (boolean value)
-#service_token_roles_required = false
 
 # Authentication type to load (string value)
 # Deprecated group/name - [keystone_authtoken]/auth_plugin
@@ -1430,7 +1337,7 @@
 # Reason: Replaced by [DEFAULT]/transport_url
 #password =
 
-# DEPRECATED: List of Redis Sentinel hosts (fault tolerance mode), e.g.,
+# DEPRECATED: List of Redis Sentinel hosts (fault tolerance mode) e.g.
 # [host:port, host1:port ... ] (list value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
@@ -1446,7 +1353,7 @@
 # Time in ms to wait before the transaction is killed. (integer value)
 #check_timeout = 20000
 
-# Timeout in ms on blocking socket operations. (integer value)
+# Timeout in ms on blocking socket operations (integer value)
 #socket_timeout = 10000
 
 
@@ -1458,60 +1365,55 @@
 
 # Name for the AMQP container. must be globally unique. Defaults to a generated
 # UUID (string value)
+# Deprecated group/name - [amqp1]/container_name
 #container_name = <None>
 
 # Timeout for inactive connections (in seconds) (integer value)
+# Deprecated group/name - [amqp1]/idle_timeout
 #idle_timeout = 0
 
 # Debug: dump AMQP frames to stdout (boolean value)
+# Deprecated group/name - [amqp1]/trace
 #trace = false
 
-# Attempt to connect via SSL. If no other ssl-related parameters are given, it
-# will use the system's CA-bundle to verify the server's certificate. (boolean
-# value)
-#ssl = false
-
-# CA certificate PEM file used to verify the server's certificate (string value)
+# CA certificate PEM file to verify server certificate (string value)
+# Deprecated group/name - [amqp1]/ssl_ca_file
 #ssl_ca_file =
 
-# Self-identifying certificate PEM file for client authentication (string value)
+# Identifying certificate PEM file to present to clients (string value)
+# Deprecated group/name - [amqp1]/ssl_cert_file
 #ssl_cert_file =
 
-# Private key PEM file used to sign ssl_cert_file certificate (optional) (string
-# value)
+# Private key PEM file used to sign cert_file certificate (string value)
+# Deprecated group/name - [amqp1]/ssl_key_file
 #ssl_key_file =
 
 # Password for decrypting ssl_key_file (if encrypted) (string value)
+# Deprecated group/name - [amqp1]/ssl_key_password
 #ssl_key_password = <None>
 
-# DEPRECATED: Accept clients using either SSL or plain TCP (boolean value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Not applicable - not a SSL server
+# Accept clients using either SSL or plain TCP (boolean value)
+# Deprecated group/name - [amqp1]/allow_insecure_clients
 #allow_insecure_clients = false
 
 # Space separated list of acceptable SASL mechanisms (string value)
+# Deprecated group/name - [amqp1]/sasl_mechanisms
 #sasl_mechanisms =
 
 # Path to directory that contains the SASL configuration (string value)
+# Deprecated group/name - [amqp1]/sasl_config_dir
 #sasl_config_dir =
 
 # Name of configuration file (without .conf suffix) (string value)
+# Deprecated group/name - [amqp1]/sasl_config_name
 #sasl_config_name =
 
-# SASL realm to use if no realm present in username (string value)
-#sasl_default_realm =
-
-# DEPRECATED: User name for message broker authentication (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the username.
+# User name for message broker authentication (string value)
+# Deprecated group/name - [amqp1]/username
 #username =
 
-# DEPRECATED: Password for message broker authentication (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the password.
+# Password for message broker authentication (string value)
+# Deprecated group/name - [amqp1]/password
 #password =
 
 # Seconds to pause before attempting to re-connect. (integer value)
@@ -1533,12 +1435,8 @@
 # Minimum value: 1
 #link_retry_delay = 10
 
-# The maximum number of attempts to re-send a reply message which failed due to
-# a recoverable error. (integer value)
-# Minimum value: -1
-#default_reply_retry = 0
-
-# The deadline for an rpc reply message delivery. (integer value)
+# The deadline for an rpc reply message delivery. Only used when caller does not
+# provide a timeout expiry. (integer value)
 # Minimum value: 5
 #default_reply_timeout = 30
 
@@ -1551,11 +1449,6 @@
 # does not provide a timeout expiry. (integer value)
 # Minimum value: 5
 #default_notify_timeout = 30
-
-# The duration to schedule a purge of idle sender links. Detach link after
-# expiry. (integer value)
-# Minimum value: 1
-#default_sender_link_timeout = 600
 
 # Indicates the addressing mode used by the driver.
 # Permitted values:
@@ -1566,12 +1459,15 @@
 #addressing_mode = dynamic
 
 # address prefix used when sending to a specific server (string value)
+# Deprecated group/name - [amqp1]/server_request_prefix
 #server_request_prefix = exclusive
 
 # address prefix used when broadcasting to all servers (string value)
+# Deprecated group/name - [amqp1]/broadcast_prefix
 #broadcast_prefix = broadcast
 
 # address prefix when sending to any server in group (string value)
+# Deprecated group/name - [amqp1]/group_request_prefix
 #group_request_prefix = unicast
 
 # Address prefix for all generated RPC addresses (string value)
@@ -1601,6 +1497,7 @@
 # else control_exchange if set
 # else 'notify' (string value)
 #default_notification_exchange = <None>
+default_notification_exchange = glance
 
 # Exchange name used in RPC addresses.
 # Exchange name resolution precedence:
@@ -1622,66 +1519,6 @@
 # Minimum value: 1
 #notify_server_credit = 100
 
-# Send messages of this type pre-settled.
-# Pre-settled messages will not receive acknowledgement
-# from the peer. Note well: pre-settled messages may be
-# silently discarded if the delivery fails.
-# Permitted values:
-# 'rpc-call' - send RPC Calls pre-settled
-# 'rpc-reply'- send RPC Replies pre-settled
-# 'rpc-cast' - Send RPC Casts pre-settled
-# 'notify'   - Send Notifications pre-settled
-#  (multi valued)
-#pre_settled = rpc-cast
-#pre_settled = rpc-reply
-
-
-[oslo_messaging_kafka]
-
-#
-# From oslo.messaging
-#
-
-# DEPRECATED: Default Kafka broker Host (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#kafka_default_host = localhost
-
-# DEPRECATED: Default Kafka broker Port (port value)
-# Minimum value: 0
-# Maximum value: 65535
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#kafka_default_port = 9092
-
-# Max fetch bytes of Kafka consumer (integer value)
-#kafka_max_fetch_bytes = 1048576
-
-# Default timeout(s) for Kafka consumers (floating point value)
-#kafka_consumer_timeout = 1.0
-
-# Pool Size for Kafka Consumers (integer value)
-#pool_size = 10
-
-# The pool size limit for connections expiration policy (integer value)
-#conn_pool_min_size = 2
-
-# The time-to-live in sec of idle connections in the pool (integer value)
-#conn_pool_ttl = 1200
-
-# Group id for Kafka consumer. Consumers in one group will coordinate message
-# consumption (string value)
-#consumer_group = oslo_messaging_consumer
-
-# Upper bound on the delay for KafkaProducer batching in seconds (floating point
-# value)
-#producer_batch_timeout = 0.0
-
-# Size of batch for the producer async send (integer value)
-#producer_batch_size = 16384
-
 
 [oslo_messaging_notifications]
 
@@ -1693,7 +1530,7 @@
 # messagingv2, routing, log, test, noop (multi valued)
 # Deprecated group/name - [DEFAULT]/notification_driver
 #driver =
-
+driver = messagingv2
 # A URL representing the messaging driver to use for notifications. If not set,
 # we fall back to the same configuration used for RPC. (string value)
 # Deprecated group/name - [DEFAULT]/notification_transport_url
@@ -1704,11 +1541,6 @@
 # Deprecated group/name - [DEFAULT]/notification_topics
 #topics = notifications
 
-# The maximum number of attempts to re-send a notification message which failed
-# to be delivered due to a recoverable error. 0 - No retry, -1 - indefinite
-# (integer value)
-#retry = -1
-
 
 [oslo_messaging_rabbit]
 
@@ -1722,31 +1554,30 @@
 #amqp_durable_queues = false
 
 # Auto-delete queues in AMQP. (boolean value)
+# Deprecated group/name - [DEFAULT]/amqp_auto_delete
 #amqp_auto_delete = false
-
-# Enable SSL (boolean value)
-#ssl = <None>
 
 # SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and
 # SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some
 # distributions. (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_version
-#ssl_version =
+# Deprecated group/name - [DEFAULT]/kombu_ssl_version
+#kombu_ssl_version =
 
 # SSL key file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_keyfile
-#ssl_key_file =
+# Deprecated group/name - [DEFAULT]/kombu_ssl_keyfile
+#kombu_ssl_keyfile =
 
 # SSL cert file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_certfile
-#ssl_cert_file =
+# Deprecated group/name - [DEFAULT]/kombu_ssl_certfile
+#kombu_ssl_certfile =
 
 # SSL certification authority file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_ca_certs
-#ssl_ca_file =
+# Deprecated group/name - [DEFAULT]/kombu_ssl_ca_certs
+#kombu_ssl_ca_certs =
 
 # How long to wait before reconnecting in response to an AMQP consumer cancel
 # notification. (floating point value)
+# Deprecated group/name - [DEFAULT]/kombu_reconnect_delay
 #kombu_reconnect_delay = 1.0
 
 # EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression will not
@@ -1766,6 +1597,7 @@
 
 # DEPRECATED: The RabbitMQ broker address where a single node is used. (string
 # value)
+# Deprecated group/name - [DEFAULT]/rabbit_host
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
@@ -1774,34 +1606,43 @@
 # DEPRECATED: The RabbitMQ broker port where a single node is used. (port value)
 # Minimum value: 0
 # Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/rabbit_port
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
 #rabbit_port = 5672
 
 # DEPRECATED: RabbitMQ HA cluster host:port pairs. (list value)
+# Deprecated group/name - [DEFAULT]/rabbit_hosts
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
 #rabbit_hosts = $rabbit_host:$rabbit_port
 
+# Connect over SSL for RabbitMQ. (boolean value)
+# Deprecated group/name - [DEFAULT]/rabbit_use_ssl
+#rabbit_use_ssl = false
+
 # DEPRECATED: The RabbitMQ userid. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_userid
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
 #rabbit_userid = guest
 
 # DEPRECATED: The RabbitMQ password. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_password
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
 #rabbit_password = guest
 
 # The RabbitMQ login method. (string value)
-# Allowed values: PLAIN, AMQPLAIN, RABBIT-CR-DEMO
+# Deprecated group/name - [DEFAULT]/rabbit_login_method
 #rabbit_login_method = AMQPLAIN
 
 # DEPRECATED: The RabbitMQ virtual host. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_virtual_host
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
@@ -1812,6 +1653,7 @@
 
 # How long to backoff for between retries when connecting to RabbitMQ. (integer
 # value)
+# Deprecated group/name - [DEFAULT]/rabbit_retry_backoff
 #rabbit_retry_backoff = 2
 
 # Maximum interval of RabbitMQ connection retries. Default is 30 seconds.
@@ -1820,6 +1662,7 @@
 
 # DEPRECATED: Maximum number of RabbitMQ connection retries. Default is 0
 # (infinite retry count). (integer value)
+# Deprecated group/name - [DEFAULT]/rabbit_max_retries
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 #rabbit_max_retries = 0
@@ -1827,9 +1670,10 @@
 # Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change this
 # option, you must wipe the RabbitMQ database. In RabbitMQ 3.0, queue mirroring
 # is no longer controlled by the x-ha-policy argument when declaring a queue. If
-# you just want to make sure that all queues (except those with auto-generated
+# you just want to make sure that all queues (except  those with auto-generated
 # names) are mirrored across all nodes, run: "rabbitmqctl set_policy HA
 # '^(?!amq\.).*' '{"ha-mode": "all"}' " (boolean value)
+# Deprecated group/name - [DEFAULT]/rabbit_ha_queues
 #rabbit_ha_queues = false
 
 # Positive integer representing duration in seconds for queue TTL (x-expires).
@@ -1852,6 +1696,7 @@
 #heartbeat_rate = 2
 
 # Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake (boolean value)
+# Deprecated group/name - [DEFAULT]/fake_rabbit
 #fake_rabbit = false
 
 # Maximum number of channels to allow (integer value)
@@ -1862,6 +1707,9 @@
 
 # How often to send heartbeats for consumer's connections (integer value)
 #heartbeat_interval = 3
+
+# Enable SSL (boolean value)
+#ssl = <None>
 
 # Arguments passed to ssl.wrap_socket (dict value)
 #ssl_options = <None>
@@ -1899,207 +1747,152 @@
 # (integer value)
 #pool_stale = 60
 
+# Persist notification messages. (boolean value)
+#notification_persistence = false
+
+# Exchange name for sending notifications (string value)
+#default_notification_exchange = ${control_exchange}_notification
+
+# Max number of not acknowledged message which RabbitMQ can send to notification
+# listener. (integer value)
+#notification_listener_prefetch_count = 100
+
+# Reconnecting retry count in case of connectivity problem during sending
+# notification, -1 means infinite retry. (integer value)
+#default_notification_retry_attempts = -1
+
+# Reconnecting retry delay in case of connectivity problem during sending
+# notification message (floating point value)
+#notification_retry_delay = 0.25
+
+# Time to live for rpc queues without consumers in seconds. (integer value)
+#rpc_queue_expiration = 60
+
+# Exchange name for sending RPC messages (string value)
+#default_rpc_exchange = ${control_exchange}_rpc
+
+# Exchange name for receiving RPC replies (string value)
+#rpc_reply_exchange = ${control_exchange}_rpc_reply
+
+# Max number of not acknowledged message which RabbitMQ can send to rpc
+# listener. (integer value)
+#rpc_listener_prefetch_count = 100
+
+# Max number of not acknowledged message which RabbitMQ can send to rpc reply
+# listener. (integer value)
+#rpc_reply_listener_prefetch_count = 100
+
+# Reconnecting retry count in case of connectivity problem during sending reply.
+# -1 means infinite retry during rpc_timeout (integer value)
+#rpc_reply_retry_attempts = -1
+
+# Reconnecting retry delay in case of connectivity problem during sending reply.
+# (floating point value)
+#rpc_reply_retry_delay = 0.25
+
+# Reconnecting retry count in case of connectivity problem during sending RPC
+# message, -1 means infinite retry. If actual retry attempts in not 0 the rpc
+# request could be processed more then one time (integer value)
+#default_rpc_retry_attempts = -1
+
+# Reconnecting retry delay in case of connectivity problem during sending RPC
+# message (floating point value)
+#rpc_retry_delay = 0.25
+
+
+[oslo_messaging_zmq]
+
+#
+# From oslo.messaging
+#
+
+# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
+# The "host" option should point or resolve to this address. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_address
+#rpc_zmq_bind_address = *
+
+# MatchMaker driver. (string value)
+# Allowed values: redis, dummy
+# Deprecated group/name - [DEFAULT]/rpc_zmq_matchmaker
+#rpc_zmq_matchmaker = redis
+
+# Number of ZeroMQ contexts, defaults to 1. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_contexts
+#rpc_zmq_contexts = 1
+
+# Maximum number of ingress messages to locally buffer per topic. Default is
+# unlimited. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_topic_backlog
+#rpc_zmq_topic_backlog = <None>
+
+# Directory for holding IPC sockets. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_ipc_dir
+#rpc_zmq_ipc_dir = /var/run/openstack
+
+# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
+# "host" option, if running Nova. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_host
+#rpc_zmq_host = localhost
+
+# Seconds to wait before a cast expires (TTL). The default value of -1 specifies
+# an infinite linger period. The value of 0 specifies no linger period. Pending
+# messages shall be discarded immediately when the socket is closed. Only
+# supported by impl_zmq. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_cast_timeout
+#rpc_cast_timeout = -1
+
+# The default number of seconds that poll should wait. Poll raises timeout
+# exception when timeout expired. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_poll_timeout
+#rpc_poll_timeout = 1
+
+# Expiration timeout in seconds of a name service record about existing target (
+# < 0 means no timeout). (integer value)
+# Deprecated group/name - [DEFAULT]/zmq_target_expire
+#zmq_target_expire = 300
+
+# Update period in seconds of a name service record about existing target.
+# (integer value)
+# Deprecated group/name - [DEFAULT]/zmq_target_update
+#zmq_target_update = 180
+
+# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
+# value)
+# Deprecated group/name - [DEFAULT]/use_pub_sub
+#use_pub_sub = true
+
+# Use ROUTER remote proxy. (boolean value)
+# Deprecated group/name - [DEFAULT]/use_router_proxy
+#use_router_proxy = true
+
+# Minimal port number for random ports range. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/rpc_zmq_min_port
+#rpc_zmq_min_port = 49153
+
+# Maximal port number for random ports range. (integer value)
+# Minimum value: 1
+# Maximum value: 65536
+# Deprecated group/name - [DEFAULT]/rpc_zmq_max_port
+#rpc_zmq_max_port = 65536
+
+# Number of retries to find free port number before fail with ZMQBindError.
+# (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_port_retries
+#rpc_zmq_bind_port_retries = 100
+
 # Default serialization mechanism for serializing/deserializing
 # outgoing/incoming messages (string value)
 # Allowed values: json, msgpack
-#default_serializer_type = json
-
-# Persist notification messages. (boolean value)
-#notification_persistence = false
-
-# Exchange name for sending notifications (string value)
-#default_notification_exchange = ${control_exchange}_notification
-
-# Max number of not acknowledged message which RabbitMQ can send to notification
-# listener. (integer value)
-#notification_listener_prefetch_count = 100
-
-# Reconnecting retry count in case of connectivity problem during sending
-# notification, -1 means infinite retry. (integer value)
-#default_notification_retry_attempts = -1
-
-# Reconnecting retry delay in case of connectivity problem during sending
-# notification message (floating point value)
-#notification_retry_delay = 0.25
-
-# Time to live for rpc queues without consumers in seconds. (integer value)
-#rpc_queue_expiration = 60
-
-# Exchange name for sending RPC messages (string value)
-#default_rpc_exchange = ${control_exchange}_rpc
-
-# Exchange name for receiving RPC replies (string value)
-#rpc_reply_exchange = ${control_exchange}_rpc_reply
-
-# Max number of not acknowledged message which RabbitMQ can send to rpc
-# listener. (integer value)
-#rpc_listener_prefetch_count = 100
-
-# Max number of not acknowledged message which RabbitMQ can send to rpc reply
-# listener. (integer value)
-#rpc_reply_listener_prefetch_count = 100
-
-# Reconnecting retry count in case of connectivity problem during sending reply.
-# -1 means infinite retry during rpc_timeout (integer value)
-#rpc_reply_retry_attempts = -1
-
-# Reconnecting retry delay in case of connectivity problem during sending reply.
-# (floating point value)
-#rpc_reply_retry_delay = 0.25
-
-# Reconnecting retry count in case of connectivity problem during sending RPC
-# message, -1 means infinite retry. If actual retry attempts in not 0 the rpc
-# request could be processed more than one time (integer value)
-#default_rpc_retry_attempts = -1
-
-# Reconnecting retry delay in case of connectivity problem during sending RPC
-# message (floating point value)
-#rpc_retry_delay = 0.25
-
-
-[oslo_messaging_zmq]
-
-#
-# From oslo.messaging
-#
-
-# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
-# The "host" option should point or resolve to this address. (string value)
-#rpc_zmq_bind_address = *
-
-# MatchMaker driver. (string value)
-# Allowed values: redis, sentinel, dummy
-#rpc_zmq_matchmaker = redis
-
-# Number of ZeroMQ contexts, defaults to 1. (integer value)
-#rpc_zmq_contexts = 1
-
-# Maximum number of ingress messages to locally buffer per topic. Default is
-# unlimited. (integer value)
-#rpc_zmq_topic_backlog = <None>
-
-# Directory for holding IPC sockets. (string value)
-#rpc_zmq_ipc_dir = /var/run/openstack
-
-# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
-# "host" option, if running Nova. (string value)
-#rpc_zmq_host = localhost
-
-# Number of seconds to wait before all pending messages will be sent after
-# closing a socket. The default value of -1 specifies an infinite linger period.
-# The value of 0 specifies no linger period. Pending messages shall be discarded
-# immediately when the socket is closed. Positive values specify an upper bound
-# for the linger period. (integer value)
-# Deprecated group/name - [DEFAULT]/rpc_cast_timeout
-#zmq_linger = -1
-
-# The default number of seconds that poll should wait. Poll raises timeout
-# exception when timeout expired. (integer value)
-#rpc_poll_timeout = 1
-
-# Expiration timeout in seconds of a name service record about existing target (
-# < 0 means no timeout). (integer value)
-#zmq_target_expire = 300
-
-# Update period in seconds of a name service record about existing target.
-# (integer value)
-#zmq_target_update = 180
-
-# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
-# value)
-#use_pub_sub = false
-
-# Use ROUTER remote proxy. (boolean value)
-#use_router_proxy = false
-
-# This option makes direct connections dynamic or static. It makes sense only
-# with use_router_proxy=False which means to use direct connections for direct
-# message types (ignored otherwise). (boolean value)
-#use_dynamic_connections = false
-
-# How many additional connections to a host will be made for failover reasons.
-# This option is actual only in dynamic connections mode. (integer value)
-#zmq_failover_connections = 2
-
-# Minimal port number for random ports range. (port value)
-# Minimum value: 0
-# Maximum value: 65535
-#rpc_zmq_min_port = 49153
-
-# Maximal port number for random ports range. (integer value)
-# Minimum value: 1
-# Maximum value: 65536
-#rpc_zmq_max_port = 65536
-
-# Number of retries to find free port number before fail with ZMQBindError.
-# (integer value)
-#rpc_zmq_bind_port_retries = 100
-
-# Default serialization mechanism for serializing/deserializing
-# outgoing/incoming messages (string value)
-# Allowed values: json, msgpack
+# Deprecated group/name - [DEFAULT]/rpc_zmq_serialization
 #rpc_zmq_serialization = json
 
 # This option configures round-robin mode in zmq socket. True means not keeping
 # a queue when server side disconnects. False means to keep queue and messages
 # even if server is disconnected, when the server appears we send all
 # accumulated messages to it. (boolean value)
-#zmq_immediate = true
-
-# Enable/disable TCP keepalive (KA) mechanism. The default value of -1 (or any
-# other negative value) means to skip any overrides and leave it to OS default;
-# 0 and 1 (or any other positive value) mean to disable and enable the option
-# respectively. (integer value)
-#zmq_tcp_keepalive = -1
-
-# The duration between two keepalive transmissions in idle condition. The unit
-# is platform dependent, for example, seconds in Linux, milliseconds in Windows
-# etc. The default value of -1 (or any other negative value and 0) means to skip
-# any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_idle = -1
-
-# The number of retransmissions to be carried out before declaring that remote
-# end is not available. The default value of -1 (or any other negative value and
-# 0) means to skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_cnt = -1
-
-# The duration between two successive keepalive retransmissions, if
-# acknowledgement to the previous keepalive transmission is not received. The
-# unit is platform dependent, for example, seconds in Linux, milliseconds in
-# Windows etc. The default value of -1 (or any other negative value and 0) means
-# to skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_intvl = -1
-
-# Maximum number of (green) threads to work concurrently. (integer value)
-#rpc_thread_pool_size = 100
-
-# Expiration timeout in seconds of a sent/received message after which it is not
-# tracked anymore by a client/server. (integer value)
-#rpc_message_ttl = 300
-
-# Wait for message acknowledgements from receivers. This mechanism works only
-# via proxy without PUB/SUB. (boolean value)
-#rpc_use_acks = false
-
-# Number of seconds to wait for an ack from a cast/call. After each retry
-# attempt this timeout is multiplied by some specified multiplier. (integer
-# value)
-#rpc_ack_timeout_base = 15
-
-# Number to multiply base ack timeout by after each retry attempt. (integer
-# value)
-#rpc_ack_timeout_multiplier = 2
-
-# Default number of message sending attempts in case of any problems occurred:
-# positive value N means at most N retries, 0 means no retries, None or -1 (or
-# any other negative values) mean to retry forever. This option is used only if
-# acknowledgments are enabled. (integer value)
-#rpc_retry_attempts = 3
-
-# List of publisher hosts SubConsumer can subscribe on. This option has higher
-# priority then the default publishers list taken from the matchmaker. (list
-# value)
-#subscribe_on =
+#zmq_immediate = false
 
 
 [oslo_policy]
@@ -2108,10 +1901,13 @@
 # From oslo.policy
 #
 
-# The file that defines policies. (string value)
+# The JSON file that defines policies. (string value)
+# Deprecated group/name - [DEFAULT]/policy_file
 #policy_file = policy.json
+policy_file = /etc/glance/policy.json
 
 # Default rule. Enforced when a requested rule is not found. (string value)
+# Deprecated group/name - [DEFAULT]/policy_default_rule
 #policy_default_rule = default
 
 # Directories where policy configuration files are stored. They can be relative
@@ -2119,6 +1915,7 @@
 # absolute paths. The file defined by policy_file must exist for these
 # directories to be searched.  Missing or empty directories are ignored. (multi
 # valued)
+# Deprecated group/name - [DEFAULT]/policy_dirs
 #policy_dirs = policy.d
 
 
@@ -2148,6 +1945,7 @@
 #
 #  (string value)
 #flavor = keystone
+flavor = keystone
 
 #
 # Name of the paste configuration file.
@@ -2239,39 +2037,5 @@
 # Examples of possible values:
 #
 # * messaging://: use oslo_messaging driver for sending notifications.
-# * mongodb://127.0.0.1:27017 : use mongodb driver for sending notifications.
-# * elasticsearch://127.0.0.1:9200 : use elasticsearch driver for sending
-# notifications.
 #  (string value)
 #connection_string = messaging://
-
-#
-# Document type for notification indexing in elasticsearch.
-#  (string value)
-#es_doc_type = notification
-
-#
-# This parameter is a time value parameter (for example: es_scroll_time=2m),
-# indicating for how long the nodes that participate in the search will maintain
-# relevant resources in order to continue and support it.
-#  (string value)
-#es_scroll_time = 2m
-
-#
-# Elasticsearch splits large requests in batches. This parameter defines
-# maximum size of each batch (for example: es_scroll_size=10000).
-#  (integer value)
-#es_scroll_size = 10000
-
-#
-# Redissentinel provides a timeout option on the connections.
-# This parameter defines that timeout (for example: socket_timeout=0.1).
-#  (floating point value)
-#socket_timeout = 0.1
-
-#
-# Redissentinel uses a service name to identify a master redis service.
-# This parameter defines the name (for example:
-# sentinal_service_name=mymaster).
-#  (string value)
-#sentinel_service_name = mymaster

2018-06-01 03:16:51,308 [salt.state       ][INFO    ][30011] Completed state [/etc/glance/glance-registry.conf] at time 03:16:51.308444 duration_in_ms=151.658
2018-06-01 03:16:51,308 [salt.state       ][INFO    ][30011] Running state [/etc/glance/glance-scrubber.conf] at time 03:16:51.308896
2018-06-01 03:16:51,309 [salt.state       ][INFO    ][30011] Executing state file.managed for /etc/glance/glance-scrubber.conf
2018-06-01 03:16:51,341 [salt.fileclient  ][INFO    ][30011] Fetching file from saltenv 'base', ** done ** 'glance/files/pike/glance-scrubber.conf.Debian'
2018-06-01 03:16:51,416 [salt.state       ][INFO    ][30011] File changed:
--- 
+++ 
@@ -1,3 +1,4 @@
+
 [DEFAULT]
 
 #
@@ -226,8 +227,8 @@
 #  (boolean value)
 # This option is deprecated for removal since Newton.
 # Its value may be silently ignored in the future.
-# Reason: This option will be removed in the Pike release or later because the
-# same functionality can be achieved with greater granularity by using policies.
+# Reason: This option will be removed in the Ocata release because the same
+# functionality can be achieved with greater granularity by using policies.
 # Please see the Newton release notes for more information.
 #show_multiple_locations = false
 
@@ -409,7 +410,7 @@
 # Related options:
 #     * None
 #
-#  (unknown value)
+#  (string value)
 #pydev_worker_debug_host = localhost
 
 #
@@ -473,56 +474,6 @@
 #
 #  (string value)
 #digest_algorithm = sha256
-
-#
-# The URL provides location where the temporary data will be stored
-#
-# This option is for Glance internal use only. Glance will save the
-# image data uploaded by the user to 'staging' endpoint during the
-# image import process.
-#
-# This option does not change the 'staging' API endpoint by any means.
-#
-# NOTE: It is discouraged to use same path as [task]/work_dir
-#
-# NOTE: 'file://<absolute-directory-path>' is the only option
-# api_image_import flow will support for now.
-#
-# NOTE: The staging path must be on shared filesystem available to all
-# Glance API nodes.
-#
-# Possible values:
-#     * String starting with 'file://' followed by absolute FS path
-#
-# Related options:
-#     * [task]/work_dir
-#     * [DEFAULT]/enable_image_import (*deprecated*)
-#
-#  (string value)
-#node_staging_uri = file:///tmp/staging/
-
-# DEPRECATED:
-# Enables the Image Import workflow introduced in Pike
-#
-# As '[DEFAULT]/node_staging_uri' is required for the Image
-# Import, it's disabled per default in Pike, enabled per
-# default in Queens and removed in Rocky. This allows Glance to
-# operate with previous version configs upon upgrade.
-#
-# Setting this option to True will enable the endpoints related
-# to Image Import Refactoring work.
-#
-# Related options:
-#     * [DEFUALT]/node_staging_uri (boolean value)
-# This option is deprecated for removal since Pike.
-# Its value may be silently ignored in the future.
-# Reason:
-# This option is deprecated for removal in Rocky.
-#
-# It was introduced to make sure that the API is not enabled
-# before the '[DEFAULT]/node_staging_uri' is defined and is
-# long term redundant.
-#enable_image_import = false
 
 #
 # The amount of time, in seconds, to delay image scrubbing.
@@ -670,6 +621,7 @@
 #  (integer value)
 # Minimum value: 0
 #wakeup_time = 300
+wakeup_time = 300
 
 #
 # Run scrubber as a daemon.
@@ -693,6 +645,7 @@
 #
 #  (boolean value)
 #daemon = false
+daemon = false
 
 #
 # Protocol to use for communication with the registry server.
@@ -915,8 +868,9 @@
 # Related options:
 #     * None
 #
-#  (unknown value)
+#  (string value)
 #registry_host = 0.0.0.0
+registry_host = 192.168.10.35
 
 #
 # Port the registry server is listening on.
@@ -931,6 +885,7 @@
 # Minimum value: 0
 # Maximum value: 65535
 #registry_port = 9191
+registry_port = 9191
 
 #
 # From oslo.log
@@ -940,6 +895,12 @@
 # INFO level. (boolean value)
 # Note: This option can be changed without restarting.
 #debug = false
+
+# DEPRECATED: If set to false, the logging level will be set to WARNING instead
+# of the default INFO level. (boolean value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#verbose = true
 
 # The name of a logging configuration file. This file is appended to any
 # existing logging configuration files. For details about logging configuration
@@ -961,6 +922,7 @@
 # log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logfile
 #log_file = <None>
+log_file = /var/log/glance/scrubber.log
 
 # (Optional) The base directory used for relative log_file  paths. This option
 # is ignored if log_config_append is set. (string value)
@@ -979,19 +941,13 @@
 # set. (boolean value)
 #use_syslog = false
 
-# Enable journald for logging. If running in a systemd environment you may wish
-# to enable journal support. Doing so will use the journal native protocol which
-# includes structured metadata in addition to log messages.This option is
-# ignored if log_config_append is set. (boolean value)
-#use_journal = false
-
 # Syslog facility to receive log lines. This option is ignored if
 # log_config_append is set. (string value)
 #syslog_log_facility = LOG_USER
 
 # Log output to standard error. This option is ignored if log_config_append is
 # set. (boolean value)
-#use_stderr = false
+#use_stderr = true
 
 # Format string to use for log messages with context. (string value)
 #logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
@@ -1013,7 +969,7 @@
 
 # List of package logging levels in logger=LEVEL pairs. This option is ignored
 # if log_config_append is set. (list value)
-#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
+#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
 
 # Enables or disables publication of error events. (boolean value)
 #publish_errors = false
@@ -1025,18 +981,6 @@
 # value)
 #instance_uuid_format = "[instance: %(uuid)s] "
 
-# Interval, number of seconds, of log rate limiting. (integer value)
-#rate_limit_interval = 0
-
-# Maximum number of logged messages per rate_limit_interval. (integer value)
-#rate_limit_burst = 0
-
-# Log level name used by rate limiting: CRITICAL, ERROR, INFO, WARNING, DEBUG or
-# empty string. Logs with level greater or equal to rate_limit_except_level are
-# not filtered. An empty string means that all levels are filtered. (string
-# value)
-#rate_limit_except_level = CRITICAL
-
 # Enables or disables fatal status of deprecations. (boolean value)
 #fatal_deprecations = false
 
@@ -1047,7 +991,16 @@
 # From oslo.db
 #
 
+# DEPRECATED: The file name to use with SQLite. (string value)
+# Deprecated group/name - [DEFAULT]/sqlite_db
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Should use config option connection or slave_connection to connect the
+# database.
+#sqlite_db = oslo.sqlite
+
 # If True, SQLite uses synchronous mode. (boolean value)
+# Deprecated group/name - [DEFAULT]/sqlite_synchronous
 #sqlite_synchronous = true
 
 # The back end to use for the database. (string value)
@@ -1070,10 +1023,6 @@
 # the server configuration, set this to no value. Example: mysql_sql_mode=
 # (string value)
 #mysql_sql_mode = TRADITIONAL
-
-# If True, transparently enables support for handling MySQL Cluster (NDB).
-# (boolean value)
-#mysql_enable_ndb = false
 
 # Timeout before idle SQL connections are reaped. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_idle_timeout
@@ -1233,7 +1182,7 @@
 # /store-capabilities.html
 #
 # For more information on setting up a particular store in your
-# deployment and help with the usage of this feature, please contact
+# deplyment and help with the usage of this feature, please contact
 # the storage driver maintainers listed here:
 # http://docs.openstack.org/developer/glance_store/drivers/index.html
 #
@@ -1262,8 +1211,8 @@
 #
 # Possible values:
 #     * A string of of the following form:
-#       ``<service_type>:<service_name>:<interface>``
-#       At least ``service_type`` and ``interface`` should be specified.
+#       ``<service_type>:<service_name>:<endpoint_type>``
+#       At least ``service_type`` and ``endpoint_type`` should be specified.
 #       ``service_name`` can be omitted.
 #
 # Related options:
@@ -1486,25 +1435,6 @@
 #
 #  (string value)
 #rootwrap_config = /etc/glance/rootwrap.conf
-
-#
-# Volume type that will be used for volume creation in cinder.
-#
-# Some cinder backends can have several volume types to optimize storage usage.
-# Adding this option allows an operator to choose a specific volume type
-# in cinder that can be optimized for images.
-#
-# If this is not set, then the default volume type specified in the cinder
-# configuration will be used for volume creation.
-#
-# Possible values:
-#     * A valid volume type from cinder
-#
-# Related options:
-#     * None
-#
-#  (string value)
-#cinder_volume_type = <None>
 
 #
 # Directory to which the filesystem backend store writes images.
@@ -1585,7 +1515,6 @@
 #     * None
 #
 #  (string value)
-#filesystem_store_metadata_file = <None>
 
 #
 # File access permissions for the image files.
@@ -1842,7 +1771,7 @@
 # Related Options:
 #     * sheepdog_store_port
 #
-#  (unknown value)
+#  (string value)
 #sheepdog_store_address = 127.0.0.1
 
 #
@@ -2087,16 +2016,12 @@
 # images in its own account. More details multi-tenant store can be found at
 # https://wiki.openstack.org/wiki/GlanceSwiftTenantSpecificStorage
 #
-# NOTE: If using multi-tenant swift store, please make sure
-# that you do not set a swift configuration file with the
-# 'swift_store_config_file' option.
-#
 # Possible values:
 #     * True
 #     * False
 #
 # Related options:
-#     * swift_store_config_file
+#     * None
 #
 #  (boolean value)
 #swift_store_multi_tenant = false
@@ -2312,15 +2237,12 @@
 # option is highly recommended while using Swift storage backend for
 # image storage as it avoids storage of credentials in the database.
 #
-# NOTE: Please do not configure this option if you have set
-# ``swift_store_multi_tenant`` to ``True``.
-#
 # Possible values:
 #     * String value representing an absolute path on the glance-api
 #       node
 #
 # Related options:
-#     * swift_store_multi_tenant
+#     * None
 #
 #  (string value)
 #swift_store_config_file = <None>
@@ -2341,7 +2263,7 @@
 #     * vmware_server_username
 #     * vmware_server_password
 #
-#  (unknown value)
+#  (string value)
 #vmware_server_host = 127.0.0.1
 
 #
@@ -2511,12 +2433,14 @@
 #
 
 # Enables or disables inter-process locks. (boolean value)
+# Deprecated group/name - [DEFAULT]/disable_process_locking
 #disable_process_locking = false
 
 # Directory to use for lock files.  For security, the specified directory should
 # only be writable by the user running the processes that need locking. Defaults
 # to environment variable OSLO_LOCK_PATH. If external locks are used, a lock
 # path must be set. (string value)
+# Deprecated group/name - [DEFAULT]/lock_path
 #lock_path = <None>
 
 
@@ -2526,10 +2450,12 @@
 # From oslo.policy
 #
 
-# The file that defines policies. (string value)
+# The JSON file that defines policies. (string value)
+# Deprecated group/name - [DEFAULT]/policy_file
 #policy_file = policy.json
 
 # Default rule. Enforced when a requested rule is not found. (string value)
+# Deprecated group/name - [DEFAULT]/policy_default_rule
 #policy_default_rule = default
 
 # Directories where policy configuration files are stored. They can be relative
@@ -2537,4 +2463,5 @@
 # absolute paths. The file defined by policy_file must exist for these
 # directories to be searched.  Missing or empty directories are ignored. (multi
 # valued)
+# Deprecated group/name - [DEFAULT]/policy_dirs
 #policy_dirs = policy.d

2018-06-01 03:16:51,416 [salt.state       ][INFO    ][30011] Completed state [/etc/glance/glance-scrubber.conf] at time 03:16:51.416655 duration_in_ms=107.758
2018-06-01 03:16:51,417 [salt.state       ][INFO    ][30011] Running state [/etc/glance/glance-api.conf] at time 03:16:51.417110
2018-06-01 03:16:51,417 [salt.state       ][INFO    ][30011] Executing state file.managed for /etc/glance/glance-api.conf
2018-06-01 03:16:51,452 [salt.fileclient  ][INFO    ][30011] Fetching file from saltenv 'base', ** done ** 'glance/files/pike/glance-api.conf.Debian'
2018-06-01 03:16:51,673 [salt.state       ][INFO    ][30011] File changed:
--- 
+++ 
@@ -1,3 +1,5 @@
+
+
 [DEFAULT]
 
 #
@@ -79,9 +81,9 @@
 #max_request_id_length = 64
 
 #
-# Public url endpoint to use for Glance versions response.
-#
-# This is the public url endpoint that will appear in the Glance
+# Public url endpoint to use for Glance/Glare versions response.
+#
+# This is the public url endpoint that will appear in the Glance/Glare
 # "versions" response. If no value is specified, the endpoint that is
 # displayed in the version's response is that of the host running the
 # API service. Change the endpoint to represent the proxy URL if the
@@ -233,6 +235,7 @@
 #  (integer value)
 # Minimum value: 1
 #limit_param_default = 25
+limit_param_default = 25
 
 #
 # Maximum number of results that could be returned by a request.
@@ -258,6 +261,7 @@
 #  (integer value)
 # Minimum value: 1
 #api_limit_max = 1000
+api_limit_max = 1000
 
 #
 # Show direct image location when returning an image.
@@ -290,6 +294,7 @@
 #
 #  (boolean value)
 #show_image_direct_url = false
+show_image_direct_url = true
 
 # DEPRECATED:
 # Show all image locations when returning an image.
@@ -321,10 +326,11 @@
 #  (boolean value)
 # This option is deprecated for removal since Newton.
 # Its value may be silently ignored in the future.
-# Reason: This option will be removed in the Pike release or later because the
-# same functionality can be achieved with greater granularity by using policies.
+# Reason: This option will be removed in the Ocata release because the same
+# functionality can be achieved with greater granularity by using policies.
 # Please see the Newton release notes for more information.
 #show_multiple_locations = false
+show_multiple_locations = true
 
 #
 # Maximum size of image a user can upload in bytes.
@@ -409,6 +415,7 @@
 #
 #  (boolean value)
 #enable_v1_api = true
+enable_v1_api=False
 
 #
 # Deploy the v2 OpenStack Images API.
@@ -439,6 +446,7 @@
 #
 #  (boolean value)
 #enable_v2_api = true
+enable_v2_api=True
 
 #
 # Deploy the v1 API Registry service.
@@ -504,7 +512,7 @@
 # Related options:
 #     * None
 #
-#  (unknown value)
+#  (string value)
 #pydev_worker_debug_host = localhost
 
 #
@@ -568,56 +576,6 @@
 #
 #  (string value)
 #digest_algorithm = sha256
-
-#
-# The URL provides location where the temporary data will be stored
-#
-# This option is for Glance internal use only. Glance will save the
-# image data uploaded by the user to 'staging' endpoint during the
-# image import process.
-#
-# This option does not change the 'staging' API endpoint by any means.
-#
-# NOTE: It is discouraged to use same path as [task]/work_dir
-#
-# NOTE: 'file://<absolute-directory-path>' is the only option
-# api_image_import flow will support for now.
-#
-# NOTE: The staging path must be on shared filesystem available to all
-# Glance API nodes.
-#
-# Possible values:
-#     * String starting with 'file://' followed by absolute FS path
-#
-# Related options:
-#     * [task]/work_dir
-#     * [DEFAULT]/enable_image_import (*deprecated*)
-#
-#  (string value)
-#node_staging_uri = file:///tmp/staging/
-
-# DEPRECATED:
-# Enables the Image Import workflow introduced in Pike
-#
-# As '[DEFAULT]/node_staging_uri' is required for the Image
-# Import, it's disabled per default in Pike, enabled per
-# default in Queens and removed in Rocky. This allows Glance to
-# operate with previous version configs upon upgrade.
-#
-# Setting this option to True will enable the endpoints related
-# to Image Import Refactoring work.
-#
-# Related options:
-#     * [DEFUALT]/node_staging_uri (boolean value)
-# This option is deprecated for removal since Pike.
-# Its value may be silently ignored in the future.
-# Reason:
-# This option is deprecated for removal in Rocky.
-#
-# It was introduced to make sure that the API is not enabled
-# before the '[DEFAULT]/node_staging_uri' is defined and is
-# long term redundant.
-#enable_image_import = false
 
 #
 # Strategy to determine the preference order of image locations.
@@ -646,6 +604,9 @@
 # Allowed values: location_order, store_type
 #location_strategy = location_order
 
+location_strategy = location_order
+
+
 #
 # The location of the property protection file.
 #
@@ -660,7 +621,7 @@
 # protections won't be enforced. If a value is specified and the file
 # is not found, the glance-api service will fail to start.
 # More information on property protections can be found at:
-# https://docs.openstack.org/glance/latest/admin/property-protections.html
+# http://docs.openstack.org/developer/glance/property-protections.html
 #
 # Possible values:
 #     * Empty string
@@ -686,8 +647,7 @@
 # policy.json is used to express property protections for each
 # of the CRUD operations. Examples of how property protections
 # are enforced based on ``roles`` or ``policies`` can be found at:
-# https://docs.openstack.org/glance/latest/admin/property-
-# protections.html#examples
+# http://docs.openstack.org/developer/glance/property-protections.html#examples
 #
 # Possible values:
 #     * roles
@@ -738,8 +698,9 @@
 # Related options:
 #     * None
 #
-#  (unknown value)
+#  (string value)
 #bind_host = 0.0.0.0
+bind_host = 192.168.10.38
 
 #
 # Port number on which the server will listen.
@@ -759,6 +720,7 @@
 # Minimum value: 0
 # Maximum value: 65535
 #bind_port = <None>
+bind_port = 9292
 
 #
 # Number of Glance worker processes to start.
@@ -783,6 +745,7 @@
 #  (integer value)
 # Minimum value: 0
 #workers = <None>
+workers = 8
 
 #
 # Maximum line size of message headers.
@@ -1039,6 +1002,7 @@
 #  (integer value)
 # Minimum value: 0
 #image_cache_max_size = 10737418240
+
 
 #
 # The amount of time, in seconds, an incomplete image remains in the cache.
@@ -1154,8 +1118,9 @@
 # Related options:
 #     * None
 #
-#  (unknown value)
+#  (string value)
 #registry_host = 0.0.0.0
+registry_host = 192.168.10.35
 
 #
 # Port the registry server is listening on.
@@ -1170,6 +1135,7 @@
 # Minimum value: 0
 # Maximum value: 65535
 #registry_port = 9191
+registry_port = 9191
 
 # DEPRECATED: Whether to pass through the user token when making requests to the
 # registry. To prevent failures with token expiration during big files upload,
@@ -1245,6 +1211,9 @@
 # Keystone trusts support.
 #auth_region = <None>
 
+auth_region = RegionOne
+
+
 #
 # Protocol to use for communication with the registry server.
 #
@@ -1271,6 +1240,7 @@
 #  (string value)
 # Allowed values: http, https
 #registry_client_protocol = http
+registry_client_protocol = http
 
 #
 # Absolute path to the private key file.
@@ -1337,7 +1307,6 @@
 #     * registry_client_insecure
 #
 #  (string value)
-#registry_client_ca_file = /etc/ssl/cafile/file.ca
 
 #
 # Set verification of the registry server certificate.
@@ -1498,6 +1467,14 @@
 # INFO level. (boolean value)
 # Note: This option can be changed without restarting.
 #debug = false
+debug = false
+
+# DEPRECATED: If set to false, the logging level will be set to WARNING instead
+# of the default INFO level. (boolean value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#verbose = true
+verbose = true
 
 # The name of a logging configuration file. This file is appended to any
 # existing logging configuration files. For details about logging configuration
@@ -1519,6 +1496,7 @@
 # log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logfile
 #log_file = <None>
+log_file = /var/log/glance/api.log
 
 # (Optional) The base directory used for relative log_file  paths. This option
 # is ignored if log_config_append is set. (string value)
@@ -1537,12 +1515,6 @@
 # set. (boolean value)
 #use_syslog = false
 
-# Enable journald for logging. If running in a systemd environment you may wish
-# to enable journal support. Doing so will use the journal native protocol which
-# includes structured metadata in addition to log messages.This option is
-# ignored if log_config_append is set. (boolean value)
-#use_journal = false
-
 # Syslog facility to receive log lines. This option is ignored if
 # log_config_append is set. (string value)
 #syslog_log_facility = LOG_USER
@@ -1571,7 +1543,7 @@
 
 # List of package logging levels in logger=LEVEL pairs. This option is ignored
 # if log_config_append is set. (list value)
-#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
+#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
 
 # Enables or disables publication of error events. (boolean value)
 #publish_errors = false
@@ -1603,6 +1575,7 @@
 #
 
 # Size of RPC connection pool. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_conn_pool_size
 #rpc_conn_pool_size = 30
 
 # The pool size limit for connections expiration policy (integer value)
@@ -1613,24 +1586,30 @@
 
 # ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
 # The "host" option should point or resolve to this address. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_address
 #rpc_zmq_bind_address = *
 
 # MatchMaker driver. (string value)
-# Allowed values: redis, sentinel, dummy
+# Allowed values: redis, dummy
+# Deprecated group/name - [DEFAULT]/rpc_zmq_matchmaker
 #rpc_zmq_matchmaker = redis
 
 # Number of ZeroMQ contexts, defaults to 1. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_contexts
 #rpc_zmq_contexts = 1
 
 # Maximum number of ingress messages to locally buffer per topic. Default is
 # unlimited. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_topic_backlog
 #rpc_zmq_topic_backlog = <None>
 
 # Directory for holding IPC sockets. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_ipc_dir
 #rpc_zmq_ipc_dir = /var/run/openstack
 
 # Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
 # "host" option, if running Nova. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_host
 #rpc_zmq_host = localhost
 
 # Number of seconds to wait before all pending messages will be sent after
@@ -1643,57 +1622,56 @@
 
 # The default number of seconds that poll should wait. Poll raises timeout
 # exception when timeout expired. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_poll_timeout
 #rpc_poll_timeout = 1
 
 # Expiration timeout in seconds of a name service record about existing target (
 # < 0 means no timeout). (integer value)
+# Deprecated group/name - [DEFAULT]/zmq_target_expire
 #zmq_target_expire = 300
 
 # Update period in seconds of a name service record about existing target.
 # (integer value)
+# Deprecated group/name - [DEFAULT]/zmq_target_update
 #zmq_target_update = 180
 
 # Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
 # value)
+# Deprecated group/name - [DEFAULT]/use_pub_sub
 #use_pub_sub = false
 
 # Use ROUTER remote proxy. (boolean value)
+# Deprecated group/name - [DEFAULT]/use_router_proxy
 #use_router_proxy = false
-
-# This option makes direct connections dynamic or static. It makes sense only
-# with use_router_proxy=False which means to use direct connections for direct
-# message types (ignored otherwise). (boolean value)
-#use_dynamic_connections = false
-
-# How many additional connections to a host will be made for failover reasons.
-# This option is actual only in dynamic connections mode. (integer value)
-#zmq_failover_connections = 2
 
 # Minimal port number for random ports range. (port value)
 # Minimum value: 0
 # Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/rpc_zmq_min_port
 #rpc_zmq_min_port = 49153
 
 # Maximal port number for random ports range. (integer value)
 # Minimum value: 1
 # Maximum value: 65536
+# Deprecated group/name - [DEFAULT]/rpc_zmq_max_port
 #rpc_zmq_max_port = 65536
 
 # Number of retries to find free port number before fail with ZMQBindError.
 # (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_port_retries
 #rpc_zmq_bind_port_retries = 100
 
 # Default serialization mechanism for serializing/deserializing
 # outgoing/incoming messages (string value)
 # Allowed values: json, msgpack
+# Deprecated group/name - [DEFAULT]/rpc_zmq_serialization
 #rpc_zmq_serialization = json
 
 # This option configures round-robin mode in zmq socket. True means not keeping
 # a queue when server side disconnects. False means to keep queue and messages
 # even if server is disconnected, when the server appears we send all
 # accumulated messages to it. (boolean value)
-#zmq_immediate = true
-
+#zmq_immediate = false
 # Enable/disable TCP keepalive (KA) mechanism. The default value of -1 (or any
 # other negative value) means to skip any overrides and leave it to OS default;
 # 0 and 1 (or any other positive value) mean to disable and enable the option
@@ -1749,8 +1727,7 @@
 # value)
 #subscribe_on =
 
-# Size of executor thread pool when executor is threading or eventlet. (integer
-# value)
+# Size of executor thread pool. (integer value)
 # Deprecated group/name - [DEFAULT]/rpc_thread_pool_size
 #executor_thread_pool_size = 64
 
@@ -1760,6 +1737,7 @@
 # A URL representing the messaging driver to use and its full configuration.
 # (string value)
 #transport_url = <None>
+transport_url = rabbit://openstack:opnfv_secret@192.168.10.28:5672,openstack:opnfv_secret@192.168.10.29:5672,openstack:opnfv_secret@192.168.10.30:5672//openstack
 
 # DEPRECATED: The messaging driver to use, defaults to rabbit. Other drivers
 # include amqp and zmq. (string value)
@@ -1771,6 +1749,8 @@
 # The default exchange under which topics are scoped. May be overridden by an
 # exchange name specified in the transport_url option. (string value)
 #control_exchange = openstack
+control_exchange = openstack
+scrubber_datadir=/var/lib/glance/scrubber
 
 
 [cors]
@@ -1802,18 +1782,57 @@
 #allow_headers = Content-MD5,X-Image-Meta-Checksum,X-Storage-Token,Accept-Encoding,X-Auth-Token,X-Identity-Status,X-Roles,X-Service-Catalog,X-User-Id,X-Tenant-Id,X-OpenStack-Request-ID
 
 
+[cors.subdomain]
+
+#
+# From oslo.middleware.cors
+#
+
+# Indicate whether this resource may be shared with the domain received in the
+# requests "origin" header. Format: "<protocol>://<host>[:<port>]", no trailing
+# slash. Example: https://horizon.example.com (list value)
+#allowed_origin = <None>
+
+# Indicate that the actual request can include user credentials (boolean value)
+#allow_credentials = true
+
+# Indicate which headers are safe to expose to the API. Defaults to HTTP Simple
+# Headers. (list value)
+#expose_headers = X-Image-Meta-Checksum,X-Auth-Token,X-Subject-Token,X-Service-Token,X-OpenStack-Request-ID
+
+# Maximum cache age of CORS preflight requests. (integer value)
+#max_age = 3600
+
+# Indicate which methods can be used during the actual request. (list value)
+#allow_methods = GET,PUT,POST,DELETE,PATCH
+
+# Indicate which header field names may be used during the actual request. (list
+# value)
+#allow_headers = Content-MD5,X-Image-Meta-Checksum,X-Storage-Token,Accept-Encoding,X-Auth-Token,X-Identity-Status,X-Roles,X-Service-Catalog,X-User-Id,X-Tenant-Id,X-OpenStack-Request-ID
+
+
 [database]
 
 #
 # From oslo.db
 #
 
+# DEPRECATED: The file name to use with SQLite. (string value)
+# Deprecated group/name - [DEFAULT]/sqlite_db
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Should use config option connection or slave_connection to connect the
+# database.
+#sqlite_db = oslo.sqlite
+
 # If True, SQLite uses synchronous mode. (boolean value)
+# Deprecated group/name - [DEFAULT]/sqlite_synchronous
 #sqlite_synchronous = true
 
 # The back end to use for the database. (string value)
 # Deprecated group/name - [DEFAULT]/db_backend
 #backend = sqlalchemy
+backend = sqlalchemy
 
 # The SQLAlchemy connection string to use to connect to the database. (string
 # value)
@@ -1821,6 +1840,7 @@
 # Deprecated group/name - [DATABASE]/sql_connection
 # Deprecated group/name - [sql]/connection
 #connection = <None>
+connection = mysql+pymysql://glance:opnfv_secret@192.168.10.23/glance
 
 # The SQLAlchemy connection string to use to connect to the slave database.
 # (string value)
@@ -1832,15 +1852,12 @@
 # (string value)
 #mysql_sql_mode = TRADITIONAL
 
-# If True, transparently enables support for handling MySQL Cluster (NDB).
-# (boolean value)
-#mysql_enable_ndb = false
-
 # Timeout before idle SQL connections are reaped. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_idle_timeout
 # Deprecated group/name - [DATABASE]/sql_idle_timeout
 # Deprecated group/name - [sql]/idle_timeout
 #idle_timeout = 3600
+idle_timeout = 3600
 
 # Minimum number of SQL connections to keep open in a pool. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_min_pool_size
@@ -1858,6 +1875,7 @@
 # Deprecated group/name - [DEFAULT]/sql_max_retries
 # Deprecated group/name - [DATABASE]/sql_max_retries
 #max_retries = 10
+max_retries = -1
 
 # Interval between retries of opening a SQL connection. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_retry_interval
@@ -1868,6 +1886,7 @@
 # Deprecated group/name - [DEFAULT]/sql_max_overflow
 # Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
 #max_overflow = 50
+max_overflow = 30
 
 # Verbosity of SQL debugging information: 0=None, 100=Everything. (integer
 # value)
@@ -1941,7 +1960,8 @@
 #
 #  (list value)
 #stores = file,http
-
+default_store = file
+stores = file,http
 #
 # The default scheme to use for storing images.
 #
@@ -1994,7 +2014,7 @@
 # /store-capabilities.html
 #
 # For more information on setting up a particular store in your
-# deployment and help with the usage of this feature, please contact
+# deplyment and help with the usage of this feature, please contact
 # the storage driver maintainers listed here:
 # http://docs.openstack.org/developer/glance_store/drivers/index.html
 #
@@ -2023,8 +2043,8 @@
 #
 # Possible values:
 #     * A string of of the following form:
-#       ``<service_type>:<service_name>:<interface>``
-#       At least ``service_type`` and ``interface`` should be specified.
+#       ``<service_type>:<service_name>:<endpoint_type>``
+#       At least ``service_type`` and ``endpoint_type`` should be specified.
 #       ``service_name`` can be omitted.
 #
 # Related options:
@@ -2038,6 +2058,9 @@
 #  (string value)
 #cinder_catalog_info = volumev2::publicURL
 
+
+cinder_catalog_info = volumev2::internalURL
+
 #
 # Override service catalog lookup with template for cinder endpoint.
 #
@@ -2082,6 +2105,9 @@
 # Deprecated group/name - [glance_store]/os_region_name
 #cinder_os_region_name = <None>
 
+cinder_os_region_name = RegionOne
+
+
 #
 # Location of a CA certificates file used for cinder client requests.
 #
@@ -2097,7 +2123,6 @@
 #     * cinder_api_insecure
 #
 #  (string value)
-#cinder_ca_certificates_file = <None>
 
 #
 # Number of cinderclient retries on failed http calls.
@@ -2249,25 +2274,6 @@
 #rootwrap_config = /etc/glance/rootwrap.conf
 
 #
-# Volume type that will be used for volume creation in cinder.
-#
-# Some cinder backends can have several volume types to optimize storage usage.
-# Adding this option allows an operator to choose a specific volume type
-# in cinder that can be optimized for images.
-#
-# If this is not set, then the default volume type specified in the cinder
-# configuration will be used for volume creation.
-#
-# Possible values:
-#     * A valid volume type from cinder
-#
-# Related options:
-#     * None
-#
-#  (string value)
-#cinder_volume_type = <None>
-
-#
 # Directory to which the filesystem backend store writes images.
 #
 # Upon start up, Glance creates the directory if it doesn't already
@@ -2292,6 +2298,7 @@
 #
 #  (string value)
 #filesystem_store_datadir = /var/lib/glance/images
+filesystem_store_datadir = /var/lib/glance/images/
 
 #
 # List of directories and their priorities to which the filesystem
@@ -2346,7 +2353,6 @@
 #     * None
 #
 #  (string value)
-#filesystem_store_metadata_file = <None>
 
 #
 # File access permissions for the image files.
@@ -2435,106 +2441,6 @@
 #http_proxy_information =
 
 #
-# Size, in megabytes, to chunk RADOS images into.
-#
-# Provide an integer value representing the size in megabytes to chunk
-# Glance images into. The default chunk size is 8 megabytes. For optimal
-# performance, the value should be a power of two.
-#
-# When Ceph's RBD object storage system is used as the storage backend
-# for storing Glance images, the images are chunked into objects of the
-# size set using this option. These chunked objects are then stored
-# across the distributed block data store to use for Glance.
-#
-# Possible Values:
-#     * Any positive integer value
-#
-# Related options:
-#     * None
-#
-#  (integer value)
-# Minimum value: 1
-#rbd_store_chunk_size = 8
-
-#
-# RADOS pool in which images are stored.
-#
-# When RBD is used as the storage backend for storing Glance images, the
-# images are stored by means of logical grouping of the objects (chunks
-# of images) into a ``pool``. Each pool is defined with the number of
-# placement groups it can contain. The default pool that is used is
-# 'images'.
-#
-# More information on the RBD storage backend can be found here:
-# http://ceph.com/planet/how-data-is-stored-in-ceph-cluster/
-#
-# Possible Values:
-#     * A valid pool name
-#
-# Related options:
-#     * None
-#
-#  (string value)
-#rbd_store_pool = images
-
-#
-# RADOS user to authenticate as.
-#
-# This configuration option takes in the RADOS user to authenticate as.
-# This is only needed when RADOS authentication is enabled and is
-# applicable only if the user is using Cephx authentication. If the
-# value for this option is not set by the user or is set to None, a
-# default value will be chosen, which will be based on the client.
-# section in rbd_store_ceph_conf.
-#
-# Possible Values:
-#     * A valid RADOS user
-#
-# Related options:
-#     * rbd_store_ceph_conf
-#
-#  (string value)
-#rbd_store_user = <None>
-
-#
-# Ceph configuration file path.
-#
-# This configuration option takes in the path to the Ceph configuration
-# file to be used. If the value for this option is not set by the user
-# or is set to None, librados will locate the default configuration file
-# which is located at /etc/ceph/ceph.conf. If using Cephx
-# authentication, this file should include a reference to the right
-# keyring in a client.<USER> section
-#
-# Possible Values:
-#     * A valid path to a configuration file
-#
-# Related options:
-#     * rbd_store_user
-#
-#  (string value)
-#rbd_store_ceph_conf = /etc/ceph/ceph.conf
-
-#
-# Timeout value for connecting to Ceph cluster.
-#
-# This configuration option takes in the timeout value in seconds used
-# when connecting to the Ceph cluster i.e. it sets the time to wait for
-# glance-api before closing the connection. This prevents glance-api
-# hangups during the connection to RBD. If the value for this option
-# is set to less than or equal to 0, no timeout is set and the default
-# librados value is used.
-#
-# Possible Values:
-#     * Any integer value
-#
-# Related options:
-#     * None
-#
-#  (integer value)
-#rados_connect_timeout = 0
-
-#
 # Chunk size for images to be stored in Sheepdog data store.
 #
 # Provide an integer value representing the size in mebibyte
@@ -2603,7 +2509,7 @@
 # Related Options:
 #     * sheepdog_store_port
 #
-#  (unknown value)
+#  (string value)
 #sheepdog_store_address = 127.0.0.1
 
 #
@@ -2622,469 +2528,6 @@
 #     * swift_store_cacert
 #
 #  (boolean value)
-#swift_store_auth_insecure = false
-
-#
-# Path to the CA bundle file.
-#
-# This configuration option enables the operator to specify the path to
-# a custom Certificate Authority file for SSL verification when
-# connecting to Swift.
-#
-# Possible values:
-#     * A valid path to a CA file
-#
-# Related options:
-#     * swift_store_auth_insecure
-#
-#  (string value)
-#swift_store_cacert = /etc/ssl/certs/ca-certificates.crt
-
-#
-# The region of Swift endpoint to use by Glance.
-#
-# Provide a string value representing a Swift region where Glance
-# can connect to for image storage. By default, there is no region
-# set.
-#
-# When Glance uses Swift as the storage backend to store images
-# for a specific tenant that has multiple endpoints, setting of a
-# Swift region with ``swift_store_region`` allows Glance to connect
-# to Swift in the specified region as opposed to a single region
-# connectivity.
-#
-# This option can be configured for both single-tenant and
-# multi-tenant storage.
-#
-# NOTE: Setting the region with ``swift_store_region`` is
-# tenant-specific and is necessary ``only if`` the tenant has
-# multiple endpoints across different regions.
-#
-# Possible values:
-#     * A string value representing a valid Swift region.
-#
-# Related Options:
-#     * None
-#
-#  (string value)
-#swift_store_region = RegionTwo
-
-#
-# The URL endpoint to use for Swift backend storage.
-#
-# Provide a string value representing the URL endpoint to use for
-# storing Glance images in Swift store. By default, an endpoint
-# is not set and the storage URL returned by ``auth`` is used.
-# Setting an endpoint with ``swift_store_endpoint`` overrides the
-# storage URL and is used for Glance image storage.
-#
-# NOTE: The URL should include the path up to, but excluding the
-# container. The location of an object is obtained by appending
-# the container and object to the configured URL.
-#
-# Possible values:
-#     * String value representing a valid URL path up to a Swift container
-#
-# Related Options:
-#     * None
-#
-#  (string value)
-#swift_store_endpoint = https://swift.openstack.example.org/v1/path_not_including_container_name
-
-#
-# Endpoint Type of Swift service.
-#
-# This string value indicates the endpoint type to use to fetch the
-# Swift endpoint. The endpoint type determines the actions the user will
-# be allowed to perform, for instance, reading and writing to the Store.
-# This setting is only used if swift_store_auth_version is greater than
-# 1.
-#
-# Possible values:
-#     * publicURL
-#     * adminURL
-#     * internalURL
-#
-# Related options:
-#     * swift_store_endpoint
-#
-#  (string value)
-# Allowed values: publicURL, adminURL, internalURL
-#swift_store_endpoint_type = publicURL
-
-#
-# Type of Swift service to use.
-#
-# Provide a string value representing the service type to use for
-# storing images while using Swift backend storage. The default
-# service type is set to ``object-store``.
-#
-# NOTE: If ``swift_store_auth_version`` is set to 2, the value for
-# this configuration option needs to be ``object-store``. If using
-# a higher version of Keystone or a different auth scheme, this
-# option may be modified.
-#
-# Possible values:
-#     * A string representing a valid service type for Swift storage.
-#
-# Related Options:
-#     * None
-#
-#  (string value)
-#swift_store_service_type = object-store
-
-#
-# Name of single container to store images/name prefix for multiple containers
-#
-# When a single container is being used to store images, this configuration
-# option indicates the container within the Glance account to be used for
-# storing all images. When multiple containers are used to store images, this
-# will be the name prefix for all containers. Usage of single/multiple
-# containers can be controlled using the configuration option
-# ``swift_store_multiple_containers_seed``.
-#
-# When using multiple containers, the containers will be named after the value
-# set for this configuration option with the first N chars of the image UUID
-# as the suffix delimited by an underscore (where N is specified by
-# ``swift_store_multiple_containers_seed``).
-#
-# Example: if the seed is set to 3 and swift_store_container = ``glance``, then
-# an image with UUID ``fdae39a1-bac5-4238-aba4-69bcc726e848`` would be placed in
-# the container ``glance_fda``. All dashes in the UUID are included when
-# creating the container name but do not count toward the character limit, so
-# when N=10 the container name would be ``glance_fdae39a1-ba.``
-#
-# Possible values:
-#     * If using single container, this configuration option can be any string
-#       that is a valid swift container name in Glance's Swift account
-#     * If using multiple containers, this configuration option can be any
-#       string as long as it satisfies the container naming rules enforced by
-#       Swift. The value of ``swift_store_multiple_containers_seed`` should be
-#       taken into account as well.
-#
-# Related options:
-#     * ``swift_store_multiple_containers_seed``
-#     * ``swift_store_multi_tenant``
-#     * ``swift_store_create_container_on_put``
-#
-#  (string value)
-#swift_store_container = glance
-
-#
-# The size threshold, in MB, after which Glance will start segmenting image
-# data.
-#
-# Swift has an upper limit on the size of a single uploaded object. By default,
-# this is 5GB. To upload objects bigger than this limit, objects are segmented
-# into multiple smaller objects that are tied together with a manifest file.
-# For more detail, refer to
-# http://docs.openstack.org/developer/swift/overview_large_objects.html
-#
-# This configuration option specifies the size threshold over which the Swift
-# driver will start segmenting image data into multiple smaller files.
-# Currently, the Swift driver only supports creating Dynamic Large Objects.
-#
-# NOTE: This should be set by taking into account the large object limit
-# enforced by the Swift cluster in consideration.
-#
-# Possible values:
-#     * A positive integer that is less than or equal to the large object limit
-#       enforced by the Swift cluster in consideration.
-#
-# Related options:
-#     * ``swift_store_large_object_chunk_size``
-#
-#  (integer value)
-# Minimum value: 1
-#swift_store_large_object_size = 5120
-
-#
-# The maximum size, in MB, of the segments when image data is segmented.
-#
-# When image data is segmented to upload images that are larger than the limit
-# enforced by the Swift cluster, image data is broken into segments that are no
-# bigger than the size specified by this configuration option.
-# Refer to ``swift_store_large_object_size`` for more detail.
-#
-# For example: if ``swift_store_large_object_size`` is 5GB and
-# ``swift_store_large_object_chunk_size`` is 1GB, an image of size 6.2GB will be
-# segmented into 7 segments where the first six segments will be 1GB in size and
-# the seventh segment will be 0.2GB.
-#
-# Possible values:
-#     * A positive integer that is less than or equal to the large object limit
-#       enforced by Swift cluster in consideration.
-#
-# Related options:
-#     * ``swift_store_large_object_size``
-#
-#  (integer value)
-# Minimum value: 1
-#swift_store_large_object_chunk_size = 200
-
-#
-# Create container, if it doesn't already exist, when uploading image.
-#
-# At the time of uploading an image, if the corresponding container doesn't
-# exist, it will be created provided this configuration option is set to True.
-# By default, it won't be created. This behavior is applicable for both single
-# and multiple containers mode.
-#
-# Possible values:
-#     * True
-#     * False
-#
-# Related options:
-#     * None
-#
-#  (boolean value)
-#swift_store_create_container_on_put = false
-
-#
-# Store images in tenant's Swift account.
-#
-# This enables multi-tenant storage mode which causes Glance images to be stored
-# in tenant specific Swift accounts. If this is disabled, Glance stores all
-# images in its own account. More details multi-tenant store can be found at
-# https://wiki.openstack.org/wiki/GlanceSwiftTenantSpecificStorage
-#
-# NOTE: If using multi-tenant swift store, please make sure
-# that you do not set a swift configuration file with the
-# 'swift_store_config_file' option.
-#
-# Possible values:
-#     * True
-#     * False
-#
-# Related options:
-#     * swift_store_config_file
-#
-#  (boolean value)
-#swift_store_multi_tenant = false
-
-#
-# Seed indicating the number of containers to use for storing images.
-#
-# When using a single-tenant store, images can be stored in one or more than one
-# containers. When set to 0, all images will be stored in one single container.
-# When set to an integer value between 1 and 32, multiple containers will be
-# used to store images. This configuration option will determine how many
-# containers are created. The total number of containers that will be used is
-# equal to 16^N, so if this config option is set to 2, then 16^2=256 containers
-# will be used to store images.
-#
-# Please refer to ``swift_store_container`` for more detail on the naming
-# convention. More detail about using multiple containers can be found at
-# https://specs.openstack.org/openstack/glance-specs/specs/kilo/swift-store-
-# multiple-containers.html
-#
-# NOTE: This is used only when swift_store_multi_tenant is disabled.
-#
-# Possible values:
-#     * A non-negative integer less than or equal to 32
-#
-# Related options:
-#     * ``swift_store_container``
-#     * ``swift_store_multi_tenant``
-#     * ``swift_store_create_container_on_put``
-#
-#  (integer value)
-# Minimum value: 0
-# Maximum value: 32
-#swift_store_multiple_containers_seed = 0
-
-#
-# List of tenants that will be granted admin access.
-#
-# This is a list of tenants that will be granted read/write access on
-# all Swift containers created by Glance in multi-tenant mode. The
-# default value is an empty list.
-#
-# Possible values:
-#     * A comma separated list of strings representing UUIDs of Keystone
-#       projects/tenants
-#
-# Related options:
-#     * None
-#
-#  (list value)
-#swift_store_admin_tenants =
-
-#
-# SSL layer compression for HTTPS Swift requests.
-#
-# Provide a boolean value to determine whether or not to compress
-# HTTPS Swift requests for images at the SSL layer. By default,
-# compression is enabled.
-#
-# When using Swift as the backend store for Glance image storage,
-# SSL layer compression of HTTPS Swift requests can be set using
-# this option. If set to False, SSL layer compression of HTTPS
-# Swift requests is disabled. Disabling this option may improve
-# performance for images which are already in a compressed format,
-# for example, qcow2.
-#
-# Possible values:
-#     * True
-#     * False
-#
-# Related Options:
-#     * None
-#
-#  (boolean value)
-#swift_store_ssl_compression = true
-
-#
-# The number of times a Swift download will be retried before the
-# request fails.
-#
-# Provide an integer value representing the number of times an image
-# download must be retried before erroring out. The default value is
-# zero (no retry on a failed image download). When set to a positive
-# integer value, ``swift_store_retry_get_count`` ensures that the
-# download is attempted this many more times upon a download failure
-# before sending an error message.
-#
-# Possible values:
-#     * Zero
-#     * Positive integer value
-#
-# Related Options:
-#     * None
-#
-#  (integer value)
-# Minimum value: 0
-#swift_store_retry_get_count = 0
-
-#
-# Time in seconds defining the size of the window in which a new
-# token may be requested before the current token is due to expire.
-#
-# Typically, the Swift storage driver fetches a new token upon the
-# expiration of the current token to ensure continued access to
-# Swift. However, some Swift transactions (like uploading image
-# segments) may not recover well if the token expires on the fly.
-#
-# Hence, by fetching a new token before the current token expiration,
-# we make sure that the token does not expire or is close to expiry
-# before a transaction is attempted. By default, the Swift storage
-# driver requests for a new token 60 seconds or less before the
-# current token expiration.
-#
-# Possible values:
-#     * Zero
-#     * Positive integer value
-#
-# Related Options:
-#     * None
-#
-#  (integer value)
-# Minimum value: 0
-#swift_store_expire_soon_interval = 60
-
-#
-# Use trusts for multi-tenant Swift store.
-#
-# This option instructs the Swift store to create a trust for each
-# add/get request when the multi-tenant store is in use. Using trusts
-# allows the Swift store to avoid problems that can be caused by an
-# authentication token expiring during the upload or download of data.
-#
-# By default, ``swift_store_use_trusts`` is set to ``True``(use of
-# trusts is enabled). If set to ``False``, a user token is used for
-# the Swift connection instead, eliminating the overhead of trust
-# creation.
-#
-# NOTE: This option is considered only when
-# ``swift_store_multi_tenant`` is set to ``True``
-#
-# Possible values:
-#     * True
-#     * False
-#
-# Related options:
-#     * swift_store_multi_tenant
-#
-#  (boolean value)
-#swift_store_use_trusts = true
-
-#
-# Reference to default Swift account/backing store parameters.
-#
-# Provide a string value representing a reference to the default set
-# of parameters required for using swift account/backing store for
-# image storage. The default reference value for this configuration
-# option is 'ref1'. This configuration option dereferences the
-# parameters and facilitates image storage in Swift storage backend
-# every time a new image is added.
-#
-# Possible values:
-#     * A valid string value
-#
-# Related options:
-#     * None
-#
-#  (string value)
-#default_swift_reference = ref1
-
-# DEPRECATED: Version of the authentication service to use. Valid versions are 2
-# and 3 for keystone and 1 (deprecated) for swauth and rackspace. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason:
-# The option 'auth_version' in the Swift back-end configuration file is
-# used instead.
-#swift_store_auth_version = 2
-
-# DEPRECATED: The address where the Swift authentication service is listening.
-# (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason:
-# The option 'auth_address' in the Swift back-end configuration file is
-# used instead.
-#swift_store_auth_address = <None>
-
-# DEPRECATED: The user to authenticate against the Swift authentication service.
-# (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason:
-# The option 'user' in the Swift back-end configuration file is set instead.
-#swift_store_user = <None>
-
-# DEPRECATED: Auth key for the user authenticating against the Swift
-# authentication service. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason:
-# The option 'key' in the Swift back-end configuration file is used
-# to set the authentication key instead.
-#swift_store_key = <None>
-
-#
-# Absolute path to the file containing the swift account(s)
-# configurations.
-#
-# Include a string value representing the path to a configuration
-# file that has references for each of the configured Swift
-# account(s)/backing stores. By default, no file path is specified
-# and customized Swift referencing is disabled. Configuring this
-# option is highly recommended while using Swift storage backend for
-# image storage as it avoids storage of credentials in the database.
-#
-# NOTE: Please do not configure this option if you have set
-# ``swift_store_multi_tenant`` to ``True``.
-#
-# Possible values:
-#     * String value representing an absolute path on the glance-api
-#       node
-#
-# Related options:
-#     * swift_store_multi_tenant
-#
-#  (string value)
-#swift_store_config_file = <None>
 
 #
 # Address of the ESX/ESXi or vCenter Server target system.
@@ -3102,7 +2545,7 @@
 #     * vmware_server_username
 #     * vmware_server_password
 #
-#  (unknown value)
+#  (string value)
 #vmware_server_host = 127.0.0.1
 
 #
@@ -3277,11 +2720,22 @@
 
 # Supported values for the 'disk_format' image attribute (list value)
 # Deprecated group/name - [DEFAULT]/disk_formats
-disk_formats = ami,ari,aki,vhd,vhdx,vmdk,raw,qcow2,vdi,iso,ploop.root-tar
+#disk_formats = ami,ari,aki,vhd,vhdx,vmdk,raw,qcow2,vdi,iso
 
 
 [keystone_authtoken]
-
+revocation_cache_time = 10
+auth_type = password
+user_domain_id = default
+project_domain_id = default
+project_name = service
+username = glance
+password = opnfv_secret
+auth_uri=http://192.168.10.35:5000
+auth_url=http://192.168.10.35:35357
+
+token_cache_time = -1
+memcached_servers=192.168.10.36:11211,192.168.10.37:11211,192.168.10.38:11211
 #
 # From keystonemiddleware.auth_token
 #
@@ -3289,10 +2743,10 @@
 # Complete "public" Identity API endpoint. This endpoint should not be an
 # "admin" endpoint, as it should be accessible by all end users. Unauthenticated
 # clients are redirected to this endpoint to authenticate. Although this
-# endpoint should ideally be unversioned, client support in the wild varies. If
-# you're using a versioned v2 endpoint here, then this should *not* be the same
-# endpoint the service user utilizes for validating tokens, because normal end
-# users may not be able to reach that endpoint. (string value)
+# endpoint should  ideally be unversioned, client support in the wild varies.
+# If you're using a versioned v2 endpoint here, then this  should *not* be the
+# same endpoint the service user utilizes  for validating tokens, because normal
+# end users may not be  able to reach that endpoint. (string value)
 #auth_uri = <None>
 
 # API version of the admin Identity API endpoint. (string value)
@@ -3332,12 +2786,7 @@
 # The region in which the identity server can be found. (string value)
 #region_name = <None>
 
-# DEPRECATED: Directory used to cache files related to PKI tokens. This option
-# has been deprecated in the Ocata release and will be removed in the P release.
-# (string value)
-# This option is deprecated for removal since Ocata.
-# Its value may be silently ignored in the future.
-# Reason: PKI token format is no longer supported.
+# Directory used to cache files related to PKI tokens. (string value)
 #signing_dir = <None>
 
 # Optionally specify a list of memcached server(s) to use for caching. If left
@@ -3350,14 +2799,10 @@
 # -1 to disable caching completely. (integer value)
 #token_cache_time = 300
 
-# DEPRECATED: Determines the frequency at which the list of revoked tokens is
-# retrieved from the Identity service (in seconds). A high number of revocation
-# events combined with a low cache duration may significantly reduce
-# performance. Only valid for PKI tokens. This option has been deprecated in the
-# Ocata release and will be removed in the P release. (integer value)
-# This option is deprecated for removal since Ocata.
-# Its value may be silently ignored in the future.
-# Reason: PKI token format is no longer supported.
+# Determines the frequency at which the list of revoked tokens is retrieved from
+# the Identity service (in seconds). A high number of revocation events combined
+# with a low cache duration may significantly reduce performance. Only valid for
+# PKI tokens. (integer value)
 #revocation_cache_time = 10
 
 # (Optional) If defined, indicate whether token data should be authenticated or
@@ -3410,40 +2855,19 @@
 # value)
 #enforce_token_bind = permissive
 
-# DEPRECATED: If true, the revocation list will be checked for cached tokens.
-# This requires that PKI tokens are configured on the identity server. (boolean
-# value)
-# This option is deprecated for removal since Ocata.
-# Its value may be silently ignored in the future.
-# Reason: PKI token format is no longer supported.
+# If true, the revocation list will be checked for cached tokens. This requires
+# that PKI tokens are configured on the identity server. (boolean value)
 #check_revocations_for_cached = false
 
-# DEPRECATED: Hash algorithms to use for hashing PKI tokens. This may be a
-# single algorithm or multiple. The algorithms are those supported by Python
-# standard hashlib.new(). The hashes will be tried in the order given, so put
-# the preferred one first for performance. The result of the first hash will be
+# Hash algorithms to use for hashing PKI tokens. This may be a single algorithm
+# or multiple. The algorithms are those supported by Python standard
+# hashlib.new(). The hashes will be tried in the order given, so put the
+# preferred one first for performance. The result of the first hash will be
 # stored in the cache. This will typically be set to multiple values only while
 # migrating from a less secure algorithm to a more secure one. Once all the old
 # tokens are expired this option should be set to a single value for better
 # performance. (list value)
-# This option is deprecated for removal since Ocata.
-# Its value may be silently ignored in the future.
-# Reason: PKI token format is no longer supported.
 #hash_algorithms = md5
-
-# A choice of roles that must be present in a service token. Service tokens are
-# allowed to request that an expired token can be used and so this check should
-# tightly control that only actual services should be sending this token. Roles
-# here are applied as an ANY check so any role in this list must be present. For
-# backwards compatibility reasons this currently only affects the allow_expired
-# check. (list value)
-#service_token_roles = service
-
-# For backwards compatibility reasons we must let valid service tokens pass that
-# don't pass the service_token_roles check as valid. Setting this true will
-# become the default in a future release and should be enabled if possible.
-# (boolean value)
-#service_token_roles_required = false
 
 # Authentication type to load (string value)
 # Deprecated group/name - [keystone_authtoken]/auth_plugin
@@ -3479,7 +2903,7 @@
 # Reason: Replaced by [DEFAULT]/transport_url
 #password =
 
-# DEPRECATED: List of Redis Sentinel hosts (fault tolerance mode), e.g.,
+# DEPRECATED: List of Redis Sentinel hosts (fault tolerance mode) e.g.
 # [host:port, host1:port ... ] (list value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
@@ -3495,7 +2919,7 @@
 # Time in ms to wait before the transaction is killed. (integer value)
 #check_timeout = 20000
 
-# Timeout in ms on blocking socket operations. (integer value)
+# Timeout in ms on blocking socket operations (integer value)
 #socket_timeout = 10000
 
 
@@ -3506,12 +2930,14 @@
 #
 
 # Enables or disables inter-process locks. (boolean value)
+# Deprecated group/name - [DEFAULT]/disable_process_locking
 #disable_process_locking = false
 
 # Directory to use for lock files.  For security, the specified directory should
 # only be writable by the user running the processes that need locking. Defaults
 # to environment variable OSLO_LOCK_PATH. If external locks are used, a lock
 # path must be set. (string value)
+# Deprecated group/name - [DEFAULT]/lock_path
 #lock_path = <None>
 
 
@@ -3523,60 +2949,55 @@
 
 # Name for the AMQP container. must be globally unique. Defaults to a generated
 # UUID (string value)
+# Deprecated group/name - [amqp1]/container_name
 #container_name = <None>
 
 # Timeout for inactive connections (in seconds) (integer value)
+# Deprecated group/name - [amqp1]/idle_timeout
 #idle_timeout = 0
 
 # Debug: dump AMQP frames to stdout (boolean value)
+# Deprecated group/name - [amqp1]/trace
 #trace = false
 
-# Attempt to connect via SSL. If no other ssl-related parameters are given, it
-# will use the system's CA-bundle to verify the server's certificate. (boolean
-# value)
-#ssl = false
-
-# CA certificate PEM file used to verify the server's certificate (string value)
+# CA certificate PEM file to verify server certificate (string value)
+# Deprecated group/name - [amqp1]/ssl_ca_file
 #ssl_ca_file =
 
-# Self-identifying certificate PEM file for client authentication (string value)
+# Identifying certificate PEM file to present to clients (string value)
+# Deprecated group/name - [amqp1]/ssl_cert_file
 #ssl_cert_file =
 
-# Private key PEM file used to sign ssl_cert_file certificate (optional) (string
-# value)
+# Private key PEM file used to sign cert_file certificate (string value)
+# Deprecated group/name - [amqp1]/ssl_key_file
 #ssl_key_file =
 
 # Password for decrypting ssl_key_file (if encrypted) (string value)
+# Deprecated group/name - [amqp1]/ssl_key_password
 #ssl_key_password = <None>
 
-# DEPRECATED: Accept clients using either SSL or plain TCP (boolean value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Not applicable - not a SSL server
+# Accept clients using either SSL or plain TCP (boolean value)
+# Deprecated group/name - [amqp1]/allow_insecure_clients
 #allow_insecure_clients = false
 
 # Space separated list of acceptable SASL mechanisms (string value)
+# Deprecated group/name - [amqp1]/sasl_mechanisms
 #sasl_mechanisms =
 
 # Path to directory that contains the SASL configuration (string value)
+# Deprecated group/name - [amqp1]/sasl_config_dir
 #sasl_config_dir =
 
 # Name of configuration file (without .conf suffix) (string value)
+# Deprecated group/name - [amqp1]/sasl_config_name
 #sasl_config_name =
 
-# SASL realm to use if no realm present in username (string value)
-#sasl_default_realm =
-
-# DEPRECATED: User name for message broker authentication (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the username.
+# User name for message broker authentication (string value)
+# Deprecated group/name - [amqp1]/username
 #username =
 
-# DEPRECATED: Password for message broker authentication (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the password.
+# Password for message broker authentication (string value)
+# Deprecated group/name - [amqp1]/password
 #password =
 
 # Seconds to pause before attempting to re-connect. (integer value)
@@ -3598,12 +3019,8 @@
 # Minimum value: 1
 #link_retry_delay = 10
 
-# The maximum number of attempts to re-send a reply message which failed due to
-# a recoverable error. (integer value)
-# Minimum value: -1
-#default_reply_retry = 0
-
-# The deadline for an rpc reply message delivery. (integer value)
+# The deadline for an rpc reply message delivery. Only used when caller does not
+# provide a timeout expiry. (integer value)
 # Minimum value: 5
 #default_reply_timeout = 30
 
@@ -3616,11 +3033,6 @@
 # does not provide a timeout expiry. (integer value)
 # Minimum value: 5
 #default_notify_timeout = 30
-
-# The duration to schedule a purge of idle sender links. Detach link after
-# expiry. (integer value)
-# Minimum value: 1
-#default_sender_link_timeout = 600
 
 # Indicates the addressing mode used by the driver.
 # Permitted values:
@@ -3631,12 +3043,15 @@
 #addressing_mode = dynamic
 
 # address prefix used when sending to a specific server (string value)
+# Deprecated group/name - [amqp1]/server_request_prefix
 #server_request_prefix = exclusive
 
 # address prefix used when broadcasting to all servers (string value)
+# Deprecated group/name - [amqp1]/broadcast_prefix
 #broadcast_prefix = broadcast
 
 # address prefix when sending to any server in group (string value)
+# Deprecated group/name - [amqp1]/group_request_prefix
 #group_request_prefix = unicast
 
 # Address prefix for all generated RPC addresses (string value)
@@ -3666,6 +3081,7 @@
 # else control_exchange if set
 # else 'notify' (string value)
 #default_notification_exchange = <None>
+default_notification_exchange = glance
 
 # Exchange name used in RPC addresses.
 # Exchange name resolution precedence:
@@ -3687,66 +3103,6 @@
 # Minimum value: 1
 #notify_server_credit = 100
 
-# Send messages of this type pre-settled.
-# Pre-settled messages will not receive acknowledgement
-# from the peer. Note well: pre-settled messages may be
-# silently discarded if the delivery fails.
-# Permitted values:
-# 'rpc-call' - send RPC Calls pre-settled
-# 'rpc-reply'- send RPC Replies pre-settled
-# 'rpc-cast' - Send RPC Casts pre-settled
-# 'notify'   - Send Notifications pre-settled
-#  (multi valued)
-#pre_settled = rpc-cast
-#pre_settled = rpc-reply
-
-
-[oslo_messaging_kafka]
-
-#
-# From oslo.messaging
-#
-
-# DEPRECATED: Default Kafka broker Host (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#kafka_default_host = localhost
-
-# DEPRECATED: Default Kafka broker Port (port value)
-# Minimum value: 0
-# Maximum value: 65535
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#kafka_default_port = 9092
-
-# Max fetch bytes of Kafka consumer (integer value)
-#kafka_max_fetch_bytes = 1048576
-
-# Default timeout(s) for Kafka consumers (floating point value)
-#kafka_consumer_timeout = 1.0
-
-# Pool Size for Kafka Consumers (integer value)
-#pool_size = 10
-
-# The pool size limit for connections expiration policy (integer value)
-#conn_pool_min_size = 2
-
-# The time-to-live in sec of idle connections in the pool (integer value)
-#conn_pool_ttl = 1200
-
-# Group id for Kafka consumer. Consumers in one group will coordinate message
-# consumption (string value)
-#consumer_group = oslo_messaging_consumer
-
-# Upper bound on the delay for KafkaProducer batching in seconds (floating point
-# value)
-#producer_batch_timeout = 0.0
-
-# Size of batch for the producer async send (integer value)
-#producer_batch_size = 16384
-
 
 [oslo_messaging_notifications]
 
@@ -3758,6 +3114,7 @@
 # messagingv2, routing, log, test, noop (multi valued)
 # Deprecated group/name - [DEFAULT]/notification_driver
 #driver =
+driver = messagingv2
 
 # A URL representing the messaging driver to use for notifications. If not set,
 # we fall back to the same configuration used for RPC. (string value)
@@ -3769,11 +3126,6 @@
 # Deprecated group/name - [DEFAULT]/notification_topics
 #topics = notifications
 
-# The maximum number of attempts to re-send a notification message which failed
-# to be delivered due to a recoverable error. 0 - No retry, -1 - indefinite
-# (integer value)
-#retry = -1
-
 
 [oslo_messaging_rabbit]
 
@@ -3787,31 +3139,30 @@
 #amqp_durable_queues = false
 
 # Auto-delete queues in AMQP. (boolean value)
+# Deprecated group/name - [DEFAULT]/amqp_auto_delete
 #amqp_auto_delete = false
-
-# Enable SSL (boolean value)
-#ssl = <None>
 
 # SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and
 # SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some
 # distributions. (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_version
-#ssl_version =
+# Deprecated group/name - [DEFAULT]/kombu_ssl_version
+#kombu_ssl_version =
 
 # SSL key file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_keyfile
-#ssl_key_file =
+# Deprecated group/name - [DEFAULT]/kombu_ssl_keyfile
+#kombu_ssl_keyfile =
 
 # SSL cert file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_certfile
-#ssl_cert_file =
+# Deprecated group/name - [DEFAULT]/kombu_ssl_certfile
+#kombu_ssl_certfile =
 
 # SSL certification authority file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_ca_certs
-#ssl_ca_file =
+# Deprecated group/name - [DEFAULT]/kombu_ssl_ca_certs
+#kombu_ssl_ca_certs =
 
 # How long to wait before reconnecting in response to an AMQP consumer cancel
 # notification. (floating point value)
+# Deprecated group/name - [DEFAULT]/kombu_reconnect_delay
 #kombu_reconnect_delay = 1.0
 
 # EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression will not
@@ -3831,6 +3182,7 @@
 
 # DEPRECATED: The RabbitMQ broker address where a single node is used. (string
 # value)
+# Deprecated group/name - [DEFAULT]/rabbit_host
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
@@ -3839,34 +3191,43 @@
 # DEPRECATED: The RabbitMQ broker port where a single node is used. (port value)
 # Minimum value: 0
 # Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/rabbit_port
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
 #rabbit_port = 5672
 
 # DEPRECATED: RabbitMQ HA cluster host:port pairs. (list value)
+# Deprecated group/name - [DEFAULT]/rabbit_hosts
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
 #rabbit_hosts = $rabbit_host:$rabbit_port
 
+# Connect over SSL for RabbitMQ. (boolean value)
+# Deprecated group/name - [DEFAULT]/rabbit_use_ssl
+#rabbit_use_ssl = false
+
 # DEPRECATED: The RabbitMQ userid. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_userid
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
 #rabbit_userid = guest
 
 # DEPRECATED: The RabbitMQ password. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_password
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
 #rabbit_password = guest
 
 # The RabbitMQ login method. (string value)
-# Allowed values: PLAIN, AMQPLAIN, RABBIT-CR-DEMO
+# Deprecated group/name - [DEFAULT]/rabbit_login_method
 #rabbit_login_method = AMQPLAIN
 
 # DEPRECATED: The RabbitMQ virtual host. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_virtual_host
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
@@ -3877,6 +3238,7 @@
 
 # How long to backoff for between retries when connecting to RabbitMQ. (integer
 # value)
+# Deprecated group/name - [DEFAULT]/rabbit_retry_backoff
 #rabbit_retry_backoff = 2
 
 # Maximum interval of RabbitMQ connection retries. Default is 30 seconds.
@@ -3885,6 +3247,7 @@
 
 # DEPRECATED: Maximum number of RabbitMQ connection retries. Default is 0
 # (infinite retry count). (integer value)
+# Deprecated group/name - [DEFAULT]/rabbit_max_retries
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 #rabbit_max_retries = 0
@@ -3892,9 +3255,10 @@
 # Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change this
 # option, you must wipe the RabbitMQ database. In RabbitMQ 3.0, queue mirroring
 # is no longer controlled by the x-ha-policy argument when declaring a queue. If
-# you just want to make sure that all queues (except those with auto-generated
+# you just want to make sure that all queues (except  those with auto-generated
 # names) are mirrored across all nodes, run: "rabbitmqctl set_policy HA
 # '^(?!amq\.).*' '{"ha-mode": "all"}' " (boolean value)
+# Deprecated group/name - [DEFAULT]/rabbit_ha_queues
 #rabbit_ha_queues = false
 
 # Positive integer representing duration in seconds for queue TTL (x-expires).
@@ -3917,6 +3281,7 @@
 #heartbeat_rate = 2
 
 # Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake (boolean value)
+# Deprecated group/name - [DEFAULT]/fake_rabbit
 #fake_rabbit = false
 
 # Maximum number of channels to allow (integer value)
@@ -3927,6 +3292,9 @@
 
 # How often to send heartbeats for consumer's connections (integer value)
 #heartbeat_interval = 3
+
+# Enable SSL (boolean value)
+#ssl = <None>
 
 # Arguments passed to ssl.wrap_socket (dict value)
 #ssl_options = <None>
@@ -3964,207 +3332,152 @@
 # (integer value)
 #pool_stale = 60
 
+# Persist notification messages. (boolean value)
+#notification_persistence = false
+
+# Exchange name for sending notifications (string value)
+#default_notification_exchange = ${control_exchange}_notification
+
+# Max number of not acknowledged message which RabbitMQ can send to notification
+# listener. (integer value)
+#notification_listener_prefetch_count = 100
+
+# Reconnecting retry count in case of connectivity problem during sending
+# notification, -1 means infinite retry. (integer value)
+#default_notification_retry_attempts = -1
+
+# Reconnecting retry delay in case of connectivity problem during sending
+# notification message (floating point value)
+#notification_retry_delay = 0.25
+
+# Time to live for rpc queues without consumers in seconds. (integer value)
+#rpc_queue_expiration = 60
+
+# Exchange name for sending RPC messages (string value)
+#default_rpc_exchange = ${control_exchange}_rpc
+
+# Exchange name for receiving RPC replies (string value)
+#rpc_reply_exchange = ${control_exchange}_rpc_reply
+
+# Max number of not acknowledged message which RabbitMQ can send to rpc
+# listener. (integer value)
+#rpc_listener_prefetch_count = 100
+
+# Max number of not acknowledged message which RabbitMQ can send to rpc reply
+# listener. (integer value)
+#rpc_reply_listener_prefetch_count = 100
+
+# Reconnecting retry count in case of connectivity problem during sending reply.
+# -1 means infinite retry during rpc_timeout (integer value)
+#rpc_reply_retry_attempts = -1
+
+# Reconnecting retry delay in case of connectivity problem during sending reply.
+# (floating point value)
+#rpc_reply_retry_delay = 0.25
+
+# Reconnecting retry count in case of connectivity problem during sending RPC
+# message, -1 means infinite retry. If actual retry attempts in not 0 the rpc
+# request could be processed more then one time (integer value)
+#default_rpc_retry_attempts = -1
+
+# Reconnecting retry delay in case of connectivity problem during sending RPC
+# message (floating point value)
+#rpc_retry_delay = 0.25
+
+
+[oslo_messaging_zmq]
+
+#
+# From oslo.messaging
+#
+
+# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
+# The "host" option should point or resolve to this address. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_address
+#rpc_zmq_bind_address = *
+
+# MatchMaker driver. (string value)
+# Allowed values: redis, dummy
+# Deprecated group/name - [DEFAULT]/rpc_zmq_matchmaker
+#rpc_zmq_matchmaker = redis
+
+# Number of ZeroMQ contexts, defaults to 1. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_contexts
+#rpc_zmq_contexts = 1
+
+# Maximum number of ingress messages to locally buffer per topic. Default is
+# unlimited. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_topic_backlog
+#rpc_zmq_topic_backlog = <None>
+
+# Directory for holding IPC sockets. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_ipc_dir
+#rpc_zmq_ipc_dir = /var/run/openstack
+
+# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
+# "host" option, if running Nova. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_host
+#rpc_zmq_host = localhost
+
+# Seconds to wait before a cast expires (TTL). The default value of -1 specifies
+# an infinite linger period. The value of 0 specifies no linger period. Pending
+# messages shall be discarded immediately when the socket is closed. Only
+# supported by impl_zmq. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_cast_timeout
+#rpc_cast_timeout = -1
+
+# The default number of seconds that poll should wait. Poll raises timeout
+# exception when timeout expired. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_poll_timeout
+#rpc_poll_timeout = 1
+
+# Expiration timeout in seconds of a name service record about existing target (
+# < 0 means no timeout). (integer value)
+# Deprecated group/name - [DEFAULT]/zmq_target_expire
+#zmq_target_expire = 300
+
+# Update period in seconds of a name service record about existing target.
+# (integer value)
+# Deprecated group/name - [DEFAULT]/zmq_target_update
+#zmq_target_update = 180
+
+# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
+# value)
+# Deprecated group/name - [DEFAULT]/use_pub_sub
+#use_pub_sub = true
+
+# Use ROUTER remote proxy. (boolean value)
+# Deprecated group/name - [DEFAULT]/use_router_proxy
+#use_router_proxy = true
+
+# Minimal port number for random ports range. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/rpc_zmq_min_port
+#rpc_zmq_min_port = 49153
+
+# Maximal port number for random ports range. (integer value)
+# Minimum value: 1
+# Maximum value: 65536
+# Deprecated group/name - [DEFAULT]/rpc_zmq_max_port
+#rpc_zmq_max_port = 65536
+
+# Number of retries to find free port number before fail with ZMQBindError.
+# (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_port_retries
+#rpc_zmq_bind_port_retries = 100
+
 # Default serialization mechanism for serializing/deserializing
 # outgoing/incoming messages (string value)
 # Allowed values: json, msgpack
-#default_serializer_type = json
-
-# Persist notification messages. (boolean value)
-#notification_persistence = false
-
-# Exchange name for sending notifications (string value)
-#default_notification_exchange = ${control_exchange}_notification
-
-# Max number of not acknowledged message which RabbitMQ can send to notification
-# listener. (integer value)
-#notification_listener_prefetch_count = 100
-
-# Reconnecting retry count in case of connectivity problem during sending
-# notification, -1 means infinite retry. (integer value)
-#default_notification_retry_attempts = -1
-
-# Reconnecting retry delay in case of connectivity problem during sending
-# notification message (floating point value)
-#notification_retry_delay = 0.25
-
-# Time to live for rpc queues without consumers in seconds. (integer value)
-#rpc_queue_expiration = 60
-
-# Exchange name for sending RPC messages (string value)
-#default_rpc_exchange = ${control_exchange}_rpc
-
-# Exchange name for receiving RPC replies (string value)
-#rpc_reply_exchange = ${control_exchange}_rpc_reply
-
-# Max number of not acknowledged message which RabbitMQ can send to rpc
-# listener. (integer value)
-#rpc_listener_prefetch_count = 100
-
-# Max number of not acknowledged message which RabbitMQ can send to rpc reply
-# listener. (integer value)
-#rpc_reply_listener_prefetch_count = 100
-
-# Reconnecting retry count in case of connectivity problem during sending reply.
-# -1 means infinite retry during rpc_timeout (integer value)
-#rpc_reply_retry_attempts = -1
-
-# Reconnecting retry delay in case of connectivity problem during sending reply.
-# (floating point value)
-#rpc_reply_retry_delay = 0.25
-
-# Reconnecting retry count in case of connectivity problem during sending RPC
-# message, -1 means infinite retry. If actual retry attempts in not 0 the rpc
-# request could be processed more than one time (integer value)
-#default_rpc_retry_attempts = -1
-
-# Reconnecting retry delay in case of connectivity problem during sending RPC
-# message (floating point value)
-#rpc_retry_delay = 0.25
-
-
-[oslo_messaging_zmq]
-
-#
-# From oslo.messaging
-#
-
-# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
-# The "host" option should point or resolve to this address. (string value)
-#rpc_zmq_bind_address = *
-
-# MatchMaker driver. (string value)
-# Allowed values: redis, sentinel, dummy
-#rpc_zmq_matchmaker = redis
-
-# Number of ZeroMQ contexts, defaults to 1. (integer value)
-#rpc_zmq_contexts = 1
-
-# Maximum number of ingress messages to locally buffer per topic. Default is
-# unlimited. (integer value)
-#rpc_zmq_topic_backlog = <None>
-
-# Directory for holding IPC sockets. (string value)
-#rpc_zmq_ipc_dir = /var/run/openstack
-
-# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
-# "host" option, if running Nova. (string value)
-#rpc_zmq_host = localhost
-
-# Number of seconds to wait before all pending messages will be sent after
-# closing a socket. The default value of -1 specifies an infinite linger period.
-# The value of 0 specifies no linger period. Pending messages shall be discarded
-# immediately when the socket is closed. Positive values specify an upper bound
-# for the linger period. (integer value)
-# Deprecated group/name - [DEFAULT]/rpc_cast_timeout
-#zmq_linger = -1
-
-# The default number of seconds that poll should wait. Poll raises timeout
-# exception when timeout expired. (integer value)
-#rpc_poll_timeout = 1
-
-# Expiration timeout in seconds of a name service record about existing target (
-# < 0 means no timeout). (integer value)
-#zmq_target_expire = 300
-
-# Update period in seconds of a name service record about existing target.
-# (integer value)
-#zmq_target_update = 180
-
-# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
-# value)
-#use_pub_sub = false
-
-# Use ROUTER remote proxy. (boolean value)
-#use_router_proxy = false
-
-# This option makes direct connections dynamic or static. It makes sense only
-# with use_router_proxy=False which means to use direct connections for direct
-# message types (ignored otherwise). (boolean value)
-#use_dynamic_connections = false
-
-# How many additional connections to a host will be made for failover reasons.
-# This option is actual only in dynamic connections mode. (integer value)
-#zmq_failover_connections = 2
-
-# Minimal port number for random ports range. (port value)
-# Minimum value: 0
-# Maximum value: 65535
-#rpc_zmq_min_port = 49153
-
-# Maximal port number for random ports range. (integer value)
-# Minimum value: 1
-# Maximum value: 65536
-#rpc_zmq_max_port = 65536
-
-# Number of retries to find free port number before fail with ZMQBindError.
-# (integer value)
-#rpc_zmq_bind_port_retries = 100
-
-# Default serialization mechanism for serializing/deserializing
-# outgoing/incoming messages (string value)
-# Allowed values: json, msgpack
+# Deprecated group/name - [DEFAULT]/rpc_zmq_serialization
 #rpc_zmq_serialization = json
 
 # This option configures round-robin mode in zmq socket. True means not keeping
 # a queue when server side disconnects. False means to keep queue and messages
 # even if server is disconnected, when the server appears we send all
 # accumulated messages to it. (boolean value)
-#zmq_immediate = true
-
-# Enable/disable TCP keepalive (KA) mechanism. The default value of -1 (or any
-# other negative value) means to skip any overrides and leave it to OS default;
-# 0 and 1 (or any other positive value) mean to disable and enable the option
-# respectively. (integer value)
-#zmq_tcp_keepalive = -1
-
-# The duration between two keepalive transmissions in idle condition. The unit
-# is platform dependent, for example, seconds in Linux, milliseconds in Windows
-# etc. The default value of -1 (or any other negative value and 0) means to skip
-# any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_idle = -1
-
-# The number of retransmissions to be carried out before declaring that remote
-# end is not available. The default value of -1 (or any other negative value and
-# 0) means to skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_cnt = -1
-
-# The duration between two successive keepalive retransmissions, if
-# acknowledgement to the previous keepalive transmission is not received. The
-# unit is platform dependent, for example, seconds in Linux, milliseconds in
-# Windows etc. The default value of -1 (or any other negative value and 0) means
-# to skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_intvl = -1
-
-# Maximum number of (green) threads to work concurrently. (integer value)
-#rpc_thread_pool_size = 100
-
-# Expiration timeout in seconds of a sent/received message after which it is not
-# tracked anymore by a client/server. (integer value)
-#rpc_message_ttl = 300
-
-# Wait for message acknowledgements from receivers. This mechanism works only
-# via proxy without PUB/SUB. (boolean value)
-#rpc_use_acks = false
-
-# Number of seconds to wait for an ack from a cast/call. After each retry
-# attempt this timeout is multiplied by some specified multiplier. (integer
-# value)
-#rpc_ack_timeout_base = 15
-
-# Number to multiply base ack timeout by after each retry attempt. (integer
-# value)
-#rpc_ack_timeout_multiplier = 2
-
-# Default number of message sending attempts in case of any problems occurred:
-# positive value N means at most N retries, 0 means no retries, None or -1 (or
-# any other negative values) mean to retry forever. This option is used only if
-# acknowledgments are enabled. (integer value)
-#rpc_retry_attempts = 3
-
-# List of publisher hosts SubConsumer can subscribe on. This option has higher
-# priority then the default publishers list taken from the matchmaker. (list
-# value)
-#subscribe_on =
+#zmq_immediate = false
 
 
 [oslo_middleware]
@@ -4184,10 +3497,13 @@
 # From oslo.policy
 #
 
-# The file that defines policies. (string value)
+# The JSON file that defines policies. (string value)
+# Deprecated group/name - [DEFAULT]/policy_file
 #policy_file = policy.json
+policy_file = /etc/glance/policy.json
 
 # Default rule. Enforced when a requested rule is not found. (string value)
+# Deprecated group/name - [DEFAULT]/policy_default_rule
 #policy_default_rule = default
 
 # Directories where policy configuration files are stored. They can be relative
@@ -4195,6 +3511,7 @@
 # absolute paths. The file defined by policy_file must exist for these
 # directories to be searched.  Missing or empty directories are ignored. (multi
 # valued)
+# Deprecated group/name - [DEFAULT]/policy_dirs
 #policy_dirs = policy.d
 
 
@@ -4224,6 +3541,9 @@
 #
 #  (string value)
 #flavor = keystone
+
+flavor=keystone
+
 
 #
 # Name of the paste configuration file.
@@ -4315,42 +3635,8 @@
 # Examples of possible values:
 #
 # * messaging://: use oslo_messaging driver for sending notifications.
-# * mongodb://127.0.0.1:27017 : use mongodb driver for sending notifications.
-# * elasticsearch://127.0.0.1:9200 : use elasticsearch driver for sending
-# notifications.
 #  (string value)
 #connection_string = messaging://
-
-#
-# Document type for notification indexing in elasticsearch.
-#  (string value)
-#es_doc_type = notification
-
-#
-# This parameter is a time value parameter (for example: es_scroll_time=2m),
-# indicating for how long the nodes that participate in the search will maintain
-# relevant resources in order to continue and support it.
-#  (string value)
-#es_scroll_time = 2m
-
-#
-# Elasticsearch splits large requests in batches. This parameter defines
-# maximum size of each batch (for example: es_scroll_size=10000).
-#  (integer value)
-#es_scroll_size = 10000
-
-#
-# Redissentinel provides a timeout option on the connections.
-# This parameter defines that timeout (for example: socket_timeout=0.1).
-#  (floating point value)
-#socket_timeout = 0.1
-
-#
-# Redissentinel uses a service name to identify a master redis service.
-# This parameter defines the name (for example:
-# sentinal_service_name=mymaster).
-#  (string value)
-#sentinel_service_name = mymaster
 
 
 [store_type_location_strategy]
@@ -4391,6 +3677,7 @@
 #store_type_preference =
 
 
+
 [task]
 
 #

2018-06-01 03:16:51,675 [salt.state       ][INFO    ][30011] Completed state [/etc/glance/glance-api.conf] at time 03:16:51.675022 duration_in_ms=257.912
2018-06-01 03:16:51,675 [salt.state       ][INFO    ][30011] Running state [/etc/glance/glance-api-paste.ini] at time 03:16:51.675478
2018-06-01 03:16:51,675 [salt.state       ][INFO    ][30011] Executing state file.managed for /etc/glance/glance-api-paste.ini
2018-06-01 03:16:51,700 [salt.fileclient  ][INFO    ][30011] Fetching file from saltenv 'base', ** done ** 'glance/files/pike/glance-api-paste.ini'
2018-06-01 03:16:51,748 [salt.state       ][INFO    ][30011] File changed:
--- 
+++ 
@@ -1,3 +1,4 @@
+
 # Use this pipeline for no auth or image caching - DEFAULT
 [pipeline:glance-api]
 pipeline = cors healthcheck http_proxy_to_wsgi versionnegotiation osprofiler unauthenticated-context rootapp
@@ -12,7 +13,7 @@
 
 # Use this pipeline for keystone auth
 [pipeline:glance-api-keystone]
-pipeline = cors healthcheck http_proxy_to_wsgi versionnegotiation osprofiler authtoken context  rootapp
+pipeline = cors healthcheck http_proxy_to_wsgi versionnegotiation osprofiler authtoken context rootapp
 
 # Use this pipeline for keystone auth with image caching
 [pipeline:glance-api-keystone+caching]

2018-06-01 03:16:51,748 [salt.state       ][INFO    ][30011] Completed state [/etc/glance/glance-api-paste.ini] at time 03:16:51.748350 duration_in_ms=72.872
2018-06-01 03:16:51,748 [salt.state       ][INFO    ][30011] Running state [/etc/default/glance-api] at time 03:16:51.748780
2018-06-01 03:16:51,749 [salt.state       ][INFO    ][30011] Executing state file.managed for /etc/default/glance-api
2018-06-01 03:16:51,775 [salt.fileclient  ][INFO    ][30011] Fetching file from saltenv 'base', ** done ** 'glance/files/default'
2018-06-01 03:16:51,778 [salt.state       ][INFO    ][30011] File changed:
New file
2018-06-01 03:16:51,778 [salt.state       ][INFO    ][30011] Completed state [/etc/default/glance-api] at time 03:16:51.778756 duration_in_ms=29.975
2018-06-01 03:16:51,779 [salt.state       ][INFO    ][30011] Running state [/etc/default/glance-registry] at time 03:16:51.779184
2018-06-01 03:16:51,779 [salt.state       ][INFO    ][30011] Executing state file.managed for /etc/default/glance-registry
2018-06-01 03:16:51,798 [salt.state       ][INFO    ][30011] File changed:
New file
2018-06-01 03:16:51,799 [salt.state       ][INFO    ][30011] Completed state [/etc/default/glance-registry] at time 03:16:51.799083 duration_in_ms=19.899
2018-06-01 03:16:51,799 [salt.state       ][INFO    ][30011] Running state [/etc/default/glance-glare] at time 03:16:51.799553
2018-06-01 03:16:51,799 [salt.state       ][INFO    ][30011] Executing state file.managed for /etc/default/glance-glare
2018-06-01 03:16:51,824 [salt.state       ][INFO    ][30011] File changed:
New file
2018-06-01 03:16:51,825 [salt.state       ][INFO    ][30011] Completed state [/etc/default/glance-glare] at time 03:16:51.824974 duration_in_ms=25.421
2018-06-01 03:16:51,828 [salt.state       ][INFO    ][30011] Running state [glance-api] at time 03:16:51.828695
2018-06-01 03:16:51,828 [salt.state       ][INFO    ][30011] Executing state service.running for glance-api
2018-06-01 03:16:51,829 [salt.loaded.int.module.cmdmod][INFO    ][30011] Executing command ['systemctl', 'status', 'glance-api.service', '-n', '0'] in directory '/root'
2018-06-01 03:16:51,852 [salt.loaded.int.module.cmdmod][INFO    ][30011] Executing command ['systemctl', 'is-active', 'glance-api.service'] in directory '/root'
2018-06-01 03:16:51,868 [salt.loaded.int.module.cmdmod][INFO    ][30011] Executing command ['systemctl', 'is-enabled', 'glance-api.service'] in directory '/root'
2018-06-01 03:16:51,884 [salt.state       ][INFO    ][30011] The service glance-api is already running
2018-06-01 03:16:51,885 [salt.state       ][INFO    ][30011] Completed state [glance-api] at time 03:16:51.885519 duration_in_ms=56.824
2018-06-01 03:16:51,885 [salt.state       ][INFO    ][30011] Running state [glance-api] at time 03:16:51.885920
2018-06-01 03:16:51,886 [salt.state       ][INFO    ][30011] Executing state service.mod_watch for glance-api
2018-06-01 03:16:51,887 [salt.loaded.int.module.cmdmod][INFO    ][30011] Executing command ['systemctl', 'is-active', 'glance-api.service'] in directory '/root'
2018-06-01 03:16:51,907 [salt.loaded.int.module.cmdmod][INFO    ][30011] Executing command ['systemctl', 'is-enabled', 'glance-api.service'] in directory '/root'
2018-06-01 03:16:51,927 [salt.loaded.int.module.cmdmod][INFO    ][30011] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'glance-api.service'] in directory '/root'
2018-06-01 03:16:52,012 [salt.state       ][INFO    ][30011] {'glance-api': True}
2018-06-01 03:16:52,012 [salt.state       ][INFO    ][30011] Completed state [glance-api] at time 03:16:52.012505 duration_in_ms=126.585
2018-06-01 03:16:52,013 [salt.state       ][INFO    ][30011] Running state [glance-registry] at time 03:16:52.013862
2018-06-01 03:16:52,014 [salt.state       ][INFO    ][30011] Executing state service.running for glance-registry
2018-06-01 03:16:52,015 [salt.loaded.int.module.cmdmod][INFO    ][30011] Executing command ['systemctl', 'status', 'glance-registry.service', '-n', '0'] in directory '/root'
2018-06-01 03:16:52,034 [salt.loaded.int.module.cmdmod][INFO    ][30011] Executing command ['systemctl', 'is-active', 'glance-registry.service'] in directory '/root'
2018-06-01 03:16:52,054 [salt.loaded.int.module.cmdmod][INFO    ][30011] Executing command ['systemctl', 'is-enabled', 'glance-registry.service'] in directory '/root'
2018-06-01 03:16:52,071 [salt.state       ][INFO    ][30011] The service glance-registry is already running
2018-06-01 03:16:52,072 [salt.state       ][INFO    ][30011] Completed state [glance-registry] at time 03:16:52.072374 duration_in_ms=58.512
2018-06-01 03:16:52,072 [salt.state       ][INFO    ][30011] Running state [glance-registry] at time 03:16:52.072679
2018-06-01 03:16:52,073 [salt.state       ][INFO    ][30011] Executing state service.mod_watch for glance-registry
2018-06-01 03:16:52,073 [salt.loaded.int.module.cmdmod][INFO    ][30011] Executing command ['systemctl', 'is-active', 'glance-registry.service'] in directory '/root'
2018-06-01 03:16:52,094 [salt.loaded.int.module.cmdmod][INFO    ][30011] Executing command ['systemctl', 'is-enabled', 'glance-registry.service'] in directory '/root'
2018-06-01 03:16:52,111 [salt.loaded.int.module.cmdmod][INFO    ][30011] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'glance-registry.service'] in directory '/root'
2018-06-01 03:16:52,158 [salt.state       ][INFO    ][30011] {'glance-registry': True}
2018-06-01 03:16:52,158 [salt.state       ][INFO    ][30011] Completed state [glance-registry] at time 03:16:52.158851 duration_in_ms=86.172
2018-06-01 03:16:52,162 [salt.state       ][INFO    ][30011] Running state [glance-manage db_sync] at time 03:16:52.162451
2018-06-01 03:16:52,162 [salt.state       ][INFO    ][30011] Executing state cmd.run for glance-manage db_sync
2018-06-01 03:16:52,164 [salt.loaded.int.module.cmdmod][INFO    ][30011] Executing command 'glance-manage db_sync' in directory '/root'
2018-06-01 03:16:53,276 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601031653251350
2018-06-01 03:16:53,298 [salt.minion      ][INFO    ][31591] Starting a new job with PID 31591
2018-06-01 03:16:53,317 [salt.minion      ][INFO    ][31591] Returning information for job: 20180601031653251350
2018-06-01 03:16:54,134 [salt.state       ][INFO    ][30011] {'pid': 31546, 'retcode': 0, 'stderr': '/usr/lib/python2.7/dist-packages/oslo_db/sqlalchemy/enginefacade.py:1328: OsloDBDeprecationWarning: EngineFacade is deprecated; please use oslo_db.sqlalchemy.enginefacade\n  expire_on_commit=expire_on_commit, _conf=conf)\nINFO  [alembic.runtime.migration] Context impl MySQLImpl.\nINFO  [alembic.runtime.migration] Will assume non-transactional DDL.\nINFO  [alembic.runtime.migration] Context impl MySQLImpl.\nINFO  [alembic.runtime.migration] Will assume non-transactional DDL.', 'stdout': 'Upgraded database to: pike01, current revision(s): pike01'}
2018-06-01 03:16:54,135 [salt.state       ][INFO    ][30011] Completed state [glance-manage db_sync] at time 03:16:54.135512 duration_in_ms=1973.061
2018-06-01 03:16:54,136 [salt.state       ][INFO    ][30011] Running state [glance-manage db_load_metadefs] at time 03:16:54.136892
2018-06-01 03:16:54,137 [salt.state       ][INFO    ][30011] Executing state cmd.run for glance-manage db_load_metadefs
2018-06-01 03:16:54,138 [salt.loaded.int.module.cmdmod][INFO    ][30011] Executing command 'glance-manage db_load_metadefs' in directory '/root'
2018-06-01 03:16:56,281 [salt.state       ][INFO    ][30011] {'pid': 31611, 'retcode': 0, 'stderr': '/usr/lib/python2.7/dist-packages/oslo_db/sqlalchemy/enginefacade.py:1328: OsloDBDeprecationWarning: EngineFacade is deprecated; please use oslo_db.sqlalchemy.enginefacade\n  expire_on_commit=expire_on_commit, _conf=conf)\n2018-06-01 03:16:55.995 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace CIM::StorageAllocationSettingData. It already exists in the database.\n2018-06-01 03:16:56.002 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Software::WebServers. It already exists in the database.\n2018-06-01 03:16:56.008 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::OperatingSystem. It already exists in the database.\n2018-06-01 03:16:56.014 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Compute::VMwareFlavor. It already exists in the database.\n2018-06-01 03:16:56.021 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Compute::Libvirt. It already exists in the database.\n2018-06-01 03:16:56.027 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Compute::Quota. It already exists in the database.\n2018-06-01 03:16:56.033 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Compute::Watchdog. It already exists in the database.\n2018-06-01 03:16:56.040 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Compute::AggregateIoOpsFilter. It already exists in the database.\n2018-06-01 03:16:56.045 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Glance::CommonImageProperties. It already exists in the database.\n2018-06-01 03:16:56.052 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Compute::GuestShutdownBehavior. It already exists in the database.\n2018-06-01 03:16:56.057 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Compute::CPUPinning. It already exists in the database.\n2018-06-01 03:16:56.063 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Glance::Signatures. It already exists in the database.\n2018-06-01 03:16:56.069 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Compute::GuestMemoryBacking. It already exists in the database.\n2018-06-01 03:16:56.075 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Compute::Trust. It already exists in the database.\n2018-06-01 03:16:56.081 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Compute::AggregateNumInstancesFilter. It already exists in the database.\n2018-06-01 03:16:56.088 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Compute::XenAPI. It already exists in the database.\n2018-06-01 03:16:56.094 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Compute::VirtCPUTopology. It already exists in the database.\n2018-06-01 03:16:56.100 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Software::Runtimes. It already exists in the database.\n2018-06-01 03:16:56.106 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Compute::HostCapabilities. It already exists in the database.\n2018-06-01 03:16:56.113 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Compute::RandomNumberGenerator. It already exists in the database.\n2018-06-01 03:16:56.118 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Compute::AggregateDiskFilter. It already exists in the database.\n2018-06-01 03:16:56.124 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Cinder::Volumetype. It already exists in the database.\n2018-06-01 03:16:56.130 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Compute::LibvirtImage. It already exists in the database.\n2018-06-01 03:16:56.136 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Compute::VMwareQuotaFlavor. It already exists in the database.\n2018-06-01 03:16:56.142 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace CIM::ProcessorAllocationSettingData. It already exists in the database.\n2018-06-01 03:16:56.148 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace CIM::ResourceAllocationSettingData. It already exists in the database.\n2018-06-01 03:16:56.154 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Compute::Hypervisor. It already exists in the database.\n2018-06-01 03:16:56.160 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace CIM::VirtualSystemSettingData. It already exists in the database.\n2018-06-01 03:16:56.173 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Compute::VMware. It already exists in the database.\n2018-06-01 03:16:56.179 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Compute::InstanceData. It already exists in the database.\n2018-06-01 03:16:56.186 31612 INFO glance.db.sqlalchemy.metadata [-] Skipping namespace OS::Software::DBMS. It already exists in the database.\n2018-06-01 03:16:56.186 31612 INFO glance.db.sqlalchemy.metadata [-] Metadata loading finished', 'stdout': ''}
2018-06-01 03:16:56,283 [salt.state       ][INFO    ][30011] Completed state [glance-manage db_load_metadefs] at time 03:16:56.283443 duration_in_ms=2146.548
2018-06-01 03:16:56,285 [salt.state       ][INFO    ][30011] Running state [/srv/glance] at time 03:16:56.285320
2018-06-01 03:16:56,286 [salt.state       ][INFO    ][30011] Executing state file.directory for /srv/glance
2018-06-01 03:16:56,290 [salt.state       ][INFO    ][30011] {'/srv/glance': 'New Dir'}
2018-06-01 03:16:56,290 [salt.state       ][INFO    ][30011] Completed state [/srv/glance] at time 03:16:56.290609 duration_in_ms=5.288
2018-06-01 03:16:56,292 [salt.state       ][INFO    ][30011] Running state [/var/lib/glance/images] at time 03:16:56.292188
2018-06-01 03:16:56,292 [salt.state       ][INFO    ][30011] Executing state file.directory for /var/lib/glance/images
2018-06-01 03:16:56,295 [salt.state       ][INFO    ][30011] Directory /var/lib/glance/images is in the correct state
2018-06-01 03:16:56,295 [salt.state       ][INFO    ][30011] Completed state [/var/lib/glance/images] at time 03:16:56.295210 duration_in_ms=3.021
2018-06-01 03:16:56,297 [salt.state       ][INFO    ][30011] Running state [policy_file] at time 03:16:56.297944
2018-06-01 03:16:56,298 [salt.state       ][INFO    ][30011] Executing state keystone_policy.rule_present for policy_file
2018-06-01 03:16:56,305 [salt.state       ][INFO    ][30011] {'Rule': 'Rule policy_file: "/etc/glance/policy.json" has been created'}
2018-06-01 03:16:56,305 [salt.state       ][INFO    ][30011] Completed state [policy_file] at time 03:16:56.305603 duration_in_ms=7.658
2018-06-01 03:16:56,309 [salt.minion      ][INFO    ][30011] Returning information for job: 20180601031633012568
2018-06-01 03:17:20,763 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command test.ping with jid 20180601031720741325
2018-06-01 03:17:20,787 [salt.minion      ][INFO    ][31632] Starting a new job with PID 31632
2018-06-01 03:17:20,861 [salt.minion      ][INFO    ][31632] Returning information for job: 20180601031720741325
2018-06-01 03:19:50,416 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command state.sls with jid 20180601031950386654
2018-06-01 03:19:50,438 [salt.minion      ][INFO    ][31637] Starting a new job with PID 31637
2018-06-01 03:19:53,215 [salt.state       ][INFO    ][31637] Loading fresh modules for state activity
2018-06-01 03:19:53,294 [salt.fileclient  ][INFO    ][31637] Fetching file from saltenv 'base', ** done ** 'nova/init.sls'
2018-06-01 03:19:53,347 [salt.fileclient  ][INFO    ][31637] Fetching file from saltenv 'base', ** done ** 'nova/controller.sls'
2018-06-01 03:19:54,942 [salt.state       ][INFO    ][31637] Running state [debconf-utils] at time 03:19:54.942202
2018-06-01 03:19:54,942 [salt.state       ][INFO    ][31637] Executing state pkg.installed for debconf-utils
2018-06-01 03:19:54,943 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:19:55,372 [salt.state       ][INFO    ][31637] All specified packages are already installed
2018-06-01 03:19:55,373 [salt.state       ][INFO    ][31637] Completed state [debconf-utils] at time 03:19:55.373247 duration_in_ms=431.045
2018-06-01 03:19:55,377 [salt.state       ][INFO    ][31637] Running state [nova-consoleproxy] at time 03:19:55.377110
2018-06-01 03:19:55,377 [salt.state       ][INFO    ][31637] Executing state debconf.set for nova-consoleproxy
2018-06-01 03:19:55,378 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command 'debconf-get-selections' in directory '/root'
2018-06-01 03:19:55,615 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command 'debconf-set-selections /tmp/salt-WPLZve' in directory '/root'
2018-06-01 03:19:55,802 [salt.state       ][INFO    ][31637] {'nova-consoleproxy/daemon_type': 'novnc'}
2018-06-01 03:19:55,803 [salt.state       ][INFO    ][31637] Completed state [nova-consoleproxy] at time 03:19:55.803613 duration_in_ms=426.503
2018-06-01 03:19:55,809 [salt.state       ][INFO    ][31637] Running state [nova] at time 03:19:55.809245
2018-06-01 03:19:55,809 [salt.state       ][INFO    ][31637] Executing state group.present for nova
2018-06-01 03:19:55,810 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['groupadd', '-g 303', '-r', 'nova'] in directory '/root'
2018-06-01 03:19:55,847 [salt.state       ][INFO    ][31637] {'passwd': 'x', 'gid': 303, 'name': 'nova', 'members': []}
2018-06-01 03:19:55,848 [salt.state       ][INFO    ][31637] Completed state [nova] at time 03:19:55.848321 duration_in_ms=39.075
2018-06-01 03:19:55,850 [salt.state       ][INFO    ][31637] Running state [nova] at time 03:19:55.850052
2018-06-01 03:19:55,850 [salt.state       ][INFO    ][31637] Executing state user.present for nova
2018-06-01 03:19:55,852 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['useradd', '-s', '/bin/false', '-u', '303', '-g', '303', '-m', '-d', '/var/lib/nova', '-r', 'nova'] in directory '/root'
2018-06-01 03:19:55,885 [salt.state       ][INFO    ][31637] {'shell': '/bin/false', 'workphone': '', 'uid': 303, 'passwd': 'x', 'roomnumber': '', 'groups': ['nova'], 'home': '/var/lib/nova', 'name': 'nova', 'gid': 303, 'fullname': '', 'homephone': ''}
2018-06-01 03:19:55,886 [salt.state       ][INFO    ][31637] Completed state [nova] at time 03:19:55.886232 duration_in_ms=36.179
2018-06-01 03:19:55,887 [salt.state       ][INFO    ][31637] Running state [nova-common] at time 03:19:55.887868
2018-06-01 03:19:55,888 [salt.state       ][INFO    ][31637] Executing state pkg.installed for nova-common
2018-06-01 03:19:55,911 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['apt-cache', '-q', 'policy', 'nova-common'] in directory '/root'
2018-06-01 03:19:56,004 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-06-01 03:19:58,365 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:19:58,409 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'nova-common'] in directory '/root'
2018-06-01 03:20:00,472 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601032000442087
2018-06-01 03:20:00,491 [salt.minion      ][INFO    ][32258] Starting a new job with PID 32258
2018-06-01 03:20:00,514 [salt.minion      ][INFO    ][32258] Returning information for job: 20180601032000442087
2018-06-01 03:20:10,656 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601032010621140
2018-06-01 03:20:10,670 [salt.minion      ][INFO    ][1230] Starting a new job with PID 1230
2018-06-01 03:20:10,694 [salt.minion      ][INFO    ][1230] Returning information for job: 20180601032010621140
2018-06-01 03:20:19,719 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:20:19,779 [salt.state       ][INFO    ][31637] Made the following changes:
'python-pypowervm' changed from 'absent' to '1.1.6-1~u16.04+mcp2'
'python-os-win' changed from 'absent' to '2.2.0-1~u16.04+mcp2'
'libxrender1' changed from 'absent' to '1:0.9.9-0ubuntu1'
'libavahi-common3' changed from 'absent' to '0.6.32~rc+dfsg-1ubuntu2.2'
'nova-common' changed from 'absent' to '2:16.1.3-1~u16.04+mcp69'
'libthai-data' changed from 'absent' to '0.1.24-2'
'python-os-brick' changed from 'absent' to '1.15.2-1~u16.04+mcp2'
'python2.7-gobject-2' changed from 'absent' to '1'
'fonts-dejavu-core' changed from 'absent' to '2.35-1'
'python2.7-cairo' changed from 'absent' to '1'
'python-microversion-parse' changed from 'absent' to '0.1.3-2.1~u16.04+mcp2'
'libgtk2.0-bin' changed from 'absent' to '2.24.30-1ubuntu1.16.04.2'
'python-glanceclient' changed from '1:2.0.0-2ubuntu0.16.04.1' to '1:2.8.0-1~u16.04+mcp12'
'python-paramiko' changed from 'absent' to '2.0.0-1.1~u16.04+mcp2'
'libxdamage1' changed from 'absent' to '1:1.1.4-2'
'libxinerama1' changed from 'absent' to '2:1.1.3-1'
'python-nova' changed from 'absent' to '2:16.1.3-1~u16.04+mcp69'
'fontconfig' changed from 'absent' to '2.11.94-0ubuntu1.1'
'libpixman-1-0' changed from 'absent' to '0.33.6-1'
'libxi6' changed from 'absent' to '2:1.7.6-1'
'python3-mimeparse' changed from 'absent' to '0.1.4-1build1'
'libsubunit-diff-perl' changed from 'absent' to '1'
'python-gobject-2' changed from 'absent' to '2.28.6-12ubuntu1'
'bridge-utils' changed from 'absent' to '1.5-9ubuntu1'
'python-oslo.versionedobjects' changed from 'absent' to '1.26.1-1~u16.04+mcp8'
'websockify' changed from 'absent' to '0.8.0+dfsg1-7~u16.04+mcp2'
'python-junitxml' changed from 'absent' to '0.6-1.1ubuntu1'
'libxfixes3' changed from 'absent' to '1:5.0.1-2'
'libxcomposite1' changed from 'absent' to '1:0.4.4-1'
'python3-extras' changed from 'absent' to '0.0.3-3'
'python-tooz' changed from 'absent' to '1.47.0-1.1~u16.04+mcp2'
'os-brick-common' changed from 'absent' to '1.15.2-1~u16.04+mcp2'
'python3-pbr' changed from 'absent' to '2.0.0-1~u16.04+mcp2'
'libgtk2.0-0' changed from 'absent' to '2.24.30-1ubuntu1.16.04.2'
'python-pymemcache' changed from 'absent' to '1.3.2-2ubuntu1'
'libpango-1.0-0' changed from 'absent' to '1.38.1-1'
'python3-subunit' changed from 'absent' to '1.1.0-3'
'python3-linecache2' changed from 'absent' to '1.0.0-2'
'libgraphite2-3' changed from 'absent' to '1.3.10-0ubuntu0.16.04.1'
'python2.7-paramiko' changed from 'absent' to '1'
'libsubunit-perl' changed from 'absent' to '1.1.0-3'
'libxcursor1' changed from 'absent' to '1:1.1.14-1ubuntu0.16.04.1'
'python-oslo.privsep' changed from 'absent' to '1.22.1-1~u16.04+mcp3'
'libcups2' changed from 'absent' to '2.1.3-4ubuntu0.4'
'libfontconfig1' changed from 'absent' to '2.11.94-0ubuntu1.1'
'python-redis' changed from 'absent' to '2.10.5-1ubuntu1'
'hicolor-icon-theme' changed from 'absent' to '0.15-0ubuntu1'
'libatk1.0-0' changed from 'absent' to '2.18.0-1'
'libgraphite2-2.0.0' changed from 'absent' to '1'
'python-os-vif' changed from 'absent' to '1.7.0-1~u16.04+mcp2'
'python-voluptuous' changed from 'absent' to '0.9.3-1.1~u16.04+mcp2'
'python-oslo.rootwrap' changed from 'absent' to '5.9.2-1~u16.04+mcp4'
'libavahi-client3' changed from 'absent' to '0.6.32~rc+dfsg-1ubuntu2.2'
'python-osc-lib' changed from 'absent' to '1.7.0-1~u16.04+mcp2'
'python3-unittest2' changed from 'absent' to '1.1.0-6.1'
'python-oslo.reports' changed from 'absent' to '1.17.0-1.1~u16.04+mcp2'
'libxcb-shm0' changed from 'absent' to '1.11.1-1ubuntu1'
'python-os-xenapi' changed from 'absent' to '0.2.0-1~u16.04+mcp3'
'libthai0' changed from 'absent' to '0.1.24-2'
'python3-testtools' changed from 'absent' to '1.8.1-0ubuntu1'
'python-subunit' changed from 'absent' to '1.1.0-3'
'python-zake' changed from 'absent' to '0.1.6-1'
'libxrandr2' changed from 'absent' to '2:1.5.0-1'
'libgdk-pixbuf2.0-0' changed from 'absent' to '2.32.2-1ubuntu1.4'
'python-oslo-rootwrap' changed from 'absent' to '1'
'python2.7-gobject' changed from 'absent' to '1'
'sqlite3' changed from 'absent' to '3.11.0-1ubuntu1'
'libgtk2.0-common' changed from 'absent' to '2.24.30-1ubuntu1.16.04.2'
'subunit' changed from 'absent' to '1.1.0-3'
'libxcb-render0' changed from 'absent' to '1.11.1-1ubuntu1'
'python-os-traits' changed from 'absent' to '0.3.3-1~u16.04+mcp2'
'libatk1.0-data' changed from 'absent' to '2.18.0-1'
'libpangoft2-1.0-0' changed from 'absent' to '1.38.1-1'
'python-neutronclient' changed from '1:4.1.1-2ubuntu1' to '1:6.5.0-1~u16.04+mcp15'
'python-websockify' changed from 'absent' to '0.8.0+dfsg1-7~u16.04+mcp2'
'libfontconfig' changed from 'absent' to '1'
'python-pyasn1-modules' changed from 'absent' to '0.0.7-0.1'
'websockify-common' changed from 'absent' to '0.8.0+dfsg1-7~u16.04+mcp2'
'python2.7-nova' changed from 'absent' to '1'
'python-gtk2' changed from 'absent' to '2.24.0-4ubuntu1'
'libdatrie1' changed from 'absent' to '0.2.10-2'
'libharfbuzz0b' changed from 'absent' to '1.0.1-1ubuntu0.1'
'python3-traceback2' changed from 'absent' to '1.4.0-3'
'libavahi-common-data' changed from 'absent' to '0.6.32~rc+dfsg-1ubuntu2.2'
'libpangocairo-1.0-0' changed from 'absent' to '1.38.1-1'
'fontconfig-config' changed from 'absent' to '2.11.94-0ubuntu1.1'
'libgdk-pixbuf2.0-common' changed from 'absent' to '2.32.2-1ubuntu1.4'
'libcairo2' changed from 'absent' to '1.14.6-1'
'gtk2.0-binver-2.10.0' changed from 'absent' to '1'
'python-cinderclient' changed from '1:1.6.0-2ubuntu1' to '1:3.1.0-1~u16.04+mcp2'
'python-cairo' changed from 'absent' to '1.8.8-2'

2018-06-01 03:20:19,825 [salt.state       ][INFO    ][31637] Loading fresh modules for state activity
2018-06-01 03:20:19,865 [salt.state       ][INFO    ][31637] Completed state [nova-common] at time 03:20:19.865322 duration_in_ms=23977.452
2018-06-01 03:20:19,880 [salt.state       ][INFO    ][31637] Running state [nova-consoleproxy] at time 03:20:19.880517
2018-06-01 03:20:19,880 [salt.state       ][INFO    ][31637] Executing state pkg.installed for nova-consoleproxy
2018-06-01 03:20:20,412 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:20:20,447 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'nova-consoleproxy'] in directory '/root'
2018-06-01 03:20:20,835 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601032020805096
2018-06-01 03:20:20,854 [salt.minion      ][INFO    ][1612] Starting a new job with PID 1612
2018-06-01 03:20:20,877 [salt.minion      ][INFO    ][1612] Returning information for job: 20180601032020805096
2018-06-01 03:20:24,549 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:20:24,604 [salt.state       ][INFO    ][31637] Made the following changes:
'nova-novncproxy' changed from 'absent' to '1'
'nova-xvpvncproxy' changed from 'absent' to '1'
'libjs-swfobject' changed from 'absent' to '2.2+dfsg-1'
'novnc' changed from 'absent' to '1:0.6.1-1.1~u16.04+mcp2'
'spice-html5' changed from 'absent' to '0.1.4-1'
'python-novnc' changed from 'absent' to '1:0.6.1-1.1~u16.04+mcp2'
'nova-spiceproxy' changed from 'absent' to '1'
'nova-ajax-console-proxy' changed from 'absent' to '1'
'nova-spicehtml5proxy' changed from 'absent' to '1'
'nova-consoleproxy' changed from 'absent' to '2:16.1.3-1~u16.04+mcp69'

2018-06-01 03:20:24,638 [salt.state       ][INFO    ][31637] Loading fresh modules for state activity
2018-06-01 03:20:24,677 [salt.state       ][INFO    ][31637] Completed state [nova-consoleproxy] at time 03:20:24.677253 duration_in_ms=4796.727
2018-06-01 03:20:24,692 [salt.state       ][INFO    ][31637] Running state [novnc] at time 03:20:24.692715
2018-06-01 03:20:24,693 [salt.state       ][INFO    ][31637] Executing state pkg.installed for novnc
2018-06-01 03:20:25,249 [salt.state       ][INFO    ][31637] All specified packages are already installed
2018-06-01 03:20:25,251 [salt.state       ][INFO    ][31637] Completed state [novnc] at time 03:20:25.251085 duration_in_ms=558.369
2018-06-01 03:20:25,252 [salt.state       ][INFO    ][31637] Running state [nova-api] at time 03:20:25.252035
2018-06-01 03:20:25,252 [salt.state       ][INFO    ][31637] Executing state pkg.installed for nova-api
2018-06-01 03:20:25,272 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:20:25,308 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'nova-api'] in directory '/root'
2018-06-01 03:20:28,661 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:20:28,722 [salt.state       ][INFO    ][31637] Made the following changes:
'nova-api' changed from 'absent' to '2:16.1.3-1~u16.04+mcp69'

2018-06-01 03:20:28,756 [salt.state       ][INFO    ][31637] Loading fresh modules for state activity
2018-06-01 03:20:28,790 [salt.state       ][INFO    ][31637] Completed state [nova-api] at time 03:20:28.790696 duration_in_ms=3538.66
2018-06-01 03:20:28,801 [salt.state       ][INFO    ][31637] Running state [nova-conductor] at time 03:20:28.801244
2018-06-01 03:20:28,801 [salt.state       ][INFO    ][31637] Executing state pkg.installed for nova-conductor
2018-06-01 03:20:29,296 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:20:29,329 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'nova-conductor'] in directory '/root'
2018-06-01 03:20:31,029 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601032030992219
2018-06-01 03:20:31,043 [salt.minion      ][INFO    ][3026] Starting a new job with PID 3026
2018-06-01 03:20:31,074 [salt.minion      ][INFO    ][3026] Returning information for job: 20180601032030992219
2018-06-01 03:20:32,600 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:20:32,654 [salt.state       ][INFO    ][31637] Made the following changes:
'nova-conductor' changed from 'absent' to '2:16.1.3-1~u16.04+mcp69'

2018-06-01 03:20:32,686 [salt.state       ][INFO    ][31637] Loading fresh modules for state activity
2018-06-01 03:20:32,721 [salt.state       ][INFO    ][31637] Completed state [nova-conductor] at time 03:20:32.721427 duration_in_ms=3920.179
2018-06-01 03:20:32,730 [salt.state       ][INFO    ][31637] Running state [nova-consoleauth] at time 03:20:32.730242
2018-06-01 03:20:32,730 [salt.state       ][INFO    ][31637] Executing state pkg.installed for nova-consoleauth
2018-06-01 03:20:33,196 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:20:33,241 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'nova-consoleauth'] in directory '/root'
2018-06-01 03:20:36,503 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:20:36,558 [salt.state       ][INFO    ][31637] Made the following changes:
'nova-consoleauth' changed from 'absent' to '2:16.1.3-1~u16.04+mcp69'

2018-06-01 03:20:36,591 [salt.state       ][INFO    ][31637] Loading fresh modules for state activity
2018-06-01 03:20:36,624 [salt.state       ][INFO    ][31637] Completed state [nova-consoleauth] at time 03:20:36.624041 duration_in_ms=3893.797
2018-06-01 03:20:36,633 [salt.state       ][INFO    ][31637] Running state [nova-doc] at time 03:20:36.633690
2018-06-01 03:20:36,633 [salt.state       ][INFO    ][31637] Executing state pkg.installed for nova-doc
2018-06-01 03:20:37,152 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:20:37,201 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'nova-doc'] in directory '/root'
2018-06-01 03:20:39,657 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:20:39,723 [salt.state       ][INFO    ][31637] Made the following changes:
'nova-doc' changed from 'absent' to '2:16.1.3-1~u16.04+mcp69'

2018-06-01 03:20:39,758 [salt.state       ][INFO    ][31637] Loading fresh modules for state activity
2018-06-01 03:20:39,793 [salt.state       ][INFO    ][31637] Completed state [nova-doc] at time 03:20:39.793556 duration_in_ms=3159.863
2018-06-01 03:20:39,803 [salt.state       ][INFO    ][31637] Running state [nova-scheduler] at time 03:20:39.802964
2018-06-01 03:20:39,803 [salt.state       ][INFO    ][31637] Executing state pkg.installed for nova-scheduler
2018-06-01 03:20:40,297 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:20:40,340 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'nova-scheduler'] in directory '/root'
2018-06-01 03:20:41,223 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601032041192417
2018-06-01 03:20:41,236 [salt.minion      ][INFO    ][4050] Starting a new job with PID 4050
2018-06-01 03:20:41,257 [salt.minion      ][INFO    ][4050] Returning information for job: 20180601032041192417
2018-06-01 03:20:43,650 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:20:43,708 [salt.state       ][INFO    ][31637] Made the following changes:
'nova-scheduler' changed from 'absent' to '2:16.1.3-1~u16.04+mcp69'

2018-06-01 03:20:43,743 [salt.state       ][INFO    ][31637] Loading fresh modules for state activity
2018-06-01 03:20:43,780 [salt.state       ][INFO    ][31637] Completed state [nova-scheduler] at time 03:20:43.780824 duration_in_ms=3977.855
2018-06-01 03:20:43,790 [salt.state       ][INFO    ][31637] Running state [python-novaclient] at time 03:20:43.790925
2018-06-01 03:20:43,791 [salt.state       ][INFO    ][31637] Executing state pkg.installed for python-novaclient
2018-06-01 03:20:44,435 [salt.state       ][INFO    ][31637] All specified packages are already installed
2018-06-01 03:20:44,436 [salt.state       ][INFO    ][31637] Completed state [python-novaclient] at time 03:20:44.436233 duration_in_ms=645.283
2018-06-01 03:20:44,437 [salt.state       ][INFO    ][31637] Running state [python-memcache] at time 03:20:44.437363
2018-06-01 03:20:44,437 [salt.state       ][INFO    ][31637] Executing state pkg.installed for python-memcache
2018-06-01 03:20:44,445 [salt.state       ][INFO    ][31637] All specified packages are already installed
2018-06-01 03:20:44,445 [salt.state       ][INFO    ][31637] Completed state [python-memcache] at time 03:20:44.445578 duration_in_ms=8.215
2018-06-01 03:20:44,446 [salt.state       ][INFO    ][31637] Running state [gettext-base] at time 03:20:44.446418
2018-06-01 03:20:44,447 [salt.state       ][INFO    ][31637] Executing state pkg.installed for gettext-base
2018-06-01 03:20:44,454 [salt.state       ][INFO    ][31637] All specified packages are already installed
2018-06-01 03:20:44,454 [salt.state       ][INFO    ][31637] Completed state [gettext-base] at time 03:20:44.454810 duration_in_ms=8.392
2018-06-01 03:20:44,455 [salt.state       ][INFO    ][31637] Running state [python-pycadf] at time 03:20:44.455659
2018-06-01 03:20:44,456 [salt.state       ][INFO    ][31637] Executing state pkg.installed for python-pycadf
2018-06-01 03:20:44,463 [salt.state       ][INFO    ][31637] All specified packages are already installed
2018-06-01 03:20:44,463 [salt.state       ][INFO    ][31637] Completed state [python-pycadf] at time 03:20:44.463759 duration_in_ms=8.1
2018-06-01 03:20:44,467 [salt.state       ][INFO    ][31637] Running state [/etc/nova/nova.conf] at time 03:20:44.467318
2018-06-01 03:20:44,467 [salt.state       ][INFO    ][31637] Executing state file.managed for /etc/nova/nova.conf
2018-06-01 03:20:44,544 [salt.fileclient  ][INFO    ][31637] Fetching file from saltenv 'base', ** done ** 'nova/files/pike/nova-controller.conf.Debian'
2018-06-01 03:20:44,922 [salt.state       ][INFO    ][31637] File changed:
--- 
+++ 
@@ -1,4 +1,2754 @@
+
 [DEFAULT]
+
+#
+# From nova.conf
+#
+image_service=nova.image.glance.GlanceImageService
+
+# DEPRECATED:
+# When returning instance metadata, this is the class that is used
+# for getting vendor metadata when that class isn't specified in the individual
+# request. The value should be the full dot-separated path to the class to use.
+#
+# Possible values:
+#
+# * Any valid dot-separated class path that can be imported.
+#  (string value)
+# This option is deprecated for removal since 13.0.0.
+# Its value may be silently ignored in the future.
+#vendordata_driver=nova.api.metadata.vendordata_json.JsonFileVendorData
+
+# DEPRECATED:
+# This option is used to enable or disable quota checking for tenant networks.
+#
+# Related options:
+#
+# * quota_networks
+#  (boolean value)
+# This option is deprecated for removal since 14.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# CRUD operations on tenant networks are only available when using nova-network
+# and nova-network is itself deprecated.
+#enable_network_quota=false
+
+# DEPRECATED:
+# This option controls the number of private networks that can be created per
+# project (or per tenant).
+#
+# Related options:
+#
+# * enable_network_quota
+#  (integer value)
+# Minimum value: 0
+# This option is deprecated for removal since 14.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# CRUD operations on tenant networks are only available when using nova-network
+# and nova-network is itself deprecated.
+#quota_networks=3
+
+#
+# This option specifies the name of the availability zone for the
+# internal services. Services like nova-scheduler, nova-network,
+# nova-conductor are internal services. These services will appear in
+# their own internal availability_zone.
+#
+# Possible values:
+#
+# * Any string representing an availability zone name
+# * 'internal' is the default value
+#
+#  (string value)
+#internal_service_availability_zone=internal
+
+#
+# Default compute node availability_zone.
+#
+# This option determines the availability zone to be used when it is not
+# specified in the VM creation request. If this option is not set,
+# the default availability zone 'nova' is used.
+#
+# Possible values:
+#
+# * Any string representing an availability zone name
+# * 'nova' is the default value
+#
+#  (string value)
+#default_availability_zone=nova
+
+# Length of generated instance admin passwords. (integer value)
+# Minimum value: 0
+#password_length=12
+
+#
+# Time period to generate instance usages for. It is possible to define optional
+# offset to given period by appending @ character followed by a number defining
+# offset.
+#
+# Possible values:
+#
+# *  period, example: ``hour``, ``day``, ``month` or ``year``
+# *  period with offset, example: ``month@15`` will result in monthly audits
+#    starting on 15th day of month.
+#  (string value)
+#instance_usage_audit_period=month
+
+
+#
+# Start and use a daemon that can run the commands that need to be run with
+# root privileges. This option is usually enabled on nodes that run nova compute
+# processes.
+#  (boolean value)
+#use_rootwrap_daemon=false
+
+#
+# Path to the rootwrap configuration file.
+#
+# Goal of the root wrapper is to allow a service-specific unprivileged user to
+# run a number of actions as the root user in the safest manner possible.
+# The configuration file used here must match the one defined in the sudoers
+# entry.
+#  (string value)
+#rootwrap_config=/etc/nova/rootwrap.conf
+rootwrap_config=/etc/nova/rootwrap.conf
+
+# Explicitly specify the temporary working directory. (string value)
+#tempdir=<None>
+
+#
+# Determine if monkey patching should be applied.
+#
+# Related options:
+#
+# * ``monkey_patch_modules``: This must have values set for this option to
+#   have any effect
+#  (boolean value)
+#monkey_patch=false
+
+#
+# List of modules/decorators to monkey patch.
+#
+# This option allows you to patch a decorator for all functions in specified
+# modules.
+#
+# Possible values:
+#
+# * nova.compute.api:nova.notifications.notify_decorator
+# * nova.api.ec2.cloud:nova.notifications.notify_decorator
+# * [...]
+#
+# Related options:
+#
+# * ``monkey_patch``: This must be set to ``True`` for this option to
+#   have any effect
+#  (list value)
+#monkey_patch_modules=nova.compute.api:nova.notifications.notify_decorator
+
+#
+# Defines which driver to use for controlling virtualization.
+#
+# Possible values:
+#
+# * ``libvirt.LibvirtDriver``
+# * ``xenapi.XenAPIDriver``
+# * ``fake.FakeDriver``
+# * ``ironic.IronicDriver``
+# * ``vmwareapi.VMwareVCDriver``
+# * ``hyperv.HyperVDriver``
+#  (string value)
+#compute_driver=<None>
+compute_driver = libvirt.LibvirtDriver
+
+#
+# Allow destination machine to match source for resize. Useful when
+# testing in single-host environments. By default it is not allowed
+# to resize to the same host. Setting this option to true will add
+# the same host to the destination options.
+#  (boolean value)
+#allow_resize_to_same_host=false
+allow_resize_to_same_host=true
+
+#
+# Availability zone to use when user doesn't specify one.
+#
+# This option is used by the scheduler to determine which availability
+# zone to place a new VM instance into if the user did not specify one
+# at the time of VM boot request.
+#
+# Possible values:
+#
+# * Any string representing an availability zone name
+# * Default value is None.
+#  (string value)
+
+#
+# Image properties that should not be inherited from the instance
+# when taking a snapshot.
+#
+# This option gives an opportunity to select which image-properties
+# should not be inherited by newly created snapshots.
+#
+# Possible values:
+#
+# * A list whose item is an image property. Usually only the image
+#   properties that are only needed by base images can be included
+#   here, since the snapshots that are created from the base images
+#   doesn't need them.
+# * Default list: ['cache_in_nova', 'bittorrent']
+#  (list value)
+#non_inheritable_image_properties=cache_in_nova,bittorrent
+
+# DEPRECATED:
+# This option is used to decide when an image should have no external
+# ramdisk or kernel. By default this is set to 'nokernel', so when an
+# image is booted with the property 'kernel_id' with the value
+# 'nokernel', Nova assumes the image doesn't require an external kernel
+# and ramdisk.
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# When an image is booted with the property 'kernel_id' with the value
+# 'nokernel', Nova assumes the image doesn't require an external kernel and
+# ramdisk. This option allows user to change the API behaviour which should not
+# be allowed and this value "nokernel" should be hard coded.
+#null_kernel=nokernel
+
+# DEPRECATED:
+# When creating multiple instances with a single request using the
+# os-multiple-create API extension, this template will be used to build
+# the display name for each instance. The benefit is that the instances
+# end up with different hostnames. Example display names when creating
+# two VM's: name-1, name-2.
+#
+# Possible values:
+#
+# * Valid keys for the template are: name, uuid, count.
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# This config changes API behaviour. All changes in API behaviour should be
+# discoverable.
+#multi_instance_display_name_template=%(name)s-%(count)d
+
+#
+# Maximum number of devices that will result in a local image being
+# created on the hypervisor node.
+#
+# A negative number means unlimited. Setting max_local_block_devices
+# to 0 means that any request that attempts to create a local disk
+# will fail. This option is meant to limit the number of local discs
+# (so root local disc that is the result of --image being used, and
+# any other ephemeral and swap disks). 0 does not mean that images
+# will be automatically converted to volumes and boot instances from
+# volumes - it just means that all requests that attempt to create a
+# local disk will fail.
+#
+# Possible values:
+#
+# * 0: Creating a local disk is not allowed.
+# * Negative number: Allows unlimited number of local discs.
+# * Positive number: Allows only these many number of local discs.
+#                        (Default value is 3).
+#  (integer value)
+#max_local_block_devices=3
+
+#
+# A list of monitors that can be used for getting compute metrics.
+# You can use the alias/name from the setuptools entry points for
+# nova.compute.monitors.* namespaces. If no namespace is supplied,
+# the "cpu." namespace is assumed for backwards-compatibility.
+#
+# Possible values:
+#
+# * An empty list will disable the feature(Default).
+# * An example value that would enable both the CPU and NUMA memory
+#   bandwidth monitors that used the virt driver variant:
+#   ["cpu.virt_driver", "numa_mem_bw.virt_driver"]
+#  (list value)
+#compute_monitors =
+
+#
+# The default format an ephemeral_volume will be formatted with on creation.
+#
+# Possible values:
+#
+# * ``ext2``
+# * ``ext3``
+# * ``ext4``
+# * ``xfs``
+# * ``ntfs`` (only for Windows guests)
+#  (string value)
+#default_ephemeral_format=<None>
+
+#
+# Determine if instance should boot or fail on VIF plugging timeout.
+#
+# Nova sends a port update to Neutron after an instance has been scheduled,
+# providing Neutron with the necessary information to finish setup of the port.
+# Once completed, Neutron notifies Nova that it has finished setting up the
+# port, at which point Nova resumes the boot of the instance since network
+# connectivity is now supposed to be present. A timeout will occur if the reply
+# is not received after a given interval.
+#
+# This option determines what Nova does when the VIF plugging timeout event
+# happens. When enabled, the instance will error out. When disabled, the
+# instance will continue to boot on the assumption that the port is ready.
+#
+# Possible values:
+#
+# * True: Instances should fail after VIF plugging timeout
+# * False: Instances should continue booting after VIF plugging timeout
+#  (boolean value)
+#vif_plugging_is_fatal=true
+vif_plugging_is_fatal=false
+
+#
+# Timeout for Neutron VIF plugging event message arrival.
+#
+# Number of seconds to wait for Neutron vif plugging events to
+# arrive before continuing or failing (see 'vif_plugging_is_fatal').
+#
+# Related options:
+#
+# * vif_plugging_is_fatal - If ``vif_plugging_timeout`` is set to zero and
+#   ``vif_plugging_is_fatal`` is False, events should not be expected to
+#   arrive at all.
+#  (integer value)
+# Minimum value: 0
+#vif_plugging_timeout=300
+vif_plugging_timeout=0
+
+# Path to '/etc/network/interfaces' template.
+#
+# The path to a template file for the '/etc/network/interfaces'-style file,
+# which
+# will be populated by nova and subsequently used by cloudinit. This provides a
+# method to configure network connectivity in environments without a DHCP
+# server.
+#
+# The template will be rendered using Jinja2 template engine, and receive a
+# top-level key called ``interfaces``. This key will contain a list of
+# dictionaries, one for each interface.
+#
+# Refer to the cloudinit documentaion for more information:
+#
+#   https://cloudinit.readthedocs.io/en/latest/topics/datasources.html
+#
+# Possible values:
+#
+# * A path to a Jinja2-formatted template for a Debian '/etc/network/interfaces'
+#   file. This applies even if using a non Debian-derived guest.
+#
+# Related options:
+#
+# * ``flat_inject``: This must be set to ``True`` to ensure nova embeds network
+#   configuration information in the metadata provided through the config drive.
+#  (string value)
+#injected_network_template=$pybasedir/nova/virt/interfaces.template
+injected_network_template=$pybasedir/nova/virt/interfaces.template
+
+#
+# The image preallocation mode to use.
+#
+# Image preallocation allows storage for instance images to be allocated up
+# front
+# when the instance is initially provisioned. This ensures immediate feedback is
+# given if enough space isn't available. In addition, it should significantly
+# improve performance on writes to new blocks and may even improve I/O
+# performance to prewritten blocks due to reduced fragmentation.
+#
+# Possible values:
+#
+# * "none"  => no storage provisioning is done up front
+# * "space" => storage is fully allocated at instance start
+#  (string value)
+# Allowed values: none, space
+#preallocate_images=none
+
+#
+# Enable use of copy-on-write (cow) images.
+#
+# QEMU/KVM allow the use of qcow2 as backing files. By disabling this,
+# backing files will not be used.
+#  (boolean value)
+#use_cow_images=true
+
+#
+# Force conversion of backing images to raw format.
+#
+# Possible values:
+#
+# * True: Backing image files will be converted to raw image format
+# * False: Backing image files will not be converted
+#
+# Related options:
+#
+# * ``compute_driver``: Only the libvirt driver uses this option.
+#  (boolean value)
+#force_raw_images=true
+
+#
+# Name of the mkfs commands for ephemeral device.
+#
+# The format is <os_type>=<mkfs command>
+#  (multi valued)
+#virt_mkfs =
+
+#
+# Enable resizing of filesystems via a block device.
+#
+# If enabled, attempt to resize the filesystem by accessing the image over a
+# block device. This is done by the host and may not be necessary if the image
+# contains a recent version of cloud-init. Possible mechanisms require the nbd
+# driver (for qcow and raw), or loop (for raw).
+#  (boolean value)
+#resize_fs_using_block_device=false
+
+# Amount of time, in seconds, to wait for NBD device start up. (integer value)
+# Minimum value: 0
+#timeout_nbd=10
+
+#
+# Location of cached images.
+#
+# This is NOT the full path - just a folder name relative to '$instances_path'.
+# For per-compute-host cached images, set to '_base_$my_ip'
+#  (string value)
+#image_cache_subdirectory_name=_base
+
+# Should unused base images be removed? (boolean value)
+#remove_unused_base_images=true
+
+#
+# Unused unresized base images younger than this will not be removed.
+#  (integer value)
+#remove_unused_original_minimum_age_seconds=86400
+
+#
+# Generic property to specify the pointer type.
+#
+# Input devices allow interaction with a graphical framebuffer. For
+# example to provide a graphic tablet for absolute cursor movement.
+#
+# If set, the 'hw_pointer_model' image property takes precedence over
+# this configuration option.
+#
+# Possible values:
+#
+# * None: Uses default behavior provided by drivers (mouse on PS2 for
+#         libvirt x86)
+# * ps2mouse: Uses relative movement. Mouse connected by PS2
+# * usbtablet: Uses absolute movement. Tablet connect by USB
+#
+# Related options:
+#
+# * usbtablet must be configured with VNC enabled or SPICE enabled and SPICE
+#   agent disabled. When used with libvirt the instance mode should be
+#   configured as HVM.
+#   (string value)
+# Allowed values: <None>, ps2mouse, usbtablet
+#pointer_model=usbtablet
+
+#
+# Defines which physical CPUs (pCPUs) can be used by instance
+# virtual CPUs (vCPUs).
+#
+# Possible values:
+#
+# * A comma-separated list of physical CPU numbers that virtual CPUs can be
+#   allocated to by default. Each element should be either a single CPU number,
+#   a range of CPU numbers, or a caret followed by a CPU number to be
+#   excluded from a previous range. For example:
+#
+#     vcpu_pin_set = "4-12,^8,15"
+#  (string value)
+#vcpu_pin_set=<None>
+
+#
+# Number of huge/large memory pages to reserved per NUMA host cell.
+#
+# Possible values:
+#
+# * A list of valid key=value which reflect NUMA node ID, page size
+#   (Default unit is KiB) and number of pages to be reserved.
+#
+#     reserved_huge_pages = node:0,size:2048,count:64
+#     reserved_huge_pages = node:1,size:1GB,count:1
+#
+#   In this example we are reserving on NUMA node 0 64 pages of 2MiB
+#   and on NUMA node 1 1 page of 1GiB.
+#  (dict value)
+#reserved_huge_pages=<None>
+
+#
+# Amount of disk resources in MB to make them always available to host. The
+# disk usage gets reported back to the scheduler from nova-compute running
+# on the compute nodes. To prevent the disk resources from being considered
+# as available, this option can be used to reserve disk space for that host.
+#
+# Possible values:
+#
+# * Any positive integer representing amount of disk in MB to reserve
+#   for the host.
+#  (integer value)
+# Minimum value: 0
+#reserved_host_disk_mb=0
+
+#
+# Amount of memory in MB to reserve for the host so that it is always available
+# to host processes. The host resources usage is reported back to the scheduler
+# continuously from nova-compute running on the compute node. To prevent the
+# host
+# memory from being considered as available, this option is used to reserve
+# memory for the host.
+#
+# Possible values:
+#
+# * Any positive integer representing amount of memory in MB to reserve
+#   for the host.
+#  (integer value)
+# Minimum value: 0
+#reserved_host_memory_mb=512
+
+#
+# This option helps you specify virtual CPU to physical CPU allocation ratio.
+#
+# From Ocata (15.0.0) this is used to influence the hosts selected by
+# the Placement API. Note that when Placement is used, the CoreFilter
+# is redundant, because the Placement API will have already filtered
+# out hosts that would have failed the CoreFilter.
+#
+# This configuration specifies ratio for CoreFilter which can be set
+# per compute node. For AggregateCoreFilter, it will fall back to this
+# configuration value if no per-aggregate setting is found.
+#
+# NOTE: This can be set per-compute, or if set to 0.0, the value
+# set on the scheduler node(s) or compute node(s) will be used
+# and defaulted to 16.0'.
+#
+# Possible values:
+#
+# * Any valid positive integer or float value
+#  (floating point value)
+# Minimum value: 0
+#cpu_allocation_ratio=0.0
+cpu_allocation_ratio=16.0
+
+#
+# This option helps you specify virtual RAM to physical RAM
+# allocation ratio.
+#
+# From Ocata (15.0.0) this is used to influence the hosts selected by
+# the Placement API. Note that when Placement is used, the RamFilter
+# is redundant, because the Placement API will have already filtered
+# out hosts that would have failed the RamFilter.
+#
+# This configuration specifies ratio for RamFilter which can be set
+# per compute node. For AggregateRamFilter, it will fall back to this
+# configuration value if no per-aggregate setting found.
+#
+# NOTE: This can be set per-compute, or if set to 0.0, the value
+# set on the scheduler node(s) or compute node(s) will be used and
+# defaulted to 1.5.
+#
+# Possible values:
+#
+# * Any valid positive integer or float value
+#  (floating point value)
+# Minimum value: 0
+#ram_allocation_ratio=0.0
+ram_allocation_ratio = 1.5
+
+#
+# This option helps you specify virtual disk to physical disk
+# allocation ratio.
+#
+# From Ocata (15.0.0) this is used to influence the hosts selected by
+# the Placement API. Note that when Placement is used, the DiskFilter
+# is redundant, because the Placement API will have already filtered
+# out hosts that would have failed the DiskFilter.
+#
+# A ratio greater than 1.0 will result in over-subscription of the
+# available physical disk, which can be useful for more
+# efficiently packing instances created with images that do not
+# use the entire virtual disk, such as sparse or compressed
+# images. It can be set to a value between 0.0 and 1.0 in order
+# to preserve a percentage of the disk for uses other than
+# instances.
+#
+# NOTE: This can be set per-compute, or if set to 0.0, the value
+# set on the scheduler node(s) or compute node(s) will be used and
+# defaulted to 1.0'.
+#
+# Possible values:
+#
+# * Any valid positive integer or float value
+#  (floating point value)
+# Minimum value: 0
+#disk_allocation_ratio=0.0
+disk_allocation_ratio = 1.0
+
+#
+# Console proxy host to be used to connect to instances on this host. It is the
+# publicly visible name for the console host.
+#
+# Possible values:
+#
+# * Current hostname (default) or any string representing hostname.
+#  (string value)
+#console_host=socket.gethostname()
+
+#
+# Name of the network to be used to set access IPs for instances. If there are
+# multiple IPs to choose from, an arbitrary one will be chosen.
+#
+# Possible values:
+#
+# * None (default)
+# * Any string representing network name.
+#  (string value)
+#default_access_ip_network_name=<None>
+
+#
+# Whether to batch up the application of IPTables rules during a host restart
+# and apply all at the end of the init phase.
+#  (boolean value)
+#defer_iptables_apply=false
+
+#
+# Specifies where instances are stored on the hypervisor's disk.
+# It can point to locally attached storage or a directory on NFS.
+#
+# Possible values:
+#
+# * $state_path/instances where state_path is a config option that specifies
+#   the top-level directory for maintaining nova's state. (default) or
+#   Any string representing directory path.
+#  (string value)
+#instances_path=$state_path/instances
+
+#
+# This option enables periodic compute.instance.exists notifications. Each
+# compute node must be configured to generate system usage data. These
+# notifications are consumed by OpenStack Telemetry service.
+#  (boolean value)
+#instance_usage_audit=false
+
+
+#
+# Maximum number of 1 second retries in live_migration. It specifies number
+# of retries to iptables when it complains. It happens when an user continuously
+# sends live-migration request to same host leading to concurrent request
+# to iptables.
+#
+# Possible values:
+#
+# * Any positive integer representing retry count.
+#  (integer value)
+# Minimum value: 0
+#live_migration_retry_count=30
+
+#
+# Number of times to retry network allocation. It is required to attempt network
+# allocation retries if the virtual interface plug fails.
+#
+# Possible values:
+#
+# * Any positive integer representing retry count.
+#  (integer value)
+# Minimum value: 0
+#network_allocate_retries=0
+
+#
+# Limits the maximum number of instance builds to run concurrently by
+# nova-compute. Compute service can attempt to build an infinite number of
+# instances, if asked to do so. This limit is enforced to avoid building
+# unlimited instance concurrently on a compute node. This value can be set
+# per compute node.
+#
+# Possible Values:
+#
+# * 0 : treated as unlimited.
+# * Any positive integer representing maximum concurrent builds.
+#  (integer value)
+# Minimum value: 0
+#max_concurrent_builds=10
+
+#
+# Maximum number of live migrations to run concurrently. This limit is enforced
+# to avoid outbound live migrations overwhelming the host/network and causing
+# failures. It is not recommended that you change this unless you are very sure
+# that doing so is safe and stable in your environment.
+#
+# Possible values:
+#
+# * 0 : treated as unlimited.
+# * Negative value defaults to 0.
+# * Any positive integer representing maximum number of live migrations
+#   to run concurrently.
+#  (integer value)
+#max_concurrent_live_migrations=1
+
+#
+# Number of times to retry block device allocation on failures. Starting with
+# Liberty, Cinder can use image volume cache. This may help with block device
+# allocation performance. Look at the cinder image_volume_cache_enabled
+# configuration option.
+#
+# Possible values:
+#
+# * 60 (default)
+# * If value is 0, then one attempt is made.
+# * Any negative value is treated as 0.
+# * For any value > 0, total attempts are (value + 1)
+#  (integer value)
+#block_device_allocate_retries=60
+block_device_allocate_retries=600
+
+#
+# Number of greenthreads available for use to sync power states.
+#
+# This option can be used to reduce the number of concurrent requests
+# made to the hypervisor or system with real instance power states
+# for performance reasons, for example, with Ironic.
+#
+# Possible values:
+#
+# * Any positive integer representing greenthreads count.
+#  (integer value)
+#sync_power_state_pool_size=1000
+
+#
+# Number of seconds to wait between runs of the image cache manager.
+#
+# Possible values:
+# * 0: run at the default rate.
+# * -1: disable
+# * Any other value
+#  (integer value)
+# Minimum value: -1
+#image_cache_manager_interval=2400
+
+#
+# Interval to pull network bandwidth usage info.
+#
+# Not supported on all hypervisors. If a hypervisor doesn't support bandwidth
+# usage, it will not get the info in the usage events.
+#
+# Possible values:
+#
+# * 0: Will run at the default periodic interval.
+# * Any value < 0: Disables the option.
+# * Any positive integer in seconds.
+#  (integer value)
+#bandwidth_poll_interval=600
+
+#
+# Interval to sync power states between the database and the hypervisor.
+#
+# The interval that Nova checks the actual virtual machine power state
+# and the power state that Nova has in its database. If a user powers
+# down their VM, Nova updates the API to report the VM has been
+# powered down. Should something turn on the VM unexpectedly,
+# Nova will turn the VM back off to keep the system in the expected
+# state.
+#
+# Possible values:
+#
+# * 0: Will run at the default periodic interval.
+# * Any value < 0: Disables the option.
+# * Any positive integer in seconds.
+#
+# Related options:
+#
+# * If ``handle_virt_lifecycle_events`` in workarounds_group is
+#   false and this option is negative, then instances that get out
+#   of sync between the hypervisor and the Nova database will have
+#   to be synchronized manually.
+#  (integer value)
+#sync_power_state_interval=600
+
+#
+# Interval between instance network information cache updates.
+#
+# Number of seconds after which each compute node runs the task of
+# querying Neutron for all of its instances networking information,
+# then updates the Nova db with that information. Nova will never
+# update it's cache if this option is set to 0. If we don't update the
+# cache, the metadata service and nova-api endpoints will be proxying
+# incorrect network data about the instance. So, it is not recommended
+# to set this option to 0.
+#
+# Possible values:
+#
+# * Any positive integer in seconds.
+# * Any value <=0 will disable the sync. This is not recommended.
+#  (integer value)
+#heal_instance_info_cache_interval=60
+
+#
+# Interval for reclaiming deleted instances.
+#
+# A value greater than 0 will enable SOFT_DELETE of instances.
+# This option decides whether the server to be deleted will be put into
+# the SOFT_DELETED state. If this value is greater than 0, the deleted
+# server will not be deleted immediately, instead it will be put into
+# a queue until it's too old (deleted time greater than the value of
+# reclaim_instance_interval). The server can be recovered from the
+# delete queue by using the restore action. If the deleted server remains
+# longer than the value of reclaim_instance_interval, it will be
+# deleted by a periodic task in the compute service automatically.
+#
+# Note that this option is read from both the API and compute nodes, and
+# must be set globally otherwise servers could be put into a soft deleted
+# state in the API and never actually reclaimed (deleted) on the compute
+# node.
+#
+# Possible values:
+#
+# * Any positive integer(in seconds) greater than 0 will enable
+#   this option.
+# * Any value <=0 will disable the option.
+#  (integer value)
+#reclaim_instance_interval=0
+
+#
+# Interval for gathering volume usages.
+#
+# This option updates the volume usage cache for every
+# volume_usage_poll_interval number of seconds.
+#
+# Possible values:
+#
+# * Any positive integer(in seconds) greater than 0 will enable
+#   this option.
+# * Any value <=0 will disable the option.
+#  (integer value)
+#volume_usage_poll_interval=0
+
+#
+# Interval for polling shelved instances to offload.
+#
+# The periodic task runs for every shelved_poll_interval number
+# of seconds and checks if there are any shelved instances. If it
+# finds a shelved instance, based on the 'shelved_offload_time' config
+# value it offloads the shelved instances. Check 'shelved_offload_time'
+# config option description for details.
+#
+# Possible values:
+#
+# * Any value <= 0: Disables the option.
+# * Any positive integer in seconds.
+#
+# Related options:
+#
+# * ``shelved_offload_time``
+#  (integer value)
+#shelved_poll_interval=3600
+
+#
+# Time before a shelved instance is eligible for removal from a host.
+#
+# By default this option is set to 0 and the shelved instance will be
+# removed from the hypervisor immediately after shelve operation.
+# Otherwise, the instance will be kept for the value of
+# shelved_offload_time(in seconds) so that during the time period the
+# unshelve action will be faster, then the periodic task will remove
+# the instance from hypervisor after shelved_offload_time passes.
+#
+# Possible values:
+#
+# * 0: Instance will be immediately offloaded after being
+#      shelved.
+# * Any value < 0: An instance will never offload.
+# * Any positive integer in seconds: The instance will exist for
+#   the specified number of seconds before being offloaded.
+#  (integer value)
+#shelved_offload_time=0
+
+#
+# Interval for retrying failed instance file deletes.
+#
+# This option depends on 'maximum_instance_delete_attempts'.
+# This option specifies how often to retry deletes whereas
+# 'maximum_instance_delete_attempts' specifies the maximum number
+# of retry attempts that can be made.
+#
+# Possible values:
+#
+# * 0: Will run at the default periodic interval.
+# * Any value < 0: Disables the option.
+# * Any positive integer in seconds.
+#
+# Related options:
+#
+# * ``maximum_instance_delete_attempts`` from instance_cleaning_opts
+#   group.
+#  (integer value)
+#instance_delete_interval=300
+
+#
+# Interval (in seconds) between block device allocation retries on failures.
+#
+# This option allows the user to specify the time interval between
+# consecutive retries. 'block_device_allocate_retries' option specifies
+# the maximum number of retries.
+#
+# Possible values:
+#
+# * 0: Disables the option.
+# * Any positive integer in seconds enables the option.
+#
+# Related options:
+#
+# * ``block_device_allocate_retries`` in compute_manager_opts group.
+#  (integer value)
+# Minimum value: 0
+#block_device_allocate_retries_interval=3
+block_device_allocate_retries_interval=10
+
+#
+# Interval between sending the scheduler a list of current instance UUIDs to
+# verify that its view of instances is in sync with nova.
+#
+# If the CONF option 'scheduler_tracks_instance_changes' is
+# False, the sync calls will not be made. So, changing this option will
+# have no effect.
+#
+# If the out of sync situations are not very common, this interval
+# can be increased to lower the number of RPC messages being sent.
+# Likewise, if sync issues turn out to be a problem, the interval
+# can be lowered to check more frequently.
+#
+# Possible values:
+#
+# * 0: Will run at the default periodic interval.
+# * Any value < 0: Disables the option.
+# * Any positive integer in seconds.
+#
+# Related options:
+#
+# * This option has no impact if ``scheduler_tracks_instance_changes``
+#   is set to False.
+#  (integer value)
+#scheduler_instance_sync_interval=120
+
+#
+# Interval for updating compute resources.
+#
+# This option specifies how often the update_available_resources
+# periodic task should run. A number less than 0 means to disable the
+# task completely. Leaving this at the default of 0 will cause this to
+# run at the default periodic interval. Setting it to any positive
+# value will cause it to run at approximately that number of seconds.
+#
+# Possible values:
+#
+# * 0: Will run at the default periodic interval.
+# * Any value < 0: Disables the option.
+# * Any positive integer in seconds.
+#  (integer value)
+#update_resources_interval=0
+
+#
+# Time interval after which an instance is hard rebooted automatically.
+#
+# When doing a soft reboot, it is possible that a guest kernel is
+# completely hung in a way that causes the soft reboot task
+# to not ever finish. Setting this option to a time period in seconds
+# will automatically hard reboot an instance if it has been stuck
+# in a rebooting state longer than N seconds.
+#
+# Possible values:
+#
+# * 0: Disables the option (default).
+# * Any positive integer in seconds: Enables the option.
+#  (integer value)
+# Minimum value: 0
+#reboot_timeout=0
+
+#
+# Maximum time in seconds that an instance can take to build.
+#
+# If this timer expires, instance status will be changed to ERROR.
+# Enabling this option will make sure an instance will not be stuck
+# in BUILD state for a longer period.
+#
+# Possible values:
+#
+# * 0: Disables the option (default)
+# * Any positive integer in seconds: Enables the option.
+#  (integer value)
+# Minimum value: 0
+#instance_build_timeout=0
+
+#
+# Interval to wait before un-rescuing an instance stuck in RESCUE.
+#
+# Possible values:
+#
+# * 0: Disables the option (default)
+# * Any positive integer in seconds: Enables the option.
+#  (integer value)
+# Minimum value: 0
+#rescue_timeout=0
+
+#
+# Automatically confirm resizes after N seconds.
+#
+# Resize functionality will save the existing server before resizing.
+# After the resize completes, user is requested to confirm the resize.
+# The user has the opportunity to either confirm or revert all
+# changes. Confirm resize removes the original server and changes
+# server status from resized to active. Setting this option to a time
+# period (in seconds) will automatically confirm the resize if the
+# server is in resized state longer than that time.
+#
+# Possible values:
+#
+# * 0: Disables the option (default)
+# * Any positive integer in seconds: Enables the option.
+#  (integer value)
+# Minimum value: 0
+#resize_confirm_window=0
+
+#
+# Total time to wait in seconds for an instance toperform a clean
+# shutdown.
+#
+# It determines the overall period (in seconds) a VM is allowed to
+# perform a clean shutdown. While performing stop, rescue and shelve,
+# rebuild operations, configuring this option gives the VM a chance
+# to perform a controlled shutdown before the instance is powered off.
+# The default timeout is 60 seconds.
+#
+# The timeout value can be overridden on a per image basis by means
+# of os_shutdown_timeout that is an image metadata setting allowing
+# different types of operating systems to specify how much time they
+# need to shut down cleanly.
+#
+# Possible values:
+#
+# * Any positive integer in seconds (default value is 60).
+#  (integer value)
+# Minimum value: 1
+#shutdown_timeout=60
+
+#
+# The compute service periodically checks for instances that have been
+# deleted in the database but remain running on the compute node. The
+# above option enables action to be taken when such instances are
+# identified.
+#
+# Possible values:
+#
+# * reap: Powers down the instances and deletes them(default)
+# * log: Logs warning message about deletion of the resource
+# * shutdown: Powers down instances and marks them as non-
+#   bootable which can be later used for debugging/analysis
+# * noop: Takes no action
+#
+# Related options:
+#
+# * running_deleted_instance_poll
+# * running_deleted_instance_timeout
+#  (string value)
+# Allowed values: noop, log, shutdown, reap
+#running_deleted_instance_action=reap
+
+#
+# Time interval in seconds to wait between runs for the clean up action.
+# If set to 0, above check will be disabled. If "running_deleted_instance
+# _action" is set to "log" or "reap", a value greater than 0 must be set.
+#
+# Possible values:
+#
+# * Any positive integer in seconds enables the option.
+# * 0: Disables the option.
+# * 1800: Default value.
+#
+# Related options:
+#
+# * running_deleted_instance_action
+#  (integer value)
+#running_deleted_instance_poll_interval=1800
+
+#
+# Time interval in seconds to wait for the instances that have
+# been marked as deleted in database to be eligible for cleanup.
+#
+# Possible values:
+#
+# * Any positive integer in seconds(default is 0).
+#
+# Related options:
+#
+# * "running_deleted_instance_action"
+#  (integer value)
+#running_deleted_instance_timeout=0
+
+#
+# The number of times to attempt to reap an instance's files.
+#
+# This option specifies the maximum number of retry attempts
+# that can be made.
+#
+# Possible values:
+#
+# * Any positive integer defines how many attempts are made.
+# * Any value <=0 means no delete attempts occur, but you should use
+#   ``instance_delete_interval`` to disable the delete attempts.
+#
+# Related options:
+# * ``instance_delete_interval`` in interval_opts group can be used to disable
+#   this option.
+#  (integer value)
+#maximum_instance_delete_attempts=5
+
+# DEPRECATED:
+# This is the message queue topic that the compute service 'listens' on. It is
+# used when the compute service is started up to configure the queue, and
+# whenever an RPC call to the compute service is made.
+#
+# Possible values:
+#
+# * Any string, but there is almost never any reason to ever change this value
+#   from its default of 'compute'.
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# There is no need to let users choose the RPC topic for all services - there
+# is little gain from this. Furthermore, it makes it really easy to break Nova
+# by using this option.
+#compute_topic=compute
+
+#
+# Sets the scope of the check for unique instance names.
+#
+# The default doesn't check for unique names. If a scope for the name check is
+# set, a launch of a new instance or an update of an existing instance with a
+# duplicate name will result in an ''InstanceExists'' error. The uniqueness is
+# case-insensitive. Setting this option can increase the usability for end
+# users as they don't have to distinguish among instances with the same name
+# by their IDs.
+#
+# Possible values:
+#
+# * '': An empty value means that no uniqueness check is done and duplicate
+#   names are possible.
+# * "project": The instance name check is done only for instances within the
+#   same project.
+# * "global": The instance name check is done for all instances regardless of
+#   the project.
+#  (string value)
+# Allowed values: '', project, global
+#osapi_compute_unique_server_name_scope =
+
+#
+# Enable new services on this host automatically.
+#
+# When a new service (for example "nova-compute") starts up, it gets
+# registered in the database as an enabled service. Sometimes it can be useful
+# to register new services in disabled state and then enabled them at a later
+# point in time. This option can set this behavior for all services per host.
+#
+# Possible values:
+#
+# * ``True``: Each new service is enabled as soon as it registers itself.
+# * ``False``: Services must be enabled via a REST API call or with the CLI
+#   with ``nova service-enable <hostname> <binary>``, otherwise they are not
+#   ready to use.
+#  (boolean value)
+#enable_new_services=true
+
+#
+# Template string to be used to generate instance names.
+#
+# This template controls the creation of the database name of an instance. This
+# is *not* the display name you enter when creating an instance (via Horizon
+# or CLI). For a new deployment it is advisable to change the default value
+# (which uses the database autoincrement) to another value which makes use
+# of the attributes of an instance, like ``instance-%(uuid)s``. If you
+# already have instances in your deployment when you change this, your
+# deployment will break.
+#
+# Possible values:
+#
+# * A string which either uses the instance database ID (like the
+#   default)
+# * A string with a list of named database columns, for example ``%(id)d``
+#   or ``%(uuid)s`` or ``%(hostname)s``.
+#
+# Related options:
+#
+# * not to be confused with: ``multi_instance_display_name_template``
+#  (string value)
+#instance_name_template=instance-%08x
+
+#
+# Number of times to retry live-migration before failing.
+#
+# Possible values:
+#
+# * If == -1, try until out of hosts (default)
+# * If == 0, only try once, no retries
+# * Integer greater than 0
+#  (integer value)
+# Minimum value: -1
+#migrate_max_retries=-1
+
+#
+# Configuration drive format
+#
+# Configuration drive format that will contain metadata attached to the
+# instance when it boots.
+#
+# Possible values:
+#
+# * iso9660: A file system image standard that is widely supported across
+#   operating systems. NOTE: Mind the libvirt bug
+#   (https://bugs.launchpad.net/nova/+bug/1246201) - If your hypervisor
+#   driver is libvirt, and you want live migrate to work without shared storage,
+#   then use VFAT.
+# * vfat: For legacy reasons, you can configure the configuration drive to
+#   use VFAT format instead of ISO 9660.
+#
+# Related options:
+#
+# * This option is meaningful when one of the following alternatives occur:
+#   1. force_config_drive option set to 'true'
+#   2. the REST API call to create the instance contains an enable flag for
+#      config drive option
+#   3. the image used to create the instance requires a config drive,
+#      this is defined by img_config_drive property for that image.
+# * A compute node running Hyper-V hypervisor can be configured to attach
+#   configuration drive as a CD drive. To attach the configuration drive as a CD
+#   drive, set config_drive_cdrom option at hyperv section, to true.
+#  (string value)
+# Allowed values: iso9660, vfat
+#config_drive_format=iso9660
+
+#
+# Force injection to take place on a config drive
+#
+# When this option is set to true configuration drive functionality will be
+# forced enabled by default, otherwise user can still enable configuration
+# drives via the REST API or image metadata properties.
+#
+# Possible values:
+#
+# * True: Force to use of configuration drive regardless the user's input in the
+#         REST API call.
+# * False: Do not force use of configuration drive. Config drives can still be
+#          enabled via the REST API or image metadata properties.
+#
+# Related options:
+#
+# * Use the 'mkisofs_cmd' flag to set the path where you install the
+#   genisoimage program. If genisoimage is in same path as the
+#   nova-compute service, you do not need to set this flag.
+# * To use configuration drive with Hyper-V, you must set the
+#   'mkisofs_cmd' value to the full path to an mkisofs.exe installation.
+#   Additionally, you must set the qemu_img_cmd value in the hyperv
+#   configuration section to the full path to an qemu-img command
+#   installation.
+#  (boolean value)
+#force_config_drive=false
+
+#
+# Name or path of the tool used for ISO image creation
+#
+# Use the mkisofs_cmd flag to set the path where you install the genisoimage
+# program. If genisoimage is on the system path, you do not need to change
+# the default value.
+#
+# To use configuration drive with Hyper-V, you must set the mkisofs_cmd value
+# to the full path to an mkisofs.exe installation. Additionally, you must set
+# the qemu_img_cmd value in the hyperv configuration section to the full path
+# to an qemu-img command installation.
+#
+# Possible values:
+#
+# * Name of the ISO image creator program, in case it is in the same directory
+#   as the nova-compute service
+# * Path to ISO image creator program
+#
+# Related options:
+#
+# * This option is meaningful when config drives are enabled.
+# * To use configuration drive with Hyper-V, you must set the qemu_img_cmd
+#   value in the hyperv configuration section to the full path to an qemu-img
+#   command installation.
+#  (string value)
+#mkisofs_cmd=genisoimage
+
+# DEPRECATED:
+# nova-console-proxy is used to set up multi-tenant VM console access.
+# This option allows pluggable driver program for the console session
+# and represents driver to use for the console proxy.
+#
+# Possible values:
+#
+# * A string representing fully classified class name of console driver.
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# This option no longer does anything. Previously this option had only two
+# valid,
+# in-tree values: nova.console.xvp.XVPConsoleProxy and
+# nova.console.fake.FakeConsoleProxy. The latter of these was only used in tests
+# and has since been replaced.
+#console_driver=nova.console.xvp.XVPConsoleProxy
+
+# DEPRECATED:
+# Represents the message queue topic name used by nova-console
+# service when communicating via the AMQP server. The Nova API uses a message
+# queue to communicate with nova-console to retrieve a console URL for that
+# host.
+#
+# Possible values:
+#
+# * A string representing topic exchange name
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# There is no need to let users choose the RPC topic for all services - there
+# is little gain from this. Furthermore, it makes it really easy to break Nova
+# by using this option.
+#console_topic=console
+
+# DEPRECATED:
+# This option allows you to change the message topic used by nova-consoleauth
+# service when communicating via the AMQP server. Nova Console Authentication
+# server authenticates nova consoles. Users can then access their instances
+# through VNC clients. The Nova API service uses a message queue to
+# communicate with nova-consoleauth to get a VNC console.
+#
+# Possible Values:
+#
+# * 'consoleauth' (default) or Any string representing topic exchange name.
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# There is no need to let users choose the RPC topic for all services - there
+# is little gain from this. Furthermore, it makes it really easy to break Nova
+# by using this option.
+#consoleauth_topic=consoleauth
+
+# DEPRECATED: The driver to use for database access (string value)
+# This option is deprecated for removal since 13.0.0.
+# Its value may be silently ignored in the future.
+#db_driver=nova.db
+
+# DEPRECATED:
+# Default flavor to use for the EC2 API only.
+# The Nova API does not support a default flavor.
+#  (string value)
+# This option is deprecated for removal since 14.0.0.
+# Its value may be silently ignored in the future.
+# Reason: The EC2 API is deprecated.
+#default_flavor=m1.small
+
+#
+# Default pool for floating IPs.
+#
+# This option specifies the default floating IP pool for allocating floating
+# IPs.
+#
+# While allocating a floating ip, users can optionally pass in the name of the
+# pool they want to allocate from, otherwise it will be pulled from the
+# default pool.
+#
+# If this option is not set, then 'nova' is used as default floating pool.
+#
+# Possible values:
+#
+# * Any string representing a floating IP pool name
+#  (string value)
+#default_floating_pool=nova
+
+# DEPRECATED:
+# Autoassigning floating IP to VM
+#
+# When set to True, floating IP is auto allocated and associated
+# to the VM upon creation.
+#
+# Related options:
+#
+# * use_neutron: this options only works with nova-network.
+#  (boolean value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#auto_assign_floating_ip=false
+use_neutron = True
+
+# DEPRECATED:
+# Full class name for the DNS Manager for floating IPs.
+#
+# This option specifies the class of the driver that provides functionality
+# to manage DNS entries associated with floating IPs.
+#
+# When a user adds a DNS entry for a specified domain to a floating IP,
+# nova will add a DNS entry using the specified floating DNS driver.
+# When a floating IP is deallocated, its DNS entry will automatically be
+# deleted.
+#
+# Possible values:
+#
+# * Full Python path to the class to be used
+#
+# Related options:
+#
+# * use_neutron: this options only works with nova-network.
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#floating_ip_dns_manager=nova.network.noop_dns_driver.NoopDNSDriver
+
+# DEPRECATED:
+# Full class name for the DNS Manager for instance IPs.
+#
+# This option specifies the class of the driver that provides functionality
+# to manage DNS entries for instances.
+#
+# On instance creation, nova will add DNS entries for the instance name and
+# id, using the specified instance DNS driver and domain. On instance deletion,
+# nova will remove the DNS entries.
+#
+# Possible values:
+#
+# * Full Python path to the class to be used
+#
+# Related options:
+#
+# * use_neutron: this options only works with nova-network.
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#instance_dns_manager=nova.network.noop_dns_driver.NoopDNSDriver
+
+# DEPRECATED:
+# If specified, Nova checks if the availability_zone of every instance matches
+# what the database says the availability_zone should be for the specified
+# dns_domain.
+#
+# Related options:
+#
+# * use_neutron: this options only works with nova-network.
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#instance_dns_domain =
+
+#
+# Abstracts out IPv6 address generation to pluggable backends.
+#
+# nova-network can be put into dual-stack mode, so that it uses
+# both IPv4 and IPv6 addresses. In dual-stack mode, by default, instances
+# acquire IPv6 global unicast addresses with the help of stateless address
+# auto-configuration mechanism.
+#
+# Related options:
+#
+# * use_neutron: this option only works with nova-network.
+# * use_ipv6: this option only works if ipv6 is enabled for nova-network.
+#  (string value)
+# Allowed values: rfc2462, account_identifier
+#ipv6_backend=rfc2462
+
+#
+# The IP address which the host is using to connect to the management network.
+#
+# Possible values:
+#
+# * String with valid IP address. Default is IPv4 address of this host.
+#
+# Related options:
+#
+# * metadata_host
+# * my_block_storage_ip
+# * routing_source_ip
+# * vpn_ip
+#  (string value)
+#my_ip=10.89.104.70
+my_ip=192.168.10.38
+
+#
+# The IP address which is used to connect to the block storage network.
+#
+# Possible values:
+#
+# * String with valid IP address. Default is IP address of this host.
+#
+# Related options:
+#
+# * my_ip - if my_block_storage_ip is not set, then my_ip value is used.
+#  (string value)
+#my_block_storage_ip=$my_ip
+
+#
+# Hostname, FQDN or IP address of this host. Must be valid within AMQP key.
+#
+# Possible values:
+#
+# * String with hostname, FQDN or IP address. Default is hostname of this host.
+#  (string value)
+#host=lcy01-22
+
+#
+# Assign IPv6 and IPv4 addresses when creating instances.
+#
+# Related options:
+#
+# * use_neutron: this only works with nova-network.
+#  (boolean value)
+#use_ipv6=false
+
+#
+# This option is a list of full paths to one or more configuration files for
+# dhcpbridge. In most cases the default path of '/etc/nova/nova-dhcpbridge.conf'
+# should be sufficient, but if you have special needs for configuring
+# dhcpbridge,
+# you can change or add to this list.
+#
+# Possible values
+#
+#     A list of strings, where each string is the full path to a dhcpbridge
+#     configuration file.
+#  (multi valued)
+dhcpbridge_flagfile=/etc/nova/nova.conf
+
+#
+# The location where the network configuration files will be kept. The default
+# is
+# the 'networks' directory off of the location where nova's Python module is
+# installed.
+#
+# Possible values
+#
+#     A string containing the full path to the desired configuration directory
+#  (string value)
+#networks_path=$state_path/networks
+
+#
+# This is the name of the network interface for public IP addresses. The default
+# is 'eth0'.
+#
+# Possible values:
+#
+#     Any string representing a network interface name
+#  (string value)
+#public_interface=eth0
+
+#
+# The location of the binary nova-dhcpbridge. By default it is the binary named
+# 'nova-dhcpbridge' that is installed with all the other nova binaries.
+#
+# Possible values:
+#
+#     Any string representing the full path to the binary for dhcpbridge
+#  (string value)
+dhcpbridge=/usr/bin/nova-dhcpbridge
+
+#
+# This is the public IP address of the network host. It is used when creating a
+# SNAT rule.
+#
+# Possible values:
+#
+#     Any valid IP address
+#
+# Related options:
+#
+#     force_snat_range
+#  (string value)
+#routing_source_ip=$my_ip
+
+#
+# The lifetime of a DHCP lease, in seconds. The default is 86400 (one day).
+#
+# Possible values:
+#
+#     Any positive integer value.
+#  (integer value)
+# Minimum value: 1
+#dhcp_lease_time=86400
+
+#
+# Despite the singular form of the name of this option, it is actually a list of
+# zero or more server addresses that dnsmasq will use for DNS nameservers. If
+# this is not empty, dnsmasq will not read /etc/resolv.conf, but will only use
+# the servers specified in this option. If the option use_network_dns_servers is
+# True, the dns1 and dns2 servers from the network will be appended to this
+# list,
+# and will be used as DNS servers, too.
+#
+# Possible values:
+#
+#     A list of strings, where each string is either an IP address or a FQDN.
+#
+# Related options:
+#
+#     use_network_dns_servers
+#  (multi valued)
+#dns_server =
+
+#
+# When this option is set to True, the dns1 and dns2 servers for the network
+# specified by the user on boot will be used for DNS, as well as any specified
+# in
+# the `dns_server` option.
+#
+# Related options:
+#
+#     dns_server
+#  (boolean value)
+#use_network_dns_servers=false
+
+#
+# This option is a list of zero or more IP address ranges in your network's DMZ
+# that should be accepted.
+#
+# Possible values:
+#
+#     A list of strings, each of which should be a valid CIDR.
+#  (list value)
+#dmz_cidr =
+
+#
+# This is a list of zero or more IP ranges that traffic from the
+# `routing_source_ip` will be SNATted to. If the list is empty, then no SNAT
+# rules are created.
+#
+# Possible values:
+#
+#     A list of strings, each of which should be a valid CIDR.
+#
+# Related options:
+#
+#     routing_source_ip
+#  (multi valued)
+#force_snat_range =
+
+#
+# The path to the custom dnsmasq configuration file, if any.
+#
+# Possible values:
+#
+#     The full path to the configuration file, or an empty string if there is no
+#     custom dnsmasq configuration file.
+#  (string value)
+#dnsmasq_config_file =
+
+#
+# This is the class used as the ethernet device driver for linuxnet bridge
+# operations. The default value should be all you need for most cases, but if
+# you
+# wish to use a customized class, set this option to the full dot-separated
+# import path for that class.
+#
+# Possible values:
+#
+#     Any string representing a dot-separated class path that Nova can import.
+#  (string value)
+#linuxnet_interface_driver=nova.network.linux_net.LinuxBridgeInterfaceDriver
+
+#
+# The name of the Open vSwitch bridge that is used with linuxnet when connecting
+# with Open vSwitch."
+#
+# Possible values:
+#
+#     Any string representing a valid bridge name.
+#  (string value)
+#linuxnet_ovs_integration_bridge=br-int
+
+#
+# When True, when a device starts up, and upon binding floating IP addresses,
+# arp
+# messages will be sent to ensure that the arp caches on the compute hosts are
+# up-to-date.
+#
+# Related options:
+#
+#     send_arp_for_ha_count
+#  (boolean value)
+#send_arp_for_ha=false
+
+#
+# When arp messages are configured to be sent, they will be sent with the count
+# set to the value of this option. Of course, if this is set to zero, no arp
+# messages will be sent.
+#
+# Possible values:
+#
+#     Any integer greater than or equal to 0
+#
+# Related options:
+#
+#     send_arp_for_ha
+#  (integer value)
+#send_arp_for_ha_count=3
+
+#
+# When set to True, only the firt nic of a VM will get its default gateway from
+# the DHCP server.
+#  (boolean value)
+#use_single_default_gateway=false
+
+#
+# One or more interfaces that bridges can forward traffic to. If any of the
+# items
+# in this list is the special keyword 'all', then all traffic will be forwarded.
+#
+# Possible values:
+#
+#     A list of zero or more interface names, or the word 'all'.
+#  (multi valued)
+#forward_bridge_interface=all
+
+#
+# This option determines the IP address for the network metadata API server.
+#
+# Possible values:
+#
+#    * Any valid IP address. The default is the address of the Nova API server.
+#
+# Related options:
+#
+#     * metadata_port
+#  (string value)
+#metadata_host=$my_ip
+
+#
+# This option determines the port used for the metadata API server.
+#
+# Related options:
+#
+#     * metadata_host
+#  (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#metadata_port=8775
+
+#
+# This expression, if defined, will select any matching iptables rules and place
+# them at the top when applying metadata changes to the rules.
+#
+# Possible values:
+#
+#     * Any string representing a valid regular expression, or an empty string
+#
+# Related options:
+#
+#     * iptables_bottom_regex
+#  (string value)
+#iptables_top_regex =
+
+#
+# This expression, if defined, will select any matching iptables rules and place
+# them at the bottom when applying metadata changes to the rules.
+#
+# Possible values:
+#
+#     * Any string representing a valid regular expression, or an empty string
+#
+# Related options:
+#
+#     * iptables_top_regex
+#  (string value)
+#iptables_bottom_regex =
+
+#
+# By default, packets that do not pass the firewall are DROPped. In many cases,
+# though, an operator may find it more useful to change this from DROP to
+# REJECT,
+# so that the user issuing those packets may have a better idea as to what's
+# going on, or LOGDROP in order to record the blocked traffic before DROPping.
+#
+# Possible values:
+#
+#     * A string representing an iptables chain. The default is DROP.
+#  (string value)
+#iptables_drop_action=DROP
+
+#
+# This option represents the period of time, in seconds, that the ovs_vsctl
+# calls
+# will wait for a response from the database before timing out. A setting of 0
+# means that the utility should wait forever for a response.
+#
+# Possible values:
+#
+#     * Any positive integer if a limited timeout is desired, or zero if the
+#     calls should wait forever for a response.
+#  (integer value)
+# Minimum value: 0
+#ovs_vsctl_timeout=120
+
+#
+# This option is used mainly in testing to avoid calls to the underlying network
+# utilities.
+#  (boolean value)
+#fake_network=false
+
+#
+# This option determines the number of times to retry ebtables commands before
+# giving up. The minimum number of retries is 1.
+#
+# Possible values:
+#
+#     * Any positive integer
+#
+# Related options:
+#
+#     * ebtables_retry_interval
+#  (integer value)
+# Minimum value: 1
+#ebtables_exec_attempts=3
+
+#
+# This option determines the time, in seconds, that the system will sleep in
+# between ebtables retries. Note that each successive retry waits a multiple of
+# this value, so for example, if this is set to the default of 1.0 seconds, and
+# ebtables_exec_attempts is 4, after the first failure, the system will sleep
+# for
+# 1 * 1.0 seconds, after the second failure it will sleep 2 * 1.0 seconds, and
+# after the third failure it will sleep 3 * 1.0 seconds.
+#
+# Possible values:
+#
+#     * Any non-negative float or integer. Setting this to zero will result in
+# no
+#     waiting between attempts.
+#
+# Related options:
+#
+#     * ebtables_exec_attempts
+#  (floating point value)
+#ebtables_retry_interval=1.0
+
+#
+# This option determines whether the network setup information is injected into
+# the VM before it is booted. While it was originally designed to be used only
+# by
+# nova-network, it is also used by the vmware and xenapi virt drivers to control
+# whether network information is injected into a VM.
+#  (boolean value)
+#flat_injected=false
+
+# DEPRECATED:
+# This option determines the bridge used for simple network interfaces when no
+# bridge is specified in the VM creation request.
+#
+# Please note that this option is only used when using nova-network instead of
+# Neutron in your deployment.
+#
+# Possible values:
+#
+#     Any string representing a valid network bridge, such as 'br100'
+#
+# Related options:
+#
+#     ``use_neutron``
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#flat_network_bridge=<None>
+
+# DEPRECATED:
+# This is the address of the DNS server for a simple network. If this option is
+# not specified, the default of '8.8.4.4' is used.
+#
+# Please note that this option is only used when using nova-network instead of
+# Neutron in your deployment.
+#
+# Possible values:
+#
+#     Any valid IP address.
+#
+# Related options:
+#
+#     ``use_neutron``
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#flat_network_dns=8.8.4.4
+
+# DEPRECATED:
+# This option is the name of the virtual interface of the VM on which the bridge
+# will be built. While it was originally designed to be used only by
+# nova-network, it is also used by libvirt for the bridge interface name.
+#
+# Possible values:
+#
+#     Any valid virtual interface name, such as 'eth0'
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#flat_interface=<None>
+
+# DEPRECATED:
+# This is the VLAN number used for private networks. Note that the when creating
+# the networks, if the specified number has already been assigned, nova-network
+# will increment this number until it finds an available VLAN.
+#
+# Please note that this option is only used when using nova-network instead of
+# Neutron in your deployment. It also will be ignored if the configuration
+# option
+# for `network_manager` is not set to the default of
+# 'nova.network.manager.VlanManager'.
+#
+# Possible values:
+#
+#     Any integer between 1 and 4094. Values outside of that range will raise a
+#     ValueError exception. Default = 100.
+#
+# Related options:
+#
+#     ``network_manager``, ``use_neutron``
+#  (integer value)
+# Minimum value: 1
+# Maximum value: 4094
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#vlan_start=100
+
+# DEPRECATED:
+# This option is the name of the virtual interface of the VM on which the VLAN
+# bridge will be built. While it was originally designed to be used only by
+# nova-network, it is also used by libvirt and xenapi for the bridge interface
+# name.
+#
+# Please note that this setting will be ignored in nova-network if the
+# configuration option for `network_manager` is not set to the default of
+# 'nova.network.manager.VlanManager'.
+#
+# Possible values:
+#
+#     Any valid virtual interface name, such as 'eth0'
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options. While
+# this option has an effect when using neutron, it incorrectly override the
+# value
+# provided by neutron and should therefore not be used.
+#vlan_interface=<None>
+
+# DEPRECATED:
+# This option represents the number of networks to create if not explicitly
+# specified when the network is created. The only time this is used is if a CIDR
+# is specified, but an explicit network_size is not. In that case, the subnets
+# are created by diving the IP address space of the CIDR by num_networks. The
+# resulting subnet sizes cannot be larger than the configuration option
+# `network_size`; in that event, they are reduced to `network_size`, and a
+# warning is logged.
+#
+# Please note that this option is only used when using nova-network instead of
+# Neutron in your deployment.
+#
+# Possible values:
+#
+#     Any positive integer is technically valid, although there are practical
+#     limits based upon available IP address space and virtual interfaces. The
+#     default is 1.
+#
+# Related options:
+#
+#     ``use_neutron``, ``network_size``
+#  (integer value)
+# Minimum value: 1
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#num_networks=1
+
+# DEPRECATED:
+# This is the public IP address for the cloudpipe VPN servers. It defaults to
+# the
+# IP address of the host.
+#
+# Please note that this option is only used when using nova-network instead of
+# Neutron in your deployment. It also will be ignored if the configuration
+# option
+# for `network_manager` is not set to the default of
+# 'nova.network.manager.VlanManager'.
+#
+# Possible values:
+#
+#     Any valid IP address. The default is $my_ip, the IP address of the VM.
+#
+# Related options:
+#
+#     ``network_manager``, ``use_neutron``, ``vpn_start``
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#vpn_ip=$my_ip
+
+# DEPRECATED:
+# This is the port number to use as the first VPN port for private networks.
+#
+# Please note that this option is only used when using nova-network instead of
+# Neutron in your deployment. It also will be ignored if the configuration
+# option
+# for `network_manager` is not set to the default of
+# 'nova.network.manager.VlanManager', or if you specify a value the 'vpn_start'
+# parameter when creating a network.
+#
+# Possible values:
+#
+#     Any integer representing a valid port number. The default is 1000.
+#
+# Related options:
+#
+#     ``use_neutron``, ``vpn_ip``, ``network_manager``
+#  (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#vpn_start=1000
+
+# DEPRECATED:
+# This option determines the number of addresses in each private subnet.
+#
+# Please note that this option is only used when using nova-network instead of
+# Neutron in your deployment.
+#
+# Possible values:
+#
+#     Any positive integer that is less than or equal to the available network
+#     size. Note that if you are creating multiple networks, they must all fit
+# in
+#     the available IP address space. The default is 256.
+#
+# Related options:
+#
+#     ``use_neutron``, ``num_networks``
+#  (integer value)
+# Minimum value: 1
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#network_size=256
+
+# DEPRECATED:
+# This option determines the fixed IPv6 address block when creating a network.
+#
+# Please note that this option is only used when using nova-network instead of
+# Neutron in your deployment.
+#
+# Possible values:
+#
+#     Any valid IPv6 CIDR. The default value is "fd00::/48".
+#
+# Related options:
+#
+#     ``use_neutron``
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#fixed_range_v6=fd00::/48
+
+# DEPRECATED:
+# This is the default IPv4 gateway. It is used only in the testing suite.
+#
+# Please note that this option is only used when using nova-network instead of
+# Neutron in your deployment.
+#
+# Possible values:
+#
+#     Any valid IP address.
+#
+# Related options:
+#
+#     ``use_neutron``, ``gateway_v6``
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#gateway=<None>
+
+# DEPRECATED:
+# This is the default IPv6 gateway. It is used only in the testing suite.
+#
+# Please note that this option is only used when using nova-network instead of
+# Neutron in your deployment.
+#
+# Possible values:
+#
+#     Any valid IP address.
+#
+# Related options:
+#
+#     ``use_neutron``, ``gateway``
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#gateway_v6=<None>
+
+# DEPRECATED:
+# This option represents the number of IP addresses to reserve at the top of the
+# address range for VPN clients. It also will be ignored if the configuration
+# option for `network_manager` is not set to the default of
+# 'nova.network.manager.VlanManager'.
+#
+# Possible values:
+#
+#     Any integer, 0 or greater. The default is 0.
+#
+# Related options:
+#
+#     ``use_neutron``, ``network_manager``
+#  (integer value)
+# Minimum value: 0
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#cnt_vpn_clients=0
+
+# DEPRECATED:
+# This is the number of seconds to wait before disassociating a deallocated
+# fixed
+# IP address. This is only used with the nova-network service, and has no effect
+# when using neutron for networking.
+#
+# Possible values:
+#
+#     Any integer, zero or greater. The default is 600 (10 minutes).
+#
+# Related options:
+#
+#     ``use_neutron``
+#  (integer value)
+# Minimum value: 0
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#fixed_ip_disassociate_timeout=600
+
+# DEPRECATED:
+# This option determines how many times nova-network will attempt to create a
+# unique MAC address before giving up and raising a
+# `VirtualInterfaceMacAddressException` error.
+#
+# Possible values:
+#
+#     Any positive integer. The default is 5.
+#
+# Related options:
+#
+#     ``use_neutron``
+#  (integer value)
+# Minimum value: 1
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#create_unique_mac_address_attempts=5
+
+# DEPRECATED:
+# Determines whether unused gateway devices, both VLAN and bridge, are deleted
+# if
+# the network is in nova-network VLAN mode and is multi-hosted.
+#
+# Related options:
+#
+#     ``use_neutron``, ``vpn_ip``, ``fake_network``
+#  (boolean value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#teardown_unused_network_gateway=false
+
+# DEPRECATED:
+# When this option is True, a call is made to release the DHCP for the instance
+# when that instance is terminated.
+#
+# Related options:
+#
+#     ``use_neutron``
+#  (boolean value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+force_dhcp_release=true
+
+# DEPRECATED:
+# When this option is True, whenever a DNS entry must be updated, a fanout cast
+# message is sent to all network hosts to update their DNS entries in multi-host
+# mode.
+#
+# Related options:
+#
+#     ``use_neutron``
+#  (boolean value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#update_dns_entries=false
+
+# DEPRECATED:
+# This option determines the time, in seconds, to wait between refreshing DNS
+# entries for the network.
+#
+# Possible values:
+#
+#     Either -1 (default), or any positive integer. A negative value will
+# disable
+#     the updates.
+#
+# Related options:
+#
+#     ``use_neutron``
+#  (integer value)
+# Minimum value: -1
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#dns_update_periodic_interval=-1
+
+# DEPRECATED:
+# This option allows you to specify the domain for the DHCP server.
+#
+# Possible values:
+#
+#     Any string that is a valid domain name.
+#
+# Related options:
+#
+#     ``use_neutron``
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#dhcp_domain=novalocal
+
+# DEPRECATED:
+# This option allows you to specify the L3 management library to be used.
+#
+# Possible values:
+#
+#     Any dot-separated string that represents the import path to an L3
+#     networking library.
+#
+# Related options:
+#
+#     ``use_neutron``
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#l3_lib=nova.network.l3.LinuxNetL3
+
+# DEPRECATED:
+# THIS VALUE SHOULD BE SET WHEN CREATING THE NETWORK.
+#
+# If True in multi_host mode, all compute hosts share the same dhcp address. The
+# same IP address used for DHCP will be added on each nova-network node which is
+# only visible to the VMs on the same host.
+#
+# The use of this configuration has been deprecated and may be removed in any
+# release after Mitaka. It is recommended that instead of relying on this
+# option,
+# an explicit value should be passed to 'create_networks()' as a keyword
+# argument
+# with the name 'share_address'.
+#  (boolean value)
+# This option is deprecated for removal since 2014.2.
+# Its value may be silently ignored in the future.
+#share_dhcp_address=false
+
+# DEPRECATED: Whether to use Neutron or Nova Network as the back end for
+# networking. Defaults to False (indicating Nova network).Set to True to use
+# neutron. (boolean value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#use_neutron=true
+
+#
+# URL for LDAP server which will store DNS entries
+#
+# Possible values:
+#
+# * A valid LDAP URL representing the server
+#  (uri value)
+#ldap_dns_url=ldap://ldap.example.com:389
+
+# Bind user for LDAP server (string value)
+#ldap_dns_user=uid=admin,ou=people,dc=example,dc=org
+
+# Bind user's password for LDAP server (string value)
+#ldap_dns_password=password
+
+#
+# Hostmaster for LDAP DNS driver Statement of Authority
+#
+# Possible values:
+#
+# * Any valid string representing LDAP DNS hostmaster.
+#  (string value)
+#ldap_dns_soa_hostmaster=hostmaster@example.org
+
+#
+# DNS Servers for LDAP DNS driver
+#
+# Possible values:
+#
+# * A valid URL representing a DNS server
+#  (multi valued)
+#ldap_dns_servers=dns.example.org
+
+#
+# Base distinguished name for the LDAP search query
+#
+# This option helps to decide where to look up the host in LDAP.
+#  (string value)
+#ldap_dns_base_dn=ou=hosts,dc=example,dc=org
+
+#
+# Refresh interval (in seconds) for LDAP DNS driver Start of Authority
+#
+# Time interval, a secondary/slave DNS server waits before requesting for
+# primary DNS server's current SOA record. If the records are different,
+# secondary DNS server will request a zone transfer from primary.
+#
+# NOTE: Lower values would cause more traffic.
+#  (integer value)
+#ldap_dns_soa_refresh=1800
+
+#
+# Retry interval (in seconds) for LDAP DNS driver Start of Authority
+#
+# Time interval, a secondary/slave DNS server should wait, if an
+# attempt to transfer zone failed during the previous refresh interval.
+#  (integer value)
+#ldap_dns_soa_retry=3600
+
+#
+# Expiry interval (in seconds) for LDAP DNS driver Start of Authority
+#
+# Time interval, a secondary/slave DNS server holds the information
+# before it is no longer considered authoritative.
+#  (integer value)
+#ldap_dns_soa_expiry=86400
+
+#
+# Minimum interval (in seconds) for LDAP DNS driver Start of Authority
+#
+# It is Minimum time-to-live applies for all resource records in the
+# zone file. This value is supplied to other servers how long they
+# should keep the data in cache.
+#  (integer value)
+#ldap_dns_soa_minimum=7200
+
+# DEPRECATED: The topic network nodes listen on (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# There is no need to let users choose the RPC topic for all services - there
+# is little gain from this. Furthermore, it makes it really easy to break Nova
+# by using this option.
+#network_topic=network
+
+# DEPRECATED:
+# Default value for multi_host in networks.
+#
+# nova-network service can operate in a multi-host or single-host mode.
+# In multi-host mode each compute node runs a copy of nova-network and the
+# instances on that compute node use the compute node as a gateway to the
+# Internet. Where as in single-host mode, a central server runs the nova-network
+# service. All compute nodes forward traffic from the instances to the
+# cloud controller which then forwards traffic to the Internet.
+#
+# If this options is set to true, some rpc network calls will be sent directly
+# to host.
+#
+# Note that this option is only used when using nova-network instead of
+# Neutron in your deployment.
+#
+# Related options:
+#
+# * use_neutron
+#  (boolean value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#multi_host=false
+
+# DEPRECATED:
+# Driver to use for network creation.
+#
+# Network driver initializes (creates bridges and so on) only when the
+# first VM lands on a host node. All network managers configure the
+# network using network drivers. The driver is not tied to any particular
+# network manager.
+#
+# The default Linux driver implements vlans, bridges, and iptables rules
+# using linux utilities.
+#
+# Note that this option is only used when using nova-network instead
+# of Neutron in your deployment.
+#
+# Related options:
+#
+# * use_neutron
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#network_driver=nova.network.linux_net
+
+#
+# Firewall driver to use with ``nova-network`` service.
+#
+# This option only applies when using the ``nova-network`` service. When using
+# another networking services, such as Neutron, this should be to set to the
+# ``nova.virt.firewall.NoopFirewallDriver``.
+#
+# If unset (the default), this will default to the hypervisor-specified
+# default driver.
+#
+# Possible values:
+#
+# * nova.virt.firewall.IptablesFirewallDriver
+# * nova.virt.firewall.NoopFirewallDriver
+# * nova.virt.libvirt.firewall.IptablesFirewallDriver
+# * [...]
+#
+# Related options:
+#
+# * ``use_neutron``: This must be set to ``False`` to enable ``nova-network``
+#   networking
+#  (string value)
+#firewall_driver=<None>
+firewall_driver=nova.virt.firewall.NoopFirewallDriver
+
+#
+# Determine whether to allow network traffic from same network.
+#
+# When set to true, hosts on the same subnet are not filtered and are allowed
+# to pass all types of traffic between them. On a flat network, this allows
+# all instances from all projects unfiltered communication. With VLAN
+# networking, this allows access between instances within the same project.
+#
+# This option only applies when using the ``nova-network`` service. When using
+# another networking services, such as Neutron, security groups or other
+# approaches should be used.
+#
+# Possible values:
+#
+# * True: Network traffic should be allowed pass between all instances on the
+#   same network, regardless of their tenant and security policies
+# * False: Network traffic should not be allowed pass between instances unless
+#   it is unblocked in a security group
+#
+# Related options:
+#
+# * ``use_neutron``: This must be set to ``False`` to enable ``nova-network``
+#   networking
+# * ``firewall_driver``: This must be set to
+#   ``nova.virt.libvirt.firewall.IptablesFirewallDriver`` to ensure the
+#   libvirt firewall driver is enabled.
+#  (boolean value)
+#allow_same_net_traffic=true
+
+#
+# Filename that will be used for storing websocket frames received
+# and sent by a proxy service (like VNC, spice, serial) running on this host.
+# If this is not set, no recording will be done.
+#  (string value)
+#record=<None>
+
+# Run as a background process. (boolean value)
+#daemon=false
+
+# Disallow non-encrypted connections. (boolean value)
+#ssl_only=false
+
+# Set to True if source host is addressed with IPv6. (boolean value)
+#source_is_ipv6=false
+
+# Path to SSL certificate file. (string value)
+#cert=self.pem
+
+# SSL key file (if separate from cert). (string value)
+#key=<None>
+
+#
+# Path to directory with content which will be served by a web server.
+#  (string value)
+#web=/usr/share/spice-html5
+
+#
+# The directory where the Nova python modules are installed.
+#
+# This directory is used to store template files for networking and remote
+# console access. It is also the default path for other config options which
+# need to persist Nova internal data. It is very unlikely that you need to
+# change this option from its default value.
+#
+# Possible values:
+#
+# * The full path to a directory.
+#
+# Related options:
+#
+# * ``state_path``
+#  (string value)
+#pybasedir=/build/nova-elxmSs/nova-15.0.2
+
+#
+# The directory where the Nova binaries are installed.
+#
+# This option is only relevant if the networking capabilities from Nova are
+# used (see services below). Nova's networking capabilities are targeted to
+# be fully replaced by Neutron in the future. It is very unlikely that you need
+# to change this option from its default value.
+#
+# Possible values:
+#
+# * The full path to a directory.
+#  (string value)
+#bindir=/usr/local/bin
+
+#
+# The top-level directory for maintaining Nova's state.
+#
+# This directory is used to store Nova's internal state. It is used by a
+# variety of other config options which derive from this. In some scenarios
+# (for example migrations) it makes sense to use a storage location which is
+# shared between multiple compute hosts (for example via NFS). Unless the
+# option ``instances_path`` gets overwritten, this directory can grow very
+# large.
+#
+# Possible values:
+#
+# * The full path to a directory. Defaults to value provided in ``pybasedir``.
+#  (string value)
+state_path=/var/lib/nova
+
+#
+# Number of seconds indicating how frequently the state of services on a
+# given hypervisor is reported. Nova needs to know this to determine the
+# overall health of the deployment.
+#
+# Related Options:
+#
+# * service_down_time
+#   report_interval should be less than service_down_time. If service_down_time
+#   is less than report_interval, services will routinely be considered down,
+#   because they report in too rarely.
+#  (integer value)
+#report_interval=10
+report_interval=10
+
+#
+# Maximum time in seconds since last check-in for up service
+#
+# Each compute node periodically updates their database status based on the
+# specified report interval. If the compute node hasn't updated the status
+# for more than service_down_time, then the compute node is considered down.
+#
+# Related Options:
+#
+# * report_interval (service_down_time should not be less than report_interval)
+#  (integer value)
+service_down_time = 180
+
+#
+# Enable periodic tasks.
+#
+# If set to true, this option allows services to periodically run tasks
+# on the manager.
+#
+# In case of running multiple schedulers or conductors you may want to run
+# periodic tasks on only one host - in this case disable this option for all
+# hosts but one.
+#  (boolean value)
+#periodic_enable=true
+
+#
+# Number of seconds to randomly delay when starting the periodic task
+# scheduler to reduce stampeding.
+#
+# When compute workers are restarted in unison across a cluster,
+# they all end up running the periodic tasks at the same time
+# causing problems for the external services. To mitigate this
+# behavior, periodic_fuzzy_delay option allows you to introduce a
+# random initial delay when starting the periodic task scheduler.
+#
+# Possible Values:
+#
+# * Any positive integer (in seconds)
+# * 0 : disable the random delay
+#  (integer value)
+# Minimum value: 0
+#periodic_fuzzy_delay=60
+
+# List of APIs to be enabled by default. (list value)
+enabled_apis=osapi_compute,metadata
+
+#
+# List of APIs with enabled SSL.
+#
+# Nova provides SSL support for the API servers. enabled_ssl_apis option
+# allows configuring the SSL support.
+#  (list value)
+#enabled_ssl_apis =
+
+#
+# IP address on which the OpenStack API will listen.
+#
+# The OpenStack API service listens on this IP address for incoming
+# requests.
+#  (string value)
+#osapi_compute_listen=0.0.0.0
+osapi_compute_listen=192.168.10.38
+
+#
+# Port on which the OpenStack API will listen.
+#
+# The OpenStack API service listens on this port number for incoming
+# requests.
+#  (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#osapi_compute_listen_port=8774
+
+#
+# Number of workers for OpenStack API service. The default will be the number
+# of CPUs available.
+#
+# OpenStack API services can be configured to run as multi-process (workers).
+# This overcomes the problem of reduction in throughput when API request
+# concurrency increases. OpenStack API service will run in the specified
+# number of processes.
+#
+# Possible Values:
+#
+# * Any positive integer
+# * None (default value)
+#  (integer value)
+# Minimum value: 1
+#osapi_compute_workers=<None>
+osapi_compute_workers = 8
+
+#
+# IP address on which the metadata API will listen.
+#
+# The metadata API service listens on this IP address for incoming
+# requests.
+#  (string value)
+#metadata_listen=0.0.0.0
+metadata_listen=192.168.10.38
+osapi_volume_listen=192.168.10.38
+
+#
+# Port on which the metadata API will listen.
+#
+# The metadata API service listens on this port number for incoming
+# requests.
+#  (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#metadata_listen_port=8775
+
+#
+# Number of workers for metadata service. If not specified the number of
+# available CPUs will be used.
+#
+# The metadata service can be configured to run as multi-process (workers).
+# This overcomes the problem of reduction in throughput when API request
+# concurrency increases. The metadata service will run in the specified
+# number of processes.
+#
+# Possible Values:
+#
+# * Any positive integer
+# * None (default value)
+#  (integer value)
+# Minimum value: 1
+#metadata_workers=<None>
+metadata_workers = 8
+
+# Full class name for the Manager for network (string value)
+# Allowed values: nova.network.manager.FlatManager, nova.network.manager.FlatDHCPManager, nova.network.manager.VlanManager
+#network_manager=nova.network.manager.VlanManager
+
+#
+# This option specifies the driver to be used for the servicegroup service.
+#
+# ServiceGroup API in nova enables checking status of a compute node. When a
+# compute worker running the nova-compute daemon starts, it calls the join API
+# to join the compute group. Services like nova scheduler can query the
+# ServiceGroup API to check if a node is alive. Internally, the ServiceGroup
+# client driver automatically updates the compute worker status. There are
+# multiple backend implementations for this service: Database ServiceGroup
+# driver
+# and Memcache ServiceGroup driver.
+#
+# Possible Values:
+#
+#     * db : Database ServiceGroup driver
+#     * mc : Memcache ServiceGroup driver
+#
+# Related Options:
+#
+#     * service_down_time (maximum time since last check-in for up service)
+#  (string value)
+# Allowed values: db, mc
+#servicegroup_driver=db
 
 #
 # From oslo.log
@@ -7,7 +2757,15 @@
 # If set to true, the logging level will be set to DEBUG instead of the default
 # INFO level. (boolean value)
 # Note: This option can be changed without restarting.
-#debug = false
+#debug=false
+debug=false
+
+# DEPRECATED: If set to false, the logging level will be set to WARNING instead
+# of the default INFO level. (boolean value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#verbose=true
+verbose=true
 
 # The name of a logging configuration file. This file is appended to any
 # existing logging configuration files. For details about logging configuration
@@ -17,131 +2775,132 @@
 # example, logging_context_format_string). (string value)
 # Note: This option can be changed without restarting.
 # Deprecated group/name - [DEFAULT]/log_config
-#log_config_append = <None>
+#log_config_append=<None>
 
 # Defines the format string for %%(asctime)s in log records. Default:
 # %(default)s . This option is ignored if log_config_append is set. (string
 # value)
-#log_date_format = %Y-%m-%d %H:%M:%S
+#log_date_format=%Y-%m-%d %H:%M:%S
 
 # (Optional) Name of log file to send logging output to. If no default is set,
 # logging will go to stderr as defined by use_stderr. This option is ignored if
 # log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logfile
-#log_file = <None>
+#log_file=<None>
 
 # (Optional) The base directory used for relative log_file  paths. This option
 # is ignored if log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logdir
-#log_dir = <None>
+log_dir=/var/log/nova
 
 # Uses logging handler designed to watch file system. When log file is moved or
 # removed this handler will open a new log file with specified path
 # instantaneously. It makes sense only if log_file option is specified and Linux
 # platform is used. This option is ignored if log_config_append is set. (boolean
 # value)
-#watch_log_file = false
+#watch_log_file=false
 
 # Use syslog for logging. Existing syslog format is DEPRECATED and will be
 # changed later to honor RFC5424. This option is ignored if log_config_append is
 # set. (boolean value)
-#use_syslog = false
-
-# Enable journald for logging. If running in a systemd environment you may wish
-# to enable journal support. Doing so will use the journal native protocol which
-# includes structured metadata in addition to log messages.This option is
-# ignored if log_config_append is set. (boolean value)
-#use_journal = false
+#use_syslog=false
 
 # Syslog facility to receive log lines. This option is ignored if
 # log_config_append is set. (string value)
-#syslog_log_facility = LOG_USER
+#syslog_log_facility=LOG_USER
 
 # Log output to standard error. This option is ignored if log_config_append is
 # set. (boolean value)
-#use_stderr = false
+#use_stderr=false
 
 # Format string to use for log messages with context. (string value)
-#logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
+#logging_context_format_string=%(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
 
 # Format string to use for log messages when context is undefined. (string
 # value)
-#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
+#logging_default_format_string=%(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
 
 # Additional data to append to log message when logging level for the message is
 # DEBUG. (string value)
-#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
+#logging_debug_format_suffix=%(funcName)s %(pathname)s:%(lineno)d
 
 # Prefix each line of exception output with this format. (string value)
-#logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
+#logging_exception_prefix=%(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
 
 # Defines the format string for %(user_identity)s that is used in
 # logging_context_format_string. (string value)
-#logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
+#logging_user_identity_format=%(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
 
 # List of package logging levels in logger=LEVEL pairs. This option is ignored
 # if log_config_append is set. (list value)
-#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
+#default_log_levels=amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
 
 # Enables or disables publication of error events. (boolean value)
-#publish_errors = false
+#publish_errors=false
 
 # The format for an instance that is passed with the log message. (string value)
-#instance_format = "[instance: %(uuid)s] "
+#instance_format="[instance: %(uuid)s] "
 
 # The format for an instance UUID that is passed with the log message. (string
 # value)
-#instance_uuid_format = "[instance: %(uuid)s] "
+#instance_uuid_format="[instance: %(uuid)s] "
 
 # Interval, number of seconds, of log rate limiting. (integer value)
-#rate_limit_interval = 0
+#rate_limit_interval=0
 
 # Maximum number of logged messages per rate_limit_interval. (integer value)
-#rate_limit_burst = 0
+#rate_limit_burst=0
 
 # Log level name used by rate limiting: CRITICAL, ERROR, INFO, WARNING, DEBUG or
 # empty string. Logs with level greater or equal to rate_limit_except_level are
 # not filtered. An empty string means that all levels are filtered. (string
 # value)
-#rate_limit_except_level = CRITICAL
+#rate_limit_except_level=CRITICAL
 
 # Enables or disables fatal status of deprecations. (boolean value)
-#fatal_deprecations = false
+#fatal_deprecations=false
 
 #
 # From oslo.messaging
 #
 
 # Size of RPC connection pool. (integer value)
-#rpc_conn_pool_size = 30
+# Deprecated group/name - [DEFAULT]/rpc_conn_pool_size
+#rpc_conn_pool_size=30
 
 # The pool size limit for connections expiration policy (integer value)
-#conn_pool_min_size = 2
+#conn_pool_min_size=2
 
 # The time-to-live in sec of idle connections in the pool (integer value)
-#conn_pool_ttl = 1200
+#conn_pool_ttl=1200
 
 # ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
 # The "host" option should point or resolve to this address. (string value)
-#rpc_zmq_bind_address = *
+# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_address
+#rpc_zmq_bind_address=*
 
 # MatchMaker driver. (string value)
 # Allowed values: redis, sentinel, dummy
-#rpc_zmq_matchmaker = redis
+# Deprecated group/name - [DEFAULT]/rpc_zmq_matchmaker
+#rpc_zmq_matchmaker=redis
 
 # Number of ZeroMQ contexts, defaults to 1. (integer value)
-#rpc_zmq_contexts = 1
+# Deprecated group/name - [DEFAULT]/rpc_zmq_contexts
+#rpc_zmq_contexts=1
 
 # Maximum number of ingress messages to locally buffer per topic. Default is
 # unlimited. (integer value)
-#rpc_zmq_topic_backlog = <None>
+# Deprecated group/name - [DEFAULT]/rpc_zmq_topic_backlog
+#rpc_zmq_topic_backlog=<None>
 
 # Directory for holding IPC sockets. (string value)
-#rpc_zmq_ipc_dir = /var/run/openstack
+# Deprecated group/name - [DEFAULT]/rpc_zmq_ipc_dir
+#rpc_zmq_ipc_dir=/var/run/openstack
 
 # Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
 # "host" option, if running Nova. (string value)
-#rpc_zmq_host = localhost
+# Deprecated group/name - [DEFAULT]/rpc_zmq_host
+#rpc_zmq_host=localhost
 
 # Number of seconds to wait before all pending messages will be sent after
 # closing a socket. The default value of -1 specifies an infinite linger period.
@@ -149,138 +2908,147 @@
 # immediately when the socket is closed. Positive values specify an upper bound
 # for the linger period. (integer value)
 # Deprecated group/name - [DEFAULT]/rpc_cast_timeout
-#zmq_linger = -1
+#zmq_linger=-1
+zmq_linger=30
 
 # The default number of seconds that poll should wait. Poll raises timeout
 # exception when timeout expired. (integer value)
-#rpc_poll_timeout = 1
+# Deprecated group/name - [DEFAULT]/rpc_poll_timeout
+#rpc_poll_timeout=1
 
 # Expiration timeout in seconds of a name service record about existing target (
 # < 0 means no timeout). (integer value)
-#zmq_target_expire = 300
+# Deprecated group/name - [DEFAULT]/zmq_target_expire
+#zmq_target_expire=300
 
 # Update period in seconds of a name service record about existing target.
 # (integer value)
-#zmq_target_update = 180
+# Deprecated group/name - [DEFAULT]/zmq_target_update
+#zmq_target_update=180
 
 # Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
 # value)
-#use_pub_sub = false
+# Deprecated group/name - [DEFAULT]/use_pub_sub
+#use_pub_sub=false
 
 # Use ROUTER remote proxy. (boolean value)
-#use_router_proxy = false
+# Deprecated group/name - [DEFAULT]/use_router_proxy
+#use_router_proxy=false
 
 # This option makes direct connections dynamic or static. It makes sense only
 # with use_router_proxy=False which means to use direct connections for direct
 # message types (ignored otherwise). (boolean value)
-#use_dynamic_connections = false
+#use_dynamic_connections=false
 
 # How many additional connections to a host will be made for failover reasons.
 # This option is actual only in dynamic connections mode. (integer value)
-#zmq_failover_connections = 2
+#zmq_failover_connections=2
 
 # Minimal port number for random ports range. (port value)
 # Minimum value: 0
 # Maximum value: 65535
-#rpc_zmq_min_port = 49153
+# Deprecated group/name - [DEFAULT]/rpc_zmq_min_port
+#rpc_zmq_min_port=49153
 
 # Maximal port number for random ports range. (integer value)
 # Minimum value: 1
 # Maximum value: 65536
-#rpc_zmq_max_port = 65536
+# Deprecated group/name - [DEFAULT]/rpc_zmq_max_port
+#rpc_zmq_max_port=65536
 
 # Number of retries to find free port number before fail with ZMQBindError.
 # (integer value)
-#rpc_zmq_bind_port_retries = 100
+# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_port_retries
+#rpc_zmq_bind_port_retries=100
 
 # Default serialization mechanism for serializing/deserializing
 # outgoing/incoming messages (string value)
 # Allowed values: json, msgpack
-#rpc_zmq_serialization = json
+# Deprecated group/name - [DEFAULT]/rpc_zmq_serialization
+#rpc_zmq_serialization=json
 
 # This option configures round-robin mode in zmq socket. True means not keeping
 # a queue when server side disconnects. False means to keep queue and messages
 # even if server is disconnected, when the server appears we send all
 # accumulated messages to it. (boolean value)
-#zmq_immediate = true
+#zmq_immediate=true
 
 # Enable/disable TCP keepalive (KA) mechanism. The default value of -1 (or any
 # other negative value) means to skip any overrides and leave it to OS default;
 # 0 and 1 (or any other positive value) mean to disable and enable the option
 # respectively. (integer value)
-#zmq_tcp_keepalive = -1
+#zmq_tcp_keepalive=-1
 
 # The duration between two keepalive transmissions in idle condition. The unit
 # is platform dependent, for example, seconds in Linux, milliseconds in Windows
 # etc. The default value of -1 (or any other negative value and 0) means to skip
 # any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_idle = -1
+#zmq_tcp_keepalive_idle=-1
 
 # The number of retransmissions to be carried out before declaring that remote
 # end is not available. The default value of -1 (or any other negative value and
 # 0) means to skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_cnt = -1
+#zmq_tcp_keepalive_cnt=-1
 
 # The duration between two successive keepalive retransmissions, if
 # acknowledgement to the previous keepalive transmission is not received. The
 # unit is platform dependent, for example, seconds in Linux, milliseconds in
 # Windows etc. The default value of -1 (or any other negative value and 0) means
 # to skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_intvl = -1
+#zmq_tcp_keepalive_intvl=-1
 
 # Maximum number of (green) threads to work concurrently. (integer value)
-#rpc_thread_pool_size = 100
+#rpc_thread_pool_size=100
 
 # Expiration timeout in seconds of a sent/received message after which it is not
 # tracked anymore by a client/server. (integer value)
-#rpc_message_ttl = 300
+#rpc_message_ttl=300
 
 # Wait for message acknowledgements from receivers. This mechanism works only
 # via proxy without PUB/SUB. (boolean value)
-#rpc_use_acks = false
+#rpc_use_acks=false
 
 # Number of seconds to wait for an ack from a cast/call. After each retry
 # attempt this timeout is multiplied by some specified multiplier. (integer
 # value)
-#rpc_ack_timeout_base = 15
+#rpc_ack_timeout_base=15
 
 # Number to multiply base ack timeout by after each retry attempt. (integer
 # value)
-#rpc_ack_timeout_multiplier = 2
+#rpc_ack_timeout_multiplier=2
 
 # Default number of message sending attempts in case of any problems occurred:
 # positive value N means at most N retries, 0 means no retries, None or -1 (or
 # any other negative values) mean to retry forever. This option is used only if
 # acknowledgments are enabled. (integer value)
-#rpc_retry_attempts = 3
+#rpc_retry_attempts=3
 
 # List of publisher hosts SubConsumer can subscribe on. This option has higher
 # priority then the default publishers list taken from the matchmaker. (list
 # value)
 #subscribe_on =
 
-# Size of executor thread pool when executor is threading or eventlet. (integer
-# value)
+# Size of executor thread pool. (integer value)
 # Deprecated group/name - [DEFAULT]/rpc_thread_pool_size
-#executor_thread_pool_size = 64
+#executor_thread_pool_size=64
 
 # Seconds to wait for a response from a call. (integer value)
-#rpc_response_timeout = 60
-
-# A URL representing the messaging driver to use and its full configuration.
-# (string value)
-#transport_url = <None>
+#rpc_response_timeout=60
+rpc_response_timeout=3600
+transport_url = rabbit://openstack:opnfv_secret@192.168.10.28:5672,openstack:opnfv_secret@192.168.10.29:5672,openstack:opnfv_secret@192.168.10.30:5672//openstack
+
 
 # DEPRECATED: The messaging driver to use, defaults to rabbit. Other drivers
 # include amqp and zmq. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
-#rpc_backend = rabbit
+#rpc_backend=rabbit
+rpc_backend=rabbit
 
 # The default exchange under which topics are scoped. May be overridden by an
 # exchange name specified in the transport_url option. (string value)
-#control_exchange = openstack
+#control_exchange=openstack
 
 #
 # From oslo.service.periodic_task
@@ -288,7 +3056,7 @@
 
 # Some periodic tasks can be run in a separate process. Should we run them here?
 # (boolean value)
-#run_external_periodic_tasks = true
+#run_external_periodic_tasks=true
 
 #
 # From oslo.service.service
@@ -300,21 +3068,1197 @@
 # is in use); and <start>:<end> results in listening on the smallest unused port
 # number within the specified range of port numbers.  The chosen port is
 # displayed in the service's log file. (string value)
-#backdoor_port = <None>
+#backdoor_port=<None>
 
 # Enable eventlet backdoor, using the provided path as a unix socket that can
 # receive connections. This option is mutually exclusive with 'backdoor_port' in
 # that only one should be provided. If both are provided then the existence of
 # this option overrides the usage of that option. (string value)
-#backdoor_socket = <None>
+#backdoor_socket=<None>
 
 # Enables or disables logging values of all registered options when starting a
 # service (at DEBUG level). (boolean value)
-#log_options = true
+#log_options=true
 
 # Specify a timeout after which a gracefully shutdown server will exit. Zero
 # value means endless wait. (integer value)
-#graceful_shutdown_timeout = 60
+#graceful_shutdown_timeout=60
+
+
+[api]
+#
+# Options under this group are used to define Nova API.
+
+#
+# From nova.conf
+#
+
+#
+# This determines the strategy to use for authentication: keystone or noauth2.
+# 'noauth2' is designed for testing only, as it does no actual credential
+# checking. 'noauth2' provides administrative credentials only if 'admin' is
+# specified as the username.
+#  (string value)
+# Allowed values: keystone, noauth2
+# Deprecated group/name - [DEFAULT]/auth_strategy
+#auth_strategy=keystone
+auth_strategy=keystone
+
+#
+# When True, the 'X-Forwarded-For' header is treated as the canonical remote
+# address. When False (the default), the 'remote_address' header is used.
+#
+# You should only enable this if you have an HTML sanitizing proxy.
+#  (boolean value)
+# Deprecated group/name - [DEFAULT]/use_forwarded_for
+#use_forwarded_for=false
+use_forwarded_for=false
+
+#
+# When gathering the existing metadata for a config drive, the EC2-style
+# metadata is returned for all versions that don't appear in this option.
+# As of the Liberty release, the available versions are:
+#
+# * 1.0
+# * 2007-01-19
+# * 2007-03-01
+# * 2007-08-29
+# * 2007-10-10
+# * 2007-12-15
+# * 2008-02-01
+# * 2008-09-01
+# * 2009-04-04
+#
+# The option is in the format of a single string, with each version separated
+# by a space.
+#
+# Possible values:
+#
+# * Any string that represents zero or more versions, separated by spaces.
+#  (string value)
+# Deprecated group/name - [DEFAULT]/config_drive_skip_versions
+#config_drive_skip_versions=1.0 2007-01-19 2007-03-01 2007-08-29 2007-10-10 2007-12-15 2008-02-01 2008-09-01
+
+#
+# A list of vendordata providers.
+#
+# vendordata providers are how deployers can provide metadata via configdrive
+# and metadata that is specific to their deployment. There are currently two
+# supported providers: StaticJSON and DynamicJSON.
+#
+# StaticJSON reads a JSON file configured by the flag vendordata_jsonfile_path
+# and places the JSON from that file into vendor_data.json and
+# vendor_data2.json.
+#
+# DynamicJSON is configured via the vendordata_dynamic_targets flag, which is
+# documented separately. For each of the endpoints specified in that flag, a
+# section is added to the vendor_data2.json.
+#
+# For more information on the requirements for implementing a vendordata
+# dynamic endpoint, please see the vendordata.rst file in the nova developer
+# reference.
+#
+# Possible values:
+#
+# * A list of vendordata providers, with StaticJSON and DynamicJSON being
+#   current options.
+#
+# Related options:
+#
+# * vendordata_dynamic_targets
+# * vendordata_dynamic_ssl_certfile
+# * vendordata_dynamic_connect_timeout
+# * vendordata_dynamic_read_timeout
+# * vendordata_dynamic_failure_fatal
+#  (list value)
+# Deprecated group/name - [DEFAULT]/vendordata_providers
+#vendordata_providers =
+
+#
+# A list of targets for the dynamic vendordata provider. These targets are of
+# the form <name>@<url>.
+#
+# The dynamic vendordata provider collects metadata by contacting external REST
+# services and querying them for information about the instance. This behaviour
+# is documented in the vendordata.rst file in the nova developer reference.
+#  (list value)
+# Deprecated group/name - [DEFAULT]/vendordata_dynamic_targets
+#vendordata_dynamic_targets =
+
+#
+# Path to an optional certificate file or CA bundle to verify dynamic
+# vendordata REST services ssl certificates against.
+#
+# Possible values:
+#
+# * An empty string, or a path to a valid certificate file
+#
+# Related options:
+#
+# * vendordata_providers
+# * vendordata_dynamic_targets
+# * vendordata_dynamic_connect_timeout
+# * vendordata_dynamic_read_timeout
+# * vendordata_dynamic_failure_fatal
+#  (string value)
+# Deprecated group/name - [DEFAULT]/vendordata_dynamic_ssl_certfile
+#vendordata_dynamic_ssl_certfile =
+
+#
+# Maximum wait time for an external REST service to connect.
+#
+# Possible values:
+#
+# * Any integer with a value greater than three (the TCP packet retransmission
+#   timeout). Note that instance start may be blocked during this wait time,
+#   so this value should be kept small.
+#
+# Related options:
+#
+# * vendordata_providers
+# * vendordata_dynamic_targets
+# * vendordata_dynamic_ssl_certfile
+# * vendordata_dynamic_read_timeout
+# * vendordata_dynamic_failure_fatal
+#  (integer value)
+# Minimum value: 3
+# Deprecated group/name - [DEFAULT]/vendordata_dynamic_connect_timeout
+#vendordata_dynamic_connect_timeout=5
+
+#
+# Maximum wait time for an external REST service to return data once connected.
+#
+# Possible values:
+#
+# * Any integer. Note that instance start is blocked during this wait time,
+#   so this value should be kept small.
+#
+# Related options:
+#
+# * vendordata_providers
+# * vendordata_dynamic_targets
+# * vendordata_dynamic_ssl_certfile
+# * vendordata_dynamic_connect_timeout
+# * vendordata_dynamic_failure_fatal
+#  (integer value)
+# Minimum value: 0
+# Deprecated group/name - [DEFAULT]/vendordata_dynamic_read_timeout
+#vendordata_dynamic_read_timeout=5
+
+#
+# Should failures to fetch dynamic vendordata be fatal to instance boot?
+#
+# Related options:
+#
+# * vendordata_providers
+# * vendordata_dynamic_targets
+# * vendordata_dynamic_ssl_certfile
+# * vendordata_dynamic_connect_timeout
+# * vendordata_dynamic_read_timeout
+#  (boolean value)
+#vendordata_dynamic_failure_fatal=false
+
+#
+# This option is the time (in seconds) to cache metadata. When set to 0,
+# metadata caching is disabled entirely; this is generally not recommended for
+# performance reasons. Increasing this setting should improve response times
+# of the metadata API when under heavy load. Higher values may increase memory
+# usage, and result in longer times for host metadata changes to take effect.
+#  (integer value)
+# Minimum value: 0
+# Deprecated group/name - [DEFAULT]/metadata_cache_expiration
+#metadata_cache_expiration=15
+
+#
+# Cloud providers may store custom data in vendor data file that will then be
+# available to the instances via the metadata service, and to the rendering of
+# config-drive. The default class for this, JsonFileVendorData, loads this
+# information from a JSON file, whose path is configured by this option. If
+# there is no path set by this option, the class returns an empty dictionary.
+#
+# Possible values:
+#
+# * Any string representing the path to the data file, or an empty string
+#     (default).
+#  (string value)
+# Deprecated group/name - [DEFAULT]/vendordata_jsonfile_path
+#vendordata_jsonfile_path=<None>
+
+#
+# As a query can potentially return many thousands of items, you can limit the
+# maximum number of items in a single response by setting this option.
+#  (integer value)
+# Minimum value: 0
+# Deprecated group/name - [DEFAULT]/osapi_max_limit
+#max_limit=1000
+max_limit=1000
+
+#
+# This string is prepended to the normal URL that is returned in links to the
+# OpenStack Compute API. If it is empty (the default), the URLs are returned
+# unchanged.
+#
+# Possible values:
+#
+# * Any string, including an empty string (the default).
+#  (string value)
+# Deprecated group/name - [DEFAULT]/osapi_compute_link_prefix
+#compute_link_prefix=<None>
+
+#
+# This string is prepended to the normal URL that is returned in links to
+# Glance resources. If it is empty (the default), the URLs are returned
+# unchanged.
+#
+# Possible values:
+#
+# * Any string, including an empty string (the default).
+#  (string value)
+# Deprecated group/name - [DEFAULT]/osapi_glance_link_prefix
+#glance_link_prefix=<None>
+
+#
+# Operators can turn off the ability for a user to take snapshots of their
+# instances by setting this option to False. When disabled, any attempt to
+# take a snapshot will result in a HTTP 400 response ("Bad Request").
+#  (boolean value)
+# Deprecated group/name - [DEFAULT]/allow_instance_snapshots
+#allow_instance_snapshots=true
+
+#
+# This option is a list of all instance states for which network address
+# information should not be returned from the API.
+#
+# Possible values:
+#
+#   A list of strings, where each string is a valid VM state, as defined in
+#   nova/compute/vm_states.py. As of the Newton release, they are:
+#
+# * "active"
+# * "building"
+# * "paused"
+# * "suspended"
+# * "stopped"
+# * "rescued"
+# * "resized"
+# * "soft-delete"
+# * "deleted"
+# * "error"
+# * "shelved"
+# * "shelved_offloaded"
+#  (list value)
+# Deprecated group/name - [DEFAULT]/osapi_hide_server_address_states
+#hide_server_address_states=building
+
+# The full path to the fping binary. (string value)
+# Deprecated group/name - [DEFAULT]/fping_path
+#fping_path=/usr/sbin/fping
+fping_path=/usr/sbin/fping
+
+#
+# When True, the TenantNetworkController will query the Neutron API to get the
+# default networks to use.
+#
+# Related options:
+#
+# * neutron_default_tenant_id
+#  (boolean value)
+# Deprecated group/name - [DEFAULT]/use_neutron_default_nets
+#use_neutron_default_nets=false
+
+#
+# Tenant ID for getting the default network from Neutron API (also referred in
+# some places as the 'project ID') to use.
+#
+# Related options:
+#
+# * use_neutron_default_nets
+#  (string value)
+# Deprecated group/name - [DEFAULT]/neutron_default_tenant_id
+#neutron_default_tenant_id=default
+
+#
+# Enables returning of the instance password by the relevant server API calls
+# such as create, rebuild, evacuate, or rescue. If the hypervisor does not
+# support password injection, then the password returned will not be correct,
+# so if your hypervisor does not support password injection, set this to False.
+#  (boolean value)
+# Deprecated group/name - [DEFAULT]/enable_instance_password
+#enable_instance_password=true
+
+
+[api_database]
+#
+# The *Nova API Database* is a separate database which is used for information
+# which is used across *cells*. This database is mandatory since the Mitaka
+# release (13.0.0).
+
+#
+# From nova.conf
+#
+idle_timeout = 180
+min_pool_size = 100
+max_pool_size = 700
+max_overflow = 100
+retry_interval = 5
+max_retries = -1
+db_max_retries = 3
+db_retry_interval = 1
+connection_debug = 10
+pool_timeout = 120
+connection = mysql+pymysql://nova:opnfv_secret@192.168.10.23/nova_api?charset=utf8
+
+# The SQLAlchemy connection string to use to connect to the database. (string
+# value)
+#connection=sqlite:////var/lib/nova/nova.sqlite
+
+# If True, SQLite uses synchronous mode. (boolean value)
+#sqlite_synchronous=true
+
+# The SQLAlchemy connection string to use to connect to the slave database.
+# (string value)
+#slave_connection=<None>
+
+# The SQL mode to be used for MySQL sessions. This option, including the
+# default, overrides any server-set SQL mode. To use whatever SQL mode is set by
+# the server configuration, set this to no value. Example: mysql_sql_mode=
+# (string value)
+#mysql_sql_mode=TRADITIONAL
+
+# Timeout before idle SQL connections are reaped. (integer value)
+#idle_timeout=3600
+
+# Maximum number of SQL connections to keep open in a pool. Setting a value of 0
+# indicates no limit. (integer value)
+#max_pool_size=<None>
+
+# Maximum number of database connection retries during startup. Set to -1 to
+# specify an infinite retry count. (integer value)
+#max_retries=10
+
+# Interval between retries of opening a SQL connection. (integer value)
+#retry_interval=10
+
+# If set, use this value for max_overflow with SQLAlchemy. (integer value)
+#max_overflow=<None>
+
+# Verbosity of SQL debugging information: 0=None, 100=Everything. (integer
+# value)
+#connection_debug=0
+
+# Add Python stack traces to SQL as comment strings. (boolean value)
+#connection_trace=false
+
+# If set, use this value for pool_timeout with SQLAlchemy. (integer value)
+#pool_timeout=<None>
+
+
+[barbican]
+
+#
+# From nova.conf
+#
+
+# Use this endpoint to connect to Barbican, for example:
+# "http://localhost:9311/" (string value)
+#barbican_endpoint=<None>
+
+# Version of the Barbican API, for example: "v1" (string value)
+#barbican_api_version=<None>
+
+# Use this endpoint to connect to Keystone (string value)
+
+# Number of seconds to wait before retrying poll for key creation completion
+# (integer value)
+#retry_delay=1
+
+# Number of times to retry poll for key creation completion (integer value)
+#number_of_retries=60
+
+
+[cache]
+
+#
+# From nova.conf
+#
+enabled = true
+backend = oslo_cache.memcache_pool
+memcache_servers=192.168.10.36:11211,192.168.10.37:11211,192.168.10.38:11211
+# Prefix for building the configuration dictionary for the cache region. This
+# should not need to be changed unless there is another dogpile.cache region
+# with the same configuration name. (string value)
+#config_prefix=cache.oslo
+
+# Default TTL, in seconds, for any cached item in the dogpile.cache region. This
+# applies to any cached method that doesn't have an explicit cache expiration
+# time defined for it. (integer value)
+#expiration_time=600
+
+# Dogpile.cache backend module. It is recommended that Memcache or Redis
+# (dogpile.cache.redis) be used in production deployments. For eventlet-based or
+# highly threaded servers, Memcache with pooling (oslo_cache.memcache_pool) is
+# recommended. For low thread servers, dogpile.cache.memcached is recommended.
+# Test environments with a single instance of the server can use the
+# dogpile.cache.memory backend. (string value)
+#backend=dogpile.cache.null
+
+# Arguments supplied to the backend module. Specify this option once per
+# argument to be passed to the dogpile.cache backend. Example format:
+# "<argname>:<value>". (multi valued)
+#backend_argument =
+
+# Proxy classes to import that will affect the way the dogpile.cache backend
+# functions. See the dogpile.cache documentation on changing-backend-behavior.
+# (list value)
+#proxies =
+
+# Global toggle for caching. (boolean value)
+#enabled=false
+
+# Extra debugging from the cache backend (cache keys, get/set/delete/etc calls).
+# This is only really useful if you need to see the specific cache-backend
+# get/set/delete calls with the keys/values.  Typically this should be left set
+# to false. (boolean value)
+#debug_cache_backend=false
+
+# Memcache servers in the format of "host:port". (dogpile.cache.memcache and
+# oslo_cache.memcache_pool backends only). (list value)
+#memcache_servers=localhost:11211
+
+# Number of seconds memcached server is considered dead before it is tried
+# again. (dogpile.cache.memcache and oslo_cache.memcache_pool backends only).
+# (integer value)
+#memcache_dead_retry=300
+
+# Timeout in seconds for every call to a server. (dogpile.cache.memcache and
+# oslo_cache.memcache_pool backends only). (integer value)
+#memcache_socket_timeout=3
+
+# Max total number of open connections to every memcached server.
+# (oslo_cache.memcache_pool backend only). (integer value)
+#memcache_pool_maxsize=10
+
+# Number of seconds a connection to memcached is held unused in the pool before
+# it is closed. (oslo_cache.memcache_pool backend only). (integer value)
+#memcache_pool_unused_timeout=60
+
+# Number of seconds that an operation will wait to get a memcache client
+# connection. (integer value)
+#memcache_pool_connection_get_timeout=10
+
+
+[cells]
+#
+# Cells options allow you to use cells functionality in openstack
+# deployment.
+#
+# Note that the options in this group are only for cells v1 functionality, which
+# is considered experimental and not recommended for new deployments. Cells v1
+# is being replaced with cells v2, which starting in the 15.0.0 Ocata release is
+# required and all Nova deployments will be at least a cells v2 cell of one.
+#
+
+#
+# From nova.conf
+#
+
+# DEPRECATED:
+# Topic.
+#
+# This is the message queue topic that cells nodes listen on. It is
+# used when the cells service is started up to configure the queue,
+# and whenever an RPC call to the scheduler is made.
+#
+# Possible values:
+#
+# * cells: This is the recommended and the default value.
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# Configurable RPC topics provide little value and can result in a wide variety
+# of errors. They should not be used.
+#topic=cells
+
+#
+# Enable cell v1 functionality.
+#
+# Note that cells v1 is considered experimental and not recommended for new
+# Nova deployments. Cells v1 is being replaced by cells v2 which starting in
+# the 15.0.0 Ocata release, all Nova deployments are at least a cells v2 cell
+# of one. Setting this option, or any other options in the [cells] group, is
+# not required for cells v2.
+#
+# When this functionality is enabled, it lets you to scale an OpenStack
+# Compute cloud in a more distributed fashion without having to use
+# complicated technologies like database and message queue clustering.
+# Cells are configured as a tree. The top-level cell should have a host
+# that runs a nova-api service, but no nova-compute services. Each
+# child cell should run all of the typical nova-* services in a regular
+# Compute cloud except for nova-api. You can think of cells as a normal
+# Compute deployment in that each cell has its own database server and
+# message queue broker.
+#
+# Related options:
+#
+# * name: A unique cell name must be given when this functionality
+#   is enabled.
+# * cell_type: Cell type should be defined for all cells.
+#  (boolean value)
+enable=False
+
+#
+# Name of the current cell.
+#
+# This value must be unique for each cell. Name of a cell is used as
+# its id, leaving this option unset or setting the same name for
+# two or more cells may cause unexpected behaviour.
+#
+# Related options:
+#
+# * enabled: This option is meaningful only when cells service
+#   is enabled
+#  (string value)
+#name=nova
+
+#
+# Cell capabilities.
+#
+# List of arbitrary key=value pairs defining capabilities of the
+# current cell to be sent to the parent cells. These capabilities
+# are intended to be used in cells scheduler filters/weighers.
+#
+# Possible values:
+#
+# * key=value pairs list for example;
+#   ``hypervisor=xenserver;kvm,os=linux;windows``
+#  (list value)
+#capabilities=hypervisor=xenserver;kvm,os=linux;windows
+
+#
+# Call timeout.
+#
+# Cell messaging module waits for response(s) to be put into the
+# eventlet queue. This option defines the seconds waited for
+# response from a call to a cell.
+#
+# Possible values:
+#
+# * An integer, corresponding to the interval time in seconds.
+#  (integer value)
+# Minimum value: 0
+#call_timeout=60
+
+#
+# Reserve percentage
+#
+# Percentage of cell capacity to hold in reserve, so the minimum
+# amount of free resource is considered to be;
+#
+#     min_free = total * (reserve_percent / 100.0)
+#
+# This option affects both memory and disk utilization.
+#
+# The primary purpose of this reserve is to ensure some space is
+# available for users who want to resize their instance to be larger.
+# Note that currently once the capacity expands into this reserve
+# space this option is ignored.
+#
+# Possible values:
+#
+# * An integer or float, corresponding to the percentage of cell capacity to
+#   be held in reserve.
+#  (floating point value)
+#reserve_percent=10.0
+
+#
+# Type of cell.
+#
+# When cells feature is enabled the hosts in the OpenStack Compute
+# cloud are partitioned into groups. Cells are configured as a tree.
+# The top-level cell's cell_type must be set to ``api``. All other
+# cells are defined as a ``compute cell`` by default.
+#
+# Related option:
+#
+# * quota_driver: Disable quota checking for the child cells.
+#   (nova.quota.NoopQuotaDriver)
+#  (string value)
+# Allowed values: api, compute
+#cell_type=compute
+
+#
+# Mute child interval.
+#
+# Number of seconds after which a lack of capability and capacity
+# update the child cell is to be treated as a mute cell. Then the
+# child cell will be weighed as recommend highly that it be skipped.
+#
+# Possible values:
+#
+# * An integer, corresponding to the interval time in seconds.
+#  (integer value)
+#mute_child_interval=300
+
+#
+# Bandwidth update interval.
+#
+# Seconds between bandwidth usage cache updates for cells.
+#
+# Possible values:
+#
+# * An integer, corresponding to the interval time in seconds.
+#  (integer value)
+#bandwidth_update_interval=600
+
+#
+# Instance update sync database limit.
+#
+# Number of instances to pull from the database at one time for
+# a sync. If there are more instances to update the results will
+# be paged through.
+#
+# Possible values:
+#
+# * An integer, corresponding to a number of instances.
+#  (integer value)
+#instance_update_sync_database_limit=100
+
+#
+# Mute weight multiplier.
+#
+# Multiplier used to weigh mute children. Mute children cells are
+# recommended to be skipped so their weight is multiplied by this
+# negative value.
+#
+# Possible values:
+#
+# * Negative numeric number
+#  (floating point value)
+#mute_weight_multiplier=-10000.0
+
+#
+# Ram weight multiplier.
+#
+# Multiplier used for weighing ram. Negative numbers indicate that
+# Compute should stack VMs on one host instead of spreading out new
+# VMs to more hosts in the cell.
+#
+# Possible values:
+#
+# * Numeric multiplier
+#  (floating point value)
+#ram_weight_multiplier=10.0
+
+#
+# Offset weight multiplier
+#
+# Multiplier used to weigh offset weigher. Cells with higher
+# weight_offsets in the DB will be preferred. The weight_offset
+# is a property of a cell stored in the database. It can be used
+# by a deployer to have scheduling decisions favor or disfavor
+# cells based on the setting.
+#
+# Possible values:
+#
+# * Numeric multiplier
+#  (floating point value)
+#offset_weight_multiplier=1.0
+
+#
+# Instance updated at threshold
+#
+# Number of seconds after an instance was updated or deleted to
+# continue to update cells. This option lets cells manager to only
+# attempt to sync instances that have been updated recently.
+# i.e., a threshold of 3600 means to only update instances that
+# have modified in the last hour.
+#
+# Possible values:
+#
+# * Threshold in seconds
+#
+# Related options:
+#
+# * This value is used with the ``instance_update_num_instances``
+#   value in a periodic task run.
+#  (integer value)
+#instance_updated_at_threshold=3600
+
+#
+# Instance update num instances
+#
+# On every run of the periodic task, nova cells manager will attempt to
+# sync instance_updated_at_threshold number of instances. When the
+# manager gets the list of instances, it shuffles them so that multiple
+# nova-cells services do not attempt to sync the same instances in
+# lockstep.
+#
+# Possible values:
+#
+# * Positive integer number
+#
+# Related options:
+#
+# * This value is used with the ``instance_updated_at_threshold``
+#   value in a periodic task run.
+#  (integer value)
+#instance_update_num_instances=1
+
+#
+# Maximum hop count
+#
+# When processing a targeted message, if the local cell is not the
+# target, a route is defined between neighbouring cells. And the
+# message is processed across the whole routing path. This option
+# defines the maximum hop counts until reaching the target.
+#
+# Possible values:
+#
+# * Positive integer value
+#  (integer value)
+#max_hop_count=10
+
+#
+# Cells scheduler.
+#
+# The class of the driver used by the cells scheduler. This should be
+# the full Python path to the class to be used. If nothing is specified
+# in this option, the CellsScheduler is used.
+#  (string value)
+#scheduler=nova.cells.scheduler.CellsScheduler
+
+#
+# RPC driver queue base.
+#
+# When sending a message to another cell by JSON-ifying the message
+# and making an RPC cast to 'process_message', a base queue is used.
+# This option defines the base queue name to be used when communicating
+# between cells. Various topics by message type will be appended to this.
+#
+# Possible values:
+#
+# * The base queue name to be used when communicating between cells.
+#  (string value)
+#rpc_driver_queue_base=cells.intercell
+
+#
+# Scheduler filter classes.
+#
+# Filter classes the cells scheduler should use. An entry of
+# "nova.cells.filters.all_filters" maps to all cells filters
+# included with nova. As of the Mitaka release the following
+# filter classes are available:
+#
+# Different cell filter: A scheduler hint of 'different_cell'
+# with a value of a full cell name may be specified to route
+# a build away from a particular cell.
+#
+# Image properties filter: Image metadata named
+# 'hypervisor_version_requires' with a version specification
+# may be specified to ensure the build goes to a cell which
+# has hypervisors of the required version. If either the version
+# requirement on the image or the hypervisor capability of the
+# cell is not present, this filter returns without filtering out
+# the cells.
+#
+# Target cell filter: A scheduler hint of 'target_cell' with a
+# value of a full cell name may be specified to route a build to
+# a particular cell. No error handling is done as there's no way
+# to know whether the full path is a valid.
+#
+# As an admin user, you can also add a filter that directs builds
+# to a particular cell.
+#
+#  (list value)
+#scheduler_filter_classes=nova.cells.filters.all_filters
+
+#
+# Scheduler weight classes.
+#
+# Weigher classes the cells scheduler should use. An entry of
+# "nova.cells.weights.all_weighers" maps to all cell weighers
+# included with nova. As of the Mitaka release the following
+# weight classes are available:
+#
+# mute_child: Downgrades the likelihood of child cells being
+# chosen for scheduling requests, which haven't sent capacity
+# or capability updates in a while. Options include
+# mute_weight_multiplier (multiplier for mute children; value
+# should be negative).
+#
+# ram_by_instance_type: Select cells with the most RAM capacity
+# for the instance type being requested. Because higher weights
+# win, Compute returns the number of available units for the
+# instance type requested. The ram_weight_multiplier option defaults
+# to 10.0 that adds to the weight by a factor of 10. Use a negative
+# number to stack VMs on one host instead of spreading out new VMs
+# to more hosts in the cell.
+#
+# weight_offset: Allows modifying the database to weight a particular
+# cell. The highest weight will be the first cell to be scheduled for
+# launching an instance. When the weight_offset of a cell is set to 0,
+# it is unlikely to be picked but it could be picked if other cells
+# have a lower weight, like if they're full. And when the weight_offset
+# is set to a very high value (for example, '999999999999999'), it is
+# likely to be picked if another cell do not have a higher weight.
+#  (list value)
+#scheduler_weight_classes=nova.cells.weights.all_weighers
+
+#
+# Scheduler retries.
+#
+# How many retries when no cells are available. Specifies how many
+# times the scheduler tries to launch a new instance when no cells
+# are available.
+#
+# Possible values:
+#
+# * Positive integer value
+#
+# Related options:
+#
+# * This value is used with the ``scheduler_retry_delay`` value
+#   while retrying to find a suitable cell.
+#  (integer value)
+#scheduler_retries=10
+
+#
+# Scheduler retry delay.
+#
+# Specifies the delay (in seconds) between scheduling retries when no
+# cell can be found to place the new instance on. When the instance
+# could not be scheduled to a cell after ``scheduler_retries`` in
+# combination with ``scheduler_retry_delay``, then the scheduling
+# of the instance failed.
+#
+# Possible values:
+#
+# * Time in seconds.
+#
+# Related options:
+#
+# * This value is used with the ``scheduler_retries`` value
+#   while retrying to find a suitable cell.
+#  (integer value)
+#scheduler_retry_delay=2
+
+#
+# DB check interval.
+#
+# Cell state manager updates cell status for all cells from the DB
+# only after this particular interval time is passed. Otherwise cached
+# status are used. If this value is 0 or negative all cell status are
+# updated from the DB whenever a state is needed.
+#
+# Possible values:
+#
+# * Interval time, in seconds.
+#
+#  (integer value)
+#db_check_interval=60
+
+#
+# Optional cells configuration.
+#
+# Configuration file from which to read cells configuration. If given,
+# overrides reading cells from the database.
+#
+# Cells store all inter-cell communication data, including user names
+# and passwords, in the database. Because the cells data is not updated
+# very frequently, use this option to specify a JSON file to store
+# cells data. With this configuration, the database is no longer
+# consulted when reloading the cells data. The file must have columns
+# present in the Cell model (excluding common database fields and the
+# id column). You must specify the queue connection information through
+# a transport_url field, instead of username, password, and so on.
+#
+# The transport_url has the following form:
+# rabbit://USERNAME:PASSWORD@HOSTNAME:PORT/VIRTUAL_HOST
+#
+# Possible values:
+#
+# The scheme can be either qpid or rabbit, the following sample shows
+# this optional configuration:
+#
+#     {
+#         "parent": {
+#             "name": "parent",
+#             "api_url": "http://api.example.com:8774",
+#             "transport_url": "rabbit://rabbit.example.com",
+#             "weight_offset": 0.0,
+#             "weight_scale": 1.0,
+#             "is_parent": true
+#         },
+#         "cell1": {
+#             "name": "cell1",
+#             "api_url": "http://api.example.com:8774",
+#             "transport_url": "rabbit://rabbit1.example.com",
+#             "weight_offset": 0.0,
+#             "weight_scale": 1.0,
+#             "is_parent": false
+#         },
+#         "cell2": {
+#             "name": "cell2",
+#             "api_url": "http://api.example.com:8774",
+#             "transport_url": "rabbit://rabbit2.example.com",
+#             "weight_offset": 0.0,
+#             "weight_scale": 1.0,
+#             "is_parent": false
+#         }
+#     }
+#
+#  (string value)
+#cells_config=<None>
+
+
+[cinder]
+
+#
+# From nova.conf
+#
+
+#
+# Info to match when looking for cinder in the service catalog.
+#
+# Possible values:
+#
+# * Format is separated values of the form:
+#   <service_type>:<service_name>:<endpoint_type>
+#
+# Note: Nova does not support the Cinder v1 API since the Nova 15.0.0 Ocata
+# release.
+#
+# Related options:
+#
+# * endpoint_template - Setting this option will override catalog_info
+#  (string value)
+#catalog_info=volumev2:cinderv2:publicURL
+catalog_info=volumev2:cinderv2:internalURL
+#
+# If this option is set then it will override service catalog lookup with
+# this template for cinder endpoint
+#
+# Possible values:
+#
+# * URL for cinder endpoint API
+#   e.g. http://localhost:8776/v2/%(project_id)s
+#
+# Note: Nova does not support the Cinder v1 API since the Nova 15.0.0 Ocata
+# release.
+#
+# Related options:
+#
+# * catalog_info - If endpoint_template is not set, catalog_info will be used.
+#  (string value)
+#endpoint_template=<None>
+
+#
+# Region name of this node. This is used when picking the URL in the service
+# catalog.
+#
+# Possible values:
+#
+# * Any string representing region name
+#  (string value)
+#os_region_name=<None>
+os_region_name = RegionOne
+
+#
+# Number of times cinderclient should retry on any failed http call.
+# 0 means connection is attempted only once. Setting it to any positive integer
+# means that on failure connection is retried that many times e.g. setting it
+# to 3 means total attempts to connect will be 4.
+#
+# Possible values:
+#
+# * Any integer value. 0 means connection is attempted only once
+#  (integer value)
+# Minimum value: 0
+#http_retries=3
+
+#
+# Allow attach between instance and volume in different availability zones.
+#
+# If False, volumes attached to an instance must be in the same availability
+# zone in Cinder as the instance availability zone in Nova.
+# This also means care should be taken when booting an instance from a volume
+# where source is not "volume" because Nova will attempt to create a volume
+# using
+# the same availability zone as what is assigned to the instance.
+# If that AZ is not in Cinder (or allow_availability_zone_fallback=False in
+# cinder.conf), the volume create request will fail and the instance will fail
+# the build request.
+# By default there is no availability zone restriction on volume attach.
+#  (boolean value)
+#cross_az_attach=true
+
+[cloudpipe]
+
+#
+# From nova.conf
+#
+
+#
+# Image ID used when starting up a cloudpipe VPN client.
+#
+# An empty instance is created and configured with OpenVPN using
+# boot_script_template. This instance would be snapshotted and stored
+# in glance. ID of the stored image is used in 'vpn_image_id' to
+# create cloudpipe VPN client.
+#
+# Possible values:
+#
+# * Any valid ID of a VPN image
+#  (string value)
+# Deprecated group/name - [DEFAULT]/vpn_image_id
+#vpn_image_id=0
+
+#
+# Flavor for VPN instances.
+#
+# Possible values:
+#
+# * Any valid flavor name
+#  (string value)
+# Deprecated group/name - [DEFAULT]/vpn_flavor
+#vpn_flavor=m1.tiny
+
+#
+# Template for cloudpipe instance boot script.
+#
+# Possible values:
+#
+# * Any valid path to a cloudpipe instance boot script template
+#
+# Related options:
+#
+# The following options are required to configure cloudpipe-managed
+# OpenVPN server.
+#
+# * dmz_net
+# * dmz_mask
+# * cnt_vpn_clients
+#  (string value)
+# Deprecated group/name - [DEFAULT]/boot_script_template
+#boot_script_template=$pybasedir/nova/cloudpipe/bootscript.template
+
+#
+# Network to push into OpenVPN config.
+#
+# Note: Above mentioned OpenVPN config can be found at
+# /etc/openvpn/server.conf.
+#
+# Possible values:
+#
+# * Any valid IPv4/IPV6 address
+#
+# Related options:
+#
+# * boot_script_template - dmz_net is pushed into bootscript.template
+#   to configure cloudpipe-managed OpenVPN server
+#  (IP address value)
+# Deprecated group/name - [DEFAULT]/dmz_net
+#dmz_net=10.0.0.0
+
+#
+# Netmask to push into OpenVPN config.
+#
+# Possible values:
+#
+# * Any valid IPv4/IPV6 netmask
+#
+# Related options:
+#
+# * dmz_net - dmz_net and dmz_mask is pushed into bootscript.template
+#   to configure cloudpipe-managed OpenVPN server
+# * boot_script_template
+#  (IP address value)
+# Deprecated group/name - [DEFAULT]/dmz_mask
+#dmz_mask=255.255.255.0
+
+#
+# Suffix to add to project name for VPN key and secgroups
+#
+# Possible values:
+#
+# * Any string value representing the VPN key suffix
+#  (string value)
+# Deprecated group/name - [DEFAULT]/vpn_key_suffix
+#vpn_key_suffix=-vpn
+
+
+[conductor]
+#
+# Options under this group are used to define Conductor's communication,
+# which manager should be act as a proxy between computes and database,
+# and finally, how many worker processes will be used.
+
+#
+# From nova.conf
+#
+
+# DEPRECATED:
+# Topic exchange name on which conductor nodes listen.
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# There is no need to let users choose the RPC topic for all services - there
+# is little gain from this. Furthermore, it makes it really easy to break Nova
+# by using this option.
+#topic=conductor
+
+#
+# Number of workers for OpenStack Conductor service. The default will be the
+# number of CPUs available.
+#  (integer value)
+#workers=<None>
+workers = 8
+
+[console]
+#
+# Options under this group allow to tune the configuration of the console proxy
+# service.
+#
+# Note: in configuration of every compute is a ``console_host`` option,
+# which allows to select the console proxy service to connect to.
+
+#
+# From nova.conf
+#
+
+#
+# Adds list of allowed origins to the console websocket proxy to allow
+# connections from other origin hostnames.
+# Websocket proxy matches the host header with the origin header to
+# prevent cross-site requests. This list specifies if any there are
+# values other than host are allowed in the origin header.
+#
+# Possible values:
+#
+# * A list where each element is an allowed origin hostnames, else an empty list
+#  (list value)
+# Deprecated group/name - [DEFAULT]/console_allowed_origins
+#allowed_origins =
+
+
+[consoleauth]
+
+#
+# From nova.conf
+#
+
+#
+# The lifetime of a console auth token.
+#
+# A console auth token is used in authorizing console access for a user.
+# Once the auth token time to live count has elapsed, the token is
+# considered expired.  Expired tokens are then deleted.
+#  (integer value)
+# Minimum value: 0
+# Deprecated group/name - [DEFAULT]/console_token_ttl
+#token_ttl=600
 
 
 [cors]
@@ -326,24 +4270,140 @@
 # Indicate whether this resource may be shared with the domain received in the
 # requests "origin" header. Format: "<protocol>://<host>[:<port>]", no trailing
 # slash. Example: https://horizon.example.com (list value)
-#allowed_origin = <None>
+#allowed_origin=<None>
+
 
 # Indicate that the actual request can include user credentials (boolean value)
-#allow_credentials = true
+#allow_credentials=true
+
 
 # Indicate which headers are safe to expose to the API. Defaults to HTTP Simple
 # Headers. (list value)
-#expose_headers =
+#expose_headers=X-Auth-Token,X-Openstack-Request-Id,X-Subject-Token,X-Service-Token
+
 
 # Maximum cache age of CORS preflight requests. (integer value)
-#max_age = 3600
+#max_age=3600
+
 
 # Indicate which methods can be used during the actual request. (list value)
-#allow_methods = OPTIONS,GET,HEAD,POST,PUT,DELETE,TRACE,PATCH
+#allow_methods=GET,PUT,POST,DELETE,PATCH
+
 
 # Indicate which header field names may be used during the actual request. (list
 # value)
-#allow_headers =
+#allow_headers=X-Auth-Token,X-Openstack-Request-Id,X-Identity-Status,X-Roles,X-Service-Catalog,X-User-Id,X-Tenant-Id
+
+
+[cors.subdomain]
+
+#
+# From oslo.middleware
+#
+
+# Indicate whether this resource may be shared with the domain received in the
+# requests "origin" header. Format: "<protocol>://<host>[:<port>]", no trailing
+# slash. Example: https://horizon.example.com (list value)
+#allowed_origin=<None>
+
+# Indicate that the actual request can include user credentials (boolean value)
+#allow_credentials=true
+
+# Indicate which headers are safe to expose to the API. Defaults to HTTP Simple
+# Headers. (list value)
+#expose_headers=X-Auth-Token,X-Openstack-Request-Id,X-Subject-Token,X-Service-Token
+
+# Maximum cache age of CORS preflight requests. (integer value)
+#max_age=3600
+
+# Indicate which methods can be used during the actual request. (list value)
+#allow_methods=GET,PUT,POST,DELETE,PATCH
+
+# Indicate which header field names may be used during the actual request. (list
+# value)
+#allow_headers=X-Auth-Token,X-Openstack-Request-Id,X-Identity-Status,X-Roles,X-Service-Catalog,X-User-Id,X-Tenant-Id
+
+
+[crypto]
+
+#
+# From nova.conf
+#
+
+#
+# Filename of root CA (Certificate Authority). This is a container format
+# and includes root certificates.
+#
+# Possible values:
+#
+# * Any file name containing root CA, cacert.pem is default
+#
+# Related options:
+#
+# * ca_path
+#  (string value)
+# Deprecated group/name - [DEFAULT]/ca_file
+#ca_file=cacert.pem
+
+#
+# Filename of a private key.
+#
+# Related options:
+#
+# * keys_path
+#  (string value)
+# Deprecated group/name - [DEFAULT]/key_file
+#key_file=private/cakey.pem
+
+#
+# Filename of root Certificate Revocation List (CRL). This is a list of
+# certificates that have been revoked, and therefore, entities presenting
+# those (revoked) certificates should no longer be trusted.
+#
+# Related options:
+#
+# * ca_path
+#  (string value)
+# Deprecated group/name - [DEFAULT]/crl_file
+#crl_file=crl.pem
+
+#
+# Directory path where keys are located.
+#
+# Related options:
+#
+# * key_file
+#  (string value)
+# Deprecated group/name - [DEFAULT]/keys_path
+#keys_path=$state_path/keys
+
+#
+# Directory path where root CA is located.
+#
+# Related options:
+#
+# * ca_file
+#  (string value)
+# Deprecated group/name - [DEFAULT]/ca_path
+#ca_path=$state_path/CA
+
+# Option to enable/disable use of CA for each project. (boolean value)
+# Deprecated group/name - [DEFAULT]/use_project_ca
+#use_project_ca=false
+
+#
+# Subject for certificate for users, %s for
+# project, user, timestamp
+#  (string value)
+# Deprecated group/name - [DEFAULT]/user_cert_subject
+#user_cert_subject=/C=US/ST=California/O=OpenStack/OU=NovaDev/CN=%.16s-%.16s-%s
+
+#
+# Subject for certificate for projects, %s for
+# project, timestamp
+#  (string value)
+# Deprecated group/name - [DEFAULT]/project_cert_subject
+#project_cert_subject=/C=US/ST=California/O=OpenStack/OU=NovaDev/CN=project-ca-%.16s-%s
 
 
 [database]
@@ -352,100 +4412,116 @@
 # From oslo.db
 #
 
+# DEPRECATED: The file name to use with SQLite. (string value)
+# Deprecated group/name - [DEFAULT]/sqlite_db
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Should use config option connection or slave_connection to connect the
+# database.
+#sqlite_db=oslo.sqlite
+idle_timeout = 180
+min_pool_size = 100
+max_pool_size = 700
+max_overflow = 100
+retry_interval = 5
+max_retries = -1
+db_max_retries = 3
+db_retry_interval = 1
+connection_debug = 10
+pool_timeout = 120
+connection = mysql+pymysql://nova:opnfv_secret@192.168.10.23/nova?charset=utf8
+
 # If True, SQLite uses synchronous mode. (boolean value)
-#sqlite_synchronous = true
+# Deprecated group/name - [DEFAULT]/sqlite_synchronous
+#sqlite_synchronous=true
 
 # The back end to use for the database. (string value)
 # Deprecated group/name - [DEFAULT]/db_backend
-#backend = sqlalchemy
+#backend=sqlalchemy
 
 # The SQLAlchemy connection string to use to connect to the database. (string
 # value)
 # Deprecated group/name - [DEFAULT]/sql_connection
 # Deprecated group/name - [DATABASE]/sql_connection
 # Deprecated group/name - [sql]/connection
-#connection = <None>
+#connection=<None>
 
 # The SQLAlchemy connection string to use to connect to the slave database.
 # (string value)
-#slave_connection = <None>
+#slave_connection=<None>
 
 # The SQL mode to be used for MySQL sessions. This option, including the
 # default, overrides any server-set SQL mode. To use whatever SQL mode is set by
 # the server configuration, set this to no value. Example: mysql_sql_mode=
 # (string value)
-#mysql_sql_mode = TRADITIONAL
-
-# If True, transparently enables support for handling MySQL Cluster (NDB).
-# (boolean value)
-#mysql_enable_ndb = false
+#mysql_sql_mode=TRADITIONAL
 
 # Timeout before idle SQL connections are reaped. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_idle_timeout
 # Deprecated group/name - [DATABASE]/sql_idle_timeout
 # Deprecated group/name - [sql]/idle_timeout
-#idle_timeout = 3600
+#idle_timeout=3600
 
 # Minimum number of SQL connections to keep open in a pool. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_min_pool_size
 # Deprecated group/name - [DATABASE]/sql_min_pool_size
-#min_pool_size = 1
+#min_pool_size=1
 
 # Maximum number of SQL connections to keep open in a pool. Setting a value of 0
 # indicates no limit. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_max_pool_size
 # Deprecated group/name - [DATABASE]/sql_max_pool_size
-#max_pool_size = 5
+#max_pool_size=5
 
 # Maximum number of database connection retries during startup. Set to -1 to
 # specify an infinite retry count. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_max_retries
 # Deprecated group/name - [DATABASE]/sql_max_retries
-#max_retries = 10
+#max_retries=10
 
 # Interval between retries of opening a SQL connection. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_retry_interval
 # Deprecated group/name - [DATABASE]/reconnect_interval
-#retry_interval = 10
+#retry_interval=10
 
 # If set, use this value for max_overflow with SQLAlchemy. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_max_overflow
 # Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
-#max_overflow = 50
+#max_overflow=50
 
 # Verbosity of SQL debugging information: 0=None, 100=Everything. (integer
 # value)
 # Minimum value: 0
 # Maximum value: 100
 # Deprecated group/name - [DEFAULT]/sql_connection_debug
-#connection_debug = 0
+#connection_debug=0
 
 # Add Python stack traces to SQL as comment strings. (boolean value)
 # Deprecated group/name - [DEFAULT]/sql_connection_trace
-#connection_trace = false
+#connection_trace=false
 
 # If set, use this value for pool_timeout with SQLAlchemy. (integer value)
 # Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
-#pool_timeout = <None>
+#pool_timeout=<None>
 
 # Enable the experimental use of database reconnect on connection lost. (boolean
 # value)
-#use_db_reconnect = false
+#use_db_reconnect=false
 
 # Seconds between retries of a database transaction. (integer value)
-#db_retry_interval = 1
+#db_retry_interval=1
 
 # If True, increases the interval between retries of a database operation up to
 # db_max_retry_interval. (boolean value)
-#db_inc_retry_interval = true
+#db_inc_retry_interval=true
 
 # If db_inc_retry_interval is set, the maximum seconds between retries of a
 # database operation. (integer value)
-#db_max_retry_interval = 10
+#db_max_retry_interval=10
 
 # Maximum retries in case of connection error or deadlock error before error is
 # raised. Set to -1 to specify an infinite retry count. (integer value)
-#db_max_retries = 20
+#db_max_retries=20
 
 #
 # From oslo.db.concurrency
@@ -454,7 +4530,569 @@
 # Enable the experimental use of thread pooling for all DB API calls (boolean
 # value)
 # Deprecated group/name - [DEFAULT]/dbapi_use_tpool
-#use_tpool = false
+#use_tpool=false
+
+
+[ephemeral_storage_encryption]
+
+#
+# From nova.conf
+#
+
+#
+# Enables/disables LVM ephemeral storage encryption.
+#  (boolean value)
+#enabled=false
+
+#
+# Cipher-mode string to be used.
+#
+# The cipher and mode to be used to encrypt ephemeral storage. The set of
+# cipher-mode combinations available depends on kernel support.
+#
+# Possible values:
+#
+# * Any crypto option listed in ``/proc/crypto``.
+#  (string value)
+#cipher=aes-xts-plain64
+
+#
+# Encryption key length in bits.
+#
+# The bit length of the encryption key to be used to encrypt ephemeral storage.
+# In XTS mode only half of the bits are used for encryption key.
+#  (integer value)
+# Minimum value: 1
+#key_size=512
+
+
+[filter_scheduler]
+
+#
+# From nova.conf
+#
+
+#
+# Size of subset of best hosts selected by scheduler.
+#
+# New instances will be scheduled on a host chosen randomly from a subset of the
+# N best hosts, where N is the value set by this option.
+#
+# Setting this to a value greater than 1 will reduce the chance that multiple
+# scheduler processes handling similar requests will select the same host,
+# creating a potential race condition. By selecting a host randomly from the N
+# hosts that best fit the request, the chance of a conflict is reduced. However,
+# the higher you set this value, the less optimal the chosen host may be for a
+# given request.
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect.
+#
+# Possible values:
+#
+# * An integer, where the integer corresponds to the size of a host subset. Any
+#   integer is valid, although any value less than 1 will be treated as 1
+#  (integer value)
+# Minimum value: 1
+# Deprecated group/name - [DEFAULT]/scheduler_host_subset_size
+#host_subset_size=1
+host_subset_size=30
+
+#
+# The number of instances that can be actively performing IO on a host.
+#
+# Instances performing IO includes those in the following states: build, resize,
+# snapshot, migrate, rescue, unshelve.
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect. Also note that this setting
+# only affects scheduling if the 'io_ops_filter' filter is enabled.
+#
+# Possible values:
+#
+# * An integer, where the integer corresponds to the max number of instances
+#   that can be actively performing IO on any given host.
+#  (integer value)
+# Deprecated group/name - [DEFAULT]/max_io_ops_per_host
+#max_io_ops_per_host=8
+max_io_ops_per_host=8
+
+#
+# Maximum number of instances that be active on a host.
+#
+# If you need to limit the number of instances on any given host, set this
+# option
+# to the maximum number of instances you want to allow. The num_instances_filter
+# will reject any host that has at least as many instances as this option's
+# value.
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect. Also note that this setting
+# only affects scheduling if the 'num_instances_filter' filter is enabled.
+#
+# Possible values:
+#
+# * An integer, where the integer corresponds to the max instances that can be
+#   scheduled on a host.
+#  (integer value)
+# Deprecated group/name - [DEFAULT]/max_instances_per_host
+#max_instances_per_host=50
+max_instances_per_host=50
+
+#
+# Enable querying of individual hosts for instance information.
+#
+# The scheduler may need information about the instances on a host in order to
+# evaluate its filters and weighers. The most common need for this information
+# is
+# for the (anti-)affinity filters, which need to choose a host based on the
+# instances already running on a host.
+#
+# If the configured filters and weighers do not need this information, disabling
+# this option will improve performance. It may also be disabled when the
+# tracking
+# overhead proves too heavy, although this will cause classes requiring host
+# usage data to query the database on each request instead.
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect.
+#  (boolean value)
+# Deprecated group/name - [DEFAULT]/scheduler_tracks_instance_changes
+#track_instance_changes=true
+
+#
+# Filters that the scheduler can use.
+#
+# An unordered list of the filter classes the nova scheduler may apply.  Only
+# the
+# filters specified in the 'scheduler_enabled_filters' option will be used, but
+# any filter appearing in that option must also be included in this list.
+#
+# By default, this is set to all filters that are included with nova.
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect.
+#
+# Possible values:
+#
+# * A list of zero or more strings, where each string corresponds to the name of
+#   a filter that may be used for selecting a host
+#
+# Related options:
+#
+# * scheduler_enabled_filters
+#  (multi valued)
+# Deprecated group/name - [DEFAULT]/scheduler_available_filters
+#available_filters=nova.scheduler.filters.all_filters
+available_filters=nova.scheduler.filters.all_filters
+available_filters=nova.scheduler.filters.pci_passthrough_filter.PciPassthroughFilter
+
+
+#
+# Filters that the scheduler will use.
+#
+# An ordered list of filter class names that will be used for filtering
+# hosts. Ignore the word 'default' in the name of this option: these filters
+# will
+# *always* be applied, and they will be applied in the order they are listed so
+# place your most restrictive filters first to make the filtering process more
+# efficient.
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect.
+#
+# Possible values:
+#
+# * A list of zero or more strings, where each string corresponds to the name of
+#   a filter to be used for selecting a host
+#
+# Related options:
+#
+# * All of the filters in this option *must* be present in the
+#   'scheduler_available_filters' option, or a SchedulerHostFilterNotFound
+#   exception will be raised.
+#  (list value)
+# Deprecated group/name - [DEFAULT]/scheduler_default_filters
+#enabled_filters=RetryFilter,AvailabilityZoneFilter,RamFilter,DiskFilter,ComputeFilter,ComputeCapabilitiesFilter,ImagePropertiesFilter,ServerGroupAntiAffinityFilter,ServerGroupAffinityFilter
+enabled_filters=DifferentHostFilter,SameHostFilter,RetryFilter,AvailabilityZoneFilter,RamFilter,CoreFilter,DiskFilter,ComputeFilter,ComputeCapabilitiesFilter,ImagePropertiesFilter,ServerGroupAntiAffinityFilter,ServerGroupAffinityFilter,PciPassthroughFilter,NUMATopologyFilter,AggregateInstanceExtraSpecsFilter
+
+#
+# Filters used for filtering baremetal hosts.
+#
+# Filters are applied in order, so place your most restrictive filters first to
+# make the filtering process more efficient.
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect.
+#
+# Possible values:
+#
+# * A list of zero or more strings, where each string corresponds to the name of
+#   a filter to be used for selecting a baremetal host
+#
+# Related options:
+#
+# * If the 'scheduler_use_baremetal_filters' option is False, this option has
+#   no effect.
+#  (list value)
+# Deprecated group/name - [DEFAULT]/baremetal_scheduler_default_filters
+#baremetal_enabled_filters=RetryFilter,AvailabilityZoneFilter,ComputeFilter,ComputeCapabilitiesFilter,ImagePropertiesFilter,ExactRamFilter,ExactDiskFilter,ExactCoreFilter
+
+#
+# Enable baremetal filters.
+#
+# Set this to True to tell the nova scheduler that it should use the filters
+# specified in the 'baremetal_scheduler_enabled_filters' option. If you are not
+# scheduling baremetal nodes, leave this at the default setting of False.
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect.
+#
+# Related options:
+#
+# * If this option is set to True, then the filters specified in the
+#   'baremetal_scheduler_enabled_filters' are used instead of the filters
+#   specified in 'scheduler_enabled_filters'.
+#  (boolean value)
+# Deprecated group/name - [DEFAULT]/scheduler_use_baremetal_filters
+#use_baremetal_filters=false
+use_baremetal_filters=false
+
+#
+# Weighers that the scheduler will use.
+#
+# Only hosts which pass the filters are weighed. The weight for any host starts
+# at 0, and the weighers order these hosts by adding to or subtracting from the
+# weight assigned by the previous weigher. Weights may become negative. An
+# instance will be scheduled to one of the N most-weighted hosts, where N is
+# 'scheduler_host_subset_size'.
+#
+# By default, this is set to all weighers that are included with Nova.
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect.
+#
+# Possible values:
+#
+# * A list of zero or more strings, where each string corresponds to the name of
+#   a weigher that will be used for selecting a host
+#  (list value)
+# Deprecated group/name - [DEFAULT]/scheduler_weight_classes
+#weight_classes=nova.scheduler.weights.all_weighers
+
+#
+# Ram weight multipler ratio.
+#
+# This option determines how hosts with more or less available RAM are weighed.
+# A
+# positive value will result in the scheduler preferring hosts with more
+# available RAM, and a negative number will result in the scheduler preferring
+# hosts with less available RAM. Another way to look at it is that positive
+# values for this option will tend to spread instances across many hosts, while
+# negative values will tend to fill up (stack) hosts as much as possible before
+# scheduling to a less-used host. The absolute value, whether positive or
+# negative, controls how strong the RAM weigher is relative to other weighers.
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect. Also note that this setting
+# only affects scheduling if the 'ram' weigher is enabled.
+#
+# Possible values:
+#
+# * An integer or float value, where the value corresponds to the multipler
+#   ratio for this weigher.
+#  (floating point value)
+# Deprecated group/name - [DEFAULT]/ram_weight_multiplier
+#ram_weight_multiplier=1.0
+
+#
+# Disk weight multipler ratio.
+#
+# Multiplier used for weighing free disk space. Negative numbers mean to
+# stack vs spread.
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect. Also note that this setting
+# only affects scheduling if the 'ram' weigher is enabled.
+#
+# Possible values:
+#
+# * An integer or float value, where the value corresponds to the multipler
+#   ratio for this weigher.
+#  (floating point value)
+# Deprecated group/name - [DEFAULT]/disk_weight_multiplier
+#disk_weight_multiplier=1.0
+
+#
+# IO operations weight multipler ratio.
+#
+# This option determines how hosts with differing workloads are weighed.
+# Negative
+# values, such as the default, will result in the scheduler preferring hosts
+# with
+# lighter workloads whereas positive values will prefer hosts with heavier
+# workloads. Another way to look at it is that positive values for this option
+# will tend to schedule instances onto hosts that are already busy, while
+# negative values will tend to distribute the workload across more hosts. The
+# absolute value, whether positive or negative, controls how strong the io_ops
+# weigher is relative to other weighers.
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect. Also note that this setting
+# only affects scheduling if the 'io_ops' weigher is enabled.
+#
+# Possible values:
+#
+# * An integer or float value, where the value corresponds to the multipler
+#   ratio for this weigher.
+#  (floating point value)
+# Deprecated group/name - [DEFAULT]/io_ops_weight_multiplier
+#io_ops_weight_multiplier=-1.0
+
+#
+# Multiplier used for weighing hosts for group soft-affinity.
+#
+# Possible values:
+#
+# * An integer or float value, where the value corresponds to weight multiplier
+#   for hosts with group soft affinity. Only a positive value are meaningful, as
+#   negative values would make this behave as a soft anti-affinity weigher.
+#  (floating point value)
+# Deprecated group/name - [DEFAULT]/soft_affinity_weight_multiplier
+#soft_affinity_weight_multiplier=1.0
+
+#
+# Multiplier used for weighing hosts for group soft-anti-affinity.
+#
+# Possible values:
+#
+# * An integer or float value, where the value corresponds to weight multiplier
+#   for hosts with group soft anti-affinity. Only a positive value are
+#   meaningful, as negative values would make this behave as a soft affinity
+#   weigher.
+#  (floating point value)
+# Deprecated group/name - [DEFAULT]/soft_anti_affinity_weight_multiplier
+#soft_anti_affinity_weight_multiplier=1.0
+
+#
+# List of UUIDs for images that can only be run on certain hosts.
+#
+# If there is a need to restrict some images to only run on certain designated
+# hosts, list those image UUIDs here.
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect. Also note that this setting
+# only affects scheduling if the 'IsolatedHostsFilter' filter is enabled.
+#
+# Possible values:
+#
+# * A list of UUID strings, where each string corresponds to the UUID of an
+#   image
+#
+# Related options:
+#
+# * scheduler/isolated_hosts
+# * scheduler/restrict_isolated_hosts_to_isolated_images
+#  (list value)
+# Deprecated group/name - [DEFAULT]/isolated_images
+#isolated_images =
+
+#
+# List of hosts that can only run certain images.
+#
+# If there is a need to restrict some images to only run on certain designated
+# hosts, list those host names here.
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect. Also note that this setting
+# only affects scheduling if the 'IsolatedHostsFilter' filter is enabled.
+#
+# Possible values:
+#
+# * A list of strings, where each string corresponds to the name of a host
+#
+# Related options:
+#
+# * scheduler/isolated_images
+# * scheduler/restrict_isolated_hosts_to_isolated_images
+#  (list value)
+# Deprecated group/name - [DEFAULT]/isolated_hosts
+#isolated_hosts =
+
+#
+# Prevent non-isolated images from being built on isolated hosts.
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect. Also note that this setting
+# only affects scheduling if the 'IsolatedHostsFilter' filter is enabled. Even
+# then, this option doesn't affect the behavior of requests for isolated images,
+# which will *always* be restricted to isolated hosts.
+#
+# Related options:
+#
+# * scheduler/isolated_images
+# * scheduler/isolated_hosts
+#  (boolean value)
+# Deprecated group/name - [DEFAULT]/restrict_isolated_hosts_to_isolated_images
+#restrict_isolated_hosts_to_isolated_images=true
+
+#
+# Image property namespace for use in the host aggregate.
+#
+# Images and hosts can be configured so that certain images can only be
+# scheduled
+# to hosts in a particular aggregate. This is done with metadata values set on
+# the host aggregate that are identified by beginning with the value of this
+# option. If the host is part of an aggregate with such a metadata key, the
+# image
+# in the request spec must have the value of that metadata in its properties in
+# order for the scheduler to consider the host as acceptable.
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect. Also note that this setting
+# only affects scheduling if the 'aggregate_image_properties_isolation' filter
+# is
+# enabled.
+#
+# Possible values:
+#
+# * A string, where the string corresponds to an image property namespace
+#
+# Related options:
+#
+# * aggregate_image_properties_isolation_separator
+#  (string value)
+# Deprecated group/name - [DEFAULT]/aggregate_image_properties_isolation_namespace
+#aggregate_image_properties_isolation_namespace=<None>
+
+#
+# Separator character(s) for image property namespace and name.
+#
+# When using the aggregate_image_properties_isolation filter, the relevant
+# metadata keys are prefixed with the namespace defined in the
+# aggregate_image_properties_isolation_namespace configuration option plus a
+# separator. This option defines the separator to be used.
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect. Also note that this setting
+# only affects scheduling if the 'aggregate_image_properties_isolation' filter
+# is enabled.
+#
+# Possible values:
+#
+# * A string, where the string corresponds to an image property namespace
+#   separator character
+#
+# Related options:
+#
+# * aggregate_image_properties_isolation_namespace
+#  (string value)
+# Deprecated group/name - [DEFAULT]/aggregate_image_properties_isolation_separator
+#aggregate_image_properties_isolation_separator=.
+
+
+[glance]
+# Configuration options for the Image service
+
+#
+# From nova.conf
+#
+
+#
+# List of glance api servers endpoints available to nova.
+#
+# https is used for ssl-based glance api servers.
+#
+# Possible values:
+#
+# * A list of any fully qualified url of the form
+# "scheme://hostname:port[/path]"
+#   (i.e. "http://10.0.1.0:9292" or "https://my.glance.server/image").
+#  (list value)
+#api_servers=<None>
+api_servers = http://192.168.10.35:9292
+
+#
+# Enable insecure SSL (https) requests to glance.
+#
+# This setting can be used to turn off verification of the glance server
+# certificate against the certificate authorities.
+#  (boolean value)
+#api_insecure=false
+
+#
+# Enable glance operation retries.
+#
+# Specifies the number of retries when uploading / downloading
+# an image to / from glance. 0 means no retries.
+#  (integer value)
+# Minimum value: 0
+#num_retries=0
+
+#
+# List of url schemes that can be directly accessed.
+#
+# This option specifies a list of url schemes that can be downloaded
+# directly via the direct_url. This direct_URL can be fetched from
+# Image metadata which can be used by nova to get the
+# image more efficiently. nova-compute could benefit from this by
+# invoking a copy when it has access to the same file system as glance.
+#
+# Possible values:
+#
+# * [file], Empty list (default)
+#  (list value)
+#allowed_direct_url_schemes =
+
+#
+# Enable image signature verification.
+#
+# nova uses the image signature metadata from glance and verifies the signature
+# of a signed image while downloading that image. If the image signature cannot
+# be verified or if the image signature metadata is either incomplete or
+# unavailable, then nova will not boot the image and instead will place the
+# instance into an error state. This provides end users with stronger assurances
+# of the integrity of the image data they are using to create servers.
+#
+# Related options:
+#
+# * The options in the `key_manager` group, as the key_manager is used
+#   for the signature validation.
+#  (boolean value)
+#verify_glance_signatures=false
+
+# Enable or disable debug logging with glanceclient. (boolean value)
+#debug=false
+
+
+[guestfs]
+#
+# libguestfs is a set of tools for accessing and modifying virtual
+# machine (VM) disk images. You can use this for viewing and editing
+# files inside guests, scripting changes to VMs, monitoring disk
+# used/free statistics, creating guests, P2V, V2V, performing backups,
+# cloning VMs, building VMs, formatting disks and resizing disks.
+
+#
+# From nova.conf
+#
+
+#
+# Enable/disables guestfs logging.
+#
+# This configures guestfs to debug messages and push them to Openstack
+# logging system. When set to True, it traces libguestfs API calls and
+# enable verbose debug messages. In order to use the above feature,
+# "libguestfs" package must be installed.
+#
+# Related options:
+# Since libguestfs access and modifies VM's managed by libvirt, below options
+# should be set to give access to those VM's.
+#     * libvirt.inject_key
+#     * libvirt.inject_partition
+#     * libvirt.inject_password
+#  (boolean value)
+#debug=false
 
 
 [healthcheck]
@@ -466,10 +5104,10 @@
 # DEPRECATED: The path to respond to healtcheck requests on. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
-#path = /healthcheck
+#path=/healthcheck
 
 # Show more detailed information as part of the response (boolean value)
-#detailed = false
+#detailed=false
 
 # Additional backends that can perform health checks and report that information
 # back as part of a request. (list value)
@@ -477,7 +5115,7 @@
 
 # Check the presence of a file to determine if an application is running on a
 # port. Used by DisableByFileHealthcheck plugin. (string value)
-#disable_by_file_path = <None>
+#disable_by_file_path=<None>
 
 # Check the presence of a file based on a port to determine if an application is
 # running on a port. Expects a "port:path" list of strings. Used by
@@ -485,57 +5123,488 @@
 #disable_by_file_paths =
 
 
+[hyperv]
+#
+# The hyperv feature allows you to configure the Hyper-V hypervisor
+# driver to be used within an OpenStack deployment.
+
+#
+# From nova.conf
+#
+
+#
+# Dynamic memory ratio
+#
+# Enables dynamic memory allocation (ballooning) when set to a value
+# greater than 1. The value expresses the ratio between the total RAM
+# assigned to an instance and its startup RAM amount. For example a
+# ratio of 2.0 for an instance with 1024MB of RAM implies 512MB of
+# RAM allocated at startup.
+#
+# Possible values:
+#
+# * 1.0: Disables dynamic memory allocation (Default).
+# * Float values greater than 1.0: Enables allocation of total implied
+#   RAM divided by this value for startup.
+#  (floating point value)
+#dynamic_memory_ratio=1.0
+
+#
+# Enable instance metrics collection
+#
+# Enables metrics collections for an instance by using Hyper-V's
+# metric APIs. Collected data can by retrieved by other apps and
+# services, e.g.: Ceilometer.
+#  (boolean value)
+#enable_instance_metrics_collection=false
+
+#
+# Instances path share
+#
+# The name of a Windows share mapped to the "instances_path" dir
+# and used by the resize feature to copy files to the target host.
+# If left blank, an administrative share (hidden network share) will
+# be used, looking for the same "instances_path" used locally.
+#
+# Possible values:
+#
+# * "": An administrative share will be used (Default).
+# * Name of a Windows share.
+#
+# Related options:
+#
+# * "instances_path": The directory which will be used if this option
+#   here is left blank.
+#  (string value)
+#instances_path_share =
+
+#
+# Limit CPU features
+#
+# This flag is needed to support live migration to hosts with
+# different CPU features and checked during instance creation
+# in order to limit the CPU features used by the instance.
+#  (boolean value)
+#limit_cpu_features=false
+
+#
+# Mounted disk query retry count
+#
+# The number of times to retry checking for a mounted disk.
+# The query runs until the device can be found or the retry
+# count is reached.
+#
+# Possible values:
+#
+# * Positive integer values. Values greater than 1 is recommended
+#   (Default: 10).
+#
+# Related options:
+#
+# * Time interval between disk mount retries is declared with
+#   "mounted_disk_query_retry_interval" option.
+#  (integer value)
+# Minimum value: 0
+#mounted_disk_query_retry_count=10
+
+#
+# Mounted disk query retry interval
+#
+# Interval between checks for a mounted disk, in seconds.
+#
+# Possible values:
+#
+# * Time in seconds (Default: 5).
+#
+# Related options:
+#
+# * This option is meaningful when the mounted_disk_query_retry_count
+#   is greater than 1.
+# * The retry loop runs with mounted_disk_query_retry_count and
+#   mounted_disk_query_retry_interval configuration options.
+#  (integer value)
+# Minimum value: 0
+#mounted_disk_query_retry_interval=5
+
+#
+# Power state check timeframe
+#
+# The timeframe to be checked for instance power state changes.
+# This option is used to fetch the state of the instance from Hyper-V
+# through the WMI interface, within the specified timeframe.
+#
+# Possible values:
+#
+# * Timeframe in seconds (Default: 60).
+#  (integer value)
+# Minimum value: 0
+#power_state_check_timeframe=60
+
+#
+# Power state event polling interval
+#
+# Instance power state change event polling frequency. Sets the
+# listener interval for power state events to the given value.
+# This option enhances the internal lifecycle notifications of
+# instances that reboot themselves. It is unlikely that an operator
+# has to change this value.
+#
+# Possible values:
+#
+# * Time in seconds (Default: 2).
+#  (integer value)
+# Minimum value: 0
+#power_state_event_polling_interval=2
+
+#
+# qemu-img command
+#
+# qemu-img is required for some of the image related operations
+# like converting between different image types. You can get it
+# from here: (http://qemu.weilnetz.de/) or you can install the
+# Cloudbase OpenStack Hyper-V Compute Driver
+# (https://cloudbase.it/openstack-hyperv-driver/) which automatically
+# sets the proper path for this config option. You can either give the
+# full path of qemu-img.exe or set its path in the PATH environment
+# variable and leave this option to the default value.
+#
+# Possible values:
+#
+# * Name of the qemu-img executable, in case it is in the same
+#   directory as the nova-compute service or its path is in the
+#   PATH environment variable (Default).
+# * Path of qemu-img command (DRIVELETTER:\PATH\TO\QEMU-IMG\COMMAND).
+#
+# Related options:
+#
+# * If the config_drive_cdrom option is False, qemu-img will be used to
+#   convert the ISO to a VHD, otherwise the configuration drive will
+#   remain an ISO. To use configuration drive with Hyper-V, you must
+#   set the mkisofs_cmd value to the full path to an mkisofs.exe
+#   installation.
+#  (string value)
+#qemu_img_cmd=qemu-img.exe
+
+#
+# External virtual switch name
+#
+# The Hyper-V Virtual Switch is a software-based layer-2 Ethernet
+# network switch that is available with the installation of the
+# Hyper-V server role. The switch includes programmatically managed
+# and extensible capabilities to connect virtual machines to both
+# virtual networks and the physical network. In addition, Hyper-V
+# Virtual Switch provides policy enforcement for security, isolation,
+# and service levels. The vSwitch represented by this config option
+# must be an external one (not internal or private).
+#
+# Possible values:
+#
+# * If not provided, the first of a list of available vswitches
+#   is used. This list is queried using WQL.
+# * Virtual switch name.
+#  (string value)
+#vswitch_name=<None>
+
+#
+# Wait soft reboot seconds
+#
+# Number of seconds to wait for instance to shut down after soft
+# reboot request is made. We fall back to hard reboot if instance
+# does not shutdown within this window.
+#
+# Possible values:
+#
+# * Time in seconds (Default: 60).
+#  (integer value)
+# Minimum value: 0
+#wait_soft_reboot_seconds=60
+
+#
+# Configuration drive cdrom
+#
+# OpenStack can be configured to write instance metadata to
+# a configuration drive, which is then attached to the
+# instance before it boots. The configuration drive can be
+# attached as a disk drive (default) or as a CD drive.
+#
+# Possible values:
+#
+# * True: Attach the configuration drive image as a CD drive.
+# * False: Attach the configuration drive image as a disk drive (Default).
+#
+# Related options:
+#
+# * This option is meaningful with force_config_drive option set to 'True'
+#   or when the REST API call to create an instance will have
+#   '--config-drive=True' flag.
+# * config_drive_format option must be set to 'iso9660' in order to use
+#   CD drive as the configuration drive image.
+# * To use configuration drive with Hyper-V, you must set the
+#   mkisofs_cmd value to the full path to an mkisofs.exe installation.
+#   Additionally, you must set the qemu_img_cmd value to the full path
+#   to an qemu-img command installation.
+# * You can configure the Compute service to always create a configuration
+#   drive by setting the force_config_drive option to 'True'.
+#  (boolean value)
+#config_drive_cdrom=false
+
+#
+# Configuration drive inject password
+#
+# Enables setting the admin password in the configuration drive image.
+#
+# Related options:
+#
+# * This option is meaningful when used with other options that enable
+#   configuration drive usage with Hyper-V, such as force_config_drive.
+# * Currently, the only accepted config_drive_format is 'iso9660'.
+#  (boolean value)
+#config_drive_inject_password=false
+
+#
+# Volume attach retry count
+#
+# The number of times to retry attaching a volume. Volume attachment
+# is retried until success or the given retry count is reached.
+#
+# Possible values:
+#
+# * Positive integer values (Default: 10).
+#
+# Related options:
+#
+# * Time interval between attachment attempts is declared with
+#   volume_attach_retry_interval option.
+#  (integer value)
+# Minimum value: 0
+#volume_attach_retry_count=10
+
+#
+# Volume attach retry interval
+#
+# Interval between volume attachment attempts, in seconds.
+#
+# Possible values:
+#
+# * Time in seconds (Default: 5).
+#
+# Related options:
+#
+# * This options is meaningful when volume_attach_retry_count
+#   is greater than 1.
+# * The retry loop runs with volume_attach_retry_count and
+#   volume_attach_retry_interval configuration options.
+#  (integer value)
+# Minimum value: 0
+#volume_attach_retry_interval=5
+
+#
+# Enable RemoteFX feature
+#
+# This requires at least one DirectX 11 capable graphics adapter for
+# Windows / Hyper-V Server 2012 R2 or newer and RDS-Virtualization
+# feature has to be enabled.
+#
+# Instances with RemoteFX can be requested with the following flavor
+# extra specs:
+#
+# **os:resolution**. Guest VM screen resolution size. Acceptable values::
+#
+#     1024x768, 1280x1024, 1600x1200, 1920x1200, 2560x1600, 3840x2160
+#
+# ``3840x2160`` is only available on Windows / Hyper-V Server 2016.
+#
+# **os:monitors**. Guest VM number of monitors. Acceptable values::
+#
+#     [1, 4] - Windows / Hyper-V Server 2012 R2
+#     [1, 8] - Windows / Hyper-V Server 2016
+#
+# **os:vram**. Guest VM VRAM amount. Only available on
+# Windows / Hyper-V Server 2016. Acceptable values::
+#
+#     64, 128, 256, 512, 1024
+#  (boolean value)
+#enable_remotefx=false
+
+#
+# Use multipath connections when attaching iSCSI or FC disks.
+#
+# This requires the Multipath IO Windows feature to be enabled. MPIO must be
+# configured to claim such devices.
+#  (boolean value)
+#use_multipath_io=false
+
+#
+# List of iSCSI initiators that will be used for estabilishing iSCSI sessions.
+#
+# If none are specified, the Microsoft iSCSI initiator service will choose the
+# initiator.
+#  (list value)
+#iscsi_initiator_list =
+
+
+[image_file_url]
+
+#
+# From nova.conf
+#
+
+# DEPRECATED:
+# List of file systems that are configured in this file in the
+# image_file_url:<list entry name> sections
+#  (list value)
+# This option is deprecated for removal since 14.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# The feature to download images from glance via filesystem is not used and will
+# be removed in the future.
+#filesystems =
+
+
+
+
+
+[key_manager]
+
+#
+# From nova.conf
+#
+
+#
+# Fixed key returned by key manager, specified in hex.
+#
+# Possible values:
+#
+# * Empty string or a key in hex value
+#  (string value)
+# Deprecated group/name - [keymgr]/fixed_key
+#fixed_key=<None>
+
+# The full class name of the key manager API class (string value)
+
+# The type of authentication credential to create. Possible values are 'token',
+# 'password', 'keystone_token', and 'keystone_password'. Required if no context
+# is passed to the credential factory. (string value)
+#auth_type=<None>
+
+# Token for authentication. Required for 'token' and 'keystone_token' auth_type
+# if no context is passed to the credential factory. (string value)
+#token=<None>
+
+# Username for authentication. Required for 'password' auth_type. Optional for
+# the 'keystone_password' auth_type. (string value)
+#username=<None>
+
+# Password for authentication. Required for 'password' and 'keystone_password'
+# auth_type. (string value)
+#password=<None>
+
+# User ID for authentication. Optional for 'keystone_token' and
+# 'keystone_password' auth_type. (string value)
+#user_id=<None>
+
+# User's domain ID for authentication. Optional for 'keystone_token' and
+# 'keystone_password' auth_type. (string value)
+#user_domain_id=<None>
+
+# User's domain name for authentication. Optional for 'keystone_token' and
+# 'keystone_password' auth_type. (string value)
+#user_domain_name=<None>
+
+# Trust ID for trust scoping. Optional for 'keystone_token' and
+# 'keystone_password' auth_type. (string value)
+#trust_id=<None>
+
+# Domain ID for domain scoping. Optional for 'keystone_token' and
+# 'keystone_password' auth_type. (string value)
+#domain_id=<None>
+
+# Domain name for domain scoping. Optional for 'keystone_token' and
+# 'keystone_password' auth_type. (string value)
+#domain_name=<None>
+
+# Project ID for project scoping. Optional for 'keystone_token' and
+# 'keystone_password' auth_type. (string value)
+#project_id=<None>
+
+# Project name for project scoping. Optional for 'keystone_token' and
+# 'keystone_password' auth_type. (string value)
+#project_name=<None>
+
+# Project's domain ID for project. Optional for 'keystone_token' and
+# 'keystone_password' auth_type. (string value)
+#project_domain_id=<None>
+
+# Project's domain name for project. Optional for 'keystone_token' and
+# 'keystone_password' auth_type. (string value)
+#project_domain_name=<None>
+
+# Allow fetching a new token if the current one is going to expire. Optional for
+# 'keystone_token' and 'keystone_password' auth_type. (boolean value)
+#reauthenticate=true
+
+
 [keystone_authtoken]
 
 #
 # From keystonemiddleware.auth_token
 #
-
+revocation_cache_time = 10
+signing_dir=/tmp/keystone-signing-nova
+auth_type = password
+user_domain_id = default
+project_domain_id = default
+project_name = service
+username = nova
+password = opnfv_secret
+auth_uri=http://192.168.10.35:5000
+auth_url=http://192.168.10.35:35357
+memcached_servers=192.168.10.36:11211,192.168.10.37:11211,192.168.10.38:11211
 # Complete "public" Identity API endpoint. This endpoint should not be an
 # "admin" endpoint, as it should be accessible by all end users. Unauthenticated
 # clients are redirected to this endpoint to authenticate. Although this
-# endpoint should ideally be unversioned, client support in the wild varies. If
-# you're using a versioned v2 endpoint here, then this should *not* be the same
-# endpoint the service user utilizes for validating tokens, because normal end
-# users may not be able to reach that endpoint. (string value)
-#auth_uri = <None>
+# endpoint should  ideally be unversioned, client support in the wild varies.
+# If you're using a versioned v2 endpoint here, then this  should *not* be the
+# same endpoint the service user utilizes  for validating tokens, because normal
+# end users may not be  able to reach that endpoint. (string value)
+#auth_uri=<None>
 
 # API version of the admin Identity API endpoint. (string value)
-#auth_version = <None>
+#auth_version=<None>
 
 # Do not handle authorization requests within the middleware, but delegate the
 # authorization decision to downstream WSGI components. (boolean value)
-#delay_auth_decision = false
+#delay_auth_decision=false
 
 # Request timeout value for communicating with Identity API server. (integer
 # value)
-#http_connect_timeout = <None>
+#http_connect_timeout=<None>
 
 # How many times are we trying to reconnect when communicating with Identity API
 # Server. (integer value)
-#http_request_max_retries = 3
+#http_request_max_retries=3
 
 # Request environment key where the Swift cache object is stored. When
 # auth_token middleware is deployed with a Swift cache, use this option to have
 # the middleware share a caching backend with swift. Otherwise, use the
 # ``memcached_servers`` option instead. (string value)
-#cache = <None>
+#cache=<None>
 
 # Required if identity server requires client certificate (string value)
-#certfile = <None>
+#certfile=<None>
 
 # Required if identity server requires client certificate (string value)
-#keyfile = <None>
+#keyfile=<None>
 
 # A PEM encoded Certificate Authority to use when verifying HTTPs connections.
 # Defaults to system CAs. (string value)
-#cafile = <None>
+#cafile=<None>
 
 # Verify HTTPS connections. (boolean value)
-#insecure = false
+#insecure=false
 
 # The region in which the identity server can be found. (string value)
-#region_name = <None>
+#region_name=<None>
 
 # DEPRECATED: Directory used to cache files related to PKI tokens. This option
 # has been deprecated in the Ocata release and will be removed in the P release.
@@ -543,17 +5612,17 @@
 # This option is deprecated for removal since Ocata.
 # Its value may be silently ignored in the future.
 # Reason: PKI token format is no longer supported.
-#signing_dir = <None>
+#signing_dir=<None>
 
 # Optionally specify a list of memcached server(s) to use for caching. If left
 # undefined, tokens will instead be cached in-process. (list value)
 # Deprecated group/name - [keystone_authtoken]/memcache_servers
-#memcached_servers = <None>
+#memcached_servers=<None>
 
 # In order to prevent excessive effort spent validating tokens, the middleware
 # caches previously-seen tokens for a configurable duration (in seconds). Set to
 # -1 to disable caching completely. (integer value)
-#token_cache_time = 300
+#token_cache_time=300
 
 # DEPRECATED: Determines the frequency at which the list of revoked tokens is
 # retrieved from the Identity service (in seconds). A high number of revocation
@@ -563,7 +5632,7 @@
 # This option is deprecated for removal since Ocata.
 # Its value may be silently ignored in the future.
 # Reason: PKI token format is no longer supported.
-#revocation_cache_time = 10
+#revocation_cache_time=10
 
 # (Optional) If defined, indicate whether token data should be authenticated or
 # authenticated and encrypted. If MAC, token data is authenticated (with HMAC)
@@ -571,40 +5640,40 @@
 # cache. If the value is not one of these options or empty, auth_token will
 # raise an exception on initialization. (string value)
 # Allowed values: None, MAC, ENCRYPT
-#memcache_security_strategy = None
+#memcache_security_strategy=None
 
 # (Optional, mandatory if memcache_security_strategy is defined) This string is
 # used for key derivation. (string value)
-#memcache_secret_key = <None>
+#memcache_secret_key=<None>
 
 # (Optional) Number of seconds memcached server is considered dead before it is
 # tried again. (integer value)
-#memcache_pool_dead_retry = 300
+#memcache_pool_dead_retry=300
 
 # (Optional) Maximum total number of open connections to every memcached server.
 # (integer value)
-#memcache_pool_maxsize = 10
+#memcache_pool_maxsize=10
 
 # (Optional) Socket timeout in seconds for communicating with a memcached
 # server. (integer value)
-#memcache_pool_socket_timeout = 3
+#memcache_pool_socket_timeout=3
 
 # (Optional) Number of seconds a connection to memcached is held unused in the
 # pool before it is closed. (integer value)
-#memcache_pool_unused_timeout = 60
+#memcache_pool_unused_timeout=60
 
 # (Optional) Number of seconds that an operation will wait to get a memcached
 # client connection from the pool. (integer value)
-#memcache_pool_conn_get_timeout = 10
+#memcache_pool_conn_get_timeout=10
 
 # (Optional) Use the advanced (eventlet safe) memcached client pool. The
 # advanced pool will only work under python 2.x. (boolean value)
-#memcache_use_advanced_pool = false
+#memcache_use_advanced_pool=false
 
 # (Optional) Indicate whether to set the X-Service-Catalog header. If False,
 # middleware will not ask for service catalog on token validation and will not
 # set the X-Service-Catalog header. (boolean value)
-#include_service_catalog = true
+#include_service_catalog=true
 
 # Used to control the use and type of token binding. Can be set to: "disabled"
 # to not check token binding. "permissive" (default) to validate binding
@@ -613,7 +5682,7 @@
 # be rejected. "required" any form of token binding is needed to be allowed.
 # Finally the name of a binding method that must be present in tokens. (string
 # value)
-#enforce_token_bind = permissive
+#enforce_token_bind=permissive
 
 # DEPRECATED: If true, the revocation list will be checked for cached tokens.
 # This requires that PKI tokens are configured on the identity server. (boolean
@@ -621,7 +5690,7 @@
 # This option is deprecated for removal since Ocata.
 # Its value may be silently ignored in the future.
 # Reason: PKI token format is no longer supported.
-#check_revocations_for_cached = false
+#check_revocations_for_cached=false
 
 # DEPRECATED: Hash algorithms to use for hashing PKI tokens. This may be a
 # single algorithm or multiple. The algorithms are those supported by Python
@@ -634,7 +5703,7 @@
 # This option is deprecated for removal since Ocata.
 # Its value may be silently ignored in the future.
 # Reason: PKI token format is no longer supported.
-#hash_algorithms = md5
+#hash_algorithms=md5
 
 # A choice of roles that must be present in a service token. Service tokens are
 # allowed to request that an expired token can be used and so this check should
@@ -642,13 +5711,13 @@
 # here are applied as an ANY check so any role in this list must be present. For
 # backwards compatibility reasons this currently only affects the allow_expired
 # check. (list value)
-#service_token_roles = service
+#service_token_roles=service
 
 # For backwards compatibility reasons we must let valid service tokens pass that
 # don't pass the service_token_roles check as valid. Setting this true will
 # become the default in a future release and should be enabled if possible.
 # (boolean value)
-#service_token_roles_required = false
+#service_token_roles_required=false
 
 # Prefix to prepend at the beginning of the path. Deprecated, use identity_uri.
 # (string value)
@@ -656,43 +5725,1001 @@
 
 # Host providing the admin Identity API endpoint. Deprecated, use identity_uri.
 # (string value)
-#auth_host = 127.0.0.1
+#auth_host=127.0.0.1
 
 # Port of the admin Identity API endpoint. Deprecated, use identity_uri.
 # (integer value)
-#auth_port = 35357
+#auth_port=35357
 
 # Protocol of the admin Identity API endpoint. Deprecated, use identity_uri.
 # (string value)
 # Allowed values: http, https
-#auth_protocol = https
+#auth_protocol=https
 
 # Complete admin Identity API endpoint. This should specify the unversioned root
 # endpoint e.g. https://localhost:35357/ (string value)
-#identity_uri = <None>
+#identity_uri=<None>
 
 # This option is deprecated and may be removed in a future release. Single
 # shared secret with the Keystone configuration used for bootstrapping a
 # Keystone installation, or otherwise bypassing the normal authentication
 # process. This option should not be used, use `admin_user` and `admin_password`
 # instead. (string value)
-#admin_token = <None>
+#admin_token=<None>
 
 # Service username. (string value)
-#admin_user = <None>
+#admin_user=<None>
 
 # Service user password. (string value)
-#admin_password = <None>
+#admin_password=<None>
 
 # Service tenant name. (string value)
-#admin_tenant_name = admin
+#admin_tenant_name=admin
 
 # Authentication type to load (string value)
 # Deprecated group/name - [keystone_authtoken]/auth_plugin
-#auth_type = <None>
+#auth_type=<None>
 
 # Config Section from which to load plugin specific options (string value)
-#auth_section = <None>
+#auth_section=<None>
+
+
+[libvirt]
+#
+# Libvirt options allows cloud administrator to configure related
+# libvirt hypervisor driver to be used within an OpenStack deployment.
+#
+# Almost all of the libvirt config options are influence by ``virt_type`` config
+# which describes the virtualization type (or so called domain type) libvirt
+# should use for specific features such as live migration, snapshot.
+
+#
+# From nova.conf
+#
+
+#
+# The ID of the image to boot from to rescue data from a corrupted instance.
+#
+# If the rescue REST API operation doesn't provide an ID of an image to
+# use, the image which is referenced by this ID is used. If this
+# option is not set, the image from the instance is used.
+#
+# Possible values:
+#
+# * An ID of an image or nothing. If it points to an *Amazon Machine
+#   Image* (AMI), consider to set the config options ``rescue_kernel_id``
+#   and ``rescue_ramdisk_id`` too. If nothing is set, the image of the instance
+#   is used.
+#
+# Related options:
+#
+# * ``rescue_kernel_id``: If the chosen rescue image allows the separate
+#   definition of its kernel disk, the value of this option is used,
+#   if specified. This is the case when *Amazon*'s AMI/AKI/ARI image
+#   format is used for the rescue image.
+# * ``rescue_ramdisk_id``: If the chosen rescue image allows the separate
+#   definition of its RAM disk, the value of this option is used if,
+#   specified. This is the case when *Amazon*'s AMI/AKI/ARI image
+#   format is used for the rescue image.
+#  (string value)
+#rescue_image_id=<None>
+
+#
+# The ID of the kernel (AKI) image to use with the rescue image.
+#
+# If the chosen rescue image allows the separate definition of its kernel
+# disk, the value of this option is used, if specified. This is the case
+# when *Amazon*'s AMI/AKI/ARI image format is used for the rescue image.
+#
+# Possible values:
+#
+# * An ID of an kernel image or nothing. If nothing is specified, the kernel
+#   disk from the instance is used if it was launched with one.
+#
+# Related options:
+#
+# * ``rescue_image_id``: If that option points to an image in *Amazon*'s
+#   AMI/AKI/ARI image format, it's useful to use ``rescue_kernel_id`` too.
+#  (string value)
+#rescue_kernel_id=<None>
+
+#
+# The ID of the RAM disk (ARI) image to use with the rescue image.
+#
+# If the chosen rescue image allows the separate definition of its RAM
+# disk, the value of this option is used, if specified. This is the case
+# when *Amazon*'s AMI/AKI/ARI image format is used for the rescue image.
+#
+# Possible values:
+#
+# * An ID of a RAM disk image or nothing. If nothing is specified, the RAM
+#   disk from the instance is used if it was launched with one.
+#
+# Related options:
+#
+# * ``rescue_image_id``: If that option points to an image in *Amazon*'s
+#   AMI/AKI/ARI image format, it's useful to use ``rescue_ramdisk_id`` too.
+#  (string value)
+#rescue_ramdisk_id=<None>
+
+#
+# Describes the virtualization type (or so called domain type) libvirt should
+# use.
+#
+# The choice of this type must match the underlying virtualization strategy
+# you have chosen for this host.
+#
+# Possible values:
+#
+# * See the predefined set of case-sensitive values.
+#
+# Related options:
+#
+# * ``connection_uri``: depends on this
+# * ``disk_prefix``: depends on this
+# * ``cpu_mode``: depends on this
+# * ``cpu_model``: depends on this
+#  (string value)
+# Allowed values: kvm, lxc, qemu, uml, xen, parallels
+#virt_type=kvm
+virt_type=kvm
+
+#
+# Overrides the default libvirt URI of the chosen virtualization type.
+#
+# If set, Nova will use this URI to connect to libvirt.
+#
+# Possible values:
+#
+# * An URI like ``qemu:///system`` or ``xen+ssh://oirase/`` for example.
+#   This is only necessary if the URI differs to the commonly known URIs
+#   for the chosen virtualization type.
+#
+# Related options:
+#
+# * ``virt_type``: Influences what is used as default value here.
+#  (string value)
+#connection_uri =
+
+#
+# Allow the injection of an admin password for instance only at ``create`` and
+# ``rebuild`` process.
+#
+# There is no agent needed within the image to do this. If *libguestfs* is
+# available on the host, it will be used. Otherwise *nbd* is used. The file
+# system of the image will be mounted and the admin password, which is provided
+# in the REST API call will be injected as password for the root user. If no
+# root user is available, the instance won't be launched and an error is thrown.
+# Be aware that the injection is *not* possible when the instance gets launched
+# from a volume.
+#
+# Possible values:
+#
+# * True: Allows the injection.
+# * False (default): Disallows the injection. Any via the REST API provided
+# admin password will be silently ignored.
+#
+# Related options:
+#
+# * ``inject_partition``: That option will decide about the discovery and usage
+#   of the file system. It also can disable the injection at all.
+#  (boolean value)
+#inject_password=false
+
+#
+# Allow the injection of an SSH key at boot time.
+#
+# There is no agent needed within the image to do this. If *libguestfs* is
+# available on the host, it will be used. Otherwise *nbd* is used. The file
+# system of the image will be mounted and the SSH key, which is provided
+# in the REST API call will be injected as SSH key for the root user and
+# appended to the ``authorized_keys`` of that user. The SELinux context will
+# be set if necessary. Be aware that the injection is *not* possible when the
+# instance gets launched from a volume.
+#
+# This config option will enable directly modifying the instance disk and does
+# not affect what cloud-init may do using data from config_drive option or the
+# metadata service.
+#
+# Related options:
+#
+# * ``inject_partition``: That option will decide about the discovery and usage
+#   of the file system. It also can disable the injection at all.
+#  (boolean value)
+#inject_key=false
+
+#
+# Determines the way how the file system is chosen to inject data into it.
+#
+# *libguestfs* will be used a first solution to inject data. If that's not
+# available on the host, the image will be locally mounted on the host as a
+# fallback solution. If libguestfs is not able to determine the root partition
+# (because there are more or less than one root partition) or cannot mount the
+# file system it will result in an error and the instance won't be boot.
+#
+# Possible values:
+#
+# * -2 => disable the injection of data.
+# * -1 => find the root partition with the file system to mount with libguestfs
+# *  0 => The image is not partitioned
+# * >0 => The number of the partition to use for the injection
+#
+# Related options:
+#
+# * ``inject_key``: If this option allows the injection of a SSH key it depends
+#   on value greater or equal to -1 for ``inject_partition``.
+# * ``inject_password``: If this option allows the injection of an admin
+# password
+#   it depends on value greater or equal to -1 for ``inject_partition``.
+# * ``guestfs`` You can enable the debug log level of libguestfs with this
+#   config option. A more verbose output will help in debugging issues.
+# * ``virt_type``: If you use ``lxc`` as virt_type it will be treated as a
+#   single partition image
+#  (integer value)
+# Minimum value: -2
+#inject_partition=-2
+inject_partition = -1
+
+# DEPRECATED:
+# Enable a mouse cursor within a graphical VNC or SPICE sessions.
+#
+# This will only be taken into account if the VM is fully virtualized and VNC
+# and/or SPICE is enabled. If the node doesn't support a graphical framebuffer,
+# then it is valid to set this to False.
+#
+# Related options:
+# * ``[vnc]enabled``: If VNC is enabled, ``use_usb_tablet`` will have an effect.
+# * ``[spice]enabled`` + ``[spice].agent_enabled``: If SPICE is enabled and the
+#   spice agent is disabled, the config value of ``use_usb_tablet`` will have
+#   an effect.
+#  (boolean value)
+# This option is deprecated for removal since 14.0.0.
+# Its value may be silently ignored in the future.
+# Reason: This option is being replaced by the 'pointer_model' option.
+#use_usb_tablet=true
+use_usb_tablet=true
+
+#
+# The IP address or hostname to be used as the target for live migration
+# traffic.
+#
+# If this option is set to None, the hostname of the migration target compute
+# node will be used.
+#
+# This option is useful in environments where the live-migration traffic can
+# impact the network plane significantly. A separate network for live-migration
+# traffic can then use this config option and avoids the impact on the
+# management network.
+#
+# Possible values:
+#
+# * A valid IP address or hostname, else None.
+#  (string value)
+#live_migration_inbound_addr=<None>
+
+# DEPRECATED:
+# Live migration target URI to use.
+#
+# Override the default libvirt live migration target URI (which is dependent
+# on virt_type). Any included "%s" is replaced with the migration target
+# hostname.
+#
+# If this option is set to None (which is the default), Nova will automatically
+# generate the `live_migration_uri` value based on only 3 supported `virt_type`
+# in following list:
+# * 'kvm': 'qemu+tcp://%s/system'
+# * 'qemu': 'qemu+tcp://%s/system'
+# * 'xen': 'xenmigr://%s/system'
+#
+# Related options:
+# * ``live_migration_inbound_addr``: If ``live_migration_inbound_addr`` value
+#   is not None, the ip/hostname address of target compute node is used instead
+#   of ``live_migration_uri`` as the uri for live migration.
+# * ``live_migration_scheme``: If ``live_migration_uri`` is not set, the scheme
+#   used for live migration is taken from ``live_migration_scheme`` instead.
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# live_migration_uri is deprecated for removal in favor of two other options
+# that
+# allow to change live migration scheme and target URI:
+# ``live_migration_scheme``
+# and ``live_migration_inbound_addr`` respectively.
+#live_migration_uri=<None>
+
+#
+# Schema used for live migration.
+#
+# Override the default libvirt live migration scheme (which is dependant on
+# virt_type). If this option is set to None, nova will automatically choose a
+# sensible default based on the hypervisor. It is not recommended that you
+# change
+# this unless you are very sure that hypervisor supports a particular scheme.
+#
+# Related options:
+# * ``virt_type``: This option is meaningful only when ``virt_type`` is set to
+#   `kvm` or `qemu`.
+# * ``live_migration_uri``: If ``live_migration_uri`` value is not None, the
+#   scheme used for live migration is taken from ``live_migration_uri`` instead.
+#  (string value)
+#live_migration_scheme=<None>
+
+#
+# Enable tunnelled migration.
+#
+# This option enables the tunnelled migration feature, where migration data is
+# transported over the libvirtd connection. If enabled, we use the
+# VIR_MIGRATE_TUNNELLED migration flag, avoiding the need to configure
+# the network to allow direct hypervisor to hypervisor communication.
+# If False, use the native transport. If not set, Nova will choose a
+# sensible default based on, for example the availability of native
+# encryption support in the hypervisor. Enable this option will definitely
+# impact performance massively.
+#
+# Note that this option is NOT compatible with use of block migration.
+#
+# Possible values:
+#
+# * Supersedes and (if set) overrides the deprecated 'live_migration_flag' and
+#   'block_migration_flag' to enable tunneled migration.
+#  (boolean value)
+#live_migration_tunnelled=false
+
+#
+# Maximum bandwidth(in MiB/s) to be used during migration.
+#
+# If set to 0, the hypervisor will choose a suitable default. Some hypervisors
+# do not support this feature and will return an error if bandwidth is not 0.
+# Please refer to the libvirt documentation for further details.
+#  (integer value)
+#live_migration_bandwidth=0
+
+#
+# Maximum permitted downtime, in milliseconds, for live migration
+# switchover.
+#
+# Will be rounded up to a minimum of 100ms. You can increase this value
+# if you want to allow live-migrations to complete faster, or avoid
+# live-migration timeout errors by allowing the guest to be paused for
+# longer during the live-migration switch over.
+#
+# Related options:
+#
+# * live_migration_completion_timeout
+#  (integer value)
+#live_migration_downtime=500
+
+#
+# Number of incremental steps to reach max downtime value.
+#
+# Will be rounded up to a minimum of 3 steps.
+#  (integer value)
+#live_migration_downtime_steps=10
+
+#
+# Time to wait, in seconds, between each step increase of the migration
+# downtime.
+#
+# Minimum delay is 10 seconds. Value is per GiB of guest RAM + disk to be
+# transferred, with lower bound of a minimum of 2 GiB per device.
+#  (integer value)
+#live_migration_downtime_delay=75
+
+#
+# Time to wait, in seconds, for migration to successfully complete transferring
+# data before aborting the operation.
+#
+# Value is per GiB of guest RAM + disk to be transferred, with lower bound of
+# a minimum of 2 GiB. Should usually be larger than downtime delay * downtime
+# steps. Set to 0 to disable timeouts.
+#
+# Related options:
+#
+# * live_migration_downtime
+# * live_migration_downtime_steps
+# * live_migration_downtime_delay
+#  (integer value)
+# Note: This option can be changed without restarting.
+#live_migration_completion_timeout=800
+
+# DEPRECATED:
+# Time to wait, in seconds, for migration to make forward progress in
+# transferring data before aborting the operation.
+#
+# Set to 0 to disable timeouts.
+#
+# This is deprecated, and now disabled by default because we have found serious
+# bugs in this feature that caused false live-migration timeout failures. This
+# feature will be removed or replaced in a future release.
+#  (integer value)
+# Note: This option can be changed without restarting.
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Serious bugs found in this feature.
+#live_migration_progress_timeout=0
+
+#
+# This option allows nova to switch an on-going live migration to post-copy
+# mode, i.e., switch the active VM to the one on the destination node before the
+# migration is complete, therefore ensuring an upper bound on the memory that
+# needs to be transferred. Post-copy requires libvirt>=1.3.3 and QEMU>=2.5.0.
+#
+# When permitted, post-copy mode will be automatically activated if a
+# live-migration memory copy iteration does not make percentage increase of at
+# least 10% over the last iteration.
+#
+# The live-migration force complete API also uses post-copy when permitted. If
+# post-copy mode is not available, force complete falls back to pausing the VM
+# to ensure the live-migration operation will complete.
+#
+# When using post-copy mode, if the source and destination hosts loose network
+# connectivity, the VM being live-migrated will need to be rebooted. For more
+# details, please see the Administration guide.
+#
+# Related options:
+#
+#     * live_migration_permit_auto_converge
+#  (boolean value)
+#live_migration_permit_post_copy=false
+
+#
+# This option allows nova to start live migration with auto converge on.
+#
+# Auto converge throttles down CPU if a progress of on-going live migration
+# is slow. Auto converge will only be used if this flag is set to True and
+# post copy is not permitted or post copy is unavailable due to the version
+# of libvirt and QEMU in use. Auto converge requires libvirt>=1.2.3 and
+# QEMU>=1.6.0.
+#
+# Related options:
+#
+#     * live_migration_permit_post_copy
+#  (boolean value)
+#live_migration_permit_auto_converge=false
+
+#
+# Determine the snapshot image format when sending to the image service.
+#
+# If set, this decides what format is used when sending the snapshot to the
+# image service.
+# If not set, defaults to same type as source image.
+#
+# Possible values:
+#
+# * ``raw``: RAW disk format
+# * ``qcow2``: KVM default disk format
+# * ``vmdk``: VMWare default disk format
+# * ``vdi``: VirtualBox default disk format
+# * If not set, defaults to same type as source image.
+#  (string value)
+# Allowed values: raw, qcow2, vmdk, vdi
+#snapshot_image_format=<None>
+
+#
+# Override the default disk prefix for the devices attached to an instance.
+#
+# If set, this is used to identify a free disk device name for a bus.
+#
+# Possible values:
+#
+# * Any prefix which will result in a valid disk device name like 'sda' or 'hda'
+#   for example. This is only necessary if the device names differ to the
+#   commonly known device name prefixes for a virtualization type such as: sd,
+#   xvd, uvd, vd.
+#
+# Related options:
+#
+# * ``virt_type``: Influences which device type is used, which determines
+#   the default disk prefix.
+#  (string value)
+#disk_prefix=<None>
+
+# Number of seconds to wait for instance to shut down after soft reboot request
+# is made. We fall back to hard reboot if instance does not shutdown within this
+# window. (integer value)
+#wait_soft_reboot_seconds=120
+
+#
+# Is used to set the CPU mode an instance should have.
+#
+# If virt_type="kvm|qemu", it will default to "host-model", otherwise it will
+# default to "none".
+#
+# Possible values:
+#
+# * ``host-model``: Clones the host CPU feature flags.
+# * ``host-passthrough``: Use the host CPU model exactly;
+# * ``custom``: Use a named CPU model;
+# * ``none``: Not set any CPU model.
+#
+# Related options:
+#
+# * ``cpu_model``: If ``custom`` is used for ``cpu_mode``, set this config
+#   option too, otherwise this would result in an error and the instance won't
+#   be launched.
+#  (string value)
+# Allowed values: host-model, host-passthrough, custom, none
+#cpu_mode=<None>
+cpu_mode=host-passthrough
+
+#
+# Set the name of the libvirt CPU model the instance should use.
+#
+# Possible values:
+#
+# * The names listed in /usr/share/libvirt/cpu_map.xml
+#
+# Related options:
+#
+# * ``cpu_mode``: Don't set this when ``cpu_mode`` is NOT set to ``custom``.
+#   This would result in an error and the instance won't be launched.
+# * ``virt_type``: Only the virtualization types ``kvm`` and ``qemu`` use this.
+#  (string value)
+#cpu_model=<None>
+
+# Location where libvirt driver will store snapshots before uploading them to
+# image service (string value)
+#snapshots_directory=$instances_path/snapshots
+
+# Location where the Xen hvmloader is kept (string value)
+#xen_hvmloader_path=/usr/lib/xen/boot/hvmloader
+
+# Specific cachemodes to use for different disk types e.g:
+# file=directsync,block=none (list value)
+#disk_cachemodes =
+
+# A path to a device that will be used as source of entropy on the host.
+# Permitted options are: /dev/random or /dev/hwrng (string value)
+#rng_dev_path=<None>
+
+# For qemu or KVM guests, set this option to specify a default machine type per
+# host architecture. You can find a list of supported machine types in your
+# environment by checking the output of the "virsh capabilities"command. The
+# format of the value for this config option is host-arch=machine-type. For
+# example: x86_64=machinetype1,armv7l=machinetype2 (list value)
+#hw_machine_type=<None>
+
+# The data source used to the populate the host "serial" UUID exposed to guest
+# in the virtual BIOS. (string value)
+# Allowed values: none, os, hardware, auto
+#sysinfo_serial=auto
+
+# A number of seconds to memory usage statistics period. Zero or negative value
+# mean to disable memory usage statistics. (integer value)
+#mem_stats_period_seconds=10
+
+# List of uid targets and ranges.Syntax is guest-uid:host-uid:countMaximum of 5
+# allowed. (list value)
+#uid_maps =
+
+# List of guid targets and ranges.Syntax is guest-gid:host-gid:countMaximum of 5
+# allowed. (list value)
+#gid_maps =
+
+# In a realtime host context vCPUs for guest will run in that scheduling
+# priority. Priority depends on the host kernel (usually 1-99) (integer value)
+#realtime_scheduler_priority=1
+
+#
+# This is a performance event list which could be used as monitor. These events
+# will be passed to libvirt domain xml while creating a new instances.
+# Then event statistics data can be collected from libvirt.  The minimum
+# libvirt version is 2.0.0. For more information about `Performance monitoring
+# events`, refer https://libvirt.org/formatdomain.html#elementsPerf .
+#
+# Possible values:
+# * A string list. For example: ``enabled_perf_events = cmt, mbml, mbmt``
+#   The supported events list can be found in
+#   https://libvirt.org/html/libvirt-libvirt-domain.html ,
+#   which you may need to search key words ``VIR_PERF_PARAM_*``
+#  (list value)
+#enabled_perf_events =
+
+#
+# VM Images format.
+#
+# If default is specified, then use_cow_images flag is used instead of this
+# one.
+#
+# Related options:
+#
+# * virt.use_cow_images
+# * images_volume_group
+#  (string value)
+# Allowed values: raw, flat, qcow2, lvm, rbd, ploop, default
+#images_type=default
+
+#
+# LVM Volume Group that is used for VM images, when you specify images_type=lvm
+#
+# Related options:
+#
+# * images_type
+#  (string value)
+#images_volume_group=<None>
+
+#
+# Create sparse logical volumes (with virtualsize) if this flag is set to True.
+#  (boolean value)
+#sparse_logical_volumes=false
+
+# The RADOS pool in which rbd volumes are stored (string value)
+#images_rbd_pool=rbd
+
+# Path to the ceph configuration file to use (string value)
+#images_rbd_ceph_conf =
+
+#
+# Discard option for nova managed disks.
+#
+# Requires:
+#
+# * Libvirt >= 1.0.6
+# * Qemu >= 1.5 (raw format)
+# * Qemu >= 1.6 (qcow2 format)
+#  (string value)
+# Allowed values: ignore, unmap
+#hw_disk_discard=<None>
+
+# DEPRECATED: Allows image information files to be stored in non-standard
+# locations (string value)
+# This option is deprecated for removal since 14.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Image info files are no longer used by the image cache
+#image_info_filename_pattern=$instances_path/$image_cache_subdirectory_name/%(image)s.info
+
+# Unused resized base images younger than this will not be removed (integer
+# value)
+#remove_unused_resized_minimum_age_seconds=3600
+
+# DEPRECATED: Write a checksum for files in _base to disk (boolean value)
+# This option is deprecated for removal since 14.0.0.
+# Its value may be silently ignored in the future.
+# Reason: The image cache no longer periodically calculates checksums of stored
+# images. Data integrity can be checked at the block or filesystem level.
+#checksum_base_images=false
+
+# DEPRECATED: How frequently to checksum base images (integer value)
+# This option is deprecated for removal since 14.0.0.
+# Its value may be silently ignored in the future.
+# Reason: The image cache no longer periodically calculates checksums of stored
+# images. Data integrity can be checked at the block or filesystem level.
+#checksum_interval_seconds=3600
+
+#
+# Method used to wipe ephemeral disks when they are deleted. Only takes effect
+# if LVM is set as backing storage.
+#
+# Possible values:
+#
+# * none - do not wipe deleted volumes
+# * zero - overwrite volumes with zeroes
+# * shred - overwrite volume repeatedly
+#
+# Related options:
+#
+# * images_type - must be set to ``lvm``
+# * volume_clear_size
+#  (string value)
+# Allowed values: none, zero, shred
+#volume_clear=zero
+
+#
+# Size of area in MiB, counting from the beginning of the allocated volume,
+# that will be cleared using method set in ``volume_clear`` option.
+#
+# Possible values:
+#
+# * 0 - clear whole volume
+# * >0 - clear specified amount of MiB
+#
+# Related options:
+#
+# * images_type - must be set to ``lvm``
+# * volume_clear - must be set and the value must be different than ``none``
+#   for this option to have any impact
+#  (integer value)
+# Minimum value: 0
+#volume_clear_size=0
+
+#
+# Enable snapshot compression for ``qcow2`` images.
+#
+# Note: you can set ``snapshot_image_format`` to ``qcow2`` to force all
+# snapshots to be in ``qcow2`` format, independently from their original image
+# type.
+#
+# Related options:
+#
+# * snapshot_image_format
+#  (boolean value)
+#snapshot_compression=false
+
+# Use virtio for bridge interfaces with KVM/QEMU (boolean value)
+#use_virtio_for_bridges=true
+use_virtio_for_bridges=true
+
+#
+# Protocols listed here will be accessed directly from QEMU.
+#
+# If gluster is present in qemu_allowed_storage_drivers, glusterfs's backend
+# will
+# pass a disk configuration to QEMU. This allows QEMU to access the volume using
+# libgfapi rather than mounting GlusterFS via fuse.
+#
+# Possible values:
+#
+# * [gluster]
+#  (list value)
+#qemu_allowed_storage_drivers =
+
+#
+# Use multipath connection of the iSCSI or FC volume
+#
+# Volumes can be connected in the LibVirt as multipath devices. This will
+# provide high availability and fault tolerance.
+#  (boolean value)
+# Deprecated group/name - [libvirt]/iscsi_use_multipath
+#volume_use_multipath=false
+
+#
+# Number of times to rediscover AoE target to find volume.
+#
+# Nova provides support for block storage attaching to hosts via AOE (ATA over
+# Ethernet). This option allows the user to specify the maximum number of retry
+# attempts that can be made to discover the AoE device.
+#  (integer value)
+#num_aoe_discover_tries=3
+
+#
+# Absolute path to the directory where the glusterfs volume is mounted on the
+# compute node.
+#  (string value)
+#glusterfs_mount_point_base=$state_path/mnt
+
+#
+# Number of times to scan iSCSI target to find volume.
+#  (integer value)
+#num_iscsi_scan_tries=5
+
+#
+# The iSCSI transport iface to use to connect to target in case offload support
+# is desired.
+#
+# Default format is of the form <transport_name>.<hwaddress> where
+# <transport_name> is one of (be2iscsi, bnx2i, cxgb3i, cxgb4i, qla4xxx, ocs) and
+# <hwaddress> is the MAC address of the interface and can be generated via the
+# iscsiadm -m iface command. Do not confuse the iscsi_iface parameter to be
+# provided here with the actual transport name.
+#  (string value)
+# Deprecated group/name - [libvirt]/iscsi_transport
+#iscsi_iface=<None>
+
+#
+# Number of times to scan iSER target to find volume.
+#
+# iSER is a server network protocol that extends iSCSI protocol to use Remote
+# Direct Memory Access (RDMA). This option allows the user to specify the
+# maximum
+# number of scan attempts that can be made to find iSER volume.
+#  (integer value)
+#num_iser_scan_tries=5
+
+#
+# Use multipath connection of the iSER volume.
+#
+# iSER volumes can be connected as multipath devices. This will provide high
+# availability and fault tolerance.
+#  (boolean value)
+#iser_use_multipath=false
+
+#
+# The RADOS client name for accessing rbd(RADOS Block Devices) volumes.
+#
+# Libvirt will refer to this user when connecting and authenticating with
+# the Ceph RBD server.
+#  (string value)
+#rbd_user=<None>
+
+#
+# The libvirt UUID of the secret for the rbd_user volumes.
+#  (string value)
+#rbd_secret_uuid=<None>
+
+#
+# Directory where the NFS volume is mounted on the compute node.
+# The default is 'mnt' directory of the location where nova's Python module
+# is installed.
+#
+# NFS provides shared storage for the OpenStack Block Storage service.
+#
+# Possible values:
+#
+# * A string representing absolute path of mount point.
+#  (string value)
+#nfs_mount_point_base=$state_path/mnt
+
+#
+# Mount options passed to the NFS client. See section of the nfs man page
+# for details.
+#
+# Mount options controls the way the filesystem is mounted and how the
+# NFS client behaves when accessing files on this mount point.
+#
+# Possible values:
+#
+# * Any string representing mount options separated by commas.
+# * Example string: vers=3,lookupcache=pos
+#  (string value)
+#nfs_mount_options=<None>
+
+#
+# Directory where the Quobyte volume is mounted on the compute node.
+#
+# Nova supports Quobyte volume driver that enables storing Block Storage
+# service volumes on a Quobyte storage back end. This Option sepcifies the
+# path of the directory where Quobyte volume is mounted.
+#
+# Possible values:
+#
+# * A string representing absolute path of mount point.
+#  (string value)
+#quobyte_mount_point_base=$state_path/mnt
+
+# Path to a Quobyte Client configuration file. (string value)
+#quobyte_client_cfg=<None>
+
+#
+# Path or URL to Scality SOFS(Scale-Out File Server) configuration file.
+#
+# The Scality SOFS provides OpenStack users the option of storing their
+# data on a high capacity, replicated, highly available Scality Ring object
+# storage cluster.
+#  (string value)
+#scality_sofs_config=<None>
+
+#
+# Base dir where Scality SOFS shall be mounted.
+#
+# The Scality volume driver in Nova mounts SOFS and lets the hypervisor access
+# the volumes.
+#
+# Possible values:
+#
+# * $state_path/scality where state_path is a config option that specifies
+#   the top-level directory for maintaining nova's state or Any string
+#   containing the full directory path.
+#  (string value)
+#scality_sofs_mount_point=$state_path/scality
+
+#
+# Directory where the SMBFS shares are mounted on the compute node.
+#  (string value)
+#smbfs_mount_point_base=$state_path/mnt
+
+#
+# Mount options passed to the SMBFS client.
+#
+# Provide SMBFS options as a single string containing all parameters.
+# See mount.cifs man page for  details. Note that the libvirt-qemu ``uid``
+# and ``gid`` must be specified.
+#  (string value)
+#smbfs_mount_options =
+
+#
+# libvirt's transport method for remote file operations.
+#
+# Because libvirt cannot use RPC to copy files over network to/from other
+# compute nodes, other method must be used for:
+#
+# * creating directory on remote host
+# * creating file on remote host
+# * removing file from remote host
+# * copying file to remote host
+#  (string value)
+# Allowed values: ssh, rsync
+#remote_filesystem_transport=ssh
+
+#
+# Directory where the Virtuozzo Storage clusters are mounted on the compute
+# node.
+#
+# This option defines non-standard mountpoint for Vzstorage cluster.
+#
+# Related options:
+#
+# * vzstorage_mount_* group of parameters
+#  (string value)
+#vzstorage_mount_point_base=$state_path/mnt
+
+#
+# Mount owner user name.
+#
+# This option defines the owner user of Vzstorage cluster mountpoint.
+#
+# Related options:
+#
+# * vzstorage_mount_* group of parameters
+#  (string value)
+#vzstorage_mount_user=stack
+
+#
+# Mount owner group name.
+#
+# This option defines the owner group of Vzstorage cluster mountpoint.
+#
+# Related options:
+#
+# * vzstorage_mount_* group of parameters
+#  (string value)
+#vzstorage_mount_group=qemu
+
+#
+# Mount access mode.
+#
+# This option defines the access bits of Vzstorage cluster mountpoint,
+# in the format similar to one of chmod(1) utility, like this: 0770.
+# It consists of one to four digits ranging from 0 to 7, with missing
+# lead digits assumed to be 0's.
+#
+# Related options:
+#
+# * vzstorage_mount_* group of parameters
+#  (string value)
+#vzstorage_mount_perms=0770
+
+#
+# Path to vzstorage client log.
+#
+# This option defines the log of cluster operations,
+# it should include "%(cluster_name)s" template to separate
+# logs from multiple shares.
+#
+# Related options:
+#
+# * vzstorage_mount_opts may include more detailed logging options.
+#  (string value)
+#vzstorage_log_path=/var/log/pstorage/%(cluster_name)s/nova.log.gz
+
+#
+# Path to the SSD cache file.
+#
+# You can attach an SSD drive to a client and configure the drive to store
+# a local cache of frequently accessed data. By having a local cache on a
+# client's SSD drive, you can increase the overall cluster performance by
+# up to 10 and more times.
+# WARNING! There is a lot of SSD models which are not server grade and
+# may loose arbitrary set of data changes on power loss.
+# Such SSDs should not be used in Vstorage and are dangerous as may lead
+# to data corruptions and inconsistencies. Please consult with the manual
+# on which SSD models are known to be safe or verify it using
+# vstorage-hwflush-check(1) utility.
+#
+# This option defines the path which should include "%(cluster_name)s"
+# template to separate caches from multiple shares.
+#
+# Related options:
+#
+# * vzstorage_mount_opts may include more detailed cache options.
+#  (string value)
+#vzstorage_cache_path=<None>
+
+#
+# Extra mount options for pstorage-mount
+#
+# For full description of them, see
+# https://static.openvz.org/vz-man/man1/pstorage-mount.1.gz.html
+# Format is a python string representation of arguments list, like:
+# "['-v', '-R', '500']"
+# Shouldn't include -c, -l, -C, -u, -g and -m as those have
+# explicit vzstorage_* options.
+#
+# Related options:
+#
+# * All other vzstorage_* options
+#  (list value)
+#vzstorage_mount_opts =
 
 
 [matchmaker_redis]
@@ -705,7 +6732,7 @@
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
-#host = 127.0.0.1
+#host=127.0.0.1
 
 # DEPRECATED: Use this port to connect to redis host. (port value)
 # Minimum value: 0
@@ -713,7 +6740,7 @@
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
-#port = 6379
+#port=6379
 
 # DEPRECATED: Password for Redis server (optional). (string value)
 # This option is deprecated for removal.
@@ -729,16 +6756,484 @@
 #sentinel_hosts =
 
 # Redis replica set name. (string value)
-#sentinel_group_name = oslo-messaging-zeromq
+#sentinel_group_name=oslo-messaging-zeromq
 
 # Time in ms to wait between connection attempts. (integer value)
-#wait_timeout = 2000
+#wait_timeout=2000
 
 # Time in ms to wait before the transaction is killed. (integer value)
-#check_timeout = 20000
+#check_timeout=20000
 
 # Timeout in ms on blocking socket operations. (integer value)
-#socket_timeout = 10000
+#socket_timeout=10000
+
+
+[metrics]
+#
+# Configuration options for metrics
+#
+# Options under this group allow to adjust how values assigned to metrics are
+# calculated.
+
+#
+# From nova.conf
+#
+
+#
+# When using metrics to weight the suitability of a host, you can use this
+# option
+# to change how the calculated weight influences the weight assigned to a host
+# as
+# follows:
+#
+# * >1.0: increases the effect of the metric on overall weight
+# * 1.0: no change to the calculated weight
+# * >0.0,<1.0: reduces the effect of the metric on overall weight
+# * 0.0: the metric value is ignored, and the value of the
+#   'weight_of_unavailable' option is returned instead
+# * >-1.0,<0.0: the effect is reduced and reversed
+# * -1.0: the effect is reversed
+# * <-1.0: the effect is increased proportionally and reversed
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect.
+#
+# Possible values:
+#
+# * An integer or float value, where the value corresponds to the multipler
+#   ratio for this weigher.
+#
+# Related options:
+#
+# * weight_of_unavailable
+#  (floating point value)
+#weight_multiplier=1.0
+
+#
+# This setting specifies the metrics to be weighed and the relative ratios for
+# each metric. This should be a single string value, consisting of a series of
+# one or more 'name=ratio' pairs, separated by commas, where 'name' is the name
+# of the metric to be weighed, and 'ratio' is the relative weight for that
+# metric.
+#
+# Note that if the ratio is set to 0, the metric value is ignored, and instead
+# the weight will be set to the value of the 'weight_of_unavailable' option.
+#
+# As an example, let's consider the case where this option is set to:
+#
+#     ``name1=1.0, name2=-1.3``
+#
+# The final weight will be:
+#
+#     ``(name1.value * 1.0) + (name2.value * -1.3)``
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect.
+#
+# Possible values:
+#
+# * A list of zero or more key/value pairs separated by commas, where the key is
+#   a string representing the name of a metric and the value is a numeric weight
+#   for that metric. If any value is set to 0, the value is ignored and the
+#   weight will be set to the value of the 'weight_of_unavailable' option.
+#
+# Related options:
+#
+# * weight_of_unavailable
+#  (list value)
+#weight_setting =
+
+#
+# This setting determines how any unavailable metrics are treated. If this
+# option
+# is set to True, any hosts for which a metric is unavailable will raise an
+# exception, so it is recommended to also use the MetricFilter to filter out
+# those hosts before weighing.
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect.
+#
+# Possible values:
+#
+# * True or False, where False ensures any metric being unavailable for a host
+#   will set the host weight to 'weight_of_unavailable'.
+#
+# Related options:
+#
+# * weight_of_unavailable
+#  (boolean value)
+#required=true
+
+#
+# When any of the following conditions are met, this value will be used in place
+# of any actual metric value:
+#
+# * One of the metrics named in 'weight_setting' is not available for a host,
+#   and the value of 'required' is False
+# * The ratio specified for a metric in 'weight_setting' is 0
+# * The 'weight_multiplier' option is set to 0
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect.
+#
+# Possible values:
+#
+# * An integer or float value, where the value corresponds to the multipler
+#   ratio for this weigher.
+#
+# Related options:
+#
+# * weight_setting
+# * required
+# * weight_multiplier
+#  (floating point value)
+#weight_of_unavailable=-10000.0
+
+
+[mks]
+#
+# Nova compute node uses WebMKS, a desktop sharing protocol to provide
+# instance console access to VM's created by VMware hypervisors.
+#
+# Related options:
+# Following options must be set to provide console access.
+# * mksproxy_base_url
+# * enabled
+
+#
+# From nova.conf
+#
+
+#
+# Location of MKS web console proxy
+#
+# The URL in the response points to a WebMKS proxy which
+# starts proxying between client and corresponding vCenter
+# server where instance runs. In order to use the web based
+# console access, WebMKS proxy should be installed and configured
+#
+# Possible values:
+#
+# * Must be a valid URL of the form:``http://host:port/``
+#  (string value)
+#mksproxy_base_url=http://127.0.0.1:6090/
+
+#
+# Enables graphical console access for virtual machines.
+#  (boolean value)
+#enabled=false
+
+
+[neutron]
+#
+# Configuration options for neutron (network connectivity as a service).
+
+#
+# From nova.conf
+#
+auth_type=v3password
+project_domain_name = Default
+user_domain_name = Default
+auth_url = http://192.168.10.35:35357/v3
+
+password=opnfv_secret
+project_name=service
+username=neutron
+region_name= RegionOne
+url=http://192.168.10.35:9696
+metadata_proxy_shared_secret=opnfv_secret
+service_metadata_proxy=True
+#
+# This option specifies the URL for connecting to Neutron.
+#
+# Possible values:
+#
+# * Any valid URL that points to the Neutron API service is appropriate here.
+#   This typically matches the URL returned for the 'network' service type
+#   from the Keystone service catalog.
+#  (uri value)
+#url=http://127.0.0.1:9696
+
+#
+# Region name for connecting to Neutron in admin context.
+#
+# This option is used in multi-region setups. If there are two Neutron
+# servers running in two regions in two different machines, then two
+# services need to be created in Keystone with two different regions and
+# associate corresponding endpoints to those services. When requests are made
+# to Keystone, the Keystone service uses the region_name to determine the
+# region the request is coming from.
+#  (string value)
+#region_name=RegionOne
+
+#
+# Specifies the name of an integration bridge interface used by OpenvSwitch.
+# This option is used only if Neutron does not specify the OVS bridge name.
+#
+# Possible values:
+#
+# * Any string representing OVS bridge name.
+#  (string value)
+#ovs_bridge=br-int
+
+#
+# Integer value representing the number of seconds to wait before querying
+# Neutron for extensions.  After this number of seconds the next time Nova
+# needs to create a resource in Neutron it will requery Neutron for the
+# extensions that it has loaded.  Setting value to 0 will refresh the
+# extensions with no wait.
+#  (integer value)
+# Minimum value: 0
+#extension_sync_interval=600
+
+#
+# When set to True, this option indicates that Neutron will be used to proxy
+# metadata requests and resolve instance ids. Otherwise, the instance ID must be
+# passed to the metadata request in the 'X-Instance-ID' header.
+#
+# Related options:
+#
+# * metadata_proxy_shared_secret
+#  (boolean value)
+#service_metadata_proxy=false
+
+#
+# This option holds the shared secret string used to validate proxy requests to
+# Neutron metadata requests. In order to be used, the
+# 'X-Metadata-Provider-Signature' header must be supplied in the request.
+#
+# Related options:
+#
+# * service_metadata_proxy
+#  (string value)
+#metadata_proxy_shared_secret =
+
+# PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# (string value)
+#cafile=<None>
+
+# PEM encoded client certificate cert file (string value)
+#certfile=<None>
+
+# PEM encoded client certificate key file (string value)
+#keyfile=<None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure=false
+
+# Timeout value for http requests (integer value)
+#timeout=<None>
+
+# Authentication type to load (string value)
+# Deprecated group/name - [neutron]/auth_plugin
+#auth_type=<None>
+
+# Config Section from which to load plugin specific options (string value)
+#auth_section=<None>
+
+# Authentication URL (string value)
+#auth_url=<None>
+
+# Domain ID to scope to (string value)
+#domain_id=<None>
+
+# Domain name to scope to (string value)
+#domain_name=<None>
+
+# Project ID to scope to (string value)
+#project_id=<None>
+
+# Project name to scope to (string value)
+#project_name=<None>
+
+# Domain ID containing project (string value)
+#project_domain_id=<None>
+
+# Domain name containing project (string value)
+#project_domain_name=<None>
+
+# Trust ID (string value)
+#trust_id=<None>
+
+# Optional domain ID to use with v3 and v2 parameters. It will be used for both
+# the user and project domain in v3 and ignored in v2 authentication. (string
+# value)
+#default_domain_id=<None>
+
+# Optional domain name to use with v3 API and v2 parameters. It will be used for
+# both the user and project domain in v3 and ignored in v2 authentication.
+# (string value)
+#default_domain_name=<None>
+
+# User ID (string value)
+#user_id=<None>
+
+# Username (string value)
+# Deprecated group/name - [neutron]/user-name
+#username=<None>
+
+# User's domain id (string value)
+#user_domain_id=<None>
+
+# User's domain name (string value)
+#user_domain_name=<None>
+
+# User's password (string value)
+#password=<None>
+
+# Tenant ID (string value)
+#tenant_id=<None>
+
+# Tenant Name (string value)
+#tenant_name=<None>
+
+
+[notifications]
+#
+# Most of the actions in Nova which manipulate the system state generate
+# notifications which are posted to the messaging component (e.g. RabbitMQ) and
+# can be consumed by any service outside the Openstack. More technical details
+# at http://docs.openstack.org/developer/nova/notifications.html
+
+#
+# From nova.conf
+#
+
+#
+# If set, send compute.instance.update notifications on instance state
+# changes.
+#
+# Please refer to https://wiki.openstack.org/wiki/SystemUsageData for
+# additional information on notifications.
+#
+# Possible values:
+#
+# * None - no notifications
+# * "vm_state" - notifications on VM state changes
+# * "vm_and_task_state" - notifications on VM and task state changes
+#  (string value)
+# Allowed values: <None>, vm_state, vm_and_task_state
+# Deprecated group/name - [DEFAULT]/notify_on_state_change
+#notify_on_state_change=<None>
+
+#
+# If enabled, send api.fault notifications on caught exceptions in the
+# API service.
+#  (boolean value)
+# Deprecated group/name - [DEFAULT]/notify_api_faults
+#notify_on_api_faults=false
+notify_on_api_faults=false
+
+# Default notification level for outgoing notifications. (string value)
+# Allowed values: DEBUG, INFO, WARN, ERROR, CRITICAL
+# Deprecated group/name - [DEFAULT]/default_notification_level
+#default_level=INFO
+
+#
+# Default publisher_id for outgoing notifications. If you consider routing
+# notifications using different publisher, change this value accordingly.
+#
+# Possible values:
+#
+# * Defaults to the IPv4 address of this host, but it can be any valid
+#   oslo.messaging publisher_id
+#
+# Related options:
+#
+# *  my_ip - IP address of this host
+#  (string value)
+# Deprecated group/name - [DEFAULT]/default_publisher_id
+#default_publisher_id=$my_ip
+
+#
+# Specifies which notification format shall be used by nova.
+#
+# The default value is fine for most deployments and rarely needs to be changed.
+# This value can be set to 'versioned' once the infrastructure moves closer to
+# consuming the newer format of notifications. After this occurs, this option
+# will be removed (possibly in the "P" release).
+#
+# Possible values:
+# * unversioned: Only the legacy unversioned notifications are emitted.
+# * versioned: Only the new versioned notifications are emitted.
+# * both: Both the legacy unversioned and the new versioned notifications are
+#   emitted. (Default)
+#
+# The list of versioned notifications is visible in
+# http://docs.openstack.org/developer/nova/notifications.html
+#  (string value)
+# Allowed values: unversioned, versioned, both
+# Deprecated group/name - [DEFAULT]/notification_format
+#notification_format=both
+
+
+[osapi_v21]
+
+#
+# From nova.conf
+#
+
+# DEPRECATED:
+# This option is a list of all of the v2.1 API extensions to never load.
+#
+# Possible values:
+#
+# * A list of strings, each being the alias of an extension that you do not
+#   wish to load.
+#
+# Related options:
+#
+# * enabled
+# * extensions_whitelist
+#  (list value)
+# This option is deprecated for removal since 12.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# API extensions are now part of the standard API. API extensions should be
+# disabled using policy, rather than via these configuration options.
+#extensions_blacklist =
+
+# DEPRECATED:
+# This is a list of extensions. If it is empty, then *all* extensions except
+# those specified in the extensions_blacklist option will be loaded. If it is
+# not
+# empty, then only those extensions in this list will be loaded, provided that
+# they are also not in the extensions_blacklist option.
+#
+# Possible values:
+#
+# * A list of strings, each being the alias of an extension that you wish to
+#   load, or an empty list, which indicates that all extensions are to be run.
+#
+# Related options:
+#
+# * enabled
+# * extensions_blacklist
+#  (list value)
+# This option is deprecated for removal since 12.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# API extensions are now part of the standard API. API extensions should be
+# disabled using policy, rather than via these configuration options.
+#extensions_whitelist =
+
+# DEPRECATED:
+# This option is a string representing a regular expression (regex) that matches
+# the project_id as contained in URLs. If not set, it will match normal UUIDs
+# created by keystone.
+#
+# Possible values:
+#
+# * A string representing any legal regular expression
+#  (string value)
+# This option is deprecated for removal since 13.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# Recent versions of nova constrain project IDs to hexadecimal characters and
+# dashes. If your installation uses IDs outside of this range, you should use
+# this option to provide your own regex and give you time to migrate offending
+# projects to valid IDs before the next release.
+#project_id_regex=<None>
 
 
 [oslo_concurrency]
@@ -748,14 +7243,16 @@
 #
 
 # Enables or disables inter-process locks. (boolean value)
-#disable_process_locking = false
+# Deprecated group/name - [DEFAULT]/disable_process_locking
+#disable_process_locking=false
 
 # Directory to use for lock files.  For security, the specified directory should
 # only be writable by the user running the processes that need locking. Defaults
 # to environment variable OSLO_LOCK_PATH. If OSLO_LOCK_PATH is not set in the
 # environment, use the Python tempfile.gettempdir function to find a suitable
 # location. If external locks are used, a lock path must be set. (string value)
-#lock_path = /tmp
+# Deprecated group/name - [DEFAULT]/lock_path
+lock_path=/var/lib/nova/tmp
 
 
 [oslo_messaging_amqp]
@@ -766,112 +7263,103 @@
 
 # Name for the AMQP container. must be globally unique. Defaults to a generated
 # UUID (string value)
-#container_name = <None>
+# Deprecated group/name - [amqp1]/container_name
+#container_name=<None>
 
 # Timeout for inactive connections (in seconds) (integer value)
-#idle_timeout = 0
+# Deprecated group/name - [amqp1]/idle_timeout
+#idle_timeout=0
 
 # Debug: dump AMQP frames to stdout (boolean value)
-#trace = false
-
-# Attempt to connect via SSL. If no other ssl-related parameters are given, it
-# will use the system's CA-bundle to verify the server's certificate. (boolean
-# value)
-#ssl = false
+# Deprecated group/name - [amqp1]/trace
+#trace=false
 
 # CA certificate PEM file used to verify the server's certificate (string value)
+# Deprecated group/name - [amqp1]/ssl_ca_file
 #ssl_ca_file =
 
 # Self-identifying certificate PEM file for client authentication (string value)
+# Deprecated group/name - [amqp1]/ssl_cert_file
 #ssl_cert_file =
 
 # Private key PEM file used to sign ssl_cert_file certificate (optional) (string
 # value)
+# Deprecated group/name - [amqp1]/ssl_key_file
 #ssl_key_file =
 
 # Password for decrypting ssl_key_file (if encrypted) (string value)
-#ssl_key_password = <None>
-
-# By default SSL checks that the name in the server's certificate matches the
-# hostname in the transport_url. In some configurations it may be preferable to
-# use the virtual hostname instead, for example if the server uses the Server
-# Name Indication TLS extension (rfc6066) to provide a certificate per virtual
-# host. Set ssl_verify_vhost to True if the server's SSL certificate uses the
-# virtual host name instead of the DNS name. (boolean value)
-#ssl_verify_vhost = false
+# Deprecated group/name - [amqp1]/ssl_key_password
+#ssl_key_password=<None>
 
 # DEPRECATED: Accept clients using either SSL or plain TCP (boolean value)
+# Deprecated group/name - [amqp1]/allow_insecure_clients
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Not applicable - not a SSL server
-#allow_insecure_clients = false
+#allow_insecure_clients=false
 
 # Space separated list of acceptable SASL mechanisms (string value)
+# Deprecated group/name - [amqp1]/sasl_mechanisms
 #sasl_mechanisms =
 
 # Path to directory that contains the SASL configuration (string value)
+# Deprecated group/name - [amqp1]/sasl_config_dir
 #sasl_config_dir =
 
 # Name of configuration file (without .conf suffix) (string value)
+# Deprecated group/name - [amqp1]/sasl_config_name
 #sasl_config_name =
 
-# SASL realm to use if no realm present in username (string value)
-#sasl_default_realm =
-
-# DEPRECATED: User name for message broker authentication (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the username.
+# User name for message broker authentication (string value)
+# Deprecated group/name - [amqp1]/username
 #username =
 
-# DEPRECATED: Password for message broker authentication (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the password.
+# Password for message broker authentication (string value)
+# Deprecated group/name - [amqp1]/password
 #password =
 
 # Seconds to pause before attempting to re-connect. (integer value)
 # Minimum value: 1
-#connection_retry_interval = 1
+#connection_retry_interval=1
 
 # Increase the connection_retry_interval by this many seconds after each
 # unsuccessful failover attempt. (integer value)
 # Minimum value: 0
-#connection_retry_backoff = 2
+#connection_retry_backoff=2
 
 # Maximum limit for connection_retry_interval + connection_retry_backoff
 # (integer value)
 # Minimum value: 1
-#connection_retry_interval_max = 30
+#connection_retry_interval_max=30
 
 # Time to pause between re-connecting an AMQP 1.0 link that failed due to a
 # recoverable error. (integer value)
 # Minimum value: 1
-#link_retry_delay = 10
+#link_retry_delay=10
 
 # The maximum number of attempts to re-send a reply message which failed due to
 # a recoverable error. (integer value)
 # Minimum value: -1
-#default_reply_retry = 0
+#default_reply_retry=0
 
 # The deadline for an rpc reply message delivery. (integer value)
 # Minimum value: 5
-#default_reply_timeout = 30
+#default_reply_timeout=30
 
 # The deadline for an rpc cast or call message delivery. Only used when caller
 # does not provide a timeout expiry. (integer value)
 # Minimum value: 5
-#default_send_timeout = 30
+#default_send_timeout=30
 
 # The deadline for a sent notification message delivery. Only used when caller
 # does not provide a timeout expiry. (integer value)
 # Minimum value: 5
-#default_notify_timeout = 30
+#default_notify_timeout=30
 
 # The duration to schedule a purge of idle sender links. Detach link after
 # expiry. (integer value)
 # Minimum value: 1
-#default_sender_link_timeout = 600
+#default_sender_link_timeout=600
 
 # Indicates the addressing mode used by the driver.
 # Permitted values:
@@ -879,44 +7367,39 @@
 # 'routable' - use routable addresses
 # 'dynamic'  - use legacy addresses if the message bus does not support routing
 # otherwise use routable addressing (string value)
-#addressing_mode = dynamic
-
-# Enable virtual host support for those message buses that do not natively
-# support virtual hosting (such as qpidd). When set to true the virtual host
-# name will be added to all message bus addresses, effectively creating a
-# private 'subnet' per virtual host. Set to False if the message bus supports
-# virtual hosting using the 'hostname' field in the AMQP 1.0 Open performative
-# as the name of the virtual host. (boolean value)
-#pseudo_vhost = true
+#addressing_mode=dynamic
 
 # address prefix used when sending to a specific server (string value)
-#server_request_prefix = exclusive
+# Deprecated group/name - [amqp1]/server_request_prefix
+#server_request_prefix=exclusive
 
 # address prefix used when broadcasting to all servers (string value)
-#broadcast_prefix = broadcast
+# Deprecated group/name - [amqp1]/broadcast_prefix
+#broadcast_prefix=broadcast
 
 # address prefix when sending to any server in group (string value)
-#group_request_prefix = unicast
+# Deprecated group/name - [amqp1]/group_request_prefix
+#group_request_prefix=unicast
 
 # Address prefix for all generated RPC addresses (string value)
-#rpc_address_prefix = openstack.org/om/rpc
+#rpc_address_prefix=openstack.org/om/rpc
 
 # Address prefix for all generated Notification addresses (string value)
-#notify_address_prefix = openstack.org/om/notify
+#notify_address_prefix=openstack.org/om/notify
 
 # Appended to the address prefix when sending a fanout message. Used by the
 # message bus to identify fanout messages. (string value)
-#multicast_address = multicast
+#multicast_address=multicast
 
 # Appended to the address prefix when sending to a particular RPC/Notification
 # server. Used by the message bus to identify messages sent to a single
 # destination. (string value)
-#unicast_address = unicast
+#unicast_address=unicast
 
 # Appended to the address prefix when sending to a group of consumers. Used by
 # the message bus to identify messages that should be delivered in a round-robin
 # fashion across consumers. (string value)
-#anycast_address = anycast
+#anycast_address=anycast
 
 # Exchange name used in notification addresses.
 # Exchange name resolution precedence:
@@ -924,7 +7407,7 @@
 # else default_notification_exchange if set
 # else control_exchange if set
 # else 'notify' (string value)
-#default_notification_exchange = <None>
+#default_notification_exchange=<None>
 
 # Exchange name used in RPC addresses.
 # Exchange name resolution precedence:
@@ -932,19 +7415,19 @@
 # else default_rpc_exchange if set
 # else control_exchange if set
 # else 'rpc' (string value)
-#default_rpc_exchange = <None>
+#default_rpc_exchange=<None>
 
 # Window size for incoming RPC Reply messages. (integer value)
 # Minimum value: 1
-#reply_link_credit = 200
+#reply_link_credit=200
 
 # Window size for incoming RPC Request messages (integer value)
 # Minimum value: 1
-#rpc_server_credit = 100
+#rpc_server_credit=100
 
 # Window size for incoming Notification messages (integer value)
 # Minimum value: 1
-#notify_server_credit = 100
+#notify_server_credit=100
 
 # Send messages of this type pre-settled.
 # Pre-settled messages will not receive acknowledgement
@@ -956,8 +7439,8 @@
 # 'rpc-cast' - Send RPC Casts pre-settled
 # 'notify'   - Send Notifications pre-settled
 #  (multi valued)
-#pre_settled = rpc-cast
-#pre_settled = rpc-reply
+#pre_settled=rpc-cast
+#pre_settled=rpc-reply
 
 
 [oslo_messaging_kafka]
@@ -970,7 +7453,7 @@
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
-#kafka_default_host = localhost
+#kafka_default_host=localhost
 
 # DEPRECATED: Default Kafka broker Port (port value)
 # Minimum value: 0
@@ -978,33 +7461,33 @@
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
-#kafka_default_port = 9092
+#kafka_default_port=9092
 
 # Max fetch bytes of Kafka consumer (integer value)
-#kafka_max_fetch_bytes = 1048576
-
-# Default timeout(s) for Kafka consumers (floating point value)
-#kafka_consumer_timeout = 1.0
+#kafka_max_fetch_bytes=1048576
+
+# Default timeout(s) for Kafka consumers (integer value)
+#kafka_consumer_timeout=1.0
 
 # Pool Size for Kafka Consumers (integer value)
-#pool_size = 10
+#pool_size=10
 
 # The pool size limit for connections expiration policy (integer value)
-#conn_pool_min_size = 2
+#conn_pool_min_size=2
 
 # The time-to-live in sec of idle connections in the pool (integer value)
-#conn_pool_ttl = 1200
+#conn_pool_ttl=1200
 
 # Group id for Kafka consumer. Consumers in one group will coordinate message
 # consumption (string value)
-#consumer_group = oslo_messaging_consumer
+#consumer_group=oslo_messaging_consumer
 
 # Upper bound on the delay for KafkaProducer batching in seconds (floating point
 # value)
-#producer_batch_timeout = 0.0
+#producer_batch_timeout=0.0
 
 # Size of batch for the producer async send (integer value)
-#producer_batch_size = 16384
+#producer_batch_size=16384
 
 
 [oslo_messaging_notifications]
@@ -1017,21 +7500,17 @@
 # messagingv2, routing, log, test, noop (multi valued)
 # Deprecated group/name - [DEFAULT]/notification_driver
 #driver =
+driver = messagingv2
 
 # A URL representing the messaging driver to use for notifications. If not set,
 # we fall back to the same configuration used for RPC. (string value)
 # Deprecated group/name - [DEFAULT]/notification_transport_url
-#transport_url = <None>
+#transport_url=<None>
 
 # AMQP topic used for OpenStack notifications. (list value)
 # Deprecated group/name - [rpc_notifier2]/topics
 # Deprecated group/name - [DEFAULT]/notification_topics
-#topics = notifications
-
-# The maximum number of attempts to re-send a notification message which failed
-# to be delivered due to a recoverable error. 0 - No retry, -1 - indefinite
-# (integer value)
-#retry = -1
+#topics=notifications
 
 
 [oslo_messaging_rabbit]
@@ -1039,114 +7518,128 @@
 #
 # From oslo.messaging
 #
-
+rabbit_retry_interval = 1
+rabbit_retry_backoff = 2
+rpc_conn_pool_size = 300
 # Use durable queues in AMQP. (boolean value)
 # Deprecated group/name - [DEFAULT]/amqp_durable_queues
 # Deprecated group/name - [DEFAULT]/rabbit_durable_queues
-#amqp_durable_queues = false
+#amqp_durable_queues=false
 
 # Auto-delete queues in AMQP. (boolean value)
-#amqp_auto_delete = false
-
-# Enable SSL (boolean value)
-#ssl = <None>
+# Deprecated group/name - [DEFAULT]/amqp_auto_delete
+#amqp_auto_delete=false
 
 # SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and
 # SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some
 # distributions. (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_version
-#ssl_version =
+# Deprecated group/name - [DEFAULT]/kombu_ssl_version
+#kombu_ssl_version =
 
 # SSL key file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_keyfile
-#ssl_key_file =
+# Deprecated group/name - [DEFAULT]/kombu_ssl_keyfile
+#kombu_ssl_keyfile =
 
 # SSL cert file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_certfile
-#ssl_cert_file =
+# Deprecated group/name - [DEFAULT]/kombu_ssl_certfile
+#kombu_ssl_certfile =
 
 # SSL certification authority file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_ca_certs
-#ssl_ca_file =
+# Deprecated group/name - [DEFAULT]/kombu_ssl_ca_certs
+#kombu_ssl_ca_certs =
 
 # How long to wait before reconnecting in response to an AMQP consumer cancel
 # notification. (floating point value)
-#kombu_reconnect_delay = 1.0
+# Deprecated group/name - [DEFAULT]/kombu_reconnect_delay
+#kombu_reconnect_delay=1.0
 
 # EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression will not
 # be used. This option may not be available in future versions. (string value)
-#kombu_compression = <None>
+#kombu_compression=<None>
 
 # How long to wait a missing client before abandoning to send it its replies.
 # This value should not be longer than rpc_response_timeout. (integer value)
 # Deprecated group/name - [oslo_messaging_rabbit]/kombu_reconnect_timeout
-#kombu_missing_consumer_retry_timeout = 60
+#kombu_missing_consumer_retry_timeout=60
 
 # Determines how the next RabbitMQ node is chosen in case the one we are
 # currently connected to becomes unavailable. Takes effect only if more than one
 # RabbitMQ node is provided in config. (string value)
 # Allowed values: round-robin, shuffle
-#kombu_failover_strategy = round-robin
+#kombu_failover_strategy=round-robin
 
 # DEPRECATED: The RabbitMQ broker address where a single node is used. (string
 # value)
+# Deprecated group/name - [DEFAULT]/rabbit_host
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_host = localhost
+#rabbit_host=localhost
 
 # DEPRECATED: The RabbitMQ broker port where a single node is used. (port value)
 # Minimum value: 0
 # Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/rabbit_port
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_port = 5672
+#rabbit_port=5672
 
 # DEPRECATED: RabbitMQ HA cluster host:port pairs. (list value)
+# Deprecated group/name - [DEFAULT]/rabbit_hosts
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_hosts = $rabbit_host:$rabbit_port
+#rabbit_hosts=$rabbit_host:$rabbit_port
+
+# Connect over SSL for RabbitMQ. (boolean value)
+# Deprecated group/name - [DEFAULT]/rabbit_use_ssl
+#rabbit_use_ssl=false
 
 # DEPRECATED: The RabbitMQ userid. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_userid
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_userid = guest
+#rabbit_userid=guest
 
 # DEPRECATED: The RabbitMQ password. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_password
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_password = guest
+#rabbit_password=guest
 
 # The RabbitMQ login method. (string value)
 # Allowed values: PLAIN, AMQPLAIN, RABBIT-CR-DEMO
-#rabbit_login_method = AMQPLAIN
+# Deprecated group/name - [DEFAULT]/rabbit_login_method
+#rabbit_login_method=AMQPLAIN
 
 # DEPRECATED: The RabbitMQ virtual host. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_virtual_host
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_virtual_host = /
+#rabbit_virtual_host=/
 
 # How frequently to retry connecting with RabbitMQ. (integer value)
-#rabbit_retry_interval = 1
+#rabbit_retry_interval=1
 
 # How long to backoff for between retries when connecting to RabbitMQ. (integer
 # value)
-#rabbit_retry_backoff = 2
+# Deprecated group/name - [DEFAULT]/rabbit_retry_backoff
+#rabbit_retry_backoff=2
 
 # Maximum interval of RabbitMQ connection retries. Default is 30 seconds.
 # (integer value)
-#rabbit_interval_max = 30
+#rabbit_interval_max=30
 
 # DEPRECATED: Maximum number of RabbitMQ connection retries. Default is 0
 # (infinite retry count). (integer value)
+# Deprecated group/name - [DEFAULT]/rabbit_max_retries
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
-#rabbit_max_retries = 0
+#rabbit_max_retries=0
 
 # Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change this
 # option, you must wipe the RabbitMQ database. In RabbitMQ 3.0, queue mirroring
@@ -1154,131 +7647,137 @@
 # you just want to make sure that all queues (except those with auto-generated
 # names) are mirrored across all nodes, run: "rabbitmqctl set_policy HA
 # '^(?!amq\.).*' '{"ha-mode": "all"}' " (boolean value)
-#rabbit_ha_queues = false
+# Deprecated group/name - [DEFAULT]/rabbit_ha_queues
+#rabbit_ha_queues=false
 
 # Positive integer representing duration in seconds for queue TTL (x-expires).
 # Queues which are unused for the duration of the TTL are automatically deleted.
 # The parameter affects only reply and fanout queues. (integer value)
 # Minimum value: 1
-#rabbit_transient_queues_ttl = 1800
+#rabbit_transient_queues_ttl=1800
 
 # Specifies the number of messages to prefetch. Setting to zero allows unlimited
 # messages. (integer value)
-#rabbit_qos_prefetch_count = 64
+#rabbit_qos_prefetch_count=0
 
 # Number of seconds after which the Rabbit broker is considered down if
 # heartbeat's keep-alive fails (0 disable the heartbeat). EXPERIMENTAL (integer
 # value)
-#heartbeat_timeout_threshold = 60
+#heartbeat_timeout_threshold=60
 
 # How often times during the heartbeat_timeout_threshold we check the heartbeat.
 # (integer value)
-#heartbeat_rate = 2
+#heartbeat_rate=2
 
 # Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake (boolean value)
-#fake_rabbit = false
+# Deprecated group/name - [DEFAULT]/fake_rabbit
+#fake_rabbit=false
 
 # Maximum number of channels to allow (integer value)
-#channel_max = <None>
+#channel_max=<None>
 
 # The maximum byte size for an AMQP frame (integer value)
-#frame_max = <None>
+#frame_max=<None>
 
 # How often to send heartbeats for consumer's connections (integer value)
-#heartbeat_interval = 3
+#heartbeat_interval=3
+
+# Enable SSL (boolean value)
+#ssl=<None>
 
 # Arguments passed to ssl.wrap_socket (dict value)
-#ssl_options = <None>
+#ssl_options=<None>
 
 # Set socket timeout in seconds for connection's socket (floating point value)
-#socket_timeout = 0.25
+#socket_timeout=0.25
 
 # Set TCP_USER_TIMEOUT in seconds for connection's socket (floating point value)
-#tcp_user_timeout = 0.25
+#tcp_user_timeout=0.25
 
 # Set delay for reconnection to some host which has connection error (floating
 # point value)
-#host_connection_reconnect_delay = 0.25
+#host_connection_reconnect_delay=0.25
 
 # Connection factory implementation (string value)
 # Allowed values: new, single, read_write
-#connection_factory = single
+#connection_factory=single
 
 # Maximum number of connections to keep queued. (integer value)
-#pool_max_size = 30
+#pool_max_size=30
 
 # Maximum number of connections to create above `pool_max_size`. (integer value)
-#pool_max_overflow = 0
+#pool_max_overflow=0
 
 # Default number of seconds to wait for a connections to available (integer
 # value)
-#pool_timeout = 30
+#pool_timeout=30
 
 # Lifetime of a connection (since creation) in seconds or None for no recycling.
 # Expired connections are closed on acquire. (integer value)
-#pool_recycle = 600
+#pool_recycle=600
 
 # Threshold at which inactive (since release) connections are considered stale
 # in seconds or None for no staleness. Stale connections are closed on acquire.
 # (integer value)
-#pool_stale = 60
+#pool_stale=60
 
 # Default serialization mechanism for serializing/deserializing
 # outgoing/incoming messages (string value)
 # Allowed values: json, msgpack
-#default_serializer_type = json
+#default_serializer_type=json
 
 # Persist notification messages. (boolean value)
-#notification_persistence = false
+#notification_persistence=false
 
 # Exchange name for sending notifications (string value)
-#default_notification_exchange = ${control_exchange}_notification
+#default_notification_exchange=${control_exchange}_notification
 
 # Max number of not acknowledged message which RabbitMQ can send to notification
 # listener. (integer value)
-#notification_listener_prefetch_count = 100
+#notification_listener_prefetch_count=100
 
 # Reconnecting retry count in case of connectivity problem during sending
 # notification, -1 means infinite retry. (integer value)
-#default_notification_retry_attempts = -1
+#default_notification_retry_attempts=-1
 
 # Reconnecting retry delay in case of connectivity problem during sending
 # notification message (floating point value)
-#notification_retry_delay = 0.25
+#notification_retry_delay=0.25
 
 # Time to live for rpc queues without consumers in seconds. (integer value)
-#rpc_queue_expiration = 60
+#rpc_queue_expiration=60
 
 # Exchange name for sending RPC messages (string value)
-#default_rpc_exchange = ${control_exchange}_rpc
+#default_rpc_exchange=${control_exchange}_rpc
 
 # Exchange name for receiving RPC replies (string value)
-#rpc_reply_exchange = ${control_exchange}_rpc_reply
+#rpc_reply_exchange=${control_exchange}_rpc_reply
 
 # Max number of not acknowledged message which RabbitMQ can send to rpc
 # listener. (integer value)
-#rpc_listener_prefetch_count = 100
+#rpc_listener_prefetch_count=100
 
 # Max number of not acknowledged message which RabbitMQ can send to rpc reply
 # listener. (integer value)
-#rpc_reply_listener_prefetch_count = 100
+#rpc_reply_listener_prefetch_count=100
 
 # Reconnecting retry count in case of connectivity problem during sending reply.
 # -1 means infinite retry during rpc_timeout (integer value)
-#rpc_reply_retry_attempts = -1
+#rpc_reply_retry_attempts=-1
 
 # Reconnecting retry delay in case of connectivity problem during sending reply.
 # (floating point value)
-#rpc_reply_retry_delay = 0.25
+#rpc_reply_retry_delay=0.25
 
 # Reconnecting retry count in case of connectivity problem during sending RPC
 # message, -1 means infinite retry. If actual retry attempts in not 0 the rpc
 # request could be processed more than one time (integer value)
-#default_rpc_retry_attempts = -1
+#default_rpc_retry_attempts=-1
 
 # Reconnecting retry delay in case of connectivity problem during sending RPC
 # message (floating point value)
-#rpc_retry_delay = 0.25
+#rpc_retry_delay=0.25
+
 
 
 [oslo_messaging_zmq]
@@ -1289,25 +7788,31 @@
 
 # ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
 # The "host" option should point or resolve to this address. (string value)
-#rpc_zmq_bind_address = *
+# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_address
+#rpc_zmq_bind_address=*
 
 # MatchMaker driver. (string value)
 # Allowed values: redis, sentinel, dummy
-#rpc_zmq_matchmaker = redis
+# Deprecated group/name - [DEFAULT]/rpc_zmq_matchmaker
+#rpc_zmq_matchmaker=redis
 
 # Number of ZeroMQ contexts, defaults to 1. (integer value)
-#rpc_zmq_contexts = 1
+# Deprecated group/name - [DEFAULT]/rpc_zmq_contexts
+#rpc_zmq_contexts=1
 
 # Maximum number of ingress messages to locally buffer per topic. Default is
 # unlimited. (integer value)
-#rpc_zmq_topic_backlog = <None>
+# Deprecated group/name - [DEFAULT]/rpc_zmq_topic_backlog
+#rpc_zmq_topic_backlog=<None>
 
 # Directory for holding IPC sockets. (string value)
-#rpc_zmq_ipc_dir = /var/run/openstack
+# Deprecated group/name - [DEFAULT]/rpc_zmq_ipc_dir
+#rpc_zmq_ipc_dir=/var/run/openstack
 
 # Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
 # "host" option, if running Nova. (string value)
-#rpc_zmq_host = localhost
+# Deprecated group/name - [DEFAULT]/rpc_zmq_host
+#rpc_zmq_host=localhost
 
 # Number of seconds to wait before all pending messages will be sent after
 # closing a socket. The default value of -1 specifies an infinite linger period.
@@ -1315,110 +7820,120 @@
 # immediately when the socket is closed. Positive values specify an upper bound
 # for the linger period. (integer value)
 # Deprecated group/name - [DEFAULT]/rpc_cast_timeout
-#zmq_linger = -1
+#zmq_linger=-1
 
 # The default number of seconds that poll should wait. Poll raises timeout
 # exception when timeout expired. (integer value)
-#rpc_poll_timeout = 1
+# Deprecated group/name - [DEFAULT]/rpc_poll_timeout
+#rpc_poll_timeout=1
 
 # Expiration timeout in seconds of a name service record about existing target (
 # < 0 means no timeout). (integer value)
-#zmq_target_expire = 300
+# Deprecated group/name - [DEFAULT]/zmq_target_expire
+#zmq_target_expire=300
 
 # Update period in seconds of a name service record about existing target.
 # (integer value)
-#zmq_target_update = 180
+# Deprecated group/name - [DEFAULT]/zmq_target_update
+#zmq_target_update=180
 
 # Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
 # value)
-#use_pub_sub = false
+# Deprecated group/name - [DEFAULT]/use_pub_sub
+#use_pub_sub=false
 
 # Use ROUTER remote proxy. (boolean value)
-#use_router_proxy = false
+# Deprecated group/name - [DEFAULT]/use_router_proxy
+#use_router_proxy=false
 
 # This option makes direct connections dynamic or static. It makes sense only
 # with use_router_proxy=False which means to use direct connections for direct
 # message types (ignored otherwise). (boolean value)
-#use_dynamic_connections = false
+#use_dynamic_connections=false
 
 # How many additional connections to a host will be made for failover reasons.
 # This option is actual only in dynamic connections mode. (integer value)
-#zmq_failover_connections = 2
+#zmq_failover_connections=2
 
 # Minimal port number for random ports range. (port value)
 # Minimum value: 0
 # Maximum value: 65535
-#rpc_zmq_min_port = 49153
+# Deprecated group/name - [DEFAULT]/rpc_zmq_min_port
+#rpc_zmq_min_port=49153
 
 # Maximal port number for random ports range. (integer value)
 # Minimum value: 1
 # Maximum value: 65536
-#rpc_zmq_max_port = 65536
+# Deprecated group/name - [DEFAULT]/rpc_zmq_max_port
+#rpc_zmq_max_port=65536
 
 # Number of retries to find free port number before fail with ZMQBindError.
 # (integer value)
-#rpc_zmq_bind_port_retries = 100
+# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_port_retries
+#rpc_zmq_bind_port_retries=100
 
 # Default serialization mechanism for serializing/deserializing
 # outgoing/incoming messages (string value)
 # Allowed values: json, msgpack
-#rpc_zmq_serialization = json
+# Deprecated group/name - [DEFAULT]/rpc_zmq_serialization
+#rpc_zmq_serialization=json
 
 # This option configures round-robin mode in zmq socket. True means not keeping
 # a queue when server side disconnects. False means to keep queue and messages
 # even if server is disconnected, when the server appears we send all
 # accumulated messages to it. (boolean value)
-#zmq_immediate = true
+#zmq_immediate=true
 
 # Enable/disable TCP keepalive (KA) mechanism. The default value of -1 (or any
 # other negative value) means to skip any overrides and leave it to OS default;
 # 0 and 1 (or any other positive value) mean to disable and enable the option
 # respectively. (integer value)
-#zmq_tcp_keepalive = -1
+#zmq_tcp_keepalive=-1
 
 # The duration between two keepalive transmissions in idle condition. The unit
 # is platform dependent, for example, seconds in Linux, milliseconds in Windows
 # etc. The default value of -1 (or any other negative value and 0) means to skip
 # any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_idle = -1
+#zmq_tcp_keepalive_idle=-1
 
 # The number of retransmissions to be carried out before declaring that remote
 # end is not available. The default value of -1 (or any other negative value and
 # 0) means to skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_cnt = -1
+#zmq_tcp_keepalive_cnt=-1
 
 # The duration between two successive keepalive retransmissions, if
 # acknowledgement to the previous keepalive transmission is not received. The
 # unit is platform dependent, for example, seconds in Linux, milliseconds in
 # Windows etc. The default value of -1 (or any other negative value and 0) means
 # to skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_intvl = -1
+#zmq_tcp_keepalive_intvl=-1
 
 # Maximum number of (green) threads to work concurrently. (integer value)
-#rpc_thread_pool_size = 100
+#rpc_thread_pool_size=100
+rpc_thread_pool_size=70
 
 # Expiration timeout in seconds of a sent/received message after which it is not
 # tracked anymore by a client/server. (integer value)
-#rpc_message_ttl = 300
+#rpc_message_ttl=300
 
 # Wait for message acknowledgements from receivers. This mechanism works only
 # via proxy without PUB/SUB. (boolean value)
-#rpc_use_acks = false
+#rpc_use_acks=false
 
 # Number of seconds to wait for an ack from a cast/call. After each retry
 # attempt this timeout is multiplied by some specified multiplier. (integer
 # value)
-#rpc_ack_timeout_base = 15
+#rpc_ack_timeout_base=15
 
 # Number to multiply base ack timeout by after each retry attempt. (integer
 # value)
-#rpc_ack_timeout_multiplier = 2
+#rpc_ack_timeout_multiplier=2
 
 # Default number of message sending attempts in case of any problems occurred:
 # positive value N means at most N retries, 0 means no retries, None or -1 (or
 # any other negative values) mean to retry forever. This option is used only if
 # acknowledgments are enabled. (integer value)
-#rpc_retry_attempts = 3
+#rpc_retry_attempts=3
 
 # List of publisher hosts SubConsumer can subscribe on. This option has higher
 # priority then the default publishers list taken from the matchmaker. (list
@@ -1435,19 +7950,19 @@
 # The maximum body size for each  request, in bytes. (integer value)
 # Deprecated group/name - [DEFAULT]/osapi_max_request_body_size
 # Deprecated group/name - [DEFAULT]/max_request_body_size
-#max_request_body_size = 114688
+#max_request_body_size=114688
 
 # DEPRECATED: The HTTP Header that will be used to determine what the original
 # request protocol scheme was, even if it was hidden by a SSL termination proxy.
 # (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
-#secure_proxy_ssl_header = X-Forwarded-Proto
+#secure_proxy_ssl_header=X-Forwarded-Proto
 
 # Whether the application is behind a proxy or not. This determines if the
 # middleware should parse the headers or not. (boolean value)
-#enable_proxy_headers_parsing = false
-
+#enable_proxy_headers_parsing=false
+enable_proxy_headers_parsing=True
 
 [oslo_policy]
 
@@ -1456,14 +7971,2779 @@
 #
 
 # The file that defines policies. (string value)
-#policy_file = policy.json
+# Deprecated group/name - [DEFAULT]/policy_file
+#policy_file=policy.json
 
 # Default rule. Enforced when a requested rule is not found. (string value)
-#policy_default_rule = default
+# Deprecated group/name - [DEFAULT]/policy_default_rule
+#policy_default_rule=default
 
 # Directories where policy configuration files are stored. They can be relative
 # to any directory in the search path defined by the config_dir option, or
 # absolute paths. The file defined by policy_file must exist for these
 # directories to be searched.  Missing or empty directories are ignored. (multi
 # valued)
-#policy_dirs = policy.d
+# Deprecated group/name - [DEFAULT]/policy_dirs
+#policy_dirs=policy.d
+
+
+[pci]
+
+#
+# From nova.conf
+#
+
+#
+# An alias for a PCI passthrough device requirement.
+#
+# This allows users to specify the alias in the extra_spec for a flavor, without
+# needing to repeat all the PCI property requirements.
+#
+# Possible Values:
+#
+# * A list of JSON values which describe the aliases. For example:
+#
+#     alias = {
+#       "name": "QuickAssist",
+#       "product_id": "0443",
+#       "vendor_id": "8086",
+#       "device_type": "type-PCI"
+#     }
+#
+#   defines an alias for the Intel QuickAssist card. (multi valued). Valid key
+#   values are :
+#
+#   * "name": Name of the PCI alias.
+#   * "product_id": Product ID of the device in hexadecimal.
+#   * "vendor_id": Vendor ID of the device in hexadecimal.
+#   * "device_type": Type of PCI device. Valid values are: "type-PCI",
+#     "type-PF" and "type-VF".
+#  (multi valued)
+# Deprecated group/name - [DEFAULT]/pci_alias
+#alias =
+
+#
+# White list of PCI devices available to VMs.
+#
+# Possible values:
+#
+# * A JSON dictionary which describe a whitelisted PCI device. It should take
+#   the following format:
+#
+#     ["vendor_id": "<id>",] ["product_id": "<id>",]
+#     ["address": "[[[[<domain>]:]<bus>]:][<slot>][.[<function>]]" |
+#      "devname": "<name>",]
+#     {"<tag>": "<tag_value>",}
+#
+#   Where '[' indicates zero or one occurrences, '{' indicates zero or multiple
+#   occurrences, and '|' mutually exclusive options. Note that any missing
+#   fields are automatically wildcarded.
+#
+#   Valid key values are :
+#
+#   * "vendor_id": Vendor ID of the device in hexadecimal.
+#   * "product_id": Product ID of the device in hexadecimal.
+#   * "address": PCI address of the device.
+#   * "devname": Device name of the device (for e.g. interface name). Not all
+#     PCI devices have a name.
+#   * "<tag>": Additional <tag> and <tag_value> used for matching PCI devices.
+#     Supported <tag>: "physical_network".
+#
+#   The address key supports traditional glob style and regular expression
+#   syntax. Valid examples are:
+#
+#     passthrough_whitelist = {"devname":"eth0",
+#                              "physical_network":"physnet"}
+#     passthrough_whitelist = {"address":"*:0a:00.*"}
+#     passthrough_whitelist = {"address":":0a:00.",
+#                              "physical_network":"physnet1"}
+#     passthrough_whitelist = {"vendor_id":"1137",
+#                              "product_id":"0071"}
+#     passthrough_whitelist = {"vendor_id":"1137",
+#                              "product_id":"0071",
+#                              "address": "0000:0a:00.1",
+#                              "physical_network":"physnet1"}
+#     passthrough_whitelist = {"address":{"domain": ".*",
+#                                         "bus": "02", "slot": "01",
+#                                         "function": "[2-7]"},
+#                              "physical_network":"physnet1"}
+#     passthrough_whitelist = {"address":{"domain": ".*",
+#                                         "bus": "02", "slot": "0[1-2]",
+#                                         "function": ".*"},
+#                              "physical_network":"physnet1"}
+#
+#   The following are invalid, as they specify mutually exclusive options:
+#
+#     passthrough_whitelist = {"devname":"eth0",
+#                              "physical_network":"physnet",
+#                              "address":"*:0a:00.*"}
+#
+# * A JSON list of JSON dictionaries corresponding to the above format. For
+#   example:
+#
+#     passthrough_whitelist = [{"product_id":"0001", "vendor_id":"8086"},
+#                              {"product_id":"0002", "vendor_id":"8086"}]
+#  (multi valued)
+# Deprecated group/name - [DEFAULT]/pci_passthrough_whitelist
+#passthrough_whitelist =
+
+
+[placement]
+
+#
+# From nova.conf
+#
+
+#
+# Region name of this node. This is used when picking the URL in the service
+# catalog.
+#
+# Possible values:
+#
+# * Any string representing region name
+#  (string value)
+os_region_name = RegionOne
+auth_type = password
+user_domain_id = default
+project_domain_id = default
+project_name = service
+username = nova
+password = opnfv_secret
+auth_url=http://192.168.10.35:35357/v3
+os_interface = internal
+
+#
+# Endpoint interface for this node. This is used when picking the URL in the
+# service catalog.
+#  (string value)
+#os_interface=<None>
+
+# PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# (string value)
+#cafile=<None>
+
+# PEM encoded client certificate cert file (string value)
+#certfile=<None>
+
+# PEM encoded client certificate key file (string value)
+#keyfile=<None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure=false
+
+# Timeout value for http requests (integer value)
+#timeout=<None>
+
+# Authentication type to load (string value)
+# Deprecated group/name - [placement]/auth_plugin
+#auth_type=<None>
+
+# Config Section from which to load plugin specific options (string value)
+#auth_section=<None>
+
+# Authentication URL (string value)
+#auth_url=<None>
+
+# Domain ID to scope to (string value)
+#domain_id=<None>
+
+# Domain name to scope to (string value)
+#domain_name=<None>
+
+# Project ID to scope to (string value)
+#project_id=<None>
+
+# Project name to scope to (string value)
+#project_name=<None>
+
+# Domain ID containing project (string value)
+#project_domain_id=<None>
+
+# Domain name containing project (string value)
+#project_domain_name=<None>
+
+# Trust ID (string value)
+#trust_id=<None>
+
+# Optional domain ID to use with v3 and v2 parameters. It will be used for both
+# the user and project domain in v3 and ignored in v2 authentication. (string
+# value)
+#default_domain_id=<None>
+
+# Optional domain name to use with v3 API and v2 parameters. It will be used for
+# both the user and project domain in v3 and ignored in v2 authentication.
+# (string value)
+#default_domain_name=<None>
+
+# User ID (string value)
+#user_id=<None>
+
+# Username (string value)
+# Deprecated group/name - [placement]/user-name
+#username=<None>
+
+# User's domain id (string value)
+#user_domain_id=<None>
+
+# User's domain name (string value)
+#user_domain_name=<None>
+
+# User's password (string value)
+#password=<None>
+
+# Tenant ID (string value)
+#tenant_id=<None>
+
+# Tenant Name (string value)
+#tenant_name=<None>
+
+
+[quota]
+#
+# Quota options allow to manage quotas in openstack deployment.
+
+#
+# From nova.conf
+#
+
+#
+# The number of instances allowed per project.
+#
+# Possible Values
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_instances
+#instances=10
+
+#
+# The number of instance cores or vCPUs allowed per project.
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_cores
+#cores=20
+
+#
+# The number of megabytes of instance RAM allowed per project.
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_ram
+#ram=51200
+
+# DEPRECATED:
+# The number of floating IPs allowed per project.
+#
+# Floating IPs are not allocated to instances by default. Users need to select
+# them from the pool configured by the OpenStack administrator to attach to
+# their
+# instances.
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_floating_ips
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#floating_ips=10
+
+# DEPRECATED:
+# The number of fixed IPs allowed per project.
+#
+# Unlike floating IPs, fixed IPs are allocated dynamically by the network
+# component when instances boot up.  This quota value should be at least the
+# number of instances allowed
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_fixed_ips
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#fixed_ips=-1
+
+#
+# The number of metadata items allowed per instance.
+#
+# Users can associate metadata with an instance during instance creation. This
+# metadata takes the form of key-value pairs.
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_metadata_items
+#metadata_items=128
+
+#
+# The number of injected files allowed.
+#
+# File injection allows users to customize the personality of an instance by
+# injecting data into it upon boot. Only text file injection is permitted:
+# binary
+# or ZIP files are not accepted. During file injection, any existing files that
+# match specified files are renamed to include ``.bak`` extension appended with
+# a
+# timestamp.
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_injected_files
+#injected_files=5
+
+#
+# The number of bytes allowed per injected file.
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_injected_file_content_bytes
+#injected_file_content_bytes=10240
+
+#
+# The maximum allowed injected file path length.
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_injected_file_path_length
+#injected_file_path_length=255
+
+# DEPRECATED:
+# The number of security groups per project.
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_security_groups
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#security_groups=10
+
+# DEPRECATED:
+# The number of security rules per security group.
+#
+# The associated rules in each security group control the traffic to instances
+# in
+# the group.
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_security_group_rules
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration options.
+#security_group_rules=20
+
+#
+# The maximum number of key pairs allowed per user.
+#
+# Users can create at least one key pair for each project and use the key pair
+# for multiple instances that belong to that project.
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_key_pairs
+#key_pairs=100
+
+#
+# The maxiumum number of server groups per project.
+#
+# Server groups are used to control the affinity and anti-affinity scheduling
+# policy for a group of servers or instances. Reducing the quota will not affect
+# any existing group, but new servers will not be allowed into groups that have
+# become over quota.
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_server_groups
+#server_groups=10
+
+#
+# The maximum number of servers per server group.
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_server_group_members
+#server_group_members=10
+
+#
+# The number of seconds until a reservation expires.
+#
+# This quota represents the time period for invalidating quota reservations.
+#  (integer value)
+# Deprecated group/name - [DEFAULT]/reservation_expire
+#reservation_expire=86400
+reservation_expire=86400
+
+#
+# The count of reservations until usage is refreshed.
+#
+# This defaults to 0 (off) to avoid additional load but it is useful to turn on
+# to help keep quota usage up-to-date and reduce the impact of out of sync usage
+# issues.
+#  (integer value)
+# Minimum value: 0
+# Deprecated group/name - [DEFAULT]/until_refresh
+#until_refresh=0
+until_refresh=0
+
+#
+# The number of seconds between subsequent usage refreshes.
+#
+# This defaults to 0 (off) to avoid additional load but it is useful to turn on
+# to help keep quota usage up-to-date and reduce the impact of out of sync usage
+# issues. Note that quotas are not updated on a periodic task, they will update
+# on a new reservation if max_age has passed since the last reservation.
+#  (integer value)
+# Minimum value: 0
+# Deprecated group/name - [DEFAULT]/max_age
+#max_age=0
+
+# DEPRECATED:
+# The quota enforcer driver.
+#
+# Provides abstraction for quota checks. Users can configure a specific
+# driver to use for quota checks.
+#
+# Possible values:
+#
+# * nova.quota.DbQuotaDriver (default) or any string representing fully
+#   qualified class name.
+#  (string value)
+# Deprecated group/name - [DEFAULT]/quota_driver
+# This option is deprecated for removal since 14.0.0.
+# Its value may be silently ignored in the future.
+#driver=nova.quota.DbQuotaDriver
+
+
+[rdp]
+#
+# Options under this group enable and configure Remote Desktop Protocol (
+# RDP) related features.
+#
+# This group is only relevant to Hyper-V users.
+
+#
+# From nova.conf
+#
+
+#
+# Enable Remote Desktop Protocol (RDP) related features.
+#
+# Hyper-V, unlike the majority of the hypervisors employed on Nova compute
+# nodes, uses RDP instead of VNC and SPICE as a desktop sharing protocol to
+# provide instance console access. This option enables RDP for graphical
+# console access for virtual machines created by Hyper-V.
+#
+# **Note:** RDP should only be enabled on compute nodes that support the Hyper-V
+# virtualization platform.
+#
+# Related options:
+#
+# * ``compute_driver``: Must be hyperv.
+#
+#  (boolean value)
+#enabled=false
+
+#
+# The URL an end user would use to connect to the RDP HTML5 console proxy.
+# The console proxy service is called with this token-embedded URL and
+# establishes the connection to the proper instance.
+#
+# An RDP HTML5 console proxy service will need to be configured to listen on the
+# address configured here. Typically the console proxy service would be run on a
+# controller node. The localhost address used as default would only work in a
+# single node environment i.e. devstack.
+#
+# An RDP HTML5 proxy allows a user to access via the web the text or graphical
+# console of any Windows server or workstation using RDP. RDP HTML5 console
+# proxy services include FreeRDP, wsgate.
+# See https://github.com/FreeRDP/FreeRDP-WebConnect
+#
+# Possible values:
+#
+# * <scheme>://<ip-address>:<port-number>/
+#
+#   The scheme must be identical to the scheme configured for the RDP HTML5
+#   console proxy service.
+#
+#   The IP address must be identical to the address on which the RDP HTML5
+#   console proxy service is listening.
+#
+#   The port must be identical to the port on which the RDP HTML5 console proxy
+#   service is listening.
+#
+# Related options:
+#
+# * ``rdp.enabled``: Must be set to ``True`` for ``html5_proxy_base_url`` to be
+#   effective.
+#  (string value)
+#html5_proxy_base_url=http://127.0.0.1:6083/
+
+
+[remote_debug]
+
+#
+# From nova.conf
+#
+
+#
+# Debug host (IP or name) to connect to. This command line parameter is used
+# when
+# you want to connect to a nova service via a debugger running on a different
+# host.
+#
+# Note that using the remote debug option changes how Nova uses the eventlet
+# library to support async IO. This could result in failures that do not occur
+# under normal operation. Use at your own risk.
+#
+# Possible Values:
+#
+#    * IP address of a remote host as a command line parameter
+#      to a nova service. For Example:
+#
+#     /usr/local/bin/nova-compute --config-file /etc/nova/nova.conf
+#     --remote_debug-host <IP address where the debugger is running>
+#  (string value)
+#host=<None>
+
+#
+# Debug port to connect to. This command line parameter allows you to specify
+# the port you want to use to connect to a nova service via a debugger running
+# on different host.
+#
+# Note that using the remote debug option changes how Nova uses the eventlet
+# library to support async IO. This could result in failures that do not occur
+# under normal operation. Use at your own risk.
+#
+# Possible Values:
+#
+#    * Port number you want to use as a command line parameter
+#      to a nova service. For Example:
+#
+#     /usr/local/bin/nova-compute --config-file /etc/nova/nova.conf
+#     --remote_debug-host <IP address where the debugger is running>
+#     --remote_debug-port <port> it's listening on>.
+#  (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#port=<None>
+
+
+[scheduler]
+
+#
+# From nova.conf
+#
+
+#
+# The scheduler host manager to use.
+#
+# The host manager manages the in-memory picture of the hosts that the scheduler
+# uses. The options values are chosen from the entry points under the namespace
+# 'nova.scheduler.host_manager' in 'setup.cfg'.
+#  (string value)
+# Allowed values: host_manager, ironic_host_manager
+# Deprecated group/name - [DEFAULT]/scheduler_host_manager
+#host_manager=host_manager
+host_manager=host_manager
+
+#
+# The class of the driver used by the scheduler.
+#
+# The options are chosen from the entry points under the namespace
+# 'nova.scheduler.driver' in 'setup.cfg'.
+#
+# Possible values:
+#
+# * A string, where the string corresponds to the class name of a scheduler
+#   driver. There are a number of options available:
+# ** 'caching_scheduler', which aggressively caches the system state for better
+#    individual scheduler performance at the risk of more retries when running
+#    multiple schedulers
+# ** 'chance_scheduler', which simply picks a host at random
+# ** 'fake_scheduler', which is used for testing
+# ** A custom scheduler driver. In this case, you will be responsible for
+#    creating and maintaining the entry point in your 'setup.cfg' file
+#  (string value)
+# Allowed values: filter_scheduler, caching_scheduler, chance_scheduler, fake_scheduler
+# Deprecated group/name - [DEFAULT]/scheduler_driver
+#driver=filter_scheduler
+driver=filter_scheduler
+
+#
+# Periodic task interval.
+#
+# This value controls how often (in seconds) to run periodic tasks in the
+# scheduler. The specific tasks that are run for each period are determined by
+# the particular scheduler being used.
+#
+# If this is larger than the nova-service 'service_down_time' setting, Nova may
+# report the scheduler service as down. This is because the scheduler driver is
+# responsible for sending a heartbeat and it will only do that as often as this
+# option allows. As each scheduler can work a little differently than the
+# others,
+# be sure to test this with your selected scheduler.
+#
+# Possible values:
+#
+# * An integer, where the integer corresponds to periodic task interval in
+#   seconds. 0 uses the default interval (60 seconds). A negative value disables
+#   periodic tasks.
+#
+# Related options:
+#
+# * ``nova-service service_down_time``
+#  (integer value)
+# Deprecated group/name - [DEFAULT]/scheduler_driver_task_period
+#periodic_task_interval=60
+
+#
+# Maximum number of schedule attempts for a chosen host.
+#
+# This is the maximum number of attempts that will be made to schedule an
+# instance before it is assumed that the failures aren't due to normal
+# occasional
+# race conflicts, but rather some other problem. When this is reached a
+# MaxRetriesExceeded exception is raised, and the instance is set to an error
+# state.
+#
+# Possible values:
+#
+# * A positive integer, where the integer corresponds to the max number of
+#   attempts that can be made when scheduling an instance.
+#          (integer value)
+# Minimum value: 1
+# Deprecated group/name - [DEFAULT]/scheduler_max_attempts
+#max_attempts=3
+max_attempts=3
+
+#
+# Periodic task interval.
+#
+# This value controls how often (in seconds) the scheduler should attempt
+# to discover new hosts that have been added to cells. If negative (the
+# default), no automatic discovery will occur.
+#
+# Small deployments may want this periodic task enabled, as surveying the
+# cells for new hosts is likely to be lightweight enough to not cause undue
+# burdon to the scheduler. However, larger clouds (and those that are not
+# adding hosts regularly) will likely want to disable this automatic
+# behavior and instead use the `nova-manage cell_v2 discover_hosts` command
+# when hosts have been added to a cell.
+#  (integer value)
+# Minimum value: -1
+#discover_hosts_in_cells_interval=-1
+discover_hosts_in_cells_interval=300
+
+
+[serial_console]
+#
+# The serial console feature allows you to connect to a guest in case a
+# graphical console like VNC, RDP or SPICE is not available. This is only
+# currently supported for the libvirt, Ironic and hyper-v drivers.
+
+#
+# From nova.conf
+#
+
+#
+# Enable the serial console feature.
+#
+# In order to use this feature, the service ``nova-serialproxy`` needs to run.
+# This service is typically executed on the controller node.
+#  (boolean value)
+#enabled=false
+
+#
+# A range of TCP ports a guest can use for its backend.
+#
+# Each instance which gets created will use one port out of this range. If the
+# range is not big enough to provide another port for an new instance, this
+# instance won't get launched.
+#
+# Possible values:
+#
+# * Each string which passes the regex ``\d+:\d+`` For example ``10000:20000``.
+#   Be sure that the first port number is lower than the second port number
+#   and that both are in range from 0 to 65535.
+#  (string value)
+#port_range=10000:20000
+
+#
+# The URL an end user would use to connect to the ``nova-serialproxy`` service.
+#
+# The ``nova-serialproxy`` service is called with this token enriched URL
+# and establishes the connection to the proper instance.
+#
+# Related options:
+#
+# * The IP address must be identical to the address to which the
+#   ``nova-serialproxy`` service is listening (see option ``serialproxy_host``
+#   in this section).
+# * The port must be the same as in the option ``serialproxy_port`` of this
+#   section.
+# * If you choose to use a secured websocket connection, then start this option
+#   with ``wss://`` instead of the unsecured ``ws://``. The options ``cert``
+#   and ``key`` in the ``[DEFAULT]`` section have to be set for that.
+#  (uri value)
+#base_url=ws://127.0.0.1:6083/
+
+#
+# The IP address to which proxy clients (like ``nova-serialproxy``) should
+# connect to get the serial console of an instance.
+#
+# This is typically the IP address of the host of a ``nova-compute`` service.
+#  (string value)
+#proxyclient_address=127.0.0.1
+
+#
+# The IP address which is used by the ``nova-serialproxy`` service to listen
+# for incoming requests.
+#
+# The ``nova-serialproxy`` service listens on this IP address for incoming
+# connection requests to instances which expose serial console.
+#
+# Related options:
+#
+# * Ensure that this is the same IP address which is defined in the option
+#   ``base_url`` of this section or use ``0.0.0.0`` to listen on all addresses.
+#  (string value)
+#serialproxy_host=0.0.0.0
+
+#
+# The port number which is used by the ``nova-serialproxy`` service to listen
+# for incoming requests.
+#
+# The ``nova-serialproxy`` service listens on this port number for incoming
+# connection requests to instances which expose serial console.
+#
+# Related options:
+#
+# * Ensure that this is the same port number which is defined in the option
+#   ``base_url`` of this section.
+#  (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#serialproxy_port=6083
+
+
+[service_user]
+#
+# Configuration options for service to service authentication using a service
+# token. These options allow to send a service token along with the
+# user's token when contacting external REST APIs.
+
+#
+# From nova.conf
+#
+
+#
+# When True, if sending a user token to an REST API, also send a service token.
+#
+# Nova often reuses the user token provided to the nova-api to talk to other
+# REST APIs, such as Cinder and Neutron. It is possible that while the
+# user token was valid when the request was made to Nova, the token may expire
+# before it reaches the other service. To avoid any failures, and to
+# make it clear it is Nova calling the service on the users behalf, we include
+# a server token along with the user token. Should the user's token have
+# expired, a valid service token ensures the REST API request will still be
+# accepted by the keystone middleware.
+#
+# This feature is currently experimental, and as such is turned off by default
+# while full testing and performance tuning of this feature is completed.
+#  (boolean value)
+#send_service_user_token=false
+
+# PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# (string value)
+#cafile=<None>
+
+# PEM encoded client certificate cert file (string value)
+#certfile=<None>
+
+# PEM encoded client certificate key file (string value)
+#keyfile=<None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure=false
+
+# Timeout value for http requests (integer value)
+#timeout=<None>
+
+# Authentication type to load (string value)
+# Deprecated group/name - [service_user]/auth_plugin
+#auth_type=<None>
+
+# Config Section from which to load plugin specific options (string value)
+#auth_section=<None>
+
+# Authentication URL (string value)
+#auth_url=<None>
+
+# Domain ID to scope to (string value)
+#domain_id=<None>
+
+# Domain name to scope to (string value)
+#domain_name=<None>
+
+# Project ID to scope to (string value)
+#project_id=<None>
+
+# Project name to scope to (string value)
+#project_name=<None>
+
+# Domain ID containing project (string value)
+#project_domain_id=<None>
+
+# Domain name containing project (string value)
+#project_domain_name=<None>
+
+# Trust ID (string value)
+#trust_id=<None>
+
+# Optional domain ID to use with v3 and v2 parameters. It will be used for both
+# the user and project domain in v3 and ignored in v2 authentication. (string
+# value)
+#default_domain_id=<None>
+
+# Optional domain name to use with v3 API and v2 parameters. It will be used for
+# both the user and project domain in v3 and ignored in v2 authentication.
+# (string value)
+#default_domain_name=<None>
+
+# User ID (string value)
+#user_id=<None>
+
+# Username (string value)
+# Deprecated group/name - [service_user]/user-name
+#username=<None>
+
+# User's domain id (string value)
+#user_domain_id=<None>
+
+# User's domain name (string value)
+#user_domain_name=<None>
+
+# User's password (string value)
+#password=<None>
+
+# Tenant ID (string value)
+#tenant_id=<None>
+
+# Tenant Name (string value)
+#tenant_name=<None>
+
+
+[spice]
+#
+# SPICE console feature allows you to connect to a guest virtual machine.
+# SPICE is a replacement for fairly limited VNC protocol.
+#
+# Following requirements must be met in order to use SPICE:
+#
+# * Virtualization driver must be libvirt
+# * spice.enabled set to True
+# * vnc.enabled set to False
+# * update html5proxy_base_url
+# * update server_proxyclient_address
+enabled = false
+html5proxy_base_url = https://100.64.200.101:6080/spice_auto.html
+#
+# From nova.conf
+#
+
+#
+# Enable SPICE related features.
+#
+# Related options:
+#
+# * VNC must be explicitly disabled to get access to the SPICE console. Set the
+#   enabled option to False in the [vnc] section to disable the VNC console.
+#  (boolean value)
+#enabled=false
+
+#
+# Enable the SPICE guest agent support on the instances.
+#
+# The Spice agent works with the Spice protocol to offer a better guest console
+# experience. However, the Spice console can still be used without the Spice
+# Agent. With the Spice agent installed the following features are enabled:
+#
+# * Copy & Paste of text and images between the guest and client machine
+# * Automatic adjustment of resolution when the client screen changes - e.g.
+#   if you make the Spice console full screen the guest resolution will adjust
+# to
+#   match it rather than letterboxing.
+# * Better mouse integration - The mouse can be captured and released without
+#   needing to click inside the console or press keys to release it. The
+#   performance of mouse movement is also improved.
+#  (boolean value)
+#agent_enabled=true
+
+#
+# Location of the SPICE HTML5 console proxy.
+#
+# End user would use this URL to connect to the `nova-spicehtml5proxy``
+# service. This service will forward request to the console of an instance.
+#
+# In order to use SPICE console, the service ``nova-spicehtml5proxy`` should be
+# running. This service is typically launched on the controller node.
+#
+# Possible values:
+#
+# * Must be a valid URL of the form:  ``http://host:port/spice_auto.html``
+#   where host is the node running ``nova-spicehtml5proxy`` and the port is
+#   typically 6082. Consider not using default value as it is not well defined
+#   for any real deployment.
+#
+# Related options:
+#
+# * This option depends on ``html5proxy_host`` and ``html5proxy_port`` options.
+#   The access URL returned by the compute node must have the host
+#   and port where the ``nova-spicehtml5proxy`` service is listening.
+#  (uri value)
+#html5proxy_base_url=http://127.0.0.1:6082/spice_auto.html
+
+#
+# The  address where the SPICE server running on the instances should listen.
+#
+# Typically, the ``nova-spicehtml5proxy`` proxy client runs on the controller
+# node and connects over the private network to this address on the compute
+# node(s).
+#
+# Possible values:
+#
+# * IP address to listen on.
+#  (string value)
+#server_listen=127.0.0.1
+
+#
+# The address used by ``nova-spicehtml5proxy`` client to connect to instance
+# console.
+#
+# Typically, the ``nova-spicehtml5proxy`` proxy client runs on the
+# controller node and connects over the private network to this address on the
+# compute node(s).
+#
+# Possible values:
+#
+# * Any valid IP address on the compute node.
+#
+# Related options:
+#
+# * This option depends on the ``server_listen`` option.
+#   The proxy client must be able to access the address specified in
+#   ``server_listen`` using the value of this option.
+#  (string value)
+#server_proxyclient_address=127.0.0.1
+
+#
+# A keyboard layout which is supported by the underlying hypervisor on this
+# node.
+#
+# Possible values:
+# * This is usually an 'IETF language tag' (default is 'en-us'). If you
+#   use QEMU as hypervisor, you should find the list of supported keyboard
+#   layouts at /usr/share/qemu/keymaps.
+#  (string value)
+#keymap=en-us
+
+#
+# IP address or a hostname on which the ``nova-spicehtml5proxy`` service
+# listens for incoming requests.
+#
+# Related options:
+#
+# * This option depends on the ``html5proxy_base_url`` option.
+#   The ``nova-spicehtml5proxy`` service must be listening on a host that is
+#   accessible from the HTML5 client.
+#  (string value)
+#html5proxy_host=0.0.0.0
+
+#
+# Port on which the ``nova-spicehtml5proxy`` service listens for incoming
+# requests.
+#
+# Related options:
+#
+# * This option depends on the ``html5proxy_base_url`` option.
+#   The ``nova-spicehtml5proxy`` service must be listening on a port that is
+#   accessible from the HTML5 client.
+#  (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#html5proxy_port=6082
+
+
+[ssl]
+
+#
+# From nova.conf
+#
+
+# CA certificate file to use to verify connecting clients. (string value)
+# Deprecated group/name - [DEFAULT]/ssl_ca_file
+
+# Certificate file to use when starting the server securely. (string value)
+# Deprecated group/name - [DEFAULT]/ssl_cert_file
+#cert_file=<None>
+
+# Private key file to use when starting the server securely. (string value)
+# Deprecated group/name - [DEFAULT]/ssl_key_file
+#key_file=<None>
+
+# SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and
+# SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some
+# distributions. (string value)
+#version=<None>
+
+# Sets the list of available ciphers. value should be a string in the OpenSSL
+# cipher list format. (string value)
+#ciphers=<None>
+
+
+[trusted_computing]
+#
+# Configuration options for enabling Trusted Platform Module.
+
+#
+# From nova.conf
+#
+
+#
+# The host to use as the attestation server.
+#
+# Cloud computing pools can involve thousands of compute nodes located at
+# different geographical locations, making it difficult for cloud providers to
+# identify a node's trustworthiness. When using the Trusted filter, users can
+# request that their VMs only be placed on nodes that have been verified by the
+# attestation server specified in this option.
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect. Also note that this setting
+# only affects scheduling if the 'TrustedFilter' filter is enabled.
+#
+# Possible values:
+#
+# * A string representing the host name or IP address of the attestation server,
+#   or an empty string.
+#
+# Related options:
+#
+# * attestation_server_ca_file
+# * attestation_port
+# * attestation_api_url
+# * attestation_auth_blob
+# * attestation_auth_timeout
+# * attestation_insecure_ssl
+#  (string value)
+#attestation_server=<None>
+
+#
+# The absolute path to the certificate to use for authentication when connecting
+# to the attestation server. See the `attestation_server` help text for more
+# information about host verification.
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect. Also note that this setting
+# only affects scheduling if the 'TrustedFilter' filter is enabled.
+#
+# Possible values:
+#
+# * A string representing the path to the authentication certificate for the
+#   attestation server, or an empty string.
+#
+# Related options:
+#
+# * attestation_server
+# * attestation_port
+# * attestation_api_url
+# * attestation_auth_blob
+# * attestation_auth_timeout
+# * attestation_insecure_ssl
+#  (string value)
+#attestation_server_ca_file=<None>
+
+#
+# The port to use when connecting to the attestation server. See the
+# `attestation_server` help text for more information about host verification.
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect. Also note that this setting
+# only affects scheduling if the 'TrustedFilter' filter is enabled.
+#
+# Related options:
+#
+# * attestation_server
+# * attestation_server_ca_file
+# * attestation_api_url
+# * attestation_auth_blob
+# * attestation_auth_timeout
+# * attestation_insecure_ssl
+#  (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#attestation_port=8443
+
+#
+# The URL on the attestation server to use. See the `attestation_server` help
+# text for more information about host verification.
+#
+# This value must be just that path portion of the full URL, as it will be
+# joined
+# to the host specified in the attestation_server option.
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect. Also note that this setting
+# only affects scheduling if the 'TrustedFilter' filter is enabled.
+#
+# Possible values:
+#
+# * A valid URL string of the attestation server, or an empty string.
+#
+# Related options:
+#
+# * attestation_server
+# * attestation_server_ca_file
+# * attestation_port
+# * attestation_auth_blob
+# * attestation_auth_timeout
+# * attestation_insecure_ssl
+#  (string value)
+#attestation_api_url=/OpenAttestationWebServices/V1.0
+
+#
+# Attestation servers require a specific blob that is used to authenticate. The
+# content and format of the blob are determined by the particular attestation
+# server being used. There is no default value; you must supply the value as
+# specified by your attestation service. See the `attestation_server` help text
+# for more information about host verification.
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect. Also note that this setting
+# only affects scheduling if the 'TrustedFilter' filter is enabled.
+#
+# Possible values:
+#
+# * A string containing the specific blob required by the attestation server, or
+#   an empty string.
+#
+# Related options:
+#
+# * attestation_server
+# * attestation_server_ca_file
+# * attestation_port
+# * attestation_api_url
+# * attestation_auth_timeout
+# * attestation_insecure_ssl
+#  (string value)
+#attestation_auth_blob=<None>
+
+#
+# This value controls how long a successful attestation is cached. Once this
+# period has elapsed, a new attestation request will be made. See the
+# `attestation_server` help text for more information about host verification.
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect. Also note that this setting
+# only affects scheduling if the 'TrustedFilter' filter is enabled.
+#
+# Possible values:
+#
+# * A integer value, corresponding to the timeout interval for attestations in
+#   seconds. Any integer is valid, although setting this to zero or negative
+#   values can greatly impact performance when using an attestation service.
+#
+# Related options:
+#
+# * attestation_server
+# * attestation_server_ca_file
+# * attestation_port
+# * attestation_api_url
+# * attestation_auth_blob
+# * attestation_insecure_ssl
+#  (integer value)
+#attestation_auth_timeout=60
+
+#
+# When set to True, the SSL certificate verification is skipped for the
+# attestation service. See the `attestation_server` help text for more
+# information about host verification.
+#
+# This option is only used by the FilterScheduler and its subclasses; if you use
+# a different scheduler, this option has no effect. Also note that this setting
+# only affects scheduling if the 'TrustedFilter' filter is enabled.
+#
+# Related options:
+#
+# * attestation_server
+# * attestation_server_ca_file
+# * attestation_port
+# * attestation_api_url
+# * attestation_auth_blob
+# * attestation_auth_timeout
+#  (boolean value)
+#attestation_insecure_ssl=false
+
+
+[upgrade_levels]
+#
+# upgrade_levels options are used to set version cap for RPC
+# messages sent between different nova services.
+#
+# By default all services send messages using the latest version
+# they know about.
+#
+# The compute upgrade level is an important part of rolling upgrades
+# where old and new nova-compute services run side by side.
+#
+# The other options can largely be ignored, and are only kept to
+# help with a possible future backport issue.
+
+#
+# From nova.conf
+#
+
+#
+# Compute RPC API version cap.
+#
+# By default, we always send messages using the most recent version
+# the client knows about.
+#
+# Where you have old and new compute services running, you should set
+# this to the lowest deployed version. This is to guarantee that all
+# services never send messages that one of the compute nodes can't
+# understand. Note that we only support upgrading from release N to
+# release N+1.
+#
+# Set this option to "auto" if you want to let the compute RPC module
+# automatically determine what version to use based on the service
+# versions in the deployment.
+#
+# Possible values:
+#
+# * By default send the latest version the client knows about
+# * 'auto': Automatically determines what version to use based on
+#   the service versions in the deployment.
+# * A string representing a version number in the format 'N.N';
+#   for example, possible values might be '1.12' or '2.0'.
+# * An OpenStack release name, in lower case, such as 'mitaka' or
+#   'liberty'.
+#  (string value)
+#compute=<None>
+
+# Cells RPC API version cap (string value)
+#cells=<None>
+
+# Intercell RPC API version cap (string value)
+#intercell=<None>
+
+# Cert RPC API version cap (string value)
+#cert=<None>
+
+# Scheduler RPC API version cap (string value)
+#scheduler=<None>
+
+# Conductor RPC API version cap (string value)
+#conductor=<None>
+
+# Console RPC API version cap (string value)
+#console=<None>
+
+# Consoleauth RPC API version cap (string value)
+#consoleauth=<None>
+
+# Network RPC API version cap (string value)
+#network=<None>
+
+# Base API RPC API version cap (string value)
+#baseapi=<None>
+
+
+[vendordata_dynamic_auth]
+#
+# Options within this group control the authentication of the vendordata
+# subsystem of the metadata API server (and config drive) with external systems.
+
+#
+# From nova.conf
+#
+
+# PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# (string value)
+#cafile=<None>
+
+# PEM encoded client certificate cert file (string value)
+#certfile=<None>
+
+# PEM encoded client certificate key file (string value)
+#keyfile=<None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure=false
+
+# Timeout value for http requests (integer value)
+#timeout=<None>
+
+# Authentication type to load (string value)
+# Deprecated group/name - [vendordata_dynamic_auth]/auth_plugin
+#auth_type=<None>
+
+# Config Section from which to load plugin specific options (string value)
+#auth_section=<None>
+
+# Authentication URL (string value)
+#auth_url=<None>
+
+# Domain ID to scope to (string value)
+#domain_id=<None>
+
+# Domain name to scope to (string value)
+#domain_name=<None>
+
+# Project ID to scope to (string value)
+#project_id=<None>
+
+# Project name to scope to (string value)
+#project_name=<None>
+
+# Domain ID containing project (string value)
+#project_domain_id=<None>
+
+# Domain name containing project (string value)
+#project_domain_name=<None>
+
+# Trust ID (string value)
+#trust_id=<None>
+
+# Optional domain ID to use with v3 and v2 parameters. It will be used for both
+# the user and project domain in v3 and ignored in v2 authentication. (string
+# value)
+#default_domain_id=<None>
+
+# Optional domain name to use with v3 API and v2 parameters. It will be used for
+# both the user and project domain in v3 and ignored in v2 authentication.
+# (string value)
+#default_domain_name=<None>
+
+# User ID (string value)
+#user_id=<None>
+
+# Username (string value)
+# Deprecated group/name - [vendordata_dynamic_auth]/user-name
+#username=<None>
+
+# User's domain id (string value)
+#user_domain_id=<None>
+
+# User's domain name (string value)
+#user_domain_name=<None>
+
+# User's password (string value)
+#password=<None>
+
+# Tenant ID (string value)
+#tenant_id=<None>
+
+# Tenant Name (string value)
+#tenant_name=<None>
+
+
+[vmware]
+#
+# Related options:
+# Following options must be set in order to launch VMware-based
+# virtual machines.
+#
+# * compute_driver: Must use vmwareapi.VMwareVCDriver.
+# * vmware.host_username
+# * vmware.host_password
+# * vmware.cluster_name
+
+#
+# From nova.conf
+#
+
+#
+# This option specifies the physical ethernet adapter name for VLAN
+# networking.
+#
+# Set the vlan_interface configuration option to match the ESX host
+# interface that handles VLAN-tagged VM traffic.
+#
+# Possible values:
+#
+# * Any valid string representing VLAN interface name
+#  (string value)
+#vlan_interface=vmnic0
+
+#
+# This option should be configured only when using the NSX-MH Neutron
+# plugin. This is the name of the integration bridge on the ESXi server
+# or host. This should not be set for any other Neutron plugin. Hence
+# the default value is not set.
+#
+# Possible values:
+#
+# * Any valid string representing the name of the integration bridge
+#  (string value)
+#integration_bridge=<None>
+
+#
+# Set this value if affected by an increased network latency causing
+# repeated characters when typing in a remote console.
+#  (integer value)
+# Minimum value: 0
+#console_delay_seconds=<None>
+
+#
+# Identifies the remote system where the serial port traffic will
+# be sent.
+#
+# This option adds a virtual serial port which sends console output to
+# a configurable service URI. At the service URI address there will be
+# virtual serial port concentrator that will collect console logs.
+# If this is not set, no serial ports will be added to the created VMs.
+#
+# Possible values:
+#
+# * Any valid URI
+#  (string value)
+#serial_port_service_uri=<None>
+
+#
+# Identifies a proxy service that provides network access to the
+# serial_port_service_uri.
+#
+# Possible values:
+#
+# * Any valid URI
+#
+# Related options:
+# This option is ignored if serial_port_service_uri is not specified.
+# * serial_port_service_uri
+#  (string value)
+#serial_port_proxy_uri=<None>
+
+#
+# Hostname or IP address for connection to VMware vCenter host. (string value)
+#host_ip=<None>
+
+# Port for connection to VMware vCenter host. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#host_port=443
+
+# Username for connection to VMware vCenter host. (string value)
+#host_username=<None>
+
+# Password for connection to VMware vCenter host. (string value)
+#host_password=<None>
+
+#
+# Specifies the CA bundle file to be used in verifying the vCenter
+# server certificate.
+#  (string value)
+#ca_file=<None>
+
+#
+# If true, the vCenter server certificate is not verified. If false,
+# then the default CA truststore is used for verification.
+#
+# Related options:
+# * ca_file: This option is ignored if "ca_file" is set.
+#  (boolean value)
+#insecure=false
+
+# Name of a VMware Cluster ComputeResource. (string value)
+#cluster_name=<None>
+
+#
+# Regular expression pattern to match the name of datastore.
+#
+# The datastore_regex setting specifies the datastores to use with
+# Compute. For example, datastore_regex="nas.*" selects all the data
+# stores that have a name starting with "nas".
+#
+# NOTE: If no regex is given, it just picks the datastore with the
+# most freespace.
+#
+# Possible values:
+#
+# * Any matching regular expression to a datastore must be given
+#  (string value)
+#datastore_regex=<None>
+
+#
+# Time interval in seconds to poll remote tasks invoked on
+# VMware VC server.
+#  (floating point value)
+#task_poll_interval=0.5
+
+#
+# Number of times VMware vCenter server API must be retried on connection
+# failures, e.g. socket error, etc.
+#  (integer value)
+# Minimum value: 0
+#api_retry_count=10
+
+#
+# This option specifies VNC starting port.
+#
+# Every VM created by ESX host has an option of enabling VNC client
+# for remote connection. Above option 'vnc_port' helps you to set
+# default starting port for the VNC client.
+#
+# Possible values:
+#
+# * Any valid port number within 5900 -(5900 + vnc_port_total)
+#
+# Related options:
+# Below options should be set to enable VNC client.
+# * vnc.enabled = True
+# * vnc_port_total
+#  (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#vnc_port=5900
+
+#
+# Total number of VNC ports.
+#  (integer value)
+# Minimum value: 0
+#vnc_port_total=10000
+
+#
+# This option enables/disables the use of linked clone.
+#
+# The ESX hypervisor requires a copy of the VMDK file in order to boot
+# up a virtual machine. The compute driver must download the VMDK via
+# HTTP from the OpenStack Image service to a datastore that is visible
+# to the hypervisor and cache it. Subsequent virtual machines that need
+# the VMDK use the cached version and don't have to copy the file again
+# from the OpenStack Image service.
+#
+# If set to false, even with a cached VMDK, there is still a copy
+# operation from the cache location to the hypervisor file directory
+# in the shared datastore. If set to true, the above copy operation
+# is avoided as it creates copy of the virtual machine that shares
+# virtual disks with its parent VM.
+#  (boolean value)
+#use_linked_clone=true
+
+# DEPRECATED:
+# This option specifies VIM Service WSDL Location
+#
+# If vSphere API versions 5.1 and later is being used, this section can
+# be ignored. If version is less than 5.1, WSDL files must be hosted
+# locally and their location must be specified in the above section.
+#
+# Optional over-ride to default location for bug work-arounds.
+#
+# Possible values:
+#
+# * http://<server>/vimService.wsdl
+# * file:///opt/stack/vmware/SDK/wsdl/vim25/vimService.wsdl
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Only vCenter versions earlier than 5.1 require this option and the
+# current minimum version is 5.1.
+#wsdl_location=<None>
+
+#
+# This option enables or disables storage policy based placement
+# of instances.
+#
+# Related options:
+#
+# * pbm_default_policy
+#  (boolean value)
+#pbm_enabled=false
+
+#
+# This option specifies the PBM service WSDL file location URL.
+#
+# Setting this will disable storage policy based placement
+# of instances.
+#
+# Possible values:
+#
+# * Any valid file path
+#   e.g file:///opt/SDK/spbm/wsdl/pbmService.wsdl
+#  (string value)
+#pbm_wsdl_location=<None>
+
+#
+# This option specifies the default policy to be used.
+#
+# If pbm_enabled is set and there is no defined storage policy for the
+# specific request, then this policy will be used.
+#
+# Possible values:
+#
+# * Any valid storage policy such as VSAN default storage policy
+#
+# Related options:
+#
+# * pbm_enabled
+#  (string value)
+#pbm_default_policy=<None>
+
+#
+# This option specifies the limit on the maximum number of objects to
+# return in a single result.
+#
+# A positive value will cause the operation to suspend the retrieval
+# when the count of objects reaches the specified limit. The server may
+# still limit the count to something less than the configured value.
+# Any remaining objects may be retrieved with additional requests.
+#  (integer value)
+# Minimum value: 0
+#maximum_objects=100
+
+#
+# This option adds a prefix to the folder where cached images are stored
+#
+# This is not the full path - just a folder prefix. This should only be
+# used when a datastore cache is shared between compute nodes.
+#
+# Note: This should only be used when the compute nodes are running on same
+# host or they have a shared file system.
+#
+# Possible values:
+#
+# * Any string representing the cache prefix to the folder
+#  (string value)
+#cache_prefix=<None>
+
+
+[vnc]
+#
+# Virtual Network Computer (VNC) can be used to provide remote desktop
+# console access to instances for tenants and/or administrators.
+
+#
+# From nova.conf
+#
+
+#
+# Enable VNC related features.
+#
+# Guests will get created with graphical devices to support this. Clients
+# (for example Horizon) can then establish a VNC connection to the guest.
+#  (boolean value)
+# Deprecated group/name - [DEFAULT]/vnc_enabled
+#enabled=true
+enabled=true
+
+#
+# Keymap for VNC.
+#
+# The keyboard mapping (keymap) determines which keyboard layout a VNC
+# session should use by default.
+#
+# Possible values:
+#
+# * A keyboard layout which is supported by the underlying hypervisor on
+#   this node. This is usually an 'IETF language tag' (for example
+#   'en-us').  If you use QEMU as hypervisor, you should find the  list
+#   of supported keyboard layouts at ``/usr/share/qemu/keymaps``.
+#  (string value)
+# Deprecated group/name - [DEFAULT]/vnc_keymap
+#keymap=en-us
+
+#
+# The IP address or hostname on which an instance should listen to for
+# incoming VNC connection requests on this node.
+#  (string value)
+# Deprecated group/name - [DEFAULT]/vncserver_listen
+#vncserver_listen=127.0.0.1
+
+#
+# Private, internal IP address or hostname of VNC console proxy.
+#
+# The VNC proxy is an OpenStack component that enables compute service
+# users to access their instances through VNC clients.
+#
+# This option sets the private address to which proxy clients, such as
+# ``nova-xvpvncproxy``, should connect to.
+#  (string value)
+# Deprecated group/name - [DEFAULT]/vncserver_proxyclient_address
+#vncserver_proxyclient_address=127.0.0.1
+
+#
+# Public address of noVNC VNC console proxy.
+#
+# The VNC proxy is an OpenStack component that enables compute service
+# users to access their instances through VNC clients. noVNC provides
+# VNC support through a websocket-based client.
+#
+# This option sets the public base URL to which client systems will
+# connect. noVNC clients can use this address to connect to the noVNC
+# instance and, by extension, the VNC sessions.
+#
+# Related options:
+#
+# * novncproxy_host
+# * novncproxy_port
+#  (uri value)
+# Deprecated group/name - [DEFAULT]/novncproxy_base_url
+#novncproxy_base_url=http://127.0.0.1:6080/vnc_auto.html
+enabled = true
+novncproxy_host = 192.168.10.38
+novncproxy_base_url = https://100.64.200.101:6080/vnc_auto.html
+novncproxy_port=6080
+vncserver_listen=192.168.10.38
+keymap = en-us
+
+#
+# IP address or hostname that the XVP VNC console proxy should bind to.
+#
+# The VNC proxy is an OpenStack component that enables compute service
+# users to access their instances through VNC clients. Xen provides
+# the Xenserver VNC Proxy, or XVP, as an alternative to the
+# websocket-based noVNC proxy used by Libvirt. In contrast to noVNC,
+# XVP clients are Java-based.
+#
+# This option sets the private address to which the XVP VNC console proxy
+# service should bind to.
+#
+# Related options:
+#
+# * xvpvncproxy_port
+# * xvpvncproxy_base_url
+#  (string value)
+# Deprecated group/name - [DEFAULT]/xvpvncproxy_host
+#xvpvncproxy_host=0.0.0.0
+
+#
+# Port that the XVP VNC console proxy should bind to.
+#
+# The VNC proxy is an OpenStack component that enables compute service
+# users to access their instances through VNC clients. Xen provides
+# the Xenserver VNC Proxy, or XVP, as an alternative to the
+# websocket-based noVNC proxy used by Libvirt. In contrast to noVNC,
+# XVP clients are Java-based.
+#
+# This option sets the private port to which the XVP VNC console proxy
+# service should bind to.
+#
+# Related options:
+#
+# * xvpvncproxy_host
+# * xvpvncproxy_base_url
+#  (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/xvpvncproxy_port
+#xvpvncproxy_port=6081
+
+#
+# Public URL address of XVP VNC console proxy.
+#
+# The VNC proxy is an OpenStack component that enables compute service
+# users to access their instances through VNC clients. Xen provides
+# the Xenserver VNC Proxy, or XVP, as an alternative to the
+# websocket-based noVNC proxy used by Libvirt. In contrast to noVNC,
+# XVP clients are Java-based.
+#
+# This option sets the public base URL to which client systems will
+# connect. XVP clients can use this address to connect to the XVP
+# instance and, by extension, the VNC sessions.
+#
+# Related options:
+#
+# * xvpvncproxy_host
+# * xvpvncproxy_port
+#  (uri value)
+# Deprecated group/name - [DEFAULT]/xvpvncproxy_base_url
+#xvpvncproxy_base_url=http://127.0.0.1:6081/console
+
+#
+# IP address that the noVNC console proxy should bind to.
+#
+# The VNC proxy is an OpenStack component that enables compute service
+# users to access their instances through VNC clients. noVNC provides
+# VNC support through a websocket-based client.
+#
+# This option sets the private address to which the noVNC console proxy
+# service should bind to.
+#
+# Related options:
+#
+# * novncproxy_port
+# * novncproxy_base_url
+#  (string value)
+# Deprecated group/name - [DEFAULT]/novncproxy_host
+#novncproxy_host=0.0.0.0
+
+#
+# Port that the noVNC console proxy should bind to.
+#
+# The VNC proxy is an OpenStack component that enables compute service
+# users to access their instances through VNC clients. noVNC provides
+# VNC support through a websocket-based client.
+#
+# This option sets the private port to which the noVNC console proxy
+# service should bind to.
+#
+# Related options:
+#
+# * novncproxy_host
+# * novncproxy_base_url
+#  (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/novncproxy_port
+#novncproxy_port=6080
+
+
+[workarounds]
+#
+# A collection of workarounds used to mitigate bugs or issues found in system
+# tools (e.g. Libvirt or QEMU) or Nova itself under certain conditions. These
+# should only be enabled in exceptional circumstances. All options are linked
+# against bug IDs, where more information on the issue can be found.
+
+#
+# From nova.conf
+#
+
+#
+# Use sudo instead of rootwrap.
+#
+# Allow fallback to sudo for performance reasons.
+#
+# For more information, refer to the bug report:
+#
+#   https://bugs.launchpad.net/nova/+bug/1415106
+#
+# Possible values:
+#
+# * True: Use sudo instead of rootwrap
+# * False: Use rootwrap as usual
+#
+# Interdependencies to other options:
+#
+# * Any options that affect 'rootwrap' will be ignored.
+#  (boolean value)
+#disable_rootwrap=false
+
+#
+# Disable live snapshots when using the libvirt driver.
+#
+# Live snapshots allow the snapshot of the disk to happen without an
+# interruption to the guest, using coordination with a guest agent to
+# quiesce the filesystem.
+#
+# When using libvirt 1.2.2 live snapshots fail intermittently under load
+# (likely related to concurrent libvirt/qemu operations). This config
+# option provides a mechanism to disable live snapshot, in favor of cold
+# snapshot, while this is resolved. Cold snapshot causes an instance
+# outage while the guest is going through the snapshotting process.
+#
+# For more information, refer to the bug report:
+#
+#   https://bugs.launchpad.net/nova/+bug/1334398
+#
+# Possible values:
+#
+# * True: Live snapshot is disabled when using libvirt
+# * False: Live snapshots are always used when snapshotting (as long as
+#   there is a new enough libvirt and the backend storage supports it)
+#  (boolean value)
+#disable_libvirt_livesnapshot=true
+
+#
+# Enable handling of events emitted from compute drivers.
+#
+# Many compute drivers emit lifecycle events, which are events that occur when,
+# for example, an instance is starting or stopping. If the instance is going
+# through task state changes due to an API operation, like resize, the events
+# are ignored.
+#
+# This is an advanced feature which allows the hypervisor to signal to the
+# compute service that an unexpected state change has occurred in an instance
+# and that the instance can be shutdown automatically. Unfortunately, this can
+# race in some conditions, for example in reboot operations or when the compute
+# service or when host is rebooted (planned or due to an outage). If such races
+# are common, then it is advisable to disable this feature.
+#
+# Care should be taken when this feature is disabled and
+# 'sync_power_state_interval' is set to a negative value. In this case, any
+# instances that get out of sync between the hypervisor and the Nova database
+# will have to be synchronized manually.
+#
+# For more information, refer to the bug report:
+#
+#   https://bugs.launchpad.net/bugs/1444630
+#
+# Interdependencies to other options:
+#
+# * If ``sync_power_state_interval`` is negative and this feature is disabled,
+#   then instances that get out of sync between the hypervisor and the Nova
+#   database will have to be synchronized manually.
+#  (boolean value)
+#handle_virt_lifecycle_events=true
+
+
+[wsgi]
+#
+# Options under this group are used to configure WSGI (Web Server Gateway
+# Interface). WSGI is used to serve API requests.
+
+#
+# From nova.conf
+#
+
+#
+# This option represents a file name for the paste.deploy config for nova-api.
+#
+# Possible values:
+#
+# * A string representing file name for the paste.deploy config.
+#  (string value)
+# Deprecated group/name - [DEFAULT]/api_paste_config
+api_paste_config=/etc/nova/api-paste.ini
+
+#
+# It represents a python format string that is used as the template to generate
+# log lines. The following values can be formatted into it: client_ip,
+# date_time, request_line, status_code, body_length, wall_seconds.
+#
+# This option is used for building custom request loglines.
+#
+# Possible values:
+#
+# * '%(client_ip)s "%(request_line)s" status: %(status_code)s'
+#   'len: %(body_length)s time: %(wall_seconds).7f' (default)
+# * Any formatted string formed by specific values.
+#  (string value)
+# Deprecated group/name - [DEFAULT]/wsgi_log_format
+#wsgi_log_format=%(client_ip)s "%(request_line)s" status: %(status_code)s len: %(body_length)s time: %(wall_seconds).7f
+
+#
+# This option specifies the HTTP header used to determine the protocol scheme
+# for the original request, even if it was removed by a SSL terminating proxy.
+#
+# Possible values:
+#
+# * None (default) - the request scheme is not influenced by any HTTP headers.
+# * Valid HTTP header, like HTTP_X_FORWARDED_PROTO
+#  (string value)
+# Deprecated group/name - [DEFAULT]/secure_proxy_ssl_header
+#secure_proxy_ssl_header=<None>
+
+#
+# This option allows setting path to the CA certificate file that should be used
+# to verify connecting clients.
+#
+# Possible values:
+#
+# * String representing path to the CA certificate file.
+#
+# Related options:
+#
+# * enabled_ssl_apis
+#  (string value)
+# Deprecated group/name - [DEFAULT]/ssl_ca_file
+#ssl_ca_file=<None>
+
+#
+# This option allows setting path to the SSL certificate of API server.
+#
+# Possible values:
+#
+# * String representing path to the SSL certificate.
+#
+# Related options:
+#
+# * enabled_ssl_apis
+#  (string value)
+# Deprecated group/name - [DEFAULT]/ssl_cert_file
+#ssl_cert_file=<None>
+
+#
+# This option specifies the path to the file where SSL private key of API
+# server is stored when SSL is in effect.
+#
+# Possible values:
+#
+# * String representing path to the SSL private key.
+#
+# Related options:
+#
+# * enabled_ssl_apis
+#  (string value)
+# Deprecated group/name - [DEFAULT]/ssl_key_file
+#ssl_key_file=<None>
+
+#
+# This option sets the value of TCP_KEEPIDLE in seconds for each server socket.
+# It specifies the duration of time to keep connection active. TCP generates a
+# KEEPALIVE transmission for an application that requests to keep connection
+# active. Not supported on OS X.
+#
+# Related options:
+#
+# * keep_alive
+#  (integer value)
+# Minimum value: 0
+# Deprecated group/name - [DEFAULT]/tcp_keepidle
+#tcp_keepidle=600
+
+#
+# This option specifies the size of the pool of greenthreads used by wsgi.
+# It is possible to limit the number of concurrent connections using this
+# option.
+#  (integer value)
+# Minimum value: 0
+# Deprecated group/name - [DEFAULT]/wsgi_default_pool_size
+#default_pool_size=1000
+
+#
+# This option specifies the maximum line size of message headers to be accepted.
+# max_header_line may need to be increased when using large tokens (typically
+# those generated by the Keystone v3 API with big service catalogs).
+#
+# Since TCP is a stream based protocol, in order to reuse a connection, the HTTP
+# has to have a way to indicate the end of the previous response and beginning
+# of the next. Hence, in a keep_alive case, all messages must have a
+# self-defined message length.
+#  (integer value)
+# Minimum value: 0
+# Deprecated group/name - [DEFAULT]/max_header_line
+#max_header_line=16384
+
+#
+# This option allows using the same TCP connection to send and receive multiple
+# HTTP requests/responses, as opposed to opening a new one for every single
+# request/response pair. HTTP keep-alive indicates HTTP connection reuse.
+#
+# Possible values:
+#
+# * True : reuse HTTP connection.
+# * False : closes the client socket connection explicitly.
+#
+# Related options:
+#
+# * tcp_keepidle
+#  (boolean value)
+# Deprecated group/name - [DEFAULT]/wsgi_keep_alive
+#keep_alive=true
+
+#
+# This option specifies the timeout for client connections' socket operations.
+# If an incoming connection is idle for this number of seconds it will be
+# closed. It indicates timeout on individual read/writes on the socket
+# connection. To wait forever set to 0.
+#  (integer value)
+# Minimum value: 0
+# Deprecated group/name - [DEFAULT]/client_socket_timeout
+#client_socket_timeout=900
+
+
+[xenserver]
+#
+# XenServer options are used when the compute_driver is set to use
+# XenServer (compute_driver=xenapi.XenAPIDriver).
+#
+# Must specify connection_url, connection_password and ovs_integration_bridge to
+# use compute_driver=xenapi.XenAPIDriver.
+
+#
+# From nova.conf
+#
+
+#
+# Number of seconds to wait for agent's reply to a request.
+#
+# Nova configures/performs certain administrative actions on a server with the
+# help of an agent that's installed on the server. The communication between
+# Nova and the agent is achieved via sharing messages, called records, over
+# xenstore, a shared storage across all the domains on a Xenserver host.
+# Operations performed by the agent on behalf of nova are: 'version','
+# key_init',
+# 'password','resetnetwork','inject_file', and 'agentupdate'.
+#
+# To perform one of the above operations, the xapi 'agent' plugin writes the
+# command and its associated parameters to a certain location known to the
+# domain
+# and awaits response. On being notified of the message, the agent performs
+# appropriate actions on the server and writes the result back to xenstore. This
+# result is then read by the xapi 'agent' plugin to determine the
+# success/failure
+# of the operation.
+#
+# This config option determines how long the xapi 'agent' plugin shall wait to
+# read the response off of xenstore for a given request/command. If the agent on
+# the instance fails to write the result in this time period, the operation is
+# considered to have timed out.
+#
+# Related options:
+#
+# * ``agent_version_timeout``
+# * ``agent_resetnetwork_timeout``
+#
+#  (integer value)
+# Minimum value: 0
+#agent_timeout=30
+
+#
+# Number of seconds to wait for agent't reply to version request.
+#
+# This indicates the amount of time xapi 'agent' plugin waits for the agent to
+# respond to the 'version' request specifically. The generic timeout for agent
+# communication ``agent_timeout`` is ignored in this case.
+#
+# During the build process the 'version' request is used to determine if the
+# agent is available/operational to perform other requests such as
+# 'resetnetwork', 'password', 'key_init' and 'inject_file'. If the 'version'
+# call
+# fails, the other configuration is skipped. So, this configuration option can
+# also be interpreted as time in which agent is expected to be fully
+# operational.
+#  (integer value)
+# Minimum value: 0
+#agent_version_timeout=300
+
+#
+# Number of seconds to wait for agent's reply to resetnetwork
+# request.
+#
+# This indicates the amount of time xapi 'agent' plugin waits for the agent to
+# respond to the 'resetnetwork' request specifically. The generic timeout for
+# agent communication ``agent_timeout`` is ignored in this case.
+#  (integer value)
+# Minimum value: 0
+#agent_resetnetwork_timeout=60
+
+#
+# Path to locate guest agent on the server.
+#
+# Specifies the path in which the XenAPI guest agent should be located. If the
+# agent is present, network configuration is not injected into the image.
+#
+# Related options:
+#
+# For this option to have an effect:
+# * ``flat_injected`` should be set to ``True``
+# * ``compute_driver`` should be set to ``xenapi.XenAPIDriver``
+#
+#  (string value)
+#agent_path=usr/sbin/xe-update-networking
+
+#
+# Disables the use of XenAPI agent.
+#
+# This configuration option suggests whether the use of agent should be enabled
+# or not regardless of what image properties are present. Image properties have
+# an effect only when this is set to ``True``. Read description of config option
+# ``use_agent_default`` for more information.
+#
+# Related options:
+#
+# * ``use_agent_default``
+#
+#  (boolean value)
+#disable_agent=false
+
+#
+# Whether or not to use the agent by default when its usage is enabled but not
+# indicated by the image.
+#
+# The use of XenAPI agent can be disabled altogether using the configuration
+# option ``disable_agent``. However, if it is not disabled, the use of an agent
+# can still be controlled by the image in use through one of its properties,
+# ``xenapi_use_agent``. If this property is either not present or specified
+# incorrectly on the image, the use of agent is determined by this configuration
+# option.
+#
+# Note that if this configuration is set to ``True`` when the agent is not
+# present, the boot times will increase significantly.
+#
+# Related options:
+#
+# * ``disable_agent``
+#
+#  (boolean value)
+#use_agent_default=false
+
+# Timeout in seconds for XenAPI login. (integer value)
+# Minimum value: 0
+#login_timeout=10
+
+#
+# Maximum number of concurrent XenAPI connections.
+#
+# In nova, multiple XenAPI requests can happen at a time.
+# Configuring this option will parallelize access to the XenAPI
+# session, which allows you to make concurrent XenAPI connections.
+#  (integer value)
+# Minimum value: 1
+#connection_concurrent=5
+
+# DEPRECATED:
+# Base URL for torrent files; must contain a slash character (see RFC 1808,
+# step 6).
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# The torrent feature has not been tested nor maintained, and as such is being
+# removed.
+#torrent_base_url=<None>
+
+# DEPRECATED: Probability that peer will become a seeder (1.0 = 100%) (floating
+# point value)
+# Minimum value: 0
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# The torrent feature has not been tested nor maintained, and as such is being
+# removed.
+#torrent_seed_chance=1.0
+
+# DEPRECATED:
+# Number of seconds after downloading an image via BitTorrent that it should
+# be seeded for other peers.'
+#  (integer value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# The torrent feature has not been tested nor maintained, and as such is being
+# removed.
+#torrent_seed_duration=3600
+
+# DEPRECATED:
+# Cached torrent files not accessed within this number of seconds can be reaped.
+#  (integer value)
+# Minimum value: 0
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# The torrent feature has not been tested nor maintained, and as such is being
+# removed.
+#torrent_max_last_accessed=86400
+
+# DEPRECATED: Beginning of port range to listen on (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# The torrent feature has not been tested nor maintained, and as such is being
+# removed.
+#torrent_listen_port_start=6881
+
+# DEPRECATED: End of port range to listen on (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# The torrent feature has not been tested nor maintained, and as such is being
+# removed.
+#torrent_listen_port_end=6891
+
+# DEPRECATED:
+# Number of seconds a download can remain at the same progress percentage w/o
+# being considered a stall.
+#  (integer value)
+# Minimum value: 0
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# The torrent feature has not been tested nor maintained, and as such is being
+# removed.
+#torrent_download_stall_cutoff=600
+
+# DEPRECATED:
+# Maximum number of seeder processes to run concurrently within a given dom0
+# (-1 = no limit).
+#  (integer value)
+# Minimum value: -1
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# The torrent feature has not been tested nor maintained, and as such is being
+# removed.
+#torrent_max_seeder_processes_per_host=1
+
+#
+# Cache glance images locally.
+#
+# The value for this option must be chosen from the choices listed
+# here. Configuring a value other than these will default to 'all'.
+#
+# Note: There is nothing that deletes these images.
+#
+# Possible values:
+#
+# * `all`: will cache all images.
+# * `some`: will only cache images that have the
+#   image_property `cache_in_nova=True`.
+# * `none`: turns off caching entirely.
+#  (string value)
+# Allowed values: all, some, none
+#cache_images=all
+
+#
+# Compression level for images.
+#
+# By setting this option we can configure the gzip compression level.
+# This option sets GZIP environment variable before spawning tar -cz
+# to force the compression level. It defaults to none, which means the
+# GZIP environment variable is not set and the default (usually -6)
+# is used.
+#
+# Possible values:
+#
+# * Range is 1-9, e.g., 9 for gzip -9, 9 being most
+#   compressed but most CPU intensive on dom0.
+# * Any values out of this range will default to None.
+#  (integer value)
+# Minimum value: 1
+# Maximum value: 9
+#image_compression_level=<None>
+
+# Default OS type used when uploading an image to glance (string value)
+#default_os_type=linux
+
+# Time in secs to wait for a block device to be created (integer value)
+# Minimum value: 1
+#block_device_creation_timeout=10
+
+#
+# Maximum size in bytes of kernel or ramdisk images.
+#
+# Specifying the maximum size of kernel or ramdisk will avoid copying
+# large files to dom0 and fill up /boot/guest.
+#  (integer value)
+#max_kernel_ramdisk_size=16777216
+
+#
+# Filter for finding the SR to be used to install guest instances on.
+#
+# Possible values:
+#
+# * To use the Local Storage in default XenServer/XCP installations
+#   set this flag to other-config:i18n-key=local-storage.
+# * To select an SR with a different matching criteria, you could
+#   set it to other-config:my_favorite_sr=true.
+# * To fall back on the Default SR, as displayed by XenCenter,
+#   set this flag to: default-sr:true.
+#  (string value)
+#sr_matching_filter=default-sr:true
+
+#
+# Whether to use sparse_copy for copying data on a resize down.
+# (False will use standard dd). This speeds up resizes down
+# considerably since large runs of zeros won't have to be rsynced.
+#  (boolean value)
+#sparse_copy=true
+
+#
+# Maximum number of retries to unplug VBD.
+# If set to 0, should try once, no retries.
+#  (integer value)
+# Minimum value: 0
+#num_vbd_unplug_retries=10
+
+#
+# Whether or not to download images via Bit Torrent.
+#
+# The value for this option must be chosen from the choices listed
+# here. Configuring a value other than these will default to 'none'.
+#
+# Possible values:
+#
+# * `all`: will download all images.
+# * `some`: will only download images that have the image_property
+#           `bittorrent=true`.
+# * `none`: will turnoff downloading images via Bit Torrent.
+#  (string value)
+# Allowed values: all, some, none
+#torrent_images=none
+
+#
+# Name of network to use for booting iPXE ISOs.
+#
+# An iPXE ISO is a specially crafted ISO which supports iPXE booting.
+# This feature gives a means to roll your own image.
+#
+# By default this option is not set. Enable this option to
+# boot an iPXE ISO.
+#
+# Related Options:
+#
+# * `ipxe_boot_menu_url`
+# * `ipxe_mkisofs_cmd`
+#  (string value)
+#ipxe_network_name=<None>
+
+#
+# URL to the iPXE boot menu.
+#
+# An iPXE ISO is a specially crafted ISO which supports iPXE booting.
+# This feature gives a means to roll your own image.
+#
+# By default this option is not set. Enable this option to
+# boot an iPXE ISO.
+#
+# Related Options:
+#
+# * `ipxe_network_name`
+# * `ipxe_mkisofs_cmd`
+#  (string value)
+#ipxe_boot_menu_url=<None>
+
+#
+# Name and optionally path of the tool used for ISO image creation.
+#
+# An iPXE ISO is a specially crafted ISO which supports iPXE booting.
+# This feature gives a means to roll your own image.
+#
+# Note: By default `mkisofs` is not present in the Dom0, so the
+# package can either be manually added to Dom0 or include the
+# `mkisofs` binary in the image itself.
+#
+# Related Options:
+#
+# * `ipxe_network_name`
+# * `ipxe_boot_menu_url`
+#  (string value)
+#ipxe_mkisofs_cmd=mkisofs
+
+#
+# URL for connection to XenServer/Xen Cloud Platform. A special value
+# of unix://local can be used to connect to the local unix socket.
+#
+# Possible values:
+#
+# * Any string that represents a URL. The connection_url is
+#   generally the management network IP address of the XenServer.
+# * This option must be set if you chose the XenServer driver.
+#  (string value)
+#connection_url=<None>
+
+# Username for connection to XenServer/Xen Cloud Platform (string value)
+#connection_username=root
+
+# Password for connection to XenServer/Xen Cloud Platform (string value)
+#connection_password=<None>
+
+#
+# The interval used for polling of coalescing vhds.
+#
+# This is the interval after which the task of coalesce VHD is
+# performed, until it reaches the max attempts that is set by
+# vhd_coalesce_max_attempts.
+#
+# Related options:
+#
+# * `vhd_coalesce_max_attempts`
+#  (floating point value)
+# Minimum value: 0
+#vhd_coalesce_poll_interval=5.0
+
+#
+# Ensure compute service is running on host XenAPI connects to.
+# This option must be set to false if the 'independent_compute'
+# option is set to true.
+#
+# Possible values:
+#
+# * Setting this option to true will make sure that compute service
+#   is running on the same host that is specified by connection_url.
+# * Setting this option to false, doesn't perform the check.
+#
+# Related options:
+#
+# * `independent_compute`
+#  (boolean value)
+#check_host=true
+
+#
+# Max number of times to poll for VHD to coalesce.
+#
+# This option determines the maximum number of attempts that can be
+# made for coalescing the VHD before giving up.
+#
+# Related opitons:
+#
+# * `vhd_coalesce_poll_interval`
+#  (integer value)
+# Minimum value: 0
+#vhd_coalesce_max_attempts=20
+
+# Base path to the storage repository on the XenServer host. (string value)
+#sr_base_path=/var/run/sr-mount
+
+#
+# The iSCSI Target Host.
+#
+# This option represents the hostname or ip of the iSCSI Target.
+# If the target host is not present in the connection information from
+# the volume provider then the value from this option is taken.
+#
+# Possible values:
+#
+# * Any string that represents hostname/ip of Target.
+#  (string value)
+#target_host=<None>
+
+#
+# The iSCSI Target Port.
+#
+# This option represents the port of the iSCSI Target. If the
+# target port is not present in the connection information from the
+# volume provider then the value from this option is taken.
+#  (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#target_port=3260
+
+# DEPRECATED:
+# Used to enable the remapping of VBD dev.
+# (Works around an issue in Ubuntu Maverick)
+#  (boolean value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# This option provided a workaround for issues in Ubuntu Maverick, which
+# was released in April 2010 and was dropped from support in April 2012.
+# There's no reason to continue supporting this option.
+#remap_vbd_dev=false
+
+#
+# Specify prefix to remap VBD dev to (ex. /dev/xvdb -> /dev/sdb).
+#
+# Related options:
+#
+# * If `remap_vbd_dev` is set to False this option has no impact.
+#  (string value)
+#remap_vbd_dev_prefix=sd
+
+#
+# Used to prevent attempts to attach VBDs locally, so Nova can
+# be run in a VM on a different host.
+#
+# Related options:
+#
+# * ``CONF.flat_injected`` (Must be False)
+# * ``CONF.xenserver.check_host`` (Must be False)
+# * ``CONF.default_ephemeral_format`` (Must be unset or 'ext3')
+# * Joining host aggregates (will error if attempted)
+# * Swap disks for Windows VMs (will error if attempted)
+# * Nova-based auto_configure_disk (will error if attempted)
+#  (boolean value)
+#independent_compute=false
+
+#
+# Wait time for instances to go to running state.
+#
+# Provide an integer value representing time in seconds to set the
+# wait time for an instance to go to running state.
+#
+# When a request to create an instance is received by nova-api and
+# communicated to nova-compute, the creation of the instance occurs
+# through interaction with Xen via XenAPI in the compute node. Once
+# the node on which the instance(s) are to be launched is decided by
+# nova-schedule and the launch is triggered, a certain amount of wait
+# time is involved until the instance(s) can become available and
+# 'running'. This wait time is defined by running_timeout. If the
+# instances do not go to running state within this specified wait
+# time, the launch expires and the instance(s) are set to 'error'
+# state.
+#  (integer value)
+# Minimum value: 0
+#running_timeout=60
+
+# DEPRECATED:
+# The XenAPI VIF driver using XenServer Network APIs.
+#
+# Provide a string value representing the VIF XenAPI vif driver to use for
+# plugging virtual network interfaces.
+#
+# Xen configuration uses bridging within the backend domain to allow
+# all VMs to appear on the network as individual hosts. Bridge
+# interfaces are used to create a XenServer VLAN network in which
+# the VIFs for the VM instances are plugged. If no VIF bridge driver
+# is plugged, the bridge is not made available. This configuration
+# option takes in a value for the VIF driver.
+#
+# Possible values:
+#
+# * nova.virt.xenapi.vif.XenAPIOpenVswitchDriver (default)
+# * nova.virt.xenapi.vif.XenAPIBridgeDriver (deprecated)
+#
+# Related options:
+#
+# * ``vlan_interface``
+# * ``ovs_integration_bridge``
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# There are only two in-tree vif drivers for XenServer. XenAPIBridgeDriver is
+# for
+# nova-network which is deprecated and XenAPIOpenVswitchDriver is for Neutron
+# which is the default configuration for Nova since the 15.0.0 Ocata release. In
+# the future the "use_neutron" configuration option will be used to determine
+# which vif driver to use.
+#vif_driver=nova.virt.xenapi.vif.XenAPIOpenVswitchDriver
+
+#
+# Dom0 plugin driver used to handle image uploads.
+#
+# Provide a string value representing a plugin driver required to
+# handle the image uploading to GlanceStore.
+#
+# Images, and snapshots from XenServer need to be uploaded to the data
+# store for use. image_upload_handler takes in a value for the Dom0
+# plugin driver. This driver is then called to uplaod images to the
+# GlanceStore.
+#  (string value)
+#image_upload_handler=nova.virt.xenapi.image.glance.GlanceStore
+
+#
+# Number of seconds to wait for SR to settle if the VDI
+# does not exist when first introduced.
+#
+# Some SRs, particularly iSCSI connections are slow to see the VDIs
+# right after they got introduced. Setting this option to a
+# time interval will make the SR to wait for that time period
+# before raising VDI not found exception.
+#  (integer value)
+# Minimum value: 0
+#introduce_vdi_retry_wait=20
+
+#
+# The name of the integration Bridge that is used with xenapi
+# when connecting with Open vSwitch.
+#
+# Note: The value of this config option is dependent on the
+# environment, therefore this configuration value must be set
+# accordingly if you are using XenAPI.
+#
+# Possible values:
+#
+# * Any string that represents a bridge name.
+#  (string value)
+#ovs_integration_bridge=<None>
+
+#
+# When adding new host to a pool, this will append a --force flag to the
+# command, forcing hosts to join a pool, even if they have different CPUs.
+#
+# Since XenServer version 5.6 it is possible to create a pool of hosts that have
+# different CPU capabilities. To accommodate CPU differences, XenServer limited
+# features it uses to determine CPU compatibility to only the ones that are
+# exposed by CPU and support for CPU masking was added.
+# Despite this effort to level differences between CPUs, it is still possible
+# that adding new host will fail, thus option to force join was introduced.
+#  (boolean value)
+#use_join_force=true
+
+#
+# Publicly visible name for this console host.
+#
+# Possible values:
+#
+# * A string representing a valid hostname
+#  (string value)
+# Deprecated group/name - [DEFAULT]/console_public_hostname
+#console_public_hostname=lcy01-22
+
+
+[xvp]
+#
+# Configuration options for XVP.
+#
+# xvp (Xen VNC Proxy) is a proxy server providing password-protected VNC-based
+# access to the consoles of virtual machines hosted on Citrix XenServer.
+
+#
+# From nova.conf
+#
+
+# XVP conf template (string value)
+# Deprecated group/name - [DEFAULT]/console_xvp_conf_template
+#console_xvp_conf_template=$pybasedir/nova/console/xvp.conf.template
+
+# Generated XVP conf file (string value)
+# Deprecated group/name - [DEFAULT]/console_xvp_conf
+#console_xvp_conf=/etc/xvp.conf
+
+# XVP master process pid file (string value)
+# Deprecated group/name - [DEFAULT]/console_xvp_pid
+#console_xvp_pid=/var/run/xvp.pid
+
+# XVP log file (string value)
+# Deprecated group/name - [DEFAULT]/console_xvp_log
+#console_xvp_log=/var/log/xvp.log
+
+# Port for XVP to multiplex VNC connections on (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/console_xvp_multiplex_port
+#console_xvp_multiplex_port=5900

2018-06-01 03:20:44,931 [salt.state       ][INFO    ][31637] Completed state [/etc/nova/nova.conf] at time 03:20:44.931112 duration_in_ms=463.794
2018-06-01 03:20:44,931 [salt.state       ][INFO    ][31637] Running state [/etc/nova/api-paste.ini] at time 03:20:44.931748
2018-06-01 03:20:44,932 [salt.state       ][INFO    ][31637] Executing state file.managed for /etc/nova/api-paste.ini
2018-06-01 03:20:44,980 [salt.fileclient  ][INFO    ][31637] Fetching file from saltenv 'base', ** done ** 'nova/files/pike/api-paste.ini.Debian'
2018-06-01 03:20:45,151 [salt.state       ][INFO    ][31637] File changed:
--- 
+++ 
@@ -71,7 +71,6 @@
 
 [app:oscomputeversionapp]
 paste.app_factory = nova.api.openstack.compute.versions:Versions.factory
-
 ##########
 # Shared #
 ##########

2018-06-01 03:20:45,151 [salt.state       ][INFO    ][31637] Completed state [/etc/nova/api-paste.ini] at time 03:20:45.151770 duration_in_ms=220.022
2018-06-01 03:20:45,152 [salt.state       ][INFO    ][31637] Running state [/etc/default/nova-api] at time 03:20:45.152425
2018-06-01 03:20:45,152 [salt.state       ][INFO    ][31637] Executing state file.managed for /etc/default/nova-api
2018-06-01 03:20:45,189 [salt.fileclient  ][INFO    ][31637] Fetching file from saltenv 'base', ** done ** 'nova/files/default'
2018-06-01 03:20:45,193 [salt.state       ][INFO    ][31637] File changed:
New file
2018-06-01 03:20:45,193 [salt.state       ][INFO    ][31637] Completed state [/etc/default/nova-api] at time 03:20:45.193455 duration_in_ms=41.029
2018-06-01 03:20:45,194 [salt.state       ][INFO    ][31637] Running state [/etc/default/nova-consoleauth] at time 03:20:45.194036
2018-06-01 03:20:45,194 [salt.state       ][INFO    ][31637] Executing state file.managed for /etc/default/nova-consoleauth
2018-06-01 03:20:45,219 [salt.state       ][INFO    ][31637] File changed:
New file
2018-06-01 03:20:45,219 [salt.state       ][INFO    ][31637] Completed state [/etc/default/nova-consoleauth] at time 03:20:45.219253 duration_in_ms=25.216
2018-06-01 03:20:45,219 [salt.state       ][INFO    ][31637] Running state [/etc/default/nova-scheduler] at time 03:20:45.219793
2018-06-01 03:20:45,220 [salt.state       ][INFO    ][31637] Executing state file.managed for /etc/default/nova-scheduler
2018-06-01 03:20:45,244 [salt.state       ][INFO    ][31637] File changed:
New file
2018-06-01 03:20:45,244 [salt.state       ][INFO    ][31637] Completed state [/etc/default/nova-scheduler] at time 03:20:45.244704 duration_in_ms=24.911
2018-06-01 03:20:45,245 [salt.state       ][INFO    ][31637] Running state [/etc/default/nova-conductor] at time 03:20:45.245254
2018-06-01 03:20:45,245 [salt.state       ][INFO    ][31637] Executing state file.managed for /etc/default/nova-conductor
2018-06-01 03:20:45,269 [salt.state       ][INFO    ][31637] File changed:
New file
2018-06-01 03:20:45,269 [salt.state       ][INFO    ][31637] Completed state [/etc/default/nova-conductor] at time 03:20:45.269513 duration_in_ms=24.259
2018-06-01 03:20:45,270 [salt.state       ][INFO    ][31637] Running state [/etc/default/nova-novncproxy] at time 03:20:45.270039
2018-06-01 03:20:45,270 [salt.state       ][INFO    ][31637] Executing state file.managed for /etc/default/nova-novncproxy
2018-06-01 03:20:45,294 [salt.state       ][INFO    ][31637] File changed:
New file
2018-06-01 03:20:45,294 [salt.state       ][INFO    ][31637] Completed state [/etc/default/nova-novncproxy] at time 03:20:45.294233 duration_in_ms=24.194
2018-06-01 03:20:45,296 [salt.state       ][INFO    ][31637] Running state [nova_controller_api_db_sync_version_20] at time 03:20:45.296016
2018-06-01 03:20:45,296 [salt.state       ][INFO    ][31637] Executing state novang.api_db_version_present for nova_controller_api_db_sync_version_20
2018-06-01 03:20:45,296 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command 'nova-manage api_db version 2>/dev/null' in directory '/root'
2018-06-01 03:20:48,738 [salt.state       ][INFO    ][31637] Current Api_db version is not < than "20".
2018-06-01 03:20:48,738 [salt.state       ][INFO    ][31637] Completed state [nova_controller_api_db_sync_version_20] at time 03:20:48.738480 duration_in_ms=3442.463
2018-06-01 03:20:48,739 [salt.state       ][INFO    ][31637] Running state [nova_controller_db_sync_version_334] at time 03:20:48.739708
2018-06-01 03:20:48,740 [salt.state       ][INFO    ][31637] Executing state novang.db_version_present for nova_controller_db_sync_version_334
2018-06-01 03:20:48,740 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command 'nova-manage db version 2>/dev/null' in directory '/root'
2018-06-01 03:20:51,409 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601032051376081
2018-06-01 03:20:51,424 [salt.minion      ][INFO    ][4470] Starting a new job with PID 4470
2018-06-01 03:20:51,445 [salt.minion      ][INFO    ][4470] Returning information for job: 20180601032051376081
2018-06-01 03:20:52,079 [salt.state       ][INFO    ][31637] Current db version is not < than "334".
2018-06-01 03:20:52,080 [salt.state       ][INFO    ][31637] Completed state [nova_controller_db_sync_version_334] at time 03:20:52.080145 duration_in_ms=3340.436
2018-06-01 03:20:52,082 [salt.state       ][INFO    ][31637] Running state [online_data_migrations_for_apidb20_and_db334] at time 03:20:52.082307
2018-06-01 03:20:52,082 [salt.state       ][INFO    ][31637] Executing state novang.online_data_migrations_present for online_data_migrations_for_apidb20_and_db334
2018-06-01 03:20:52,083 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command 'nova-manage api_db version 2>/dev/null' in directory '/root'
2018-06-01 03:20:56,147 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command 'nova-manage db version 2>/dev/null' in directory '/root'
2018-06-01 03:21:00,232 [salt.state       ][INFO    ][31637] Current api_db version != 20 a db version != 334.
2018-06-01 03:21:00,233 [salt.state       ][INFO    ][31637] Completed state [online_data_migrations_for_apidb20_and_db334] at time 03:21:00.233055 duration_in_ms=8150.747
2018-06-01 03:21:00,238 [salt.state       ][INFO    ][31637] Running state [nova-manage db sync] at time 03:21:00.238432
2018-06-01 03:21:00,239 [salt.state       ][INFO    ][31637] Executing state cmd.run for nova-manage db sync
2018-06-01 03:21:00,240 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command 'nova-manage db sync' in directory '/root'
2018-06-01 03:21:01,597 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601032101561136
2018-06-01 03:21:01,618 [salt.minion      ][INFO    ][4524] Starting a new job with PID 4524
2018-06-01 03:21:01,643 [salt.minion      ][INFO    ][4524] Returning information for job: 20180601032101561136
2018-06-01 03:21:11,791 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601032111756156
2018-06-01 03:21:11,811 [salt.minion      ][INFO    ][4543] Starting a new job with PID 4543
2018-06-01 03:21:11,836 [salt.minion      ][INFO    ][4543] Returning information for job: 20180601032111756156
2018-06-01 03:21:17,644 [salt.state       ][INFO    ][31637] {'pid': 4514, 'retcode': 0, 'stderr': '/usr/lib/python2.7/dist-packages/pymysql/cursors.py:167: Warning: (1831, u"Duplicate index \'block_device_mapping_instance_uuid_virtual_name_device_name_idx\' defined on the table \'nova_cell0.block_device_mapping\'. This is deprecated and will be disallowed in a future release.")\n  result = self._query(query)\n/usr/lib/python2.7/dist-packages/pymysql/cursors.py:167: Warning: (1831, u"Duplicate index \'uniq_instances0uuid\' defined on the table \'nova_cell0.instances\'. This is deprecated and will be disallowed in a future release.")\n  result = self._query(query)', 'stdout': ''}
2018-06-01 03:21:17,646 [salt.state       ][INFO    ][31637] Completed state [nova-manage db sync] at time 03:21:17.646389 duration_in_ms=17407.956
2018-06-01 03:21:17,647 [salt.state       ][INFO    ][31637] Running state [nova-manage cell_v2 map_cell0] at time 03:21:17.647814
2018-06-01 03:21:17,648 [salt.state       ][INFO    ][31637] Executing state cmd.run for nova-manage cell_v2 map_cell0
2018-06-01 03:21:17,649 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command 'nova-manage cell_v2 map_cell0' in directory '/root'
2018-06-01 03:21:21,898 [salt.state       ][INFO    ][31637] {'pid': 4553, 'retcode': 0, 'stderr': '', 'stdout': 'Cell0 is already setup'}
2018-06-01 03:21:21,899 [salt.state       ][INFO    ][31637] Completed state [nova-manage cell_v2 map_cell0] at time 03:21:21.899523 duration_in_ms=4251.708
2018-06-01 03:21:21,901 [salt.state       ][INFO    ][31637] Running state [nova-manage cell_v2 create_cell --name=cell1 --verbose] at time 03:21:21.901292
2018-06-01 03:21:21,901 [salt.state       ][INFO    ][31637] Executing state cmd.run for nova-manage cell_v2 create_cell --name=cell1 --verbose
2018-06-01 03:21:21,903 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command 'nova-manage cell_v2 list_cells | grep cell1' in directory '/root'
2018-06-01 03:21:21,988 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601032121958045
2018-06-01 03:21:22,003 [salt.minion      ][INFO    ][4570] Starting a new job with PID 4570
2018-06-01 03:21:22,026 [salt.minion      ][INFO    ][4570] Returning information for job: 20180601032121958045
2018-06-01 03:21:26,128 [salt.state       ][INFO    ][31637] unless execution succeeded
2018-06-01 03:21:26,130 [salt.state       ][INFO    ][31637] Completed state [nova-manage cell_v2 create_cell --name=cell1 --verbose] at time 03:21:26.130267 duration_in_ms=4228.974
2018-06-01 03:21:26,131 [salt.state       ][INFO    ][31637] Running state [/etc/systemd/system/nova-placement-api.service] at time 03:21:26.131102
2018-06-01 03:21:26,131 [salt.state       ][INFO    ][31637] Executing state file.symlink for /etc/systemd/system/nova-placement-api.service
2018-06-01 03:21:26,134 [salt.state       ][INFO    ][31637] {'new': '/etc/systemd/system/nova-placement-api.service'}
2018-06-01 03:21:26,135 [salt.state       ][INFO    ][31637] Completed state [/etc/systemd/system/nova-placement-api.service] at time 03:21:26.135202 duration_in_ms=4.1
2018-06-01 03:21:26,136 [salt.state       ][INFO    ][31637] Running state [nova-placement-api] at time 03:21:26.136930
2018-06-01 03:21:26,137 [salt.state       ][INFO    ][31637] Executing state pkg.installed for nova-placement-api
2018-06-01 03:21:26,162 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:21:26,203 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'nova-placement-api'] in directory '/root'
2018-06-01 03:21:28,804 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:21:28,873 [salt.state       ][INFO    ][31637] Made the following changes:
'nova-placement-api' changed from 'absent' to '2:16.1.3-1~u16.04+mcp69'

2018-06-01 03:21:28,915 [salt.state       ][INFO    ][31637] Loading fresh modules for state activity
2018-06-01 03:21:28,947 [salt.state       ][INFO    ][31637] Completed state [nova-placement-api] at time 03:21:28.947273 duration_in_ms=2810.342
2018-06-01 03:21:28,951 [salt.state       ][INFO    ][31637] Running state [/etc/apache2/sites-available/nova-placement-api.conf] at time 03:21:28.951922
2018-06-01 03:21:28,952 [salt.state       ][INFO    ][31637] Executing state file.managed for /etc/apache2/sites-available/nova-placement-api.conf
2018-06-01 03:21:29,003 [salt.fileclient  ][INFO    ][31637] Fetching file from saltenv 'base', ** done ** 'nova/files/pike/nova-placement-api.conf'
2018-06-01 03:21:29,144 [salt.state       ][INFO    ][31637] File changed:
--- 
+++ 
@@ -1,6 +1,7 @@
-Listen 8778
 
-<VirtualHost *:8778>
+Listen 192.168.10.38:8778
+
+<VirtualHost 192.168.10.38:8778>
     WSGIScriptAlias / /usr/bin/nova-placement-api
     WSGIDaemonProcess nova-placement processes=5 threads=1 user=nova group=nova display-name=%{GROUP}
     WSGIProcessGroup nova-placement
@@ -13,7 +14,7 @@
     </IfVersion>
 
     ErrorLog /var/log/apache2/nova_placement_error.log
-    CustomLog /var/log/apache2/nova_placement_access.log combined
+    CustomLog /var/log/apache2/nova_placement_access.log "%v:%p %h %l %u %t \"%r\" %>s %D %O \"%{Referer}i\" \"%{User-Agent}i\""
 
     <Directory /usr/bin>
         <IfVersion >= 2.4>

2018-06-01 03:21:29,149 [salt.state       ][INFO    ][31637] Completed state [/etc/apache2/sites-available/nova-placement-api.conf] at time 03:21:29.149139 duration_in_ms=197.216
2018-06-01 03:21:29,153 [salt.state       ][INFO    ][31637] Running state [nova-placement-api] at time 03:21:29.153514
2018-06-01 03:21:29,154 [salt.state       ][INFO    ][31637] Executing state apache_site.enabled for nova-placement-api
2018-06-01 03:21:29,154 [salt.state       ][INFO    ][31637] nova-placement-api already enabled.
2018-06-01 03:21:29,155 [salt.state       ][INFO    ][31637] Completed state [nova-placement-api] at time 03:21:29.155352 duration_in_ms=1.838
2018-06-01 03:21:29,157 [salt.state       ][INFO    ][31637] Running state [nova-manage cell_v2 discover_hosts --verbose] at time 03:21:29.157449
2018-06-01 03:21:29,158 [salt.state       ][INFO    ][31637] Executing state cmd.run for nova-manage cell_v2 discover_hosts --verbose
2018-06-01 03:21:29,160 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command 'nova-manage cell_v2 discover_hosts --verbose' in directory '/root'
2018-06-01 03:21:32,181 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601032132147944
2018-06-01 03:21:32,197 [salt.minion      ][INFO    ][5027] Starting a new job with PID 5027
2018-06-01 03:21:32,229 [salt.minion      ][INFO    ][5027] Returning information for job: 20180601032132147944
2018-06-01 03:21:33,328 [salt.state       ][INFO    ][31637] {'pid': 4978, 'retcode': 0, 'stderr': '', 'stdout': "Found 2 cell mappings.\nSkipping cell0 since it does not contain hosts.\nGetting computes from cell 'cell1': 06ed789c-0eb7-4095-adf6-8f752665de9c\nFound 0 unmapped computes in cell: 06ed789c-0eb7-4095-adf6-8f752665de9c"}
2018-06-01 03:21:33,329 [salt.state       ][INFO    ][31637] Completed state [nova-manage cell_v2 discover_hosts --verbose] at time 03:21:33.329852 duration_in_ms=4172.402
2018-06-01 03:21:33,333 [salt.state       ][INFO    ][31637] Running state [cell1] at time 03:21:33.333424
2018-06-01 03:21:33,336 [salt.state       ][INFO    ][31637] Executing state novang.map_instances for cell1
2018-06-01 03:21:33,337 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command 'nova-manage cell_v2 list_cells 2>&- | grep cell1 | tr -d "
" | awk '{print $4}'' in directory '/root'
2018-06-01 03:21:37,499 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command 'nova-manage cell_v2 map_instances --cell_uuid 06ed789c-0eb7-4095-adf6-8f752665de9c' in directory '/root'
2018-06-01 03:21:41,739 [salt.state       ][INFO    ][31637] {'Instances': 'Mapped to cell named cell1'}
2018-06-01 03:21:41,740 [salt.state       ][INFO    ][31637] Completed state [cell1] at time 03:21:41.740581 duration_in_ms=8407.156
2018-06-01 03:21:41,742 [salt.state       ][INFO    ][31637] Running state [nova-manage api_db sync] at time 03:21:41.742084
2018-06-01 03:21:41,742 [salt.state       ][INFO    ][31637] Executing state cmd.run for nova-manage api_db sync
2018-06-01 03:21:41,743 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command 'nova-manage api_db sync' in directory '/root'
2018-06-01 03:21:42,407 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601032142372098
2018-06-01 03:21:42,426 [salt.minion      ][INFO    ][5093] Starting a new job with PID 5093
2018-06-01 03:21:42,445 [salt.minion      ][INFO    ][5093] Returning information for job: 20180601032142372098
2018-06-01 03:21:45,762 [salt.state       ][INFO    ][31637] {'pid': 5082, 'retcode': 0, 'stderr': '', 'stdout': ''}
2018-06-01 03:21:45,763 [salt.state       ][INFO    ][31637] Completed state [nova-manage api_db sync] at time 03:21:45.763213 duration_in_ms=4021.128
2018-06-01 03:21:45,764 [salt.state       ][INFO    ][31637] Running state [nova-manage db online_data_migrations] at time 03:21:45.764381
2018-06-01 03:21:45,764 [salt.state       ][INFO    ][31637] Executing state cmd.run for nova-manage db online_data_migrations
2018-06-01 03:21:45,766 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command 'nova-manage db online_data_migrations' in directory '/root'
2018-06-01 03:21:50,241 [salt.state       ][INFO    ][31637] {'pid': 5109, 'retcode': 0, 'stderr': '', 'stdout': 'Running batches of 50 until complete\n+---------------------------------------------+--------------+-----------+\n|                  Migration                  | Total Needed | Completed |\n+---------------------------------------------+--------------+-----------+\n| delete_build_requests_with_no_instance_uuid |      0       |     0     |\n|    migrate_aggregate_reset_autoincrement    |      0       |     0     |\n|              migrate_aggregates             |      0       |     0     |\n|      migrate_flavor_reset_autoincrement     |      0       |     0     |\n|               migrate_flavors               |      0       |     0     |\n|      migrate_instance_groups_to_api_db      |      0       |     0     |\n|          migrate_instance_keypairs          |      0       |     0     |\n|      migrate_instances_add_request_spec     |      0       |     0     |\n|          migrate_keypairs_to_api_db         |      0       |     0     |\n|       migrate_quota_classes_to_api_db       |      0       |     0     |\n|        migrate_quota_limits_to_api_db       |      0       |     0     |\n|     service_uuids_online_data_migration     |      0       |     0     |\n+---------------------------------------------+--------------+-----------+'}
2018-06-01 03:21:50,242 [salt.state       ][INFO    ][31637] Completed state [nova-manage db online_data_migrations] at time 03:21:50.242810 duration_in_ms=4478.428
2018-06-01 03:21:50,546 [salt.state       ][INFO    ][31637] Running state [apache2] at time 03:21:50.546197
2018-06-01 03:21:50,548 [salt.state       ][INFO    ][31637] Executing state service.running for apache2
2018-06-01 03:21:50,550 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'status', 'apache2.service', '-n', '0'] in directory '/root'
2018-06-01 03:21:50,575 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-06-01 03:21:50,595 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-06-01 03:21:50,616 [salt.state       ][INFO    ][31637] The service apache2 is already running
2018-06-01 03:21:50,617 [salt.state       ][INFO    ][31637] Completed state [apache2] at time 03:21:50.617719 duration_in_ms=71.524
2018-06-01 03:21:50,618 [salt.state       ][INFO    ][31637] Running state [apache2] at time 03:21:50.618373
2018-06-01 03:21:50,619 [salt.state       ][INFO    ][31637] Executing state service.mod_watch for apache2
2018-06-01 03:21:50,620 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-06-01 03:21:50,640 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-06-01 03:21:50,665 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'apache2.service'] in directory '/root'
2018-06-01 03:21:52,603 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601032152568778
2018-06-01 03:21:52,620 [salt.minion      ][INFO    ][5421] Starting a new job with PID 5421
2018-06-01 03:21:52,639 [salt.minion      ][INFO    ][5421] Returning information for job: 20180601032152568778
2018-06-01 03:21:52,964 [salt.state       ][INFO    ][31637] {'apache2': True}
2018-06-01 03:21:52,964 [salt.state       ][INFO    ][31637] Completed state [apache2] at time 03:21:52.964519 duration_in_ms=2346.145
2018-06-01 03:21:52,969 [salt.state       ][INFO    ][31637] Running state [nova-api] at time 03:21:52.969156
2018-06-01 03:21:52,969 [salt.state       ][INFO    ][31637] Executing state service.running for nova-api
2018-06-01 03:21:52,970 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'status', 'nova-api.service', '-n', '0'] in directory '/root'
2018-06-01 03:21:52,997 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-active', 'nova-api.service'] in directory '/root'
2018-06-01 03:21:53,019 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-enabled', 'nova-api.service'] in directory '/root'
2018-06-01 03:21:53,038 [salt.state       ][INFO    ][31637] The service nova-api is already running
2018-06-01 03:21:53,038 [salt.state       ][INFO    ][31637] Completed state [nova-api] at time 03:21:53.038828 duration_in_ms=69.671
2018-06-01 03:21:53,039 [salt.state       ][INFO    ][31637] Running state [nova-api] at time 03:21:53.039178
2018-06-01 03:21:53,039 [salt.state       ][INFO    ][31637] Executing state service.mod_watch for nova-api
2018-06-01 03:21:53,040 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-active', 'nova-api.service'] in directory '/root'
2018-06-01 03:21:53,059 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-enabled', 'nova-api.service'] in directory '/root'
2018-06-01 03:21:53,078 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'nova-api.service'] in directory '/root'
2018-06-01 03:21:53,360 [salt.state       ][INFO    ][31637] {'nova-api': True}
2018-06-01 03:21:53,361 [salt.state       ][INFO    ][31637] Completed state [nova-api] at time 03:21:53.361678 duration_in_ms=322.499
2018-06-01 03:21:53,364 [salt.state       ][INFO    ][31637] Running state [nova-consoleauth] at time 03:21:53.364298
2018-06-01 03:21:53,364 [salt.state       ][INFO    ][31637] Executing state service.running for nova-consoleauth
2018-06-01 03:21:53,366 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'status', 'nova-consoleauth.service', '-n', '0'] in directory '/root'
2018-06-01 03:21:53,387 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-active', 'nova-consoleauth.service'] in directory '/root'
2018-06-01 03:21:53,415 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-enabled', 'nova-consoleauth.service'] in directory '/root'
2018-06-01 03:21:53,441 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-enabled', 'nova-consoleauth.service'] in directory '/root'
2018-06-01 03:21:53,488 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemd-run', '--scope', 'systemctl', 'start', 'nova-consoleauth.service'] in directory '/root'
2018-06-01 03:21:53,539 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-active', 'nova-consoleauth.service'] in directory '/root'
2018-06-01 03:21:53,564 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-enabled', 'nova-consoleauth.service'] in directory '/root'
2018-06-01 03:21:53,607 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-enabled', 'nova-consoleauth.service'] in directory '/root'
2018-06-01 03:21:53,649 [salt.state       ][INFO    ][31637] {'nova-consoleauth': True}
2018-06-01 03:21:53,650 [salt.state       ][INFO    ][31637] Completed state [nova-consoleauth] at time 03:21:53.650059 duration_in_ms=285.761
2018-06-01 03:21:53,660 [salt.state       ][INFO    ][31637] Running state [nova-scheduler] at time 03:21:53.660459
2018-06-01 03:21:53,660 [salt.state       ][INFO    ][31637] Executing state service.running for nova-scheduler
2018-06-01 03:21:53,661 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'status', 'nova-scheduler.service', '-n', '0'] in directory '/root'
2018-06-01 03:21:53,697 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-active', 'nova-scheduler.service'] in directory '/root'
2018-06-01 03:21:53,730 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-enabled', 'nova-scheduler.service'] in directory '/root'
2018-06-01 03:21:53,763 [salt.state       ][INFO    ][31637] The service nova-scheduler is already running
2018-06-01 03:21:53,764 [salt.state       ][INFO    ][31637] Completed state [nova-scheduler] at time 03:21:53.763978 duration_in_ms=103.518
2018-06-01 03:21:53,764 [salt.state       ][INFO    ][31637] Running state [nova-scheduler] at time 03:21:53.764333
2018-06-01 03:21:53,764 [salt.state       ][INFO    ][31637] Executing state service.mod_watch for nova-scheduler
2018-06-01 03:21:53,765 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-active', 'nova-scheduler.service'] in directory '/root'
2018-06-01 03:21:53,794 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-enabled', 'nova-scheduler.service'] in directory '/root'
2018-06-01 03:21:53,826 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'nova-scheduler.service'] in directory '/root'
2018-06-01 03:21:57,039 [salt.state       ][INFO    ][31637] {'nova-scheduler': True}
2018-06-01 03:21:57,039 [salt.state       ][INFO    ][31637] Completed state [nova-scheduler] at time 03:21:57.039625 duration_in_ms=3275.291
2018-06-01 03:21:57,041 [salt.state       ][INFO    ][31637] Running state [nova-conductor] at time 03:21:57.041665
2018-06-01 03:21:57,042 [salt.state       ][INFO    ][31637] Executing state service.running for nova-conductor
2018-06-01 03:21:57,042 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'status', 'nova-conductor.service', '-n', '0'] in directory '/root'
2018-06-01 03:21:57,065 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-active', 'nova-conductor.service'] in directory '/root'
2018-06-01 03:21:57,109 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-enabled', 'nova-conductor.service'] in directory '/root'
2018-06-01 03:21:57,155 [salt.state       ][INFO    ][31637] The service nova-conductor is already running
2018-06-01 03:21:57,155 [salt.state       ][INFO    ][31637] Completed state [nova-conductor] at time 03:21:57.155852 duration_in_ms=114.187
2018-06-01 03:21:57,156 [salt.state       ][INFO    ][31637] Running state [nova-conductor] at time 03:21:57.156112
2018-06-01 03:21:57,156 [salt.state       ][INFO    ][31637] Executing state service.mod_watch for nova-conductor
2018-06-01 03:21:57,157 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-active', 'nova-conductor.service'] in directory '/root'
2018-06-01 03:21:57,186 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-enabled', 'nova-conductor.service'] in directory '/root'
2018-06-01 03:21:57,229 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'nova-conductor.service'] in directory '/root'
2018-06-01 03:21:57,781 [salt.state       ][INFO    ][31637] {'nova-conductor': True}
2018-06-01 03:21:57,781 [salt.state       ][INFO    ][31637] Completed state [nova-conductor] at time 03:21:57.781534 duration_in_ms=625.422
2018-06-01 03:21:57,784 [salt.state       ][INFO    ][31637] Running state [nova-novncproxy] at time 03:21:57.784019
2018-06-01 03:21:57,784 [salt.state       ][INFO    ][31637] Executing state service.running for nova-novncproxy
2018-06-01 03:21:57,785 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'status', 'nova-novncproxy.service', '-n', '0'] in directory '/root'
2018-06-01 03:21:57,810 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-active', 'nova-novncproxy.service'] in directory '/root'
2018-06-01 03:21:57,846 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-enabled', 'nova-novncproxy.service'] in directory '/root'
2018-06-01 03:21:57,886 [salt.state       ][INFO    ][31637] The service nova-novncproxy is already running
2018-06-01 03:21:57,887 [salt.state       ][INFO    ][31637] Completed state [nova-novncproxy] at time 03:21:57.887140 duration_in_ms=103.12
2018-06-01 03:21:57,887 [salt.state       ][INFO    ][31637] Running state [nova-novncproxy] at time 03:21:57.887404
2018-06-01 03:21:57,887 [salt.state       ][INFO    ][31637] Executing state service.mod_watch for nova-novncproxy
2018-06-01 03:21:57,888 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-active', 'nova-novncproxy.service'] in directory '/root'
2018-06-01 03:21:57,930 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemctl', 'is-enabled', 'nova-novncproxy.service'] in directory '/root'
2018-06-01 03:21:57,957 [salt.loaded.int.module.cmdmod][INFO    ][31637] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'nova-novncproxy.service'] in directory '/root'
2018-06-01 03:21:58,140 [salt.state       ][INFO    ][31637] {'nova-novncproxy': True}
2018-06-01 03:21:58,141 [salt.state       ][INFO    ][31637] Completed state [nova-novncproxy] at time 03:21:58.141215 duration_in_ms=253.811
2018-06-01 03:21:58,145 [salt.minion      ][INFO    ][31637] Returning information for job: 20180601031950386654
2018-06-01 03:24:59,628 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command test.ping with jid 20180601032459599752
2018-06-01 03:24:59,651 [salt.minion      ][INFO    ][5896] Starting a new job with PID 5896
2018-06-01 03:24:59,723 [salt.minion      ][INFO    ][5896] Returning information for job: 20180601032459599752
2018-06-01 03:25:35,744 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command state.sls with jid 20180601032535717427
2018-06-01 03:25:35,769 [salt.minion      ][INFO    ][5901] Starting a new job with PID 5901
2018-06-01 03:25:38,516 [salt.state       ][INFO    ][5901] Loading fresh modules for state activity
2018-06-01 03:25:38,572 [salt.fileclient  ][INFO    ][5901] Fetching file from saltenv 'base', ** done ** 'heat/init.sls'
2018-06-01 03:25:38,603 [salt.fileclient  ][INFO    ][5901] Fetching file from saltenv 'base', ** done ** 'heat/server.sls'
2018-06-01 03:25:39,981 [salt.state       ][INFO    ][5901] Running state [heat-api] at time 03:25:39.981528
2018-06-01 03:25:39,982 [salt.state       ][INFO    ][5901] Executing state pkg.installed for heat-api
2018-06-01 03:25:39,983 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:25:40,417 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['apt-cache', '-q', 'policy', 'heat-api'] in directory '/root'
2018-06-01 03:25:40,511 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-06-01 03:25:42,896 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:25:42,930 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'heat-api'] in directory '/root'
2018-06-01 03:25:45,799 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601032545761618
2018-06-01 03:25:45,818 [salt.minion      ][INFO    ][6561] Starting a new job with PID 6561
2018-06-01 03:25:45,845 [salt.minion      ][INFO    ][6561] Returning information for job: 20180601032545761618
2018-06-01 03:25:54,871 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:25:54,932 [salt.state       ][INFO    ][5901] Made the following changes:
'python-novaclient' changed from '2:3.3.1-2ubuntu1' to '2:9.1.1-1~u16.04+mcp10'
'python-magnumclient' changed from 'absent' to '2.5.0-1.1~u16.04+mcp2'
'python-zunclient' changed from 'absent' to '0.4.0-1~u16.04+mcp2'
'python-heatclient' changed from 'absent' to '1.11.0-1~u16.04+mcp3'
'python-manilaclient' changed from 'absent' to '1.17.2-1~u16.04+mcp7'
'python-websocket' changed from 'absent' to '0.32.0-1.1~u16.04+mcp2'
'python-openstacksdk' changed from '0.8.1-2' to '0.9.17-1~u16.04+mcp2'
'python-deprecation' changed from 'absent' to '1.0.1-1~u16.04+mcp2'
'python-zaqarclient' changed from 'absent' to '1.4.0-1.1~u16.04+mcp2'
'python-senlinclient' changed from 'absent' to '1.2.0-1.1~u16.04+mcp2'
'python-aodhclient' changed from 'absent' to '0.9.0-1~u16.04+mcp4'
'python-croniter' changed from 'absent' to '0.3.8-1'
'python-monascaclient' changed from 'absent' to '1.7.1-1~u16.04+mcp0'
'python-yaql' changed from 'absent' to '1.1.0-0ubuntu1'
'python-openstackclient' changed from '2.3.1-0ubuntu1' to '3.12.1-1~u16.04+mcp4'
'python-backports.ssl-match-hostname' changed from 'absent' to '3.5.0.1-1~cloud0'
'python-mistralclient' changed from 'absent' to '1:3.1.0-1~u16.04+mcp2'
'heat-common' changed from 'absent' to '1:9.0.4-1~u16.04+mcp24'
'python-manilaclient-doc' changed from 'absent' to '1.17.2-1~u16.04+mcp7'
'python-docker' changed from 'absent' to '1.9.0-1~cloud0'
'python-designateclient' changed from 'absent' to '2.7.0-1~u16.04+mcp2'
'python-troveclient' changed from 'absent' to '1:2.8.0-1.1~u16.04+mcp2'
'python-heat' changed from 'absent' to '1:9.0.4-1~u16.04+mcp24'
'python-saharaclient' changed from 'absent' to '1.1.0-1.1~u16.04+mcp2'
'heat-api' changed from 'absent' to '1:9.0.4-1~u16.04+mcp24'
'python-swiftclient' changed from 'absent' to '1:3.4.0-1~u16.04+mcp3'

2018-06-01 03:25:54,968 [salt.state       ][INFO    ][5901] Loading fresh modules for state activity
2018-06-01 03:25:55,002 [salt.state       ][INFO    ][5901] Completed state [heat-api] at time 03:25:55.002373 duration_in_ms=15020.845
2018-06-01 03:25:55,010 [salt.state       ][INFO    ][5901] Running state [heat-api-cfn] at time 03:25:55.010399
2018-06-01 03:25:55,010 [salt.state       ][INFO    ][5901] Executing state pkg.installed for heat-api-cfn
2018-06-01 03:25:55,572 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:25:55,608 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'heat-api-cfn'] in directory '/root'
2018-06-01 03:25:55,974 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601032555944480
2018-06-01 03:25:55,989 [salt.minion      ][INFO    ][7292] Starting a new job with PID 7292
2018-06-01 03:25:56,020 [salt.minion      ][INFO    ][7292] Returning information for job: 20180601032555944480
2018-06-01 03:25:58,807 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:25:58,867 [salt.state       ][INFO    ][5901] Made the following changes:
'heat-api-cfn' changed from 'absent' to '1:9.0.4-1~u16.04+mcp24'

2018-06-01 03:25:58,900 [salt.state       ][INFO    ][5901] Loading fresh modules for state activity
2018-06-01 03:25:59,064 [salt.state       ][INFO    ][5901] Completed state [heat-api-cfn] at time 03:25:59.064753 duration_in_ms=4054.354
2018-06-01 03:25:59,074 [salt.state       ][INFO    ][5901] Running state [heat-engine] at time 03:25:59.074518
2018-06-01 03:25:59,075 [salt.state       ][INFO    ][5901] Executing state pkg.installed for heat-engine
2018-06-01 03:25:59,561 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:25:59,595 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'heat-engine'] in directory '/root'
2018-06-01 03:26:02,843 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:26:02,902 [salt.state       ][INFO    ][5901] Made the following changes:
'heat-engine' changed from 'absent' to '1:9.0.4-1~u16.04+mcp24'

2018-06-01 03:26:02,935 [salt.state       ][INFO    ][5901] Loading fresh modules for state activity
2018-06-01 03:26:02,976 [salt.state       ][INFO    ][5901] Completed state [heat-engine] at time 03:26:02.976563 duration_in_ms=3902.041
2018-06-01 03:26:02,985 [salt.state       ][INFO    ][5901] Running state [heat-common] at time 03:26:02.985015
2018-06-01 03:26:02,985 [salt.state       ][INFO    ][5901] Executing state pkg.installed for heat-common
2018-06-01 03:26:03,458 [salt.state       ][INFO    ][5901] All specified packages are already installed
2018-06-01 03:26:03,458 [salt.state       ][INFO    ][5901] Completed state [heat-common] at time 03:26:03.458707 duration_in_ms=473.69
2018-06-01 03:26:03,459 [salt.state       ][INFO    ][5901] Running state [python-heatclient] at time 03:26:03.459009
2018-06-01 03:26:03,459 [salt.state       ][INFO    ][5901] Executing state pkg.installed for python-heatclient
2018-06-01 03:26:03,466 [salt.state       ][INFO    ][5901] All specified packages are already installed
2018-06-01 03:26:03,467 [salt.state       ][INFO    ][5901] Completed state [python-heatclient] at time 03:26:03.466980 duration_in_ms=7.971
2018-06-01 03:26:03,467 [salt.state       ][INFO    ][5901] Running state [gettext-base] at time 03:26:03.467222
2018-06-01 03:26:03,467 [salt.state       ][INFO    ][5901] Executing state pkg.installed for gettext-base
2018-06-01 03:26:03,474 [salt.state       ][INFO    ][5901] All specified packages are already installed
2018-06-01 03:26:03,474 [salt.state       ][INFO    ][5901] Completed state [gettext-base] at time 03:26:03.474887 duration_in_ms=7.665
2018-06-01 03:26:03,475 [salt.state       ][INFO    ][5901] Running state [heat-api-cloudwatch] at time 03:26:03.475137
2018-06-01 03:26:03,475 [salt.state       ][INFO    ][5901] Executing state pkg.installed for heat-api-cloudwatch
2018-06-01 03:26:03,497 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:26:03,534 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'heat-api-cloudwatch'] in directory '/root'
2018-06-01 03:26:06,063 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601032606027724
2018-06-01 03:26:06,081 [salt.minion      ][INFO    ][8091] Starting a new job with PID 8091
2018-06-01 03:26:06,106 [salt.minion      ][INFO    ][8091] Returning information for job: 20180601032606027724
2018-06-01 03:26:06,795 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:26:06,858 [salt.state       ][INFO    ][5901] Made the following changes:
'heat-api-cloudwatch' changed from 'absent' to '1:9.0.4-1~u16.04+mcp24'

2018-06-01 03:26:06,894 [salt.state       ][INFO    ][5901] Loading fresh modules for state activity
2018-06-01 03:26:06,928 [salt.state       ][INFO    ][5901] Completed state [heat-api-cloudwatch] at time 03:26:06.928410 duration_in_ms=3453.272
2018-06-01 03:26:06,933 [salt.state       ][INFO    ][5901] Running state [/etc/heat/heat.conf] at time 03:26:06.933483
2018-06-01 03:26:06,934 [salt.state       ][INFO    ][5901] Executing state file.managed for /etc/heat/heat.conf
2018-06-01 03:26:06,992 [salt.fileclient  ][INFO    ][5901] Fetching file from saltenv 'base', ** done ** 'heat/files/pike/heat.conf.Debian'
2018-06-01 03:26:07,183 [salt.state       ][INFO    ][5901] File changed:
--- 
+++ 
@@ -1,12 +1,15 @@
+
 [DEFAULT]
 
 #
 # From heat.api.middleware.ssl
 #
+region_name_for_services=RegionOne
 
 # The HTTP Header that will be used to determine what the original request
 # protocol scheme was, even if it was removed by an SSL terminator proxy.
 # (string value)
+# Deprecated group/name - [DEFAULT]/secure_proxy_ssl_header
 #secure_proxy_ssl_header = X-Forwarded-Proto
 
 #
@@ -15,7 +18,7 @@
 
 # Name of the engine node. This can be an opaque identifier. It is not
 # necessarily a hostname, FQDN, or IP address. (string value)
-#host = d8e1e4c3d62e
+#host = lgw01-02
 
 # List of directories to search for plug-ins. (list value)
 #plugin_dirs = /usr/lib64/heat,/usr/lib/heat,/usr/local/lib/heat,/usr/local/lib64/heat
@@ -26,13 +29,8 @@
 # The directory to search for template files. (string value)
 #template_dir = /etc/heat/templates
 
-# DEPRECATED: Select deferred auth method, stored password or trusts. (string
-# value)
+# Select deferred auth method, stored password or trusts. (string value)
 # Allowed values: password, trusts
-# This option is deprecated for removal since 9.0.0.
-# Its value may be silently ignored in the future.
-# Reason: Stored password based deferred auth is broken when used with keystone
-# v3 and is not supported.
 #deferred_auth_method = trusts
 
 # Allow reauthentication on token expiry, such that long-running tasks may
@@ -40,6 +38,10 @@
 # value)
 # Allowed values: '', trusts
 #reauthentication_auth_method =
+
+# Gap, in seconds, to determine whether the given token is about to expire.
+# (integer value)
+#stale_token_duration = 30
 
 # Subset of trustor roles to be delegated to heat. If left unset, all roles of
 # a user will be delegated to heat when creating a stack. (list value)
@@ -173,15 +175,19 @@
 # require instances to use a different endpoint than in the keystone catalog
 # (string value)
 #heat_metadata_server_url = <None>
+heat_metadata_server_url=http://192.168.10.13:8000
 
 # URL of the Heat waitcondition server. (string value)
 #heat_waitcondition_server_url = <None>
+heat_waitcondition_server_url=http://192.168.10.13:8000/v1/waitcondition
 
 # URL of the Heat CloudWatch server. (string value)
 #heat_watch_server_url =
+heat_watch_server_url=http://192.168.10.13:8003
 
 # Instance connection to CFN/CW API via https. (string value)
 #instance_connection_is_secure = 0
+instance_connection_is_secure=0
 
 # Instance connection to CFN/CW API validate certs if SSL is used. (string
 # value)
@@ -202,12 +208,15 @@
 # `stack_user_domain_id` option is set, this option is ignored. (string value)
 #stack_user_domain_name = <None>
 
-# Keystone username, a user with roles sufficient to manage users and projects
-# in the stack_user_domain. (string value)
-#stack_domain_admin = <None>
-
-# Keystone password for stack_domain_admin user. (string value)
-#stack_domain_admin_password = <None>
+# Keystone username, a user with roles sufficient to manage
+# users and projects in the stack_user_domain. (string value)
+stack_domain_admin = heat_domain_admin
+
+# Keystone password for stack_domain_admin user. (string
+# value)
+stack_domain_admin_password=opnfv_secret
+
+stack_user_domain_name = heat_user_domain
 
 # Maximum raw byte size of any template. (integer value)
 #max_template_size = 524288
@@ -241,13 +250,6 @@
 
 # Fully qualified class name to use as a client backend. (string value)
 #cloud_backend = heat.engine.clients.OpenStackClients
-
-#
-# From heat.engine.clients.os.keystone.heat_keystoneclient
-#
-
-# Fully qualified class name to use as a keystone backend. (string value)
-#keystone_backend = heat.engine.clients.os.keystone.heat_keystoneclient.KsClientWrapper
 
 #
 # From heat.engine.notification
@@ -274,6 +276,13 @@
 # INFO level. (boolean value)
 # Note: This option can be changed without restarting.
 #debug = false
+
+# DEPRECATED: If set to false, the logging level will be set to WARNING instead
+# of the default INFO level. (boolean value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#verbose = true
+verbose = true
 
 # The name of a logging configuration file. This file is appended to any
 # existing logging configuration files. For details about logging configuration
@@ -295,6 +304,7 @@
 # log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logfile
 #log_file = <None>
+log_file=/var/log/heat/heat.log
 
 # (Optional) The base directory used for relative log_file  paths. This option
 # is ignored if log_config_append is set. (string value)
@@ -313,12 +323,6 @@
 # is set. (boolean value)
 #use_syslog = false
 
-# Enable journald for logging. If running in a systemd environment you may wish
-# to enable journal support. Doing so will use the journal native protocol
-# which includes structured metadata in addition to log messages.This option is
-# ignored if log_config_append is set. (boolean value)
-#use_journal = false
-
 # Syslog facility to receive log lines. This option is ignored if
 # log_config_append is set. (string value)
 #syslog_log_facility = LOG_USER
@@ -347,7 +351,7 @@
 
 # List of package logging levels in logger=LEVEL pairs. This option is ignored
 # if log_config_append is set. (list value)
-#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
+#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
 
 # Enables or disables publication of error events. (boolean value)
 #publish_errors = false
@@ -380,6 +384,7 @@
 #
 
 # Size of RPC connection pool. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_conn_pool_size
 #rpc_conn_pool_size = 30
 
 # The pool size limit for connections expiration policy (integer value)
@@ -390,24 +395,30 @@
 
 # ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
 # The "host" option should point or resolve to this address. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_address
 #rpc_zmq_bind_address = *
 
 # MatchMaker driver. (string value)
 # Allowed values: redis, sentinel, dummy
+# Deprecated group/name - [DEFAULT]/rpc_zmq_matchmaker
 #rpc_zmq_matchmaker = redis
 
 # Number of ZeroMQ contexts, defaults to 1. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_contexts
 #rpc_zmq_contexts = 1
 
 # Maximum number of ingress messages to locally buffer per topic. Default is
 # unlimited. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_topic_backlog
 #rpc_zmq_topic_backlog = <None>
 
 # Directory for holding IPC sockets. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_ipc_dir
 #rpc_zmq_ipc_dir = /var/run/openstack
 
 # Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
 # "host" option, if running Nova. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_host
 #rpc_zmq_host = localhost
 
 # Number of seconds to wait before all pending messages will be sent after
@@ -420,21 +431,26 @@
 
 # The default number of seconds that poll should wait. Poll raises timeout
 # exception when timeout expired. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_poll_timeout
 #rpc_poll_timeout = 1
 
 # Expiration timeout in seconds of a name service record about existing target
 # ( < 0 means no timeout). (integer value)
+# Deprecated group/name - [DEFAULT]/zmq_target_expire
 #zmq_target_expire = 300
 
 # Update period in seconds of a name service record about existing target.
 # (integer value)
+# Deprecated group/name - [DEFAULT]/zmq_target_update
 #zmq_target_update = 180
 
 # Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
 # value)
+# Deprecated group/name - [DEFAULT]/use_pub_sub
 #use_pub_sub = false
 
 # Use ROUTER remote proxy. (boolean value)
+# Deprecated group/name - [DEFAULT]/use_router_proxy
 #use_router_proxy = false
 
 # This option makes direct connections dynamic or static. It makes sense only
@@ -449,20 +465,24 @@
 # Minimal port number for random ports range. (port value)
 # Minimum value: 0
 # Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/rpc_zmq_min_port
 #rpc_zmq_min_port = 49153
 
 # Maximal port number for random ports range. (integer value)
 # Minimum value: 1
 # Maximum value: 65536
+# Deprecated group/name - [DEFAULT]/rpc_zmq_max_port
 #rpc_zmq_max_port = 65536
 
 # Number of retries to find free port number before fail with ZMQBindError.
 # (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_port_retries
 #rpc_zmq_bind_port_retries = 100
 
 # Default serialization mechanism for serializing/deserializing
 # outgoing/incoming messages (string value)
 # Allowed values: json, msgpack
+# Deprecated group/name - [DEFAULT]/rpc_zmq_serialization
 #rpc_zmq_serialization = json
 
 # This option configures round-robin mode in zmq socket. True means not keeping
@@ -527,18 +547,18 @@
 # value)
 #subscribe_on =
 
-# Size of executor thread pool when executor is threading or eventlet. (integer
-# value)
+# Size of executor thread pool. (integer value)
 # Deprecated group/name - [DEFAULT]/rpc_thread_pool_size
 #executor_thread_pool_size = 64
 
 # Seconds to wait for a response from a call. (integer value)
 #rpc_response_timeout = 60
+rpc_response_timeout = 600
 
 # A URL representing the messaging driver to use and its full configuration.
 # (string value)
 #transport_url = <None>
-
+transport_url = rabbit://openstack:opnfv_secret@192.168.10.28:5672,openstack:opnfv_secret@192.168.10.29:5672,openstack:opnfv_secret@192.168.10.30:5672//openstack
 # DEPRECATED: The messaging driver to use, defaults to rabbit. Other drivers
 # include amqp and zmq. (string value)
 # This option is deprecated for removal.
@@ -583,7 +603,9 @@
 # Specify a timeout after which a gracefully shutdown server will exit. Zero
 # value means endless wait. (integer value)
 #graceful_shutdown_timeout = 60
-
+max_resources_per_stack=20000
+max_json_body_size=10880000
+max_template_size=5440000
 
 [auth_password]
 
@@ -788,32 +810,6 @@
 # Optional heat url in format like http://0.0.0.0:8004/v1/%(tenant_id)s.
 # (string value)
 #url =
-
-
-[clients_keystone]
-
-#
-# From heat.common.config
-#
-
-# Type of endpoint in Identity service catalog to use for communication with
-# the OpenStack service. (string value)
-#endpoint_type = <None>
-
-# Optional CA cert file to use in SSL connections. (string value)
-#ca_file = <None>
-
-# Optional PEM-formatted certificate chain file. (string value)
-#cert_file = <None>
-
-# Optional PEM-formatted file that contains the private key. (string value)
-#key_file = <None>
-
-# If set, then the server's certificate will not be verified. (boolean value)
-#insecure = <None>
-
-# Unversioned keystone url in format like http://0.0.0.0:5000. (string value)
-#auth_uri =
 
 
 [clients_magnum]
@@ -1093,6 +1089,7 @@
 # Maximum cache age of CORS preflight requests. (integer value)
 #max_age = 3600
 
+
 # Indicate which methods can be used during the actual request. (list value)
 #allow_methods = GET,PUT,POST,DELETE,PATCH
 
@@ -1101,13 +1098,51 @@
 #allow_headers = X-Auth-Token,X-Identity-Status,X-Roles,X-Service-Catalog,X-User-Id,X-Tenant-Id,X-OpenStack-Request-ID
 
 
+[cors.subdomain]
+
+#
+# From oslo.middleware
+#
+
+# Indicate whether this resource may be shared with the domain received in the
+# requests "origin" header. Format: "<protocol>://<host>[:<port>]", no trailing
+# slash. Example: https://horizon.example.com (list value)
+#allowed_origin = <None>
+
+# Indicate that the actual request can include user credentials (boolean value)
+#allow_credentials = true
+
+# Indicate which headers are safe to expose to the API. Defaults to HTTP Simple
+# Headers. (list value)
+#expose_headers = X-Auth-Token,X-Subject-Token,X-Service-Token,X-OpenStack-Request-ID
+
+# Maximum cache age of CORS preflight requests. (integer value)
+#max_age = 3600
+
+# Indicate which methods can be used during the actual request. (list value)
+#allow_methods = GET,PUT,POST,DELETE,PATCH
+
+# Indicate which header field names may be used during the actual request.
+# (list value)
+#allow_headers = X-Auth-Token,X-Identity-Status,X-Roles,X-Service-Catalog,X-User-Id,X-Tenant-Id,X-OpenStack-Request-ID
+
+
 [database]
 
 #
 # From oslo.db
 #
 
+# DEPRECATED: The file name to use with SQLite. (string value)
+# Deprecated group/name - [DEFAULT]/sqlite_db
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Should use config option connection or slave_connection to connect
+# the database.
+#sqlite_db = oslo.sqlite
+
 # If True, SQLite uses synchronous mode. (boolean value)
+# Deprecated group/name - [DEFAULT]/sqlite_synchronous
 #sqlite_synchronous = true
 
 # The back end to use for the database. (string value)
@@ -1120,6 +1155,7 @@
 # Deprecated group/name - [DATABASE]/sql_connection
 # Deprecated group/name - [sql]/connection
 #connection = <None>
+connection = mysql+pymysql://heat:opnfv_secret@192.168.10.23/heat?charset=utf8
 
 # The SQLAlchemy connection string to use to connect to the slave database.
 # (string value)
@@ -1131,10 +1167,6 @@
 # (string value)
 #mysql_sql_mode = TRADITIONAL
 
-# If True, transparently enables support for handling MySQL Cluster (NDB).
-# (boolean value)
-#mysql_enable_ndb = false
-
 # Timeout before idle SQL connections are reaped. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_idle_timeout
 # Deprecated group/name - [DATABASE]/sql_idle_timeout
@@ -1151,12 +1183,14 @@
 # Deprecated group/name - [DEFAULT]/sql_max_pool_size
 # Deprecated group/name - [DATABASE]/sql_max_pool_size
 #max_pool_size = 5
+max_pool_size = 30
 
 # Maximum number of database connection retries during startup. Set to -1 to
 # specify an infinite retry count. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_max_retries
 # Deprecated group/name - [DATABASE]/sql_max_retries
 #max_retries = 10
+max_retries = -1
 
 # Interval between retries of opening a SQL connection. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_retry_interval
@@ -1167,6 +1201,7 @@
 # Deprecated group/name - [DEFAULT]/sql_max_overflow
 # Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
 #max_overflow = 50
+max_overflow = 60
 
 # Verbosity of SQL debugging information: 0=None, 100=Everything. (integer
 # value)
@@ -1206,30 +1241,28 @@
 [ec2authtoken]
 
 #
-# From heat.api.aws.ec2token
+# Options defined in heat.api.aws.ec2token
 #
 
 # Authentication Endpoint URI. (string value)
-#auth_uri = <None>
+auth_uri=http://192.168.10.35:5000
 
 # Allow orchestration of multiple clouds. (boolean value)
-#multi_cloud = false
-
-# Allowed keystone endpoints for auth_uri when multi_cloud is enabled. At least
-# one endpoint needs to be specified. (list value)
-#allowed_auth_uris =
-
-# Optional PEM-formatted certificate chain file. (string value)
-#cert_file = <None>
-
-# Optional PEM-formatted file that contains the private key. (string value)
-#key_file = <None>
-
-# Optional CA cert file to use in SSL connections. (string value)
-#ca_file = <None>
-
-# If set, then the server's certificate will not be verified. (boolean value)
-#insecure = false
+#multi_cloud=false
+
+# Allowed keystone endpoints for auth_uri when multi_cloud is
+# enabled. At least one endpoint needs to be specified. (list
+# value)
+#allowed_auth_uris=
+keystone_ec2_uri=http://192.168.10.35:5000/v3/ec2tokens
+
+[clients]
+endpoint_type = internalURL
+
+[clients_heat]
+endpoint_type = publicURL
+[clients_keystone]
+auth_uri=http://192.168.10.35:35357
 
 
 [eventlet_opts]
@@ -1283,26 +1316,34 @@
 
 # Address to bind the server. Useful when selecting a particular network
 # interface. (IP address value)
+# Deprecated group/name - [DEFAULT]/bind_host
 #bind_host = 0.0.0.0
+bind_host = 192.168.10.38
 
 # The port on which the server will listen. (port value)
 # Minimum value: 0
 # Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/bind_port
 #bind_port = 8004
 
 # Number of backlog requests to configure the socket with. (integer value)
+# Deprecated group/name - [DEFAULT]/backlog
 #backlog = 4096
 
 # Location of the SSL certificate file to use for SSL mode. (string value)
+# Deprecated group/name - [DEFAULT]/cert_file
 #cert_file = <None>
 
 # Location of the SSL key file to use for enabling SSL mode. (string value)
+# Deprecated group/name - [DEFAULT]/key_file
 #key_file = <None>
 
 # Number of workers for Heat service. Default value 0 means, that service will
 # start number of workers equal number of cores on server. (integer value)
 # Minimum value: 0
+# Deprecated group/name - [DEFAULT]/workers
 #workers = 0
+workers=4
 
 # Maximum line size of message headers to be accepted. max_header_line may need
 # to be increased when using large tokens (typically those generated by the
@@ -1323,24 +1364,31 @@
 
 # Address to bind the server. Useful when selecting a particular network
 # interface. (IP address value)
+# Deprecated group/name - [DEFAULT]/bind_host
 #bind_host = 0.0.0.0
+bind_host = 192.168.10.38
 
 # The port on which the server will listen. (port value)
 # Minimum value: 0
 # Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/bind_port
 #bind_port = 8000
 
 # Number of backlog requests to configure the socket with. (integer value)
+# Deprecated group/name - [DEFAULT]/backlog
 #backlog = 4096
 
 # Location of the SSL certificate file to use for SSL mode. (string value)
+# Deprecated group/name - [DEFAULT]/cert_file
 #cert_file = <None>
 
 # Location of the SSL key file to use for enabling SSL mode. (string value)
+# Deprecated group/name - [DEFAULT]/key_file
 #key_file = <None>
 
 # Number of workers for Heat service. (integer value)
 # Minimum value: 0
+# Deprecated group/name - [DEFAULT]/workers
 #workers = 1
 
 # Maximum line size of message headers to be accepted. max_header_line may need
@@ -1362,24 +1410,31 @@
 
 # Address to bind the server. Useful when selecting a particular network
 # interface. (IP address value)
+# Deprecated group/name - [DEFAULT]/bind_host
 #bind_host = 0.0.0.0
+bind_host = 192.168.10.38
 
 # The port on which the server will listen. (port value)
 # Minimum value: 0
 # Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/bind_port
 #bind_port = 8003
 
 # Number of backlog requests to configure the socket with. (integer value)
+# Deprecated group/name - [DEFAULT]/backlog
 #backlog = 4096
 
 # Location of the SSL certificate file to use for SSL mode. (string value)
+# Deprecated group/name - [DEFAULT]/cert_file
 #cert_file = <None>
 
 # Location of the SSL key file to use for enabling SSL mode. (string value)
+# Deprecated group/name - [DEFAULT]/key_file
 #key_file = <None>
 
 # Number of workers for Heat service. (integer value)
 # Minimum value: 0
+# Deprecated group/name - [DEFAULT]/workers
 #workers = 1
 
 # Maximum line size of message headers to be accepted. max_header_line may need
@@ -1402,10 +1457,10 @@
 # Complete "public" Identity API endpoint. This endpoint should not be an
 # "admin" endpoint, as it should be accessible by all end users.
 # Unauthenticated clients are redirected to this endpoint to authenticate.
-# Although this endpoint should ideally be unversioned, client support in the
-# wild varies. If you're using a versioned v2 endpoint here, then this should
-# *not* be the same endpoint the service user utilizes for validating tokens,
-# because normal end users may not be able to reach that endpoint. (string
+# Although this endpoint should  ideally be unversioned, client support in the
+# wild varies.  If you're using a versioned v2 endpoint here, then this  should
+# *not* be the same endpoint the service user utilizes  for validating tokens,
+# because normal end users may not be  able to reach that endpoint. (string
 # value)
 #auth_uri = <None>
 
@@ -1602,7 +1657,18 @@
 
 # Config Section from which to load plugin specific options (string value)
 #auth_section = <None>
-
+auth_type = password
+auth_uri=http://192.168.10.35:5000
+#identity_uri=http://192.168.10.35:35357
+#admin_user=heat
+#admin_password=opnfv_secret
+#admin_tenant_name=service
+auth_url=http://192.168.10.35:35357
+username = heat
+password = opnfv_secret
+project_name = service
+project_domain_name = Default
+user_domain_name = Default
 
 [matchmaker_redis]
 
@@ -1658,72 +1724,61 @@
 
 # Name for the AMQP container. must be globally unique. Defaults to a generated
 # UUID (string value)
+# Deprecated group/name - [amqp1]/container_name
 #container_name = <None>
 
 # Timeout for inactive connections (in seconds) (integer value)
+# Deprecated group/name - [amqp1]/idle_timeout
 #idle_timeout = 0
 
 # Debug: dump AMQP frames to stdout (boolean value)
+# Deprecated group/name - [amqp1]/trace
 #trace = false
 
-# Attempt to connect via SSL. If no other ssl-related parameters are given, it
-# will use the system's CA-bundle to verify the server's certificate. (boolean
-# value)
-#ssl = false
-
 # CA certificate PEM file used to verify the server's certificate (string
 # value)
+# Deprecated group/name - [amqp1]/ssl_ca_file
 #ssl_ca_file =
 
 # Self-identifying certificate PEM file for client authentication (string
 # value)
+# Deprecated group/name - [amqp1]/ssl_cert_file
 #ssl_cert_file =
 
 # Private key PEM file used to sign ssl_cert_file certificate (optional)
 # (string value)
+# Deprecated group/name - [amqp1]/ssl_key_file
 #ssl_key_file =
 
 # Password for decrypting ssl_key_file (if encrypted) (string value)
+# Deprecated group/name - [amqp1]/ssl_key_password
 #ssl_key_password = <None>
 
-# By default SSL checks that the name in the server's certificate matches the
-# hostname in the transport_url. In some configurations it may be preferable to
-# use the virtual hostname instead, for example if the server uses the Server
-# Name Indication TLS extension (rfc6066) to provide a certificate per virtual
-# host. Set ssl_verify_vhost to True if the server's SSL certificate uses the
-# virtual host name instead of the DNS name. (boolean value)
-#ssl_verify_vhost = false
-
 # DEPRECATED: Accept clients using either SSL or plain TCP (boolean value)
+# Deprecated group/name - [amqp1]/allow_insecure_clients
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Not applicable - not a SSL server
 #allow_insecure_clients = false
 
 # Space separated list of acceptable SASL mechanisms (string value)
+# Deprecated group/name - [amqp1]/sasl_mechanisms
 #sasl_mechanisms =
 
 # Path to directory that contains the SASL configuration (string value)
+# Deprecated group/name - [amqp1]/sasl_config_dir
 #sasl_config_dir =
 
 # Name of configuration file (without .conf suffix) (string value)
+# Deprecated group/name - [amqp1]/sasl_config_name
 #sasl_config_name =
 
-# SASL realm to use if no realm present in username (string value)
-#sasl_default_realm =
-
-# DEPRECATED: User name for message broker authentication (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the
-# username.
+# User name for message broker authentication (string value)
+# Deprecated group/name - [amqp1]/username
 #username =
 
-# DEPRECATED: Password for message broker authentication (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the
-# password.
+# Password for message broker authentication (string value)
+# Deprecated group/name - [amqp1]/password
 #password =
 
 # Seconds to pause before attempting to re-connect. (integer value)
@@ -1777,21 +1832,16 @@
 # otherwise use routable addressing (string value)
 #addressing_mode = dynamic
 
-# Enable virtual host support for those message buses that do not natively
-# support virtual hosting (such as qpidd). When set to true the virtual host
-# name will be added to all message bus addresses, effectively creating a
-# private 'subnet' per virtual host. Set to False if the message bus supports
-# virtual hosting using the 'hostname' field in the AMQP 1.0 Open performative
-# as the name of the virtual host. (boolean value)
-#pseudo_vhost = true
-
 # address prefix used when sending to a specific server (string value)
+# Deprecated group/name - [amqp1]/server_request_prefix
 #server_request_prefix = exclusive
 
 # address prefix used when broadcasting to all servers (string value)
+# Deprecated group/name - [amqp1]/broadcast_prefix
 #broadcast_prefix = broadcast
 
 # address prefix when sending to any server in group (string value)
+# Deprecated group/name - [amqp1]/group_request_prefix
 #group_request_prefix = unicast
 
 # Address prefix for all generated RPC addresses (string value)
@@ -1879,7 +1929,7 @@
 # Max fetch bytes of Kafka consumer (integer value)
 #kafka_max_fetch_bytes = 1048576
 
-# Default timeout(s) for Kafka consumers (floating point value)
+# Default timeout(s) for Kafka consumers (integer value)
 #kafka_consumer_timeout = 1.0
 
 # Pool Size for Kafka Consumers (integer value)
@@ -1913,6 +1963,7 @@
 # messaging, messagingv2, routing, log, test, noop (multi valued)
 # Deprecated group/name - [DEFAULT]/notification_driver
 #driver =
+driver = messagingv2
 
 # A URL representing the messaging driver to use for notifications. If not set,
 # we fall back to the same configuration used for RPC. (string value)
@@ -1924,11 +1975,6 @@
 # Deprecated group/name - [DEFAULT]/notification_topics
 #topics = notifications
 
-# The maximum number of attempts to re-send a notification message which failed
-# to be delivered due to a recoverable error. 0 - No retry, -1 - indefinite
-# (integer value)
-#retry = -1
-
 
 [oslo_messaging_rabbit]
 
@@ -1942,31 +1988,30 @@
 #amqp_durable_queues = false
 
 # Auto-delete queues in AMQP. (boolean value)
+# Deprecated group/name - [DEFAULT]/amqp_auto_delete
 #amqp_auto_delete = false
-
-# Enable SSL (boolean value)
-#ssl = <None>
 
 # SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and
 # SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some
 # distributions. (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_version
-#ssl_version =
+# Deprecated group/name - [DEFAULT]/kombu_ssl_version
+#kombu_ssl_version =
 
 # SSL key file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_keyfile
-#ssl_key_file =
+# Deprecated group/name - [DEFAULT]/kombu_ssl_keyfile
+#kombu_ssl_keyfile =
 
 # SSL cert file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_certfile
-#ssl_cert_file =
+# Deprecated group/name - [DEFAULT]/kombu_ssl_certfile
+#kombu_ssl_certfile =
 
 # SSL certification authority file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_ca_certs
-#ssl_ca_file =
+# Deprecated group/name - [DEFAULT]/kombu_ssl_ca_certs
+#kombu_ssl_ca_certs =
 
 # How long to wait before reconnecting in response to an AMQP consumer cancel
 # notification. (floating point value)
+# Deprecated group/name - [DEFAULT]/kombu_reconnect_delay
 #kombu_reconnect_delay = 1.0
 
 # EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression will not
@@ -1986,6 +2031,7 @@
 
 # DEPRECATED: The RabbitMQ broker address where a single node is used. (string
 # value)
+# Deprecated group/name - [DEFAULT]/rabbit_host
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
@@ -1995,24 +2041,32 @@
 # value)
 # Minimum value: 0
 # Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/rabbit_port
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
 #rabbit_port = 5672
 
 # DEPRECATED: RabbitMQ HA cluster host:port pairs. (list value)
+# Deprecated group/name - [DEFAULT]/rabbit_hosts
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
 #rabbit_hosts = $rabbit_host:$rabbit_port
 
+# Connect over SSL for RabbitMQ. (boolean value)
+# Deprecated group/name - [DEFAULT]/rabbit_use_ssl
+#rabbit_use_ssl = false
+
 # DEPRECATED: The RabbitMQ userid. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_userid
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
 #rabbit_userid = guest
 
 # DEPRECATED: The RabbitMQ password. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_password
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
@@ -2020,9 +2074,11 @@
 
 # The RabbitMQ login method. (string value)
 # Allowed values: PLAIN, AMQPLAIN, RABBIT-CR-DEMO
+# Deprecated group/name - [DEFAULT]/rabbit_login_method
 #rabbit_login_method = AMQPLAIN
 
 # DEPRECATED: The RabbitMQ virtual host. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_virtual_host
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
@@ -2033,6 +2089,7 @@
 
 # How long to backoff for between retries when connecting to RabbitMQ. (integer
 # value)
+# Deprecated group/name - [DEFAULT]/rabbit_retry_backoff
 #rabbit_retry_backoff = 2
 
 # Maximum interval of RabbitMQ connection retries. Default is 30 seconds.
@@ -2041,6 +2098,7 @@
 
 # DEPRECATED: Maximum number of RabbitMQ connection retries. Default is 0
 # (infinite retry count). (integer value)
+# Deprecated group/name - [DEFAULT]/rabbit_max_retries
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 #rabbit_max_retries = 0
@@ -2051,6 +2109,7 @@
 # If you just want to make sure that all queues (except those with auto-
 # generated names) are mirrored across all nodes, run: "rabbitmqctl set_policy
 # HA '^(?!amq\.).*' '{"ha-mode": "all"}' " (boolean value)
+# Deprecated group/name - [DEFAULT]/rabbit_ha_queues
 #rabbit_ha_queues = false
 
 # Positive integer representing duration in seconds for queue TTL (x-expires).
@@ -2061,7 +2120,7 @@
 
 # Specifies the number of messages to prefetch. Setting to zero allows
 # unlimited messages. (integer value)
-#rabbit_qos_prefetch_count = 64
+#rabbit_qos_prefetch_count = 0
 
 # Number of seconds after which the Rabbit broker is considered down if
 # heartbeat's keep-alive fails (0 disable the heartbeat). EXPERIMENTAL (integer
@@ -2073,6 +2132,7 @@
 #heartbeat_rate = 2
 
 # Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake (boolean value)
+# Deprecated group/name - [DEFAULT]/fake_rabbit
 #fake_rabbit = false
 
 # Maximum number of channels to allow (integer value)
@@ -2083,6 +2143,9 @@
 
 # How often to send heartbeats for consumer's connections (integer value)
 #heartbeat_interval = 3
+
+# Enable SSL (boolean value)
+#ssl = <None>
 
 # Arguments passed to ssl.wrap_socket (dict value)
 #ssl_options = <None>
@@ -2188,24 +2251,30 @@
 
 # ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
 # The "host" option should point or resolve to this address. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_address
 #rpc_zmq_bind_address = *
 
 # MatchMaker driver. (string value)
 # Allowed values: redis, sentinel, dummy
+# Deprecated group/name - [DEFAULT]/rpc_zmq_matchmaker
 #rpc_zmq_matchmaker = redis
 
 # Number of ZeroMQ contexts, defaults to 1. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_contexts
 #rpc_zmq_contexts = 1
 
 # Maximum number of ingress messages to locally buffer per topic. Default is
 # unlimited. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_topic_backlog
 #rpc_zmq_topic_backlog = <None>
 
 # Directory for holding IPC sockets. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_ipc_dir
 #rpc_zmq_ipc_dir = /var/run/openstack
 
 # Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
 # "host" option, if running Nova. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_host
 #rpc_zmq_host = localhost
 
 # Number of seconds to wait before all pending messages will be sent after
@@ -2218,21 +2287,26 @@
 
 # The default number of seconds that poll should wait. Poll raises timeout
 # exception when timeout expired. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_poll_timeout
 #rpc_poll_timeout = 1
 
 # Expiration timeout in seconds of a name service record about existing target
 # ( < 0 means no timeout). (integer value)
+# Deprecated group/name - [DEFAULT]/zmq_target_expire
 #zmq_target_expire = 300
 
 # Update period in seconds of a name service record about existing target.
 # (integer value)
+# Deprecated group/name - [DEFAULT]/zmq_target_update
 #zmq_target_update = 180
 
 # Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
 # value)
+# Deprecated group/name - [DEFAULT]/use_pub_sub
 #use_pub_sub = false
 
 # Use ROUTER remote proxy. (boolean value)
+# Deprecated group/name - [DEFAULT]/use_router_proxy
 #use_router_proxy = false
 
 # This option makes direct connections dynamic or static. It makes sense only
@@ -2247,20 +2321,24 @@
 # Minimal port number for random ports range. (port value)
 # Minimum value: 0
 # Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/rpc_zmq_min_port
 #rpc_zmq_min_port = 49153
 
 # Maximal port number for random ports range. (integer value)
 # Minimum value: 1
 # Maximum value: 65536
+# Deprecated group/name - [DEFAULT]/rpc_zmq_max_port
 #rpc_zmq_max_port = 65536
 
 # Number of retries to find free port number before fail with ZMQBindError.
 # (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_port_retries
 #rpc_zmq_bind_port_retries = 100
 
 # Default serialization mechanism for serializing/deserializing
 # outgoing/incoming messages (string value)
 # Allowed values: json, msgpack
+# Deprecated group/name - [DEFAULT]/rpc_zmq_serialization
 #rpc_zmq_serialization = json
 
 # This option configures round-robin mode in zmq socket. True means not keeping
@@ -2331,6 +2409,7 @@
 #
 # From oslo.middleware
 #
+enable_proxy_headers_parsing = True
 
 # The maximum body size for each  request, in bytes. (integer value)
 # Deprecated group/name - [DEFAULT]/osapi_max_request_body_size
@@ -2356,9 +2435,11 @@
 #
 
 # The file that defines policies. (string value)
+# Deprecated group/name - [DEFAULT]/policy_file
 #policy_file = policy.json
 
 # Default rule. Enforced when a requested rule is not found. (string value)
+# Deprecated group/name - [DEFAULT]/policy_default_rule
 #policy_default_rule = default
 
 # Directories where policy configuration files are stored. They can be relative
@@ -2366,6 +2447,7 @@
 # absolute paths. The file defined by policy_file must exist for these
 # directories to be searched.  Missing or empty directories are ignored. (multi
 # valued)
+# Deprecated group/name - [DEFAULT]/policy_dirs
 #policy_dirs = policy.d
 
 
@@ -2525,7 +2607,13 @@
 #
 # From heat.common.context
 #
-
+auth_plugin = password
+auth_url = http://192.168.10.35:35357
+username = heat
+password = opnfv_secret
+user_domain_name = default
+project_domain_id = default
+user_domain_id = default
 # Authentication type to load (string value)
 # Deprecated group/name - [trustee]/auth_plugin
 #auth_type = <None>
@@ -2543,11 +2631,11 @@
 #domain_name = <None>
 
 # Project ID to scope to (string value)
-# Deprecated group/name - [trustee]/tenant_id
+# Deprecated group/name - [trustee]/tenant-id
 #project_id = <None>
 
 # Project name to scope to (string value)
-# Deprecated group/name - [trustee]/tenant_name
+# Deprecated group/name - [trustee]/tenant-name
 #project_name = <None>
 
 # Domain ID containing project (string value)
@@ -2573,7 +2661,7 @@
 #user_id = <None>
 
 # Username (string value)
-# Deprecated group/name - [trustee]/user_name
+# Deprecated group/name - [trustee]/user-name
 #username = <None>
 
 # User's domain id (string value)

2018-06-01 03:26:07,186 [salt.state       ][INFO    ][5901] Completed state [/etc/heat/heat.conf] at time 03:26:07.186581 duration_in_ms=253.097
2018-06-01 03:26:07,187 [salt.state       ][INFO    ][5901] Running state [/etc/heat/api-paste.ini] at time 03:26:07.187041
2018-06-01 03:26:07,187 [salt.state       ][INFO    ][5901] Executing state file.managed for /etc/heat/api-paste.ini
2018-06-01 03:26:07,223 [salt.fileclient  ][INFO    ][5901] Fetching file from saltenv 'base', ** done ** 'heat/files/pike/api-paste.ini'
2018-06-01 03:26:07,226 [salt.state       ][INFO    ][5901] File /etc/heat/api-paste.ini is in the correct state
2018-06-01 03:26:07,226 [salt.state       ][INFO    ][5901] Completed state [/etc/heat/api-paste.ini] at time 03:26:07.226416 duration_in_ms=39.375
2018-06-01 03:26:07,226 [salt.state       ][INFO    ][5901] Running state [/etc/default/heat-api] at time 03:26:07.226826
2018-06-01 03:26:07,227 [salt.state       ][INFO    ][5901] Executing state file.managed for /etc/default/heat-api
2018-06-01 03:26:07,260 [salt.fileclient  ][INFO    ][5901] Fetching file from saltenv 'base', ** done ** 'heat/files/default'
2018-06-01 03:26:07,263 [salt.state       ][INFO    ][5901] File changed:
New file
2018-06-01 03:26:07,264 [salt.state       ][INFO    ][5901] Completed state [/etc/default/heat-api] at time 03:26:07.264089 duration_in_ms=37.263
2018-06-01 03:26:07,264 [salt.state       ][INFO    ][5901] Running state [/etc/default/heat-api-cfn] at time 03:26:07.264523
2018-06-01 03:26:07,264 [salt.state       ][INFO    ][5901] Executing state file.managed for /etc/default/heat-api-cfn
2018-06-01 03:26:07,285 [salt.state       ][INFO    ][5901] File changed:
New file
2018-06-01 03:26:07,286 [salt.state       ][INFO    ][5901] Completed state [/etc/default/heat-api-cfn] at time 03:26:07.286153 duration_in_ms=21.63
2018-06-01 03:26:07,286 [salt.state       ][INFO    ][5901] Running state [/etc/default/heat-engine] at time 03:26:07.286558
2018-06-01 03:26:07,286 [salt.state       ][INFO    ][5901] Executing state file.managed for /etc/default/heat-engine
2018-06-01 03:26:07,307 [salt.state       ][INFO    ][5901] File changed:
New file
2018-06-01 03:26:07,307 [salt.state       ][INFO    ][5901] Completed state [/etc/default/heat-engine] at time 03:26:07.307568 duration_in_ms=21.009
2018-06-01 03:26:07,308 [salt.state       ][INFO    ][5901] Running state [/etc/default/heat-api-cloudwatch] at time 03:26:07.307969
2018-06-01 03:26:07,308 [salt.state       ][INFO    ][5901] Executing state file.managed for /etc/default/heat-api-cloudwatch
2018-06-01 03:26:07,336 [salt.state       ][INFO    ][5901] File changed:
New file
2018-06-01 03:26:07,337 [salt.state       ][INFO    ][5901] Completed state [/etc/default/heat-api-cloudwatch] at time 03:26:07.337006 duration_in_ms=29.037
2018-06-01 03:26:07,338 [salt.state       ][INFO    ][5901] Running state [source /root/keystonercv3; heat-keystone-setup-domain --stack-user-domain-name heat_user_domain --stack-domain-admin heat_domain_admin --stack-domain-admin-password opnfv_secret] at time 03:26:07.338380
2018-06-01 03:26:07,338 [salt.state       ][INFO    ][5901] Executing state cmd.run for source /root/keystonercv3; heat-keystone-setup-domain --stack-user-domain-name heat_user_domain --stack-domain-admin heat_domain_admin --stack-domain-admin-password opnfv_secret
2018-06-01 03:26:07,341 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command 'source /root/keystonercv3; heat-keystone-setup-domain --stack-user-domain-name heat_user_domain --stack-domain-admin heat_domain_admin --stack-domain-admin-password opnfv_secret' in directory '/root'
2018-06-01 03:26:10,981 [salt.state       ][INFO    ][5901] {'pid': 8139, 'retcode': 0, 'stderr': "/usr/lib/python2.7/dist-packages/keystoneauth1/adapter.py:182: UserWarning: Using keystoneclient sessions has been deprecated. Please update your software to use keystoneauth1.\n  warnings.warn('Using keystoneclient sessions has been deprecated. '", 'stdout': '2018-06-01 03:26:09.752 8140 INFO __main__ [-] Creating domain heat_user_domain\n2018-06-01 03:26:09.949 8140 WARNING __main__ [-] Domain heat_user_domain already exists: Conflict: Conflict occurred attempting to store project - it is not permitted to have two projects acting as domains with the same name: heat_user_domain. (HTTP 409) (Request-ID: req-6e809848-e6a9-4b22-8fd2-3f4738e1f110)\n2018-06-01 03:26:10.690 8140 WARNING __main__ [-] User heat_domain_admin already exists: Conflict: Conflict occurred attempting to store user - Duplicate entry found with name heat_domain_admin at domain ID 4a5007f5ce9640019a8c1f3a897b09dc. (HTTP 409) (Request-ID: req-eed8ce4b-5942-4f7e-b0f2-e6db7935fd61)\n\nPlease update your heat.conf with the following in [DEFAULT]\n\nstack_user_domain_id=4a5007f5ce9640019a8c1f3a897b09dc\nstack_domain_admin=heat_domain_admin\nstack_domain_admin_password=opnfv_secret'}
2018-06-01 03:26:10,982 [salt.state       ][INFO    ][5901] Completed state [source /root/keystonercv3; heat-keystone-setup-domain --stack-user-domain-name heat_user_domain --stack-domain-admin heat_domain_admin --stack-domain-admin-password opnfv_secret] at time 03:26:10.982496 duration_in_ms=3644.114
2018-06-01 03:26:10,985 [salt.state       ][INFO    ][5901] Running state [heat-manage db_sync] at time 03:26:10.985373
2018-06-01 03:26:10,986 [salt.state       ][INFO    ][5901] Executing state cmd.run for heat-manage db_sync
2018-06-01 03:26:10,988 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command 'heat-manage db_sync' in directory '/root'
2018-06-01 03:26:12,444 [salt.state       ][INFO    ][5901] {'pid': 8148, 'retcode': 0, 'stderr': '', 'stdout': ''}
2018-06-01 03:26:12,446 [salt.state       ][INFO    ][5901] Completed state [heat-manage db_sync] at time 03:26:12.445953 duration_in_ms=1460.579
2018-06-01 03:26:12,447 [salt.state       ][INFO    ][5901] Running state [chown heat:heat /var/log/heat/ -R] at time 03:26:12.447537
2018-06-01 03:26:12,448 [salt.state       ][INFO    ][5901] Executing state cmd.run for chown heat:heat /var/log/heat/ -R
2018-06-01 03:26:12,449 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command 'chown heat:heat /var/log/heat/ -R' in directory '/root'
2018-06-01 03:26:12,473 [salt.state       ][INFO    ][5901] {'pid': 8155, 'retcode': 0, 'stderr': '', 'stdout': ''}
2018-06-01 03:26:12,475 [salt.state       ][INFO    ][5901] Completed state [chown heat:heat /var/log/heat/ -R] at time 03:26:12.474857 duration_in_ms=27.32
2018-06-01 03:26:12,758 [salt.state       ][INFO    ][5901] Running state [heat-api] at time 03:26:12.758019
2018-06-01 03:26:12,758 [salt.state       ][INFO    ][5901] Executing state service.running for heat-api
2018-06-01 03:26:12,759 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemctl', 'status', 'heat-api.service', '-n', '0'] in directory '/root'
2018-06-01 03:26:12,778 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemctl', 'is-active', 'heat-api.service'] in directory '/root'
2018-06-01 03:26:12,803 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemctl', 'is-enabled', 'heat-api.service'] in directory '/root'
2018-06-01 03:26:12,827 [salt.state       ][INFO    ][5901] The service heat-api is already running
2018-06-01 03:26:12,828 [salt.state       ][INFO    ][5901] Completed state [heat-api] at time 03:26:12.828436 duration_in_ms=70.419
2018-06-01 03:26:12,828 [salt.state       ][INFO    ][5901] Running state [heat-api] at time 03:26:12.828764
2018-06-01 03:26:12,829 [salt.state       ][INFO    ][5901] Executing state service.mod_watch for heat-api
2018-06-01 03:26:12,830 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemctl', 'is-active', 'heat-api.service'] in directory '/root'
2018-06-01 03:26:12,851 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemctl', 'is-enabled', 'heat-api.service'] in directory '/root'
2018-06-01 03:26:12,870 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'heat-api.service'] in directory '/root'
2018-06-01 03:26:12,975 [salt.state       ][INFO    ][5901] {'heat-api': True}
2018-06-01 03:26:12,976 [salt.state       ][INFO    ][5901] Completed state [heat-api] at time 03:26:12.976099 duration_in_ms=147.334
2018-06-01 03:26:12,977 [salt.state       ][INFO    ][5901] Running state [heat-api-cfn] at time 03:26:12.977858
2018-06-01 03:26:12,978 [salt.state       ][INFO    ][5901] Executing state service.running for heat-api-cfn
2018-06-01 03:26:12,979 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemctl', 'status', 'heat-api-cfn.service', '-n', '0'] in directory '/root'
2018-06-01 03:26:13,003 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemctl', 'is-active', 'heat-api-cfn.service'] in directory '/root'
2018-06-01 03:26:13,021 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemctl', 'is-enabled', 'heat-api-cfn.service'] in directory '/root'
2018-06-01 03:26:13,038 [salt.state       ][INFO    ][5901] The service heat-api-cfn is already running
2018-06-01 03:26:13,039 [salt.state       ][INFO    ][5901] Completed state [heat-api-cfn] at time 03:26:13.039329 duration_in_ms=61.47
2018-06-01 03:26:13,039 [salt.state       ][INFO    ][5901] Running state [heat-api-cfn] at time 03:26:13.039662
2018-06-01 03:26:13,040 [salt.state       ][INFO    ][5901] Executing state service.mod_watch for heat-api-cfn
2018-06-01 03:26:13,041 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemctl', 'is-active', 'heat-api-cfn.service'] in directory '/root'
2018-06-01 03:26:13,072 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemctl', 'is-enabled', 'heat-api-cfn.service'] in directory '/root'
2018-06-01 03:26:13,095 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'heat-api-cfn.service'] in directory '/root'
2018-06-01 03:26:13,143 [salt.state       ][INFO    ][5901] {'heat-api-cfn': True}
2018-06-01 03:26:13,143 [salt.state       ][INFO    ][5901] Completed state [heat-api-cfn] at time 03:26:13.143462 duration_in_ms=103.8
2018-06-01 03:26:13,145 [salt.state       ][INFO    ][5901] Running state [heat-engine] at time 03:26:13.145033
2018-06-01 03:26:13,145 [salt.state       ][INFO    ][5901] Executing state service.running for heat-engine
2018-06-01 03:26:13,146 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemctl', 'status', 'heat-engine.service', '-n', '0'] in directory '/root'
2018-06-01 03:26:13,168 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemctl', 'is-active', 'heat-engine.service'] in directory '/root'
2018-06-01 03:26:13,193 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemctl', 'is-enabled', 'heat-engine.service'] in directory '/root'
2018-06-01 03:26:13,211 [salt.state       ][INFO    ][5901] The service heat-engine is already running
2018-06-01 03:26:13,212 [salt.state       ][INFO    ][5901] Completed state [heat-engine] at time 03:26:13.212333 duration_in_ms=67.299
2018-06-01 03:26:13,212 [salt.state       ][INFO    ][5901] Running state [heat-engine] at time 03:26:13.212654
2018-06-01 03:26:13,213 [salt.state       ][INFO    ][5901] Executing state service.mod_watch for heat-engine
2018-06-01 03:26:13,214 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemctl', 'is-active', 'heat-engine.service'] in directory '/root'
2018-06-01 03:26:13,232 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemctl', 'is-enabled', 'heat-engine.service'] in directory '/root'
2018-06-01 03:26:13,249 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'heat-engine.service'] in directory '/root'
2018-06-01 03:26:13,454 [salt.state       ][INFO    ][5901] {'heat-engine': True}
2018-06-01 03:26:13,455 [salt.state       ][INFO    ][5901] Completed state [heat-engine] at time 03:26:13.455366 duration_in_ms=242.712
2018-06-01 03:26:13,458 [salt.state       ][INFO    ][5901] Running state [heat-api-cloudwatch] at time 03:26:13.457983
2018-06-01 03:26:13,458 [salt.state       ][INFO    ][5901] Executing state service.running for heat-api-cloudwatch
2018-06-01 03:26:13,459 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemctl', 'status', 'heat-api-cloudwatch.service', '-n', '0'] in directory '/root'
2018-06-01 03:26:13,478 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemctl', 'is-active', 'heat-api-cloudwatch.service'] in directory '/root'
2018-06-01 03:26:13,496 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemctl', 'is-enabled', 'heat-api-cloudwatch.service'] in directory '/root'
2018-06-01 03:26:13,513 [salt.state       ][INFO    ][5901] The service heat-api-cloudwatch is already running
2018-06-01 03:26:13,513 [salt.state       ][INFO    ][5901] Completed state [heat-api-cloudwatch] at time 03:26:13.513838 duration_in_ms=55.854
2018-06-01 03:26:13,514 [salt.state       ][INFO    ][5901] Running state [heat-api-cloudwatch] at time 03:26:13.514173
2018-06-01 03:26:13,514 [salt.state       ][INFO    ][5901] Executing state service.mod_watch for heat-api-cloudwatch
2018-06-01 03:26:13,515 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemctl', 'is-active', 'heat-api-cloudwatch.service'] in directory '/root'
2018-06-01 03:26:13,532 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemctl', 'is-enabled', 'heat-api-cloudwatch.service'] in directory '/root'
2018-06-01 03:26:13,550 [salt.loaded.int.module.cmdmod][INFO    ][5901] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'heat-api-cloudwatch.service'] in directory '/root'
2018-06-01 03:26:13,593 [salt.state       ][INFO    ][5901] {'heat-api-cloudwatch': True}
2018-06-01 03:26:13,594 [salt.state       ][INFO    ][5901] Completed state [heat-api-cloudwatch] at time 03:26:13.594224 duration_in_ms=80.051
2018-06-01 03:26:13,600 [salt.minion      ][INFO    ][5901] Returning information for job: 20180601032535717427
2018-06-01 03:26:52,912 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command test.ping with jid 20180601032652882145
2018-06-01 03:26:52,935 [salt.minion      ][INFO    ][8445] Starting a new job with PID 8445
2018-06-01 03:26:53,008 [salt.minion      ][INFO    ][8445] Returning information for job: 20180601032652882145
2018-06-01 03:27:58,215 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command state.sls with jid 20180601032758177462
2018-06-01 03:27:58,236 [salt.minion      ][INFO    ][8450] Starting a new job with PID 8450
2018-06-01 03:28:01,049 [salt.state       ][INFO    ][8450] Loading fresh modules for state activity
2018-06-01 03:28:01,110 [salt.fileclient  ][INFO    ][8450] Fetching file from saltenv 'base', ** done ** 'cinder/init.sls'
2018-06-01 03:28:01,152 [salt.fileclient  ][INFO    ][8450] Fetching file from saltenv 'base', ** done ** 'cinder/controller.sls'
2018-06-01 03:28:01,313 [salt.fileclient  ][INFO    ][8450] Fetching file from saltenv 'base', ** done ** 'cinder/user.sls'
2018-06-01 03:28:02,034 [salt.fileclient  ][INFO    ][8450] Fetching file from saltenv 'base', ** done ** 'cinder/volume.sls'
2018-06-01 03:28:03,532 [salt.state       ][INFO    ][8450] Running state [apache2] at time 03:28:03.532032
2018-06-01 03:28:03,532 [salt.state       ][INFO    ][8450] Executing state pkg.installed for apache2
2018-06-01 03:28:03,533 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:28:03,912 [salt.state       ][INFO    ][8450] All specified packages are already installed
2018-06-01 03:28:03,913 [salt.state       ][INFO    ][8450] Completed state [apache2] at time 03:28:03.913464 duration_in_ms=381.419
2018-06-01 03:28:03,914 [salt.state       ][INFO    ][8450] Running state [a2enmod ssl] at time 03:28:03.914791
2018-06-01 03:28:03,915 [salt.state       ][INFO    ][8450] Executing state cmd.run for a2enmod ssl
2018-06-01 03:28:03,915 [salt.state       ][INFO    ][8450] /etc/apache2/mods-enabled/ssl.load exists
2018-06-01 03:28:03,916 [salt.state       ][INFO    ][8450] Completed state [a2enmod ssl] at time 03:28:03.916131 duration_in_ms=1.341
2018-06-01 03:28:03,916 [salt.state       ][INFO    ][8450] Running state [a2enmod rewrite] at time 03:28:03.916689
2018-06-01 03:28:03,916 [salt.state       ][INFO    ][8450] Executing state cmd.run for a2enmod rewrite
2018-06-01 03:28:03,917 [salt.state       ][INFO    ][8450] /etc/apache2/mods-enabled/rewrite.load exists
2018-06-01 03:28:03,917 [salt.state       ][INFO    ][8450] Completed state [a2enmod rewrite] at time 03:28:03.917516 duration_in_ms=0.827
2018-06-01 03:28:03,918 [salt.state       ][INFO    ][8450] Running state [libapache2-mod-wsgi] at time 03:28:03.917996
2018-06-01 03:28:03,918 [salt.state       ][INFO    ][8450] Executing state pkg.installed for libapache2-mod-wsgi
2018-06-01 03:28:03,928 [salt.state       ][INFO    ][8450] All specified packages are already installed
2018-06-01 03:28:03,929 [salt.state       ][INFO    ][8450] Completed state [libapache2-mod-wsgi] at time 03:28:03.929056 duration_in_ms=11.06
2018-06-01 03:28:03,929 [salt.state       ][INFO    ][8450] Running state [a2enmod wsgi] at time 03:28:03.929544
2018-06-01 03:28:03,929 [salt.state       ][INFO    ][8450] Executing state cmd.run for a2enmod wsgi
2018-06-01 03:28:03,930 [salt.state       ][INFO    ][8450] /etc/apache2/mods-enabled/wsgi.load exists
2018-06-01 03:28:03,930 [salt.state       ][INFO    ][8450] Completed state [a2enmod wsgi] at time 03:28:03.930325 duration_in_ms=0.781
2018-06-01 03:28:03,934 [salt.state       ][INFO    ][8450] Running state [/etc/apache2/mods-enabled/mpm_prefork.load] at time 03:28:03.934609
2018-06-01 03:28:03,934 [salt.state       ][INFO    ][8450] Executing state file.absent for /etc/apache2/mods-enabled/mpm_prefork.load
2018-06-01 03:28:03,935 [salt.state       ][INFO    ][8450] File /etc/apache2/mods-enabled/mpm_prefork.load is not present
2018-06-01 03:28:03,935 [salt.state       ][INFO    ][8450] Completed state [/etc/apache2/mods-enabled/mpm_prefork.load] at time 03:28:03.935489 duration_in_ms=0.88
2018-06-01 03:28:03,935 [salt.state       ][INFO    ][8450] Running state [/etc/apache2/mods-enabled/mpm_prefork.conf] at time 03:28:03.935736
2018-06-01 03:28:03,935 [salt.state       ][INFO    ][8450] Executing state file.absent for /etc/apache2/mods-enabled/mpm_prefork.conf
2018-06-01 03:28:03,936 [salt.state       ][INFO    ][8450] File /etc/apache2/mods-enabled/mpm_prefork.conf is not present
2018-06-01 03:28:03,936 [salt.state       ][INFO    ][8450] Completed state [/etc/apache2/mods-enabled/mpm_prefork.conf] at time 03:28:03.936460 duration_in_ms=0.724
2018-06-01 03:28:03,937 [salt.state       ][INFO    ][8450] Running state [/etc/apache2/mods-enabled/mpm_worker.load] at time 03:28:03.937070
2018-06-01 03:28:03,937 [salt.state       ][INFO    ][8450] Executing state file.absent for /etc/apache2/mods-enabled/mpm_worker.load
2018-06-01 03:28:03,937 [salt.state       ][INFO    ][8450] File /etc/apache2/mods-enabled/mpm_worker.load is not present
2018-06-01 03:28:03,937 [salt.state       ][INFO    ][8450] Completed state [/etc/apache2/mods-enabled/mpm_worker.load] at time 03:28:03.937783 duration_in_ms=0.713
2018-06-01 03:28:03,938 [salt.state       ][INFO    ][8450] Running state [/etc/apache2/mods-enabled/mpm_worker.conf] at time 03:28:03.938008
2018-06-01 03:28:03,938 [salt.state       ][INFO    ][8450] Executing state file.absent for /etc/apache2/mods-enabled/mpm_worker.conf
2018-06-01 03:28:03,938 [salt.state       ][INFO    ][8450] File /etc/apache2/mods-enabled/mpm_worker.conf is not present
2018-06-01 03:28:03,938 [salt.state       ][INFO    ][8450] Completed state [/etc/apache2/mods-enabled/mpm_worker.conf] at time 03:28:03.938693 duration_in_ms=0.685
2018-06-01 03:28:03,941 [salt.state       ][INFO    ][8450] Running state [/etc/apache2/mods-available/mpm_event.conf] at time 03:28:03.941314
2018-06-01 03:28:03,941 [salt.state       ][INFO    ][8450] Executing state file.managed for /etc/apache2/mods-available/mpm_event.conf
2018-06-01 03:28:04,062 [salt.state       ][INFO    ][8450] File /etc/apache2/mods-available/mpm_event.conf is in the correct state
2018-06-01 03:28:04,062 [salt.state       ][INFO    ][8450] Completed state [/etc/apache2/mods-available/mpm_event.conf] at time 03:28:04.062733 duration_in_ms=121.418
2018-06-01 03:28:04,063 [salt.state       ][INFO    ][8450] Running state [a2enmod mpm_event] at time 03:28:04.063677
2018-06-01 03:28:04,063 [salt.state       ][INFO    ][8450] Executing state cmd.run for a2enmod mpm_event
2018-06-01 03:28:04,064 [salt.state       ][INFO    ][8450] /etc/apache2/mods-enabled/mpm_event.load exists
2018-06-01 03:28:04,064 [salt.state       ][INFO    ][8450] Completed state [a2enmod mpm_event] at time 03:28:04.064522 duration_in_ms=0.845
2018-06-01 03:28:04,065 [salt.state       ][INFO    ][8450] Running state [/etc/apache2/ports.conf] at time 03:28:04.065354
2018-06-01 03:28:04,065 [salt.state       ][INFO    ][8450] Executing state file.managed for /etc/apache2/ports.conf
2018-06-01 03:28:04,142 [salt.state       ][INFO    ][8450] File /etc/apache2/ports.conf is in the correct state
2018-06-01 03:28:04,142 [salt.state       ][INFO    ][8450] Completed state [/etc/apache2/ports.conf] at time 03:28:04.142654 duration_in_ms=77.3
2018-06-01 03:28:04,143 [salt.state       ][INFO    ][8450] Running state [/etc/apache2/conf-available/security.conf] at time 03:28:04.143144
2018-06-01 03:28:04,143 [salt.state       ][INFO    ][8450] Executing state file.managed for /etc/apache2/conf-available/security.conf
2018-06-01 03:28:04,226 [salt.state       ][INFO    ][8450] File /etc/apache2/conf-available/security.conf is in the correct state
2018-06-01 03:28:04,227 [salt.state       ][INFO    ][8450] Completed state [/etc/apache2/conf-available/security.conf] at time 03:28:04.227227 duration_in_ms=84.082
2018-06-01 03:28:04,235 [salt.state       ][INFO    ][8450] Running state [/etc/apache2/sites-enabled/000-default.conf] at time 03:28:04.235944
2018-06-01 03:28:04,236 [salt.state       ][INFO    ][8450] Executing state file.absent for /etc/apache2/sites-enabled/000-default.conf
2018-06-01 03:28:04,237 [salt.state       ][INFO    ][8450] File /etc/apache2/sites-enabled/000-default.conf is not present
2018-06-01 03:28:04,237 [salt.state       ][INFO    ][8450] Completed state [/etc/apache2/sites-enabled/000-default.conf] at time 03:28:04.237537 duration_in_ms=1.593
2018-06-01 03:28:04,238 [salt.state       ][INFO    ][8450] Running state [/etc/apache2/sites-available/keystone_wsgi.conf] at time 03:28:04.238284
2018-06-01 03:28:04,238 [salt.state       ][INFO    ][8450] Executing state file.managed for /etc/apache2/sites-available/keystone_wsgi.conf
2018-06-01 03:28:04,557 [salt.state       ][INFO    ][8450] File /etc/apache2/sites-available/keystone_wsgi.conf is in the correct state
2018-06-01 03:28:04,558 [salt.state       ][INFO    ][8450] Completed state [/etc/apache2/sites-available/keystone_wsgi.conf] at time 03:28:04.558190 duration_in_ms=319.905
2018-06-01 03:28:04,559 [salt.state       ][INFO    ][8450] Running state [/etc/apache2/sites-enabled/keystone_wsgi.conf] at time 03:28:04.559117
2018-06-01 03:28:04,559 [salt.state       ][INFO    ][8450] Executing state file.symlink for /etc/apache2/sites-enabled/keystone_wsgi.conf
2018-06-01 03:28:04,562 [salt.state       ][INFO    ][8450] Symlink /etc/apache2/sites-enabled/keystone_wsgi.conf is present and owned by root:root
2018-06-01 03:28:04,563 [salt.state       ][INFO    ][8450] Completed state [/etc/apache2/sites-enabled/keystone_wsgi.conf] at time 03:28:04.562962 duration_in_ms=3.846
2018-06-01 03:28:04,566 [salt.state       ][INFO    ][8450] Running state [apache2] at time 03:28:04.566047
2018-06-01 03:28:04,566 [salt.state       ][INFO    ][8450] Executing state service.running for apache2
2018-06-01 03:28:04,567 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['systemctl', 'status', 'apache2.service', '-n', '0'] in directory '/root'
2018-06-01 03:28:04,607 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-06-01 03:28:04,627 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-06-01 03:28:04,655 [salt.state       ][INFO    ][8450] The service apache2 is already running
2018-06-01 03:28:04,656 [salt.state       ][INFO    ][8450] Completed state [apache2] at time 03:28:04.656488 duration_in_ms=90.441
2018-06-01 03:28:04,658 [salt.state       ][INFO    ][8450] Running state [/etc/apache2/conf-enabled/security.conf] at time 03:28:04.658856
2018-06-01 03:28:04,659 [salt.state       ][INFO    ][8450] Executing state file.symlink for /etc/apache2/conf-enabled/security.conf
2018-06-01 03:28:04,663 [salt.state       ][INFO    ][8450] Symlink /etc/apache2/conf-enabled/security.conf is present and owned by root:root
2018-06-01 03:28:04,664 [salt.state       ][INFO    ][8450] Completed state [/etc/apache2/conf-enabled/security.conf] at time 03:28:04.664360 duration_in_ms=5.503
2018-06-01 03:28:04,665 [salt.state       ][INFO    ][8450] Running state [/etc/apache2/sites-enabled/keystone_wsgi] at time 03:28:04.665229
2018-06-01 03:28:04,666 [salt.state       ][INFO    ][8450] Executing state file.absent for /etc/apache2/sites-enabled/keystone_wsgi
2018-06-01 03:28:04,666 [salt.state       ][INFO    ][8450] File /etc/apache2/sites-enabled/keystone_wsgi is not present
2018-06-01 03:28:04,667 [salt.state       ][INFO    ][8450] Completed state [/etc/apache2/sites-enabled/keystone_wsgi] at time 03:28:04.667374 duration_in_ms=2.145
2018-06-01 03:28:04,671 [salt.state       ][INFO    ][8450] Running state [cinder] at time 03:28:04.671178
2018-06-01 03:28:04,671 [salt.state       ][INFO    ][8450] Executing state group.present for cinder
2018-06-01 03:28:04,672 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['groupadd', '-g 304', '-r', 'cinder'] in directory '/root'
2018-06-01 03:28:04,697 [salt.state       ][INFO    ][8450] {'passwd': 'x', 'gid': 304, 'name': 'cinder', 'members': []}
2018-06-01 03:28:04,698 [salt.state       ][INFO    ][8450] Completed state [cinder] at time 03:28:04.698827 duration_in_ms=27.648
2018-06-01 03:28:04,700 [salt.state       ][INFO    ][8450] Running state [cinder] at time 03:28:04.700357
2018-06-01 03:28:04,701 [salt.state       ][INFO    ][8450] Executing state user.present for cinder
2018-06-01 03:28:04,703 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['useradd', '-s', '/bin/false', '-u', '304', '-g', '304', '-m', '-d', '/var/lib/cinder', '-r', 'cinder'] in directory '/root'
2018-06-01 03:28:04,733 [salt.state       ][INFO    ][8450] {'shell': '/bin/false', 'workphone': '', 'uid': 304, 'passwd': 'x', 'roomnumber': '', 'groups': ['cinder'], 'home': '/var/lib/cinder', 'name': 'cinder', 'gid': 304, 'fullname': '', 'homephone': ''}
2018-06-01 03:28:04,734 [salt.state       ][INFO    ][8450] Completed state [cinder] at time 03:28:04.734333 duration_in_ms=33.975
2018-06-01 03:28:04,736 [salt.state       ][INFO    ][8450] Running state [cinder-api] at time 03:28:04.735939
2018-06-01 03:28:04,736 [salt.state       ][INFO    ][8450] Executing state pkg.installed for cinder-api
2018-06-01 03:28:04,759 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['apt-cache', '-q', 'policy', 'cinder-api'] in directory '/root'
2018-06-01 03:28:04,833 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-06-01 03:28:07,401 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:28:07,437 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'cinder-api'] in directory '/root'
2018-06-01 03:28:08,269 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601032808238337
2018-06-01 03:28:08,295 [salt.minion      ][INFO    ][8969] Starting a new job with PID 8969
2018-06-01 03:28:08,322 [salt.minion      ][INFO    ][8969] Returning information for job: 20180601032808238337
2018-06-01 03:28:18,464 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601032818430176
2018-06-01 03:28:18,488 [salt.minion      ][INFO    ][9647] Starting a new job with PID 9647
2018-06-01 03:28:18,514 [salt.minion      ][INFO    ][9647] Returning information for job: 20180601032818430176
2018-06-01 03:28:26,280 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:28:26,341 [salt.state       ][INFO    ][8450] Made the following changes:
'python-rtslib-fb' changed from 'absent' to '2.1.57+debian-3'
'python-uritemplate' changed from 'absent' to '0.6-1ubuntu1'
'python-googleapi' changed from 'absent' to '1.4.2-1ubuntu1.1'
'python-oauth2client' changed from 'absent' to '2.0.1-1'
'cinder-api' changed from 'absent' to '2:11.1.0-1~u16.04+mcp88'
'python-suds' changed from 'absent' to '0.7~git20150727.94664dd-3'
'cinder-common' changed from 'absent' to '2:11.1.0-1~u16.04+mcp88'
'python-oslo.vmware' changed from 'absent' to '2.17.0-1.1~u16.04+mcp2'
'python2.7-googleapi' changed from 'absent' to '1'
'python-rsa' changed from 'absent' to '3.2.3-1.1'
'python2.7-rtslib-fb' changed from 'absent' to '1'
'python-cinder' changed from 'absent' to '2:11.1.0-1~u16.04+mcp88'

2018-06-01 03:28:26,381 [salt.state       ][INFO    ][8450] Loading fresh modules for state activity
2018-06-01 03:28:26,413 [salt.state       ][INFO    ][8450] Completed state [cinder-api] at time 03:28:26.413552 duration_in_ms=21677.613
2018-06-01 03:28:26,422 [salt.state       ][INFO    ][8450] Running state [cinder-scheduler] at time 03:28:26.422002
2018-06-01 03:28:26,422 [salt.state       ][INFO    ][8450] Executing state pkg.installed for cinder-scheduler
2018-06-01 03:28:27,025 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:28:27,078 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'cinder-scheduler'] in directory '/root'
2018-06-01 03:28:28,652 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601032828621231
2018-06-01 03:28:28,668 [salt.minion      ][INFO    ][10392] Starting a new job with PID 10392
2018-06-01 03:28:28,694 [salt.minion      ][INFO    ][10392] Returning information for job: 20180601032828621231
2018-06-01 03:28:32,033 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:28:32,094 [salt.state       ][INFO    ][8450] Made the following changes:
'cinder-scheduler' changed from 'absent' to '2:11.1.0-1~u16.04+mcp88'

2018-06-01 03:28:32,143 [salt.state       ][INFO    ][8450] Loading fresh modules for state activity
2018-06-01 03:28:32,182 [salt.state       ][INFO    ][8450] Completed state [cinder-scheduler] at time 03:28:32.182822 duration_in_ms=5760.819
2018-06-01 03:28:32,190 [salt.state       ][INFO    ][8450] Running state [lvm2] at time 03:28:32.190895
2018-06-01 03:28:32,191 [salt.state       ][INFO    ][8450] Executing state pkg.installed for lvm2
2018-06-01 03:28:32,908 [salt.state       ][INFO    ][8450] All specified packages are already installed
2018-06-01 03:28:32,908 [salt.state       ][INFO    ][8450] Completed state [lvm2] at time 03:28:32.908881 duration_in_ms=717.985
2018-06-01 03:28:32,909 [salt.state       ][INFO    ][8450] Running state [python-cinder] at time 03:28:32.909422
2018-06-01 03:28:32,909 [salt.state       ][INFO    ][8450] Executing state pkg.installed for python-cinder
2018-06-01 03:28:32,919 [salt.state       ][INFO    ][8450] All specified packages are already installed
2018-06-01 03:28:32,919 [salt.state       ][INFO    ][8450] Completed state [python-cinder] at time 03:28:32.919351 duration_in_ms=9.929
2018-06-01 03:28:32,919 [salt.state       ][INFO    ][8450] Running state [gettext-base] at time 03:28:32.919776
2018-06-01 03:28:32,920 [salt.state       ][INFO    ][8450] Executing state pkg.installed for gettext-base
2018-06-01 03:28:32,931 [salt.state       ][INFO    ][8450] All specified packages are already installed
2018-06-01 03:28:32,931 [salt.state       ][INFO    ][8450] Completed state [gettext-base] at time 03:28:32.931238 duration_in_ms=11.462
2018-06-01 03:28:32,931 [salt.state       ][INFO    ][8450] Running state [python-memcache] at time 03:28:32.931657
2018-06-01 03:28:32,931 [salt.state       ][INFO    ][8450] Executing state pkg.installed for python-memcache
2018-06-01 03:28:32,938 [salt.state       ][INFO    ][8450] All specified packages are already installed
2018-06-01 03:28:32,938 [salt.state       ][INFO    ][8450] Completed state [python-memcache] at time 03:28:32.938926 duration_in_ms=7.269
2018-06-01 03:28:32,939 [salt.state       ][INFO    ][8450] Running state [python-pycadf] at time 03:28:32.939340
2018-06-01 03:28:32,939 [salt.state       ][INFO    ][8450] Executing state pkg.installed for python-pycadf
2018-06-01 03:28:32,946 [salt.state       ][INFO    ][8450] All specified packages are already installed
2018-06-01 03:28:32,946 [salt.state       ][INFO    ][8450] Completed state [python-pycadf] at time 03:28:32.946715 duration_in_ms=7.375
2018-06-01 03:28:32,948 [salt.state       ][INFO    ][8450] Running state [/etc/cinder/cinder.conf] at time 03:28:32.948720
2018-06-01 03:28:32,949 [salt.state       ][INFO    ][8450] Executing state file.managed for /etc/cinder/cinder.conf
2018-06-01 03:28:32,984 [salt.fileclient  ][INFO    ][8450] Fetching file from saltenv 'base', ** done ** 'cinder/files/pike/cinder.conf.controller.Debian'
2018-06-01 03:28:33,184 [salt.fileclient  ][INFO    ][8450] Fetching file from saltenv 'base', ** done ** 'cinder/files/backend/_lvm.conf'
2018-06-01 03:28:33,188 [salt.state       ][INFO    ][8450] File changed:
--- 
+++ 
@@ -1,15 +1,160 @@
+
+
 [DEFAULT]
 rootwrap_config = /etc/cinder/rootwrap.conf
 api_paste_confg = /etc/cinder/api-paste.ini
+
 iscsi_helper = tgtadm
 volume_name_template = volume-%s
-volume_group = cinder-volumes
+#volume_group = cinder
+
 verbose = True
+
+osapi_volume_workers = 4
+
 auth_strategy = keystone
+
 state_path = /var/lib/cinder
-lock_path = /var/lock/cinder
+
+use_syslog=False
+
+glance_num_retries=0
+debug=False
+
+os_region_name=RegionOne
+allow_availability_zone_fallback = True
+
+#glance_api_ssl_compression=False
+#glance_api_insecure=False
+
+osapi_volume_listen=192.168.10.38
+
+glance_api_servers = http://192.168.10.35:9292
+
+
+glance_host=192.168.10.35
+glance_port=9292
+glance_api_version=2
+
+enable_v3_api = True
+
+os_privileged_user_name=cinder
+os_privileged_user_password=opnfv_secret
+os_privileged_user_tenant=service
+os_privileged_user_auth_url=http://192.168.10.35:5000/v3/
+
+volume_backend_name=DEFAULT
+
+default_volume_type=lvm-driver
+
+enabled_backends=lvm-driver
+
+# Enables the Force option on upload_to_image. This enables running
+# upload_volume on in-use volumes for backends that support it. (boolean value)
+#enable_force_upload = false
+enable_force_upload = false
+
+#RPC response timeout recommended by Hitachi
+rpc_response_timeout=3600
+
+#Rabbit
+control_exchange=cinder
+
+
+volume_clear=none
+
+
+
+volume_name_template = volume-%s
+
+#volume_group = vg_cinder_volume
+
 volumes_dir = /var/lib/cinder/volumes
-enabled_backends = lvm
+log_dir=/var/log/cinder
+
+# Use syslog for logging. (boolean value)
+#use_syslog=false
+
+use_syslog=false
+verbose=True
+lock_path=/var/lock/cinder
+
+nova_catalog_admin_info = compute:nova:adminURL
+nova_catalog_info = compute:nova:internalURL
+
+osapi_volume_extension = cinder.api.contrib.standard_extensions
+transport_url = rabbit://openstack:opnfv_secret@192.168.10.28:5672,openstack:opnfv_secret@192.168.10.29:5672,openstack:opnfv_secret@192.168.10.30:5672//openstack
+
+[oslo_messaging_notifications]
+driver = messagingv2
+
+[oslo_concurrency]
+
+lock_path=/var/lock/cinder
+
+[oslo_middleware]
+
+enable_proxy_headers_parsing = True
+
+
+[keystone_authtoken]
+signing_dir=/tmp/keystone-signing-cinder
+revocation_cache_time = 10
+auth_type = password
+user_domain_name = Default
+project_domain_name = Default
+project_name = service
+username = cinder
+password = opnfv_secret
+
+auth_uri=http://192.168.10.35:5000
+auth_url=http://192.168.10.35:35357
+
+# Temporary disabled for backward compataiblity
+#auth_uri=http://192.168.10.35/identity
+#auth_url=http://192.168.10.35/identity_v2_admin
+memcached_servers=192.168.10.36:11211,192.168.10.37:11211,192.168.10.38:11211,192.168.10.36:11211,192.168.10.37:11211,192.168.10.38:11211
+auth_version = v3
 
 [database]
-connection = sqlite:////var/lib/cinder/cinder.sqlite
+idle_timeout=3600
+max_pool_size=30
+max_retries=-1
+max_overflow=40
+connection = mysql+pymysql://cinder:opnfv_secret@192.168.10.23/cinder?charset=utf8
+[lvm-driver]
+host=ctl03
+volume_driver = cinder.volume.drivers.lvm.LVMVolumeDriver
+volume_backend_name=lvm-driver
+lvm_type = default
+iscsi_helper = tgtadm
+volume_group = cinder-volume
+
+[cors]
+
+#
+# From oslo.middleware.cors
+#
+
+# Indicate whether this resource may be shared with the domain
+# received in the requests "origin" header. (list value)
+#allowed_origin = <None>
+
+# Indicate that the actual request can include user credentials
+# (boolean value)
+#allow_credentials = true
+
+# Indicate which headers are safe to expose to the API. Defaults to
+# HTTP Simple Headers. (list value)
+#expose_headers = X-Image-Meta-Checksum,X-Auth-Token,X-Subject-Token,X-Service-Token,X-OpenStack-Request-ID
+
+# Maximum cache age of CORS preflight requests. (integer value)
+#max_age = 3600
+
+# Indicate which methods can be used during the actual request. (list
+# value)
+#allow_methods = GET,PUT,POST,DELETE,PATCH
+
+# Indicate which header field names may be used during the actual
+# request. (list value)
+#allow_headers = Content-MD5,X-Image-Meta-Checksum,X-Storage-Token,Accept-Encoding,X-Auth-Token,X-Identity-Status,X-Roles,X-Service-Catalog,X-User-Id,X-Tenant-Id,X-OpenStack-Request-ID

2018-06-01 03:28:33,188 [salt.state       ][INFO    ][8450] Completed state [/etc/cinder/cinder.conf] at time 03:28:33.188437 duration_in_ms=239.717
2018-06-01 03:28:33,189 [salt.state       ][INFO    ][8450] Running state [/etc/cinder/api-paste.ini] at time 03:28:33.188966
2018-06-01 03:28:33,189 [salt.state       ][INFO    ][8450] Executing state file.managed for /etc/cinder/api-paste.ini
2018-06-01 03:28:33,229 [salt.fileclient  ][INFO    ][8450] Fetching file from saltenv 'base', ** done ** 'cinder/files/pike/api-paste.ini.controller.Debian'
2018-06-01 03:28:33,322 [salt.state       ][INFO    ][8450] File changed:
--- 
+++ 
@@ -73,3 +73,4 @@
 
 [filter:authtoken]
 paste.filter_factory = keystonemiddleware.auth_token:filter_factory
+

2018-06-01 03:28:33,323 [salt.state       ][INFO    ][8450] Completed state [/etc/cinder/api-paste.ini] at time 03:28:33.323114 duration_in_ms=134.148
2018-06-01 03:28:33,323 [salt.state       ][INFO    ][8450] Running state [/etc/default/cinder-scheduler] at time 03:28:33.323580
2018-06-01 03:28:33,323 [salt.state       ][INFO    ][8450] Executing state file.managed for /etc/default/cinder-scheduler
2018-06-01 03:28:33,368 [salt.fileclient  ][INFO    ][8450] Fetching file from saltenv 'base', ** done ** 'cinder/files/default'
2018-06-01 03:28:33,371 [salt.state       ][INFO    ][8450] File changed:
New file
2018-06-01 03:28:33,372 [salt.state       ][INFO    ][8450] Completed state [/etc/default/cinder-scheduler] at time 03:28:33.372019 duration_in_ms=48.439
2018-06-01 03:28:33,373 [salt.state       ][INFO    ][8450] Running state [cinder-manage db sync; sleep 5;] at time 03:28:33.373028
2018-06-01 03:28:33,373 [salt.state       ][INFO    ][8450] Executing state cmd.run for cinder-manage db sync; sleep 5;
2018-06-01 03:28:33,373 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command 'cinder-manage db sync; sleep 5;' in directory '/root'
2018-06-01 03:28:38,848 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601032838813498
2018-06-01 03:28:38,862 [salt.minion      ][INFO    ][10714] Starting a new job with PID 10714
2018-06-01 03:28:38,880 [salt.minion      ][INFO    ][10714] Returning information for job: 20180601032838813498
2018-06-01 03:28:41,087 [salt.state       ][INFO    ][8450] {'pid': 10669, 'retcode': 0, 'stderr': '', 'stdout': ''}
2018-06-01 03:28:41,087 [salt.state       ][INFO    ][8450] Completed state [cinder-manage db sync; sleep 5;] at time 03:28:41.087575 duration_in_ms=7714.546
2018-06-01 03:28:41,088 [salt.state       ][INFO    ][8450] Running state [/etc/apache2/conf-available/cinder-wsgi.conf] at time 03:28:41.088502
2018-06-01 03:28:41,088 [salt.state       ][INFO    ][8450] Executing state file.managed for /etc/apache2/conf-available/cinder-wsgi.conf
2018-06-01 03:28:41,130 [salt.fileclient  ][INFO    ][8450] Fetching file from saltenv 'base', ** done ** 'cinder/files/pike/cinder-wsgi.conf'
2018-06-01 03:28:41,209 [salt.state       ][INFO    ][8450] File changed:
--- 
+++ 
@@ -1,7 +1,7 @@
-Listen 8776
-LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\" %D(us)" cinder_combined
 
-<VirtualHost *:8776>
+Listen 192.168.10.38:8776
+
+<VirtualHost 192.168.10.38:8776>
     WSGIDaemonProcess cinder-wsgi processes=5 threads=1 user=cinder group=cinder display-name=%{GROUP}
     WSGIProcessGroup cinder-wsgi
     WSGIScriptAlias / /usr/bin/cinder-wsgi
@@ -12,10 +12,10 @@
     </IfVersion>
 
     ErrorLog /var/log/apache2/cinder_error.log
-    CustomLog /var/log/apache2/cinder.log cinder_combined
+    CustomLog /var/log/apache2/cinder.log "%v:%p %h %l %u %t \"%r\" %>s %D %O \"%{Referer}i\" \"%{User-Agent}i\""
 
     <Directory /usr/bin>
-	<IfVersion >= 2.4>
+        <IfVersion >= 2.4>
             Require all granted
         </IfVersion>
         <IfVersion < 2.4>

2018-06-01 03:28:41,209 [salt.state       ][INFO    ][8450] Completed state [/etc/apache2/conf-available/cinder-wsgi.conf] at time 03:28:41.209902 duration_in_ms=121.399
2018-06-01 03:28:41,211 [salt.state       ][INFO    ][8450] Running state [cinder-wsgi] at time 03:28:41.210999
2018-06-01 03:28:41,211 [salt.state       ][INFO    ][8450] Executing state apache_conf.enabled for cinder-wsgi
2018-06-01 03:28:41,211 [salt.state       ][INFO    ][8450] cinder-wsgi already enabled.
2018-06-01 03:28:41,211 [salt.state       ][INFO    ][8450] Completed state [cinder-wsgi] at time 03:28:41.211665 duration_in_ms=0.666
2018-06-01 03:28:41,220 [salt.state       ][INFO    ][8450] Running state [cinder-api] at time 03:28:41.220544
2018-06-01 03:28:41,220 [salt.state       ][INFO    ][8450] Executing state service.dead for cinder-api
2018-06-01 03:28:41,221 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['systemctl', 'status', 'cinder-api.service', '-n', '0'] in directory '/root'
2018-06-01 03:28:41,248 [salt.state       ][INFO    ][8450] The named service cinder-api is not available
2018-06-01 03:28:41,249 [salt.state       ][INFO    ][8450] Completed state [cinder-api] at time 03:28:41.249273 duration_in_ms=28.725
2018-06-01 03:28:41,251 [salt.state       ][INFO    ][8450] Running state [apache2] at time 03:28:41.251607
2018-06-01 03:28:41,251 [salt.state       ][INFO    ][8450] Executing state service.running for apache2
2018-06-01 03:28:41,252 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-06-01 03:28:41,289 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-06-01 03:28:41,328 [salt.state       ][INFO    ][8450] The service apache2 is already running
2018-06-01 03:28:41,329 [salt.state       ][INFO    ][8450] Completed state [apache2] at time 03:28:41.329288 duration_in_ms=77.679
2018-06-01 03:28:41,329 [salt.state       ][INFO    ][8450] Running state [apache2] at time 03:28:41.329544
2018-06-01 03:28:41,329 [salt.state       ][INFO    ][8450] Executing state service.mod_watch for apache2
2018-06-01 03:28:41,330 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-06-01 03:28:41,353 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-06-01 03:28:41,389 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'apache2.service'] in directory '/root'
2018-06-01 03:28:46,907 [salt.state       ][INFO    ][8450] {'apache2': True}
2018-06-01 03:28:46,907 [salt.state       ][INFO    ][8450] Completed state [apache2] at time 03:28:46.907664 duration_in_ms=5578.118
2018-06-01 03:28:46,910 [salt.state       ][INFO    ][8450] Running state [cinder-scheduler] at time 03:28:46.910180
2018-06-01 03:28:46,910 [salt.state       ][INFO    ][8450] Executing state service.running for cinder-scheduler
2018-06-01 03:28:46,911 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['systemctl', 'status', 'cinder-scheduler.service', '-n', '0'] in directory '/root'
2018-06-01 03:28:46,935 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['systemctl', 'is-active', 'cinder-scheduler.service'] in directory '/root'
2018-06-01 03:28:46,966 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['systemctl', 'is-enabled', 'cinder-scheduler.service'] in directory '/root'
2018-06-01 03:28:46,990 [salt.state       ][INFO    ][8450] The service cinder-scheduler is already running
2018-06-01 03:28:46,991 [salt.state       ][INFO    ][8450] Completed state [cinder-scheduler] at time 03:28:46.990939 duration_in_ms=80.754
2018-06-01 03:28:46,991 [salt.state       ][INFO    ][8450] Running state [cinder-scheduler] at time 03:28:46.991558
2018-06-01 03:28:46,992 [salt.state       ][INFO    ][8450] Executing state service.mod_watch for cinder-scheduler
2018-06-01 03:28:46,993 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['systemctl', 'is-active', 'cinder-scheduler.service'] in directory '/root'
2018-06-01 03:28:47,022 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['systemctl', 'is-enabled', 'cinder-scheduler.service'] in directory '/root'
2018-06-01 03:28:47,054 [salt.loaded.int.module.cmdmod][INFO    ][8450] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'cinder-scheduler.service'] in directory '/root'
2018-06-01 03:28:49,052 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601032849015605
2018-06-01 03:28:49,066 [salt.minion      ][INFO    ][11116] Starting a new job with PID 11116
2018-06-01 03:28:49,095 [salt.minion      ][INFO    ][11116] Returning information for job: 20180601032849015605
2018-06-01 03:28:51,645 [salt.state       ][INFO    ][8450] {'cinder-scheduler': True}
2018-06-01 03:28:51,645 [salt.state       ][INFO    ][8450] Completed state [cinder-scheduler] at time 03:28:51.645797 duration_in_ms=4654.238
2018-06-01 03:28:51,649 [salt.state       ][INFO    ][8450] Running state [lvm-driver] at time 03:28:51.649209
2018-06-01 03:28:51,649 [salt.state       ][INFO    ][8450] Executing state cinderng.volume_type_present for lvm-driver
2018-06-01 03:28:58,277 [salt.state       ][INFO    ][8450] Volume type "lvm-driver" already exists
2018-06-01 03:28:58,277 [salt.state       ][INFO    ][8450] Completed state [lvm-driver] at time 03:28:58.277341 duration_in_ms=6628.131
2018-06-01 03:28:58,278 [salt.state       ][INFO    ][8450] Running state [lvm-driver] at time 03:28:58.278093
2018-06-01 03:28:58,278 [salt.state       ][INFO    ][8450] Executing state cinderng.volume_type_key_present for lvm-driver
2018-06-01 03:28:59,242 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601032859210420
2018-06-01 03:28:59,254 [salt.minion      ][INFO    ][11214] Starting a new job with PID 11214
2018-06-01 03:28:59,283 [salt.minion      ][INFO    ][11214] Returning information for job: 20180601032859210420
2018-06-01 03:29:00,520 [salt.state       ][INFO    ][8450] Volume type keys "{u'volume_backend_name': u'lvm-driver'}" in volume type "lvm-driver" already exist
2018-06-01 03:29:00,521 [salt.state       ][INFO    ][8450] Completed state [lvm-driver] at time 03:29:00.521563 duration_in_ms=2243.468
2018-06-01 03:29:00,524 [salt.minion      ][INFO    ][8450] Returning information for job: 20180601032758177462
2018-06-01 03:30:06,514 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command state.sls with jid 20180601033006483973
2018-06-01 03:30:06,540 [salt.minion      ][INFO    ][11235] Starting a new job with PID 11235
2018-06-01 03:30:09,450 [salt.state       ][INFO    ][11235] Loading fresh modules for state activity
2018-06-01 03:30:11,806 [salt.state       ][INFO    ][11235] Running state [apache2] at time 03:30:11.806800
2018-06-01 03:30:11,807 [salt.state       ][INFO    ][11235] Executing state pkg.installed for apache2
2018-06-01 03:30:11,808 [salt.loaded.int.module.cmdmod][INFO    ][11235] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:30:12,191 [salt.state       ][INFO    ][11235] All specified packages are already installed
2018-06-01 03:30:12,192 [salt.state       ][INFO    ][11235] Completed state [apache2] at time 03:30:12.192668 duration_in_ms=385.868
2018-06-01 03:30:12,196 [salt.state       ][INFO    ][11235] Running state [a2enmod ssl] at time 03:30:12.195948
2018-06-01 03:30:12,196 [salt.state       ][INFO    ][11235] Executing state cmd.run for a2enmod ssl
2018-06-01 03:30:12,197 [salt.state       ][INFO    ][11235] /etc/apache2/mods-enabled/ssl.load exists
2018-06-01 03:30:12,197 [salt.state       ][INFO    ][11235] Completed state [a2enmod ssl] at time 03:30:12.197333 duration_in_ms=1.386
2018-06-01 03:30:12,197 [salt.state       ][INFO    ][11235] Running state [a2enmod rewrite] at time 03:30:12.197833
2018-06-01 03:30:12,198 [salt.state       ][INFO    ][11235] Executing state cmd.run for a2enmod rewrite
2018-06-01 03:30:12,198 [salt.state       ][INFO    ][11235] /etc/apache2/mods-enabled/rewrite.load exists
2018-06-01 03:30:12,198 [salt.state       ][INFO    ][11235] Completed state [a2enmod rewrite] at time 03:30:12.198663 duration_in_ms=0.83
2018-06-01 03:30:12,199 [salt.state       ][INFO    ][11235] Running state [libapache2-mod-wsgi] at time 03:30:12.199143
2018-06-01 03:30:12,199 [salt.state       ][INFO    ][11235] Executing state pkg.installed for libapache2-mod-wsgi
2018-06-01 03:30:12,210 [salt.state       ][INFO    ][11235] All specified packages are already installed
2018-06-01 03:30:12,210 [salt.state       ][INFO    ][11235] Completed state [libapache2-mod-wsgi] at time 03:30:12.210434 duration_in_ms=11.291
2018-06-01 03:30:12,210 [salt.state       ][INFO    ][11235] Running state [a2enmod wsgi] at time 03:30:12.210920
2018-06-01 03:30:12,211 [salt.state       ][INFO    ][11235] Executing state cmd.run for a2enmod wsgi
2018-06-01 03:30:12,211 [salt.state       ][INFO    ][11235] /etc/apache2/mods-enabled/wsgi.load exists
2018-06-01 03:30:12,211 [salt.state       ][INFO    ][11235] Completed state [a2enmod wsgi] at time 03:30:12.211790 duration_in_ms=0.87
2018-06-01 03:30:12,216 [salt.state       ][INFO    ][11235] Running state [/etc/apache2/mods-enabled/mpm_prefork.load] at time 03:30:12.216138
2018-06-01 03:30:12,216 [salt.state       ][INFO    ][11235] Executing state file.absent for /etc/apache2/mods-enabled/mpm_prefork.load
2018-06-01 03:30:12,216 [salt.state       ][INFO    ][11235] File /etc/apache2/mods-enabled/mpm_prefork.load is not present
2018-06-01 03:30:12,217 [salt.state       ][INFO    ][11235] Completed state [/etc/apache2/mods-enabled/mpm_prefork.load] at time 03:30:12.217042 duration_in_ms=0.905
2018-06-01 03:30:12,218 [salt.state       ][INFO    ][11235] Running state [/etc/apache2/mods-enabled/mpm_prefork.conf] at time 03:30:12.217970
2018-06-01 03:30:12,218 [salt.state       ][INFO    ][11235] Executing state file.absent for /etc/apache2/mods-enabled/mpm_prefork.conf
2018-06-01 03:30:12,218 [salt.state       ][INFO    ][11235] File /etc/apache2/mods-enabled/mpm_prefork.conf is not present
2018-06-01 03:30:12,218 [salt.state       ][INFO    ][11235] Completed state [/etc/apache2/mods-enabled/mpm_prefork.conf] at time 03:30:12.218695 duration_in_ms=0.726
2018-06-01 03:30:12,218 [salt.state       ][INFO    ][11235] Running state [/etc/apache2/mods-enabled/mpm_worker.load] at time 03:30:12.218922
2018-06-01 03:30:12,219 [salt.state       ][INFO    ][11235] Executing state file.absent for /etc/apache2/mods-enabled/mpm_worker.load
2018-06-01 03:30:12,219 [salt.state       ][INFO    ][11235] File /etc/apache2/mods-enabled/mpm_worker.load is not present
2018-06-01 03:30:12,219 [salt.state       ][INFO    ][11235] Completed state [/etc/apache2/mods-enabled/mpm_worker.load] at time 03:30:12.219634 duration_in_ms=0.712
2018-06-01 03:30:12,219 [salt.state       ][INFO    ][11235] Running state [/etc/apache2/mods-enabled/mpm_worker.conf] at time 03:30:12.219859
2018-06-01 03:30:12,220 [salt.state       ][INFO    ][11235] Executing state file.absent for /etc/apache2/mods-enabled/mpm_worker.conf
2018-06-01 03:30:12,220 [salt.state       ][INFO    ][11235] File /etc/apache2/mods-enabled/mpm_worker.conf is not present
2018-06-01 03:30:12,220 [salt.state       ][INFO    ][11235] Completed state [/etc/apache2/mods-enabled/mpm_worker.conf] at time 03:30:12.220598 duration_in_ms=0.739
2018-06-01 03:30:12,222 [salt.state       ][INFO    ][11235] Running state [/etc/apache2/mods-available/mpm_event.conf] at time 03:30:12.222865
2018-06-01 03:30:12,223 [salt.state       ][INFO    ][11235] Executing state file.managed for /etc/apache2/mods-available/mpm_event.conf
2018-06-01 03:30:12,334 [salt.state       ][INFO    ][11235] File /etc/apache2/mods-available/mpm_event.conf is in the correct state
2018-06-01 03:30:12,335 [salt.state       ][INFO    ][11235] Completed state [/etc/apache2/mods-available/mpm_event.conf] at time 03:30:12.334975 duration_in_ms=112.109
2018-06-01 03:30:12,335 [salt.state       ][INFO    ][11235] Running state [a2enmod mpm_event] at time 03:30:12.335880
2018-06-01 03:30:12,336 [salt.state       ][INFO    ][11235] Executing state cmd.run for a2enmod mpm_event
2018-06-01 03:30:12,336 [salt.state       ][INFO    ][11235] /etc/apache2/mods-enabled/mpm_event.load exists
2018-06-01 03:30:12,336 [salt.state       ][INFO    ][11235] Completed state [a2enmod mpm_event] at time 03:30:12.336695 duration_in_ms=0.815
2018-06-01 03:30:12,337 [salt.state       ][INFO    ][11235] Running state [/etc/apache2/ports.conf] at time 03:30:12.337210
2018-06-01 03:30:12,337 [salt.state       ][INFO    ][11235] Executing state file.managed for /etc/apache2/ports.conf
2018-06-01 03:30:12,413 [salt.state       ][INFO    ][11235] File /etc/apache2/ports.conf is in the correct state
2018-06-01 03:30:12,413 [salt.state       ][INFO    ][11235] Completed state [/etc/apache2/ports.conf] at time 03:30:12.413580 duration_in_ms=76.37
2018-06-01 03:30:12,414 [salt.state       ][INFO    ][11235] Running state [/etc/apache2/conf-available/security.conf] at time 03:30:12.414074
2018-06-01 03:30:12,414 [salt.state       ][INFO    ][11235] Executing state file.managed for /etc/apache2/conf-available/security.conf
2018-06-01 03:30:12,482 [salt.state       ][INFO    ][11235] File /etc/apache2/conf-available/security.conf is in the correct state
2018-06-01 03:30:12,483 [salt.state       ][INFO    ][11235] Completed state [/etc/apache2/conf-available/security.conf] at time 03:30:12.483320 duration_in_ms=69.245
2018-06-01 03:30:12,492 [salt.state       ][INFO    ][11235] Running state [/etc/apache2/sites-available/keystone_wsgi.conf] at time 03:30:12.491987
2018-06-01 03:30:12,492 [salt.state       ][INFO    ][11235] Executing state file.managed for /etc/apache2/sites-available/keystone_wsgi.conf
2018-06-01 03:30:12,793 [salt.state       ][INFO    ][11235] File /etc/apache2/sites-available/keystone_wsgi.conf is in the correct state
2018-06-01 03:30:12,793 [salt.state       ][INFO    ][11235] Completed state [/etc/apache2/sites-available/keystone_wsgi.conf] at time 03:30:12.793642 duration_in_ms=301.654
2018-06-01 03:30:12,794 [salt.state       ][INFO    ][11235] Running state [/etc/apache2/sites-enabled/keystone_wsgi.conf] at time 03:30:12.794143
2018-06-01 03:30:12,794 [salt.state       ][INFO    ][11235] Executing state file.symlink for /etc/apache2/sites-enabled/keystone_wsgi.conf
2018-06-01 03:30:12,796 [salt.state       ][INFO    ][11235] Symlink /etc/apache2/sites-enabled/keystone_wsgi.conf is present and owned by root:root
2018-06-01 03:30:12,796 [salt.state       ][INFO    ][11235] Completed state [/etc/apache2/sites-enabled/keystone_wsgi.conf] at time 03:30:12.796663 duration_in_ms=2.52
2018-06-01 03:30:12,796 [salt.state       ][INFO    ][11235] Running state [/etc/apache2/sites-enabled/000-default.conf] at time 03:30:12.796909
2018-06-01 03:30:12,797 [salt.state       ][INFO    ][11235] Executing state file.absent for /etc/apache2/sites-enabled/000-default.conf
2018-06-01 03:30:12,797 [salt.state       ][INFO    ][11235] File /etc/apache2/sites-enabled/000-default.conf is not present
2018-06-01 03:30:12,797 [salt.state       ][INFO    ][11235] Completed state [/etc/apache2/sites-enabled/000-default.conf] at time 03:30:12.797645 duration_in_ms=0.736
2018-06-01 03:30:12,800 [salt.state       ][INFO    ][11235] Running state [apache2] at time 03:30:12.799969
2018-06-01 03:30:12,800 [salt.state       ][INFO    ][11235] Executing state service.running for apache2
2018-06-01 03:30:12,800 [salt.loaded.int.module.cmdmod][INFO    ][11235] Executing command ['systemctl', 'status', 'apache2.service', '-n', '0'] in directory '/root'
2018-06-01 03:30:12,839 [salt.loaded.int.module.cmdmod][INFO    ][11235] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-06-01 03:30:12,859 [salt.loaded.int.module.cmdmod][INFO    ][11235] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-06-01 03:30:12,888 [salt.state       ][INFO    ][11235] The service apache2 is already running
2018-06-01 03:30:12,889 [salt.state       ][INFO    ][11235] Completed state [apache2] at time 03:30:12.889490 duration_in_ms=89.52
2018-06-01 03:30:12,891 [salt.state       ][INFO    ][11235] Running state [/etc/apache2/conf-enabled/security.conf] at time 03:30:12.890937
2018-06-01 03:30:12,891 [salt.state       ][INFO    ][11235] Executing state file.symlink for /etc/apache2/conf-enabled/security.conf
2018-06-01 03:30:12,894 [salt.state       ][INFO    ][11235] Symlink /etc/apache2/conf-enabled/security.conf is present and owned by root:root
2018-06-01 03:30:12,894 [salt.state       ][INFO    ][11235] Completed state [/etc/apache2/conf-enabled/security.conf] at time 03:30:12.894580 duration_in_ms=3.644
2018-06-01 03:30:12,894 [salt.state       ][INFO    ][11235] Running state [/etc/apache2/sites-enabled/keystone_wsgi] at time 03:30:12.894942
2018-06-01 03:30:12,895 [salt.state       ][INFO    ][11235] Executing state file.absent for /etc/apache2/sites-enabled/keystone_wsgi
2018-06-01 03:30:12,895 [salt.state       ][INFO    ][11235] File /etc/apache2/sites-enabled/keystone_wsgi is not present
2018-06-01 03:30:12,896 [salt.state       ][INFO    ][11235] Completed state [/etc/apache2/sites-enabled/keystone_wsgi] at time 03:30:12.895976 duration_in_ms=1.034
2018-06-01 03:30:12,896 [salt.state       ][INFO    ][11235] Running state [cinder-api] at time 03:30:12.896315
2018-06-01 03:30:12,896 [salt.state       ][INFO    ][11235] Executing state pkg.installed for cinder-api
2018-06-01 03:30:12,906 [salt.state       ][INFO    ][11235] All specified packages are already installed
2018-06-01 03:30:12,907 [salt.state       ][INFO    ][11235] Completed state [cinder-api] at time 03:30:12.907046 duration_in_ms=10.731
2018-06-01 03:30:12,907 [salt.state       ][INFO    ][11235] Running state [cinder-scheduler] at time 03:30:12.907297
2018-06-01 03:30:12,907 [salt.state       ][INFO    ][11235] Executing state pkg.installed for cinder-scheduler
2018-06-01 03:30:12,914 [salt.state       ][INFO    ][11235] All specified packages are already installed
2018-06-01 03:30:12,914 [salt.state       ][INFO    ][11235] Completed state [cinder-scheduler] at time 03:30:12.914720 duration_in_ms=7.422
2018-06-01 03:30:12,914 [salt.state       ][INFO    ][11235] Running state [lvm2] at time 03:30:12.914958
2018-06-01 03:30:12,915 [salt.state       ][INFO    ][11235] Executing state pkg.installed for lvm2
2018-06-01 03:30:12,922 [salt.state       ][INFO    ][11235] All specified packages are already installed
2018-06-01 03:30:12,922 [salt.state       ][INFO    ][11235] Completed state [lvm2] at time 03:30:12.922520 duration_in_ms=7.562
2018-06-01 03:30:12,922 [salt.state       ][INFO    ][11235] Running state [python-cinder] at time 03:30:12.922764
2018-06-01 03:30:12,923 [salt.state       ][INFO    ][11235] Executing state pkg.installed for python-cinder
2018-06-01 03:30:12,930 [salt.state       ][INFO    ][11235] All specified packages are already installed
2018-06-01 03:30:12,930 [salt.state       ][INFO    ][11235] Completed state [python-cinder] at time 03:30:12.930473 duration_in_ms=7.709
2018-06-01 03:30:12,930 [salt.state       ][INFO    ][11235] Running state [gettext-base] at time 03:30:12.930722
2018-06-01 03:30:12,930 [salt.state       ][INFO    ][11235] Executing state pkg.installed for gettext-base
2018-06-01 03:30:12,942 [salt.state       ][INFO    ][11235] All specified packages are already installed
2018-06-01 03:30:12,944 [salt.state       ][INFO    ][11235] Completed state [gettext-base] at time 03:30:12.944571 duration_in_ms=13.848
2018-06-01 03:30:12,945 [salt.state       ][INFO    ][11235] Running state [python-memcache] at time 03:30:12.944993
2018-06-01 03:30:12,945 [salt.state       ][INFO    ][11235] Executing state pkg.installed for python-memcache
2018-06-01 03:30:12,956 [salt.state       ][INFO    ][11235] All specified packages are already installed
2018-06-01 03:30:12,957 [salt.state       ][INFO    ][11235] Completed state [python-memcache] at time 03:30:12.957422 duration_in_ms=12.429
2018-06-01 03:30:12,958 [salt.state       ][INFO    ][11235] Running state [python-pycadf] at time 03:30:12.958152
2018-06-01 03:30:12,958 [salt.state       ][INFO    ][11235] Executing state pkg.installed for python-pycadf
2018-06-01 03:30:13,056 [salt.state       ][INFO    ][11235] All specified packages are already installed
2018-06-01 03:30:13,057 [salt.state       ][INFO    ][11235] Completed state [python-pycadf] at time 03:30:13.057132 duration_in_ms=98.98
2018-06-01 03:30:13,058 [salt.state       ][INFO    ][11235] Running state [/etc/cinder/cinder.conf] at time 03:30:13.058274
2018-06-01 03:30:13,058 [salt.state       ][INFO    ][11235] Executing state file.managed for /etc/cinder/cinder.conf
2018-06-01 03:30:13,208 [salt.state       ][INFO    ][11235] File /etc/cinder/cinder.conf is in the correct state
2018-06-01 03:30:13,208 [salt.state       ][INFO    ][11235] Completed state [/etc/cinder/cinder.conf] at time 03:30:13.208848 duration_in_ms=150.573
2018-06-01 03:30:13,209 [salt.state       ][INFO    ][11235] Running state [/etc/cinder/api-paste.ini] at time 03:30:13.209819
2018-06-01 03:30:13,210 [salt.state       ][INFO    ][11235] Executing state file.managed for /etc/cinder/api-paste.ini
2018-06-01 03:30:13,288 [salt.state       ][INFO    ][11235] File /etc/cinder/api-paste.ini is in the correct state
2018-06-01 03:30:13,289 [salt.state       ][INFO    ][11235] Completed state [/etc/cinder/api-paste.ini] at time 03:30:13.289124 duration_in_ms=79.306
2018-06-01 03:30:13,289 [salt.state       ][INFO    ][11235] Running state [/etc/default/cinder-scheduler] at time 03:30:13.289892
2018-06-01 03:30:13,290 [salt.state       ][INFO    ][11235] Executing state file.managed for /etc/default/cinder-scheduler
2018-06-01 03:30:13,310 [salt.state       ][INFO    ][11235] File /etc/default/cinder-scheduler is in the correct state
2018-06-01 03:30:13,311 [salt.state       ][INFO    ][11235] Completed state [/etc/default/cinder-scheduler] at time 03:30:13.311021 duration_in_ms=21.128
2018-06-01 03:30:13,312 [salt.state       ][INFO    ][11235] Running state [cinder-manage db sync; sleep 5;] at time 03:30:13.312096
2018-06-01 03:30:13,312 [salt.state       ][INFO    ][11235] Executing state cmd.run for cinder-manage db sync; sleep 5;
2018-06-01 03:30:13,314 [salt.loaded.int.module.cmdmod][INFO    ][11235] Executing command 'cinder-manage db sync; sleep 5;' in directory '/root'
2018-06-01 03:30:16,639 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601033016604729
2018-06-01 03:30:16,659 [salt.minion      ][INFO    ][11294] Starting a new job with PID 11294
2018-06-01 03:30:16,690 [salt.minion      ][INFO    ][11294] Returning information for job: 20180601033016604729
2018-06-01 03:30:21,067 [salt.state       ][INFO    ][11235] {'pid': 11284, 'retcode': 0, 'stderr': '', 'stdout': ''}
2018-06-01 03:30:21,068 [salt.state       ][INFO    ][11235] Completed state [cinder-manage db sync; sleep 5;] at time 03:30:21.068089 duration_in_ms=7755.992
2018-06-01 03:30:21,069 [salt.state       ][INFO    ][11235] Running state [/etc/apache2/conf-available/cinder-wsgi.conf] at time 03:30:21.069259
2018-06-01 03:30:21,069 [salt.state       ][INFO    ][11235] Executing state file.managed for /etc/apache2/conf-available/cinder-wsgi.conf
2018-06-01 03:30:21,161 [salt.state       ][INFO    ][11235] File /etc/apache2/conf-available/cinder-wsgi.conf is in the correct state
2018-06-01 03:30:21,162 [salt.state       ][INFO    ][11235] Completed state [/etc/apache2/conf-available/cinder-wsgi.conf] at time 03:30:21.162141 duration_in_ms=92.882
2018-06-01 03:30:21,163 [salt.state       ][INFO    ][11235] Running state [cinder-wsgi] at time 03:30:21.163495
2018-06-01 03:30:21,163 [salt.state       ][INFO    ][11235] Executing state apache_conf.enabled for cinder-wsgi
2018-06-01 03:30:21,164 [salt.state       ][INFO    ][11235] cinder-wsgi already enabled.
2018-06-01 03:30:21,164 [salt.state       ][INFO    ][11235] Completed state [cinder-wsgi] at time 03:30:21.164450 duration_in_ms=0.954
2018-06-01 03:30:21,164 [salt.state       ][INFO    ][11235] Running state [cinder-api] at time 03:30:21.164949
2018-06-01 03:30:21,165 [salt.state       ][INFO    ][11235] Executing state service.dead for cinder-api
2018-06-01 03:30:21,165 [salt.loaded.int.module.cmdmod][INFO    ][11235] Executing command ['systemctl', 'status', 'cinder-api.service', '-n', '0'] in directory '/root'
2018-06-01 03:30:21,189 [salt.state       ][INFO    ][11235] The named service cinder-api is not available
2018-06-01 03:30:21,190 [salt.state       ][INFO    ][11235] Completed state [cinder-api] at time 03:30:21.190348 duration_in_ms=25.394
2018-06-01 03:30:21,194 [salt.state       ][INFO    ][11235] Running state [apache2] at time 03:30:21.194546
2018-06-01 03:30:21,194 [salt.state       ][INFO    ][11235] Executing state service.running for apache2
2018-06-01 03:30:21,195 [salt.loaded.int.module.cmdmod][INFO    ][11235] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-06-01 03:30:21,222 [salt.loaded.int.module.cmdmod][INFO    ][11235] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-06-01 03:30:21,250 [salt.state       ][INFO    ][11235] The service apache2 is already running
2018-06-01 03:30:21,251 [salt.state       ][INFO    ][11235] Completed state [apache2] at time 03:30:21.251231 duration_in_ms=56.68
2018-06-01 03:30:21,254 [salt.state       ][INFO    ][11235] Running state [cinder-scheduler] at time 03:30:21.254614
2018-06-01 03:30:21,255 [salt.state       ][INFO    ][11235] Executing state service.running for cinder-scheduler
2018-06-01 03:30:21,255 [salt.loaded.int.module.cmdmod][INFO    ][11235] Executing command ['systemctl', 'status', 'cinder-scheduler.service', '-n', '0'] in directory '/root'
2018-06-01 03:30:21,279 [salt.loaded.int.module.cmdmod][INFO    ][11235] Executing command ['systemctl', 'is-active', 'cinder-scheduler.service'] in directory '/root'
2018-06-01 03:30:21,298 [salt.loaded.int.module.cmdmod][INFO    ][11235] Executing command ['systemctl', 'is-enabled', 'cinder-scheduler.service'] in directory '/root'
2018-06-01 03:30:21,319 [salt.state       ][INFO    ][11235] The service cinder-scheduler is already running
2018-06-01 03:30:21,319 [salt.state       ][INFO    ][11235] Completed state [cinder-scheduler] at time 03:30:21.319470 duration_in_ms=64.853
2018-06-01 03:30:21,324 [salt.state       ][INFO    ][11235] Running state [lvm-driver] at time 03:30:21.324389
2018-06-01 03:30:21,324 [salt.state       ][INFO    ][11235] Executing state cinderng.volume_type_present for lvm-driver
2018-06-01 03:30:23,021 [salt.state       ][INFO    ][11235] Volume type "lvm-driver" already exists
2018-06-01 03:30:23,022 [salt.state       ][INFO    ][11235] Completed state [lvm-driver] at time 03:30:23.022129 duration_in_ms=1697.738
2018-06-01 03:30:23,023 [salt.state       ][INFO    ][11235] Running state [lvm-driver] at time 03:30:23.023011
2018-06-01 03:30:23,023 [salt.state       ][INFO    ][11235] Executing state cinderng.volume_type_key_present for lvm-driver
2018-06-01 03:30:25,821 [salt.state       ][INFO    ][11235] Volume type keys "{u'volume_backend_name': u'lvm-driver'}" in volume type "lvm-driver" already exist
2018-06-01 03:30:25,823 [salt.state       ][INFO    ][11235] Completed state [lvm-driver] at time 03:30:25.822941 duration_in_ms=2799.929
2018-06-01 03:30:25,827 [salt.minion      ][INFO    ][11235] Returning information for job: 20180601033006483973
2018-06-01 03:31:01,139 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command test.ping with jid 20180601033101110752
2018-06-01 03:31:01,162 [salt.minion      ][INFO    ][11312] Starting a new job with PID 11312
2018-06-01 03:31:01,239 [salt.minion      ][INFO    ][11312] Returning information for job: 20180601033101110752
2018-06-01 03:31:36,067 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command state.sls with jid 20180601033136037303
2018-06-01 03:31:36,090 [salt.minion      ][INFO    ][11317] Starting a new job with PID 11317
2018-06-01 03:31:38,889 [salt.state       ][INFO    ][11317] Loading fresh modules for state activity
2018-06-01 03:31:38,955 [salt.fileclient  ][INFO    ][11317] Fetching file from saltenv 'base', ** done ** 'neutron/init.sls'
2018-06-01 03:31:38,999 [salt.fileclient  ][INFO    ][11317] Fetching file from saltenv 'base', ** done ** 'neutron/server.sls'
2018-06-01 03:31:39,194 [salt.state       ][INFO    ][11317] Running state [/usr/sbin/policy-rc.d] at time 03:31:39.194012
2018-06-01 03:31:39,194 [salt.state       ][INFO    ][11317] Executing state file.managed for /usr/sbin/policy-rc.d
2018-06-01 03:31:39,204 [salt.state       ][INFO    ][11317] File changed:
New file
2018-06-01 03:31:39,205 [salt.state       ][INFO    ][11317] Completed state [/usr/sbin/policy-rc.d] at time 03:31:39.205038 duration_in_ms=11.027
2018-06-01 03:31:40,527 [salt.state       ][INFO    ][11317] Running state [python-networking-odl] at time 03:31:40.527078
2018-06-01 03:31:40,528 [salt.state       ][INFO    ][11317] Executing state pkg.installed for python-networking-odl
2018-06-01 03:31:40,529 [salt.loaded.int.module.cmdmod][INFO    ][11317] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:31:40,981 [salt.loaded.int.module.cmdmod][INFO    ][11317] Executing command ['apt-cache', '-q', 'policy', 'python-networking-odl'] in directory '/root'
2018-06-01 03:31:41,068 [salt.loaded.int.module.cmdmod][INFO    ][11317] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-06-01 03:31:43,429 [salt.loaded.int.module.cmdmod][INFO    ][11317] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:31:43,467 [salt.loaded.int.module.cmdmod][INFO    ][11317] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'python-networking-odl'] in directory '/root'
2018-06-01 03:31:46,129 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601033146093809
2018-06-01 03:31:46,146 [salt.minion      ][INFO    ][11939] Starting a new job with PID 11939
2018-06-01 03:31:46,173 [salt.minion      ][INFO    ][11939] Returning information for job: 20180601033146093809
2018-06-01 03:31:51,423 [salt.loaded.int.module.cmdmod][INFO    ][11317] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:31:51,486 [salt.state       ][INFO    ][11317] Made the following changes:
'python-pecan' changed from 'absent' to '1.1.2-1.1~u16.04+mcp2'
'python-waitress' changed from 'absent' to '0.8.10-1'
'python-ovsdbapp' changed from 'absent' to '0.4.0-1~u16.04+mcp2'
'python-singledispatch' changed from 'absent' to '3.4.0.3-2'
'python-weakrefmethod' changed from 'absent' to '1.0.3-2~u16.04+mcp1'
'python-neutron' changed from 'absent' to '2:11.0.4-1~u16.04+mcp52'
'python-ryu' changed from 'absent' to '4.15-1~u16.04+mcp2'
'python-pyroute2' changed from 'absent' to '0.4.21-0.1~u16.04+mcp1'
'python-networking-odl' changed from 'absent' to '1:11.0.0-1~u16.04+mcp2'
'python-logutils' changed from 'absent' to '0.3.3-5'
'python-tinyrpc' changed from 'absent' to '0.5-1.1~u16.04+mcp2'
'python-webtest' changed from 'absent' to '2.0.18-1ubuntu1'
'python-openvswitch' changed from 'absent' to '2.8.0-3~u16.04+mcp1'
'python2.7-pyroute2' changed from 'absent' to '1'
'python2.7-neutron' changed from 'absent' to '1'
'python2.7-ryu' changed from 'absent' to '1'
'python2.7-waitress' changed from 'absent' to '1'
'python-neutron-lib' changed from 'absent' to '1.9.1-1~u16.04+mcp2'

2018-06-01 03:31:51,531 [salt.state       ][INFO    ][11317] Loading fresh modules for state activity
2018-06-01 03:31:51,593 [salt.state       ][INFO    ][11317] Completed state [python-networking-odl] at time 03:31:51.593899 duration_in_ms=11066.82
2018-06-01 03:31:51,603 [salt.state       ][INFO    ][11317] Running state [neutron-server] at time 03:31:51.603386
2018-06-01 03:31:51,604 [salt.state       ][INFO    ][11317] Executing state pkg.installed for neutron-server
2018-06-01 03:31:52,175 [salt.loaded.int.module.cmdmod][INFO    ][11317] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:31:52,215 [salt.loaded.int.module.cmdmod][INFO    ][11317] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'neutron-server'] in directory '/root'
2018-06-01 03:31:56,312 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601033156282898
2018-06-01 03:31:56,337 [salt.minion      ][INFO    ][12629] Starting a new job with PID 12629
2018-06-01 03:31:56,360 [salt.minion      ][INFO    ][12629] Returning information for job: 20180601033156282898
2018-06-01 03:31:56,412 [salt.loaded.int.module.cmdmod][INFO    ][11317] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:31:56,479 [salt.state       ][INFO    ][11317] Made the following changes:
'ipset-6.29' changed from 'absent' to '1'
'neutron-plugin' changed from 'absent' to '1'
'ipset' changed from 'absent' to '6.29-1'
'neutron-server' changed from 'absent' to '2:11.0.4-1~u16.04+mcp52'
'python-neutron-fwaas' changed from 'absent' to '2:11.0.1-2~u16.04+mcp8'
'neutron-plugin-ml2' changed from 'absent' to '2:11.0.4-1~u16.04+mcp52'
'libipset3' changed from 'absent' to '6.29-1'
'neutron-common' changed from 'absent' to '2:11.0.4-1~u16.04+mcp52'

2018-06-01 03:31:56,520 [salt.state       ][INFO    ][11317] Loading fresh modules for state activity
2018-06-01 03:31:56,554 [salt.state       ][INFO    ][11317] Completed state [neutron-server] at time 03:31:56.554902 duration_in_ms=4951.512
2018-06-01 03:31:56,563 [salt.state       ][INFO    ][11317] Running state [python-neutron-lbaas] at time 03:31:56.563822
2018-06-01 03:31:56,564 [salt.state       ][INFO    ][11317] Executing state pkg.installed for python-neutron-lbaas
2018-06-01 03:31:57,054 [salt.loaded.int.module.cmdmod][INFO    ][11317] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-06-01 03:31:57,090 [salt.loaded.int.module.cmdmod][INFO    ][11317] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'python-neutron-lbaas'] in directory '/root'
2018-06-01 03:31:59,364 [salt.loaded.int.module.cmdmod][INFO    ][11317] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}\n', '-W'] in directory '/root'
2018-06-01 03:31:59,430 [salt.state       ][INFO    ][11317] Made the following changes:
'python-neutron-lbaas' changed from 'absent' to '2:11.0.3-1~u16.04+mcp6'

2018-06-01 03:31:59,464 [salt.state       ][INFO    ][11317] Loading fresh modules for state activity
2018-06-01 03:31:59,498 [salt.state       ][INFO    ][11317] Completed state [python-neutron-lbaas] at time 03:31:59.498549 duration_in_ms=2934.726
2018-06-01 03:31:59,508 [salt.state       ][INFO    ][11317] Running state [gettext-base] at time 03:31:59.508051
2018-06-01 03:31:59,508 [salt.state       ][INFO    ][11317] Executing state pkg.installed for gettext-base
2018-06-01 03:31:59,990 [salt.state       ][INFO    ][11317] All specified packages are already installed
2018-06-01 03:31:59,990 [salt.state       ][INFO    ][11317] Completed state [gettext-base] at time 03:31:59.990523 duration_in_ms=482.471
2018-06-01 03:31:59,991 [salt.state       ][INFO    ][11317] Running state [python-pycadf] at time 03:31:59.991130
2018-06-01 03:31:59,991 [salt.state       ][INFO    ][11317] Executing state pkg.installed for python-pycadf
2018-06-01 03:31:59,999 [salt.state       ][INFO    ][11317] All specified packages are already installed
2018-06-01 03:31:59,999 [salt.state       ][INFO    ][11317] Completed state [python-pycadf] at time 03:31:59.999274 duration_in_ms=8.144
2018-06-01 03:32:00,001 [salt.state       ][INFO    ][11317] Running state [/usr/sbin/policy-rc.d] at time 03:32:00.001231
2018-06-01 03:32:00,001 [salt.state       ][INFO    ][11317] Executing state file.absent for /usr/sbin/policy-rc.d
2018-06-01 03:32:00,002 [salt.state       ][INFO    ][11317] {'removed': '/usr/sbin/policy-rc.d'}
2018-06-01 03:32:00,002 [salt.state       ][INFO    ][11317] Completed state [/usr/sbin/policy-rc.d] at time 03:32:00.002264 duration_in_ms=1.033
2018-06-01 03:32:00,002 [salt.state       ][INFO    ][11317] Running state [neutron-plugin-ml2] at time 03:32:00.002891
2018-06-01 03:32:00,003 [salt.state       ][INFO    ][11317] Executing state pkg.installed for neutron-plugin-ml2
2018-06-01 03:32:00,010 [salt.state       ][INFO    ][11317] All specified packages are already installed
2018-06-01 03:32:00,010 [salt.state       ][INFO    ][11317] Completed state [neutron-plugin-ml2] at time 03:32:00.010626 duration_in_ms=7.735
2018-06-01 03:32:00,011 [salt.state       ][INFO    ][11317] Running state [/etc/neutron/plugins/ml2/ml2_conf.ini] at time 03:32:00.011501
2018-06-01 03:32:00,011 [salt.state       ][INFO    ][11317] Executing state file.managed for /etc/neutron/plugins/ml2/ml2_conf.ini
2018-06-01 03:32:00,062 [salt.fileclient  ][INFO    ][11317] Fetching file from saltenv 'base', ** done ** 'neutron/files/pike/ml2_conf.ini'
2018-06-01 03:32:00,173 [salt.state       ][INFO    ][11317] File changed:
--- 
+++ 
@@ -1,3 +1,4 @@
+
 [DEFAULT]
 
 #
@@ -8,6 +9,12 @@
 # INFO level. (boolean value)
 # Note: This option can be changed without restarting.
 #debug = false
+
+# DEPRECATED: If set to false, the logging level will be set to WARNING instead
+# of the default INFO level. (boolean value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#verbose = true
 
 # The name of a logging configuration file. This file is appended to any
 # existing logging configuration files. For details about logging configuration
@@ -47,12 +54,6 @@
 # is set. (boolean value)
 #use_syslog = false
 
-# Enable journald for logging. If running in a systemd environment you may wish
-# to enable journal support. Doing so will use the journal native protocol
-# which includes structured metadata in addition to log messages.This option is
-# ignored if log_config_append is set. (boolean value)
-#use_journal = false
-
 # Syslog facility to receive log lines. This option is ignored if
 # log_config_append is set. (string value)
 #syslog_log_facility = LOG_USER
@@ -81,7 +82,7 @@
 
 # List of package logging levels in logger=LEVEL pairs. This option is ignored
 # if log_config_append is set. (list value)
-#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
+#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
 
 # Enables or disables publication of error events. (boolean value)
 #publish_errors = false
@@ -108,17 +109,6 @@
 
 # Enables or disables fatal status of deprecations. (boolean value)
 #fatal_deprecations = false
-
-
-[l2pop]
-
-#
-# From neutron.ml2
-#
-
-# Delay within which agent is expected to update existing ports when it
-# restarts (integer value)
-#agent_boot_time = 180
 
 
 [ml2]
@@ -135,27 +125,34 @@
 # value 'local' is useful for single-box testing but provides no connectivity
 # between hosts. (list value)
 #tenant_network_types = local
+tenant_network_types = flat,vxlan
 
 # An ordered list of networking mechanism driver entrypoints to be loaded from
 # the neutron.ml2.mechanism_drivers namespace. (list value)
 #mechanism_drivers =
+mechanism_drivers = opendaylight_v2
 
 # An ordered list of extension driver entrypoints to be loaded from the
 # neutron.ml2.extension_drivers namespace. For example: extension_drivers =
 # port_security,qos (list value)
 #extension_drivers =
+
+
+extension_drivers=port_security
 
 # Maximum size of an IP packet (MTU) that can traverse the underlying physical
 # network infrastructure without fragmentation when using an overlay/tunnel
 # protocol. This option allows specifying a physical network MTU value that
 # differs from the default global_physnet_mtu value. (integer value)
 #path_mtu = 0
+path_mtu = 1500
 
 # A list of mappings of physical networks to MTU values. The format of the
 # mapping is <physnet>:<mtu val>. This mapping allows specifying a physical
 # network MTU value that differs from the default global_physnet_mtu value.
 # (list value)
 #physical_network_mtus =
+physical_network_mtus = physnet1:1500
 
 # Default network type for external networks when no provider attributes are
 # specified. By default it is None, which means that if provider attributes are
@@ -180,6 +177,7 @@
 # default '*' to allow flat networks with arbitrary physical_network names. Use
 # an empty list to disable flat networks. (list value)
 #flat_networks = *
+flat_networks = *
 
 
 [ml2_type_geneve]
@@ -191,6 +189,7 @@
 # Comma-separated list of <vni_min>:<vni_max> tuples enumerating ranges of
 # Geneve VNI IDs that are available for tenant network allocation (list value)
 #vni_ranges =
+vni_ranges = 1:65536
 
 # Geneve encapsulation header size is dynamic, this value is used to calculate
 # the maximum MTU for the driver. This is the sum of the sizes of the outer ETH
@@ -198,6 +197,7 @@
 # which is the size of the Geneve header without any additional option headers.
 # (integer value)
 #max_header_size = 30
+max_header_size = 38
 
 
 [ml2_type_gre]
@@ -209,6 +209,7 @@
 # Comma-separated list of <tun_min>:<tun_max> tuples enumerating ranges of GRE
 # tunnel IDs that are available for tenant network allocation (list value)
 #tunnel_id_ranges =
+tunnel_id_ranges =2:65535
 
 
 [ml2_type_vlan]
@@ -222,7 +223,7 @@
 # networks, as well as ranges of VLAN tags on each available for allocation to
 # tenant networks. (list value)
 #network_vlan_ranges =
-
+network_vlan_ranges = 
 
 [ml2_type_vxlan]
 
@@ -233,11 +234,13 @@
 # Comma-separated list of <vni_min>:<vni_max> tuples enumerating ranges of
 # VXLAN VNI IDs that are available for tenant network allocation (list value)
 #vni_ranges =
+vni_ranges = 2:65535
 
 # Multicast group for VXLAN. When configured, will enable sending all broadcast
 # traffic to this multicast group. When left unconfigured, will disable
 # multicast VXLAN mode. (string value)
 #vxlan_group = <None>
+vxlan_group = 224.0.0.1
 
 
 [securitygroup]
@@ -253,7 +256,29 @@
 # should be false when using no security groups or using the nova security
 # group API. (boolean value)
 #enable_security_group = true
+firewall_driver = openvswitch
+enable_security_group = True
 
 # Use ipset to speed-up the iptables based security groups. Enabling ipset
 # support requires that ipset is installed on L2 agent node. (boolean value)
 #enable_ipset = true
+[ml2_odl]
+# HTTP URL of OpenDaylight REST interface. (string value)
+url = http://192.168.10.39:8282/controller/nb/v2/neutron
+
+# HTTP username for authentication. (string value)
+username = admin
+
+# HTTP password for authentication. (string value)
+password = admin
+
+# Name of the controller to be used for port binding. (string value)
+port_binding_controller = pseudo-agentdb-binding
+
+# Enable websocket for pseudo-agent-port-binding. (boolean value)
+enable_websocket_pseudo_agentdb = false
+
+# Enables the networking-odl driver to supply special neutron ports of
+# "dhcp" type to OpenDaylight Controller for its use in providing DHCP
+# Service. (boolean value)
+enable_dhcp_service = false

2018-06-01 03:32:00,173 [salt.state       ][INFO    ][11317] Completed state [/etc/neutron/plugins/ml2/ml2_conf.ini] at time 03:32:00.173768 duration_in_ms=162.267
2018-06-01 03:32:00,175 [salt.state       ][INFO    ][11317] Running state [ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini] at time 03:32:00.175816
2018-06-01 03:32:00,176 [salt.state       ][INFO    ][11317] Executing state cmd.run for ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini
2018-06-01 03:32:00,176 [salt.loaded.int.module.cmdmod][INFO    ][11317] Executing command 'test -e /etc/neutron/plugin.ini' in directory '/root'
2018-06-01 03:32:00,195 [salt.loaded.int.module.cmdmod][INFO    ][11317] Executing command 'ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini' in directory '/root'
2018-06-01 03:32:00,213 [salt.state       ][INFO    ][11317] {'pid': 12797, 'retcode': 0, 'stderr': '', 'stdout': ''}
2018-06-01 03:32:00,214 [salt.state       ][INFO    ][11317] Completed state [ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini] at time 03:32:00.214735 duration_in_ms=38.92
2018-06-01 03:32:00,216 [salt.state       ][INFO    ][11317] Running state [/etc/neutron/neutron.conf] at time 03:32:00.216354
2018-06-01 03:32:00,216 [salt.state       ][INFO    ][11317] Executing state file.managed for /etc/neutron/neutron.conf
2018-06-01 03:32:00,254 [salt.fileclient  ][INFO    ][11317] Fetching file from saltenv 'base', ** done ** 'neutron/files/pike/neutron-server.conf.Debian'
2018-06-01 03:32:00,470 [salt.state       ][INFO    ][11317] File changed:
--- 
+++ 
@@ -1,5 +1,5 @@
+
 [DEFAULT]
-core_plugin = ml2
 
 #
 # From neutron
@@ -8,14 +8,17 @@
 # Where to store Neutron state files. This directory must be writable by the
 # agent. (string value)
 #state_path = /var/lib/neutron
-
-# The host IP to bind to. (unknown value)
+state_path = /var/lib/neutron
+
+# The host IP to bind to (string value)
 #bind_host = 0.0.0.0
+bind_host = 192.168.10.38
 
 # The port to bind to (port value)
 # Minimum value: 0
 # Maximum value: 65535
 #bind_port = 9696
+bind_port = 9696
 
 # The path for API extensions. Note that this can be a colon-separated list of
 # paths. For example: api_extensions_path =
@@ -23,15 +26,27 @@
 # neutron.extensions is appended to this, so if your extensions are in there
 # you don't need to specify them here. (string value)
 #api_extensions_path =
+agent_down_time = 30
 
 # The type of authentication to use (string value)
 #auth_strategy = keystone
-
-# The core plugin Neutron will use (string value)
-#core_plugin = <None>
+auth_strategy = keystone
+
+
+
+core_plugin = neutron.plugins.ml2.plugin.Ml2Plugin
+
+
+
+
+
+service_plugins = odl-router_v2,metering,trunk
 
 # The service plugins Neutron will use (list value)
 #service_plugins =
+
+allow_pagination = False
+
 
 # The base MAC address Neutron will use for VIFs. The first 3 octets will
 # remain unchanged. If the 4th octet is not 00, it will also be used. The
@@ -44,6 +59,7 @@
 # The maximum number of items returned in a single response, value was
 # 'infinite' or negative integer means no limit (string value)
 #pagination_max_limit = -1
+pagination_max_limit = -1
 
 # Default value of availability zone hints. The availability zone aware
 # schedulers use this when the resources availability_zone_hints is empty.
@@ -59,6 +75,12 @@
 # Maximum number of host routes per subnet (integer value)
 #max_subnet_host_routes = 20
 
+# DEPRECATED: Maximum number of fixed ips per port. This option is deprecated
+# and will be removed in the Ocata release. (integer value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#max_fixed_ips_per_port = 5
+
 # Enables IPv6 Prefix Delegation for automatic subnet CIDR allocation. Set to
 # True to enable IPv6 Prefix Delegation for subnet allocation in a PD-capable
 # environment. Users making subnet creation requests for IPv6 subnets without
@@ -70,9 +92,11 @@
 # DHCP lease duration (in seconds). Use -1 to tell dnsmasq to use infinite
 # lease times. (integer value)
 #dhcp_lease_duration = 86400
+dhcp_lease_duration = 600
 
 # Domain to use for building the hostnames (string value)
 #dns_domain = openstacklocal
+dns_domain = novalocal
 
 # Driver for external DNS integration. (string value)
 #external_dns_driver = <None>
@@ -84,23 +108,21 @@
 # MUST be set to False if Neutron is being used in conjunction with Nova
 # security groups. (boolean value)
 #allow_overlapping_ips = false
+allow_overlapping_ips = True
 
 # Hostname to be used by the Neutron server, agents and services running on
 # this machine. All the agents and services running on this machine must use
-# the same host value. (unknown value)
+# the same host value. (string value)
 #host = example.domain
-
-# This string is prepended to the normal URL that is returned in links to the
-# OpenStack Network API. If it is empty (the default), the URLs are returned
-# unchanged. (string value)
-#network_link_prefix = <None>
 
 # Send notification to nova when port status changes (boolean value)
 #notify_nova_on_port_status_changes = true
+notify_nova_on_port_status_changes = true
 
 # Send notification to nova when port data (fixed_ips/floatingip) changes so
 # nova can update its cache. (boolean value)
 #notify_nova_on_port_data_changes = true
+notify_nova_on_port_data_changes = true
 
 # Number of seconds between sending events to nova if there are any events to
 # send. (integer value)
@@ -114,13 +136,10 @@
 # networks. (boolean value)
 #vlan_transparent = false
 
-# DEPRECATED: This will choose the web framework in which to run the Neutron
-# API server. 'pecan' is a new rewrite of the API routing components. (string
-# value)
+# This will choose the web framework in which to run the Neutron API server.
+# 'pecan' is a new experimental rewrite of the API server. (string value)
 # Allowed values: legacy, pecan
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-#web_framework = pecan
+#web_framework = legacy
 
 # MTU of the underlying physical network. Neutron uses this value to calculate
 # MTU for all virtual network components. For flat and VLAN networks, neutron
@@ -129,6 +148,7 @@
 # value. Defaults to 1500, the standard value for Ethernet. (integer value)
 # Deprecated group/name - [ml2]/segment_mtu
 #global_physnet_mtu = 1500
+global_physnet_mtu = 1500
 
 # Number of backlog requests to configure the socket with (integer value)
 #backlog = 4096
@@ -149,10 +169,13 @@
 
 # Number of RPC worker processes for service. (integer value)
 #rpc_workers = 1
+rpc_workers = 4
+
 
 # Number of RPC worker processes dedicated to state reports queue. (integer
 # value)
 #rpc_state_report_workers = 1
+rpc_state_report_workers = 4
 
 # Range of seconds to randomly delay when starting the periodic task scheduler
 # to reduce stampeding. (Disable by setting to 0) (integer value)
@@ -175,6 +198,14 @@
 # Group (gid or name) running metadata proxy after its initialization (if
 # empty: agent effective group). (string value)
 #metadata_proxy_group =
+
+# Enable/Disable log watch by metadata proxy. It should be disabled when
+# metadata_proxy_user/group is not allowed to read/write its log file and
+# copytruncate logrotate option must be used if logrotate is enabled on
+# metadata proxy log files. Option default value is deduced from
+# metadata_proxy_user: watch log is enabled if metadata_proxy_user is agent
+# effective user id/name. (boolean value)
+#metadata_proxy_watch_log = <None>
 
 #
 # From neutron.db
@@ -219,6 +250,7 @@
 # a given tenant network, providing high availability for DHCP service.
 # (integer value)
 #dhcp_agents_per_network = 1
+dhcp_agents_per_network = 2
 
 # Enable services on an agent with admin_state_up False. If this option is
 # False, when admin_state_up of an agent is turned False, services on it will
@@ -238,13 +270,11 @@
 # System-wide flag to determine the type of router that tenants can create.
 # Only admin can override. (boolean value)
 #router_distributed = false
-
-# Determine if setup is configured for DVR. If False, DVR API extension will be
-# disabled. (boolean value)
-#enable_dvr = true
+router_distributed = False
 
 # Driver to use for scheduling router to a default L3 agent (string value)
 #router_scheduler_driver = neutron.scheduler.l3_agent_scheduler.LeastRoutersScheduler
+router_scheduler_driver = neutron.scheduler.l3_agent_scheduler.ChanceScheduler
 
 # Allow auto scheduling of routers to L3 agent. (boolean value)
 #router_auto_schedule = true
@@ -252,13 +282,16 @@
 # Automatically reschedule routers from offline L3 agents to online L3 agents.
 # (boolean value)
 #allow_automatic_l3agent_failover = false
+allow_automatic_l3agent_failover = true
 
 # Enable HA mode for virtual routers. (boolean value)
 #l3_ha = false
+l3_ha = False
 
 # Maximum number of L3 agents which a HA router will be scheduled on. If it is
 # set to 0 then the router will be scheduled on every agent. (integer value)
 #max_l3_agents_per_router = 3
+max_l3_agents_per_router = 0
 
 # Subnet used for the l3 HA admin network. (string value)
 #l3_ha_net_cidr = 169.254.192.0/18
@@ -288,6 +321,13 @@
 # INFO level. (boolean value)
 # Note: This option can be changed without restarting.
 #debug = false
+
+# DEPRECATED: If set to false, the logging level will be set to WARNING instead
+# of the default INFO level. (boolean value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#verbose = true
+verbose = true
 
 # The name of a logging configuration file. This file is appended to any
 # existing logging configuration files. For details about logging configuration
@@ -327,12 +367,6 @@
 # is set. (boolean value)
 #use_syslog = false
 
-# Enable journald for logging. If running in a systemd environment you may wish
-# to enable journal support. Doing so will use the journal native protocol
-# which includes structured metadata in addition to log messages.This option is
-# ignored if log_config_append is set. (boolean value)
-#use_journal = false
-
 # Syslog facility to receive log lines. This option is ignored if
 # log_config_append is set. (string value)
 #syslog_log_facility = LOG_USER
@@ -361,7 +395,7 @@
 
 # List of package logging levels in logger=LEVEL pairs. This option is ignored
 # if log_config_append is set. (list value)
-#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
+#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
 
 # Enables or disables publication of error events. (boolean value)
 #publish_errors = false
@@ -394,6 +428,7 @@
 #
 
 # Size of RPC connection pool. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_conn_pool_size
 #rpc_conn_pool_size = 30
 
 # The pool size limit for connections expiration policy (integer value)
@@ -404,24 +439,30 @@
 
 # ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
 # The "host" option should point or resolve to this address. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_address
 #rpc_zmq_bind_address = *
 
 # MatchMaker driver. (string value)
 # Allowed values: redis, sentinel, dummy
+# Deprecated group/name - [DEFAULT]/rpc_zmq_matchmaker
 #rpc_zmq_matchmaker = redis
 
 # Number of ZeroMQ contexts, defaults to 1. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_contexts
 #rpc_zmq_contexts = 1
 
 # Maximum number of ingress messages to locally buffer per topic. Default is
 # unlimited. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_topic_backlog
 #rpc_zmq_topic_backlog = <None>
 
 # Directory for holding IPC sockets. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_ipc_dir
 #rpc_zmq_ipc_dir = /var/run/openstack
 
 # Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
 # "host" option, if running Nova. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_host
 #rpc_zmq_host = localhost
 
 # Number of seconds to wait before all pending messages will be sent after
@@ -431,24 +472,30 @@
 # upper bound for the linger period. (integer value)
 # Deprecated group/name - [DEFAULT]/rpc_cast_timeout
 #zmq_linger = -1
+zmq_linger = 30
 
 # The default number of seconds that poll should wait. Poll raises timeout
 # exception when timeout expired. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_poll_timeout
 #rpc_poll_timeout = 1
 
 # Expiration timeout in seconds of a name service record about existing target
 # ( < 0 means no timeout). (integer value)
+# Deprecated group/name - [DEFAULT]/zmq_target_expire
 #zmq_target_expire = 300
 
 # Update period in seconds of a name service record about existing target.
 # (integer value)
+# Deprecated group/name - [DEFAULT]/zmq_target_update
 #zmq_target_update = 180
 
 # Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
 # value)
+# Deprecated group/name - [DEFAULT]/use_pub_sub
 #use_pub_sub = false
 
 # Use ROUTER remote proxy. (boolean value)
+# Deprecated group/name - [DEFAULT]/use_router_proxy
 #use_router_proxy = false
 
 # This option makes direct connections dynamic or static. It makes sense only
@@ -463,20 +510,24 @@
 # Minimal port number for random ports range. (port value)
 # Minimum value: 0
 # Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/rpc_zmq_min_port
 #rpc_zmq_min_port = 49153
 
 # Maximal port number for random ports range. (integer value)
 # Minimum value: 1
 # Maximum value: 65536
+# Deprecated group/name - [DEFAULT]/rpc_zmq_max_port
 #rpc_zmq_max_port = 65536
 
 # Number of retries to find free port number before fail with ZMQBindError.
 # (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_port_retries
 #rpc_zmq_bind_port_retries = 100
 
 # Default serialization mechanism for serializing/deserializing
 # outgoing/incoming messages (string value)
 # Allowed values: json, msgpack
+# Deprecated group/name - [DEFAULT]/rpc_zmq_serialization
 #rpc_zmq_serialization = json
 
 # This option configures round-robin mode in zmq socket. True means not keeping
@@ -541,17 +592,19 @@
 # value)
 #subscribe_on =
 
-# Size of executor thread pool when executor is threading or eventlet. (integer
-# value)
+# Size of executor thread pool. (integer value)
 # Deprecated group/name - [DEFAULT]/rpc_thread_pool_size
 #executor_thread_pool_size = 64
+executor_thread_pool_size = 70
 
 # Seconds to wait for a response from a call. (integer value)
 #rpc_response_timeout = 60
+rpc_response_timeout=120
 
 # A URL representing the messaging driver to use and its full configuration.
 # (string value)
 #transport_url = <None>
+transport_url = rabbit://openstack:opnfv_secret@192.168.10.28:5672,openstack:opnfv_secret@192.168.10.29:5672,openstack:opnfv_secret@192.168.10.30:5672//openstack
 
 # DEPRECATED: The messaging driver to use, defaults to rabbit. Other drivers
 # include amqp and zmq. (string value)
@@ -596,10 +649,10 @@
 # is idle for this number of seconds it will be closed. A value of '0' means
 # wait forever. (integer value)
 #client_socket_timeout = 900
+nova_url = http://192.168.10.35:8774/v2
 
 
 [agent]
-root_helper = sudo /usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf
 
 #
 # From neutron.agent
@@ -609,7 +662,7 @@
 # /etc/neutron/rootwrap.conf' to use the real root filter facility. Change to
 # 'sudo' to skip the filtering and just run the command directly. (string
 # value)
-#root_helper = sudo
+root_helper = sudo /usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf
 
 # Use the root helper when listing the namespaces on a system. This may not be
 # required depending on the security configuration. If the root helper is not
@@ -626,6 +679,7 @@
 # agent_down_time, best if it is half or less than agent_down_time. (floating
 # point value)
 #report_interval = 30
+report_interval = 10
 
 # Log agent heartbeats (boolean value)
 #log_agent_heartbeats = false
@@ -682,9 +736,36 @@
 # (list value)
 #allow_headers = X-Auth-Token,X-Identity-Status,X-Roles,X-Service-Catalog,X-User-Id,X-Tenant-Id,X-OpenStack-Request-ID
 
+[cors.subdomain]
+
+#
+# From oslo.middleware.cors
+#
+
+# Indicate whether this resource may be shared with the domain received in the
+# requests "origin" header. Format: "<protocol>://<host>[:<port>]", no trailing
+# slash. Example: https://horizon.example.com (list value)
+#allowed_origin = <None>
+
+# Indicate that the actual request can include user credentials (boolean value)
+#allow_credentials = true
+
+# Indicate which headers are safe to expose to the API. Defaults to HTTP Simple
+# Headers. (list value)
+#expose_headers = X-Auth-Token,X-Subject-Token,X-Service-Token,X-OpenStack-Request-ID,OpenStack-Volume-microversion
+
+# Maximum cache age of CORS preflight requests. (integer value)
+#max_age = 3600
+
+# Indicate which methods can be used during the actual request. (list value)
+#allow_methods = GET,PUT,POST,DELETE,PATCH
+
+# Indicate which header field names may be used during the actual request.
+# (list value)
+#allow_headers = X-Auth-Token,X-Identity-Status,X-Roles,X-Service-Catalog,X-User-Id,X-Tenant-Id,X-OpenStack-Request-ID
+
 
 [database]
-connection = sqlite:////var/lib/neutron/neutron.sqlite
 
 #
 # From neutron.db
@@ -698,7 +779,16 @@
 # From oslo.db
 #
 
+# DEPRECATED: The file name to use with SQLite. (string value)
+# Deprecated group/name - [DEFAULT]/sqlite_db
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Should use config option connection or slave_connection to connect
+# the database.
+#sqlite_db = oslo.sqlite
+
 # If True, SQLite uses synchronous mode. (boolean value)
+# Deprecated group/name - [DEFAULT]/sqlite_synchronous
 #sqlite_synchronous = true
 
 # The back end to use for the database. (string value)
@@ -710,7 +800,9 @@
 # Deprecated group/name - [DEFAULT]/sql_connection
 # Deprecated group/name - [DATABASE]/sql_connection
 # Deprecated group/name - [sql]/connection
-#connection = <None>
+
+
+connection = mysql+pymysql://neutron:opnfv_secret@192.168.10.23/neutron?charset=utf8
 
 # The SQLAlchemy connection string to use to connect to the slave database.
 # (string value)
@@ -722,15 +814,12 @@
 # (string value)
 #mysql_sql_mode = TRADITIONAL
 
-# If True, transparently enables support for handling MySQL Cluster (NDB).
-# (boolean value)
-#mysql_enable_ndb = false
-
 # Timeout before idle SQL connections are reaped. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_idle_timeout
 # Deprecated group/name - [DATABASE]/sql_idle_timeout
 # Deprecated group/name - [sql]/idle_timeout
 #idle_timeout = 3600
+idle_timeout = 3600
 
 # Minimum number of SQL connections to keep open in a pool. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_min_pool_size
@@ -742,22 +831,26 @@
 # Deprecated group/name - [DEFAULT]/sql_max_pool_size
 # Deprecated group/name - [DATABASE]/sql_max_pool_size
 #max_pool_size = 5
+max_pool_size = 20
 
 # Maximum number of database connection retries during startup. Set to -1 to
 # specify an infinite retry count. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_max_retries
 # Deprecated group/name - [DATABASE]/sql_max_retries
 #max_retries = 10
+max_retries = -1
 
 # Interval between retries of opening a SQL connection. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_retry_interval
 # Deprecated group/name - [DATABASE]/reconnect_interval
 #retry_interval = 10
+retry_interval = 2
 
 # If set, use this value for max_overflow with SQLAlchemy. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_max_overflow
 # Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
 #max_overflow = 50
+max_overflow = 20
 
 # Verbosity of SQL debugging information: 0=None, 100=Everything. (integer
 # value)
@@ -796,6 +889,19 @@
 
 [keystone_authtoken]
 
+auth_region=RegionOne
+auth_protocol=http
+revocation_cache_time = 10
+auth_type = password
+auth_host = 192.168.10.35
+auth_port = 35357
+user_domain_id = default
+project_domain_id = default
+project_name = service
+username = neutron
+password = opnfv_secret
+auth_uri=http://192.168.10.35:5000
+auth_url=http://192.168.10.35:35357
 #
 # From keystonemiddleware.auth_token
 #
@@ -803,10 +909,10 @@
 # Complete "public" Identity API endpoint. This endpoint should not be an
 # "admin" endpoint, as it should be accessible by all end users.
 # Unauthenticated clients are redirected to this endpoint to authenticate.
-# Although this endpoint should ideally be unversioned, client support in the
-# wild varies. If you're using a versioned v2 endpoint here, then this should
-# *not* be the same endpoint the service user utilizes for validating tokens,
-# because normal end users may not be able to reach that endpoint. (string
+# Although this endpoint should  ideally be unversioned, client support in the
+# wild varies.  If you're using a versioned v2 endpoint here, then this  should
+# *not* be the same endpoint the service user utilizes  for validating tokens,
+# because normal end users may not be  able to reach that endpoint. (string
 # value)
 #auth_uri = <None>
 
@@ -1060,12 +1166,14 @@
 # Name of nova region to use. Useful if keystone manages more than one region.
 # (string value)
 #region_name = <None>
+region_name = RegionOne
 
 # Type of the nova endpoint to use.  This endpoint will be looked up in the
 # keystone catalog and should be one of public, internal or admin. (string
 # value)
 # Allowed values: public, admin, internal
 #endpoint_type = public
+endpoint_type = internal
 
 #
 # From nova.auth
@@ -1073,6 +1181,13 @@
 
 # Authentication URL (string value)
 #auth_url = <None>
+user_domain_id = default
+project_domain_id = default
+project_name = service
+password = opnfv_secret
+username = nova
+auth_type = password
+auth_url = http://192.168.10.35:35357
 
 # Authentication type to load (string value)
 # Deprecated group/name - [nova]/auth_plugin
@@ -1117,11 +1232,11 @@
 #project_domain_name = <None>
 
 # Project ID to scope to (string value)
-# Deprecated group/name - [nova]/tenant_id
+# Deprecated group/name - [nova]/tenant-id
 #project_id = <None>
 
 # Project name to scope to (string value)
-# Deprecated group/name - [nova]/tenant_name
+# Deprecated group/name - [nova]/tenant-name
 #project_name = <None>
 
 # Tenant ID (string value)
@@ -1146,7 +1261,7 @@
 #user_id = <None>
 
 # Username (string value)
-# Deprecated group/name - [nova]/user_name
+# Deprecated group/name - [nova]/user-name
 #username = <None>
 
 
@@ -1157,6 +1272,7 @@
 #
 
 # Enables or disables inter-process locks. (boolean value)
+# Deprecated group/name - [DEFAULT]/disable_process_locking
 #disable_process_locking = false
 
 # Directory to use for lock files.  For security, the specified directory
@@ -1165,7 +1281,9 @@
 # in the environment, use the Python tempfile.gettempdir function to find a
 # suitable location. If external locks are used, a lock path must be set.
 # (string value)
+# Deprecated group/name - [DEFAULT]/lock_path
 #lock_path = /tmp
+lock_path = $state_path/lock
 
 
 [oslo_messaging_amqp]
@@ -1176,72 +1294,61 @@
 
 # Name for the AMQP container. must be globally unique. Defaults to a generated
 # UUID (string value)
+# Deprecated group/name - [amqp1]/container_name
 #container_name = <None>
 
 # Timeout for inactive connections (in seconds) (integer value)
+# Deprecated group/name - [amqp1]/idle_timeout
 #idle_timeout = 0
 
 # Debug: dump AMQP frames to stdout (boolean value)
+# Deprecated group/name - [amqp1]/trace
 #trace = false
 
-# Attempt to connect via SSL. If no other ssl-related parameters are given, it
-# will use the system's CA-bundle to verify the server's certificate. (boolean
-# value)
-#ssl = false
-
 # CA certificate PEM file used to verify the server's certificate (string
 # value)
+# Deprecated group/name - [amqp1]/ssl_ca_file
 #ssl_ca_file =
 
 # Self-identifying certificate PEM file for client authentication (string
 # value)
+# Deprecated group/name - [amqp1]/ssl_cert_file
 #ssl_cert_file =
 
 # Private key PEM file used to sign ssl_cert_file certificate (optional)
 # (string value)
+# Deprecated group/name - [amqp1]/ssl_key_file
 #ssl_key_file =
 
 # Password for decrypting ssl_key_file (if encrypted) (string value)
+# Deprecated group/name - [amqp1]/ssl_key_password
 #ssl_key_password = <None>
 
-# By default SSL checks that the name in the server's certificate matches the
-# hostname in the transport_url. In some configurations it may be preferable to
-# use the virtual hostname instead, for example if the server uses the Server
-# Name Indication TLS extension (rfc6066) to provide a certificate per virtual
-# host. Set ssl_verify_vhost to True if the server's SSL certificate uses the
-# virtual host name instead of the DNS name. (boolean value)
-#ssl_verify_vhost = false
-
 # DEPRECATED: Accept clients using either SSL or plain TCP (boolean value)
+# Deprecated group/name - [amqp1]/allow_insecure_clients
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Not applicable - not a SSL server
 #allow_insecure_clients = false
 
 # Space separated list of acceptable SASL mechanisms (string value)
+# Deprecated group/name - [amqp1]/sasl_mechanisms
 #sasl_mechanisms =
 
 # Path to directory that contains the SASL configuration (string value)
+# Deprecated group/name - [amqp1]/sasl_config_dir
 #sasl_config_dir =
 
 # Name of configuration file (without .conf suffix) (string value)
+# Deprecated group/name - [amqp1]/sasl_config_name
 #sasl_config_name =
 
-# SASL realm to use if no realm present in username (string value)
-#sasl_default_realm =
-
-# DEPRECATED: User name for message broker authentication (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the
-# username.
+# User name for message broker authentication (string value)
+# Deprecated group/name - [amqp1]/username
 #username =
 
-# DEPRECATED: Password for message broker authentication (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the
-# password.
+# Password for message broker authentication (string value)
+# Deprecated group/name - [amqp1]/password
 #password =
 
 # Seconds to pause before attempting to re-connect. (integer value)
@@ -1295,21 +1402,16 @@
 # otherwise use routable addressing (string value)
 #addressing_mode = dynamic
 
-# Enable virtual host support for those message buses that do not natively
-# support virtual hosting (such as qpidd). When set to true the virtual host
-# name will be added to all message bus addresses, effectively creating a
-# private 'subnet' per virtual host. Set to False if the message bus supports
-# virtual hosting using the 'hostname' field in the AMQP 1.0 Open performative
-# as the name of the virtual host. (boolean value)
-#pseudo_vhost = true
-
 # address prefix used when sending to a specific server (string value)
+# Deprecated group/name - [amqp1]/server_request_prefix
 #server_request_prefix = exclusive
 
 # address prefix used when broadcasting to all servers (string value)
+# Deprecated group/name - [amqp1]/broadcast_prefix
 #broadcast_prefix = broadcast
 
 # address prefix when sending to any server in group (string value)
+# Deprecated group/name - [amqp1]/group_request_prefix
 #group_request_prefix = unicast
 
 # Address prefix for all generated RPC addresses (string value)
@@ -1397,7 +1499,7 @@
 # Max fetch bytes of Kafka consumer (integer value)
 #kafka_max_fetch_bytes = 1048576
 
-# Default timeout(s) for Kafka consumers (floating point value)
+# Default timeout(s) for Kafka consumers (integer value)
 #kafka_consumer_timeout = 1.0
 
 # Pool Size for Kafka Consumers (integer value)
@@ -1442,11 +1544,6 @@
 # Deprecated group/name - [DEFAULT]/notification_topics
 #topics = notifications
 
-# The maximum number of attempts to re-send a notification message which failed
-# to be delivered due to a recoverable error. 0 - No retry, -1 - indefinite
-# (integer value)
-#retry = -1
-
 
 [oslo_messaging_rabbit]
 
@@ -1460,31 +1557,30 @@
 #amqp_durable_queues = false
 
 # Auto-delete queues in AMQP. (boolean value)
+# Deprecated group/name - [DEFAULT]/amqp_auto_delete
 #amqp_auto_delete = false
-
-# Enable SSL (boolean value)
-#ssl = <None>
 
 # SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and
 # SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some
 # distributions. (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_version
-#ssl_version =
+# Deprecated group/name - [DEFAULT]/kombu_ssl_version
+#kombu_ssl_version =
 
 # SSL key file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_keyfile
-#ssl_key_file =
+# Deprecated group/name - [DEFAULT]/kombu_ssl_keyfile
+#kombu_ssl_keyfile =
 
 # SSL cert file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_certfile
-#ssl_cert_file =
+# Deprecated group/name - [DEFAULT]/kombu_ssl_certfile
+#kombu_ssl_certfile =
 
 # SSL certification authority file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_ca_certs
-#ssl_ca_file =
+# Deprecated group/name - [DEFAULT]/kombu_ssl_ca_certs
+#kombu_ssl_ca_certs =
 
 # How long to wait before reconnecting in response to an AMQP consumer cancel
 # notification. (floating point value)
+# Deprecated group/name - [DEFAULT]/kombu_reconnect_delay
 #kombu_reconnect_delay = 1.0
 
 # EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression will not
@@ -1504,6 +1600,7 @@
 
 # DEPRECATED: The RabbitMQ broker address where a single node is used. (string
 # value)
+# Deprecated group/name - [DEFAULT]/rabbit_host
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
@@ -1513,24 +1610,32 @@
 # value)
 # Minimum value: 0
 # Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/rabbit_port
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
 #rabbit_port = 5672
 
 # DEPRECATED: RabbitMQ HA cluster host:port pairs. (list value)
+# Deprecated group/name - [DEFAULT]/rabbit_hosts
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
 #rabbit_hosts = $rabbit_host:$rabbit_port
 
+# Connect over SSL for RabbitMQ. (boolean value)
+# Deprecated group/name - [DEFAULT]/rabbit_use_ssl
+#rabbit_use_ssl = false
+
 # DEPRECATED: The RabbitMQ userid. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_userid
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
 #rabbit_userid = guest
 
 # DEPRECATED: The RabbitMQ password. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_password
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
@@ -1538,9 +1643,11 @@
 
 # The RabbitMQ login method. (string value)
 # Allowed values: PLAIN, AMQPLAIN, RABBIT-CR-DEMO
+# Deprecated group/name - [DEFAULT]/rabbit_login_method
 #rabbit_login_method = AMQPLAIN
 
 # DEPRECATED: The RabbitMQ virtual host. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_virtual_host
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
@@ -1548,10 +1655,13 @@
 
 # How frequently to retry connecting with RabbitMQ. (integer value)
 #rabbit_retry_interval = 1
+rabbit_retry_interval = 1
 
 # How long to backoff for between retries when connecting to RabbitMQ. (integer
 # value)
+# Deprecated group/name - [DEFAULT]/rabbit_retry_backoff
 #rabbit_retry_backoff = 2
+rabbit_retry_backoff = 2
 
 # Maximum interval of RabbitMQ connection retries. Default is 30 seconds.
 # (integer value)
@@ -1559,6 +1669,7 @@
 
 # DEPRECATED: Maximum number of RabbitMQ connection retries. Default is 0
 # (infinite retry count). (integer value)
+# Deprecated group/name - [DEFAULT]/rabbit_max_retries
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 #rabbit_max_retries = 0
@@ -1569,6 +1680,7 @@
 # If you just want to make sure that all queues (except those with auto-
 # generated names) are mirrored across all nodes, run: "rabbitmqctl set_policy
 # HA '^(?!amq\.).*' '{"ha-mode": "all"}' " (boolean value)
+# Deprecated group/name - [DEFAULT]/rabbit_ha_queues
 #rabbit_ha_queues = false
 
 # Positive integer representing duration in seconds for queue TTL (x-expires).
@@ -1579,18 +1691,21 @@
 
 # Specifies the number of messages to prefetch. Setting to zero allows
 # unlimited messages. (integer value)
-#rabbit_qos_prefetch_count = 64
+#rabbit_qos_prefetch_count = 0
 
 # Number of seconds after which the Rabbit broker is considered down if
 # heartbeat's keep-alive fails (0 disable the heartbeat). EXPERIMENTAL (integer
 # value)
 #heartbeat_timeout_threshold = 60
+heartbeat_timeout_threshold = 0
 
 # How often times during the heartbeat_timeout_threshold we check the
 # heartbeat. (integer value)
 #heartbeat_rate = 2
+heartbeat_rate = 2
 
 # Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake (boolean value)
+# Deprecated group/name - [DEFAULT]/fake_rabbit
 #fake_rabbit = false
 
 # Maximum number of channels to allow (integer value)
@@ -1601,6 +1716,9 @@
 
 # How often to send heartbeats for consumer's connections (integer value)
 #heartbeat_interval = 3
+
+# Enable SSL (boolean value)
+#ssl = <None>
 
 # Arguments passed to ssl.wrap_socket (dict value)
 #ssl_options = <None>
@@ -1706,24 +1824,30 @@
 
 # ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
 # The "host" option should point or resolve to this address. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_address
 #rpc_zmq_bind_address = *
 
 # MatchMaker driver. (string value)
 # Allowed values: redis, sentinel, dummy
+# Deprecated group/name - [DEFAULT]/rpc_zmq_matchmaker
 #rpc_zmq_matchmaker = redis
 
 # Number of ZeroMQ contexts, defaults to 1. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_contexts
 #rpc_zmq_contexts = 1
 
 # Maximum number of ingress messages to locally buffer per topic. Default is
 # unlimited. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_topic_backlog
 #rpc_zmq_topic_backlog = <None>
 
 # Directory for holding IPC sockets. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_ipc_dir
 #rpc_zmq_ipc_dir = /var/run/openstack
 
 # Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
 # "host" option, if running Nova. (string value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_host
 #rpc_zmq_host = localhost
 
 # Number of seconds to wait before all pending messages will be sent after
@@ -1736,21 +1860,26 @@
 
 # The default number of seconds that poll should wait. Poll raises timeout
 # exception when timeout expired. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_poll_timeout
 #rpc_poll_timeout = 1
 
 # Expiration timeout in seconds of a name service record about existing target
 # ( < 0 means no timeout). (integer value)
+# Deprecated group/name - [DEFAULT]/zmq_target_expire
 #zmq_target_expire = 300
 
 # Update period in seconds of a name service record about existing target.
 # (integer value)
+# Deprecated group/name - [DEFAULT]/zmq_target_update
 #zmq_target_update = 180
 
 # Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
 # value)
+# Deprecated group/name - [DEFAULT]/use_pub_sub
 #use_pub_sub = false
 
 # Use ROUTER remote proxy. (boolean value)
+# Deprecated group/name - [DEFAULT]/use_router_proxy
 #use_router_proxy = false
 
 # This option makes direct connections dynamic or static. It makes sense only
@@ -1765,20 +1894,24 @@
 # Minimal port number for random ports range. (port value)
 # Minimum value: 0
 # Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/rpc_zmq_min_port
 #rpc_zmq_min_port = 49153
 
 # Maximal port number for random ports range. (integer value)
 # Minimum value: 1
 # Maximum value: 65536
+# Deprecated group/name - [DEFAULT]/rpc_zmq_max_port
 #rpc_zmq_max_port = 65536
 
 # Number of retries to find free port number before fail with ZMQBindError.
 # (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_zmq_bind_port_retries
 #rpc_zmq_bind_port_retries = 100
 
 # Default serialization mechanism for serializing/deserializing
 # outgoing/incoming messages (string value)
 # Allowed values: json, msgpack
+# Deprecated group/name - [DEFAULT]/rpc_zmq_serialization
 #rpc_zmq_serialization = json
 
 # This option configures round-robin mode in zmq socket. True means not keeping
@@ -1862,9 +1995,11 @@
 #
 
 # The file that defines policies. (string value)
+# Deprecated group/name - [DEFAULT]/policy_file
 #policy_file = policy.json
 
 # Default rule. Enforced when a requested rule is not found. (string value)
+# Deprecated group/name - [DEFAULT]/policy_default_rule
 #policy_default_rule = default
 
 # Directories where policy configuration files are stored. They can be relative
@@ -1872,7 +2007,21 @@
 # absolute paths. The file defined by policy_file must exist for these
 # directories to be searched.  Missing or empty directories are ignored. (multi
 # valued)
+# Deprecated group/name - [DEFAULT]/policy_dirs
 #policy_dirs = policy.d
+
+
+[qos]
+
+#
+# From neutron.qos
+#
+
+# DEPRECATED: Drivers list to use to send the update notification. This option
+# will be unused in Pike. (list value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#notification_drivers = message_queue
 
 
 [quotas]
@@ -1887,15 +2036,15 @@
 
 # Number of networks allowed per tenant. A negative value means unlimited.
 # (integer value)
-#quota_network = 100
+#quota_network = 10
 
 # Number of subnets allowed per tenant, A negative value means unlimited.
 # (integer value)
-#quota_subnet = 100
+#quota_subnet = 10
 
 # Number of ports allowed per tenant. A negative value means unlimited.
 # (integer value)
-#quota_port = 500
+#quota_port = 50
 
 # Default driver to use for quota checks. (string value)
 #quota_driver = neutron.db.quota.driver.DbQuotaDriver
@@ -1952,3 +2101,8 @@
 # Sets the list of available ciphers. value should be a string in the OpenSSL
 # cipher list format. (string value)
 #ciphers = <None>
+[service_providers]
+
+
+[ovs]
+ovsdb_connection = tcp:127.0.0.1:6639

2018-06-01 03:32:00,472 [salt.state       ][INFO    ][11317] Completed state [/etc/neutron/neutron.conf] at time 03:32:00.471946 duration_in_ms=255.592
2018-06-01 03:32:00,472 [salt.state       ][INFO    ][11317] Running state [neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head] at time 03:32:00.472801
2018-06-01 03:32:00,473 [salt.state       ][INFO    ][11317] Executing state cmd.run for neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head
2018-06-01 03:32:00,475 [salt.loaded.int.module.cmdmod][INFO    ][11317] Executing command 'neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head' in directory '/root'
2018-06-01 03:32:03,647 [salt.state       ][INFO    ][11317] {'pid': 12802, 'retcode': 0, 'stderr': 'INFO  [alembic.runtime.migration] Context impl MySQLImpl.\nINFO  [alembic.runtime.migration] Will assume non-transactional DDL.\nINFO  [alembic.runtime.migration] Context impl MySQLImpl.\nINFO  [alembic.runtime.migration] Will assume non-transactional DDL.\nINFO  [alembic.runtime.migration] Context impl MySQLImpl.\nINFO  [alembic.runtime.migration] Will assume non-transactional DDL.\nINFO  [alembic.runtime.migration] Context impl MySQLImpl.\nINFO  [alembic.runtime.migration] Will assume non-transactional DDL.\nINFO  [alembic.runtime.migration] Context impl MySQLImpl.\nINFO  [alembic.runtime.migration] Will assume non-transactional DDL.\nINFO  [alembic.runtime.migration] Context impl MySQLImpl.\nINFO  [alembic.runtime.migration] Will assume non-transactional DDL.\nINFO  [alembic.runtime.migration] Context impl MySQLImpl.\nINFO  [alembic.runtime.migration] Will assume non-transactional DDL.\nINFO  [alembic.runtime.migration] Context impl MySQLImpl.\nINFO  [alembic.runtime.migration] Will assume non-transactional DDL.', 'stdout': 'Running upgrade for neutron ...\nOK\nRunning upgrade for networking-odl ...\nOK\nRunning upgrade for neutron-fwaas ...\nOK\nRunning upgrade for neutron-lbaas ...\nOK'}
2018-06-01 03:32:03,648 [salt.state       ][INFO    ][11317] Completed state [neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head] at time 03:32:03.647998 duration_in_ms=3175.196
2018-06-01 03:32:03,648 [salt.state       ][INFO    ][11317] Running state [/etc/neutron/api-paste.ini] at time 03:32:03.648928
2018-06-01 03:32:03,649 [salt.state       ][INFO    ][11317] Executing state file.managed for /etc/neutron/api-paste.ini
2018-06-01 03:32:03,695 [salt.fileclient  ][INFO    ][11317] Fetching file from saltenv 'base', ** done ** 'neutron/files/pike/api-paste.ini.Debian'
2018-06-01 03:32:03,781 [salt.state       ][INFO    ][11317] File changed:
--- 
+++ 
@@ -1,3 +1,4 @@
+
 [composite:neutron]
 use = egg:Paste#urlmap
 /: neutronversions_composite

2018-06-01 03:32:03,781 [salt.state       ][INFO    ][11317] Completed state [/etc/neutron/api-paste.ini] at time 03:32:03.781600 duration_in_ms=132.671
2018-06-01 03:32:03,782 [salt.state       ][INFO    ][11317] Running state [/etc/default/neutron-server] at time 03:32:03.782104
2018-06-01 03:32:03,782 [salt.state       ][INFO    ][11317] Executing state file.managed for /etc/default/neutron-server
2018-06-01 03:32:03,824 [salt.fileclient  ][INFO    ][11317] Fetching file from saltenv 'base', ** done ** 'neutron/files/pike/neutron-server'
2018-06-01 03:32:03,903 [salt.state       ][INFO    ][11317] File changed:
--- 
+++ 
@@ -1,5 +1,8 @@
+# Generated by Salt.
+
 # defaults for neutron-server
 
 # path to config file corresponding to the core_plugin specified in
 # neutron.conf
+#NEUTRON_PLUGIN_CONFIG="/etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini"
 NEUTRON_PLUGIN_CONFIG="/etc/neutron/plugins/ml2/ml2_conf.ini"

2018-06-01 03:32:03,904 [salt.state       ][INFO    ][11317] Completed state [/etc/default/neutron-server] at time 03:32:03.903951 duration_in_ms=121.847
2018-06-01 03:32:03,906 [salt.state       ][INFO    ][11317] Running state [neutron-server] at time 03:32:03.906165
2018-06-01 03:32:03,906 [salt.state       ][INFO    ][11317] Executing state service.running for neutron-server
2018-06-01 03:32:03,907 [salt.loaded.int.module.cmdmod][INFO    ][11317] Executing command ['systemctl', 'status', 'neutron-server.service', '-n', '0'] in directory '/root'
2018-06-01 03:32:03,939 [salt.loaded.int.module.cmdmod][INFO    ][11317] Executing command ['systemctl', 'is-active', 'neutron-server.service'] in directory '/root'
2018-06-01 03:32:03,959 [salt.loaded.int.module.cmdmod][INFO    ][11317] Executing command ['systemctl', 'is-enabled', 'neutron-server.service'] in directory '/root'
2018-06-01 03:32:03,984 [salt.loaded.int.module.cmdmod][INFO    ][11317] Executing command ['systemctl', 'is-enabled', 'neutron-server.service'] in directory '/root'
2018-06-01 03:32:04,009 [salt.loaded.int.module.cmdmod][INFO    ][11317] Executing command ['systemd-run', '--scope', 'systemctl', 'start', 'neutron-server.service'] in directory '/root'
2018-06-01 03:32:04,056 [salt.loaded.int.module.cmdmod][INFO    ][11317] Executing command ['systemctl', 'is-active', 'neutron-server.service'] in directory '/root'
2018-06-01 03:32:04,076 [salt.loaded.int.module.cmdmod][INFO    ][11317] Executing command ['systemctl', 'is-enabled', 'neutron-server.service'] in directory '/root'
2018-06-01 03:32:04,098 [salt.loaded.int.module.cmdmod][INFO    ][11317] Executing command ['systemctl', 'is-enabled', 'neutron-server.service'] in directory '/root'
2018-06-01 03:32:04,119 [salt.state       ][INFO    ][11317] {'neutron-server': True}
2018-06-01 03:32:04,120 [salt.state       ][INFO    ][11317] Completed state [neutron-server] at time 03:32:04.120168 duration_in_ms=214.004
2018-06-01 03:32:04,123 [salt.minion      ][INFO    ][11317] Returning information for job: 20180601033136037303
2018-06-01 03:51:19,429 [salt.utils.schedule][INFO    ][11617] Running scheduled job: __mine_interval
2018-06-01 03:56:16,038 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command ini.set_option with jid 20180601035616020057
2018-06-01 03:56:16,062 [salt.minion      ][INFO    ][12905] Starting a new job with PID 12905
2018-06-01 03:56:26,168 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601035626143102
2018-06-01 03:56:26,188 [salt.minion      ][INFO    ][12908] Starting a new job with PID 12908
2018-06-01 03:56:26,217 [salt.minion      ][INFO    ][12908] Returning information for job: 20180601035626143102
2018-06-01 03:56:36,235 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command saltutil.find_job with jid 20180601035636217250
2018-06-01 03:56:36,251 [salt.minion      ][INFO    ][12913] Starting a new job with PID 12913
2018-06-01 03:56:36,277 [salt.minion      ][INFO    ][12913] Returning information for job: 20180601035636217250
2018-06-01 03:56:39,377 [salt.minion      ][INFO    ][12905] Returning information for job: 20180601035616020057
2018-06-01 03:56:40,107 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command service.restart with jid 20180601035640088354
2018-06-01 03:56:40,127 [salt.minion      ][INFO    ][12920] Starting a new job with PID 12920
2018-06-01 03:56:41,154 [salt.loader.192.168.11.2.int.module.cmdmod][INFO    ][12920] Executing command ['systemctl', 'status', 'glance-api.service', '-n', '0'] in directory '/root'
2018-06-01 03:56:41,176 [salt.loader.192.168.11.2.int.module.cmdmod][INFO    ][12920] Executing command ['systemctl', 'is-enabled', 'glance-api.service'] in directory '/root'
2018-06-01 03:56:41,205 [salt.loader.192.168.11.2.int.module.cmdmod][INFO    ][12920] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'glance-api.service'] in directory '/root'
2018-06-01 03:56:41,412 [salt.minion      ][INFO    ][12920] Returning information for job: 20180601035640088354
2018-06-01 03:57:14,600 [salt.minion      ][INFO    ][11617] User sudo_ubuntu Executing command cp.push_dir with jid 20180601035714583340
2018-06-01 03:57:14,629 [salt.minion      ][INFO    ][13004] Starting a new job with PID 13004
