2018-09-01 22:08:32,476 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:33,609 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:33,614 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:33,618 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:33,621 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:35,922 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:35,927 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:35,932 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:36,591 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:36,593 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:36,596 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:36,598 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:37,754 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:37,955 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:37,958 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:37,962 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:37,965 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:37,967 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:37,970 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:37,973 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:37,976 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:37,978 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:37,981 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:37,984 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:37,987 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:37,989 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:37,992 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:37,995 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:37,997 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,000 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,003 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,005 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,008 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,010 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,013 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,016 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,018 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,021 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,023 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,026 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,029 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,031 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,034 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,037 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,039 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,042 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,044 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,047 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,049 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,052 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,055 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,057 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,060 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,062 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,065 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,067 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:08:38,070 [salt.utils.decorators:82  ][ERROR   ][1917] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-01 22:10:21,034 [salt.utils.decorators:613 ][WARNING ][1917] The function "module.run" is using its deprecated version and will expire in version "Sodium".
2018-09-01 22:10:24,899 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6122] Executing command ['systemctl', 'status', 'salt-minion.service', '-n', '0'] in directory '/root'
2018-09-01 22:10:24,939 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6122] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'salt-minion.service'] in directory '/root'
2018-09-01 22:10:24,959 [salt.utils.parsers:1051][WARNING ][1541] Minion received a SIGTERM. Exiting.
2018-09-01 22:10:25,926 [salt.cli.daemons :293 ][INFO    ][6180] Setting up the Salt Minion "ctl02.mcp-ovs-ha.local"
2018-09-01 22:10:26,017 [salt.cli.daemons :82  ][INFO    ][6180] Starting up the Salt Minion
2018-09-01 22:10:26,018 [salt.utils.event :1017][INFO    ][6180] Starting pull socket on /var/run/salt/minion/minion_event_5df6a4616f_pull.ipc
2018-09-01 22:10:26,773 [salt.minion      :976 ][INFO    ][6180] Creating minion process manager
2018-09-01 22:10:28,259 [salt.loader.192.168.11.2.int.module.cmdmod:395 ][INFO    ][6180] Executing command ['date', '+%z'] in directory '/root'
2018-09-01 22:10:28,286 [salt.utils.schedule:568 ][INFO    ][6180] Updating job settings for scheduled job: __mine_interval
2018-09-01 22:10:28,294 [salt.minion      :1107][INFO    ][6180] Added mine.update to scheduler
2018-09-01 22:10:28,308 [salt.minion      :1965][INFO    ][6180] Minion is starting as user 'root'
2018-09-01 22:10:28,893 [salt.minion      :2324][INFO    ][6180] Minion is ready to receive requests!
2018-09-01 22:10:29,885 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901221029878664
2018-09-01 22:10:29,935 [salt.minion      :1431][INFO    ][6271] Starting a new job with PID 6271
2018-09-01 22:10:29,953 [salt.minion      :1708][INFO    ][6271] Returning information for job: 20180901221029878664
2018-09-01 22:10:38,054 [salt.utils.decorators:613 ][WARNING ][6161] The function "module.run" is using its deprecated version and will expire in version "Sodium".
2018-09-01 22:10:39,929 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901221039915966
2018-09-01 22:10:40,205 [salt.minion      :1431][INFO    ][7134] Starting a new job with PID 7134
2018-09-01 22:10:40,218 [salt.minion      :1708][INFO    ][7134] Returning information for job: 20180901221039915966
2018-09-01 22:10:49,989 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901221049974773
2018-09-01 22:10:50,012 [salt.minion      :1431][INFO    ][7246] Starting a new job with PID 7246
2018-09-01 22:10:50,028 [salt.minion      :1708][INFO    ][7246] Returning information for job: 20180901221049974773
2018-09-01 22:11:00,042 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901221100027387
2018-09-01 22:11:00,067 [salt.minion      :1431][INFO    ][7582] Starting a new job with PID 7582
2018-09-01 22:11:00,097 [salt.minion      :1708][INFO    ][7582] Returning information for job: 20180901221100027387
2018-09-01 22:11:10,151 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901221110138402
2018-09-01 22:11:10,175 [salt.minion      :1431][INFO    ][8338] Starting a new job with PID 8338
2018-09-01 22:11:10,193 [salt.minion      :1708][INFO    ][8338] Returning information for job: 20180901221110138402
2018-09-01 22:11:18,886 [salt.utils.decorators:613 ][WARNING ][6161] The function "module.run" is using its deprecated version and will expire in version "Sodium".
2018-09-01 22:11:20,912 [salt.loaded.int.module.debian_ip:1970][WARNING ][6161] The network state sls is requiring a reboot of the system to properly apply network configuration.
2018-09-01 22:11:20,960 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901221120415125
2018-09-01 22:11:20,977 [salt.minion      :1431][INFO    ][8938] Starting a new job with PID 8938
2018-09-01 22:11:20,992 [salt.minion      :1708][INFO    ][8938] Returning information for job: 20180901221120415125
2018-09-01 22:11:41,107 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command ssh.set_auth_key with jid 20180901221141092238
2018-09-01 22:11:41,131 [salt.minion      :1431][INFO    ][9982] Starting a new job with PID 9982
2018-09-01 22:11:41,149 [salt.minion      :1708][INFO    ][9982] Returning information for job: 20180901221141092238
2018-09-01 22:12:24,144 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command pkg.upgrade with jid 20180901221224128382
2018-09-01 22:12:24,166 [salt.minion      :1431][INFO    ][9997] Starting a new job with PID 9997
2018-09-01 22:12:24,230 [salt.loader.192.168.11.2.int.module.cmdmod:395 ][INFO    ][9997] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:12:24,628 [salt.loader.192.168.11.2.int.module.cmdmod:395 ][INFO    ][9997] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'dist-upgrade'] in directory '/root'
2018-09-01 22:12:29,256 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901221229236054
2018-09-01 22:12:29,509 [salt.minion      :1431][INFO    ][10028] Starting a new job with PID 10028
2018-09-01 22:12:29,532 [salt.minion      :1708][INFO    ][10028] Returning information for job: 20180901221229236054
2018-09-01 22:12:39,429 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901221239411245
2018-09-01 22:12:39,449 [salt.minion      :1431][INFO    ][10092] Starting a new job with PID 10092
2018-09-01 22:12:39,469 [salt.minion      :1708][INFO    ][10092] Returning information for job: 20180901221239411245
2018-09-01 22:12:49,554 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901221249539023
2018-09-01 22:12:49,576 [salt.minion      :1431][INFO    ][10140] Starting a new job with PID 10140
2018-09-01 22:12:50,388 [salt.minion      :1708][INFO    ][10140] Returning information for job: 20180901221249539023
2018-09-01 22:12:59,763 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901221259747836
2018-09-01 22:12:59,783 [salt.minion      :1431][INFO    ][10197] Starting a new job with PID 10197
2018-09-01 22:12:59,802 [salt.minion      :1708][INFO    ][10197] Returning information for job: 20180901221259747836
2018-09-01 22:13:09,879 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901221309862012
2018-09-01 22:13:09,900 [salt.minion      :1431][INFO    ][10296] Starting a new job with PID 10296
2018-09-01 22:13:09,921 [salt.minion      :1708][INFO    ][10296] Returning information for job: 20180901221309862012
2018-09-01 22:13:20,062 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901221320047537
2018-09-01 22:13:20,087 [salt.minion      :1431][INFO    ][10402] Starting a new job with PID 10402
2018-09-01 22:13:20,119 [salt.minion      :1708][INFO    ][10402] Returning information for job: 20180901221320047537
2018-09-01 22:13:30,237 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901221330220870
2018-09-01 22:13:30,258 [salt.minion      :1431][INFO    ][10513] Starting a new job with PID 10513
2018-09-01 22:13:30,292 [salt.minion      :1708][INFO    ][10513] Returning information for job: 20180901221330220870
2018-09-01 22:13:40,368 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901221340351888
2018-09-01 22:13:40,385 [salt.minion      :1431][INFO    ][10623] Starting a new job with PID 10623
2018-09-01 22:13:40,404 [salt.minion      :1708][INFO    ][10623] Returning information for job: 20180901221340351888
2018-09-01 22:13:50,441 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901221350425072
2018-09-01 22:13:50,459 [salt.minion      :1431][INFO    ][10837] Starting a new job with PID 10837
2018-09-01 22:13:50,497 [salt.minion      :1708][INFO    ][10837] Returning information for job: 20180901221350425072
2018-09-01 22:14:00,581 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901221400565809
2018-09-01 22:14:00,601 [salt.minion      :1431][INFO    ][11522] Starting a new job with PID 11522
2018-09-01 22:14:00,620 [salt.minion      :1708][INFO    ][11522] Returning information for job: 20180901221400565809
2018-09-01 22:14:10,665 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901221410651093
2018-09-01 22:14:10,690 [salt.minion      :1431][INFO    ][11820] Starting a new job with PID 11820
2018-09-01 22:14:10,753 [salt.minion      :1708][INFO    ][11820] Returning information for job: 20180901221410651093
2018-09-01 22:14:14,669 [salt.loader.192.168.11.2.int.module.cmdmod:395 ][INFO    ][9997] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:14:14,713 [salt.minion      :1708][INFO    ][9997] Returning information for job: 20180901221224128382
2018-09-01 22:14:41,400 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command test.ping with jid 20180901221441389573
2018-09-01 22:14:41,421 [salt.minion      :1431][INFO    ][11969] Starting a new job with PID 11969
2018-09-01 22:14:41,441 [salt.minion      :1708][INFO    ][11969] Returning information for job: 20180901221441389573
2018-09-01 22:17:37,535 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command state.sls with jid 20180901221737527630
2018-09-01 22:17:37,558 [salt.minion      :1431][INFO    ][11992] Starting a new job with PID 11992
2018-09-01 22:17:41,460 [salt.state       :905 ][INFO    ][11992] Loading fresh modules for state activity
2018-09-01 22:17:41,501 [salt.fileclient  :1215][INFO    ][11992] Fetching file from saltenv 'base', ** done ** 'keepalived/init.sls'
2018-09-01 22:17:41,526 [salt.fileclient  :1215][INFO    ][11992] Fetching file from saltenv 'base', ** done ** 'keepalived/cluster.sls'
2018-09-01 22:17:42,266 [salt.state       :1770][INFO    ][11992] Running state [keepalived] at time 22:17:42.266525
2018-09-01 22:17:42,266 [salt.state       :1803][INFO    ][11992] Executing state pkg.installed for [keepalived]
2018-09-01 22:17:42,267 [salt.loaded.int.module.cmdmod:395 ][INFO    ][11992] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:17:42,603 [salt.loaded.int.module.cmdmod:395 ][INFO    ][11992] Executing command ['apt-cache', '-q', 'policy', 'keepalived'] in directory '/root'
2018-09-01 22:17:42,611 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901221742596097
2018-09-01 22:17:42,642 [salt.minion      :1431][INFO    ][12010] Starting a new job with PID 12010
2018-09-01 22:17:42,690 [salt.minion      :1708][INFO    ][12010] Returning information for job: 20180901221742596097
2018-09-01 22:17:42,743 [salt.loaded.int.module.cmdmod:395 ][INFO    ][11992] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-09-01 22:17:44,621 [salt.loaded.int.module.cmdmod:395 ][INFO    ][11992] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 22:17:44,651 [salt.loaded.int.module.cmdmod:395 ][INFO    ][11992] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'keepalived'] in directory '/root'
2018-09-01 22:17:52,245 [salt.loaded.int.module.cmdmod:395 ][INFO    ][11992] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:17:52,289 [salt.state       :290 ][INFO    ][11992] Made the following changes:
'libsnmp30' changed from 'absent' to '5.7.3+dfsg-1ubuntu4.1'
'libsensors4' changed from 'absent' to '1:3.4.0-2'
'libsnmp-base' changed from 'absent' to '5.7.3+dfsg-1ubuntu4.1'
'keepalived' changed from 'absent' to '1:1.3.9-1ubuntu0.18.04.1~cloud0'
'ipvsadm' changed from 'absent' to '1:1.28-3'
'libnl-route-3-200' changed from 'absent' to '3.2.27-1ubuntu0.16.04.1'

2018-09-01 22:17:52,308 [salt.state       :905 ][INFO    ][11992] Loading fresh modules for state activity
2018-09-01 22:17:52,332 [salt.state       :1941][INFO    ][11992] Completed state [keepalived] at time 22:17:52.331958 duration_in_ms=10065.433
2018-09-01 22:17:52,335 [salt.state       :1770][INFO    ][11992] Running state [lsof] at time 22:17:52.335915
2018-09-01 22:17:52,336 [salt.state       :1803][INFO    ][11992] Executing state pkg.installed for [lsof]
2018-09-01 22:17:52,825 [salt.state       :290 ][INFO    ][11992] All specified packages are already installed
2018-09-01 22:17:52,825 [salt.state       :1941][INFO    ][11992] Completed state [lsof] at time 22:17:52.825840 duration_in_ms=489.924
2018-09-01 22:17:52,828 [salt.state       :1770][INFO    ][11992] Running state [/etc/keepalived/keepalived.conf] at time 22:17:52.828449
2018-09-01 22:17:52,828 [salt.state       :1803][INFO    ][11992] Executing state file.managed for [/etc/keepalived/keepalived.conf]
2018-09-01 22:17:52,849 [salt.fileclient  :1215][INFO    ][11992] Fetching file from saltenv 'base', ** done ** 'keepalived/files/keepalived.conf'
2018-09-01 22:17:52,884 [salt.state       :290 ][INFO    ][11992] File changed:
New file
2018-09-01 22:17:52,884 [salt.state       :1941][INFO    ][11992] Completed state [/etc/keepalived/keepalived.conf] at time 22:17:52.884746 duration_in_ms=56.296
2018-09-01 22:17:52,885 [salt.state       :1770][INFO    ][11992] Running state [keepalived] at time 22:17:52.885630
2018-09-01 22:17:52,886 [salt.state       :1803][INFO    ][11992] Executing state service.running for [keepalived]
2018-09-01 22:17:52,886 [salt.loaded.int.module.cmdmod:395 ][INFO    ][11992] Executing command ['systemctl', 'status', 'keepalived.service', '-n', '0'] in directory '/root'
2018-09-01 22:17:52,904 [salt.loaded.int.module.cmdmod:395 ][INFO    ][11992] Executing command ['systemctl', 'is-active', 'keepalived.service'] in directory '/root'
2018-09-01 22:17:52,923 [salt.loaded.int.module.cmdmod:395 ][INFO    ][11992] Executing command ['systemctl', 'is-enabled', 'keepalived.service'] in directory '/root'
2018-09-01 22:17:52,941 [salt.loaded.int.module.cmdmod:395 ][INFO    ][11992] Executing command ['systemd-run', '--scope', 'systemctl', 'start', 'keepalived.service'] in directory '/root'
2018-09-01 22:17:53,021 [salt.loaded.int.module.cmdmod:395 ][INFO    ][11992] Executing command ['systemctl', 'is-active', 'keepalived.service'] in directory '/root'
2018-09-01 22:17:53,037 [salt.loaded.int.module.cmdmod:395 ][INFO    ][11992] Executing command ['systemctl', 'is-enabled', 'keepalived.service'] in directory '/root'
2018-09-01 22:17:53,038 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901221752780470
2018-09-01 22:17:53,052 [salt.minion      :1431][INFO    ][13368] Starting a new job with PID 13368
2018-09-01 22:17:53,058 [salt.loaded.int.module.cmdmod:395 ][INFO    ][11992] Executing command ['systemctl', 'is-enabled', 'keepalived.service'] in directory '/root'
2018-09-01 22:17:53,071 [salt.minion      :1708][INFO    ][13368] Returning information for job: 20180901221752780470
2018-09-01 22:17:53,074 [salt.state       :290 ][INFO    ][11992] {'keepalived': True}
2018-09-01 22:17:53,074 [salt.state       :1941][INFO    ][11992] Completed state [keepalived] at time 22:17:53.074509 duration_in_ms=188.878
2018-09-01 22:17:53,076 [salt.minion      :1708][INFO    ][11992] Returning information for job: 20180901221737527630
2018-09-01 22:18:48,626 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command pillar.get with jid 20180901221848613405
2018-09-01 22:18:48,654 [salt.minion      :1431][INFO    ][13382] Starting a new job with PID 13382
2018-09-01 22:18:48,660 [salt.minion      :1708][INFO    ][13382] Returning information for job: 20180901221848613405
2018-09-01 22:25:25,794 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command state.sls with jid 20180901222525788292
2018-09-01 22:25:25,817 [salt.minion      :1431][INFO    ][13425] Starting a new job with PID 13425
2018-09-01 22:25:26,517 [salt.state       :905 ][INFO    ][13425] Loading fresh modules for state activity
2018-09-01 22:25:26,986 [salt.fileclient  :1215][INFO    ][13425] Fetching file from saltenv 'base', ** done ** 'glusterfs/client.sls'
2018-09-01 22:25:27,020 [salt.fileclient  :1215][INFO    ][13425] Fetching file from saltenv 'base', ** done ** 'glusterfs/map.jinja'
2018-09-01 22:25:27,041 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:25:27,400 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command 'systemd-escape -p --suffix=mount /var/lib/glance/images' in directory '/root'
2018-09-01 22:25:27,421 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command 'systemd-escape -p --suffix=mount /var/lib/keystone/fernet-keys' in directory '/root'
2018-09-01 22:25:27,438 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command 'systemd-escape -p --suffix=mount /var/lib/keystone/credential-keys' in directory '/root'
2018-09-01 22:25:28,144 [salt.state       :1770][INFO    ][13425] Running state [glusterfs-client] at time 22:25:28.144576
2018-09-01 22:25:28,144 [salt.state       :1803][INFO    ][13425] Executing state pkg.installed for [glusterfs-client]
2018-09-01 22:25:28,160 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['apt-cache', '-q', 'policy', 'glusterfs-client'] in directory '/root'
2018-09-01 22:25:28,243 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-09-01 22:25:30,040 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 22:25:30,064 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'glusterfs-client'] in directory '/root'
2018-09-01 22:25:30,866 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901222530858198
2018-09-01 22:25:30,888 [salt.minion      :1431][INFO    ][13859] Starting a new job with PID 13859
2018-09-01 22:25:30,908 [salt.minion      :1708][INFO    ][13859] Returning information for job: 20180901222530858198
2018-09-01 22:25:36,057 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:25:36,106 [salt.state       :290 ][INFO    ][13425] Made the following changes:
'glusterfs-client' changed from 'absent' to '3.13.2-ubuntu1~xenial2'
'libaio1' changed from 'absent' to '0.3.110-2'
'attr' changed from 'absent' to '1:2.4.47-2'
'libpython2.7' changed from 'absent' to '2.7.12-1ubuntu0~16.04.3'
'glusterfs-common' changed from 'absent' to '3.13.2-ubuntu1~xenial2'
'librdmacm1' changed from 'absent' to '1.0.21-1'
'liburcu4' changed from 'absent' to '0.9.1-3'
'libibverbs1' changed from 'absent' to '1.1.8-1.1ubuntu2'

2018-09-01 22:25:36,131 [salt.state       :905 ][INFO    ][13425] Loading fresh modules for state activity
2018-09-01 22:25:36,155 [salt.state       :1941][INFO    ][13425] Completed state [glusterfs-client] at time 22:25:36.155344 duration_in_ms=8010.768
2018-09-01 22:25:36,159 [salt.state       :1770][INFO    ][13425] Running state [attr] at time 22:25:36.159544
2018-09-01 22:25:36,159 [salt.state       :1803][INFO    ][13425] Executing state pkg.installed for [attr]
2018-09-01 22:25:36,638 [salt.state       :290 ][INFO    ][13425] All specified packages are already installed
2018-09-01 22:25:36,639 [salt.state       :1941][INFO    ][13425] Completed state [attr] at time 22:25:36.639443 duration_in_ms=479.896
2018-09-01 22:25:36,642 [salt.state       :1770][INFO    ][13425] Running state [/etc/systemd/system/var-lib-glance-images.mount] at time 22:25:36.642384
2018-09-01 22:25:36,642 [salt.state       :1803][INFO    ][13425] Executing state file.managed for [/etc/systemd/system/var-lib-glance-images.mount]
2018-09-01 22:25:36,665 [salt.fileclient  :1215][INFO    ][13425] Fetching file from saltenv 'base', ** done ** 'glusterfs/files/glusterfs-client.mount'
2018-09-01 22:25:36,676 [salt.state       :290 ][INFO    ][13425] File changed:
New file
2018-09-01 22:25:36,676 [salt.state       :1941][INFO    ][13425] Completed state [/etc/systemd/system/var-lib-glance-images.mount] at time 22:25:36.676695 duration_in_ms=34.311
2018-09-01 22:25:36,678 [salt.state       :1770][INFO    ][13425] Running state [var-lib-glance-images.mount] at time 22:25:36.678210
2018-09-01 22:25:36,678 [salt.state       :1803][INFO    ][13425] Executing state service.running for [var-lib-glance-images.mount]
2018-09-01 22:25:36,679 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemctl', 'status', 'var-lib-glance-images.mount', '-n', '0'] in directory '/root'
2018-09-01 22:25:36,713 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemctl', 'is-active', 'var-lib-glance-images.mount'] in directory '/root'
2018-09-01 22:25:36,739 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemctl', 'is-enabled', 'var-lib-glance-images.mount'] in directory '/root'
2018-09-01 22:25:36,767 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemd-run', '--scope', 'systemctl', 'start', 'var-lib-glance-images.mount'] in directory '/root'
2018-09-01 22:25:36,856 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemctl', 'is-active', 'var-lib-glance-images.mount'] in directory '/root'
2018-09-01 22:25:36,884 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemctl', 'is-enabled', 'var-lib-glance-images.mount'] in directory '/root'
2018-09-01 22:25:36,907 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemctl', 'is-enabled', 'var-lib-glance-images.mount'] in directory '/root'
2018-09-01 22:25:36,933 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemd-run', '--scope', 'systemctl', 'enable', 'var-lib-glance-images.mount'] in directory '/root'
2018-09-01 22:25:37,055 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemctl', 'is-enabled', 'var-lib-glance-images.mount'] in directory '/root'
2018-09-01 22:25:37,077 [salt.state       :290 ][INFO    ][13425] {'var-lib-glance-images.mount': True}
2018-09-01 22:25:37,078 [salt.state       :1941][INFO    ][13425] Completed state [var-lib-glance-images.mount] at time 22:25:37.078573 duration_in_ms=400.362
2018-09-01 22:25:37,079 [salt.state       :1770][INFO    ][13425] Running state [/var/lib/glance/images] at time 22:25:37.079938
2018-09-01 22:25:37,080 [salt.state       :1803][INFO    ][13425] Executing state file.directory for [/var/lib/glance/images]
2018-09-01 22:25:37,084 [salt.state       :290 ][INFO    ][13425] {'group': 'glance', 'user': 'glance'}
2018-09-01 22:25:37,085 [salt.state       :1941][INFO    ][13425] Completed state [/var/lib/glance/images] at time 22:25:37.085296 duration_in_ms=5.357
2018-09-01 22:25:37,086 [salt.state       :1770][INFO    ][13425] Running state [/etc/systemd/system/var-lib-keystone-fernet\x2dkeys.mount] at time 22:25:37.086022
2018-09-01 22:25:37,086 [salt.state       :1803][INFO    ][13425] Executing state file.managed for [/etc/systemd/system/var-lib-keystone-fernet\x2dkeys.mount]
2018-09-01 22:25:37,112 [salt.state       :290 ][INFO    ][13425] File changed:
New file
2018-09-01 22:25:37,113 [salt.state       :1941][INFO    ][13425] Completed state [/etc/systemd/system/var-lib-keystone-fernet\x2dkeys.mount] at time 22:25:37.113509 duration_in_ms=27.488
2018-09-01 22:25:37,114 [salt.state       :1770][INFO    ][13425] Running state [var-lib-keystone-fernet\x2dkeys.mount] at time 22:25:37.114306
2018-09-01 22:25:37,114 [salt.state       :1803][INFO    ][13425] Executing state service.running for [var-lib-keystone-fernet\x2dkeys.mount]
2018-09-01 22:25:37,115 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemctl', 'status', 'var-lib-keystone-fernet\\x2dkeys.mount', '-n', '0'] in directory '/root'
2018-09-01 22:25:37,141 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemctl', 'is-active', 'var-lib-keystone-fernet\\x2dkeys.mount'] in directory '/root'
2018-09-01 22:25:37,171 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemctl', 'is-enabled', 'var-lib-keystone-fernet\\x2dkeys.mount'] in directory '/root'
2018-09-01 22:25:37,204 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemd-run', '--scope', 'systemctl', 'start', 'var-lib-keystone-fernet\\x2dkeys.mount'] in directory '/root'
2018-09-01 22:25:37,309 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemctl', 'is-active', 'var-lib-keystone-fernet\\x2dkeys.mount'] in directory '/root'
2018-09-01 22:25:37,333 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemctl', 'is-enabled', 'var-lib-keystone-fernet\\x2dkeys.mount'] in directory '/root'
2018-09-01 22:25:37,358 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemctl', 'is-enabled', 'var-lib-keystone-fernet\\x2dkeys.mount'] in directory '/root'
2018-09-01 22:25:37,396 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemd-run', '--scope', 'systemctl', 'enable', 'var-lib-keystone-fernet\\x2dkeys.mount'] in directory '/root'
2018-09-01 22:25:37,504 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemctl', 'is-enabled', 'var-lib-keystone-fernet\\x2dkeys.mount'] in directory '/root'
2018-09-01 22:25:37,526 [salt.state       :290 ][INFO    ][13425] {'var-lib-keystone-fernet\\x2dkeys.mount': True}
2018-09-01 22:25:37,527 [salt.state       :1941][INFO    ][13425] Completed state [var-lib-keystone-fernet\x2dkeys.mount] at time 22:25:37.527576 duration_in_ms=413.269
2018-09-01 22:25:37,529 [salt.state       :1770][INFO    ][13425] Running state [/var/lib/keystone/fernet-keys] at time 22:25:37.529395
2018-09-01 22:25:37,530 [salt.state       :1803][INFO    ][13425] Executing state file.directory for [/var/lib/keystone/fernet-keys]
2018-09-01 22:25:37,534 [salt.state       :290 ][INFO    ][13425] {'group': 'keystone', 'mode': '0750', 'user': 'keystone'}
2018-09-01 22:25:37,535 [salt.state       :1941][INFO    ][13425] Completed state [/var/lib/keystone/fernet-keys] at time 22:25:37.534996 duration_in_ms=5.602
2018-09-01 22:25:37,535 [salt.state       :1770][INFO    ][13425] Running state [/etc/systemd/system/var-lib-keystone-credential\x2dkeys.mount] at time 22:25:37.535331
2018-09-01 22:25:37,535 [salt.state       :1803][INFO    ][13425] Executing state file.managed for [/etc/systemd/system/var-lib-keystone-credential\x2dkeys.mount]
2018-09-01 22:25:37,560 [salt.state       :290 ][INFO    ][13425] File changed:
New file
2018-09-01 22:25:37,560 [salt.state       :1941][INFO    ][13425] Completed state [/etc/systemd/system/var-lib-keystone-credential\x2dkeys.mount] at time 22:25:37.560700 duration_in_ms=25.37
2018-09-01 22:25:37,561 [salt.state       :1770][INFO    ][13425] Running state [var-lib-keystone-credential\x2dkeys.mount] at time 22:25:37.561273
2018-09-01 22:25:37,561 [salt.state       :1803][INFO    ][13425] Executing state service.running for [var-lib-keystone-credential\x2dkeys.mount]
2018-09-01 22:25:37,562 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemctl', 'status', 'var-lib-keystone-credential\\x2dkeys.mount', '-n', '0'] in directory '/root'
2018-09-01 22:25:37,582 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemctl', 'is-active', 'var-lib-keystone-credential\\x2dkeys.mount'] in directory '/root'
2018-09-01 22:25:37,597 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemctl', 'is-enabled', 'var-lib-keystone-credential\\x2dkeys.mount'] in directory '/root'
2018-09-01 22:25:37,615 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemd-run', '--scope', 'systemctl', 'start', 'var-lib-keystone-credential\\x2dkeys.mount'] in directory '/root'
2018-09-01 22:25:37,722 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemctl', 'is-active', 'var-lib-keystone-credential\\x2dkeys.mount'] in directory '/root'
2018-09-01 22:25:37,740 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemctl', 'is-enabled', 'var-lib-keystone-credential\\x2dkeys.mount'] in directory '/root'
2018-09-01 22:25:37,772 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemctl', 'is-enabled', 'var-lib-keystone-credential\\x2dkeys.mount'] in directory '/root'
2018-09-01 22:25:37,806 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemd-run', '--scope', 'systemctl', 'enable', 'var-lib-keystone-credential\\x2dkeys.mount'] in directory '/root'
2018-09-01 22:25:37,913 [salt.loaded.int.module.cmdmod:395 ][INFO    ][13425] Executing command ['systemctl', 'is-enabled', 'var-lib-keystone-credential\\x2dkeys.mount'] in directory '/root'
2018-09-01 22:25:37,927 [salt.state       :290 ][INFO    ][13425] {'var-lib-keystone-credential\\x2dkeys.mount': True}
2018-09-01 22:25:37,927 [salt.state       :1941][INFO    ][13425] Completed state [var-lib-keystone-credential\x2dkeys.mount] at time 22:25:37.927440 duration_in_ms=366.166
2018-09-01 22:25:37,928 [salt.state       :1770][INFO    ][13425] Running state [/var/lib/keystone/credential-keys] at time 22:25:37.928256
2018-09-01 22:25:37,928 [salt.state       :1803][INFO    ][13425] Executing state file.directory for [/var/lib/keystone/credential-keys]
2018-09-01 22:25:37,931 [salt.state       :290 ][INFO    ][13425] {'group': 'keystone', 'user': 'keystone'}
2018-09-01 22:25:37,932 [salt.state       :1941][INFO    ][13425] Completed state [/var/lib/keystone/credential-keys] at time 22:25:37.932373 duration_in_ms=4.116
2018-09-01 22:25:37,935 [salt.minion      :1708][INFO    ][13425] Returning information for job: 20180901222525788292
2018-09-01 22:31:13,381 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command state.sls with jid 20180901223113386300
2018-09-01 22:31:13,403 [salt.minion      :1431][INFO    ][14985] Starting a new job with PID 14985
2018-09-01 22:31:18,488 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901223118491130
2018-09-01 22:31:18,508 [salt.minion      :1431][INFO    ][14992] Starting a new job with PID 14992
2018-09-01 22:31:18,526 [salt.minion      :1708][INFO    ][14992] Returning information for job: 20180901223118491130
2018-09-01 22:31:19,287 [salt.state       :905 ][INFO    ][14985] Loading fresh modules for state activity
2018-09-01 22:31:19,427 [salt.fileclient  :1215][INFO    ][14985] Fetching file from saltenv 'base', ** done ** 'memcached/init.sls'
2018-09-01 22:31:20,095 [salt.fileclient  :1215][INFO    ][14985] Fetching file from saltenv 'base', ** done ** 'memcached/server.sls'
2018-09-01 22:31:20,124 [salt.fileclient  :1215][INFO    ][14985] Fetching file from saltenv 'base', ** done ** 'memcached/map.jinja'
2018-09-01 22:31:20,836 [salt.state       :1770][INFO    ][14985] Running state [memcached] at time 22:31:20.836161
2018-09-01 22:31:20,836 [salt.state       :1803][INFO    ][14985] Executing state pkg.installed for [memcached]
2018-09-01 22:31:20,837 [salt.loaded.int.module.cmdmod:395 ][INFO    ][14985] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:31:21,161 [salt.loaded.int.module.cmdmod:395 ][INFO    ][14985] Executing command ['apt-cache', '-q', 'policy', 'memcached'] in directory '/root'
2018-09-01 22:31:21,267 [salt.loaded.int.module.cmdmod:395 ][INFO    ][14985] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-09-01 22:31:23,217 [salt.loaded.int.module.cmdmod:395 ][INFO    ][14985] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 22:31:23,241 [salt.loaded.int.module.cmdmod:395 ][INFO    ][14985] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'memcached'] in directory '/root'
2018-09-01 22:31:27,832 [salt.loaded.int.module.cmdmod:395 ][INFO    ][14985] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:31:27,868 [salt.state       :290 ][INFO    ][14985] Made the following changes:
'memcached' changed from 'absent' to '1.4.25-2ubuntu1.4'

2018-09-01 22:31:27,886 [salt.state       :905 ][INFO    ][14985] Loading fresh modules for state activity
2018-09-01 22:31:27,908 [salt.state       :1941][INFO    ][14985] Completed state [memcached] at time 22:31:27.908443 duration_in_ms=7072.283
2018-09-01 22:31:27,912 [salt.state       :1770][INFO    ][14985] Running state [python-memcache] at time 22:31:27.912204
2018-09-01 22:31:27,912 [salt.state       :1803][INFO    ][14985] Executing state pkg.installed for [python-memcache]
2018-09-01 22:31:28,422 [salt.loaded.int.module.cmdmod:395 ][INFO    ][14985] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 22:31:28,449 [salt.loaded.int.module.cmdmod:395 ][INFO    ][14985] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'python-memcache'] in directory '/root'
2018-09-01 22:31:28,652 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901223128656973
2018-09-01 22:31:28,671 [salt.minion      :1431][INFO    ][15858] Starting a new job with PID 15858
2018-09-01 22:31:28,691 [salt.minion      :1708][INFO    ][15858] Returning information for job: 20180901223128656973
2018-09-01 22:31:30,827 [salt.loaded.int.module.cmdmod:395 ][INFO    ][14985] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:31:30,869 [salt.state       :290 ][INFO    ][14985] Made the following changes:
'python-memcache' changed from 'absent' to '1.57+fixed-1~u16.04+mcp1'

2018-09-01 22:31:30,887 [salt.state       :905 ][INFO    ][14985] Loading fresh modules for state activity
2018-09-01 22:31:30,912 [salt.state       :1941][INFO    ][14985] Completed state [python-memcache] at time 22:31:30.912226 duration_in_ms=3000.022
2018-09-01 22:31:30,915 [salt.state       :1770][INFO    ][14985] Running state [/etc/memcached.conf] at time 22:31:30.915776
2018-09-01 22:31:30,916 [salt.state       :1803][INFO    ][14985] Executing state file.managed for [/etc/memcached.conf]
2018-09-01 22:31:30,937 [salt.fileclient  :1215][INFO    ][14985] Fetching file from saltenv 'base', ** done ** 'memcached/files/memcached.conf'
2018-09-01 22:31:30,961 [salt.state       :290 ][INFO    ][14985] File changed:
--- 
+++ 
@@ -1,11 +1,10 @@
+
 # memcached default config file
 # 2003 - Jay Bonci <jaybonci@debian.org>
-# This configuration file is read by the start-memcached script provided as
-# part of the Debian GNU/Linux distribution.
+# This configuration file is read by the start-memcached script provided as part of the Debian GNU/Linux distribution. 
 
 # Run memcached as a daemon. This command is implied, and is not needed for the
-# daemon to run. See the README.Debian that comes with this package for more
-# information.
+# daemon to run. See the README.Debian that comes with this package for more information.
 -d
 
 # Log memcached's output to /var/log/memcached
@@ -18,13 +17,13 @@
 # -vv
 
 # Start with a cap of 64 megs of memory. It's reasonable, and the daemon default
-# Note that the daemon will grow to this size, but does not start out holding this much
-# memory
+# Note that the daemon will grow to this size, but does not start out holding this much memory
 -m 64
 
 # Default connection port is 11211
 -p 11211
 
+-U 11211
 # Run the daemon as root. The start-memcached will default to running as root if no
 # -u command is present in this config file
 -u memcache
@@ -32,10 +31,12 @@
 # Specify which IP address to listen on. The default is to listen on all IP addresses
 # This parameter is one of the only security measures that memcached has, so make sure
 # it's listening on a firewalled interface.
--l 127.0.0.1
+-l 0.0.0.0
 
 # Limit the number of simultaneous incoming connections. The daemon default is 1024
 # -c 1024
+# Mirantis
+-c 8192
 
 # Lock down all paged memory. Consult with the README and homepage before you do this
 # -k
@@ -45,3 +46,9 @@
 
 # Maximize core file limit
 # -r
+
+# Number of threads to use to process incoming requests.
+-t 1
+
+# Set size of each slab page. Default value for this parameter is 1m, minimum is 1k, max is 128m.
+-I 1m

2018-09-01 22:31:30,962 [salt.state       :1941][INFO    ][14985] Completed state [/etc/memcached.conf] at time 22:31:30.962014 duration_in_ms=46.237
2018-09-01 22:31:31,304 [salt.state       :1770][INFO    ][14985] Running state [memcached] at time 22:31:31.304041
2018-09-01 22:31:31,304 [salt.state       :1803][INFO    ][14985] Executing state service.running for [memcached]
2018-09-01 22:31:31,304 [salt.loaded.int.module.cmdmod:395 ][INFO    ][14985] Executing command ['systemctl', 'status', 'memcached.service', '-n', '0'] in directory '/root'
2018-09-01 22:31:31,330 [salt.loaded.int.module.cmdmod:395 ][INFO    ][14985] Executing command ['systemctl', 'is-active', 'memcached.service'] in directory '/root'
2018-09-01 22:31:31,346 [salt.loaded.int.module.cmdmod:395 ][INFO    ][14985] Executing command ['systemctl', 'is-enabled', 'memcached.service'] in directory '/root'
2018-09-01 22:31:31,362 [salt.state       :290 ][INFO    ][14985] The service memcached is already running
2018-09-01 22:31:31,362 [salt.state       :1941][INFO    ][14985] Completed state [memcached] at time 22:31:31.362601 duration_in_ms=58.56
2018-09-01 22:31:31,362 [salt.state       :1770][INFO    ][14985] Running state [memcached] at time 22:31:31.362927
2018-09-01 22:31:31,363 [salt.state       :1803][INFO    ][14985] Executing state service.mod_watch for [memcached]
2018-09-01 22:31:31,364 [salt.loaded.int.module.cmdmod:395 ][INFO    ][14985] Executing command ['systemctl', 'is-active', 'memcached.service'] in directory '/root'
2018-09-01 22:31:31,388 [salt.loaded.int.module.cmdmod:395 ][INFO    ][14985] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'memcached.service'] in directory '/root'
2018-09-01 22:31:31,413 [salt.state       :290 ][INFO    ][14985] {'memcached': True}
2018-09-01 22:31:31,413 [salt.state       :1941][INFO    ][14985] Completed state [memcached] at time 22:31:31.413865 duration_in_ms=50.937
2018-09-01 22:31:31,415 [salt.minion      :1708][INFO    ][14985] Returning information for job: 20180901223113386300
2018-09-01 22:31:32,658 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command state.sls with jid 20180901223132664087
2018-09-01 22:31:32,683 [salt.minion      :1431][INFO    ][16027] Starting a new job with PID 16027
2018-09-01 22:31:33,972 [salt.state       :905 ][INFO    ][16027] Loading fresh modules for state activity
2018-09-01 22:31:34,343 [salt.fileclient  :1215][INFO    ][16027] Fetching file from saltenv 'base', ** done ** 'haproxy/init.sls'
2018-09-01 22:31:34,374 [salt.fileclient  :1215][INFO    ][16027] Fetching file from saltenv 'base', ** done ** 'haproxy/proxy.sls'
2018-09-01 22:31:35,173 [salt.state       :1770][INFO    ][16027] Running state [haproxy] at time 22:31:35.173408
2018-09-01 22:31:35,185 [salt.state       :1803][INFO    ][16027] Executing state pkg.installed for [haproxy]
2018-09-01 22:31:35,185 [salt.loaded.int.module.cmdmod:395 ][INFO    ][16027] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:31:35,550 [salt.loaded.int.module.cmdmod:395 ][INFO    ][16027] Executing command ['apt-cache', '-q', 'policy', 'haproxy'] in directory '/root'
2018-09-01 22:31:35,659 [salt.loaded.int.module.cmdmod:395 ][INFO    ][16027] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-09-01 22:31:37,528 [salt.loaded.int.module.cmdmod:395 ][INFO    ][16027] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 22:31:37,554 [salt.loaded.int.module.cmdmod:395 ][INFO    ][16027] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'haproxy'] in directory '/root'
2018-09-01 22:31:37,771 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901223137774468
2018-09-01 22:31:37,789 [salt.minion      :1431][INFO    ][16437] Starting a new job with PID 16437
2018-09-01 22:31:37,805 [salt.minion      :1708][INFO    ][16437] Returning information for job: 20180901223137774468
2018-09-01 22:31:45,762 [salt.loaded.int.module.cmdmod:395 ][INFO    ][16027] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:31:45,811 [salt.state       :290 ][INFO    ][16027] Made the following changes:
'haproxy' changed from 'absent' to '1.6.3-1ubuntu0.1'
'liblua5.3-0' changed from 'absent' to '5.3.1-1ubuntu2'

2018-09-01 22:31:45,837 [salt.state       :905 ][INFO    ][16027] Loading fresh modules for state activity
2018-09-01 22:31:45,859 [salt.state       :1941][INFO    ][16027] Completed state [haproxy] at time 22:31:45.859639 duration_in_ms=10686.231
2018-09-01 22:31:45,862 [salt.state       :1770][INFO    ][16027] Running state [/etc/default/haproxy] at time 22:31:45.862893
2018-09-01 22:31:45,863 [salt.state       :1803][INFO    ][16027] Executing state file.managed for [/etc/default/haproxy]
2018-09-01 22:31:45,883 [salt.fileclient  :1215][INFO    ][16027] Fetching file from saltenv 'base', ** done ** 'haproxy/files/haproxy.default'
2018-09-01 22:31:45,886 [salt.state       :290 ][INFO    ][16027] File changed:
--- 
+++ 
@@ -1,10 +1,5 @@
-# Defaults file for HAProxy
-#
-# This is sourced by both, the initscript and the systemd unit file, so do not
-# treat it as a shell script fragment.
 
-# Change the config file location if needed
-#CONFIG="/etc/haproxy/haproxy.cfg"
-
-# Add extra flags here, see haproxy(1) for a few options
+# Set ENABLED to 1 if you want the init script to start haproxy.
+ENABLED=1
+# Add extra flags here.
 #EXTRAOPTS="-de -m 16"

2018-09-01 22:31:45,886 [salt.state       :1941][INFO    ][16027] Completed state [/etc/default/haproxy] at time 22:31:45.886717 duration_in_ms=23.824
2018-09-01 22:31:45,887 [salt.state       :1770][INFO    ][16027] Running state [/etc/haproxy/haproxy.cfg] at time 22:31:45.887038
2018-09-01 22:31:45,887 [salt.state       :1803][INFO    ][16027] Executing state file.managed for [/etc/haproxy/haproxy.cfg]
2018-09-01 22:31:45,902 [salt.fileclient  :1215][INFO    ][16027] Fetching file from saltenv 'base', ** done ** 'haproxy/files/haproxy.cfg'
2018-09-01 22:31:46,024 [salt.state       :290 ][INFO    ][16027] File changed:
--- 
+++ 
@@ -1,35 +1,197 @@
 global
-	log /dev/log	local0
-	log /dev/log	local1 notice
-	chroot /var/lib/haproxy
-	stats socket /run/haproxy/admin.sock mode 660 level admin
-	stats timeout 30s
-	user haproxy
-	group haproxy
-	daemon
-
-	# Default SSL material locations
-	ca-base /etc/ssl/certs
-	crt-base /etc/ssl/private
-
-	# Default ciphers to use on SSL-enabled listening sockets.
-	# For more information, see ciphers(1SSL). This list is from:
-	#  https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
-	ssl-default-bind-ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
-	ssl-default-bind-options no-sslv3
+  log /dev/log  local0
+  log /dev/log  local1 notice
+  chroot /var/lib/haproxy
+  stats  socket /run/haproxy/admin.sock mode 660 level admin
+  stats timeout 30s
+  user  haproxy
+  group haproxy
+  daemon
+  pidfile  /var/run/haproxy.pid
+  spread-checks 4
+  tune.maxrewrite 1024
+  tune.bufsize 32768
+  maxconn  16000
+  # SSL options
+  ca-base /etc/haproxy/ssl
+  crt-base /etc/haproxy/ssl
+  tune.ssl.default-dh-param 2048
+  ssl-default-bind-ciphers ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS
+  ssl-default-bind-options no-sslv3 no-tls-tickets
+  ssl-default-server-ciphers ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS
+  ssl-default-server-options no-sslv3 no-tls-tickets
 
 defaults
-	log	global
-	mode	http
-	option	httplog
-	option	dontlognull
-        timeout connect 5000
-        timeout client  50000
-        timeout server  50000
-	errorfile 400 /etc/haproxy/errors/400.http
-	errorfile 403 /etc/haproxy/errors/403.http
-	errorfile 408 /etc/haproxy/errors/408.http
-	errorfile 500 /etc/haproxy/errors/500.http
-	errorfile 502 /etc/haproxy/errors/502.http
-	errorfile 503 /etc/haproxy/errors/503.http
-	errorfile 504 /etc/haproxy/errors/504.http
+  log  global
+  mode http
+
+  maxconn 8000
+  option  redispatch
+  retries  3
+  stats  enable
+
+  timeout http-request 10s
+  timeout queue 1m
+  timeout connect 10s
+  timeout client 1m
+  timeout server 1m
+  timeout check 10s
+
+listen keystone_public_api
+  bind 10.167.4.35:5000 
+  # NOTE(vsaienko): by default haproxy uses OPTIONS method when doing check
+  # This is not guaranteed by openstack APIs, change it to GET instead
+  option  httpchk GET /
+  option  httplog
+  option  httpclose
+  server ctl01 10.167.4.36:5000 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl02 10.167.4.37:5000 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl03 10.167.4.38:5000 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+
+listen nova_api
+  bind 10.167.4.35:8774 
+  # NOTE(vsaienko): by default haproxy uses OPTIONS method when doing check
+  # This is not guaranteed by openstack APIs, change it to GET instead
+  option  httpchk GET /
+  option  httplog
+  option  httpclose
+  server ctl01 10.167.4.36:8774 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl02 10.167.4.37:8774 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl03 10.167.4.38:8774 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+
+listen placement_api
+  bind 10.167.4.35:8778 
+  # NOTE(vsaienko): by default haproxy uses OPTIONS method when doing check
+  # This is not guaranteed by openstack APIs, change it to GET instead
+  option  httpchk GET /
+  option  httplog
+  option  httpclose
+  server ctl01 10.167.4.36:8778 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl02 10.167.4.37:8778 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl03 10.167.4.38:8778 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+
+listen keystone_admin_api
+  bind 10.167.4.35:35357 
+  # NOTE(vsaienko): by default haproxy uses OPTIONS method when doing check
+  # This is not guaranteed by openstack APIs, change it to GET instead
+  option  httpchk GET /
+  option  httplog
+  option  httpclose
+  server ctl01 10.167.4.36:35357 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl02 10.167.4.37:35357 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl03 10.167.4.38:35357 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+
+listen cinder_api
+  bind 10.167.4.35:8776 
+  # NOTE(vsaienko): by default haproxy uses OPTIONS method when doing check
+  # This is not guaranteed by openstack APIs, change it to GET instead
+  option  httpchk GET /
+  option  httplog
+  option  httpclose
+  server ctl01 10.167.4.36:8776 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl02 10.167.4.37:8776 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl03 10.167.4.38:8776 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+
+listen glance_registry_api
+  bind 10.167.4.35:9191 
+  mode http
+  balance roundrobin
+  option  httplog
+  server ctl01 10.167.4.36:9191 check
+  server ctl02 10.167.4.37:9191 check
+  server ctl03 10.167.4.38:9191 check
+
+listen heat_cfn_api
+  bind 10.167.4.35:8000 
+  # NOTE(vsaienko): by default haproxy uses OPTIONS method when doing check
+  # This is not guaranteed by openstack APIs, change it to GET instead
+  option  httpchk GET /
+  option  httplog
+  option  httpclose
+  server ctl01 10.167.4.36:8000 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl02 10.167.4.37:8000 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl03 10.167.4.38:8000 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+
+listen nova_novnc
+  bind 10.167.4.35:6080 
+  mode http
+  balance roundrobin
+  option  httplog
+  server ctl01 10.167.4.36:6080 check
+  server ctl02 10.167.4.37:6080 check
+  server ctl03 10.167.4.38:6080 check
+
+listen designate_api
+  bind 10.167.4.35:9001 
+  # NOTE(vsaienko): by default haproxy uses OPTIONS method when doing check
+  # This is not guaranteed by openstack APIs, change it to GET instead
+  option  httpchk GET /
+  option  httplog
+  option  httpclose
+  server ctl01 10.167.4.36:9001 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl02 10.167.4.37:9001 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+
+listen glance_api
+  bind 10.167.4.35:9292 
+  # NOTE(vsaienko): by default haproxy uses OPTIONS method when doing check
+  # This is not guaranteed by openstack APIs, change it to GET instead
+  option  httpchk GET /
+  option  httplog
+  option  httpclose
+  server ctl01 10.167.4.36:9292 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl02 10.167.4.37:9292 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl03 10.167.4.38:9292 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+
+listen heat_api
+  bind 10.167.4.35:8004 
+  # NOTE(vsaienko): by default haproxy uses OPTIONS method when doing check
+  # This is not guaranteed by openstack APIs, change it to GET instead
+  option  httpchk GET /
+  option  httplog
+  option  httpclose
+  server ctl01 10.167.4.36:8004 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl02 10.167.4.37:8004 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl03 10.167.4.38:8004 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+
+listen barbican-api
+  bind 10.167.4.35:9311 
+  # NOTE(vsaienko): by default haproxy uses OPTIONS method when doing check
+  # This is not guaranteed by openstack APIs, change it to GET instead
+  option  httpchk GET /
+  option  httplog
+  option  httpclose
+  server ctl01 10.167.4.36:9311 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl02 10.167.4.37:9311 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl03 10.167.4.38:9311 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+
+listen nova_metadata_api
+  bind 10.167.4.35:8775 
+  # NOTE(vsaienko): by default haproxy uses OPTIONS method when doing check
+  # This is not guaranteed by openstack APIs, change it to GET instead
+  option  httpchk GET /
+  option  httplog
+  option  httpclose
+  server ctl01 10.167.4.36:8775 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl02 10.167.4.37:8775 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl03 10.167.4.38:8775 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+
+listen barbican-admin-api
+  bind 10.167.4.35:9312 
+  # NOTE(vsaienko): by default haproxy uses OPTIONS method when doing check
+  # This is not guaranteed by openstack APIs, change it to GET instead
+  option  httpchk GET /
+  option  httplog
+  option  httpclose
+  server ctl01 10.167.4.36:9312 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl02 10.167.4.37:9312 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl03 10.167.4.38:9312 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+
+listen neutron_api
+  bind 10.167.4.35:9696 
+  balance  source
+  option tcpka
+  option httpchk
+  option tcplog
+  server ctl01 10.167.4.36:9696 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl02 10.167.4.37:9696 check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+  server ctl03 10.167.4.38:9696 check inter 10s fastinter 2s downinter 3s rise 3 fall 3

2018-09-01 22:31:46,024 [salt.state       :1941][INFO    ][16027] Completed state [/etc/haproxy/haproxy.cfg] at time 22:31:46.024930 duration_in_ms=137.891
2018-09-01 22:31:46,025 [salt.state       :1770][INFO    ][16027] Running state [/etc/haproxy/ssl] at time 22:31:46.025187
2018-09-01 22:31:46,025 [salt.state       :1803][INFO    ][16027] Executing state file.directory for [/etc/haproxy/ssl]
2018-09-01 22:31:46,026 [salt.state       :290 ][INFO    ][16027] {'/etc/haproxy/ssl': 'New Dir'}
2018-09-01 22:31:46,026 [salt.state       :1941][INFO    ][16027] Completed state [/etc/haproxy/ssl] at time 22:31:46.026683 duration_in_ms=1.495
2018-09-01 22:31:46,026 [salt.state       :1770][INFO    ][16027] Running state [/etc/haproxy/errors/429.http11] at time 22:31:46.026897
2018-09-01 22:31:46,027 [salt.state       :1803][INFO    ][16027] Executing state file.managed for [/etc/haproxy/errors/429.http11]
2018-09-01 22:31:46,039 [salt.fileclient  :1215][INFO    ][16027] Fetching file from saltenv 'base', ** done ** 'haproxy/files/errors/429.http11'
2018-09-01 22:31:46,045 [salt.state       :290 ][INFO    ][16027] File changed:
New file
2018-09-01 22:31:46,045 [salt.state       :1941][INFO    ][16027] Completed state [/etc/haproxy/errors/429.http11] at time 22:31:46.045907 duration_in_ms=19.009
2018-09-01 22:31:46,046 [salt.state       :1770][INFO    ][16027] Running state [haproxy_status_packages] at time 22:31:46.046817
2018-09-01 22:31:46,047 [salt.state       :1803][INFO    ][16027] Executing state pkg.installed for [haproxy_status_packages]
2018-09-01 22:31:46,518 [salt.loaded.int.module.cmdmod:395 ][INFO    ][16027] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 22:31:46,546 [salt.loaded.int.module.cmdmod:395 ][INFO    ][16027] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'socat'] in directory '/root'
2018-09-01 22:31:47,896 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901223147900651
2018-09-01 22:31:47,917 [salt.minion      :1431][INFO    ][17122] Starting a new job with PID 17122
2018-09-01 22:31:47,959 [salt.minion      :1708][INFO    ][17122] Returning information for job: 20180901223147900651
2018-09-01 22:31:49,115 [salt.loaded.int.module.cmdmod:395 ][INFO    ][16027] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:31:49,160 [salt.state       :290 ][INFO    ][16027] Made the following changes:
'socat' changed from 'absent' to '1.7.3.1-1'

2018-09-01 22:31:49,178 [salt.state       :905 ][INFO    ][16027] Loading fresh modules for state activity
2018-09-01 22:31:49,215 [salt.state       :1941][INFO    ][16027] Completed state [haproxy_status_packages] at time 22:31:49.215590 duration_in_ms=3168.772
2018-09-01 22:31:49,218 [salt.state       :1770][INFO    ][16027] Running state [/usr/bin/haproxy-status.sh] at time 22:31:49.218804
2018-09-01 22:31:49,219 [salt.state       :1803][INFO    ][16027] Executing state file.managed for [/usr/bin/haproxy-status.sh]
2018-09-01 22:31:49,237 [salt.fileclient  :1215][INFO    ][16027] Fetching file from saltenv 'base', ** done ** 'haproxy/files/haproxy-status.sh'
2018-09-01 22:31:49,260 [salt.state       :290 ][INFO    ][16027] File changed:
New file
2018-09-01 22:31:49,261 [salt.state       :1941][INFO    ][16027] Completed state [/usr/bin/haproxy-status.sh] at time 22:31:49.261160 duration_in_ms=42.355
2018-09-01 22:31:49,263 [salt.state       :1770][INFO    ][16027] Running state [net.ipv4.ip_nonlocal_bind] at time 22:31:49.263402
2018-09-01 22:31:49,263 [salt.state       :1803][INFO    ][16027] Executing state sysctl.present for [net.ipv4.ip_nonlocal_bind]
2018-09-01 22:31:49,266 [salt.loaded.int.module.cmdmod:395 ][INFO    ][16027] Executing command 'sysctl -w net.ipv4.ip_nonlocal_bind="1"' in directory '/root'
2018-09-01 22:31:49,285 [salt.state       :290 ][INFO    ][16027] {'net.ipv4.ip_nonlocal_bind': 1}
2018-09-01 22:31:49,286 [salt.state       :1941][INFO    ][16027] Completed state [net.ipv4.ip_nonlocal_bind] at time 22:31:49.286078 duration_in_ms=22.674
2018-09-01 22:31:49,653 [salt.state       :1770][INFO    ][16027] Running state [haproxy] at time 22:31:49.653740
2018-09-01 22:31:49,654 [salt.state       :1803][INFO    ][16027] Executing state service.running for [haproxy]
2018-09-01 22:31:49,655 [salt.loaded.int.module.cmdmod:395 ][INFO    ][16027] Executing command ['systemctl', 'status', 'haproxy.service', '-n', '0'] in directory '/root'
2018-09-01 22:31:49,670 [salt.loaded.int.module.cmdmod:395 ][INFO    ][16027] Executing command ['systemctl', 'is-active', 'haproxy.service'] in directory '/root'
2018-09-01 22:31:49,686 [salt.loaded.int.module.cmdmod:395 ][INFO    ][16027] Executing command ['systemctl', 'is-enabled', 'haproxy.service'] in directory '/root'
2018-09-01 22:31:49,702 [salt.state       :290 ][INFO    ][16027] The service haproxy is already running
2018-09-01 22:31:49,703 [salt.state       :1941][INFO    ][16027] Completed state [haproxy] at time 22:31:49.703066 duration_in_ms=49.326
2018-09-01 22:31:49,703 [salt.state       :1770][INFO    ][16027] Running state [haproxy] at time 22:31:49.703576
2018-09-01 22:31:49,704 [salt.state       :1803][INFO    ][16027] Executing state service.mod_watch for [haproxy]
2018-09-01 22:31:49,705 [salt.loaded.int.module.cmdmod:395 ][INFO    ][16027] Executing command ['systemctl', 'is-active', 'haproxy.service'] in directory '/root'
2018-09-01 22:31:49,729 [salt.loaded.int.module.cmdmod:395 ][INFO    ][16027] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'haproxy.service'] in directory '/root'
2018-09-01 22:31:49,768 [salt.state       :290 ][INFO    ][16027] {'haproxy': True}
2018-09-01 22:31:49,771 [salt.state       :1941][INFO    ][16027] Completed state [haproxy] at time 22:31:49.771422 duration_in_ms=67.845
2018-09-01 22:31:49,775 [salt.minion      :1708][INFO    ][16027] Returning information for job: 20180901223132664087
2018-09-01 22:31:50,463 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command service.status with jid 20180901223150469054
2018-09-01 22:31:50,487 [salt.minion      :1431][INFO    ][17243] Starting a new job with PID 17243
2018-09-01 22:31:51,060 [salt.loader.192.168.11.2.int.module.cmdmod:395 ][INFO    ][17243] Executing command ['systemctl', 'status', 'haproxy.service', '-n', '0'] in directory '/root'
2018-09-01 22:31:51,084 [salt.loader.192.168.11.2.int.module.cmdmod:395 ][INFO    ][17243] Executing command ['systemctl', 'is-active', 'haproxy.service'] in directory '/root'
2018-09-01 22:31:51,107 [salt.minion      :1708][INFO    ][17243] Returning information for job: 20180901223150469054
2018-09-01 22:31:51,858 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command service.restart with jid 20180901223151863970
2018-09-01 22:31:51,880 [salt.minion      :1431][INFO    ][17252] Starting a new job with PID 17252
2018-09-01 22:31:52,439 [salt.loader.192.168.11.2.int.module.cmdmod:395 ][INFO    ][17252] Executing command ['systemctl', 'status', 'rsyslog.service', '-n', '0'] in directory '/root'
2018-09-01 22:31:52,478 [salt.loader.192.168.11.2.int.module.cmdmod:395 ][INFO    ][17252] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'rsyslog.service'] in directory '/root'
2018-09-01 22:31:52,511 [salt.minion      :1708][INFO    ][17252] Returning information for job: 20180901223151863970
2018-09-01 22:31:53,368 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command test.ping with jid 20180901223153376253
2018-09-01 22:31:53,389 [salt.minion      :1431][INFO    ][17287] Starting a new job with PID 17287
2018-09-01 22:31:53,410 [salt.minion      :1708][INFO    ][17287] Returning information for job: 20180901223153376253
2018-09-01 22:31:53,561 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command state.sls with jid 20180901223153565799
2018-09-01 22:31:53,583 [salt.minion      :1431][INFO    ][17292] Starting a new job with PID 17292
2018-09-01 22:31:57,716 [salt.state       :905 ][INFO    ][17292] Loading fresh modules for state activity
2018-09-01 22:31:57,752 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'keystone/server.sls'
2018-09-01 22:31:57,902 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'apache/init.sls'
2018-09-01 22:31:57,932 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'apache/server/init.sls'
2018-09-01 22:31:57,960 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'apache/server/service/init.sls'
2018-09-01 22:31:58,021 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'apache/server/service/modules.sls'
2018-09-01 22:31:58,077 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'apache/server/service/mpm.sls'
2018-09-01 22:31:58,135 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'apache/server/site.sls'
2018-09-01 22:31:58,249 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'apache/server/users.sls'
2018-09-01 22:31:58,302 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'apache/server/robots.sls'
2018-09-01 22:31:58,350 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'keystone/db/offline_sync.sls'
2018-09-01 22:31:58,625 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901223158623363
2018-09-01 22:31:58,645 [salt.minion      :1431][INFO    ][17320] Starting a new job with PID 17320
2018-09-01 22:31:58,660 [salt.minion      :1708][INFO    ][17320] Returning information for job: 20180901223158623363
2018-09-01 22:31:59,135 [salt.state       :1770][INFO    ][17292] Running state [keystone] at time 22:31:59.135770
2018-09-01 22:31:59,136 [salt.state       :1803][INFO    ][17292] Executing state pkg.installed for [keystone]
2018-09-01 22:31:59,136 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:31:59,480 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command ['apt-cache', '-q', 'policy', 'keystone'] in directory '/root'
2018-09-01 22:31:59,585 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-09-01 22:32:01,541 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 22:32:01,561 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'keystone'] in directory '/root'
2018-09-01 22:32:08,773 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901223208774277
2018-09-01 22:32:08,796 [salt.minion      :1431][INFO    ][17730] Starting a new job with PID 17730
2018-09-01 22:32:08,817 [salt.minion      :1708][INFO    ][17730] Returning information for job: 20180901223208774277
2018-09-01 22:32:18,926 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901223218930660
2018-09-01 22:32:18,948 [salt.minion      :1431][INFO    ][17995] Starting a new job with PID 17995
2018-09-01 22:32:18,970 [salt.minion      :1708][INFO    ][17995] Returning information for job: 20180901223218930660
2018-09-01 22:32:29,081 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901223229085386
2018-09-01 22:32:29,102 [salt.minion      :1431][INFO    ][18294] Starting a new job with PID 18294
2018-09-01 22:32:29,128 [salt.minion      :1708][INFO    ][18294] Returning information for job: 20180901223229085386
2018-09-01 22:32:39,255 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901223239259440
2018-09-01 22:32:39,278 [salt.minion      :1431][INFO    ][18993] Starting a new job with PID 18993
2018-09-01 22:32:39,302 [salt.minion      :1708][INFO    ][18993] Returning information for job: 20180901223239259440
2018-09-01 22:32:49,414 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901223249418237
2018-09-01 22:32:49,438 [salt.minion      :1431][INFO    ][19603] Starting a new job with PID 19603
2018-09-01 22:32:49,460 [salt.minion      :1708][INFO    ][19603] Returning information for job: 20180901223249418237
2018-09-01 22:32:59,638 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901223259642082
2018-09-01 22:32:59,658 [salt.minion      :1431][INFO    ][19930] Starting a new job with PID 19930
2018-09-01 22:32:59,673 [salt.minion      :1708][INFO    ][19930] Returning information for job: 20180901223259642082
2018-09-01 22:33:06,166 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:33:06,215 [salt.state       :290 ][INFO    ][17292] Made the following changes:
'python-routes' changed from 'absent' to '2.4.1-1~u16.04+mcp2'
'python-retrying' changed from 'absent' to '1.3.3-1'
'python-kombu' changed from 'absent' to '4.1.0-1~u16.04+mcp1'
'python-oslo.concurrency' changed from 'absent' to '3.25.0-1.0~u16.04+mcp2'
'python-oslo.service' changed from 'absent' to '1.29.0-1.0~u16.04+mcp1'
'python-sqlparse' changed from 'absent' to '0.2.2-1~u16.04+mcp1'
'python-pycadf' changed from 'absent' to '2.6.0-1~u16.04+mcp2'
'xmlsec1' changed from 'absent' to '1.2.20-2ubuntu4'
'python-paste' changed from 'absent' to '2.0.3+dfsg-4.1~u16.04+mcp1'
'python-oslo-db' changed from 'absent' to '1'
'python-formencode' changed from 'absent' to '1.3.0-0ubuntu5'
'apache2-utils' changed from 'absent' to '2.4.18-2ubuntu3.9'
'python-futurist' changed from 'absent' to '1.6.0-1.0~u16.04+mcp1'
'libaprutil1-ldap' changed from 'absent' to '1.5.4-1build1'
'python-scrypt' changed from 'absent' to '0.8.0-1~u16.04+mcp2'
'python-migrate' changed from 'absent' to '0.11.0-1~u16.04+mcp2'
'python-cachetools' changed from 'absent' to '2.0.0-2.0~u16.04+mcp1'
'python-linecache2' changed from 'absent' to '1.0.0-2'
'python-pastedeploy-tpl' changed from 'absent' to '1.5.2-1'
'apache2' changed from 'absent' to '2.4.18-2ubuntu3.9'
'pycadf-common' changed from 'absent' to '2.6.0-1~u16.04+mcp2'
'python-pastescript' changed from 'absent' to '1.7.5-3build1'
'python-tenacity' changed from 'absent' to '4.8.0-1.0~u16.04+mcp1'
'apache2-data' changed from 'absent' to '2.4.18-2ubuntu3.9'
'python-pika-pool' changed from 'absent' to '0.1.3-1ubuntu1'
'python-webob' changed from 'absent' to '1:1.7.2-1~u16.04+mcp2'
'python-bcrypt' changed from 'absent' to '3.1.3-1~u16.04+mcp3'
'libapr1' changed from 'absent' to '1.5.2-3'
'python-traceback2' changed from 'absent' to '1.4.0-3'
'python-testtools' changed from 'absent' to '2.3.0-1.0~u16.04+mcp1'
'python-anyjson' changed from 'absent' to '0.3.3-1build1'
'python-openid' changed from 'absent' to '2.2.5-6'
'python-pastedeploy' changed from 'absent' to '1.5.2-1'
'python-keystone' changed from 'absent' to '2:13.0.1-3~u16.04+mcp9'
'apache2-bin' changed from 'absent' to '2.4.18-2ubuntu3.9'
'python-oslo.policy' changed from 'absent' to '1.33.2-1.0~u16.04+mcp3'
'python-contextlib2' changed from 'absent' to '0.5.1-1'
'python2.7-zope.interface' changed from 'absent' to '1'
'python-dnspython' changed from 'absent' to '1.14.0-3.1~u16.04+mcp2'
'python-alembic' changed from 'absent' to '0.8.10-1.1~u16.04+mcp2'
'python-statsd' changed from 'absent' to '3.2.1-2~u16.04+mcp2'
'python-oslo.db' changed from 'absent' to '4.33.0-1.0~u16.04+mcp9'
'python2.7-sqlalchemy-ext' changed from 'absent' to '1'
'python-fasteners' changed from 'absent' to '0.12.0-2ubuntu1'
'libapache2-mod-wsgi' changed from 'absent' to '4.4.15-0.1.1~u16.04+mcp2'
'python-eventlet' changed from 'absent' to '0.20.0-4~u16.04+mcp2'
'python-unittest2' changed from 'absent' to '1.1.0-6.1'
'python-oslo.log' changed from 'absent' to '3.36.0-1.0~u16.04+mcp6'
'python-extras' changed from 'absent' to '1.0.0-2.0~u16.04+mcp1'
'python-pyinotify' changed from 'absent' to '0.9.6-1.1~u16.04+mcp2'
'python-amqp' changed from 'absent' to '2.2.1-1~exp1~u16.04+mcp1'
'python-scgi' changed from 'absent' to '1.13-1.1build1'
'python-zope.interface' changed from 'absent' to '4.1.3-1build1'
'libaprutil1' changed from 'absent' to '1.5.4-1build1'
'python-repoze.lru' changed from 'absent' to '0.6-6'
'python-posix-ipc' changed from 'absent' to '0.9.8-2build2'
'formencode-i18n' changed from 'absent' to '1.3.0-0ubuntu5'
'python-defusedxml' changed from 'absent' to '0.5.0-1~u16.04+mcp1'
'python2.7-testtools' changed from 'absent' to '1'
'python-osprofiler' changed from 'absent' to '1.15.2-1.0~u16.04+mcp3'
'httpd-wsgi' changed from 'absent' to '1'
'python-oslo.messaging' changed from 'absent' to '5.35.1-1.0~u16.04+mcp16'
'keystone' changed from 'absent' to '2:13.0.1-3~u16.04+mcp9'
'python-tempita' changed from 'absent' to '0.5.2-1build1'
'python-oslo.middleware' changed from 'absent' to '3.34.0-1.0~u16.04+mcp2'
'python-pika' changed from 'absent' to '0.10.0-1'
'python-passlib' changed from 'absent' to '1.7.1-2.1~u16.04+mcp2'
'python-greenlet' changed from 'absent' to '0.4.12-2.0~u16.04+mcp1'
'python-sqlalchemy-ext' changed from 'absent' to '1.0.13+ds1-1.1~u16.04+mcp2'
'python-oslo.context' changed from 'absent' to '1:2.20.0-1.0~u16.04+mcp1'
'httpd' changed from 'absent' to '1'
'apache2-api-20120211' changed from 'absent' to '1'
'python-ceilometerclient' changed from 'absent' to '2.9.0-2~u16.04+mcp1'
'liblua5.1-0' changed from 'absent' to '5.1.5-8ubuntu1'
'libaprutil1-dbd-sqlite3' changed from 'absent' to '1.5.4-1build1'
'python-zopeinterface' changed from 'absent' to '1'
'python-fixtures' changed from 'absent' to '3.0.0-1.1~u16.04+mcp2'
'python-vine' changed from 'absent' to '1.1.3+dfsg-2~u16.04+mcp3'
'python2.7-pyinotify' changed from 'absent' to '1'
'python2.7-keystone' changed from 'absent' to '1'
'python-sqlalchemy' changed from 'absent' to '1.0.13+ds1-1.1~u16.04+mcp2'
'python-mimeparse' changed from 'absent' to '0.1.4-1build1'
'python-keystonemiddleware' changed from 'absent' to '4.21.0-1.0~u16.04+mcp1'
'python-pysaml2' changed from 'absent' to '4.0.2-1.0~u16.04+mcp1'
'python-zope' changed from 'absent' to '1'
'python-oslo.cache' changed from 'absent' to '1.28.0-1.0~u16.04+mcp9'
'python-oslo-log' changed from 'absent' to '1'
'httpd-cgi' changed from 'absent' to '1'
'python-oslo-context' changed from 'absent' to '1'
'ssl-cert' changed from 'absent' to '1.0.37'
'alembic' changed from 'absent' to '0.8.10-1.1~u16.04+mcp2'

2018-09-01 22:33:06,235 [salt.state       :905 ][INFO    ][17292] Loading fresh modules for state activity
2018-09-01 22:33:06,260 [salt.state       :1941][INFO    ][17292] Completed state [keystone] at time 22:33:06.260003 duration_in_ms=67124.234
2018-09-01 22:33:06,264 [salt.state       :1770][INFO    ][17292] Running state [python-keystone] at time 22:33:06.264156
2018-09-01 22:33:06,264 [salt.state       :1803][INFO    ][17292] Executing state pkg.installed for [python-keystone]
2018-09-01 22:33:06,898 [salt.state       :290 ][INFO    ][17292] All specified packages are already installed
2018-09-01 22:33:06,898 [salt.state       :1941][INFO    ][17292] Completed state [python-keystone] at time 22:33:06.898423 duration_in_ms=634.267
2018-09-01 22:33:06,898 [salt.state       :1770][INFO    ][17292] Running state [python-keystoneclient] at time 22:33:06.898684
2018-09-01 22:33:06,898 [salt.state       :1803][INFO    ][17292] Executing state pkg.installed for [python-keystoneclient]
2018-09-01 22:33:06,904 [salt.state       :290 ][INFO    ][17292] All specified packages are already installed
2018-09-01 22:33:06,904 [salt.state       :1941][INFO    ][17292] Completed state [python-keystoneclient] at time 22:33:06.904288 duration_in_ms=5.604
2018-09-01 22:33:06,904 [salt.state       :1770][INFO    ][17292] Running state [python-psycopg2] at time 22:33:06.904468
2018-09-01 22:33:06,904 [salt.state       :1803][INFO    ][17292] Executing state pkg.installed for [python-psycopg2]
2018-09-01 22:33:06,921 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 22:33:06,951 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'python-psycopg2'] in directory '/root'
2018-09-01 22:33:09,787 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901223309791013
2018-09-01 22:33:09,806 [salt.minion      :1431][INFO    ][20215] Starting a new job with PID 20215
2018-09-01 22:33:09,825 [salt.minion      :1708][INFO    ][20215] Returning information for job: 20180901223309791013
2018-09-01 22:33:12,056 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:33:12,098 [salt.state       :290 ][INFO    ][17292] Made the following changes:
'python-psycopg2' changed from 'absent' to '2.7.4-1.0~u16.04+mcp1'
'python-egenix-mxtools' changed from 'absent' to '3.2.9-1'
'python-egenix-mxdatetime' changed from 'absent' to '3.2.9-1'
'libpq5' changed from 'absent' to '9.5.14-0ubuntu0.16.04'

2018-09-01 22:33:12,116 [salt.state       :905 ][INFO    ][17292] Loading fresh modules for state activity
2018-09-01 22:33:12,148 [salt.state       :1941][INFO    ][17292] Completed state [python-psycopg2] at time 22:33:12.147930 duration_in_ms=5243.461
2018-09-01 22:33:12,158 [salt.state       :1770][INFO    ][17292] Running state [python-mysqldb] at time 22:33:12.158789
2018-09-01 22:33:12,159 [salt.state       :1803][INFO    ][17292] Executing state pkg.installed for [python-mysqldb]
2018-09-01 22:33:12,708 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 22:33:12,734 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'python-mysqldb'] in directory '/root'
2018-09-01 22:33:16,254 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:33:16,295 [salt.state       :290 ][INFO    ][17292] Made the following changes:
'python2.7-mysqldb' changed from 'absent' to '1'
'mysql-common' changed from 'absent' to '5.7.23-0ubuntu0.16.04.1'
'mysql-common-5.6' changed from 'absent' to '1'
'libmysqlclient20' changed from 'absent' to '5.7.23-0ubuntu0.16.04.1'
'python-mysqldb' changed from 'absent' to '1.3.7-1build2'

2018-09-01 22:33:16,317 [salt.state       :905 ][INFO    ][17292] Loading fresh modules for state activity
2018-09-01 22:33:16,340 [salt.state       :1941][INFO    ][17292] Completed state [python-mysqldb] at time 22:33:16.340376 duration_in_ms=4181.588
2018-09-01 22:33:16,344 [salt.state       :1770][INFO    ][17292] Running state [mysql-client] at time 22:33:16.344499
2018-09-01 22:33:16,344 [salt.state       :1803][INFO    ][17292] Executing state pkg.installed for [mysql-client]
2018-09-01 22:33:16,861 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 22:33:16,897 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'mysql-client'] in directory '/root'
2018-09-01 22:33:19,938 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901223319943907
2018-09-01 22:33:19,957 [salt.minion      :1431][INFO    ][20546] Starting a new job with PID 20546
2018-09-01 22:33:19,979 [salt.minion      :1708][INFO    ][20546] Returning information for job: 20180901223319943907
2018-09-01 22:33:23,779 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:33:23,823 [salt.state       :290 ][INFO    ][17292] Made the following changes:
'mysql-wsrep-common-5.6' changed from 'absent' to '5.6.35-0.1~u16.04+mcp2'
'mysql-client' changed from 'absent' to '5.6.35-0.1~u16.04+mcp2'
'libmysqlclient18' changed from 'absent' to '1'
'virtual-mysql-client' changed from 'absent' to '1'
'mysql-wsrep-client-5.6' changed from 'absent' to '5.6.35-0.1~u16.04+mcp2'
'mysql-wsrep-libmysqlclient18' changed from 'absent' to '5.6.35-0.1~u16.04+mcp2'
'libdbi-perl' changed from 'absent' to '1.634-1build1'
'libterm-readkey-perl' changed from 'absent' to '2.33-1build1'
'perl-dbdabi-94' changed from 'absent' to '1'
'libdbd-mysql-perl' changed from 'absent' to '4.033-1ubuntu0.1'

2018-09-01 22:33:23,843 [salt.state       :905 ][INFO    ][17292] Loading fresh modules for state activity
2018-09-01 22:33:23,866 [salt.state       :1941][INFO    ][17292] Completed state [mysql-client] at time 22:33:23.866624 duration_in_ms=7522.124
2018-09-01 22:33:23,870 [salt.state       :1770][INFO    ][17292] Running state [python-six] at time 22:33:23.870813
2018-09-01 22:33:23,871 [salt.state       :1803][INFO    ][17292] Executing state pkg.installed for [python-six]
2018-09-01 22:33:24,383 [salt.state       :290 ][INFO    ][17292] All specified packages are already installed
2018-09-01 22:33:24,383 [salt.state       :1941][INFO    ][17292] Completed state [python-six] at time 22:33:24.383395 duration_in_ms=512.579
2018-09-01 22:33:24,383 [salt.state       :1770][INFO    ][17292] Running state [python-memcache] at time 22:33:24.383635
2018-09-01 22:33:24,383 [salt.state       :1803][INFO    ][17292] Executing state pkg.installed for [python-memcache]
2018-09-01 22:33:24,388 [salt.state       :290 ][INFO    ][17292] All specified packages are already installed
2018-09-01 22:33:24,389 [salt.state       :1941][INFO    ][17292] Completed state [python-memcache] at time 22:33:24.389094 duration_in_ms=5.46
2018-09-01 22:33:24,389 [salt.state       :1770][INFO    ][17292] Running state [python-openstackclient] at time 22:33:24.389259
2018-09-01 22:33:24,389 [salt.state       :1803][INFO    ][17292] Executing state pkg.installed for [python-openstackclient]
2018-09-01 22:33:24,394 [salt.state       :290 ][INFO    ][17292] All specified packages are already installed
2018-09-01 22:33:24,394 [salt.state       :1941][INFO    ][17292] Completed state [python-openstackclient] at time 22:33:24.394171 duration_in_ms=4.912
2018-09-01 22:33:24,394 [salt.state       :1770][INFO    ][17292] Running state [gettext-base] at time 22:33:24.394333
2018-09-01 22:33:24,394 [salt.state       :1803][INFO    ][17292] Executing state pkg.installed for [gettext-base]
2018-09-01 22:33:24,399 [salt.state       :290 ][INFO    ][17292] All specified packages are already installed
2018-09-01 22:33:24,399 [salt.state       :1941][INFO    ][17292] Completed state [gettext-base] at time 22:33:24.399269 duration_in_ms=4.935
2018-09-01 22:33:24,399 [salt.state       :1770][INFO    ][17292] Running state [python-pycadf] at time 22:33:24.399447
2018-09-01 22:33:24,399 [salt.state       :1803][INFO    ][17292] Executing state pkg.installed for [python-pycadf]
2018-09-01 22:33:24,404 [salt.state       :290 ][INFO    ][17292] All specified packages are already installed
2018-09-01 22:33:24,404 [salt.state       :1941][INFO    ][17292] Completed state [python-pycadf] at time 22:33:24.404532 duration_in_ms=5.085
2018-09-01 22:33:24,405 [salt.state       :1770][INFO    ][17292] Running state [apache2] at time 22:33:24.404999
2018-09-01 22:33:24,405 [salt.state       :1803][INFO    ][17292] Executing state pkg.installed for [apache2]
2018-09-01 22:33:24,409 [salt.state       :290 ][INFO    ][17292] All specified packages are already installed
2018-09-01 22:33:24,409 [salt.state       :1941][INFO    ][17292] Completed state [apache2] at time 22:33:24.409911 duration_in_ms=4.911
2018-09-01 22:33:24,410 [salt.state       :1770][INFO    ][17292] Running state [openssl] at time 22:33:24.410254
2018-09-01 22:33:24,410 [salt.state       :1803][INFO    ][17292] Executing state pkg.installed for [openssl]
2018-09-01 22:33:24,415 [salt.state       :290 ][INFO    ][17292] All specified packages are already installed
2018-09-01 22:33:24,415 [salt.state       :1941][INFO    ][17292] Completed state [openssl] at time 22:33:24.415183 duration_in_ms=4.928
2018-09-01 22:33:24,416 [salt.state       :1770][INFO    ][17292] Running state [a2enmod ssl] at time 22:33:24.415980
2018-09-01 22:33:24,416 [salt.state       :1803][INFO    ][17292] Executing state cmd.run for [a2enmod ssl]
2018-09-01 22:33:24,416 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command 'a2enmod ssl' in directory '/root'
2018-09-01 22:33:24,478 [salt.state       :290 ][INFO    ][17292] {'pid': 21056, 'retcode': 0, 'stderr': '', 'stdout': 'Considering dependency setenvif for ssl:\nModule setenvif already enabled\nConsidering dependency mime for ssl:\nModule mime already enabled\nConsidering dependency socache_shmcb for ssl:\nEnabling module socache_shmcb.\nEnabling module ssl.\nSee /usr/share/doc/apache2/README.Debian.gz on how to configure SSL and create self-signed certificates.\nTo activate the new configuration, you need to run:\n  service apache2 restart'}
2018-09-01 22:33:24,479 [salt.state       :1941][INFO    ][17292] Completed state [a2enmod ssl] at time 22:33:24.479517 duration_in_ms=63.536
2018-09-01 22:33:24,481 [salt.state       :1770][INFO    ][17292] Running state [a2enmod rewrite] at time 22:33:24.481172
2018-09-01 22:33:24,481 [salt.state       :1803][INFO    ][17292] Executing state cmd.run for [a2enmod rewrite]
2018-09-01 22:33:24,482 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command 'a2enmod rewrite' in directory '/root'
2018-09-01 22:33:24,551 [salt.state       :290 ][INFO    ][17292] {'pid': 21069, 'retcode': 0, 'stderr': '', 'stdout': 'Enabling module rewrite.\nTo activate the new configuration, you need to run:\n  service apache2 restart'}
2018-09-01 22:33:24,552 [salt.state       :1941][INFO    ][17292] Completed state [a2enmod rewrite] at time 22:33:24.552048 duration_in_ms=70.877
2018-09-01 22:33:24,553 [salt.state       :1770][INFO    ][17292] Running state [libapache2-mod-wsgi] at time 22:33:24.553103
2018-09-01 22:33:24,553 [salt.state       :1803][INFO    ][17292] Executing state pkg.installed for [libapache2-mod-wsgi]
2018-09-01 22:33:24,561 [salt.state       :290 ][INFO    ][17292] All specified packages are already installed
2018-09-01 22:33:24,561 [salt.state       :1941][INFO    ][17292] Completed state [libapache2-mod-wsgi] at time 22:33:24.561320 duration_in_ms=8.217
2018-09-01 22:33:24,561 [salt.state       :1770][INFO    ][17292] Running state [a2enmod wsgi] at time 22:33:24.561682
2018-09-01 22:33:24,561 [salt.state       :1803][INFO    ][17292] Executing state cmd.run for [a2enmod wsgi]
2018-09-01 22:33:24,562 [salt.state       :290 ][INFO    ][17292] /etc/apache2/mods-enabled/wsgi.load exists
2018-09-01 22:33:24,562 [salt.state       :1941][INFO    ][17292] Completed state [a2enmod wsgi] at time 22:33:24.562284 duration_in_ms=0.602
2018-09-01 22:33:24,564 [salt.state       :1770][INFO    ][17292] Running state [/etc/apache2/mods-enabled/mpm_prefork.load] at time 22:33:24.564961
2018-09-01 22:33:24,565 [salt.state       :1803][INFO    ][17292] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_prefork.load]
2018-09-01 22:33:24,565 [salt.state       :290 ][INFO    ][17292] File /etc/apache2/mods-enabled/mpm_prefork.load is not present
2018-09-01 22:33:24,565 [salt.state       :1941][INFO    ][17292] Completed state [/etc/apache2/mods-enabled/mpm_prefork.load] at time 22:33:24.565670 duration_in_ms=0.71
2018-09-01 22:33:24,565 [salt.state       :1770][INFO    ][17292] Running state [/etc/apache2/mods-enabled/mpm_prefork.conf] at time 22:33:24.565910
2018-09-01 22:33:24,566 [salt.state       :1803][INFO    ][17292] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_prefork.conf]
2018-09-01 22:33:24,566 [salt.state       :290 ][INFO    ][17292] File /etc/apache2/mods-enabled/mpm_prefork.conf is not present
2018-09-01 22:33:24,566 [salt.state       :1941][INFO    ][17292] Completed state [/etc/apache2/mods-enabled/mpm_prefork.conf] at time 22:33:24.566584 duration_in_ms=0.674
2018-09-01 22:33:24,566 [salt.state       :1770][INFO    ][17292] Running state [/etc/apache2/mods-enabled/mpm_worker.load] at time 22:33:24.566743
2018-09-01 22:33:24,566 [salt.state       :1803][INFO    ][17292] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_worker.load]
2018-09-01 22:33:24,567 [salt.state       :290 ][INFO    ][17292] File /etc/apache2/mods-enabled/mpm_worker.load is not present
2018-09-01 22:33:24,567 [salt.state       :1941][INFO    ][17292] Completed state [/etc/apache2/mods-enabled/mpm_worker.load] at time 22:33:24.567252 duration_in_ms=0.508
2018-09-01 22:33:24,567 [salt.state       :1770][INFO    ][17292] Running state [/etc/apache2/mods-enabled/mpm_worker.conf] at time 22:33:24.567430
2018-09-01 22:33:24,567 [salt.state       :1803][INFO    ][17292] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_worker.conf]
2018-09-01 22:33:24,567 [salt.state       :290 ][INFO    ][17292] File /etc/apache2/mods-enabled/mpm_worker.conf is not present
2018-09-01 22:33:24,567 [salt.state       :1941][INFO    ][17292] Completed state [/etc/apache2/mods-enabled/mpm_worker.conf] at time 22:33:24.567927 duration_in_ms=0.497
2018-09-01 22:33:24,569 [salt.state       :1770][INFO    ][17292] Running state [/etc/apache2/mods-available/mpm_event.conf] at time 22:33:24.569460
2018-09-01 22:33:24,569 [salt.state       :1803][INFO    ][17292] Executing state file.managed for [/etc/apache2/mods-available/mpm_event.conf]
2018-09-01 22:33:24,592 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'apache/files/mpm/mpm_event.conf'
2018-09-01 22:33:24,655 [salt.state       :290 ][INFO    ][17292] File changed:
--- 
+++ 
@@ -5,14 +5,15 @@
 # ThreadsPerChild: constant number of worker threads in each server process
 # MaxRequestWorkers: maximum number of worker threads
 # MaxConnectionsPerChild: maximum number of requests a server process serves
+
 <IfModule mpm_event_module>
-	StartServers			 2
-	MinSpareThreads		 25
-	MaxSpareThreads		 75
-	ThreadLimit			 64
-	ThreadsPerChild		 25
-	MaxRequestWorkers	  150
-	MaxConnectionsPerChild   0
+    StartServers            5
+    MinSpareThreads         25
+    MaxSpareThreads         75
+    ThreadLimit             64
+    ThreadsPerChild         25
+    MaxRequestWorkers       150
+    MaxConnectionsPerChild  0
 </IfModule>
 
-# vim: syntax=apache ts=4 sw=4 sts=4 sr noet
+# vim: syntax=apache ts=4 sw=4 sts=4 sr et

2018-09-01 22:33:24,655 [salt.state       :1941][INFO    ][17292] Completed state [/etc/apache2/mods-available/mpm_event.conf] at time 22:33:24.655704 duration_in_ms=86.243
2018-09-01 22:33:24,657 [salt.state       :1770][INFO    ][17292] Running state [a2enmod mpm_event] at time 22:33:24.657445
2018-09-01 22:33:24,657 [salt.state       :1803][INFO    ][17292] Executing state cmd.run for [a2enmod mpm_event]
2018-09-01 22:33:24,658 [salt.state       :290 ][INFO    ][17292] /etc/apache2/mods-enabled/mpm_event.load exists
2018-09-01 22:33:24,659 [salt.state       :1941][INFO    ][17292] Completed state [a2enmod mpm_event] at time 22:33:24.658949 duration_in_ms=1.504
2018-09-01 22:33:24,696 [salt.state       :1770][INFO    ][17292] Running state [apache_server_service_task] at time 22:33:24.696671
2018-09-01 22:33:24,697 [salt.state       :1803][INFO    ][17292] Executing state test.show_notification for [apache_server_service_task]
2018-09-01 22:33:24,697 [salt.state       :290 ][INFO    ][17292] Running apache.server.service
2018-09-01 22:33:24,698 [salt.state       :1941][INFO    ][17292] Completed state [apache_server_service_task] at time 22:33:24.698006 duration_in_ms=1.335
2018-09-01 22:33:24,699 [salt.state       :1770][INFO    ][17292] Running state [/etc/apache2/ports.conf] at time 22:33:24.698994
2018-09-01 22:33:24,699 [salt.state       :1803][INFO    ][17292] Executing state file.managed for [/etc/apache2/ports.conf]
2018-09-01 22:33:24,716 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'apache/files/ports.conf'
2018-09-01 22:33:24,867 [salt.state       :290 ][INFO    ][17292] File /etc/apache2/ports.conf is in the correct state
2018-09-01 22:33:24,867 [salt.state       :1941][INFO    ][17292] Completed state [/etc/apache2/ports.conf] at time 22:33:24.867556 duration_in_ms=168.563
2018-09-01 22:33:24,868 [salt.state       :1770][INFO    ][17292] Running state [/etc/apache2/conf-available/security.conf] at time 22:33:24.868008
2018-09-01 22:33:24,868 [salt.state       :1803][INFO    ][17292] Executing state file.managed for [/etc/apache2/conf-available/security.conf]
2018-09-01 22:33:24,884 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'apache/files/security.conf'
2018-09-01 22:33:24,924 [salt.state       :290 ][INFO    ][17292] File changed:
--- 
+++ 
@@ -1,73 +1,14 @@
-#
-# Disable access to the entire file system except for the directories that
-# are explicitly allowed later.
-#
-# This currently breaks the configurations that come with some web application
-# Debian packages.
-#
-#<Directory />
-#   AllowOverride None
-#   Require all denied
-#</Directory>
+ServerSignature Off
+TraceEnable Off
+ServerTokens Prod
+<DirectoryMatch "/\.svn">
+    Require all denied
+</DirectoryMatch>
 
+<DirectoryMatch "/\.git">
+    Require all denied
+</DirectoryMatch>
 
-# Changing the following options will not really affect the security of the
-# server, but might make attacks slightly more difficult in some cases.
-
-#
-# ServerTokens
-# This directive configures what you return as the Server HTTP response
-# Header. The default is 'Full' which sends information about the OS-Type
-# and compiled in modules.
-# Set to one of:  Full | OS | Minimal | Minor | Major | Prod
-# where Full conveys the most information, and Prod the least.
-#ServerTokens Minimal
-ServerTokens OS
-#ServerTokens Full
-
-#
-# Optionally add a line containing the server version and virtual host
-# name to server-generated pages (internal error documents, FTP directory
-# listings, mod_status and mod_info output etc., but not CGI generated
-# documents or custom error documents).
-# Set to "EMail" to also include a mailto: link to the ServerAdmin.
-# Set to one of:  On | Off | EMail
-#ServerSignature Off
-ServerSignature On
-
-#
-# Allow TRACE method
-#
-# Set to "extended" to also reflect the request body (only for testing and
-# diagnostic purposes).
-#
-# Set to one of:  On | Off | extended
-TraceEnable Off
-#TraceEnable On
-
-#
-# Forbid access to version control directories
-#
-# If you use version control systems in your document root, you should
-# probably deny access to their directories. For example, for subversion:
-#
-#<DirectoryMatch "/\.svn">
-#   Require all denied
-#</DirectoryMatch>
-
-#
-# Setting this header will prevent MSIE from interpreting files as something
-# else than declared by the content type in the HTTP headers.
-# Requires mod_headers to be enabled.
-#
-#Header set X-Content-Type-Options: "nosniff"
-
-#
-# Setting this header will prevent other sites from embedding pages from this
-# site as frames. This defends against clickjacking attacks.
-# Requires mod_headers to be enabled.
-#
-#Header set X-Frame-Options: "sameorigin"
-
-
-# vim: syntax=apache ts=4 sw=4 sts=4 sr noet
+<DirectoryMatch "/\.hg">
+    Require all denied
+</DirectoryMatch>

2018-09-01 22:33:24,924 [salt.state       :1941][INFO    ][17292] Completed state [/etc/apache2/conf-available/security.conf] at time 22:33:24.924546 duration_in_ms=56.538
2018-09-01 22:33:24,933 [salt.state       :1770][INFO    ][17292] Running state [/etc/apache2/sites-enabled/keystone.conf] at time 22:33:24.933233
2018-09-01 22:33:24,933 [salt.state       :1803][INFO    ][17292] Executing state file.absent for [/etc/apache2/sites-enabled/keystone.conf]
2018-09-01 22:33:24,933 [salt.state       :290 ][INFO    ][17292] File /etc/apache2/sites-enabled/keystone.conf is not present
2018-09-01 22:33:24,933 [salt.state       :1941][INFO    ][17292] Completed state [/etc/apache2/sites-enabled/keystone.conf] at time 22:33:24.933870 duration_in_ms=0.638
2018-09-01 22:33:24,934 [salt.state       :1770][INFO    ][17292] Running state [/etc/apache2/sites-enabled/wsgi-keystone.conf] at time 22:33:24.934049
2018-09-01 22:33:24,934 [salt.state       :1803][INFO    ][17292] Executing state file.absent for [/etc/apache2/sites-enabled/wsgi-keystone.conf]
2018-09-01 22:33:24,934 [salt.state       :290 ][INFO    ][17292] File /etc/apache2/sites-enabled/wsgi-keystone.conf is not present
2018-09-01 22:33:24,934 [salt.state       :1941][INFO    ][17292] Completed state [/etc/apache2/sites-enabled/wsgi-keystone.conf] at time 22:33:24.934625 duration_in_ms=0.575
2018-09-01 22:33:24,935 [salt.state       :1770][INFO    ][17292] Running state [/etc/keystone/keystone.conf] at time 22:33:24.935027
2018-09-01 22:33:24,935 [salt.state       :1803][INFO    ][17292] Executing state file.managed for [/etc/keystone/keystone.conf]
2018-09-01 22:33:24,954 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'keystone/files/queens/keystone.conf.Debian'
2018-09-01 22:33:25,044 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/queens/oslo/_log.conf'
2018-09-01 22:33:25,064 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/queens/oslo/messaging/_default.conf'
2018-09-01 22:33:25,087 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/queens/oslo/_cache.conf'
2018-09-01 22:33:25,105 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/queens/oslo/messaging/_notifications.conf'
2018-09-01 22:33:25,121 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/queens/oslo/messaging/_rabbit.conf'
2018-09-01 22:33:25,142 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/queens/oslo/_database.conf'
2018-09-01 22:33:25,165 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/queens/oslo/_cors.conf'
2018-09-01 22:33:25,182 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/queens/oslo/_middleware.conf'
2018-09-01 22:33:25,201 [salt.state       :290 ][INFO    ][17292] File changed:
--- 
+++ 
@@ -1,263 +1,278 @@
+
 [DEFAULT]
-log_dir = /var/log/keystone
-
-#
-# From keystone
-#
-
-# Using this feature is *NOT* recommended. Instead, use the `keystone-manage
-# bootstrap` command. The value of this option is treated as a "shared secret"
-# that can be used to bootstrap Keystone through the API. This "token" does not
-# represent a user (it has no identity), and carries no explicit authorization
-# (it effectively bypasses most authorization checks). If set to `None`, the
-# value is ignored and the `admin_token` middleware is effectively disabled.
-# (string value)
+
+#
+# From keystone
+#
+
+# Using this feature is *NOT* recommended. Instead, use the `keystone-
+# manage bootstrap` command. The value of this option is treated as a
+# "shared secret" that can be used to bootstrap Keystone through the
+# API. This "token" does not represent a user (it has no identity),
+# and carries no explicit authorization (it effectively bypasses most
+# authorization checks). If set to `None`, the value is ignored and
+# the `admin_token` middleware is effectively disabled. (string value)
 #admin_token = <None>
 
-# The base public endpoint URL for Keystone that is advertised to clients
-# (NOTE: this does NOT affect how Keystone listens for connections). Defaults
-# to the base host URL of the request. For example, if keystone receives a
-# request to `http://server:5000/v3/users`, then this will option will be
-# automatically treated as `http://server:5000`. You should only need to set
-# option if either the value of the base URL contains a path that keystone does
-# not automatically infer (`/prefix/v3`), or if the endpoint should be found on
-# a different host. (uri value)
+# The base public endpoint URL for Keystone that is advertised to
+# clients (NOTE: this does NOT affect how Keystone listens for
+# connections). Defaults to the base host URL of the request. For
+# example, if keystone receives a request to
+# `http://server:5000/v3/users`, then this will option will be
+# automatically treated as `http://server:5000`. You should only need
+# to set option if either the value of the base URL contains a path
+# that keystone does not automatically infer (`/prefix/v3`), or if the
+# endpoint should be found on a different host. (uri value)
 #public_endpoint = <None>
 
-# The base admin endpoint URL for Keystone that is advertised to clients (NOTE:
-# this does NOT affect how Keystone listens for connections). Defaults to the
-# base host URL of the request. For example, if keystone receives a request to
-# `http://server:35357/v3/users`, then this will option will be automatically
-# treated as `http://server:35357`. You should only need to set option if
-# either the value of the base URL contains a path that keystone does not
-# automatically infer (`/prefix/v3`), or if the endpoint should be found on a
-# different host. (uri value)
+# The base admin endpoint URL for Keystone that is advertised to
+# clients (NOTE: this does NOT affect how Keystone listens for
+# connections). Defaults to the base host URL of the request. For
+# example, if keystone receives a request to
+# `http://server:35357/v3/users`, then this will option will be
+# automatically treated as `http://server:35357`. You should only need
+# to set option if either the value of the base URL contains a path
+# that keystone does not automatically infer (`/prefix/v3`), or if the
+# endpoint should be found on a different host. (uri value)
 #admin_endpoint = <None>
 
-# Maximum depth of the project hierarchy, excluding the project acting as a
-# domain at the top of the hierarchy. WARNING: Setting it to a large value may
-# adversely impact performance. (integer value)
+# Maximum depth of the project hierarchy, excluding the project acting
+# as a domain at the top of the hierarchy. WARNING: Setting it to a
+# large value may adversely impact performance. (integer value)
 #max_project_tree_depth = 5
 
 # Limit the sizes of user & project ID/names. (integer value)
 #max_param_size = 64
 
-# Similar to `[DEFAULT] max_param_size`, but provides an exception for token
-# values. With Fernet tokens, this can be set as low as 255. With UUID tokens,
-# this should be set to 32). (integer value)
+# Similar to `[DEFAULT] max_param_size`, but provides an exception for
+# token values. With Fernet tokens, this can be set as low as 255.
+# With UUID tokens, this should be set to 32). (integer value)
 #max_token_size = 255
 
 # DEPRECATED: Similar to the `[DEFAULT] member_role_name` option, this
-# represents the default role ID used to associate users with their default
-# projects in the v2 API. This will be used as the explicit role where one is
-# not specified by the v2 API. You do not need to set this value unless you
-# want keystone to use an existing role with a different ID, other than the
-# arbitrarily defined `_member_` role (in which case, you should set `[DEFAULT]
-# member_role_name` as well). (string value)
+# represents the default role ID used to associate users with their
+# default projects in the v2 API. This will be used as the explicit
+# role where one is not specified by the v2 API. You do not need to
+# set this value unless you want keystone to use an existing role with
+# a different ID, other than the arbitrarily defined `_member_` role
+# (in which case, you should set `[DEFAULT] member_role_name` as
+# well). (string value)
 # This option is deprecated for removal since Q.
 # Its value may be silently ignored in the future.
-# Reason: This option was used to create a default member role for keystone v2
-# role assignments, but with the removal of the v2 API it is no longer
-# necessary to create this default role. This option is deprecated and will be
-# removed in the S release. If you are depending on having a predictable role
-# name and ID for this member role you will need to update your tooling.
+# Reason: This option was used to create a default member role for
+# keystone v2 role assignments, but with the removal of the v2 API it
+# is no longer necessary to create this default role. This option is
+# deprecated and will be removed in the S release. If you are
+# depending on having a predictable role name and ID for this member
+# role you will need to update your tooling.
 #member_role_id = 9fe2ff9ee4384b1894a90878d3e92bab
 
-# DEPRECATED: This is the role name used in combination with the `[DEFAULT]
-# member_role_id` option; see that option for more detail. You do not need to
-# set this option unless you want keystone to use an existing role (in which
-# case, you should set `[DEFAULT] member_role_id` as well). (string value)
+# DEPRECATED: This is the role name used in combination with the
+# `[DEFAULT] member_role_id` option; see that option for more detail.
+# You do not need to set this option unless you want keystone to use
+# an existing role (in which case, you should set `[DEFAULT]
+# member_role_id` as well). (string value)
 # This option is deprecated for removal since Q.
 # Its value may be silently ignored in the future.
-# Reason: This option was used to create a default member role for keystone v2
-# role assignments, but with the removal of the v2 API it is no longer
-# necessary to create this default role. This option is deprecated and will be
-# removed in the S release. If you are depending on having a predictable role
-# name and ID for this member role you will need to update your tooling.
+# Reason: This option was used to create a default member role for
+# keystone v2 role assignments, but with the removal of the v2 API it
+# is no longer necessary to create this default role. This option is
+# deprecated and will be removed in the S release. If you are
+# depending on having a predictable role name and ID for this member
+# role you will need to update your tooling.
 #member_role_name = _member_
 
-# The value passed as the keyword "rounds" to passlib's encrypt method. This
-# option represents a trade off between security and performance. Higher values
-# lead to slower performance, but higher security. Changing this option will
-# only affect newly created passwords as existing password hashes already have
-# a fixed number of rounds applied, so it is safe to tune this option in a
-# running cluster. For more information, see
-# https://pythonhosted.org/passlib/password_hash_api.html#choosing-the-right-
-# rounds-value (integer value)
+# The value passed as the keyword "rounds" to passlib's encrypt
+# method. This option represents a trade off between security and
+# performance. Higher values lead to slower performance, but higher
+# security. Changing this option will only affect newly created
+# passwords as existing password hashes already have a fixed number of
+# rounds applied, so it is safe to tune this option in a running
+# cluster. For more information, see
+# https://pythonhosted.org/passlib/password_hash_api.html#choosing-
+# the-right-rounds-value (integer value)
 # Minimum value: 1000
 # Maximum value: 100000
 #crypt_strength = 10000
 
-# The maximum number of entities that will be returned in a collection. This
-# global limit may be then overridden for a specific driver, by specifying a
-# list_limit in the appropriate section (for example, `[assignment]`). No limit
-# is set by default. In larger deployments, it is recommended that you set this
-# to a reasonable number to prevent operations like listing all users and
-# projects from placing an unnecessary load on the system. (integer value)
+# The maximum number of entities that will be returned in a
+# collection. This global limit may be then overridden for a specific
+# driver, by specifying a list_limit in the appropriate section (for
+# example, `[assignment]`). No limit is set by default. In larger
+# deployments, it is recommended that you set this to a reasonable
+# number to prevent operations like listing all users and projects
+# from placing an unnecessary load on the system. (integer value)
 #list_limit = <None>
 
-# If set to true, strict password length checking is performed for password
-# manipulation. If a password exceeds the maximum length, the operation will
-# fail with an HTTP 403 Forbidden error. If set to false, passwords are
-# automatically truncated to the maximum length. (boolean value)
+# If set to true, strict password length checking is performed for
+# password manipulation. If a password exceeds the maximum length, the
+# operation will fail with an HTTP 403 Forbidden error. If set to
+# false, passwords are automatically truncated to the maximum length.
+# (boolean value)
 #strict_password_check = false
 
-# DEPRECATED: The HTTP header used to determine the scheme for the original
-# request, even if it was removed by an SSL terminating proxy. (string value)
+# DEPRECATED: The HTTP header used to determine the scheme for the
+# original request, even if it was removed by an SSL terminating
+# proxy. (string value)
 # This option is deprecated for removal since N.
 # Its value may be silently ignored in the future.
-# Reason: This option has been deprecated in the N release and will be removed
-# in the P release. Use oslo.middleware.http_proxy_to_wsgi configuration
-# instead.
+# Reason: This option has been deprecated in the N release and will be
+# removed in the P release. Use oslo.middleware.http_proxy_to_wsgi
+# configuration instead.
 #secure_proxy_ssl_header = HTTP_X_FORWARDED_PROTO
 
-# If set to true, then the server will return information in HTTP responses
-# that may allow an unauthenticated or authenticated user to get more
-# information than normal, such as additional details about why authentication
-# failed. This may be useful for debugging but is insecure. (boolean value)
+# If set to true, then the server will return information in HTTP
+# responses that may allow an unauthenticated or authenticated user to
+# get more information than normal, such as additional details about
+# why authentication failed. This may be useful for debugging but is
+# insecure. (boolean value)
 #insecure_debug = false
 
-# Default `publisher_id` for outgoing notifications. If left undefined,
-# Keystone will default to using the server's host name. (string value)
+# Default `publisher_id` for outgoing notifications. If left
+# undefined, Keystone will default to using the server's host name.
+# (string value)
 #default_publisher_id = <None>
 
-# Define the notification format for identity service events. A `basic`
-# notification only has information about the resource being operated on. A
-# `cadf` notification has the same information, as well as information about
-# the initiator of the event. The `cadf` option is entirely backwards
-# compatible with the `basic` option, but is fully CADF-compliant, and is
-# recommended for auditing use cases. (string value)
+# Define the notification format for identity service events. A
+# `basic` notification only has information about the resource being
+# operated on. A `cadf` notification has the same information, as well
+# as information about the initiator of the event. The `cadf` option
+# is entirely backwards compatible with the `basic` option, but is
+# fully CADF-compliant, and is recommended for auditing use cases.
+# (string value)
 # Possible values:
 # basic - <No description provided>
 # cadf - <No description provided>
-#notification_format = cadf
-
-# You can reduce the number of notifications keystone emits by explicitly
-# opting out. Keystone will not emit notifications that match the patterns
-# expressed in this list. Values are expected to be in the form of
-# `identity.<resource_type>.<operation>`. By default, all notifications related
-# to authentication are automatically suppressed. This field can be set
-# multiple times in order to opt-out of multiple notification topics. For
-# example, the following suppresses notifications describing user creation or
-# successful authentication events: notification_opt_out=identity.user.create
+notification_format = basic
+
+# You can reduce the number of notifications keystone emits by
+# explicitly opting out. Keystone will not emit notifications that
+# match the patterns expressed in this list. Values are expected to be
+# in the form of `identity.<resource_type>.<operation>`. By default,
+# all notifications related to authentication are automatically
+# suppressed. This field can be set multiple times in order to opt-out
+# of multiple notification topics. For example, the following
+# suppresses notifications describing user creation or successful
+# authentication events: notification_opt_out=identity.user.create
 # notification_opt_out=identity.authenticate.success (multi valued)
 #notification_opt_out = identity.authenticate.success
 #notification_opt_out = identity.authenticate.pending
 #notification_opt_out = identity.authenticate.failed
-
 #
 # From oslo.log
 #
 
-# If set to true, the logging level will be set to DEBUG instead of the default
-# INFO level. (boolean value)
+# If set to true, the logging level will be set to DEBUG instead of
+# the default INFO level. (boolean value)
 # Note: This option can be changed without restarting.
 #debug = false
 
-# The name of a logging configuration file. This file is appended to any
-# existing logging configuration files. For details about logging configuration
-# files, see the Python logging module documentation. Note that when logging
-# configuration files are used then all logging configuration is set in the
-# configuration file and other logging configuration options are ignored (for
-# example, logging_context_format_string). (string value)
+# The name of a logging configuration file. This file is appended to
+# any existing logging configuration files. For details about logging
+# configuration files, see the Python logging module documentation.
+# Note that when logging configuration files are used then all logging
+# configuration is set in the configuration file and other logging
+# configuration options are ignored (for example,
+# logging_context_format_string). (string value)
 # Note: This option can be changed without restarting.
 # Deprecated group/name - [DEFAULT]/log_config
-#log_config_append = <None>
 
 # Defines the format string for %%(asctime)s in log records. Default:
-# %(default)s . This option is ignored if log_config_append is set. (string
-# value)
+# %(default)s . This option is ignored if log_config_append is set.
+# (string value)
 #log_date_format = %Y-%m-%d %H:%M:%S
 
-# (Optional) Name of log file to send logging output to. If no default is set,
-# logging will go to stderr as defined by use_stderr. This option is ignored if
-# log_config_append is set. (string value)
+# (Optional) Name of log file to send logging output to. If no default
+# is set, logging will go to stderr as defined by use_stderr. This
+# option is ignored if log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logfile
 #log_file = <None>
 
-# (Optional) The base directory used for relative log_file  paths. This option
-# is ignored if log_config_append is set. (string value)
+# (Optional) The base directory used for relative log_file  paths.
+# This option is ignored if log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logdir
 #log_dir = <None>
 
-# Uses logging handler designed to watch file system. When log file is moved or
-# removed this handler will open a new log file with specified path
-# instantaneously. It makes sense only if log_file option is specified and
-# Linux platform is used. This option is ignored if log_config_append is set.
+# Uses logging handler designed to watch file system. When log file is
+# moved or removed this handler will open a new log file with
+# specified path instantaneously. It makes sense only if log_file
+# option is specified and Linux platform is used. This option is
+# ignored if log_config_append is set. (boolean value)
+#watch_log_file = false
+
+# Use syslog for logging. Existing syslog format is DEPRECATED and
+# will be changed later to honor RFC5424. This option is ignored if
+# log_config_append is set. (boolean value)
+#use_syslog = false
+
+# Enable journald for logging. If running in a systemd environment you
+# may wish to enable journal support. Doing so will use the journal
+# native protocol which includes structured metadata in addition to
+# log messages.This option is ignored if log_config_append is set.
 # (boolean value)
-#watch_log_file = false
-
-# Use syslog for logging. Existing syslog format is DEPRECATED and will be
-# changed later to honor RFC5424. This option is ignored if log_config_append
-# is set. (boolean value)
-#use_syslog = false
-
-# Enable journald for logging. If running in a systemd environment you may wish
-# to enable journal support. Doing so will use the journal native protocol
-# which includes structured metadata in addition to log messages.This option is
-# ignored if log_config_append is set. (boolean value)
 #use_journal = false
 
 # Syslog facility to receive log lines. This option is ignored if
 # log_config_append is set. (string value)
 #syslog_log_facility = LOG_USER
 
-# Use JSON formatting for logging. This option is ignored if log_config_append
-# is set. (boolean value)
+# Use JSON formatting for logging. This option is ignored if
+# log_config_append is set. (boolean value)
 #use_json = false
 
-# Log output to standard error. This option is ignored if log_config_append is
-# set. (boolean value)
+# Log output to standard error. This option is ignored if
+# log_config_append is set. (boolean value)
 #use_stderr = false
 
 # Format string to use for log messages with context. (string value)
 #logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
 
-# Format string to use for log messages when context is undefined. (string
-# value)
+# Format string to use for log messages when context is undefined.
+# (string value)
 #logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
 
-# Additional data to append to log message when logging level for the message
-# is DEBUG. (string value)
+# Additional data to append to log message when logging level for the
+# message is DEBUG. (string value)
 #logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
 
-# Prefix each line of exception output with this format. (string value)
+# Prefix each line of exception output with this format. (string
+# value)
 #logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
 
 # Defines the format string for %(user_identity)s that is used in
 # logging_context_format_string. (string value)
 #logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
 
-# List of package logging levels in logger=LEVEL pairs. This option is ignored
-# if log_config_append is set. (list value)
+# List of package logging levels in logger=LEVEL pairs. This option is
+# ignored if log_config_append is set. (list value)
 #default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
 
 # Enables or disables publication of error events. (boolean value)
 #publish_errors = false
 
-# The format for an instance that is passed with the log message. (string
-# value)
+# The format for an instance that is passed with the log message.
+# (string value)
 #instance_format = "[instance: %(uuid)s] "
 
-# The format for an instance UUID that is passed with the log message. (string
-# value)
+# The format for an instance UUID that is passed with the log message.
+# (string value)
 #instance_uuid_format = "[instance: %(uuid)s] "
 
 # Interval, number of seconds, of log rate limiting. (integer value)
 #rate_limit_interval = 0
 
-# Maximum number of logged messages per rate_limit_interval. (integer value)
+# Maximum number of logged messages per rate_limit_interval. (integer
+# value)
 #rate_limit_burst = 0
 
-# Log level name used by rate limiting: CRITICAL, ERROR, INFO, WARNING, DEBUG
-# or empty string. Logs with level greater or equal to rate_limit_except_level
-# are not filtered. An empty string means that all levels are filtered. (string
-# value)
+# Log level name used by rate limiting: CRITICAL, ERROR, INFO,
+# WARNING, DEBUG or empty string. Logs with level greater or equal to
+# rate_limit_except_level are not filtered. An empty string means that
+# all levels are filtered. (string value)
 #rate_limit_except_level = CRITICAL
 
 # Enables or disables fatal status of deprecations. (boolean value)
 #fatal_deprecations = false
-
 #
 # From oslo.messaging
 #
@@ -265,14 +280,17 @@
 # Size of RPC connection pool. (integer value)
 #rpc_conn_pool_size = 30
 
-# The pool size limit for connections expiration policy (integer value)
+# The pool size limit for connections expiration policy (integer
+# value)
 #conn_pool_min_size = 2
 
-# The time-to-live in sec of idle connections in the pool (integer value)
+# The time-to-live in sec of idle connections in the pool (integer
+# value)
 #conn_pool_ttl = 1200
 
-# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
-# The "host" option should point or resolve to this address. (string value)
+# ZeroMQ bind address. Should be a wildcard (*), an ethernet
+# interface, or IP. The "host" option should point or resolve to this
+# address. (string value)
 #rpc_zmq_bind_address = *
 
 # MatchMaker driver. (string value)
@@ -285,51 +303,54 @@
 # Number of ZeroMQ contexts, defaults to 1. (integer value)
 #rpc_zmq_contexts = 1
 
-# Maximum number of ingress messages to locally buffer per topic. Default is
-# unlimited. (integer value)
+# Maximum number of ingress messages to locally buffer per topic.
+# Default is unlimited. (integer value)
 #rpc_zmq_topic_backlog = <None>
 
 # Directory for holding IPC sockets. (string value)
 #rpc_zmq_ipc_dir = /var/run/openstack
 
-# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
-# "host" option, if running Nova. (string value)
+# Name of this node. Must be a valid hostname, FQDN, or IP address.
+# Must match "host" option, if running Nova. (string value)
 #rpc_zmq_host = localhost
 
-# Number of seconds to wait before all pending messages will be sent after
-# closing a socket. The default value of -1 specifies an infinite linger
-# period. The value of 0 specifies no linger period. Pending messages shall be
-# discarded immediately when the socket is closed. Positive values specify an
-# upper bound for the linger period. (integer value)
+# Number of seconds to wait before all pending messages will be sent
+# after closing a socket. The default value of -1 specifies an
+# infinite linger period. The value of 0 specifies no linger period.
+# Pending messages shall be discarded immediately when the socket is
+# closed. Positive values specify an upper bound for the linger
+# period. (integer value)
 # Deprecated group/name - [DEFAULT]/rpc_cast_timeout
 #zmq_linger = -1
 
-# The default number of seconds that poll should wait. Poll raises timeout
-# exception when timeout expired. (integer value)
+# The default number of seconds that poll should wait. Poll raises
+# timeout exception when timeout expired. (integer value)
 #rpc_poll_timeout = 1
 
-# Expiration timeout in seconds of a name service record about existing target
-# ( < 0 means no timeout). (integer value)
+# Expiration timeout in seconds of a name service record about
+# existing target ( < 0 means no timeout). (integer value)
 #zmq_target_expire = 300
 
-# Update period in seconds of a name service record about existing target.
-# (integer value)
+# Update period in seconds of a name service record about existing
+# target. (integer value)
 #zmq_target_update = 180
 
-# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
-# value)
+# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy.
+# (boolean value)
 #use_pub_sub = false
 
 # Use ROUTER remote proxy. (boolean value)
 #use_router_proxy = false
 
-# This option makes direct connections dynamic or static. It makes sense only
-# with use_router_proxy=False which means to use direct connections for direct
-# message types (ignored otherwise). (boolean value)
+# This option makes direct connections dynamic or static. It makes
+# sense only with use_router_proxy=False which means to use direct
+# connections for direct message types (ignored otherwise). (boolean
+# value)
 #use_dynamic_connections = false
 
-# How many additional connections to a host will be made for failover reasons.
-# This option is actual only in dynamic connections mode. (integer value)
+# How many additional connections to a host will be made for failover
+# reasons. This option is actual only in dynamic connections mode.
+# (integer value)
 #zmq_failover_connections = 2
 
 # Minimal port number for random ports range. (port value)
@@ -342,8 +363,8 @@
 # Maximum value: 65536
 #rpc_zmq_max_port = 65536
 
-# Number of retries to find free port number before fail with ZMQBindError.
-# (integer value)
+# Number of retries to find free port number before fail with
+# ZMQBindError. (integer value)
 #rpc_zmq_bind_port_retries = 100
 
 # Default serialization mechanism for serializing/deserializing
@@ -353,78 +374,83 @@
 # msgpack - <No description provided>
 #rpc_zmq_serialization = json
 
-# This option configures round-robin mode in zmq socket. True means not keeping
-# a queue when server side disconnects. False means to keep queue and messages
-# even if server is disconnected, when the server appears we send all
-# accumulated messages to it. (boolean value)
+# This option configures round-robin mode in zmq socket. True means
+# not keeping a queue when server side disconnects. False means to
+# keep queue and messages even if server is disconnected, when the
+# server appears we send all accumulated messages to it. (boolean
+# value)
 #zmq_immediate = true
 
-# Enable/disable TCP keepalive (KA) mechanism. The default value of -1 (or any
-# other negative value) means to skip any overrides and leave it to OS default;
-# 0 and 1 (or any other positive value) mean to disable and enable the option
-# respectively. (integer value)
+# Enable/disable TCP keepalive (KA) mechanism. The default value of -1
+# (or any other negative value) means to skip any overrides and leave
+# it to OS default; 0 and 1 (or any other positive value) mean to
+# disable and enable the option respectively. (integer value)
 #zmq_tcp_keepalive = -1
 
-# The duration between two keepalive transmissions in idle condition. The unit
-# is platform dependent, for example, seconds in Linux, milliseconds in Windows
-# etc. The default value of -1 (or any other negative value and 0) means to
-# skip any overrides and leave it to OS default. (integer value)
+# The duration between two keepalive transmissions in idle condition.
+# The unit is platform dependent, for example, seconds in Linux,
+# milliseconds in Windows etc. The default value of -1 (or any other
+# negative value and 0) means to skip any overrides and leave it to OS
+# default. (integer value)
 #zmq_tcp_keepalive_idle = -1
 
-# The number of retransmissions to be carried out before declaring that remote
-# end is not available. The default value of -1 (or any other negative value
-# and 0) means to skip any overrides and leave it to OS default. (integer
-# value)
+# The number of retransmissions to be carried out before declaring
+# that remote end is not available. The default value of -1 (or any
+# other negative value and 0) means to skip any overrides and leave it
+# to OS default. (integer value)
 #zmq_tcp_keepalive_cnt = -1
 
 # The duration between two successive keepalive retransmissions, if
-# acknowledgement to the previous keepalive transmission is not received. The
-# unit is platform dependent, for example, seconds in Linux, milliseconds in
-# Windows etc. The default value of -1 (or any other negative value and 0)
-# means to skip any overrides and leave it to OS default. (integer value)
+# acknowledgement to the previous keepalive transmission is not
+# received. The unit is platform dependent, for example, seconds in
+# Linux, milliseconds in Windows etc. The default value of -1 (or any
+# other negative value and 0) means to skip any overrides and leave it
+# to OS default. (integer value)
 #zmq_tcp_keepalive_intvl = -1
 
-# Maximum number of (green) threads to work concurrently. (integer value)
+# Maximum number of (green) threads to work concurrently. (integer
+# value)
 #rpc_thread_pool_size = 100
 
-# Expiration timeout in seconds of a sent/received message after which it is
-# not tracked anymore by a client/server. (integer value)
+# Expiration timeout in seconds of a sent/received message after which
+# it is not tracked anymore by a client/server. (integer value)
 #rpc_message_ttl = 300
 
-# Wait for message acknowledgements from receivers. This mechanism works only
-# via proxy without PUB/SUB. (boolean value)
+# Wait for message acknowledgements from receivers. This mechanism
+# works only via proxy without PUB/SUB. (boolean value)
 #rpc_use_acks = false
 
-# Number of seconds to wait for an ack from a cast/call. After each retry
-# attempt this timeout is multiplied by some specified multiplier. (integer
-# value)
+# Number of seconds to wait for an ack from a cast/call. After each
+# retry attempt this timeout is multiplied by some specified
+# multiplier. (integer value)
 #rpc_ack_timeout_base = 15
 
-# Number to multiply base ack timeout by after each retry attempt. (integer
-# value)
+# Number to multiply base ack timeout by after each retry attempt.
+# (integer value)
 #rpc_ack_timeout_multiplier = 2
 
-# Default number of message sending attempts in case of any problems occurred:
-# positive value N means at most N retries, 0 means no retries, None or -1 (or
-# any other negative values) mean to retry forever. This option is used only if
-# acknowledgments are enabled. (integer value)
+# Default number of message sending attempts in case of any problems
+# occurred: positive value N means at most N retries, 0 means no
+# retries, None or -1 (or any other negative values) mean to retry
+# forever. This option is used only if acknowledgments are enabled.
+# (integer value)
 #rpc_retry_attempts = 3
 
-# List of publisher hosts SubConsumer can subscribe on. This option has higher
-# priority then the default publishers list taken from the matchmaker. (list
-# value)
+# List of publisher hosts SubConsumer can subscribe on. This option
+# has higher priority then the default publishers list taken from the
+# matchmaker. (list value)
 #subscribe_on =
 
-# Size of executor thread pool when executor is threading or eventlet. (integer
-# value)
+# Size of executor thread pool when executor is threading or eventlet.
+# (integer value)
 # Deprecated group/name - [DEFAULT]/rpc_thread_pool_size
 #executor_thread_pool_size = 64
 
 # Seconds to wait for a response from a call. (integer value)
 #rpc_response_timeout = 60
 
-# The network address and optional user credentials for connecting to the
-# messaging backend, in URL format. The expected format is:
+# The network address and optional user credentials for connecting to
+# the messaging backend, in URL format. The expected format is:
 #
 # driver://[user:pass@]host:port[,[userN:passN@]hostN:portN]/virtual_host?query
 #
@@ -435,17 +461,19 @@
 # https://docs.openstack.org/oslo.messaging/latest/reference/transport.html
 # (string value)
 #transport_url = <None>
-
-# DEPRECATED: The messaging driver to use, defaults to rabbit. Other drivers
-# include amqp and zmq. (string value)
+transport_url = rabbit://openstack:opnfv_secret@10.167.4.28:5672,openstack:opnfv_secret@10.167.4.29:5672,openstack:opnfv_secret@10.167.4.30:5672//openstack
+
+# DEPRECATED: The messaging driver to use, defaults to rabbit. Other
+# drivers include amqp and zmq. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
 #rpc_backend = rabbit
 
-# The default exchange under which topics are scoped. May be overridden by an
-# exchange name specified in the transport_url option. (string value)
-#control_exchange = keystone
+# The default exchange under which topics are scoped. May be
+# overridden by an exchange name specified in the transport_url
+# option. (string value)
+#control_exchange = openstack
 
 
 [application_credential]
@@ -455,117 +483,1582 @@
 #
 
 # Entry point for the application credential backend driver in the
-# `keystone.application_credential` namespace.  Keystone only provides a `sql`
-# driver, so there is no reason to change this unless you are providing a
+# `keystone.application_credential` namespace.  Keystone only provides
+# a `sql` driver, so there is no reason to change this unless you are
+# providing a custom entry point. (string value)
+#driver = sql
+
+# Toggle for application credential caching. This has no effect unless
+# global caching is enabled. (boolean value)
+#caching = true
+
+# Time to cache application credential data in seconds. This has no
+# effect unless global caching is enabled. (integer value)
+#cache_time = <None>
+
+# Maximum number of application credentials a user is permitted to
+# create. A value of -1 means unlimited. If a limit is not set, users
+# are permitted to create application credentials at will, which could
+# lead to bloat in the keystone database or open keystone to a DoS
+# attack. (integer value)
+#user_limit = -1
+
+
+[assignment]
+
+#
+# From keystone
+#
+
+# Entry point for the assignment backend driver (where role
+# assignments are stored) in the `keystone.assignment` namespace. Only
+# a SQL driver is supplied by keystone itself. Unless you are writing
+# proprietary drivers for keystone, you do not need to set this
+# option. (string value)
+#driver = sql
+
+# A list of role names which are prohibited from being an implied
+# role. (list value)
+#prohibited_implied_role = admin
+driver = sql
+
+
+[auth]
+
+#
+# From keystone
+#
+
+# Allowed authentication methods. Note: You should disable the
+# `external` auth method if you are currently using federation.
+# External auth and federation both use the REMOTE_USER variable.
+# Since both the mapped and external plugin are being invoked to
+# validate attributes in the request environment, it can cause
+# conflicts. (list value)
+#methods = external,password,token,oauth1,mapped,application_credential
+
+methods = password,token
+
+# Entry point for the password auth plugin module in the
+# `keystone.auth.password` namespace. You do not need to set this
+# unless you are overriding keystone's own password authentication
+# plugin. (string value)
+#password = <None>
+
+# Entry point for the token auth plugin module in the
+# `keystone.auth.token` namespace. You do not need to set this unless
+# you are overriding keystone's own token authentication plugin.
+# (string value)
+#token = <None>
+
+# Entry point for the external (`REMOTE_USER`) auth plugin module in
+# the `keystone.auth.external` namespace. Supplied drivers are
+# `DefaultDomain` and `Domain`. The default driver is `DefaultDomain`,
+# which assumes that all users identified by the username specified to
+# keystone in the `REMOTE_USER` variable exist within the context of
+# the default domain. The `Domain` option expects an additional
+# environment variable be presented to keystone, `REMOTE_DOMAIN`,
+# containing the domain name of the `REMOTE_USER` (if `REMOTE_DOMAIN`
+# is not set, then the default domain will be used instead). You do
+# not need to set this unless you are taking advantage of "external
+# authentication", where the application server (such as Apache) is
+# handling authentication instead of keystone. (string value)
+#external = <None>
+
+# Entry point for the OAuth 1.0a auth plugin module in the
+# `keystone.auth.oauth1` namespace. You do not need to set this unless
+# you are overriding keystone's own `oauth1` authentication plugin.
+# (string value)
+#oauth1 = <None>
+
+# Entry point for the mapped auth plugin module in the
+# `keystone.auth.mapped` namespace. You do not need to set this unless
+# you are overriding keystone's own `mapped` authentication plugin.
+# (string value)
+#mapped = <None>
+
+# Entry point for the application_credential auth plugin module in the
+# `keystone.auth.application_credential` namespace. You do not need to
+# set this unless you are overriding keystone's own
+# `application_credential` authentication plugin. (string value)
+#application_credential = <None>
+
+
+[catalog]
+
+#
+# From keystone
+#
+
+# Absolute path to the file used for the templated catalog backend.
+# This option is only used if the `[catalog] driver` is set to
+# `templated`. (string value)
+template_file = default_catalog.templates
+
+# Entry point for the catalog driver in the `keystone.catalog`
+# namespace. Keystone provides a `sql` option (which supports basic
+# CRUD operations through SQL), a `templated` option (which loads the
+# catalog from a templated catalog file on disk), and a
+# `endpoint_filter.sql` option (which supports arbitrary service
+# catalogs per project). (string value)
+driver = sql
+
+# Toggle for catalog caching. This has no effect unless global caching
+# is enabled. In a typical deployment, there is no reason to disable
+# this. (boolean value)
+#caching = true
+
+# Time to cache catalog data (in seconds). This has no effect unless
+# global and catalog caching are both enabled. Catalog data (services,
+# endpoints, etc.) typically does not change frequently, and so a
+# longer duration than the global default may be desirable. (integer
+# value)
+#cache_time = <None>
+
+# Maximum number of entities that will be returned in a catalog
+# collection. There is typically no reason to set this, as it would be
+# unusual for a deployment to have enough services or endpoints to
+# exceed a reasonable limit. (integer value)
+#list_limit = <None>
+
+
+[credential]
+
+#
+# From keystone
+#
+
+# Entry point for the credential backend driver in the
+# `keystone.credential` namespace. Keystone only provides a `sql`
+# driver, so there's no reason to change this unless you are providing
+# a custom entry point. (string value)
+#driver = sql
+
+# Entry point for credential encryption and decryption operations in
+# the `keystone.credential.provider` namespace. Keystone only provides
+# a `fernet` driver, so there's no reason to change this unless you
+# are providing a custom entry point to encrypt and decrypt
+# credentials. (string value)
+#provider = fernet
+
+# Directory containing Fernet keys used to encrypt and decrypt
+# credentials stored in the credential backend. Fernet keys used to
+# encrypt credentials have no relationship to Fernet keys used to
+# encrypt Fernet tokens. Both sets of keys should be managed
+# separately and require different rotation policies. Do not share
+# this repository with the repository used to manage keys for Fernet
+# tokens. (string value)
+key_repository = /var/lib/keystone/credential-keys
+
+
+[domain_config]
+
+#
+# From keystone
+#
+
+# Entry point for the domain-specific configuration driver in the
+# `keystone.resource.domain_config` namespace. Only a `sql` option is
+# provided by keystone, so there is no reason to set this unless you
+# are providing a custom entry point. (string value)
+#driver = sql
+
+# Toggle for caching of the domain-specific configuration backend.
+# This has no effect unless global caching is enabled. There is
+# normally no reason to disable this. (boolean value)
+#caching = true
+
+# Time-to-live (TTL, in seconds) to cache domain-specific
+# configuration data. This has no effect unless `[domain_config]
+# caching` is enabled. (integer value)
+#cache_time = 300
+
+
+[endpoint_filter]
+
+#
+# From keystone
+#
+
+# Entry point for the endpoint filter driver in the
+# `keystone.endpoint_filter` namespace. Only a `sql` option is
+# provided by keystone, so there is no reason to set this unless you
+# are providing a custom entry point. (string value)
+#driver = sql
+
+# This controls keystone's behavior if the configured endpoint filters
+# do not result in any endpoints for a user + project pair (and
+# therefore a potentially empty service catalog). If set to true,
+# keystone will return the entire service catalog. If set to false,
+# keystone will return an empty service catalog. (boolean value)
+#return_all_endpoints_if_no_filter = true
+
+
+[endpoint_policy]
+
+#
+# From keystone
+#
+
+# Entry point for the endpoint policy driver in the
+# `keystone.endpoint_policy` namespace. Only a `sql` driver is
+# provided by keystone, so there is no reason to set this unless you
+# are providing a custom entry point. (string value)
+#driver = sql
+
+
+[eventlet_server]
+
+#
+# From keystone
+#
+
+# DEPRECATED: The IP address of the network interface for the public
+# service to listen on. (unknown value)
+# Deprecated group/name - [DEFAULT]/bind_host
+# Deprecated group/name - [DEFAULT]/public_bind_host
+# This option is deprecated for removal since K.
+# Its value may be silently ignored in the future.
+# Reason: Support for running keystone under eventlet has been removed
+# in the Newton release. These options remain for backwards
+# compatibility because they are used for URL substitutions.
+#public_bind_host = 10.167.4.37
+
+# DEPRECATED: The port number for the public service to listen on.
+# (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/public_port
+# This option is deprecated for removal since K.
+# Its value may be silently ignored in the future.
+# Reason: Support for running keystone under eventlet has been removed
+# in the Newton release. These options remain for backwards
+# compatibility because they are used for URL substitutions.
+#public_port = 5000
+
+# DEPRECATED: The IP address of the network interface for the admin
+# service to listen on. (unknown value)
+# Deprecated group/name - [DEFAULT]/bind_host
+# Deprecated group/name - [DEFAULT]/admin_bind_host
+# This option is deprecated for removal since K.
+# Its value may be silently ignored in the future.
+# Reason: Support for running keystone under eventlet has been removed
+# in the Newton release. These options remain for backwards
+# compatibility because they are used for URL substitutions.
+#admin_bind_host = 10.167.4.37
+
+# DEPRECATED: The port number for the admin service to listen on.
+# (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/admin_port
+# This option is deprecated for removal since K.
+# Its value may be silently ignored in the future.
+# Reason: Support for running keystone under eventlet has been removed
+# in the Newton release. These options remain for backwards
+# compatibility because they are used for URL substitutions.
+#admin_port = 35357
+
+
+[extra_headers]
+
+#
+# From keystone
+#
+
+# Specifies the distribution of the keystone server. (string value)
+#Distribution = Ubuntu
+
+[federation]
+
+#
+# From keystone
+#
+
+# Entry point for the federation backend driver in the
+# `keystone.federation` namespace. Keystone only provides a `sql`
+# driver, so there is no reason to set this option unless you are
+# providing a custom entry point. (string value)
+#driver = sql
+
+# Prefix to use when filtering environment variable names for
+# federated assertions. Matched variables are passed into the
+# federated mapping engine. (string value)
+#assertion_prefix =
+
+# Value to be used to obtain the entity ID of the Identity Provider
+# from the environment. For `mod_shib`, this would be `Shib-Identity-
+# Provider`. For `mod_auth_openidc`, this could be `HTTP_OIDC_ISS`.
+# For `mod_auth_mellon`, this could be `MELLON_IDP`. (string value)
+#remote_id_attribute = <None>
+
+# An arbitrary domain name that is reserved to allow federated
+# ephemeral users to have a domain concept. Note that an admin will
+# not be able to create a domain with this name or update an existing
+# domain to this name. You are not advised to change this value unless
+# you really have to. (string value)
+#federated_domain_name = Federated
+
+# A list of trusted dashboard hosts. Before accepting a Single Sign-On
+# request to return a token, the origin host must be a member of this
+# list. This configuration option may be repeated for multiple values.
+# You must set this in order to use web-based SSO flows. For example:
+# trusted_dashboard=https://acme.example.com/auth/websso
+# trusted_dashboard=https://beta.example.com/auth/websso (multi
+# valued)
+#trusted_dashboard =
+
+# Absolute path to an HTML file used as a Single Sign-On callback
+# handler. This page is expected to redirect the user from keystone
+# back to a trusted dashboard host, by form encoding a token in a POST
+# request. Keystone's default value should be sufficient for most
+# deployments. (string value)
+#sso_callback_template = /etc/keystone/sso_callback_template.html
+
+# Toggle for federation caching. This has no effect unless global
+# caching is enabled. There is typically no reason to disable this.
+# (boolean value)
+#caching = true
+
+
+[fernet_tokens]
+
+#
+# From keystone
+#
+
+# Directory containing Fernet token keys. This directory must exist
+# before using `keystone-manage fernet_setup` for the first time, must
+# be writable by the user running `keystone-manage fernet_setup` or
+# `keystone-manage fernet_rotate`, and of course must be readable by
+# keystone's server process. The repository may contain keys in one of
+# three states: a single staged key (always index 0) used for token
+# validation, a single primary key (always the highest index) used for
+# token creation and validation, and any number of secondary keys (all
+# other index values) used for token validation. With multiple
+# keystone nodes, each node must share the same key repository
+# contents, with the exception of the staged key (index 0). It is safe
+# to run `keystone-manage fernet_rotate` once on any one node to
+# promote a staged key (index 0) to be the new primary (incremented
+# from the previous highest index), and produce a new staged key (a
+# new key with index 0); the resulting repository can then be
+# atomically replicated to other nodes without any risk of race
+# conditions (for example, it is safe to run `keystone-manage
+# fernet_rotate` on host A, wait any amount of time, create a tarball
+# of the directory on host A, unpack it on host B to a temporary
+# location, and atomically move (`mv`) the directory into place on
+# host B). Running `keystone-manage fernet_rotate` *twice* on a key
+# repository without syncing other nodes will result in tokens that
+# can not be validated by all nodes. (string value)
+key_repository = /var/lib/keystone/fernet-keys
+
+# This controls how many keys are held in rotation by `keystone-manage
+# fernet_rotate` before they are discarded. The default value of 3
+# means that keystone will maintain one staged key (always index 0),
+# one primary key (the highest numerical index), and one secondary key
+# (every other index). Increasing this value means that additional
+# secondary keys will be kept in the rotation. (integer value)
+# Minimum value: 1
+max_active_keys = 3
+
+
+[identity]
+
+#
+# From keystone
+#
+
+# This references the domain to use for all Identity API v2 requests
+# (which are not aware of domains). A domain with this ID can
+# optionally be created for you by `keystone-manage bootstrap`. The
+# domain referenced by this ID cannot be deleted on the v3 API, to
+# prevent accidentally breaking the v2 API. There is nothing special
+# about this domain, other than the fact that it must exist to order
+# to maintain support for your v2 clients. There is typically no
+# reason to change this value. (string value)
+#default_domain_id = default
+
+# A subset (or all) of domains can have their own identity driver,
+# each with their own partial configuration options, stored in either
+# the resource backend or in a file in a domain configuration
+# directory (depending on the setting of `[identity]
+# domain_configurations_from_database`). Only values specific to the
+# domain need to be specified in this manner. This feature is disabled
+# by default, but may be enabled by default in a future release; set
+# to true to enable. (boolean value)
+#domain_specific_drivers_enabled = false
+
+# By default, domain-specific configuration data is read from files in
+# the directory identified by `[identity] domain_config_dir`. Enabling
+# this configuration option allows you to instead manage domain-
+# specific configurations through the API, which are then persisted in
+# the backend (typically, a SQL database), rather than using
+# configuration files on disk. (boolean value)
+#domain_configurations_from_database = false
+
+# Absolute path where keystone should locate domain-specific
+# `[identity]` configuration files. This option has no effect unless
+# `[identity] domain_specific_drivers_enabled` is set to true. There
+# is typically no reason to change this value. (string value)
+#domain_config_dir = /etc/keystone/domains
+
+# Entry point for the identity backend driver in the
+# `keystone.identity` namespace. Keystone provides a `sql` and `ldap`
+# driver. This option is also used as the default driver selection
+# (along with the other configuration variables in this section) in
+# the event that `[identity] domain_specific_drivers_enabled` is
+# enabled, but no applicable domain-specific configuration is defined
+# for the domain in question. Unless your deployment primarily relies
+# on `ldap` AND is not using domain-specific configuration, you should
+# typically leave this set to `sql`. (string value)
+driver = sql
+
+# Toggle for identity caching. This has no effect unless global
+# caching is enabled. There is typically no reason to disable this.
+# (boolean value)
+#caching = true
+
+# Time to cache identity data (in seconds). This has no effect unless
+# global and identity caching are enabled. (integer value)
+#cache_time = 600
+
+# Maximum allowed length for user passwords. Decrease this value to
+# improve performance. Changing this value does not effect existing
+# passwords. (integer value)
+# Maximum value: 4096
+#max_password_length = 4096
+
+# Maximum number of entities that will be returned in an identity
+# collection. (integer value)
+#list_limit = <None>
+
+# The password hashing algorithm to use for passwords stored within
+# keystone. (string value)
+# Possible values:
+# bcrypt - <No description provided>
+# scrypt - <No description provided>
+# pbkdf2_sha512 - <No description provided>
+#password_hash_algorithm = bcrypt
+
+# This option represents a trade off between security and performance.
+# Higher values lead to slower performance, but higher security.
+# Changing this option will only affect newly created passwords as
+# existing password hashes already have a fixed number of rounds
+# applied, so it is safe to tune this option in a running cluster.
+# The default for bcrypt is 12, must be between 4 and 31, inclusive.
+# The default for scrypt is 16, must be within `range(1,32)`.  The
+# default for pbkdf_sha512 is 60000, must be within `range(1,1<<32)`
+# WARNING: If using scrypt, increasing this value increases BOTH time
+# AND memory requirements to hash a password. (integer value)
+#password_hash_rounds = <None>
+
+# Optional block size to pass to scrypt hash function (the `r`
+# parameter). Useful for tuning scrypt to optimal performance for your
+# CPU architecture. This option is only used when the
+# `password_hash_algorithm` option is set to `scrypt`. Defaults to 8.
+# (integer value)
+#scrypt_block_size = <None>
+
+# Optional parallelism to pass to scrypt hash function (the `p`
+# parameter). This option is only used when the
+# `password_hash_algorithm` option is set to `scrypt`. Defaults to 1.
+# (integer value)
+#scrypt_parallelism = <None>
+
+# Number of bytes to use in scrypt and pbkfd2_sha512 hashing salt.
+# Default for scrypt is 16 bytes. Default for pbkfd2_sha512 is 16
+# bytes.  Limited to a maximum of 96 bytes due to the size of the
+# column used to store password hashes. (integer value)
+# Minimum value: 0
+# Maximum value: 96
+#salt_bytesize = <None>
+
+
+[identity_mapping]
+
+#
+# From keystone
+#
+
+# Entry point for the identity mapping backend driver in the
+# `keystone.identity.id_mapping` namespace. Keystone only provides a
+# `sql` driver, so there is no reason to change this unless you are
+# providing a custom entry point. (string value)
+#driver = sql
+
+# Entry point for the public ID generator for user and group entities
+# in the `keystone.identity.id_generator` namespace. The Keystone
+# identity mapper only supports generators that produce 64 bytes or
+# less. Keystone only provides a `sha256` entry point, so there is no
+# reason to change this value unless you're providing a custom entry
+# point. (string value)
+#generator = sha256
+
+# The format of user and group IDs changed in Juno for backends that
+# do not generate UUIDs (for example, LDAP), with keystone providing a
+# hash mapping to the underlying attribute in LDAP. By default this
+# mapping is disabled, which ensures that existing IDs will not
+# change. Even when the mapping is enabled by using domain-specific
+# drivers (`[identity] domain_specific_drivers_enabled`), any users
+# and groups from the default domain being handled by LDAP will still
+# not be mapped to ensure their IDs remain backward compatible.
+# Setting this value to false will enable the new mapping for all
+# backends, including the default LDAP driver. It is only guaranteed
+# to be safe to enable this option if you do not already have
+# assignments for users and groups from the default LDAP domain, and
+# you consider it to be acceptable for Keystone to provide the
+# different IDs to clients than it did previously (existing IDs in the
+# API will suddenly change). Typically this means that the only time
+# you can set this value to false is when configuring a fresh
+# installation, although that is the recommended value. (boolean
+# value)
+#backward_compatible_ids = true
+
+
+[ldap]
+
+#
+# From keystone
+#
+
+# URL(s) for connecting to the LDAP server. Multiple LDAP URLs may be
+# specified as a comma separated string. The first URL to successfully
+# bind is used for the connection. (string value)
+#url = ldap://localhost
+
+# The user name of the administrator bind DN to use when querying the
+# LDAP server, if your LDAP server requires it. (string value)
+#user = <None>
+
+# The password of the administrator bind DN to use when querying the
+# LDAP server, if your LDAP server requires it. (string value)
+#password = <None>
+
+# The default LDAP server suffix to use, if a DN is not defined via
+# either `[ldap] user_tree_dn` or `[ldap] group_tree_dn`. (string
+# value)
+#suffix = cn=example,cn=com
+
+# The search scope which defines how deep to search within the search
+# base. A value of `one` (representing `oneLevel` or `singleLevel`)
+# indicates a search of objects immediately below to the base object,
+# but does not include the base object itself. A value of `sub`
+# (representing `subtree` or `wholeSubtree`) indicates a search of
+# both the base object itself and the entire subtree below it. (string
+# value)
+# Possible values:
+# one - <No description provided>
+# sub - <No description provided>
+#query_scope = one
+
+# Defines the maximum number of results per page that keystone should
+# request from the LDAP server when listing objects. A value of zero
+# (`0`) disables paging. (integer value)
+# Minimum value: 0
+#page_size = 0
+
+# The LDAP dereferencing option to use for queries involving aliases.
+# A value of `default` falls back to using default dereferencing
+# behavior configured by your `ldap.conf`. A value of `never` prevents
+# aliases from being dereferenced at all. A value of `searching`
+# dereferences aliases only after name resolution. A value of
+# `finding` dereferences aliases only during name resolution. A value
+# of `always` dereferences aliases in all cases. (string value)
+# Possible values:
+# never - <No description provided>
+# searching - <No description provided>
+# always - <No description provided>
+# finding - <No description provided>
+# default - <No description provided>
+#alias_dereferencing = default
+
+# Sets the LDAP debugging level for LDAP calls. A value of 0 means
+# that debugging is not enabled. This value is a bitmask, consult your
+# LDAP documentation for possible values. (integer value)
+# Minimum value: -1
+#debug_level = <None>
+
+# Sets keystone's referral chasing behavior across directory
+# partitions. If left unset, the system's default behavior will be
+# used. (boolean value)
+#chase_referrals = <None>
+
+# The search base to use for users. Defaults to the `[ldap] suffix`
+# value. (string value)
+#user_tree_dn = <None>
+
+# The LDAP search filter to use for users. (string value)
+#user_filter = <None>
+
+# The LDAP object class to use for users. (string value)
+#user_objectclass = inetOrgPerson
+
+# The LDAP attribute mapped to user IDs in keystone. This must NOT be
+# a multivalued attribute. User IDs are expected to be globally unique
+# across keystone domains and URL-safe. (string value)
+#user_id_attribute = cn
+
+# The LDAP attribute mapped to user names in keystone. User names are
+# expected to be unique only within a keystone domain and are not
+# expected to be URL-safe. (string value)
+#user_name_attribute = sn
+
+# The LDAP attribute mapped to user descriptions in keystone. (string
+# value)
+#user_description_attribute = description
+
+# The LDAP attribute mapped to user emails in keystone. (string value)
+#user_mail_attribute = mail
+
+# The LDAP attribute mapped to user passwords in keystone. (string
+# value)
+#user_pass_attribute = userPassword
+
+# The LDAP attribute mapped to the user enabled attribute in keystone.
+# If setting this option to `userAccountControl`, then you may be
+# interested in setting `[ldap] user_enabled_mask` and `[ldap]
+# user_enabled_default` as well. (string value)
+#user_enabled_attribute = enabled
+
+# Logically negate the boolean value of the enabled attribute obtained
+# from the LDAP server. Some LDAP servers use a boolean lock attribute
+# where "true" means an account is disabled. Setting `[ldap]
+# user_enabled_invert = true` will allow these lock attributes to be
+# used. This option will have no effect if either the `[ldap]
+# user_enabled_mask` or `[ldap] user_enabled_emulation` options are in
+# use. (boolean value)
+#user_enabled_invert = false
+
+# Bitmask integer to select which bit indicates the enabled value if
+# the LDAP server represents "enabled" as a bit on an integer rather
+# than as a discrete boolean. A value of `0` indicates that the mask
+# is not used. If this is not set to `0` the typical value is `2`.
+# This is typically used when `[ldap] user_enabled_attribute =
+# userAccountControl`. Setting this option causes keystone to ignore
+# the value of `[ldap] user_enabled_invert`. (integer value)
+# Minimum value: 0
+#user_enabled_mask = 0
+
+# The default value to enable users. This should match an appropriate
+# integer value if the LDAP server uses non-boolean (bitmask) values
+# to indicate if a user is enabled or disabled. If this is not set to
+# `True`, then the typical value is `512`. This is typically used when
+# `[ldap] user_enabled_attribute = userAccountControl`. (string value)
+#user_enabled_default = True
+
+# List of user attributes to ignore on create and update, or whether a
+# specific user attribute should be filtered for list or show user.
+# (list value)
+#user_attribute_ignore = default_project_id
+
+# The LDAP attribute mapped to a user's default_project_id in
+# keystone. This is most commonly used when keystone has write access
+# to LDAP. (string value)
+#user_default_project_id_attribute = <None>
+
+# If enabled, keystone uses an alternative method to determine if a
+# user is enabled or not by checking if they are a member of the group
+# defined by the `[ldap] user_enabled_emulation_dn` option. Enabling
+# this option causes keystone to ignore the value of `[ldap]
+# user_enabled_invert`. (boolean value)
+#user_enabled_emulation = false
+
+# DN of the group entry to hold enabled users when using enabled
+# emulation. Setting this option has no effect unless `[ldap]
+# user_enabled_emulation` is also enabled. (string value)
+#user_enabled_emulation_dn = <None>
+
+# Use the `[ldap] group_member_attribute` and `[ldap]
+# group_objectclass` settings to determine membership in the emulated
+# enabled group. Enabling this option has no effect unless `[ldap]
+# user_enabled_emulation` is also enabled. (boolean value)
+#user_enabled_emulation_use_group_config = false
+
+# A list of LDAP attribute to keystone user attribute pairs used for
+# mapping additional attributes to users in keystone. The expected
+# format is `<ldap_attr>:<user_attr>`, where `ldap_attr` is the
+# attribute in the LDAP object and `user_attr` is the attribute which
+# should appear in the identity API. (list value)
+#user_additional_attribute_mapping =
+
+# The search base to use for groups. Defaults to the `[ldap] suffix`
+# value. (string value)
+#group_tree_dn = <None>
+
+# The LDAP search filter to use for groups. (string value)
+#group_filter = <None>
+
+# The LDAP object class to use for groups. If setting this option to
+# `posixGroup`, you may also be interested in enabling the `[ldap]
+# group_members_are_ids` option. (string value)
+#group_objectclass = groupOfNames
+
+# The LDAP attribute mapped to group IDs in keystone. This must NOT be
+# a multivalued attribute. Group IDs are expected to be globally
+# unique across keystone domains and URL-safe. (string value)
+#group_id_attribute = cn
+
+# The LDAP attribute mapped to group names in keystone. Group names
+# are expected to be unique only within a keystone domain and are not
+# expected to be URL-safe. (string value)
+#group_name_attribute = ou
+
+# The LDAP attribute used to indicate that a user is a member of the
+# group. (string value)
+#group_member_attribute = member
+
+# Enable this option if the members of the group object class are
+# keystone user IDs rather than LDAP DNs. This is the case when using
+# `posixGroup` as the group object class in Open Directory. (boolean
+# value)
+#group_members_are_ids = false
+
+# The LDAP attribute mapped to group descriptions in keystone. (string
+# value)
+#group_desc_attribute = description
+
+# List of group attributes to ignore on create and update. or whether
+# a specific group attribute should be filtered for list or show
+# group. (list value)
+#group_attribute_ignore =
+
+# A list of LDAP attribute to keystone group attribute pairs used for
+# mapping additional attributes to groups in keystone. The expected
+# format is `<ldap_attr>:<group_attr>`, where `ldap_attr` is the
+# attribute in the LDAP object and `group_attr` is the attribute which
+# should appear in the identity API. (list value)
+#group_additional_attribute_mapping =
+
+# If enabled, group queries will use Active Directory specific filters
+# for nested groups. (boolean value)
+#group_ad_nesting = false
+
+# An absolute path to a CA certificate file to use when communicating
+# with LDAP servers. This option will take precedence over `[ldap]
+# tls_cacertdir`, so there is no reason to set both. (string value)
+#tls_cacertfile = <None>
+
+# An absolute path to a CA certificate directory to use when
+# communicating with LDAP servers. There is no reason to set this
+# option if you've also set `[ldap] tls_cacertfile`. (string value)
+#tls_cacertdir = <None>
+
+# Enable TLS when communicating with LDAP servers. You should also set
+# the `[ldap] tls_cacertfile` and `[ldap] tls_cacertdir` options when
+# using this option. Do not set this option if you are using LDAP over
+# SSL (LDAPS) instead of TLS. (boolean value)
+#use_tls = false
+
+# Specifies which checks to perform against client certificates on
+# incoming TLS sessions. If set to `demand`, then a certificate will
+# always be requested and required from the LDAP server. If set to
+# `allow`, then a certificate will always be requested but not
+# required from the LDAP server. If set to `never`, then a certificate
+# will never be requested. (string value)
+# Possible values:
+# demand - <No description provided>
+# never - <No description provided>
+# allow - <No description provided>
+#tls_req_cert = demand
+
+# The connection timeout to use with the LDAP server. A value of `-1`
+# means that connections will never timeout. (integer value)
+# Minimum value: -1
+#connection_timeout = -1
+
+# Enable LDAP connection pooling for queries to the LDAP server. There
+# is typically no reason to disable this. (boolean value)
+#use_pool = true
+
+# The size of the LDAP connection pool. This option has no effect
+# unless `[ldap] use_pool` is also enabled. (integer value)
+# Minimum value: 1
+#pool_size = 10
+
+# The maximum number of times to attempt reconnecting to the LDAP
+# server before aborting. A value of zero prevents retries. This
+# option has no effect unless `[ldap] use_pool` is also enabled.
+# (integer value)
+# Minimum value: 0
+#pool_retry_max = 3
+
+# The number of seconds to wait before attempting to reconnect to the
+# LDAP server. This option has no effect unless `[ldap] use_pool` is
+# also enabled. (floating point value)
+#pool_retry_delay = 0.1
+
+# The connection timeout to use when pooling LDAP connections. A value
+# of `-1` means that connections will never timeout. This option has
+# no effect unless `[ldap] use_pool` is also enabled. (integer value)
+# Minimum value: -1
+#pool_connection_timeout = -1
+
+# The maximum connection lifetime to the LDAP server in seconds. When
+# this lifetime is exceeded, the connection will be unbound and
+# removed from the connection pool. This option has no effect unless
+# `[ldap] use_pool` is also enabled. (integer value)
+# Minimum value: 1
+#pool_connection_lifetime = 600
+
+# Enable LDAP connection pooling for end user authentication. There is
+# typically no reason to disable this. (boolean value)
+#use_auth_pool = true
+
+# The size of the connection pool to use for end user authentication.
+# This option has no effect unless `[ldap] use_auth_pool` is also
+# enabled. (integer value)
+# Minimum value: 1
+#auth_pool_size = 100
+
+# The maximum end user authentication connection lifetime to the LDAP
+# server in seconds. When this lifetime is exceeded, the connection
+# will be unbound and removed from the connection pool. This option
+# has no effect unless `[ldap] use_auth_pool` is also enabled.
+# (integer value)
+# Minimum value: 1
+#auth_pool_connection_lifetime = 60
+
+
+[memcache]
+
+#
+# From keystone
+#
+
+# Number of seconds memcached server is considered dead before it is
+# tried again. This is used by the key value store system. (integer
+# value)
+#dead_retry = 300
+
+# Timeout in seconds for every call to a server. This is used by the
+# key value store system. (integer value)
+#socket_timeout = 3
+
+# Max total number of open connections to every memcached server. This
+# is used by the key value store system. (integer value)
+#pool_maxsize = 10
+
+# Number of seconds a connection to memcached is held unused in the
+# pool before it is closed. This is used by the key value store
+# system. (integer value)
+#pool_unused_timeout = 60
+
+# Number of seconds that an operation will wait to get a memcache
+# client connection. This is used by the key value store system.
+# (integer value)
+#pool_connection_get_timeout = 10
+
+
+[oauth1]
+
+#
+# From keystone
+#
+
+# Entry point for the OAuth backend driver in the `keystone.oauth1`
+# namespace. Typically, there is no reason to set this option unless
+# you are providing a custom entry point. (string value)
+#driver = sql
+
+# Number of seconds for the OAuth Request Token to remain valid after
+# being created. This is the amount of time the user has to authorize
+# the token. Setting this option to zero means that request tokens
+# will last forever. (integer value)
+# Minimum value: 0
+#request_token_duration = 28800
+
+# Number of seconds for the OAuth Access Token to remain valid after
+# being created. This is the amount of time the consumer has to
+# interact with the service provider (which is typically keystone).
+# Setting this option to zero means that access tokens will last
+# forever. (integer value)
+# Minimum value: 0
+#access_token_duration = 86400
+
+
+[paste_deploy]
+
+#
+# From keystone
+#
+
+# Name of (or absolute path to) the Paste Deploy configuration file
+# that composes middleware and the keystone application itself into
+# actual WSGI entry points. See http://pythonpaste.org/deploy/ for
+# additional documentation on the file's format. (string value)
+#config_file = keystone-paste.ini
+
+
+[policy]
+
+#
+# From keystone
+#
+
+# Entry point for the policy backend driver in the `keystone.policy`
+# namespace. Supplied drivers are `rules` (which does not support any
+# CRUD operations for the v3 policy API) and `sql`. Typically, there
+# is no reason to set this option unless you are providing a custom
+# entry point. (string value)
+driver = sql
+
+# Maximum number of entities that will be returned in a policy
+# collection. (integer value)
+#list_limit = <None>
+
+
+[resource]
+
+#
+# From keystone
+#
+
+# DEPRECATED: Entry point for the resource driver in the
+# `keystone.resource` namespace. Only a `sql` driver is supplied by
+# keystone. Unless you are writing proprietary drivers for keystone,
+# you do not need to set this option. (string value)
+# This option is deprecated for removal since P.
+# Its value may be silently ignored in the future.
+# Reason: Non-SQL resource cannot be used with SQL Identity and has
+# been unable to be used since Ocata. SQL Resource backend is a
+# requirement as of Pike. Setting this option no longer has an effect
+# on how Keystone operates.
+#driver = sql
+
+# Toggle for resource caching. This has no effect unless global
+# caching is enabled. (boolean value)
+# Deprecated group/name - [assignment]/caching
+#caching = true
+
+# Time to cache resource data in seconds. This has no effect unless
+# global caching is enabled. (integer value)
+# Deprecated group/name - [assignment]/cache_time
+#cache_time = <None>
+
+# Maximum number of entities that will be returned in a resource
+# collection. (integer value)
+# Deprecated group/name - [assignment]/list_limit
+#list_limit = <None>
+
+# Name of the domain that owns the `admin_project_name`. If left
+# unset, then there is no admin project. `[resource]
+# admin_project_name` must also be set to use this option. (string
+# value)
+#admin_project_domain_name = <None>
+
+# This is a special project which represents cloud-level administrator
+# privileges across services. Tokens scoped to this project will
+# contain a true `is_admin_project` attribute to indicate to policy
+# systems that the role assignments on that specific project should
+# apply equally across every project. If left unset, then there is no
+# admin project, and thus no explicit means of cross-project role
+# assignments. `[resource] admin_project_domain_name` must also be set
+# to use this option. (string value)
+#admin_project_name = <None>
+
+# This controls whether the names of projects are restricted from
+# containing URL-reserved characters. If set to `new`, attempts to
+# create or update a project with a URL-unsafe name will fail. If set
+# to `strict`, attempts to scope a token with a URL-unsafe project
+# name will fail, thereby forcing all project names to be updated to
+# be URL-safe. (string value)
+# Possible values:
+# off - <No description provided>
+# new - <No description provided>
+# strict - <No description provided>
+#project_name_url_safe = off
+
+# This controls whether the names of domains are restricted from
+# containing URL-reserved characters. If set to `new`, attempts to
+# create or update a domain with a URL-unsafe name will fail. If set
+# to `strict`, attempts to scope a token with a URL-unsafe domain name
+# will fail, thereby forcing all domain names to be updated to be URL-
+# safe. (string value)
+# Possible values:
+# off - <No description provided>
+# new - <No description provided>
+# strict - <No description provided>
+#domain_name_url_safe = off
+
+
+[revoke]
+
+#
+# From keystone
+#
+
+# Entry point for the token revocation backend driver in the
+# `keystone.revoke` namespace. Keystone only provides a `sql` driver,
+# so there is no reason to set this option unless you are providing a
 # custom entry point. (string value)
 #driver = sql
 
-# Toggle for application credential caching. This has no effect unless global
-# caching is enabled. (boolean value)
+# The number of seconds after a token has expired before a
+# corresponding revocation event may be purged from the backend.
+# (integer value)
+# Minimum value: 0
+#expiration_buffer = 1800
+
+# Toggle for revocation event caching. This has no effect unless
+# global caching is enabled. (boolean value)
 #caching = true
 
-# Time to cache application credential data in seconds. This has no effect
-# unless global caching is enabled. (integer value)
+# Time to cache the revocation list and the revocation events (in
+# seconds). This has no effect unless global and `[revoke] caching`
+# are both enabled. (integer value)
+# Deprecated group/name - [token]/revocation_cache_time
+#cache_time = 3600
+
+
+[role]
+
+#
+# From keystone
+#
+
+# Entry point for the role backend driver in the `keystone.role`
+# namespace. Keystone only provides a `sql` driver, so there's no
+# reason to change this unless you are providing a custom entry point.
+# (string value)
+#driver = <None>
+
+# Toggle for role caching. This has no effect unless global caching is
+# enabled. In a typical deployment, there is no reason to disable
+# this. (boolean value)
+#caching = true
+
+# Time to cache role data, in seconds. This has no effect unless both
+# global caching and `[role] caching` are enabled. (integer value)
 #cache_time = <None>
 
-# Maximum number of application credentials a user is permitted to create. A
-# value of -1 means unlimited. If a limit is not set, users are permitted to
-# create application credentials at will, which could lead to bloat in the
-# keystone database or open keystone to a DoS attack. (integer value)
-#user_limit = -1
-
-
-[assignment]
-
-#
-# From keystone
-#
-
-# Entry point for the assignment backend driver (where role assignments are
-# stored) in the `keystone.assignment` namespace. Only a SQL driver is supplied
-# by keystone itself. Unless you are writing proprietary drivers for keystone,
-# you do not need to set this option. (string value)
+# Maximum number of entities that will be returned in a role
+# collection. This may be useful to tune if you have a large number of
+# discrete roles in your deployment. (integer value)
+#list_limit = <None>
+
+
+[saml]
+
+#
+# From keystone
+#
+
+# Determines the lifetime for any SAML assertions generated by
+# keystone, using `NotOnOrAfter` attributes. (integer value)
+#assertion_expiration_time = 3600
+
+# Name of, or absolute path to, the binary to be used for XML signing.
+# Although only the XML Security Library (`xmlsec1`) is supported, it
+# may have a non-standard name or path on your system. If keystone
+# cannot find the binary itself, you may need to install the
+# appropriate package, use this option to specify an absolute path, or
+# adjust keystone's PATH environment variable. (string value)
+#xmlsec1_binary = xmlsec1
+
+# Absolute path to the public certificate file to use for SAML
+# signing. The value cannot contain a comma (`,`). (string value)
+#certfile = /etc/keystone/ssl/certs/signing_cert.pem
+
+# Absolute path to the private key file to use for SAML signing. The
+# value cannot contain a comma (`,`). (string value)
+#keyfile = /etc/keystone/ssl/private/signing_key.pem
+
+# This is the unique entity identifier of the identity provider
+# (keystone) to use when generating SAML assertions. This value is
+# required to generate identity provider metadata and must be a URI (a
+# URL is recommended). For example: `https://keystone.example.com/v3
+# /OS-FEDERATION/saml2/idp`. (uri value)
+#idp_entity_id = <None>
+
+# This is the single sign-on (SSO) service location of the identity
+# provider which accepts HTTP POST requests. A value is required to
+# generate identity provider metadata. For example:
+# `https://keystone.example.com/v3/OS-FEDERATION/saml2/sso`. (uri
+# value)
+#idp_sso_endpoint = <None>
+
+# This is the language used by the identity provider's organization.
+# (string value)
+#idp_lang = en
+
+# This is the name of the identity provider's organization. (string
+# value)
+#idp_organization_name = SAML Identity Provider
+
+# This is the name of the identity provider's organization to be
+# displayed. (string value)
+#idp_organization_display_name = OpenStack SAML Identity Provider
+
+# This is the URL of the identity provider's organization. The URL
+# referenced here should be useful to humans. (uri value)
+#idp_organization_url = https://example.com/
+
+# This is the company name of the identity provider's contact person.
+# (string value)
+#idp_contact_company = Example, Inc.
+
+# This is the given name of the identity provider's contact person.
+# (string value)
+#idp_contact_name = SAML Identity Provider Support
+
+# This is the surname of the identity provider's contact person.
+# (string value)
+#idp_contact_surname = Support
+
+# This is the email address of the identity provider's contact person.
+# (string value)
+#idp_contact_email = support@example.com
+
+# This is the telephone number of the identity provider's contact
+# person. (string value)
+#idp_contact_telephone = +1 800 555 0100
+
+# This is the type of contact that best describes the identity
+# provider's contact person. (string value)
+# Possible values:
+# technical - <No description provided>
+# support - <No description provided>
+# administrative - <No description provided>
+# billing - <No description provided>
+# other - <No description provided>
+#idp_contact_type = other
+
+# Absolute path to the identity provider metadata file. This file
+# should be generated with the `keystone-manage saml_idp_metadata`
+# command. There is typically no reason to change this value. (string
+# value)
+#idp_metadata_path = /etc/keystone/saml2_idp_metadata.xml
+
+# The prefix of the RelayState SAML attribute to use when generating
+# enhanced client and proxy (ECP) assertions. In a typical deployment,
+# there is no reason to change this value. (string value)
+#relay_state_prefix = ss:mem:
+
+
+[security_compliance]
+
+#
+# From keystone
+#
+
+# The maximum number of days a user can go without authenticating
+# before being considered "inactive" and automatically disabled
+# (locked). This feature is disabled by default; set any value to
+# enable it. This feature depends on the `sql` backend for the
+# `[identity] driver`. When a user exceeds this threshold and is
+# considered "inactive", the user's `enabled` attribute in the HTTP
+# API may not match the value of the user's `enabled` column in the
+# user table. (integer value)
+# Minimum value: 1
+#disable_user_account_days_inactive = <None>
+
+# The maximum number of times that a user can fail to authenticate
+# before the user account is locked for the number of seconds
+# specified by `[security_compliance] lockout_duration`. This feature
+# is disabled by default. If this feature is enabled and
+# `[security_compliance] lockout_duration` is not set, then users may
+# be locked out indefinitely until the user is explicitly enabled via
+# the API. This feature depends on the `sql` backend for the
+# `[identity] driver`. (integer value)
+# Minimum value: 1
+#lockout_failure_attempts = <None>
+
+# The number of seconds a user account will be locked when the maximum
+# number of failed authentication attempts (as specified by
+# `[security_compliance] lockout_failure_attempts`) is exceeded.
+# Setting this option will have no effect unless you also set
+# `[security_compliance] lockout_failure_attempts` to a non-zero
+# value. This feature depends on the `sql` backend for the `[identity]
+# driver`. (integer value)
+# Minimum value: 1
+#lockout_duration = 1800
+
+# The number of days for which a password will be considered valid
+# before requiring it to be changed. This feature is disabled by
+# default. If enabled, new password changes will have an expiration
+# date, however existing passwords would not be impacted. This feature
+# depends on the `sql` backend for the `[identity] driver`. (integer
+# value)
+# Minimum value: 1
+#password_expires_days = <None>
+
+# This controls the number of previous user password iterations to
+# keep in history, in order to enforce that newly created passwords
+# are unique. The total number which includes the new password should
+# not be greater or equal to this value. Setting the value to one (the
+# default) disables this feature. Thus, to enable this feature, values
+# must be greater than 1. This feature depends on the `sql` backend
+# for the `[identity] driver`. (integer value)
+# Minimum value: 1
+#unique_last_password_count = 1
+
+# The number of days that a password must be used before the user can
+# change it. This prevents users from changing their passwords
+# immediately in order to wipe out their password history and reuse an
+# old password. This feature does not prevent administrators from
+# manually resetting passwords. It is disabled by default and allows
+# for immediate password changes. This feature depends on the `sql`
+# backend for the `[identity] driver`. Note: If `[security_compliance]
+# password_expires_days` is set, then the value for this option should
+# be less than the `password_expires_days`. (integer value)
+# Minimum value: 0
+#minimum_password_age = 0
+
+# The regular expression used to validate password strength
+# requirements. By default, the regular expression will match any
+# password. The following is an example of a pattern which requires at
+# least 1 letter, 1 digit, and have a minimum length of 7 characters:
+# ^(?=.*\d)(?=.*[a-zA-Z]).{7,}$ This feature depends on the `sql`
+# backend for the `[identity] driver`. (string value)
+#password_regex = <None>
+
+# Describe your password regular expression here in language for
+# humans. If a password fails to match the regular expression, the
+# contents of this configuration variable will be returned to users to
+# explain why their requested password was insufficient. (string
+# value)
+#password_regex_description = <None>
+
+# Enabling this option requires users to change their password when
+# the user is created, or upon administrative reset. Before accessing
+# any services, affected users will have to change their password. To
+# ignore this requirement for specific users, such as service users,
+# set the `options` attribute `ignore_change_password_upon_first_use`
+# to `True` for the desired user via the update user API. This feature
+# is disabled by default. This feature is only applicable with the
+# `sql` backend for the `[identity] driver`. (boolean value)
+#change_password_upon_first_use = false
+
+
+[shadow_users]
+
+#
+# From keystone
+#
+
+# Entry point for the shadow users backend driver in the
+# `keystone.identity.shadow_users` namespace. This driver is used for
+# persisting local user references to externally-managed identities
+# (via federation, LDAP, etc). Keystone only provides a `sql` driver,
+# so there is no reason to change this option unless you are providing
+# a custom entry point. (string value)
 #driver = sql
 
-# A list of role names which are prohibited from being an implied role. (list
-# value)
-#prohibited_implied_role = admin
-
-
-[auth]
-
-#
-# From keystone
-#
-
-# Allowed authentication methods. Note: You should disable the `external` auth
-# method if you are currently using federation. External auth and federation
-# both use the REMOTE_USER variable. Since both the mapped and external plugin
-# are being invoked to validate attributes in the request environment, it can
-# cause conflicts. (list value)
-#methods = external,password,token,oauth1,mapped,application_credential
-
-# Entry point for the password auth plugin module in the
-# `keystone.auth.password` namespace. You do not need to set this unless you
-# are overriding keystone's own password authentication plugin. (string value)
-#password = <None>
-
-# Entry point for the token auth plugin module in the `keystone.auth.token`
-# namespace. You do not need to set this unless you are overriding keystone's
-# own token authentication plugin. (string value)
-#token = <None>
-
-# Entry point for the external (`REMOTE_USER`) auth plugin module in the
-# `keystone.auth.external` namespace. Supplied drivers are `DefaultDomain` and
-# `Domain`. The default driver is `DefaultDomain`, which assumes that all users
-# identified by the username specified to keystone in the `REMOTE_USER`
-# variable exist within the context of the default domain. The `Domain` option
-# expects an additional environment variable be presented to keystone,
-# `REMOTE_DOMAIN`, containing the domain name of the `REMOTE_USER` (if
-# `REMOTE_DOMAIN` is not set, then the default domain will be used instead).
-# You do not need to set this unless you are taking advantage of "external
-# authentication", where the application server (such as Apache) is handling
-# authentication instead of keystone. (string value)
-#external = <None>
-
-# Entry point for the OAuth 1.0a auth plugin module in the
-# `keystone.auth.oauth1` namespace. You do not need to set this unless you are
-# overriding keystone's own `oauth1` authentication plugin. (string value)
-#oauth1 = <None>
-
-# Entry point for the mapped auth plugin module in the `keystone.auth.mapped`
-# namespace. You do not need to set this unless you are overriding keystone's
-# own `mapped` authentication plugin. (string value)
-#mapped = <None>
-
-# Entry point for the application_credential auth plugin module in the
-# `keystone.auth.application_credential` namespace. You do not need to set this
-# unless you are overriding keystone's own `application_credential`
-# authentication plugin. (string value)
-#application_credential = <None>
+
+[signing]
+
+#
+# From keystone
+#
+
+# DEPRECATED: Absolute path to the public certificate file to use for
+# signing responses to revocation lists requests. Set this together
+# with `[signing] keyfile`. For non-production environments, you may
+# be interested in using `keystone-manage pki_setup` to generate self-
+# signed certificates. (string value)
+# This option is deprecated for removal since P.
+# Its value may be silently ignored in the future.
+# Reason: `keystone-manage pki_setup` was deprecated in Mitaka and
+# removed in Pike. These options remain for backwards compatibility.
+#certfile = /etc/keystone/ssl/certs/signing_cert.pem
+
+# DEPRECATED: Absolute path to the private key file to use for signing
+# responses to revocation lists requests. Set this together with
+# `[signing] certfile`. (string value)
+# This option is deprecated for removal since P.
+# Its value may be silently ignored in the future.
+# Reason: `keystone-manage pki_setup` was deprecated in Mitaka and
+# removed in Pike. These options remain for backwards compatibility.
+#keyfile = /etc/keystone/ssl/private/signing_key.pem
+
+# DEPRECATED: Absolute path to the public certificate authority (CA)
+# file to use when creating self-signed certificates with `keystone-
+# manage pki_setup`. Set this together with `[signing] ca_key`. There
+# is no reason to set this option unless you are requesting revocation
+# lists in a non-production environment. Use a `[signing] certfile`
+# issued from a trusted certificate authority instead. (string value)
+# This option is deprecated for removal since P.
+# Its value may be silently ignored in the future.
+# Reason: `keystone-manage pki_setup` was deprecated in Mitaka and
+# removed in Pike. These options remain for backwards compatibility.
+#ca_certs = /etc/keystone/ssl/certs/ca.pem
+
+# DEPRECATED: Absolute path to the private certificate authority (CA)
+# key file to use when creating self-signed certificates with
+# `keystone-manage pki_setup`. Set this together with `[signing]
+# ca_certs`. There is no reason to set this option unless you are
+# requesting revocation lists in a non-production environment. Use a
+# `[signing] certfile` issued from a trusted certificate authority
+# instead. (string value)
+# This option is deprecated for removal since P.
+# Its value may be silently ignored in the future.
+# Reason: `keystone-manage pki_setup` was deprecated in Mitaka and
+# removed in Pike. These options remain for backwards compatibility.
+#ca_key = /etc/keystone/ssl/private/cakey.pem
+
+# DEPRECATED: Key size (in bits) to use when generating a self-signed
+# token signing certificate. There is no reason to set this option
+# unless you are requesting revocation lists in a non-production
+# environment. Use a `[signing] certfile` issued from a trusted
+# certificate authority instead. (integer value)
+# Minimum value: 1024
+# This option is deprecated for removal since P.
+# Its value may be silently ignored in the future.
+# Reason: `keystone-manage pki_setup` was deprecated in Mitaka and
+# removed in Pike. These options remain for backwards compatibility.
+#key_size = 2048
+
+# DEPRECATED: The validity period (in days) to use when generating a
+# self-signed token signing certificate. There is no reason to set
+# this option unless you are requesting revocation lists in a non-
+# production environment. Use a `[signing] certfile` issued from a
+# trusted certificate authority instead. (integer value)
+# This option is deprecated for removal since P.
+# Its value may be silently ignored in the future.
+# Reason: `keystone-manage pki_setup` was deprecated in Mitaka and
+# removed in Pike. These options remain for backwards compatibility.
+#valid_days = 3650
+
+# DEPRECATED: The certificate subject to use when generating a self-
+# signed token signing certificate. There is no reason to set this
+# option unless you are requesting revocation lists in a non-
+# production environment. Use a `[signing] certfile` issued from a
+# trusted certificate authority instead. (string value)
+# This option is deprecated for removal since P.
+# Its value may be silently ignored in the future.
+# Reason: `keystone-manage pki_setup` was deprecated in Mitaka and
+# removed in Pike. These options remain for backwards compatibility.
+#cert_subject = /C=US/ST=Unset/L=Unset/O=Unset/CN=www.example.com
+
+
+[token]
+
+#
+# From keystone
+#
+
+# This is a list of external authentication mechanisms which should
+# add token binding metadata to tokens, such as `kerberos` or `x509`.
+# Binding metadata is enforced according to the `[token]
+# enforce_token_bind` option. (list value)
+#bind =
+
+# DEPRECATED: This controls the token binding enforcement policy on
+# tokens presented to keystone with token binding metadata (as
+# specified by the `[token] bind` option). `disabled` completely
+# bypasses token binding validation. `permissive` and `strict` do not
+# require tokens to have binding metadata (but will validate it if
+# present), whereas `required` will always demand tokens to having
+# binding metadata. `permissive` will allow unsupported binding
+# metadata to pass through without validation (usually to be validated
+# at another time by another component), whereas `strict` and
+# `required` will demand that the included binding metadata be
+# supported by keystone. (string value)
+# This option is deprecated for removal since P.
+# Its value may be silently ignored in the future.
+#enforce_token_bind = permissive
+
+# The amount of time that a token should remain valid (in seconds).
+# Drastically reducing this value may break "long-running" operations
+# that involve multiple services to coordinate together, and will
+# force users to authenticate with keystone more frequently.
+# Drastically increasing this value will increase load on the `[token]
+# driver`, as more tokens will be simultaneously valid. Keystone
+# tokens are also bearer tokens, so a shorter duration will also
+# reduce the potential security impact of a compromised token.
+# (integer value)
+# Minimum value: 0
+# Maximum value: 9223372036854775807
+expiration = 3600
+
+# Entry point for the token provider in the `keystone.token.provider`
+# namespace. The token provider controls the token construction,
+# validation, and revocation operations. Keystone includes `fernet`
+# and `uuid` token providers. `uuid` tokens must be persisted (using
+# the backend specified in the `[token] driver` option), but do not
+# require any extra configuration or setup. `fernet` tokens do not
+# need to be persisted at all, but require that you run `keystone-
+# manage fernet_setup` (also see the `keystone-manage fernet_rotate`
+# command). (string value)
+#provider = fernet
+
+provider = fernet
+
+
+# DEPRECATED: Entry point for the token persistence backend driver in
+# the `keystone.token.persistence` namespace. Keystone provides the
+# `sql` driver.  The `sql` option (default) depends on the options in
+# your `[database]` section. If you're using the `fernet` `[token]
+# provider`, this backend will not be utilized to persist tokens at
+# all. (string value)
+# This option is deprecated for removal since P.
+# Its value may be silently ignored in the future.
+#driver = sql
+
+# Toggle for caching token creation and validation data. This has no
+# effect unless global caching is enabled. (boolean value)
+#caching = true
+caching = false
+
+# The number of seconds to cache token creation and validation data.
+# This has no effect unless both global and `[token] caching` are
+# enabled. (integer value)
+# Minimum value: 0
+# Maximum value: 9223372036854775807
+#cache_time = <None>
+
+# This toggles support for revoking individual tokens by the token
+# identifier and thus various token enumeration operations (such as
+# listing all tokens issued to a specific user). These operations are
+# used to determine the list of tokens to consider revoked. Do not
+# disable this option if you're using the `kvs` `[revoke] driver`.
+# (boolean value)
+#revoke_by_id = true
+
+# This toggles whether scoped tokens may be re-scoped to a new project
+# or domain, thereby preventing users from exchanging a scoped token
+# (including those with a default project scope) for any other token.
+# This forces users to either authenticate for unscoped tokens (and
+# later exchange that unscoped token for tokens with a more specific
+# scope) or to provide their credentials in every request for a scoped
+# token to avoid re-scoping altogether. (boolean value)
+#allow_rescope_scoped_token = true
+
+# This controls whether roles should be included with tokens that are
+# not directly assigned to the token's scope, but are instead linked
+# implicitly to other role assignments. (boolean value)
+#infer_roles = true
+
+# Enable storing issued token data to token validation cache so that
+# first token validation doesn't actually cause full validation cycle.
+# This option has no effect unless global caching and token caching
+# are enabled. (boolean value)
+#cache_on_issue = true
+
+# This controls the number of seconds that a token can be retrieved
+# for beyond the built-in expiry time. This allows long running
+# operations to succeed. Defaults to two days. (integer value)
+#allow_expired_window = 172800
+
+hash_algorithm = sha256
+
+
+[tokenless_auth]
+
+#
+# From keystone
+#
+
+# The list of distinguished names which identify trusted issuers of
+# client certificates allowed to use X.509 tokenless authorization. If
+# the option is absent then no certificates will be allowed. The
+# format for the values of a distinguished name (DN) must be separated
+# by a comma and contain no spaces. Furthermore, because an individual
+# DN may contain commas, this configuration option may be repeated
+# multiple times to represent multiple values. For example,
+# keystone.conf would include two consecutive lines in order to trust
+# two different DNs, such as `trusted_issuer =
+# CN=john,OU=keystone,O=openstack` and `trusted_issuer =
+# CN=mary,OU=eng,O=abc`. (multi valued)
+#trusted_issuer =
+
+# The federated protocol ID used to represent X.509 tokenless
+# authorization. This is used in combination with the value of
+# `[tokenless_auth] issuer_attribute` to find a corresponding
+# federated mapping. In a typical deployment, there is no reason to
+# change this value. (string value)
+#protocol = x509
+
+# The name of the WSGI environment variable used to pass the issuer of
+# the client certificate to keystone. This attribute is used as an
+# identity provider ID for the X.509 tokenless authorization along
+# with the protocol to look up its corresponding mapping. In a typical
+# deployment, there is no reason to change this value. (string value)
+#issuer_attribute = SSL_CLIENT_I_DN
+
+
+[trust]
+
+#
+# From keystone
+#
+
+# DEPRECATED: Delegation and impersonation features using trusts can
+# be optionally disabled. (boolean value)
+# This option is deprecated for removal since Q.
+# Its value may be silently ignored in the future.
+# Reason: Disabling the trusts API is deprecated. This option will be
+# removed in the next release and trusts will always be enabled.
+#enabled = true
+
+# Allows authorization to be redelegated from one user to another,
+# effectively chaining trusts together. When disabled, the
+# `remaining_uses` attribute of a trust is constrained to be zero.
+# (boolean value)
+#allow_redelegation = false
+
+# Maximum number of times that authorization can be redelegated from
+# one user to another in a chain of trusts. This number may be reduced
+# further for a specific trust. (integer value)
+#max_redelegation_count = 3
+
+# Entry point for the trust backend driver in the `keystone.trust`
+# namespace. Keystone only provides a `sql` driver, so there is no
+# reason to change this unless you are providing a custom entry point.
+# (string value)
+#driver = sql
+
+
+[unified_limit]
+
+#
+# From keystone
+#
+
+# Entry point for the unified limit backend driver in the
+# `keystone.unified_limit` namespace. Keystone only provides a `sql`
+# driver, so there's no reason to change this unless you are providing
+# a custom entry point. (string value)
+#driver = sql
+
+# Toggle for unified limit caching. This has no effect unless global
+# caching is enabled. In a typical deployment, there is no reason to
+# disable this. (boolean value)
+#caching = true
+
+# Time to cache unified limit data, in seconds. This has no effect
+# unless both global caching and `[unified_limit] caching` are
+# enabled. (integer value)
+#cache_time = <None>
+
+# Maximum number of entities that will be returned in a role
+# collection. This may be useful to tune if you have a large number of
+# unified limits in your deployment. (integer value)
+#list_limit = <None>
 
 
 [cache]
-
 #
 # From oslo.cache
 #
 
-# Prefix for building the configuration dictionary for the cache region. This
-# should not need to be changed unless there is another dogpile.cache region
-# with the same configuration name. (string value)
+# Prefix for building the configuration dictionary for the cache
+# region. This should not need to be changed unless there is another
+# dogpile.cache region with the same configuration name. (string
+# value)
 #config_prefix = cache.oslo
 
-# Default TTL, in seconds, for any cached item in the dogpile.cache region.
-# This applies to any cached method that doesn't have an explicit cache
-# expiration time defined for it. (integer value)
+# Default TTL, in seconds, for any cached item in the dogpile.cache
+# region. This applies to any cached method that doesn't have an
+# explicit cache expiration time defined for it. (integer value)
 #expiration_time = 600
 
-# Cache backend module. For eventlet-based or environments with hundreds of
-# threaded servers, Memcache with pooling (oslo_cache.memcache_pool) is
-# recommended. For environments with less than 100 threaded servers, Memcached
-# (dogpile.cache.memcached) or Redis (dogpile.cache.redis) is recommended. Test
-# environments with a single instance of the server can use the
+# Cache backend module. For eventlet-based or environments with
+# hundreds of threaded servers, Memcache with pooling
+# (oslo_cache.memcache_pool) is recommended. For environments with
+# less than 100 threaded servers, Memcached (dogpile.cache.memcached)
+# or Redis (dogpile.cache.redis) is recommended. Test environments
+# with a single instance of the server can use the
 # dogpile.cache.memory backend. (string value)
 # Possible values:
 # oslo_cache.memcache_pool - <No description provided>
@@ -582,144 +2075,338 @@
 # dogpile.cache.null - <No description provided>
 #backend = dogpile.cache.null
 
-# Arguments supplied to the backend module. Specify this option once per
-# argument to be passed to the dogpile.cache backend. Example format:
-# "<argname>:<value>". (multi valued)
+# Arguments supplied to the backend module. Specify this option once
+# per argument to be passed to the dogpile.cache backend. Example
+# format: "<argname>:<value>". (multi valued)
 #backend_argument =
 
-# Proxy classes to import that will affect the way the dogpile.cache backend
-# functions. See the dogpile.cache documentation on changing-backend-behavior.
+# Proxy classes to import that will affect the way the dogpile.cache
+# backend functions. See the dogpile.cache documentation on changing-
+# backend-behavior. (list value)
+#proxies =
+
+# Global toggle for caching. (boolean value)
+#enabled = false
+
+# Extra debugging from the cache backend (cache keys,
+# get/set/delete/etc calls). This is only really useful if you need to
+# see the specific cache-backend get/set/delete calls with the
+# keys/values.  Typically this should be left set to false. (boolean
+# value)
+#debug_cache_backend = false
+
+# Memcache servers in the format of "host:port".
+# (dogpile.cache.memcache and oslo_cache.memcache_pool backends only).
 # (list value)
-#proxies =
-
-# Global toggle for caching. (boolean value)
-#enabled = true
-
-# Extra debugging from the cache backend (cache keys, get/set/delete/etc
-# calls). This is only really useful if you need to see the specific cache-
-# backend get/set/delete calls with the keys/values.  Typically this should be
-# left set to false. (boolean value)
-#debug_cache_backend = false
-
-# Memcache servers in the format of "host:port". (dogpile.cache.memcache and
-# oslo_cache.memcache_pool backends only). (list value)
 #memcache_servers = localhost:11211
-
-# Number of seconds memcached server is considered dead before it is tried
-# again. (dogpile.cache.memcache and oslo_cache.memcache_pool backends only).
+memcache_servers =10.167.4.36:11211,10.167.4.37:11211,10.167.4.38:11211
+
+# Number of seconds memcached server is considered dead before it is
+# tried again. (dogpile.cache.memcache and oslo_cache.memcache_pool
+# backends only). (integer value)
+#memcache_dead_retry = 300
+
+# Timeout in seconds for every call to a server.
+# (dogpile.cache.memcache and oslo_cache.memcache_pool backends only).
 # (integer value)
-#memcache_dead_retry = 300
-
-# Timeout in seconds for every call to a server. (dogpile.cache.memcache and
-# oslo_cache.memcache_pool backends only). (integer value)
 #memcache_socket_timeout = 3
 
 # Max total number of open connections to every memcached server.
 # (oslo_cache.memcache_pool backend only). (integer value)
 #memcache_pool_maxsize = 10
 
-# Number of seconds a connection to memcached is held unused in the pool before
-# it is closed. (oslo_cache.memcache_pool backend only). (integer value)
+# Number of seconds a connection to memcached is held unused in the
+# pool before it is closed. (oslo_cache.memcache_pool backend only).
+# (integer value)
 #memcache_pool_unused_timeout = 60
 
-# Number of seconds that an operation will wait to get a memcache client
-# connection. (integer value)
+# Number of seconds that an operation will wait to get a memcache
+# client connection. (integer value)
 #memcache_pool_connection_get_timeout = 10
 
 
-[catalog]
-
-#
-# From keystone
-#
-
-# Absolute path to the file used for the templated catalog backend. This option
-# is only used if the `[catalog] driver` is set to `templated`. (string value)
-#template_file = default_catalog.templates
-
-# Entry point for the catalog driver in the `keystone.catalog` namespace.
-# Keystone provides a `sql` option (which supports basic CRUD operations
-# through SQL), a `templated` option (which loads the catalog from a templated
-# catalog file on disk), and a `endpoint_filter.sql` option (which supports
-# arbitrary service catalogs per project). (string value)
-#driver = sql
-
-# Toggle for catalog caching. This has no effect unless global caching is
-# enabled. In a typical deployment, there is no reason to disable this.
+[oslo_messaging_notifications]
+#
+# From oslo.messaging
+#
+
+# The Drivers(s) to handle sending notifications. Possible values are
+# messaging, messagingv2, routing, log, test, noop (multi valued)
+# Deprecated group/name - [DEFAULT]/notification_driver
+#driver =
+driver=messagingv2
+
+# A URL representing the messaging driver to use for notifications. If
+# not set, we fall back to the same configuration used for RPC.
+# (string value)
+# Deprecated group/name - [DEFAULT]/notification_transport_url
+#transport_url = <None>
+
+# AMQP topic used for OpenStack notifications. (list value)
+# Deprecated group/name - [rpc_notifier2]/topics
+# Deprecated group/name - [DEFAULT]/notification_topics
+#topics = notifications
+
+# The maximum number of attempts to re-send a notification message
+# which failed to be delivered due to a recoverable error. 0 - No
+# retry, -1 - indefinite (integer value)
+#retry = -1
+[oslo_messaging_rabbit]
+#
+# From oslo.messaging
+#
+
+# Use durable queues in AMQP. (boolean value)
+# Deprecated group/name - [DEFAULT]/amqp_durable_queues
+# Deprecated group/name - [DEFAULT]/rabbit_durable_queues
+#amqp_durable_queues = false
+
+# Auto-delete queues in AMQP. (boolean value)
+#amqp_auto_delete = false
+
+# Enable SSL (boolean value)
+#ssl = <None>
+
+
+# How long to wait before reconnecting in response to an AMQP consumer
+# cancel notification. (floating point value)
+#kombu_reconnect_delay = 1.0
+
+# EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression
+# will not be used. This option may not be available in future
+# versions. (string value)
+#kombu_compression = <None>
+
+# How long to wait a missing client before abandoning to send it its
+# replies. This value should not be longer than rpc_response_timeout.
+# (integer value)
+# Deprecated group/name - [oslo_messaging_rabbit]/kombu_reconnect_timeout
+#kombu_missing_consumer_retry_timeout = 60
+
+# Determines how the next RabbitMQ node is chosen in case the one we
+# are currently connected to becomes unavailable. Takes effect only if
+# more than one RabbitMQ node is provided in config. (string value)
+# Possible values:
+# round-robin - <No description provided>
+# shuffle - <No description provided>
+#kombu_failover_strategy = round-robin
+
+# DEPRECATED: The RabbitMQ broker address where a single node is used.
+# (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_host = localhost
+
+# DEPRECATED: The RabbitMQ broker port where a single node is used.
+# (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_port = 5672
+
+# DEPRECATED: RabbitMQ HA cluster host:port pairs. (list value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_hosts = $rabbit_host:$rabbit_port
+
+# DEPRECATED: The RabbitMQ userid. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_userid = guest
+
+# DEPRECATED: The RabbitMQ password. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_password = guest
+
+# The RabbitMQ login method. (string value)
+# Possible values:
+# PLAIN - <No description provided>
+# AMQPLAIN - <No description provided>
+# RABBIT-CR-DEMO - <No description provided>
+#rabbit_login_method = AMQPLAIN
+
+# DEPRECATED: The RabbitMQ virtual host. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_virtual_host = /
+
+# How frequently to retry connecting with RabbitMQ. (integer value)
+#rabbit_retry_interval = 1
+
+# How long to backoff for between retries when connecting to RabbitMQ.
+# (integer value)
+#rabbit_retry_backoff = 2
+
+# Maximum interval of RabbitMQ connection retries. Default is 30
+# seconds. (integer value)
+#rabbit_interval_max = 30
+
+# DEPRECATED: Maximum number of RabbitMQ connection retries. Default
+# is 0 (infinite retry count). (integer value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#rabbit_max_retries = 0
+
+# Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change
+# this option, you must wipe the RabbitMQ database. In RabbitMQ 3.0,
+# queue mirroring is no longer controlled by the x-ha-policy argument
+# when declaring a queue. If you just want to make sure that all
+# queues (except those with auto-generated names) are mirrored across
+# all nodes, run: "rabbitmqctl set_policy HA '^(?!amq\.).*' '{"ha-
+# mode": "all"}' " (boolean value)
+#rabbit_ha_queues = false
+
+# Positive integer representing duration in seconds for queue TTL
+# (x-expires). Queues which are unused for the duration of the TTL are
+# automatically deleted. The parameter affects only reply and fanout
+# queues. (integer value)
+# Minimum value: 1
+#rabbit_transient_queues_ttl = 1800
+
+# Specifies the number of messages to prefetch. Setting to zero allows
+# unlimited messages. (integer value)
+#rabbit_qos_prefetch_count = 64
+
+# Number of seconds after which the Rabbit broker is considered down
+# if heartbeat's keep-alive fails (0 disable the heartbeat).
+# EXPERIMENTAL (integer value)
+#heartbeat_timeout_threshold = 60
+
+# How often times during the heartbeat_timeout_threshold we check the
+# heartbeat. (integer value)
+#heartbeat_rate = 2
+
+# Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake
 # (boolean value)
-#caching = true
-
-# Time to cache catalog data (in seconds). This has no effect unless global and
-# catalog caching are both enabled. Catalog data (services, endpoints, etc.)
-# typically does not change frequently, and so a longer duration than the
-# global default may be desirable. (integer value)
-#cache_time = <None>
-
-# Maximum number of entities that will be returned in a catalog collection.
-# There is typically no reason to set this, as it would be unusual for a
-# deployment to have enough services or endpoints to exceed a reasonable limit.
+#fake_rabbit = false
+
+# Maximum number of channels to allow (integer value)
+#channel_max = <None>
+
+# The maximum byte size for an AMQP frame (integer value)
+#frame_max = <None>
+
+# How often to send heartbeats for consumer's connections (integer
+# value)
+#heartbeat_interval = 3
+
+# Arguments passed to ssl.wrap_socket (dict value)
+#ssl_options = <None>
+
+# Set socket timeout in seconds for connection's socket (floating
+# point value)
+#socket_timeout = 0.25
+
+# Set TCP_USER_TIMEOUT in seconds for connection's socket (floating
+# point value)
+#tcp_user_timeout = 0.25
+
+# Set delay for reconnection to some host which has connection error
+# (floating point value)
+#host_connection_reconnect_delay = 0.25
+
+# Connection factory implementation (string value)
+# Possible values:
+# new - <No description provided>
+# single - <No description provided>
+# read_write - <No description provided>
+#connection_factory = single
+
+# Maximum number of connections to keep queued. (integer value)
+#pool_max_size = 30
+
+# Maximum number of connections to create above `pool_max_size`.
 # (integer value)
-#list_limit = <None>
-
-
-[cors]
-
-#
-# From oslo.middleware
-#
-
-# Indicate whether this resource may be shared with the domain received in the
-# requests "origin" header. Format: "<protocol>://<host>[:<port>]", no trailing
-# slash. Example: https://horizon.example.com (list value)
-#allowed_origin = <None>
-
-# Indicate that the actual request can include user credentials (boolean value)
-#allow_credentials = true
-
-# Indicate which headers are safe to expose to the API. Defaults to HTTP Simple
-# Headers. (list value)
-#expose_headers = X-Auth-Token,X-Openstack-Request-Id,X-Subject-Token
-
-# Maximum cache age of CORS preflight requests. (integer value)
-#max_age = 3600
-
-# Indicate which methods can be used during the actual request. (list value)
-#allow_methods = GET,PUT,POST,DELETE,PATCH
-
-# Indicate which header field names may be used during the actual request.
-# (list value)
-#allow_headers = X-Auth-Token,X-Openstack-Request-Id,X-Subject-Token,X-Project-Id,X-Project-Name,X-Project-Domain-Id,X-Project-Domain-Name,X-Domain-Id,X-Domain-Name
-
-
-[credential]
-
-#
-# From keystone
-#
-
-# Entry point for the credential backend driver in the `keystone.credential`
-# namespace. Keystone only provides a `sql` driver, so there's no reason to
-# change this unless you are providing a custom entry point. (string value)
-#driver = sql
-
-# Entry point for credential encryption and decryption operations in the
-# `keystone.credential.provider` namespace. Keystone only provides a `fernet`
-# driver, so there's no reason to change this unless you are providing a custom
-# entry point to encrypt and decrypt credentials. (string value)
-#provider = fernet
-
-# Directory containing Fernet keys used to encrypt and decrypt credentials
-# stored in the credential backend. Fernet keys used to encrypt credentials
-# have no relationship to Fernet keys used to encrypt Fernet tokens. Both sets
-# of keys should be managed separately and require different rotation policies.
-# Do not share this repository with the repository used to manage keys for
-# Fernet tokens. (string value)
-#key_repository = /etc/keystone/credential-keys/
-
+#pool_max_overflow = 0
+
+# Default number of seconds to wait for a connections to available
+# (integer value)
+#pool_timeout = 30
+
+# Lifetime of a connection (since creation) in seconds or None for no
+# recycling. Expired connections are closed on acquire. (integer
+# value)
+#pool_recycle = 600
+
+# Threshold at which inactive (since release) connections are
+# considered stale in seconds or None for no staleness. Stale
+# connections are closed on acquire. (integer value)
+#pool_stale = 60
+
+# Default serialization mechanism for serializing/deserializing
+# outgoing/incoming messages (string value)
+# Possible values:
+# json - <No description provided>
+# msgpack - <No description provided>
+#default_serializer_type = json
+
+# Persist notification messages. (boolean value)
+#notification_persistence = false
+
+# Exchange name for sending notifications (string value)
+#default_notification_exchange = ${control_exchange}_notification
+
+# Max number of not acknowledged message which RabbitMQ can send to
+# notification listener. (integer value)
+#notification_listener_prefetch_count = 100
+
+# Reconnecting retry count in case of connectivity problem during
+# sending notification, -1 means infinite retry. (integer value)
+#default_notification_retry_attempts = -1
+
+# Reconnecting retry delay in case of connectivity problem during
+# sending notification message (floating point value)
+#notification_retry_delay = 0.25
+
+# Time to live for rpc queues without consumers in seconds. (integer
+# value)
+#rpc_queue_expiration = 60
+
+# Exchange name for sending RPC messages (string value)
+#default_rpc_exchange = ${control_exchange}_rpc
+
+# Exchange name for receiving RPC replies (string value)
+#rpc_reply_exchange = ${control_exchange}_rpc_reply
+
+# Max number of not acknowledged message which RabbitMQ can send to
+# rpc listener. (integer value)
+#rpc_listener_prefetch_count = 100
+
+# Max number of not acknowledged message which RabbitMQ can send to
+# rpc reply listener. (integer value)
+#rpc_reply_listener_prefetch_count = 100
+
+# Reconnecting retry count in case of connectivity problem during
+# sending reply. -1 means infinite retry during rpc_timeout (integer
+# value)
+#rpc_reply_retry_attempts = -1
+
+# Reconnecting retry delay in case of connectivity problem during
+# sending reply. (floating point value)
+#rpc_reply_retry_delay = 0.25
+
+# Reconnecting retry count in case of connectivity problem during
+# sending RPC message, -1 means infinite retry. If actual retry
+# attempts in not 0 the rpc request could be processed more than one
+# time (integer value)
+#default_rpc_retry_attempts = -1
+
+# Reconnecting retry delay in case of connectivity problem during
+# sending RPC message (floating point value)
+#rpc_retry_delay = 0.25
+
+
+[oslo_policy]
 
 [database]
-connection = sqlite:////var/lib/keystone/keystone.db
-
 #
 # From oslo.db
 #
@@ -731,66 +2418,73 @@
 # Deprecated group/name - [DEFAULT]/db_backend
 #backend = sqlalchemy
 
-# The SQLAlchemy connection string to use to connect to the database. (string
-# value)
+# The SQLAlchemy connection string to use to connect to the database.
+# (string value)
 # Deprecated group/name - [DEFAULT]/sql_connection
 # Deprecated group/name - [DATABASE]/sql_connection
 # Deprecated group/name - [sql]/connection
 #connection = <None>
-
-# The SQLAlchemy connection string to use to connect to the slave database.
-# (string value)
+connection = mysql+pymysql://keystone:opnfv_secret@10.167.4.23/keystone?charset=utf8
+# The SQLAlchemy connection string to use to connect to the slave
+# database. (string value)
 #slave_connection = <None>
 
-# The SQL mode to be used for MySQL sessions. This option, including the
-# default, overrides any server-set SQL mode. To use whatever SQL mode is set
-# by the server configuration, set this to no value. Example: mysql_sql_mode=
-# (string value)
+# The SQL mode to be used for MySQL sessions. This option, including
+# the default, overrides any server-set SQL mode. To use whatever SQL
+# mode is set by the server configuration, set this to no value.
+# Example: mysql_sql_mode= (string value)
 #mysql_sql_mode = TRADITIONAL
 
-# If True, transparently enables support for handling MySQL Cluster (NDB).
-# (boolean value)
+# If True, transparently enables support for handling MySQL Cluster
+# (NDB). (boolean value)
 #mysql_enable_ndb = false
 
-# Connections which have been present in the connection pool longer than this
-# number of seconds will be replaced with a new one the next time they are
-# checked out from the pool. (integer value)
+# Connections which have been present in the connection pool longer
+# than this number of seconds will be replaced with a new one the next
+# time they are checked out from the pool. (integer value)
 # Deprecated group/name - [DATABASE]/idle_timeout
 # Deprecated group/name - [database]/idle_timeout
 # Deprecated group/name - [DEFAULT]/sql_idle_timeout
 # Deprecated group/name - [DATABASE]/sql_idle_timeout
 # Deprecated group/name - [sql]/idle_timeout
 #connection_recycle_time = 3600
-
-# Minimum number of SQL connections to keep open in a pool. (integer value)
+connection_recycle_time = 300
+
+# Minimum number of SQL connections to keep open in a pool. (integer
+# value)
 # Deprecated group/name - [DEFAULT]/sql_min_pool_size
 # Deprecated group/name - [DATABASE]/sql_min_pool_size
 #min_pool_size = 1
 
-# Maximum number of SQL connections to keep open in a pool. Setting a value of
-# 0 indicates no limit. (integer value)
+# Maximum number of SQL connections to keep open in a pool. Setting a
+# value of 0 indicates no limit. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_max_pool_size
 # Deprecated group/name - [DATABASE]/sql_max_pool_size
 #max_pool_size = 5
-
-# Maximum number of database connection retries during startup. Set to -1 to
-# specify an infinite retry count. (integer value)
+max_pool_size = 10
+
+# Maximum number of database connection retries during startup. Set to
+# -1 to specify an infinite retry count. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_max_retries
 # Deprecated group/name - [DATABASE]/sql_max_retries
 #max_retries = 10
-
-# Interval between retries of opening a SQL connection. (integer value)
+max_retries = -1
+
+# Interval between retries of opening a SQL connection. (integer
+# value)
 # Deprecated group/name - [DEFAULT]/sql_retry_interval
 # Deprecated group/name - [DATABASE]/reconnect_interval
 #retry_interval = 10
 
-# If set, use this value for max_overflow with SQLAlchemy. (integer value)
+# If set, use this value for max_overflow with SQLAlchemy. (integer
+# value)
 # Deprecated group/name - [DEFAULT]/sql_max_overflow
 # Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
 #max_overflow = 50
-
-# Verbosity of SQL debugging information: 0=None, 100=Everything. (integer
-# value)
+max_overflow = 30
+
+# Verbosity of SQL debugging information: 0=None, 100=Everything.
+# (integer value)
 # Minimum value: 0
 # Maximum value: 100
 # Deprecated group/name - [DEFAULT]/sql_connection_debug
@@ -800,1494 +2494,68 @@
 # Deprecated group/name - [DEFAULT]/sql_connection_trace
 #connection_trace = false
 
-# If set, use this value for pool_timeout with SQLAlchemy. (integer value)
+# If set, use this value for pool_timeout with SQLAlchemy. (integer
+# value)
 # Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
 #pool_timeout = <None>
 
-# Enable the experimental use of database reconnect on connection lost.
-# (boolean value)
+# Enable the experimental use of database reconnect on connection
+# lost. (boolean value)
 #use_db_reconnect = false
 
 # Seconds between retries of a database transaction. (integer value)
 #db_retry_interval = 1
 
-# If True, increases the interval between retries of a database operation up to
-# db_max_retry_interval. (boolean value)
+# If True, increases the interval between retries of a database
+# operation up to db_max_retry_interval. (boolean value)
 #db_inc_retry_interval = true
 
-# If db_inc_retry_interval is set, the maximum seconds between retries of a
-# database operation. (integer value)
+# If db_inc_retry_interval is set, the maximum seconds between retries
+# of a database operation. (integer value)
 #db_max_retry_interval = 10
 
-# Maximum retries in case of connection error or deadlock error before error is
-# raised. Set to -1 to specify an infinite retry count. (integer value)
+# Maximum retries in case of connection error or deadlock error before
+# error is raised. Set to -1 to specify an infinite retry count.
+# (integer value)
 #db_max_retries = 20
 
-
-[domain_config]
-
-#
-# From keystone
-#
-
-# Entry point for the domain-specific configuration driver in the
-# `keystone.resource.domain_config` namespace. Only a `sql` option is provided
-# by keystone, so there is no reason to set this unless you are providing a
-# custom entry point. (string value)
-#driver = sql
-
-# Toggle for caching of the domain-specific configuration backend. This has no
-# effect unless global caching is enabled. There is normally no reason to
-# disable this. (boolean value)
-#caching = true
-
-# Time-to-live (TTL, in seconds) to cache domain-specific configuration data.
-# This has no effect unless `[domain_config] caching` is enabled. (integer
-# value)
-#cache_time = 300
-
-
-[endpoint_filter]
-
-#
-# From keystone
-#
-
-# Entry point for the endpoint filter driver in the `keystone.endpoint_filter`
-# namespace. Only a `sql` option is provided by keystone, so there is no reason
-# to set this unless you are providing a custom entry point. (string value)
-#driver = sql
-
-# This controls keystone's behavior if the configured endpoint filters do not
-# result in any endpoints for a user + project pair (and therefore a
-# potentially empty service catalog). If set to true, keystone will return the
-# entire service catalog. If set to false, keystone will return an empty
-# service catalog. (boolean value)
-#return_all_endpoints_if_no_filter = true
-
-
-[endpoint_policy]
-
-#
-# From keystone
-#
-
-# Entry point for the endpoint policy driver in the `keystone.endpoint_policy`
-# namespace. Only a `sql` driver is provided by keystone, so there is no reason
-# to set this unless you are providing a custom entry point. (string value)
-#driver = sql
-
-
-[eventlet_server]
-
-#
-# From keystone
-#
-
-# DEPRECATED: The IP address of the network interface for the public service to
-# listen on. (unknown value)
-# Deprecated group/name - [DEFAULT]/bind_host
-# Deprecated group/name - [DEFAULT]/public_bind_host
-# This option is deprecated for removal since K.
-# Its value may be silently ignored in the future.
-# Reason: Support for running keystone under eventlet has been removed in the
-# Newton release. These options remain for backwards compatibility because they
-# are used for URL substitutions.
-#public_bind_host = 0.0.0.0
-
-# DEPRECATED: The port number for the public service to listen on. (port value)
-# Minimum value: 0
-# Maximum value: 65535
-# Deprecated group/name - [DEFAULT]/public_port
-# This option is deprecated for removal since K.
-# Its value may be silently ignored in the future.
-# Reason: Support for running keystone under eventlet has been removed in the
-# Newton release. These options remain for backwards compatibility because they
-# are used for URL substitutions.
-#public_port = 5000
-
-# DEPRECATED: The IP address of the network interface for the admin service to
-# listen on. (unknown value)
-# Deprecated group/name - [DEFAULT]/bind_host
-# Deprecated group/name - [DEFAULT]/admin_bind_host
-# This option is deprecated for removal since K.
-# Its value may be silently ignored in the future.
-# Reason: Support for running keystone under eventlet has been removed in the
-# Newton release. These options remain for backwards compatibility because they
-# are used for URL substitutions.
-#admin_bind_host = 0.0.0.0
-
-# DEPRECATED: The port number for the admin service to listen on. (port value)
-# Minimum value: 0
-# Maximum value: 65535
-# Deprecated group/name - [DEFAULT]/admin_port
-# This option is deprecated for removal since K.
-# Its value may be silently ignored in the future.
-# Reason: Support for running keystone under eventlet has been removed in the
-# Newton release. These options remain for backwards compatibility because they
-# are used for URL substitutions.
-#admin_port = 35357
-
-
-[extra_headers]
-
-#
-# From keystone
-#
-
-# Specifies the distribution of the keystone server. (string value)
-#Distribution = Ubuntu
-
-
-[federation]
-
-#
-# From keystone
-#
-
-# Entry point for the federation backend driver in the `keystone.federation`
-# namespace. Keystone only provides a `sql` driver, so there is no reason to
-# set this option unless you are providing a custom entry point. (string value)
-#driver = sql
-
-# Prefix to use when filtering environment variable names for federated
-# assertions. Matched variables are passed into the federated mapping engine.
-# (string value)
-#assertion_prefix =
-
-# Value to be used to obtain the entity ID of the Identity Provider from the
-# environment. For `mod_shib`, this would be `Shib-Identity-Provider`. For
-# `mod_auth_openidc`, this could be `HTTP_OIDC_ISS`. For `mod_auth_mellon`,
-# this could be `MELLON_IDP`. (string value)
-#remote_id_attribute = <None>
-
-# An arbitrary domain name that is reserved to allow federated ephemeral users
-# to have a domain concept. Note that an admin will not be able to create a
-# domain with this name or update an existing domain to this name. You are not
-# advised to change this value unless you really have to. (string value)
-#federated_domain_name = Federated
-
-# A list of trusted dashboard hosts. Before accepting a Single Sign-On request
-# to return a token, the origin host must be a member of this list. This
-# configuration option may be repeated for multiple values. You must set this
-# in order to use web-based SSO flows. For example:
-# trusted_dashboard=https://acme.example.com/auth/websso
-# trusted_dashboard=https://beta.example.com/auth/websso (multi valued)
-#trusted_dashboard =
-
-# Absolute path to an HTML file used as a Single Sign-On callback handler. This
-# page is expected to redirect the user from keystone back to a trusted
-# dashboard host, by form encoding a token in a POST request. Keystone's
-# default value should be sufficient for most deployments. (string value)
-#sso_callback_template = /etc/keystone/sso_callback_template.html
-
-# Toggle for federation caching. This has no effect unless global caching is
-# enabled. There is typically no reason to disable this. (boolean value)
-#caching = true
-
-
-[fernet_tokens]
-
-#
-# From keystone
-#
-
-# Directory containing Fernet token keys. This directory must exist before
-# using `keystone-manage fernet_setup` for the first time, must be writable by
-# the user running `keystone-manage fernet_setup` or `keystone-manage
-# fernet_rotate`, and of course must be readable by keystone's server process.
-# The repository may contain keys in one of three states: a single staged key
-# (always index 0) used for token validation, a single primary key (always the
-# highest index) used for token creation and validation, and any number of
-# secondary keys (all other index values) used for token validation. With
-# multiple keystone nodes, each node must share the same key repository
-# contents, with the exception of the staged key (index 0). It is safe to run
-# `keystone-manage fernet_rotate` once on any one node to promote a staged key
-# (index 0) to be the new primary (incremented from the previous highest
-# index), and produce a new staged key (a new key with index 0); the resulting
-# repository can then be atomically replicated to other nodes without any risk
-# of race conditions (for example, it is safe to run `keystone-manage
-# fernet_rotate` on host A, wait any amount of time, create a tarball of the
-# directory on host A, unpack it on host B to a temporary location, and
-# atomically move (`mv`) the directory into place on host B). Running
-# `keystone-manage fernet_rotate` *twice* on a key repository without syncing
-# other nodes will result in tokens that can not be validated by all nodes.
-# (string value)
-#key_repository = /etc/keystone/fernet-keys/
-
-# This controls how many keys are held in rotation by `keystone-manage
-# fernet_rotate` before they are discarded. The default value of 3 means that
-# keystone will maintain one staged key (always index 0), one primary key (the
-# highest numerical index), and one secondary key (every other index).
-# Increasing this value means that additional secondary keys will be kept in
-# the rotation. (integer value)
-# Minimum value: 1
-#max_active_keys = 3
+#
+# From oslo.db.concurrency
+#
+
+# Enable the experimental use of thread pooling for all DB API calls
+# (boolean value)
+# Deprecated group/name - [DEFAULT]/dbapi_use_tpool
+#use_tpool = false
+
+[cors]
+#
+# From oslo.middleware
+#
+
+# Indicate whether this resource may be shared with the domain
+# received in the requests "origin" header. Format:
+# "<protocol>://<host>[:<port>]", no trailing slash. Example:
+# https://horizon.example.com (list value)
+
+# Indicate that the actual request can include user credentials
+# (boolean value)
+
+# Indicate which headers are safe to expose to the API. Defaults to
+# HTTP Simple Headers. (list value)
+
+# Maximum cache age of CORS preflight requests. (integer value)
+
+# Indicate which methods can be used during the actual request. (list
+# value)
+
+# Indicate which header field names may be used during the actual
+# request. (list value)
 
 
 [healthcheck]
 
-#
-# From oslo.middleware
-#
-
-# DEPRECATED: The path to respond to healtcheck requests on. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-#path = /healthcheck
-
-# Show more detailed information as part of the response (boolean value)
-#detailed = false
-
-# Additional backends that can perform health checks and report that
-# information back as part of a request. (list value)
-#backends =
-
-# Check the presence of a file to determine if an application is running on a
-# port. Used by DisableByFileHealthcheck plugin. (string value)
-#disable_by_file_path = <None>
-
-# Check the presence of a file based on a port to determine if an application
-# is running on a port. Expects a "port:path" list of strings. Used by
-# DisableByFilesPortsHealthcheck plugin. (list value)
-#disable_by_file_paths =
-
-
-[identity]
-
-#
-# From keystone
-#
-
-# This references the domain to use for all Identity API v2 requests (which are
-# not aware of domains). A domain with this ID can optionally be created for
-# you by `keystone-manage bootstrap`. The domain referenced by this ID cannot
-# be deleted on the v3 API, to prevent accidentally breaking the v2 API. There
-# is nothing special about this domain, other than the fact that it must exist
-# to order to maintain support for your v2 clients. There is typically no
-# reason to change this value. (string value)
-#default_domain_id = default
-
-# A subset (or all) of domains can have their own identity driver, each with
-# their own partial configuration options, stored in either the resource
-# backend or in a file in a domain configuration directory (depending on the
-# setting of `[identity] domain_configurations_from_database`). Only values
-# specific to the domain need to be specified in this manner. This feature is
-# disabled by default, but may be enabled by default in a future release; set
-# to true to enable. (boolean value)
-#domain_specific_drivers_enabled = false
-
-# By default, domain-specific configuration data is read from files in the
-# directory identified by `[identity] domain_config_dir`. Enabling this
-# configuration option allows you to instead manage domain-specific
-# configurations through the API, which are then persisted in the backend
-# (typically, a SQL database), rather than using configuration files on disk.
-# (boolean value)
-#domain_configurations_from_database = false
-
-# Absolute path where keystone should locate domain-specific `[identity]`
-# configuration files. This option has no effect unless `[identity]
-# domain_specific_drivers_enabled` is set to true. There is typically no reason
-# to change this value. (string value)
-#domain_config_dir = /etc/keystone/domains
-
-# Entry point for the identity backend driver in the `keystone.identity`
-# namespace. Keystone provides a `sql` and `ldap` driver. This option is also
-# used as the default driver selection (along with the other configuration
-# variables in this section) in the event that `[identity]
-# domain_specific_drivers_enabled` is enabled, but no applicable domain-
-# specific configuration is defined for the domain in question. Unless your
-# deployment primarily relies on `ldap` AND is not using domain-specific
-# configuration, you should typically leave this set to `sql`. (string value)
-#driver = sql
-
-# Toggle for identity caching. This has no effect unless global caching is
-# enabled. There is typically no reason to disable this. (boolean value)
-#caching = true
-
-# Time to cache identity data (in seconds). This has no effect unless global
-# and identity caching are enabled. (integer value)
-#cache_time = 600
-
-# Maximum allowed length for user passwords. Decrease this value to improve
-# performance. Changing this value does not effect existing passwords. (integer
-# value)
-# Maximum value: 4096
-#max_password_length = 4096
-
-# Maximum number of entities that will be returned in an identity collection.
-# (integer value)
-#list_limit = <None>
-
-# The password hashing algorithm to use for passwords stored within keystone.
-# (string value)
-# Possible values:
-# bcrypt - <No description provided>
-# scrypt - <No description provided>
-# pbkdf2_sha512 - <No description provided>
-#password_hash_algorithm = bcrypt
-
-# This option represents a trade off between security and performance. Higher
-# values lead to slower performance, but higher security. Changing this option
-# will only affect newly created passwords as existing password hashes already
-# have a fixed number of rounds applied, so it is safe to tune this option in a
-# running cluster.  The default for bcrypt is 12, must be between 4 and 31,
-# inclusive.  The default for scrypt is 16, must be within `range(1,32)`.  The
-# default for pbkdf_sha512 is 60000, must be within `range(1,1<<32)`  WARNING:
-# If using scrypt, increasing this value increases BOTH time AND memory
-# requirements to hash a password. (integer value)
-#password_hash_rounds = <None>
-
-# Optional block size to pass to scrypt hash function (the `r` parameter).
-# Useful for tuning scrypt to optimal performance for your CPU architecture.
-# This option is only used when the `password_hash_algorithm` option is set to
-# `scrypt`. Defaults to 8. (integer value)
-#scrypt_block_size = <None>
-
-# Optional parallelism to pass to scrypt hash function (the `p` parameter).
-# This option is only used when the `password_hash_algorithm` option is set to
-# `scrypt`. Defaults to 1. (integer value)
-#scrypt_parallelism = <None>
-
-# Number of bytes to use in scrypt and pbkfd2_sha512 hashing salt.  Default for
-# scrypt is 16 bytes. Default for pbkfd2_sha512 is 16 bytes.  Limited to a
-# maximum of 96 bytes due to the size of the column used to store password
-# hashes. (integer value)
-# Minimum value: 0
-# Maximum value: 96
-#salt_bytesize = <None>
-
-
-[identity_mapping]
-
-#
-# From keystone
-#
-
-# Entry point for the identity mapping backend driver in the
-# `keystone.identity.id_mapping` namespace. Keystone only provides a `sql`
-# driver, so there is no reason to change this unless you are providing a
-# custom entry point. (string value)
-#driver = sql
-
-# Entry point for the public ID generator for user and group entities in the
-# `keystone.identity.id_generator` namespace. The Keystone identity mapper only
-# supports generators that produce 64 bytes or less. Keystone only provides a
-# `sha256` entry point, so there is no reason to change this value unless
-# you're providing a custom entry point. (string value)
-#generator = sha256
-
-# The format of user and group IDs changed in Juno for backends that do not
-# generate UUIDs (for example, LDAP), with keystone providing a hash mapping to
-# the underlying attribute in LDAP. By default this mapping is disabled, which
-# ensures that existing IDs will not change. Even when the mapping is enabled
-# by using domain-specific drivers (`[identity]
-# domain_specific_drivers_enabled`), any users and groups from the default
-# domain being handled by LDAP will still not be mapped to ensure their IDs
-# remain backward compatible. Setting this value to false will enable the new
-# mapping for all backends, including the default LDAP driver. It is only
-# guaranteed to be safe to enable this option if you do not already have
-# assignments for users and groups from the default LDAP domain, and you
-# consider it to be acceptable for Keystone to provide the different IDs to
-# clients than it did previously (existing IDs in the API will suddenly
-# change). Typically this means that the only time you can set this value to
-# false is when configuring a fresh installation, although that is the
-# recommended value. (boolean value)
-#backward_compatible_ids = true
-
-
-[ldap]
-
-#
-# From keystone
-#
-
-# URL(s) for connecting to the LDAP server. Multiple LDAP URLs may be specified
-# as a comma separated string. The first URL to successfully bind is used for
-# the connection. (string value)
-#url = ldap://localhost
-
-# The user name of the administrator bind DN to use when querying the LDAP
-# server, if your LDAP server requires it. (string value)
-#user = <None>
-
-# The password of the administrator bind DN to use when querying the LDAP
-# server, if your LDAP server requires it. (string value)
-#password = <None>
-
-# The default LDAP server suffix to use, if a DN is not defined via either
-# `[ldap] user_tree_dn` or `[ldap] group_tree_dn`. (string value)
-#suffix = cn=example,cn=com
-
-# The search scope which defines how deep to search within the search base. A
-# value of `one` (representing `oneLevel` or `singleLevel`) indicates a search
-# of objects immediately below to the base object, but does not include the
-# base object itself. A value of `sub` (representing `subtree` or
-# `wholeSubtree`) indicates a search of both the base object itself and the
-# entire subtree below it. (string value)
-# Possible values:
-# one - <No description provided>
-# sub - <No description provided>
-#query_scope = one
-
-# Defines the maximum number of results per page that keystone should request
-# from the LDAP server when listing objects. A value of zero (`0`) disables
-# paging. (integer value)
-# Minimum value: 0
-#page_size = 0
-
-# The LDAP dereferencing option to use for queries involving aliases. A value
-# of `default` falls back to using default dereferencing behavior configured by
-# your `ldap.conf`. A value of `never` prevents aliases from being dereferenced
-# at all. A value of `searching` dereferences aliases only after name
-# resolution. A value of `finding` dereferences aliases only during name
-# resolution. A value of `always` dereferences aliases in all cases. (string
-# value)
-# Possible values:
-# never - <No description provided>
-# searching - <No description provided>
-# always - <No description provided>
-# finding - <No description provided>
-# default - <No description provided>
-#alias_dereferencing = default
-
-# Sets the LDAP debugging level for LDAP calls. A value of 0 means that
-# debugging is not enabled. This value is a bitmask, consult your LDAP
-# documentation for possible values. (integer value)
-# Minimum value: -1
-#debug_level = <None>
-
-# Sets keystone's referral chasing behavior across directory partitions. If
-# left unset, the system's default behavior will be used. (boolean value)
-#chase_referrals = <None>
-
-# The search base to use for users. Defaults to the `[ldap] suffix` value.
-# (string value)
-#user_tree_dn = <None>
-
-# The LDAP search filter to use for users. (string value)
-#user_filter = <None>
-
-# The LDAP object class to use for users. (string value)
-#user_objectclass = inetOrgPerson
-
-# The LDAP attribute mapped to user IDs in keystone. This must NOT be a
-# multivalued attribute. User IDs are expected to be globally unique across
-# keystone domains and URL-safe. (string value)
-#user_id_attribute = cn
-
-# The LDAP attribute mapped to user names in keystone. User names are expected
-# to be unique only within a keystone domain and are not expected to be URL-
-# safe. (string value)
-#user_name_attribute = sn
-
-# The LDAP attribute mapped to user descriptions in keystone. (string value)
-#user_description_attribute = description
-
-# The LDAP attribute mapped to user emails in keystone. (string value)
-#user_mail_attribute = mail
-
-# The LDAP attribute mapped to user passwords in keystone. (string value)
-#user_pass_attribute = userPassword
-
-# The LDAP attribute mapped to the user enabled attribute in keystone. If
-# setting this option to `userAccountControl`, then you may be interested in
-# setting `[ldap] user_enabled_mask` and `[ldap] user_enabled_default` as well.
-# (string value)
-#user_enabled_attribute = enabled
-
-# Logically negate the boolean value of the enabled attribute obtained from the
-# LDAP server. Some LDAP servers use a boolean lock attribute where "true"
-# means an account is disabled. Setting `[ldap] user_enabled_invert = true`
-# will allow these lock attributes to be used. This option will have no effect
-# if either the `[ldap] user_enabled_mask` or `[ldap] user_enabled_emulation`
-# options are in use. (boolean value)
-#user_enabled_invert = false
-
-# Bitmask integer to select which bit indicates the enabled value if the LDAP
-# server represents "enabled" as a bit on an integer rather than as a discrete
-# boolean. A value of `0` indicates that the mask is not used. If this is not
-# set to `0` the typical value is `2`. This is typically used when `[ldap]
-# user_enabled_attribute = userAccountControl`. Setting this option causes
-# keystone to ignore the value of `[ldap] user_enabled_invert`. (integer value)
-# Minimum value: 0
-#user_enabled_mask = 0
-
-# The default value to enable users. This should match an appropriate integer
-# value if the LDAP server uses non-boolean (bitmask) values to indicate if a
-# user is enabled or disabled. If this is not set to `True`, then the typical
-# value is `512`. This is typically used when `[ldap] user_enabled_attribute =
-# userAccountControl`. (string value)
-#user_enabled_default = True
-
-# List of user attributes to ignore on create and update, or whether a specific
-# user attribute should be filtered for list or show user. (list value)
-#user_attribute_ignore = default_project_id
-
-# The LDAP attribute mapped to a user's default_project_id in keystone. This is
-# most commonly used when keystone has write access to LDAP. (string value)
-#user_default_project_id_attribute = <None>
-
-# If enabled, keystone uses an alternative method to determine if a user is
-# enabled or not by checking if they are a member of the group defined by the
-# `[ldap] user_enabled_emulation_dn` option. Enabling this option causes
-# keystone to ignore the value of `[ldap] user_enabled_invert`. (boolean value)
-#user_enabled_emulation = false
-
-# DN of the group entry to hold enabled users when using enabled emulation.
-# Setting this option has no effect unless `[ldap] user_enabled_emulation` is
-# also enabled. (string value)
-#user_enabled_emulation_dn = <None>
-
-# Use the `[ldap] group_member_attribute` and `[ldap] group_objectclass`
-# settings to determine membership in the emulated enabled group. Enabling this
-# option has no effect unless `[ldap] user_enabled_emulation` is also enabled.
-# (boolean value)
-#user_enabled_emulation_use_group_config = false
-
-# A list of LDAP attribute to keystone user attribute pairs used for mapping
-# additional attributes to users in keystone. The expected format is
-# `<ldap_attr>:<user_attr>`, where `ldap_attr` is the attribute in the LDAP
-# object and `user_attr` is the attribute which should appear in the identity
-# API. (list value)
-#user_additional_attribute_mapping =
-
-# The search base to use for groups. Defaults to the `[ldap] suffix` value.
-# (string value)
-#group_tree_dn = <None>
-
-# The LDAP search filter to use for groups. (string value)
-#group_filter = <None>
-
-# The LDAP object class to use for groups. If setting this option to
-# `posixGroup`, you may also be interested in enabling the `[ldap]
-# group_members_are_ids` option. (string value)
-#group_objectclass = groupOfNames
-
-# The LDAP attribute mapped to group IDs in keystone. This must NOT be a
-# multivalued attribute. Group IDs are expected to be globally unique across
-# keystone domains and URL-safe. (string value)
-#group_id_attribute = cn
-
-# The LDAP attribute mapped to group names in keystone. Group names are
-# expected to be unique only within a keystone domain and are not expected to
-# be URL-safe. (string value)
-#group_name_attribute = ou
-
-# The LDAP attribute used to indicate that a user is a member of the group.
-# (string value)
-#group_member_attribute = member
-
-# Enable this option if the members of the group object class are keystone user
-# IDs rather than LDAP DNs. This is the case when using `posixGroup` as the
-# group object class in Open Directory. (boolean value)
-#group_members_are_ids = false
-
-# The LDAP attribute mapped to group descriptions in keystone. (string value)
-#group_desc_attribute = description
-
-# List of group attributes to ignore on create and update. or whether a
-# specific group attribute should be filtered for list or show group. (list
-# value)
-#group_attribute_ignore =
-
-# A list of LDAP attribute to keystone group attribute pairs used for mapping
-# additional attributes to groups in keystone. The expected format is
-# `<ldap_attr>:<group_attr>`, where `ldap_attr` is the attribute in the LDAP
-# object and `group_attr` is the attribute which should appear in the identity
-# API. (list value)
-#group_additional_attribute_mapping =
-
-# If enabled, group queries will use Active Directory specific filters for
-# nested groups. (boolean value)
-#group_ad_nesting = false
-
-# An absolute path to a CA certificate file to use when communicating with LDAP
-# servers. This option will take precedence over `[ldap] tls_cacertdir`, so
-# there is no reason to set both. (string value)
-#tls_cacertfile = <None>
-
-# An absolute path to a CA certificate directory to use when communicating with
-# LDAP servers. There is no reason to set this option if you've also set
-# `[ldap] tls_cacertfile`. (string value)
-#tls_cacertdir = <None>
-
-# Enable TLS when communicating with LDAP servers. You should also set the
-# `[ldap] tls_cacertfile` and `[ldap] tls_cacertdir` options when using this
-# option. Do not set this option if you are using LDAP over SSL (LDAPS) instead
-# of TLS. (boolean value)
-#use_tls = false
-
-# Specifies which checks to perform against client certificates on incoming TLS
-# sessions. If set to `demand`, then a certificate will always be requested and
-# required from the LDAP server. If set to `allow`, then a certificate will
-# always be requested but not required from the LDAP server. If set to `never`,
-# then a certificate will never be requested. (string value)
-# Possible values:
-# demand - <No description provided>
-# never - <No description provided>
-# allow - <No description provided>
-#tls_req_cert = demand
-
-# The connection timeout to use with the LDAP server. A value of `-1` means
-# that connections will never timeout. (integer value)
-# Minimum value: -1
-#connection_timeout = -1
-
-# Enable LDAP connection pooling for queries to the LDAP server. There is
-# typically no reason to disable this. (boolean value)
-#use_pool = true
-
-# The size of the LDAP connection pool. This option has no effect unless
-# `[ldap] use_pool` is also enabled. (integer value)
-# Minimum value: 1
-#pool_size = 10
-
-# The maximum number of times to attempt reconnecting to the LDAP server before
-# aborting. A value of zero prevents retries. This option has no effect unless
-# `[ldap] use_pool` is also enabled. (integer value)
-# Minimum value: 0
-#pool_retry_max = 3
-
-# The number of seconds to wait before attempting to reconnect to the LDAP
-# server. This option has no effect unless `[ldap] use_pool` is also enabled.
-# (floating point value)
-#pool_retry_delay = 0.1
-
-# The connection timeout to use when pooling LDAP connections. A value of `-1`
-# means that connections will never timeout. This option has no effect unless
-# `[ldap] use_pool` is also enabled. (integer value)
-# Minimum value: -1
-#pool_connection_timeout = -1
-
-# The maximum connection lifetime to the LDAP server in seconds. When this
-# lifetime is exceeded, the connection will be unbound and removed from the
-# connection pool. This option has no effect unless `[ldap] use_pool` is also
-# enabled. (integer value)
-# Minimum value: 1
-#pool_connection_lifetime = 600
-
-# Enable LDAP connection pooling for end user authentication. There is
-# typically no reason to disable this. (boolean value)
-#use_auth_pool = true
-
-# The size of the connection pool to use for end user authentication. This
-# option has no effect unless `[ldap] use_auth_pool` is also enabled. (integer
-# value)
-# Minimum value: 1
-#auth_pool_size = 100
-
-# The maximum end user authentication connection lifetime to the LDAP server in
-# seconds. When this lifetime is exceeded, the connection will be unbound and
-# removed from the connection pool. This option has no effect unless `[ldap]
-# use_auth_pool` is also enabled. (integer value)
-# Minimum value: 1
-#auth_pool_connection_lifetime = 60
-
-
-[matchmaker_redis]
-
-#
-# From oslo.messaging
-#
-
-# DEPRECATED: Host to locate redis. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#host = 127.0.0.1
-
-# DEPRECATED: Use this port to connect to redis host. (port value)
-# Minimum value: 0
-# Maximum value: 65535
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#port = 6379
-
-# DEPRECATED: Password for Redis server (optional). (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#password =
-
-# DEPRECATED: List of Redis Sentinel hosts (fault tolerance mode), e.g.,
-# [host:port, host1:port ... ] (list value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#sentinel_hosts =
-
-# Redis replica set name. (string value)
-#sentinel_group_name = oslo-messaging-zeromq
-
-# Time in ms to wait between connection attempts. (integer value)
-#wait_timeout = 2000
-
-# Time in ms to wait before the transaction is killed. (integer value)
-#check_timeout = 20000
-
-# Timeout in ms on blocking socket operations. (integer value)
-#socket_timeout = 10000
-
-
-[memcache]
-
-#
-# From keystone
-#
-
-# Number of seconds memcached server is considered dead before it is tried
-# again. This is used by the key value store system. (integer value)
-#dead_retry = 300
-
-# Timeout in seconds for every call to a server. This is used by the key value
-# store system. (integer value)
-#socket_timeout = 3
-
-# Max total number of open connections to every memcached server. This is used
-# by the key value store system. (integer value)
-#pool_maxsize = 10
-
-# Number of seconds a connection to memcached is held unused in the pool before
-# it is closed. This is used by the key value store system. (integer value)
-#pool_unused_timeout = 60
-
-# Number of seconds that an operation will wait to get a memcache client
-# connection. This is used by the key value store system. (integer value)
-#pool_connection_get_timeout = 10
-
-
-[oauth1]
-
-#
-# From keystone
-#
-
-# Entry point for the OAuth backend driver in the `keystone.oauth1` namespace.
-# Typically, there is no reason to set this option unless you are providing a
-# custom entry point. (string value)
-#driver = sql
-
-# Number of seconds for the OAuth Request Token to remain valid after being
-# created. This is the amount of time the user has to authorize the token.
-# Setting this option to zero means that request tokens will last forever.
-# (integer value)
-# Minimum value: 0
-#request_token_duration = 28800
-
-# Number of seconds for the OAuth Access Token to remain valid after being
-# created. This is the amount of time the consumer has to interact with the
-# service provider (which is typically keystone). Setting this option to zero
-# means that access tokens will last forever. (integer value)
-# Minimum value: 0
-#access_token_duration = 86400
-
-
-[oslo_messaging_amqp]
-
-#
-# From oslo.messaging
-#
-
-# Name for the AMQP container. must be globally unique. Defaults to a generated
-# UUID (string value)
-#container_name = <None>
-
-# Timeout for inactive connections (in seconds) (integer value)
-#idle_timeout = 0
-
-# Debug: dump AMQP frames to stdout (boolean value)
-#trace = false
-
-# Attempt to connect via SSL. If no other ssl-related parameters are given, it
-# will use the system's CA-bundle to verify the server's certificate. (boolean
-# value)
-#ssl = false
-
-# CA certificate PEM file used to verify the server's certificate (string
-# value)
-#ssl_ca_file =
-
-# Self-identifying certificate PEM file for client authentication (string
-# value)
-#ssl_cert_file =
-
-# Private key PEM file used to sign ssl_cert_file certificate (optional)
-# (string value)
-#ssl_key_file =
-
-# Password for decrypting ssl_key_file (if encrypted) (string value)
-#ssl_key_password = <None>
-
-# By default SSL checks that the name in the server's certificate matches the
-# hostname in the transport_url. In some configurations it may be preferable to
-# use the virtual hostname instead, for example if the server uses the Server
-# Name Indication TLS extension (rfc6066) to provide a certificate per virtual
-# host. Set ssl_verify_vhost to True if the server's SSL certificate uses the
-# virtual host name instead of the DNS name. (boolean value)
-#ssl_verify_vhost = false
-
-# DEPRECATED: Accept clients using either SSL or plain TCP (boolean value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Not applicable - not a SSL server
-#allow_insecure_clients = false
-
-# Space separated list of acceptable SASL mechanisms (string value)
-#sasl_mechanisms =
-
-# Path to directory that contains the SASL configuration (string value)
-#sasl_config_dir =
-
-# Name of configuration file (without .conf suffix) (string value)
-#sasl_config_name =
-
-# SASL realm to use if no realm present in username (string value)
-#sasl_default_realm =
-
-# DEPRECATED: User name for message broker authentication (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the
-# username.
-#username =
-
-# DEPRECATED: Password for message broker authentication (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the
-# password.
-#password =
-
-# Seconds to pause before attempting to re-connect. (integer value)
-# Minimum value: 1
-#connection_retry_interval = 1
-
-# Increase the connection_retry_interval by this many seconds after each
-# unsuccessful failover attempt. (integer value)
-# Minimum value: 0
-#connection_retry_backoff = 2
-
-# Maximum limit for connection_retry_interval + connection_retry_backoff
-# (integer value)
-# Minimum value: 1
-#connection_retry_interval_max = 30
-
-# Time to pause between re-connecting an AMQP 1.0 link that failed due to a
-# recoverable error. (integer value)
-# Minimum value: 1
-#link_retry_delay = 10
-
-# The maximum number of attempts to re-send a reply message which failed due to
-# a recoverable error. (integer value)
-# Minimum value: -1
-#default_reply_retry = 0
-
-# The deadline for an rpc reply message delivery. (integer value)
-# Minimum value: 5
-#default_reply_timeout = 30
-
-# The deadline for an rpc cast or call message delivery. Only used when caller
-# does not provide a timeout expiry. (integer value)
-# Minimum value: 5
-#default_send_timeout = 30
-
-# The deadline for a sent notification message delivery. Only used when caller
-# does not provide a timeout expiry. (integer value)
-# Minimum value: 5
-#default_notify_timeout = 30
-
-# The duration to schedule a purge of idle sender links. Detach link after
-# expiry. (integer value)
-# Minimum value: 1
-#default_sender_link_timeout = 600
-
-# Indicates the addressing mode used by the driver.
-# Permitted values:
-# 'legacy'   - use legacy non-routable addressing
-# 'routable' - use routable addresses
-# 'dynamic'  - use legacy addresses if the message bus does not support routing
-# otherwise use routable addressing (string value)
-#addressing_mode = dynamic
-
-# Enable virtual host support for those message buses that do not natively
-# support virtual hosting (such as qpidd). When set to true the virtual host
-# name will be added to all message bus addresses, effectively creating a
-# private 'subnet' per virtual host. Set to False if the message bus supports
-# virtual hosting using the 'hostname' field in the AMQP 1.0 Open performative
-# as the name of the virtual host. (boolean value)
-#pseudo_vhost = true
-
-# address prefix used when sending to a specific server (string value)
-#server_request_prefix = exclusive
-
-# address prefix used when broadcasting to all servers (string value)
-#broadcast_prefix = broadcast
-
-# address prefix when sending to any server in group (string value)
-#group_request_prefix = unicast
-
-# Address prefix for all generated RPC addresses (string value)
-#rpc_address_prefix = openstack.org/om/rpc
-
-# Address prefix for all generated Notification addresses (string value)
-#notify_address_prefix = openstack.org/om/notify
-
-# Appended to the address prefix when sending a fanout message. Used by the
-# message bus to identify fanout messages. (string value)
-#multicast_address = multicast
-
-# Appended to the address prefix when sending to a particular RPC/Notification
-# server. Used by the message bus to identify messages sent to a single
-# destination. (string value)
-#unicast_address = unicast
-
-# Appended to the address prefix when sending to a group of consumers. Used by
-# the message bus to identify messages that should be delivered in a round-
-# robin fashion across consumers. (string value)
-#anycast_address = anycast
-
-# Exchange name used in notification addresses.
-# Exchange name resolution precedence:
-# Target.exchange if set
-# else default_notification_exchange if set
-# else control_exchange if set
-# else 'notify' (string value)
-#default_notification_exchange = <None>
-
-# Exchange name used in RPC addresses.
-# Exchange name resolution precedence:
-# Target.exchange if set
-# else default_rpc_exchange if set
-# else control_exchange if set
-# else 'rpc' (string value)
-#default_rpc_exchange = <None>
-
-# Window size for incoming RPC Reply messages. (integer value)
-# Minimum value: 1
-#reply_link_credit = 200
-
-# Window size for incoming RPC Request messages (integer value)
-# Minimum value: 1
-#rpc_server_credit = 100
-
-# Window size for incoming Notification messages (integer value)
-# Minimum value: 1
-#notify_server_credit = 100
-
-# Send messages of this type pre-settled.
-# Pre-settled messages will not receive acknowledgement
-# from the peer. Note well: pre-settled messages may be
-# silently discarded if the delivery fails.
-# Permitted values:
-# 'rpc-call' - send RPC Calls pre-settled
-# 'rpc-reply'- send RPC Replies pre-settled
-# 'rpc-cast' - Send RPC Casts pre-settled
-# 'notify'   - Send Notifications pre-settled
-#  (multi valued)
-#pre_settled = rpc-cast
-#pre_settled = rpc-reply
-
-
-[oslo_messaging_kafka]
-
-#
-# From oslo.messaging
-#
-
-# DEPRECATED: Default Kafka broker Host (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#kafka_default_host = localhost
-
-# DEPRECATED: Default Kafka broker Port (port value)
-# Minimum value: 0
-# Maximum value: 65535
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#kafka_default_port = 9092
-
-# Max fetch bytes of Kafka consumer (integer value)
-#kafka_max_fetch_bytes = 1048576
-
-# Default timeout(s) for Kafka consumers (floating point value)
-#kafka_consumer_timeout = 1.0
-
-# DEPRECATED: Pool Size for Kafka Consumers (integer value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#pool_size = 10
-
-# DEPRECATED: The pool size limit for connections expiration policy (integer
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#conn_pool_min_size = 2
-
-# DEPRECATED: The time-to-live in sec of idle connections in the pool (integer
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#conn_pool_ttl = 1200
-
-# Group id for Kafka consumer. Consumers in one group will coordinate message
-# consumption (string value)
-#consumer_group = oslo_messaging_consumer
-
-# Upper bound on the delay for KafkaProducer batching in seconds (floating
-# point value)
-#producer_batch_timeout = 0.0
-
-# Size of batch for the producer async send (integer value)
-#producer_batch_size = 16384
-
-
-[oslo_messaging_notifications]
-
-#
-# From oslo.messaging
-#
-
-# The Drivers(s) to handle sending notifications. Possible values are
-# messaging, messagingv2, routing, log, test, noop (multi valued)
-# Deprecated group/name - [DEFAULT]/notification_driver
-#driver =
-
-# A URL representing the messaging driver to use for notifications. If not set,
-# we fall back to the same configuration used for RPC. (string value)
-# Deprecated group/name - [DEFAULT]/notification_transport_url
-#transport_url = <None>
-
-# AMQP topic used for OpenStack notifications. (list value)
-# Deprecated group/name - [rpc_notifier2]/topics
-# Deprecated group/name - [DEFAULT]/notification_topics
-#topics = notifications
-
-# The maximum number of attempts to re-send a notification message which failed
-# to be delivered due to a recoverable error. 0 - No retry, -1 - indefinite
-# (integer value)
-#retry = -1
-
-
-[oslo_messaging_rabbit]
-
-#
-# From oslo.messaging
-#
-
-# Use durable queues in AMQP. (boolean value)
-# Deprecated group/name - [DEFAULT]/amqp_durable_queues
-# Deprecated group/name - [DEFAULT]/rabbit_durable_queues
-#amqp_durable_queues = false
-
-# Auto-delete queues in AMQP. (boolean value)
-#amqp_auto_delete = false
-
-# Enable SSL (boolean value)
-#ssl = <None>
-
-# SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and
-# SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some
-# distributions. (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_version
-#ssl_version =
-
-# SSL key file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_keyfile
-#ssl_key_file =
-
-# SSL cert file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_certfile
-#ssl_cert_file =
-
-# SSL certification authority file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_ca_certs
-#ssl_ca_file =
-
-# How long to wait before reconnecting in response to an AMQP consumer cancel
-# notification. (floating point value)
-#kombu_reconnect_delay = 1.0
-
-# EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression will not
-# be used. This option may not be available in future versions. (string value)
-#kombu_compression = <None>
-
-# How long to wait a missing client before abandoning to send it its replies.
-# This value should not be longer than rpc_response_timeout. (integer value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_reconnect_timeout
-#kombu_missing_consumer_retry_timeout = 60
-
-# Determines how the next RabbitMQ node is chosen in case the one we are
-# currently connected to becomes unavailable. Takes effect only if more than
-# one RabbitMQ node is provided in config. (string value)
-# Possible values:
-# round-robin - <No description provided>
-# shuffle - <No description provided>
-#kombu_failover_strategy = round-robin
-
-# DEPRECATED: The RabbitMQ broker address where a single node is used. (string
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_host = localhost
-
-# DEPRECATED: The RabbitMQ broker port where a single node is used. (port
-# value)
-# Minimum value: 0
-# Maximum value: 65535
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_port = 5672
-
-# DEPRECATED: RabbitMQ HA cluster host:port pairs. (list value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_hosts = $rabbit_host:$rabbit_port
-
-# DEPRECATED: The RabbitMQ userid. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_userid = guest
-
-# DEPRECATED: The RabbitMQ password. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_password = guest
-
-# The RabbitMQ login method. (string value)
-# Possible values:
-# PLAIN - <No description provided>
-# AMQPLAIN - <No description provided>
-# RABBIT-CR-DEMO - <No description provided>
-#rabbit_login_method = AMQPLAIN
-
-# DEPRECATED: The RabbitMQ virtual host. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_virtual_host = /
-
-# How frequently to retry connecting with RabbitMQ. (integer value)
-#rabbit_retry_interval = 1
-
-# How long to backoff for between retries when connecting to RabbitMQ. (integer
-# value)
-#rabbit_retry_backoff = 2
-
-# Maximum interval of RabbitMQ connection retries. Default is 30 seconds.
-# (integer value)
-#rabbit_interval_max = 30
-
-# DEPRECATED: Maximum number of RabbitMQ connection retries. Default is 0
-# (infinite retry count). (integer value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-#rabbit_max_retries = 0
-
-# Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change this
-# option, you must wipe the RabbitMQ database. In RabbitMQ 3.0, queue mirroring
-# is no longer controlled by the x-ha-policy argument when declaring a queue.
-# If you just want to make sure that all queues (except those with auto-
-# generated names) are mirrored across all nodes, run: "rabbitmqctl set_policy
-# HA '^(?!amq\.).*' '{"ha-mode": "all"}' " (boolean value)
-#rabbit_ha_queues = false
-
-# Positive integer representing duration in seconds for queue TTL (x-expires).
-# Queues which are unused for the duration of the TTL are automatically
-# deleted. The parameter affects only reply and fanout queues. (integer value)
-# Minimum value: 1
-#rabbit_transient_queues_ttl = 1800
-
-# Specifies the number of messages to prefetch. Setting to zero allows
-# unlimited messages. (integer value)
-#rabbit_qos_prefetch_count = 64
-
-# Number of seconds after which the Rabbit broker is considered down if
-# heartbeat's keep-alive fails (0 disable the heartbeat). EXPERIMENTAL (integer
-# value)
-#heartbeat_timeout_threshold = 60
-
-# How often times during the heartbeat_timeout_threshold we check the
-# heartbeat. (integer value)
-#heartbeat_rate = 2
-
-# Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake (boolean value)
-#fake_rabbit = false
-
-# Maximum number of channels to allow (integer value)
-#channel_max = <None>
-
-# The maximum byte size for an AMQP frame (integer value)
-#frame_max = <None>
-
-# How often to send heartbeats for consumer's connections (integer value)
-#heartbeat_interval = 3
-
-# Arguments passed to ssl.wrap_socket (dict value)
-#ssl_options = <None>
-
-# Set socket timeout in seconds for connection's socket (floating point value)
-#socket_timeout = 0.25
-
-# Set TCP_USER_TIMEOUT in seconds for connection's socket (floating point
-# value)
-#tcp_user_timeout = 0.25
-
-# Set delay for reconnection to some host which has connection error (floating
-# point value)
-#host_connection_reconnect_delay = 0.25
-
-# Connection factory implementation (string value)
-# Possible values:
-# new - <No description provided>
-# single - <No description provided>
-# read_write - <No description provided>
-#connection_factory = single
-
-# Maximum number of connections to keep queued. (integer value)
-#pool_max_size = 30
-
-# Maximum number of connections to create above `pool_max_size`. (integer
-# value)
-#pool_max_overflow = 0
-
-# Default number of seconds to wait for a connections to available (integer
-# value)
-#pool_timeout = 30
-
-# Lifetime of a connection (since creation) in seconds or None for no
-# recycling. Expired connections are closed on acquire. (integer value)
-#pool_recycle = 600
-
-# Threshold at which inactive (since release) connections are considered stale
-# in seconds or None for no staleness. Stale connections are closed on acquire.
-# (integer value)
-#pool_stale = 60
-
-# Default serialization mechanism for serializing/deserializing
-# outgoing/incoming messages (string value)
-# Possible values:
-# json - <No description provided>
-# msgpack - <No description provided>
-#default_serializer_type = json
-
-# Persist notification messages. (boolean value)
-#notification_persistence = false
-
-# Exchange name for sending notifications (string value)
-#default_notification_exchange = ${control_exchange}_notification
-
-# Max number of not acknowledged message which RabbitMQ can send to
-# notification listener. (integer value)
-#notification_listener_prefetch_count = 100
-
-# Reconnecting retry count in case of connectivity problem during sending
-# notification, -1 means infinite retry. (integer value)
-#default_notification_retry_attempts = -1
-
-# Reconnecting retry delay in case of connectivity problem during sending
-# notification message (floating point value)
-#notification_retry_delay = 0.25
-
-# Time to live for rpc queues without consumers in seconds. (integer value)
-#rpc_queue_expiration = 60
-
-# Exchange name for sending RPC messages (string value)
-#default_rpc_exchange = ${control_exchange}_rpc
-
-# Exchange name for receiving RPC replies (string value)
-#rpc_reply_exchange = ${control_exchange}_rpc_reply
-
-# Max number of not acknowledged message which RabbitMQ can send to rpc
-# listener. (integer value)
-#rpc_listener_prefetch_count = 100
-
-# Max number of not acknowledged message which RabbitMQ can send to rpc reply
-# listener. (integer value)
-#rpc_reply_listener_prefetch_count = 100
-
-# Reconnecting retry count in case of connectivity problem during sending
-# reply. -1 means infinite retry during rpc_timeout (integer value)
-#rpc_reply_retry_attempts = -1
-
-# Reconnecting retry delay in case of connectivity problem during sending
-# reply. (floating point value)
-#rpc_reply_retry_delay = 0.25
-
-# Reconnecting retry count in case of connectivity problem during sending RPC
-# message, -1 means infinite retry. If actual retry attempts in not 0 the rpc
-# request could be processed more than one time (integer value)
-#default_rpc_retry_attempts = -1
-
-# Reconnecting retry delay in case of connectivity problem during sending RPC
-# message (floating point value)
-#rpc_retry_delay = 0.25
-
-
-[oslo_messaging_zmq]
-
-#
-# From oslo.messaging
-#
-
-# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
-# The "host" option should point or resolve to this address. (string value)
-#rpc_zmq_bind_address = *
-
-# MatchMaker driver. (string value)
-# Possible values:
-# redis - <No description provided>
-# sentinel - <No description provided>
-# dummy - <No description provided>
-#rpc_zmq_matchmaker = redis
-
-# Number of ZeroMQ contexts, defaults to 1. (integer value)
-#rpc_zmq_contexts = 1
-
-# Maximum number of ingress messages to locally buffer per topic. Default is
-# unlimited. (integer value)
-#rpc_zmq_topic_backlog = <None>
-
-# Directory for holding IPC sockets. (string value)
-#rpc_zmq_ipc_dir = /var/run/openstack
-
-# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
-# "host" option, if running Nova. (string value)
-#rpc_zmq_host = localhost
-
-# Number of seconds to wait before all pending messages will be sent after
-# closing a socket. The default value of -1 specifies an infinite linger
-# period. The value of 0 specifies no linger period. Pending messages shall be
-# discarded immediately when the socket is closed. Positive values specify an
-# upper bound for the linger period. (integer value)
-# Deprecated group/name - [DEFAULT]/rpc_cast_timeout
-#zmq_linger = -1
-
-# The default number of seconds that poll should wait. Poll raises timeout
-# exception when timeout expired. (integer value)
-#rpc_poll_timeout = 1
-
-# Expiration timeout in seconds of a name service record about existing target
-# ( < 0 means no timeout). (integer value)
-#zmq_target_expire = 300
-
-# Update period in seconds of a name service record about existing target.
-# (integer value)
-#zmq_target_update = 180
-
-# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
-# value)
-#use_pub_sub = false
-
-# Use ROUTER remote proxy. (boolean value)
-#use_router_proxy = false
-
-# This option makes direct connections dynamic or static. It makes sense only
-# with use_router_proxy=False which means to use direct connections for direct
-# message types (ignored otherwise). (boolean value)
-#use_dynamic_connections = false
-
-# How many additional connections to a host will be made for failover reasons.
-# This option is actual only in dynamic connections mode. (integer value)
-#zmq_failover_connections = 2
-
-# Minimal port number for random ports range. (port value)
-# Minimum value: 0
-# Maximum value: 65535
-#rpc_zmq_min_port = 49153
-
-# Maximal port number for random ports range. (integer value)
-# Minimum value: 1
-# Maximum value: 65536
-#rpc_zmq_max_port = 65536
-
-# Number of retries to find free port number before fail with ZMQBindError.
-# (integer value)
-#rpc_zmq_bind_port_retries = 100
-
-# Default serialization mechanism for serializing/deserializing
-# outgoing/incoming messages (string value)
-# Possible values:
-# json - <No description provided>
-# msgpack - <No description provided>
-#rpc_zmq_serialization = json
-
-# This option configures round-robin mode in zmq socket. True means not keeping
-# a queue when server side disconnects. False means to keep queue and messages
-# even if server is disconnected, when the server appears we send all
-# accumulated messages to it. (boolean value)
-#zmq_immediate = true
-
-# Enable/disable TCP keepalive (KA) mechanism. The default value of -1 (or any
-# other negative value) means to skip any overrides and leave it to OS default;
-# 0 and 1 (or any other positive value) mean to disable and enable the option
-# respectively. (integer value)
-#zmq_tcp_keepalive = -1
-
-# The duration between two keepalive transmissions in idle condition. The unit
-# is platform dependent, for example, seconds in Linux, milliseconds in Windows
-# etc. The default value of -1 (or any other negative value and 0) means to
-# skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_idle = -1
-
-# The number of retransmissions to be carried out before declaring that remote
-# end is not available. The default value of -1 (or any other negative value
-# and 0) means to skip any overrides and leave it to OS default. (integer
-# value)
-#zmq_tcp_keepalive_cnt = -1
-
-# The duration between two successive keepalive retransmissions, if
-# acknowledgement to the previous keepalive transmission is not received. The
-# unit is platform dependent, for example, seconds in Linux, milliseconds in
-# Windows etc. The default value of -1 (or any other negative value and 0)
-# means to skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_intvl = -1
-
-# Maximum number of (green) threads to work concurrently. (integer value)
-#rpc_thread_pool_size = 100
-
-# Expiration timeout in seconds of a sent/received message after which it is
-# not tracked anymore by a client/server. (integer value)
-#rpc_message_ttl = 300
-
-# Wait for message acknowledgements from receivers. This mechanism works only
-# via proxy without PUB/SUB. (boolean value)
-#rpc_use_acks = false
-
-# Number of seconds to wait for an ack from a cast/call. After each retry
-# attempt this timeout is multiplied by some specified multiplier. (integer
-# value)
-#rpc_ack_timeout_base = 15
-
-# Number to multiply base ack timeout by after each retry attempt. (integer
-# value)
-#rpc_ack_timeout_multiplier = 2
-
-# Default number of message sending attempts in case of any problems occurred:
-# positive value N means at most N retries, 0 means no retries, None or -1 (or
-# any other negative values) mean to retry forever. This option is used only if
-# acknowledgments are enabled. (integer value)
-#rpc_retry_attempts = 3
-
-# List of publisher hosts SubConsumer can subscribe on. This option has higher
-# priority then the default publishers list taken from the matchmaker. (list
-# value)
-#subscribe_on =
-
-
 [oslo_middleware]
-
 #
 # From oslo.middleware
 #
@@ -2296,779 +2564,17 @@
 # Deprecated group/name - [DEFAULT]/osapi_max_request_body_size
 # Deprecated group/name - [DEFAULT]/max_request_body_size
 #max_request_body_size = 114688
-
-# DEPRECATED: The HTTP Header that will be used to determine what the original
-# request protocol scheme was, even if it was hidden by a SSL termination
-# proxy. (string value)
+max_request_body_size= 114688
+
+# DEPRECATED: The HTTP Header that will be used to determine what the
+# original request protocol scheme was, even if it was hidden by a SSL
+# termination proxy. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 #secure_proxy_ssl_header = X-Forwarded-Proto
 
-# Whether the application is behind a proxy or not. This determines if the
-# middleware should parse the headers or not. (boolean value)
-#enable_proxy_headers_parsing = false
-
-
-[oslo_policy]
-
-#
-# From oslo.policy
-#
-
-# This option controls whether or not to enforce scope when evaluating
-# policies. If ``True``, the scope of the token used in the request is compared
-# to the ``scope_types`` of the policy being enforced. If the scopes do not
-# match, an ``InvalidScope`` exception will be raised. If ``False``, a message
-# will be logged informing operators that policies are being invoked with
-# mismatching scope. (boolean value)
-#enforce_scope = false
-
-# The file that defines policies. (string value)
-#policy_file = policy.json
-
-# Default rule. Enforced when a requested rule is not found. (string value)
-#policy_default_rule = default
-
-# Directories where policy configuration files are stored. They can be relative
-# to any directory in the search path defined by the config_dir option, or
-# absolute paths. The file defined by policy_file must exist for these
-# directories to be searched.  Missing or empty directories are ignored. (multi
-# valued)
-#policy_dirs = policy.d
-
-# Content Type to send and receive data for REST based policy check (string
-# value)
-# Possible values:
-# application/x-www-form-urlencoded - <No description provided>
-# application/json - <No description provided>
-#remote_content_type = application/x-www-form-urlencoded
-
-# server identity verification for REST based policy check (boolean value)
-#remote_ssl_verify_server_crt = false
-
-# Absolute path to ca cert file for REST based policy check (string value)
-#remote_ssl_ca_crt_file = <None>
-
-# Absolute path to client cert for REST based policy check (string value)
-#remote_ssl_client_crt_file = <None>
-
-# Absolute path client key file REST based policy check (string value)
-#remote_ssl_client_key_file = <None>
-
-
-[paste_deploy]
-
-#
-# From keystone
-#
-
-# Name of (or absolute path to) the Paste Deploy configuration file that
-# composes middleware and the keystone application itself into actual WSGI
-# entry points. See http://pythonpaste.org/deploy/ for additional documentation
-# on the file's format. (string value)
-#config_file = keystone-paste.ini
-
-
-[policy]
-
-#
-# From keystone
-#
-
-# Entry point for the policy backend driver in the `keystone.policy` namespace.
-# Supplied drivers are `rules` (which does not support any CRUD operations for
-# the v3 policy API) and `sql`. Typically, there is no reason to set this
-# option unless you are providing a custom entry point. (string value)
-#driver = sql
-
-# Maximum number of entities that will be returned in a policy collection.
-# (integer value)
-#list_limit = <None>
-
+# Whether the application is behind a proxy or not. This determines if
+# the middleware should parse the headers or not. (boolean value)
+enable_proxy_headers_parsing = True
 
 [profiler]
-
-#
-# From osprofiler
-#
-
-#
-# Enables the profiling for all services on this node. Default value is False
-# (fully disable the profiling feature).
-#
-# Possible values:
-#
-# * True: Enables the feature
-# * False: Disables the feature. The profiling cannot be started via this
-# project
-# operations. If the profiling is triggered by another project, this project
-# part
-# will be empty.
-#  (boolean value)
-# Deprecated group/name - [profiler]/profiler_enabled
-#enabled = false
-
-#
-# Enables SQL requests profiling in services. Default value is False (SQL
-# requests won't be traced).
-#
-# Possible values:
-#
-# * True: Enables SQL requests profiling. Each SQL query will be part of the
-# trace and can the be analyzed by how much time was spent for that.
-# * False: Disables SQL requests profiling. The spent time is only shown on a
-# higher level of operations. Single SQL queries cannot be analyzed this
-# way.
-#  (boolean value)
-#trace_sqlalchemy = false
-
-#
-# Secret key(s) to use for encrypting context data for performance profiling.
-# This string value should have the following format:
-# <key1>[,<key2>,...<keyn>],
-# where each key is some random string. A user who triggers the profiling via
-# the REST API has to set one of these keys in the headers of the REST API call
-# to include profiling results of this node for this particular project.
-#
-# Both "enabled" flag and "hmac_keys" config options should be set to enable
-# profiling. Also, to generate correct profiling information across all
-# services
-# at least one key needs to be consistent between OpenStack projects. This
-# ensures it can be used from client side to generate the trace, containing
-# information from all possible resources. (string value)
-#hmac_keys = SECRET_KEY
-
-#
-# Connection string for a notifier backend. Default value is messaging:// which
-# sets the notifier to oslo_messaging.
-#
-# Examples of possible values:
-#
-# * messaging://: use oslo_messaging driver for sending notifications.
-# * mongodb://127.0.0.1:27017 : use mongodb driver for sending notifications.
-# * elasticsearch://127.0.0.1:9200 : use elasticsearch driver for sending
-# notifications.
-#  (string value)
-#connection_string = messaging://
-
-#
-# Document type for notification indexing in elasticsearch.
-#  (string value)
-#es_doc_type = notification
-
-#
-# This parameter is a time value parameter (for example: es_scroll_time=2m),
-# indicating for how long the nodes that participate in the search will
-# maintain
-# relevant resources in order to continue and support it.
-#  (string value)
-#es_scroll_time = 2m
-
-#
-# Elasticsearch splits large requests in batches. This parameter defines
-# maximum size of each batch (for example: es_scroll_size=10000).
-#  (integer value)
-#es_scroll_size = 10000
-
-#
-# Redissentinel provides a timeout option on the connections.
-# This parameter defines that timeout (for example: socket_timeout=0.1).
-#  (floating point value)
-#socket_timeout = 0.1
-
-#
-# Redissentinel uses a service name to identify a master redis service.
-# This parameter defines the name (for example:
-# sentinal_service_name=mymaster).
-#  (string value)
-#sentinel_service_name = mymaster
-
-
-[resource]
-
-#
-# From keystone
-#
-
-# DEPRECATED: Entry point for the resource driver in the `keystone.resource`
-# namespace. Only a `sql` driver is supplied by keystone. Unless you are
-# writing proprietary drivers for keystone, you do not need to set this option.
-# (string value)
-# This option is deprecated for removal since P.
-# Its value may be silently ignored in the future.
-# Reason: Non-SQL resource cannot be used with SQL Identity and has been unable
-# to be used since Ocata. SQL Resource backend is a requirement as of Pike.
-# Setting this option no longer has an effect on how Keystone operates.
-#driver = sql
-
-# Toggle for resource caching. This has no effect unless global caching is
-# enabled. (boolean value)
-# Deprecated group/name - [assignment]/caching
-#caching = true
-
-# Time to cache resource data in seconds. This has no effect unless global
-# caching is enabled. (integer value)
-# Deprecated group/name - [assignment]/cache_time
-#cache_time = <None>
-
-# Maximum number of entities that will be returned in a resource collection.
-# (integer value)
-# Deprecated group/name - [assignment]/list_limit
-#list_limit = <None>
-
-# Name of the domain that owns the `admin_project_name`. If left unset, then
-# there is no admin project. `[resource] admin_project_name` must also be set
-# to use this option. (string value)
-#admin_project_domain_name = <None>
-
-# This is a special project which represents cloud-level administrator
-# privileges across services. Tokens scoped to this project will contain a true
-# `is_admin_project` attribute to indicate to policy systems that the role
-# assignments on that specific project should apply equally across every
-# project. If left unset, then there is no admin project, and thus no explicit
-# means of cross-project role assignments. `[resource]
-# admin_project_domain_name` must also be set to use this option. (string
-# value)
-#admin_project_name = <None>
-
-# This controls whether the names of projects are restricted from containing
-# URL-reserved characters. If set to `new`, attempts to create or update a
-# project with a URL-unsafe name will fail. If set to `strict`, attempts to
-# scope a token with a URL-unsafe project name will fail, thereby forcing all
-# project names to be updated to be URL-safe. (string value)
-# Possible values:
-# off - <No description provided>
-# new - <No description provided>
-# strict - <No description provided>
-#project_name_url_safe = off
-
-# This controls whether the names of domains are restricted from containing
-# URL-reserved characters. If set to `new`, attempts to create or update a
-# domain with a URL-unsafe name will fail. If set to `strict`, attempts to
-# scope a token with a URL-unsafe domain name will fail, thereby forcing all
-# domain names to be updated to be URL-safe. (string value)
-# Possible values:
-# off - <No description provided>
-# new - <No description provided>
-# strict - <No description provided>
-#domain_name_url_safe = off
-
-
-[revoke]
-
-#
-# From keystone
-#
-
-# Entry point for the token revocation backend driver in the `keystone.revoke`
-# namespace. Keystone only provides a `sql` driver, so there is no reason to
-# set this option unless you are providing a custom entry point. (string value)
-#driver = sql
-
-# The number of seconds after a token has expired before a corresponding
-# revocation event may be purged from the backend. (integer value)
-# Minimum value: 0
-#expiration_buffer = 1800
-
-# Toggle for revocation event caching. This has no effect unless global caching
-# is enabled. (boolean value)
-#caching = true
-
-# Time to cache the revocation list and the revocation events (in seconds).
-# This has no effect unless global and `[revoke] caching` are both enabled.
-# (integer value)
-# Deprecated group/name - [token]/revocation_cache_time
-#cache_time = 3600
-
-
-[role]
-
-#
-# From keystone
-#
-
-# Entry point for the role backend driver in the `keystone.role` namespace.
-# Keystone only provides a `sql` driver, so there's no reason to change this
-# unless you are providing a custom entry point. (string value)
-#driver = <None>
-
-# Toggle for role caching. This has no effect unless global caching is enabled.
-# In a typical deployment, there is no reason to disable this. (boolean value)
-#caching = true
-
-# Time to cache role data, in seconds. This has no effect unless both global
-# caching and `[role] caching` are enabled. (integer value)
-#cache_time = <None>
-
-# Maximum number of entities that will be returned in a role collection. This
-# may be useful to tune if you have a large number of discrete roles in your
-# deployment. (integer value)
-#list_limit = <None>
-
-
-[saml]
-
-#
-# From keystone
-#
-
-# Determines the lifetime for any SAML assertions generated by keystone, using
-# `NotOnOrAfter` attributes. (integer value)
-#assertion_expiration_time = 3600
-
-# Name of, or absolute path to, the binary to be used for XML signing. Although
-# only the XML Security Library (`xmlsec1`) is supported, it may have a non-
-# standard name or path on your system. If keystone cannot find the binary
-# itself, you may need to install the appropriate package, use this option to
-# specify an absolute path, or adjust keystone's PATH environment variable.
-# (string value)
-#xmlsec1_binary = xmlsec1
-
-# Absolute path to the public certificate file to use for SAML signing. The
-# value cannot contain a comma (`,`). (string value)
-#certfile = /etc/keystone/ssl/certs/signing_cert.pem
-
-# Absolute path to the private key file to use for SAML signing. The value
-# cannot contain a comma (`,`). (string value)
-#keyfile = /etc/keystone/ssl/private/signing_key.pem
-
-# This is the unique entity identifier of the identity provider (keystone) to
-# use when generating SAML assertions. This value is required to generate
-# identity provider metadata and must be a URI (a URL is recommended). For
-# example: `https://keystone.example.com/v3/OS-FEDERATION/saml2/idp`. (uri
-# value)
-#idp_entity_id = <None>
-
-# This is the single sign-on (SSO) service location of the identity provider
-# which accepts HTTP POST requests. A value is required to generate identity
-# provider metadata. For example: `https://keystone.example.com/v3/OS-
-# FEDERATION/saml2/sso`. (uri value)
-#idp_sso_endpoint = <None>
-
-# This is the language used by the identity provider's organization. (string
-# value)
-#idp_lang = en
-
-# This is the name of the identity provider's organization. (string value)
-#idp_organization_name = SAML Identity Provider
-
-# This is the name of the identity provider's organization to be displayed.
-# (string value)
-#idp_organization_display_name = OpenStack SAML Identity Provider
-
-# This is the URL of the identity provider's organization. The URL referenced
-# here should be useful to humans. (uri value)
-#idp_organization_url = https://example.com/
-
-# This is the company name of the identity provider's contact person. (string
-# value)
-#idp_contact_company = Example, Inc.
-
-# This is the given name of the identity provider's contact person. (string
-# value)
-#idp_contact_name = SAML Identity Provider Support
-
-# This is the surname of the identity provider's contact person. (string value)
-#idp_contact_surname = Support
-
-# This is the email address of the identity provider's contact person. (string
-# value)
-#idp_contact_email = support@example.com
-
-# This is the telephone number of the identity provider's contact person.
-# (string value)
-#idp_contact_telephone = +1 800 555 0100
-
-# This is the type of contact that best describes the identity provider's
-# contact person. (string value)
-# Possible values:
-# technical - <No description provided>
-# support - <No description provided>
-# administrative - <No description provided>
-# billing - <No description provided>
-# other - <No description provided>
-#idp_contact_type = other
-
-# Absolute path to the identity provider metadata file. This file should be
-# generated with the `keystone-manage saml_idp_metadata` command. There is
-# typically no reason to change this value. (string value)
-#idp_metadata_path = /etc/keystone/saml2_idp_metadata.xml
-
-# The prefix of the RelayState SAML attribute to use when generating enhanced
-# client and proxy (ECP) assertions. In a typical deployment, there is no
-# reason to change this value. (string value)
-#relay_state_prefix = ss:mem:
-
-
-[security_compliance]
-
-#
-# From keystone
-#
-
-# The maximum number of days a user can go without authenticating before being
-# considered "inactive" and automatically disabled (locked). This feature is
-# disabled by default; set any value to enable it. This feature depends on the
-# `sql` backend for the `[identity] driver`. When a user exceeds this threshold
-# and is considered "inactive", the user's `enabled` attribute in the HTTP API
-# may not match the value of the user's `enabled` column in the user table.
-# (integer value)
-# Minimum value: 1
-#disable_user_account_days_inactive = <None>
-
-# The maximum number of times that a user can fail to authenticate before the
-# user account is locked for the number of seconds specified by
-# `[security_compliance] lockout_duration`. This feature is disabled by
-# default. If this feature is enabled and `[security_compliance]
-# lockout_duration` is not set, then users may be locked out indefinitely until
-# the user is explicitly enabled via the API. This feature depends on the `sql`
-# backend for the `[identity] driver`. (integer value)
-# Minimum value: 1
-#lockout_failure_attempts = <None>
-
-# The number of seconds a user account will be locked when the maximum number
-# of failed authentication attempts (as specified by `[security_compliance]
-# lockout_failure_attempts`) is exceeded. Setting this option will have no
-# effect unless you also set `[security_compliance] lockout_failure_attempts`
-# to a non-zero value. This feature depends on the `sql` backend for the
-# `[identity] driver`. (integer value)
-# Minimum value: 1
-#lockout_duration = 1800
-
-# The number of days for which a password will be considered valid before
-# requiring it to be changed. This feature is disabled by default. If enabled,
-# new password changes will have an expiration date, however existing passwords
-# would not be impacted. This feature depends on the `sql` backend for the
-# `[identity] driver`. (integer value)
-# Minimum value: 1
-#password_expires_days = <None>
-
-# This controls the number of previous user password iterations to keep in
-# history, in order to enforce that newly created passwords are unique. The
-# total number which includes the new password should not be greater or equal
-# to this value. Setting the value to one (the default) disables this feature.
-# Thus, to enable this feature, values must be greater than 1. This feature
-# depends on the `sql` backend for the `[identity] driver`. (integer value)
-# Minimum value: 1
-#unique_last_password_count = 1
-
-# The number of days that a password must be used before the user can change
-# it. This prevents users from changing their passwords immediately in order to
-# wipe out their password history and reuse an old password. This feature does
-# not prevent administrators from manually resetting passwords. It is disabled
-# by default and allows for immediate password changes. This feature depends on
-# the `sql` backend for the `[identity] driver`. Note: If
-# `[security_compliance] password_expires_days` is set, then the value for this
-# option should be less than the `password_expires_days`. (integer value)
-# Minimum value: 0
-#minimum_password_age = 0
-
-# The regular expression used to validate password strength requirements. By
-# default, the regular expression will match any password. The following is an
-# example of a pattern which requires at least 1 letter, 1 digit, and have a
-# minimum length of 7 characters: ^(?=.*\d)(?=.*[a-zA-Z]).{7,}$ This feature
-# depends on the `sql` backend for the `[identity] driver`. (string value)
-#password_regex = <None>
-
-# Describe your password regular expression here in language for humans. If a
-# password fails to match the regular expression, the contents of this
-# configuration variable will be returned to users to explain why their
-# requested password was insufficient. (string value)
-#password_regex_description = <None>
-
-# Enabling this option requires users to change their password when the user is
-# created, or upon administrative reset. Before accessing any services,
-# affected users will have to change their password. To ignore this requirement
-# for specific users, such as service users, set the `options` attribute
-# `ignore_change_password_upon_first_use` to `True` for the desired user via
-# the update user API. This feature is disabled by default. This feature is
-# only applicable with the `sql` backend for the `[identity] driver`. (boolean
-# value)
-#change_password_upon_first_use = false
-
-
-[shadow_users]
-
-#
-# From keystone
-#
-
-# Entry point for the shadow users backend driver in the
-# `keystone.identity.shadow_users` namespace. This driver is used for
-# persisting local user references to externally-managed identities (via
-# federation, LDAP, etc). Keystone only provides a `sql` driver, so there is no
-# reason to change this option unless you are providing a custom entry point.
-# (string value)
-#driver = sql
-
-
-[signing]
-
-#
-# From keystone
-#
-
-# DEPRECATED: Absolute path to the public certificate file to use for signing
-# responses to revocation lists requests. Set this together with `[signing]
-# keyfile`. For non-production environments, you may be interested in using
-# `keystone-manage pki_setup` to generate self-signed certificates. (string
-# value)
-# This option is deprecated for removal since P.
-# Its value may be silently ignored in the future.
-# Reason: `keystone-manage pki_setup` was deprecated in Mitaka and removed in
-# Pike. These options remain for backwards compatibility.
-#certfile = /etc/keystone/ssl/certs/signing_cert.pem
-
-# DEPRECATED: Absolute path to the private key file to use for signing
-# responses to revocation lists requests. Set this together with `[signing]
-# certfile`. (string value)
-# This option is deprecated for removal since P.
-# Its value may be silently ignored in the future.
-# Reason: `keystone-manage pki_setup` was deprecated in Mitaka and removed in
-# Pike. These options remain for backwards compatibility.
-#keyfile = /etc/keystone/ssl/private/signing_key.pem
-
-# DEPRECATED: Absolute path to the public certificate authority (CA) file to
-# use when creating self-signed certificates with `keystone-manage pki_setup`.
-# Set this together with `[signing] ca_key`. There is no reason to set this
-# option unless you are requesting revocation lists in a non-production
-# environment. Use a `[signing] certfile` issued from a trusted certificate
-# authority instead. (string value)
-# This option is deprecated for removal since P.
-# Its value may be silently ignored in the future.
-# Reason: `keystone-manage pki_setup` was deprecated in Mitaka and removed in
-# Pike. These options remain for backwards compatibility.
-#ca_certs = /etc/keystone/ssl/certs/ca.pem
-
-# DEPRECATED: Absolute path to the private certificate authority (CA) key file
-# to use when creating self-signed certificates with `keystone-manage
-# pki_setup`. Set this together with `[signing] ca_certs`. There is no reason
-# to set this option unless you are requesting revocation lists in a non-
-# production environment. Use a `[signing] certfile` issued from a trusted
-# certificate authority instead. (string value)
-# This option is deprecated for removal since P.
-# Its value may be silently ignored in the future.
-# Reason: `keystone-manage pki_setup` was deprecated in Mitaka and removed in
-# Pike. These options remain for backwards compatibility.
-#ca_key = /etc/keystone/ssl/private/cakey.pem
-
-# DEPRECATED: Key size (in bits) to use when generating a self-signed token
-# signing certificate. There is no reason to set this option unless you are
-# requesting revocation lists in a non-production environment. Use a `[signing]
-# certfile` issued from a trusted certificate authority instead. (integer
-# value)
-# Minimum value: 1024
-# This option is deprecated for removal since P.
-# Its value may be silently ignored in the future.
-# Reason: `keystone-manage pki_setup` was deprecated in Mitaka and removed in
-# Pike. These options remain for backwards compatibility.
-#key_size = 2048
-
-# DEPRECATED: The validity period (in days) to use when generating a self-
-# signed token signing certificate. There is no reason to set this option
-# unless you are requesting revocation lists in a non-production environment.
-# Use a `[signing] certfile` issued from a trusted certificate authority
-# instead. (integer value)
-# This option is deprecated for removal since P.
-# Its value may be silently ignored in the future.
-# Reason: `keystone-manage pki_setup` was deprecated in Mitaka and removed in
-# Pike. These options remain for backwards compatibility.
-#valid_days = 3650
-
-# DEPRECATED: The certificate subject to use when generating a self-signed
-# token signing certificate. There is no reason to set this option unless you
-# are requesting revocation lists in a non-production environment. Use a
-# `[signing] certfile` issued from a trusted certificate authority instead.
-# (string value)
-# This option is deprecated for removal since P.
-# Its value may be silently ignored in the future.
-# Reason: `keystone-manage pki_setup` was deprecated in Mitaka and removed in
-# Pike. These options remain for backwards compatibility.
-#cert_subject = /C=US/ST=Unset/L=Unset/O=Unset/CN=www.example.com
-
-
-[token]
-
-#
-# From keystone
-#
-
-# This is a list of external authentication mechanisms which should add token
-# binding metadata to tokens, such as `kerberos` or `x509`. Binding metadata is
-# enforced according to the `[token] enforce_token_bind` option. (list value)
-#bind =
-
-# DEPRECATED: This controls the token binding enforcement policy on tokens
-# presented to keystone with token binding metadata (as specified by the
-# `[token] bind` option). `disabled` completely bypasses token binding
-# validation. `permissive` and `strict` do not require tokens to have binding
-# metadata (but will validate it if present), whereas `required` will always
-# demand tokens to having binding metadata. `permissive` will allow unsupported
-# binding metadata to pass through without validation (usually to be validated
-# at another time by another component), whereas `strict` and `required` will
-# demand that the included binding metadata be supported by keystone. (string
-# value)
-# This option is deprecated for removal since P.
-# Its value may be silently ignored in the future.
-#enforce_token_bind = permissive
-
-# The amount of time that a token should remain valid (in seconds). Drastically
-# reducing this value may break "long-running" operations that involve multiple
-# services to coordinate together, and will force users to authenticate with
-# keystone more frequently. Drastically increasing this value will increase
-# load on the `[token] driver`, as more tokens will be simultaneously valid.
-# Keystone tokens are also bearer tokens, so a shorter duration will also
-# reduce the potential security impact of a compromised token. (integer value)
-# Minimum value: 0
-# Maximum value: 9223372036854775807
-#expiration = 3600
-
-# Entry point for the token provider in the `keystone.token.provider`
-# namespace. The token provider controls the token construction, validation,
-# and revocation operations. Keystone includes `fernet` and `uuid` token
-# providers. `uuid` tokens must be persisted (using the backend specified in
-# the `[token] driver` option), but do not require any extra configuration or
-# setup. `fernet` tokens do not need to be persisted at all, but require that
-# you run `keystone-manage fernet_setup` (also see the `keystone-manage
-# fernet_rotate` command). (string value)
-#provider = fernet
-
-# DEPRECATED: Entry point for the token persistence backend driver in the
-# `keystone.token.persistence` namespace. Keystone provides the `sql` driver.
-# The `sql` option (default) depends on the options in your `[database]`
-# section. If you're using the `fernet` `[token] provider`, this backend will
-# not be utilized to persist tokens at all. (string value)
-# This option is deprecated for removal since P.
-# Its value may be silently ignored in the future.
-#driver = sql
-
-# Toggle for caching token creation and validation data. This has no effect
-# unless global caching is enabled. (boolean value)
-#caching = true
-
-# The number of seconds to cache token creation and validation data. This has
-# no effect unless both global and `[token] caching` are enabled. (integer
-# value)
-# Minimum value: 0
-# Maximum value: 9223372036854775807
-#cache_time = <None>
-
-# This toggles support for revoking individual tokens by the token identifier
-# and thus various token enumeration operations (such as listing all tokens
-# issued to a specific user). These operations are used to determine the list
-# of tokens to consider revoked. Do not disable this option if you're using the
-# `kvs` `[revoke] driver`. (boolean value)
-#revoke_by_id = true
-
-# This toggles whether scoped tokens may be re-scoped to a new project or
-# domain, thereby preventing users from exchanging a scoped token (including
-# those with a default project scope) for any other token. This forces users to
-# either authenticate for unscoped tokens (and later exchange that unscoped
-# token for tokens with a more specific scope) or to provide their credentials
-# in every request for a scoped token to avoid re-scoping altogether. (boolean
-# value)
-#allow_rescope_scoped_token = true
-
-# This controls whether roles should be included with tokens that are not
-# directly assigned to the token's scope, but are instead linked implicitly to
-# other role assignments. (boolean value)
-#infer_roles = true
-
-# Enable storing issued token data to token validation cache so that first
-# token validation doesn't actually cause full validation cycle. This option
-# has no effect unless global caching and token caching are enabled. (boolean
-# value)
-#cache_on_issue = true
-
-# This controls the number of seconds that a token can be retrieved for beyond
-# the built-in expiry time. This allows long running operations to succeed.
-# Defaults to two days. (integer value)
-#allow_expired_window = 172800
-
-
-[tokenless_auth]
-
-#
-# From keystone
-#
-
-# The list of distinguished names which identify trusted issuers of client
-# certificates allowed to use X.509 tokenless authorization. If the option is
-# absent then no certificates will be allowed. The format for the values of a
-# distinguished name (DN) must be separated by a comma and contain no spaces.
-# Furthermore, because an individual DN may contain commas, this configuration
-# option may be repeated multiple times to represent multiple values. For
-# example, keystone.conf would include two consecutive lines in order to trust
-# two different DNs, such as `trusted_issuer = CN=john,OU=keystone,O=openstack`
-# and `trusted_issuer = CN=mary,OU=eng,O=abc`. (multi valued)
-#trusted_issuer =
-
-# The federated protocol ID used to represent X.509 tokenless authorization.
-# This is used in combination with the value of `[tokenless_auth]
-# issuer_attribute` to find a corresponding federated mapping. In a typical
-# deployment, there is no reason to change this value. (string value)
-#protocol = x509
-
-# The name of the WSGI environment variable used to pass the issuer of the
-# client certificate to keystone. This attribute is used as an identity
-# provider ID for the X.509 tokenless authorization along with the protocol to
-# look up its corresponding mapping. In a typical deployment, there is no
-# reason to change this value. (string value)
-#issuer_attribute = SSL_CLIENT_I_DN
-
-
-[trust]
-
-#
-# From keystone
-#
-
-# DEPRECATED: Delegation and impersonation features using trusts can be
-# optionally disabled. (boolean value)
-# This option is deprecated for removal since Q.
-# Its value may be silently ignored in the future.
-# Reason: Disabling the trusts API is deprecated. This option will be removed
-# in the next release and trusts will always be enabled.
-#enabled = true
-
-# Allows authorization to be redelegated from one user to another, effectively
-# chaining trusts together. When disabled, the `remaining_uses` attribute of a
-# trust is constrained to be zero. (boolean value)
-#allow_redelegation = false
-
-# Maximum number of times that authorization can be redelegated from one user
-# to another in a chain of trusts. This number may be reduced further for a
-# specific trust. (integer value)
-#max_redelegation_count = 3
-
-# Entry point for the trust backend driver in the `keystone.trust` namespace.
-# Keystone only provides a `sql` driver, so there is no reason to change this
-# unless you are providing a custom entry point. (string value)
-#driver = sql
-
-
-[unified_limit]
-
-#
-# From keystone
-#
-
-# Entry point for the unified limit backend driver in the
-# `keystone.unified_limit` namespace. Keystone only provides a `sql` driver, so
-# there's no reason to change this unless you are providing a custom entry
-# point. (string value)
-#driver = sql
-
-# Toggle for unified limit caching. This has no effect unless global caching is
-# enabled. In a typical deployment, there is no reason to disable this.
-# (boolean value)
-#caching = true
-
-# Time to cache unified limit data, in seconds. This has no effect unless both
-# global caching and `[unified_limit] caching` are enabled. (integer value)
-#cache_time = <None>
-
-# Maximum number of entities that will be returned in a role collection. This
-# may be useful to tune if you have a large number of unified limits in your
-# deployment. (integer value)
-#list_limit = <None>

2018-09-01 22:33:25,205 [salt.state       :1941][INFO    ][17292] Completed state [/etc/keystone/keystone.conf] at time 22:33:25.205035 duration_in_ms=270.008
2018-09-01 22:33:25,205 [salt.state       :1770][INFO    ][17292] Running state [/etc/keystone/keystone-paste.ini] at time 22:33:25.205549
2018-09-01 22:33:25,205 [salt.state       :1803][INFO    ][17292] Executing state file.managed for [/etc/keystone/keystone-paste.ini]
2018-09-01 22:33:25,220 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'keystone/files/queens/keystone-paste.ini.Debian'
2018-09-01 22:33:25,226 [salt.state       :290 ][INFO    ][17292] {'group': 'keystone', 'user': 'keystone'}
2018-09-01 22:33:25,226 [salt.state       :1941][INFO    ][17292] Completed state [/etc/keystone/keystone-paste.ini] at time 22:33:25.226923 duration_in_ms=21.374
2018-09-01 22:33:25,227 [salt.state       :1770][INFO    ][17292] Running state [/etc/keystone/policy.json] at time 22:33:25.227437
2018-09-01 22:33:25,227 [salt.state       :1803][INFO    ][17292] Executing state file.managed for [/etc/keystone/policy.json]
2018-09-01 22:33:25,227 [salt.loaded.int.states.file:2150][WARNING ][17292] State for file: /etc/keystone/policy.json - Neither 'source' nor 'contents' nor 'contents_pillar' nor 'contents_grains' was defined, yet 'replace' was set to 'True'. As there is no source to replace the file with, 'replace' has been set to 'False' to avoid reading the file unnecessarily.
2018-09-01 22:33:25,228 [salt.state       :290 ][INFO    ][17292] {'new': 'file /etc/keystone/policy.json created', 'group': 'keystone', 'user': 'keystone'}
2018-09-01 22:33:25,229 [salt.state       :1941][INFO    ][17292] Completed state [/etc/keystone/policy.json] at time 22:33:25.229103 duration_in_ms=1.666
2018-09-01 22:33:25,229 [salt.state       :1770][INFO    ][17292] Running state [/etc/apache2/sites-enabled/000-default.conf] at time 22:33:25.229332
2018-09-01 22:33:25,229 [salt.state       :1803][INFO    ][17292] Executing state file.absent for [/etc/apache2/sites-enabled/000-default.conf]
2018-09-01 22:33:25,229 [salt.state       :290 ][INFO    ][17292] {'removed': '/etc/apache2/sites-enabled/000-default.conf'}
2018-09-01 22:33:25,230 [salt.state       :1941][INFO    ][17292] Completed state [/etc/apache2/sites-enabled/000-default.conf] at time 22:33:25.230048 duration_in_ms=0.716
2018-09-01 22:33:25,230 [salt.state       :1770][INFO    ][17292] Running state [/etc/apache2/sites-available/wsgi_barbican_admin.conf] at time 22:33:25.230523
2018-09-01 22:33:25,230 [salt.state       :1803][INFO    ][17292] Executing state file.managed for [/etc/apache2/sites-available/wsgi_barbican_admin.conf]
2018-09-01 22:33:25,244 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'apache/files/wsgi.conf'
2018-09-01 22:33:25,264 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'apache/files/_name.conf'
2018-09-01 22:33:25,308 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'apache/files/_wsgi.conf'
2018-09-01 22:33:25,324 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'apache/files/_ssl.conf'
2018-09-01 22:33:25,377 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'apache/files/_core.conf'
2018-09-01 22:33:25,392 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'apache/files/_log.conf'
2018-09-01 22:33:25,409 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'apache/files/_limits.conf'
2018-09-01 22:33:25,416 [salt.state       :290 ][INFO    ][17292] File changed:
New file
2018-09-01 22:33:25,417 [salt.state       :1941][INFO    ][17292] Completed state [/etc/apache2/sites-available/wsgi_barbican_admin.conf] at time 22:33:25.416982 duration_in_ms=186.459
2018-09-01 22:33:25,417 [salt.state       :1770][INFO    ][17292] Running state [/etc/apache2/sites-available/wsgi_barbican.conf] at time 22:33:25.417450
2018-09-01 22:33:25,417 [salt.state       :1803][INFO    ][17292] Executing state file.managed for [/etc/apache2/sites-available/wsgi_barbican.conf]
2018-09-01 22:33:25,558 [salt.state       :290 ][INFO    ][17292] File changed:
New file
2018-09-01 22:33:25,558 [salt.state       :1941][INFO    ][17292] Completed state [/etc/apache2/sites-available/wsgi_barbican.conf] at time 22:33:25.558942 duration_in_ms=141.492
2018-09-01 22:33:25,559 [salt.state       :1770][INFO    ][17292] Running state [/etc/apache2/sites-available/keystone_wsgi.conf] at time 22:33:25.559412
2018-09-01 22:33:25,559 [salt.state       :1803][INFO    ][17292] Executing state file.managed for [/etc/apache2/sites-available/keystone_wsgi.conf]
2018-09-01 22:33:25,571 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'keystone/files/apache.conf'
2018-09-01 22:33:25,607 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'keystone/files/queens/wsgi-keystone.conf'
2018-09-01 22:33:25,741 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'apache/files/_locations.conf'
2018-09-01 22:33:25,763 [salt.state       :290 ][INFO    ][17292] File changed:
New file
2018-09-01 22:33:25,763 [salt.state       :1941][INFO    ][17292] Completed state [/etc/apache2/sites-available/keystone_wsgi.conf] at time 22:33:25.763487 duration_in_ms=204.075
2018-09-01 22:33:25,763 [salt.state       :1770][INFO    ][17292] Running state [/etc/apache2/sites-enabled/keystone_wsgi.conf] at time 22:33:25.763907
2018-09-01 22:33:25,764 [salt.state       :1803][INFO    ][17292] Executing state file.symlink for [/etc/apache2/sites-enabled/keystone_wsgi.conf]
2018-09-01 22:33:25,765 [salt.state       :290 ][INFO    ][17292] {'new': '/etc/apache2/sites-enabled/keystone_wsgi.conf'}
2018-09-01 22:33:25,765 [salt.state       :1941][INFO    ][17292] Completed state [/etc/apache2/sites-enabled/keystone_wsgi.conf] at time 22:33:25.765425 duration_in_ms=1.517
2018-09-01 22:33:25,768 [salt.state       :1770][INFO    ][17292] Running state [apache2] at time 22:33:25.768374
2018-09-01 22:33:25,768 [salt.state       :1803][INFO    ][17292] Executing state service.running for [apache2]
2018-09-01 22:33:25,769 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command ['systemctl', 'status', 'apache2.service', '-n', '0'] in directory '/root'
2018-09-01 22:33:25,797 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-09-01 22:33:25,823 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-09-01 22:33:25,855 [salt.state       :290 ][INFO    ][17292] The service apache2 is already running
2018-09-01 22:33:25,856 [salt.state       :1941][INFO    ][17292] Completed state [apache2] at time 22:33:25.855952 duration_in_ms=87.576
2018-09-01 22:33:25,856 [salt.state       :1770][INFO    ][17292] Running state [apache2] at time 22:33:25.856583
2018-09-01 22:33:25,857 [salt.state       :1803][INFO    ][17292] Executing state service.mod_watch for [apache2]
2018-09-01 22:33:25,859 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-09-01 22:33:25,886 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command ['systemd-run', '--scope', 'systemctl', 'reload', 'apache2.service'] in directory '/root'
2018-09-01 22:33:26,076 [salt.state       :290 ][INFO    ][17292] {'apache2': True}
2018-09-01 22:33:26,076 [salt.state       :1941][INFO    ][17292] Completed state [apache2] at time 22:33:26.076672 duration_in_ms=220.089
2018-09-01 22:33:26,078 [salt.state       :1770][INFO    ][17292] Running state [/etc/apache2/conf-enabled/security.conf] at time 22:33:26.078072
2018-09-01 22:33:26,078 [salt.state       :1803][INFO    ][17292] Executing state file.symlink for [/etc/apache2/conf-enabled/security.conf]
2018-09-01 22:33:26,081 [salt.state       :290 ][INFO    ][17292] {'new': '/etc/apache2/conf-enabled/security.conf'}
2018-09-01 22:33:26,081 [salt.state       :1941][INFO    ][17292] Completed state [/etc/apache2/conf-enabled/security.conf] at time 22:33:26.081883 duration_in_ms=3.811
2018-09-01 22:33:26,082 [salt.state       :1770][INFO    ][17292] Running state [/etc/apache2/sites-enabled/keystone_wsgi] at time 22:33:26.082411
2018-09-01 22:33:26,082 [salt.state       :1803][INFO    ][17292] Executing state file.absent for [/etc/apache2/sites-enabled/keystone_wsgi]
2018-09-01 22:33:26,083 [salt.state       :290 ][INFO    ][17292] File /etc/apache2/sites-enabled/keystone_wsgi is not present
2018-09-01 22:33:26,084 [salt.state       :1941][INFO    ][17292] Completed state [/etc/apache2/sites-enabled/keystone_wsgi] at time 22:33:26.083990 duration_in_ms=1.579
2018-09-01 22:33:26,084 [salt.state       :1770][INFO    ][17292] Running state [keystone-manage db_sync && sleep 1] at time 22:33:26.084740
2018-09-01 22:33:26,085 [salt.state       :1803][INFO    ][17292] Executing state cmd.run for [keystone-manage db_sync && sleep 1]
2018-09-01 22:33:26,086 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command 'keystone-manage db_sync && sleep 1' in directory '/root'
2018-09-01 22:33:30,093 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901223330097331
2018-09-01 22:33:30,114 [salt.minion      :1431][INFO    ][21350] Starting a new job with PID 21350
2018-09-01 22:33:30,130 [salt.minion      :1708][INFO    ][21350] Returning information for job: 20180901223330097331
2018-09-01 22:33:40,246 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901223340248540
2018-09-01 22:33:40,271 [salt.minion      :1431][INFO    ][21365] Starting a new job with PID 21365
2018-09-01 22:33:40,291 [salt.minion      :1708][INFO    ][21365] Returning information for job: 20180901223340248540
2018-09-01 22:33:50,409 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901223350412251
2018-09-01 22:33:50,432 [salt.minion      :1431][INFO    ][21370] Starting a new job with PID 21370
2018-09-01 22:33:50,449 [salt.minion      :1708][INFO    ][21370] Returning information for job: 20180901223350412251
2018-09-01 22:33:53,661 [salt.state       :290 ][INFO    ][17292] {'pid': 21142, 'retcode': 0, 'stderr': '', 'stdout': '2018-09-01 22:33:27.232 21214 INFO migrate.versioning.api [-] 66 -> 67... \n2018-09-01 22:33:32.610 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:32.611 21214 INFO migrate.versioning.api [-] 67 -> 68... \n2018-09-01 22:33:32.621 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:32.621 21214 INFO migrate.versioning.api [-] 68 -> 69... \n2018-09-01 22:33:32.631 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:32.631 21214 INFO migrate.versioning.api [-] 69 -> 70... \n2018-09-01 22:33:32.640 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:32.641 21214 INFO migrate.versioning.api [-] 70 -> 71... \n2018-09-01 22:33:32.655 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:32.656 21214 INFO migrate.versioning.api [-] 71 -> 72... \n2018-09-01 22:33:32.665 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:32.666 21214 INFO migrate.versioning.api [-] 72 -> 73... \n2018-09-01 22:33:33.142 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:33.143 21214 INFO migrate.versioning.api [-] 73 -> 74... \n2018-09-01 22:33:33.340 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:33.340 21214 INFO migrate.versioning.api [-] 74 -> 75... \n2018-09-01 22:33:33.488 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:33.488 21214 INFO migrate.versioning.api [-] 75 -> 76... \n2018-09-01 22:33:33.498 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:33.499 21214 INFO migrate.versioning.api [-] 76 -> 77... \n2018-09-01 22:33:33.520 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:33.520 21214 INFO migrate.versioning.api [-] 77 -> 78... \n2018-09-01 22:33:33.532 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:33.532 21214 INFO migrate.versioning.api [-] 78 -> 79... \n2018-09-01 22:33:33.542 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:33.542 21214 INFO migrate.versioning.api [-] 79 -> 80... \n2018-09-01 22:33:33.551 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:33.551 21214 INFO migrate.versioning.api [-] 80 -> 81... \n2018-09-01 22:33:33.764 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:33.765 21214 INFO migrate.versioning.api [-] 81 -> 82... \n2018-09-01 22:33:34.738 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:34.738 21214 INFO migrate.versioning.api [-] 82 -> 83... \n2018-09-01 22:33:35.617 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:35.618 21214 INFO migrate.versioning.api [-] 83 -> 84... \n2018-09-01 22:33:35.880 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:35.880 21214 INFO migrate.versioning.api [-] 84 -> 85... \n2018-09-01 22:33:36.591 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:36.591 21214 INFO migrate.versioning.api [-] 85 -> 86... \n2018-09-01 22:33:36.674 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:36.675 21214 INFO migrate.versioning.api [-] 86 -> 87... \n2018-09-01 22:33:37.329 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:37.329 21214 INFO migrate.versioning.api [-] 87 -> 88... \n2018-09-01 22:33:37.646 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:37.646 21214 INFO migrate.versioning.api [-] 88 -> 89... \n2018-09-01 22:33:37.673 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:37.673 21214 INFO migrate.versioning.api [-] 89 -> 90... \n2018-09-01 22:33:38.105 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:38.106 21214 INFO migrate.versioning.api [-] 90 -> 91... \n2018-09-01 22:33:38.743 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:38.744 21214 INFO migrate.versioning.api [-] 91 -> 92... \n2018-09-01 22:33:39.364 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:39.365 21214 INFO migrate.versioning.api [-] 92 -> 93... \n2018-09-01 22:33:40.058 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:40.058 21214 INFO migrate.versioning.api [-] 93 -> 94... \n2018-09-01 22:33:40.548 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:40.548 21214 INFO migrate.versioning.api [-] 94 -> 95... \n2018-09-01 22:33:40.882 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:40.883 21214 INFO migrate.versioning.api [-] 95 -> 96... \n2018-09-01 22:33:40.898 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:40.898 21214 INFO migrate.versioning.api [-] 96 -> 97... \n2018-09-01 22:33:40.910 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:40.910 21214 INFO migrate.versioning.api [-] 97 -> 98... \n2018-09-01 22:33:40.920 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:40.920 21214 INFO migrate.versioning.api [-] 98 -> 99... \n2018-09-01 22:33:40.928 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:40.929 21214 INFO migrate.versioning.api [-] 99 -> 100... \n2018-09-01 22:33:40.938 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:40.938 21214 INFO migrate.versioning.api [-] 100 -> 101... \n2018-09-01 22:33:40.952 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:40.952 21214 INFO migrate.versioning.api [-] 101 -> 102... \n2018-09-01 22:33:40.998 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:40.998 21214 INFO migrate.versioning.api [-] 102 -> 103... \n2018-09-01 22:33:41.171 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:41.171 21214 INFO migrate.versioning.api [-] 103 -> 104... \n2018-09-01 22:33:41.185 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:41.185 21214 INFO migrate.versioning.api [-] 104 -> 105... \n2018-09-01 22:33:41.573 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:41.573 21214 INFO migrate.versioning.api [-] 105 -> 106... \n2018-09-01 22:33:41.807 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:41.807 21214 INFO migrate.versioning.api [-] 106 -> 107... \n2018-09-01 22:33:42.130 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:42.130 21214 INFO migrate.versioning.api [-] 107 -> 108... \n2018-09-01 22:33:42.500 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:42.500 21214 INFO migrate.versioning.api [-] 108 -> 109... \n2018-09-01 22:33:42.679 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:42.736 21214 INFO migrate.versioning.api [-] 0 -> 1... \n2018-09-01 22:33:42.744 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:42.744 21214 INFO migrate.versioning.api [-] 1 -> 2... \n2018-09-01 22:33:42.753 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:42.753 21214 INFO migrate.versioning.api [-] 2 -> 3... \n2018-09-01 22:33:43.259 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:43.260 21214 INFO migrate.versioning.api [-] 3 -> 4... \n2018-09-01 22:33:43.270 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:43.270 21214 INFO migrate.versioning.api [-] 4 -> 5... \n2018-09-01 22:33:43.280 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:43.280 21214 INFO migrate.versioning.api [-] 5 -> 6... \n2018-09-01 22:33:43.289 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:43.290 21214 INFO migrate.versioning.api [-] 6 -> 7... \n2018-09-01 22:33:43.299 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:43.299 21214 INFO migrate.versioning.api [-] 7 -> 8... \n2018-09-01 22:33:43.308 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:43.308 21214 INFO migrate.versioning.api [-] 8 -> 9... \n2018-09-01 22:33:43.318 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:43.318 21214 INFO migrate.versioning.api [-] 9 -> 10... \n2018-09-01 22:33:43.664 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:43.665 21214 INFO migrate.versioning.api [-] 10 -> 11... \n2018-09-01 22:33:43.674 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:43.674 21214 INFO migrate.versioning.api [-] 11 -> 12... \n2018-09-01 22:33:44.053 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:44.053 21214 INFO migrate.versioning.api [-] 12 -> 13... \n2018-09-01 22:33:44.063 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:44.063 21214 INFO migrate.versioning.api [-] 13 -> 14... \n2018-09-01 22:33:44.521 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:44.522 21214 INFO migrate.versioning.api [-] 14 -> 15... \n2018-09-01 22:33:44.533 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:44.533 21214 INFO migrate.versioning.api [-] 15 -> 16... \n2018-09-01 22:33:44.711 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:44.711 21214 INFO migrate.versioning.api [-] 16 -> 17... \n2018-09-01 22:33:44.721 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:44.721 21214 INFO migrate.versioning.api [-] 17 -> 18... \n2018-09-01 22:33:44.730 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:44.731 21214 INFO migrate.versioning.api [-] 18 -> 19... \n2018-09-01 22:33:44.740 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:44.740 21214 INFO migrate.versioning.api [-] 19 -> 20... \n2018-09-01 22:33:44.749 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:44.749 21214 INFO migrate.versioning.api [-] 20 -> 21... \n2018-09-01 22:33:44.759 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:44.759 21214 INFO migrate.versioning.api [-] 21 -> 22... \n2018-09-01 22:33:44.855 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:44.855 21214 INFO migrate.versioning.api [-] 22 -> 23... \n2018-09-01 22:33:45.039 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:45.039 21214 INFO migrate.versioning.api [-] 23 -> 24... \n2018-09-01 22:33:45.380 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:45.380 21214 INFO migrate.versioning.api [-] 24 -> 25... \n2018-09-01 22:33:45.389 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:45.389 21214 INFO migrate.versioning.api [-] 25 -> 26... \n2018-09-01 22:33:45.399 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:45.399 21214 INFO migrate.versioning.api [-] 26 -> 27... \n2018-09-01 22:33:45.409 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:45.409 21214 INFO migrate.versioning.api [-] 27 -> 28... \n2018-09-01 22:33:45.418 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:45.418 21214 INFO migrate.versioning.api [-] 28 -> 29... \n2018-09-01 22:33:45.427 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:45.428 21214 INFO migrate.versioning.api [-] 29 -> 30... \n2018-09-01 22:33:45.629 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:45.630 21214 INFO migrate.versioning.api [-] 30 -> 31... \n2018-09-01 22:33:45.768 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:45.768 21214 INFO migrate.versioning.api [-] 31 -> 32... \n2018-09-01 22:33:46.007 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:46.007 21214 INFO migrate.versioning.api [-] 32 -> 33... \n2018-09-01 22:33:46.754 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:46.755 21214 INFO migrate.versioning.api [-] 33 -> 34... \n2018-09-01 22:33:47.113 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.113 21214 INFO migrate.versioning.api [-] 34 -> 35... \n2018-09-01 22:33:47.309 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.309 21214 INFO migrate.versioning.api [-] 35 -> 36... \n2018-09-01 22:33:47.525 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.526 21214 INFO migrate.versioning.api [-] 36 -> 37... \n2018-09-01 22:33:47.536 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.536 21214 INFO migrate.versioning.api [-] 37 -> 38... \n2018-09-01 22:33:47.545 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.545 21214 INFO migrate.versioning.api [-] 38 -> 39... \n2018-09-01 22:33:47.554 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.555 21214 INFO migrate.versioning.api [-] 39 -> 40... \n2018-09-01 22:33:47.566 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.566 21214 INFO migrate.versioning.api [-] 40 -> 41... \n2018-09-01 22:33:47.576 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.577 21214 INFO migrate.versioning.api [-] 41 -> 42... \n2018-09-01 22:33:47.587 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.587 21214 INFO migrate.versioning.api [-] 42 -> 43... \n2018-09-01 22:33:47.597 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.597 21214 INFO migrate.versioning.api [-] 43 -> 44... \n2018-09-01 22:33:47.608 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.669 21214 INFO migrate.versioning.api [-] 0 -> 1... \n2018-09-01 22:33:47.679 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.679 21214 INFO migrate.versioning.api [-] 1 -> 2... \n2018-09-01 22:33:47.689 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.689 21214 INFO migrate.versioning.api [-] 2 -> 3... \n2018-09-01 22:33:47.708 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.708 21214 INFO migrate.versioning.api [-] 3 -> 4... \n2018-09-01 22:33:47.718 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.718 21214 INFO migrate.versioning.api [-] 4 -> 5... \n2018-09-01 22:33:47.728 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.728 21214 INFO migrate.versioning.api [-] 5 -> 6... \n2018-09-01 22:33:47.739 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.740 21214 INFO migrate.versioning.api [-] 6 -> 7... \n2018-09-01 22:33:47.752 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.752 21214 INFO migrate.versioning.api [-] 7 -> 8... \n2018-09-01 22:33:47.762 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.762 21214 INFO migrate.versioning.api [-] 8 -> 9... \n2018-09-01 22:33:47.772 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.772 21214 INFO migrate.versioning.api [-] 9 -> 10... \n2018-09-01 22:33:47.783 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.783 21214 INFO migrate.versioning.api [-] 10 -> 11... \n2018-09-01 22:33:47.794 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.794 21214 INFO migrate.versioning.api [-] 11 -> 12... \n2018-09-01 22:33:47.819 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.819 21214 INFO migrate.versioning.api [-] 12 -> 13... \n2018-09-01 22:33:47.830 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.830 21214 INFO migrate.versioning.api [-] 13 -> 14... \n2018-09-01 22:33:47.872 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.873 21214 INFO migrate.versioning.api [-] 14 -> 15... \n2018-09-01 22:33:47.908 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.908 21214 INFO migrate.versioning.api [-] 15 -> 16... \n2018-09-01 22:33:47.918 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.918 21214 INFO migrate.versioning.api [-] 16 -> 17... \n2018-09-01 22:33:47.929 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.929 21214 INFO migrate.versioning.api [-] 17 -> 18... \n2018-09-01 22:33:47.940 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.940 21214 INFO migrate.versioning.api [-] 18 -> 19... \n2018-09-01 22:33:47.951 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.951 21214 INFO migrate.versioning.api [-] 19 -> 20... \n2018-09-01 22:33:47.961 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.962 21214 INFO migrate.versioning.api [-] 20 -> 21... \n2018-09-01 22:33:47.972 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.972 21214 INFO migrate.versioning.api [-] 21 -> 22... \n2018-09-01 22:33:47.983 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.983 21214 INFO migrate.versioning.api [-] 22 -> 23... \n2018-09-01 22:33:47.994 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:47.994 21214 INFO migrate.versioning.api [-] 23 -> 24... \n2018-09-01 22:33:48.005 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:48.005 21214 INFO migrate.versioning.api [-] 24 -> 25... \n2018-09-01 22:33:48.015 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:48.015 21214 INFO migrate.versioning.api [-] 25 -> 26... \n2018-09-01 22:33:48.026 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:48.026 21214 INFO migrate.versioning.api [-] 26 -> 27... \n2018-09-01 22:33:48.037 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:48.037 21214 INFO migrate.versioning.api [-] 27 -> 28... \n2018-09-01 22:33:48.048 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:48.049 21214 INFO migrate.versioning.api [-] 28 -> 29... \n2018-09-01 22:33:48.060 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:48.061 21214 INFO migrate.versioning.api [-] 29 -> 30... \n2018-09-01 22:33:48.071 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:48.071 21214 INFO migrate.versioning.api [-] 30 -> 31... \n2018-09-01 22:33:48.082 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:48.082 21214 INFO migrate.versioning.api [-] 31 -> 32... \n2018-09-01 22:33:48.092 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:48.093 21214 INFO migrate.versioning.api [-] 32 -> 33... \n2018-09-01 22:33:48.103 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:48.104 21214 INFO migrate.versioning.api [-] 33 -> 34... \n2018-09-01 22:33:48.114 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:48.114 21214 INFO migrate.versioning.api [-] 34 -> 35... \n2018-09-01 22:33:48.124 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:48.124 21214 INFO migrate.versioning.api [-] 35 -> 36... \n2018-09-01 22:33:48.134 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:48.135 21214 INFO migrate.versioning.api [-] 36 -> 37... \n2018-09-01 22:33:48.145 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:48.145 21214 INFO migrate.versioning.api [-] 37 -> 38... \n2018-09-01 22:33:48.155 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:48.155 21214 INFO migrate.versioning.api [-] 38 -> 39... \n2018-09-01 22:33:48.165 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:48.165 21214 INFO migrate.versioning.api [-] 39 -> 40... \n2018-09-01 22:33:48.175 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:48.175 21214 INFO migrate.versioning.api [-] 40 -> 41... \n2018-09-01 22:33:48.185 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:48.186 21214 INFO migrate.versioning.api [-] 41 -> 42... \n2018-09-01 22:33:48.196 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:48.196 21214 INFO migrate.versioning.api [-] 42 -> 43... \n2018-09-01 22:33:48.206 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:48.206 21214 INFO migrate.versioning.api [-] 43 -> 44... \n2018-09-01 22:33:48.215 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:48.274 21214 INFO migrate.versioning.api [-] 0 -> 1... \n2018-09-01 22:33:48.284 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:48.284 21214 INFO migrate.versioning.api [-] 1 -> 2... \n2018-09-01 22:33:48.631 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:48.632 21214 INFO migrate.versioning.api [-] 2 -> 3... \n2018-09-01 22:33:49.139 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:49.139 21214 INFO migrate.versioning.api [-] 3 -> 4... \n2018-09-01 22:33:49.658 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:49.658 21214 INFO migrate.versioning.api [-] 4 -> 5... \n2018-09-01 22:33:49.667 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:49.667 21214 INFO migrate.versioning.api [-] 5 -> 6... \n2018-09-01 22:33:49.677 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:49.677 21214 INFO migrate.versioning.api [-] 6 -> 7... \n2018-09-01 22:33:49.687 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:49.688 21214 INFO migrate.versioning.api [-] 7 -> 8... \n2018-09-01 22:33:49.698 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:49.698 21214 INFO migrate.versioning.api [-] 8 -> 9... \n2018-09-01 22:33:49.708 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:49.708 21214 INFO migrate.versioning.api [-] 9 -> 10... \n2018-09-01 22:33:49.718 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:49.719 21214 INFO migrate.versioning.api [-] 10 -> 11... \n2018-09-01 22:33:49.816 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:49.817 21214 INFO migrate.versioning.api [-] 11 -> 12... \n2018-09-01 22:33:50.023 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:50.023 21214 INFO migrate.versioning.api [-] 12 -> 13... \n2018-09-01 22:33:50.401 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:50.402 21214 INFO migrate.versioning.api [-] 13 -> 14... \n2018-09-01 22:33:51.201 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:51.202 21214 INFO migrate.versioning.api [-] 14 -> 15... \n2018-09-01 22:33:51.466 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:51.467 21214 INFO migrate.versioning.api [-] 15 -> 16... \n2018-09-01 22:33:51.478 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:51.478 21214 INFO migrate.versioning.api [-] 16 -> 17... \n2018-09-01 22:33:51.488 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:51.488 21214 INFO migrate.versioning.api [-] 17 -> 18... \n2018-09-01 22:33:51.498 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:51.498 21214 INFO migrate.versioning.api [-] 18 -> 19... \n2018-09-01 22:33:51.508 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:51.508 21214 INFO migrate.versioning.api [-] 19 -> 20... \n2018-09-01 22:33:51.518 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:51.518 21214 INFO migrate.versioning.api [-] 20 -> 21... \n2018-09-01 22:33:51.528 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:51.528 21214 INFO migrate.versioning.api [-] 21 -> 22... \n2018-09-01 22:33:51.539 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:51.539 21214 INFO migrate.versioning.api [-] 22 -> 23... \n2018-09-01 22:33:51.549 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:51.549 21214 INFO migrate.versioning.api [-] 23 -> 24... \n2018-09-01 22:33:51.777 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:51.777 21214 INFO migrate.versioning.api [-] 24 -> 25... \n2018-09-01 22:33:51.787 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:51.787 21214 INFO migrate.versioning.api [-] 25 -> 26... \n2018-09-01 22:33:51.798 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:51.798 21214 INFO migrate.versioning.api [-] 26 -> 27... \n2018-09-01 22:33:51.808 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:51.809 21214 INFO migrate.versioning.api [-] 27 -> 28... \n2018-09-01 22:33:51.820 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:51.820 21214 INFO migrate.versioning.api [-] 28 -> 29... \n2018-09-01 22:33:51.831 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:51.831 21214 INFO migrate.versioning.api [-] 29 -> 30... \n2018-09-01 22:33:51.841 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:51.842 21214 INFO migrate.versioning.api [-] 30 -> 31... \n2018-09-01 22:33:51.852 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:51.852 21214 INFO migrate.versioning.api [-] 31 -> 32... \n2018-09-01 22:33:51.925 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:51.925 21214 INFO migrate.versioning.api [-] 32 -> 33... \n2018-09-01 22:33:51.936 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:51.936 21214 INFO migrate.versioning.api [-] 33 -> 34... \n2018-09-01 22:33:51.945 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:51.946 21214 INFO migrate.versioning.api [-] 34 -> 35... \n2018-09-01 22:33:52.199 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:52.199 21214 INFO migrate.versioning.api [-] 35 -> 36... \n2018-09-01 22:33:52.362 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:52.362 21214 INFO migrate.versioning.api [-] 36 -> 37... \n2018-09-01 22:33:52.490 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:52.490 21214 INFO migrate.versioning.api [-] 37 -> 38... \n2018-09-01 22:33:52.500 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:52.500 21214 INFO migrate.versioning.api [-] 38 -> 39... \n2018-09-01 22:33:52.509 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:52.509 21214 INFO migrate.versioning.api [-] 39 -> 40... \n2018-09-01 22:33:52.519 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:52.519 21214 INFO migrate.versioning.api [-] 40 -> 41... \n2018-09-01 22:33:52.528 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:52.528 21214 INFO migrate.versioning.api [-] 41 -> 42... \n2018-09-01 22:33:52.539 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:52.539 21214 INFO migrate.versioning.api [-] 42 -> 43... \n2018-09-01 22:33:52.550 21214 INFO migrate.versioning.api [-] done\n2018-09-01 22:33:52.550 21214 INFO migrate.versioning.api [-] 43 -> 44... \n2018-09-01 22:33:52.561 21214 INFO migrate.versioning.api [-] done'}
2018-09-01 22:33:53,666 [salt.state       :1941][INFO    ][17292] Completed state [keystone-manage db_sync && sleep 1] at time 22:33:53.665917 duration_in_ms=27581.175
2018-09-01 22:33:53,668 [salt.state       :1770][INFO    ][17292] Running state [keystone] at time 22:33:53.668716
2018-09-01 22:33:53,669 [salt.state       :1803][INFO    ][17292] Executing state service.dead for [keystone]
2018-09-01 22:33:53,672 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command ['systemctl', 'status', 'keystone.service', '-n', '0'] in directory '/root'
2018-09-01 22:33:53,699 [salt.state       :290 ][INFO    ][17292] The named service keystone is not available
2018-09-01 22:33:53,700 [salt.state       :1941][INFO    ][17292] Completed state [keystone] at time 22:33:53.700493 duration_in_ms=31.778
2018-09-01 22:33:53,701 [salt.state       :1770][INFO    ][17292] Running state [keystone] at time 22:33:53.700992
2018-09-01 22:33:53,701 [salt.state       :1803][INFO    ][17292] Executing state service.mod_watch for [keystone]
2018-09-01 22:33:53,703 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command ['systemctl', 'is-active', 'keystone.service'] in directory '/root'
2018-09-01 22:33:53,721 [salt.state       :290 ][INFO    ][17292] Service is already stopped
2018-09-01 22:33:53,721 [salt.state       :1941][INFO    ][17292] Completed state [keystone] at time 22:33:53.721803 duration_in_ms=20.811
2018-09-01 22:33:53,724 [salt.state       :1770][INFO    ][17292] Running state [/root/keystonerc] at time 22:33:53.723976
2018-09-01 22:33:53,724 [salt.state       :1803][INFO    ][17292] Executing state file.managed for [/root/keystonerc]
2018-09-01 22:33:53,752 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'keystone/files/keystonerc'
2018-09-01 22:33:53,798 [salt.state       :290 ][INFO    ][17292] File changed:
New file
2018-09-01 22:33:53,798 [salt.state       :1941][INFO    ][17292] Completed state [/root/keystonerc] at time 22:33:53.798835 duration_in_ms=74.859
2018-09-01 22:33:53,799 [salt.state       :1770][INFO    ][17292] Running state [/root/keystonercv3] at time 22:33:53.799382
2018-09-01 22:33:53,799 [salt.state       :1803][INFO    ][17292] Executing state file.managed for [/root/keystonercv3]
2018-09-01 22:33:53,818 [salt.fileclient  :1215][INFO    ][17292] Fetching file from saltenv 'base', ** done ** 'keystone/files/keystonercv3'
2018-09-01 22:33:53,853 [salt.state       :290 ][INFO    ][17292] File changed:
New file
2018-09-01 22:33:53,853 [salt.state       :1941][INFO    ][17292] Completed state [/root/keystonercv3] at time 22:33:53.853466 duration_in_ms=54.085
2018-09-01 22:33:53,853 [salt.state       :1770][INFO    ][17292] Running state [/var/lib/keystone/fernet-keys] at time 22:33:53.853937
2018-09-01 22:33:53,854 [salt.state       :1803][INFO    ][17292] Executing state file.directory for [/var/lib/keystone/fernet-keys]
2018-09-01 22:33:53,856 [salt.state       :290 ][INFO    ][17292] Directory /var/lib/keystone/fernet-keys is in the correct state
Directory /var/lib/keystone/fernet-keys updated
2018-09-01 22:33:53,856 [salt.state       :1941][INFO    ][17292] Completed state [/var/lib/keystone/fernet-keys] at time 22:33:53.856286 duration_in_ms=2.349
2018-09-01 22:33:53,857 [salt.state       :1770][INFO    ][17292] Running state [keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone] at time 22:33:53.857120
2018-09-01 22:33:53,857 [salt.state       :1803][INFO    ][17292] Executing state cmd.run for [keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone]
2018-09-01 22:33:53,857 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command 'keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone' in directory '/root'
2018-09-01 22:33:54,784 [salt.state       :290 ][INFO    ][17292] {'pid': 21381, 'retcode': 0, 'stderr': '', 'stdout': "2018-09-01 22:33:54.682 21382 INFO keystone.common.token_utils [-] Created a new temporary key: /var/lib/keystone/fernet-keys/0.tmp\n2018-09-01 22:33:54.690 21382 INFO keystone.common.token_utils [-] Become a valid new key: /var/lib/keystone/fernet-keys/0\n2018-09-01 22:33:54.691 21382 INFO keystone.common.token_utils [-] Starting key rotation with 1 key files: ['/var/lib/keystone/fernet-keys/0']\n2018-09-01 22:33:54.697 21382 INFO keystone.common.token_utils [-] Created a new temporary key: /var/lib/keystone/fernet-keys/0.tmp\n2018-09-01 22:33:54.697 21382 INFO keystone.common.token_utils [-] Current primary key is: 0\n2018-09-01 22:33:54.698 21382 INFO keystone.common.token_utils [-] Next primary key will be: 1\n2018-09-01 22:33:54.704 21382 INFO keystone.common.token_utils [-] Promoted key 0 to be the primary: 1\n2018-09-01 22:33:54.710 21382 INFO keystone.common.token_utils [-] Become a valid new key: /var/lib/keystone/fernet-keys/0"}
2018-09-01 22:33:54,786 [salt.state       :1941][INFO    ][17292] Completed state [keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone] at time 22:33:54.785915 duration_in_ms=928.794
2018-09-01 22:33:54,788 [salt.state       :1770][INFO    ][17292] Running state [/var/lib/keystone/credential-keys] at time 22:33:54.788230
2018-09-01 22:33:54,788 [salt.state       :1803][INFO    ][17292] Executing state file.directory for [/var/lib/keystone/credential-keys]
2018-09-01 22:33:54,793 [salt.state       :290 ][INFO    ][17292] {'mode': '0750'}
2018-09-01 22:33:54,794 [salt.state       :1941][INFO    ][17292] Completed state [/var/lib/keystone/credential-keys] at time 22:33:54.794219 duration_in_ms=5.988
2018-09-01 22:33:54,796 [salt.state       :1770][INFO    ][17292] Running state [keystone-manage credential_setup --keystone-user keystone --keystone-group keystone] at time 22:33:54.796641
2018-09-01 22:33:54,797 [salt.state       :1803][INFO    ][17292] Executing state cmd.run for [keystone-manage credential_setup --keystone-user keystone --keystone-group keystone]
2018-09-01 22:33:54,798 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command 'keystone-manage credential_setup --keystone-user keystone --keystone-group keystone' in directory '/root'
2018-09-01 22:33:55,697 [salt.state       :290 ][INFO    ][17292] {'pid': 21389, 'retcode': 0, 'stderr': '', 'stdout': "2018-09-01 22:33:55.596 21390 INFO keystone.common.token_utils [-] Created a new temporary key: /var/lib/keystone/credential-keys/0.tmp\n2018-09-01 22:33:55.603 21390 INFO keystone.common.token_utils [-] Become a valid new key: /var/lib/keystone/credential-keys/0\n2018-09-01 22:33:55.605 21390 INFO keystone.common.token_utils [-] Starting key rotation with 1 key files: ['/var/lib/keystone/credential-keys/0']\n2018-09-01 22:33:55.611 21390 INFO keystone.common.token_utils [-] Created a new temporary key: /var/lib/keystone/credential-keys/0.tmp\n2018-09-01 22:33:55.612 21390 INFO keystone.common.token_utils [-] Current primary key is: 0\n2018-09-01 22:33:55.612 21390 INFO keystone.common.token_utils [-] Next primary key will be: 1\n2018-09-01 22:33:55.618 21390 INFO keystone.common.token_utils [-] Promoted key 0 to be the primary: 1\n2018-09-01 22:33:55.624 21390 INFO keystone.common.token_utils [-] Become a valid new key: /var/lib/keystone/credential-keys/0"}
2018-09-01 22:33:55,697 [salt.state       :1941][INFO    ][17292] Completed state [keystone-manage credential_setup --keystone-user keystone --keystone-group keystone] at time 22:33:55.697636 duration_in_ms=900.995
2018-09-01 22:33:55,698 [salt.state       :1770][INFO    ][17292] Running state [keystone-manage bootstrap --bootstrap-password opnfv_secret --bootstrap-username admin --bootstrap-project-name admin --bootstrap-role-name admin --bootstrap-service-name keystone --bootstrap-region-id RegionOne --bootstrap-internal-url http://10.167.4.37:5000] at time 22:33:55.698034
2018-09-01 22:33:55,698 [salt.state       :1803][INFO    ][17292] Executing state cmd.run for [keystone-manage bootstrap --bootstrap-password opnfv_secret --bootstrap-username admin --bootstrap-project-name admin --bootstrap-role-name admin --bootstrap-service-name keystone --bootstrap-region-id RegionOne --bootstrap-internal-url http://10.167.4.37:5000]
2018-09-01 22:33:55,699 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command '. /root/keystonercv3; openstack endpoint list --service identity --interface internal -f value -c URL  |grep 5000' in directory '/root'
2018-09-01 22:33:56,347 [salt.loaded.int.module.cmdmod:395 ][INFO    ][17292] Executing command 'keystone-manage bootstrap --bootstrap-password opnfv_secret --bootstrap-username admin --bootstrap-project-name admin --bootstrap-role-name admin --bootstrap-service-name keystone --bootstrap-region-id RegionOne --bootstrap-internal-url http://10.167.4.37:5000' in directory '/root'
2018-09-01 22:33:58,007 [salt.state       :290 ][INFO    ][17292] {'pid': 21404, 'retcode': 0, 'stderr': '', 'stdout': '2018-09-01 22:33:57.440 21405 INFO keystone.cmd.cli [-] Created domain default\n2018-09-01 22:33:57.496 21405 INFO keystone.cmd.cli [req-2dc2a791-e260-4b5b-b8e3-0da956d18c5b - - - - -] Created project admin\n2018-09-01 22:33:57.805 21405 INFO keystone.cmd.cli [req-2dc2a791-e260-4b5b-b8e3-0da956d18c5b - - - - -] Created user admin\n2018-09-01 22:33:57.813 21405 INFO keystone.cmd.cli [req-2dc2a791-e260-4b5b-b8e3-0da956d18c5b - - - - -] Created role admin\n2018-09-01 22:33:57.841 21405 INFO keystone.cmd.cli [req-2dc2a791-e260-4b5b-b8e3-0da956d18c5b - - - - -] Granted admin on admin to user admin.\n2018-09-01 22:33:57.852 21405 INFO keystone.cmd.cli [req-2dc2a791-e260-4b5b-b8e3-0da956d18c5b - - - - -] Granted admin on the system to user admin.\n2018-09-01 22:33:57.867 21405 INFO keystone.cmd.cli [req-2dc2a791-e260-4b5b-b8e3-0da956d18c5b - - - - -] Created region RegionOne\n2018-09-01 22:33:57.900 21405 INFO keystone.cmd.cli [req-2dc2a791-e260-4b5b-b8e3-0da956d18c5b - - - - -] Created internal endpoint http://10.167.4.37:5000'}
2018-09-01 22:33:58,008 [salt.state       :1941][INFO    ][17292] Completed state [keystone-manage bootstrap --bootstrap-password opnfv_secret --bootstrap-username admin --bootstrap-project-name admin --bootstrap-role-name admin --bootstrap-service-name keystone --bootstrap-region-id RegionOne --bootstrap-internal-url http://10.167.4.37:5000] at time 22:33:58.007990 duration_in_ms=2309.955
2018-09-01 22:33:58,012 [salt.minion      :1708][INFO    ][17292] Returning information for job: 20180901223153565799
2018-09-01 22:36:51,149 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command service.restart with jid 20180901223651150863
2018-09-01 22:36:51,172 [salt.minion      :1431][INFO    ][21416] Starting a new job with PID 21416
2018-09-01 22:36:51,955 [salt.loader.192.168.11.2.int.module.cmdmod:395 ][INFO    ][21416] Executing command ['systemctl', 'status', 'apache2.service', '-n', '0'] in directory '/root'
2018-09-01 22:36:52,001 [salt.loader.192.168.11.2.int.module.cmdmod:395 ][INFO    ][21416] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'apache2.service'] in directory '/root'
2018-09-01 22:36:54,260 [salt.minion      :1708][INFO    ][21416] Returning information for job: 20180901223651150863
2018-09-01 22:36:55,019 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command test.ping with jid 20180901223655022988
2018-09-01 22:36:55,038 [salt.minion      :1431][INFO    ][21715] Starting a new job with PID 21715
2018-09-01 22:36:55,058 [salt.minion      :1708][INFO    ][21715] Returning information for job: 20180901223655022988
2018-09-01 22:36:55,250 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command state.sls with jid 20180901223655249807
2018-09-01 22:36:55,278 [salt.minion      :1431][INFO    ][21720] Starting a new job with PID 21720
2018-09-01 22:36:59,256 [salt.state       :905 ][INFO    ][21720] Loading fresh modules for state activity
2018-09-01 22:37:00,286 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901223700284105
2018-09-01 22:37:00,308 [salt.minion      :1431][INFO    ][21773] Starting a new job with PID 21773
2018-09-01 22:37:00,326 [salt.minion      :1708][INFO    ][21773] Returning information for job: 20180901223700284105
2018-09-01 22:37:00,723 [salt.state       :1770][INFO    ][21720] Running state [keystone] at time 22:37:00.723836
2018-09-01 22:37:00,724 [salt.state       :1803][INFO    ][21720] Executing state pkg.installed for [keystone]
2018-09-01 22:37:00,724 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21720] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:37:01,091 [salt.state       :290 ][INFO    ][21720] All specified packages are already installed
2018-09-01 22:37:01,091 [salt.state       :1941][INFO    ][21720] Completed state [keystone] at time 22:37:01.091903 duration_in_ms=368.067
2018-09-01 22:37:01,092 [salt.state       :1770][INFO    ][21720] Running state [python-keystone] at time 22:37:01.092168
2018-09-01 22:37:01,092 [salt.state       :1803][INFO    ][21720] Executing state pkg.installed for [python-keystone]
2018-09-01 22:37:01,097 [salt.state       :290 ][INFO    ][21720] All specified packages are already installed
2018-09-01 22:37:01,097 [salt.state       :1941][INFO    ][21720] Completed state [python-keystone] at time 22:37:01.097313 duration_in_ms=5.145
2018-09-01 22:37:01,097 [salt.state       :1770][INFO    ][21720] Running state [python-keystoneclient] at time 22:37:01.097486
2018-09-01 22:37:01,097 [salt.state       :1803][INFO    ][21720] Executing state pkg.installed for [python-keystoneclient]
2018-09-01 22:37:01,102 [salt.state       :290 ][INFO    ][21720] All specified packages are already installed
2018-09-01 22:37:01,102 [salt.state       :1941][INFO    ][21720] Completed state [python-keystoneclient] at time 22:37:01.102411 duration_in_ms=4.925
2018-09-01 22:37:01,102 [salt.state       :1770][INFO    ][21720] Running state [python-psycopg2] at time 22:37:01.102577
2018-09-01 22:37:01,102 [salt.state       :1803][INFO    ][21720] Executing state pkg.installed for [python-psycopg2]
2018-09-01 22:37:01,107 [salt.state       :290 ][INFO    ][21720] All specified packages are already installed
2018-09-01 22:37:01,107 [salt.state       :1941][INFO    ][21720] Completed state [python-psycopg2] at time 22:37:01.107371 duration_in_ms=4.793
2018-09-01 22:37:01,107 [salt.state       :1770][INFO    ][21720] Running state [python-mysqldb] at time 22:37:01.107535
2018-09-01 22:37:01,107 [salt.state       :1803][INFO    ][21720] Executing state pkg.installed for [python-mysqldb]
2018-09-01 22:37:01,112 [salt.state       :290 ][INFO    ][21720] All specified packages are already installed
2018-09-01 22:37:01,112 [salt.state       :1941][INFO    ][21720] Completed state [python-mysqldb] at time 22:37:01.112411 duration_in_ms=4.876
2018-09-01 22:37:01,112 [salt.state       :1770][INFO    ][21720] Running state [mysql-client] at time 22:37:01.112568
2018-09-01 22:37:01,112 [salt.state       :1803][INFO    ][21720] Executing state pkg.installed for [mysql-client]
2018-09-01 22:37:01,118 [salt.state       :290 ][INFO    ][21720] All specified packages are already installed
2018-09-01 22:37:01,119 [salt.state       :1941][INFO    ][21720] Completed state [mysql-client] at time 22:37:01.119103 duration_in_ms=6.534
2018-09-01 22:37:01,119 [salt.state       :1770][INFO    ][21720] Running state [python-six] at time 22:37:01.119263
2018-09-01 22:37:01,119 [salt.state       :1803][INFO    ][21720] Executing state pkg.installed for [python-six]
2018-09-01 22:37:01,123 [salt.state       :290 ][INFO    ][21720] All specified packages are already installed
2018-09-01 22:37:01,124 [salt.state       :1941][INFO    ][21720] Completed state [python-six] at time 22:37:01.124079 duration_in_ms=4.817
2018-09-01 22:37:01,124 [salt.state       :1770][INFO    ][21720] Running state [python-memcache] at time 22:37:01.124237
2018-09-01 22:37:01,124 [salt.state       :1803][INFO    ][21720] Executing state pkg.installed for [python-memcache]
2018-09-01 22:37:01,129 [salt.state       :290 ][INFO    ][21720] All specified packages are already installed
2018-09-01 22:37:01,129 [salt.state       :1941][INFO    ][21720] Completed state [python-memcache] at time 22:37:01.129142 duration_in_ms=4.905
2018-09-01 22:37:01,129 [salt.state       :1770][INFO    ][21720] Running state [python-openstackclient] at time 22:37:01.129303
2018-09-01 22:37:01,129 [salt.state       :1803][INFO    ][21720] Executing state pkg.installed for [python-openstackclient]
2018-09-01 22:37:01,134 [salt.state       :290 ][INFO    ][21720] All specified packages are already installed
2018-09-01 22:37:01,134 [salt.state       :1941][INFO    ][21720] Completed state [python-openstackclient] at time 22:37:01.134190 duration_in_ms=4.887
2018-09-01 22:37:01,134 [salt.state       :1770][INFO    ][21720] Running state [gettext-base] at time 22:37:01.134356
2018-09-01 22:37:01,134 [salt.state       :1803][INFO    ][21720] Executing state pkg.installed for [gettext-base]
2018-09-01 22:37:01,138 [salt.state       :290 ][INFO    ][21720] All specified packages are already installed
2018-09-01 22:37:01,139 [salt.state       :1941][INFO    ][21720] Completed state [gettext-base] at time 22:37:01.139110 duration_in_ms=4.755
2018-09-01 22:37:01,139 [salt.state       :1770][INFO    ][21720] Running state [python-pycadf] at time 22:37:01.139272
2018-09-01 22:37:01,139 [salt.state       :1803][INFO    ][21720] Executing state pkg.installed for [python-pycadf]
2018-09-01 22:37:01,143 [salt.state       :290 ][INFO    ][21720] All specified packages are already installed
2018-09-01 22:37:01,144 [salt.state       :1941][INFO    ][21720] Completed state [python-pycadf] at time 22:37:01.144126 duration_in_ms=4.854
2018-09-01 22:37:01,144 [salt.state       :1770][INFO    ][21720] Running state [apache2] at time 22:37:01.144606
2018-09-01 22:37:01,144 [salt.state       :1803][INFO    ][21720] Executing state pkg.installed for [apache2]
2018-09-01 22:37:01,149 [salt.state       :290 ][INFO    ][21720] All specified packages are already installed
2018-09-01 22:37:01,149 [salt.state       :1941][INFO    ][21720] Completed state [apache2] at time 22:37:01.149506 duration_in_ms=4.9
2018-09-01 22:37:01,149 [salt.state       :1770][INFO    ][21720] Running state [openssl] at time 22:37:01.149833
2018-09-01 22:37:01,150 [salt.state       :1803][INFO    ][21720] Executing state pkg.installed for [openssl]
2018-09-01 22:37:01,154 [salt.state       :290 ][INFO    ][21720] All specified packages are already installed
2018-09-01 22:37:01,154 [salt.state       :1941][INFO    ][21720] Completed state [openssl] at time 22:37:01.154748 duration_in_ms=4.915
2018-09-01 22:37:01,155 [salt.state       :1770][INFO    ][21720] Running state [a2enmod ssl] at time 22:37:01.155097
2018-09-01 22:37:01,155 [salt.state       :1803][INFO    ][21720] Executing state cmd.run for [a2enmod ssl]
2018-09-01 22:37:01,155 [salt.state       :290 ][INFO    ][21720] /etc/apache2/mods-enabled/ssl.load exists
2018-09-01 22:37:01,155 [salt.state       :1941][INFO    ][21720] Completed state [a2enmod ssl] at time 22:37:01.155702 duration_in_ms=0.605
2018-09-01 22:37:01,156 [salt.state       :1770][INFO    ][21720] Running state [a2enmod rewrite] at time 22:37:01.156038
2018-09-01 22:37:01,156 [salt.state       :1803][INFO    ][21720] Executing state cmd.run for [a2enmod rewrite]
2018-09-01 22:37:01,156 [salt.state       :290 ][INFO    ][21720] /etc/apache2/mods-enabled/rewrite.load exists
2018-09-01 22:37:01,156 [salt.state       :1941][INFO    ][21720] Completed state [a2enmod rewrite] at time 22:37:01.156561 duration_in_ms=0.523
2018-09-01 22:37:01,156 [salt.state       :1770][INFO    ][21720] Running state [libapache2-mod-wsgi] at time 22:37:01.156883
2018-09-01 22:37:01,157 [salt.state       :1803][INFO    ][21720] Executing state pkg.installed for [libapache2-mod-wsgi]
2018-09-01 22:37:01,161 [salt.state       :290 ][INFO    ][21720] All specified packages are already installed
2018-09-01 22:37:01,161 [salt.state       :1941][INFO    ][21720] Completed state [libapache2-mod-wsgi] at time 22:37:01.161655 duration_in_ms=4.772
2018-09-01 22:37:01,162 [salt.state       :1770][INFO    ][21720] Running state [a2enmod wsgi] at time 22:37:01.161987
2018-09-01 22:37:01,162 [salt.state       :1803][INFO    ][21720] Executing state cmd.run for [a2enmod wsgi]
2018-09-01 22:37:01,162 [salt.state       :290 ][INFO    ][21720] /etc/apache2/mods-enabled/wsgi.load exists
2018-09-01 22:37:01,162 [salt.state       :1941][INFO    ][21720] Completed state [a2enmod wsgi] at time 22:37:01.162517 duration_in_ms=0.531
2018-09-01 22:37:01,165 [salt.state       :1770][INFO    ][21720] Running state [/etc/apache2/mods-enabled/mpm_prefork.load] at time 22:37:01.165658
2018-09-01 22:37:01,165 [salt.state       :1803][INFO    ][21720] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_prefork.load]
2018-09-01 22:37:01,166 [salt.state       :290 ][INFO    ][21720] File /etc/apache2/mods-enabled/mpm_prefork.load is not present
2018-09-01 22:37:01,166 [salt.state       :1941][INFO    ][21720] Completed state [/etc/apache2/mods-enabled/mpm_prefork.load] at time 22:37:01.166251 duration_in_ms=0.593
2018-09-01 22:37:01,166 [salt.state       :1770][INFO    ][21720] Running state [/etc/apache2/mods-enabled/mpm_prefork.conf] at time 22:37:01.166408
2018-09-01 22:37:01,166 [salt.state       :1803][INFO    ][21720] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_prefork.conf]
2018-09-01 22:37:01,166 [salt.state       :290 ][INFO    ][21720] File /etc/apache2/mods-enabled/mpm_prefork.conf is not present
2018-09-01 22:37:01,166 [salt.state       :1941][INFO    ][21720] Completed state [/etc/apache2/mods-enabled/mpm_prefork.conf] at time 22:37:01.166896 duration_in_ms=0.488
2018-09-01 22:37:01,167 [salt.state       :1770][INFO    ][21720] Running state [/etc/apache2/mods-enabled/mpm_worker.load] at time 22:37:01.167050
2018-09-01 22:37:01,167 [salt.state       :1803][INFO    ][21720] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_worker.load]
2018-09-01 22:37:01,167 [salt.state       :290 ][INFO    ][21720] File /etc/apache2/mods-enabled/mpm_worker.load is not present
2018-09-01 22:37:01,167 [salt.state       :1941][INFO    ][21720] Completed state [/etc/apache2/mods-enabled/mpm_worker.load] at time 22:37:01.167556 duration_in_ms=0.506
2018-09-01 22:37:01,167 [salt.state       :1770][INFO    ][21720] Running state [/etc/apache2/mods-enabled/mpm_worker.conf] at time 22:37:01.167721
2018-09-01 22:37:01,167 [salt.state       :1803][INFO    ][21720] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_worker.conf]
2018-09-01 22:37:01,168 [salt.state       :290 ][INFO    ][21720] File /etc/apache2/mods-enabled/mpm_worker.conf is not present
2018-09-01 22:37:01,168 [salt.state       :1941][INFO    ][21720] Completed state [/etc/apache2/mods-enabled/mpm_worker.conf] at time 22:37:01.168201 duration_in_ms=0.479
2018-09-01 22:37:01,169 [salt.state       :1770][INFO    ][21720] Running state [/etc/apache2/mods-available/mpm_event.conf] at time 22:37:01.169716
2018-09-01 22:37:01,169 [salt.state       :1803][INFO    ][21720] Executing state file.managed for [/etc/apache2/mods-available/mpm_event.conf]
2018-09-01 22:37:01,220 [salt.state       :290 ][INFO    ][21720] File /etc/apache2/mods-available/mpm_event.conf is in the correct state
2018-09-01 22:37:01,220 [salt.state       :1941][INFO    ][21720] Completed state [/etc/apache2/mods-available/mpm_event.conf] at time 22:37:01.220674 duration_in_ms=50.958
2018-09-01 22:37:01,221 [salt.state       :1770][INFO    ][21720] Running state [a2enmod mpm_event] at time 22:37:01.221269
2018-09-01 22:37:01,221 [salt.state       :1803][INFO    ][21720] Executing state cmd.run for [a2enmod mpm_event]
2018-09-01 22:37:01,221 [salt.state       :290 ][INFO    ][21720] /etc/apache2/mods-enabled/mpm_event.load exists
2018-09-01 22:37:01,221 [salt.state       :1941][INFO    ][21720] Completed state [a2enmod mpm_event] at time 22:37:01.221816 duration_in_ms=0.547
2018-09-01 22:37:01,222 [salt.state       :1770][INFO    ][21720] Running state [apache_server_service_task] at time 22:37:01.222350
2018-09-01 22:37:01,222 [salt.state       :1803][INFO    ][21720] Executing state test.show_notification for [apache_server_service_task]
2018-09-01 22:37:01,222 [salt.state       :290 ][INFO    ][21720] Running apache.server.service
2018-09-01 22:37:01,222 [salt.state       :1941][INFO    ][21720] Completed state [apache_server_service_task] at time 22:37:01.222835 duration_in_ms=0.484
2018-09-01 22:37:01,223 [salt.state       :1770][INFO    ][21720] Running state [/etc/apache2/ports.conf] at time 22:37:01.223166
2018-09-01 22:37:01,223 [salt.state       :1803][INFO    ][21720] Executing state file.managed for [/etc/apache2/ports.conf]
2018-09-01 22:37:01,264 [salt.state       :290 ][INFO    ][21720] File /etc/apache2/ports.conf is in the correct state
2018-09-01 22:37:01,265 [salt.state       :1941][INFO    ][21720] Completed state [/etc/apache2/ports.conf] at time 22:37:01.265076 duration_in_ms=41.911
2018-09-01 22:37:01,265 [salt.state       :1770][INFO    ][21720] Running state [/etc/apache2/conf-available/security.conf] at time 22:37:01.265419
2018-09-01 22:37:01,265 [salt.state       :1803][INFO    ][21720] Executing state file.managed for [/etc/apache2/conf-available/security.conf]
2018-09-01 22:37:01,308 [salt.state       :290 ][INFO    ][21720] File /etc/apache2/conf-available/security.conf is in the correct state
2018-09-01 22:37:01,308 [salt.state       :1941][INFO    ][21720] Completed state [/etc/apache2/conf-available/security.conf] at time 22:37:01.308580 duration_in_ms=43.16
2018-09-01 22:37:01,316 [salt.state       :1770][INFO    ][21720] Running state [/etc/apache2/sites-enabled/keystone.conf] at time 22:37:01.316209
2018-09-01 22:37:01,316 [salt.state       :1803][INFO    ][21720] Executing state file.absent for [/etc/apache2/sites-enabled/keystone.conf]
2018-09-01 22:37:01,316 [salt.state       :290 ][INFO    ][21720] File /etc/apache2/sites-enabled/keystone.conf is not present
2018-09-01 22:37:01,316 [salt.state       :1941][INFO    ][21720] Completed state [/etc/apache2/sites-enabled/keystone.conf] at time 22:37:01.316756 duration_in_ms=0.546
2018-09-01 22:37:01,316 [salt.state       :1770][INFO    ][21720] Running state [/etc/apache2/sites-enabled/wsgi-keystone.conf] at time 22:37:01.316917
2018-09-01 22:37:01,317 [salt.state       :1803][INFO    ][21720] Executing state file.absent for [/etc/apache2/sites-enabled/wsgi-keystone.conf]
2018-09-01 22:37:01,317 [salt.state       :290 ][INFO    ][21720] File /etc/apache2/sites-enabled/wsgi-keystone.conf is not present
2018-09-01 22:37:01,317 [salt.state       :1941][INFO    ][21720] Completed state [/etc/apache2/sites-enabled/wsgi-keystone.conf] at time 22:37:01.317410 duration_in_ms=0.494
2018-09-01 22:37:01,317 [salt.state       :1770][INFO    ][21720] Running state [/etc/keystone/keystone.conf] at time 22:37:01.317768
2018-09-01 22:37:01,317 [salt.state       :1803][INFO    ][21720] Executing state file.managed for [/etc/keystone/keystone.conf]
2018-09-01 22:37:01,491 [salt.state       :290 ][INFO    ][21720] File /etc/keystone/keystone.conf is in the correct state
2018-09-01 22:37:01,491 [salt.state       :1941][INFO    ][21720] Completed state [/etc/keystone/keystone.conf] at time 22:37:01.491724 duration_in_ms=173.956
2018-09-01 22:37:01,492 [salt.state       :1770][INFO    ][21720] Running state [/etc/keystone/keystone-paste.ini] at time 22:37:01.492167
2018-09-01 22:37:01,492 [salt.state       :1803][INFO    ][21720] Executing state file.managed for [/etc/keystone/keystone-paste.ini]
2018-09-01 22:37:01,510 [salt.state       :290 ][INFO    ][21720] File /etc/keystone/keystone-paste.ini is in the correct state
2018-09-01 22:37:01,510 [salt.state       :1941][INFO    ][21720] Completed state [/etc/keystone/keystone-paste.ini] at time 22:37:01.510729 duration_in_ms=18.562
2018-09-01 22:37:01,511 [salt.state       :1770][INFO    ][21720] Running state [/etc/keystone/policy.json] at time 22:37:01.511393
2018-09-01 22:37:01,511 [salt.state       :1803][INFO    ][21720] Executing state file.managed for [/etc/keystone/policy.json]
2018-09-01 22:37:01,512 [salt.loaded.int.states.file:2150][WARNING ][21720] State for file: /etc/keystone/policy.json - Neither 'source' nor 'contents' nor 'contents_pillar' nor 'contents_grains' was defined, yet 'replace' was set to 'True'. As there is no source to replace the file with, 'replace' has been set to 'False' to avoid reading the file unnecessarily.
2018-09-01 22:37:01,512 [salt.state       :290 ][INFO    ][21720] File /etc/keystone/policy.json exists with proper permissions. No changes made.
2018-09-01 22:37:01,513 [salt.state       :1941][INFO    ][21720] Completed state [/etc/keystone/policy.json] at time 22:37:01.513127 duration_in_ms=1.733
2018-09-01 22:37:01,513 [salt.state       :1770][INFO    ][21720] Running state [/etc/apache2/sites-enabled/000-default.conf] at time 22:37:01.513404
2018-09-01 22:37:01,513 [salt.state       :1803][INFO    ][21720] Executing state file.absent for [/etc/apache2/sites-enabled/000-default.conf]
2018-09-01 22:37:01,514 [salt.state       :290 ][INFO    ][21720] File /etc/apache2/sites-enabled/000-default.conf is not present
2018-09-01 22:37:01,514 [salt.state       :1941][INFO    ][21720] Completed state [/etc/apache2/sites-enabled/000-default.conf] at time 22:37:01.514245 duration_in_ms=0.84
2018-09-01 22:37:01,514 [salt.state       :1770][INFO    ][21720] Running state [/etc/apache2/sites-available/wsgi_barbican_admin.conf] at time 22:37:01.514854
2018-09-01 22:37:01,515 [salt.state       :1803][INFO    ][21720] Executing state file.managed for [/etc/apache2/sites-available/wsgi_barbican_admin.conf]
2018-09-01 22:37:01,669 [salt.state       :290 ][INFO    ][21720] File /etc/apache2/sites-available/wsgi_barbican_admin.conf is in the correct state
2018-09-01 22:37:01,669 [salt.state       :1941][INFO    ][21720] Completed state [/etc/apache2/sites-available/wsgi_barbican_admin.conf] at time 22:37:01.669598 duration_in_ms=154.744
2018-09-01 22:37:01,670 [salt.state       :1770][INFO    ][21720] Running state [/etc/apache2/sites-available/wsgi_barbican.conf] at time 22:37:01.670070
2018-09-01 22:37:01,670 [salt.state       :1803][INFO    ][21720] Executing state file.managed for [/etc/apache2/sites-available/wsgi_barbican.conf]
2018-09-01 22:37:01,821 [salt.state       :290 ][INFO    ][21720] File /etc/apache2/sites-available/wsgi_barbican.conf is in the correct state
2018-09-01 22:37:01,821 [salt.state       :1941][INFO    ][21720] Completed state [/etc/apache2/sites-available/wsgi_barbican.conf] at time 22:37:01.821402 duration_in_ms=151.332
2018-09-01 22:37:01,821 [salt.state       :1770][INFO    ][21720] Running state [/etc/apache2/sites-available/keystone_wsgi.conf] at time 22:37:01.821774
2018-09-01 22:37:01,821 [salt.state       :1803][INFO    ][21720] Executing state file.managed for [/etc/apache2/sites-available/keystone_wsgi.conf]
2018-09-01 22:37:02,025 [salt.state       :290 ][INFO    ][21720] File /etc/apache2/sites-available/keystone_wsgi.conf is in the correct state
2018-09-01 22:37:02,025 [salt.state       :1941][INFO    ][21720] Completed state [/etc/apache2/sites-available/keystone_wsgi.conf] at time 22:37:02.025890 duration_in_ms=204.115
2018-09-01 22:37:02,026 [salt.state       :1770][INFO    ][21720] Running state [/etc/apache2/sites-enabled/keystone_wsgi.conf] at time 22:37:02.026313
2018-09-01 22:37:02,026 [salt.state       :1803][INFO    ][21720] Executing state file.symlink for [/etc/apache2/sites-enabled/keystone_wsgi.conf]
2018-09-01 22:37:02,028 [salt.state       :290 ][INFO    ][21720] Symlink /etc/apache2/sites-enabled/keystone_wsgi.conf is present and owned by root:root
2018-09-01 22:37:02,028 [salt.state       :1941][INFO    ][21720] Completed state [/etc/apache2/sites-enabled/keystone_wsgi.conf] at time 22:37:02.028208 duration_in_ms=1.895
2018-09-01 22:37:02,031 [salt.state       :1770][INFO    ][21720] Running state [apache2] at time 22:37:02.031143
2018-09-01 22:37:02,031 [salt.state       :1803][INFO    ][21720] Executing state service.running for [apache2]
2018-09-01 22:37:02,032 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21720] Executing command ['systemctl', 'status', 'apache2.service', '-n', '0'] in directory '/root'
2018-09-01 22:37:02,076 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21720] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-09-01 22:37:02,096 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21720] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-09-01 22:37:02,129 [salt.state       :290 ][INFO    ][21720] The service apache2 is already running
2018-09-01 22:37:02,129 [salt.state       :1941][INFO    ][21720] Completed state [apache2] at time 22:37:02.129701 duration_in_ms=98.557
2018-09-01 22:37:02,131 [salt.state       :1770][INFO    ][21720] Running state [/etc/apache2/conf-enabled/security.conf] at time 22:37:02.131868
2018-09-01 22:37:02,132 [salt.state       :1803][INFO    ][21720] Executing state file.symlink for [/etc/apache2/conf-enabled/security.conf]
2018-09-01 22:37:02,134 [salt.state       :290 ][INFO    ][21720] Symlink /etc/apache2/conf-enabled/security.conf is present and owned by root:root
2018-09-01 22:37:02,135 [salt.state       :1941][INFO    ][21720] Completed state [/etc/apache2/conf-enabled/security.conf] at time 22:37:02.135219 duration_in_ms=3.352
2018-09-01 22:37:02,135 [salt.state       :1770][INFO    ][21720] Running state [/etc/apache2/sites-enabled/keystone_wsgi] at time 22:37:02.135650
2018-09-01 22:37:02,136 [salt.state       :1803][INFO    ][21720] Executing state file.absent for [/etc/apache2/sites-enabled/keystone_wsgi]
2018-09-01 22:37:02,136 [salt.state       :290 ][INFO    ][21720] File /etc/apache2/sites-enabled/keystone_wsgi is not present
2018-09-01 22:37:02,136 [salt.state       :1941][INFO    ][21720] Completed state [/etc/apache2/sites-enabled/keystone_wsgi] at time 22:37:02.136739 duration_in_ms=1.09
2018-09-01 22:37:02,137 [salt.state       :1770][INFO    ][21720] Running state [keystone-manage db_sync && sleep 1] at time 22:37:02.137350
2018-09-01 22:37:02,137 [salt.state       :1803][INFO    ][21720] Executing state cmd.run for [keystone-manage db_sync && sleep 1]
2018-09-01 22:37:02,138 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21720] Executing command 'keystone-manage db_sync && sleep 1' in directory '/root'
2018-09-01 22:37:04,232 [salt.state       :290 ][INFO    ][21720] {'pid': 21806, 'retcode': 0, 'stderr': '', 'stdout': ''}
2018-09-01 22:37:04,234 [salt.state       :1941][INFO    ][21720] Completed state [keystone-manage db_sync && sleep 1] at time 22:37:04.234060 duration_in_ms=2096.708
2018-09-01 22:37:04,236 [salt.state       :1770][INFO    ][21720] Running state [keystone] at time 22:37:04.236482
2018-09-01 22:37:04,237 [salt.state       :1803][INFO    ][21720] Executing state service.dead for [keystone]
2018-09-01 22:37:04,239 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21720] Executing command ['systemctl', 'status', 'keystone.service', '-n', '0'] in directory '/root'
2018-09-01 22:37:04,266 [salt.state       :290 ][INFO    ][21720] The named service keystone is not available
2018-09-01 22:37:04,267 [salt.state       :1941][INFO    ][21720] Completed state [keystone] at time 22:37:04.267352 duration_in_ms=30.87
2018-09-01 22:37:04,269 [salt.state       :1770][INFO    ][21720] Running state [/root/keystonerc] at time 22:37:04.269143
2018-09-01 22:37:04,269 [salt.state       :1803][INFO    ][21720] Executing state file.managed for [/root/keystonerc]
2018-09-01 22:37:04,326 [salt.state       :290 ][INFO    ][21720] File /root/keystonerc is in the correct state
2018-09-01 22:37:04,326 [salt.state       :1941][INFO    ][21720] Completed state [/root/keystonerc] at time 22:37:04.326831 duration_in_ms=57.689
2018-09-01 22:37:04,327 [salt.state       :1770][INFO    ][21720] Running state [/root/keystonercv3] at time 22:37:04.327316
2018-09-01 22:37:04,327 [salt.state       :1803][INFO    ][21720] Executing state file.managed for [/root/keystonercv3]
2018-09-01 22:37:04,373 [salt.state       :290 ][INFO    ][21720] File /root/keystonercv3 is in the correct state
2018-09-01 22:37:04,373 [salt.state       :1941][INFO    ][21720] Completed state [/root/keystonercv3] at time 22:37:04.373606 duration_in_ms=46.29
2018-09-01 22:37:04,374 [salt.state       :1770][INFO    ][21720] Running state [/var/lib/keystone/fernet-keys] at time 22:37:04.374064
2018-09-01 22:37:04,374 [salt.state       :1803][INFO    ][21720] Executing state file.directory for [/var/lib/keystone/fernet-keys]
2018-09-01 22:37:04,376 [salt.state       :290 ][INFO    ][21720] Directory /var/lib/keystone/fernet-keys is in the correct state
Directory /var/lib/keystone/fernet-keys updated
2018-09-01 22:37:04,376 [salt.state       :1941][INFO    ][21720] Completed state [/var/lib/keystone/fernet-keys] at time 22:37:04.376180 duration_in_ms=2.116
2018-09-01 22:37:04,377 [salt.state       :1770][INFO    ][21720] Running state [keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone] at time 22:37:04.376975
2018-09-01 22:37:04,377 [salt.state       :1803][INFO    ][21720] Executing state cmd.run for [keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone]
2018-09-01 22:37:04,377 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21720] Executing command 'keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone' in directory '/root'
2018-09-01 22:37:05,245 [salt.state       :290 ][INFO    ][21720] {'pid': 21830, 'retcode': 0, 'stderr': '', 'stdout': '2018-09-01 22:37:05.180 21831 INFO keystone.common.token_utils [-] Key repository is already initialized; aborting.'}
2018-09-01 22:37:05,246 [salt.state       :1941][INFO    ][21720] Completed state [keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone] at time 22:37:05.246374 duration_in_ms=869.397
2018-09-01 22:37:05,248 [salt.state       :1770][INFO    ][21720] Running state [/var/lib/keystone/credential-keys] at time 22:37:05.248729
2018-09-01 22:37:05,249 [salt.state       :1803][INFO    ][21720] Executing state file.directory for [/var/lib/keystone/credential-keys]
2018-09-01 22:37:05,253 [salt.state       :290 ][INFO    ][21720] Directory /var/lib/keystone/credential-keys is in the correct state
Directory /var/lib/keystone/credential-keys updated
2018-09-01 22:37:05,253 [salt.state       :1941][INFO    ][21720] Completed state [/var/lib/keystone/credential-keys] at time 22:37:05.253393 duration_in_ms=4.664
2018-09-01 22:37:05,255 [salt.state       :1770][INFO    ][21720] Running state [keystone-manage credential_setup --keystone-user keystone --keystone-group keystone] at time 22:37:05.255552
2018-09-01 22:37:05,256 [salt.state       :1803][INFO    ][21720] Executing state cmd.run for [keystone-manage credential_setup --keystone-user keystone --keystone-group keystone]
2018-09-01 22:37:05,256 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21720] Executing command 'keystone-manage credential_setup --keystone-user keystone --keystone-group keystone' in directory '/root'
2018-09-01 22:37:06,106 [salt.state       :290 ][INFO    ][21720] {'pid': 21837, 'retcode': 0, 'stderr': '', 'stdout': '2018-09-01 22:37:06.035 21838 INFO keystone.common.token_utils [-] Key repository is already initialized; aborting.'}
2018-09-01 22:37:06,108 [salt.state       :1941][INFO    ][21720] Completed state [keystone-manage credential_setup --keystone-user keystone --keystone-group keystone] at time 22:37:06.107907 duration_in_ms=852.355
2018-09-01 22:37:06,108 [salt.state       :1770][INFO    ][21720] Running state [keystone-manage bootstrap --bootstrap-password opnfv_secret --bootstrap-username admin --bootstrap-project-name admin --bootstrap-role-name admin --bootstrap-service-name keystone --bootstrap-region-id RegionOne --bootstrap-internal-url http://10.167.4.37:5000] at time 22:37:06.108789
2018-09-01 22:37:06,109 [salt.state       :1803][INFO    ][21720] Executing state cmd.run for [keystone-manage bootstrap --bootstrap-password opnfv_secret --bootstrap-username admin --bootstrap-project-name admin --bootstrap-role-name admin --bootstrap-service-name keystone --bootstrap-region-id RegionOne --bootstrap-internal-url http://10.167.4.37:5000]
2018-09-01 22:37:06,111 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21720] Executing command '. /root/keystonercv3; openstack endpoint list --service identity --interface internal -f value -c URL  |grep 5000' in directory '/root'
2018-09-01 22:37:09,251 [salt.state       :290 ][INFO    ][21720] unless execution succeeded
2018-09-01 22:37:09,252 [salt.state       :1941][INFO    ][21720] Completed state [keystone-manage bootstrap --bootstrap-password opnfv_secret --bootstrap-username admin --bootstrap-project-name admin --bootstrap-role-name admin --bootstrap-service-name keystone --bootstrap-region-id RegionOne --bootstrap-internal-url http://10.167.4.37:5000] at time 22:37:09.252784 duration_in_ms=3143.995
2018-09-01 22:37:09,259 [salt.minion      :1708][INFO    ][21720] Returning information for job: 20180901223655249807
2018-09-01 22:41:24,029 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command cmd.run with jid 20180901224124025274
2018-09-01 22:41:24,053 [salt.minion      :1431][INFO    ][21861] Starting a new job with PID 21861
2018-09-01 22:41:24,065 [salt.loader.192.168.11.2.int.module.cmdmod:395 ][INFO    ][21861] Executing command '. /root/keystonercv3; openstack service list' in directory '/root'
2018-09-01 22:41:25,860 [salt.minion      :1708][INFO    ][21861] Returning information for job: 20180901224124025274
2018-09-01 22:41:26,759 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command test.ping with jid 20180901224126753478
2018-09-01 22:41:26,781 [salt.minion      :1431][INFO    ][21873] Starting a new job with PID 21873
2018-09-01 22:41:26,804 [salt.minion      :1708][INFO    ][21873] Returning information for job: 20180901224126753478
2018-09-01 22:41:26,931 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command state.sls with jid 20180901224126925004
2018-09-01 22:41:26,954 [salt.minion      :1431][INFO    ][21878] Starting a new job with PID 21878
2018-09-01 22:41:30,978 [salt.state       :905 ][INFO    ][21878] Loading fresh modules for state activity
2018-09-01 22:41:31,022 [salt.fileclient  :1215][INFO    ][21878] Fetching file from saltenv 'base', ** done ** 'glance/init.sls'
2018-09-01 22:41:31,052 [salt.fileclient  :1215][INFO    ][21878] Fetching file from saltenv 'base', ** done ** 'glance/server.sls'
2018-09-01 22:41:31,242 [salt.fileclient  :1215][INFO    ][21878] Fetching file from saltenv 'base', ** done ** 'glance/db/offline_sync.sls'
2018-09-01 22:41:31,992 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224131985116
2018-09-01 22:41:32,014 [salt.minion      :1431][INFO    ][21893] Starting a new job with PID 21893
2018-09-01 22:41:32,031 [salt.minion      :1708][INFO    ][21893] Returning information for job: 20180901224131985116
2018-09-01 22:41:32,128 [salt.state       :1770][INFO    ][21878] Running state [glance] at time 22:41:32.128899
2018-09-01 22:41:32,129 [salt.state       :1803][INFO    ][21878] Executing state pkg.installed for [glance]
2018-09-01 22:41:32,129 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21878] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:41:32,488 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21878] Executing command ['apt-cache', '-q', 'policy', 'glance'] in directory '/root'
2018-09-01 22:41:32,609 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21878] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-09-01 22:41:34,582 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21878] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 22:41:34,611 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21878] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'glance'] in directory '/root'
2018-09-01 22:41:42,140 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224142133284
2018-09-01 22:41:42,161 [salt.minion      :1431][INFO    ][22402] Starting a new job with PID 22402
2018-09-01 22:41:42,185 [salt.minion      :1708][INFO    ][22402] Returning information for job: 20180901224142133284
2018-09-01 22:41:52,293 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224152288195
2018-09-01 22:41:52,314 [salt.minion      :1431][INFO    ][22847] Starting a new job with PID 22847
2018-09-01 22:41:52,331 [salt.minion      :1708][INFO    ][22847] Returning information for job: 20180901224152288195
2018-09-01 22:42:00,448 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21878] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:42:00,488 [salt.state       :290 ][INFO    ][21878] Made the following changes:
'libblas.so.3' changed from 'absent' to '1'
'python-numpy-api10' changed from 'absent' to '1'
'python-ipaddr' changed from 'absent' to '2.1.11-2'
'python-wsme' changed from 'absent' to '0.8.0-2ubuntu2'
'glance' changed from 'absent' to '2:16.0.1-2~u16.04+mcp14'
'python2.7-numpy' changed from 'absent' to '1'
'glance-store-common' changed from 'absent' to '0.23.0-2~u16.04+mcp4'
'liblapack3' changed from 'absent' to '3.6.0-2ubuntu2'
'python-f2py' changed from 'absent' to '1'
'python2.7-glance' changed from 'absent' to '1'
'python-numpy-abi9' changed from 'absent' to '1'
'python-kazoo' changed from 'absent' to '2.2.1-1ubuntu1'
'python-semantic-version' changed from 'absent' to '2.3.1-1'
'libblas-common' changed from 'absent' to '3.6.0-2ubuntu2'
'libquadmath0' changed from 'absent' to '5.4.0-6ubuntu1~16.04.10'
'glance-common' changed from 'absent' to '2:16.0.1-2~u16.04+mcp14'
'python-glance-store' changed from 'absent' to '0.23.0-2~u16.04+mcp4'
'libgfortran3' changed from 'absent' to '5.4.0-6ubuntu1~16.04.10'
'python-numpy-dev' changed from 'absent' to '1'
'python-taskflow' changed from 'absent' to '3.1.0-1.0~u16.04+mcp1'
'liblapack.so.3' changed from 'absent' to '1'
'python-automaton' changed from 'absent' to '1.14.0-1.0~u16.04+mcp1'
'python-numpy' changed from 'absent' to '1:1.11.0-1ubuntu1'
'python-cursive' changed from 'absent' to '0.2.1-1.0~u16.04+mcp1'
'python-httplib2' changed from 'absent' to '0.9.1+dfsg-1'
'python-simplegeneric' changed from 'absent' to '0.8.1-1'
'python-glance' changed from 'absent' to '2:16.0.1-2~u16.04+mcp14'
'python-barbicanclient' changed from 'absent' to '4.6.0-1.0~u16.04+mcp1'
'python-castellan' changed from 'absent' to '0.17.0-1.0~u16.04+mcp4'
'libblas3' changed from 'absent' to '3.6.0-2ubuntu2'
'glance-api' changed from 'absent' to '2:16.0.1-2~u16.04+mcp14'
'python-networkx' changed from 'absent' to '1.11-1ubuntu1'
'glance-registry' changed from 'absent' to '2:16.0.1-2~u16.04+mcp14'

2018-09-01 22:42:00,508 [salt.state       :905 ][INFO    ][21878] Loading fresh modules for state activity
2018-09-01 22:42:00,531 [salt.state       :1941][INFO    ][21878] Completed state [glance] at time 22:42:00.531832 duration_in_ms=28402.934
2018-09-01 22:42:00,535 [salt.state       :1770][INFO    ][21878] Running state [glance-api] at time 22:42:00.535576
2018-09-01 22:42:00,535 [salt.state       :1803][INFO    ][21878] Executing state pkg.installed for [glance-api]
2018-09-01 22:42:01,040 [salt.state       :290 ][INFO    ][21878] All specified packages are already installed
2018-09-01 22:42:01,040 [salt.state       :1941][INFO    ][21878] Completed state [glance-api] at time 22:42:01.040232 duration_in_ms=504.655
2018-09-01 22:42:01,040 [salt.state       :1770][INFO    ][21878] Running state [glance-registry] at time 22:42:01.040477
2018-09-01 22:42:01,040 [salt.state       :1803][INFO    ][21878] Executing state pkg.installed for [glance-registry]
2018-09-01 22:42:01,045 [salt.state       :290 ][INFO    ][21878] All specified packages are already installed
2018-09-01 22:42:01,045 [salt.state       :1941][INFO    ][21878] Completed state [glance-registry] at time 22:42:01.045909 duration_in_ms=5.432
2018-09-01 22:42:01,046 [salt.state       :1770][INFO    ][21878] Running state [glance-common] at time 22:42:01.046071
2018-09-01 22:42:01,046 [salt.state       :1803][INFO    ][21878] Executing state pkg.installed for [glance-common]
2018-09-01 22:42:01,050 [salt.state       :290 ][INFO    ][21878] All specified packages are already installed
2018-09-01 22:42:01,051 [salt.state       :1941][INFO    ][21878] Completed state [glance-common] at time 22:42:01.050974 duration_in_ms=4.904
2018-09-01 22:42:01,051 [salt.state       :1770][INFO    ][21878] Running state [python-glance] at time 22:42:01.051136
2018-09-01 22:42:01,051 [salt.state       :1803][INFO    ][21878] Executing state pkg.installed for [python-glance]
2018-09-01 22:42:01,055 [salt.state       :290 ][INFO    ][21878] All specified packages are already installed
2018-09-01 22:42:01,056 [salt.state       :1941][INFO    ][21878] Completed state [python-glance] at time 22:42:01.056040 duration_in_ms=4.905
2018-09-01 22:42:01,056 [salt.state       :1770][INFO    ][21878] Running state [python-glance-store] at time 22:42:01.056200
2018-09-01 22:42:01,056 [salt.state       :1803][INFO    ][21878] Executing state pkg.installed for [python-glance-store]
2018-09-01 22:42:01,061 [salt.state       :290 ][INFO    ][21878] All specified packages are already installed
2018-09-01 22:42:01,061 [salt.state       :1941][INFO    ][21878] Completed state [python-glance-store] at time 22:42:01.061214 duration_in_ms=5.014
2018-09-01 22:42:01,061 [salt.state       :1770][INFO    ][21878] Running state [python-glanceclient] at time 22:42:01.061373
2018-09-01 22:42:01,061 [salt.state       :1803][INFO    ][21878] Executing state pkg.installed for [python-glanceclient]
2018-09-01 22:42:01,067 [salt.state       :290 ][INFO    ][21878] All specified packages are already installed
2018-09-01 22:42:01,067 [salt.state       :1941][INFO    ][21878] Completed state [python-glanceclient] at time 22:42:01.067214 duration_in_ms=5.841
2018-09-01 22:42:01,067 [salt.state       :1770][INFO    ][21878] Running state [gettext-base] at time 22:42:01.067396
2018-09-01 22:42:01,067 [salt.state       :1803][INFO    ][21878] Executing state pkg.installed for [gettext-base]
2018-09-01 22:42:01,072 [salt.state       :290 ][INFO    ][21878] All specified packages are already installed
2018-09-01 22:42:01,072 [salt.state       :1941][INFO    ][21878] Completed state [gettext-base] at time 22:42:01.072143 duration_in_ms=4.747
2018-09-01 22:42:01,072 [salt.state       :1770][INFO    ][21878] Running state [python-memcache] at time 22:42:01.072314
2018-09-01 22:42:01,072 [salt.state       :1803][INFO    ][21878] Executing state pkg.installed for [python-memcache]
2018-09-01 22:42:01,077 [salt.state       :290 ][INFO    ][21878] All specified packages are already installed
2018-09-01 22:42:01,077 [salt.state       :1941][INFO    ][21878] Completed state [python-memcache] at time 22:42:01.077138 duration_in_ms=4.824
2018-09-01 22:42:01,077 [salt.state       :1770][INFO    ][21878] Running state [python-pycadf] at time 22:42:01.077295
2018-09-01 22:42:01,077 [salt.state       :1803][INFO    ][21878] Executing state pkg.installed for [python-pycadf]
2018-09-01 22:42:01,081 [salt.state       :290 ][INFO    ][21878] All specified packages are already installed
2018-09-01 22:42:01,082 [salt.state       :1941][INFO    ][21878] Completed state [python-pycadf] at time 22:42:01.082112 duration_in_ms=4.817
2018-09-01 22:42:01,083 [salt.state       :1770][INFO    ][21878] Running state [/etc/glance/glance-cache.conf] at time 22:42:01.083569
2018-09-01 22:42:01,083 [salt.state       :1803][INFO    ][21878] Executing state file.managed for [/etc/glance/glance-cache.conf]
2018-09-01 22:42:01,112 [salt.fileclient  :1215][INFO    ][21878] Fetching file from saltenv 'base', ** done ** 'glance/files/queens/glance-cache.conf.Debian'
2018-09-01 22:42:01,189 [salt.fileclient  :1215][INFO    ][21878] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/queens/oslo/_policy.conf'
2018-09-01 22:42:01,205 [salt.state       :290 ][INFO    ][21878] File changed:
--- 
+++ 
@@ -1,3 +1,4 @@
+
 [DEFAULT]
 
 #
@@ -31,7 +32,8 @@
 #
 # Maximum number of image members per image.
 #
-# This limits the maximum of users an image can be shared with. Any negative
+# This limits the maximum of users an image can be shared with. Any
+# negative
 # value is interpreted as unlimited.
 #
 # Related options:
@@ -43,10 +45,12 @@
 #
 # Maximum number of properties allowed on an image.
 #
-# This enforces an upper limit on the number of additional properties an image
+# This enforces an upper limit on the number of additional properties
+# an image
 # can have. Any negative value is interpreted as unlimited.
 #
-# NOTE: This won't have any impact if additional properties are disabled. Please
+# NOTE: This won't have any impact if additional properties are
+# disabled. Please
 # refer to ``allow_additional_image_properties``.
 #
 # Related options:
@@ -103,7 +107,8 @@
 #
 # Finally, when this configuration option is set to
 # ``glance.db.simple.api``, image catalog data is stored in and read
-# from an in-memory data structure. This is primarily used for testing.
+# from an in-memory data structure. This is primarily used for
+# testing.
 #
 # Related options:
 #     * enable_v2_api
@@ -116,8 +121,8 @@
 # Glance registry service is deprecated for removal.
 #
 # More information can be found from the spec:
-# http://specs.openstack.org/openstack/glance-specs/specs/queens/approved/glance
-# /deprecate-registry.html
+# http://specs.openstack.org/openstack/glance-
+# specs/specs/queens/approved/glance/deprecate-registry.html
 #data_api = glance.db.sqlalchemy.api
 
 #
@@ -234,9 +239,10 @@
 #  (boolean value)
 # This option is deprecated for removal since Newton.
 # Its value may be silently ignored in the future.
-# Reason: This option will be removed in the Pike release or later because the
-# same functionality can be achieved with greater granularity by using policies.
-# Please see the Newton release notes for more information.
+# Reason: This option will be removed in the Pike release or later
+# because the same functionality can be achieved with greater
+# granularity by using policies. Please see the Newton release notes
+# for more information.
 #show_multiple_locations = false
 
 #
@@ -268,18 +274,25 @@
 #
 # Maximum amount of image storage per tenant.
 #
-# This enforces an upper limit on the cumulative storage consumed by all images
+# This enforces an upper limit on the cumulative storage consumed by
+# all images
 # of a tenant across all stores. This is a per-tenant limit.
 #
-# The default unit for this configuration option is Bytes. However, storage
-# units can be specified using case-sensitive literals ``B``, ``KB``, ``MB``,
-# ``GB`` and ``TB`` representing Bytes, KiloBytes, MegaBytes, GigaBytes and
-# TeraBytes respectively. Note that there should not be any space between the
-# value and unit. Value ``0`` signifies no quota enforcement. Negative values
+# The default unit for this configuration option is Bytes. However,
+# storage
+# units can be specified using case-sensitive literals ``B``, ``KB``,
+# ``MB``,
+# ``GB`` and ``TB`` representing Bytes, KiloBytes, MegaBytes,
+# GigaBytes and
+# TeraBytes respectively. Note that there should not be any space
+# between the
+# value and unit. Value ``0`` signifies no quota enforcement. Negative
+# values
 # are invalid and result in errors.
 #
 # Possible values:
-#     * A string that is a valid concatenation of a non-negative integer
+#     * A string that is a valid concatenation of a non-negative
+# integer
 #       representing the storage value and an optional string literal
 #       representing storage units as mentioned above.
 #
@@ -406,8 +419,8 @@
 # Glance registry service is deprecated for removal.
 #
 # More information can be found from the spec:
-# http://specs.openstack.org/openstack/glance-specs/specs/queens/approved/glance
-# /deprecate-registry.html
+# http://specs.openstack.org/openstack/glance-
+# specs/specs/queens/approved/glance/deprecate-registry.html
 #enable_v2_registry = true
 
 #
@@ -551,12 +564,16 @@
 #enabled_import_methods = glance-direct,web-download
 
 #
-# The relative path to sqlite file database that will be used for image cache
+# The relative path to sqlite file database that will be used for
+# image cache
 # management.
 #
-# This is a relative path to the sqlite file database that tracks the age and
-# usage statistics of image cache. The path is relative to image cache base
-# directory, specified by the configuration option ``image_cache_dir``.
+# This is a relative path to the sqlite file database that tracks the
+# age and
+# usage statistics of image cache. The path is relative to image cache
+# base
+# directory, specified by the configuration option
+# ``image_cache_dir``.
 #
 # This is a lightweight database with just one table.
 #
@@ -572,23 +589,33 @@
 #
 # The driver to use for image cache management.
 #
-# This configuration option provides the flexibility to choose between the
-# different image-cache drivers available. An image-cache driver is responsible
-# for providing the essential functions of image-cache like write images to/read
-# images from cache, track age and usage of cached images, provide a list of
-# cached images, fetch size of the cache, queue images for caching and clean up
+# This configuration option provides the flexibility to choose between
+# the
+# different image-cache drivers available. An image-cache driver is
+# responsible
+# for providing the essential functions of image-cache like write
+# images to/read
+# images from cache, track age and usage of cached images, provide a
+# list of
+# cached images, fetch size of the cache, queue images for caching and
+# clean up
 # the cache, etc.
 #
 # The essential functions of a driver are defined in the base class
-# ``glance.image_cache.drivers.base.Driver``. All image-cache drivers (existing
-# and prospective) must implement this interface. Currently available drivers
-# are ``sqlite`` and ``xattr``. These drivers primarily differ in the way they
+# ``glance.image_cache.drivers.base.Driver``. All image-cache drivers
+# (existing
+# and prospective) must implement this interface. Currently available
+# drivers
+# are ``sqlite`` and ``xattr``. These drivers primarily differ in the
+# way they
 # store the information about cached images:
-#     * The ``sqlite`` driver uses a sqlite database (which sits on every glance
+#     * The ``sqlite`` driver uses a sqlite database (which sits on
+# every glance
 #     node locally) to track the usage of cached images.
-#     * The ``xattr`` driver uses the extended attributes of files to store this
-#     information. It also requires a filesystem that sets ``atime`` on the
-# files
+#     * The ``xattr`` driver uses the extended attributes of files to
+# store this
+#     information. It also requires a filesystem that sets ``atime``
+# on the files
 #     when accessed.
 #
 # Possible values:
@@ -605,21 +632,32 @@
 #image_cache_driver = sqlite
 
 #
-# The upper limit on cache size, in bytes, after which the cache-pruner cleans
+# The upper limit on cache size, in bytes, after which the cache-
+# pruner cleans
 # up the image cache.
 #
-# NOTE: This is just a threshold for cache-pruner to act upon. It is NOT a
-# hard limit beyond which the image cache would never grow. In fact, depending
-# on how often the cache-pruner runs and how quickly the cache fills, the image
-# cache can far exceed the size specified here very easily. Hence, care must be
-# taken to appropriately schedule the cache-pruner and in setting this limit.
-#
-# Glance caches an image when it is downloaded. Consequently, the size of the
-# image cache grows over time as the number of downloads increases. To keep the
+# NOTE: This is just a threshold for cache-pruner to act upon. It is
+# NOT a
+# hard limit beyond which the image cache would never grow. In fact,
+# depending
+# on how often the cache-pruner runs and how quickly the cache fills,
+# the image
+# cache can far exceed the size specified here very easily. Hence,
+# care must be
+# taken to appropriately schedule the cache-pruner and in setting this
+# limit.
+#
+# Glance caches an image when it is downloaded. Consequently, the size
+# of the
+# image cache grows over time as the number of downloads increases. To
+# keep the
 # cache size from becoming unmanageable, it is recommended to run the
-# cache-pruner as a periodic task. When the cache pruner is kicked off, it
-# compares the current size of image cache and triggers a cleanup if the image
-# cache grew beyond the size specified here. After the cleanup, the size of
+# cache-pruner as a periodic task. When the cache pruner is kicked
+# off, it
+# compares the current size of image cache and triggers a cleanup if
+# the image
+# cache grew beyond the size specified here. After the cleanup, the
+# size of
 # cache is less than or equal to size specified here.
 #
 # Possible values:
@@ -632,19 +670,36 @@
 # Minimum value: 0
 #image_cache_max_size = 10737418240
 
-#
-# The amount of time, in seconds, an incomplete image remains in the cache.
-#
-# Incomplete images are images for which download is in progress. Please see the
-# description of configuration option ``image_cache_dir`` for more detail.
-# Sometimes, due to various reasons, it is possible the download may hang and
-# the incompletely downloaded image remains in the ``incomplete`` directory.
-# This configuration option sets a time limit on how long the incomplete images
-# should remain in the ``incomplete`` directory before they are cleaned up.
-# Once an incomplete image spends more time than is specified here, it'll be
+image_cache_max_size = 10737418240
+image_cache_stall_time = 86400
+image_cache_dir = /var/lib/glance/image-cache/
+
+
+os_region_name = RegionOne
+
+
+#
+# The amount of time, in seconds, an incomplete image remains in the
+# cache.
+#
+# Incomplete images are images for which download is in progress.
+# Please see the
+# description of configuration option ``image_cache_dir`` for more
+# detail.
+# Sometimes, due to various reasons, it is possible the download may
+# hang and
+# the incompletely downloaded image remains in the ``incomplete``
+# directory.
+# This configuration option sets a time limit on how long the
+# incomplete images
+# should remain in the ``incomplete`` directory before they are
+# cleaned up.
+# Once an incomplete image spends more time than is specified here,
+# it'll be
 # removed by cache-cleaner on its next run.
 #
-# It is recommended to run cache-cleaner as a periodic task on the Glance API
+# It is recommended to run cache-cleaner as a periodic task on the
+# Glance API
 # nodes to keep the incomplete images from occupying disk space.
 #
 # Possible values:
@@ -660,25 +715,39 @@
 #
 # Base directory for image cache.
 #
-# This is the location where image data is cached and served out of. All cached
-# images are stored directly under this directory. This directory also contains
-# three subdirectories, namely, ``incomplete``, ``invalid`` and ``queue``.
-#
-# The ``incomplete`` subdirectory is the staging area for downloading images. An
-# image is first downloaded to this directory. When the image download is
-# successful it is moved to the base directory. However, if the download fails,
-# the partially downloaded image file is moved to the ``invalid`` subdirectory.
-#
-# The ``queue``subdirectory is used for queuing images for download. This is
-# used primarily by the cache-prefetcher, which can be scheduled as a periodic
-# task like cache-pruner and cache-cleaner, to cache images ahead of their
-# usage.
-# Upon receiving the request to cache an image, Glance touches a file in the
-# ``queue`` directory with the image id as the file name. The cache-prefetcher,
+# This is the location where image data is cached and served out of.
+# All cached
+# images are stored directly under this directory. This directory also
+# contains
+# three subdirectories, namely, ``incomplete``, ``invalid`` and
+# ``queue``.
+#
+# The ``incomplete`` subdirectory is the staging area for downloading
+# images. An
+# image is first downloaded to this directory. When the image download
+# is
+# successful it is moved to the base directory. However, if the
+# download fails,
+# the partially downloaded image file is moved to the ``invalid``
+# subdirectory.
+#
+# The ``queue``subdirectory is used for queuing images for download.
+# This is
+# used primarily by the cache-prefetcher, which can be scheduled as a
+# periodic
+# task like cache-pruner and cache-cleaner, to cache images ahead of
+# their usage.
+# Upon receiving the request to cache an image, Glance touches a file
+# in the
+# ``queue`` directory with the image id as the file name. The cache-
+# prefetcher,
 # when running, polls for the files in ``queue`` directory and starts
-# downloading them in the order they were created. When the download is
-# successful, the zero-sized file is deleted from the ``queue`` directory.
-# If the download fails, the zero-sized file remains and it'll be retried the
+# downloading them in the order they were created. When the download
+# is
+# successful, the zero-sized file is deleted from the ``queue``
+# directory.
+# If the download fails, the zero-sized file remains and it'll be
+# retried the
 # next time cache-prefetcher runs.
 #
 # Possible values:
@@ -706,9 +775,9 @@
 # Glance registry service is deprecated for removal.
 #
 # More information can be found from the spec:
-# http://specs.openstack.org/openstack/glance-specs/specs/queens/approved/glance
-# /deprecate-registry.html
-#registry_host = 0.0.0.0
+# http://specs.openstack.org/openstack/glance-
+# specs/specs/queens/approved/glance/deprecate-registry.html
+#registry_host = 10.167.4.35
 
 # DEPRECATED:
 # Port the registry server is listening on.
@@ -728,8 +797,8 @@
 # Glance registry service is deprecated for removal.
 #
 # More information can be found from the spec:
-# http://specs.openstack.org/openstack/glance-specs/specs/queens/approved/glance
-# /deprecate-registry.html
+# http://specs.openstack.org/openstack/glance-
+# specs/specs/queens/approved/glance/deprecate-registry.html
 #registry_port = 9191
 
 # DEPRECATED:
@@ -765,8 +834,8 @@
 # Glance registry service is deprecated for removal.
 #
 # More information can be found from the spec:
-# http://specs.openstack.org/openstack/glance-specs/specs/queens/approved/glance
-# /deprecate-registry.html
+# http://specs.openstack.org/openstack/glance-
+# specs/specs/queens/approved/glance/deprecate-registry.html
 #registry_client_protocol = http
 
 # DEPRECATED:
@@ -794,8 +863,8 @@
 # Glance registry service is deprecated for removal.
 #
 # More information can be found from the spec:
-# http://specs.openstack.org/openstack/glance-specs/specs/queens/approved/glance
-# /deprecate-registry.html
+# http://specs.openstack.org/openstack/glance-
+# specs/specs/queens/approved/glance/deprecate-registry.html
 #registry_client_key_file = /etc/ssl/key/key-file.pem
 
 # DEPRECATED:
@@ -824,8 +893,8 @@
 # Glance registry service is deprecated for removal.
 #
 # More information can be found from the spec:
-# http://specs.openstack.org/openstack/glance-specs/specs/queens/approved/glance
-# /deprecate-registry.html
+# http://specs.openstack.org/openstack/glance-
+# specs/specs/queens/approved/glance/deprecate-registry.html
 #registry_client_cert_file = /etc/ssl/certs/file.crt
 
 # DEPRECATED:
@@ -856,8 +925,8 @@
 # Glance registry service is deprecated for removal.
 #
 # More information can be found from the spec:
-# http://specs.openstack.org/openstack/glance-specs/specs/queens/approved/glance
-# /deprecate-registry.html
+# http://specs.openstack.org/openstack/glance-
+# specs/specs/queens/approved/glance/deprecate-registry.html
 #registry_client_ca_file = /etc/ssl/cafile/file.ca
 
 # DEPRECATED:
@@ -888,8 +957,8 @@
 # Glance registry service is deprecated for removal.
 #
 # More information can be found from the spec:
-# http://specs.openstack.org/openstack/glance-specs/specs/queens/approved/glance
-# /deprecate-registry.html
+# http://specs.openstack.org/openstack/glance-
+# specs/specs/queens/approved/glance/deprecate-registry.html
 #registry_client_insecure = false
 
 # DEPRECATED:
@@ -916,196 +985,202 @@
 # Glance registry service is deprecated for removal.
 #
 # More information can be found from the spec:
-# http://specs.openstack.org/openstack/glance-specs/specs/queens/approved/glance
-# /deprecate-registry.html
+# http://specs.openstack.org/openstack/glance-
+# specs/specs/queens/approved/glance/deprecate-registry.html
 #registry_client_timeout = 600
 
-# DEPRECATED: Whether to pass through the user token when making requests to the
-# registry. To prevent failures with token expiration during big files upload,
-# it is recommended to set this parameter to False.If "use_user_token" is not in
-# effect, then admin credentials can be specified. (boolean value)
+# DEPRECATED: Whether to pass through the user token when making
+# requests to the registry. To prevent failures with token expiration
+# during big files upload, it is recommended to set this parameter to
+# False.If "use_user_token" is not in effect, then admin credentials
+# can be specified. (boolean value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
-# Reason: This option was considered harmful and has been deprecated in M
-# release. It will be removed in O release. For more information read OSSN-0060.
-# Related functionality with uploading big images has been implemented with
-# Keystone trusts support.
+# Reason: This option was considered harmful and has been deprecated
+# in M release. It will be removed in O release. For more information
+# read OSSN-0060. Related functionality with uploading big images has
+# been implemented with Keystone trusts support.
 #use_user_token = true
 
-# DEPRECATED: The administrators user name. If "use_user_token" is not in
-# effect, then admin credentials can be specified. (string value)
+# DEPRECATED: The administrators user name. If "use_user_token" is not
+# in effect, then admin credentials can be specified. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
-# Reason: This option was considered harmful and has been deprecated in M
-# release. It will be removed in O release. For more information read OSSN-0060.
-# Related functionality with uploading big images has been implemented with
-# Keystone trusts support.
+# Reason: This option was considered harmful and has been deprecated
+# in M release. It will be removed in O release. For more information
+# read OSSN-0060. Related functionality with uploading big images has
+# been implemented with Keystone trusts support.
 #admin_user = <None>
 
-# DEPRECATED: The administrators password. If "use_user_token" is not in effect,
-# then admin credentials can be specified. (string value)
+# DEPRECATED: The administrators password. If "use_user_token" is not
+# in effect, then admin credentials can be specified. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
-# Reason: This option was considered harmful and has been deprecated in M
-# release. It will be removed in O release. For more information read OSSN-0060.
-# Related functionality with uploading big images has been implemented with
-# Keystone trusts support.
+# Reason: This option was considered harmful and has been deprecated
+# in M release. It will be removed in O release. For more information
+# read OSSN-0060. Related functionality with uploading big images has
+# been implemented with Keystone trusts support.
 #admin_password = <None>
 
-# DEPRECATED: The tenant name of the administrative user. If "use_user_token" is
-# not in effect, then admin tenant name can be specified. (string value)
+# DEPRECATED: The tenant name of the administrative user. If
+# "use_user_token" is not in effect, then admin tenant name can be
+# specified. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
-# Reason: This option was considered harmful and has been deprecated in M
-# release. It will be removed in O release. For more information read OSSN-0060.
-# Related functionality with uploading big images has been implemented with
-# Keystone trusts support.
+# Reason: This option was considered harmful and has been deprecated
+# in M release. It will be removed in O release. For more information
+# read OSSN-0060. Related functionality with uploading big images has
+# been implemented with Keystone trusts support.
 #admin_tenant_name = <None>
 
-# DEPRECATED: The URL to the keystone service. If "use_user_token" is not in
-# effect and using keystone auth, then URL of keystone can be specified. (string
-# value)
+# DEPRECATED: The URL to the keystone service. If "use_user_token" is
+# not in effect and using keystone auth, then URL of keystone can be
+# specified. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
-# Reason: This option was considered harmful and has been deprecated in M
-# release. It will be removed in O release. For more information read OSSN-0060.
-# Related functionality with uploading big images has been implemented with
-# Keystone trusts support.
+# Reason: This option was considered harmful and has been deprecated
+# in M release. It will be removed in O release. For more information
+# read OSSN-0060. Related functionality with uploading big images has
+# been implemented with Keystone trusts support.
 #auth_url = <None>
 
-# DEPRECATED: The strategy to use for authentication. If "use_user_token" is not
-# in effect, then auth strategy can be specified. (string value)
+# DEPRECATED: The strategy to use for authentication. If
+# "use_user_token" is not in effect, then auth strategy can be
+# specified. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
-# Reason: This option was considered harmful and has been deprecated in M
-# release. It will be removed in O release. For more information read OSSN-0060.
-# Related functionality with uploading big images has been implemented with
-# Keystone trusts support.
+# Reason: This option was considered harmful and has been deprecated
+# in M release. It will be removed in O release. For more information
+# read OSSN-0060. Related functionality with uploading big images has
+# been implemented with Keystone trusts support.
 #auth_strategy = noauth
 
-# DEPRECATED: The region for the authentication service. If "use_user_token" is
-# not in effect and using keystone auth, then region name can be specified.
-# (string value)
+# DEPRECATED: The region for the authentication service. If
+# "use_user_token" is not in effect and using keystone auth, then
+# region name can be specified. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
-# Reason: This option was considered harmful and has been deprecated in M
-# release. It will be removed in O release. For more information read OSSN-0060.
-# Related functionality with uploading big images has been implemented with
-# Keystone trusts support.
+# Reason: This option was considered harmful and has been deprecated
+# in M release. It will be removed in O release. For more information
+# read OSSN-0060. Related functionality with uploading big images has
+# been implemented with Keystone trusts support.
 #auth_region = <None>
-
 #
 # From oslo.log
 #
 
-# If set to true, the logging level will be set to DEBUG instead of the default
-# INFO level. (boolean value)
+# If set to true, the logging level will be set to DEBUG instead of
+# the default INFO level. (boolean value)
 # Note: This option can be changed without restarting.
 #debug = false
 
-# The name of a logging configuration file. This file is appended to any
-# existing logging configuration files. For details about logging configuration
-# files, see the Python logging module documentation. Note that when logging
-# configuration files are used then all logging configuration is set in the
-# configuration file and other logging configuration options are ignored (for
-# example, logging_context_format_string). (string value)
+# The name of a logging configuration file. This file is appended to
+# any existing logging configuration files. For details about logging
+# configuration files, see the Python logging module documentation.
+# Note that when logging configuration files are used then all logging
+# configuration is set in the configuration file and other logging
+# configuration options are ignored (for example,
+# logging_context_format_string). (string value)
 # Note: This option can be changed without restarting.
 # Deprecated group/name - [DEFAULT]/log_config
-#log_config_append = <None>
 
 # Defines the format string for %%(asctime)s in log records. Default:
-# %(default)s . This option is ignored if log_config_append is set. (string
-# value)
+# %(default)s . This option is ignored if log_config_append is set.
+# (string value)
 #log_date_format = %Y-%m-%d %H:%M:%S
 
-# (Optional) Name of log file to send logging output to. If no default is set,
-# logging will go to stderr as defined by use_stderr. This option is ignored if
-# log_config_append is set. (string value)
+# (Optional) Name of log file to send logging output to. If no default
+# is set, logging will go to stderr as defined by use_stderr. This
+# option is ignored if log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logfile
 #log_file = <None>
-
-# (Optional) The base directory used for relative log_file  paths. This option
-# is ignored if log_config_append is set. (string value)
+log_file = /var/log/glance/image-cache.log
+
+# (Optional) The base directory used for relative log_file  paths.
+# This option is ignored if log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logdir
 #log_dir = <None>
 
-# Uses logging handler designed to watch file system. When log file is moved or
-# removed this handler will open a new log file with specified path
-# instantaneously. It makes sense only if log_file option is specified and Linux
-# platform is used. This option is ignored if log_config_append is set. (boolean
-# value)
+# Uses logging handler designed to watch file system. When log file is
+# moved or removed this handler will open a new log file with
+# specified path instantaneously. It makes sense only if log_file
+# option is specified and Linux platform is used. This option is
+# ignored if log_config_append is set. (boolean value)
 #watch_log_file = false
 
-# Use syslog for logging. Existing syslog format is DEPRECATED and will be
-# changed later to honor RFC5424. This option is ignored if log_config_append is
-# set. (boolean value)
+# Use syslog for logging. Existing syslog format is DEPRECATED and
+# will be changed later to honor RFC5424. This option is ignored if
+# log_config_append is set. (boolean value)
 #use_syslog = false
 
-# Enable journald for logging. If running in a systemd environment you may wish
-# to enable journal support. Doing so will use the journal native protocol which
-# includes structured metadata in addition to log messages.This option is
-# ignored if log_config_append is set. (boolean value)
+# Enable journald for logging. If running in a systemd environment you
+# may wish to enable journal support. Doing so will use the journal
+# native protocol which includes structured metadata in addition to
+# log messages.This option is ignored if log_config_append is set.
+# (boolean value)
 #use_journal = false
 
 # Syslog facility to receive log lines. This option is ignored if
 # log_config_append is set. (string value)
 #syslog_log_facility = LOG_USER
 
-# Use JSON formatting for logging. This option is ignored if log_config_append
-# is set. (boolean value)
+# Use JSON formatting for logging. This option is ignored if
+# log_config_append is set. (boolean value)
 #use_json = false
 
-# Log output to standard error. This option is ignored if log_config_append is
-# set. (boolean value)
+# Log output to standard error. This option is ignored if
+# log_config_append is set. (boolean value)
 #use_stderr = false
 
 # Format string to use for log messages with context. (string value)
 #logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
 
-# Format string to use for log messages when context is undefined. (string
+# Format string to use for log messages when context is undefined.
+# (string value)
+#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
+
+# Additional data to append to log message when logging level for the
+# message is DEBUG. (string value)
+#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
+
+# Prefix each line of exception output with this format. (string
 # value)
-#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
-
-# Additional data to append to log message when logging level for the message is
-# DEBUG. (string value)
-#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
-
-# Prefix each line of exception output with this format. (string value)
 #logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
 
 # Defines the format string for %(user_identity)s that is used in
 # logging_context_format_string. (string value)
 #logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
 
-# List of package logging levels in logger=LEVEL pairs. This option is ignored
-# if log_config_append is set. (list value)
+# List of package logging levels in logger=LEVEL pairs. This option is
+# ignored if log_config_append is set. (list value)
 #default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
 
 # Enables or disables publication of error events. (boolean value)
 #publish_errors = false
 
-# The format for an instance that is passed with the log message. (string value)
+# The format for an instance that is passed with the log message.
+# (string value)
 #instance_format = "[instance: %(uuid)s] "
 
-# The format for an instance UUID that is passed with the log message. (string
-# value)
+# The format for an instance UUID that is passed with the log message.
+# (string value)
 #instance_uuid_format = "[instance: %(uuid)s] "
 
 # Interval, number of seconds, of log rate limiting. (integer value)
 #rate_limit_interval = 0
 
-# Maximum number of logged messages per rate_limit_interval. (integer value)
+# Maximum number of logged messages per rate_limit_interval. (integer
+# value)
 #rate_limit_burst = 0
 
-# Log level name used by rate limiting: CRITICAL, ERROR, INFO, WARNING, DEBUG or
-# empty string. Logs with level greater or equal to rate_limit_except_level are
-# not filtered. An empty string means that all levels are filtered. (string
-# value)
+# Log level name used by rate limiting: CRITICAL, ERROR, INFO,
+# WARNING, DEBUG or empty string. Logs with level greater or equal to
+# rate_limit_except_level are not filtered. An empty string means that
+# all levels are filtered. (string value)
 #rate_limit_except_level = CRITICAL
 
 # Enables or disables fatal status of deprecations. (boolean value)
 #fatal_deprecations = false
-
 
 [glance_store]
 
@@ -1196,8 +1271,8 @@
 # integer value greater than zero to enable this option.
 #
 # NOTE: For more information on store capabilities and their updates,
-# please visit: https://specs.openstack.org/openstack/glance-specs/specs/kilo
-# /store-capabilities.html
+# please visit: https://specs.openstack.org/openstack/glance-
+# specs/specs/kilo/store-capabilities.html
 #
 # For more information on setting up a particular store in your
 # deployment and help with the usage of this feature, please contact
@@ -1221,16 +1296,20 @@
 # When the ``cinder_endpoint_template`` is not set and any of
 # ``cinder_store_auth_address``, ``cinder_store_user_name``,
 # ``cinder_store_project_name``, ``cinder_store_password`` is not set,
-# cinder store uses this information to lookup cinder endpoint from the service
-# catalog in the current context. ``cinder_os_region_name``, if set, is taken
+# cinder store uses this information to lookup cinder endpoint from
+# the service
+# catalog in the current context. ``cinder_os_region_name``, if set,
+# is taken
 # into consideration to fetch the appropriate endpoint.
 #
-# The service catalog can be listed by the ``openstack catalog list`` command.
+# The service catalog can be listed by the ``openstack catalog list``
+# command.
 #
 # Possible values:
 #     * A string of of the following form:
 #       ``<service_type>:<service_name>:<interface>``
-#       At least ``service_type`` and ``interface`` should be specified.
+#       At least ``service_type`` and ``interface`` should be
+# specified.
 #       ``service_name`` can be omitted.
 #
 # Related options:
@@ -1247,18 +1326,22 @@
 #
 # Override service catalog lookup with template for cinder endpoint.
 #
-# When this option is set, this value is used to generate cinder endpoint,
+# When this option is set, this value is used to generate cinder
+# endpoint,
 # instead of looking up from the service catalog.
 # This value is ignored if ``cinder_store_auth_address``,
 # ``cinder_store_user_name``, ``cinder_store_project_name``, and
 # ``cinder_store_password`` are specified.
 #
-# If this configuration option is set, ``cinder_catalog_info`` will be ignored.
-#
-# Possible values:
-#     * URL template string for cinder endpoint, where ``%%(tenant)s`` is
+# If this configuration option is set, ``cinder_catalog_info`` will be
+# ignored.
+#
+# Possible values:
+#     * URL template string for cinder endpoint, where ``%%(tenant)s``
+# is
 #       replaced with the current tenant (project) name.
-#       For example: ``http://cinder.openstack.example.org/v2/%%(tenant)s``
+#       For example:
+# ``http://cinder.openstack.example.org/v2/%%(tenant)s``
 #
 # Related options:
 #     * cinder_store_auth_address
@@ -1273,10 +1356,14 @@
 #
 # Region name to lookup cinder service from the service catalog.
 #
-# This is used only when ``cinder_catalog_info`` is used for determining the
-# endpoint. If set, the lookup for cinder endpoint by this node is filtered to
-# the specified region. It is useful when multiple regions are listed in the
-# catalog. If this is not set, the endpoint is looked up from every region.
+# This is used only when ``cinder_catalog_info`` is used for
+# determining the
+# endpoint. If set, the lookup for cinder endpoint by this node is
+# filtered to
+# the specified region. It is useful when multiple regions are listed
+# in the
+# catalog. If this is not set, the endpoint is looked up from every
+# region.
 #
 # Possible values:
 #     * A string that is a valid region name.
@@ -1292,9 +1379,10 @@
 # Location of a CA certificates file used for cinder client requests.
 #
 # The specified CA certificates file, if set, is used to verify cinder
-# connections via HTTPS endpoint. If the endpoint is HTTP, this value is
-# ignored.
-# ``cinder_api_insecure`` must be set to ``True`` to enable the verification.
+# connections via HTTPS endpoint. If the endpoint is HTTP, this value
+# is ignored.
+# ``cinder_api_insecure`` must be set to ``True`` to enable the
+# verification.
 #
 # Possible values:
 #     * Path to a ca certificates file
@@ -1308,7 +1396,8 @@
 #
 # Number of cinderclient retries on failed http calls.
 #
-# When a call failed by any errors, cinderclient will retry the call up to the
+# When a call failed by any errors, cinderclient will retry the call
+# up to the
 # specified times after sleeping a few seconds.
 #
 # Possible values:
@@ -1325,11 +1414,16 @@
 # Time period, in seconds, to wait for a cinder volume transition to
 # complete.
 #
-# When the cinder volume is created, deleted, or attached to the glance node to
-# read/write the volume data, the volume's state is changed. For example, the
-# newly created volume status changes from ``creating`` to ``available`` after
-# the creation process is completed. This specifies the maximum time to wait for
-# the status change. If a timeout occurs while waiting, or the status is changed
+# When the cinder volume is created, deleted, or attached to the
+# glance node to
+# read/write the volume data, the volume's state is changed. For
+# example, the
+# newly created volume status changes from ``creating`` to
+# ``available`` after
+# the creation process is completed. This specifies the maximum time
+# to wait for
+# the status change. If a timeout occurs while waiting, or the status
+# is changed
 # to an unexpected value (e.g. `error``), the image creation fails.
 #
 # Possible values:
@@ -1345,8 +1439,10 @@
 #
 # Allow to perform insecure SSL requests to cinder.
 #
-# If this option is set to True, HTTPS endpoint connection is verified using the
-# CA certificates file specified by ``cinder_ca_certificates_file`` option.
+# If this option is set to True, HTTPS endpoint connection is verified
+# using the
+# CA certificates file specified by ``cinder_ca_certificates_file``
+# option.
 #
 # Possible values:
 #     * True
@@ -1361,15 +1457,23 @@
 #
 # The address where the cinder authentication service is listening.
 #
-# When all of ``cinder_store_auth_address``, ``cinder_store_user_name``,
-# ``cinder_store_project_name``, and ``cinder_store_password`` options are
-# specified, the specified values are always used for the authentication.
-# This is useful to hide the image volumes from users by storing them in a
-# project/tenant specific to the image service. It also enables users to share
-# the image volume among other projects under the control of glance's ACL.
-#
-# If either of these options are not set, the cinder endpoint is looked up
-# from the service catalog, and current context's user and project are used.
+# When all of ``cinder_store_auth_address``,
+# ``cinder_store_user_name``,
+# ``cinder_store_project_name``, and ``cinder_store_password`` options
+# are
+# specified, the specified values are always used for the
+# authentication.
+# This is useful to hide the image volumes from users by storing them
+# in a
+# project/tenant specific to the image service. It also enables users
+# to share
+# the image volume among other projects under the control of glance's
+# ACL.
+#
+# If either of these options are not set, the cinder endpoint is
+# looked up
+# from the service catalog, and current context's user and project are
+# used.
 #
 # Possible values:
 #     * A valid authentication service address, for example:
@@ -1386,7 +1490,8 @@
 #
 # User name to authenticate against cinder.
 #
-# This must be used with all the following related options. If any of these are
+# This must be used with all the following related options. If any of
+# these are
 # not specified, the user of the current context is used.
 #
 # Possible values:
@@ -1403,11 +1508,13 @@
 #
 # Password for the user authenticating against cinder.
 #
-# This must be used with all the following related options. If any of these are
+# This must be used with all the following related options. If any of
+# these are
 # not specified, the user of the current context is used.
 #
 # Possible values:
-#     * A valid password for the user specified by ``cinder_store_user_name``
+#     * A valid password for the user specified by
+# ``cinder_store_user_name``
 #
 # Related options:
 #     * cinder_store_auth_address
@@ -1420,10 +1527,12 @@
 #
 # Project name where the image volume is stored in cinder.
 #
-# If this configuration option is not set, the project in current context is
+# If this configuration option is not set, the project in current
+# context is
 # used.
 #
-# This must be used with all the following related options. If any of these are
+# This must be used with all the following related options. If any of
+# these are
 # not specified, the project of the current context is used.
 #
 # Possible values:
@@ -1438,11 +1547,15 @@
 #cinder_store_project_name = <None>
 
 #
-# Path to the rootwrap configuration file to use for running commands as root.
-#
-# The cinder store requires root privileges to operate the image volumes (for
-# connecting to iSCSI/FC volumes and reading/writing the volume data, etc.).
-# The configuration file should allow the required commands by cinder store and
+# Path to the rootwrap configuration file to use for running commands
+# as root.
+#
+# The cinder store requires root privileges to operate the image
+# volumes (for
+# connecting to iSCSI/FC volumes and reading/writing the volume data,
+# etc.).
+# The configuration file should allow the required commands by cinder
+# store and
 # os-brick library.
 #
 # Possible values:
@@ -1457,11 +1570,14 @@
 #
 # Volume type that will be used for volume creation in cinder.
 #
-# Some cinder backends can have several volume types to optimize storage usage.
-# Adding this option allows an operator to choose a specific volume type
+# Some cinder backends can have several volume types to optimize
+# storage usage.
+# Adding this option allows an operator to choose a specific volume
+# type
 # in cinder that can be optimized for images.
 #
-# If this is not set, then the default volume type specified in the cinder
+# If this is not set, then the default volume type specified in the
+# cinder
 # configuration will be used for volume creation.
 #
 # Possible values:
@@ -1557,8 +1673,10 @@
 #
 # File access permissions for the image files.
 #
-# Set the intended file access permissions for image data. This provides
-# a way to enable other services, e.g. Nova, to consume images directly
+# Set the intended file access permissions for image data. This
+# provides
+# a way to enable other services, e.g. Nova, to consume images
+# directly
 # from the filesystem store. The users running the services that are
 # intended to be given access to could be made a member of the group
 # that owns the files created. Assigning a value less then or equal to
@@ -1584,8 +1702,10 @@
 # Path to the CA bundle file.
 #
 # This configuration option enables the operator to use a custom
-# Certificate Authority file to verify the remote server certificate. If
-# this option is set, the ``https_insecure`` option will be ignored and
+# Certificate Authority file to verify the remote server certificate.
+# If
+# this option is set, the ``https_insecure`` option will be ignored
+# and
 # the CA file specified will be used to authenticate the server
 # certificate and establish a secure connection to the server.
 #
@@ -1603,8 +1723,10 @@
 #
 # This configuration option takes in a boolean value to determine
 # whether or not to verify the remote server certificate. If set to
-# True, the remote server certificate is not verified. If the option is
-# set to False, then the default CA truststore is used for verification.
+# True, the remote server certificate is not verified. If the option
+# is
+# set to False, then the default CA truststore is used for
+# verification.
 #
 # This option is ignored if ``https_ca_certificates_file`` is set.
 # The remote server certificate will then be verified using the file
@@ -1627,12 +1749,14 @@
 # This configuration option specifies the http/https proxy information
 # that should be used to connect to the remote server. The proxy
 # information should be a key value pair of the scheme and proxy, for
-# example, http:10.0.0.1:3128. You can also specify proxies for multiple
+# example, http:10.0.0.1:3128. You can also specify proxies for
+# multiple
 # schemes by separating the key value pairs with a comma, for example,
 # http:10.0.0.1:3128, https:10.0.0.1:1080.
 #
 # Possible values:
-#     * A comma separated list of scheme:proxy pairs as described above
+#     * A comma separated list of scheme:proxy pairs as described
+# above
 #
 # Related options:
 #     * None
@@ -1644,11 +1768,13 @@
 # Size, in megabytes, to chunk RADOS images into.
 #
 # Provide an integer value representing the size in megabytes to chunk
-# Glance images into. The default chunk size is 8 megabytes. For optimal
+# Glance images into. The default chunk size is 8 megabytes. For
+# optimal
 # performance, the value should be a power of two.
 #
 # When Ceph's RBD object storage system is used as the storage backend
-# for storing Glance images, the images are chunked into objects of the
+# for storing Glance images, the images are chunked into objects of
+# the
 # size set using this option. These chunked objects are then stored
 # across the distributed block data store to use for Glance.
 #
@@ -1665,8 +1791,10 @@
 #
 # RADOS pool in which images are stored.
 #
-# When RBD is used as the storage backend for storing Glance images, the
-# images are stored by means of logical grouping of the objects (chunks
+# When RBD is used as the storage backend for storing Glance images,
+# the
+# images are stored by means of logical grouping of the objects
+# (chunks
 # of images) into a ``pool``. Each pool is defined with the number of
 # placement groups it can contain. The default pool that is used is
 # 'images'.
@@ -1686,7 +1814,8 @@
 #
 # RADOS user to authenticate as.
 #
-# This configuration option takes in the RADOS user to authenticate as.
+# This configuration option takes in the RADOS user to authenticate
+# as.
 # This is only needed when RADOS authentication is enabled and is
 # applicable only if the user is using Cephx authentication. If the
 # value for this option is not set by the user or is set to None, a
@@ -1705,9 +1834,11 @@
 #
 # Ceph configuration file path.
 #
-# This configuration option takes in the path to the Ceph configuration
+# This configuration option takes in the path to the Ceph
+# configuration
 # file to be used. If the value for this option is not set by the user
-# or is set to None, librados will locate the default configuration file
+# or is set to None, librados will locate the default configuration
+# file
 # which is located at /etc/ceph/ceph.conf. If using Cephx
 # authentication, this file should include a reference to the right
 # keyring in a client.<USER> section
@@ -1725,7 +1856,8 @@
 # Timeout value for connecting to Ceph cluster.
 #
 # This configuration option takes in the timeout value in seconds used
-# when connecting to the Ceph cluster i.e. it sets the time to wait for
+# when connecting to the Ceph cluster i.e. it sets the time to wait
+# for
 # glance-api before closing the connection. This prevents glance-api
 # hangups during the connection to RBD. If the value for this option
 # is set to less than or equal to 0, no timeout is set and the default
@@ -1817,7 +1949,8 @@
 #
 # This boolean determines whether or not to verify the server
 # certificate. If this option is set to True, swiftclient won't check
-# for a valid SSL certificate when authenticating. If the option is set
+# for a valid SSL certificate when authenticating. If the option is
+# set
 # to False, then the default CA truststore is used for verification.
 #
 # Possible values:
@@ -1833,7 +1966,8 @@
 #
 # Path to the CA bundle file.
 #
-# This configuration option enables the operator to specify the path to
+# This configuration option enables the operator to specify the path
+# to
 # a custom Certificate Authority file for SSL verification when
 # connecting to Swift.
 #
@@ -1889,7 +2023,8 @@
 # the container and object to the configured URL.
 #
 # Possible values:
-#     * String value representing a valid URL path up to a Swift container
+#     * String value representing a valid URL path up to a Swift
+# container
 #
 # Related Options:
 #     * None
@@ -1901,9 +2036,12 @@
 # Endpoint Type of Swift service.
 #
 # This string value indicates the endpoint type to use to fetch the
-# Swift endpoint. The endpoint type determines the actions the user will
-# be allowed to perform, for instance, reading and writing to the Store.
-# This setting is only used if swift_store_auth_version is greater than
+# Swift endpoint. The endpoint type determines the actions the user
+# will
+# be allowed to perform, for instance, reading and writing to the
+# Store.
+# This setting is only used if swift_store_auth_version is greater
+# than
 # 1.
 #
 # Possible values:
@@ -1943,32 +2081,46 @@
 #swift_store_service_type = object-store
 
 #
-# Name of single container to store images/name prefix for multiple containers
-#
-# When a single container is being used to store images, this configuration
-# option indicates the container within the Glance account to be used for
-# storing all images. When multiple containers are used to store images, this
+# Name of single container to store images/name prefix for multiple
+# containers
+#
+# When a single container is being used to store images, this
+# configuration
+# option indicates the container within the Glance account to be used
+# for
+# storing all images. When multiple containers are used to store
+# images, this
 # will be the name prefix for all containers. Usage of single/multiple
 # containers can be controlled using the configuration option
 # ``swift_store_multiple_containers_seed``.
 #
-# When using multiple containers, the containers will be named after the value
-# set for this configuration option with the first N chars of the image UUID
+# When using multiple containers, the containers will be named after
+# the value
+# set for this configuration option with the first N chars of the
+# image UUID
 # as the suffix delimited by an underscore (where N is specified by
 # ``swift_store_multiple_containers_seed``).
 #
-# Example: if the seed is set to 3 and swift_store_container = ``glance``, then
-# an image with UUID ``fdae39a1-bac5-4238-aba4-69bcc726e848`` would be placed in
-# the container ``glance_fda``. All dashes in the UUID are included when
-# creating the container name but do not count toward the character limit, so
+# Example: if the seed is set to 3 and swift_store_container =
+# ``glance``, then
+# an image with UUID ``fdae39a1-bac5-4238-aba4-69bcc726e848`` would be
+# placed in
+# the container ``glance_fda``. All dashes in the UUID are included
+# when
+# creating the container name but do not count toward the character
+# limit, so
 # when N=10 the container name would be ``glance_fdae39a1-ba.``
 #
 # Possible values:
-#     * If using single container, this configuration option can be any string
+#     * If using single container, this configuration option can be
+# any string
 #       that is a valid swift container name in Glance's Swift account
-#     * If using multiple containers, this configuration option can be any
-#       string as long as it satisfies the container naming rules enforced by
-#       Swift. The value of ``swift_store_multiple_containers_seed`` should be
+#     * If using multiple containers, this configuration option can be
+# any
+#       string as long as it satisfies the container naming rules
+# enforced by
+#       Swift. The value of ``swift_store_multiple_containers_seed``
+# should be
 #       taken into account as well.
 #
 # Related options:
@@ -1980,24 +2132,31 @@
 #swift_store_container = glance
 
 #
-# The size threshold, in MB, after which Glance will start segmenting image
-# data.
-#
-# Swift has an upper limit on the size of a single uploaded object. By default,
-# this is 5GB. To upload objects bigger than this limit, objects are segmented
-# into multiple smaller objects that are tied together with a manifest file.
+# The size threshold, in MB, after which Glance will start segmenting
+# image data.
+#
+# Swift has an upper limit on the size of a single uploaded object. By
+# default,
+# this is 5GB. To upload objects bigger than this limit, objects are
+# segmented
+# into multiple smaller objects that are tied together with a manifest
+# file.
 # For more detail, refer to
 # http://docs.openstack.org/developer/swift/overview_large_objects.html
 #
-# This configuration option specifies the size threshold over which the Swift
+# This configuration option specifies the size threshold over which
+# the Swift
 # driver will start segmenting image data into multiple smaller files.
-# Currently, the Swift driver only supports creating Dynamic Large Objects.
-#
-# NOTE: This should be set by taking into account the large object limit
+# Currently, the Swift driver only supports creating Dynamic Large
+# Objects.
+#
+# NOTE: This should be set by taking into account the large object
+# limit
 # enforced by the Swift cluster in consideration.
 #
 # Possible values:
-#     * A positive integer that is less than or equal to the large object limit
+#     * A positive integer that is less than or equal to the large
+# object limit
 #       enforced by the Swift cluster in consideration.
 #
 # Related options:
@@ -2008,20 +2167,26 @@
 #swift_store_large_object_size = 5120
 
 #
-# The maximum size, in MB, of the segments when image data is segmented.
-#
-# When image data is segmented to upload images that are larger than the limit
-# enforced by the Swift cluster, image data is broken into segments that are no
+# The maximum size, in MB, of the segments when image data is
+# segmented.
+#
+# When image data is segmented to upload images that are larger than
+# the limit
+# enforced by the Swift cluster, image data is broken into segments
+# that are no
 # bigger than the size specified by this configuration option.
 # Refer to ``swift_store_large_object_size`` for more detail.
 #
 # For example: if ``swift_store_large_object_size`` is 5GB and
-# ``swift_store_large_object_chunk_size`` is 1GB, an image of size 6.2GB will be
-# segmented into 7 segments where the first six segments will be 1GB in size and
+# ``swift_store_large_object_chunk_size`` is 1GB, an image of size
+# 6.2GB will be
+# segmented into 7 segments where the first six segments will be 1GB
+# in size and
 # the seventh segment will be 0.2GB.
 #
 # Possible values:
-#     * A positive integer that is less than or equal to the large object limit
+#     * A positive integer that is less than or equal to the large
+# object limit
 #       enforced by Swift cluster in consideration.
 #
 # Related options:
@@ -2034,9 +2199,12 @@
 #
 # Create container, if it doesn't already exist, when uploading image.
 #
-# At the time of uploading an image, if the corresponding container doesn't
-# exist, it will be created provided this configuration option is set to True.
-# By default, it won't be created. This behavior is applicable for both single
+# At the time of uploading an image, if the corresponding container
+# doesn't
+# exist, it will be created provided this configuration option is set
+# to True.
+# By default, it won't be created. This behavior is applicable for
+# both single
 # and multiple containers mode.
 #
 # Possible values:
@@ -2052,9 +2220,12 @@
 #
 # Store images in tenant's Swift account.
 #
-# This enables multi-tenant storage mode which causes Glance images to be stored
-# in tenant specific Swift accounts. If this is disabled, Glance stores all
-# images in its own account. More details multi-tenant store can be found at
+# This enables multi-tenant storage mode which causes Glance images to
+# be stored
+# in tenant specific Swift accounts. If this is disabled, Glance
+# stores all
+# images in its own account. More details multi-tenant store can be
+# found at
 # https://wiki.openstack.org/wiki/GlanceSwiftTenantSpecificStorage
 #
 # NOTE: If using multi-tenant swift store, please make sure
@@ -2074,18 +2245,26 @@
 #
 # Seed indicating the number of containers to use for storing images.
 #
-# When using a single-tenant store, images can be stored in one or more than one
-# containers. When set to 0, all images will be stored in one single container.
-# When set to an integer value between 1 and 32, multiple containers will be
-# used to store images. This configuration option will determine how many
-# containers are created. The total number of containers that will be used is
-# equal to 16^N, so if this config option is set to 2, then 16^2=256 containers
+# When using a single-tenant store, images can be stored in one or
+# more than one
+# containers. When set to 0, all images will be stored in one single
+# container.
+# When set to an integer value between 1 and 32, multiple containers
+# will be
+# used to store images. This configuration option will determine how
+# many
+# containers are created. The total number of containers that will be
+# used is
+# equal to 16^N, so if this config option is set to 2, then 16^2=256
+# containers
 # will be used to store images.
 #
-# Please refer to ``swift_store_container`` for more detail on the naming
-# convention. More detail about using multiple containers can be found at
-# https://specs.openstack.org/openstack/glance-specs/specs/kilo/swift-store-
-# multiple-containers.html
+# Please refer to ``swift_store_container`` for more detail on the
+# naming
+# convention. More detail about using multiple containers can be found
+# at
+# https://specs.openstack.org/openstack/glance-specs/specs/kilo/swift-
+# store-multiple-containers.html
 #
 # NOTE: This is used only when swift_store_multi_tenant is disabled.
 #
@@ -2110,7 +2289,8 @@
 # default value is an empty list.
 #
 # Possible values:
-#     * A comma separated list of strings representing UUIDs of Keystone
+#     * A comma separated list of strings representing UUIDs of
+# Keystone
 #       projects/tenants
 #
 # Related options:
@@ -2262,30 +2442,34 @@
 #  (string value)
 #default_swift_reference = ref1
 
-# DEPRECATED: Version of the authentication service to use. Valid versions are 2
-# and 3 for keystone and 1 (deprecated) for swauth and rackspace. (string value)
+# DEPRECATED: Version of the authentication service to use. Valid
+# versions are 2 and 3 for keystone and 1 (deprecated) for swauth and
+# rackspace. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason:
-# The option 'auth_version' in the Swift back-end configuration file is
+# The option 'auth_version' in the Swift back-end configuration file
+# is
 # used instead.
 #swift_store_auth_version = 2
 
-# DEPRECATED: The address where the Swift authentication service is listening.
-# (string value)
+# DEPRECATED: The address where the Swift authentication service is
+# listening. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason:
-# The option 'auth_address' in the Swift back-end configuration file is
+# The option 'auth_address' in the Swift back-end configuration file
+# is
 # used instead.
 #swift_store_auth_address = <None>
 
-# DEPRECATED: The user to authenticate against the Swift authentication service.
-# (string value)
+# DEPRECATED: The user to authenticate against the Swift
+# authentication service. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason:
-# The option 'user' in the Swift back-end configuration file is set instead.
+# The option 'user' in the Swift back-end configuration file is set
+# instead.
 #swift_store_user = <None>
 
 # DEPRECATED: Auth key for the user authenticating against the Swift
@@ -2346,227 +2530,57 @@
 #  (string value)
 #swift_upload_buffer_dir = <None>
 
-#
-# Address of the ESX/ESXi or vCenter Server target system.
-#
-# This configuration option sets the address of the ESX/ESXi or vCenter
-# Server target system. This option is required when using the VMware
-# storage backend. The address can contain an IP address (127.0.0.1) or
-# a DNS name (www.my-domain.com).
-#
-# Possible Values:
-#     * A valid IPv4 or IPv6 address
-#     * A valid DNS name
-#
-# Related options:
-#     * vmware_server_username
-#     * vmware_server_password
-#
-#  (unknown value)
-#vmware_server_host = 127.0.0.1
-
-#
-# Server username.
-#
-# This configuration option takes the username for authenticating with
-# the VMware ESX/ESXi or vCenter Server. This option is required when
-# using the VMware storage backend.
-#
-# Possible Values:
-#     * Any string that is the username for a user with appropriate
-#       privileges
-#
-# Related options:
-#     * vmware_server_host
-#     * vmware_server_password
-#
-#  (string value)
-#vmware_server_username = root
-
-#
-# Server password.
-#
-# This configuration option takes the password for authenticating with
-# the VMware ESX/ESXi or vCenter Server. This option is required when
-# using the VMware storage backend.
-#
-# Possible Values:
-#     * Any string that is a password corresponding to the username
-#       specified using the "vmware_server_username" option
-#
-# Related options:
-#     * vmware_server_host
-#     * vmware_server_username
-#
-#  (string value)
-#vmware_server_password = vmware
-
-#
-# The number of VMware API retries.
-#
-# This configuration option specifies the number of times the VMware
-# ESX/VC server API must be retried upon connection related issues or
-# server API call overload. It is not possible to specify 'retry
-# forever'.
-#
-# Possible Values:
-#     * Any positive integer value
-#
-# Related options:
-#     * None
-#
-#  (integer value)
-# Minimum value: 1
-#vmware_api_retry_count = 10
-
-#
-# Interval in seconds used for polling remote tasks invoked on VMware
-# ESX/VC server.
-#
-# This configuration option takes in the sleep time in seconds for polling an
-# on-going async task as part of the VMWare ESX/VC server API call.
-#
-# Possible Values:
-#     * Any positive integer value
-#
-# Related options:
-#     * None
-#
-#  (integer value)
-# Minimum value: 1
-#vmware_task_poll_interval = 5
-
-#
-# The directory where the glance images will be stored in the datastore.
-#
-# This configuration option specifies the path to the directory where the
-# glance images will be stored in the VMware datastore. If this option
-# is not set,  the default directory where the glance images are stored
-# is openstack_glance.
-#
-# Possible Values:
-#     * Any string that is a valid path to a directory
-#
-# Related options:
-#     * None
-#
-#  (string value)
-#vmware_store_image_dir = /openstack_glance
-
-#
-# Set verification of the ESX/vCenter server certificate.
-#
-# This configuration option takes a boolean value to determine
-# whether or not to verify the ESX/vCenter server certificate. If this
-# option is set to True, the ESX/vCenter server certificate is not
-# verified. If this option is set to False, then the default CA
-# truststore is used for verification.
-#
-# This option is ignored if the "vmware_ca_file" option is set. In that
-# case, the ESX/vCenter server certificate will then be verified using
-# the file specified using the "vmware_ca_file" option .
-#
-# Possible Values:
-#     * True
-#     * False
-#
-# Related options:
-#     * vmware_ca_file
-#
-#  (boolean value)
-# Deprecated group/name - [glance_store]/vmware_api_insecure
-#vmware_insecure = false
-
-#
-# Absolute path to the CA bundle file.
-#
-# This configuration option enables the operator to use a custom
-# Cerificate Authority File to verify the ESX/vCenter certificate.
-#
-# If this option is set, the "vmware_insecure" option will be ignored
-# and the CA file specified will be used to authenticate the ESX/vCenter
-# server certificate and establish a secure connection to the server.
-#
-# Possible Values:
-#     * Any string that is a valid absolute path to a CA file
-#
-# Related options:
-#     * vmware_insecure
-#
-#  (string value)
-#vmware_ca_file = /etc/ssl/certs/ca-certificates.crt
-
-#
-# The datastores where the image can be stored.
-#
-# This configuration option specifies the datastores where the image can
-# be stored in the VMWare store backend. This option may be specified
-# multiple times for specifying multiple datastores. The datastore name
-# should be specified after its datacenter path, separated by ":". An
-# optional weight may be given after the datastore name, separated again
-# by ":" to specify the priority. Thus, the required format becomes
-# <datacenter_path>:<datastore_name>:<optional_weight>.
-#
-# When adding an image, the datastore with highest weight will be
-# selected, unless there is not enough free space available in cases
-# where the image size is already known. If no weight is given, it is
-# assumed to be zero and the directory will be considered for selection
-# last. If multiple datastores have the same weight, then the one with
-# the most free space available is selected.
-#
-# Possible Values:
-#     * Any string of the format:
-#       <datacenter_path>:<datastore_name>:<optional_weight>
-#
-# Related options:
-#    * None
-#
-#  (multi valued)
-#vmware_datastores =
+
+os_region_name = RegionOne
 
 
 [oslo_policy]
-
 #
 # From oslo.policy
 #
 
-# This option controls whether or not to enforce scope when evaluating policies.
-# If ``True``, the scope of the token used in the request is compared to the
-# ``scope_types`` of the policy being enforced. If the scopes do not match, an
-# ``InvalidScope`` exception will be raised. If ``False``, a message will be
-# logged informing operators that policies are being invoked with mismatching
-# scope. (boolean value)
+# This option controls whether or not to enforce scope when evaluating
+# policies. If ``True``, the scope of the token used in the request is
+# compared to the ``scope_types`` of the policy being enforced. If the
+# scopes do not match, an ``InvalidScope`` exception will be raised.
+# If ``False``, a message will be logged informing operators that
+# policies are being invoked with mismatching scope. (boolean value)
 #enforce_scope = false
 
 # The file that defines policies. (string value)
 #policy_file = policy.json
-
-# Default rule. Enforced when a requested rule is not found. (string value)
+policy_file = /etc/glance/policy.json
+
+# Default rule. Enforced when a requested rule is not found. (string
+# value)
 #policy_default_rule = default
 
-# Directories where policy configuration files are stored. They can be relative
-# to any directory in the search path defined by the config_dir option, or
-# absolute paths. The file defined by policy_file must exist for these
-# directories to be searched.  Missing or empty directories are ignored. (multi
-# valued)
+# Directories where policy configuration files are stored. They can be
+# relative to any directory in the search path defined by the
+# config_dir option, or absolute paths. The file defined by
+# policy_file must exist for these directories to be searched.
+# Missing or empty directories are ignored. (multi valued)
 #policy_dirs = policy.d
 
-# Content Type to send and receive data for REST based policy check (string
-# value)
+# Content Type to send and receive data for REST based policy check
+# (string value)
 # Possible values:
 # application/x-www-form-urlencoded - <No description provided>
 # application/json - <No description provided>
 #remote_content_type = application/x-www-form-urlencoded
 
-# server identity verification for REST based policy check (boolean value)
+# server identity verification for REST based policy check (boolean
+# value)
 #remote_ssl_verify_server_crt = false
 
-# Absolute path to ca cert file for REST based policy check (string value)
+# Absolute path to ca cert file for REST based policy check (string
+# value)
 #remote_ssl_ca_crt_file = <None>
 
-# Absolute path to client cert for REST based policy check (string value)
+# Absolute path to client cert for REST based policy check (string
+# value)
 #remote_ssl_client_crt_file = <None>
 
 # Absolute path client key file REST based policy check (string value)
 #remote_ssl_client_key_file = <None>
+

2018-09-01 22:42:01,206 [salt.state       :1941][INFO    ][21878] Completed state [/etc/glance/glance-cache.conf] at time 22:42:01.206543 duration_in_ms=122.974
2018-09-01 22:42:01,206 [salt.state       :1770][INFO    ][21878] Running state [/etc/glance/glance-registry.conf] at time 22:42:01.206895
2018-09-01 22:42:01,207 [salt.state       :1803][INFO    ][21878] Executing state file.managed for [/etc/glance/glance-registry.conf]
2018-09-01 22:42:01,224 [salt.fileclient  :1215][INFO    ][21878] Fetching file from saltenv 'base', ** done ** 'glance/files/queens/glance-registry.conf.Debian'
2018-09-01 22:42:01,319 [salt.fileclient  :1215][INFO    ][21878] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/queens/keystonemiddleware/_auth_token.conf'
2018-09-01 22:42:01,343 [salt.fileclient  :1215][INFO    ][21878] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/queens/keystoneauth/_type_password.conf'
2018-09-01 22:42:01,467 [salt.state       :290 ][INFO    ][21878] File changed:
--- 
+++ 
@@ -1,3 +1,4 @@
+
 [DEFAULT]
 
 #
@@ -7,10 +8,13 @@
 #
 # Set the image owner to tenant or the authenticated user.
 #
-# Assign a boolean value to determine the owner of an image. When set to
+# Assign a boolean value to determine the owner of an image. When set
+# to
 # True, the owner of the image is the tenant. When set to False, the
-# owner of the image will be the authenticated user issuing the request.
-# Setting it to False makes the image private to the associated user and
+# owner of the image will be the authenticated user issuing the
+# request.
+# Setting it to False makes the image private to the associated user
+# and
 # sharing with other users within the same tenant (or "project")
 # requires explicit image sharing via image membership.
 #
@@ -65,7 +69,8 @@
 #
 # Provide  an integer value to limit the length of the request ID to
 # the specified length. The default value is 64. Users can change this
-# to any ineteger value between 0 and 16384 however keeping in mind that
+# to any ineteger value between 0 and 16384 however keeping in mind
+# that
 # a larger value may flood the logs.
 #
 # Possible values:
@@ -105,7 +110,8 @@
 #
 # Maximum number of image members per image.
 #
-# This limits the maximum of users an image can be shared with. Any negative
+# This limits the maximum of users an image can be shared with. Any
+# negative
 # value is interpreted as unlimited.
 #
 # Related options:
@@ -117,10 +123,12 @@
 #
 # Maximum number of properties allowed on an image.
 #
-# This enforces an upper limit on the number of additional properties an image
+# This enforces an upper limit on the number of additional properties
+# an image
 # can have. Any negative value is interpreted as unlimited.
 #
-# NOTE: This won't have any impact if additional properties are disabled. Please
+# NOTE: This won't have any impact if additional properties are
+# disabled. Please
 # refer to ``allow_additional_image_properties``.
 #
 # Related options:
@@ -177,7 +185,8 @@
 #
 # Finally, when this configuration option is set to
 # ``glance.db.simple.api``, image catalog data is stored in and read
-# from an in-memory data structure. This is primarily used for testing.
+# from an in-memory data structure. This is primarily used for
+# testing.
 #
 # Related options:
 #     * enable_v2_api
@@ -190,8 +199,8 @@
 # Glance registry service is deprecated for removal.
 #
 # More information can be found from the spec:
-# http://specs.openstack.org/openstack/glance-specs/specs/queens/approved/glance
-# /deprecate-registry.html
+# http://specs.openstack.org/openstack/glance-
+# specs/specs/queens/approved/glance/deprecate-registry.html
 #data_api = glance.db.sqlalchemy.api
 
 #
@@ -308,9 +317,10 @@
 #  (boolean value)
 # This option is deprecated for removal since Newton.
 # Its value may be silently ignored in the future.
-# Reason: This option will be removed in the Pike release or later because the
-# same functionality can be achieved with greater granularity by using policies.
-# Please see the Newton release notes for more information.
+# Reason: This option will be removed in the Pike release or later
+# because the same functionality can be achieved with greater
+# granularity by using policies. Please see the Newton release notes
+# for more information.
 #show_multiple_locations = false
 
 #
@@ -342,18 +352,25 @@
 #
 # Maximum amount of image storage per tenant.
 #
-# This enforces an upper limit on the cumulative storage consumed by all images
+# This enforces an upper limit on the cumulative storage consumed by
+# all images
 # of a tenant across all stores. This is a per-tenant limit.
 #
-# The default unit for this configuration option is Bytes. However, storage
-# units can be specified using case-sensitive literals ``B``, ``KB``, ``MB``,
-# ``GB`` and ``TB`` representing Bytes, KiloBytes, MegaBytes, GigaBytes and
-# TeraBytes respectively. Note that there should not be any space between the
-# value and unit. Value ``0`` signifies no quota enforcement. Negative values
+# The default unit for this configuration option is Bytes. However,
+# storage
+# units can be specified using case-sensitive literals ``B``, ``KB``,
+# ``MB``,
+# ``GB`` and ``TB`` representing Bytes, KiloBytes, MegaBytes,
+# GigaBytes and
+# TeraBytes respectively. Note that there should not be any space
+# between the
+# value and unit. Value ``0`` signifies no quota enforcement. Negative
+# values
 # are invalid and result in errors.
 #
 # Possible values:
-#     * A string that is a valid concatenation of a non-negative integer
+#     * A string that is a valid concatenation of a non-negative
+# integer
 #       representing the storage value and an optional string literal
 #       representing storage units as mentioned above.
 #
@@ -480,8 +497,8 @@
 # Glance registry service is deprecated for removal.
 #
 # More information can be found from the spec:
-# http://specs.openstack.org/openstack/glance-specs/specs/queens/approved/glance
-# /deprecate-registry.html
+# http://specs.openstack.org/openstack/glance-
+# specs/specs/queens/approved/glance/deprecate-registry.html
 #enable_v2_registry = true
 
 #
@@ -643,6 +660,7 @@
 #
 #  (unknown value)
 #bind_host = 0.0.0.0
+bind_host = 10.167.4.37
 
 #
 # Port number on which the server will listen.
@@ -662,6 +680,7 @@
 # Minimum value: 0
 # Maximum value: 65535
 #bind_port = <None>
+bind_port = 9191
 
 #
 # Set the number of incoming connection requests.
@@ -762,9 +781,9 @@
 #  (string value)
 #key_file = /etc/ssl/key/key-file.pem
 
-# DEPRECATED: The HTTP header used to determine the scheme for the original
-# request, even if it was removed by an SSL terminating proxy. Typical value is
-# "HTTP_X_FORWARDED_PROTO". (string value)
+# DEPRECATED: The HTTP header used to determine the scheme for the
+# original request, even if it was removed by an SSL terminating
+# proxy. Typical value is "HTTP_X_FORWARDED_PROTO". (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Use the http_proxy_to_wsgi middleware instead.
@@ -777,7 +796,8 @@
 # process workers to service requests. By default, the number of CPUs
 # available is set as the value for ``workers`` limited to 8. For
 # example if the processor count is 6, 6 workers will be used, if the
-# processor count is 24 only 8 workers will be used. The limit will only
+# processor count is 24 only 8 workers will be used. The limit will
+# only
 # apply to the default value, if 24 workers is configured, 24 is used.
 #
 # Each worker process is made to listen on the port set in the
@@ -796,6 +816,7 @@
 #  (integer value)
 # Minimum value: 0
 #workers = <None>
+workers = 8
 
 #
 # Maximum line size of message headers.
@@ -865,312 +886,301 @@
 #  (integer value)
 # Minimum value: 0
 #client_socket_timeout = 900
-
 #
 # From oslo.log
 #
 
-# If set to true, the logging level will be set to DEBUG instead of the default
-# INFO level. (boolean value)
+# If set to true, the logging level will be set to DEBUG instead of
+# the default INFO level. (boolean value)
 # Note: This option can be changed without restarting.
 #debug = false
 
-# The name of a logging configuration file. This file is appended to any
-# existing logging configuration files. For details about logging configuration
-# files, see the Python logging module documentation. Note that when logging
-# configuration files are used then all logging configuration is set in the
-# configuration file and other logging configuration options are ignored (for
-# example, logging_context_format_string). (string value)
+# The name of a logging configuration file. This file is appended to
+# any existing logging configuration files. For details about logging
+# configuration files, see the Python logging module documentation.
+# Note that when logging configuration files are used then all logging
+# configuration is set in the configuration file and other logging
+# configuration options are ignored (for example,
+# logging_context_format_string). (string value)
 # Note: This option can be changed without restarting.
 # Deprecated group/name - [DEFAULT]/log_config
-#log_config_append = <None>
 
 # Defines the format string for %%(asctime)s in log records. Default:
-# %(default)s . This option is ignored if log_config_append is set. (string
-# value)
+# %(default)s . This option is ignored if log_config_append is set.
+# (string value)
 #log_date_format = %Y-%m-%d %H:%M:%S
 
-# (Optional) Name of log file to send logging output to. If no default is set,
-# logging will go to stderr as defined by use_stderr. This option is ignored if
-# log_config_append is set. (string value)
+# (Optional) Name of log file to send logging output to. If no default
+# is set, logging will go to stderr as defined by use_stderr. This
+# option is ignored if log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logfile
 #log_file = <None>
-
-# (Optional) The base directory used for relative log_file  paths. This option
-# is ignored if log_config_append is set. (string value)
+log_file = /var/log/glance/registry.log
+
+# (Optional) The base directory used for relative log_file  paths.
+# This option is ignored if log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logdir
 #log_dir = <None>
 
-# Uses logging handler designed to watch file system. When log file is moved or
-# removed this handler will open a new log file with specified path
-# instantaneously. It makes sense only if log_file option is specified and Linux
-# platform is used. This option is ignored if log_config_append is set. (boolean
-# value)
+# Uses logging handler designed to watch file system. When log file is
+# moved or removed this handler will open a new log file with
+# specified path instantaneously. It makes sense only if log_file
+# option is specified and Linux platform is used. This option is
+# ignored if log_config_append is set. (boolean value)
 #watch_log_file = false
 
-# Use syslog for logging. Existing syslog format is DEPRECATED and will be
-# changed later to honor RFC5424. This option is ignored if log_config_append is
-# set. (boolean value)
+# Use syslog for logging. Existing syslog format is DEPRECATED and
+# will be changed later to honor RFC5424. This option is ignored if
+# log_config_append is set. (boolean value)
 #use_syslog = false
 
-# Enable journald for logging. If running in a systemd environment you may wish
-# to enable journal support. Doing so will use the journal native protocol which
-# includes structured metadata in addition to log messages.This option is
-# ignored if log_config_append is set. (boolean value)
+# Enable journald for logging. If running in a systemd environment you
+# may wish to enable journal support. Doing so will use the journal
+# native protocol which includes structured metadata in addition to
+# log messages.This option is ignored if log_config_append is set.
+# (boolean value)
 #use_journal = false
 
 # Syslog facility to receive log lines. This option is ignored if
 # log_config_append is set. (string value)
 #syslog_log_facility = LOG_USER
 
-# Use JSON formatting for logging. This option is ignored if log_config_append
-# is set. (boolean value)
+# Use JSON formatting for logging. This option is ignored if
+# log_config_append is set. (boolean value)
 #use_json = false
 
-# Log output to standard error. This option is ignored if log_config_append is
-# set. (boolean value)
+# Log output to standard error. This option is ignored if
+# log_config_append is set. (boolean value)
 #use_stderr = false
 
 # Format string to use for log messages with context. (string value)
 #logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
 
-# Format string to use for log messages when context is undefined. (string
+# Format string to use for log messages when context is undefined.
+# (string value)
+#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
+
+# Additional data to append to log message when logging level for the
+# message is DEBUG. (string value)
+#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
+
+# Prefix each line of exception output with this format. (string
 # value)
-#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
-
-# Additional data to append to log message when logging level for the message is
-# DEBUG. (string value)
-#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
-
-# Prefix each line of exception output with this format. (string value)
 #logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
 
 # Defines the format string for %(user_identity)s that is used in
 # logging_context_format_string. (string value)
 #logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
 
-# List of package logging levels in logger=LEVEL pairs. This option is ignored
-# if log_config_append is set. (list value)
+# List of package logging levels in logger=LEVEL pairs. This option is
+# ignored if log_config_append is set. (list value)
 #default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
 
 # Enables or disables publication of error events. (boolean value)
 #publish_errors = false
 
-# The format for an instance that is passed with the log message. (string value)
+# The format for an instance that is passed with the log message.
+# (string value)
 #instance_format = "[instance: %(uuid)s] "
 
-# The format for an instance UUID that is passed with the log message. (string
-# value)
+# The format for an instance UUID that is passed with the log message.
+# (string value)
 #instance_uuid_format = "[instance: %(uuid)s] "
 
 # Interval, number of seconds, of log rate limiting. (integer value)
 #rate_limit_interval = 0
 
-# Maximum number of logged messages per rate_limit_interval. (integer value)
+# Maximum number of logged messages per rate_limit_interval. (integer
+# value)
 #rate_limit_burst = 0
 
-# Log level name used by rate limiting: CRITICAL, ERROR, INFO, WARNING, DEBUG or
-# empty string. Logs with level greater or equal to rate_limit_except_level are
-# not filtered. An empty string means that all levels are filtered. (string
-# value)
+# Log level name used by rate limiting: CRITICAL, ERROR, INFO,
+# WARNING, DEBUG or empty string. Logs with level greater or equal to
+# rate_limit_except_level are not filtered. An empty string means that
+# all levels are filtered. (string value)
 #rate_limit_except_level = CRITICAL
 
 # Enables or disables fatal status of deprecations. (boolean value)
 #fatal_deprecations = false
 
-#
-# From oslo.messaging
-#
-
-# Size of RPC connection pool. (integer value)
-#rpc_conn_pool_size = 30
-
-# The pool size limit for connections expiration policy (integer value)
-#conn_pool_min_size = 2
-
-# The time-to-live in sec of idle connections in the pool (integer value)
-#conn_pool_ttl = 1200
-
-# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
-# The "host" option should point or resolve to this address. (string value)
-#rpc_zmq_bind_address = *
-
-# MatchMaker driver. (string value)
-# Possible values:
-# redis - <No description provided>
-# sentinel - <No description provided>
-# dummy - <No description provided>
-#rpc_zmq_matchmaker = redis
-
-# Number of ZeroMQ contexts, defaults to 1. (integer value)
-#rpc_zmq_contexts = 1
-
-# Maximum number of ingress messages to locally buffer per topic. Default is
-# unlimited. (integer value)
-#rpc_zmq_topic_backlog = <None>
-
-# Directory for holding IPC sockets. (string value)
-#rpc_zmq_ipc_dir = /var/run/openstack
-
-# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
-# "host" option, if running Nova. (string value)
-#rpc_zmq_host = localhost
-
-# Number of seconds to wait before all pending messages will be sent after
-# closing a socket. The default value of -1 specifies an infinite linger period.
-# The value of 0 specifies no linger period. Pending messages shall be discarded
-# immediately when the socket is closed. Positive values specify an upper bound
-# for the linger period. (integer value)
-# Deprecated group/name - [DEFAULT]/rpc_cast_timeout
-#zmq_linger = -1
-
-# The default number of seconds that poll should wait. Poll raises timeout
-# exception when timeout expired. (integer value)
-#rpc_poll_timeout = 1
-
-# Expiration timeout in seconds of a name service record about existing target (
-# < 0 means no timeout). (integer value)
-#zmq_target_expire = 300
-
-# Update period in seconds of a name service record about existing target.
-# (integer value)
-#zmq_target_update = 180
-
-# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
-# value)
-#use_pub_sub = false
-
-# Use ROUTER remote proxy. (boolean value)
-#use_router_proxy = false
-
-# This option makes direct connections dynamic or static. It makes sense only
-# with use_router_proxy=False which means to use direct connections for direct
-# message types (ignored otherwise). (boolean value)
-#use_dynamic_connections = false
-
-# How many additional connections to a host will be made for failover reasons.
-# This option is actual only in dynamic connections mode. (integer value)
-#zmq_failover_connections = 2
-
-# Minimal port number for random ports range. (port value)
-# Minimum value: 0
-# Maximum value: 65535
-#rpc_zmq_min_port = 49153
-
-# Maximal port number for random ports range. (integer value)
-# Minimum value: 1
-# Maximum value: 65536
-#rpc_zmq_max_port = 65536
-
-# Number of retries to find free port number before fail with ZMQBindError.
-# (integer value)
-#rpc_zmq_bind_port_retries = 100
-
-# Default serialization mechanism for serializing/deserializing
-# outgoing/incoming messages (string value)
-# Possible values:
-# json - <No description provided>
-# msgpack - <No description provided>
-#rpc_zmq_serialization = json
-
-# This option configures round-robin mode in zmq socket. True means not keeping
-# a queue when server side disconnects. False means to keep queue and messages
-# even if server is disconnected, when the server appears we send all
-# accumulated messages to it. (boolean value)
-#zmq_immediate = true
-
-# Enable/disable TCP keepalive (KA) mechanism. The default value of -1 (or any
-# other negative value) means to skip any overrides and leave it to OS default;
-# 0 and 1 (or any other positive value) mean to disable and enable the option
-# respectively. (integer value)
-#zmq_tcp_keepalive = -1
-
-# The duration between two keepalive transmissions in idle condition. The unit
-# is platform dependent, for example, seconds in Linux, milliseconds in Windows
-# etc. The default value of -1 (or any other negative value and 0) means to skip
-# any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_idle = -1
-
-# The number of retransmissions to be carried out before declaring that remote
-# end is not available. The default value of -1 (or any other negative value and
-# 0) means to skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_cnt = -1
-
-# The duration between two successive keepalive retransmissions, if
-# acknowledgement to the previous keepalive transmission is not received. The
-# unit is platform dependent, for example, seconds in Linux, milliseconds in
-# Windows etc. The default value of -1 (or any other negative value and 0) means
-# to skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_intvl = -1
-
-# Maximum number of (green) threads to work concurrently. (integer value)
-#rpc_thread_pool_size = 100
-
-# Expiration timeout in seconds of a sent/received message after which it is not
-# tracked anymore by a client/server. (integer value)
-#rpc_message_ttl = 300
-
-# Wait for message acknowledgements from receivers. This mechanism works only
-# via proxy without PUB/SUB. (boolean value)
-#rpc_use_acks = false
-
-# Number of seconds to wait for an ack from a cast/call. After each retry
-# attempt this timeout is multiplied by some specified multiplier. (integer
-# value)
-#rpc_ack_timeout_base = 15
-
-# Number to multiply base ack timeout by after each retry attempt. (integer
-# value)
-#rpc_ack_timeout_multiplier = 2
-
-# Default number of message sending attempts in case of any problems occurred:
-# positive value N means at most N retries, 0 means no retries, None or -1 (or
-# any other negative values) mean to retry forever. This option is used only if
-# acknowledgments are enabled. (integer value)
-#rpc_retry_attempts = 3
-
-# List of publisher hosts SubConsumer can subscribe on. This option has higher
-# priority then the default publishers list taken from the matchmaker. (list
-# value)
-#subscribe_on =
-
-# Size of executor thread pool when executor is threading or eventlet. (integer
-# value)
-# Deprecated group/name - [DEFAULT]/rpc_thread_pool_size
-#executor_thread_pool_size = 64
-
-# Seconds to wait for a response from a call. (integer value)
-#rpc_response_timeout = 60
-
-# The network address and optional user credentials for connecting to the
-# messaging backend, in URL format. The expected format is:
-#
-# driver://[user:pass@]host:port[,[userN:passN@]hostN:portN]/virtual_host?query
-#
-# Example: rabbit://rabbitmq:password@127.0.0.1:5672//
-#
-# For full details on the fields in the URL see the documentation of
-# oslo_messaging.TransportURL at
-# https://docs.openstack.org/oslo.messaging/latest/reference/transport.html
-# (string value)
-#transport_url = <None>
-
-# DEPRECATED: The messaging driver to use, defaults to rabbit. Other drivers
-# include amqp and zmq. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rpc_backend = rabbit
-
-# The default exchange under which topics are scoped. May be overridden by an
-# exchange name specified in the transport_url option. (string value)
-#control_exchange = openstack
-
+[paste_deploy]
+
+#
+# From glance.registry
+#
+
+#
+# Deployment flavor to use in the server application pipeline.
+#
+# Provide a string value representing the appropriate deployment
+# flavor used in the server application pipleline. This is typically
+# the partial name of a pipeline in the paste configuration file with
+# the service name removed.
+#
+# For example, if your paste section name in the paste configuration
+# file is [pipeline:glance-api-keystone], set ``flavor`` to
+# ``keystone``.
+#
+# Possible values:
+#     * String value representing a partial pipeline name.
+#
+# Related Options:
+#     * config_file
+#
+#  (string value)
+flavor = keystone
+
+#
+# Name of the paste configuration file.
+#
+# Provide a string value representing the name of the paste
+# configuration file to use for configuring piplelines for
+# server application deployments.
+#
+# NOTES:
+#     * Provide the name or the path relative to the glance directory
+#       for the paste configuration file and not the absolute path.
+#     * The sample paste configuration file shipped with Glance need
+#       not be edited in most cases as it comes with ready-made
+#       pipelines for all common deployment flavors.
+#
+# If no value is specified for this option, the ``paste.ini`` file
+# with the prefix of the corresponding Glance service's configuration
+# file name will be searched for in the known configuration
+# directories. (For example, if this option is missing from or has no
+# value set in ``glance-api.conf``, the service will look for a file
+# named ``glance-api-paste.ini``.) If the paste configuration file is
+# not found, the service will not start.
+#
+# Possible values:
+#     * A string value representing the name of the paste
+# configuration
+#       file.
+#
+# Related Options:
+#     * flavor
+#
+#  (string value)
+#config_file = glance-api-paste.ini
+
+
+[profiler]
+
+#
+# From glance.registry
+#
+
+#
+# Enables the profiling for all services on this node. Default value
+# is False
+# (fully disable the profiling feature).
+#
+# Possible values:
+#
+# * True: Enables the feature
+# * False: Disables the feature. The profiling cannot be started via
+# this project
+# operations. If the profiling is triggered by another project, this
+# project part
+# will be empty.
+#  (boolean value)
+# Deprecated group/name - [profiler]/profiler_enabled
+#enabled = false
+
+#
+# Enables SQL requests profiling in services. Default value is False
+# (SQL
+# requests won't be traced).
+#
+# Possible values:
+#
+# * True: Enables SQL requests profiling. Each SQL query will be part
+# of the
+# trace and can the be analyzed by how much time was spent for that.
+# * False: Disables SQL requests profiling. The spent time is only
+# shown on a
+# higher level of operations. Single SQL queries cannot be analyzed
+# this
+# way.
+#  (boolean value)
+#trace_sqlalchemy = false
+
+#
+# Secret key(s) to use for encrypting context data for performance
+# profiling.
+# This string value should have the following format:
+# <key1>[,<key2>,...<keyn>],
+# where each key is some random string. A user who triggers the
+# profiling via
+# the REST API has to set one of these keys in the headers of the REST
+# API call
+# to include profiling results of this node for this particular
+# project.
+#
+# Both "enabled" flag and "hmac_keys" config options should be set to
+# enable
+# profiling. Also, to generate correct profiling information across
+# all services
+# at least one key needs to be consistent between OpenStack projects.
+# This
+# ensures it can be used from client side to generate the trace,
+# containing
+# information from all possible resources. (string value)
+#hmac_keys = SECRET_KEY
+
+#
+# Connection string for a notifier backend. Default value is
+# messaging:// which
+# sets the notifier to oslo_messaging.
+#
+# Examples of possible values:
+#
+# * messaging://: use oslo_messaging driver for sending notifications.
+# * mongodb://127.0.0.1:27017 : use mongodb driver for sending
+# notifications.
+# * elasticsearch://127.0.0.1:9200 : use elasticsearch driver for
+# sending
+# notifications.
+#  (string value)
+#connection_string = messaging://
+
+#
+# Document type for notification indexing in elasticsearch.
+#  (string value)
+#es_doc_type = notification
+
+#
+# This parameter is a time value parameter (for example:
+# es_scroll_time=2m),
+# indicating for how long the nodes that participate in the search
+# will maintain
+# relevant resources in order to continue and support it.
+#  (string value)
+#es_scroll_time = 2m
+
+#
+# Elasticsearch splits large requests in batches. This parameter
+# defines
+# maximum size of each batch (for example: es_scroll_size=10000).
+#  (integer value)
+#es_scroll_size = 10000
+
+#
+# Redissentinel provides a timeout option on the connections.
+# This parameter defines that timeout (for example:
+# socket_timeout=0.1).
+#  (floating point value)
+#socket_timeout = 0.1
+
+#
+# Redissentinel uses a service name to identify a master redis
+# service.
+# This parameter defines the name (for example:
+# sentinal_service_name=mymaster).
+#  (string value)
+#sentinel_service_name = mymaster
 
 [database]
-connection = sqlite:////var/lib/glance/glance.sqlite
-backend = sqlalchemy
-
 #
 # From oslo.db
 #
@@ -1182,66 +1192,73 @@
 # Deprecated group/name - [DEFAULT]/db_backend
 #backend = sqlalchemy
 
-# The SQLAlchemy connection string to use to connect to the database. (string
-# value)
+# The SQLAlchemy connection string to use to connect to the database.
+# (string value)
 # Deprecated group/name - [DEFAULT]/sql_connection
 # Deprecated group/name - [DATABASE]/sql_connection
 # Deprecated group/name - [sql]/connection
 #connection = <None>
-
-# The SQLAlchemy connection string to use to connect to the slave database.
-# (string value)
+connection = mysql+pymysql://glance:opnfv_secret@10.167.4.23/glance?charset=utf8
+# The SQLAlchemy connection string to use to connect to the slave
+# database. (string value)
 #slave_connection = <None>
 
-# The SQL mode to be used for MySQL sessions. This option, including the
-# default, overrides any server-set SQL mode. To use whatever SQL mode is set by
-# the server configuration, set this to no value. Example: mysql_sql_mode=
-# (string value)
+# The SQL mode to be used for MySQL sessions. This option, including
+# the default, overrides any server-set SQL mode. To use whatever SQL
+# mode is set by the server configuration, set this to no value.
+# Example: mysql_sql_mode= (string value)
 #mysql_sql_mode = TRADITIONAL
 
-# If True, transparently enables support for handling MySQL Cluster (NDB).
-# (boolean value)
+# If True, transparently enables support for handling MySQL Cluster
+# (NDB). (boolean value)
 #mysql_enable_ndb = false
 
-# Connections which have been present in the connection pool longer than this
-# number of seconds will be replaced with a new one the next time they are
-# checked out from the pool. (integer value)
+# Connections which have been present in the connection pool longer
+# than this number of seconds will be replaced with a new one the next
+# time they are checked out from the pool. (integer value)
 # Deprecated group/name - [DATABASE]/idle_timeout
 # Deprecated group/name - [database]/idle_timeout
 # Deprecated group/name - [DEFAULT]/sql_idle_timeout
 # Deprecated group/name - [DATABASE]/sql_idle_timeout
 # Deprecated group/name - [sql]/idle_timeout
 #connection_recycle_time = 3600
-
-# Minimum number of SQL connections to keep open in a pool. (integer value)
+connection_recycle_time = 300
+
+# Minimum number of SQL connections to keep open in a pool. (integer
+# value)
 # Deprecated group/name - [DEFAULT]/sql_min_pool_size
 # Deprecated group/name - [DATABASE]/sql_min_pool_size
 #min_pool_size = 1
 
-# Maximum number of SQL connections to keep open in a pool. Setting a value of 0
-# indicates no limit. (integer value)
+# Maximum number of SQL connections to keep open in a pool. Setting a
+# value of 0 indicates no limit. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_max_pool_size
 # Deprecated group/name - [DATABASE]/sql_max_pool_size
 #max_pool_size = 5
-
-# Maximum number of database connection retries during startup. Set to -1 to
-# specify an infinite retry count. (integer value)
+max_pool_size = 10
+
+# Maximum number of database connection retries during startup. Set to
+# -1 to specify an infinite retry count. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_max_retries
 # Deprecated group/name - [DATABASE]/sql_max_retries
 #max_retries = 10
-
-# Interval between retries of opening a SQL connection. (integer value)
+max_retries = -1
+
+# Interval between retries of opening a SQL connection. (integer
+# value)
 # Deprecated group/name - [DEFAULT]/sql_retry_interval
 # Deprecated group/name - [DATABASE]/reconnect_interval
 #retry_interval = 10
 
-# If set, use this value for max_overflow with SQLAlchemy. (integer value)
+# If set, use this value for max_overflow with SQLAlchemy. (integer
+# value)
 # Deprecated group/name - [DEFAULT]/sql_max_overflow
 # Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
 #max_overflow = 50
-
-# Verbosity of SQL debugging information: 0=None, 100=Everything. (integer
-# value)
+max_overflow = 30
+
+# Verbosity of SQL debugging information: 0=None, 100=Everything.
+# (integer value)
 # Minimum value: 0
 # Maximum value: 100
 # Deprecated group/name - [DEFAULT]/sql_connection_debug
@@ -1251,54 +1268,106 @@
 # Deprecated group/name - [DEFAULT]/sql_connection_trace
 #connection_trace = false
 
-# If set, use this value for pool_timeout with SQLAlchemy. (integer value)
+# If set, use this value for pool_timeout with SQLAlchemy. (integer
+# value)
 # Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
 #pool_timeout = <None>
 
-# Enable the experimental use of database reconnect on connection lost. (boolean
-# value)
+# Enable the experimental use of database reconnect on connection
+# lost. (boolean value)
 #use_db_reconnect = false
 
 # Seconds between retries of a database transaction. (integer value)
 #db_retry_interval = 1
 
-# If True, increases the interval between retries of a database operation up to
-# db_max_retry_interval. (boolean value)
+# If True, increases the interval between retries of a database
+# operation up to db_max_retry_interval. (boolean value)
 #db_inc_retry_interval = true
 
-# If db_inc_retry_interval is set, the maximum seconds between retries of a
-# database operation. (integer value)
+# If db_inc_retry_interval is set, the maximum seconds between retries
+# of a database operation. (integer value)
 #db_max_retry_interval = 10
 
-# Maximum retries in case of connection error or deadlock error before error is
-# raised. Set to -1 to specify an infinite retry count. (integer value)
+# Maximum retries in case of connection error or deadlock error before
+# error is raised. Set to -1 to specify an infinite retry count.
+# (integer value)
 #db_max_retries = 20
 
 #
 # From oslo.db.concurrency
 #
 
-# Enable the experimental use of thread pooling for all DB API calls (boolean
-# value)
+# Enable the experimental use of thread pooling for all DB API calls
+# (boolean value)
 # Deprecated group/name - [DEFAULT]/dbapi_use_tpool
 #use_tpool = false
 
+[oslo_policy]
+#
+# From oslo.policy
+#
+
+# This option controls whether or not to enforce scope when evaluating
+# policies. If ``True``, the scope of the token used in the request is
+# compared to the ``scope_types`` of the policy being enforced. If the
+# scopes do not match, an ``InvalidScope`` exception will be raised.
+# If ``False``, a message will be logged informing operators that
+# policies are being invoked with mismatching scope. (boolean value)
+#enforce_scope = false
+
+# The file that defines policies. (string value)
+#policy_file = policy.json
+policy_file = /etc/glance/policy.json
+
+# Default rule. Enforced when a requested rule is not found. (string
+# value)
+#policy_default_rule = default
+
+# Directories where policy configuration files are stored. They can be
+# relative to any directory in the search path defined by the
+# config_dir option, or absolute paths. The file defined by
+# policy_file must exist for these directories to be searched.
+# Missing or empty directories are ignored. (multi valued)
+#policy_dirs = policy.d
+
+# Content Type to send and receive data for REST based policy check
+# (string value)
+# Possible values:
+# application/x-www-form-urlencoded - <No description provided>
+# application/json - <No description provided>
+#remote_content_type = application/x-www-form-urlencoded
+
+# server identity verification for REST based policy check (boolean
+# value)
+#remote_ssl_verify_server_crt = false
+
+# Absolute path to ca cert file for REST based policy check (string
+# value)
+#remote_ssl_ca_crt_file = <None>
+
+# Absolute path to client cert for REST based policy check (string
+# value)
+#remote_ssl_client_crt_file = <None>
+
+# Absolute path client key file REST based policy check (string value)
+#remote_ssl_client_key_file = <None>
 
 [keystone_authtoken]
-
 #
 # From keystonemiddleware.auth_token
 #
 
 # Complete "public" Identity API endpoint. This endpoint should not be an
-# "admin" endpoint, as it should be accessible by all end users. Unauthenticated
-# clients are redirected to this endpoint to authenticate. Although this
-# endpoint should ideally be unversioned, client support in the wild varies. If
-# you're using a versioned v2 endpoint here, then this should *not* be the same
-# endpoint the service user utilizes for validating tokens, because normal end
-# users may not be able to reach that endpoint. (string value)
+# "admin" endpoint, as it should be accessible by all end users.
+# Unauthenticated clients are redirected to this endpoint to authenticate.
+# Although this endpoint should ideally be unversioned, client support in the
+# wild varies. If you're using a versioned v2 endpoint here, then this should
+# *not* be the same endpoint the service user utilizes for validating tokens,
+# because normal end users may not be able to reach that endpoint. (string
+# value)
 # Deprecated group/name - [keystone_authtoken]/auth_uri
 #www_authenticate_uri = <None>
+www_authenticate_uri = http://10.167.4.35:5000
 
 # DEPRECATED: Complete "public" Identity API endpoint. This endpoint should not
 # be an "admin" endpoint, as it should be accessible by all end users.
@@ -1311,9 +1380,10 @@
 # release. (string value)
 # This option is deprecated for removal since Queens.
 # Its value may be silently ignored in the future.
-# Reason: The auth_uri option is deprecated in favor of www_authenticate_uri and
-# will be removed in the S  release.
+# Reason: The auth_uri option is deprecated in favor of www_authenticate_uri
+# and will be removed in the S  release.
 #auth_uri = <None>
+auth_uri = http://10.167.4.35:5000
 
 # API version of the admin Identity API endpoint. (string value)
 #auth_version = <None>
@@ -1326,8 +1396,8 @@
 # value)
 #http_connect_timeout = <None>
 
-# How many times are we trying to reconnect when communicating with Identity API
-# Server. (integer value)
+# How many times are we trying to reconnect when communicating with Identity
+# API Server. (integer value)
 #http_request_max_retries = 3
 
 # Request environment key where the Swift cache object is stored. When
@@ -1351,10 +1421,11 @@
 
 # The region in which the identity server can be found. (string value)
 #region_name = <None>
+region_name = RegionOne
 
 # DEPRECATED: Directory used to cache files related to PKI tokens. This option
-# has been deprecated in the Ocata release and will be removed in the P release.
-# (string value)
+# has been deprecated in the Ocata release and will be removed in the P
+# release. (string value)
 # This option is deprecated for removal since Ocata.
 # Its value may be silently ignored in the future.
 # Reason: PKI token format is no longer supported.
@@ -1366,15 +1437,15 @@
 #memcached_servers = <None>
 
 # In order to prevent excessive effort spent validating tokens, the middleware
-# caches previously-seen tokens for a configurable duration (in seconds). Set to
-# -1 to disable caching completely. (integer value)
+# caches previously-seen tokens for a configurable duration (in seconds). Set
+# to -1 to disable caching completely. (integer value)
 #token_cache_time = 300
 
 # DEPRECATED: Determines the frequency at which the list of revoked tokens is
 # retrieved from the Identity service (in seconds). A high number of revocation
 # events combined with a low cache duration may significantly reduce
-# performance. Only valid for PKI tokens. This option has been deprecated in the
-# Ocata release and will be removed in the P release. (integer value)
+# performance. Only valid for PKI tokens. This option has been deprecated in
+# the Ocata release and will be removed in the P release. (integer value)
 # This option is deprecated for removal since Ocata.
 # Its value may be silently ignored in the future.
 # Reason: PKI token format is no longer supported.
@@ -1399,8 +1470,8 @@
 # tried again. (integer value)
 #memcache_pool_dead_retry = 300
 
-# (Optional) Maximum total number of open connections to every memcached server.
-# (integer value)
+# (Optional) Maximum total number of open connections to every memcached
+# server. (integer value)
 #memcache_pool_maxsize = 10
 
 # (Optional) Socket timeout in seconds for communicating with a memcached
@@ -1426,11 +1497,11 @@
 
 # Used to control the use and type of token binding. Can be set to: "disabled"
 # to not check token binding. "permissive" (default) to validate binding
-# information if the bind type is of a form known to the server and ignore it if
-# not. "strict" like "permissive" but if the bind type is unknown the token will
-# be rejected. "required" any form of token binding is needed to be allowed.
-# Finally the name of a binding method that must be present in tokens. (string
-# value)
+# information if the bind type is of a form known to the server and ignore it
+# if not. "strict" like "permissive" but if the bind type is unknown the token
+# will be rejected. "required" any form of token binding is needed to be
+# allowed. Finally the name of a binding method that must be present in tokens.
+# (string value)
 #enforce_token_bind = permissive
 
 # DEPRECATED: If true, the revocation list will be checked for cached tokens.
@@ -1457,962 +1528,126 @@
 # A choice of roles that must be present in a service token. Service tokens are
 # allowed to request that an expired token can be used and so this check should
 # tightly control that only actual services should be sending this token. Roles
-# here are applied as an ANY check so any role in this list must be present. For
-# backwards compatibility reasons this currently only affects the allow_expired
-# check. (list value)
+# here are applied as an ANY check so any role in this list must be present.
+# For backwards compatibility reasons this currently only affects the
+# allow_expired check. (list value)
 #service_token_roles = service
 
-# For backwards compatibility reasons we must let valid service tokens pass that
-# don't pass the service_token_roles check as valid. Setting this true will
-# become the default in a future release and should be enabled if possible.
-# (boolean value)
+# For backwards compatibility reasons we must let valid service tokens pass
+# that don't pass the service_token_roles check as valid. Setting this true
+# will become the default in a future release and should be enabled if
+# possible. (boolean value)
 #service_token_roles_required = false
 
 # Authentication type to load (string value)
 # Deprecated group/name - [keystone_authtoken]/auth_plugin
 #auth_type = <None>
+auth_type = password
 
 # Config Section from which to load plugin specific options (string value)
 #auth_section = <None>
 
-
-[matchmaker_redis]
-
-#
-# From oslo.messaging
-#
-
-# DEPRECATED: Host to locate redis. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#host = 127.0.0.1
-
-# DEPRECATED: Use this port to connect to redis host. (port value)
-# Minimum value: 0
-# Maximum value: 65535
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#port = 6379
-
-# DEPRECATED: Password for Redis server (optional). (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#password =
-
-# DEPRECATED: List of Redis Sentinel hosts (fault tolerance mode), e.g.,
-# [host:port, host1:port ... ] (list value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#sentinel_hosts =
-
-# Redis replica set name. (string value)
-#sentinel_group_name = oslo-messaging-zeromq
-
-# Time in ms to wait between connection attempts. (integer value)
-#wait_timeout = 2000
-
-# Time in ms to wait before the transaction is killed. (integer value)
-#check_timeout = 20000
-
-# Timeout in ms on blocking socket operations. (integer value)
-#socket_timeout = 10000
-
-
-[oslo_messaging_amqp]
-
-#
-# From oslo.messaging
-#
-
-# Name for the AMQP container. must be globally unique. Defaults to a generated
-# UUID (string value)
-#container_name = <None>
-
-# Timeout for inactive connections (in seconds) (integer value)
-#idle_timeout = 0
-
-# Debug: dump AMQP frames to stdout (boolean value)
-#trace = false
-
-# Attempt to connect via SSL. If no other ssl-related parameters are given, it
-# will use the system's CA-bundle to verify the server's certificate. (boolean
+# Name of nova region to use. Useful if keystone manages more than one region.
+# (string value)
+#region_name = <None>
+region_name = RegionOne
+
+# Type of the nova endpoint to use.  This endpoint will be looked up in the
+# keystone catalog and should be one of public, internal or admin. (string
 # value)
-#ssl = false
-
-# CA certificate PEM file used to verify the server's certificate (string value)
-#ssl_ca_file =
-
-# Self-identifying certificate PEM file for client authentication (string value)
-#ssl_cert_file =
-
-# Private key PEM file used to sign ssl_cert_file certificate (optional) (string
+# Possible values:
+# public - <No description provided>
+# admin - <No description provided>
+# internal - <No description provided>
+#endpoint_type = public
+endpoint_type = internalURL
+
+# API version of the admin Identity API endpoint. (string value)
+#auth_version = <None>
+
+
+# Authentication URL (string value)
+#auth_url = <None>
+auth_url = http://10.167.4.35:35357
+
+# Authentication type to load (string value)
+# Deprecated group/name - [nova]/auth_plugin
+#auth_type = <None>
+auth_type = password
+
+# Required if identity server requires client certificate (string value)
+#certfile = <None>
+
+# A PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# Defaults to system CAs. (string value)
+#cafile = <None>
+
+# Optional domain ID to use with v3 and v2 parameters. It will be used for both
+# the user and project domain in v3 and ignored in v2 authentication. (string
 # value)
-#ssl_key_file =
-
-# Password for decrypting ssl_key_file (if encrypted) (string value)
-#ssl_key_password = <None>
-
-# By default SSL checks that the name in the server's certificate matches the
-# hostname in the transport_url. In some configurations it may be preferable to
-# use the virtual hostname instead, for example if the server uses the Server
-# Name Indication TLS extension (rfc6066) to provide a certificate per virtual
-# host. Set ssl_verify_vhost to True if the server's SSL certificate uses the
-# virtual host name instead of the DNS name. (boolean value)
-#ssl_verify_vhost = false
-
-# DEPRECATED: Accept clients using either SSL or plain TCP (boolean value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Not applicable - not a SSL server
-#allow_insecure_clients = false
-
-# Space separated list of acceptable SASL mechanisms (string value)
-#sasl_mechanisms =
-
-# Path to directory that contains the SASL configuration (string value)
-#sasl_config_dir =
-
-# Name of configuration file (without .conf suffix) (string value)
-#sasl_config_name =
-
-# SASL realm to use if no realm present in username (string value)
-#sasl_default_realm =
-
-# DEPRECATED: User name for message broker authentication (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the username.
-#username =
-
-# DEPRECATED: Password for message broker authentication (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the password.
-#password =
-
-# Seconds to pause before attempting to re-connect. (integer value)
-# Minimum value: 1
-#connection_retry_interval = 1
-
-# Increase the connection_retry_interval by this many seconds after each
-# unsuccessful failover attempt. (integer value)
-# Minimum value: 0
-#connection_retry_backoff = 2
-
-# Maximum limit for connection_retry_interval + connection_retry_backoff
-# (integer value)
-# Minimum value: 1
-#connection_retry_interval_max = 30
-
-# Time to pause between re-connecting an AMQP 1.0 link that failed due to a
-# recoverable error. (integer value)
-# Minimum value: 1
-#link_retry_delay = 10
-
-# The maximum number of attempts to re-send a reply message which failed due to
-# a recoverable error. (integer value)
-# Minimum value: -1
-#default_reply_retry = 0
-
-# The deadline for an rpc reply message delivery. (integer value)
-# Minimum value: 5
-#default_reply_timeout = 30
-
-# The deadline for an rpc cast or call message delivery. Only used when caller
-# does not provide a timeout expiry. (integer value)
-# Minimum value: 5
-#default_send_timeout = 30
-
-# The deadline for a sent notification message delivery. Only used when caller
-# does not provide a timeout expiry. (integer value)
-# Minimum value: 5
-#default_notify_timeout = 30
-
-# The duration to schedule a purge of idle sender links. Detach link after
-# expiry. (integer value)
-# Minimum value: 1
-#default_sender_link_timeout = 600
-
-# Indicates the addressing mode used by the driver.
-# Permitted values:
-# 'legacy'   - use legacy non-routable addressing
-# 'routable' - use routable addresses
-# 'dynamic'  - use legacy addresses if the message bus does not support routing
-# otherwise use routable addressing (string value)
-#addressing_mode = dynamic
-
-# Enable virtual host support for those message buses that do not natively
-# support virtual hosting (such as qpidd). When set to true the virtual host
-# name will be added to all message bus addresses, effectively creating a
-# private 'subnet' per virtual host. Set to False if the message bus supports
-# virtual hosting using the 'hostname' field in the AMQP 1.0 Open performative
-# as the name of the virtual host. (boolean value)
-#pseudo_vhost = true
-
-# address prefix used when sending to a specific server (string value)
-#server_request_prefix = exclusive
-
-# address prefix used when broadcasting to all servers (string value)
-#broadcast_prefix = broadcast
-
-# address prefix when sending to any server in group (string value)
-#group_request_prefix = unicast
-
-# Address prefix for all generated RPC addresses (string value)
-#rpc_address_prefix = openstack.org/om/rpc
-
-# Address prefix for all generated Notification addresses (string value)
-#notify_address_prefix = openstack.org/om/notify
-
-# Appended to the address prefix when sending a fanout message. Used by the
-# message bus to identify fanout messages. (string value)
-#multicast_address = multicast
-
-# Appended to the address prefix when sending to a particular RPC/Notification
-# server. Used by the message bus to identify messages sent to a single
-# destination. (string value)
-#unicast_address = unicast
-
-# Appended to the address prefix when sending to a group of consumers. Used by
-# the message bus to identify messages that should be delivered in a round-robin
-# fashion across consumers. (string value)
-#anycast_address = anycast
-
-# Exchange name used in notification addresses.
-# Exchange name resolution precedence:
-# Target.exchange if set
-# else default_notification_exchange if set
-# else control_exchange if set
-# else 'notify' (string value)
-#default_notification_exchange = <None>
-
-# Exchange name used in RPC addresses.
-# Exchange name resolution precedence:
-# Target.exchange if set
-# else default_rpc_exchange if set
-# else control_exchange if set
-# else 'rpc' (string value)
-#default_rpc_exchange = <None>
-
-# Window size for incoming RPC Reply messages. (integer value)
-# Minimum value: 1
-#reply_link_credit = 200
-
-# Window size for incoming RPC Request messages (integer value)
-# Minimum value: 1
-#rpc_server_credit = 100
-
-# Window size for incoming Notification messages (integer value)
-# Minimum value: 1
-#notify_server_credit = 100
-
-# Send messages of this type pre-settled.
-# Pre-settled messages will not receive acknowledgement
-# from the peer. Note well: pre-settled messages may be
-# silently discarded if the delivery fails.
-# Permitted values:
-# 'rpc-call' - send RPC Calls pre-settled
-# 'rpc-reply'- send RPC Replies pre-settled
-# 'rpc-cast' - Send RPC Casts pre-settled
-# 'notify'   - Send Notifications pre-settled
-#  (multi valued)
-#pre_settled = rpc-cast
-#pre_settled = rpc-reply
-
-
-[oslo_messaging_kafka]
-
-#
-# From oslo.messaging
-#
-
-# DEPRECATED: Default Kafka broker Host (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#kafka_default_host = localhost
-
-# DEPRECATED: Default Kafka broker Port (port value)
-# Minimum value: 0
-# Maximum value: 65535
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#kafka_default_port = 9092
-
-# Max fetch bytes of Kafka consumer (integer value)
-#kafka_max_fetch_bytes = 1048576
-
-# Default timeout(s) for Kafka consumers (floating point value)
-#kafka_consumer_timeout = 1.0
-
-# DEPRECATED: Pool Size for Kafka Consumers (integer value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#pool_size = 10
-
-# DEPRECATED: The pool size limit for connections expiration policy (integer
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#conn_pool_min_size = 2
-
-# DEPRECATED: The time-to-live in sec of idle connections in the pool (integer
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#conn_pool_ttl = 1200
-
-# Group id for Kafka consumer. Consumers in one group will coordinate message
-# consumption (string value)
-#consumer_group = oslo_messaging_consumer
-
-# Upper bound on the delay for KafkaProducer batching in seconds (floating point
-# value)
-#producer_batch_timeout = 0.0
-
-# Size of batch for the producer async send (integer value)
-#producer_batch_size = 16384
-
-
-[oslo_messaging_notifications]
-
-#
-# From oslo.messaging
-#
-
-# The Drivers(s) to handle sending notifications. Possible values are messaging,
-# messagingv2, routing, log, test, noop (multi valued)
-# Deprecated group/name - [DEFAULT]/notification_driver
-#driver =
-
-# A URL representing the messaging driver to use for notifications. If not set,
-# we fall back to the same configuration used for RPC. (string value)
-# Deprecated group/name - [DEFAULT]/notification_transport_url
-#transport_url = <None>
-
-# AMQP topic used for OpenStack notifications. (list value)
-# Deprecated group/name - [rpc_notifier2]/topics
-# Deprecated group/name - [DEFAULT]/notification_topics
-#topics = notifications
-
-# The maximum number of attempts to re-send a notification message which failed
-# to be delivered due to a recoverable error. 0 - No retry, -1 - indefinite
-# (integer value)
-#retry = -1
-
-
-[oslo_messaging_rabbit]
-
-#
-# From oslo.messaging
-#
-
-# Use durable queues in AMQP. (boolean value)
-# Deprecated group/name - [DEFAULT]/amqp_durable_queues
-# Deprecated group/name - [DEFAULT]/rabbit_durable_queues
-#amqp_durable_queues = false
-
-# Auto-delete queues in AMQP. (boolean value)
-#amqp_auto_delete = false
-
-# Enable SSL (boolean value)
-#ssl = <None>
-
-# SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and
-# SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some
-# distributions. (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_version
-#ssl_version =
-
-# SSL key file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_keyfile
-#ssl_key_file =
-
-# SSL cert file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_certfile
-#ssl_cert_file =
-
-# SSL certification authority file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_ca_certs
-#ssl_ca_file =
-
-# How long to wait before reconnecting in response to an AMQP consumer cancel
-# notification. (floating point value)
-#kombu_reconnect_delay = 1.0
-
-# EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression will not
-# be used. This option may not be available in future versions. (string value)
-#kombu_compression = <None>
-
-# How long to wait a missing client before abandoning to send it its replies.
-# This value should not be longer than rpc_response_timeout. (integer value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_reconnect_timeout
-#kombu_missing_consumer_retry_timeout = 60
-
-# Determines how the next RabbitMQ node is chosen in case the one we are
-# currently connected to becomes unavailable. Takes effect only if more than one
-# RabbitMQ node is provided in config. (string value)
-# Possible values:
-# round-robin - <No description provided>
-# shuffle - <No description provided>
-#kombu_failover_strategy = round-robin
-
-# DEPRECATED: The RabbitMQ broker address where a single node is used. (string
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_host = localhost
-
-# DEPRECATED: The RabbitMQ broker port where a single node is used. (port value)
-# Minimum value: 0
-# Maximum value: 65535
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_port = 5672
-
-# DEPRECATED: RabbitMQ HA cluster host:port pairs. (list value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_hosts = $rabbit_host:$rabbit_port
-
-# DEPRECATED: The RabbitMQ userid. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_userid = guest
-
-# DEPRECATED: The RabbitMQ password. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_password = guest
-
-# The RabbitMQ login method. (string value)
-# Possible values:
-# PLAIN - <No description provided>
-# AMQPLAIN - <No description provided>
-# RABBIT-CR-DEMO - <No description provided>
-#rabbit_login_method = AMQPLAIN
-
-# DEPRECATED: The RabbitMQ virtual host. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_virtual_host = /
-
-# How frequently to retry connecting with RabbitMQ. (integer value)
-#rabbit_retry_interval = 1
-
-# How long to backoff for between retries when connecting to RabbitMQ. (integer
-# value)
-#rabbit_retry_backoff = 2
-
-# Maximum interval of RabbitMQ connection retries. Default is 30 seconds.
-# (integer value)
-#rabbit_interval_max = 30
-
-# DEPRECATED: Maximum number of RabbitMQ connection retries. Default is 0
-# (infinite retry count). (integer value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-#rabbit_max_retries = 0
-
-# Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change this
-# option, you must wipe the RabbitMQ database. In RabbitMQ 3.0, queue mirroring
-# is no longer controlled by the x-ha-policy argument when declaring a queue. If
-# you just want to make sure that all queues (except those with auto-generated
-# names) are mirrored across all nodes, run: "rabbitmqctl set_policy HA
-# '^(?!amq\.).*' '{"ha-mode": "all"}' " (boolean value)
-#rabbit_ha_queues = false
-
-# Positive integer representing duration in seconds for queue TTL (x-expires).
-# Queues which are unused for the duration of the TTL are automatically deleted.
-# The parameter affects only reply and fanout queues. (integer value)
-# Minimum value: 1
-#rabbit_transient_queues_ttl = 1800
-
-# Specifies the number of messages to prefetch. Setting to zero allows unlimited
-# messages. (integer value)
-#rabbit_qos_prefetch_count = 0
-
-# Number of seconds after which the Rabbit broker is considered down if
-# heartbeat's keep-alive fails (0 disable the heartbeat). EXPERIMENTAL (integer
-# value)
-#heartbeat_timeout_threshold = 60
-
-# How often times during the heartbeat_timeout_threshold we check the heartbeat.
-# (integer value)
-#heartbeat_rate = 2
-
-# Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake (boolean value)
-#fake_rabbit = false
-
-# Maximum number of channels to allow (integer value)
-#channel_max = <None>
-
-# The maximum byte size for an AMQP frame (integer value)
-#frame_max = <None>
-
-# How often to send heartbeats for consumer's connections (integer value)
-#heartbeat_interval = 3
-
-# Arguments passed to ssl.wrap_socket (dict value)
-#ssl_options = <None>
-
-# Set socket timeout in seconds for connection's socket (floating point value)
-#socket_timeout = 0.25
-
-# Set TCP_USER_TIMEOUT in seconds for connection's socket (floating point value)
-#tcp_user_timeout = 0.25
-
-# Set delay for reconnection to some host which has connection error (floating
-# point value)
-#host_connection_reconnect_delay = 0.25
-
-# Connection factory implementation (string value)
-# Possible values:
-# new - <No description provided>
-# single - <No description provided>
-# read_write - <No description provided>
-#connection_factory = single
-
-# Maximum number of connections to keep queued. (integer value)
-#pool_max_size = 30
-
-# Maximum number of connections to create above `pool_max_size`. (integer value)
-#pool_max_overflow = 0
-
-# Default number of seconds to wait for a connections to available (integer
-# value)
-#pool_timeout = 30
-
-# Lifetime of a connection (since creation) in seconds or None for no recycling.
-# Expired connections are closed on acquire. (integer value)
-#pool_recycle = 600
-
-# Threshold at which inactive (since release) connections are considered stale
-# in seconds or None for no staleness. Stale connections are closed on acquire.
-# (integer value)
-#pool_stale = 60
-
-# Default serialization mechanism for serializing/deserializing
-# outgoing/incoming messages (string value)
-# Possible values:
-# json - <No description provided>
-# msgpack - <No description provided>
-#default_serializer_type = json
-
-# Persist notification messages. (boolean value)
-#notification_persistence = false
-
-# Exchange name for sending notifications (string value)
-#default_notification_exchange = ${control_exchange}_notification
-
-# Max number of not acknowledged message which RabbitMQ can send to notification
-# listener. (integer value)
-#notification_listener_prefetch_count = 100
-
-# Reconnecting retry count in case of connectivity problem during sending
-# notification, -1 means infinite retry. (integer value)
-#default_notification_retry_attempts = -1
-
-# Reconnecting retry delay in case of connectivity problem during sending
-# notification message (floating point value)
-#notification_retry_delay = 0.25
-
-# Time to live for rpc queues without consumers in seconds. (integer value)
-#rpc_queue_expiration = 60
-
-# Exchange name for sending RPC messages (string value)
-#default_rpc_exchange = ${control_exchange}_rpc
-
-# Exchange name for receiving RPC replies (string value)
-#rpc_reply_exchange = ${control_exchange}_rpc_reply
-
-# Max number of not acknowledged message which RabbitMQ can send to rpc
-# listener. (integer value)
-#rpc_listener_prefetch_count = 100
-
-# Max number of not acknowledged message which RabbitMQ can send to rpc reply
-# listener. (integer value)
-#rpc_reply_listener_prefetch_count = 100
-
-# Reconnecting retry count in case of connectivity problem during sending reply.
-# -1 means infinite retry during rpc_timeout (integer value)
-#rpc_reply_retry_attempts = -1
-
-# Reconnecting retry delay in case of connectivity problem during sending reply.
-# (floating point value)
-#rpc_reply_retry_delay = 0.25
-
-# Reconnecting retry count in case of connectivity problem during sending RPC
-# message, -1 means infinite retry. If actual retry attempts in not 0 the rpc
-# request could be processed more than one time (integer value)
-#default_rpc_retry_attempts = -1
-
-# Reconnecting retry delay in case of connectivity problem during sending RPC
-# message (floating point value)
-#rpc_retry_delay = 0.25
-
-
-[oslo_messaging_zmq]
-
-#
-# From oslo.messaging
-#
-
-# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
-# The "host" option should point or resolve to this address. (string value)
-#rpc_zmq_bind_address = *
-
-# MatchMaker driver. (string value)
-# Possible values:
-# redis - <No description provided>
-# sentinel - <No description provided>
-# dummy - <No description provided>
-#rpc_zmq_matchmaker = redis
-
-# Number of ZeroMQ contexts, defaults to 1. (integer value)
-#rpc_zmq_contexts = 1
-
-# Maximum number of ingress messages to locally buffer per topic. Default is
-# unlimited. (integer value)
-#rpc_zmq_topic_backlog = <None>
-
-# Directory for holding IPC sockets. (string value)
-#rpc_zmq_ipc_dir = /var/run/openstack
-
-# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
-# "host" option, if running Nova. (string value)
-#rpc_zmq_host = localhost
-
-# Number of seconds to wait before all pending messages will be sent after
-# closing a socket. The default value of -1 specifies an infinite linger period.
-# The value of 0 specifies no linger period. Pending messages shall be discarded
-# immediately when the socket is closed. Positive values specify an upper bound
-# for the linger period. (integer value)
-# Deprecated group/name - [DEFAULT]/rpc_cast_timeout
-#zmq_linger = -1
-
-# The default number of seconds that poll should wait. Poll raises timeout
-# exception when timeout expired. (integer value)
-#rpc_poll_timeout = 1
-
-# Expiration timeout in seconds of a name service record about existing target (
-# < 0 means no timeout). (integer value)
-#zmq_target_expire = 300
-
-# Update period in seconds of a name service record about existing target.
-# (integer value)
-#zmq_target_update = 180
-
-# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
-# value)
-#use_pub_sub = false
-
-# Use ROUTER remote proxy. (boolean value)
-#use_router_proxy = false
-
-# This option makes direct connections dynamic or static. It makes sense only
-# with use_router_proxy=False which means to use direct connections for direct
-# message types (ignored otherwise). (boolean value)
-#use_dynamic_connections = false
-
-# How many additional connections to a host will be made for failover reasons.
-# This option is actual only in dynamic connections mode. (integer value)
-#zmq_failover_connections = 2
-
-# Minimal port number for random ports range. (port value)
-# Minimum value: 0
-# Maximum value: 65535
-#rpc_zmq_min_port = 49153
-
-# Maximal port number for random ports range. (integer value)
-# Minimum value: 1
-# Maximum value: 65536
-#rpc_zmq_max_port = 65536
-
-# Number of retries to find free port number before fail with ZMQBindError.
-# (integer value)
-#rpc_zmq_bind_port_retries = 100
-
-# Default serialization mechanism for serializing/deserializing
-# outgoing/incoming messages (string value)
-# Possible values:
-# json - <No description provided>
-# msgpack - <No description provided>
-#rpc_zmq_serialization = json
-
-# This option configures round-robin mode in zmq socket. True means not keeping
-# a queue when server side disconnects. False means to keep queue and messages
-# even if server is disconnected, when the server appears we send all
-# accumulated messages to it. (boolean value)
-#zmq_immediate = true
-
-# Enable/disable TCP keepalive (KA) mechanism. The default value of -1 (or any
-# other negative value) means to skip any overrides and leave it to OS default;
-# 0 and 1 (or any other positive value) mean to disable and enable the option
-# respectively. (integer value)
-#zmq_tcp_keepalive = -1
-
-# The duration between two keepalive transmissions in idle condition. The unit
-# is platform dependent, for example, seconds in Linux, milliseconds in Windows
-# etc. The default value of -1 (or any other negative value and 0) means to skip
-# any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_idle = -1
-
-# The number of retransmissions to be carried out before declaring that remote
-# end is not available. The default value of -1 (or any other negative value and
-# 0) means to skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_cnt = -1
-
-# The duration between two successive keepalive retransmissions, if
-# acknowledgement to the previous keepalive transmission is not received. The
-# unit is platform dependent, for example, seconds in Linux, milliseconds in
-# Windows etc. The default value of -1 (or any other negative value and 0) means
-# to skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_intvl = -1
-
-# Maximum number of (green) threads to work concurrently. (integer value)
-#rpc_thread_pool_size = 100
-
-# Expiration timeout in seconds of a sent/received message after which it is not
-# tracked anymore by a client/server. (integer value)
-#rpc_message_ttl = 300
-
-# Wait for message acknowledgements from receivers. This mechanism works only
-# via proxy without PUB/SUB. (boolean value)
-#rpc_use_acks = false
-
-# Number of seconds to wait for an ack from a cast/call. After each retry
-# attempt this timeout is multiplied by some specified multiplier. (integer
-# value)
-#rpc_ack_timeout_base = 15
-
-# Number to multiply base ack timeout by after each retry attempt. (integer
-# value)
-#rpc_ack_timeout_multiplier = 2
-
-# Default number of message sending attempts in case of any problems occurred:
-# positive value N means at most N retries, 0 means no retries, None or -1 (or
-# any other negative values) mean to retry forever. This option is used only if
-# acknowledgments are enabled. (integer value)
-#rpc_retry_attempts = 3
-
-# List of publisher hosts SubConsumer can subscribe on. This option has higher
-# priority then the default publishers list taken from the matchmaker. (list
-# value)
-#subscribe_on =
-
-
-[oslo_policy]
-
-#
-# From oslo.policy
-#
-
-# This option controls whether or not to enforce scope when evaluating policies.
-# If ``True``, the scope of the token used in the request is compared to the
-# ``scope_types`` of the policy being enforced. If the scopes do not match, an
-# ``InvalidScope`` exception will be raised. If ``False``, a message will be
-# logged informing operators that policies are being invoked with mismatching
-# scope. (boolean value)
-#enforce_scope = false
-
-# The file that defines policies. (string value)
-#policy_file = policy.json
-
-# Default rule. Enforced when a requested rule is not found. (string value)
-#policy_default_rule = default
-
-# Directories where policy configuration files are stored. They can be relative
-# to any directory in the search path defined by the config_dir option, or
-# absolute paths. The file defined by policy_file must exist for these
-# directories to be searched.  Missing or empty directories are ignored. (multi
-# valued)
-#policy_dirs = policy.d
-
-# Content Type to send and receive data for REST based policy check (string
-# value)
-# Possible values:
-# application/x-www-form-urlencoded - <No description provided>
-# application/json - <No description provided>
-#remote_content_type = application/x-www-form-urlencoded
-
-# server identity verification for REST based policy check (boolean value)
-#remote_ssl_verify_server_crt = false
-
-# Absolute path to ca cert file for REST based policy check (string value)
-#remote_ssl_ca_crt_file = <None>
-
-# Absolute path to client cert for REST based policy check (string value)
-#remote_ssl_client_crt_file = <None>
-
-# Absolute path client key file REST based policy check (string value)
-#remote_ssl_client_key_file = <None>
-
-
-[paste_deploy]
-
-#
-# From glance.registry
-#
-
-#
-# Deployment flavor to use in the server application pipeline.
-#
-# Provide a string value representing the appropriate deployment
-# flavor used in the server application pipleline. This is typically
-# the partial name of a pipeline in the paste configuration file with
-# the service name removed.
-#
-# For example, if your paste section name in the paste configuration
-# file is [pipeline:glance-api-keystone], set ``flavor`` to
-# ``keystone``.
-#
-# Possible values:
-#     * String value representing a partial pipeline name.
-#
-# Related Options:
-#     * config_file
-#
-#  (string value)
-#flavor = keystone
-
-#
-# Name of the paste configuration file.
-#
-# Provide a string value representing the name of the paste
-# configuration file to use for configuring piplelines for
-# server application deployments.
-#
-# NOTES:
-#     * Provide the name or the path relative to the glance directory
-#       for the paste configuration file and not the absolute path.
-#     * The sample paste configuration file shipped with Glance need
-#       not be edited in most cases as it comes with ready-made
-#       pipelines for all common deployment flavors.
-#
-# If no value is specified for this option, the ``paste.ini`` file
-# with the prefix of the corresponding Glance service's configuration
-# file name will be searched for in the known configuration
-# directories. (For example, if this option is missing from or has no
-# value set in ``glance-api.conf``, the service will look for a file
-# named ``glance-api-paste.ini``.) If the paste configuration file is
-# not found, the service will not start.
-#
-# Possible values:
-#     * A string value representing the name of the paste configuration
-#       file.
-#
-# Related Options:
-#     * flavor
-#
-#  (string value)
-#config_file = glance-api-paste.ini
-
-
-[profiler]
-
-#
-# From glance.registry
-#
-
-#
-# Enables the profiling for all services on this node. Default value is False
-# (fully disable the profiling feature).
-#
-# Possible values:
-#
-# * True: Enables the feature
-# * False: Disables the feature. The profiling cannot be started via this
-# project
-# operations. If the profiling is triggered by another project, this project
-# part
-# will be empty.
-#  (boolean value)
-# Deprecated group/name - [profiler]/profiler_enabled
-#enabled = false
-
-#
-# Enables SQL requests profiling in services. Default value is False (SQL
-# requests won't be traced).
-#
-# Possible values:
-#
-# * True: Enables SQL requests profiling. Each SQL query will be part of the
-# trace and can the be analyzed by how much time was spent for that.
-# * False: Disables SQL requests profiling. The spent time is only shown on a
-# higher level of operations. Single SQL queries cannot be analyzed this
-# way.
-#  (boolean value)
-#trace_sqlalchemy = false
-
-#
-# Secret key(s) to use for encrypting context data for performance profiling.
-# This string value should have the following format: <key1>[,<key2>,...<keyn>],
-# where each key is some random string. A user who triggers the profiling via
-# the REST API has to set one of these keys in the headers of the REST API call
-# to include profiling results of this node for this particular project.
-#
-# Both "enabled" flag and "hmac_keys" config options should be set to enable
-# profiling. Also, to generate correct profiling information across all services
-# at least one key needs to be consistent between OpenStack projects. This
-# ensures it can be used from client side to generate the trace, containing
-# information from all possible resources. (string value)
-#hmac_keys = SECRET_KEY
-
-#
-# Connection string for a notifier backend. Default value is messaging:// which
-# sets the notifier to oslo_messaging.
-#
-# Examples of possible values:
-#
-# * messaging://: use oslo_messaging driver for sending notifications.
-# * mongodb://127.0.0.1:27017 : use mongodb driver for sending notifications.
-# * elasticsearch://127.0.0.1:9200 : use elasticsearch driver for sending
-# notifications.
-#  (string value)
-#connection_string = messaging://
-
-#
-# Document type for notification indexing in elasticsearch.
-#  (string value)
-#es_doc_type = notification
-
-#
-# This parameter is a time value parameter (for example: es_scroll_time=2m),
-# indicating for how long the nodes that participate in the search will maintain
-# relevant resources in order to continue and support it.
-#  (string value)
-#es_scroll_time = 2m
-
-#
-# Elasticsearch splits large requests in batches. This parameter defines
-# maximum size of each batch (for example: es_scroll_size=10000).
-#  (integer value)
-#es_scroll_size = 10000
-
-#
-# Redissentinel provides a timeout option on the connections.
-# This parameter defines that timeout (for example: socket_timeout=0.1).
-#  (floating point value)
-#socket_timeout = 0.1
-
-#
-# Redissentinel uses a service name to identify a master redis service.
-# This parameter defines the name (for example:
-# sentinal_service_name=mymaster).
-#  (string value)
-#sentinel_service_name = mymaster
+#default_domain_id = <None>
+
+# Optional domain name to use with v3 API and v2 parameters. It will be used for
+# both the user and project domain in v3 and ignored in v2 authentication.
+# (string value)
+#default_domain_name = <None>
+
+# Domain ID to scope to (string value)
+#domain_id = <None>
+
+# Domain name to scope to (string value)
+#domain_name = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# Required if identity server requires client certificate (string value)
+#keyfile = <None>
+
+# User's password (string value)
+#password = <None>
+password = opnfv_secret
+
+# Domain ID containing project (string value)
+#project_domain_id = <None>
+project_domain_id = default
+
+# Domain name containing project (string value)
+#project_domain_name = <None>
+
+# Project ID to scope to (string value)
+#project_id = <None>
+
+# Project name to scope to (string value)
+#project_name = <None>
+project_name = service
+
+# Scope for system operations (string value)
+#system_scope = <None>
+
+# Tenant ID (string value)
+#tenant_id = <None>
+
+# Tenant Name (string value)
+#tenant_name = <None>
+
+# Timeout value for http requests (integer value)
+#timeout = <None>
+
+# Trust ID (string value)
+#trust_id = <None>
+
+# User's domain id (string value)
+#user_domain_id = <None>
+user_domain_id = default
+
+# User's domain name (string value)
+#user_domain_name = <None>
+
+# User ID (string value)
+#user_id = <None>
+
+# Username (string value)
+# Deprecated group/name - [neutron]/user_name
+#username = <None>
+username = glance

2018-09-01 22:42:01,468 [salt.state       :1941][INFO    ][21878] Completed state [/etc/glance/glance-registry.conf] at time 22:42:01.468751 duration_in_ms=261.855
2018-09-01 22:42:01,469 [salt.state       :1770][INFO    ][21878] Running state [/etc/glance/glance-scrubber.conf] at time 22:42:01.469150
2018-09-01 22:42:01,469 [salt.state       :1803][INFO    ][21878] Executing state file.managed for [/etc/glance/glance-scrubber.conf]
2018-09-01 22:42:01,488 [salt.fileclient  :1215][INFO    ][21878] Fetching file from saltenv 'base', ** done ** 'glance/files/queens/glance-scrubber.conf.Debian'
2018-09-01 22:42:01,583 [salt.state       :290 ][INFO    ][21878] File changed:
--- 
+++ 
@@ -1,3 +1,4 @@
+
 [DEFAULT]
 
 #
@@ -31,7 +32,8 @@
 #
 # Maximum number of image members per image.
 #
-# This limits the maximum of users an image can be shared with. Any negative
+# This limits the maximum of users an image can be shared with. Any
+# negative
 # value is interpreted as unlimited.
 #
 # Related options:
@@ -43,10 +45,12 @@
 #
 # Maximum number of properties allowed on an image.
 #
-# This enforces an upper limit on the number of additional properties an image
+# This enforces an upper limit on the number of additional properties
+# an image
 # can have. Any negative value is interpreted as unlimited.
 #
-# NOTE: This won't have any impact if additional properties are disabled. Please
+# NOTE: This won't have any impact if additional properties are
+# disabled. Please
 # refer to ``allow_additional_image_properties``.
 #
 # Related options:
@@ -103,7 +107,8 @@
 #
 # Finally, when this configuration option is set to
 # ``glance.db.simple.api``, image catalog data is stored in and read
-# from an in-memory data structure. This is primarily used for testing.
+# from an in-memory data structure. This is primarily used for
+# testing.
 #
 # Related options:
 #     * enable_v2_api
@@ -116,8 +121,8 @@
 # Glance registry service is deprecated for removal.
 #
 # More information can be found from the spec:
-# http://specs.openstack.org/openstack/glance-specs/specs/queens/approved/glance
-# /deprecate-registry.html
+# http://specs.openstack.org/openstack/glance-
+# specs/specs/queens/approved/glance/deprecate-registry.html
 #data_api = glance.db.sqlalchemy.api
 
 #
@@ -234,9 +239,10 @@
 #  (boolean value)
 # This option is deprecated for removal since Newton.
 # Its value may be silently ignored in the future.
-# Reason: This option will be removed in the Pike release or later because the
-# same functionality can be achieved with greater granularity by using policies.
-# Please see the Newton release notes for more information.
+# Reason: This option will be removed in the Pike release or later
+# because the same functionality can be achieved with greater
+# granularity by using policies. Please see the Newton release notes
+# for more information.
 #show_multiple_locations = false
 
 #
@@ -268,18 +274,25 @@
 #
 # Maximum amount of image storage per tenant.
 #
-# This enforces an upper limit on the cumulative storage consumed by all images
+# This enforces an upper limit on the cumulative storage consumed by
+# all images
 # of a tenant across all stores. This is a per-tenant limit.
 #
-# The default unit for this configuration option is Bytes. However, storage
-# units can be specified using case-sensitive literals ``B``, ``KB``, ``MB``,
-# ``GB`` and ``TB`` representing Bytes, KiloBytes, MegaBytes, GigaBytes and
-# TeraBytes respectively. Note that there should not be any space between the
-# value and unit. Value ``0`` signifies no quota enforcement. Negative values
+# The default unit for this configuration option is Bytes. However,
+# storage
+# units can be specified using case-sensitive literals ``B``, ``KB``,
+# ``MB``,
+# ``GB`` and ``TB`` representing Bytes, KiloBytes, MegaBytes,
+# GigaBytes and
+# TeraBytes respectively. Note that there should not be any space
+# between the
+# value and unit. Value ``0`` signifies no quota enforcement. Negative
+# values
 # are invalid and result in errors.
 #
 # Possible values:
-#     * A string that is a valid concatenation of a non-negative integer
+#     * A string that is a valid concatenation of a non-negative
+# integer
 #       representing the storage value and an optional string literal
 #       representing storage units as mentioned above.
 #
@@ -406,8 +419,8 @@
 # Glance registry service is deprecated for removal.
 #
 # More information can be found from the spec:
-# http://specs.openstack.org/openstack/glance-specs/specs/queens/approved/glance
-# /deprecate-registry.html
+# http://specs.openstack.org/openstack/glance-
+# specs/specs/queens/approved/glance/deprecate-registry.html
 #enable_v2_registry = true
 
 #
@@ -553,15 +566,22 @@
 #
 # The amount of time, in seconds, to delay image scrubbing.
 #
-# When delayed delete is turned on, an image is put into ``pending_delete``
-# state upon deletion until the scrubber deletes its image data. Typically, soon
-# after the image is put into ``pending_delete`` state, it is available for
-# scrubbing. However, scrubbing can be delayed until a later point using this
-# configuration option. This option denotes the time period an image spends in
+# When delayed delete is turned on, an image is put into
+# ``pending_delete``
+# state upon deletion until the scrubber deletes its image data.
+# Typically, soon
+# after the image is put into ``pending_delete`` state, it is
+# available for
+# scrubbing. However, scrubbing can be delayed until a later point
+# using this
+# configuration option. This option denotes the time period an image
+# spends in
 # ``pending_delete`` state before it is available for scrubbing.
 #
-# It is important to realize that this has storage implications. The larger the
-# ``scrub_time``, the longer the time to reclaim backend storage from deleted
+# It is important to realize that this has storage implications. The
+# larger the
+# ``scrub_time``, the longer the time to reclaim backend storage from
+# deleted
 # images.
 #
 # Possible values:
@@ -577,11 +597,16 @@
 #
 # The size of thread pool to be used for scrubbing images.
 #
-# When there are a large number of images to scrub, it is beneficial to scrub
-# images in parallel so that the scrub queue stays in control and the backend
-# storage is reclaimed in a timely fashion. This configuration option denotes
-# the maximum number of images to be scrubbed in parallel. The default value is
-# one, which signifies serial scrubbing. Any value above one indicates parallel
+# When there are a large number of images to scrub, it is beneficial
+# to scrub
+# images in parallel so that the scrub queue stays in control and the
+# backend
+# storage is reclaimed in a timely fashion. This configuration option
+# denotes
+# the maximum number of images to be scrubbed in parallel. The default
+# value is
+# one, which signifies serial scrubbing. Any value above one indicates
+# parallel
 # scrubbing.
 #
 # Possible values:
@@ -597,19 +622,28 @@
 #
 # Turn on/off delayed delete.
 #
-# Typically when an image is deleted, the ``glance-api`` service puts the image
-# into ``deleted`` state and deletes its data at the same time. Delayed delete
-# is a feature in Glance that delays the actual deletion of image data until a
+# Typically when an image is deleted, the ``glance-api`` service puts
+# the image
+# into ``deleted`` state and deletes its data at the same time.
+# Delayed delete
+# is a feature in Glance that delays the actual deletion of image data
+# until a
 # later point in time (as determined by the configuration option
 # ``scrub_time``).
-# When delayed delete is turned on, the ``glance-api`` service puts the image
-# into ``pending_delete`` state upon deletion and leaves the image data in the
-# storage backend for the image scrubber to delete at a later time. The image
-# scrubber will move the image into ``deleted`` state upon successful deletion
+# When delayed delete is turned on, the ``glance-api`` service puts
+# the image
+# into ``pending_delete`` state upon deletion and leaves the image
+# data in the
+# storage backend for the image scrubber to delete at a later time.
+# The image
+# scrubber will move the image into ``deleted`` state upon successful
+# deletion
 # of image data.
 #
-# NOTE: When delayed delete is turned on, image scrubber MUST be running as a
-# periodic task to prevent the backend storage from filling up with undesired
+# NOTE: When delayed delete is turned on, image scrubber MUST be
+# running as a
+# periodic task to prevent the backend storage from filling up with
+# undesired
 # usage.
 #
 # Possible values:
@@ -627,13 +661,19 @@
 #
 # Time interval, in seconds, between scrubber runs in daemon mode.
 #
-# Scrubber can be run either as a cron job or daemon. When run as a daemon, this
-# configuration time specifies the time period between two runs. When the
-# scrubber wakes up, it fetches and scrubs all ``pending_delete`` images that
-# are available for scrubbing after taking ``scrub_time`` into consideration.
-#
-# If the wakeup time is set to a large number, there may be a large number of
-# images to be scrubbed for each run. Also, this impacts how quickly the backend
+# Scrubber can be run either as a cron job or daemon. When run as a
+# daemon, this
+# configuration time specifies the time period between two runs. When
+# the
+# scrubber wakes up, it fetches and scrubs all ``pending_delete``
+# images that
+# are available for scrubbing after taking ``scrub_time`` into
+# consideration.
+#
+# If the wakeup time is set to a large number, there may be a large
+# number of
+# images to be scrubbed for each run. Also, this impacts how quickly
+# the backend
 # storage is reclaimed.
 #
 # Possible values:
@@ -645,7 +685,7 @@
 #
 #  (integer value)
 # Minimum value: 0
-#wakeup_time = 300
+wakeup_time = 300
 
 #
 # Run scrubber as a daemon.
@@ -669,234 +709,123 @@
 #
 #  (boolean value)
 #daemon = false
-
+daemon = false
 #
 # From oslo.log
 #
 
-# If set to true, the logging level will be set to DEBUG instead of the default
-# INFO level. (boolean value)
+# If set to true, the logging level will be set to DEBUG instead of
+# the default INFO level. (boolean value)
 # Note: This option can be changed without restarting.
 #debug = false
 
-# The name of a logging configuration file. This file is appended to any
-# existing logging configuration files. For details about logging configuration
-# files, see the Python logging module documentation. Note that when logging
-# configuration files are used then all logging configuration is set in the
-# configuration file and other logging configuration options are ignored (for
-# example, logging_context_format_string). (string value)
+# The name of a logging configuration file. This file is appended to
+# any existing logging configuration files. For details about logging
+# configuration files, see the Python logging module documentation.
+# Note that when logging configuration files are used then all logging
+# configuration is set in the configuration file and other logging
+# configuration options are ignored (for example,
+# logging_context_format_string). (string value)
 # Note: This option can be changed without restarting.
 # Deprecated group/name - [DEFAULT]/log_config
-#log_config_append = <None>
 
 # Defines the format string for %%(asctime)s in log records. Default:
-# %(default)s . This option is ignored if log_config_append is set. (string
-# value)
+# %(default)s . This option is ignored if log_config_append is set.
+# (string value)
 #log_date_format = %Y-%m-%d %H:%M:%S
 
-# (Optional) Name of log file to send logging output to. If no default is set,
-# logging will go to stderr as defined by use_stderr. This option is ignored if
-# log_config_append is set. (string value)
+# (Optional) Name of log file to send logging output to. If no default
+# is set, logging will go to stderr as defined by use_stderr. This
+# option is ignored if log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logfile
 #log_file = <None>
-
-# (Optional) The base directory used for relative log_file  paths. This option
-# is ignored if log_config_append is set. (string value)
+log_file = /var/log/glance/scrubber.log
+
+# (Optional) The base directory used for relative log_file  paths.
+# This option is ignored if log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logdir
 #log_dir = <None>
 
-# Uses logging handler designed to watch file system. When log file is moved or
-# removed this handler will open a new log file with specified path
-# instantaneously. It makes sense only if log_file option is specified and Linux
-# platform is used. This option is ignored if log_config_append is set. (boolean
-# value)
+# Uses logging handler designed to watch file system. When log file is
+# moved or removed this handler will open a new log file with
+# specified path instantaneously. It makes sense only if log_file
+# option is specified and Linux platform is used. This option is
+# ignored if log_config_append is set. (boolean value)
 #watch_log_file = false
 
-# Use syslog for logging. Existing syslog format is DEPRECATED and will be
-# changed later to honor RFC5424. This option is ignored if log_config_append is
-# set. (boolean value)
+# Use syslog for logging. Existing syslog format is DEPRECATED and
+# will be changed later to honor RFC5424. This option is ignored if
+# log_config_append is set. (boolean value)
 #use_syslog = false
 
-# Enable journald for logging. If running in a systemd environment you may wish
-# to enable journal support. Doing so will use the journal native protocol which
-# includes structured metadata in addition to log messages.This option is
-# ignored if log_config_append is set. (boolean value)
+# Enable journald for logging. If running in a systemd environment you
+# may wish to enable journal support. Doing so will use the journal
+# native protocol which includes structured metadata in addition to
+# log messages.This option is ignored if log_config_append is set.
+# (boolean value)
 #use_journal = false
 
 # Syslog facility to receive log lines. This option is ignored if
 # log_config_append is set. (string value)
 #syslog_log_facility = LOG_USER
 
-# Use JSON formatting for logging. This option is ignored if log_config_append
-# is set. (boolean value)
+# Use JSON formatting for logging. This option is ignored if
+# log_config_append is set. (boolean value)
 #use_json = false
 
-# Log output to standard error. This option is ignored if log_config_append is
-# set. (boolean value)
+# Log output to standard error. This option is ignored if
+# log_config_append is set. (boolean value)
 #use_stderr = false
 
 # Format string to use for log messages with context. (string value)
 #logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
 
-# Format string to use for log messages when context is undefined. (string
+# Format string to use for log messages when context is undefined.
+# (string value)
+#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
+
+# Additional data to append to log message when logging level for the
+# message is DEBUG. (string value)
+#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
+
+# Prefix each line of exception output with this format. (string
 # value)
-#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
-
-# Additional data to append to log message when logging level for the message is
-# DEBUG. (string value)
-#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
-
-# Prefix each line of exception output with this format. (string value)
 #logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
 
 # Defines the format string for %(user_identity)s that is used in
 # logging_context_format_string. (string value)
 #logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
 
-# List of package logging levels in logger=LEVEL pairs. This option is ignored
-# if log_config_append is set. (list value)
+# List of package logging levels in logger=LEVEL pairs. This option is
+# ignored if log_config_append is set. (list value)
 #default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
 
 # Enables or disables publication of error events. (boolean value)
 #publish_errors = false
 
-# The format for an instance that is passed with the log message. (string value)
+# The format for an instance that is passed with the log message.
+# (string value)
 #instance_format = "[instance: %(uuid)s] "
 
-# The format for an instance UUID that is passed with the log message. (string
-# value)
+# The format for an instance UUID that is passed with the log message.
+# (string value)
 #instance_uuid_format = "[instance: %(uuid)s] "
 
 # Interval, number of seconds, of log rate limiting. (integer value)
 #rate_limit_interval = 0
 
-# Maximum number of logged messages per rate_limit_interval. (integer value)
+# Maximum number of logged messages per rate_limit_interval. (integer
+# value)
 #rate_limit_burst = 0
 
-# Log level name used by rate limiting: CRITICAL, ERROR, INFO, WARNING, DEBUG or
-# empty string. Logs with level greater or equal to rate_limit_except_level are
-# not filtered. An empty string means that all levels are filtered. (string
-# value)
+# Log level name used by rate limiting: CRITICAL, ERROR, INFO,
+# WARNING, DEBUG or empty string. Logs with level greater or equal to
+# rate_limit_except_level are not filtered. An empty string means that
+# all levels are filtered. (string value)
 #rate_limit_except_level = CRITICAL
 
 # Enables or disables fatal status of deprecations. (boolean value)
 #fatal_deprecations = false
-
-
-[database]
-
-#
-# From oslo.db
-#
-
-# If True, SQLite uses synchronous mode. (boolean value)
-#sqlite_synchronous = true
-
-# The back end to use for the database. (string value)
-# Deprecated group/name - [DEFAULT]/db_backend
-#backend = sqlalchemy
-
-# The SQLAlchemy connection string to use to connect to the database. (string
-# value)
-# Deprecated group/name - [DEFAULT]/sql_connection
-# Deprecated group/name - [DATABASE]/sql_connection
-# Deprecated group/name - [sql]/connection
-#connection = <None>
-
-# The SQLAlchemy connection string to use to connect to the slave database.
-# (string value)
-#slave_connection = <None>
-
-# The SQL mode to be used for MySQL sessions. This option, including the
-# default, overrides any server-set SQL mode. To use whatever SQL mode is set by
-# the server configuration, set this to no value. Example: mysql_sql_mode=
-# (string value)
-#mysql_sql_mode = TRADITIONAL
-
-# If True, transparently enables support for handling MySQL Cluster (NDB).
-# (boolean value)
-#mysql_enable_ndb = false
-
-# Connections which have been present in the connection pool longer than this
-# number of seconds will be replaced with a new one the next time they are
-# checked out from the pool. (integer value)
-# Deprecated group/name - [DATABASE]/idle_timeout
-# Deprecated group/name - [database]/idle_timeout
-# Deprecated group/name - [DEFAULT]/sql_idle_timeout
-# Deprecated group/name - [DATABASE]/sql_idle_timeout
-# Deprecated group/name - [sql]/idle_timeout
-#connection_recycle_time = 3600
-
-# Minimum number of SQL connections to keep open in a pool. (integer value)
-# Deprecated group/name - [DEFAULT]/sql_min_pool_size
-# Deprecated group/name - [DATABASE]/sql_min_pool_size
-#min_pool_size = 1
-
-# Maximum number of SQL connections to keep open in a pool. Setting a value of 0
-# indicates no limit. (integer value)
-# Deprecated group/name - [DEFAULT]/sql_max_pool_size
-# Deprecated group/name - [DATABASE]/sql_max_pool_size
-#max_pool_size = 5
-
-# Maximum number of database connection retries during startup. Set to -1 to
-# specify an infinite retry count. (integer value)
-# Deprecated group/name - [DEFAULT]/sql_max_retries
-# Deprecated group/name - [DATABASE]/sql_max_retries
-#max_retries = 10
-
-# Interval between retries of opening a SQL connection. (integer value)
-# Deprecated group/name - [DEFAULT]/sql_retry_interval
-# Deprecated group/name - [DATABASE]/reconnect_interval
-#retry_interval = 10
-
-# If set, use this value for max_overflow with SQLAlchemy. (integer value)
-# Deprecated group/name - [DEFAULT]/sql_max_overflow
-# Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
-#max_overflow = 50
-
-# Verbosity of SQL debugging information: 0=None, 100=Everything. (integer
-# value)
-# Minimum value: 0
-# Maximum value: 100
-# Deprecated group/name - [DEFAULT]/sql_connection_debug
-#connection_debug = 0
-
-# Add Python stack traces to SQL as comment strings. (boolean value)
-# Deprecated group/name - [DEFAULT]/sql_connection_trace
-#connection_trace = false
-
-# If set, use this value for pool_timeout with SQLAlchemy. (integer value)
-# Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
-#pool_timeout = <None>
-
-# Enable the experimental use of database reconnect on connection lost. (boolean
-# value)
-#use_db_reconnect = false
-
-# Seconds between retries of a database transaction. (integer value)
-#db_retry_interval = 1
-
-# If True, increases the interval between retries of a database operation up to
-# db_max_retry_interval. (boolean value)
-#db_inc_retry_interval = true
-
-# If db_inc_retry_interval is set, the maximum seconds between retries of a
-# database operation. (integer value)
-#db_max_retry_interval = 10
-
-# Maximum retries in case of connection error or deadlock error before error is
-# raised. Set to -1 to specify an infinite retry count. (integer value)
-#db_max_retries = 20
-
-#
-# From oslo.db.concurrency
-#
-
-# Enable the experimental use of thread pooling for all DB API calls (boolean
-# value)
-# Deprecated group/name - [DEFAULT]/dbapi_use_tpool
-#use_tpool = false
-
 
 [glance_store]
 
@@ -987,8 +916,8 @@
 # integer value greater than zero to enable this option.
 #
 # NOTE: For more information on store capabilities and their updates,
-# please visit: https://specs.openstack.org/openstack/glance-specs/specs/kilo
-# /store-capabilities.html
+# please visit: https://specs.openstack.org/openstack/glance-
+# specs/specs/kilo/store-capabilities.html
 #
 # For more information on setting up a particular store in your
 # deployment and help with the usage of this feature, please contact
@@ -1012,16 +941,20 @@
 # When the ``cinder_endpoint_template`` is not set and any of
 # ``cinder_store_auth_address``, ``cinder_store_user_name``,
 # ``cinder_store_project_name``, ``cinder_store_password`` is not set,
-# cinder store uses this information to lookup cinder endpoint from the service
-# catalog in the current context. ``cinder_os_region_name``, if set, is taken
+# cinder store uses this information to lookup cinder endpoint from
+# the service
+# catalog in the current context. ``cinder_os_region_name``, if set,
+# is taken
 # into consideration to fetch the appropriate endpoint.
 #
-# The service catalog can be listed by the ``openstack catalog list`` command.
+# The service catalog can be listed by the ``openstack catalog list``
+# command.
 #
 # Possible values:
 #     * A string of of the following form:
 #       ``<service_type>:<service_name>:<interface>``
-#       At least ``service_type`` and ``interface`` should be specified.
+#       At least ``service_type`` and ``interface`` should be
+# specified.
 #       ``service_name`` can be omitted.
 #
 # Related options:
@@ -1038,18 +971,22 @@
 #
 # Override service catalog lookup with template for cinder endpoint.
 #
-# When this option is set, this value is used to generate cinder endpoint,
+# When this option is set, this value is used to generate cinder
+# endpoint,
 # instead of looking up from the service catalog.
 # This value is ignored if ``cinder_store_auth_address``,
 # ``cinder_store_user_name``, ``cinder_store_project_name``, and
 # ``cinder_store_password`` are specified.
 #
-# If this configuration option is set, ``cinder_catalog_info`` will be ignored.
-#
-# Possible values:
-#     * URL template string for cinder endpoint, where ``%%(tenant)s`` is
+# If this configuration option is set, ``cinder_catalog_info`` will be
+# ignored.
+#
+# Possible values:
+#     * URL template string for cinder endpoint, where ``%%(tenant)s``
+# is
 #       replaced with the current tenant (project) name.
-#       For example: ``http://cinder.openstack.example.org/v2/%%(tenant)s``
+#       For example:
+# ``http://cinder.openstack.example.org/v2/%%(tenant)s``
 #
 # Related options:
 #     * cinder_store_auth_address
@@ -1064,10 +1001,14 @@
 #
 # Region name to lookup cinder service from the service catalog.
 #
-# This is used only when ``cinder_catalog_info`` is used for determining the
-# endpoint. If set, the lookup for cinder endpoint by this node is filtered to
-# the specified region. It is useful when multiple regions are listed in the
-# catalog. If this is not set, the endpoint is looked up from every region.
+# This is used only when ``cinder_catalog_info`` is used for
+# determining the
+# endpoint. If set, the lookup for cinder endpoint by this node is
+# filtered to
+# the specified region. It is useful when multiple regions are listed
+# in the
+# catalog. If this is not set, the endpoint is looked up from every
+# region.
 #
 # Possible values:
 #     * A string that is a valid region name.
@@ -1083,9 +1024,10 @@
 # Location of a CA certificates file used for cinder client requests.
 #
 # The specified CA certificates file, if set, is used to verify cinder
-# connections via HTTPS endpoint. If the endpoint is HTTP, this value is
-# ignored.
-# ``cinder_api_insecure`` must be set to ``True`` to enable the verification.
+# connections via HTTPS endpoint. If the endpoint is HTTP, this value
+# is ignored.
+# ``cinder_api_insecure`` must be set to ``True`` to enable the
+# verification.
 #
 # Possible values:
 #     * Path to a ca certificates file
@@ -1099,7 +1041,8 @@
 #
 # Number of cinderclient retries on failed http calls.
 #
-# When a call failed by any errors, cinderclient will retry the call up to the
+# When a call failed by any errors, cinderclient will retry the call
+# up to the
 # specified times after sleeping a few seconds.
 #
 # Possible values:
@@ -1116,11 +1059,16 @@
 # Time period, in seconds, to wait for a cinder volume transition to
 # complete.
 #
-# When the cinder volume is created, deleted, or attached to the glance node to
-# read/write the volume data, the volume's state is changed. For example, the
-# newly created volume status changes from ``creating`` to ``available`` after
-# the creation process is completed. This specifies the maximum time to wait for
-# the status change. If a timeout occurs while waiting, or the status is changed
+# When the cinder volume is created, deleted, or attached to the
+# glance node to
+# read/write the volume data, the volume's state is changed. For
+# example, the
+# newly created volume status changes from ``creating`` to
+# ``available`` after
+# the creation process is completed. This specifies the maximum time
+# to wait for
+# the status change. If a timeout occurs while waiting, or the status
+# is changed
 # to an unexpected value (e.g. `error``), the image creation fails.
 #
 # Possible values:
@@ -1136,8 +1084,10 @@
 #
 # Allow to perform insecure SSL requests to cinder.
 #
-# If this option is set to True, HTTPS endpoint connection is verified using the
-# CA certificates file specified by ``cinder_ca_certificates_file`` option.
+# If this option is set to True, HTTPS endpoint connection is verified
+# using the
+# CA certificates file specified by ``cinder_ca_certificates_file``
+# option.
 #
 # Possible values:
 #     * True
@@ -1152,15 +1102,23 @@
 #
 # The address where the cinder authentication service is listening.
 #
-# When all of ``cinder_store_auth_address``, ``cinder_store_user_name``,
-# ``cinder_store_project_name``, and ``cinder_store_password`` options are
-# specified, the specified values are always used for the authentication.
-# This is useful to hide the image volumes from users by storing them in a
-# project/tenant specific to the image service. It also enables users to share
-# the image volume among other projects under the control of glance's ACL.
-#
-# If either of these options are not set, the cinder endpoint is looked up
-# from the service catalog, and current context's user and project are used.
+# When all of ``cinder_store_auth_address``,
+# ``cinder_store_user_name``,
+# ``cinder_store_project_name``, and ``cinder_store_password`` options
+# are
+# specified, the specified values are always used for the
+# authentication.
+# This is useful to hide the image volumes from users by storing them
+# in a
+# project/tenant specific to the image service. It also enables users
+# to share
+# the image volume among other projects under the control of glance's
+# ACL.
+#
+# If either of these options are not set, the cinder endpoint is
+# looked up
+# from the service catalog, and current context's user and project are
+# used.
 #
 # Possible values:
 #     * A valid authentication service address, for example:
@@ -1177,7 +1135,8 @@
 #
 # User name to authenticate against cinder.
 #
-# This must be used with all the following related options. If any of these are
+# This must be used with all the following related options. If any of
+# these are
 # not specified, the user of the current context is used.
 #
 # Possible values:
@@ -1194,11 +1153,13 @@
 #
 # Password for the user authenticating against cinder.
 #
-# This must be used with all the following related options. If any of these are
+# This must be used with all the following related options. If any of
+# these are
 # not specified, the user of the current context is used.
 #
 # Possible values:
-#     * A valid password for the user specified by ``cinder_store_user_name``
+#     * A valid password for the user specified by
+# ``cinder_store_user_name``
 #
 # Related options:
 #     * cinder_store_auth_address
@@ -1211,10 +1172,12 @@
 #
 # Project name where the image volume is stored in cinder.
 #
-# If this configuration option is not set, the project in current context is
+# If this configuration option is not set, the project in current
+# context is
 # used.
 #
-# This must be used with all the following related options. If any of these are
+# This must be used with all the following related options. If any of
+# these are
 # not specified, the project of the current context is used.
 #
 # Possible values:
@@ -1229,11 +1192,15 @@
 #cinder_store_project_name = <None>
 
 #
-# Path to the rootwrap configuration file to use for running commands as root.
-#
-# The cinder store requires root privileges to operate the image volumes (for
-# connecting to iSCSI/FC volumes and reading/writing the volume data, etc.).
-# The configuration file should allow the required commands by cinder store and
+# Path to the rootwrap configuration file to use for running commands
+# as root.
+#
+# The cinder store requires root privileges to operate the image
+# volumes (for
+# connecting to iSCSI/FC volumes and reading/writing the volume data,
+# etc.).
+# The configuration file should allow the required commands by cinder
+# store and
 # os-brick library.
 #
 # Possible values:
@@ -1248,11 +1215,14 @@
 #
 # Volume type that will be used for volume creation in cinder.
 #
-# Some cinder backends can have several volume types to optimize storage usage.
-# Adding this option allows an operator to choose a specific volume type
+# Some cinder backends can have several volume types to optimize
+# storage usage.
+# Adding this option allows an operator to choose a specific volume
+# type
 # in cinder that can be optimized for images.
 #
-# If this is not set, then the default volume type specified in the cinder
+# If this is not set, then the default volume type specified in the
+# cinder
 # configuration will be used for volume creation.
 #
 # Possible values:
@@ -1348,8 +1318,10 @@
 #
 # File access permissions for the image files.
 #
-# Set the intended file access permissions for image data. This provides
-# a way to enable other services, e.g. Nova, to consume images directly
+# Set the intended file access permissions for image data. This
+# provides
+# a way to enable other services, e.g. Nova, to consume images
+# directly
 # from the filesystem store. The users running the services that are
 # intended to be given access to could be made a member of the group
 # that owns the files created. Assigning a value less then or equal to
@@ -1375,8 +1347,10 @@
 # Path to the CA bundle file.
 #
 # This configuration option enables the operator to use a custom
-# Certificate Authority file to verify the remote server certificate. If
-# this option is set, the ``https_insecure`` option will be ignored and
+# Certificate Authority file to verify the remote server certificate.
+# If
+# this option is set, the ``https_insecure`` option will be ignored
+# and
 # the CA file specified will be used to authenticate the server
 # certificate and establish a secure connection to the server.
 #
@@ -1394,8 +1368,10 @@
 #
 # This configuration option takes in a boolean value to determine
 # whether or not to verify the remote server certificate. If set to
-# True, the remote server certificate is not verified. If the option is
-# set to False, then the default CA truststore is used for verification.
+# True, the remote server certificate is not verified. If the option
+# is
+# set to False, then the default CA truststore is used for
+# verification.
 #
 # This option is ignored if ``https_ca_certificates_file`` is set.
 # The remote server certificate will then be verified using the file
@@ -1418,12 +1394,14 @@
 # This configuration option specifies the http/https proxy information
 # that should be used to connect to the remote server. The proxy
 # information should be a key value pair of the scheme and proxy, for
-# example, http:10.0.0.1:3128. You can also specify proxies for multiple
+# example, http:10.0.0.1:3128. You can also specify proxies for
+# multiple
 # schemes by separating the key value pairs with a comma, for example,
 # http:10.0.0.1:3128, https:10.0.0.1:1080.
 #
 # Possible values:
-#     * A comma separated list of scheme:proxy pairs as described above
+#     * A comma separated list of scheme:proxy pairs as described
+# above
 #
 # Related options:
 #     * None
@@ -1435,11 +1413,13 @@
 # Size, in megabytes, to chunk RADOS images into.
 #
 # Provide an integer value representing the size in megabytes to chunk
-# Glance images into. The default chunk size is 8 megabytes. For optimal
+# Glance images into. The default chunk size is 8 megabytes. For
+# optimal
 # performance, the value should be a power of two.
 #
 # When Ceph's RBD object storage system is used as the storage backend
-# for storing Glance images, the images are chunked into objects of the
+# for storing Glance images, the images are chunked into objects of
+# the
 # size set using this option. These chunked objects are then stored
 # across the distributed block data store to use for Glance.
 #
@@ -1456,8 +1436,10 @@
 #
 # RADOS pool in which images are stored.
 #
-# When RBD is used as the storage backend for storing Glance images, the
-# images are stored by means of logical grouping of the objects (chunks
+# When RBD is used as the storage backend for storing Glance images,
+# the
+# images are stored by means of logical grouping of the objects
+# (chunks
 # of images) into a ``pool``. Each pool is defined with the number of
 # placement groups it can contain. The default pool that is used is
 # 'images'.
@@ -1477,7 +1459,8 @@
 #
 # RADOS user to authenticate as.
 #
-# This configuration option takes in the RADOS user to authenticate as.
+# This configuration option takes in the RADOS user to authenticate
+# as.
 # This is only needed when RADOS authentication is enabled and is
 # applicable only if the user is using Cephx authentication. If the
 # value for this option is not set by the user or is set to None, a
@@ -1496,9 +1479,11 @@
 #
 # Ceph configuration file path.
 #
-# This configuration option takes in the path to the Ceph configuration
+# This configuration option takes in the path to the Ceph
+# configuration
 # file to be used. If the value for this option is not set by the user
-# or is set to None, librados will locate the default configuration file
+# or is set to None, librados will locate the default configuration
+# file
 # which is located at /etc/ceph/ceph.conf. If using Cephx
 # authentication, this file should include a reference to the right
 # keyring in a client.<USER> section
@@ -1516,7 +1501,8 @@
 # Timeout value for connecting to Ceph cluster.
 #
 # This configuration option takes in the timeout value in seconds used
-# when connecting to the Ceph cluster i.e. it sets the time to wait for
+# when connecting to the Ceph cluster i.e. it sets the time to wait
+# for
 # glance-api before closing the connection. This prevents glance-api
 # hangups during the connection to RBD. If the value for this option
 # is set to less than or equal to 0, no timeout is set and the default
@@ -1608,7 +1594,8 @@
 #
 # This boolean determines whether or not to verify the server
 # certificate. If this option is set to True, swiftclient won't check
-# for a valid SSL certificate when authenticating. If the option is set
+# for a valid SSL certificate when authenticating. If the option is
+# set
 # to False, then the default CA truststore is used for verification.
 #
 # Possible values:
@@ -1624,7 +1611,8 @@
 #
 # Path to the CA bundle file.
 #
-# This configuration option enables the operator to specify the path to
+# This configuration option enables the operator to specify the path
+# to
 # a custom Certificate Authority file for SSL verification when
 # connecting to Swift.
 #
@@ -1680,7 +1668,8 @@
 # the container and object to the configured URL.
 #
 # Possible values:
-#     * String value representing a valid URL path up to a Swift container
+#     * String value representing a valid URL path up to a Swift
+# container
 #
 # Related Options:
 #     * None
@@ -1692,9 +1681,12 @@
 # Endpoint Type of Swift service.
 #
 # This string value indicates the endpoint type to use to fetch the
-# Swift endpoint. The endpoint type determines the actions the user will
-# be allowed to perform, for instance, reading and writing to the Store.
-# This setting is only used if swift_store_auth_version is greater than
+# Swift endpoint. The endpoint type determines the actions the user
+# will
+# be allowed to perform, for instance, reading and writing to the
+# Store.
+# This setting is only used if swift_store_auth_version is greater
+# than
 # 1.
 #
 # Possible values:
@@ -1734,32 +1726,46 @@
 #swift_store_service_type = object-store
 
 #
-# Name of single container to store images/name prefix for multiple containers
-#
-# When a single container is being used to store images, this configuration
-# option indicates the container within the Glance account to be used for
-# storing all images. When multiple containers are used to store images, this
+# Name of single container to store images/name prefix for multiple
+# containers
+#
+# When a single container is being used to store images, this
+# configuration
+# option indicates the container within the Glance account to be used
+# for
+# storing all images. When multiple containers are used to store
+# images, this
 # will be the name prefix for all containers. Usage of single/multiple
 # containers can be controlled using the configuration option
 # ``swift_store_multiple_containers_seed``.
 #
-# When using multiple containers, the containers will be named after the value
-# set for this configuration option with the first N chars of the image UUID
+# When using multiple containers, the containers will be named after
+# the value
+# set for this configuration option with the first N chars of the
+# image UUID
 # as the suffix delimited by an underscore (where N is specified by
 # ``swift_store_multiple_containers_seed``).
 #
-# Example: if the seed is set to 3 and swift_store_container = ``glance``, then
-# an image with UUID ``fdae39a1-bac5-4238-aba4-69bcc726e848`` would be placed in
-# the container ``glance_fda``. All dashes in the UUID are included when
-# creating the container name but do not count toward the character limit, so
+# Example: if the seed is set to 3 and swift_store_container =
+# ``glance``, then
+# an image with UUID ``fdae39a1-bac5-4238-aba4-69bcc726e848`` would be
+# placed in
+# the container ``glance_fda``. All dashes in the UUID are included
+# when
+# creating the container name but do not count toward the character
+# limit, so
 # when N=10 the container name would be ``glance_fdae39a1-ba.``
 #
 # Possible values:
-#     * If using single container, this configuration option can be any string
+#     * If using single container, this configuration option can be
+# any string
 #       that is a valid swift container name in Glance's Swift account
-#     * If using multiple containers, this configuration option can be any
-#       string as long as it satisfies the container naming rules enforced by
-#       Swift. The value of ``swift_store_multiple_containers_seed`` should be
+#     * If using multiple containers, this configuration option can be
+# any
+#       string as long as it satisfies the container naming rules
+# enforced by
+#       Swift. The value of ``swift_store_multiple_containers_seed``
+# should be
 #       taken into account as well.
 #
 # Related options:
@@ -1771,24 +1777,31 @@
 #swift_store_container = glance
 
 #
-# The size threshold, in MB, after which Glance will start segmenting image
-# data.
-#
-# Swift has an upper limit on the size of a single uploaded object. By default,
-# this is 5GB. To upload objects bigger than this limit, objects are segmented
-# into multiple smaller objects that are tied together with a manifest file.
+# The size threshold, in MB, after which Glance will start segmenting
+# image data.
+#
+# Swift has an upper limit on the size of a single uploaded object. By
+# default,
+# this is 5GB. To upload objects bigger than this limit, objects are
+# segmented
+# into multiple smaller objects that are tied together with a manifest
+# file.
 # For more detail, refer to
 # http://docs.openstack.org/developer/swift/overview_large_objects.html
 #
-# This configuration option specifies the size threshold over which the Swift
+# This configuration option specifies the size threshold over which
+# the Swift
 # driver will start segmenting image data into multiple smaller files.
-# Currently, the Swift driver only supports creating Dynamic Large Objects.
-#
-# NOTE: This should be set by taking into account the large object limit
+# Currently, the Swift driver only supports creating Dynamic Large
+# Objects.
+#
+# NOTE: This should be set by taking into account the large object
+# limit
 # enforced by the Swift cluster in consideration.
 #
 # Possible values:
-#     * A positive integer that is less than or equal to the large object limit
+#     * A positive integer that is less than or equal to the large
+# object limit
 #       enforced by the Swift cluster in consideration.
 #
 # Related options:
@@ -1799,20 +1812,26 @@
 #swift_store_large_object_size = 5120
 
 #
-# The maximum size, in MB, of the segments when image data is segmented.
-#
-# When image data is segmented to upload images that are larger than the limit
-# enforced by the Swift cluster, image data is broken into segments that are no
+# The maximum size, in MB, of the segments when image data is
+# segmented.
+#
+# When image data is segmented to upload images that are larger than
+# the limit
+# enforced by the Swift cluster, image data is broken into segments
+# that are no
 # bigger than the size specified by this configuration option.
 # Refer to ``swift_store_large_object_size`` for more detail.
 #
 # For example: if ``swift_store_large_object_size`` is 5GB and
-# ``swift_store_large_object_chunk_size`` is 1GB, an image of size 6.2GB will be
-# segmented into 7 segments where the first six segments will be 1GB in size and
+# ``swift_store_large_object_chunk_size`` is 1GB, an image of size
+# 6.2GB will be
+# segmented into 7 segments where the first six segments will be 1GB
+# in size and
 # the seventh segment will be 0.2GB.
 #
 # Possible values:
-#     * A positive integer that is less than or equal to the large object limit
+#     * A positive integer that is less than or equal to the large
+# object limit
 #       enforced by Swift cluster in consideration.
 #
 # Related options:
@@ -1825,9 +1844,12 @@
 #
 # Create container, if it doesn't already exist, when uploading image.
 #
-# At the time of uploading an image, if the corresponding container doesn't
-# exist, it will be created provided this configuration option is set to True.
-# By default, it won't be created. This behavior is applicable for both single
+# At the time of uploading an image, if the corresponding container
+# doesn't
+# exist, it will be created provided this configuration option is set
+# to True.
+# By default, it won't be created. This behavior is applicable for
+# both single
 # and multiple containers mode.
 #
 # Possible values:
@@ -1843,9 +1865,12 @@
 #
 # Store images in tenant's Swift account.
 #
-# This enables multi-tenant storage mode which causes Glance images to be stored
-# in tenant specific Swift accounts. If this is disabled, Glance stores all
-# images in its own account. More details multi-tenant store can be found at
+# This enables multi-tenant storage mode which causes Glance images to
+# be stored
+# in tenant specific Swift accounts. If this is disabled, Glance
+# stores all
+# images in its own account. More details multi-tenant store can be
+# found at
 # https://wiki.openstack.org/wiki/GlanceSwiftTenantSpecificStorage
 #
 # NOTE: If using multi-tenant swift store, please make sure
@@ -1865,18 +1890,26 @@
 #
 # Seed indicating the number of containers to use for storing images.
 #
-# When using a single-tenant store, images can be stored in one or more than one
-# containers. When set to 0, all images will be stored in one single container.
-# When set to an integer value between 1 and 32, multiple containers will be
-# used to store images. This configuration option will determine how many
-# containers are created. The total number of containers that will be used is
-# equal to 16^N, so if this config option is set to 2, then 16^2=256 containers
+# When using a single-tenant store, images can be stored in one or
+# more than one
+# containers. When set to 0, all images will be stored in one single
+# container.
+# When set to an integer value between 1 and 32, multiple containers
+# will be
+# used to store images. This configuration option will determine how
+# many
+# containers are created. The total number of containers that will be
+# used is
+# equal to 16^N, so if this config option is set to 2, then 16^2=256
+# containers
 # will be used to store images.
 #
-# Please refer to ``swift_store_container`` for more detail on the naming
-# convention. More detail about using multiple containers can be found at
-# https://specs.openstack.org/openstack/glance-specs/specs/kilo/swift-store-
-# multiple-containers.html
+# Please refer to ``swift_store_container`` for more detail on the
+# naming
+# convention. More detail about using multiple containers can be found
+# at
+# https://specs.openstack.org/openstack/glance-specs/specs/kilo/swift-
+# store-multiple-containers.html
 #
 # NOTE: This is used only when swift_store_multi_tenant is disabled.
 #
@@ -1901,7 +1934,8 @@
 # default value is an empty list.
 #
 # Possible values:
-#     * A comma separated list of strings representing UUIDs of Keystone
+#     * A comma separated list of strings representing UUIDs of
+# Keystone
 #       projects/tenants
 #
 # Related options:
@@ -2053,30 +2087,34 @@
 #  (string value)
 #default_swift_reference = ref1
 
-# DEPRECATED: Version of the authentication service to use. Valid versions are 2
-# and 3 for keystone and 1 (deprecated) for swauth and rackspace. (string value)
+# DEPRECATED: Version of the authentication service to use. Valid
+# versions are 2 and 3 for keystone and 1 (deprecated) for swauth and
+# rackspace. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason:
-# The option 'auth_version' in the Swift back-end configuration file is
+# The option 'auth_version' in the Swift back-end configuration file
+# is
 # used instead.
 #swift_store_auth_version = 2
 
-# DEPRECATED: The address where the Swift authentication service is listening.
-# (string value)
+# DEPRECATED: The address where the Swift authentication service is
+# listening. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason:
-# The option 'auth_address' in the Swift back-end configuration file is
+# The option 'auth_address' in the Swift back-end configuration file
+# is
 # used instead.
 #swift_store_auth_address = <None>
 
-# DEPRECATED: The user to authenticate against the Swift authentication service.
-# (string value)
+# DEPRECATED: The user to authenticate against the Swift
+# authentication service. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason:
-# The option 'user' in the Swift back-end configuration file is set instead.
+# The option 'user' in the Swift back-end configuration file is set
+# instead.
 #swift_store_user = <None>
 
 # DEPRECATED: Auth key for the user authenticating against the Swift
@@ -2140,9 +2178,11 @@
 #
 # Address of the ESX/ESXi or vCenter Server target system.
 #
-# This configuration option sets the address of the ESX/ESXi or vCenter
+# This configuration option sets the address of the ESX/ESXi or
+# vCenter
 # Server target system. This option is required when using the VMware
-# storage backend. The address can contain an IP address (127.0.0.1) or
+# storage backend. The address can contain an IP address (127.0.0.1)
+# or
 # a DNS name (www.my-domain.com).
 #
 # Possible Values:
@@ -2214,7 +2254,8 @@
 # Interval in seconds used for polling remote tasks invoked on VMware
 # ESX/VC server.
 #
-# This configuration option takes in the sleep time in seconds for polling an
+# This configuration option takes in the sleep time in seconds for
+# polling an
 # on-going async task as part of the VMWare ESX/VC server API call.
 #
 # Possible Values:
@@ -2228,11 +2269,14 @@
 #vmware_task_poll_interval = 5
 
 #
-# The directory where the glance images will be stored in the datastore.
-#
-# This configuration option specifies the path to the directory where the
+# The directory where the glance images will be stored in the
+# datastore.
+#
+# This configuration option specifies the path to the directory where
+# the
 # glance images will be stored in the VMware datastore. If this option
-# is not set,  the default directory where the glance images are stored
+# is not set,  the default directory where the glance images are
+# stored
 # is openstack_glance.
 #
 # Possible Values:
@@ -2253,7 +2297,8 @@
 # verified. If this option is set to False, then the default CA
 # truststore is used for verification.
 #
-# This option is ignored if the "vmware_ca_file" option is set. In that
+# This option is ignored if the "vmware_ca_file" option is set. In
+# that
 # case, the ESX/vCenter server certificate will then be verified using
 # the file specified using the "vmware_ca_file" option .
 #
@@ -2275,7 +2320,8 @@
 # Cerificate Authority File to verify the ESX/vCenter certificate.
 #
 # If this option is set, the "vmware_insecure" option will be ignored
-# and the CA file specified will be used to authenticate the ESX/vCenter
+# and the CA file specified will be used to authenticate the
+# ESX/vCenter
 # server certificate and establish a secure connection to the server.
 #
 # Possible Values:
@@ -2290,18 +2336,22 @@
 #
 # The datastores where the image can be stored.
 #
-# This configuration option specifies the datastores where the image can
+# This configuration option specifies the datastores where the image
+# can
 # be stored in the VMWare store backend. This option may be specified
-# multiple times for specifying multiple datastores. The datastore name
+# multiple times for specifying multiple datastores. The datastore
+# name
 # should be specified after its datacenter path, separated by ":". An
-# optional weight may be given after the datastore name, separated again
+# optional weight may be given after the datastore name, separated
+# again
 # by ":" to specify the priority. Thus, the required format becomes
 # <datacenter_path>:<datastore_name>:<optional_weight>.
 #
 # When adding an image, the datastore with highest weight will be
 # selected, unless there is not enough free space available in cases
 # where the image size is already known. If no weight is given, it is
-# assumed to be zero and the directory will be considered for selection
+# assumed to be zero and the directory will be considered for
+# selection
 # last. If multiple datastores have the same weight, then the one with
 # the most free space available is selected.
 #
@@ -2315,64 +2365,175 @@
 #  (multi valued)
 #vmware_datastores =
 
-
 [oslo_concurrency]
 
-#
-# From oslo.concurrency
-#
-
-# Enables or disables inter-process locks. (boolean value)
-#disable_process_locking = false
-
-# Directory to use for lock files.  For security, the specified directory should
-# only be writable by the user running the processes that need locking. Defaults
-# to environment variable OSLO_LOCK_PATH. If external locks are used, a lock
-# path must be set. (string value)
-#lock_path = <None>
-
+[database]
+#
+# From oslo.db
+#
+
+# If True, SQLite uses synchronous mode. (boolean value)
+#sqlite_synchronous = true
+
+# The back end to use for the database. (string value)
+# Deprecated group/name - [DEFAULT]/db_backend
+#backend = sqlalchemy
+
+# The SQLAlchemy connection string to use to connect to the database.
+# (string value)
+# Deprecated group/name - [DEFAULT]/sql_connection
+# Deprecated group/name - [DATABASE]/sql_connection
+# Deprecated group/name - [sql]/connection
+#connection = <None>
+connection = mysql+pymysql://glance:opnfv_secret@10.167.4.23/glance?charset=utf8
+# The SQLAlchemy connection string to use to connect to the slave
+# database. (string value)
+#slave_connection = <None>
+
+# The SQL mode to be used for MySQL sessions. This option, including
+# the default, overrides any server-set SQL mode. To use whatever SQL
+# mode is set by the server configuration, set this to no value.
+# Example: mysql_sql_mode= (string value)
+#mysql_sql_mode = TRADITIONAL
+
+# If True, transparently enables support for handling MySQL Cluster
+# (NDB). (boolean value)
+#mysql_enable_ndb = false
+
+# Connections which have been present in the connection pool longer
+# than this number of seconds will be replaced with a new one the next
+# time they are checked out from the pool. (integer value)
+# Deprecated group/name - [DATABASE]/idle_timeout
+# Deprecated group/name - [database]/idle_timeout
+# Deprecated group/name - [DEFAULT]/sql_idle_timeout
+# Deprecated group/name - [DATABASE]/sql_idle_timeout
+# Deprecated group/name - [sql]/idle_timeout
+#connection_recycle_time = 3600
+connection_recycle_time = 300
+
+# Minimum number of SQL connections to keep open in a pool. (integer
+# value)
+# Deprecated group/name - [DEFAULT]/sql_min_pool_size
+# Deprecated group/name - [DATABASE]/sql_min_pool_size
+#min_pool_size = 1
+
+# Maximum number of SQL connections to keep open in a pool. Setting a
+# value of 0 indicates no limit. (integer value)
+# Deprecated group/name - [DEFAULT]/sql_max_pool_size
+# Deprecated group/name - [DATABASE]/sql_max_pool_size
+#max_pool_size = 5
+max_pool_size = 10
+
+# Maximum number of database connection retries during startup. Set to
+# -1 to specify an infinite retry count. (integer value)
+# Deprecated group/name - [DEFAULT]/sql_max_retries
+# Deprecated group/name - [DATABASE]/sql_max_retries
+#max_retries = 10
+max_retries = -1
+
+# Interval between retries of opening a SQL connection. (integer
+# value)
+# Deprecated group/name - [DEFAULT]/sql_retry_interval
+# Deprecated group/name - [DATABASE]/reconnect_interval
+#retry_interval = 10
+
+# If set, use this value for max_overflow with SQLAlchemy. (integer
+# value)
+# Deprecated group/name - [DEFAULT]/sql_max_overflow
+# Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
+#max_overflow = 50
+max_overflow = 30
+
+# Verbosity of SQL debugging information: 0=None, 100=Everything.
+# (integer value)
+# Minimum value: 0
+# Maximum value: 100
+# Deprecated group/name - [DEFAULT]/sql_connection_debug
+#connection_debug = 0
+
+# Add Python stack traces to SQL as comment strings. (boolean value)
+# Deprecated group/name - [DEFAULT]/sql_connection_trace
+#connection_trace = false
+
+# If set, use this value for pool_timeout with SQLAlchemy. (integer
+# value)
+# Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
+#pool_timeout = <None>
+
+# Enable the experimental use of database reconnect on connection
+# lost. (boolean value)
+#use_db_reconnect = false
+
+# Seconds between retries of a database transaction. (integer value)
+#db_retry_interval = 1
+
+# If True, increases the interval between retries of a database
+# operation up to db_max_retry_interval. (boolean value)
+#db_inc_retry_interval = true
+
+# If db_inc_retry_interval is set, the maximum seconds between retries
+# of a database operation. (integer value)
+#db_max_retry_interval = 10
+
+# Maximum retries in case of connection error or deadlock error before
+# error is raised. Set to -1 to specify an infinite retry count.
+# (integer value)
+#db_max_retries = 20
+
+#
+# From oslo.db.concurrency
+#
+
+# Enable the experimental use of thread pooling for all DB API calls
+# (boolean value)
+# Deprecated group/name - [DEFAULT]/dbapi_use_tpool
+#use_tpool = false
 
 [oslo_policy]
-
 #
 # From oslo.policy
 #
 
-# This option controls whether or not to enforce scope when evaluating policies.
-# If ``True``, the scope of the token used in the request is compared to the
-# ``scope_types`` of the policy being enforced. If the scopes do not match, an
-# ``InvalidScope`` exception will be raised. If ``False``, a message will be
-# logged informing operators that policies are being invoked with mismatching
-# scope. (boolean value)
+# This option controls whether or not to enforce scope when evaluating
+# policies. If ``True``, the scope of the token used in the request is
+# compared to the ``scope_types`` of the policy being enforced. If the
+# scopes do not match, an ``InvalidScope`` exception will be raised.
+# If ``False``, a message will be logged informing operators that
+# policies are being invoked with mismatching scope. (boolean value)
 #enforce_scope = false
 
 # The file that defines policies. (string value)
 #policy_file = policy.json
-
-# Default rule. Enforced when a requested rule is not found. (string value)
+policy_file = /etc/glance/policy.json
+
+# Default rule. Enforced when a requested rule is not found. (string
+# value)
 #policy_default_rule = default
 
-# Directories where policy configuration files are stored. They can be relative
-# to any directory in the search path defined by the config_dir option, or
-# absolute paths. The file defined by policy_file must exist for these
-# directories to be searched.  Missing or empty directories are ignored. (multi
-# valued)
+# Directories where policy configuration files are stored. They can be
+# relative to any directory in the search path defined by the
+# config_dir option, or absolute paths. The file defined by
+# policy_file must exist for these directories to be searched.
+# Missing or empty directories are ignored. (multi valued)
 #policy_dirs = policy.d
 
-# Content Type to send and receive data for REST based policy check (string
-# value)
+# Content Type to send and receive data for REST based policy check
+# (string value)
 # Possible values:
 # application/x-www-form-urlencoded - <No description provided>
 # application/json - <No description provided>
 #remote_content_type = application/x-www-form-urlencoded
 
-# server identity verification for REST based policy check (boolean value)
+# server identity verification for REST based policy check (boolean
+# value)
 #remote_ssl_verify_server_crt = false
 
-# Absolute path to ca cert file for REST based policy check (string value)
+# Absolute path to ca cert file for REST based policy check (string
+# value)
 #remote_ssl_ca_crt_file = <None>
 
-# Absolute path to client cert for REST based policy check (string value)
+# Absolute path to client cert for REST based policy check (string
+# value)
 #remote_ssl_client_crt_file = <None>
 
 # Absolute path client key file REST based policy check (string value)

2018-09-01 22:42:01,584 [salt.state       :1941][INFO    ][21878] Completed state [/etc/glance/glance-scrubber.conf] at time 22:42:01.584512 duration_in_ms=115.361
2018-09-01 22:42:01,584 [salt.state       :1770][INFO    ][21878] Running state [/etc/glance/glance-api.conf] at time 22:42:01.584893
2018-09-01 22:42:01,585 [salt.state       :1803][INFO    ][21878] Executing state file.managed for [/etc/glance/glance-api.conf]
2018-09-01 22:42:01,607 [salt.fileclient  :1215][INFO    ][21878] Fetching file from saltenv 'base', ** done ** 'glance/files/queens/glance-api.conf.Debian'
2018-09-01 22:42:01,748 [salt.fileclient  :1215][INFO    ][21878] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/queens/oslo/messaging/_amqp.conf'
2018-09-01 22:42:01,885 [salt.state       :290 ][INFO    ][21878] File changed:
--- 
+++ 
@@ -1,4 +1,208 @@
+
+
 [DEFAULT]
+#
+# From oslo.messaging
+#
+
+# Size of RPC connection pool. (integer value)
+#rpc_conn_pool_size = 30
+
+# The pool size limit for connections expiration policy (integer
+# value)
+#conn_pool_min_size = 2
+
+# The time-to-live in sec of idle connections in the pool (integer
+# value)
+#conn_pool_ttl = 1200
+
+# ZeroMQ bind address. Should be a wildcard (*), an ethernet
+# interface, or IP. The "host" option should point or resolve to this
+# address. (string value)
+#rpc_zmq_bind_address = *
+
+# MatchMaker driver. (string value)
+# Possible values:
+# redis - <No description provided>
+# sentinel - <No description provided>
+# dummy - <No description provided>
+#rpc_zmq_matchmaker = redis
+
+# Number of ZeroMQ contexts, defaults to 1. (integer value)
+#rpc_zmq_contexts = 1
+
+# Maximum number of ingress messages to locally buffer per topic.
+# Default is unlimited. (integer value)
+#rpc_zmq_topic_backlog = <None>
+
+# Directory for holding IPC sockets. (string value)
+#rpc_zmq_ipc_dir = /var/run/openstack
+
+# Name of this node. Must be a valid hostname, FQDN, or IP address.
+# Must match "host" option, if running Nova. (string value)
+#rpc_zmq_host = localhost
+
+# Number of seconds to wait before all pending messages will be sent
+# after closing a socket. The default value of -1 specifies an
+# infinite linger period. The value of 0 specifies no linger period.
+# Pending messages shall be discarded immediately when the socket is
+# closed. Positive values specify an upper bound for the linger
+# period. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_cast_timeout
+#zmq_linger = -1
+
+# The default number of seconds that poll should wait. Poll raises
+# timeout exception when timeout expired. (integer value)
+#rpc_poll_timeout = 1
+
+# Expiration timeout in seconds of a name service record about
+# existing target ( < 0 means no timeout). (integer value)
+#zmq_target_expire = 300
+
+# Update period in seconds of a name service record about existing
+# target. (integer value)
+#zmq_target_update = 180
+
+# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy.
+# (boolean value)
+#use_pub_sub = false
+
+# Use ROUTER remote proxy. (boolean value)
+#use_router_proxy = false
+
+# This option makes direct connections dynamic or static. It makes
+# sense only with use_router_proxy=False which means to use direct
+# connections for direct message types (ignored otherwise). (boolean
+# value)
+#use_dynamic_connections = false
+
+# How many additional connections to a host will be made for failover
+# reasons. This option is actual only in dynamic connections mode.
+# (integer value)
+#zmq_failover_connections = 2
+
+# Minimal port number for random ports range. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#rpc_zmq_min_port = 49153
+
+# Maximal port number for random ports range. (integer value)
+# Minimum value: 1
+# Maximum value: 65536
+#rpc_zmq_max_port = 65536
+
+# Number of retries to find free port number before fail with
+# ZMQBindError. (integer value)
+#rpc_zmq_bind_port_retries = 100
+
+# Default serialization mechanism for serializing/deserializing
+# outgoing/incoming messages (string value)
+# Possible values:
+# json - <No description provided>
+# msgpack - <No description provided>
+#rpc_zmq_serialization = json
+
+# This option configures round-robin mode in zmq socket. True means
+# not keeping a queue when server side disconnects. False means to
+# keep queue and messages even if server is disconnected, when the
+# server appears we send all accumulated messages to it. (boolean
+# value)
+#zmq_immediate = true
+
+# Enable/disable TCP keepalive (KA) mechanism. The default value of -1
+# (or any other negative value) means to skip any overrides and leave
+# it to OS default; 0 and 1 (or any other positive value) mean to
+# disable and enable the option respectively. (integer value)
+#zmq_tcp_keepalive = -1
+
+# The duration between two keepalive transmissions in idle condition.
+# The unit is platform dependent, for example, seconds in Linux,
+# milliseconds in Windows etc. The default value of -1 (or any other
+# negative value and 0) means to skip any overrides and leave it to OS
+# default. (integer value)
+#zmq_tcp_keepalive_idle = -1
+
+# The number of retransmissions to be carried out before declaring
+# that remote end is not available. The default value of -1 (or any
+# other negative value and 0) means to skip any overrides and leave it
+# to OS default. (integer value)
+#zmq_tcp_keepalive_cnt = -1
+
+# The duration between two successive keepalive retransmissions, if
+# acknowledgement to the previous keepalive transmission is not
+# received. The unit is platform dependent, for example, seconds in
+# Linux, milliseconds in Windows etc. The default value of -1 (or any
+# other negative value and 0) means to skip any overrides and leave it
+# to OS default. (integer value)
+#zmq_tcp_keepalive_intvl = -1
+
+# Maximum number of (green) threads to work concurrently. (integer
+# value)
+#rpc_thread_pool_size = 100
+
+# Expiration timeout in seconds of a sent/received message after which
+# it is not tracked anymore by a client/server. (integer value)
+#rpc_message_ttl = 300
+
+# Wait for message acknowledgements from receivers. This mechanism
+# works only via proxy without PUB/SUB. (boolean value)
+#rpc_use_acks = false
+
+# Number of seconds to wait for an ack from a cast/call. After each
+# retry attempt this timeout is multiplied by some specified
+# multiplier. (integer value)
+#rpc_ack_timeout_base = 15
+
+# Number to multiply base ack timeout by after each retry attempt.
+# (integer value)
+#rpc_ack_timeout_multiplier = 2
+
+# Default number of message sending attempts in case of any problems
+# occurred: positive value N means at most N retries, 0 means no
+# retries, None or -1 (or any other negative values) mean to retry
+# forever. This option is used only if acknowledgments are enabled.
+# (integer value)
+#rpc_retry_attempts = 3
+
+# List of publisher hosts SubConsumer can subscribe on. This option
+# has higher priority then the default publishers list taken from the
+# matchmaker. (list value)
+#subscribe_on =
+
+# Size of executor thread pool when executor is threading or eventlet.
+# (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_thread_pool_size
+#executor_thread_pool_size = 64
+
+# Seconds to wait for a response from a call. (integer value)
+#rpc_response_timeout = 60
+
+# The network address and optional user credentials for connecting to
+# the messaging backend, in URL format. The expected format is:
+#
+# driver://[user:pass@]host:port[,[userN:passN@]hostN:portN]/virtual_host?query
+#
+# Example: rabbit://rabbitmq:password@127.0.0.1:5672//
+#
+# For full details on the fields in the URL see the documentation of
+# oslo_messaging.TransportURL at
+# https://docs.openstack.org/oslo.messaging/latest/reference/transport.html
+# (string value)
+#transport_url = <None>
+transport_url = rabbit://openstack:opnfv_secret@10.167.4.28:5672,openstack:opnfv_secret@10.167.4.29:5672,openstack:opnfv_secret@10.167.4.30:5672//openstack
+
+# DEPRECATED: The messaging driver to use, defaults to rabbit. Other
+# drivers include amqp and zmq. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rpc_backend = rabbit
+
+# The default exchange under which topics are scoped. May be
+# overridden by an exchange name specified in the transport_url
+# option. (string value)
+#control_exchange = openstack
+
 
 #
 # From glance.api
@@ -7,10 +211,13 @@
 #
 # Set the image owner to tenant or the authenticated user.
 #
-# Assign a boolean value to determine the owner of an image. When set to
+# Assign a boolean value to determine the owner of an image. When set
+# to
 # True, the owner of the image is the tenant. When set to False, the
-# owner of the image will be the authenticated user issuing the request.
-# Setting it to False makes the image private to the associated user and
+# owner of the image will be the authenticated user issuing the
+# request.
+# Setting it to False makes the image private to the associated user
+# and
 # sharing with other users within the same tenant (or "project")
 # requires explicit image sharing via image membership.
 #
@@ -65,7 +272,8 @@
 #
 # Provide  an integer value to limit the length of the request ID to
 # the specified length. The default value is 64. Users can change this
-# to any ineteger value between 0 and 16384 however keeping in mind that
+# to any ineteger value between 0 and 16384 however keeping in mind
+# that
 # a larger value may flood the logs.
 #
 # Possible values:
@@ -126,7 +334,8 @@
 #
 # Maximum number of image members per image.
 #
-# This limits the maximum of users an image can be shared with. Any negative
+# This limits the maximum of users an image can be shared with. Any
+# negative
 # value is interpreted as unlimited.
 #
 # Related options:
@@ -138,10 +347,12 @@
 #
 # Maximum number of properties allowed on an image.
 #
-# This enforces an upper limit on the number of additional properties an image
+# This enforces an upper limit on the number of additional properties
+# an image
 # can have. Any negative value is interpreted as unlimited.
 #
-# NOTE: This won't have any impact if additional properties are disabled. Please
+# NOTE: This won't have any impact if additional properties are
+# disabled. Please
 # refer to ``allow_additional_image_properties``.
 #
 # Related options:
@@ -198,7 +409,8 @@
 #
 # Finally, when this configuration option is set to
 # ``glance.db.simple.api``, image catalog data is stored in and read
-# from an in-memory data structure. This is primarily used for testing.
+# from an in-memory data structure. This is primarily used for
+# testing.
 #
 # Related options:
 #     * enable_v2_api
@@ -211,8 +423,8 @@
 # Glance registry service is deprecated for removal.
 #
 # More information can be found from the spec:
-# http://specs.openstack.org/openstack/glance-specs/specs/queens/approved/glance
-# /deprecate-registry.html
+# http://specs.openstack.org/openstack/glance-
+# specs/specs/queens/approved/glance/deprecate-registry.html
 #data_api = glance.db.sqlalchemy.api
 
 #
@@ -241,6 +453,7 @@
 #  (integer value)
 # Minimum value: 1
 #limit_param_default = 25
+limit_param_default = 25
 
 #
 # Maximum number of results that could be returned by a request.
@@ -266,6 +479,7 @@
 #  (integer value)
 # Minimum value: 1
 #api_limit_max = 1000
+api_limit_max = 1000
 
 #
 # Show direct image location when returning an image.
@@ -298,6 +512,7 @@
 #
 #  (boolean value)
 #show_image_direct_url = false
+show_image_direct_url = true
 
 # DEPRECATED:
 # Show all image locations when returning an image.
@@ -329,10 +544,12 @@
 #  (boolean value)
 # This option is deprecated for removal since Newton.
 # Its value may be silently ignored in the future.
-# Reason: This option will be removed in the Pike release or later because the
-# same functionality can be achieved with greater granularity by using policies.
-# Please see the Newton release notes for more information.
+# Reason: This option will be removed in the Pike release or later
+# because the same functionality can be achieved with greater
+# granularity by using policies. Please see the Newton release notes
+# for more information.
 #show_multiple_locations = false
+#show_multiple_locations = true
 
 #
 # Maximum size of image a user can upload in bytes.
@@ -363,18 +580,25 @@
 #
 # Maximum amount of image storage per tenant.
 #
-# This enforces an upper limit on the cumulative storage consumed by all images
+# This enforces an upper limit on the cumulative storage consumed by
+# all images
 # of a tenant across all stores. This is a per-tenant limit.
 #
-# The default unit for this configuration option is Bytes. However, storage
-# units can be specified using case-sensitive literals ``B``, ``KB``, ``MB``,
-# ``GB`` and ``TB`` representing Bytes, KiloBytes, MegaBytes, GigaBytes and
-# TeraBytes respectively. Note that there should not be any space between the
-# value and unit. Value ``0`` signifies no quota enforcement. Negative values
+# The default unit for this configuration option is Bytes. However,
+# storage
+# units can be specified using case-sensitive literals ``B``, ``KB``,
+# ``MB``,
+# ``GB`` and ``TB`` representing Bytes, KiloBytes, MegaBytes,
+# GigaBytes and
+# TeraBytes respectively. Note that there should not be any space
+# between the
+# value and unit. Value ``0`` signifies no quota enforcement. Negative
+# values
 # are invalid and result in errors.
 #
 # Possible values:
-#     * A string that is a valid concatenation of a non-negative integer
+#     * A string that is a valid concatenation of a non-negative
+# integer
 #       representing the storage value and an optional string literal
 #       representing storage units as mentioned above.
 #
@@ -417,6 +641,7 @@
 #
 #  (boolean value)
 #enable_v1_api = true
+enable_v1_api=False
 
 #
 # Deploy the v2 OpenStack Images API.
@@ -447,6 +672,7 @@
 #
 #  (boolean value)
 #enable_v2_api = true
+enable_v2_api=True
 
 #
 # Deploy the v1 API Registry service.
@@ -501,8 +727,8 @@
 # Glance registry service is deprecated for removal.
 #
 # More information can be found from the spec:
-# http://specs.openstack.org/openstack/glance-specs/specs/queens/approved/glance
-# /deprecate-registry.html
+# http://specs.openstack.org/openstack/glance-
+# specs/specs/queens/approved/glance/deprecate-registry.html
 #enable_v2_registry = true
 
 #
@@ -674,6 +900,9 @@
 # store_type - <No description provided>
 #location_strategy = location_order
 
+location_strategy = location_order
+
+
 #
 # The location of the property protection file.
 #
@@ -688,7 +917,8 @@
 # protections won't be enforced. If a value is specified and the file
 # is not found, the glance-api service will fail to start.
 # More information on property protections can be found at:
-# https://docs.openstack.org/glance/latest/admin/property-protections.html
+# https://docs.openstack.org/glance/latest/admin/property-
+# protections.html
 #
 # Possible values:
 #     * Empty string
@@ -770,6 +1000,7 @@
 #
 #  (unknown value)
 #bind_host = 0.0.0.0
+bind_host = 10.167.4.37
 
 #
 # Port number on which the server will listen.
@@ -789,6 +1020,7 @@
 # Minimum value: 0
 # Maximum value: 65535
 #bind_port = <None>
+bind_port = 9292
 
 #
 # Number of Glance worker processes to start.
@@ -797,7 +1029,8 @@
 # process workers to service requests. By default, the number of CPUs
 # available is set as the value for ``workers`` limited to 8. For
 # example if the processor count is 6, 6 workers will be used, if the
-# processor count is 24 only 8 workers will be used. The limit will only
+# processor count is 24 only 8 workers will be used. The limit will
+# only
 # apply to the default value, if 24 workers is configured, 24 is used.
 #
 # Each worker process is made to listen on the port set in the
@@ -816,6 +1049,7 @@
 #  (integer value)
 # Minimum value: 0
 #workers = <None>
+workers = 8
 
 #
 # Maximum line size of message headers.
@@ -985,21 +1219,25 @@
 #  (string value)
 #key_file = /etc/ssl/key/key-file.pem
 
-# DEPRECATED: The HTTP header used to determine the scheme for the original
-# request, even if it was removed by an SSL terminating proxy. Typical value is
-# "HTTP_X_FORWARDED_PROTO". (string value)
+# DEPRECATED: The HTTP header used to determine the scheme for the
+# original request, even if it was removed by an SSL terminating
+# proxy. Typical value is "HTTP_X_FORWARDED_PROTO". (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Use the http_proxy_to_wsgi middleware instead.
 #secure_proxy_ssl_header = <None>
 
 #
-# The relative path to sqlite file database that will be used for image cache
+# The relative path to sqlite file database that will be used for
+# image cache
 # management.
 #
-# This is a relative path to the sqlite file database that tracks the age and
-# usage statistics of image cache. The path is relative to image cache base
-# directory, specified by the configuration option ``image_cache_dir``.
+# This is a relative path to the sqlite file database that tracks the
+# age and
+# usage statistics of image cache. The path is relative to image cache
+# base
+# directory, specified by the configuration option
+# ``image_cache_dir``.
 #
 # This is a lightweight database with just one table.
 #
@@ -1015,23 +1253,33 @@
 #
 # The driver to use for image cache management.
 #
-# This configuration option provides the flexibility to choose between the
-# different image-cache drivers available. An image-cache driver is responsible
-# for providing the essential functions of image-cache like write images to/read
-# images from cache, track age and usage of cached images, provide a list of
-# cached images, fetch size of the cache, queue images for caching and clean up
+# This configuration option provides the flexibility to choose between
+# the
+# different image-cache drivers available. An image-cache driver is
+# responsible
+# for providing the essential functions of image-cache like write
+# images to/read
+# images from cache, track age and usage of cached images, provide a
+# list of
+# cached images, fetch size of the cache, queue images for caching and
+# clean up
 # the cache, etc.
 #
 # The essential functions of a driver are defined in the base class
-# ``glance.image_cache.drivers.base.Driver``. All image-cache drivers (existing
-# and prospective) must implement this interface. Currently available drivers
-# are ``sqlite`` and ``xattr``. These drivers primarily differ in the way they
+# ``glance.image_cache.drivers.base.Driver``. All image-cache drivers
+# (existing
+# and prospective) must implement this interface. Currently available
+# drivers
+# are ``sqlite`` and ``xattr``. These drivers primarily differ in the
+# way they
 # store the information about cached images:
-#     * The ``sqlite`` driver uses a sqlite database (which sits on every glance
+#     * The ``sqlite`` driver uses a sqlite database (which sits on
+# every glance
 #     node locally) to track the usage of cached images.
-#     * The ``xattr`` driver uses the extended attributes of files to store this
-#     information. It also requires a filesystem that sets ``atime`` on the
-# files
+#     * The ``xattr`` driver uses the extended attributes of files to
+# store this
+#     information. It also requires a filesystem that sets ``atime``
+# on the files
 #     when accessed.
 #
 # Possible values:
@@ -1048,21 +1296,32 @@
 #image_cache_driver = sqlite
 
 #
-# The upper limit on cache size, in bytes, after which the cache-pruner cleans
+# The upper limit on cache size, in bytes, after which the cache-
+# pruner cleans
 # up the image cache.
 #
-# NOTE: This is just a threshold for cache-pruner to act upon. It is NOT a
-# hard limit beyond which the image cache would never grow. In fact, depending
-# on how often the cache-pruner runs and how quickly the cache fills, the image
-# cache can far exceed the size specified here very easily. Hence, care must be
-# taken to appropriately schedule the cache-pruner and in setting this limit.
-#
-# Glance caches an image when it is downloaded. Consequently, the size of the
-# image cache grows over time as the number of downloads increases. To keep the
+# NOTE: This is just a threshold for cache-pruner to act upon. It is
+# NOT a
+# hard limit beyond which the image cache would never grow. In fact,
+# depending
+# on how often the cache-pruner runs and how quickly the cache fills,
+# the image
+# cache can far exceed the size specified here very easily. Hence,
+# care must be
+# taken to appropriately schedule the cache-pruner and in setting this
+# limit.
+#
+# Glance caches an image when it is downloaded. Consequently, the size
+# of the
+# image cache grows over time as the number of downloads increases. To
+# keep the
 # cache size from becoming unmanageable, it is recommended to run the
-# cache-pruner as a periodic task. When the cache pruner is kicked off, it
-# compares the current size of image cache and triggers a cleanup if the image
-# cache grew beyond the size specified here. After the cleanup, the size of
+# cache-pruner as a periodic task. When the cache pruner is kicked
+# off, it
+# compares the current size of image cache and triggers a cleanup if
+# the image
+# cache grew beyond the size specified here. After the cleanup, the
+# size of
 # cache is less than or equal to size specified here.
 #
 # Possible values:
@@ -1075,19 +1334,29 @@
 # Minimum value: 0
 #image_cache_max_size = 10737418240
 
-#
-# The amount of time, in seconds, an incomplete image remains in the cache.
-#
-# Incomplete images are images for which download is in progress. Please see the
-# description of configuration option ``image_cache_dir`` for more detail.
-# Sometimes, due to various reasons, it is possible the download may hang and
-# the incompletely downloaded image remains in the ``incomplete`` directory.
-# This configuration option sets a time limit on how long the incomplete images
-# should remain in the ``incomplete`` directory before they are cleaned up.
-# Once an incomplete image spends more time than is specified here, it'll be
+
+#
+# The amount of time, in seconds, an incomplete image remains in the
+# cache.
+#
+# Incomplete images are images for which download is in progress.
+# Please see the
+# description of configuration option ``image_cache_dir`` for more
+# detail.
+# Sometimes, due to various reasons, it is possible the download may
+# hang and
+# the incompletely downloaded image remains in the ``incomplete``
+# directory.
+# This configuration option sets a time limit on how long the
+# incomplete images
+# should remain in the ``incomplete`` directory before they are
+# cleaned up.
+# Once an incomplete image spends more time than is specified here,
+# it'll be
 # removed by cache-cleaner on its next run.
 #
-# It is recommended to run cache-cleaner as a periodic task on the Glance API
+# It is recommended to run cache-cleaner as a periodic task on the
+# Glance API
 # nodes to keep the incomplete images from occupying disk space.
 #
 # Possible values:
@@ -1103,25 +1372,39 @@
 #
 # Base directory for image cache.
 #
-# This is the location where image data is cached and served out of. All cached
-# images are stored directly under this directory. This directory also contains
-# three subdirectories, namely, ``incomplete``, ``invalid`` and ``queue``.
-#
-# The ``incomplete`` subdirectory is the staging area for downloading images. An
-# image is first downloaded to this directory. When the image download is
-# successful it is moved to the base directory. However, if the download fails,
-# the partially downloaded image file is moved to the ``invalid`` subdirectory.
-#
-# The ``queue``subdirectory is used for queuing images for download. This is
-# used primarily by the cache-prefetcher, which can be scheduled as a periodic
-# task like cache-pruner and cache-cleaner, to cache images ahead of their
-# usage.
-# Upon receiving the request to cache an image, Glance touches a file in the
-# ``queue`` directory with the image id as the file name. The cache-prefetcher,
+# This is the location where image data is cached and served out of.
+# All cached
+# images are stored directly under this directory. This directory also
+# contains
+# three subdirectories, namely, ``incomplete``, ``invalid`` and
+# ``queue``.
+#
+# The ``incomplete`` subdirectory is the staging area for downloading
+# images. An
+# image is first downloaded to this directory. When the image download
+# is
+# successful it is moved to the base directory. However, if the
+# download fails,
+# the partially downloaded image file is moved to the ``invalid``
+# subdirectory.
+#
+# The ``queue``subdirectory is used for queuing images for download.
+# This is
+# used primarily by the cache-prefetcher, which can be scheduled as a
+# periodic
+# task like cache-pruner and cache-cleaner, to cache images ahead of
+# their usage.
+# Upon receiving the request to cache an image, Glance touches a file
+# in the
+# ``queue`` directory with the image id as the file name. The cache-
+# prefetcher,
 # when running, polls for the files in ``queue`` directory and starts
-# downloading them in the order they were created. When the download is
-# successful, the zero-sized file is deleted from the ``queue`` directory.
-# If the download fails, the zero-sized file remains and it'll be retried the
+# downloading them in the order they were created. When the download
+# is
+# successful, the zero-sized file is deleted from the ``queue``
+# directory.
+# If the download fails, the zero-sized file remains and it'll be
+# retried the
 # next time cache-prefetcher runs.
 #
 # Possible values:
@@ -1196,9 +1479,10 @@
 # Glance registry service is deprecated for removal.
 #
 # More information can be found from the spec:
-# http://specs.openstack.org/openstack/glance-specs/specs/queens/approved/glance
-# /deprecate-registry.html
+# http://specs.openstack.org/openstack/glance-
+# specs/specs/queens/approved/glance/deprecate-registry.html
 #registry_host = 0.0.0.0
+registry_host = 10.167.4.35
 
 # DEPRECATED:
 # Port the registry server is listening on.
@@ -1218,83 +1502,90 @@
 # Glance registry service is deprecated for removal.
 #
 # More information can be found from the spec:
-# http://specs.openstack.org/openstack/glance-specs/specs/queens/approved/glance
-# /deprecate-registry.html
+# http://specs.openstack.org/openstack/glance-
+# specs/specs/queens/approved/glance/deprecate-registry.html
 #registry_port = 9191
-
-# DEPRECATED: Whether to pass through the user token when making requests to the
-# registry. To prevent failures with token expiration during big files upload,
-# it is recommended to set this parameter to False.If "use_user_token" is not in
-# effect, then admin credentials can be specified. (boolean value)
+registry_port = 9191
+
+# DEPRECATED: Whether to pass through the user token when making
+# requests to the registry. To prevent failures with token expiration
+# during big files upload, it is recommended to set this parameter to
+# False.If "use_user_token" is not in effect, then admin credentials
+# can be specified. (boolean value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
-# Reason: This option was considered harmful and has been deprecated in M
-# release. It will be removed in O release. For more information read OSSN-0060.
-# Related functionality with uploading big images has been implemented with
-# Keystone trusts support.
+# Reason: This option was considered harmful and has been deprecated
+# in M release. It will be removed in O release. For more information
+# read OSSN-0060. Related functionality with uploading big images has
+# been implemented with Keystone trusts support.
 #use_user_token = true
 
-# DEPRECATED: The administrators user name. If "use_user_token" is not in
-# effect, then admin credentials can be specified. (string value)
+# DEPRECATED: The administrators user name. If "use_user_token" is not
+# in effect, then admin credentials can be specified. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
-# Reason: This option was considered harmful and has been deprecated in M
-# release. It will be removed in O release. For more information read OSSN-0060.
-# Related functionality with uploading big images has been implemented with
-# Keystone trusts support.
+# Reason: This option was considered harmful and has been deprecated
+# in M release. It will be removed in O release. For more information
+# read OSSN-0060. Related functionality with uploading big images has
+# been implemented with Keystone trusts support.
 #admin_user = <None>
 
-# DEPRECATED: The administrators password. If "use_user_token" is not in effect,
-# then admin credentials can be specified. (string value)
+# DEPRECATED: The administrators password. If "use_user_token" is not
+# in effect, then admin credentials can be specified. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
-# Reason: This option was considered harmful and has been deprecated in M
-# release. It will be removed in O release. For more information read OSSN-0060.
-# Related functionality with uploading big images has been implemented with
-# Keystone trusts support.
+# Reason: This option was considered harmful and has been deprecated
+# in M release. It will be removed in O release. For more information
+# read OSSN-0060. Related functionality with uploading big images has
+# been implemented with Keystone trusts support.
 #admin_password = <None>
 
-# DEPRECATED: The tenant name of the administrative user. If "use_user_token" is
-# not in effect, then admin tenant name can be specified. (string value)
+# DEPRECATED: The tenant name of the administrative user. If
+# "use_user_token" is not in effect, then admin tenant name can be
+# specified. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
-# Reason: This option was considered harmful and has been deprecated in M
-# release. It will be removed in O release. For more information read OSSN-0060.
-# Related functionality with uploading big images has been implemented with
-# Keystone trusts support.
+# Reason: This option was considered harmful and has been deprecated
+# in M release. It will be removed in O release. For more information
+# read OSSN-0060. Related functionality with uploading big images has
+# been implemented with Keystone trusts support.
 #admin_tenant_name = <None>
 
-# DEPRECATED: The URL to the keystone service. If "use_user_token" is not in
-# effect and using keystone auth, then URL of keystone can be specified. (string
-# value)
+# DEPRECATED: The URL to the keystone service. If "use_user_token" is
+# not in effect and using keystone auth, then URL of keystone can be
+# specified. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
-# Reason: This option was considered harmful and has been deprecated in M
-# release. It will be removed in O release. For more information read OSSN-0060.
-# Related functionality with uploading big images has been implemented with
-# Keystone trusts support.
+# Reason: This option was considered harmful and has been deprecated
+# in M release. It will be removed in O release. For more information
+# read OSSN-0060. Related functionality with uploading big images has
+# been implemented with Keystone trusts support.
 #auth_url = <None>
 
-# DEPRECATED: The strategy to use for authentication. If "use_user_token" is not
-# in effect, then auth strategy can be specified. (string value)
+# DEPRECATED: The strategy to use for authentication. If
+# "use_user_token" is not in effect, then auth strategy can be
+# specified. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
-# Reason: This option was considered harmful and has been deprecated in M
-# release. It will be removed in O release. For more information read OSSN-0060.
-# Related functionality with uploading big images has been implemented with
-# Keystone trusts support.
+# Reason: This option was considered harmful and has been deprecated
+# in M release. It will be removed in O release. For more information
+# read OSSN-0060. Related functionality with uploading big images has
+# been implemented with Keystone trusts support.
 #auth_strategy = noauth
 
-# DEPRECATED: The region for the authentication service. If "use_user_token" is
-# not in effect and using keystone auth, then region name can be specified.
-# (string value)
+# DEPRECATED: The region for the authentication service. If
+# "use_user_token" is not in effect and using keystone auth, then
+# region name can be specified. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
-# Reason: This option was considered harmful and has been deprecated in M
-# release. It will be removed in O release. For more information read OSSN-0060.
-# Related functionality with uploading big images has been implemented with
-# Keystone trusts support.
+# Reason: This option was considered harmful and has been deprecated
+# in M release. It will be removed in O release. For more information
+# read OSSN-0060. Related functionality with uploading big images has
+# been implemented with Keystone trusts support.
 #auth_region = <None>
+#
+#auth_region = RegionOne
+#
 
 # DEPRECATED:
 # Protocol to use for communication with the registry server.
@@ -1329,8 +1620,9 @@
 # Glance registry service is deprecated for removal.
 #
 # More information can be found from the spec:
-# http://specs.openstack.org/openstack/glance-specs/specs/queens/approved/glance
-# /deprecate-registry.html
+# http://specs.openstack.org/openstack/glance-
+# specs/specs/queens/approved/glance/deprecate-registry.html
+#registry_client_protocol = http
 #registry_client_protocol = http
 
 # DEPRECATED:
@@ -1358,8 +1650,8 @@
 # Glance registry service is deprecated for removal.
 #
 # More information can be found from the spec:
-# http://specs.openstack.org/openstack/glance-specs/specs/queens/approved/glance
-# /deprecate-registry.html
+# http://specs.openstack.org/openstack/glance-
+# specs/specs/queens/approved/glance/deprecate-registry.html
 #registry_client_key_file = /etc/ssl/key/key-file.pem
 
 # DEPRECATED:
@@ -1388,8 +1680,8 @@
 # Glance registry service is deprecated for removal.
 #
 # More information can be found from the spec:
-# http://specs.openstack.org/openstack/glance-specs/specs/queens/approved/glance
-# /deprecate-registry.html
+# http://specs.openstack.org/openstack/glance-
+# specs/specs/queens/approved/glance/deprecate-registry.html
 #registry_client_cert_file = /etc/ssl/certs/file.crt
 
 # DEPRECATED:
@@ -1420,9 +1712,10 @@
 # Glance registry service is deprecated for removal.
 #
 # More information can be found from the spec:
-# http://specs.openstack.org/openstack/glance-specs/specs/queens/approved/glance
-# /deprecate-registry.html
+# http://specs.openstack.org/openstack/glance-
+# specs/specs/queens/approved/glance/deprecate-registry.html
 #registry_client_ca_file = /etc/ssl/cafile/file.ca
+#
 
 # DEPRECATED:
 # Set verification of the registry server certificate.
@@ -1452,8 +1745,8 @@
 # Glance registry service is deprecated for removal.
 #
 # More information can be found from the spec:
-# http://specs.openstack.org/openstack/glance-specs/specs/queens/approved/glance
-# /deprecate-registry.html
+# http://specs.openstack.org/openstack/glance-
+# specs/specs/queens/approved/glance/deprecate-registry.html
 #registry_client_insecure = false
 
 # DEPRECATED:
@@ -1480,8 +1773,8 @@
 # Glance registry service is deprecated for removal.
 #
 # More information can be found from the spec:
-# http://specs.openstack.org/openstack/glance-specs/specs/queens/approved/glance
-# /deprecate-registry.html
+# http://specs.openstack.org/openstack/glance-
+# specs/specs/queens/approved/glance/deprecate-registry.html
 #registry_client_timeout = 600
 
 #
@@ -1520,15 +1813,22 @@
 #
 # The amount of time, in seconds, to delay image scrubbing.
 #
-# When delayed delete is turned on, an image is put into ``pending_delete``
-# state upon deletion until the scrubber deletes its image data. Typically, soon
-# after the image is put into ``pending_delete`` state, it is available for
-# scrubbing. However, scrubbing can be delayed until a later point using this
-# configuration option. This option denotes the time period an image spends in
+# When delayed delete is turned on, an image is put into
+# ``pending_delete``
+# state upon deletion until the scrubber deletes its image data.
+# Typically, soon
+# after the image is put into ``pending_delete`` state, it is
+# available for
+# scrubbing. However, scrubbing can be delayed until a later point
+# using this
+# configuration option. This option denotes the time period an image
+# spends in
 # ``pending_delete`` state before it is available for scrubbing.
 #
-# It is important to realize that this has storage implications. The larger the
-# ``scrub_time``, the longer the time to reclaim backend storage from deleted
+# It is important to realize that this has storage implications. The
+# larger the
+# ``scrub_time``, the longer the time to reclaim backend storage from
+# deleted
 # images.
 #
 # Possible values:
@@ -1544,11 +1844,16 @@
 #
 # The size of thread pool to be used for scrubbing images.
 #
-# When there are a large number of images to scrub, it is beneficial to scrub
-# images in parallel so that the scrub queue stays in control and the backend
-# storage is reclaimed in a timely fashion. This configuration option denotes
-# the maximum number of images to be scrubbed in parallel. The default value is
-# one, which signifies serial scrubbing. Any value above one indicates parallel
+# When there are a large number of images to scrub, it is beneficial
+# to scrub
+# images in parallel so that the scrub queue stays in control and the
+# backend
+# storage is reclaimed in a timely fashion. This configuration option
+# denotes
+# the maximum number of images to be scrubbed in parallel. The default
+# value is
+# one, which signifies serial scrubbing. Any value above one indicates
+# parallel
 # scrubbing.
 #
 # Possible values:
@@ -1564,19 +1869,28 @@
 #
 # Turn on/off delayed delete.
 #
-# Typically when an image is deleted, the ``glance-api`` service puts the image
-# into ``deleted`` state and deletes its data at the same time. Delayed delete
-# is a feature in Glance that delays the actual deletion of image data until a
+# Typically when an image is deleted, the ``glance-api`` service puts
+# the image
+# into ``deleted`` state and deletes its data at the same time.
+# Delayed delete
+# is a feature in Glance that delays the actual deletion of image data
+# until a
 # later point in time (as determined by the configuration option
 # ``scrub_time``).
-# When delayed delete is turned on, the ``glance-api`` service puts the image
-# into ``pending_delete`` state upon deletion and leaves the image data in the
-# storage backend for the image scrubber to delete at a later time. The image
-# scrubber will move the image into ``deleted`` state upon successful deletion
+# When delayed delete is turned on, the ``glance-api`` service puts
+# the image
+# into ``pending_delete`` state upon deletion and leaves the image
+# data in the
+# storage backend for the image scrubber to delete at a later time.
+# The image
+# scrubber will move the image into ``deleted`` state upon successful
+# deletion
 # of image data.
 #
-# NOTE: When delayed delete is turned on, image scrubber MUST be running as a
-# periodic task to prevent the backend storage from filling up with undesired
+# NOTE: When delayed delete is turned on, image scrubber MUST be
+# running as a
+# periodic task to prevent the backend storage from filling up with
+# undesired
 # usage.
 #
 # Possible values:
@@ -1590,453 +1904,504 @@
 #
 #  (boolean value)
 #delayed_delete = false
-
 #
 # From oslo.log
 #
 
-# If set to true, the logging level will be set to DEBUG instead of the default
-# INFO level. (boolean value)
+# If set to true, the logging level will be set to DEBUG instead of
+# the default INFO level. (boolean value)
 # Note: This option can be changed without restarting.
 #debug = false
 
-# The name of a logging configuration file. This file is appended to any
-# existing logging configuration files. For details about logging configuration
-# files, see the Python logging module documentation. Note that when logging
-# configuration files are used then all logging configuration is set in the
-# configuration file and other logging configuration options are ignored (for
-# example, logging_context_format_string). (string value)
+# The name of a logging configuration file. This file is appended to
+# any existing logging configuration files. For details about logging
+# configuration files, see the Python logging module documentation.
+# Note that when logging configuration files are used then all logging
+# configuration is set in the configuration file and other logging
+# configuration options are ignored (for example,
+# logging_context_format_string). (string value)
 # Note: This option can be changed without restarting.
 # Deprecated group/name - [DEFAULT]/log_config
-#log_config_append = <None>
 
 # Defines the format string for %%(asctime)s in log records. Default:
-# %(default)s . This option is ignored if log_config_append is set. (string
-# value)
+# %(default)s . This option is ignored if log_config_append is set.
+# (string value)
 #log_date_format = %Y-%m-%d %H:%M:%S
 
-# (Optional) Name of log file to send logging output to. If no default is set,
-# logging will go to stderr as defined by use_stderr. This option is ignored if
-# log_config_append is set. (string value)
+# (Optional) Name of log file to send logging output to. If no default
+# is set, logging will go to stderr as defined by use_stderr. This
+# option is ignored if log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logfile
 #log_file = <None>
 
-# (Optional) The base directory used for relative log_file  paths. This option
-# is ignored if log_config_append is set. (string value)
+# (Optional) The base directory used for relative log_file  paths.
+# This option is ignored if log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logdir
 #log_dir = <None>
 
-# Uses logging handler designed to watch file system. When log file is moved or
-# removed this handler will open a new log file with specified path
-# instantaneously. It makes sense only if log_file option is specified and Linux
-# platform is used. This option is ignored if log_config_append is set. (boolean
-# value)
+# Uses logging handler designed to watch file system. When log file is
+# moved or removed this handler will open a new log file with
+# specified path instantaneously. It makes sense only if log_file
+# option is specified and Linux platform is used. This option is
+# ignored if log_config_append is set. (boolean value)
 #watch_log_file = false
 
-# Use syslog for logging. Existing syslog format is DEPRECATED and will be
-# changed later to honor RFC5424. This option is ignored if log_config_append is
-# set. (boolean value)
+# Use syslog for logging. Existing syslog format is DEPRECATED and
+# will be changed later to honor RFC5424. This option is ignored if
+# log_config_append is set. (boolean value)
 #use_syslog = false
 
-# Enable journald for logging. If running in a systemd environment you may wish
-# to enable journal support. Doing so will use the journal native protocol which
-# includes structured metadata in addition to log messages.This option is
-# ignored if log_config_append is set. (boolean value)
+# Enable journald for logging. If running in a systemd environment you
+# may wish to enable journal support. Doing so will use the journal
+# native protocol which includes structured metadata in addition to
+# log messages.This option is ignored if log_config_append is set.
+# (boolean value)
 #use_journal = false
 
 # Syslog facility to receive log lines. This option is ignored if
 # log_config_append is set. (string value)
 #syslog_log_facility = LOG_USER
 
-# Use JSON formatting for logging. This option is ignored if log_config_append
-# is set. (boolean value)
+# Use JSON formatting for logging. This option is ignored if
+# log_config_append is set. (boolean value)
 #use_json = false
 
-# Log output to standard error. This option is ignored if log_config_append is
-# set. (boolean value)
+# Log output to standard error. This option is ignored if
+# log_config_append is set. (boolean value)
 #use_stderr = false
 
 # Format string to use for log messages with context. (string value)
 #logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
 
-# Format string to use for log messages when context is undefined. (string
+# Format string to use for log messages when context is undefined.
+# (string value)
+#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
+
+# Additional data to append to log message when logging level for the
+# message is DEBUG. (string value)
+#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
+
+# Prefix each line of exception output with this format. (string
 # value)
-#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
-
-# Additional data to append to log message when logging level for the message is
-# DEBUG. (string value)
-#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
-
-# Prefix each line of exception output with this format. (string value)
 #logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
 
 # Defines the format string for %(user_identity)s that is used in
 # logging_context_format_string. (string value)
 #logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
 
-# List of package logging levels in logger=LEVEL pairs. This option is ignored
-# if log_config_append is set. (list value)
+# List of package logging levels in logger=LEVEL pairs. This option is
+# ignored if log_config_append is set. (list value)
 #default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
 
 # Enables or disables publication of error events. (boolean value)
 #publish_errors = false
 
-# The format for an instance that is passed with the log message. (string value)
+# The format for an instance that is passed with the log message.
+# (string value)
 #instance_format = "[instance: %(uuid)s] "
 
-# The format for an instance UUID that is passed with the log message. (string
-# value)
+# The format for an instance UUID that is passed with the log message.
+# (string value)
 #instance_uuid_format = "[instance: %(uuid)s] "
 
 # Interval, number of seconds, of log rate limiting. (integer value)
 #rate_limit_interval = 0
 
-# Maximum number of logged messages per rate_limit_interval. (integer value)
+# Maximum number of logged messages per rate_limit_interval. (integer
+# value)
 #rate_limit_burst = 0
 
-# Log level name used by rate limiting: CRITICAL, ERROR, INFO, WARNING, DEBUG or
-# empty string. Logs with level greater or equal to rate_limit_except_level are
-# not filtered. An empty string means that all levels are filtered. (string
-# value)
+# Log level name used by rate limiting: CRITICAL, ERROR, INFO,
+# WARNING, DEBUG or empty string. Logs with level greater or equal to
+# rate_limit_except_level are not filtered. An empty string means that
+# all levels are filtered. (string value)
 #rate_limit_except_level = CRITICAL
 
 # Enables or disables fatal status of deprecations. (boolean value)
 #fatal_deprecations = false
 
-#
-# From oslo.messaging
-#
-
-# Size of RPC connection pool. (integer value)
-#rpc_conn_pool_size = 30
-
-# The pool size limit for connections expiration policy (integer value)
-#conn_pool_min_size = 2
-
-# The time-to-live in sec of idle connections in the pool (integer value)
-#conn_pool_ttl = 1200
-
-# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
-# The "host" option should point or resolve to this address. (string value)
-#rpc_zmq_bind_address = *
-
-# MatchMaker driver. (string value)
-# Possible values:
-# redis - <No description provided>
-# sentinel - <No description provided>
-# dummy - <No description provided>
-#rpc_zmq_matchmaker = redis
-
-# Number of ZeroMQ contexts, defaults to 1. (integer value)
-#rpc_zmq_contexts = 1
-
-# Maximum number of ingress messages to locally buffer per topic. Default is
-# unlimited. (integer value)
-#rpc_zmq_topic_backlog = <None>
-
-# Directory for holding IPC sockets. (string value)
-#rpc_zmq_ipc_dir = /var/run/openstack
-
-# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
-# "host" option, if running Nova. (string value)
-#rpc_zmq_host = localhost
-
-# Number of seconds to wait before all pending messages will be sent after
-# closing a socket. The default value of -1 specifies an infinite linger period.
-# The value of 0 specifies no linger period. Pending messages shall be discarded
-# immediately when the socket is closed. Positive values specify an upper bound
-# for the linger period. (integer value)
-# Deprecated group/name - [DEFAULT]/rpc_cast_timeout
-#zmq_linger = -1
-
-# The default number of seconds that poll should wait. Poll raises timeout
-# exception when timeout expired. (integer value)
-#rpc_poll_timeout = 1
-
-# Expiration timeout in seconds of a name service record about existing target (
-# < 0 means no timeout). (integer value)
-#zmq_target_expire = 300
-
-# Update period in seconds of a name service record about existing target.
-# (integer value)
-#zmq_target_update = 180
-
-# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
+[image_format]
+
+#
+# From glance.api
+#
+
+# Supported values for the 'container_format' image attribute (list
 # value)
-#use_pub_sub = false
-
-# Use ROUTER remote proxy. (boolean value)
-#use_router_proxy = false
-
-# This option makes direct connections dynamic or static. It makes sense only
-# with use_router_proxy=False which means to use direct connections for direct
-# message types (ignored otherwise). (boolean value)
-#use_dynamic_connections = false
-
-# How many additional connections to a host will be made for failover reasons.
-# This option is actual only in dynamic connections mode. (integer value)
-#zmq_failover_connections = 2
-
-# Minimal port number for random ports range. (port value)
-# Minimum value: 0
-# Maximum value: 65535
-#rpc_zmq_min_port = 49153
-
-# Maximal port number for random ports range. (integer value)
+# Deprecated group/name - [DEFAULT]/container_formats
+#container_formats = ami,ari,aki,bare,ovf,ova,docker
+
+# Supported values for the 'disk_format' image attribute (list value)
+# Deprecated group/name - [DEFAULT]/disk_formats
+#disk_formats = ami,ari,aki,vhd,vhdx,vmdk,raw,qcow2,vdi,iso,ploop,root-tar
+
+
+[paste_deploy]
+
+#
+# From glance.api
+#
+
+#
+# Deployment flavor to use in the server application pipeline.
+#
+# Provide a string value representing the appropriate deployment
+# flavor used in the server application pipleline. This is typically
+# the partial name of a pipeline in the paste configuration file with
+# the service name removed.
+#
+# For example, if your paste section name in the paste configuration
+# file is [pipeline:glance-api-keystone], set ``flavor`` to
+# ``keystone``.
+#
+# Possible values:
+#     * String value representing a partial pipeline name.
+#
+# Related Options:
+#     * config_file
+#
+#  (string value)
+#flavor = keystone
+flavor = keystone
+
+#
+# Name of the paste configuration file.
+#
+# Provide a string value representing the name of the paste
+# configuration file to use for configuring piplelines for
+# server application deployments.
+#
+# NOTES:
+#     * Provide the name or the path relative to the glance directory
+#       for the paste configuration file and not the absolute path.
+#     * The sample paste configuration file shipped with Glance need
+#       not be edited in most cases as it comes with ready-made
+#       pipelines for all common deployment flavors.
+#
+# If no value is specified for this option, the ``paste.ini`` file
+# with the prefix of the corresponding Glance service's configuration
+# file name will be searched for in the known configuration
+# directories. (For example, if this option is missing from or has no
+# value set in ``glance-api.conf``, the service will look for a file
+# named ``glance-api-paste.ini``.) If the paste configuration file is
+# not found, the service will not start.
+#
+# Possible values:
+#     * A string value representing the name of the paste
+# configuration
+#       file.
+#
+# Related Options:
+#     * flavor
+#
+#  (string value)
+#config_file = glance-api-paste.ini
+
+
+[profiler]
+
+#
+# From glance.api
+#
+
+#
+# Enables the profiling for all services on this node. Default value
+# is False
+# (fully disable the profiling feature).
+#
+# Possible values:
+#
+# * True: Enables the feature
+# * False: Disables the feature. The profiling cannot be started via
+# this project
+# operations. If the profiling is triggered by another project, this
+# project part
+# will be empty.
+#  (boolean value)
+# Deprecated group/name - [profiler]/profiler_enabled
+#enabled = false
+
+#
+# Enables SQL requests profiling in services. Default value is False
+# (SQL
+# requests won't be traced).
+#
+# Possible values:
+#
+# * True: Enables SQL requests profiling. Each SQL query will be part
+# of the
+# trace and can the be analyzed by how much time was spent for that.
+# * False: Disables SQL requests profiling. The spent time is only
+# shown on a
+# higher level of operations. Single SQL queries cannot be analyzed
+# this
+# way.
+#  (boolean value)
+#trace_sqlalchemy = false
+
+#
+# Secret key(s) to use for encrypting context data for performance
+# profiling.
+# This string value should have the following format:
+# <key1>[,<key2>,...<keyn>],
+# where each key is some random string. A user who triggers the
+# profiling via
+# the REST API has to set one of these keys in the headers of the REST
+# API call
+# to include profiling results of this node for this particular
+# project.
+#
+# Both "enabled" flag and "hmac_keys" config options should be set to
+# enable
+# profiling. Also, to generate correct profiling information across
+# all services
+# at least one key needs to be consistent between OpenStack projects.
+# This
+# ensures it can be used from client side to generate the trace,
+# containing
+# information from all possible resources. (string value)
+#hmac_keys = SECRET_KEY
+
+#
+# Connection string for a notifier backend. Default value is
+# messaging:// which
+# sets the notifier to oslo_messaging.
+#
+# Examples of possible values:
+#
+# * messaging://: use oslo_messaging driver for sending notifications.
+# * mongodb://127.0.0.1:27017 : use mongodb driver for sending
+# notifications.
+# * elasticsearch://127.0.0.1:9200 : use elasticsearch driver for
+# sending
+# notifications.
+#  (string value)
+#connection_string = messaging://
+
+#
+# Document type for notification indexing in elasticsearch.
+#  (string value)
+#es_doc_type = notification
+
+#
+# This parameter is a time value parameter (for example:
+# es_scroll_time=2m),
+# indicating for how long the nodes that participate in the search
+# will maintain
+# relevant resources in order to continue and support it.
+#  (string value)
+#es_scroll_time = 2m
+
+#
+# Elasticsearch splits large requests in batches. This parameter
+# defines
+# maximum size of each batch (for example: es_scroll_size=10000).
+#  (integer value)
+#es_scroll_size = 10000
+
+#
+# Redissentinel provides a timeout option on the connections.
+# This parameter defines that timeout (for example:
+# socket_timeout=0.1).
+#  (floating point value)
+#socket_timeout = 0.1
+
+#
+# Redissentinel uses a service name to identify a master redis
+# service.
+# This parameter defines the name (for example:
+# sentinal_service_name=mymaster).
+#  (string value)
+#sentinel_service_name = mymaster
+
+
+[store_type_location_strategy]
+
+#
+# From glance.api
+#
+
+#
+# Preference order of storage backends.
+#
+# Provide a comma separated list of store names in the order in
+# which images should be retrieved from storage backends.
+# These store names must be registered with the ``stores``
+# configuration option.
+#
+# NOTE: The ``store_type_preference`` configuration option is applied
+# only if ``store_type`` is chosen as a value for the
+# ``location_strategy`` configuration option. An empty list will not
+# change the location order.
+#
+# Possible values:
+#     * Empty list
+#     * Comma separated list of registered store names. Legal values
+# are:
+#         * file
+#         * http
+#         * rbd
+#         * swift
+#         * sheepdog
+#         * cinder
+#         * vmware
+#
+# Related options:
+#     * location_strategy
+#     * stores
+#
+#  (list value)
+#store_type_preference =
+
+
+[task]
+
+#
+# From glance.api
+#
+
+# Time in hours for which a task lives after, either succeeding or
+# failing (integer value)
+# Deprecated group/name - [DEFAULT]/task_time_to_live
+#task_time_to_live = 48
+
+#
+# Task executor to be used to run task scripts.
+#
+# Provide a string value representing the executor to use for task
+# executions. By default, ``TaskFlow`` executor is used.
+#
+# ``TaskFlow`` helps make task executions easy, consistent, scalable
+# and reliable. It also enables creation of lightweight task objects
+# and/or functions that are combined together into flows in a
+# declarative manner.
+#
+# Possible values:
+#     * taskflow
+#
+# Related Options:
+#     * None
+#
+#  (string value)
+#task_executor = taskflow
+
+#
+# Absolute path to the work directory to use for asynchronous
+# task operations.
+#
+# The directory set here will be used to operate over images -
+# normally before they are imported in the destination store.
+#
+# NOTE: When providing a value for ``work_dir``, please make sure
+# that enough space is provided for concurrent tasks to run
+# efficiently without running out of space.
+#
+# A rough estimation can be done by multiplying the number of
+# ``max_workers`` with an average image size (e.g 500MB). The image
+# size estimation should be done based on the average size in your
+# deployment. Note that depending on the tasks running you may need
+# to multiply this number by some factor depending on what the task
+# does. For example, you may want to double the available size if
+# image conversion is enabled. All this being said, remember these
+# are just estimations and you should do them based on the worst
+# case scenario and be prepared to act in case they were wrong.
+#
+# Possible values:
+#     * String value representing the absolute path to the working
+#       directory
+#
+# Related Options:
+#     * None
+#
+#  (string value)
+#work_dir = /work_dir
+
+
+[taskflow_executor]
+
+#
+# From glance.api
+#
+
+#
+# Set the taskflow engine mode.
+#
+# Provide a string type value to set the mode in which the taskflow
+# engine would schedule tasks to the workers on the hosts. Based on
+# this mode, the engine executes tasks either in single or multiple
+# threads. The possible values for this configuration option are:
+# ``serial`` and ``parallel``. When set to ``serial``, the engine runs
+# all the tasks in a single thread which results in serial execution
+# of tasks. Setting this to ``parallel`` makes the engine run tasks in
+# multiple threads. This results in parallel execution of tasks.
+#
+# Possible values:
+#     * serial
+#     * parallel
+#
+# Related options:
+#     * max_workers
+#
+#  (string value)
+# Possible values:
+# serial - <No description provided>
+# parallel - <No description provided>
+#engine_mode = parallel
+
+#
+# Set the number of engine executable tasks.
+#
+# Provide an integer value to limit the number of workers that can be
+# instantiated on the hosts. In other words, this number defines the
+# number of parallel tasks that can be executed at the same time by
+# the taskflow engine. This value can be greater than one when the
+# engine mode is set to parallel.
+#
+# Possible values:
+#     * Integer value greater than or equal to 1
+#
+# Related options:
+#     * engine_mode
+#
+#  (integer value)
 # Minimum value: 1
-# Maximum value: 65536
-#rpc_zmq_max_port = 65536
-
-# Number of retries to find free port number before fail with ZMQBindError.
-# (integer value)
-#rpc_zmq_bind_port_retries = 100
-
-# Default serialization mechanism for serializing/deserializing
-# outgoing/incoming messages (string value)
-# Possible values:
-# json - <No description provided>
-# msgpack - <No description provided>
-#rpc_zmq_serialization = json
-
-# This option configures round-robin mode in zmq socket. True means not keeping
-# a queue when server side disconnects. False means to keep queue and messages
-# even if server is disconnected, when the server appears we send all
-# accumulated messages to it. (boolean value)
-#zmq_immediate = true
-
-# Enable/disable TCP keepalive (KA) mechanism. The default value of -1 (or any
-# other negative value) means to skip any overrides and leave it to OS default;
-# 0 and 1 (or any other positive value) mean to disable and enable the option
-# respectively. (integer value)
-#zmq_tcp_keepalive = -1
-
-# The duration between two keepalive transmissions in idle condition. The unit
-# is platform dependent, for example, seconds in Linux, milliseconds in Windows
-# etc. The default value of -1 (or any other negative value and 0) means to skip
-# any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_idle = -1
-
-# The number of retransmissions to be carried out before declaring that remote
-# end is not available. The default value of -1 (or any other negative value and
-# 0) means to skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_cnt = -1
-
-# The duration between two successive keepalive retransmissions, if
-# acknowledgement to the previous keepalive transmission is not received. The
-# unit is platform dependent, for example, seconds in Linux, milliseconds in
-# Windows etc. The default value of -1 (or any other negative value and 0) means
-# to skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_intvl = -1
-
-# Maximum number of (green) threads to work concurrently. (integer value)
-#rpc_thread_pool_size = 100
-
-# Expiration timeout in seconds of a sent/received message after which it is not
-# tracked anymore by a client/server. (integer value)
-#rpc_message_ttl = 300
-
-# Wait for message acknowledgements from receivers. This mechanism works only
-# via proxy without PUB/SUB. (boolean value)
-#rpc_use_acks = false
-
-# Number of seconds to wait for an ack from a cast/call. After each retry
-# attempt this timeout is multiplied by some specified multiplier. (integer
-# value)
-#rpc_ack_timeout_base = 15
-
-# Number to multiply base ack timeout by after each retry attempt. (integer
-# value)
-#rpc_ack_timeout_multiplier = 2
-
-# Default number of message sending attempts in case of any problems occurred:
-# positive value N means at most N retries, 0 means no retries, None or -1 (or
-# any other negative values) mean to retry forever. This option is used only if
-# acknowledgments are enabled. (integer value)
-#rpc_retry_attempts = 3
-
-# List of publisher hosts SubConsumer can subscribe on. This option has higher
-# priority then the default publishers list taken from the matchmaker. (list
-# value)
-#subscribe_on =
-
-# Size of executor thread pool when executor is threading or eventlet. (integer
-# value)
-# Deprecated group/name - [DEFAULT]/rpc_thread_pool_size
-#executor_thread_pool_size = 64
-
-# Seconds to wait for a response from a call. (integer value)
-#rpc_response_timeout = 60
-
-# The network address and optional user credentials for connecting to the
-# messaging backend, in URL format. The expected format is:
-#
-# driver://[user:pass@]host:port[,[userN:passN@]hostN:portN]/virtual_host?query
-#
-# Example: rabbit://rabbitmq:password@127.0.0.1:5672//
-#
-# For full details on the fields in the URL see the documentation of
-# oslo_messaging.TransportURL at
-# https://docs.openstack.org/oslo.messaging/latest/reference/transport.html
-# (string value)
-#transport_url = <None>
-
-# DEPRECATED: The messaging driver to use, defaults to rabbit. Other drivers
-# include amqp and zmq. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rpc_backend = rabbit
-
-# The default exchange under which topics are scoped. May be overridden by an
-# exchange name specified in the transport_url option. (string value)
-#control_exchange = openstack
-
-
-[cors]
-
-#
-# From oslo.middleware.cors
-#
-
-# Indicate whether this resource may be shared with the domain received in the
-# requests "origin" header. Format: "<protocol>://<host>[:<port>]", no trailing
-# slash. Example: https://horizon.example.com (list value)
-#allowed_origin = <None>
-
-# Indicate that the actual request can include user credentials (boolean value)
-#allow_credentials = true
-
-# Indicate which headers are safe to expose to the API. Defaults to HTTP Simple
-# Headers. (list value)
-#expose_headers = X-Image-Meta-Checksum,X-Auth-Token,X-Subject-Token,X-Service-Token,X-OpenStack-Request-ID
-
-# Maximum cache age of CORS preflight requests. (integer value)
-#max_age = 3600
-
-# Indicate which methods can be used during the actual request. (list value)
-#allow_methods = GET,PUT,POST,DELETE,PATCH
-
-# Indicate which header field names may be used during the actual request. (list
-# value)
-#allow_headers = Content-MD5,X-Image-Meta-Checksum,X-Storage-Token,Accept-Encoding,X-Auth-Token,X-Identity-Status,X-Roles,X-Service-Catalog,X-User-Id,X-Tenant-Id,X-OpenStack-Request-ID
-
-
-[database]
-connection = sqlite:////var/lib/glance/glance.sqlite
-backend = sqlalchemy
-
-#
-# From oslo.db
-#
-
-# If True, SQLite uses synchronous mode. (boolean value)
-#sqlite_synchronous = true
-
-# The back end to use for the database. (string value)
-# Deprecated group/name - [DEFAULT]/db_backend
-#backend = sqlalchemy
-
-# The SQLAlchemy connection string to use to connect to the database. (string
-# value)
-# Deprecated group/name - [DEFAULT]/sql_connection
-# Deprecated group/name - [DATABASE]/sql_connection
-# Deprecated group/name - [sql]/connection
-#connection = <None>
-
-# The SQLAlchemy connection string to use to connect to the slave database.
-# (string value)
-#slave_connection = <None>
-
-# The SQL mode to be used for MySQL sessions. This option, including the
-# default, overrides any server-set SQL mode. To use whatever SQL mode is set by
-# the server configuration, set this to no value. Example: mysql_sql_mode=
-# (string value)
-#mysql_sql_mode = TRADITIONAL
-
-# If True, transparently enables support for handling MySQL Cluster (NDB).
-# (boolean value)
-#mysql_enable_ndb = false
-
-# Connections which have been present in the connection pool longer than this
-# number of seconds will be replaced with a new one the next time they are
-# checked out from the pool. (integer value)
-# Deprecated group/name - [DATABASE]/idle_timeout
-# Deprecated group/name - [database]/idle_timeout
-# Deprecated group/name - [DEFAULT]/sql_idle_timeout
-# Deprecated group/name - [DATABASE]/sql_idle_timeout
-# Deprecated group/name - [sql]/idle_timeout
-#connection_recycle_time = 3600
-
-# Minimum number of SQL connections to keep open in a pool. (integer value)
-# Deprecated group/name - [DEFAULT]/sql_min_pool_size
-# Deprecated group/name - [DATABASE]/sql_min_pool_size
-#min_pool_size = 1
-
-# Maximum number of SQL connections to keep open in a pool. Setting a value of 0
-# indicates no limit. (integer value)
-# Deprecated group/name - [DEFAULT]/sql_max_pool_size
-# Deprecated group/name - [DATABASE]/sql_max_pool_size
-#max_pool_size = 5
-
-# Maximum number of database connection retries during startup. Set to -1 to
-# specify an infinite retry count. (integer value)
-# Deprecated group/name - [DEFAULT]/sql_max_retries
-# Deprecated group/name - [DATABASE]/sql_max_retries
-#max_retries = 10
-
-# Interval between retries of opening a SQL connection. (integer value)
-# Deprecated group/name - [DEFAULT]/sql_retry_interval
-# Deprecated group/name - [DATABASE]/reconnect_interval
-#retry_interval = 10
-
-# If set, use this value for max_overflow with SQLAlchemy. (integer value)
-# Deprecated group/name - [DEFAULT]/sql_max_overflow
-# Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
-#max_overflow = 50
-
-# Verbosity of SQL debugging information: 0=None, 100=Everything. (integer
-# value)
-# Minimum value: 0
-# Maximum value: 100
-# Deprecated group/name - [DEFAULT]/sql_connection_debug
-#connection_debug = 0
-
-# Add Python stack traces to SQL as comment strings. (boolean value)
-# Deprecated group/name - [DEFAULT]/sql_connection_trace
-#connection_trace = false
-
-# If set, use this value for pool_timeout with SQLAlchemy. (integer value)
-# Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
-#pool_timeout = <None>
-
-# Enable the experimental use of database reconnect on connection lost. (boolean
-# value)
-#use_db_reconnect = false
-
-# Seconds between retries of a database transaction. (integer value)
-#db_retry_interval = 1
-
-# If True, increases the interval between retries of a database operation up to
-# db_max_retry_interval. (boolean value)
-#db_inc_retry_interval = true
-
-# If db_inc_retry_interval is set, the maximum seconds between retries of a
-# database operation. (integer value)
-#db_max_retry_interval = 10
-
-# Maximum retries in case of connection error or deadlock error before error is
-# raised. Set to -1 to specify an infinite retry count. (integer value)
-#db_max_retries = 20
-
-#
-# From oslo.db.concurrency
-#
-
-# Enable the experimental use of thread pooling for all DB API calls (boolean
-# value)
-# Deprecated group/name - [DEFAULT]/dbapi_use_tpool
-#use_tpool = false
-
+# Deprecated group/name - [task]/eventlet_executor_pool_size
+#max_workers = 10
+
+#
+# Set the desired image conversion format.
+#
+# Provide a valid image format to which you want images to be
+# converted before they are stored for consumption by Glance.
+# Appropriate image format conversions are desirable for specific
+# storage backends in order to facilitate efficient handling of
+# bandwidth and usage of the storage infrastructure.
+#
+# By default, ``conversion_format`` is not set and must be set
+# explicitly in the configuration file.
+#
+# The allowed values for this option are ``raw``, ``qcow2`` and
+# ``vmdk``. The  ``raw`` format is the unstructured disk format and
+# should be chosen when RBD or Ceph storage backends are used for
+# image storage. ``qcow2`` is supported by the QEMU emulator that
+# expands dynamically and supports Copy on Write. The ``vmdk`` is
+# another common disk format supported by many common virtual machine
+# monitors like VMWare Workstation.
+#
+# Possible values:
+#     * qcow2
+#     * raw
+#     * vmdk
+#
+# Related options:
+#     * disk_formats
+#
+#  (string value)
+# Possible values:
+# qcow2 - <No description provided>
+# raw - <No description provided>
+# vmdk - <No description provided>
+#conversion_format = raw
 
 [glance_store]
 
@@ -2110,6 +2475,8 @@
 # cinder - <No description provided>
 # vsphere - <No description provided>
 #default_store = file
+default_store = file
+stores = file,http
 
 #
 # Minimum interval in seconds to execute updating dynamic storage
@@ -2127,8 +2494,8 @@
 # integer value greater than zero to enable this option.
 #
 # NOTE: For more information on store capabilities and their updates,
-# please visit: https://specs.openstack.org/openstack/glance-specs/specs/kilo
-# /store-capabilities.html
+# please visit: https://specs.openstack.org/openstack/glance-
+# specs/specs/kilo/store-capabilities.html
 #
 # For more information on setting up a particular store in your
 # deployment and help with the usage of this feature, please contact
@@ -2152,16 +2519,20 @@
 # When the ``cinder_endpoint_template`` is not set and any of
 # ``cinder_store_auth_address``, ``cinder_store_user_name``,
 # ``cinder_store_project_name``, ``cinder_store_password`` is not set,
-# cinder store uses this information to lookup cinder endpoint from the service
-# catalog in the current context. ``cinder_os_region_name``, if set, is taken
+# cinder store uses this information to lookup cinder endpoint from
+# the service
+# catalog in the current context. ``cinder_os_region_name``, if set,
+# is taken
 # into consideration to fetch the appropriate endpoint.
 #
-# The service catalog can be listed by the ``openstack catalog list`` command.
+# The service catalog can be listed by the ``openstack catalog list``
+# command.
 #
 # Possible values:
 #     * A string of of the following form:
 #       ``<service_type>:<service_name>:<interface>``
-#       At least ``service_type`` and ``interface`` should be specified.
+#       At least ``service_type`` and ``interface`` should be
+# specified.
 #       ``service_name`` can be omitted.
 #
 # Related options:
@@ -2174,22 +2545,27 @@
 #
 #  (string value)
 #cinder_catalog_info = volumev2::publicURL
+cinder_catalog_info = volumev2::internalURL
 
 #
 # Override service catalog lookup with template for cinder endpoint.
 #
-# When this option is set, this value is used to generate cinder endpoint,
+# When this option is set, this value is used to generate cinder
+# endpoint,
 # instead of looking up from the service catalog.
 # This value is ignored if ``cinder_store_auth_address``,
 # ``cinder_store_user_name``, ``cinder_store_project_name``, and
 # ``cinder_store_password`` are specified.
 #
-# If this configuration option is set, ``cinder_catalog_info`` will be ignored.
-#
-# Possible values:
-#     * URL template string for cinder endpoint, where ``%%(tenant)s`` is
+# If this configuration option is set, ``cinder_catalog_info`` will be
+# ignored.
+#
+# Possible values:
+#     * URL template string for cinder endpoint, where ``%%(tenant)s``
+# is
 #       replaced with the current tenant (project) name.
-#       For example: ``http://cinder.openstack.example.org/v2/%%(tenant)s``
+#       For example:
+# ``http://cinder.openstack.example.org/v2/%%(tenant)s``
 #
 # Related options:
 #     * cinder_store_auth_address
@@ -2204,10 +2580,14 @@
 #
 # Region name to lookup cinder service from the service catalog.
 #
-# This is used only when ``cinder_catalog_info`` is used for determining the
-# endpoint. If set, the lookup for cinder endpoint by this node is filtered to
-# the specified region. It is useful when multiple regions are listed in the
-# catalog. If this is not set, the endpoint is looked up from every region.
+# This is used only when ``cinder_catalog_info`` is used for
+# determining the
+# endpoint. If set, the lookup for cinder endpoint by this node is
+# filtered to
+# the specified region. It is useful when multiple regions are listed
+# in the
+# catalog. If this is not set, the endpoint is looked up from every
+# region.
 #
 # Possible values:
 #     * A string that is a valid region name.
@@ -2219,13 +2599,17 @@
 # Deprecated group/name - [glance_store]/os_region_name
 #cinder_os_region_name = <None>
 
+cinder_os_region_name = RegionOne
+
+
 #
 # Location of a CA certificates file used for cinder client requests.
 #
 # The specified CA certificates file, if set, is used to verify cinder
-# connections via HTTPS endpoint. If the endpoint is HTTP, this value is
-# ignored.
-# ``cinder_api_insecure`` must be set to ``True`` to enable the verification.
+# connections via HTTPS endpoint. If the endpoint is HTTP, this value
+# is ignored.
+# ``cinder_api_insecure`` must be set to ``True`` to enable the
+# verification.
 #
 # Possible values:
 #     * Path to a ca certificates file
@@ -2239,7 +2623,8 @@
 #
 # Number of cinderclient retries on failed http calls.
 #
-# When a call failed by any errors, cinderclient will retry the call up to the
+# When a call failed by any errors, cinderclient will retry the call
+# up to the
 # specified times after sleeping a few seconds.
 #
 # Possible values:
@@ -2256,11 +2641,16 @@
 # Time period, in seconds, to wait for a cinder volume transition to
 # complete.
 #
-# When the cinder volume is created, deleted, or attached to the glance node to
-# read/write the volume data, the volume's state is changed. For example, the
-# newly created volume status changes from ``creating`` to ``available`` after
-# the creation process is completed. This specifies the maximum time to wait for
-# the status change. If a timeout occurs while waiting, or the status is changed
+# When the cinder volume is created, deleted, or attached to the
+# glance node to
+# read/write the volume data, the volume's state is changed. For
+# example, the
+# newly created volume status changes from ``creating`` to
+# ``available`` after
+# the creation process is completed. This specifies the maximum time
+# to wait for
+# the status change. If a timeout occurs while waiting, or the status
+# is changed
 # to an unexpected value (e.g. `error``), the image creation fails.
 #
 # Possible values:
@@ -2276,8 +2666,10 @@
 #
 # Allow to perform insecure SSL requests to cinder.
 #
-# If this option is set to True, HTTPS endpoint connection is verified using the
-# CA certificates file specified by ``cinder_ca_certificates_file`` option.
+# If this option is set to True, HTTPS endpoint connection is verified
+# using the
+# CA certificates file specified by ``cinder_ca_certificates_file``
+# option.
 #
 # Possible values:
 #     * True
@@ -2292,15 +2684,23 @@
 #
 # The address where the cinder authentication service is listening.
 #
-# When all of ``cinder_store_auth_address``, ``cinder_store_user_name``,
-# ``cinder_store_project_name``, and ``cinder_store_password`` options are
-# specified, the specified values are always used for the authentication.
-# This is useful to hide the image volumes from users by storing them in a
-# project/tenant specific to the image service. It also enables users to share
-# the image volume among other projects under the control of glance's ACL.
-#
-# If either of these options are not set, the cinder endpoint is looked up
-# from the service catalog, and current context's user and project are used.
+# When all of ``cinder_store_auth_address``,
+# ``cinder_store_user_name``,
+# ``cinder_store_project_name``, and ``cinder_store_password`` options
+# are
+# specified, the specified values are always used for the
+# authentication.
+# This is useful to hide the image volumes from users by storing them
+# in a
+# project/tenant specific to the image service. It also enables users
+# to share
+# the image volume among other projects under the control of glance's
+# ACL.
+#
+# If either of these options are not set, the cinder endpoint is
+# looked up
+# from the service catalog, and current context's user and project are
+# used.
 #
 # Possible values:
 #     * A valid authentication service address, for example:
@@ -2317,7 +2717,8 @@
 #
 # User name to authenticate against cinder.
 #
-# This must be used with all the following related options. If any of these are
+# This must be used with all the following related options. If any of
+# these are
 # not specified, the user of the current context is used.
 #
 # Possible values:
@@ -2334,11 +2735,13 @@
 #
 # Password for the user authenticating against cinder.
 #
-# This must be used with all the following related options. If any of these are
+# This must be used with all the following related options. If any of
+# these are
 # not specified, the user of the current context is used.
 #
 # Possible values:
-#     * A valid password for the user specified by ``cinder_store_user_name``
+#     * A valid password for the user specified by
+# ``cinder_store_user_name``
 #
 # Related options:
 #     * cinder_store_auth_address
@@ -2351,10 +2754,12 @@
 #
 # Project name where the image volume is stored in cinder.
 #
-# If this configuration option is not set, the project in current context is
+# If this configuration option is not set, the project in current
+# context is
 # used.
 #
-# This must be used with all the following related options. If any of these are
+# This must be used with all the following related options. If any of
+# these are
 # not specified, the project of the current context is used.
 #
 # Possible values:
@@ -2369,11 +2774,15 @@
 #cinder_store_project_name = <None>
 
 #
-# Path to the rootwrap configuration file to use for running commands as root.
-#
-# The cinder store requires root privileges to operate the image volumes (for
-# connecting to iSCSI/FC volumes and reading/writing the volume data, etc.).
-# The configuration file should allow the required commands by cinder store and
+# Path to the rootwrap configuration file to use for running commands
+# as root.
+#
+# The cinder store requires root privileges to operate the image
+# volumes (for
+# connecting to iSCSI/FC volumes and reading/writing the volume data,
+# etc.).
+# The configuration file should allow the required commands by cinder
+# store and
 # os-brick library.
 #
 # Possible values:
@@ -2388,11 +2797,14 @@
 #
 # Volume type that will be used for volume creation in cinder.
 #
-# Some cinder backends can have several volume types to optimize storage usage.
-# Adding this option allows an operator to choose a specific volume type
+# Some cinder backends can have several volume types to optimize
+# storage usage.
+# Adding this option allows an operator to choose a specific volume
+# type
 # in cinder that can be optimized for images.
 #
-# If this is not set, then the default volume type specified in the cinder
+# If this is not set, then the default volume type specified in the
+# cinder
 # configuration will be used for volume creation.
 #
 # Possible values:
@@ -2429,6 +2841,7 @@
 #
 #  (string value)
 #filesystem_store_datadir = /var/lib/glance/images
+filesystem_store_datadir = /var/lib/glance/images/
 
 #
 # List of directories and their priorities to which the filesystem
@@ -2488,8 +2901,10 @@
 #
 # File access permissions for the image files.
 #
-# Set the intended file access permissions for image data. This provides
-# a way to enable other services, e.g. Nova, to consume images directly
+# Set the intended file access permissions for image data. This
+# provides
+# a way to enable other services, e.g. Nova, to consume images
+# directly
 # from the filesystem store. The users running the services that are
 # intended to be given access to could be made a member of the group
 # that owns the files created. Assigning a value less then or equal to
@@ -2515,8 +2930,10 @@
 # Path to the CA bundle file.
 #
 # This configuration option enables the operator to use a custom
-# Certificate Authority file to verify the remote server certificate. If
-# this option is set, the ``https_insecure`` option will be ignored and
+# Certificate Authority file to verify the remote server certificate.
+# If
+# this option is set, the ``https_insecure`` option will be ignored
+# and
 # the CA file specified will be used to authenticate the server
 # certificate and establish a secure connection to the server.
 #
@@ -2534,8 +2951,10 @@
 #
 # This configuration option takes in a boolean value to determine
 # whether or not to verify the remote server certificate. If set to
-# True, the remote server certificate is not verified. If the option is
-# set to False, then the default CA truststore is used for verification.
+# True, the remote server certificate is not verified. If the option
+# is
+# set to False, then the default CA truststore is used for
+# verification.
 #
 # This option is ignored if ``https_ca_certificates_file`` is set.
 # The remote server certificate will then be verified using the file
@@ -2558,12 +2977,14 @@
 # This configuration option specifies the http/https proxy information
 # that should be used to connect to the remote server. The proxy
 # information should be a key value pair of the scheme and proxy, for
-# example, http:10.0.0.1:3128. You can also specify proxies for multiple
+# example, http:10.0.0.1:3128. You can also specify proxies for
+# multiple
 # schemes by separating the key value pairs with a comma, for example,
 # http:10.0.0.1:3128, https:10.0.0.1:1080.
 #
 # Possible values:
-#     * A comma separated list of scheme:proxy pairs as described above
+#     * A comma separated list of scheme:proxy pairs as described
+# above
 #
 # Related options:
 #     * None
@@ -2575,11 +2996,13 @@
 # Size, in megabytes, to chunk RADOS images into.
 #
 # Provide an integer value representing the size in megabytes to chunk
-# Glance images into. The default chunk size is 8 megabytes. For optimal
+# Glance images into. The default chunk size is 8 megabytes. For
+# optimal
 # performance, the value should be a power of two.
 #
 # When Ceph's RBD object storage system is used as the storage backend
-# for storing Glance images, the images are chunked into objects of the
+# for storing Glance images, the images are chunked into objects of
+# the
 # size set using this option. These chunked objects are then stored
 # across the distributed block data store to use for Glance.
 #
@@ -2592,84 +3015,6 @@
 #  (integer value)
 # Minimum value: 1
 #rbd_store_chunk_size = 8
-
-#
-# RADOS pool in which images are stored.
-#
-# When RBD is used as the storage backend for storing Glance images, the
-# images are stored by means of logical grouping of the objects (chunks
-# of images) into a ``pool``. Each pool is defined with the number of
-# placement groups it can contain. The default pool that is used is
-# 'images'.
-#
-# More information on the RBD storage backend can be found here:
-# http://ceph.com/planet/how-data-is-stored-in-ceph-cluster/
-#
-# Possible Values:
-#     * A valid pool name
-#
-# Related options:
-#     * None
-#
-#  (string value)
-#rbd_store_pool = images
-
-#
-# RADOS user to authenticate as.
-#
-# This configuration option takes in the RADOS user to authenticate as.
-# This is only needed when RADOS authentication is enabled and is
-# applicable only if the user is using Cephx authentication. If the
-# value for this option is not set by the user or is set to None, a
-# default value will be chosen, which will be based on the client.
-# section in rbd_store_ceph_conf.
-#
-# Possible Values:
-#     * A valid RADOS user
-#
-# Related options:
-#     * rbd_store_ceph_conf
-#
-#  (string value)
-#rbd_store_user = <None>
-
-#
-# Ceph configuration file path.
-#
-# This configuration option takes in the path to the Ceph configuration
-# file to be used. If the value for this option is not set by the user
-# or is set to None, librados will locate the default configuration file
-# which is located at /etc/ceph/ceph.conf. If using Cephx
-# authentication, this file should include a reference to the right
-# keyring in a client.<USER> section
-#
-# Possible Values:
-#     * A valid path to a configuration file
-#
-# Related options:
-#     * rbd_store_user
-#
-#  (string value)
-#rbd_store_ceph_conf = /etc/ceph/ceph.conf
-
-#
-# Timeout value for connecting to Ceph cluster.
-#
-# This configuration option takes in the timeout value in seconds used
-# when connecting to the Ceph cluster i.e. it sets the time to wait for
-# glance-api before closing the connection. This prevents glance-api
-# hangups during the connection to RBD. If the value for this option
-# is set to less than or equal to 0, no timeout is set and the default
-# librados value is used.
-#
-# Possible Values:
-#     * Any integer value
-#
-# Related options:
-#     * None
-#
-#  (integer value)
-#rados_connect_timeout = 0
 
 #
 # Chunk size for images to be stored in Sheepdog data store.
@@ -2748,7 +3093,8 @@
 #
 # This boolean determines whether or not to verify the server
 # certificate. If this option is set to True, swiftclient won't check
-# for a valid SSL certificate when authenticating. If the option is set
+# for a valid SSL certificate when authenticating. If the option is
+# set
 # to False, then the default CA truststore is used for verification.
 #
 # Possible values:
@@ -2760,497 +3106,6 @@
 #
 #  (boolean value)
 #swift_store_auth_insecure = false
-
-#
-# Path to the CA bundle file.
-#
-# This configuration option enables the operator to specify the path to
-# a custom Certificate Authority file for SSL verification when
-# connecting to Swift.
-#
-# Possible values:
-#     * A valid path to a CA file
-#
-# Related options:
-#     * swift_store_auth_insecure
-#
-#  (string value)
-#swift_store_cacert = /etc/ssl/certs/ca-certificates.crt
-
-#
-# The region of Swift endpoint to use by Glance.
-#
-# Provide a string value representing a Swift region where Glance
-# can connect to for image storage. By default, there is no region
-# set.
-#
-# When Glance uses Swift as the storage backend to store images
-# for a specific tenant that has multiple endpoints, setting of a
-# Swift region with ``swift_store_region`` allows Glance to connect
-# to Swift in the specified region as opposed to a single region
-# connectivity.
-#
-# This option can be configured for both single-tenant and
-# multi-tenant storage.
-#
-# NOTE: Setting the region with ``swift_store_region`` is
-# tenant-specific and is necessary ``only if`` the tenant has
-# multiple endpoints across different regions.
-#
-# Possible values:
-#     * A string value representing a valid Swift region.
-#
-# Related Options:
-#     * None
-#
-#  (string value)
-#swift_store_region = RegionTwo
-
-#
-# The URL endpoint to use for Swift backend storage.
-#
-# Provide a string value representing the URL endpoint to use for
-# storing Glance images in Swift store. By default, an endpoint
-# is not set and the storage URL returned by ``auth`` is used.
-# Setting an endpoint with ``swift_store_endpoint`` overrides the
-# storage URL and is used for Glance image storage.
-#
-# NOTE: The URL should include the path up to, but excluding the
-# container. The location of an object is obtained by appending
-# the container and object to the configured URL.
-#
-# Possible values:
-#     * String value representing a valid URL path up to a Swift container
-#
-# Related Options:
-#     * None
-#
-#  (string value)
-#swift_store_endpoint = https://swift.openstack.example.org/v1/path_not_including_container_name
-
-#
-# Endpoint Type of Swift service.
-#
-# This string value indicates the endpoint type to use to fetch the
-# Swift endpoint. The endpoint type determines the actions the user will
-# be allowed to perform, for instance, reading and writing to the Store.
-# This setting is only used if swift_store_auth_version is greater than
-# 1.
-#
-# Possible values:
-#     * publicURL
-#     * adminURL
-#     * internalURL
-#
-# Related options:
-#     * swift_store_endpoint
-#
-#  (string value)
-# Possible values:
-# publicURL - <No description provided>
-# adminURL - <No description provided>
-# internalURL - <No description provided>
-#swift_store_endpoint_type = publicURL
-
-#
-# Type of Swift service to use.
-#
-# Provide a string value representing the service type to use for
-# storing images while using Swift backend storage. The default
-# service type is set to ``object-store``.
-#
-# NOTE: If ``swift_store_auth_version`` is set to 2, the value for
-# this configuration option needs to be ``object-store``. If using
-# a higher version of Keystone or a different auth scheme, this
-# option may be modified.
-#
-# Possible values:
-#     * A string representing a valid service type for Swift storage.
-#
-# Related Options:
-#     * None
-#
-#  (string value)
-#swift_store_service_type = object-store
-
-#
-# Name of single container to store images/name prefix for multiple containers
-#
-# When a single container is being used to store images, this configuration
-# option indicates the container within the Glance account to be used for
-# storing all images. When multiple containers are used to store images, this
-# will be the name prefix for all containers. Usage of single/multiple
-# containers can be controlled using the configuration option
-# ``swift_store_multiple_containers_seed``.
-#
-# When using multiple containers, the containers will be named after the value
-# set for this configuration option with the first N chars of the image UUID
-# as the suffix delimited by an underscore (where N is specified by
-# ``swift_store_multiple_containers_seed``).
-#
-# Example: if the seed is set to 3 and swift_store_container = ``glance``, then
-# an image with UUID ``fdae39a1-bac5-4238-aba4-69bcc726e848`` would be placed in
-# the container ``glance_fda``. All dashes in the UUID are included when
-# creating the container name but do not count toward the character limit, so
-# when N=10 the container name would be ``glance_fdae39a1-ba.``
-#
-# Possible values:
-#     * If using single container, this configuration option can be any string
-#       that is a valid swift container name in Glance's Swift account
-#     * If using multiple containers, this configuration option can be any
-#       string as long as it satisfies the container naming rules enforced by
-#       Swift. The value of ``swift_store_multiple_containers_seed`` should be
-#       taken into account as well.
-#
-# Related options:
-#     * ``swift_store_multiple_containers_seed``
-#     * ``swift_store_multi_tenant``
-#     * ``swift_store_create_container_on_put``
-#
-#  (string value)
-#swift_store_container = glance
-
-#
-# The size threshold, in MB, after which Glance will start segmenting image
-# data.
-#
-# Swift has an upper limit on the size of a single uploaded object. By default,
-# this is 5GB. To upload objects bigger than this limit, objects are segmented
-# into multiple smaller objects that are tied together with a manifest file.
-# For more detail, refer to
-# http://docs.openstack.org/developer/swift/overview_large_objects.html
-#
-# This configuration option specifies the size threshold over which the Swift
-# driver will start segmenting image data into multiple smaller files.
-# Currently, the Swift driver only supports creating Dynamic Large Objects.
-#
-# NOTE: This should be set by taking into account the large object limit
-# enforced by the Swift cluster in consideration.
-#
-# Possible values:
-#     * A positive integer that is less than or equal to the large object limit
-#       enforced by the Swift cluster in consideration.
-#
-# Related options:
-#     * ``swift_store_large_object_chunk_size``
-#
-#  (integer value)
-# Minimum value: 1
-#swift_store_large_object_size = 5120
-
-#
-# The maximum size, in MB, of the segments when image data is segmented.
-#
-# When image data is segmented to upload images that are larger than the limit
-# enforced by the Swift cluster, image data is broken into segments that are no
-# bigger than the size specified by this configuration option.
-# Refer to ``swift_store_large_object_size`` for more detail.
-#
-# For example: if ``swift_store_large_object_size`` is 5GB and
-# ``swift_store_large_object_chunk_size`` is 1GB, an image of size 6.2GB will be
-# segmented into 7 segments where the first six segments will be 1GB in size and
-# the seventh segment will be 0.2GB.
-#
-# Possible values:
-#     * A positive integer that is less than or equal to the large object limit
-#       enforced by Swift cluster in consideration.
-#
-# Related options:
-#     * ``swift_store_large_object_size``
-#
-#  (integer value)
-# Minimum value: 1
-#swift_store_large_object_chunk_size = 200
-
-#
-# Create container, if it doesn't already exist, when uploading image.
-#
-# At the time of uploading an image, if the corresponding container doesn't
-# exist, it will be created provided this configuration option is set to True.
-# By default, it won't be created. This behavior is applicable for both single
-# and multiple containers mode.
-#
-# Possible values:
-#     * True
-#     * False
-#
-# Related options:
-#     * None
-#
-#  (boolean value)
-#swift_store_create_container_on_put = false
-
-#
-# Store images in tenant's Swift account.
-#
-# This enables multi-tenant storage mode which causes Glance images to be stored
-# in tenant specific Swift accounts. If this is disabled, Glance stores all
-# images in its own account. More details multi-tenant store can be found at
-# https://wiki.openstack.org/wiki/GlanceSwiftTenantSpecificStorage
-#
-# NOTE: If using multi-tenant swift store, please make sure
-# that you do not set a swift configuration file with the
-# 'swift_store_config_file' option.
-#
-# Possible values:
-#     * True
-#     * False
-#
-# Related options:
-#     * swift_store_config_file
-#
-#  (boolean value)
-#swift_store_multi_tenant = false
-
-#
-# Seed indicating the number of containers to use for storing images.
-#
-# When using a single-tenant store, images can be stored in one or more than one
-# containers. When set to 0, all images will be stored in one single container.
-# When set to an integer value between 1 and 32, multiple containers will be
-# used to store images. This configuration option will determine how many
-# containers are created. The total number of containers that will be used is
-# equal to 16^N, so if this config option is set to 2, then 16^2=256 containers
-# will be used to store images.
-#
-# Please refer to ``swift_store_container`` for more detail on the naming
-# convention. More detail about using multiple containers can be found at
-# https://specs.openstack.org/openstack/glance-specs/specs/kilo/swift-store-
-# multiple-containers.html
-#
-# NOTE: This is used only when swift_store_multi_tenant is disabled.
-#
-# Possible values:
-#     * A non-negative integer less than or equal to 32
-#
-# Related options:
-#     * ``swift_store_container``
-#     * ``swift_store_multi_tenant``
-#     * ``swift_store_create_container_on_put``
-#
-#  (integer value)
-# Minimum value: 0
-# Maximum value: 32
-#swift_store_multiple_containers_seed = 0
-
-#
-# List of tenants that will be granted admin access.
-#
-# This is a list of tenants that will be granted read/write access on
-# all Swift containers created by Glance in multi-tenant mode. The
-# default value is an empty list.
-#
-# Possible values:
-#     * A comma separated list of strings representing UUIDs of Keystone
-#       projects/tenants
-#
-# Related options:
-#     * None
-#
-#  (list value)
-#swift_store_admin_tenants =
-
-#
-# SSL layer compression for HTTPS Swift requests.
-#
-# Provide a boolean value to determine whether or not to compress
-# HTTPS Swift requests for images at the SSL layer. By default,
-# compression is enabled.
-#
-# When using Swift as the backend store for Glance image storage,
-# SSL layer compression of HTTPS Swift requests can be set using
-# this option. If set to False, SSL layer compression of HTTPS
-# Swift requests is disabled. Disabling this option may improve
-# performance for images which are already in a compressed format,
-# for example, qcow2.
-#
-# Possible values:
-#     * True
-#     * False
-#
-# Related Options:
-#     * None
-#
-#  (boolean value)
-#swift_store_ssl_compression = true
-
-#
-# The number of times a Swift download will be retried before the
-# request fails.
-#
-# Provide an integer value representing the number of times an image
-# download must be retried before erroring out. The default value is
-# zero (no retry on a failed image download). When set to a positive
-# integer value, ``swift_store_retry_get_count`` ensures that the
-# download is attempted this many more times upon a download failure
-# before sending an error message.
-#
-# Possible values:
-#     * Zero
-#     * Positive integer value
-#
-# Related Options:
-#     * None
-#
-#  (integer value)
-# Minimum value: 0
-#swift_store_retry_get_count = 0
-
-#
-# Time in seconds defining the size of the window in which a new
-# token may be requested before the current token is due to expire.
-#
-# Typically, the Swift storage driver fetches a new token upon the
-# expiration of the current token to ensure continued access to
-# Swift. However, some Swift transactions (like uploading image
-# segments) may not recover well if the token expires on the fly.
-#
-# Hence, by fetching a new token before the current token expiration,
-# we make sure that the token does not expire or is close to expiry
-# before a transaction is attempted. By default, the Swift storage
-# driver requests for a new token 60 seconds or less before the
-# current token expiration.
-#
-# Possible values:
-#     * Zero
-#     * Positive integer value
-#
-# Related Options:
-#     * None
-#
-#  (integer value)
-# Minimum value: 0
-#swift_store_expire_soon_interval = 60
-
-#
-# Use trusts for multi-tenant Swift store.
-#
-# This option instructs the Swift store to create a trust for each
-# add/get request when the multi-tenant store is in use. Using trusts
-# allows the Swift store to avoid problems that can be caused by an
-# authentication token expiring during the upload or download of data.
-#
-# By default, ``swift_store_use_trusts`` is set to ``True``(use of
-# trusts is enabled). If set to ``False``, a user token is used for
-# the Swift connection instead, eliminating the overhead of trust
-# creation.
-#
-# NOTE: This option is considered only when
-# ``swift_store_multi_tenant`` is set to ``True``
-#
-# Possible values:
-#     * True
-#     * False
-#
-# Related options:
-#     * swift_store_multi_tenant
-#
-#  (boolean value)
-#swift_store_use_trusts = true
-
-#
-# Buffer image segments before upload to Swift.
-#
-# Provide a boolean value to indicate whether or not Glance should
-# buffer image data to disk while uploading to swift. This enables
-# Glance to resume uploads on error.
-#
-# NOTES:
-# When enabling this option, one should take great care as this
-# increases disk usage on the API node. Be aware that depending
-# upon how the file system is configured, the disk space used
-# for buffering may decrease the actual disk space available for
-# the glance image cache.  Disk utilization will cap according to
-# the following equation:
-# (``swift_store_large_object_chunk_size`` * ``workers`` * 1000)
-#
-# Possible values:
-#     * True
-#     * False
-#
-# Related options:
-#     * swift_upload_buffer_dir
-#
-#  (boolean value)
-#swift_buffer_on_upload = false
-
-#
-# Reference to default Swift account/backing store parameters.
-#
-# Provide a string value representing a reference to the default set
-# of parameters required for using swift account/backing store for
-# image storage. The default reference value for this configuration
-# option is 'ref1'. This configuration option dereferences the
-# parameters and facilitates image storage in Swift storage backend
-# every time a new image is added.
-#
-# Possible values:
-#     * A valid string value
-#
-# Related options:
-#     * None
-#
-#  (string value)
-#default_swift_reference = ref1
-
-# DEPRECATED: Version of the authentication service to use. Valid versions are 2
-# and 3 for keystone and 1 (deprecated) for swauth and rackspace. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason:
-# The option 'auth_version' in the Swift back-end configuration file is
-# used instead.
-#swift_store_auth_version = 2
-
-# DEPRECATED: The address where the Swift authentication service is listening.
-# (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason:
-# The option 'auth_address' in the Swift back-end configuration file is
-# used instead.
-#swift_store_auth_address = <None>
-
-# DEPRECATED: The user to authenticate against the Swift authentication service.
-# (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason:
-# The option 'user' in the Swift back-end configuration file is set instead.
-#swift_store_user = <None>
-
-# DEPRECATED: Auth key for the user authenticating against the Swift
-# authentication service. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason:
-# The option 'key' in the Swift back-end configuration file is used
-# to set the authentication key instead.
-#swift_store_key = <None>
-
-#
-# Absolute path to the file containing the swift account(s)
-# configurations.
-#
-# Include a string value representing the path to a configuration
-# file that has references for each of the configured Swift
-# account(s)/backing stores. By default, no file path is specified
-# and customized Swift referencing is disabled. Configuring this
-# option is highly recommended while using Swift storage backend for
-# image storage as it avoids storage of credentials in the database.
-#
-# NOTE: Please do not configure this option if you have set
-# ``swift_store_multi_tenant`` to ``True``.
-#
-# Possible values:
-#     * String value representing an absolute path on the glance-api
-#       node
-#
-# Related options:
-#     * swift_store_multi_tenant
-#
-#  (string value)
-#swift_store_config_file = <None>
 
 #
 # Directory to buffer image segments before upload to Swift.
@@ -3277,215 +3132,690 @@
 #  (string value)
 #swift_upload_buffer_dir = <None>
 
-#
-# Address of the ESX/ESXi or vCenter Server target system.
-#
-# This configuration option sets the address of the ESX/ESXi or vCenter
-# Server target system. This option is required when using the VMware
-# storage backend. The address can contain an IP address (127.0.0.1) or
-# a DNS name (www.my-domain.com).
-#
-# Possible Values:
-#     * A valid IPv4 or IPv6 address
-#     * A valid DNS name
-#
-# Related options:
-#     * vmware_server_username
-#     * vmware_server_password
-#
-#  (unknown value)
-#vmware_server_host = 127.0.0.1
-
-#
-# Server username.
-#
-# This configuration option takes the username for authenticating with
-# the VMware ESX/ESXi or vCenter Server. This option is required when
-# using the VMware storage backend.
-#
-# Possible Values:
-#     * Any string that is the username for a user with appropriate
-#       privileges
-#
-# Related options:
-#     * vmware_server_host
-#     * vmware_server_password
-#
-#  (string value)
-#vmware_server_username = root
-
-#
-# Server password.
-#
-# This configuration option takes the password for authenticating with
-# the VMware ESX/ESXi or vCenter Server. This option is required when
-# using the VMware storage backend.
-#
-# Possible Values:
-#     * Any string that is a password corresponding to the username
-#       specified using the "vmware_server_username" option
-#
-# Related options:
-#     * vmware_server_host
-#     * vmware_server_username
-#
-#  (string value)
-#vmware_server_password = vmware
-
-#
-# The number of VMware API retries.
-#
-# This configuration option specifies the number of times the VMware
-# ESX/VC server API must be retried upon connection related issues or
-# server API call overload. It is not possible to specify 'retry
-# forever'.
-#
-# Possible Values:
-#     * Any positive integer value
-#
-# Related options:
-#     * None
-#
-#  (integer value)
+[oslo_concurrency]
+
+[matchmaker_redis]
+
+[oslo_messaging_amqp]
+#
+# From oslo.messaging
+#
+
+# Name for the AMQP container. must be globally unique. Defaults to a
+# generated UUID (string value)
+#container_name = <None>
+
+# Timeout for inactive connections (in seconds) (integer value)
+#idle_timeout = 0
+
+# Debug: dump AMQP frames to stdout (boolean value)
+#trace = false
+
+# Attempt to connect via SSL. If no other ssl-related parameters are
+# given, it will use the system's CA-bundle to verify the server's
+# certificate. (boolean value)
+#ssl = false
+
+# CA certificate PEM file used to verify the server's certificate
+# (string value)
+#ssl_ca_file =
+
+# Self-identifying certificate PEM file for client authentication
+# (string value)
+#ssl_cert_file =
+
+# Private key PEM file used to sign ssl_cert_file certificate
+# (optional) (string value)
+#ssl_key_file =
+
+# Password for decrypting ssl_key_file (if encrypted) (string value)
+#ssl_key_password = <None>
+
+# By default SSL checks that the name in the server's certificate
+# matches the hostname in the transport_url. In some configurations it
+# may be preferable to use the virtual hostname instead, for example
+# if the server uses the Server Name Indication TLS extension
+# (rfc6066) to provide a certificate per virtual host. Set
+# ssl_verify_vhost to True if the server's SSL certificate uses the
+# virtual host name instead of the DNS name. (boolean value)
+#ssl_verify_vhost = false
+
+# DEPRECATED: Accept clients using either SSL or plain TCP (boolean
+# value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Not applicable - not a SSL server
+#allow_insecure_clients = false
+
+# Space separated list of acceptable SASL mechanisms (string value)
+#sasl_mechanisms =
+
+# Path to directory that contains the SASL configuration (string
+# value)
+#sasl_config_dir =
+
+# Name of configuration file (without .conf suffix) (string value)
+#sasl_config_name =
+
+# SASL realm to use if no realm present in username (string value)
+#sasl_default_realm =
+
+# DEPRECATED: User name for message broker authentication (string
+# value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Should use configuration option transport_url to provide the
+# username.
+#username =
+
+# DEPRECATED: Password for message broker authentication (string
+# value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Should use configuration option transport_url to provide the
+# password.
+#password =
+
+# Seconds to pause before attempting to re-connect. (integer value)
 # Minimum value: 1
-#vmware_api_retry_count = 10
-
-#
-# Interval in seconds used for polling remote tasks invoked on VMware
-# ESX/VC server.
-#
-# This configuration option takes in the sleep time in seconds for polling an
-# on-going async task as part of the VMWare ESX/VC server API call.
-#
-# Possible Values:
-#     * Any positive integer value
-#
-# Related options:
-#     * None
-#
-#  (integer value)
+#connection_retry_interval = 1
+
+# Increase the connection_retry_interval by this many seconds after
+# each unsuccessful failover attempt. (integer value)
+# Minimum value: 0
+#connection_retry_backoff = 2
+
+# Maximum limit for connection_retry_interval +
+# connection_retry_backoff (integer value)
 # Minimum value: 1
-#vmware_task_poll_interval = 5
-
-#
-# The directory where the glance images will be stored in the datastore.
-#
-# This configuration option specifies the path to the directory where the
-# glance images will be stored in the VMware datastore. If this option
-# is not set,  the default directory where the glance images are stored
-# is openstack_glance.
-#
-# Possible Values:
-#     * Any string that is a valid path to a directory
-#
-# Related options:
-#     * None
-#
-#  (string value)
-#vmware_store_image_dir = /openstack_glance
-
-#
-# Set verification of the ESX/vCenter server certificate.
-#
-# This configuration option takes a boolean value to determine
-# whether or not to verify the ESX/vCenter server certificate. If this
-# option is set to True, the ESX/vCenter server certificate is not
-# verified. If this option is set to False, then the default CA
-# truststore is used for verification.
-#
-# This option is ignored if the "vmware_ca_file" option is set. In that
-# case, the ESX/vCenter server certificate will then be verified using
-# the file specified using the "vmware_ca_file" option .
-#
-# Possible Values:
-#     * True
-#     * False
-#
-# Related options:
-#     * vmware_ca_file
-#
-#  (boolean value)
-# Deprecated group/name - [glance_store]/vmware_api_insecure
-#vmware_insecure = false
-
-#
-# Absolute path to the CA bundle file.
-#
-# This configuration option enables the operator to use a custom
-# Cerificate Authority File to verify the ESX/vCenter certificate.
-#
-# If this option is set, the "vmware_insecure" option will be ignored
-# and the CA file specified will be used to authenticate the ESX/vCenter
-# server certificate and establish a secure connection to the server.
-#
-# Possible Values:
-#     * Any string that is a valid absolute path to a CA file
-#
-# Related options:
-#     * vmware_insecure
-#
-#  (string value)
-#vmware_ca_file = /etc/ssl/certs/ca-certificates.crt
-
-#
-# The datastores where the image can be stored.
-#
-# This configuration option specifies the datastores where the image can
-# be stored in the VMWare store backend. This option may be specified
-# multiple times for specifying multiple datastores. The datastore name
-# should be specified after its datacenter path, separated by ":". An
-# optional weight may be given after the datastore name, separated again
-# by ":" to specify the priority. Thus, the required format becomes
-# <datacenter_path>:<datastore_name>:<optional_weight>.
-#
-# When adding an image, the datastore with highest weight will be
-# selected, unless there is not enough free space available in cases
-# where the image size is already known. If no weight is given, it is
-# assumed to be zero and the directory will be considered for selection
-# last. If multiple datastores have the same weight, then the one with
-# the most free space available is selected.
-#
-# Possible Values:
-#     * Any string of the format:
-#       <datacenter_path>:<datastore_name>:<optional_weight>
-#
-# Related options:
-#    * None
-#
+#connection_retry_interval_max = 30
+
+# Time to pause between re-connecting an AMQP 1.0 link that failed due
+# to a recoverable error. (integer value)
+# Minimum value: 1
+#link_retry_delay = 10
+
+# The maximum number of attempts to re-send a reply message which
+# failed due to a recoverable error. (integer value)
+# Minimum value: -1
+#default_reply_retry = 0
+
+# The deadline for an rpc reply message delivery. (integer value)
+# Minimum value: 5
+#default_reply_timeout = 30
+
+# The deadline for an rpc cast or call message delivery. Only used
+# when caller does not provide a timeout expiry. (integer value)
+# Minimum value: 5
+#default_send_timeout = 30
+
+# The deadline for a sent notification message delivery. Only used
+# when caller does not provide a timeout expiry. (integer value)
+# Minimum value: 5
+#default_notify_timeout = 30
+
+# The duration to schedule a purge of idle sender links. Detach link
+# after expiry. (integer value)
+# Minimum value: 1
+#default_sender_link_timeout = 600
+
+# Indicates the addressing mode used by the driver.
+# Permitted values:
+# 'legacy'   - use legacy non-routable addressing
+# 'routable' - use routable addresses
+# 'dynamic'  - use legacy addresses if the message bus does not
+# support routing otherwise use routable addressing (string value)
+#addressing_mode = dynamic
+
+# Enable virtual host support for those message buses that do not
+# natively support virtual hosting (such as qpidd). When set to true
+# the virtual host name will be added to all message bus addresses,
+# effectively creating a private 'subnet' per virtual host. Set to
+# False if the message bus supports virtual hosting using the
+# 'hostname' field in the AMQP 1.0 Open performative as the name of
+# the virtual host. (boolean value)
+#pseudo_vhost = true
+
+# address prefix used when sending to a specific server (string value)
+#server_request_prefix = exclusive
+
+# address prefix used when broadcasting to all servers (string value)
+#broadcast_prefix = broadcast
+
+# address prefix when sending to any server in group (string value)
+#group_request_prefix = unicast
+
+# Address prefix for all generated RPC addresses (string value)
+#rpc_address_prefix = openstack.org/om/rpc
+
+# Address prefix for all generated Notification addresses (string
+# value)
+#notify_address_prefix = openstack.org/om/notify
+
+# Appended to the address prefix when sending a fanout message. Used
+# by the message bus to identify fanout messages. (string value)
+#multicast_address = multicast
+
+# Appended to the address prefix when sending to a particular
+# RPC/Notification server. Used by the message bus to identify
+# messages sent to a single destination. (string value)
+#unicast_address = unicast
+
+# Appended to the address prefix when sending to a group of consumers.
+# Used by the message bus to identify messages that should be
+# delivered in a round-robin fashion across consumers. (string value)
+#anycast_address = anycast
+
+# Exchange name used in notification addresses.
+# Exchange name resolution precedence:
+# Target.exchange if set
+# else default_notification_exchange if set
+# else control_exchange if set
+# else 'notify' (string value)
+#default_notification_exchange = <None>
+default_notification_exchange = glance
+
+# Exchange name used in RPC addresses.
+# Exchange name resolution precedence:
+# Target.exchange if set
+# else default_rpc_exchange if set
+# else control_exchange if set
+# else 'rpc' (string value)
+#default_rpc_exchange = <None>
+
+# Window size for incoming RPC Reply messages. (integer value)
+# Minimum value: 1
+#reply_link_credit = 200
+
+# Window size for incoming RPC Request messages (integer value)
+# Minimum value: 1
+#rpc_server_credit = 100
+
+# Window size for incoming Notification messages (integer value)
+# Minimum value: 1
+#notify_server_credit = 100
+
+# Send messages of this type pre-settled.
+# Pre-settled messages will not receive acknowledgement
+# from the peer. Note well: pre-settled messages may be
+# silently discarded if the delivery fails.
+# Permitted values:
+# 'rpc-call' - send RPC Calls pre-settled
+# 'rpc-reply'- send RPC Replies pre-settled
+# 'rpc-cast' - Send RPC Casts pre-settled
+# 'notify'   - Send Notifications pre-settled
 #  (multi valued)
-#vmware_datastores =
-
-
-[image_format]
-
-#
-# From glance.api
-#
-
-# Supported values for the 'container_format' image attribute (list value)
-# Deprecated group/name - [DEFAULT]/container_formats
-#container_formats = ami,ari,aki,bare,ovf,ova,docker
-
-# Supported values for the 'disk_format' image attribute (list value)
-# Deprecated group/name - [DEFAULT]/disk_formats
-disk_formats = ami,ari,aki,vhd,vhdx,vmdk,raw,qcow2,vdi,iso,ploop.root-tar
-
+#pre_settled = rpc-cast
+#pre_settled = rpc-reply
+
+
+[oslo_messaging_notifications]
+#
+# From oslo.messaging
+#
+
+# The Drivers(s) to handle sending notifications. Possible values are
+# messaging, messagingv2, routing, log, test, noop (multi valued)
+# Deprecated group/name - [DEFAULT]/notification_driver
+#driver =
+driver=messagingv2
+
+# A URL representing the messaging driver to use for notifications. If
+# not set, we fall back to the same configuration used for RPC.
+# (string value)
+# Deprecated group/name - [DEFAULT]/notification_transport_url
+#transport_url = <None>
+
+# AMQP topic used for OpenStack notifications. (list value)
+# Deprecated group/name - [rpc_notifier2]/topics
+# Deprecated group/name - [DEFAULT]/notification_topics
+#topics = notifications
+
+# The maximum number of attempts to re-send a notification message
+# which failed to be delivered due to a recoverable error. 0 - No
+# retry, -1 - indefinite (integer value)
+#retry = -1
+[oslo_messaging_rabbit]
+#
+# From oslo.messaging
+#
+
+# Use durable queues in AMQP. (boolean value)
+# Deprecated group/name - [DEFAULT]/amqp_durable_queues
+# Deprecated group/name - [DEFAULT]/rabbit_durable_queues
+#amqp_durable_queues = false
+
+# Auto-delete queues in AMQP. (boolean value)
+#amqp_auto_delete = false
+
+# Enable SSL (boolean value)
+#ssl = <None>
+
+
+# How long to wait before reconnecting in response to an AMQP consumer
+# cancel notification. (floating point value)
+#kombu_reconnect_delay = 1.0
+
+# EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression
+# will not be used. This option may not be available in future
+# versions. (string value)
+#kombu_compression = <None>
+
+# How long to wait a missing client before abandoning to send it its
+# replies. This value should not be longer than rpc_response_timeout.
+# (integer value)
+# Deprecated group/name - [oslo_messaging_rabbit]/kombu_reconnect_timeout
+#kombu_missing_consumer_retry_timeout = 60
+
+# Determines how the next RabbitMQ node is chosen in case the one we
+# are currently connected to becomes unavailable. Takes effect only if
+# more than one RabbitMQ node is provided in config. (string value)
+# Possible values:
+# round-robin - <No description provided>
+# shuffle - <No description provided>
+#kombu_failover_strategy = round-robin
+
+# DEPRECATED: The RabbitMQ broker address where a single node is used.
+# (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_host = localhost
+
+# DEPRECATED: The RabbitMQ broker port where a single node is used.
+# (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_port = 5672
+
+# DEPRECATED: RabbitMQ HA cluster host:port pairs. (list value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_hosts = $rabbit_host:$rabbit_port
+
+# DEPRECATED: The RabbitMQ userid. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_userid = guest
+
+# DEPRECATED: The RabbitMQ password. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_password = guest
+
+# The RabbitMQ login method. (string value)
+# Possible values:
+# PLAIN - <No description provided>
+# AMQPLAIN - <No description provided>
+# RABBIT-CR-DEMO - <No description provided>
+#rabbit_login_method = AMQPLAIN
+
+# DEPRECATED: The RabbitMQ virtual host. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_virtual_host = /
+
+# How frequently to retry connecting with RabbitMQ. (integer value)
+#rabbit_retry_interval = 1
+
+# How long to backoff for between retries when connecting to RabbitMQ.
+# (integer value)
+#rabbit_retry_backoff = 2
+
+# Maximum interval of RabbitMQ connection retries. Default is 30
+# seconds. (integer value)
+#rabbit_interval_max = 30
+
+# DEPRECATED: Maximum number of RabbitMQ connection retries. Default
+# is 0 (infinite retry count). (integer value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#rabbit_max_retries = 0
+
+# Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change
+# this option, you must wipe the RabbitMQ database. In RabbitMQ 3.0,
+# queue mirroring is no longer controlled by the x-ha-policy argument
+# when declaring a queue. If you just want to make sure that all
+# queues (except those with auto-generated names) are mirrored across
+# all nodes, run: "rabbitmqctl set_policy HA '^(?!amq\.).*' '{"ha-
+# mode": "all"}' " (boolean value)
+#rabbit_ha_queues = false
+
+# Positive integer representing duration in seconds for queue TTL
+# (x-expires). Queues which are unused for the duration of the TTL are
+# automatically deleted. The parameter affects only reply and fanout
+# queues. (integer value)
+# Minimum value: 1
+#rabbit_transient_queues_ttl = 1800
+
+# Specifies the number of messages to prefetch. Setting to zero allows
+# unlimited messages. (integer value)
+#rabbit_qos_prefetch_count = 64
+
+# Number of seconds after which the Rabbit broker is considered down
+# if heartbeat's keep-alive fails (0 disable the heartbeat).
+# EXPERIMENTAL (integer value)
+#heartbeat_timeout_threshold = 60
+
+# How often times during the heartbeat_timeout_threshold we check the
+# heartbeat. (integer value)
+#heartbeat_rate = 2
+
+# Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake
+# (boolean value)
+#fake_rabbit = false
+
+# Maximum number of channels to allow (integer value)
+#channel_max = <None>
+
+# The maximum byte size for an AMQP frame (integer value)
+#frame_max = <None>
+
+# How often to send heartbeats for consumer's connections (integer
+# value)
+#heartbeat_interval = 3
+
+# Arguments passed to ssl.wrap_socket (dict value)
+#ssl_options = <None>
+
+# Set socket timeout in seconds for connection's socket (floating
+# point value)
+#socket_timeout = 0.25
+
+# Set TCP_USER_TIMEOUT in seconds for connection's socket (floating
+# point value)
+#tcp_user_timeout = 0.25
+
+# Set delay for reconnection to some host which has connection error
+# (floating point value)
+#host_connection_reconnect_delay = 0.25
+
+# Connection factory implementation (string value)
+# Possible values:
+# new - <No description provided>
+# single - <No description provided>
+# read_write - <No description provided>
+#connection_factory = single
+
+# Maximum number of connections to keep queued. (integer value)
+#pool_max_size = 30
+
+# Maximum number of connections to create above `pool_max_size`.
+# (integer value)
+#pool_max_overflow = 0
+
+# Default number of seconds to wait for a connections to available
+# (integer value)
+#pool_timeout = 30
+
+# Lifetime of a connection (since creation) in seconds or None for no
+# recycling. Expired connections are closed on acquire. (integer
+# value)
+#pool_recycle = 600
+
+# Threshold at which inactive (since release) connections are
+# considered stale in seconds or None for no staleness. Stale
+# connections are closed on acquire. (integer value)
+#pool_stale = 60
+
+# Default serialization mechanism for serializing/deserializing
+# outgoing/incoming messages (string value)
+# Possible values:
+# json - <No description provided>
+# msgpack - <No description provided>
+#default_serializer_type = json
+
+# Persist notification messages. (boolean value)
+#notification_persistence = false
+
+# Exchange name for sending notifications (string value)
+#default_notification_exchange = ${control_exchange}_notification
+
+# Max number of not acknowledged message which RabbitMQ can send to
+# notification listener. (integer value)
+#notification_listener_prefetch_count = 100
+
+# Reconnecting retry count in case of connectivity problem during
+# sending notification, -1 means infinite retry. (integer value)
+#default_notification_retry_attempts = -1
+
+# Reconnecting retry delay in case of connectivity problem during
+# sending notification message (floating point value)
+#notification_retry_delay = 0.25
+
+# Time to live for rpc queues without consumers in seconds. (integer
+# value)
+#rpc_queue_expiration = 60
+
+# Exchange name for sending RPC messages (string value)
+#default_rpc_exchange = ${control_exchange}_rpc
+
+# Exchange name for receiving RPC replies (string value)
+#rpc_reply_exchange = ${control_exchange}_rpc_reply
+
+# Max number of not acknowledged message which RabbitMQ can send to
+# rpc listener. (integer value)
+#rpc_listener_prefetch_count = 100
+
+# Max number of not acknowledged message which RabbitMQ can send to
+# rpc reply listener. (integer value)
+#rpc_reply_listener_prefetch_count = 100
+
+# Reconnecting retry count in case of connectivity problem during
+# sending reply. -1 means infinite retry during rpc_timeout (integer
+# value)
+#rpc_reply_retry_attempts = -1
+
+# Reconnecting retry delay in case of connectivity problem during
+# sending reply. (floating point value)
+#rpc_reply_retry_delay = 0.25
+
+# Reconnecting retry count in case of connectivity problem during
+# sending RPC message, -1 means infinite retry. If actual retry
+# attempts in not 0 the rpc request could be processed more than one
+# time (integer value)
+#default_rpc_retry_attempts = -1
+
+# Reconnecting retry delay in case of connectivity problem during
+# sending RPC message (floating point value)
+#rpc_retry_delay = 0.25
+
+
+[database]
+#
+# From oslo.db
+#
+
+# If True, SQLite uses synchronous mode. (boolean value)
+#sqlite_synchronous = true
+
+# The back end to use for the database. (string value)
+# Deprecated group/name - [DEFAULT]/db_backend
+#backend = sqlalchemy
+
+# The SQLAlchemy connection string to use to connect to the database.
+# (string value)
+# Deprecated group/name - [DEFAULT]/sql_connection
+# Deprecated group/name - [DATABASE]/sql_connection
+# Deprecated group/name - [sql]/connection
+#connection = <None>
+connection = mysql+pymysql://glance:opnfv_secret@10.167.4.23/glance?charset=utf8
+# The SQLAlchemy connection string to use to connect to the slave
+# database. (string value)
+#slave_connection = <None>
+
+# The SQL mode to be used for MySQL sessions. This option, including
+# the default, overrides any server-set SQL mode. To use whatever SQL
+# mode is set by the server configuration, set this to no value.
+# Example: mysql_sql_mode= (string value)
+#mysql_sql_mode = TRADITIONAL
+
+# If True, transparently enables support for handling MySQL Cluster
+# (NDB). (boolean value)
+#mysql_enable_ndb = false
+
+# Connections which have been present in the connection pool longer
+# than this number of seconds will be replaced with a new one the next
+# time they are checked out from the pool. (integer value)
+# Deprecated group/name - [DATABASE]/idle_timeout
+# Deprecated group/name - [database]/idle_timeout
+# Deprecated group/name - [DEFAULT]/sql_idle_timeout
+# Deprecated group/name - [DATABASE]/sql_idle_timeout
+# Deprecated group/name - [sql]/idle_timeout
+#connection_recycle_time = 3600
+connection_recycle_time = 300
+
+# Minimum number of SQL connections to keep open in a pool. (integer
+# value)
+# Deprecated group/name - [DEFAULT]/sql_min_pool_size
+# Deprecated group/name - [DATABASE]/sql_min_pool_size
+#min_pool_size = 1
+
+# Maximum number of SQL connections to keep open in a pool. Setting a
+# value of 0 indicates no limit. (integer value)
+# Deprecated group/name - [DEFAULT]/sql_max_pool_size
+# Deprecated group/name - [DATABASE]/sql_max_pool_size
+#max_pool_size = 5
+max_pool_size = 10
+
+# Maximum number of database connection retries during startup. Set to
+# -1 to specify an infinite retry count. (integer value)
+# Deprecated group/name - [DEFAULT]/sql_max_retries
+# Deprecated group/name - [DATABASE]/sql_max_retries
+#max_retries = 10
+max_retries = -1
+
+# Interval between retries of opening a SQL connection. (integer
+# value)
+# Deprecated group/name - [DEFAULT]/sql_retry_interval
+# Deprecated group/name - [DATABASE]/reconnect_interval
+#retry_interval = 10
+
+# If set, use this value for max_overflow with SQLAlchemy. (integer
+# value)
+# Deprecated group/name - [DEFAULT]/sql_max_overflow
+# Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
+#max_overflow = 50
+max_overflow = 30
+
+# Verbosity of SQL debugging information: 0=None, 100=Everything.
+# (integer value)
+# Minimum value: 0
+# Maximum value: 100
+# Deprecated group/name - [DEFAULT]/sql_connection_debug
+#connection_debug = 0
+
+# Add Python stack traces to SQL as comment strings. (boolean value)
+# Deprecated group/name - [DEFAULT]/sql_connection_trace
+#connection_trace = false
+
+# If set, use this value for pool_timeout with SQLAlchemy. (integer
+# value)
+# Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
+#pool_timeout = <None>
+
+# Enable the experimental use of database reconnect on connection
+# lost. (boolean value)
+#use_db_reconnect = false
+
+# Seconds between retries of a database transaction. (integer value)
+#db_retry_interval = 1
+
+# If True, increases the interval between retries of a database
+# operation up to db_max_retry_interval. (boolean value)
+#db_inc_retry_interval = true
+
+# If db_inc_retry_interval is set, the maximum seconds between retries
+# of a database operation. (integer value)
+#db_max_retry_interval = 10
+
+# Maximum retries in case of connection error or deadlock error before
+# error is raised. Set to -1 to specify an infinite retry count.
+# (integer value)
+#db_max_retries = 20
+
+#
+# From oslo.db.concurrency
+#
+
+# Enable the experimental use of thread pooling for all DB API calls
+# (boolean value)
+# Deprecated group/name - [DEFAULT]/dbapi_use_tpool
+#use_tpool = false
+
+[oslo_policy]
+#
+# From oslo.policy
+#
+
+# This option controls whether or not to enforce scope when evaluating
+# policies. If ``True``, the scope of the token used in the request is
+# compared to the ``scope_types`` of the policy being enforced. If the
+# scopes do not match, an ``InvalidScope`` exception will be raised.
+# If ``False``, a message will be logged informing operators that
+# policies are being invoked with mismatching scope. (boolean value)
+#enforce_scope = false
+
+# The file that defines policies. (string value)
+#policy_file = policy.json
+policy_file = /etc/glance/policy.json
+
+# Default rule. Enforced when a requested rule is not found. (string
+# value)
+#policy_default_rule = default
+
+# Directories where policy configuration files are stored. They can be
+# relative to any directory in the search path defined by the
+# config_dir option, or absolute paths. The file defined by
+# policy_file must exist for these directories to be searched.
+# Missing or empty directories are ignored. (multi valued)
+#policy_dirs = policy.d
+
+# Content Type to send and receive data for REST based policy check
+# (string value)
+# Possible values:
+# application/x-www-form-urlencoded - <No description provided>
+# application/json - <No description provided>
+#remote_content_type = application/x-www-form-urlencoded
+
+# server identity verification for REST based policy check (boolean
+# value)
+#remote_ssl_verify_server_crt = false
+
+# Absolute path to ca cert file for REST based policy check (string
+# value)
+#remote_ssl_ca_crt_file = <None>
+
+# Absolute path to client cert for REST based policy check (string
+# value)
+#remote_ssl_client_crt_file = <None>
+
+# Absolute path client key file REST based policy check (string value)
+#remote_ssl_client_key_file = <None>
 
 [keystone_authtoken]
-
 #
 # From keystonemiddleware.auth_token
 #
 
 # Complete "public" Identity API endpoint. This endpoint should not be an
-# "admin" endpoint, as it should be accessible by all end users. Unauthenticated
-# clients are redirected to this endpoint to authenticate. Although this
-# endpoint should ideally be unversioned, client support in the wild varies. If
-# you're using a versioned v2 endpoint here, then this should *not* be the same
-# endpoint the service user utilizes for validating tokens, because normal end
-# users may not be able to reach that endpoint. (string value)
+# "admin" endpoint, as it should be accessible by all end users.
+# Unauthenticated clients are redirected to this endpoint to authenticate.
+# Although this endpoint should ideally be unversioned, client support in the
+# wild varies. If you're using a versioned v2 endpoint here, then this should
+# *not* be the same endpoint the service user utilizes for validating tokens,
+# because normal end users may not be able to reach that endpoint. (string
+# value)
 # Deprecated group/name - [keystone_authtoken]/auth_uri
 #www_authenticate_uri = <None>
+www_authenticate_uri = http://10.167.4.35:5000
 
 # DEPRECATED: Complete "public" Identity API endpoint. This endpoint should not
 # be an "admin" endpoint, as it should be accessible by all end users.
@@ -3498,9 +3828,10 @@
 # release. (string value)
 # This option is deprecated for removal since Queens.
 # Its value may be silently ignored in the future.
-# Reason: The auth_uri option is deprecated in favor of www_authenticate_uri and
-# will be removed in the S  release.
+# Reason: The auth_uri option is deprecated in favor of www_authenticate_uri
+# and will be removed in the S  release.
 #auth_uri = <None>
+auth_uri = http://10.167.4.35:5000
 
 # API version of the admin Identity API endpoint. (string value)
 #auth_version = <None>
@@ -3513,8 +3844,8 @@
 # value)
 #http_connect_timeout = <None>
 
-# How many times are we trying to reconnect when communicating with Identity API
-# Server. (integer value)
+# How many times are we trying to reconnect when communicating with Identity
+# API Server. (integer value)
 #http_request_max_retries = 3
 
 # Request environment key where the Swift cache object is stored. When
@@ -3538,10 +3869,11 @@
 
 # The region in which the identity server can be found. (string value)
 #region_name = <None>
+region_name = RegionOne
 
 # DEPRECATED: Directory used to cache files related to PKI tokens. This option
-# has been deprecated in the Ocata release and will be removed in the P release.
-# (string value)
+# has been deprecated in the Ocata release and will be removed in the P
+# release. (string value)
 # This option is deprecated for removal since Ocata.
 # Its value may be silently ignored in the future.
 # Reason: PKI token format is no longer supported.
@@ -3553,15 +3885,15 @@
 #memcached_servers = <None>
 
 # In order to prevent excessive effort spent validating tokens, the middleware
-# caches previously-seen tokens for a configurable duration (in seconds). Set to
-# -1 to disable caching completely. (integer value)
+# caches previously-seen tokens for a configurable duration (in seconds). Set
+# to -1 to disable caching completely. (integer value)
 #token_cache_time = 300
 
 # DEPRECATED: Determines the frequency at which the list of revoked tokens is
 # retrieved from the Identity service (in seconds). A high number of revocation
 # events combined with a low cache duration may significantly reduce
-# performance. Only valid for PKI tokens. This option has been deprecated in the
-# Ocata release and will be removed in the P release. (integer value)
+# performance. Only valid for PKI tokens. This option has been deprecated in
+# the Ocata release and will be removed in the P release. (integer value)
 # This option is deprecated for removal since Ocata.
 # Its value may be silently ignored in the future.
 # Reason: PKI token format is no longer supported.
@@ -3586,8 +3918,8 @@
 # tried again. (integer value)
 #memcache_pool_dead_retry = 300
 
-# (Optional) Maximum total number of open connections to every memcached server.
-# (integer value)
+# (Optional) Maximum total number of open connections to every memcached
+# server. (integer value)
 #memcache_pool_maxsize = 10
 
 # (Optional) Socket timeout in seconds for communicating with a memcached
@@ -3613,11 +3945,11 @@
 
 # Used to control the use and type of token binding. Can be set to: "disabled"
 # to not check token binding. "permissive" (default) to validate binding
-# information if the bind type is of a form known to the server and ignore it if
-# not. "strict" like "permissive" but if the bind type is unknown the token will
-# be rejected. "required" any form of token binding is needed to be allowed.
-# Finally the name of a binding method that must be present in tokens. (string
-# value)
+# information if the bind type is of a form known to the server and ignore it
+# if not. "strict" like "permissive" but if the bind type is unknown the token
+# will be rejected. "required" any form of token binding is needed to be
+# allowed. Finally the name of a binding method that must be present in tokens.
+# (string value)
 #enforce_token_bind = permissive
 
 # DEPRECATED: If true, the revocation list will be checked for cached tokens.
@@ -3644,1177 +3976,172 @@
 # A choice of roles that must be present in a service token. Service tokens are
 # allowed to request that an expired token can be used and so this check should
 # tightly control that only actual services should be sending this token. Roles
-# here are applied as an ANY check so any role in this list must be present. For
-# backwards compatibility reasons this currently only affects the allow_expired
-# check. (list value)
+# here are applied as an ANY check so any role in this list must be present.
+# For backwards compatibility reasons this currently only affects the
+# allow_expired check. (list value)
 #service_token_roles = service
 
-# For backwards compatibility reasons we must let valid service tokens pass that
-# don't pass the service_token_roles check as valid. Setting this true will
-# become the default in a future release and should be enabled if possible.
-# (boolean value)
+# For backwards compatibility reasons we must let valid service tokens pass
+# that don't pass the service_token_roles check as valid. Setting this true
+# will become the default in a future release and should be enabled if
+# possible. (boolean value)
 #service_token_roles_required = false
 
 # Authentication type to load (string value)
 # Deprecated group/name - [keystone_authtoken]/auth_plugin
 #auth_type = <None>
+auth_type = password
 
 # Config Section from which to load plugin specific options (string value)
 #auth_section = <None>
 
-
-[matchmaker_redis]
-
-#
-# From oslo.messaging
-#
-
-# DEPRECATED: Host to locate redis. (string value)
+# Name of nova region to use. Useful if keystone manages more than one region.
+# (string value)
+#region_name = <None>
+region_name = RegionOne
+
+# Type of the nova endpoint to use.  This endpoint will be looked up in the
+# keystone catalog and should be one of public, internal or admin. (string
+# value)
+# Possible values:
+# public - <No description provided>
+# admin - <No description provided>
+# internal - <No description provided>
+#endpoint_type = public
+endpoint_type = internalURL
+
+# API version of the admin Identity API endpoint. (string value)
+#auth_version = <None>
+
+
+# Authentication URL (string value)
+#auth_url = <None>
+auth_url = http://10.167.4.35:35357
+
+# Authentication type to load (string value)
+# Deprecated group/name - [nova]/auth_plugin
+#auth_type = <None>
+auth_type = password
+
+# Required if identity server requires client certificate (string value)
+#certfile = <None>
+
+# A PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# Defaults to system CAs. (string value)
+#cafile = <None>
+
+# Optional domain ID to use with v3 and v2 parameters. It will be used for both
+# the user and project domain in v3 and ignored in v2 authentication. (string
+# value)
+#default_domain_id = <None>
+
+# Optional domain name to use with v3 API and v2 parameters. It will be used for
+# both the user and project domain in v3 and ignored in v2 authentication.
+# (string value)
+#default_domain_name = <None>
+
+# Domain ID to scope to (string value)
+#domain_id = <None>
+
+# Domain name to scope to (string value)
+#domain_name = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# Required if identity server requires client certificate (string value)
+#keyfile = <None>
+
+# User's password (string value)
+#password = <None>
+password = opnfv_secret
+
+# Domain ID containing project (string value)
+#project_domain_id = <None>
+project_domain_id = default
+
+# Domain name containing project (string value)
+#project_domain_name = <None>
+
+# Project ID to scope to (string value)
+#project_id = <None>
+
+# Project name to scope to (string value)
+#project_name = <None>
+project_name = service
+
+# Scope for system operations (string value)
+#system_scope = <None>
+
+# Tenant ID (string value)
+#tenant_id = <None>
+
+# Tenant Name (string value)
+#tenant_name = <None>
+
+# Timeout value for http requests (integer value)
+#timeout = <None>
+
+# Trust ID (string value)
+#trust_id = <None>
+
+# User's domain id (string value)
+#user_domain_id = <None>
+user_domain_id = default
+
+# User's domain name (string value)
+#user_domain_name = <None>
+
+# User ID (string value)
+#user_id = <None>
+
+# Username (string value)
+# Deprecated group/name - [neutron]/user_name
+#username = <None>
+username = glance
+
+[cors]
+#
+# From oslo.middleware
+#
+
+# Indicate whether this resource may be shared with the domain
+# received in the requests "origin" header. Format:
+# "<protocol>://<host>[:<port>]", no trailing slash. Example:
+# https://horizon.example.com (list value)
+
+# Indicate that the actual request can include user credentials
+# (boolean value)
+
+# Indicate which headers are safe to expose to the API. Defaults to
+# HTTP Simple Headers. (list value)
+
+# Maximum cache age of CORS preflight requests. (integer value)
+
+# Indicate which methods can be used during the actual request. (list
+# value)
+
+# Indicate which header field names may be used during the actual
+# request. (list value)
+
+
+[oslo_middleware]
+#
+# From oslo.middleware
+#
+
+# The maximum body size for each  request, in bytes. (integer value)
+# Deprecated group/name - [DEFAULT]/osapi_max_request_body_size
+# Deprecated group/name - [DEFAULT]/max_request_body_size
+#max_request_body_size = 114688
+
+# DEPRECATED: The HTTP Header that will be used to determine what the
+# original request protocol scheme was, even if it was hidden by a SSL
+# termination proxy. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#host = 127.0.0.1
-
-# DEPRECATED: Use this port to connect to redis host. (port value)
-# Minimum value: 0
-# Maximum value: 65535
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#port = 6379
-
-# DEPRECATED: Password for Redis server (optional). (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#password =
-
-# DEPRECATED: List of Redis Sentinel hosts (fault tolerance mode), e.g.,
-# [host:port, host1:port ... ] (list value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#sentinel_hosts =
-
-# Redis replica set name. (string value)
-#sentinel_group_name = oslo-messaging-zeromq
-
-# Time in ms to wait between connection attempts. (integer value)
-#wait_timeout = 2000
-
-# Time in ms to wait before the transaction is killed. (integer value)
-#check_timeout = 20000
-
-# Timeout in ms on blocking socket operations. (integer value)
-#socket_timeout = 10000
-
-
-[oslo_concurrency]
-
-#
-# From oslo.concurrency
-#
-
-# Enables or disables inter-process locks. (boolean value)
-#disable_process_locking = false
-
-# Directory to use for lock files.  For security, the specified directory should
-# only be writable by the user running the processes that need locking. Defaults
-# to environment variable OSLO_LOCK_PATH. If external locks are used, a lock
-# path must be set. (string value)
-#lock_path = <None>
-
-
-[oslo_messaging_amqp]
-
-#
-# From oslo.messaging
-#
-
-# Name for the AMQP container. must be globally unique. Defaults to a generated
-# UUID (string value)
-#container_name = <None>
-
-# Timeout for inactive connections (in seconds) (integer value)
-#idle_timeout = 0
-
-# Debug: dump AMQP frames to stdout (boolean value)
-#trace = false
-
-# Attempt to connect via SSL. If no other ssl-related parameters are given, it
-# will use the system's CA-bundle to verify the server's certificate. (boolean
-# value)
-#ssl = false
-
-# CA certificate PEM file used to verify the server's certificate (string value)
-#ssl_ca_file =
-
-# Self-identifying certificate PEM file for client authentication (string value)
-#ssl_cert_file =
-
-# Private key PEM file used to sign ssl_cert_file certificate (optional) (string
-# value)
-#ssl_key_file =
-
-# Password for decrypting ssl_key_file (if encrypted) (string value)
-#ssl_key_password = <None>
-
-# By default SSL checks that the name in the server's certificate matches the
-# hostname in the transport_url. In some configurations it may be preferable to
-# use the virtual hostname instead, for example if the server uses the Server
-# Name Indication TLS extension (rfc6066) to provide a certificate per virtual
-# host. Set ssl_verify_vhost to True if the server's SSL certificate uses the
-# virtual host name instead of the DNS name. (boolean value)
-#ssl_verify_vhost = false
-
-# DEPRECATED: Accept clients using either SSL or plain TCP (boolean value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Not applicable - not a SSL server
-#allow_insecure_clients = false
-
-# Space separated list of acceptable SASL mechanisms (string value)
-#sasl_mechanisms =
-
-# Path to directory that contains the SASL configuration (string value)
-#sasl_config_dir =
-
-# Name of configuration file (without .conf suffix) (string value)
-#sasl_config_name =
-
-# SASL realm to use if no realm present in username (string value)
-#sasl_default_realm =
-
-# DEPRECATED: User name for message broker authentication (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the username.
-#username =
-
-# DEPRECATED: Password for message broker authentication (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the password.
-#password =
-
-# Seconds to pause before attempting to re-connect. (integer value)
-# Minimum value: 1
-#connection_retry_interval = 1
-
-# Increase the connection_retry_interval by this many seconds after each
-# unsuccessful failover attempt. (integer value)
-# Minimum value: 0
-#connection_retry_backoff = 2
-
-# Maximum limit for connection_retry_interval + connection_retry_backoff
-# (integer value)
-# Minimum value: 1
-#connection_retry_interval_max = 30
-
-# Time to pause between re-connecting an AMQP 1.0 link that failed due to a
-# recoverable error. (integer value)
-# Minimum value: 1
-#link_retry_delay = 10
-
-# The maximum number of attempts to re-send a reply message which failed due to
-# a recoverable error. (integer value)
-# Minimum value: -1
-#default_reply_retry = 0
-
-# The deadline for an rpc reply message delivery. (integer value)
-# Minimum value: 5
-#default_reply_timeout = 30
-
-# The deadline for an rpc cast or call message delivery. Only used when caller
-# does not provide a timeout expiry. (integer value)
-# Minimum value: 5
-#default_send_timeout = 30
-
-# The deadline for a sent notification message delivery. Only used when caller
-# does not provide a timeout expiry. (integer value)
-# Minimum value: 5
-#default_notify_timeout = 30
-
-# The duration to schedule a purge of idle sender links. Detach link after
-# expiry. (integer value)
-# Minimum value: 1
-#default_sender_link_timeout = 600
-
-# Indicates the addressing mode used by the driver.
-# Permitted values:
-# 'legacy'   - use legacy non-routable addressing
-# 'routable' - use routable addresses
-# 'dynamic'  - use legacy addresses if the message bus does not support routing
-# otherwise use routable addressing (string value)
-#addressing_mode = dynamic
-
-# Enable virtual host support for those message buses that do not natively
-# support virtual hosting (such as qpidd). When set to true the virtual host
-# name will be added to all message bus addresses, effectively creating a
-# private 'subnet' per virtual host. Set to False if the message bus supports
-# virtual hosting using the 'hostname' field in the AMQP 1.0 Open performative
-# as the name of the virtual host. (boolean value)
-#pseudo_vhost = true
-
-# address prefix used when sending to a specific server (string value)
-#server_request_prefix = exclusive
-
-# address prefix used when broadcasting to all servers (string value)
-#broadcast_prefix = broadcast
-
-# address prefix when sending to any server in group (string value)
-#group_request_prefix = unicast
-
-# Address prefix for all generated RPC addresses (string value)
-#rpc_address_prefix = openstack.org/om/rpc
-
-# Address prefix for all generated Notification addresses (string value)
-#notify_address_prefix = openstack.org/om/notify
-
-# Appended to the address prefix when sending a fanout message. Used by the
-# message bus to identify fanout messages. (string value)
-#multicast_address = multicast
-
-# Appended to the address prefix when sending to a particular RPC/Notification
-# server. Used by the message bus to identify messages sent to a single
-# destination. (string value)
-#unicast_address = unicast
-
-# Appended to the address prefix when sending to a group of consumers. Used by
-# the message bus to identify messages that should be delivered in a round-robin
-# fashion across consumers. (string value)
-#anycast_address = anycast
-
-# Exchange name used in notification addresses.
-# Exchange name resolution precedence:
-# Target.exchange if set
-# else default_notification_exchange if set
-# else control_exchange if set
-# else 'notify' (string value)
-#default_notification_exchange = <None>
-
-# Exchange name used in RPC addresses.
-# Exchange name resolution precedence:
-# Target.exchange if set
-# else default_rpc_exchange if set
-# else control_exchange if set
-# else 'rpc' (string value)
-#default_rpc_exchange = <None>
-
-# Window size for incoming RPC Reply messages. (integer value)
-# Minimum value: 1
-#reply_link_credit = 200
-
-# Window size for incoming RPC Request messages (integer value)
-# Minimum value: 1
-#rpc_server_credit = 100
-
-# Window size for incoming Notification messages (integer value)
-# Minimum value: 1
-#notify_server_credit = 100
-
-# Send messages of this type pre-settled.
-# Pre-settled messages will not receive acknowledgement
-# from the peer. Note well: pre-settled messages may be
-# silently discarded if the delivery fails.
-# Permitted values:
-# 'rpc-call' - send RPC Calls pre-settled
-# 'rpc-reply'- send RPC Replies pre-settled
-# 'rpc-cast' - Send RPC Casts pre-settled
-# 'notify'   - Send Notifications pre-settled
-#  (multi valued)
-#pre_settled = rpc-cast
-#pre_settled = rpc-reply
-
-
-[oslo_messaging_kafka]
-
-#
-# From oslo.messaging
-#
-
-# DEPRECATED: Default Kafka broker Host (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#kafka_default_host = localhost
-
-# DEPRECATED: Default Kafka broker Port (port value)
-# Minimum value: 0
-# Maximum value: 65535
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#kafka_default_port = 9092
-
-# Max fetch bytes of Kafka consumer (integer value)
-#kafka_max_fetch_bytes = 1048576
-
-# Default timeout(s) for Kafka consumers (floating point value)
-#kafka_consumer_timeout = 1.0
-
-# DEPRECATED: Pool Size for Kafka Consumers (integer value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#pool_size = 10
-
-# DEPRECATED: The pool size limit for connections expiration policy (integer
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#conn_pool_min_size = 2
-
-# DEPRECATED: The time-to-live in sec of idle connections in the pool (integer
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#conn_pool_ttl = 1200
-
-# Group id for Kafka consumer. Consumers in one group will coordinate message
-# consumption (string value)
-#consumer_group = oslo_messaging_consumer
-
-# Upper bound on the delay for KafkaProducer batching in seconds (floating point
-# value)
-#producer_batch_timeout = 0.0
-
-# Size of batch for the producer async send (integer value)
-#producer_batch_size = 16384
-
-
-[oslo_messaging_notifications]
-
-#
-# From oslo.messaging
-#
-
-# The Drivers(s) to handle sending notifications. Possible values are messaging,
-# messagingv2, routing, log, test, noop (multi valued)
-# Deprecated group/name - [DEFAULT]/notification_driver
-#driver =
-
-# A URL representing the messaging driver to use for notifications. If not set,
-# we fall back to the same configuration used for RPC. (string value)
-# Deprecated group/name - [DEFAULT]/notification_transport_url
-#transport_url = <None>
-
-# AMQP topic used for OpenStack notifications. (list value)
-# Deprecated group/name - [rpc_notifier2]/topics
-# Deprecated group/name - [DEFAULT]/notification_topics
-#topics = notifications
-
-# The maximum number of attempts to re-send a notification message which failed
-# to be delivered due to a recoverable error. 0 - No retry, -1 - indefinite
-# (integer value)
-#retry = -1
-
-
-[oslo_messaging_rabbit]
-
-#
-# From oslo.messaging
-#
-
-# Use durable queues in AMQP. (boolean value)
-# Deprecated group/name - [DEFAULT]/amqp_durable_queues
-# Deprecated group/name - [DEFAULT]/rabbit_durable_queues
-#amqp_durable_queues = false
-
-# Auto-delete queues in AMQP. (boolean value)
-#amqp_auto_delete = false
-
-# Enable SSL (boolean value)
-#ssl = <None>
-
-# SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and
-# SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some
-# distributions. (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_version
-#ssl_version =
-
-# SSL key file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_keyfile
-#ssl_key_file =
-
-# SSL cert file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_certfile
-#ssl_cert_file =
-
-# SSL certification authority file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_ca_certs
-#ssl_ca_file =
-
-# How long to wait before reconnecting in response to an AMQP consumer cancel
-# notification. (floating point value)
-#kombu_reconnect_delay = 1.0
-
-# EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression will not
-# be used. This option may not be available in future versions. (string value)
-#kombu_compression = <None>
-
-# How long to wait a missing client before abandoning to send it its replies.
-# This value should not be longer than rpc_response_timeout. (integer value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_reconnect_timeout
-#kombu_missing_consumer_retry_timeout = 60
-
-# Determines how the next RabbitMQ node is chosen in case the one we are
-# currently connected to becomes unavailable. Takes effect only if more than one
-# RabbitMQ node is provided in config. (string value)
-# Possible values:
-# round-robin - <No description provided>
-# shuffle - <No description provided>
-#kombu_failover_strategy = round-robin
-
-# DEPRECATED: The RabbitMQ broker address where a single node is used. (string
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_host = localhost
-
-# DEPRECATED: The RabbitMQ broker port where a single node is used. (port value)
-# Minimum value: 0
-# Maximum value: 65535
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_port = 5672
-
-# DEPRECATED: RabbitMQ HA cluster host:port pairs. (list value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_hosts = $rabbit_host:$rabbit_port
-
-# DEPRECATED: The RabbitMQ userid. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_userid = guest
-
-# DEPRECATED: The RabbitMQ password. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_password = guest
-
-# The RabbitMQ login method. (string value)
-# Possible values:
-# PLAIN - <No description provided>
-# AMQPLAIN - <No description provided>
-# RABBIT-CR-DEMO - <No description provided>
-#rabbit_login_method = AMQPLAIN
-
-# DEPRECATED: The RabbitMQ virtual host. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_virtual_host = /
-
-# How frequently to retry connecting with RabbitMQ. (integer value)
-#rabbit_retry_interval = 1
-
-# How long to backoff for between retries when connecting to RabbitMQ. (integer
-# value)
-#rabbit_retry_backoff = 2
-
-# Maximum interval of RabbitMQ connection retries. Default is 30 seconds.
-# (integer value)
-#rabbit_interval_max = 30
-
-# DEPRECATED: Maximum number of RabbitMQ connection retries. Default is 0
-# (infinite retry count). (integer value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-#rabbit_max_retries = 0
-
-# Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change this
-# option, you must wipe the RabbitMQ database. In RabbitMQ 3.0, queue mirroring
-# is no longer controlled by the x-ha-policy argument when declaring a queue. If
-# you just want to make sure that all queues (except those with auto-generated
-# names) are mirrored across all nodes, run: "rabbitmqctl set_policy HA
-# '^(?!amq\.).*' '{"ha-mode": "all"}' " (boolean value)
-#rabbit_ha_queues = false
-
-# Positive integer representing duration in seconds for queue TTL (x-expires).
-# Queues which are unused for the duration of the TTL are automatically deleted.
-# The parameter affects only reply and fanout queues. (integer value)
-# Minimum value: 1
-#rabbit_transient_queues_ttl = 1800
-
-# Specifies the number of messages to prefetch. Setting to zero allows unlimited
-# messages. (integer value)
-#rabbit_qos_prefetch_count = 0
-
-# Number of seconds after which the Rabbit broker is considered down if
-# heartbeat's keep-alive fails (0 disable the heartbeat). EXPERIMENTAL (integer
-# value)
-#heartbeat_timeout_threshold = 60
-
-# How often times during the heartbeat_timeout_threshold we check the heartbeat.
-# (integer value)
-#heartbeat_rate = 2
-
-# Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake (boolean value)
-#fake_rabbit = false
-
-# Maximum number of channels to allow (integer value)
-#channel_max = <None>
-
-# The maximum byte size for an AMQP frame (integer value)
-#frame_max = <None>
-
-# How often to send heartbeats for consumer's connections (integer value)
-#heartbeat_interval = 3
-
-# Arguments passed to ssl.wrap_socket (dict value)
-#ssl_options = <None>
-
-# Set socket timeout in seconds for connection's socket (floating point value)
-#socket_timeout = 0.25
-
-# Set TCP_USER_TIMEOUT in seconds for connection's socket (floating point value)
-#tcp_user_timeout = 0.25
-
-# Set delay for reconnection to some host which has connection error (floating
-# point value)
-#host_connection_reconnect_delay = 0.25
-
-# Connection factory implementation (string value)
-# Possible values:
-# new - <No description provided>
-# single - <No description provided>
-# read_write - <No description provided>
-#connection_factory = single
-
-# Maximum number of connections to keep queued. (integer value)
-#pool_max_size = 30
-
-# Maximum number of connections to create above `pool_max_size`. (integer value)
-#pool_max_overflow = 0
-
-# Default number of seconds to wait for a connections to available (integer
-# value)
-#pool_timeout = 30
-
-# Lifetime of a connection (since creation) in seconds or None for no recycling.
-# Expired connections are closed on acquire. (integer value)
-#pool_recycle = 600
-
-# Threshold at which inactive (since release) connections are considered stale
-# in seconds or None for no staleness. Stale connections are closed on acquire.
-# (integer value)
-#pool_stale = 60
-
-# Default serialization mechanism for serializing/deserializing
-# outgoing/incoming messages (string value)
-# Possible values:
-# json - <No description provided>
-# msgpack - <No description provided>
-#default_serializer_type = json
-
-# Persist notification messages. (boolean value)
-#notification_persistence = false
-
-# Exchange name for sending notifications (string value)
-#default_notification_exchange = ${control_exchange}_notification
-
-# Max number of not acknowledged message which RabbitMQ can send to notification
-# listener. (integer value)
-#notification_listener_prefetch_count = 100
-
-# Reconnecting retry count in case of connectivity problem during sending
-# notification, -1 means infinite retry. (integer value)
-#default_notification_retry_attempts = -1
-
-# Reconnecting retry delay in case of connectivity problem during sending
-# notification message (floating point value)
-#notification_retry_delay = 0.25
-
-# Time to live for rpc queues without consumers in seconds. (integer value)
-#rpc_queue_expiration = 60
-
-# Exchange name for sending RPC messages (string value)
-#default_rpc_exchange = ${control_exchange}_rpc
-
-# Exchange name for receiving RPC replies (string value)
-#rpc_reply_exchange = ${control_exchange}_rpc_reply
-
-# Max number of not acknowledged message which RabbitMQ can send to rpc
-# listener. (integer value)
-#rpc_listener_prefetch_count = 100
-
-# Max number of not acknowledged message which RabbitMQ can send to rpc reply
-# listener. (integer value)
-#rpc_reply_listener_prefetch_count = 100
-
-# Reconnecting retry count in case of connectivity problem during sending reply.
-# -1 means infinite retry during rpc_timeout (integer value)
-#rpc_reply_retry_attempts = -1
-
-# Reconnecting retry delay in case of connectivity problem during sending reply.
-# (floating point value)
-#rpc_reply_retry_delay = 0.25
-
-# Reconnecting retry count in case of connectivity problem during sending RPC
-# message, -1 means infinite retry. If actual retry attempts in not 0 the rpc
-# request could be processed more than one time (integer value)
-#default_rpc_retry_attempts = -1
-
-# Reconnecting retry delay in case of connectivity problem during sending RPC
-# message (floating point value)
-#rpc_retry_delay = 0.25
-
-
-[oslo_messaging_zmq]
-
-#
-# From oslo.messaging
-#
-
-# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
-# The "host" option should point or resolve to this address. (string value)
-#rpc_zmq_bind_address = *
-
-# MatchMaker driver. (string value)
-# Possible values:
-# redis - <No description provided>
-# sentinel - <No description provided>
-# dummy - <No description provided>
-#rpc_zmq_matchmaker = redis
-
-# Number of ZeroMQ contexts, defaults to 1. (integer value)
-#rpc_zmq_contexts = 1
-
-# Maximum number of ingress messages to locally buffer per topic. Default is
-# unlimited. (integer value)
-#rpc_zmq_topic_backlog = <None>
-
-# Directory for holding IPC sockets. (string value)
-#rpc_zmq_ipc_dir = /var/run/openstack
-
-# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
-# "host" option, if running Nova. (string value)
-#rpc_zmq_host = localhost
-
-# Number of seconds to wait before all pending messages will be sent after
-# closing a socket. The default value of -1 specifies an infinite linger period.
-# The value of 0 specifies no linger period. Pending messages shall be discarded
-# immediately when the socket is closed. Positive values specify an upper bound
-# for the linger period. (integer value)
-# Deprecated group/name - [DEFAULT]/rpc_cast_timeout
-#zmq_linger = -1
-
-# The default number of seconds that poll should wait. Poll raises timeout
-# exception when timeout expired. (integer value)
-#rpc_poll_timeout = 1
-
-# Expiration timeout in seconds of a name service record about existing target (
-# < 0 means no timeout). (integer value)
-#zmq_target_expire = 300
-
-# Update period in seconds of a name service record about existing target.
-# (integer value)
-#zmq_target_update = 180
-
-# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
-# value)
-#use_pub_sub = false
-
-# Use ROUTER remote proxy. (boolean value)
-#use_router_proxy = false
-
-# This option makes direct connections dynamic or static. It makes sense only
-# with use_router_proxy=False which means to use direct connections for direct
-# message types (ignored otherwise). (boolean value)
-#use_dynamic_connections = false
-
-# How many additional connections to a host will be made for failover reasons.
-# This option is actual only in dynamic connections mode. (integer value)
-#zmq_failover_connections = 2
-
-# Minimal port number for random ports range. (port value)
-# Minimum value: 0
-# Maximum value: 65535
-#rpc_zmq_min_port = 49153
-
-# Maximal port number for random ports range. (integer value)
-# Minimum value: 1
-# Maximum value: 65536
-#rpc_zmq_max_port = 65536
-
-# Number of retries to find free port number before fail with ZMQBindError.
-# (integer value)
-#rpc_zmq_bind_port_retries = 100
-
-# Default serialization mechanism for serializing/deserializing
-# outgoing/incoming messages (string value)
-# Possible values:
-# json - <No description provided>
-# msgpack - <No description provided>
-#rpc_zmq_serialization = json
-
-# This option configures round-robin mode in zmq socket. True means not keeping
-# a queue when server side disconnects. False means to keep queue and messages
-# even if server is disconnected, when the server appears we send all
-# accumulated messages to it. (boolean value)
-#zmq_immediate = true
-
-# Enable/disable TCP keepalive (KA) mechanism. The default value of -1 (or any
-# other negative value) means to skip any overrides and leave it to OS default;
-# 0 and 1 (or any other positive value) mean to disable and enable the option
-# respectively. (integer value)
-#zmq_tcp_keepalive = -1
-
-# The duration between two keepalive transmissions in idle condition. The unit
-# is platform dependent, for example, seconds in Linux, milliseconds in Windows
-# etc. The default value of -1 (or any other negative value and 0) means to skip
-# any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_idle = -1
-
-# The number of retransmissions to be carried out before declaring that remote
-# end is not available. The default value of -1 (or any other negative value and
-# 0) means to skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_cnt = -1
-
-# The duration between two successive keepalive retransmissions, if
-# acknowledgement to the previous keepalive transmission is not received. The
-# unit is platform dependent, for example, seconds in Linux, milliseconds in
-# Windows etc. The default value of -1 (or any other negative value and 0) means
-# to skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_intvl = -1
-
-# Maximum number of (green) threads to work concurrently. (integer value)
-#rpc_thread_pool_size = 100
-
-# Expiration timeout in seconds of a sent/received message after which it is not
-# tracked anymore by a client/server. (integer value)
-#rpc_message_ttl = 300
-
-# Wait for message acknowledgements from receivers. This mechanism works only
-# via proxy without PUB/SUB. (boolean value)
-#rpc_use_acks = false
-
-# Number of seconds to wait for an ack from a cast/call. After each retry
-# attempt this timeout is multiplied by some specified multiplier. (integer
-# value)
-#rpc_ack_timeout_base = 15
-
-# Number to multiply base ack timeout by after each retry attempt. (integer
-# value)
-#rpc_ack_timeout_multiplier = 2
-
-# Default number of message sending attempts in case of any problems occurred:
-# positive value N means at most N retries, 0 means no retries, None or -1 (or
-# any other negative values) mean to retry forever. This option is used only if
-# acknowledgments are enabled. (integer value)
-#rpc_retry_attempts = 3
-
-# List of publisher hosts SubConsumer can subscribe on. This option has higher
-# priority then the default publishers list taken from the matchmaker. (list
-# value)
-#subscribe_on =
-
-
-[oslo_middleware]
-
-#
-# From oslo.middleware.http_proxy_to_wsgi
-#
-
-# Whether the application is behind a proxy or not. This determines if the
-# middleware should parse the headers or not. (boolean value)
-#enable_proxy_headers_parsing = false
-
-
-[oslo_policy]
-
-#
-# From oslo.policy
-#
-
-# This option controls whether or not to enforce scope when evaluating policies.
-# If ``True``, the scope of the token used in the request is compared to the
-# ``scope_types`` of the policy being enforced. If the scopes do not match, an
-# ``InvalidScope`` exception will be raised. If ``False``, a message will be
-# logged informing operators that policies are being invoked with mismatching
-# scope. (boolean value)
-#enforce_scope = false
-
-# The file that defines policies. (string value)
-#policy_file = policy.json
-
-# Default rule. Enforced when a requested rule is not found. (string value)
-#policy_default_rule = default
-
-# Directories where policy configuration files are stored. They can be relative
-# to any directory in the search path defined by the config_dir option, or
-# absolute paths. The file defined by policy_file must exist for these
-# directories to be searched.  Missing or empty directories are ignored. (multi
-# valued)
-#policy_dirs = policy.d
-
-# Content Type to send and receive data for REST based policy check (string
-# value)
-# Possible values:
-# application/x-www-form-urlencoded - <No description provided>
-# application/json - <No description provided>
-#remote_content_type = application/x-www-form-urlencoded
-
-# server identity verification for REST based policy check (boolean value)
-#remote_ssl_verify_server_crt = false
-
-# Absolute path to ca cert file for REST based policy check (string value)
-#remote_ssl_ca_crt_file = <None>
-
-# Absolute path to client cert for REST based policy check (string value)
-#remote_ssl_client_crt_file = <None>
-
-# Absolute path client key file REST based policy check (string value)
-#remote_ssl_client_key_file = <None>
-
-
-[paste_deploy]
-
-#
-# From glance.api
-#
-
-#
-# Deployment flavor to use in the server application pipeline.
-#
-# Provide a string value representing the appropriate deployment
-# flavor used in the server application pipleline. This is typically
-# the partial name of a pipeline in the paste configuration file with
-# the service name removed.
-#
-# For example, if your paste section name in the paste configuration
-# file is [pipeline:glance-api-keystone], set ``flavor`` to
-# ``keystone``.
-#
-# Possible values:
-#     * String value representing a partial pipeline name.
-#
-# Related Options:
-#     * config_file
-#
-#  (string value)
-#flavor = keystone
-
-#
-# Name of the paste configuration file.
-#
-# Provide a string value representing the name of the paste
-# configuration file to use for configuring piplelines for
-# server application deployments.
-#
-# NOTES:
-#     * Provide the name or the path relative to the glance directory
-#       for the paste configuration file and not the absolute path.
-#     * The sample paste configuration file shipped with Glance need
-#       not be edited in most cases as it comes with ready-made
-#       pipelines for all common deployment flavors.
-#
-# If no value is specified for this option, the ``paste.ini`` file
-# with the prefix of the corresponding Glance service's configuration
-# file name will be searched for in the known configuration
-# directories. (For example, if this option is missing from or has no
-# value set in ``glance-api.conf``, the service will look for a file
-# named ``glance-api-paste.ini``.) If the paste configuration file is
-# not found, the service will not start.
-#
-# Possible values:
-#     * A string value representing the name of the paste configuration
-#       file.
-#
-# Related Options:
-#     * flavor
-#
-#  (string value)
-#config_file = glance-api-paste.ini
-
-
-[profiler]
-
-#
-# From glance.api
-#
-
-#
-# Enables the profiling for all services on this node. Default value is False
-# (fully disable the profiling feature).
-#
-# Possible values:
-#
-# * True: Enables the feature
-# * False: Disables the feature. The profiling cannot be started via this
-# project
-# operations. If the profiling is triggered by another project, this project
-# part
-# will be empty.
-#  (boolean value)
-# Deprecated group/name - [profiler]/profiler_enabled
-#enabled = false
-
-#
-# Enables SQL requests profiling in services. Default value is False (SQL
-# requests won't be traced).
-#
-# Possible values:
-#
-# * True: Enables SQL requests profiling. Each SQL query will be part of the
-# trace and can the be analyzed by how much time was spent for that.
-# * False: Disables SQL requests profiling. The spent time is only shown on a
-# higher level of operations. Single SQL queries cannot be analyzed this
-# way.
-#  (boolean value)
-#trace_sqlalchemy = false
-
-#
-# Secret key(s) to use for encrypting context data for performance profiling.
-# This string value should have the following format: <key1>[,<key2>,...<keyn>],
-# where each key is some random string. A user who triggers the profiling via
-# the REST API has to set one of these keys in the headers of the REST API call
-# to include profiling results of this node for this particular project.
-#
-# Both "enabled" flag and "hmac_keys" config options should be set to enable
-# profiling. Also, to generate correct profiling information across all services
-# at least one key needs to be consistent between OpenStack projects. This
-# ensures it can be used from client side to generate the trace, containing
-# information from all possible resources. (string value)
-#hmac_keys = SECRET_KEY
-
-#
-# Connection string for a notifier backend. Default value is messaging:// which
-# sets the notifier to oslo_messaging.
-#
-# Examples of possible values:
-#
-# * messaging://: use oslo_messaging driver for sending notifications.
-# * mongodb://127.0.0.1:27017 : use mongodb driver for sending notifications.
-# * elasticsearch://127.0.0.1:9200 : use elasticsearch driver for sending
-# notifications.
-#  (string value)
-#connection_string = messaging://
-
-#
-# Document type for notification indexing in elasticsearch.
-#  (string value)
-#es_doc_type = notification
-
-#
-# This parameter is a time value parameter (for example: es_scroll_time=2m),
-# indicating for how long the nodes that participate in the search will maintain
-# relevant resources in order to continue and support it.
-#  (string value)
-#es_scroll_time = 2m
-
-#
-# Elasticsearch splits large requests in batches. This parameter defines
-# maximum size of each batch (for example: es_scroll_size=10000).
-#  (integer value)
-#es_scroll_size = 10000
-
-#
-# Redissentinel provides a timeout option on the connections.
-# This parameter defines that timeout (for example: socket_timeout=0.1).
-#  (floating point value)
-#socket_timeout = 0.1
-
-#
-# Redissentinel uses a service name to identify a master redis service.
-# This parameter defines the name (for example:
-# sentinal_service_name=mymaster).
-#  (string value)
-#sentinel_service_name = mymaster
-
-
-[store_type_location_strategy]
-
-#
-# From glance.api
-#
-
-#
-# Preference order of storage backends.
-#
-# Provide a comma separated list of store names in the order in
-# which images should be retrieved from storage backends.
-# These store names must be registered with the ``stores``
-# configuration option.
-#
-# NOTE: The ``store_type_preference`` configuration option is applied
-# only if ``store_type`` is chosen as a value for the
-# ``location_strategy`` configuration option. An empty list will not
-# change the location order.
-#
-# Possible values:
-#     * Empty list
-#     * Comma separated list of registered store names. Legal values are:
-#         * file
-#         * http
-#         * rbd
-#         * swift
-#         * sheepdog
-#         * cinder
-#         * vmware
-#
-# Related options:
-#     * location_strategy
-#     * stores
-#
-#  (list value)
-#store_type_preference =
-
-
-[task]
-
-#
-# From glance.api
-#
-
-# Time in hours for which a task lives after, either succeeding or failing
-# (integer value)
-# Deprecated group/name - [DEFAULT]/task_time_to_live
-#task_time_to_live = 48
-
-#
-# Task executor to be used to run task scripts.
-#
-# Provide a string value representing the executor to use for task
-# executions. By default, ``TaskFlow`` executor is used.
-#
-# ``TaskFlow`` helps make task executions easy, consistent, scalable
-# and reliable. It also enables creation of lightweight task objects
-# and/or functions that are combined together into flows in a
-# declarative manner.
-#
-# Possible values:
-#     * taskflow
-#
-# Related Options:
-#     * None
-#
-#  (string value)
-#task_executor = taskflow
-
-#
-# Absolute path to the work directory to use for asynchronous
-# task operations.
-#
-# The directory set here will be used to operate over images -
-# normally before they are imported in the destination store.
-#
-# NOTE: When providing a value for ``work_dir``, please make sure
-# that enough space is provided for concurrent tasks to run
-# efficiently without running out of space.
-#
-# A rough estimation can be done by multiplying the number of
-# ``max_workers`` with an average image size (e.g 500MB). The image
-# size estimation should be done based on the average size in your
-# deployment. Note that depending on the tasks running you may need
-# to multiply this number by some factor depending on what the task
-# does. For example, you may want to double the available size if
-# image conversion is enabled. All this being said, remember these
-# are just estimations and you should do them based on the worst
-# case scenario and be prepared to act in case they were wrong.
-#
-# Possible values:
-#     * String value representing the absolute path to the working
-#       directory
-#
-# Related Options:
-#     * None
-#
-#  (string value)
-#work_dir = /work_dir
-
-
-[taskflow_executor]
-
-#
-# From glance.api
-#
-
-#
-# Set the taskflow engine mode.
-#
-# Provide a string type value to set the mode in which the taskflow
-# engine would schedule tasks to the workers on the hosts. Based on
-# this mode, the engine executes tasks either in single or multiple
-# threads. The possible values for this configuration option are:
-# ``serial`` and ``parallel``. When set to ``serial``, the engine runs
-# all the tasks in a single thread which results in serial execution
-# of tasks. Setting this to ``parallel`` makes the engine run tasks in
-# multiple threads. This results in parallel execution of tasks.
-#
-# Possible values:
-#     * serial
-#     * parallel
-#
-# Related options:
-#     * max_workers
-#
-#  (string value)
-# Possible values:
-# serial - <No description provided>
-# parallel - <No description provided>
-#engine_mode = parallel
-
-#
-# Set the number of engine executable tasks.
-#
-# Provide an integer value to limit the number of workers that can be
-# instantiated on the hosts. In other words, this number defines the
-# number of parallel tasks that can be executed at the same time by
-# the taskflow engine. This value can be greater than one when the
-# engine mode is set to parallel.
-#
-# Possible values:
-#     * Integer value greater than or equal to 1
-#
-# Related options:
-#     * engine_mode
-#
-#  (integer value)
-# Minimum value: 1
-# Deprecated group/name - [task]/eventlet_executor_pool_size
-#max_workers = 10
-
-#
-# Set the desired image conversion format.
-#
-# Provide a valid image format to which you want images to be
-# converted before they are stored for consumption by Glance.
-# Appropriate image format conversions are desirable for specific
-# storage backends in order to facilitate efficient handling of
-# bandwidth and usage of the storage infrastructure.
-#
-# By default, ``conversion_format`` is not set and must be set
-# explicitly in the configuration file.
-#
-# The allowed values for this option are ``raw``, ``qcow2`` and
-# ``vmdk``. The  ``raw`` format is the unstructured disk format and
-# should be chosen when RBD or Ceph storage backends are used for
-# image storage. ``qcow2`` is supported by the QEMU emulator that
-# expands dynamically and supports Copy on Write. The ``vmdk`` is
-# another common disk format supported by many common virtual machine
-# monitors like VMWare Workstation.
-#
-# Possible values:
-#     * qcow2
-#     * raw
-#     * vmdk
-#
-# Related options:
-#     * disk_formats
-#
-#  (string value)
-# Possible values:
-# qcow2 - <No description provided>
-# raw - <No description provided>
-# vmdk - <No description provided>
-#conversion_format = raw
+#secure_proxy_ssl_header = X-Forwarded-Proto
+
+# Whether the application is behind a proxy or not. This determines if
+# the middleware should parse the headers or not. (boolean value)
+enable_proxy_headers_parsing = True

2018-09-01 22:42:01,887 [salt.state       :1941][INFO    ][21878] Completed state [/etc/glance/glance-api.conf] at time 22:42:01.887932 duration_in_ms=303.039
2018-09-01 22:42:01,888 [salt.state       :1770][INFO    ][21878] Running state [/etc/glance/glance-api-paste.ini] at time 22:42:01.888364
2018-09-01 22:42:01,888 [salt.state       :1803][INFO    ][21878] Executing state file.managed for [/etc/glance/glance-api-paste.ini]
2018-09-01 22:42:01,904 [salt.fileclient  :1215][INFO    ][21878] Fetching file from saltenv 'base', ** done ** 'glance/files/queens/glance-api-paste.ini'
2018-09-01 22:42:01,940 [salt.state       :290 ][INFO    ][21878] File changed:
--- 
+++ 
@@ -1,3 +1,4 @@
+
 # Use this pipeline for no auth or image caching - DEFAULT
 [pipeline:glance-api]
 pipeline = cors healthcheck http_proxy_to_wsgi versionnegotiation osprofiler unauthenticated-context rootapp
@@ -12,7 +13,7 @@
 
 # Use this pipeline for keystone auth
 [pipeline:glance-api-keystone]
-pipeline = cors healthcheck http_proxy_to_wsgi versionnegotiation osprofiler authtoken context  rootapp
+pipeline = cors healthcheck http_proxy_to_wsgi versionnegotiation osprofiler authtoken context rootapp
 
 # Use this pipeline for keystone auth with image caching
 [pipeline:glance-api-keystone+caching]

2018-09-01 22:42:01,940 [salt.state       :1941][INFO    ][21878] Completed state [/etc/glance/glance-api-paste.ini] at time 22:42:01.940551 duration_in_ms=52.187
2018-09-01 22:42:01,941 [salt.state       :1770][INFO    ][21878] Running state [glance-manage db_sync] at time 22:42:01.941684
2018-09-01 22:42:01,941 [salt.state       :1803][INFO    ][21878] Executing state cmd.run for [glance-manage db_sync]
2018-09-01 22:42:01,942 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21878] Executing command 'glance-manage db_sync' in directory '/root'
2018-09-01 22:42:02,440 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224202432847
2018-09-01 22:42:02,461 [salt.minion      :1431][INFO    ][23287] Starting a new job with PID 23287
2018-09-01 22:42:02,480 [salt.minion      :1708][INFO    ][23287] Returning information for job: 20180901224202432847
2018-09-01 22:42:10,741 [salt.state       :290 ][INFO    ][21878] {'pid': 23281, 'retcode': 0, 'stderr': "/usr/lib/python2.7/dist-packages/oslo_db/sqlalchemy/enginefacade.py:1336: OsloDBDeprecationWarning: EngineFacade is deprecated; please use oslo_db.sqlalchemy.enginefacade\n  expire_on_commit=expire_on_commit, _conf=conf)\n2018-09-01 22:42:02.900 23282 INFO alembic.runtime.migration [-] Context impl MySQLImpl.\n2018-09-01 22:42:02.901 23282 INFO alembic.runtime.migration [-] Will assume non-transactional DDL.\n2018-09-01 22:42:02.931 23282 INFO alembic.runtime.migration [-] Context impl MySQLImpl.\n2018-09-01 22:42:02.932 23282 INFO alembic.runtime.migration [-] Will assume non-transactional DDL.\nINFO  [alembic.runtime.migration] Context impl MySQLImpl.\nINFO  [alembic.runtime.migration] Will assume non-transactional DDL.\nINFO  [alembic.runtime.migration] Running upgrade  -> liberty, liberty initial\nINFO  [alembic.runtime.migration] Running upgrade liberty -> mitaka01, add index on created_at and updated_at columns of 'images' table\nINFO  [alembic.runtime.migration] Running upgrade mitaka01 -> mitaka02, update metadef os_nova_server\nINFO  [alembic.runtime.migration] Running upgrade mitaka02 -> ocata_expand01, add visibility to images\nINFO  [alembic.runtime.migration] Running upgrade ocata_expand01 -> pike_expand01, empty expand for symmetry with pike_contract01\nINFO  [alembic.runtime.migration] Running upgrade pike_expand01 -> queens_expand01\nINFO  [alembic.runtime.migration] Context impl MySQLImpl.\nINFO  [alembic.runtime.migration] Will assume non-transactional DDL.\nINFO  [alembic.runtime.migration] Context impl MySQLImpl.\nINFO  [alembic.runtime.migration] Will assume non-transactional DDL.\nINFO  [alembic.runtime.migration] Context impl MySQLImpl.\nINFO  [alembic.runtime.migration] Will assume non-transactional DDL.\nINFO  [alembic.runtime.migration] Context impl MySQLImpl.\nINFO  [alembic.runtime.migration] Will assume non-transactional DDL.\nINFO  [alembic.runtime.migration] Context impl MySQLImpl.\nINFO  [alembic.runtime.migration] Will assume non-transactional DDL.\nINFO  [alembic.runtime.migration] Running upgrade mitaka02 -> ocata_contract01, remove is_public from images\nINFO  [alembic.runtime.migration] Running upgrade ocata_contract01 -> pike_contract01, drop glare artifacts tables\nINFO  [alembic.runtime.migration] Running upgrade pike_contract01 -> queens_contract01\nINFO  [alembic.runtime.migration] Context impl MySQLImpl.\nINFO  [alembic.runtime.migration] Will assume non-transactional DDL.\nINFO  [alembic.runtime.migration] Context impl MySQLImpl.\nINFO  [alembic.runtime.migration] Will assume non-transactional DDL.", 'stdout': 'Upgraded database to: queens_expand01, current revision(s): queens_expand01\nDatabase migration is up to date. No migration needed.\nUpgraded database to: queens_contract01, current revision(s): queens_contract01\nDatabase is synced successfully.'}
2018-09-01 22:42:10,742 [salt.state       :1941][INFO    ][21878] Completed state [glance-manage db_sync] at time 22:42:10.742041 duration_in_ms=8800.355
2018-09-01 22:42:10,745 [salt.state       :1770][INFO    ][21878] Running state [glance-manage db_load_metadefs] at time 22:42:10.745160
2018-09-01 22:42:10,745 [salt.state       :1803][INFO    ][21878] Executing state cmd.run for [glance-manage db_load_metadefs]
2018-09-01 22:42:10,746 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21878] Executing command 'glance-manage db_load_metadefs' in directory '/root'
2018-09-01 22:42:12,605 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224212598592
2018-09-01 22:42:12,627 [salt.minion      :1431][INFO    ][23312] Starting a new job with PID 23312
2018-09-01 22:42:12,646 [salt.minion      :1708][INFO    ][23312] Returning information for job: 20180901224212598592
2018-09-01 22:42:14,470 [salt.state       :290 ][INFO    ][21878] {'pid': 23303, 'retcode': 0, 'stderr': '/usr/lib/python2.7/dist-packages/oslo_db/sqlalchemy/enginefacade.py:1336: OsloDBDeprecationWarning: EngineFacade is deprecated; please use oslo_db.sqlalchemy.enginefacade\n  expire_on_commit=expire_on_commit, _conf=conf)\n2018-09-01 22:42:11.824 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/compute-cpu-pinning.json loaded to database.\n2018-09-01 22:42:12.027 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/cim-virtual-system-setting-data.json loaded to database.\n2018-09-01 22:42:12.129 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/compute-vcputopology.json loaded to database.\n2018-09-01 22:42:12.187 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/compute-guest-memory-backing.json loaded to database.\n2018-09-01 22:42:12.302 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/compute-libvirt-image.json loaded to database.\n2018-09-01 22:42:12.381 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/software-webservers.json loaded to database.\n2018-09-01 22:42:12.548 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/software-databases.json loaded to database.\n2018-09-01 22:42:12.607 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/compute-randomgen.json loaded to database.\n2018-09-01 22:42:12.648 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/storage-volume-type.json loaded to database.\n2018-09-01 22:42:12.887 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/cim-resource-allocation-setting-data.json loaded to database.\n2018-09-01 22:42:12.958 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/compute-watchdog.json loaded to database.\n2018-09-01 22:42:12.997 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/compute-trust.json loaded to database.\n2018-09-01 22:42:13.074 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/compute-vmware.json loaded to database.\n2018-09-01 22:42:13.282 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/cim-storage-allocation-setting-data.json loaded to database.\n2018-09-01 22:42:13.340 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/compute-libvirt.json loaded to database.\n2018-09-01 22:42:13.450 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/cim-processor-allocation-setting-data.json loaded to database.\n2018-09-01 22:42:13.495 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/compute-vmware-quota-flavor.json loaded to database.\n2018-09-01 22:42:13.561 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/glance-common-image-props.json loaded to database.\n2018-09-01 22:42:13.596 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/compute-aggr-disk-filter.json loaded to database.\n2018-09-01 22:42:13.693 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/software-runtimes.json loaded to database.\n2018-09-01 22:42:13.737 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/compute-vmware-flavor.json loaded to database.\n2018-09-01 22:42:13.782 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/compute-hypervisor.json loaded to database.\n2018-09-01 22:42:13.850 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/operating-system.json loaded to database.\n2018-09-01 22:42:13.943 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/compute-quota.json loaded to database.\n2018-09-01 22:42:13.985 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/compute-aggr-iops-filter.json loaded to database.\n2018-09-01 22:42:14.101 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/compute-host-capabilities.json loaded to database.\n2018-09-01 22:42:14.178 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/compute-xenapi.json loaded to database.\n2018-09-01 22:42:14.242 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/compute-instance-data.json loaded to database.\n2018-09-01 22:42:14.308 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/image-signature-verification.json loaded to database.\n2018-09-01 22:42:14.346 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/compute-guest-shutdown.json loaded to database.\n2018-09-01 22:42:14.384 23304 INFO glance.db.sqlalchemy.metadata [-] File /etc/glance/metadefs/compute-aggr-num-instances.json loaded to database.\n2018-09-01 22:42:14.385 23304 INFO glance.db.sqlalchemy.metadata [-] Metadata loading finished', 'stdout': ''}
2018-09-01 22:42:14,471 [salt.state       :1941][INFO    ][21878] Completed state [glance-manage db_load_metadefs] at time 22:42:14.471729 duration_in_ms=3726.569
2018-09-01 22:42:14,473 [salt.state       :1770][INFO    ][21878] Running state [/etc/default/glance-api] at time 22:42:14.473447
2018-09-01 22:42:14,474 [salt.state       :1803][INFO    ][21878] Executing state file.managed for [/etc/default/glance-api]
2018-09-01 22:42:14,498 [salt.fileclient  :1215][INFO    ][21878] Fetching file from saltenv 'base', ** done ** 'glance/files/default'
2018-09-01 22:42:14,510 [salt.state       :290 ][INFO    ][21878] File changed:
New file
2018-09-01 22:42:14,511 [salt.state       :1941][INFO    ][21878] Completed state [/etc/default/glance-api] at time 22:42:14.510963 duration_in_ms=37.517
2018-09-01 22:42:14,511 [salt.state       :1770][INFO    ][21878] Running state [/etc/default/glance-registry] at time 22:42:14.511519
2018-09-01 22:42:14,511 [salt.state       :1803][INFO    ][21878] Executing state file.managed for [/etc/default/glance-registry]
2018-09-01 22:42:14,529 [salt.state       :290 ][INFO    ][21878] File changed:
New file
2018-09-01 22:42:14,529 [salt.state       :1941][INFO    ][21878] Completed state [/etc/default/glance-registry] at time 22:42:14.529528 duration_in_ms=18.009
2018-09-01 22:42:14,529 [salt.state       :1770][INFO    ][21878] Running state [/etc/default/glance-glare] at time 22:42:14.529954
2018-09-01 22:42:14,530 [salt.state       :1803][INFO    ][21878] Executing state file.managed for [/etc/default/glance-glare]
2018-09-01 22:42:14,546 [salt.state       :290 ][INFO    ][21878] File changed:
New file
2018-09-01 22:42:14,546 [salt.state       :1941][INFO    ][21878] Completed state [/etc/default/glance-glare] at time 22:42:14.546876 duration_in_ms=16.921
2018-09-01 22:42:14,548 [salt.state       :1770][INFO    ][21878] Running state [glance-api] at time 22:42:14.548912
2018-09-01 22:42:14,549 [salt.state       :1803][INFO    ][21878] Executing state service.running for [glance-api]
2018-09-01 22:42:14,549 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21878] Executing command ['systemctl', 'status', 'glance-api.service', '-n', '0'] in directory '/root'
2018-09-01 22:42:14,577 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21878] Executing command ['systemctl', 'is-active', 'glance-api.service'] in directory '/root'
2018-09-01 22:42:14,603 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21878] Executing command ['systemctl', 'is-enabled', 'glance-api.service'] in directory '/root'
2018-09-01 22:42:14,627 [salt.state       :290 ][INFO    ][21878] The service glance-api is already running
2018-09-01 22:42:14,628 [salt.state       :1941][INFO    ][21878] Completed state [glance-api] at time 22:42:14.628265 duration_in_ms=79.352
2018-09-01 22:42:14,628 [salt.state       :1770][INFO    ][21878] Running state [glance-api] at time 22:42:14.628741
2018-09-01 22:42:14,629 [salt.state       :1803][INFO    ][21878] Executing state service.mod_watch for [glance-api]
2018-09-01 22:42:14,630 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21878] Executing command ['systemctl', 'is-active', 'glance-api.service'] in directory '/root'
2018-09-01 22:42:14,652 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21878] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'glance-api.service'] in directory '/root'
2018-09-01 22:42:14,732 [salt.state       :290 ][INFO    ][21878] {'glance-api': True}
2018-09-01 22:42:14,738 [salt.state       :1941][INFO    ][21878] Completed state [glance-api] at time 22:42:14.738453 duration_in_ms=109.712
2018-09-01 22:42:14,740 [salt.state       :1770][INFO    ][21878] Running state [glance-registry] at time 22:42:14.740061
2018-09-01 22:42:14,740 [salt.state       :1803][INFO    ][21878] Executing state service.running for [glance-registry]
2018-09-01 22:42:14,741 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21878] Executing command ['systemctl', 'status', 'glance-registry.service', '-n', '0'] in directory '/root'
2018-09-01 22:42:14,758 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21878] Executing command ['systemctl', 'is-active', 'glance-registry.service'] in directory '/root'
2018-09-01 22:42:14,773 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21878] Executing command ['systemctl', 'is-enabled', 'glance-registry.service'] in directory '/root'
2018-09-01 22:42:14,792 [salt.state       :290 ][INFO    ][21878] The service glance-registry is already running
2018-09-01 22:42:14,793 [salt.state       :1941][INFO    ][21878] Completed state [glance-registry] at time 22:42:14.793020 duration_in_ms=52.959
2018-09-01 22:42:14,793 [salt.state       :1770][INFO    ][21878] Running state [glance-registry] at time 22:42:14.793408
2018-09-01 22:42:14,793 [salt.state       :1803][INFO    ][21878] Executing state service.mod_watch for [glance-registry]
2018-09-01 22:42:14,794 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21878] Executing command ['systemctl', 'is-active', 'glance-registry.service'] in directory '/root'
2018-09-01 22:42:14,813 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21878] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'glance-registry.service'] in directory '/root'
2018-09-01 22:42:14,855 [salt.state       :290 ][INFO    ][21878] {'glance-registry': True}
2018-09-01 22:42:14,855 [salt.state       :1941][INFO    ][21878] Completed state [glance-registry] at time 22:42:14.855763 duration_in_ms=62.354
2018-09-01 22:42:14,867 [salt.state       :1770][INFO    ][21878] Running state [glance-cache-pruner] at time 22:42:14.867343
2018-09-01 22:42:14,867 [salt.state       :1803][INFO    ][21878] Executing state cron.present for [glance-cache-pruner]
2018-09-01 22:42:14,868 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21878] Executing command 'crontab -u glance -l' in directory '/root'
2018-09-01 22:42:14,886 [salt.loaded.int.module.cmdmod:722 ][ERROR   ][21878] Command '['crontab', '-u', 'glance', '-l']' failed with return code: 1
2018-09-01 22:42:14,887 [salt.loaded.int.module.cmdmod:726 ][ERROR   ][21878] stderr: no crontab for glance

2018-09-01 22:42:14,887 [salt.loaded.int.module.cmdmod:728 ][ERROR   ][21878] retcode: 1
2018-09-01 22:42:14,888 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21878] Executing command 'crontab -u glance /tmp/__salt.tmp.P6x5I6' in directory '/root'
2018-09-01 22:42:14,920 [salt.state       :290 ][INFO    ][21878] {'glance': 'glance-cache-pruner'}
2018-09-01 22:42:14,921 [salt.state       :1941][INFO    ][21878] Completed state [glance-cache-pruner] at time 22:42:14.921155 duration_in_ms=53.811
2018-09-01 22:42:14,922 [salt.state       :1770][INFO    ][21878] Running state [glance-cache-cleaner] at time 22:42:14.922190
2018-09-01 22:42:14,922 [salt.state       :1803][INFO    ][21878] Executing state cron.present for [glance-cache-cleaner]
2018-09-01 22:42:14,924 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21878] Executing command 'crontab -u glance -l' in directory '/root'
2018-09-01 22:42:14,940 [salt.loaded.int.module.cmdmod:395 ][INFO    ][21878] Executing command 'crontab -u glance /tmp/__salt.tmp.ImBf4E' in directory '/root'
2018-09-01 22:42:15,094 [salt.state       :290 ][INFO    ][21878] {'glance': 'glance-cache-cleaner'}
2018-09-01 22:42:15,096 [salt.state       :1941][INFO    ][21878] Completed state [glance-cache-cleaner] at time 22:42:15.095978 duration_in_ms=173.788
2018-09-01 22:42:15,096 [salt.state       :1770][INFO    ][21878] Running state [/srv/glance] at time 22:42:15.096663
2018-09-01 22:42:15,097 [salt.state       :1803][INFO    ][21878] Executing state file.directory for [/srv/glance]
2018-09-01 22:42:15,103 [salt.state       :290 ][INFO    ][21878] {'/srv/glance': 'New Dir'}
2018-09-01 22:42:15,103 [salt.state       :1941][INFO    ][21878] Completed state [/srv/glance] at time 22:42:15.103393 duration_in_ms=6.73
2018-09-01 22:42:15,103 [salt.state       :1770][INFO    ][21878] Running state [/var/lib/glance/images] at time 22:42:15.103796
2018-09-01 22:42:15,104 [salt.state       :1803][INFO    ][21878] Executing state file.directory for [/var/lib/glance/images]
2018-09-01 22:42:15,105 [salt.state       :290 ][INFO    ][21878] Directory /var/lib/glance/images is in the correct state
Directory /var/lib/glance/images updated
2018-09-01 22:42:15,105 [salt.state       :1941][INFO    ][21878] Completed state [/var/lib/glance/images] at time 22:42:15.105940 duration_in_ms=2.144
2018-09-01 22:42:15,111 [salt.minion      :1708][INFO    ][21878] Returning information for job: 20180901224126925004
2018-09-01 22:43:24,494 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command test.ping with jid 20180901224324489443
2018-09-01 22:43:24,516 [salt.minion      :1431][INFO    ][23480] Starting a new job with PID 23480
2018-09-01 22:43:24,537 [salt.minion      :1708][INFO    ][23480] Returning information for job: 20180901224324489443
2018-09-01 22:43:24,663 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command state.sls with jid 20180901224324656990
2018-09-01 22:43:24,684 [salt.minion      :1431][INFO    ][23485] Starting a new job with PID 23485
2018-09-01 22:43:28,852 [salt.state       :905 ][INFO    ][23485] Loading fresh modules for state activity
2018-09-01 22:43:28,898 [salt.fileclient  :1215][INFO    ][23485] Fetching file from saltenv 'base', ** done ** 'nova/init.sls'
2018-09-01 22:43:28,925 [salt.fileclient  :1215][INFO    ][23485] Fetching file from saltenv 'base', ** done ** 'nova/controller.sls'
2018-09-01 22:43:29,562 [salt.fileclient  :1215][INFO    ][23485] Fetching file from saltenv 'base', ** done ** 'nova/db/offline_sync.sls'
2018-09-01 22:43:29,667 [salt.fileclient  :1215][INFO    ][23485] Fetching file from saltenv 'base', ** done ** 'nova/db/online_sync.sls'
2018-09-01 22:43:29,759 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224329754055
2018-09-01 22:43:29,783 [salt.minion      :1431][INFO    ][23516] Starting a new job with PID 23516
2018-09-01 22:43:29,798 [salt.minion      :1708][INFO    ][23516] Returning information for job: 20180901224329754055
2018-09-01 22:43:30,632 [salt.state       :1770][INFO    ][23485] Running state [apache2] at time 22:43:30.632064
2018-09-01 22:43:30,632 [salt.state       :1803][INFO    ][23485] Executing state pkg.installed for [apache2]
2018-09-01 22:43:30,632 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:43:30,953 [salt.state       :290 ][INFO    ][23485] All specified packages are already installed
2018-09-01 22:43:30,954 [salt.state       :1941][INFO    ][23485] Completed state [apache2] at time 22:43:30.954229 duration_in_ms=322.165
2018-09-01 22:43:30,954 [salt.state       :1770][INFO    ][23485] Running state [openssl] at time 22:43:30.954512
2018-09-01 22:43:30,954 [salt.state       :1803][INFO    ][23485] Executing state pkg.installed for [openssl]
2018-09-01 22:43:30,959 [salt.state       :290 ][INFO    ][23485] All specified packages are already installed
2018-09-01 22:43:30,959 [salt.state       :1941][INFO    ][23485] Completed state [openssl] at time 22:43:30.959843 duration_in_ms=5.33
2018-09-01 22:43:30,960 [salt.state       :1770][INFO    ][23485] Running state [a2enmod ssl] at time 22:43:30.960538
2018-09-01 22:43:30,960 [salt.state       :1803][INFO    ][23485] Executing state cmd.run for [a2enmod ssl]
2018-09-01 22:43:30,961 [salt.state       :290 ][INFO    ][23485] /etc/apache2/mods-enabled/ssl.load exists
2018-09-01 22:43:30,961 [salt.state       :1941][INFO    ][23485] Completed state [a2enmod ssl] at time 22:43:30.961123 duration_in_ms=0.584
2018-09-01 22:43:30,961 [salt.state       :1770][INFO    ][23485] Running state [a2enmod rewrite] at time 22:43:30.961520
2018-09-01 22:43:30,961 [salt.state       :1803][INFO    ][23485] Executing state cmd.run for [a2enmod rewrite]
2018-09-01 22:43:30,961 [salt.state       :290 ][INFO    ][23485] /etc/apache2/mods-enabled/rewrite.load exists
2018-09-01 22:43:30,962 [salt.state       :1941][INFO    ][23485] Completed state [a2enmod rewrite] at time 22:43:30.962058 duration_in_ms=0.538
2018-09-01 22:43:30,962 [salt.state       :1770][INFO    ][23485] Running state [libapache2-mod-wsgi] at time 22:43:30.962419
2018-09-01 22:43:30,962 [salt.state       :1803][INFO    ][23485] Executing state pkg.installed for [libapache2-mod-wsgi]
2018-09-01 22:43:30,967 [salt.state       :290 ][INFO    ][23485] All specified packages are already installed
2018-09-01 22:43:30,967 [salt.state       :1941][INFO    ][23485] Completed state [libapache2-mod-wsgi] at time 22:43:30.967374 duration_in_ms=4.955
2018-09-01 22:43:30,967 [salt.state       :1770][INFO    ][23485] Running state [a2enmod wsgi] at time 22:43:30.967765
2018-09-01 22:43:30,967 [salt.state       :1803][INFO    ][23485] Executing state cmd.run for [a2enmod wsgi]
2018-09-01 22:43:30,968 [salt.state       :290 ][INFO    ][23485] /etc/apache2/mods-enabled/wsgi.load exists
2018-09-01 22:43:30,968 [salt.state       :1941][INFO    ][23485] Completed state [a2enmod wsgi] at time 22:43:30.968297 duration_in_ms=0.532
2018-09-01 22:43:30,971 [salt.state       :1770][INFO    ][23485] Running state [/etc/apache2/mods-enabled/mpm_prefork.load] at time 22:43:30.971350
2018-09-01 22:43:30,971 [salt.state       :1803][INFO    ][23485] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_prefork.load]
2018-09-01 22:43:30,971 [salt.state       :290 ][INFO    ][23485] File /etc/apache2/mods-enabled/mpm_prefork.load is not present
2018-09-01 22:43:30,972 [salt.state       :1941][INFO    ][23485] Completed state [/etc/apache2/mods-enabled/mpm_prefork.load] at time 22:43:30.972002 duration_in_ms=0.653
2018-09-01 22:43:30,972 [salt.state       :1770][INFO    ][23485] Running state [/etc/apache2/mods-enabled/mpm_prefork.conf] at time 22:43:30.972177
2018-09-01 22:43:30,972 [salt.state       :1803][INFO    ][23485] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_prefork.conf]
2018-09-01 22:43:30,972 [salt.state       :290 ][INFO    ][23485] File /etc/apache2/mods-enabled/mpm_prefork.conf is not present
2018-09-01 22:43:30,972 [salt.state       :1941][INFO    ][23485] Completed state [/etc/apache2/mods-enabled/mpm_prefork.conf] at time 22:43:30.972728 duration_in_ms=0.551
2018-09-01 22:43:30,972 [salt.state       :1770][INFO    ][23485] Running state [/etc/apache2/mods-enabled/mpm_worker.load] at time 22:43:30.972908
2018-09-01 22:43:30,973 [salt.state       :1803][INFO    ][23485] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_worker.load]
2018-09-01 22:43:30,973 [salt.state       :290 ][INFO    ][23485] File /etc/apache2/mods-enabled/mpm_worker.load is not present
2018-09-01 22:43:30,973 [salt.state       :1941][INFO    ][23485] Completed state [/etc/apache2/mods-enabled/mpm_worker.load] at time 22:43:30.973488 duration_in_ms=0.579
2018-09-01 22:43:30,973 [salt.state       :1770][INFO    ][23485] Running state [/etc/apache2/mods-enabled/mpm_worker.conf] at time 22:43:30.973665
2018-09-01 22:43:30,973 [salt.state       :1803][INFO    ][23485] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_worker.conf]
2018-09-01 22:43:30,974 [salt.state       :290 ][INFO    ][23485] File /etc/apache2/mods-enabled/mpm_worker.conf is not present
2018-09-01 22:43:30,974 [salt.state       :1941][INFO    ][23485] Completed state [/etc/apache2/mods-enabled/mpm_worker.conf] at time 22:43:30.974209 duration_in_ms=0.545
2018-09-01 22:43:30,976 [salt.state       :1770][INFO    ][23485] Running state [/etc/apache2/mods-available/mpm_event.conf] at time 22:43:30.975982
2018-09-01 22:43:30,976 [salt.state       :1803][INFO    ][23485] Executing state file.managed for [/etc/apache2/mods-available/mpm_event.conf]
2018-09-01 22:43:31,025 [salt.state       :290 ][INFO    ][23485] File /etc/apache2/mods-available/mpm_event.conf is in the correct state
2018-09-01 22:43:31,025 [salt.state       :1941][INFO    ][23485] Completed state [/etc/apache2/mods-available/mpm_event.conf] at time 22:43:31.025152 duration_in_ms=49.17
2018-09-01 22:43:31,025 [salt.state       :1770][INFO    ][23485] Running state [a2enmod mpm_event] at time 22:43:31.025876
2018-09-01 22:43:31,026 [salt.state       :1803][INFO    ][23485] Executing state cmd.run for [a2enmod mpm_event]
2018-09-01 22:43:31,026 [salt.state       :290 ][INFO    ][23485] /etc/apache2/mods-enabled/mpm_event.load exists
2018-09-01 22:43:31,026 [salt.state       :1941][INFO    ][23485] Completed state [a2enmod mpm_event] at time 22:43:31.026417 duration_in_ms=0.541
2018-09-01 22:43:31,026 [salt.state       :1770][INFO    ][23485] Running state [apache_server_service_task] at time 22:43:31.026949
2018-09-01 22:43:31,027 [salt.state       :1803][INFO    ][23485] Executing state test.show_notification for [apache_server_service_task]
2018-09-01 22:43:31,027 [salt.state       :290 ][INFO    ][23485] Running apache.server.service
2018-09-01 22:43:31,027 [salt.state       :1941][INFO    ][23485] Completed state [apache_server_service_task] at time 22:43:31.027445 duration_in_ms=0.495
2018-09-01 22:43:31,027 [salt.state       :1770][INFO    ][23485] Running state [/etc/apache2/ports.conf] at time 22:43:31.027814
2018-09-01 22:43:31,027 [salt.state       :1803][INFO    ][23485] Executing state file.managed for [/etc/apache2/ports.conf]
2018-09-01 22:43:31,069 [salt.state       :290 ][INFO    ][23485] File /etc/apache2/ports.conf is in the correct state
2018-09-01 22:43:31,069 [salt.state       :1941][INFO    ][23485] Completed state [/etc/apache2/ports.conf] at time 22:43:31.069448 duration_in_ms=41.635
2018-09-01 22:43:31,069 [salt.state       :1770][INFO    ][23485] Running state [/etc/apache2/conf-available/security.conf] at time 22:43:31.069850
2018-09-01 22:43:31,070 [salt.state       :1803][INFO    ][23485] Executing state file.managed for [/etc/apache2/conf-available/security.conf]
2018-09-01 22:43:31,113 [salt.state       :290 ][INFO    ][23485] File /etc/apache2/conf-available/security.conf is in the correct state
2018-09-01 22:43:31,113 [salt.state       :1941][INFO    ][23485] Completed state [/etc/apache2/conf-available/security.conf] at time 22:43:31.113657 duration_in_ms=43.807
2018-09-01 22:43:31,121 [salt.state       :1770][INFO    ][23485] Running state [/etc/apache2/sites-enabled/000-default.conf] at time 22:43:31.121287
2018-09-01 22:43:31,121 [salt.state       :1803][INFO    ][23485] Executing state file.absent for [/etc/apache2/sites-enabled/000-default.conf]
2018-09-01 22:43:31,121 [salt.state       :290 ][INFO    ][23485] File /etc/apache2/sites-enabled/000-default.conf is not present
2018-09-01 22:43:31,121 [salt.state       :1941][INFO    ][23485] Completed state [/etc/apache2/sites-enabled/000-default.conf] at time 22:43:31.121844 duration_in_ms=0.557
2018-09-01 22:43:31,122 [salt.state       :1770][INFO    ][23485] Running state [/etc/apache2/sites-available/wsgi_barbican_admin.conf] at time 22:43:31.122228
2018-09-01 22:43:31,122 [salt.state       :1803][INFO    ][23485] Executing state file.managed for [/etc/apache2/sites-available/wsgi_barbican_admin.conf]
2018-09-01 22:43:31,269 [salt.state       :290 ][INFO    ][23485] File /etc/apache2/sites-available/wsgi_barbican_admin.conf is in the correct state
2018-09-01 22:43:31,270 [salt.state       :1941][INFO    ][23485] Completed state [/etc/apache2/sites-available/wsgi_barbican_admin.conf] at time 22:43:31.270033 duration_in_ms=147.805
2018-09-01 22:43:31,270 [salt.state       :1770][INFO    ][23485] Running state [/etc/apache2/sites-available/wsgi_barbican.conf] at time 22:43:31.270517
2018-09-01 22:43:31,270 [salt.state       :1803][INFO    ][23485] Executing state file.managed for [/etc/apache2/sites-available/wsgi_barbican.conf]
2018-09-01 22:43:31,443 [salt.state       :290 ][INFO    ][23485] File /etc/apache2/sites-available/wsgi_barbican.conf is in the correct state
2018-09-01 22:43:31,443 [salt.state       :1941][INFO    ][23485] Completed state [/etc/apache2/sites-available/wsgi_barbican.conf] at time 22:43:31.443931 duration_in_ms=173.414
2018-09-01 22:43:31,444 [salt.state       :1770][INFO    ][23485] Running state [/etc/apache2/sites-available/keystone_wsgi.conf] at time 22:43:31.444391
2018-09-01 22:43:31,444 [salt.state       :1803][INFO    ][23485] Executing state file.managed for [/etc/apache2/sites-available/keystone_wsgi.conf]
2018-09-01 22:43:31,646 [salt.state       :290 ][INFO    ][23485] File /etc/apache2/sites-available/keystone_wsgi.conf is in the correct state
2018-09-01 22:43:31,646 [salt.state       :1941][INFO    ][23485] Completed state [/etc/apache2/sites-available/keystone_wsgi.conf] at time 22:43:31.646700 duration_in_ms=202.309
2018-09-01 22:43:31,647 [salt.state       :1770][INFO    ][23485] Running state [/etc/apache2/sites-enabled/keystone_wsgi.conf] at time 22:43:31.647204
2018-09-01 22:43:31,647 [salt.state       :1803][INFO    ][23485] Executing state file.symlink for [/etc/apache2/sites-enabled/keystone_wsgi.conf]
2018-09-01 22:43:31,648 [salt.state       :290 ][INFO    ][23485] Symlink /etc/apache2/sites-enabled/keystone_wsgi.conf is present and owned by root:root
2018-09-01 22:43:31,649 [salt.state       :1941][INFO    ][23485] Completed state [/etc/apache2/sites-enabled/keystone_wsgi.conf] at time 22:43:31.649130 duration_in_ms=1.925
2018-09-01 22:43:31,652 [salt.state       :1770][INFO    ][23485] Running state [apache2] at time 22:43:31.652301
2018-09-01 22:43:31,652 [salt.state       :1803][INFO    ][23485] Executing state service.running for [apache2]
2018-09-01 22:43:31,653 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'status', 'apache2.service', '-n', '0'] in directory '/root'
2018-09-01 22:43:31,706 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-09-01 22:43:31,730 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-09-01 22:43:31,760 [salt.state       :290 ][INFO    ][23485] The service apache2 is already running
2018-09-01 22:43:31,761 [salt.state       :1941][INFO    ][23485] Completed state [apache2] at time 22:43:31.761512 duration_in_ms=109.209
2018-09-01 22:43:31,764 [salt.state       :1770][INFO    ][23485] Running state [/etc/apache2/conf-enabled/security.conf] at time 22:43:31.764380
2018-09-01 22:43:31,765 [salt.state       :1803][INFO    ][23485] Executing state file.symlink for [/etc/apache2/conf-enabled/security.conf]
2018-09-01 22:43:31,769 [salt.state       :290 ][INFO    ][23485] Symlink /etc/apache2/conf-enabled/security.conf is present and owned by root:root
2018-09-01 22:43:31,769 [salt.state       :1941][INFO    ][23485] Completed state [/etc/apache2/conf-enabled/security.conf] at time 22:43:31.769889 duration_in_ms=5.51
2018-09-01 22:43:31,770 [salt.state       :1770][INFO    ][23485] Running state [/etc/apache2/sites-enabled/keystone_wsgi] at time 22:43:31.770171
2018-09-01 22:43:31,770 [salt.state       :1803][INFO    ][23485] Executing state file.absent for [/etc/apache2/sites-enabled/keystone_wsgi]
2018-09-01 22:43:31,770 [salt.state       :290 ][INFO    ][23485] File /etc/apache2/sites-enabled/keystone_wsgi is not present
2018-09-01 22:43:31,771 [salt.state       :1941][INFO    ][23485] Completed state [/etc/apache2/sites-enabled/keystone_wsgi] at time 22:43:31.770972 duration_in_ms=0.801
2018-09-01 22:43:31,782 [salt.state       :1770][INFO    ][23485] Running state [debconf-utils] at time 22:43:31.782049
2018-09-01 22:43:31,782 [salt.state       :1803][INFO    ][23485] Executing state pkg.installed for [debconf-utils]
2018-09-01 22:43:31,793 [salt.state       :290 ][INFO    ][23485] All specified packages are already installed
2018-09-01 22:43:31,793 [salt.state       :1941][INFO    ][23485] Completed state [debconf-utils] at time 22:43:31.793321 duration_in_ms=11.273
2018-09-01 22:43:31,793 [salt.state       :1770][INFO    ][23485] Running state [nova-consoleproxy] at time 22:43:31.793754
2018-09-01 22:43:31,794 [salt.state       :1803][INFO    ][23485] Executing state debconf.set for [nova-consoleproxy]
2018-09-01 22:43:31,794 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command 'debconf-get-selections' in directory '/root'
2018-09-01 22:43:31,963 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command 'debconf-set-selections /tmp/salt-4V1OdE' in directory '/root'
2018-09-01 22:43:32,192 [salt.state       :290 ][INFO    ][23485] {'nova-consoleproxy/daemon_type': 'novnc'}
2018-09-01 22:43:32,194 [salt.state       :1941][INFO    ][23485] Completed state [nova-consoleproxy] at time 22:43:32.194230 duration_in_ms=400.473
2018-09-01 22:43:32,200 [salt.state       :1770][INFO    ][23485] Running state [nova] at time 22:43:32.200367
2018-09-01 22:43:32,200 [salt.state       :1803][INFO    ][23485] Executing state group.present for [nova]
2018-09-01 22:43:32,202 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['groupadd', '-g 303', '-r', 'nova'] in directory '/root'
2018-09-01 22:43:32,347 [salt.state       :290 ][INFO    ][23485] {'passwd': 'x', 'gid': 303, 'name': 'nova', 'members': []}
2018-09-01 22:43:32,349 [salt.state       :1941][INFO    ][23485] Completed state [nova] at time 22:43:32.348891 duration_in_ms=148.524
2018-09-01 22:43:32,350 [salt.state       :1770][INFO    ][23485] Running state [nova] at time 22:43:32.350510
2018-09-01 22:43:32,351 [salt.state       :1803][INFO    ][23485] Executing state user.present for [nova]
2018-09-01 22:43:32,352 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['useradd', '-s', '/bin/false', '-u', '303', '-g', '303', '-m', '-d', '/var/lib/nova', '-r', 'nova'] in directory '/root'
2018-09-01 22:43:32,481 [salt.state       :290 ][INFO    ][23485] {'shell': '/bin/false', 'workphone': '', 'uid': 303, 'passwd': 'x', 'roomnumber': '', 'groups': ['nova'], 'home': '/var/lib/nova', 'name': 'nova', 'gid': 303, 'fullname': '', 'homephone': ''}
2018-09-01 22:43:32,482 [salt.state       :1941][INFO    ][23485] Completed state [nova] at time 22:43:32.482476 duration_in_ms=131.965
2018-09-01 22:43:32,484 [salt.state       :1770][INFO    ][23485] Running state [nova-common] at time 22:43:32.484541
2018-09-01 22:43:32,485 [salt.state       :1803][INFO    ][23485] Executing state pkg.installed for [nova-common]
2018-09-01 22:43:32,507 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['apt-cache', '-q', 'policy', 'nova-common'] in directory '/root'
2018-09-01 22:43:32,597 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-09-01 22:43:34,523 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 22:43:34,551 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'nova-common'] in directory '/root'
2018-09-01 22:43:39,901 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224339896101
2018-09-01 22:43:39,924 [salt.minion      :1431][INFO    ][23962] Starting a new job with PID 23962
2018-09-01 22:43:39,943 [salt.minion      :1708][INFO    ][23962] Returning information for job: 20180901224339896101
2018-09-01 22:43:50,051 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224350043867
2018-09-01 22:43:50,073 [salt.minion      :1431][INFO    ][24116] Starting a new job with PID 24116
2018-09-01 22:43:50,089 [salt.minion      :1708][INFO    ][24116] Returning information for job: 20180901224350043867
2018-09-01 22:44:00,200 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224400190663
2018-09-01 22:44:00,220 [salt.minion      :1431][INFO    ][24398] Starting a new job with PID 24398
2018-09-01 22:44:00,243 [salt.minion      :1708][INFO    ][24398] Returning information for job: 20180901224400190663
2018-09-01 22:44:10,352 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224410345043
2018-09-01 22:44:10,372 [salt.minion      :1431][INFO    ][24643] Starting a new job with PID 24643
2018-09-01 22:44:10,407 [salt.minion      :1708][INFO    ][24643] Returning information for job: 20180901224410345043
2018-09-01 22:44:20,518 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224420511314
2018-09-01 22:44:20,545 [salt.minion      :1431][INFO    ][25379] Starting a new job with PID 25379
2018-09-01 22:44:20,562 [salt.minion      :1708][INFO    ][25379] Returning information for job: 20180901224420511314
2018-09-01 22:44:30,699 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224430692184
2018-09-01 22:44:30,717 [salt.minion      :1431][INFO    ][25610] Starting a new job with PID 25610
2018-09-01 22:44:30,735 [salt.minion      :1708][INFO    ][25610] Returning information for job: 20180901224430692184
2018-09-01 22:44:37,567 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:44:37,617 [salt.state       :290 ][INFO    ][23485] Made the following changes:
'python-pypowervm' changed from 'absent' to '1.1.10-1.0~u16.04+mcp2'
'python-os-win' changed from 'absent' to '3.0.0-1.0~u16.04+mcp2'
'libxrender1' changed from 'absent' to '1:0.9.9-0ubuntu1'
'libavahi-common3' changed from 'absent' to '0.6.32~rc+dfsg-1ubuntu2.2'
'nova-common' changed from 'absent' to '2:17.0.5-5~u16.04+mcp142'
'libthai-data' changed from 'absent' to '0.1.24-2'
'python-os-brick' changed from 'absent' to '2.3.0-1.0~u16.04+mcp2'
'python2.7-gobject-2' changed from 'absent' to '1'
'fonts-dejavu-core' changed from 'absent' to '2.35-1'
'python2.7-cairo' changed from 'absent' to '1'
'python-microversion-parse' changed from 'absent' to '0.1.3-2.1~u16.04+mcp2'
'libgtk2.0-bin' changed from 'absent' to '2.24.30-1ubuntu1.16.04.2'
'python-subunit' changed from 'absent' to '1.2.0-0ubuntu2~cloud0'
'python-paramiko' changed from 'absent' to '2.0.0-1.1~u16.04+mcp2'
'libxdamage1' changed from 'absent' to '1:1.1.4-2'
'libxinerama1' changed from 'absent' to '2:1.1.3-1'
'python-nova' changed from 'absent' to '2:17.0.5-5~u16.04+mcp142'
'fontconfig' changed from 'absent' to '2.11.94-0ubuntu1.1'
'libpixman-1-0' changed from 'absent' to '0.33.6-1'
'libxi6' changed from 'absent' to '2:1.7.6-1'
'python-gtk2' changed from 'absent' to '2.24.0-4ubuntu1'
'python3-mimeparse' changed from 'absent' to '0.1.4-1build1'
'libsubunit-diff-perl' changed from 'absent' to '1'
'python-gobject-2' changed from 'absent' to '2.28.6-12ubuntu1'
'bridge-utils' changed from 'absent' to '1.5-9ubuntu1'
'python3-fixtures' changed from 'absent' to '3.0.0-1.1~u16.04+mcp2'
'python-oslo.versionedobjects' changed from 'absent' to '1.31.3-1.0~u16.04+mcp4'
'websockify' changed from 'absent' to '0.8.0+dfsg1-7~u16.04+mcp2'
'python-junitxml' changed from 'absent' to '0.6-1.1ubuntu1'
'libxfixes3' changed from 'absent' to '1:5.0.1-2'
'libxcomposite1' changed from 'absent' to '1:0.4.4-1'
'python3-extras' changed from 'absent' to '1.0.0-2.0~u16.04+mcp1'
'python-tooz' changed from 'absent' to '1.59.0-1.0~u16.04+mcp1'
'os-brick-common' changed from 'absent' to '2.3.0-1.0~u16.04+mcp2'
'python3-pbr' changed from 'absent' to '3.1.1-3.0~u16.04+mcp1'
'libgtk2.0-0' changed from 'absent' to '2.24.30-1ubuntu1.16.04.2'
'python-pymemcache' changed from 'absent' to '1.3.2-2ubuntu1'
'libpango-1.0-0' changed from 'absent' to '1.38.1-1'
'python3-subunit' changed from 'absent' to '1.2.0-0ubuntu2~cloud0'
'python3-linecache2' changed from 'absent' to '1.0.0-2'
'libgraphite2-3' changed from 'absent' to '1.3.10-0ubuntu0.16.04.1'
'python2.7-paramiko' changed from 'absent' to '1'
'libsubunit-perl' changed from 'absent' to '1.2.0-0ubuntu2~cloud0'
'libxcursor1' changed from 'absent' to '1:1.1.14-1ubuntu0.16.04.2'
'python-oslo.privsep' changed from 'absent' to '1.27.0-1.0~u16.04+mcp2'
'libcups2' changed from 'absent' to '2.1.3-4ubuntu0.5'
'libfontconfig1' changed from 'absent' to '2.11.94-0ubuntu1.1'
'python-redis' changed from 'absent' to '2.10.5-1ubuntu1'
'hicolor-icon-theme' changed from 'absent' to '0.15-0ubuntu1.1'
'libatk1.0-0' changed from 'absent' to '2.18.0-1'
'libgraphite2-2.0.0' changed from 'absent' to '1'
'python-os-vif' changed from 'absent' to '1.9.0-1.0~u16.04+mcp3'
'python-voluptuous' changed from 'absent' to '0.9.3-1.1~u16.04+mcp2'
'python-oslo.rootwrap' changed from 'absent' to '5.13.0-1.0~u16.04+mcp1'
'libavahi-client3' changed from 'absent' to '0.6.32~rc+dfsg-1ubuntu2.2'
'python3-unittest2' changed from 'absent' to '1.1.0-6.1'
'libgdk-pixbuf2.0-common' changed from 'absent' to '2.32.2-1ubuntu1.5'
'python-oslo.reports' changed from 'absent' to '1.26.0-1.0~u16.04+mcp2'
'libxcb-shm0' changed from 'absent' to '1.11.1-1ubuntu1'
'python-os-xenapi' changed from 'absent' to '0.3.1-1.0~u16.04+mcp1'
'libthai0' changed from 'absent' to '0.1.24-2'
'python3-testtools' changed from 'absent' to '2.3.0-1.0~u16.04+mcp1'
'python-zake' changed from 'absent' to '0.1.6-1'
'libxrandr2' changed from 'absent' to '2:1.5.0-1'
'libgdk-pixbuf2.0-0' changed from 'absent' to '2.32.2-1ubuntu1.5'
'python-oslo-rootwrap' changed from 'absent' to '1'
'sqlite3' changed from 'absent' to '3.11.0-1ubuntu1'
'libgtk2.0-common' changed from 'absent' to '2.24.30-1ubuntu1.16.04.2'
'subunit' changed from 'absent' to '1.2.0-0ubuntu2~cloud0'
'libxcb-render0' changed from 'absent' to '1.11.1-1ubuntu1'
'python-os-traits' changed from 'absent' to '0.5.0-1.0~u16.04+mcp2'
'libatk1.0-data' changed from 'absent' to '2.18.0-1'
'libpangoft2-1.0-0' changed from 'absent' to '1.38.1-1'
'python2.7-gobject' changed from 'absent' to '1'
'python-websockify' changed from 'absent' to '0.8.0+dfsg1-7~u16.04+mcp2'
'libfontconfig' changed from 'absent' to '1'
'python-pyasn1-modules' changed from 'absent' to '0.0.7-0.1'
'websockify-common' changed from 'absent' to '0.8.0+dfsg1-7~u16.04+mcp2'
'python2.7-nova' changed from 'absent' to '1'
'python-pyroute2' changed from 'absent' to '0.4.21-0.1~u16.04+mcp1'
'libdatrie1' changed from 'absent' to '0.2.10-2'
'libharfbuzz0b' changed from 'absent' to '1.0.1-1ubuntu0.1'
'python3-traceback2' changed from 'absent' to '1.4.0-3'
'libavahi-common-data' changed from 'absent' to '0.6.32~rc+dfsg-1ubuntu2.2'
'libpangocairo-1.0-0' changed from 'absent' to '1.38.1-1'
'fontconfig-config' changed from 'absent' to '2.11.94-0ubuntu1.1'
'python2.7-pyroute2' changed from 'absent' to '1'
'libcairo2' changed from 'absent' to '1.14.6-1'
'gtk2.0-binver-2.10.0' changed from 'absent' to '1'
'python-cairo' changed from 'absent' to '1.8.8-2'

2018-09-01 22:44:37,638 [salt.state       :905 ][INFO    ][23485] Loading fresh modules for state activity
2018-09-01 22:44:37,664 [salt.state       :1941][INFO    ][23485] Completed state [nova-common] at time 22:44:37.663916 duration_in_ms=65179.373
2018-09-01 22:44:37,672 [salt.state       :1770][INFO    ][23485] Running state [nova-consoleproxy] at time 22:44:37.672579
2018-09-01 22:44:37,672 [salt.state       :1803][INFO    ][23485] Executing state pkg.installed for [nova-consoleproxy]
2018-09-01 22:44:38,234 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 22:44:38,266 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'nova-consoleproxy'] in directory '/root'
2018-09-01 22:44:40,847 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224440839615
2018-09-01 22:44:40,867 [salt.minion      :1431][INFO    ][25882] Starting a new job with PID 25882
2018-09-01 22:44:40,888 [salt.minion      :1708][INFO    ][25882] Returning information for job: 20180901224440839615
2018-09-01 22:44:45,525 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:44:45,574 [salt.state       :290 ][INFO    ][23485] Made the following changes:
'nova-novncproxy' changed from 'absent' to '1'
'nova-xvpvncproxy' changed from 'absent' to '1'
'libjs-swfobject' changed from 'absent' to '2.2+dfsg-1'
'novnc' changed from 'absent' to '1:0.6.1-1.1~u16.04+mcp2'
'spice-html5' changed from 'absent' to '0.1.4-1'
'python-novnc' changed from 'absent' to '1:0.6.1-1.1~u16.04+mcp2'
'nova-spiceproxy' changed from 'absent' to '1'
'nova-ajax-console-proxy' changed from 'absent' to '1'
'nova-spicehtml5proxy' changed from 'absent' to '1'
'nova-consoleproxy' changed from 'absent' to '2:17.0.5-5~u16.04+mcp142'

2018-09-01 22:44:45,593 [salt.state       :905 ][INFO    ][23485] Loading fresh modules for state activity
2018-09-01 22:44:45,615 [salt.state       :1941][INFO    ][23485] Completed state [nova-consoleproxy] at time 22:44:45.615236 duration_in_ms=7942.656
2018-09-01 22:44:45,619 [salt.state       :1770][INFO    ][23485] Running state [novnc] at time 22:44:45.619737
2018-09-01 22:44:45,619 [salt.state       :1803][INFO    ][23485] Executing state pkg.installed for [novnc]
2018-09-01 22:44:46,096 [salt.state       :290 ][INFO    ][23485] All specified packages are already installed
2018-09-01 22:44:46,096 [salt.state       :1941][INFO    ][23485] Completed state [novnc] at time 22:44:46.096685 duration_in_ms=476.947
2018-09-01 22:44:46,097 [salt.state       :1770][INFO    ][23485] Running state [nova-api] at time 22:44:46.097727
2018-09-01 22:44:46,098 [salt.state       :1803][INFO    ][23485] Executing state pkg.installed for [nova-api]
2018-09-01 22:44:46,201 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 22:44:46,235 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'nova-api'] in directory '/root'
2018-09-01 22:44:50,560 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:44:50,613 [salt.state       :290 ][INFO    ][23485] Made the following changes:
'nova-api' changed from 'absent' to '2:17.0.5-5~u16.04+mcp142'

2018-09-01 22:44:50,632 [salt.state       :905 ][INFO    ][23485] Loading fresh modules for state activity
2018-09-01 22:44:50,655 [salt.state       :1941][INFO    ][23485] Completed state [nova-api] at time 22:44:50.655400 duration_in_ms=4557.673
2018-09-01 22:44:50,660 [salt.state       :1770][INFO    ][23485] Running state [nova-conductor] at time 22:44:50.660189
2018-09-01 22:44:50,660 [salt.state       :1803][INFO    ][23485] Executing state pkg.installed for [nova-conductor]
2018-09-01 22:44:51,135 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224450994099
2018-09-01 22:44:51,149 [salt.minion      :1431][INFO    ][26941] Starting a new job with PID 26941
2018-09-01 22:44:51,160 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 22:44:51,164 [salt.minion      :1708][INFO    ][26941] Returning information for job: 20180901224450994099
2018-09-01 22:44:51,193 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'nova-conductor'] in directory '/root'
2018-09-01 22:44:55,441 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:44:55,488 [salt.state       :290 ][INFO    ][23485] Made the following changes:
'nova-conductor' changed from 'absent' to '2:17.0.5-5~u16.04+mcp142'

2018-09-01 22:44:55,507 [salt.state       :905 ][INFO    ][23485] Loading fresh modules for state activity
2018-09-01 22:44:55,529 [salt.state       :1941][INFO    ][23485] Completed state [nova-conductor] at time 22:44:55.529851 duration_in_ms=4869.662
2018-09-01 22:44:55,534 [salt.state       :1770][INFO    ][23485] Running state [nova-consoleauth] at time 22:44:55.534427
2018-09-01 22:44:55,534 [salt.state       :1803][INFO    ][23485] Executing state pkg.installed for [nova-consoleauth]
2018-09-01 22:44:56,021 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 22:44:56,061 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'nova-consoleauth'] in directory '/root'
2018-09-01 22:45:00,139 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:45:00,177 [salt.state       :290 ][INFO    ][23485] Made the following changes:
'nova-consoleauth' changed from 'absent' to '2:17.0.5-5~u16.04+mcp142'

2018-09-01 22:45:00,198 [salt.state       :905 ][INFO    ][23485] Loading fresh modules for state activity
2018-09-01 22:45:00,221 [salt.state       :1941][INFO    ][23485] Completed state [nova-consoleauth] at time 22:45:00.221641 duration_in_ms=4687.213
2018-09-01 22:45:00,226 [salt.state       :1770][INFO    ][23485] Running state [nova-doc] at time 22:45:00.226559
2018-09-01 22:45:00,226 [salt.state       :1803][INFO    ][23485] Executing state pkg.installed for [nova-doc]
2018-09-01 22:45:00,744 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 22:45:00,775 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'nova-doc'] in directory '/root'
2018-09-01 22:45:01,066 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224501059469
2018-09-01 22:45:01,084 [salt.minion      :1431][INFO    ][28020] Starting a new job with PID 28020
2018-09-01 22:45:01,097 [salt.minion      :1708][INFO    ][28020] Returning information for job: 20180901224501059469
2018-09-01 22:45:10,921 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:45:10,971 [salt.state       :290 ][INFO    ][23485] Made the following changes:
'nova-doc' changed from 'absent' to '2:17.0.5-5~u16.04+mcp142'

2018-09-01 22:45:10,994 [salt.state       :905 ][INFO    ][23485] Loading fresh modules for state activity
2018-09-01 22:45:11,017 [salt.state       :1941][INFO    ][23485] Completed state [nova-doc] at time 22:45:11.017380 duration_in_ms=10790.82
2018-09-01 22:45:11,022 [salt.state       :1770][INFO    ][23485] Running state [nova-scheduler] at time 22:45:11.022414
2018-09-01 22:45:11,022 [salt.state       :1803][INFO    ][23485] Executing state pkg.installed for [nova-scheduler]
2018-09-01 22:45:11,543 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224511220846
2018-09-01 22:45:11,561 [salt.minion      :1431][INFO    ][28256] Starting a new job with PID 28256
2018-09-01 22:45:11,575 [salt.minion      :1708][INFO    ][28256] Returning information for job: 20180901224511220846
2018-09-01 22:45:11,681 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 22:45:11,714 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'nova-scheduler'] in directory '/root'
2018-09-01 22:45:15,937 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:45:15,991 [salt.state       :290 ][INFO    ][23485] Made the following changes:
'nova-scheduler' changed from 'absent' to '2:17.0.5-5~u16.04+mcp142'

2018-09-01 22:45:16,012 [salt.state       :905 ][INFO    ][23485] Loading fresh modules for state activity
2018-09-01 22:45:16,037 [salt.state       :1941][INFO    ][23485] Completed state [nova-scheduler] at time 22:45:16.037836 duration_in_ms=5015.421
2018-09-01 22:45:16,043 [salt.state       :1770][INFO    ][23485] Running state [python-novaclient] at time 22:45:16.043087
2018-09-01 22:45:16,043 [salt.state       :1803][INFO    ][23485] Executing state pkg.installed for [python-novaclient]
2018-09-01 22:45:16,565 [salt.state       :290 ][INFO    ][23485] All specified packages are already installed
2018-09-01 22:45:16,565 [salt.state       :1941][INFO    ][23485] Completed state [python-novaclient] at time 22:45:16.565311 duration_in_ms=522.224
2018-09-01 22:45:16,566 [salt.state       :1770][INFO    ][23485] Running state [python-memcache] at time 22:45:16.566435
2018-09-01 22:45:16,566 [salt.state       :1803][INFO    ][23485] Executing state pkg.installed for [python-memcache]
2018-09-01 22:45:16,572 [salt.state       :290 ][INFO    ][23485] All specified packages are already installed
2018-09-01 22:45:16,572 [salt.state       :1941][INFO    ][23485] Completed state [python-memcache] at time 22:45:16.572556 duration_in_ms=6.121
2018-09-01 22:45:16,573 [salt.state       :1770][INFO    ][23485] Running state [gettext-base] at time 22:45:16.573211
2018-09-01 22:45:16,573 [salt.state       :1803][INFO    ][23485] Executing state pkg.installed for [gettext-base]
2018-09-01 22:45:16,578 [salt.state       :290 ][INFO    ][23485] All specified packages are already installed
2018-09-01 22:45:16,578 [salt.state       :1941][INFO    ][23485] Completed state [gettext-base] at time 22:45:16.578464 duration_in_ms=5.253
2018-09-01 22:45:16,579 [salt.state       :1770][INFO    ][23485] Running state [python-pycadf] at time 22:45:16.579178
2018-09-01 22:45:16,579 [salt.state       :1803][INFO    ][23485] Executing state pkg.installed for [python-pycadf]
2018-09-01 22:45:16,584 [salt.state       :290 ][INFO    ][23485] All specified packages are already installed
2018-09-01 22:45:16,584 [salt.state       :1941][INFO    ][23485] Completed state [python-pycadf] at time 22:45:16.584422 duration_in_ms=5.243
2018-09-01 22:45:16,586 [salt.state       :1770][INFO    ][23485] Running state [/etc/nova/nova.conf] at time 22:45:16.586447
2018-09-01 22:45:16,586 [salt.state       :1803][INFO    ][23485] Executing state file.managed for [/etc/nova/nova.conf]
2018-09-01 22:45:16,628 [salt.fileclient  :1215][INFO    ][23485] Fetching file from saltenv 'base', ** done ** 'nova/files/queens/nova-controller.conf.Debian'
2018-09-01 22:45:16,875 [salt.fileclient  :1215][INFO    ][23485] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/queens/castellan/_barbican.conf'
2018-09-01 22:45:16,976 [salt.state       :290 ][INFO    ][23485] File changed:
--- 
+++ 
@@ -1,117 +1,3445 @@
+
 [DEFAULT]
 
 #
+# From nova.conf
+#
+compute_manager=nova.controller.manager.ComputeManager
+network_device_mtu=65000
+use_neutron = True
+security_group_api=neutron
+image_service=nova.image.glance.GlanceImageService
+
+#
+# Availability zone for internal services.
+#
+# This option determines the availability zone for the various
+# internal nova
+# services, such as 'nova-scheduler', 'nova-conductor', etc.
+#
+# Possible values:
+#
+# * Any string representing an existing availability zone name.
+#  (string value)
+#internal_service_availability_zone = internal
+
+#
+# Default availability zone for compute services.
+#
+# This option determines the default availability zone for 'nova-
+# compute'
+# services, which will be used if the service(s) do not belong to
+# aggregates with
+# availability zone metadata.
+#
+# Possible values:
+#
+# * Any string representing an existing availability zone name.
+#  (string value)
+#default_availability_zone = nova
+
+#
+# Default availability zone for instances.
+#
+# This option determines the default availability zone for instances,
+# which will
+# be used when a user does not specify one when creating an instance.
+# The
+# instance(s) will be bound to this availability zone for their
+# lifetime.
+#
+# Possible values:
+#
+# * Any string representing an existing availability zone name.
+# * None, which means that the instance can move from one availability
+# zone to
+#   another during its lifetime if it is moved from one compute node
+# to another.
+#  (string value)
+#default_schedule_zone = <None>
+
+# Length of generated instance admin passwords. (integer value)
+# Minimum value: 0
+#password_length = 12
+
+#
+# Time period to generate instance usages for. It is possible to
+# define optional
+# offset to given period by appending @ character followed by a number
+# defining
+# offset.
+#
+# Possible values:
+#
+# *  period, example: ``hour``, ``day``, ``month` or ``year``
+# *  period with offset, example: ``month@15`` will result in monthly
+# audits
+#    starting on 15th day of month.
+#  (string value)
+#instance_usage_audit_period = month
+
+
+#
+# Start and use a daemon that can run the commands that need to be run
+# with
+# root privileges. This option is usually enabled on nodes that run
+# nova compute
+# processes.
+#  (boolean value)
+#use_rootwrap_daemon = false
+
+#
+# Path to the rootwrap configuration file.
+#
+# Goal of the root wrapper is to allow a service-specific unprivileged
+# user to
+# run a number of actions as the root user in the safest manner
+# possible.
+# The configuration file used here must match the one defined in the
+# sudoers
+# entry.
+#  (string value)
+rootwrap_config = /etc/nova/rootwrap.conf
+
+# Explicitly specify the temporary working directory. (string value)
+#tempdir = <None>
+
+# DEPRECATED:
+# Determine if monkey patching should be applied.
+#
+# Related options:
+#
+# * ``monkey_patch_modules``: This must have values set for this
+# option to
+#   have any effect
+#  (boolean value)
+# This option is deprecated for removal since 17.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# Monkey patching nova is not tested, not supported, and is a barrier
+# for interoperability.
+#monkey_patch = false
+
+# DEPRECATED:
+# List of modules/decorators to monkey patch.
+#
+# This option allows you to patch a decorator for all functions in
+# specified
+# modules.
+#
+# Possible values:
+#
+# * nova.compute.api:nova.notifications.notify_decorator
+# * [...]
+#
+# Related options:
+#
+# * ``monkey_patch``: This must be set to ``True`` for this option to
+#   have any effect
+#  (list value)
+# This option is deprecated for removal since 17.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# Monkey patching nova is not tested, not supported, and is a barrier
+# for interoperability.
+#monkey_patch_modules = nova.compute.api:nova.notifications.notify_decorator
+
+#
+# Defines which driver to use for controlling virtualization.
+#
+# Possible values:
+#
+# * ``libvirt.LibvirtDriver``
+# * ``xenapi.XenAPIDriver``
+# * ``fake.FakeDriver``
+# * ``ironic.IronicDriver``
+# * ``vmwareapi.VMwareVCDriver``
+# * ``hyperv.HyperVDriver``
+# * ``powervm.PowerVMDriver``
+#  (string value)
+#compute_driver = <None>
+compute_driver = libvirt.LibvirtDriver
+
+#
+# Allow destination machine to match source for resize. Useful when
+# testing in single-host environments. By default it is not allowed
+# to resize to the same host. Setting this option to true will add
+# the same host to the destination options. Also set to true
+# if you allow the ServerGroupAffinityFilter and need to resize.
+#  (boolean value)
+#allow_resize_to_same_host = false
+allow_resize_to_same_host = true
+
+#
+# Image properties that should not be inherited from the instance
+# when taking a snapshot.
+#
+# This option gives an opportunity to select which image-properties
+# should not be inherited by newly created snapshots.
+#
+# Possible values:
+#
+# * A comma-separated list whose item is an image property. Usually
+# only
+#   the image properties that are only needed by base images can be
+# included
+#   here, since the snapshots that are created from the base images
+# don't
+#   need them.
+# * Default list: cache_in_nova, bittorrent,
+# img_signature_hash_method,
+#                 img_signature, img_signature_key_type,
+#                 img_signature_certificate_uuid
+#
+#  (list value)
+#non_inheritable_image_properties = cache_in_nova,bittorrent,img_signature_hash_method,img_signature,img_signature_key_type,img_signature_certificate_uuid
+
+# DEPRECATED:
+# When creating multiple instances with a single request using the
+# os-multiple-create API extension, this template will be used to
+# build
+# the display name for each instance. The benefit is that the
+# instances
+# end up with different hostnames. Example display names when creating
+# two VM's: name-1, name-2.
+#
+# Possible values:
+#
+# * Valid keys for the template are: name, uuid, count.
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# This config changes API behaviour. All changes in API behaviour
+# should be
+# discoverable.
+#multi_instance_display_name_template = %(name)s-%(count)d
+
+#
+# Maximum number of devices that will result in a local image being
+# created on the hypervisor node.
+#
+# A negative number means unlimited. Setting max_local_block_devices
+# to 0 means that any request that attempts to create a local disk
+# will fail. This option is meant to limit the number of local discs
+# (so root local disc that is the result of --image being used, and
+# any other ephemeral and swap disks). 0 does not mean that images
+# will be automatically converted to volumes and boot instances from
+# volumes - it just means that all requests that attempt to create a
+# local disk will fail.
+#
+# Possible values:
+#
+# * 0: Creating a local disk is not allowed.
+# * Negative number: Allows unlimited number of local discs.
+# * Positive number: Allows only these many number of local discs.
+#                        (Default value is 3).
+#  (integer value)
+#max_local_block_devices = 3
+
+#
+# A comma-separated list of monitors that can be used for getting
+# compute metrics. You can use the alias/name from the setuptools
+# entry points for nova.compute.monitors.* namespaces. If no
+# namespace is supplied, the "cpu." namespace is assumed for
+# backwards-compatibility.
+#
+# NOTE: Only one monitor per namespace (For example: cpu) can be
+# loaded at
+# a time.
+#
+# Possible values:
+#
+# * An empty list will disable the feature (Default).
+# * An example value that would enable both the CPU and NUMA memory
+#   bandwidth monitors that use the virt driver variant:
+#
+#     compute_monitors = cpu.virt_driver, numa_mem_bw.virt_driver
+#  (list value)
+#compute_monitors =
+
+#
+# The default format an ephemeral_volume will be formatted with on
+# creation.
+#
+# Possible values:
+#
+# * ``ext2``
+# * ``ext3``
+# * ``ext4``
+# * ``xfs``
+# * ``ntfs`` (only for Windows guests)
+#  (string value)
+#default_ephemeral_format = <None>
+
+#
+# Determine if instance should boot or fail on VIF plugging timeout.
+#
+# Nova sends a port update to Neutron after an instance has been
+# scheduled,
+# providing Neutron with the necessary information to finish setup of
+# the port.
+# Once completed, Neutron notifies Nova that it has finished setting
+# up the
+# port, at which point Nova resumes the boot of the instance since
+# network
+# connectivity is now supposed to be present. A timeout will occur if
+# the reply
+# is not received after a given interval.
+#
+# This option determines what Nova does when the VIF plugging timeout
+# event
+# happens. When enabled, the instance will error out. When disabled,
+# the
+# instance will continue to boot on the assumption that the port is
+# ready.
+#
+# Possible values:
+#
+# * True: Instances should fail after VIF plugging timeout
+# * False: Instances should continue booting after VIF plugging
+# timeout
+#  (boolean value)
+vif_plugging_is_fatal = true
+
+#
+# Timeout for Neutron VIF plugging event message arrival.
+#
+# Number of seconds to wait for Neutron vif plugging events to
+# arrive before continuing or failing (see 'vif_plugging_is_fatal').
+#
+# Related options:
+#
+# * vif_plugging_is_fatal - If ``vif_plugging_timeout`` is set to zero
+# and
+#   ``vif_plugging_is_fatal`` is False, events should not be expected
+# to
+#   arrive at all.
+#  (integer value)
+# Minimum value: 0
+vif_plugging_timeout = 300
+
+# Path to '/etc/network/interfaces' template.
+#
+# The path to a template file for the '/etc/network/interfaces'-style
+# file, which
+# will be populated by nova and subsequently used by cloudinit. This
+# provides a
+# method to configure network connectivity in environments without a
+# DHCP server.
+#
+# The template will be rendered using Jinja2 template engine, and
+# receive a
+# top-level key called ``interfaces``. This key will contain a list of
+# dictionaries, one for each interface.
+#
+# Refer to the cloudinit documentaion for more information:
+#
+#   https://cloudinit.readthedocs.io/en/latest/topics/datasources.html
+#
+# Possible values:
+#
+# * A path to a Jinja2-formatted template for a Debian
+# '/etc/network/interfaces'
+#   file. This applies even if using a non Debian-derived guest.
+#
+# Related options:
+#
+# * ``flat_inject``: This must be set to ``True`` to ensure nova
+# embeds network
+#   configuration information in the metadata provided through the
+# config drive.
+#  (string value)
+#injected_network_template = $pybasedir/nova/virt/interfaces.template
+
+#
+# The image preallocation mode to use.
+#
+# Image preallocation allows storage for instance images to be
+# allocated up front
+# when the instance is initially provisioned. This ensures immediate
+# feedback is
+# given if enough space isn't available. In addition, it should
+# significantly
+# improve performance on writes to new blocks and may even improve I/O
+# performance to prewritten blocks due to reduced fragmentation.
+#
+# Possible values:
+#
+# * "none"  => no storage provisioning is done up front
+# * "space" => storage is fully allocated at instance start
+#  (string value)
+# Possible values:
+# none - <No description provided>
+# space - <No description provided>
+#preallocate_images = none
+
+#
+# Enable use of copy-on-write (cow) images.
+#
+# QEMU/KVM allow the use of qcow2 as backing files. By disabling this,
+# backing files will not be used.
+#  (boolean value)
+#use_cow_images = true
+
+#
+# Force conversion of backing images to raw format.
+#
+# Possible values:
+#
+# * True: Backing image files will be converted to raw image format
+# * False: Backing image files will not be converted
+#
+# Related options:
+#
+# * ``compute_driver``: Only the libvirt driver uses this option.
+#  (boolean value)
+#force_raw_images = true
+
+#
+# Name of the mkfs commands for ephemeral device.
+#
+# The format is <os_type>=<mkfs command>
+#  (multi valued)
+#virt_mkfs =
+
+#
+# Enable resizing of filesystems via a block device.
+#
+# If enabled, attempt to resize the filesystem by accessing the image
+# over a
+# block device. This is done by the host and may not be necessary if
+# the image
+# contains a recent version of cloud-init. Possible mechanisms require
+# the nbd
+# driver (for qcow and raw), or loop (for raw).
+#  (boolean value)
+#resize_fs_using_block_device = false
+
+# Amount of time, in seconds, to wait for NBD device start up.
+# (integer value)
+# Minimum value: 0
+#timeout_nbd = 10
+
+#
+# Location of cached images.
+#
+# This is NOT the full path - just a folder name relative to
+# '$instances_path'.
+# For per-compute-host cached images, set to '_base_$my_ip'
+#  (string value)
+#image_cache_subdirectory_name = _base
+
+# Should unused base images be removed? (boolean value)
+#remove_unused_base_images = true
+
+#
+# Unused unresized base images younger than this will not be removed.
+#  (integer value)
+remove_unused_original_minimum_age_seconds = 86400
+
+#
+# Generic property to specify the pointer type.
+#
+# Input devices allow interaction with a graphical framebuffer. For
+# example to provide a graphic tablet for absolute cursor movement.
+#
+# If set, the 'hw_pointer_model' image property takes precedence over
+# this configuration option.
+#
+# Possible values:
+#
+# * None: Uses default behavior provided by drivers (mouse on PS2 for
+#         libvirt x86)
+# * ps2mouse: Uses relative movement. Mouse connected by PS2
+# * usbtablet: Uses absolute movement. Tablet connect by USB
+#
+# Related options:
+#
+# * usbtablet must be configured with VNC enabled or SPICE enabled and
+# SPICE
+#   agent disabled. When used with libvirt the instance mode should be
+#   configured as HVM.
+#   (string value)
+# Possible values:
+# <None> - <No description provided>
+# ps2mouse - <No description provided>
+# usbtablet - <No description provided>
+#pointer_model = usbtablet
+
+#
+# Defines which physical CPUs (pCPUs) can be used by instance
+# virtual CPUs (vCPUs).
+#
+# Possible values:
+#
+# * A comma-separated list of physical CPU numbers that virtual CPUs
+# can be
+#   allocated to by default. Each element should be either a single
+# CPU number,
+#   a range of CPU numbers, or a caret followed by a CPU number to be
+#   excluded from a previous range. For example:
+#
+#     vcpu_pin_set = "4-12,^8,15"
+#  (string value)
+#vcpu_pin_set = <None>
+
+#
+# Number of huge/large memory pages to reserved per NUMA host cell.
+#
+# Possible values:
+#
+# * A list of valid key=value which reflect NUMA node ID, page size
+#   (Default unit is KiB) and number of pages to be reserved.
+#
+#     reserved_huge_pages = node:0,size:2048,count:64
+#     reserved_huge_pages = node:1,size:1GB,count:1
+#
+#   In this example we are reserving on NUMA node 0 64 pages of 2MiB
+#   and on NUMA node 1 1 page of 1GiB.
+#  (dict value)
+#reserved_huge_pages = <None>
+
+#
+# Amount of disk resources in MB to make them always available to
+# host. The
+# disk usage gets reported back to the scheduler from nova-compute
+# running
+# on the compute nodes. To prevent the disk resources from being
+# considered
+# as available, this option can be used to reserve disk space for that
+# host.
+#
+# Possible values:
+#
+# * Any positive integer representing amount of disk in MB to reserve
+#   for the host.
+#  (integer value)
+# Minimum value: 0
+#reserved_host_disk_mb = 0
+
+#
+# Amount of memory in MB to reserve for the host so that it is always
+# available
+# to host processes. The host resources usage is reported back to the
+# scheduler
+# continuously from nova-compute running on the compute node. To
+# prevent the host
+# memory from being considered as available, this option is used to
+# reserve
+# memory for the host.
+#
+# Possible values:
+#
+# * Any positive integer representing amount of memory in MB to
+# reserve
+#   for the host.
+#  (integer value)
+# Minimum value: 0
+#reserved_host_memory_mb = 512
+
+#
+# Number of physical CPUs to reserve for the host. The host resources
+# usage is
+# reported back to the scheduler continuously from nova-compute
+# running on the
+# compute node. To prevent the host CPU from being considered as
+# available,
+# this option is used to reserve random pCPU(s) for the host.
+#
+# Possible values:
+#
+# * Any positive integer representing number of physical CPUs to
+# reserve
+#   for the host.
+#  (integer value)
+# Minimum value: 0
+#reserved_host_cpus = 0
+
+#
+# This option helps you specify virtual CPU to physical CPU allocation
+# ratio.
+#
+# From Ocata (15.0.0) this is used to influence the hosts selected by
+# the Placement API. Note that when Placement is used, the CoreFilter
+# is redundant, because the Placement API will have already filtered
+# out hosts that would have failed the CoreFilter.
+#
+# This configuration specifies ratio for CoreFilter which can be set
+# per compute node. For AggregateCoreFilter, it will fall back to this
+# configuration value if no per-aggregate setting is found.
+#
+# NOTE: This can be set per-compute, or if set to 0.0, the value
+# set on the scheduler node(s) or compute node(s) will be used
+# and defaulted to 16.0.
+#
+# NOTE: As of the 16.0.0 Pike release, this configuration option is
+# ignored
+# for the ironic.IronicDriver compute driver and is hardcoded to 1.0.
+#
+# Possible values:
+#
+# * Any valid positive integer or float value
+#  (floating point value)
+# Minimum value: 0
+#cpu_allocation_ratio = 0.0
+cpu_allocation_ratio = 16.0
+
+#
+# This option helps you specify virtual RAM to physical RAM
+# allocation ratio.
+#
+# From Ocata (15.0.0) this is used to influence the hosts selected by
+# the Placement API. Note that when Placement is used, the RamFilter
+# is redundant, because the Placement API will have already filtered
+# out hosts that would have failed the RamFilter.
+#
+# This configuration specifies ratio for RamFilter which can be set
+# per compute node. For AggregateRamFilter, it will fall back to this
+# configuration value if no per-aggregate setting found.
+#
+# NOTE: This can be set per-compute, or if set to 0.0, the value
+# set on the scheduler node(s) or compute node(s) will be used and
+# defaulted to 1.5.
+#
+# NOTE: As of the 16.0.0 Pike release, this configuration option is
+# ignored
+# for the ironic.IronicDriver compute driver and is hardcoded to 1.0.
+#
+# Possible values:
+#
+# * Any valid positive integer or float value
+#  (floating point value)
+# Minimum value: 0
+#ram_allocation_ratio = 0.0
+ram_allocation_ratio = 1.5
+
+#
+# This option helps you specify virtual disk to physical disk
+# allocation ratio.
+#
+# From Ocata (15.0.0) this is used to influence the hosts selected by
+# the Placement API. Note that when Placement is used, the DiskFilter
+# is redundant, because the Placement API will have already filtered
+# out hosts that would have failed the DiskFilter.
+#
+# A ratio greater than 1.0 will result in over-subscription of the
+# available physical disk, which can be useful for more
+# efficiently packing instances created with images that do not
+# use the entire virtual disk, such as sparse or compressed
+# images. It can be set to a value between 0.0 and 1.0 in order
+# to preserve a percentage of the disk for uses other than
+# instances.
+#
+# NOTE: This can be set per-compute, or if set to 0.0, the value
+# set on the scheduler node(s) or compute node(s) will be used and
+# defaulted to 1.0.
+#
+# NOTE: As of the 16.0.0 Pike release, this configuration option is
+# ignored
+# for the ironic.IronicDriver compute driver and is hardcoded to 1.0.
+#
+# Possible values:
+#
+# * Any valid positive integer or float value
+#  (floating point value)
+# Minimum value: 0
+#disk_allocation_ratio = 0.0
+
+#
+# Console proxy host to be used to connect to instances on this host.
+# It is the
+# publicly visible name for the console host.
+#
+# Possible values:
+#
+# * Current hostname (default) or any string representing hostname.
+#  (string value)
+#console_host = <current_hostname>
+
+#
+# Name of the network to be used to set access IPs for instances. If
+# there are
+# multiple IPs to choose from, an arbitrary one will be chosen.
+#
+# Possible values:
+#
+# * None (default)
+# * Any string representing network name.
+#  (string value)
+#default_access_ip_network_name = <None>
+
+#
+# Whether to batch up the application of IPTables rules during a host
+# restart
+# and apply all at the end of the init phase.
+#  (boolean value)
+#defer_iptables_apply = false
+
+#
+# Specifies where instances are stored on the hypervisor's disk.
+# It can point to locally attached storage or a directory on NFS.
+#
+# Possible values:
+#
+# * $state_path/instances where state_path is a config option that
+# specifies
+#   the top-level directory for maintaining nova's state. (default) or
+#   Any string representing directory path.
+#  (string value)
+#instances_path =
+
+#
+# This option enables periodic compute.instance.exists notifications.
+# Each
+# compute node must be configured to generate system usage data. These
+# notifications are consumed by OpenStack Telemetry service.
+#  (boolean value)
+#instance_usage_audit = false
+
+
+#
+# Maximum number of 1 second retries in live_migration. It specifies
+# number
+# of retries to iptables when it complains. It happens when an user
+# continuously
+# sends live-migration request to same host leading to concurrent
+# request
+# to iptables.
+#
+# Possible values:
+#
+# * Any positive integer representing retry count.
+#  (integer value)
+# Minimum value: 0
+#live_migration_retry_count = 30
+
+#
+# This option specifies whether to start guests that were running
+# before the
+# host rebooted. It ensures that all of the instances on a Nova
+# compute node
+# resume their state each time the compute node boots or restarts.
+#  (boolean value)
+#resume_guests_state_on_host_boot = True
+
+#
+# Number of times to retry network allocation. It is required to
+# attempt network
+# allocation retries if the virtual interface plug fails.
+#
+# Possible values:
+#
+# * Any positive integer representing retry count.
+#  (integer value)
+# Minimum value: 0
+#network_allocate_retries = 0
+
+#
+# Limits the maximum number of instance builds to run concurrently by
+# nova-compute. Compute service can attempt to build an infinite
+# number of
+# instances, if asked to do so. This limit is enforced to avoid
+# building
+# unlimited instance concurrently on a compute node. This value can be
+# set
+# per compute node.
+#
+# Possible Values:
+#
+# * 0 : treated as unlimited.
+# * Any positive integer representing maximum concurrent builds.
+#  (integer value)
+# Minimum value: 0
+#max_concurrent_builds = 10
+
+#
+# Maximum number of live migrations to run concurrently. This limit is
+# enforced
+# to avoid outbound live migrations overwhelming the host/network and
+# causing
+# failures. It is not recommended that you change this unless you are
+# very sure
+# that doing so is safe and stable in your environment.
+#
+# Possible values:
+#
+# * 0 : treated as unlimited.
+# * Negative value defaults to 0.
+# * Any positive integer representing maximum number of live
+# migrations
+#   to run concurrently.
+#  (integer value)
+#max_concurrent_live_migrations = 1
+
+#
+# Number of times to retry block device allocation on failures.
+# Starting with
+# Liberty, Cinder can use image volume cache. This may help with block
+# device
+# allocation performance. Look at the cinder
+# image_volume_cache_enabled
+# configuration option.
+#
+# Possible values:
+#
+# * 60 (default)
+# * If value is 0, then one attempt is made.
+# * Any negative value is treated as 0.
+# * For any value > 0, total attempts are (value + 1)
+#  (integer value)
+block_device_allocate_retries = 600
+
+#
+# Number of greenthreads available for use to sync power states.
+#
+# This option can be used to reduce the number of concurrent requests
+# made to the hypervisor or system with real instance power states
+# for performance reasons, for example, with Ironic.
+#
+# Possible values:
+#
+# * Any positive integer representing greenthreads count.
+#  (integer value)
+#sync_power_state_pool_size = 1000
+
+#
+# Number of seconds to wait between runs of the image cache manager.
+#
+# Possible values:
+# * 0: run at the default rate.
+# * -1: disable
+# * Any other value
+#  (integer value)
+# Minimum value: -1
+# image_cache_manager_interval = 0
+
+#
+# Interval to pull network bandwidth usage info.
+#
+# Not supported on all hypervisors. If a hypervisor doesn't support
+# bandwidth
+# usage, it will not get the info in the usage events.
+#
+# Possible values:
+#
+# * 0: Will run at the default periodic interval.
+# * Any value < 0: Disables the option.
+# * Any positive integer in seconds.
+#  (integer value)
+#bandwidth_poll_interval = 600
+
+#
+# Interval to sync power states between the database and the
+# hypervisor.
+#
+# The interval that Nova checks the actual virtual machine power state
+# and the power state that Nova has in its database. If a user powers
+# down their VM, Nova updates the API to report the VM has been
+# powered down. Should something turn on the VM unexpectedly,
+# Nova will turn the VM back off to keep the system in the expected
+# state.
+#
+# Possible values:
+#
+# * 0: Will run at the default periodic interval.
+# * Any value < 0: Disables the option.
+# * Any positive integer in seconds.
+#
+# Related options:
+#
+# * If ``handle_virt_lifecycle_events`` in workarounds_group is
+#   false and this option is negative, then instances that get out
+#   of sync between the hypervisor and the Nova database will have
+#   to be synchronized manually.
+#  (integer value)
+#sync_power_state_interval = 600
+
+#
+# Interval between instance network information cache updates.
+#
+# Number of seconds after which each compute node runs the task of
+# querying Neutron for all of its instances networking information,
+# then updates the Nova db with that information. Nova will never
+# update it's cache if this option is set to 0. If we don't update the
+# cache, the metadata service and nova-api endpoints will be proxying
+# incorrect network data about the instance. So, it is not recommended
+# to set this option to 0.
+#
+# Possible values:
+#
+# * Any positive integer in seconds.
+# * Any value <=0 will disable the sync. This is not recommended.
+#  (integer value)
+#heal_instance_info_cache_interval = 60
+
+#
+# Interval for reclaiming deleted instances.
+#
+# A value greater than 0 will enable SOFT_DELETE of instances.
+# This option decides whether the server to be deleted will be put
+# into
+# the SOFT_DELETED state. If this value is greater than 0, the deleted
+# server will not be deleted immediately, instead it will be put into
+# a queue until it's too old (deleted time greater than the value of
+# reclaim_instance_interval). The server can be recovered from the
+# delete queue by using the restore action. If the deleted server
+# remains
+# longer than the value of reclaim_instance_interval, it will be
+# deleted by a periodic task in the compute service automatically.
+#
+# Note that this option is read from both the API and compute nodes,
+# and
+# must be set globally otherwise servers could be put into a soft
+# deleted
+# state in the API and never actually reclaimed (deleted) on the
+# compute
+# node.
+#
+# Possible values:
+#
+# * Any positive integer(in seconds) greater than 0 will enable
+#   this option.
+# * Any value <=0 will disable the option.
+#  (integer value)
+#reclaim_instance_interval = 0
+
+#
+# Interval for gathering volume usages.
+#
+# This option updates the volume usage cache for every
+# volume_usage_poll_interval number of seconds.
+#
+# Possible values:
+#
+# * Any positive integer(in seconds) greater than 0 will enable
+#   this option.
+# * Any value <=0 will disable the option.
+#  (integer value)
+#volume_usage_poll_interval = 0
+
+#
+# Interval for polling shelved instances to offload.
+#
+# The periodic task runs for every shelved_poll_interval number
+# of seconds and checks if there are any shelved instances. If it
+# finds a shelved instance, based on the 'shelved_offload_time' config
+# value it offloads the shelved instances. Check
+# 'shelved_offload_time'
+# config option description for details.
+#
+# Possible values:
+#
+# * Any value <= 0: Disables the option.
+# * Any positive integer in seconds.
+#
+# Related options:
+#
+# * ``shelved_offload_time``
+#  (integer value)
+#shelved_poll_interval = 3600
+
+#
+# Time before a shelved instance is eligible for removal from a host.
+#
+# By default this option is set to 0 and the shelved instance will be
+# removed from the hypervisor immediately after shelve operation.
+# Otherwise, the instance will be kept for the value of
+# shelved_offload_time(in seconds) so that during the time period the
+# unshelve action will be faster, then the periodic task will remove
+# the instance from hypervisor after shelved_offload_time passes.
+#
+# Possible values:
+#
+# * 0: Instance will be immediately offloaded after being
+#      shelved.
+# * Any value < 0: An instance will never offload.
+# * Any positive integer in seconds: The instance will exist for
+#   the specified number of seconds before being offloaded.
+#  (integer value)
+#shelved_offload_time = 0
+
+#
+# Interval for retrying failed instance file deletes.
+#
+# This option depends on 'maximum_instance_delete_attempts'.
+# This option specifies how often to retry deletes whereas
+# 'maximum_instance_delete_attempts' specifies the maximum number
+# of retry attempts that can be made.
+#
+# Possible values:
+#
+# * 0: Will run at the default periodic interval.
+# * Any value < 0: Disables the option.
+# * Any positive integer in seconds.
+#
+# Related options:
+#
+# * ``maximum_instance_delete_attempts`` from instance_cleaning_opts
+#   group.
+#  (integer value)
+#instance_delete_interval = 300
+
+#
+# Interval (in seconds) between block device allocation retries on
+# failures.
+#
+# This option allows the user to specify the time interval between
+# consecutive retries. 'block_device_allocate_retries' option
+# specifies
+# the maximum number of retries.
+#
+# Possible values:
+#
+# * 0: Disables the option.
+# * Any positive integer in seconds enables the option.
+#
+# Related options:
+#
+# * ``block_device_allocate_retries`` in compute_manager_opts group.
+#  (integer value)
+# Minimum value: 0
+block_device_allocate_retries_interval = 10
+
+#
+# Interval between sending the scheduler a list of current instance
+# UUIDs to
+# verify that its view of instances is in sync with nova.
+#
+# If the CONF option 'scheduler_tracks_instance_changes' is
+# False, the sync calls will not be made. So, changing this option
+# will
+# have no effect.
+#
+# If the out of sync situations are not very common, this interval
+# can be increased to lower the number of RPC messages being sent.
+# Likewise, if sync issues turn out to be a problem, the interval
+# can be lowered to check more frequently.
+#
+# Possible values:
+#
+# * 0: Will run at the default periodic interval.
+# * Any value < 0: Disables the option.
+# * Any positive integer in seconds.
+#
+# Related options:
+#
+# * This option has no impact if ``scheduler_tracks_instance_changes``
+#   is set to False.
+#  (integer value)
+#scheduler_instance_sync_interval = 120
+
+#
+# Interval for updating compute resources.
+#
+# This option specifies how often the update_available_resources
+# periodic task should run. A number less than 0 means to disable the
+# task completely. Leaving this at the default of 0 will cause this to
+# run at the default periodic interval. Setting it to any positive
+# value will cause it to run at approximately that number of seconds.
+#
+# Possible values:
+#
+# * 0: Will run at the default periodic interval.
+# * Any value < 0: Disables the option.
+# * Any positive integer in seconds.
+#  (integer value)
+#update_resources_interval = 0
+
+#
+# Time interval after which an instance is hard rebooted
+# automatically.
+#
+# When doing a soft reboot, it is possible that a guest kernel is
+# completely hung in a way that causes the soft reboot task
+# to not ever finish. Setting this option to a time period in seconds
+# will automatically hard reboot an instance if it has been stuck
+# in a rebooting state longer than N seconds.
+#
+# Possible values:
+#
+# * 0: Disables the option (default).
+# * Any positive integer in seconds: Enables the option.
+#  (integer value)
+# Minimum value: 0
+#reboot_timeout = 0
+
+#
+# Maximum time in seconds that an instance can take to build.
+#
+# If this timer expires, instance status will be changed to ERROR.
+# Enabling this option will make sure an instance will not be stuck
+# in BUILD state for a longer period.
+#
+# Possible values:
+#
+# * 0: Disables the option (default)
+# * Any positive integer in seconds: Enables the option.
+#  (integer value)
+# Minimum value: 0
+#instance_build_timeout = 0
+
+#
+# Interval to wait before un-rescuing an instance stuck in RESCUE.
+#
+# Possible values:
+#
+# * 0: Disables the option (default)
+# * Any positive integer in seconds: Enables the option.
+#  (integer value)
+# Minimum value: 0
+#rescue_timeout = 0
+
+#
+# Automatically confirm resizes after N seconds.
+#
+# Resize functionality will save the existing server before resizing.
+# After the resize completes, user is requested to confirm the resize.
+# The user has the opportunity to either confirm or revert all
+# changes. Confirm resize removes the original server and changes
+# server status from resized to active. Setting this option to a time
+# period (in seconds) will automatically confirm the resize if the
+# server is in resized state longer than that time.
+#
+# Possible values:
+#
+# * 0: Disables the option (default)
+# * Any positive integer in seconds: Enables the option.
+#  (integer value)
+# Minimum value: 0
+#resize_confirm_window = 0
+
+#
+# Total time to wait in seconds for an instance toperform a clean
+# shutdown.
+#
+# It determines the overall period (in seconds) a VM is allowed to
+# perform a clean shutdown. While performing stop, rescue and shelve,
+# rebuild operations, configuring this option gives the VM a chance
+# to perform a controlled shutdown before the instance is powered off.
+# The default timeout is 60 seconds.
+#
+# The timeout value can be overridden on a per image basis by means
+# of os_shutdown_timeout that is an image metadata setting allowing
+# different types of operating systems to specify how much time they
+# need to shut down cleanly.
+#
+# Possible values:
+#
+# * Any positive integer in seconds (default value is 60).
+#  (integer value)
+# Minimum value: 1
+#shutdown_timeout = 60
+
+#
+# The compute service periodically checks for instances that have been
+# deleted in the database but remain running on the compute node. The
+# above option enables action to be taken when such instances are
+# identified.
+#
+# Possible values:
+#
+# * reap: Powers down the instances and deletes them(default)
+# * log: Logs warning message about deletion of the resource
+# * shutdown: Powers down instances and marks them as non-
+#   bootable which can be later used for debugging/analysis
+# * noop: Takes no action
+#
+# Related options:
+#
+# * running_deleted_instance_poll_interval
+# * running_deleted_instance_timeout
+#  (string value)
+# Possible values:
+# noop - <No description provided>
+# log - <No description provided>
+# shutdown - <No description provided>
+# reap - <No description provided>
+#running_deleted_instance_action = reap
+
+#
+# Time interval in seconds to wait between runs for the clean up
+# action.
+# If set to 0, above check will be disabled. If
+# "running_deleted_instance
+# _action" is set to "log" or "reap", a value greater than 0 must be
+# set.
+#
+# Possible values:
+#
+# * Any positive integer in seconds enables the option.
+# * 0: Disables the option.
+# * 1800: Default value.
+#
+# Related options:
+#
+# * running_deleted_instance_action
+#  (integer value)
+#running_deleted_instance_poll_interval = 1800
+
+#
+# Time interval in seconds to wait for the instances that have
+# been marked as deleted in database to be eligible for cleanup.
+#
+# Possible values:
+#
+# * Any positive integer in seconds(default is 0).
+#
+# Related options:
+#
+# * "running_deleted_instance_action"
+#  (integer value)
+#running_deleted_instance_timeout = 0
+
+#
+# The number of times to attempt to reap an instance's files.
+#
+# This option specifies the maximum number of retry attempts
+# that can be made.
+#
+# Possible values:
+#
+# * Any positive integer defines how many attempts are made.
+# * Any value <=0 means no delete attempts occur, but you should use
+#   ``instance_delete_interval`` to disable the delete attempts.
+#
+# Related options:
+# * ``instance_delete_interval`` in interval_opts group can be used to
+# disable
+#   this option.
+#  (integer value)
+#maximum_instance_delete_attempts = 5
+
+#
+# Sets the scope of the check for unique instance names.
+#
+# The default doesn't check for unique names. If a scope for the name
+# check is
+# set, a launch of a new instance or an update of an existing instance
+# with a
+# duplicate name will result in an ''InstanceExists'' error. The
+# uniqueness is
+# case-insensitive. Setting this option can increase the usability for
+# end
+# users as they don't have to distinguish among instances with the
+# same name
+# by their IDs.
+#
+# Possible values:
+#
+# * '': An empty value means that no uniqueness check is done and
+# duplicate
+#   names are possible.
+# * "project": The instance name check is done only for instances
+# within the
+#   same project.
+# * "global": The instance name check is done for all instances
+# regardless of
+#   the project.
+#  (string value)
+# Possible values:
+# '' - <No description provided>
+# project - <No description provided>
+# global - <No description provided>
+#osapi_compute_unique_server_name_scope =
+
+#
+# Enable new nova-compute services on this host automatically.
+#
+# When a new nova-compute service starts up, it gets
+# registered in the database as an enabled service. Sometimes it can
+# be useful
+# to register new compute services in disabled state and then enabled
+# them at a
+# later point in time. This option only sets this behavior for nova-
+# compute
+# services, it does not auto-disable other services like nova-
+# conductor,
+# nova-scheduler, nova-consoleauth, or nova-osapi_compute.
+#
+# Possible values:
+#
+# * ``True``: Each new compute service is enabled as soon as it
+# registers itself.
+# * ``False``: Compute services must be enabled via an os-services
+# REST API call
+#   or with the CLI with ``nova service-enable <hostname> <binary>``,
+# otherwise
+#   they are not ready to use.
+#  (boolean value)
+#enable_new_services = true
+
+#
+# Template string to be used to generate instance names.
+#
+# This template controls the creation of the database name of an
+# instance. This
+# is *not* the display name you enter when creating an instance (via
+# Horizon
+# or CLI). For a new deployment it is advisable to change the default
+# value
+# (which uses the database autoincrement) to another value which makes
+# use
+# of the attributes of an instance, like ``instance-%(uuid)s``. If you
+# already have instances in your deployment when you change this, your
+# deployment will break.
+#
+# Possible values:
+#
+# * A string which either uses the instance database ID (like the
+#   default)
+# * A string with a list of named database columns, for example
+# ``%(id)d``
+#   or ``%(uuid)s`` or ``%(hostname)s``.
+#
+# Related options:
+#
+# * not to be confused with: ``multi_instance_display_name_template``
+#  (string value)
+#instance_name_template = instance-%08x
+
+#
+# Number of times to retry live-migration before failing.
+#
+# Possible values:
+#
+# * If == -1, try until out of hosts (default)
+# * If == 0, only try once, no retries
+# * Integer greater than 0
+#  (integer value)
+# Minimum value: -1
+#migrate_max_retries = -1
+
+#
+# Configuration drive format
+#
+# Configuration drive format that will contain metadata attached to
+# the
+# instance when it boots.
+#
+# Possible values:
+#
+# * iso9660: A file system image standard that is widely supported
+# across
+#   operating systems. NOTE: Mind the libvirt bug
+#   (https://bugs.launchpad.net/nova/+bug/1246201) - If your
+# hypervisor
+#   driver is libvirt, and you want live migrate to work without
+# shared storage,
+#   then use VFAT.
+# * vfat: For legacy reasons, you can configure the configuration
+# drive to
+#   use VFAT format instead of ISO 9660.
+#
+# Related options:
+#
+# * This option is meaningful when one of the following alternatives
+# occur:
+#   1. force_config_drive option set to 'true'
+#   2. the REST API call to create the instance contains an enable
+# flag for
+#      config drive option
+#   3. the image used to create the instance requires a config drive,
+#      this is defined by img_config_drive property for that image.
+# * A compute node running Hyper-V hypervisor can be configured to
+# attach
+#   configuration drive as a CD drive. To attach the configuration
+# drive as a CD
+#   drive, set config_drive_cdrom option at hyperv section, to true.
+#  (string value)
+# Possible values:
+# iso9660 - <No description provided>
+# vfat - <No description provided>
+#config_drive_format = iso9660
+
+#
+# Force injection to take place on a config drive
+#
+# When this option is set to true configuration drive functionality
+# will be
+# forced enabled by default, otherwise user can still enable
+# configuration
+# drives via the REST API or image metadata properties.
+#
+# Possible values:
+#
+# * True: Force to use of configuration drive regardless the user's
+# input in the
+#         REST API call.
+# * False: Do not force use of configuration drive. Config drives can
+# still be
+#          enabled via the REST API or image metadata properties.
+#
+# Related options:
+#
+# * Use the 'mkisofs_cmd' flag to set the path where you install the
+#   genisoimage program. If genisoimage is in same path as the
+#   nova-compute service, you do not need to set this flag.
+# * To use configuration drive with Hyper-V, you must set the
+#   'mkisofs_cmd' value to the full path to an mkisofs.exe
+# installation.
+#   Additionally, you must set the qemu_img_cmd value in the hyperv
+#   configuration section to the full path to an qemu-img command
+#   installation.
+#  (boolean value)
+#force_config_drive = false
+
+#
+# Name or path of the tool used for ISO image creation
+#
+# Use the mkisofs_cmd flag to set the path where you install the
+# genisoimage
+# program. If genisoimage is on the system path, you do not need to
+# change
+# the default value.
+#
+# To use configuration drive with Hyper-V, you must set the
+# mkisofs_cmd value
+# to the full path to an mkisofs.exe installation. Additionally, you
+# must set
+# the qemu_img_cmd value in the hyperv configuration section to the
+# full path
+# to an qemu-img command installation.
+#
+# Possible values:
+#
+# * Name of the ISO image creator program, in case it is in the same
+# directory
+#   as the nova-compute service
+# * Path to ISO image creator program
+#
+# Related options:
+#
+# * This option is meaningful when config drives are enabled.
+# * To use configuration drive with Hyper-V, you must set the
+# qemu_img_cmd
+#   value in the hyperv configuration section to the full path to an
+# qemu-img
+#   command installation.
+#  (string value)
+#mkisofs_cmd = genisoimage
+
+# DEPRECATED: The driver to use for database access (string value)
+# This option is deprecated for removal since 13.0.0.
+# Its value may be silently ignored in the future.
+#db_driver = nova.db
+
+# DEPRECATED:
+# Default flavor to use for the EC2 API only.
+# The Nova API does not support a default flavor.
+#  (string value)
+# This option is deprecated for removal since 14.0.0.
+# Its value may be silently ignored in the future.
+# Reason: The EC2 API is deprecated.
+#default_flavor = m1.small
+
+#
+# The IP address which the host is using to connect to the management
+# network.
+#
+# Possible values:
+#
+# * String with valid IP address. Default is IPv4 address of this
+# host.
+#
+# Related options:
+#
+# * metadata_host
+# * my_block_storage_ip
+# * routing_source_ip
+# * vpn_ip
+#  (string value)
+#my_ip = <host_ipv4>
+my_ip=10.167.4.37
+
+#
+# The IP address which is used to connect to the block storage
+# network.
+#
+# Possible values:
+#
+# * String with valid IP address. Default is IP address of this host.
+#
+# Related options:
+#
+# * my_ip - if my_block_storage_ip is not set, then my_ip value is
+# used.
+#  (string value)
+#my_block_storage_ip = $my_ip
+
+#
+# Hostname, FQDN or IP address of this host.
+#
+# Used as:
+#
+# * the oslo.messaging queue name for nova-compute worker
+# * we use this value for the binding_host sent to neutron. This means
+# if you use
+#   a neutron agent, it should have the same value for host.
+# * cinder host attachment information
+#
+# Must be valid within AMQP key.
+#
+# Possible values:
+#
+# * String with hostname, FQDN or IP address. Default is hostname of
+# this host.
+#  (string value)
+#host = <current_hostname>
+
+# DEPRECATED:
+# This option is a list of full paths to one or more configuration
+# files for
+# dhcpbridge. In most cases the default path of '/etc/nova/nova-
+# dhcpbridge.conf'
+# should be sufficient, but if you have special needs for configuring
+# dhcpbridge,
+# you can change or add to this list.
+#
+# Possible values
+#
+# * A list of strings, where each string is the full path to a
+# dhcpbridge
+#   configuration file.
+#  (multi valued)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#dhcpbridge_flagfile = /etc/nova/nova.conf
+
+# DEPRECATED:
+# The location where the network configuration files will be kept. The
+# default is
+# the 'networks' directory off of the location where nova's Python
+# module is
+# installed.
+#
+# Possible values
+#
+# * A string containing the full path to the desired configuration
+# directory
+#  (string value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#networks_path = $state_path/networks
+
+# DEPRECATED:
+# This is the name of the network interface for public IP addresses.
+# The default
+# is 'eth0'.
+#
+# Possible values:
+#
+# * Any string representing a network interface name
+#  (string value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#public_interface = eth0
+
+# DEPRECATED:
+# The location of the binary nova-dhcpbridge. By default it is the
+# binary named
+# 'nova-dhcpbridge' that is installed with all the other nova
+# binaries.
+#
+# Possible values:
+#
+# * Any string representing the full path to the binary for dhcpbridge
+#  (string value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#dhcpbridge = $bindir/nova-dhcpbridge
+
+# DEPRECATED:
+# The public IP address of the network host.
+#
+# This is used when creating an SNAT rule.
+#
+# Possible values:
+#
+# * Any valid IP address
+#
+# Related options:
+#
+# * ``force_snat_range``
+#  (string value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#routing_source_ip = $my_ip
+
+# DEPRECATED:
+# The lifetime of a DHCP lease, in seconds. The default is 86400 (one
+# day).
+#
+# Possible values:
+#
+# * Any positive integer value.
+#  (integer value)
+# Minimum value: 1
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#dhcp_lease_time = 86400
+
+# DEPRECATED:
+# Despite the singular form of the name of this option, it is actually
+# a list of
+# zero or more server addresses that dnsmasq will use for DNS
+# nameservers. If
+# this is not empty, dnsmasq will not read /etc/resolv.conf, but will
+# only use
+# the servers specified in this option. If the option
+# use_network_dns_servers is
+# True, the dns1 and dns2 servers from the network will be appended to
+# this list,
+# and will be used as DNS servers, too.
+#
+# Possible values:
+#
+# * A list of strings, where each string is either an IP address or a
+# FQDN.
+#
+# Related options:
+#
+# * ``use_network_dns_servers``
+#  (multi valued)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#dns_server =
+
+# DEPRECATED:
+# When this option is set to True, the dns1 and dns2 servers for the
+# network
+# specified by the user on boot will be used for DNS, as well as any
+# specified in
+# the `dns_server` option.
+#
+# Related options:
+#
+# * ``dns_server``
+#  (boolean value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#use_network_dns_servers = false
+
+# DEPRECATED:
+# This option is a list of zero or more IP address ranges in your
+# network's DMZ
+# that should be accepted.
+#
+# Possible values:
+#
+# * A list of strings, each of which should be a valid CIDR.
+#  (list value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#dmz_cidr =
+
+# DEPRECATED:
+# This is a list of zero or more IP ranges that traffic from the
+# `routing_source_ip` will be SNATted to. If the list is empty, then
+# no SNAT
+# rules are created.
+#
+# Possible values:
+#
+# * A list of strings, each of which should be a valid CIDR.
+#
+# Related options:
+#
+# * ``routing_source_ip``
+#  (multi valued)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#force_snat_range =
+
+# DEPRECATED:
+# The path to the custom dnsmasq configuration file, if any.
+#
+# Possible values:
+#
+# * The full path to the configuration file, or an empty string if
+# there is no
+#   custom dnsmasq configuration file.
+#  (string value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#dnsmasq_config_file =
+
+# DEPRECATED:
+# This is the class used as the ethernet device driver for linuxnet
+# bridge
+# operations. The default value should be all you need for most cases,
+# but if you
+# wish to use a customized class, set this option to the full dot-
+# separated
+# import path for that class.
+#
+# Possible values:
+#
+# * Any string representing a dot-separated class path that Nova can
+# import.
+#  (string value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#linuxnet_interface_driver = nova.network.linux_net.LinuxBridgeInterfaceDriver
+
+# DEPRECATED:
+# The name of the Open vSwitch bridge that is used with linuxnet when
+# connecting
+# with Open vSwitch."
+#
+# Possible values:
+#
+# * Any string representing a valid bridge name.
+#  (string value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#linuxnet_ovs_integration_bridge = br-int
+
+#
+# When True, when a device starts up, and upon binding floating IP
+# addresses, arp
+# messages will be sent to ensure that the arp caches on the compute
+# hosts are
+# up-to-date.
+#
+# Related options:
+#
+# * ``send_arp_for_ha_count``
+#  (boolean value)
+#send_arp_for_ha = false
+
+#
+# When arp messages are configured to be sent, they will be sent with
+# the count
+# set to the value of this option. Of course, if this is set to zero,
+# no arp
+# messages will be sent.
+#
+# Possible values:
+#
+# * Any integer greater than or equal to 0
+#
+# Related options:
+#
+# * ``send_arp_for_ha``
+#  (integer value)
+#send_arp_for_ha_count = 3
+
+# DEPRECATED:
+# When set to True, only the firt nic of a VM will get its default
+# gateway from
+# the DHCP server.
+#  (boolean value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#use_single_default_gateway = false
+
+# DEPRECATED:
+# One or more interfaces that bridges can forward traffic to. If any
+# of the items
+# in this list is the special keyword 'all', then all traffic will be
+# forwarded.
+#
+# Possible values:
+#
+# * A list of zero or more interface names, or the word 'all'.
+#  (multi valued)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#forward_bridge_interface = all
+
+#
+# This option determines the IP address for the network metadata API
+# server.
+#
+# This is really the client side of the metadata host equation that
+# allows
+# nova-network to find the metadata server when doing a default multi
+# host
+# networking.
+#
+# Possible values:
+#
+# * Any valid IP address. The default is the address of the Nova API
+# server.
+#
+# Related options:
+#
+# * ``metadata_port``
+#  (string value)
+#metadata_host = $my_ip
+
+# DEPRECATED:
+# This option determines the port used for the metadata API server.
+#
+# Related options:
+#
+# * ``metadata_host``
+#  (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#metadata_port = 8775
+
+# DEPRECATED:
+# This expression, if defined, will select any matching iptables rules
+# and place
+# them at the top when applying metadata changes to the rules.
+#
+# Possible values:
+#
+# * Any string representing a valid regular expression, or an empty
+# string
+#
+# Related options:
+#
+# * ``iptables_bottom_regex``
+#  (string value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#iptables_top_regex =
+
+# DEPRECATED:
+# This expression, if defined, will select any matching iptables rules
+# and place
+# them at the bottom when applying metadata changes to the rules.
+#
+# Possible values:
+#
+# * Any string representing a valid regular expression, or an empty
+# string
+#
+# Related options:
+#
+# * iptables_top_regex
+#  (string value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#iptables_bottom_regex =
+
+# DEPRECATED:
+# By default, packets that do not pass the firewall are DROPped. In
+# many cases,
+# though, an operator may find it more useful to change this from DROP
+# to REJECT,
+# so that the user issuing those packets may have a better idea as to
+# what's
+# going on, or LOGDROP in order to record the blocked traffic before
+# DROPping.
+#
+# Possible values:
+#
+# * A string representing an iptables chain. The default is DROP.
+#  (string value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#iptables_drop_action = DROP
+
+# DEPRECATED:
+# This option represents the period of time, in seconds, that the
+# ovs_vsctl calls
+# will wait for a response from the database before timing out. A
+# setting of 0
+# means that the utility should wait forever for a response.
+#
+# Possible values:
+#
+# * Any positive integer if a limited timeout is desired, or zero if
+# the calls
+#   should wait forever for a response.
+#  (integer value)
+# Minimum value: 0
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#ovs_vsctl_timeout = 120
+
+# DEPRECATED:
+# This option is used mainly in testing to avoid calls to the
+# underlying network
+# utilities.
+#  (boolean value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#fake_network = false
+
+# DEPRECATED:
+# This option determines the number of times to retry ebtables
+# commands before
+# giving up. The minimum number of retries is 1.
+#
+# Possible values:
+#
+# * Any positive integer
+#
+# Related options:
+#
+# * ``ebtables_retry_interval``
+#  (integer value)
+# Minimum value: 1
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#ebtables_exec_attempts = 3
+
+# DEPRECATED:
+# This option determines the time, in seconds, that the system will
+# sleep in
+# between ebtables retries. Note that each successive retry waits a
+# multiple of
+# this value, so for example, if this is set to the default of 1.0
+# seconds, and
+# ebtables_exec_attempts is 4, after the first failure, the system
+# will sleep for
+# 1 * 1.0 seconds, after the second failure it will sleep 2 * 1.0
+# seconds, and
+# after the third failure it will sleep 3 * 1.0 seconds.
+#
+# Possible values:
+#
+# * Any non-negative float or integer. Setting this to zero will
+# result in no
+#   waiting between attempts.
+#
+# Related options:
+#
+# * ebtables_exec_attempts
+#  (floating point value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#ebtables_retry_interval = 1.0
+
+# DEPRECATED:
+# Enable neutron as the backend for networking.
+#
+# Determine whether to use Neutron or Nova Network as the back end.
+# Set to true
+# to use neutron.
+#  (boolean value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+use_neutron = true
+
+#
+# This option determines whether the network setup information is
+# injected into
+# the VM before it is booted. While it was originally designed to be
+# used only
+# by nova-network, it is also used by the vmware and xenapi virt
+# drivers to
+# control whether network information is injected into a VM. The
+# libvirt virt
+# driver also uses it when we use config_drive to configure network to
+# control
+# whether network information is injected into a VM.
+#  (boolean value)
+#flat_injected = false
+
+# DEPRECATED:
+# This option determines the bridge used for simple network interfaces
+# when no
+# bridge is specified in the VM creation request.
+#
+# Please note that this option is only used when using nova-network
+# instead of
+# Neutron in your deployment.
+#
+# Possible values:
+#
+# * Any string representing a valid network bridge, such as 'br100'
+#
+# Related options:
+#
+# * ``use_neutron``
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#flat_network_bridge = <None>
+
+# DEPRECATED:
+# This is the address of the DNS server for a simple network. If this
+# option is
+# not specified, the default of '8.8.4.4' is used.
+#
+# Please note that this option is only used when using nova-network
+# instead of
+# Neutron in your deployment.
+#
+# Possible values:
+#
+# * Any valid IP address.
+#
+# Related options:
+#
+# * ``use_neutron``
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#flat_network_dns = 8.8.4.4
+
+# DEPRECATED:
+# This option is the name of the virtual interface of the VM on which
+# the bridge
+# will be built. While it was originally designed to be used only by
+# nova-network, it is also used by libvirt for the bridge interface
+# name.
+#
+# Possible values:
+#
+# * Any valid virtual interface name, such as 'eth0'
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#flat_interface = <None>
+
+# DEPRECATED:
+# This is the VLAN number used for private networks. Note that the
+# when creating
+# the networks, if the specified number has already been assigned,
+# nova-network
+# will increment this number until it finds an available VLAN.
+#
+# Please note that this option is only used when using nova-network
+# instead of
+# Neutron in your deployment. It also will be ignored if the
+# configuration option
+# for `network_manager` is not set to the default of
+# 'nova.network.manager.VlanManager'.
+#
+# Possible values:
+#
+# * Any integer between 1 and 4094. Values outside of that range will
+# raise a
+#   ValueError exception.
+#
+# Related options:
+#
+# * ``network_manager``
+# * ``use_neutron``
+#  (integer value)
+# Minimum value: 1
+# Maximum value: 4094
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#vlan_start = 100
+
+# DEPRECATED:
+# This option is the name of the virtual interface of the VM on which
+# the VLAN
+# bridge will be built. While it was originally designed to be used
+# only by
+# nova-network, it is also used by libvirt and xenapi for the bridge
+# interface
+# name.
+#
+# Please note that this setting will be ignored in nova-network if the
+# configuration option for `network_manager` is not set to the default
+# of
+# 'nova.network.manager.VlanManager'.
+#
+# Possible values:
+#
+# * Any valid virtual interface name, such as 'eth0'
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options. While
+# this option has an effect when using neutron, it incorrectly
+# override the value
+# provided by neutron and should therefore not be used.
+#vlan_interface = <None>
+
+# DEPRECATED:
+# This option represents the number of networks to create if not
+# explicitly
+# specified when the network is created. The only time this is used is
+# if a CIDR
+# is specified, but an explicit network_size is not. In that case, the
+# subnets
+# are created by diving the IP address space of the CIDR by
+# num_networks. The
+# resulting subnet sizes cannot be larger than the configuration
+# option
+# `network_size`; in that event, they are reduced to `network_size`,
+# and a
+# warning is logged.
+#
+# Please note that this option is only used when using nova-network
+# instead of
+# Neutron in your deployment.
+#
+# Possible values:
+#
+# * Any positive integer is technically valid, although there are
+# practical
+#   limits based upon available IP address space and virtual
+# interfaces.
+#
+# Related options:
+#
+# * ``use_neutron``
+# * ``network_size``
+#  (integer value)
+# Minimum value: 1
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#num_networks = 1
+
+# DEPRECATED:
+# This option is no longer used since the /os-cloudpipe API was
+# removed in the
+# 16.0.0 Pike release. This is the public IP address for the cloudpipe
+# VPN
+# servers. It defaults to the IP address of the host.
+#
+# Please note that this option is only used when using nova-network
+# instead of
+# Neutron in your deployment. It also will be ignored if the
+# configuration option
+# for `network_manager` is not set to the default of
+# 'nova.network.manager.VlanManager'.
+#
+# Possible values:
+#
+# * Any valid IP address. The default is ``$my_ip``, the IP address of
+# the VM.
+#
+# Related options:
+#
+# * ``network_manager``
+# * ``use_neutron``
+# * ``vpn_start``
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#vpn_ip = $my_ip
+
+# DEPRECATED:
+# This is the port number to use as the first VPN port for private
+# networks.
+#
+# Please note that this option is only used when using nova-network
+# instead of
+# Neutron in your deployment. It also will be ignored if the
+# configuration option
+# for `network_manager` is not set to the default of
+# 'nova.network.manager.VlanManager', or if you specify a value the
+# 'vpn_start'
+# parameter when creating a network.
+#
+# Possible values:
+#
+# * Any integer representing a valid port number. The default is 1000.
+#
+# Related options:
+#
+# * ``use_neutron``
+# * ``vpn_ip``
+# * ``network_manager``
+#  (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#vpn_start = 1000
+
+# DEPRECATED:
+# This option determines the number of addresses in each private
+# subnet.
+#
+# Please note that this option is only used when using nova-network
+# instead of
+# Neutron in your deployment.
+#
+# Possible values:
+#
+# * Any positive integer that is less than or equal to the available
+# network
+#   size. Note that if you are creating multiple networks, they must
+# all fit in
+#   the available IP address space. The default is 256.
+#
+# Related options:
+#
+# * ``use_neutron``
+# * ``num_networks``
+#  (integer value)
+# Minimum value: 1
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#network_size = 256
+
+# DEPRECATED:
+# This option determines the fixed IPv6 address block when creating a
+# network.
+#
+# Please note that this option is only used when using nova-network
+# instead of
+# Neutron in your deployment.
+#
+# Possible values:
+#
+# * Any valid IPv6 CIDR
+#
+# Related options:
+#
+# * ``use_neutron``
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#fixed_range_v6 = fd00::/48
+
+# DEPRECATED:
+# This is the default IPv4 gateway. It is used only in the testing
+# suite.
+#
+# Please note that this option is only used when using nova-network
+# instead of
+# Neutron in your deployment.
+#
+# Possible values:
+#
+# * Any valid IP address.
+#
+# Related options:
+#
+# * ``use_neutron``
+# * ``gateway_v6``
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#gateway = <None>
+
+# DEPRECATED:
+# This is the default IPv6 gateway. It is used only in the testing
+# suite.
+#
+# Please note that this option is only used when using nova-network
+# instead of
+# Neutron in your deployment.
+#
+# Possible values:
+#
+# * Any valid IP address.
+#
+# Related options:
+#
+# * ``use_neutron``
+# * ``gateway``
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#gateway_v6 = <None>
+
+# DEPRECATED:
+# This option represents the number of IP addresses to reserve at the
+# top of the
+# address range for VPN clients. It also will be ignored if the
+# configuration
+# option for `network_manager` is not set to the default of
+# 'nova.network.manager.VlanManager'.
+#
+# Possible values:
+#
+# * Any integer, 0 or greater.
+#
+# Related options:
+#
+# * ``use_neutron``
+# * ``network_manager``
+#  (integer value)
+# Minimum value: 0
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#cnt_vpn_clients = 0
+
+# DEPRECATED:
+# This is the number of seconds to wait before disassociating a
+# deallocated fixed
+# IP address. This is only used with the nova-network service, and has
+# no effect
+# when using neutron for networking.
+#
+# Possible values:
+#
+# * Any integer, zero or greater.
+#
+# Related options:
+#
+# * ``use_neutron``
+#  (integer value)
+# Minimum value: 0
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#fixed_ip_disassociate_timeout = 600
+
+# DEPRECATED:
+# This option determines how many times nova-network will attempt to
+# create a
+# unique MAC address before giving up and raising a
+# `VirtualInterfaceMacAddressException` error.
+#
+# Possible values:
+#
+# * Any positive integer. The default is 5.
+#
+# Related options:
+#
+# * ``use_neutron``
+#  (integer value)
+# Minimum value: 1
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#create_unique_mac_address_attempts = 5
+
+# DEPRECATED:
+# Determines whether unused gateway devices, both VLAN and bridge, are
+# deleted if
+# the network is in nova-network VLAN mode and is multi-hosted.
+#
+# Related options:
+#
+# * ``use_neutron``
+# * ``vpn_ip``
+# * ``fake_network``
+#  (boolean value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#teardown_unused_network_gateway = false
+
+# DEPRECATED:
+# When this option is True, a call is made to release the DHCP for the
+# instance
+# when that instance is terminated.
+#
+# Related options:
+#
+# * ``use_neutron``
+#  (boolean value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+force_dhcp_release = true
+
+# DEPRECATED:
+# When this option is True, whenever a DNS entry must be updated, a
+# fanout cast
+# message is sent to all network hosts to update their DNS entries in
+# multi-host
+# mode.
+#
+# Related options:
+#
+# * ``use_neutron``
+#  (boolean value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#update_dns_entries = false
+
+# DEPRECATED:
+# This option determines the time, in seconds, to wait between
+# refreshing DNS
+# entries for the network.
+#
+# Possible values:
+#
+# * A positive integer
+# * -1 to disable updates
+#
+# Related options:
+#
+# * ``use_neutron``
+#  (integer value)
+# Minimum value: -1
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#dns_update_periodic_interval = -1
+
+# DEPRECATED:
+# This option allows you to specify the domain for the DHCP server.
+#
+# Possible values:
+#
+# * Any string that is a valid domain name.
+#
+# Related options:
+#
+# * ``use_neutron``
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#dhcp_domain = novalocal
+dhcp_domain=novalocal
+
+# DEPRECATED:
+# This option allows you to specify the L3 management library to be
+# used.
+#
+# Possible values:
+#
+# * Any dot-separated string that represents the import path to an L3
+# networking
+#   library.
+#
+# Related options:
+#
+# * ``use_neutron``
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#l3_lib = nova.network.l3.LinuxNetL3
+
+# DEPRECATED:
+# THIS VALUE SHOULD BE SET WHEN CREATING THE NETWORK.
+#
+# If True in multi_host mode, all compute hosts share the same dhcp
+# address. The
+# same IP address used for DHCP will be added on each nova-network
+# node which is
+# only visible to the VMs on the same host.
+#
+# The use of this configuration has been deprecated and may be removed
+# in any
+# release after Mitaka. It is recommended that instead of relying on
+# this option,
+# an explicit value should be passed to 'create_networks()' as a
+# keyword argument
+# with the name 'share_address'.
+#  (boolean value)
+# This option is deprecated for removal since 2014.2.
+# Its value may be silently ignored in the future.
+#share_dhcp_address = false
+
+# DEPRECATED:
+# URL for LDAP server which will store DNS entries
+#
+# Possible values:
+#
+# * A valid LDAP URL representing the server
+#  (uri value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#ldap_dns_url = ldap://ldap.example.com:389
+
+# DEPRECATED: Bind user for LDAP server (string value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#ldap_dns_user = uid=admin,ou=people,dc=example,dc=org
+
+# DEPRECATED: Bind user's password for LDAP server (string value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#ldap_dns_password = password
+
+# DEPRECATED:
+# Hostmaster for LDAP DNS driver Statement of Authority
+#
+# Possible values:
+#
+# * Any valid string representing LDAP DNS hostmaster.
+#  (string value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#ldap_dns_soa_hostmaster = hostmaster@example.org
+
+# DEPRECATED:
+# DNS Servers for LDAP DNS driver
+#
+# Possible values:
+#
+# * A valid URL representing a DNS server
+#  (multi valued)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#ldap_dns_servers = dns.example.org
+
+# DEPRECATED:
+# Base distinguished name for the LDAP search query
+#
+# This option helps to decide where to look up the host in LDAP.
+#  (string value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#ldap_dns_base_dn = ou=hosts,dc=example,dc=org
+
+# DEPRECATED:
+# Refresh interval (in seconds) for LDAP DNS driver Start of Authority
+#
+# Time interval, a secondary/slave DNS server waits before requesting
+# for
+# primary DNS server's current SOA record. If the records are
+# different,
+# secondary DNS server will request a zone transfer from primary.
+#
+# NOTE: Lower values would cause more traffic.
+#  (integer value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#ldap_dns_soa_refresh = 1800
+
+# DEPRECATED:
+# Retry interval (in seconds) for LDAP DNS driver Start of Authority
+#
+# Time interval, a secondary/slave DNS server should wait, if an
+# attempt to transfer zone failed during the previous refresh
+# interval.
+#  (integer value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#ldap_dns_soa_retry = 3600
+
+# DEPRECATED:
+# Expiry interval (in seconds) for LDAP DNS driver Start of Authority
+#
+# Time interval, a secondary/slave DNS server holds the information
+# before it is no longer considered authoritative.
+#  (integer value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#ldap_dns_soa_expiry = 86400
+
+# DEPRECATED:
+# Minimum interval (in seconds) for LDAP DNS driver Start of Authority
+#
+# It is Minimum time-to-live applies for all resource records in the
+# zone file. This value is supplied to other servers how long they
+# should keep the data in cache.
+#  (integer value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#ldap_dns_soa_minimum = 7200
+
+# DEPRECATED:
+# Default value for multi_host in networks.
+#
+# nova-network service can operate in a multi-host or single-host
+# mode.
+# In multi-host mode each compute node runs a copy of nova-network and
+# the
+# instances on that compute node use the compute node as a gateway to
+# the
+# Internet. Where as in single-host mode, a central server runs the
+# nova-network
+# service. All compute nodes forward traffic from the instances to the
+# cloud controller which then forwards traffic to the Internet.
+#
+# If this options is set to true, some rpc network calls will be sent
+# directly
+# to host.
+#
+# Note that this option is only used when using nova-network instead
+# of
+# Neutron in your deployment.
+#
+# Related options:
+#
+# * ``use_neutron``
+#  (boolean value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#multi_host = false
+
+# DEPRECATED:
+# Driver to use for network creation.
+#
+# Network driver initializes (creates bridges and so on) only when the
+# first VM lands on a host node. All network managers configure the
+# network using network drivers. The driver is not tied to any
+# particular
+# network manager.
+#
+# The default Linux driver implements vlans, bridges, and iptables
+# rules
+# using linux utilities.
+#
+# Note that this option is only used when using nova-network instead
+# of Neutron in your deployment.
+#
+# Related options:
+#
+# * ``use_neutron``
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#network_driver = nova.network.linux_net
+
+# DEPRECATED:
+# Firewall driver to use with ``nova-network`` service.
+#
+# This option only applies when using the ``nova-network`` service.
+# When using
+# another networking services, such as Neutron, this should be to set
+# to the
+# ``nova.virt.firewall.NoopFirewallDriver``.
+#
+# Possible values:
+#
+# * ``nova.virt.firewall.IptablesFirewallDriver``
+# * ``nova.virt.firewall.NoopFirewallDriver``
+# * ``nova.virt.libvirt.firewall.IptablesFirewallDriver``
+# * [...]
+#
+# Related options:
+#
+# * ``use_neutron``: This must be set to ``False`` to enable ``nova-
+# network``
+#   networking
+#  (string value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+firewall_driver = nova.virt.firewall.NoopFirewallDriver
+
+# DEPRECATED:
+# Determine whether to allow network traffic from same network.
+#
+# When set to true, hosts on the same subnet are not filtered and are
+# allowed
+# to pass all types of traffic between them. On a flat network, this
+# allows
+# all instances from all projects unfiltered communication. With VLAN
+# networking, this allows access between instances within the same
+# project.
+#
+# This option only applies when using the ``nova-network`` service.
+# When using
+# another networking services, such as Neutron, security groups or
+# other
+# approaches should be used.
+#
+# Possible values:
+#
+# * True: Network traffic should be allowed pass between all instances
+# on the
+#   same network, regardless of their tenant and security policies
+# * False: Network traffic should not be allowed pass between
+# instances unless
+#   it is unblocked in a security group
+#
+# Related options:
+#
+# * ``use_neutron``: This must be set to ``False`` to enable ``nova-
+# network``
+#   networking
+# * ``firewall_driver``: This must be set to
+#   ``nova.virt.libvirt.firewall.IptablesFirewallDriver`` to ensure
+# the
+#   libvirt firewall driver is enabled.
+#  (boolean value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#allow_same_net_traffic = true
+
+# DEPRECATED:
+# Default pool for floating IPs.
+#
+# This option specifies the default floating IP pool for allocating
+# floating IPs.
+#
+# While allocating a floating ip, users can optionally pass in the
+# name of the
+# pool they want to allocate from, otherwise it will be pulled from
+# the
+# default pool.
+#
+# If this option is not set, then 'nova' is used as default floating
+# pool.
+#
+# Possible values:
+#
+# * Any string representing a floating IP pool name
+#  (string value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# This option was used for two purposes: to set the floating IP pool
+# name for
+# nova-network and to do the same for neutron. nova-network is
+# deprecated, as are
+# any related configuration options. Users of neutron, meanwhile,
+# should use the
+# 'default_floating_pool' option in the '[neutron]' group.
+#default_floating_pool = nova
+
+# DEPRECATED:
+# Autoassigning floating IP to VM
+#
+# When set to True, floating IP is auto allocated and associated
+# to the VM upon creation.
+#
+# Related options:
+#
+# * use_neutron: this options only works with nova-network.
+#  (boolean value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#auto_assign_floating_ip = false
+
+# DEPRECATED:
+# Full class name for the DNS Manager for floating IPs.
+#
+# This option specifies the class of the driver that provides
+# functionality
+# to manage DNS entries associated with floating IPs.
+#
+# When a user adds a DNS entry for a specified domain to a floating
+# IP,
+# nova will add a DNS entry using the specified floating DNS driver.
+# When a floating IP is deallocated, its DNS entry will automatically
+# be deleted.
+#
+# Possible values:
+#
+# * Full Python path to the class to be used
+#
+# Related options:
+#
+# * use_neutron: this options only works with nova-network.
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#floating_ip_dns_manager = nova.network.noop_dns_driver.NoopDNSDriver
+
+# DEPRECATED:
+# Full class name for the DNS Manager for instance IPs.
+#
+# This option specifies the class of the driver that provides
+# functionality
+# to manage DNS entries for instances.
+#
+# On instance creation, nova will add DNS entries for the instance
+# name and
+# id, using the specified instance DNS driver and domain. On instance
+# deletion,
+# nova will remove the DNS entries.
+#
+# Possible values:
+#
+# * Full Python path to the class to be used
+#
+# Related options:
+#
+# * use_neutron: this options only works with nova-network.
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#instance_dns_manager = nova.network.noop_dns_driver.NoopDNSDriver
+
+# DEPRECATED:
+# If specified, Nova checks if the availability_zone of every instance
+# matches
+# what the database says the availability_zone should be for the
+# specified
+# dns_domain.
+#
+# Related options:
+#
+# * use_neutron: this options only works with nova-network.
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#instance_dns_domain =
+
+# DEPRECATED:
+# Assign IPv6 and IPv4 addresses when creating instances.
+#
+# Related options:
+#
+# * use_neutron: this only works with nova-network.
+#  (boolean value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#use_ipv6 = false
+
+# DEPRECATED:
+# Abstracts out IPv6 address generation to pluggable backends.
+#
+# nova-network can be put into dual-stack mode, so that it uses
+# both IPv4 and IPv6 addresses. In dual-stack mode, by default,
+# instances
+# acquire IPv6 global unicast addresses with the help of stateless
+# address
+# auto-configuration mechanism.
+#
+# Related options:
+#
+# * use_neutron: this option only works with nova-network.
+# * use_ipv6: this option only works if ipv6 is enabled for nova-
+# network.
+#  (string value)
+# Possible values:
+# rfc2462 - <No description provided>
+# account_identifier - <No description provided>
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#ipv6_backend = rfc2462
+
+# DEPRECATED:
+# This option is used to enable or disable quota checking for tenant
+# networks.
+#
+# Related options:
+#
+# * quota_networks
+#  (boolean value)
+# This option is deprecated for removal since 14.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# CRUD operations on tenant networks are only available when using
+# nova-network
+# and nova-network is itself deprecated.
+#enable_network_quota = false
+
+# DEPRECATED:
+# This option controls the number of private networks that can be
+# created per
+# project (or per tenant).
+#
+# Related options:
+#
+# * enable_network_quota
+#  (integer value)
+# Minimum value: 0
+# This option is deprecated for removal since 14.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# CRUD operations on tenant networks are only available when using
+# nova-network
+# and nova-network is itself deprecated.
+#quota_networks = 3
+
+#
+# Filename that will be used for storing websocket frames received
+# and sent by a proxy service (like VNC, spice, serial) running on
+# this host.
+# If this is not set, no recording will be done.
+#  (string value)
+#record = <None>
+
+# Run as a background process. (boolean value)
+#daemon = false
+
+# Disallow non-encrypted connections. (boolean value)
+#ssl_only = false
+
+# Set to True if source host is addressed with IPv6. (boolean value)
+#source_is_ipv6 = false
+
+# Path to SSL certificate file. (string value)
+#cert = self.pem
+
+# SSL key file (if separate from cert). (string value)
+#key = <None>
+
+#
+# Path to directory with content which will be served by a web server.
+#  (string value)
+#web = /usr/share/spice-html5
+
+#
+# The directory where the Nova python modules are installed.
+#
+# This directory is used to store template files for networking and
+# remote
+# console access. It is also the default path for other config options
+# which
+# need to persist Nova internal data. It is very unlikely that you
+# need to
+# change this option from its default value.
+#
+# Possible values:
+#
+# * The full path to a directory.
+#
+# Related options:
+#
+# * ``state_path``
+#  (string value)
+#pybasedir = /usr/lib/python2.7/dist-packages
+
+#
+# The directory where the Nova binaries are installed.
+#
+# This option is only relevant if the networking capabilities from
+# Nova are
+# used (see services below). Nova's networking capabilities are
+# targeted to
+# be fully replaced by Neutron in the future. It is very unlikely that
+# you need
+# to change this option from its default value.
+#
+# Possible values:
+#
+# * The full path to a directory.
+#  (string value)
+#bindir = /usr/local/bin
+
+#
+# The top-level directory for maintaining Nova's state.
+#
+# This directory is used to store Nova's internal state. It is used by
+# a
+# variety of other config options which derive from this. In some
+# scenarios
+# (for example migrations) it makes sense to use a storage location
+# which is
+# shared between multiple compute hosts (for example via NFS). Unless
+# the
+# option ``instances_path`` gets overwritten, this directory can grow
+# very
+# large.
+#
+# Possible values:
+#
+# * The full path to a directory. Defaults to value provided in
+# ``pybasedir``.
+#  (string value)
+state_path = /var/lib/nova
+
+#
+# Number of seconds indicating how frequently the state of services on
+# a
+# given hypervisor is reported. Nova needs to know this to determine
+# the
+# overall health of the deployment.
+#
+# Related Options:
+#
+# * service_down_time
+#   report_interval should be less than service_down_time. If
+# service_down_time
+#   is less than report_interval, services will routinely be
+# considered down,
+#   because they report in too rarely.
+#  (integer value)
+#report_interval = 10
+report_interval = 60
+
+#
+# Maximum time in seconds since last check-in for up service
+#
+# Each compute node periodically updates their database status based
+# on the
+# specified report interval. If the compute node hasn't updated the
+# status
+# for more than service_down_time, then the compute node is considered
+# down.
+#
+# Related Options:
+#
+# * report_interval (service_down_time should not be less than
+# report_interval)
+#  (integer value)
+service_down_time = 180
+
+#
+# Enable periodic tasks.
+#
+# If set to true, this option allows services to periodically run
+# tasks
+# on the manager.
+#
+# In case of running multiple schedulers or conductors you may want to
+# run
+# periodic tasks on only one host - in this case disable this option
+# for all
+# hosts but one.
+#  (boolean value)
+#periodic_enable = true
+
+#
+# Number of seconds to randomly delay when starting the periodic task
+# scheduler to reduce stampeding.
+#
+# When compute workers are restarted in unison across a cluster,
+# they all end up running the periodic tasks at the same time
+# causing problems for the external services. To mitigate this
+# behavior, periodic_fuzzy_delay option allows you to introduce a
+# random initial delay when starting the periodic task scheduler.
+#
+# Possible Values:
+#
+# * Any positive integer (in seconds)
+# * 0 : disable the random delay
+#  (integer value)
+# Minimum value: 0
+#periodic_fuzzy_delay = 60
+
+# List of APIs to be enabled by default. (list value)
+enabled_apis = osapi_compute,metadata
+
+#
+# List of APIs with enabled SSL.
+#
+# Nova provides SSL support for the API servers. enabled_ssl_apis
+# option
+# allows configuring the SSL support.
+#  (list value)
+#enabled_ssl_apis =
+
+#
+# IP address on which the OpenStack API will listen.
+#
+# The OpenStack API service listens on this IP address for incoming
+# requests.
+#  (string value)
+#osapi_compute_listen = 0.0.0.0
+osapi_compute_listen = 10.167.4.37
+
+#
+# Port on which the OpenStack API will listen.
+#
+# The OpenStack API service listens on this port number for incoming
+# requests.
+#  (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#osapi_compute_listen_port = 8774
+
+#
+# Number of workers for OpenStack API service. The default will be the
+# number
+# of CPUs available.
+#
+# OpenStack API services can be configured to run as multi-process
+# (workers).
+# This overcomes the problem of reduction in throughput when API
+# request
+# concurrency increases. OpenStack API service will run in the
+# specified
+# number of processes.
+#
+# Possible Values:
+#
+# * Any positive integer
+# * None (default value)
+#  (integer value)
+# Minimum value: 1
+#osapi_compute_workers = <None>
+
+#
+# IP address on which the metadata API will listen.
+#
+# The metadata API service listens on this IP address for incoming
+# requests.
+#  (string value)
+#metadata_listen = 0.0.0.0
+metadata_listen=10.167.4.37
+
+#
+# Port on which the metadata API will listen.
+#
+# The metadata API service listens on this port number for incoming
+# requests.
+#  (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#metadata_listen_port = 8775
+#metadata_listen_port=8775
+
+#
+# Number of workers for metadata service. If not specified the number
+# of
+# available CPUs will be used.
+#
+# The metadata service can be configured to run as multi-process
+# (workers).
+# This overcomes the problem of reduction in throughput when API
+# request
+# concurrency increases. The metadata service will run in the
+# specified
+# number of processes.
+#
+# Possible Values:
+#
+# * Any positive integer
+# * None (default value)
+#  (integer value)
+# Minimum value: 1
+#metadata_workers = <None>
+metadata_workers = 8
+
+# Full class name for the Manager for network (string value)
+# Possible values:
+# nova.network.manager.FlatManager - <No description provided>
+# nova.network.manager.FlatDHCPManager - <No description provided>
+# nova.network.manager.VlanManager - <No description provided>
+#network_manager = nova.network.manager.VlanManager
+
+#
+# This option specifies the driver to be used for the servicegroup
+# service.
+#
+# ServiceGroup API in nova enables checking status of a compute node.
+# When a
+# compute worker running the nova-compute daemon starts, it calls the
+# join API
+# to join the compute group. Services like nova scheduler can query
+# the
+# ServiceGroup API to check if a node is alive. Internally, the
+# ServiceGroup
+# client driver automatically updates the compute worker status. There
+# are
+# multiple backend implementations for this service: Database
+# ServiceGroup driver
+# and Memcache ServiceGroup driver.
+#
+# Possible Values:
+#
+#     * db : Database ServiceGroup driver
+#     * mc : Memcache ServiceGroup driver
+#
+# Related Options:
+#
+#     * service_down_time (maximum time since last check-in for up
+# service)
+#  (string value)
+# Possible values:
+# db - <No description provided>
+# mc - <No description provided>
+#servicegroup_driver = db
+
+#
+# From oslo.service.periodic_task
+#
+
+# Some periodic tasks can be run in a separate process. Should we run
+# them here? (boolean value)
+#run_external_periodic_tasks = true
+
+#
+# From oslo.service.service
+#
+
+# Enable eventlet backdoor.  Acceptable values are 0, <port>, and
+# <start>:<end>, where 0 results in listening on a random tcp port
+# number; <port> results in listening on the specified port number
+# (and not enabling backdoor if that port is in use); and
+# <start>:<end> results in listening on the smallest unused port
+# number within the specified range of port numbers.  The chosen port
+# is displayed in the service's log file. (string value)
+#backdoor_port = <None>
+
+# Enable eventlet backdoor, using the provided path as a unix socket
+# that can receive connections. This option is mutually exclusive with
+# 'backdoor_port' in that only one should be provided. If both are
+# provided then the existence of this option overrides the usage of
+# that option. (string value)
+#backdoor_socket = <None>
+
+# Enables or disables logging values of all registered options when
+# starting a service (at DEBUG level). (boolean value)
+#log_options = true
+
+# Specify a timeout after which a gracefully shutdown server will
+# exit. Zero value means endless wait. (integer value)
+#graceful_shutdown_timeout = 60
+#
 # From oslo.log
 #
 
-# If set to true, the logging level will be set to DEBUG instead of the default
-# INFO level. (boolean value)
+# If set to true, the logging level will be set to DEBUG instead of
+# the default INFO level. (boolean value)
 # Note: This option can be changed without restarting.
 #debug = false
 
-# The name of a logging configuration file. This file is appended to any
-# existing logging configuration files. For details about logging configuration
-# files, see the Python logging module documentation. Note that when logging
-# configuration files are used then all logging configuration is set in the
-# configuration file and other logging configuration options are ignored (for
-# example, logging_context_format_string). (string value)
+# The name of a logging configuration file. This file is appended to
+# any existing logging configuration files. For details about logging
+# configuration files, see the Python logging module documentation.
+# Note that when logging configuration files are used then all logging
+# configuration is set in the configuration file and other logging
+# configuration options are ignored (for example,
+# logging_context_format_string). (string value)
 # Note: This option can be changed without restarting.
 # Deprecated group/name - [DEFAULT]/log_config
-#log_config_append = <None>
 
 # Defines the format string for %%(asctime)s in log records. Default:
-# %(default)s . This option is ignored if log_config_append is set. (string
-# value)
+# %(default)s . This option is ignored if log_config_append is set.
+# (string value)
 #log_date_format = %Y-%m-%d %H:%M:%S
 
-# (Optional) Name of log file to send logging output to. If no default is set,
-# logging will go to stderr as defined by use_stderr. This option is ignored if
-# log_config_append is set. (string value)
+# (Optional) Name of log file to send logging output to. If no default
+# is set, logging will go to stderr as defined by use_stderr. This
+# option is ignored if log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logfile
 #log_file = <None>
 
-# (Optional) The base directory used for relative log_file  paths. This option
-# is ignored if log_config_append is set. (string value)
+# (Optional) The base directory used for relative log_file  paths.
+# This option is ignored if log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logdir
 #log_dir = <None>
 
-# Uses logging handler designed to watch file system. When log file is moved or
-# removed this handler will open a new log file with specified path
-# instantaneously. It makes sense only if log_file option is specified and Linux
-# platform is used. This option is ignored if log_config_append is set. (boolean
-# value)
+# Uses logging handler designed to watch file system. When log file is
+# moved or removed this handler will open a new log file with
+# specified path instantaneously. It makes sense only if log_file
+# option is specified and Linux platform is used. This option is
+# ignored if log_config_append is set. (boolean value)
 #watch_log_file = false
 
-# Use syslog for logging. Existing syslog format is DEPRECATED and will be
-# changed later to honor RFC5424. This option is ignored if log_config_append is
-# set. (boolean value)
+# Use syslog for logging. Existing syslog format is DEPRECATED and
+# will be changed later to honor RFC5424. This option is ignored if
+# log_config_append is set. (boolean value)
 #use_syslog = false
 
-# Enable journald for logging. If running in a systemd environment you may wish
-# to enable journal support. Doing so will use the journal native protocol which
-# includes structured metadata in addition to log messages.This option is
-# ignored if log_config_append is set. (boolean value)
+# Enable journald for logging. If running in a systemd environment you
+# may wish to enable journal support. Doing so will use the journal
+# native protocol which includes structured metadata in addition to
+# log messages.This option is ignored if log_config_append is set.
+# (boolean value)
 #use_journal = false
 
 # Syslog facility to receive log lines. This option is ignored if
 # log_config_append is set. (string value)
 #syslog_log_facility = LOG_USER
 
-# Use JSON formatting for logging. This option is ignored if log_config_append
-# is set. (boolean value)
+# Use JSON formatting for logging. This option is ignored if
+# log_config_append is set. (boolean value)
 #use_json = false
 
-# Log output to standard error. This option is ignored if log_config_append is
-# set. (boolean value)
+# Log output to standard error. This option is ignored if
+# log_config_append is set. (boolean value)
 #use_stderr = false
 
 # Format string to use for log messages with context. (string value)
 #logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
 
-# Format string to use for log messages when context is undefined. (string
+# Format string to use for log messages when context is undefined.
+# (string value)
+#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
+
+# Additional data to append to log message when logging level for the
+# message is DEBUG. (string value)
+#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
+
+# Prefix each line of exception output with this format. (string
 # value)
-#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
-
-# Additional data to append to log message when logging level for the message is
-# DEBUG. (string value)
-#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
-
-# Prefix each line of exception output with this format. (string value)
 #logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
 
 # Defines the format string for %(user_identity)s that is used in
 # logging_context_format_string. (string value)
 #logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
 
-# List of package logging levels in logger=LEVEL pairs. This option is ignored
-# if log_config_append is set. (list value)
+# List of package logging levels in logger=LEVEL pairs. This option is
+# ignored if log_config_append is set. (list value)
 #default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
 
 # Enables or disables publication of error events. (boolean value)
 #publish_errors = false
 
-# The format for an instance that is passed with the log message. (string value)
+# The format for an instance that is passed with the log message.
+# (string value)
 #instance_format = "[instance: %(uuid)s] "
 
-# The format for an instance UUID that is passed with the log message. (string
-# value)
+# The format for an instance UUID that is passed with the log message.
+# (string value)
 #instance_uuid_format = "[instance: %(uuid)s] "
 
 # Interval, number of seconds, of log rate limiting. (integer value)
 #rate_limit_interval = 0
 
-# Maximum number of logged messages per rate_limit_interval. (integer value)
+# Maximum number of logged messages per rate_limit_interval. (integer
+# value)
 #rate_limit_burst = 0
 
-# Log level name used by rate limiting: CRITICAL, ERROR, INFO, WARNING, DEBUG or
-# empty string. Logs with level greater or equal to rate_limit_except_level are
-# not filtered. An empty string means that all levels are filtered. (string
-# value)
+# Log level name used by rate limiting: CRITICAL, ERROR, INFO,
+# WARNING, DEBUG or empty string. Logs with level greater or equal to
+# rate_limit_except_level are not filtered. An empty string means that
+# all levels are filtered. (string value)
 #rate_limit_except_level = CRITICAL
 
 # Enables or disables fatal status of deprecations. (boolean value)
 #fatal_deprecations = false
-
 #
 # From oslo.messaging
 #
@@ -119,14 +3447,17 @@
 # Size of RPC connection pool. (integer value)
 #rpc_conn_pool_size = 30
 
-# The pool size limit for connections expiration policy (integer value)
+# The pool size limit for connections expiration policy (integer
+# value)
 #conn_pool_min_size = 2
 
-# The time-to-live in sec of idle connections in the pool (integer value)
+# The time-to-live in sec of idle connections in the pool (integer
+# value)
 #conn_pool_ttl = 1200
 
-# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
-# The "host" option should point or resolve to this address. (string value)
+# ZeroMQ bind address. Should be a wildcard (*), an ethernet
+# interface, or IP. The "host" option should point or resolve to this
+# address. (string value)
 #rpc_zmq_bind_address = *
 
 # MatchMaker driver. (string value)
@@ -139,51 +3470,54 @@
 # Number of ZeroMQ contexts, defaults to 1. (integer value)
 #rpc_zmq_contexts = 1
 
-# Maximum number of ingress messages to locally buffer per topic. Default is
-# unlimited. (integer value)
+# Maximum number of ingress messages to locally buffer per topic.
+# Default is unlimited. (integer value)
 #rpc_zmq_topic_backlog = <None>
 
 # Directory for holding IPC sockets. (string value)
 #rpc_zmq_ipc_dir = /var/run/openstack
 
-# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
-# "host" option, if running Nova. (string value)
+# Name of this node. Must be a valid hostname, FQDN, or IP address.
+# Must match "host" option, if running Nova. (string value)
 #rpc_zmq_host = localhost
 
-# Number of seconds to wait before all pending messages will be sent after
-# closing a socket. The default value of -1 specifies an infinite linger period.
-# The value of 0 specifies no linger period. Pending messages shall be discarded
-# immediately when the socket is closed. Positive values specify an upper bound
-# for the linger period. (integer value)
+# Number of seconds to wait before all pending messages will be sent
+# after closing a socket. The default value of -1 specifies an
+# infinite linger period. The value of 0 specifies no linger period.
+# Pending messages shall be discarded immediately when the socket is
+# closed. Positive values specify an upper bound for the linger
+# period. (integer value)
 # Deprecated group/name - [DEFAULT]/rpc_cast_timeout
 #zmq_linger = -1
 
-# The default number of seconds that poll should wait. Poll raises timeout
-# exception when timeout expired. (integer value)
+# The default number of seconds that poll should wait. Poll raises
+# timeout exception when timeout expired. (integer value)
 #rpc_poll_timeout = 1
 
-# Expiration timeout in seconds of a name service record about existing target (
-# < 0 means no timeout). (integer value)
+# Expiration timeout in seconds of a name service record about
+# existing target ( < 0 means no timeout). (integer value)
 #zmq_target_expire = 300
 
-# Update period in seconds of a name service record about existing target.
-# (integer value)
+# Update period in seconds of a name service record about existing
+# target. (integer value)
 #zmq_target_update = 180
 
-# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
-# value)
+# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy.
+# (boolean value)
 #use_pub_sub = false
 
 # Use ROUTER remote proxy. (boolean value)
 #use_router_proxy = false
 
-# This option makes direct connections dynamic or static. It makes sense only
-# with use_router_proxy=False which means to use direct connections for direct
-# message types (ignored otherwise). (boolean value)
+# This option makes direct connections dynamic or static. It makes
+# sense only with use_router_proxy=False which means to use direct
+# connections for direct message types (ignored otherwise). (boolean
+# value)
 #use_dynamic_connections = false
 
-# How many additional connections to a host will be made for failover reasons.
-# This option is actual only in dynamic connections mode. (integer value)
+# How many additional connections to a host will be made for failover
+# reasons. This option is actual only in dynamic connections mode.
+# (integer value)
 #zmq_failover_connections = 2
 
 # Minimal port number for random ports range. (port value)
@@ -196,8 +3530,8 @@
 # Maximum value: 65536
 #rpc_zmq_max_port = 65536
 
-# Number of retries to find free port number before fail with ZMQBindError.
-# (integer value)
+# Number of retries to find free port number before fail with
+# ZMQBindError. (integer value)
 #rpc_zmq_bind_port_retries = 100
 
 # Default serialization mechanism for serializing/deserializing
@@ -207,77 +3541,83 @@
 # msgpack - <No description provided>
 #rpc_zmq_serialization = json
 
-# This option configures round-robin mode in zmq socket. True means not keeping
-# a queue when server side disconnects. False means to keep queue and messages
-# even if server is disconnected, when the server appears we send all
-# accumulated messages to it. (boolean value)
+# This option configures round-robin mode in zmq socket. True means
+# not keeping a queue when server side disconnects. False means to
+# keep queue and messages even if server is disconnected, when the
+# server appears we send all accumulated messages to it. (boolean
+# value)
 #zmq_immediate = true
 
-# Enable/disable TCP keepalive (KA) mechanism. The default value of -1 (or any
-# other negative value) means to skip any overrides and leave it to OS default;
-# 0 and 1 (or any other positive value) mean to disable and enable the option
-# respectively. (integer value)
+# Enable/disable TCP keepalive (KA) mechanism. The default value of -1
+# (or any other negative value) means to skip any overrides and leave
+# it to OS default; 0 and 1 (or any other positive value) mean to
+# disable and enable the option respectively. (integer value)
 #zmq_tcp_keepalive = -1
 
-# The duration between two keepalive transmissions in idle condition. The unit
-# is platform dependent, for example, seconds in Linux, milliseconds in Windows
-# etc. The default value of -1 (or any other negative value and 0) means to skip
-# any overrides and leave it to OS default. (integer value)
+# The duration between two keepalive transmissions in idle condition.
+# The unit is platform dependent, for example, seconds in Linux,
+# milliseconds in Windows etc. The default value of -1 (or any other
+# negative value and 0) means to skip any overrides and leave it to OS
+# default. (integer value)
 #zmq_tcp_keepalive_idle = -1
 
-# The number of retransmissions to be carried out before declaring that remote
-# end is not available. The default value of -1 (or any other negative value and
-# 0) means to skip any overrides and leave it to OS default. (integer value)
+# The number of retransmissions to be carried out before declaring
+# that remote end is not available. The default value of -1 (or any
+# other negative value and 0) means to skip any overrides and leave it
+# to OS default. (integer value)
 #zmq_tcp_keepalive_cnt = -1
 
 # The duration between two successive keepalive retransmissions, if
-# acknowledgement to the previous keepalive transmission is not received. The
-# unit is platform dependent, for example, seconds in Linux, milliseconds in
-# Windows etc. The default value of -1 (or any other negative value and 0) means
-# to skip any overrides and leave it to OS default. (integer value)
+# acknowledgement to the previous keepalive transmission is not
+# received. The unit is platform dependent, for example, seconds in
+# Linux, milliseconds in Windows etc. The default value of -1 (or any
+# other negative value and 0) means to skip any overrides and leave it
+# to OS default. (integer value)
 #zmq_tcp_keepalive_intvl = -1
 
-# Maximum number of (green) threads to work concurrently. (integer value)
+# Maximum number of (green) threads to work concurrently. (integer
+# value)
 #rpc_thread_pool_size = 100
 
-# Expiration timeout in seconds of a sent/received message after which it is not
-# tracked anymore by a client/server. (integer value)
+# Expiration timeout in seconds of a sent/received message after which
+# it is not tracked anymore by a client/server. (integer value)
 #rpc_message_ttl = 300
 
-# Wait for message acknowledgements from receivers. This mechanism works only
-# via proxy without PUB/SUB. (boolean value)
+# Wait for message acknowledgements from receivers. This mechanism
+# works only via proxy without PUB/SUB. (boolean value)
 #rpc_use_acks = false
 
-# Number of seconds to wait for an ack from a cast/call. After each retry
-# attempt this timeout is multiplied by some specified multiplier. (integer
-# value)
+# Number of seconds to wait for an ack from a cast/call. After each
+# retry attempt this timeout is multiplied by some specified
+# multiplier. (integer value)
 #rpc_ack_timeout_base = 15
 
-# Number to multiply base ack timeout by after each retry attempt. (integer
-# value)
+# Number to multiply base ack timeout by after each retry attempt.
+# (integer value)
 #rpc_ack_timeout_multiplier = 2
 
-# Default number of message sending attempts in case of any problems occurred:
-# positive value N means at most N retries, 0 means no retries, None or -1 (or
-# any other negative values) mean to retry forever. This option is used only if
-# acknowledgments are enabled. (integer value)
+# Default number of message sending attempts in case of any problems
+# occurred: positive value N means at most N retries, 0 means no
+# retries, None or -1 (or any other negative values) mean to retry
+# forever. This option is used only if acknowledgments are enabled.
+# (integer value)
 #rpc_retry_attempts = 3
 
-# List of publisher hosts SubConsumer can subscribe on. This option has higher
-# priority then the default publishers list taken from the matchmaker. (list
-# value)
+# List of publisher hosts SubConsumer can subscribe on. This option
+# has higher priority then the default publishers list taken from the
+# matchmaker. (list value)
 #subscribe_on =
 
-# Size of executor thread pool when executor is threading or eventlet. (integer
-# value)
+# Size of executor thread pool when executor is threading or eventlet.
+# (integer value)
 # Deprecated group/name - [DEFAULT]/rpc_thread_pool_size
 #executor_thread_pool_size = 64
 
 # Seconds to wait for a response from a call. (integer value)
 #rpc_response_timeout = 60
 
-# The network address and optional user credentials for connecting to the
-# messaging backend, in URL format. The expected format is:
+# The network address and optional user credentials for connecting to
+# the messaging backend, in URL format. The expected format is:
 #
 # driver://[user:pass@]host:port[,[userN:passN@]hostN:portN]/virtual_host?query
 #
@@ -288,84 +3628,374 @@
 # https://docs.openstack.org/oslo.messaging/latest/reference/transport.html
 # (string value)
 #transport_url = <None>
-
-# DEPRECATED: The messaging driver to use, defaults to rabbit. Other drivers
-# include amqp and zmq. (string value)
+transport_url = rabbit://openstack:opnfv_secret@10.167.4.28:5672,openstack:opnfv_secret@10.167.4.29:5672,openstack:opnfv_secret@10.167.4.30:5672//openstack
+
+# DEPRECATED: The messaging driver to use, defaults to rabbit. Other
+# drivers include amqp and zmq. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
 #rpc_backend = rabbit
 
-# The default exchange under which topics are scoped. May be overridden by an
-# exchange name specified in the transport_url option. (string value)
+# The default exchange under which topics are scoped. May be
+# overridden by an exchange name specified in the transport_url
+# option. (string value)
 #control_exchange = openstack
 
-#
-# From oslo.service.periodic_task
-#
-
-# Some periodic tasks can be run in a separate process. Should we run them here?
-# (boolean value)
-#run_external_periodic_tasks = true
-
-#
-# From oslo.service.service
-#
-
-# Enable eventlet backdoor.  Acceptable values are 0, <port>, and <start>:<end>,
-# where 0 results in listening on a random tcp port number; <port> results in
-# listening on the specified port number (and not enabling backdoor if that port
-# is in use); and <start>:<end> results in listening on the smallest unused port
-# number within the specified range of port numbers.  The chosen port is
-# displayed in the service's log file. (string value)
-#backdoor_port = <None>
-
-# Enable eventlet backdoor, using the provided path as a unix socket that can
-# receive connections. This option is mutually exclusive with 'backdoor_port' in
-# that only one should be provided. If both are provided then the existence of
-# this option overrides the usage of that option. (string value)
-#backdoor_socket = <None>
-
-# Enables or disables logging values of all registered options when starting a
-# service (at DEBUG level). (boolean value)
-#log_options = true
-
-# Specify a timeout after which a gracefully shutdown server will exit. Zero
-# value means endless wait. (integer value)
-#graceful_shutdown_timeout = 60
-
-
-[cors]
-
-#
-# From oslo.middleware
-#
-
-# Indicate whether this resource may be shared with the domain received in the
-# requests "origin" header. Format: "<protocol>://<host>[:<port>]", no trailing
-# slash. Example: https://horizon.example.com (list value)
-#allowed_origin = <None>
-
-# Indicate that the actual request can include user credentials (boolean value)
-#allow_credentials = true
-
-# Indicate which headers are safe to expose to the API. Defaults to HTTP Simple
-# Headers. (list value)
-#expose_headers =
-
-# Maximum cache age of CORS preflight requests. (integer value)
-#max_age = 3600
-
-# Indicate which methods can be used during the actual request. (list value)
-#allow_methods = OPTIONS,GET,HEAD,POST,PUT,DELETE,TRACE,PATCH
-
-# Indicate which header field names may be used during the actual request. (list
-# value)
-#allow_headers =
-
-
-[database]
-
+
+[api]
+#
+# Options under this group are used to define Nova API.
+
+#
+# From nova.conf
+#
+
+#
+# This determines the strategy to use for authentication: keystone or
+# noauth2.
+# 'noauth2' is designed for testing only, as it does no actual
+# credential
+# checking. 'noauth2' provides administrative credentials only if
+# 'admin' is
+# specified as the username.
+#  (string value)
+# Possible values:
+# keystone - <No description provided>
+# noauth2 - <No description provided>
+auth_strategy = keystone
+
+#
+# When True, the 'X-Forwarded-For' header is treated as the canonical
+# remote
+# address. When False (the default), the 'remote_address' header is
+# used.
+#
+# You should only enable this if you have an HTML sanitizing proxy.
+#  (boolean value)
+#use_forwarded_for = false
+
+#
+# When gathering the existing metadata for a config drive, the
+# EC2-style
+# metadata is returned for all versions that don't appear in this
+# option.
+# As of the Liberty release, the available versions are:
+#
+# * 1.0
+# * 2007-01-19
+# * 2007-03-01
+# * 2007-08-29
+# * 2007-10-10
+# * 2007-12-15
+# * 2008-02-01
+# * 2008-09-01
+# * 2009-04-04
+#
+# The option is in the format of a single string, with each version
+# separated
+# by a space.
+#
+# Possible values:
+#
+# * Any string that represents zero or more versions, separated by
+# spaces.
+#  (string value)
+#config_drive_skip_versions = 1.0 2007-01-19 2007-03-01 2007-08-29 2007-10-10 2007-12-15 2008-02-01 2008-09-01
+
+#
+# A list of vendordata providers.
+#
+# vendordata providers are how deployers can provide metadata via
+# configdrive
+# and metadata that is specific to their deployment. There are
+# currently two
+# supported providers: StaticJSON and DynamicJSON.
+#
+# StaticJSON reads a JSON file configured by the flag
+# vendordata_jsonfile_path
+# and places the JSON from that file into vendor_data.json and
+# vendor_data2.json.
+#
+# DynamicJSON is configured via the vendordata_dynamic_targets flag,
+# which is
+# documented separately. For each of the endpoints specified in that
+# flag, a
+# section is added to the vendor_data2.json.
+#
+# For more information on the requirements for implementing a
+# vendordata
+# dynamic endpoint, please see the vendordata.rst file in the nova
+# developer
+# reference.
+#
+# Possible values:
+#
+# * A list of vendordata providers, with StaticJSON and DynamicJSON
+# being
+#   current options.
+#
+# Related options:
+#
+# * vendordata_dynamic_targets
+# * vendordata_dynamic_ssl_certfile
+# * vendordata_dynamic_connect_timeout
+# * vendordata_dynamic_read_timeout
+# * vendordata_dynamic_failure_fatal
+#  (list value)
+#vendordata_providers = StaticJSON
+
+#
+# A list of targets for the dynamic vendordata provider. These targets
+# are of
+# the form <name>@<url>.
+#
+# The dynamic vendordata provider collects metadata by contacting
+# external REST
+# services and querying them for information about the instance. This
+# behaviour
+# is documented in the vendordata.rst file in the nova developer
+# reference.
+#  (list value)
+#vendordata_dynamic_targets =
+
+#
+# Path to an optional certificate file or CA bundle to verify dynamic
+# vendordata REST services ssl certificates against.
+#
+# Possible values:
+#
+# * An empty string, or a path to a valid certificate file
+#
+# Related options:
+#
+# * vendordata_providers
+# * vendordata_dynamic_targets
+# * vendordata_dynamic_connect_timeout
+# * vendordata_dynamic_read_timeout
+# * vendordata_dynamic_failure_fatal
+#  (string value)
+#vendordata_dynamic_ssl_certfile =
+
+#
+# Maximum wait time for an external REST service to connect.
+#
+# Possible values:
+#
+# * Any integer with a value greater than three (the TCP packet
+# retransmission
+#   timeout). Note that instance start may be blocked during this wait
+# time,
+#   so this value should be kept small.
+#
+# Related options:
+#
+# * vendordata_providers
+# * vendordata_dynamic_targets
+# * vendordata_dynamic_ssl_certfile
+# * vendordata_dynamic_read_timeout
+# * vendordata_dynamic_failure_fatal
+#  (integer value)
+# Minimum value: 3
+#vendordata_dynamic_connect_timeout = 5
+
+#
+# Maximum wait time for an external REST service to return data once
+# connected.
+#
+# Possible values:
+#
+# * Any integer. Note that instance start is blocked during this wait
+# time,
+#   so this value should be kept small.
+#
+# Related options:
+#
+# * vendordata_providers
+# * vendordata_dynamic_targets
+# * vendordata_dynamic_ssl_certfile
+# * vendordata_dynamic_connect_timeout
+# * vendordata_dynamic_failure_fatal
+#  (integer value)
+# Minimum value: 0
+#vendordata_dynamic_read_timeout = 5
+
+#
+# Should failures to fetch dynamic vendordata be fatal to instance
+# boot?
+#
+# Related options:
+#
+# * vendordata_providers
+# * vendordata_dynamic_targets
+# * vendordata_dynamic_ssl_certfile
+# * vendordata_dynamic_connect_timeout
+# * vendordata_dynamic_read_timeout
+#  (boolean value)
+#vendordata_dynamic_failure_fatal = false
+
+#
+# This option is the time (in seconds) to cache metadata. When set to
+# 0,
+# metadata caching is disabled entirely; this is generally not
+# recommended for
+# performance reasons. Increasing this setting should improve response
+# times
+# of the metadata API when under heavy load. Higher values may
+# increase memory
+# usage, and result in longer times for host metadata changes to take
+# effect.
+#  (integer value)
+# Minimum value: 0
+#metadata_cache_expiration = 15
+
+#
+# Cloud providers may store custom data in vendor data file that will
+# then be
+# available to the instances via the metadata service, and to the
+# rendering of
+# config-drive. The default class for this, JsonFileVendorData, loads
+# this
+# information from a JSON file, whose path is configured by this
+# option. If
+# there is no path set by this option, the class returns an empty
+# dictionary.
+#
+# Possible values:
+#
+# * Any string representing the path to the data file, or an empty
+# string
+#     (default).
+#  (string value)
+#vendordata_jsonfile_path = <None>
+
+#
+# As a query can potentially return many thousands of items, you can
+# limit the
+# maximum number of items in a single response by setting this option.
+#  (integer value)
+# Minimum value: 0
+# Deprecated group/name - [DEFAULT]/osapi_max_limit
+#max_limit = 1000
+max_limit=1000
+
+#
+# This string is prepended to the normal URL that is returned in links
+# to the
+# OpenStack Compute API. If it is empty (the default), the URLs are
+# returned
+# unchanged.
+#
+# Possible values:
+#
+# * Any string, including an empty string (the default).
+#  (string value)
+# Deprecated group/name - [DEFAULT]/osapi_compute_link_prefix
+#compute_link_prefix = <None>
+
+#
+# This string is prepended to the normal URL that is returned in links
+# to
+# Glance resources. If it is empty (the default), the URLs are
+# returned
+# unchanged.
+#
+# Possible values:
+#
+# * Any string, including an empty string (the default).
+#  (string value)
+# Deprecated group/name - [DEFAULT]/osapi_glance_link_prefix
+#glance_link_prefix = <None>
+
+# DEPRECATED:
+# Operators can turn off the ability for a user to take snapshots of
+# their
+# instances by setting this option to False. When disabled, any
+# attempt to
+# take a snapshot will result in a HTTP 400 response ("Bad Request").
+#  (boolean value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason: This option disables the createImage server action API in a
+# non-discoverable way and is thus a barrier to interoperability.
+# Also, it is not used for other APIs that create snapshots like
+# shelve or createBackup. Disabling snapshots should be done via
+# policy if so desired.
+#allow_instance_snapshots = true
+
+# DEPRECATED:
+# This option is a list of all instance states for which network
+# address
+# information should not be returned from the API.
+#
+# Possible values:
+#
+#   A list of strings, where each string is a valid VM state, as
+# defined in
+#   nova/compute/vm_states.py. As of the Newton release, they are:
+#
+# * "active"
+# * "building"
+# * "paused"
+# * "suspended"
+# * "stopped"
+# * "rescued"
+# * "resized"
+# * "soft-delete"
+# * "deleted"
+# * "error"
+# * "shelved"
+# * "shelved_offloaded"
+#  (list value)
+# Deprecated group/name - [DEFAULT]/osapi_hide_server_address_states
+# This option is deprecated for removal since 17.0.0.
+# Its value may be silently ignored in the future.
+# Reason: This option hide the server address in server representation
+# for configured server states. Which makes GET server API controlled
+# by this config options. Due to this config options, user would not
+# be able to discover the API behavior on different clouds which leads
+# to the interop issue.
+#hide_server_address_states = building
+
+# The full path to the fping binary. (string value)
+fping_path = /usr/sbin/fping
+
+#
+# When True, the TenantNetworkController will query the Neutron API to
+# get the
+# default networks to use.
+#
+# Related options:
+#
+# * neutron_default_tenant_id
+#  (boolean value)
+#use_neutron_default_nets = false
+
+#
+# Tenant ID for getting the default network from Neutron API (also
+# referred in
+# some places as the 'project ID') to use.
+#
+# Related options:
+#
+# * use_neutron_default_nets
+#  (string value)
+#neutron_default_tenant_id = default
+
+#
+# Enables returning of the instance password by the relevant server
+# API calls
+# such as create, rebuild, evacuate, or rescue. If the hypervisor does
+# not
+# support password injection, then the password returned will not be
+# correct,
+# so if your hypervisor does not support password injection, set this
+# to False.
+#  (boolean value)
+#enable_instance_password = true
+
+
+[api_database]
 #
 # From oslo.db
 #
@@ -377,66 +4007,73 @@
 # Deprecated group/name - [DEFAULT]/db_backend
 #backend = sqlalchemy
 
-# The SQLAlchemy connection string to use to connect to the database. (string
-# value)
+# The SQLAlchemy connection string to use to connect to the database.
+# (string value)
 # Deprecated group/name - [DEFAULT]/sql_connection
 # Deprecated group/name - [DATABASE]/sql_connection
 # Deprecated group/name - [sql]/connection
 #connection = <None>
-
-# The SQLAlchemy connection string to use to connect to the slave database.
-# (string value)
+connection = mysql+pymysql://nova:opnfv_secret@10.167.4.23/nova_api?charset=utf8
+# The SQLAlchemy connection string to use to connect to the slave
+# database. (string value)
 #slave_connection = <None>
 
-# The SQL mode to be used for MySQL sessions. This option, including the
-# default, overrides any server-set SQL mode. To use whatever SQL mode is set by
-# the server configuration, set this to no value. Example: mysql_sql_mode=
-# (string value)
+# The SQL mode to be used for MySQL sessions. This option, including
+# the default, overrides any server-set SQL mode. To use whatever SQL
+# mode is set by the server configuration, set this to no value.
+# Example: mysql_sql_mode= (string value)
 #mysql_sql_mode = TRADITIONAL
 
-# If True, transparently enables support for handling MySQL Cluster (NDB).
-# (boolean value)
+# If True, transparently enables support for handling MySQL Cluster
+# (NDB). (boolean value)
 #mysql_enable_ndb = false
 
-# Connections which have been present in the connection pool longer than this
-# number of seconds will be replaced with a new one the next time they are
-# checked out from the pool. (integer value)
+# Connections which have been present in the connection pool longer
+# than this number of seconds will be replaced with a new one the next
+# time they are checked out from the pool. (integer value)
 # Deprecated group/name - [DATABASE]/idle_timeout
 # Deprecated group/name - [database]/idle_timeout
 # Deprecated group/name - [DEFAULT]/sql_idle_timeout
 # Deprecated group/name - [DATABASE]/sql_idle_timeout
 # Deprecated group/name - [sql]/idle_timeout
 #connection_recycle_time = 3600
-
-# Minimum number of SQL connections to keep open in a pool. (integer value)
+connection_recycle_time = 300
+
+# Minimum number of SQL connections to keep open in a pool. (integer
+# value)
 # Deprecated group/name - [DEFAULT]/sql_min_pool_size
 # Deprecated group/name - [DATABASE]/sql_min_pool_size
 #min_pool_size = 1
 
-# Maximum number of SQL connections to keep open in a pool. Setting a value of 0
-# indicates no limit. (integer value)
+# Maximum number of SQL connections to keep open in a pool. Setting a
+# value of 0 indicates no limit. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_max_pool_size
 # Deprecated group/name - [DATABASE]/sql_max_pool_size
 #max_pool_size = 5
-
-# Maximum number of database connection retries during startup. Set to -1 to
-# specify an infinite retry count. (integer value)
+max_pool_size = 10
+
+# Maximum number of database connection retries during startup. Set to
+# -1 to specify an infinite retry count. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_max_retries
 # Deprecated group/name - [DATABASE]/sql_max_retries
 #max_retries = 10
-
-# Interval between retries of opening a SQL connection. (integer value)
+max_retries = -1
+
+# Interval between retries of opening a SQL connection. (integer
+# value)
 # Deprecated group/name - [DEFAULT]/sql_retry_interval
 # Deprecated group/name - [DATABASE]/reconnect_interval
 #retry_interval = 10
 
-# If set, use this value for max_overflow with SQLAlchemy. (integer value)
+# If set, use this value for max_overflow with SQLAlchemy. (integer
+# value)
 # Deprecated group/name - [DEFAULT]/sql_max_overflow
 # Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
 #max_overflow = 50
-
-# Verbosity of SQL debugging information: 0=None, 100=Everything. (integer
-# value)
+max_overflow = 30
+
+# Verbosity of SQL debugging information: 0=None, 100=Everything.
+# (integer value)
 # Minimum value: 0
 # Maximum value: 100
 # Deprecated group/name - [DEFAULT]/sql_connection_debug
@@ -446,82 +4083,7398 @@
 # Deprecated group/name - [DEFAULT]/sql_connection_trace
 #connection_trace = false
 
-# If set, use this value for pool_timeout with SQLAlchemy. (integer value)
+# If set, use this value for pool_timeout with SQLAlchemy. (integer
+# value)
 # Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
 #pool_timeout = <None>
 
-# Enable the experimental use of database reconnect on connection lost. (boolean
-# value)
+# Enable the experimental use of database reconnect on connection
+# lost. (boolean value)
 #use_db_reconnect = false
 
 # Seconds between retries of a database transaction. (integer value)
 #db_retry_interval = 1
 
-# If True, increases the interval between retries of a database operation up to
-# db_max_retry_interval. (boolean value)
+# If True, increases the interval between retries of a database
+# operation up to db_max_retry_interval. (boolean value)
 #db_inc_retry_interval = true
 
-# If db_inc_retry_interval is set, the maximum seconds between retries of a
-# database operation. (integer value)
+# If db_inc_retry_interval is set, the maximum seconds between retries
+# of a database operation. (integer value)
 #db_max_retry_interval = 10
 
-# Maximum retries in case of connection error or deadlock error before error is
-# raised. Set to -1 to specify an infinite retry count. (integer value)
+# Maximum retries in case of connection error or deadlock error before
+# error is raised. Set to -1 to specify an infinite retry count.
+# (integer value)
 #db_max_retries = 20
 
 #
 # From oslo.db.concurrency
 #
 
-# Enable the experimental use of thread pooling for all DB API calls (boolean
-# value)
+# Enable the experimental use of thread pooling for all DB API calls
+# (boolean value)
 # Deprecated group/name - [DEFAULT]/dbapi_use_tpool
 #use_tpool = false
-
-
-[healthcheck]
-
+[barbican]
+#
+# From castellan.config
+#
+
+# Use this endpoint to connect to Barbican, for example:
+# "http://localhost:9311/" (string value)
+#barbican_endpoint = <None>
+
+# Version of the Barbican API, for example: "v1" (string value)
+#barbican_api_version = <None>
+
+# Use this endpoint to connect to Keystone (string value)
+# Deprecated group/name - [key_manager]/auth_url
+#auth_endpoint = http://localhost/identity/v3
+auth_endpoint = http://10.167.4.35:35357/v3
+
+# Number of seconds to wait before retrying poll for key creation completion
+# (integer value)
+#retry_delay = 1
+
+# Number of times to retry poll for key creation completion (integer value)
+#number_of_retries = 60
+
+# Specifies if insecure TLS (https) requests. If False, the server's
+# certificate will not be validated (boolean value)
+#verify_ssl = true
+
+# Specifies the type of endpoint.  Allowed values are: public, private, and
+# admin (string value)
+# Possible values:
+# public - <No description provided>
+# internal - <No description provided>
+# admin - <No description provided>
+#barbican_endpoint_type = public
+
+
+[cache]
+
+#
+# From nova.conf
+#
+backend = oslo_cache.memcache_pool
+enabled = true
+memcache_servers=10.167.4.36:11211,10.167.4.37:11211,10.167.4.38:11211
+
+# Prefix for building the configuration dictionary for the cache
+# region. This should not need to be changed unless there is another
+# dogpile.cache region with the same configuration name. (string
+# value)
+#config_prefix = cache.oslo
+
+# Default TTL, in seconds, for any cached item in the dogpile.cache
+# region. This applies to any cached method that doesn't have an
+# explicit cache expiration time defined for it. (integer value)
+#expiration_time = 600
+
+# Cache backend module. For eventlet-based or environments with
+# hundreds of threaded servers, Memcache with pooling
+# (oslo_cache.memcache_pool) is recommended. For environments with
+# less than 100 threaded servers, Memcached (dogpile.cache.memcached)
+# or Redis (dogpile.cache.redis) is recommended. Test environments
+# with a single instance of the server can use the
+# dogpile.cache.memory backend. (string value)
+# Possible values:
+# oslo_cache.memcache_pool - <No description provided>
+# oslo_cache.dict - <No description provided>
+# oslo_cache.mongo - <No description provided>
+# oslo_cache.etcd3gw - <No description provided>
+# dogpile.cache.memcached - <No description provided>
+# dogpile.cache.pylibmc - <No description provided>
+# dogpile.cache.bmemcached - <No description provided>
+# dogpile.cache.dbm - <No description provided>
+# dogpile.cache.redis - <No description provided>
+# dogpile.cache.memory - <No description provided>
+# dogpile.cache.memory_pickle - <No description provided>
+# dogpile.cache.null - <No description provided>
+#backend = dogpile.cache.null
+
+# Arguments supplied to the backend module. Specify this option once
+# per argument to be passed to the dogpile.cache backend. Example
+# format: "<argname>:<value>". (multi valued)
+#backend_argument =
+
+# Proxy classes to import that will affect the way the dogpile.cache
+# backend functions. See the dogpile.cache documentation on changing-
+# backend-behavior. (list value)
+#proxies =
+
+# Global toggle for caching. (boolean value)
+#enabled = false
+
+# Extra debugging from the cache backend (cache keys,
+# get/set/delete/etc calls). This is only really useful if you need to
+# see the specific cache-backend get/set/delete calls with the
+# keys/values.  Typically this should be left set to false. (boolean
+# value)
+#debug_cache_backend = false
+
+# Memcache servers in the format of "host:port".
+# (dogpile.cache.memcache and oslo_cache.memcache_pool backends only).
+# (list value)
+#memcache_servers = localhost:11211
+
+# Number of seconds memcached server is considered dead before it is
+# tried again. (dogpile.cache.memcache and oslo_cache.memcache_pool
+# backends only). (integer value)
+#memcache_dead_retry = 300
+
+# Timeout in seconds for every call to a server.
+# (dogpile.cache.memcache and oslo_cache.memcache_pool backends only).
+# (integer value)
+#memcache_socket_timeout = 3
+
+# Max total number of open connections to every memcached server.
+# (oslo_cache.memcache_pool backend only). (integer value)
+#memcache_pool_maxsize = 10
+
+# Number of seconds a connection to memcached is held unused in the
+# pool before it is closed. (oslo_cache.memcache_pool backend only).
+# (integer value)
+#memcache_pool_unused_timeout = 60
+
+# Number of seconds that an operation will wait to get a memcache
+# client connection. (integer value)
+#memcache_pool_connection_get_timeout = 10
+
+
+[cells]
+#
+# DEPRECATED: Cells options allow you to use cells v1 functionality in
+# an
+# OpenStack deployment.
+#
+# Note that the options in this group are only for cells v1
+# functionality, which
+# is considered experimental and not recommended for new deployments.
+# Cells v1
+# is being replaced with cells v2, which starting in the 15.0.0 Ocata
+# release is
+# required and all Nova deployments will be at least a cells v2 cell
+# of one.
+#
+
+#
+# From nova.conf
+#
+
+# DEPRECATED:
+# Enable cell v1 functionality.
+#
+# Note that cells v1 is considered experimental and not recommended
+# for new
+# Nova deployments. Cells v1 is being replaced by cells v2 which
+# starting in
+# the 15.0.0 Ocata release, all Nova deployments are at least a cells
+# v2 cell
+# of one. Setting this option, or any other options in the [cells]
+# group, is
+# not required for cells v2.
+#
+# When this functionality is enabled, it lets you to scale an
+# OpenStack
+# Compute cloud in a more distributed fashion without having to use
+# complicated technologies like database and message queue clustering.
+# Cells are configured as a tree. The top-level cell should have a
+# host
+# that runs a nova-api service, but no nova-compute services. Each
+# child cell should run all of the typical nova-* services in a
+# regular
+# Compute cloud except for nova-api. You can think of cells as a
+# normal
+# Compute deployment in that each cell has its own database server and
+# message queue broker.
+#
+# Related options:
+#
+# * name: A unique cell name must be given when this functionality
+#   is enabled.
+# * cell_type: Cell type should be defined for all cells.
+#  (boolean value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Cells v1 is being replaced with Cells v2.
+enable = false
+
+# DEPRECATED:
+# Name of the current cell.
+#
+# This value must be unique for each cell. Name of a cell is used as
+# its id, leaving this option unset or setting the same name for
+# two or more cells may cause unexpected behaviour.
+#
+# Related options:
+#
+# * enabled: This option is meaningful only when cells service
+#   is enabled
+#  (string value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Cells v1 is being replaced with Cells v2.
+#name = nova
+
+# DEPRECATED:
+# Cell capabilities.
+#
+# List of arbitrary key=value pairs defining capabilities of the
+# current cell to be sent to the parent cells. These capabilities
+# are intended to be used in cells scheduler filters/weighers.
+#
+# Possible values:
+#
+# * key=value pairs list for example;
+#   ``hypervisor=xenserver;kvm,os=linux;windows``
+#  (list value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Cells v1 is being replaced with Cells v2.
+#capabilities = hypervisor=xenserver;kvm,os=linux;windows
+
+# DEPRECATED:
+# Call timeout.
+#
+# Cell messaging module waits for response(s) to be put into the
+# eventlet queue. This option defines the seconds waited for
+# response from a call to a cell.
+#
+# Possible values:
+#
+# * An integer, corresponding to the interval time in seconds.
+#  (integer value)
+# Minimum value: 0
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Cells v1 is being replaced with Cells v2.
+#call_timeout = 60
+
+# DEPRECATED:
+# Reserve percentage
+#
+# Percentage of cell capacity to hold in reserve, so the minimum
+# amount of free resource is considered to be;
+#
+#     min_free = total * (reserve_percent / 100.0)
+#
+# This option affects both memory and disk utilization.
+#
+# The primary purpose of this reserve is to ensure some space is
+# available for users who want to resize their instance to be larger.
+# Note that currently once the capacity expands into this reserve
+# space this option is ignored.
+#
+# Possible values:
+#
+# * An integer or float, corresponding to the percentage of cell
+# capacity to
+#   be held in reserve.
+#  (floating point value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Cells v1 is being replaced with Cells v2.
+#reserve_percent = 10.0
+
+# DEPRECATED:
+# Type of cell.
+#
+# When cells feature is enabled the hosts in the OpenStack Compute
+# cloud are partitioned into groups. Cells are configured as a tree.
+# The top-level cell's cell_type must be set to ``api``. All other
+# cells are defined as a ``compute cell`` by default.
+#
+# Related option:
+#
+# * quota_driver: Disable quota checking for the child cells.
+#   (nova.quota.NoopQuotaDriver)
+#  (string value)
+# Possible values:
+# api - <No description provided>
+# compute - <No description provided>
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Cells v1 is being replaced with Cells v2.
+#cell_type = compute
+
+# DEPRECATED:
+# Mute child interval.
+#
+# Number of seconds after which a lack of capability and capacity
+# update the child cell is to be treated as a mute cell. Then the
+# child cell will be weighed as recommend highly that it be skipped.
+#
+# Possible values:
+#
+# * An integer, corresponding to the interval time in seconds.
+#  (integer value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Cells v1 is being replaced with Cells v2.
+#mute_child_interval = 300
+
+# DEPRECATED:
+# Bandwidth update interval.
+#
+# Seconds between bandwidth usage cache updates for cells.
+#
+# Possible values:
+#
+# * An integer, corresponding to the interval time in seconds.
+#  (integer value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Cells v1 is being replaced with Cells v2.
+#bandwidth_update_interval = 600
+
+# DEPRECATED:
+# Instance update sync database limit.
+#
+# Number of instances to pull from the database at one time for
+# a sync. If there are more instances to update the results will
+# be paged through.
+#
+# Possible values:
+#
+# * An integer, corresponding to a number of instances.
+#  (integer value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Cells v1 is being replaced with Cells v2.
+#instance_update_sync_database_limit = 100
+
+# DEPRECATED:
+# Mute weight multiplier.
+#
+# Multiplier used to weigh mute children. Mute children cells are
+# recommended to be skipped so their weight is multiplied by this
+# negative value.
+#
+# Possible values:
+#
+# * Negative numeric number
+#  (floating point value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Cells v1 is being replaced with Cells v2.
+#mute_weight_multiplier = -10000.0
+
+# DEPRECATED:
+# Ram weight multiplier.
+#
+# Multiplier used for weighing ram. Negative numbers indicate that
+# Compute should stack VMs on one host instead of spreading out new
+# VMs to more hosts in the cell.
+#
+# Possible values:
+#
+# * Numeric multiplier
+#  (floating point value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Cells v1 is being replaced with Cells v2.
+#ram_weight_multiplier = 10.0
+
+# DEPRECATED:
+# Offset weight multiplier
+#
+# Multiplier used to weigh offset weigher. Cells with higher
+# weight_offsets in the DB will be preferred. The weight_offset
+# is a property of a cell stored in the database. It can be used
+# by a deployer to have scheduling decisions favor or disfavor
+# cells based on the setting.
+#
+# Possible values:
+#
+# * Numeric multiplier
+#  (floating point value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Cells v1 is being replaced with Cells v2.
+#offset_weight_multiplier = 1.0
+
+# DEPRECATED:
+# Instance updated at threshold
+#
+# Number of seconds after an instance was updated or deleted to
+# continue to update cells. This option lets cells manager to only
+# attempt to sync instances that have been updated recently.
+# i.e., a threshold of 3600 means to only update instances that
+# have modified in the last hour.
+#
+# Possible values:
+#
+# * Threshold in seconds
+#
+# Related options:
+#
+# * This value is used with the ``instance_update_num_instances``
+#   value in a periodic task run.
+#  (integer value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Cells v1 is being replaced with Cells v2.
+#instance_updated_at_threshold = 3600
+
+# DEPRECATED:
+# Instance update num instances
+#
+# On every run of the periodic task, nova cells manager will attempt
+# to
+# sync instance_updated_at_threshold number of instances. When the
+# manager gets the list of instances, it shuffles them so that
+# multiple
+# nova-cells services do not attempt to sync the same instances in
+# lockstep.
+#
+# Possible values:
+#
+# * Positive integer number
+#
+# Related options:
+#
+# * This value is used with the ``instance_updated_at_threshold``
+#   value in a periodic task run.
+#  (integer value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Cells v1 is being replaced with Cells v2.
+#instance_update_num_instances = 1
+
+# DEPRECATED:
+# Maximum hop count
+#
+# When processing a targeted message, if the local cell is not the
+# target, a route is defined between neighbouring cells. And the
+# message is processed across the whole routing path. This option
+# defines the maximum hop counts until reaching the target.
+#
+# Possible values:
+#
+# * Positive integer value
+#  (integer value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Cells v1 is being replaced with Cells v2.
+#max_hop_count = 10
+
+# DEPRECATED:
+# Cells scheduler.
+#
+# The class of the driver used by the cells scheduler. This should be
+# the full Python path to the class to be used. If nothing is
+# specified
+# in this option, the CellsScheduler is used.
+#  (string value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Cells v1 is being replaced with Cells v2.
+#scheduler = nova.cells.scheduler.CellsScheduler
+
+# DEPRECATED:
+# RPC driver queue base.
+#
+# When sending a message to another cell by JSON-ifying the message
+# and making an RPC cast to 'process_message', a base queue is used.
+# This option defines the base queue name to be used when
+# communicating
+# between cells. Various topics by message type will be appended to
+# this.
+#
+# Possible values:
+#
+# * The base queue name to be used when communicating between cells.
+#  (string value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Cells v1 is being replaced with Cells v2.
+#rpc_driver_queue_base = cells.intercell
+
+# DEPRECATED:
+# Scheduler filter classes.
+#
+# Filter classes the cells scheduler should use. An entry of
+# "nova.cells.filters.all_filters" maps to all cells filters
+# included with nova. As of the Mitaka release the following
+# filter classes are available:
+#
+# Different cell filter: A scheduler hint of 'different_cell'
+# with a value of a full cell name may be specified to route
+# a build away from a particular cell.
+#
+# Image properties filter: Image metadata named
+# 'hypervisor_version_requires' with a version specification
+# may be specified to ensure the build goes to a cell which
+# has hypervisors of the required version. If either the version
+# requirement on the image or the hypervisor capability of the
+# cell is not present, this filter returns without filtering out
+# the cells.
+#
+# Target cell filter: A scheduler hint of 'target_cell' with a
+# value of a full cell name may be specified to route a build to
+# a particular cell. No error handling is done as there's no way
+# to know whether the full path is a valid.
+#
+# As an admin user, you can also add a filter that directs builds
+# to a particular cell.
+#
+#  (list value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Cells v1 is being replaced with Cells v2.
+#scheduler_filter_classes = nova.cells.filters.all_filters
+
+# DEPRECATED:
+# Scheduler weight classes.
+#
+# Weigher classes the cells scheduler should use. An entry of
+# "nova.cells.weights.all_weighers" maps to all cell weighers
+# included with nova. As of the Mitaka release the following
+# weight classes are available:
+#
+# mute_child: Downgrades the likelihood of child cells being
+# chosen for scheduling requests, which haven't sent capacity
+# or capability updates in a while. Options include
+# mute_weight_multiplier (multiplier for mute children; value
+# should be negative).
+#
+# ram_by_instance_type: Select cells with the most RAM capacity
+# for the instance type being requested. Because higher weights
+# win, Compute returns the number of available units for the
+# instance type requested. The ram_weight_multiplier option defaults
+# to 10.0 that adds to the weight by a factor of 10. Use a negative
+# number to stack VMs on one host instead of spreading out new VMs
+# to more hosts in the cell.
+#
+# weight_offset: Allows modifying the database to weight a particular
+# cell. The highest weight will be the first cell to be scheduled for
+# launching an instance. When the weight_offset of a cell is set to 0,
+# it is unlikely to be picked but it could be picked if other cells
+# have a lower weight, like if they're full. And when the
+# weight_offset
+# is set to a very high value (for example, '999999999999999'), it is
+# likely to be picked if another cell do not have a higher weight.
+#  (list value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Cells v1 is being replaced with Cells v2.
+#scheduler_weight_classes = nova.cells.weights.all_weighers
+
+# DEPRECATED:
+# Scheduler retries.
+#
+# How many retries when no cells are available. Specifies how many
+# times the scheduler tries to launch a new instance when no cells
+# are available.
+#
+# Possible values:
+#
+# * Positive integer value
+#
+# Related options:
+#
+# * This value is used with the ``scheduler_retry_delay`` value
+#   while retrying to find a suitable cell.
+#  (integer value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Cells v1 is being replaced with Cells v2.
+#scheduler_retries = 10
+
+# DEPRECATED:
+# Scheduler retry delay.
+#
+# Specifies the delay (in seconds) between scheduling retries when no
+# cell can be found to place the new instance on. When the instance
+# could not be scheduled to a cell after ``scheduler_retries`` in
+# combination with ``scheduler_retry_delay``, then the scheduling
+# of the instance failed.
+#
+# Possible values:
+#
+# * Time in seconds.
+#
+# Related options:
+#
+# * This value is used with the ``scheduler_retries`` value
+#   while retrying to find a suitable cell.
+#  (integer value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Cells v1 is being replaced with Cells v2.
+#scheduler_retry_delay = 2
+
+# DEPRECATED:
+# DB check interval.
+#
+# Cell state manager updates cell status for all cells from the DB
+# only after this particular interval time is passed. Otherwise cached
+# status are used. If this value is 0 or negative all cell status are
+# updated from the DB whenever a state is needed.
+#
+# Possible values:
+#
+# * Interval time, in seconds.
+#
+#  (integer value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Cells v1 is being replaced with Cells v2.
+#db_check_interval = 60
+
+# DEPRECATED:
+# Optional cells configuration.
+#
+# Configuration file from which to read cells configuration. If given,
+# overrides reading cells from the database.
+#
+# Cells store all inter-cell communication data, including user names
+# and passwords, in the database. Because the cells data is not
+# updated
+# very frequently, use this option to specify a JSON file to store
+# cells data. With this configuration, the database is no longer
+# consulted when reloading the cells data. The file must have columns
+# present in the Cell model (excluding common database fields and the
+# id column). You must specify the queue connection information
+# through
+# a transport_url field, instead of username, password, and so on.
+#
+# The transport_url has the following form:
+# rabbit://USERNAME:PASSWORD@HOSTNAME:PORT/VIRTUAL_HOST
+#
+# Possible values:
+#
+# The scheme can be either qpid or rabbit, the following sample shows
+# this optional configuration:
+#
+#     {
+#         "parent": {
+#             "name": "parent",
+#             "api_url": "http://api.example.com:8774",
+#             "transport_url": "rabbit://rabbit.example.com",
+#             "weight_offset": 0.0,
+#             "weight_scale": 1.0,
+#             "is_parent": true
+#         },
+#         "cell1": {
+#             "name": "cell1",
+#             "api_url": "http://api.example.com:8774",
+#             "transport_url": "rabbit://rabbit1.example.com",
+#             "weight_offset": 0.0,
+#             "weight_scale": 1.0,
+#             "is_parent": false
+#         },
+#         "cell2": {
+#             "name": "cell2",
+#             "api_url": "http://api.example.com:8774",
+#             "transport_url": "rabbit://rabbit2.example.com",
+#             "weight_offset": 0.0,
+#             "weight_scale": 1.0,
+#             "is_parent": false
+#         }
+#     }
+#
+#  (string value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Cells v1 is being replaced with Cells v2.
+#cells_config = <None>
+
+
+[cinder]
+
+#
+# From nova.conf
+#
+
+#
+# Info to match when looking for cinder in the service catalog.
+#
+# Possible values:
+#
+# * Format is separated values of the form:
+#   <service_type>:<service_name>:<endpoint_type>
+#
+# Note: Nova does not support the Cinder v2 API since the Nova 17.0.0
+# Queens
+# release.
+#
+# Related options:
+#
+# * endpoint_template - Setting this option will override catalog_info
+#  (string value)
+#catalog_info = volumev3:cinderv3:publicURL
+catalog_info = volumev3:cinderv3:internalURL
+
+#
+# If this option is set then it will override service catalog lookup
+# with
+# this template for cinder endpoint
+#
+# Possible values:
+#
+# * URL for cinder endpoint API
+#   e.g. http://localhost:8776/v3/%(project_id)s
+#
+# Note: Nova does not support the Cinder v2 API since the Nova 17.0.0
+# Queens
+# release.
+#
+# Related options:
+#
+# * catalog_info - If endpoint_template is not set, catalog_info will
+# be used.
+#  (string value)
+#endpoint_template = <None>
+
+# * Any string representing region name
+#  (string value)
+#os_region_name = <None>
+os_region_name = RegionOne
+
+#
+# Number of times cinderclient should retry on any failed http call.
+# 0 means connection is attempted only once. Setting it to any
+# positive integer
+# means that on failure connection is retried that many times e.g.
+# setting it
+# to 3 means total attempts to connect will be 4.
+#
+# Possible values:
+#
+# * Any integer value. 0 means connection is attempted only once
+#  (integer value)
+# Minimum value: 0
+#http_retries = 3
+
+#
+# Allow attach between instance and volume in different availability
+# zones.
+#
+# If False, volumes attached to an instance must be in the same
+# availability
+# zone in Cinder as the instance availability zone in Nova.
+# This also means care should be taken when booting an instance from a
+# volume
+# where source is not "volume" because Nova will attempt to create a
+# volume using
+# the same availability zone as what is assigned to the instance.
+# If that AZ is not in Cinder (or
+# allow_availability_zone_fallback=False in
+# cinder.conf), the volume create request will fail and the instance
+# will fail
+# the build request.
+# By default there is no availability zone restriction on volume
+# attach.
+#  (boolean value)
+#cross_az_attach = true
+# Name of nova region to use. Useful if keystone manages more than one region.
+# (string value)
+#region_name = <None>
+region_name = RegionOne
+
+# Type of the nova endpoint to use.  This endpoint will be looked up in the
+# keystone catalog and should be one of public, internal or admin. (string
+# value)
+# Possible values:
+# public - <No description provided>
+# admin - <No description provided>
+# internal - <No description provided>
+#endpoint_type = public
+endpoint_type = internal
+
+# API version of the admin Identity API endpoint. (string value)
+#auth_version = <None>
+
+
+# Authentication URL (string value)
+#auth_url = <None>
+auth_url = http://10.167.4.35:35357
+
+# Authentication type to load (string value)
+# Deprecated group/name - [nova]/auth_plugin
+#auth_type = <None>
+auth_type = password
+
+# Required if identity server requires client certificate (string value)
+#certfile = <None>
+
+# A PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# Defaults to system CAs. (string value)
+#cafile = <None>
+
+# Optional domain ID to use with v3 and v2 parameters. It will be used for both
+# the user and project domain in v3 and ignored in v2 authentication. (string
+# value)
+#default_domain_id = <None>
+
+# Optional domain name to use with v3 API and v2 parameters. It will be used for
+# both the user and project domain in v3 and ignored in v2 authentication.
+# (string value)
+#default_domain_name = <None>
+
+# Domain ID to scope to (string value)
+#domain_id = <None>
+
+# Domain name to scope to (string value)
+#domain_name = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# Required if identity server requires client certificate (string value)
+#keyfile = <None>
+
+# User's password (string value)
+#password = <None>
+password = opnfv_secret
+
+# Domain ID containing project (string value)
+#project_domain_id = <None>
+project_domain_id = default
+
+# Domain name containing project (string value)
+#project_domain_name = <None>
+
+# Project ID to scope to (string value)
+#project_id = <None>
+
+# Project name to scope to (string value)
+#project_name = <None>
+project_name = service
+
+# Scope for system operations (string value)
+#system_scope = <None>
+
+# Tenant ID (string value)
+#tenant_id = <None>
+
+# Tenant Name (string value)
+#tenant_name = <None>
+
+# Timeout value for http requests (integer value)
+#timeout = <None>
+
+# Trust ID (string value)
+#trust_id = <None>
+
+# User's domain id (string value)
+#user_domain_id = <None>
+user_domain_id = default
+
+# User's domain name (string value)
+#user_domain_name = <None>
+
+# User ID (string value)
+#user_id = <None>
+
+# Username (string value)
+# Deprecated group/name - [neutron]/user_name
+#username = <None>
+username = nova
+
+[conductor]
+#
+# Options under this group are used to define Conductor's
+# communication,
+# which manager should be act as a proxy between computes and
+# database,
+# and finally, how many worker processes will be used.
+
+#
+# From nova.conf
+#
+
+# DEPRECATED:
+# Topic exchange name on which conductor nodes listen.
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# There is no need to let users choose the RPC topic for all services
+# - there
+# is little gain from this. Furthermore, it makes it really easy to
+# break Nova
+# by using this option.
+#topic = conductor
+
+#
+# Number of workers for OpenStack Conductor service. The default will
+# be the
+# number of CPUs available.
+#  (integer value)
+workers = 8
+
+
+[console]
+#
+# Options under this group allow to tune the configuration of the
+# console proxy
+# service.
+#
+# Note: in configuration of every compute is a ``console_host``
+# option,
+# which allows to select the console proxy service to connect to.
+
+#
+# From nova.conf
+#
+
+#
+# Adds list of allowed origins to the console websocket proxy to allow
+# connections from other origin hostnames.
+# Websocket proxy matches the host header with the origin header to
+# prevent cross-site requests. This list specifies if any there are
+# values other than host are allowed in the origin header.
+#
+# Possible values:
+#
+# * A list where each element is an allowed origin hostnames, else an
+# empty list
+#  (list value)
+# Deprecated group/name - [DEFAULT]/console_allowed_origins
+#allowed_origins =
+
+
+[consoleauth]
+
+#
+# From nova.conf
+#
+
+#
+# The lifetime of a console auth token (in seconds).
+#
+# A console auth token is used in authorizing console access for a
+# user.
+# Once the auth token time to live count has elapsed, the token is
+# considered expired.  Expired tokens are then deleted.
+#  (integer value)
+# Minimum value: 0
+# Deprecated group/name - [DEFAULT]/console_token_ttl
+#token_ttl = 600
+
+[cors]
 #
 # From oslo.middleware
 #
 
-# DEPRECATED: The path to respond to healtcheck requests on. (string value)
+# Indicate whether this resource may be shared with the domain
+# received in the requests "origin" header. Format:
+# "<protocol>://<host>[:<port>]", no trailing slash. Example:
+# https://horizon.example.com (list value)
+
+# Indicate that the actual request can include user credentials
+# (boolean value)
+
+# Indicate which headers are safe to expose to the API. Defaults to
+# HTTP Simple Headers. (list value)
+
+# Maximum cache age of CORS preflight requests. (integer value)
+
+# Indicate which methods can be used during the actual request. (list
+# value)
+
+# Indicate which header field names may be used during the actual
+# request. (list value)
+
+
+[crypto]
+
+#
+# From nova.conf
+#
+
+#
+# Filename of root CA (Certificate Authority). This is a container
+# format
+# and includes root certificates.
+#
+# Possible values:
+#
+# * Any file name containing root CA, cacert.pem is default
+#
+# Related options:
+#
+# * ca_path
+#  (string value)
+#ca_file = cacert.pem
+
+#
+# Filename of a private key.
+#
+# Related options:
+#
+# * keys_path
+#  (string value)
+#key_file = private/cakey.pem
+
+#
+# Filename of root Certificate Revocation List (CRL). This is a list
+# of
+# certificates that have been revoked, and therefore, entities
+# presenting
+# those (revoked) certificates should no longer be trusted.
+#
+# Related options:
+#
+# * ca_path
+#  (string value)
+#crl_file = crl.pem
+
+#
+# Directory path where keys are located.
+#
+# Related options:
+#
+# * key_file
+#  (string value)
+#keys_path = $state_path/keys
+
+#
+# Directory path where root CA is located.
+#
+# Related options:
+#
+# * ca_file
+#  (string value)
+#ca_path = $state_path/CA
+
+# Option to enable/disable use of CA for each project. (boolean value)
+#use_project_ca = false
+
+#
+# Subject for certificate for users, %s for
+# project, user, timestamp
+#  (string value)
+#user_cert_subject = /C=US/ST=California/O=OpenStack/OU=NovaDev/CN=%.16s-%.16s-%s
+
+#
+# Subject for certificate for projects, %s for
+# project, timestamp
+#  (string value)
+#project_cert_subject = /C=US/ST=California/O=OpenStack/OU=NovaDev/CN=project-ca-%.16s-%s
+
+
+[devices]
+
+#
+# From nova.conf
+#
+
+#
+# A list of the vGPU types enabled in the compute node.
+#
+# Some pGPUs (e.g. NVIDIA GRID K1) support different vGPU types. User
+# can use
+# this option to specify a list of enabled vGPU types that may be
+# assigned to a
+# guest instance. But please note that Nova only supports a single
+# type in the
+# Queens release. If more than one vGPU type is specified (as a comma-
+# separated
+# list), only the first one will be used. An example is as the
+# following:
+#     [devices]
+#     enabled_vgpu_types = GRID K100,Intel GVT-g,MxGPU.2,nvidia-11
+#  (list value)
+#enabled_vgpu_types =
+
+
+[ephemeral_storage_encryption]
+
+#
+# From nova.conf
+#
+
+#
+# Enables/disables LVM ephemeral storage encryption.
+#  (boolean value)
+#enabled = false
+
+#
+# Cipher-mode string to be used.
+#
+# The cipher and mode to be used to encrypt ephemeral storage. The set
+# of
+# cipher-mode combinations available depends on kernel support.
+# According
+# to the dm-crypt documentation, the cipher is expected to be in the
+# format:
+# "<cipher>-<chainmode>-<ivmode>".
+#
+# Possible values:
+#
+# * Any crypto option listed in ``/proc/crypto``.
+#  (string value)
+#cipher = aes-xts-plain64
+
+#
+# Encryption key length in bits.
+#
+# The bit length of the encryption key to be used to encrypt ephemeral
+# storage.
+# In XTS mode only half of the bits are used for encryption key.
+#  (integer value)
+# Minimum value: 1
+#key_size = 512
+
+
+[filter_scheduler]
+
+#
+# From nova.conf
+#
+
+#
+# Size of subset of best hosts selected by scheduler.
+#
+# New instances will be scheduled on a host chosen randomly from a
+# subset of the
+# N best hosts, where N is the value set by this option.
+#
+# Setting this to a value greater than 1 will reduce the chance that
+# multiple
+# scheduler processes handling similar requests will select the same
+# host,
+# creating a potential race condition. By selecting a host randomly
+# from the N
+# hosts that best fit the request, the chance of a conflict is
+# reduced. However,
+# the higher you set this value, the less optimal the chosen host may
+# be for a
+# given request.
+#
+# This option is only used by the FilterScheduler and its subclasses;
+# if you use
+# a different scheduler, this option has no effect.
+#
+# Possible values:
+#
+# * An integer, where the integer corresponds to the size of a host
+# subset. Any
+#   integer is valid, although any value less than 1 will be treated
+# as 1
+#  (integer value)
+# Minimum value: 1
+# Deprecated group/name - [DEFAULT]/scheduler_host_subset_size
+host_subset_size = 30
+
+#
+# The number of instances that can be actively performing IO on a
+# host.
+#
+# Instances performing IO includes those in the following states:
+# build, resize,
+# snapshot, migrate, rescue, unshelve.
+#
+# This option is only used by the FilterScheduler and its subclasses;
+# if you use
+# a different scheduler, this option has no effect. Also note that
+# this setting
+# only affects scheduling if the 'io_ops_filter' filter is enabled.
+#
+# Possible values:
+#
+# * An integer, where the integer corresponds to the max number of
+# instances
+#   that can be actively performing IO on any given host.
+#  (integer value)
+max_io_ops_per_host = 8
+
+#
+# Maximum number of instances that be active on a host.
+#
+# If you need to limit the number of instances on any given host, set
+# this option
+# to the maximum number of instances you want to allow. The
+# num_instances_filter
+# will reject any host that has at least as many instances as this
+# option's
+# value.
+#
+# This option is only used by the FilterScheduler and its subclasses;
+# if you use
+# a different scheduler, this option has no effect. Also note that
+# this setting
+# only affects scheduling if the 'num_instances_filter' filter is
+# enabled.
+#
+# Possible values:
+#
+# * An integer, where the integer corresponds to the max instances
+# that can be
+#   scheduled on a host.
+#  (integer value)
+# Minimum value: 1
+max_instances_per_host = 50
+
+#
+# Enable querying of individual hosts for instance information.
+#
+# The scheduler may need information about the instances on a host in
+# order to
+# evaluate its filters and weighers. The most common need for this
+# information is
+# for the (anti-)affinity filters, which need to choose a host based
+# on the
+# instances already running on a host.
+#
+# If the configured filters and weighers do not need this information,
+# disabling
+# this option will improve performance. It may also be disabled when
+# the tracking
+# overhead proves too heavy, although this will cause classes
+# requiring host
+# usage data to query the database on each request instead.
+#
+# This option is only used by the FilterScheduler and its subclasses;
+# if you use
+# a different scheduler, this option has no effect.
+#
+# NOTE: In a multi-cell (v2) setup where the cell MQ is separated from
+# the
+# top-level, computes cannot directly communicate with the scheduler.
+# Thus,
+# this option cannot be enabled in that scenario. See also the
+# [workarounds]/disable_group_policy_check_upcall option.
+#  (boolean value)
+# Deprecated group/name - [DEFAULT]/scheduler_tracks_instance_changes
+#track_instance_changes = true
+
+#
+# Filters that the scheduler can use.
+#
+# An unordered list of the filter classes the nova scheduler may
+# apply.  Only the
+# filters specified in the 'enabled_filters' option will be used, but
+# any filter appearing in that option must also be included in this
+# list.
+#
+# By default, this is set to all filters that are included with nova.
+#
+# This option is only used by the FilterScheduler and its subclasses;
+# if you use
+# a different scheduler, this option has no effect.
+#
+# Possible values:
+#
+# * A list of zero or more strings, where each string corresponds to
+# the name of
+#   a filter that may be used for selecting a host
+#
+# Related options:
+#
+# * enabled_filters
+#  (multi valued)
+# Deprecated group/name - [DEFAULT]/scheduler_available_filters
+#available_filters = nova.scheduler.filters.all_filters
+available_filters=nova.scheduler.filters.all_filters
+available_filters=nova.scheduler.filters.pci_passthrough_filter.PciPassthroughFilter
+
+
+#
+# Filters that the scheduler will use.
+#
+# An ordered list of filter class names that will be used for
+# filtering
+# hosts. These filters will be applied in the order they are listed so
+# place your most restrictive filters first to make the filtering
+# process more
+# efficient.
+#
+# This option is only used by the FilterScheduler and its subclasses;
+# if you use
+# a different scheduler, this option has no effect.
+#
+# Possible values:
+#
+# * A list of zero or more strings, where each string corresponds to
+# the name of
+#   a filter to be used for selecting a host
+#
+# Related options:
+#
+# * All of the filters in this option *must* be present in the
+#   'scheduler_available_filters' option, or a
+# SchedulerHostFilterNotFound
+#   exception will be raised.
+#  (list value)
+# Deprecated group/name - [DEFAULT]/scheduler_default_filters
+#enabled_filters = RetryFilter,AvailabilityZoneFilter,ComputeFilter,ComputeCapabilitiesFilter,ImagePropertiesFilter,ServerGroupAntiAffinityFilter,ServerGroupAffinityFilter
+enabled_filters=DifferentHostFilter,SameHostFilter,RetryFilter,AvailabilityZoneFilter,RamFilter,CoreFilter,DiskFilter,ComputeFilter,ComputeCapabilitiesFilter,ImagePropertiesFilter,ServerGroupAntiAffinityFilter,ServerGroupAffinityFilter,PciPassthroughFilter,NUMATopologyFilter,AggregateInstanceExtraSpecsFilter
+
+# DEPRECATED:
+# Filters used for filtering baremetal hosts.
+#
+# Filters are applied in order, so place your most restrictive filters
+# first to
+# make the filtering process more efficient.
+#
+# This option is only used by the FilterScheduler and its subclasses;
+# if you use
+# a different scheduler, this option has no effect.
+#
+# Possible values:
+#
+# * A list of zero or more strings, where each string corresponds to
+# the name of
+#   a filter to be used for selecting a baremetal host
+#
+# Related options:
+#
+# * If the 'scheduler_use_baremetal_filters' option is False, this
+# option has
+#   no effect.
+#  (list value)
+# Deprecated group/name - [DEFAULT]/baremetal_scheduler_default_filters
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
-#path = /healthcheck
-
-# Show more detailed information as part of the response (boolean value)
-#detailed = false
-
-# Additional backends that can perform health checks and report that information
-# back as part of a request. (list value)
-#backends =
-
-# Check the presence of a file to determine if an application is running on a
-# port. Used by DisableByFileHealthcheck plugin. (string value)
-#disable_by_file_path = <None>
-
-# Check the presence of a file based on a port to determine if an application is
-# running on a port. Expects a "port:path" list of strings. Used by
-# DisableByFilesPortsHealthcheck plugin. (list value)
-#disable_by_file_paths =
-
+# Reason:
+# These filters were used to overcome some of the baremetal scheduling
+# limitations in Nova prior to the use of the Placement API. Now
+# scheduling will
+# use the custom resource class defined for each baremetal node to
+# make its
+# selection.
+#baremetal_enabled_filters = RetryFilter,AvailabilityZoneFilter,ComputeFilter,ComputeCapabilitiesFilter,ImagePropertiesFilter,ExactRamFilter,ExactDiskFilter,ExactCoreFilter
+
+# DEPRECATED:
+# Enable baremetal filters.
+#
+# Set this to True to tell the nova scheduler that it should use the
+# filters
+# specified in the 'baremetal_enabled_filters' option. If you are not
+# scheduling baremetal nodes, leave this at the default setting of
+# False.
+#
+# This option is only used by the FilterScheduler and its subclasses;
+# if you use
+# a different scheduler, this option has no effect.
+#
+# Related options:
+#
+# * If this option is set to True, then the filters specified in the
+#   'baremetal_enabled_filters' are used instead of the filters
+#   specified in 'enabled_filters'.
+#  (boolean value)
+# Deprecated group/name - [DEFAULT]/scheduler_use_baremetal_filters
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason:
+# These filters were used to overcome some of the baremetal scheduling
+# limitations in Nova prior to the use of the Placement API. Now
+# scheduling will
+# use the custom resource class defined for each baremetal node to
+# make its
+# selection.
+#use_baremetal_filters = false
+
+#
+# Weighers that the scheduler will use.
+#
+# Only hosts which pass the filters are weighed. The weight for any
+# host starts
+# at 0, and the weighers order these hosts by adding to or subtracting
+# from the
+# weight assigned by the previous weigher. Weights may become
+# negative. An
+# instance will be scheduled to one of the N most-weighted hosts,
+# where N is
+# 'scheduler_host_subset_size'.
+#
+# By default, this is set to all weighers that are included with Nova.
+#
+# This option is only used by the FilterScheduler and its subclasses;
+# if you use
+# a different scheduler, this option has no effect.
+#
+# Possible values:
+#
+# * A list of zero or more strings, where each string corresponds to
+# the name of
+#   a weigher that will be used for selecting a host
+#  (list value)
+# Deprecated group/name - [DEFAULT]/scheduler_weight_classes
+#weight_classes = nova.scheduler.weights.all_weighers
+
+#
+# Ram weight multipler ratio.
+#
+# This option determines how hosts with more or less available RAM are
+# weighed. A
+# positive value will result in the scheduler preferring hosts with
+# more
+# available RAM, and a negative number will result in the scheduler
+# preferring
+# hosts with less available RAM. Another way to look at it is that
+# positive
+# values for this option will tend to spread instances across many
+# hosts, while
+# negative values will tend to fill up (stack) hosts as much as
+# possible before
+# scheduling to a less-used host. The absolute value, whether positive
+# or
+# negative, controls how strong the RAM weigher is relative to other
+# weighers.
+#
+# This option is only used by the FilterScheduler and its subclasses;
+# if you use
+# a different scheduler, this option has no effect. Also note that
+# this setting
+# only affects scheduling if the 'ram' weigher is enabled.
+#
+# Possible values:
+#
+# * An integer or float value, where the value corresponds to the
+# multipler
+#   ratio for this weigher.
+#  (floating point value)
+#ram_weight_multiplier = 1.0
+
+#
+# Disk weight multipler ratio.
+#
+# Multiplier used for weighing free disk space. Negative numbers mean
+# to
+# stack vs spread.
+#
+# This option is only used by the FilterScheduler and its subclasses;
+# if you use
+# a different scheduler, this option has no effect. Also note that
+# this setting
+# only affects scheduling if the 'disk' weigher is enabled.
+#
+# Possible values:
+#
+# * An integer or float value, where the value corresponds to the
+# multipler
+#   ratio for this weigher.
+#  (floating point value)
+#disk_weight_multiplier = 1.0
+
+#
+# IO operations weight multipler ratio.
+#
+# This option determines how hosts with differing workloads are
+# weighed. Negative
+# values, such as the default, will result in the scheduler preferring
+# hosts with
+# lighter workloads whereas positive values will prefer hosts with
+# heavier
+# workloads. Another way to look at it is that positive values for
+# this option
+# will tend to schedule instances onto hosts that are already busy,
+# while
+# negative values will tend to distribute the workload across more
+# hosts. The
+# absolute value, whether positive or negative, controls how strong
+# the io_ops
+# weigher is relative to other weighers.
+#
+# This option is only used by the FilterScheduler and its subclasses;
+# if you use
+# a different scheduler, this option has no effect. Also note that
+# this setting
+# only affects scheduling if the 'io_ops' weigher is enabled.
+#
+# Possible values:
+#
+# * An integer or float value, where the value corresponds to the
+# multipler
+#   ratio for this weigher.
+#  (floating point value)
+#io_ops_weight_multiplier = -1.0
+
+#
+# PCI device affinity weight multiplier.
+#
+# The PCI device affinity weighter computes a weighting based on the
+# number of
+# PCI devices on the host and the number of PCI devices requested by
+# the
+# instance. The ``NUMATopologyFilter`` filter must be enabled for this
+# to have
+# any significance. For more information, refer to the filter
+# documentation:
+#
+#     https://docs.openstack.org/nova/latest/user/filter-
+# scheduler.html
+#
+# Possible values:
+#
+# * A positive integer or float value, where the value corresponds to
+# the
+#   multiplier ratio for this weigher.
+#  (floating point value)
+# Minimum value: 0
+#pci_weight_multiplier = 1.0
+
+#
+# Multiplier used for weighing hosts for group soft-affinity.
+#
+# Possible values:
+#
+# * An integer or float value, where the value corresponds to weight
+# multiplier
+#   for hosts with group soft affinity. Only a positive value are
+# meaningful, as
+#   negative values would make this behave as a soft anti-affinity
+# weigher.
+#  (floating point value)
+#soft_affinity_weight_multiplier = 1.0
+
+#
+# Multiplier used for weighing hosts for group soft-anti-affinity.
+#
+# Possible values:
+#
+# * An integer or float value, where the value corresponds to weight
+# multiplier
+#   for hosts with group soft anti-affinity. Only a positive value are
+#   meaningful, as negative values would make this behave as a soft
+# affinity
+#   weigher.
+#  (floating point value)
+#soft_anti_affinity_weight_multiplier = 1.0
+
+#
+# Enable spreading the instances between hosts with the same best
+# weight.
+#
+# Enabling it is beneficial for cases when host_subset_size is 1
+# (default), but there is a large number of hosts with same maximal
+# weight.
+# This scenario is common in Ironic deployments where there are
+# typically many
+# baremetal nodes with identical weights returned to the scheduler.
+# In such case enabling this option will reduce contention and chances
+# for
+# rescheduling events.
+# At the same time it will make the instance packing (even in
+# unweighed case)
+# less dense.
+#  (boolean value)
+#shuffle_best_same_weighed_hosts = false
+
+#
+# The default architecture to be used when using the image properties
+# filter.
+#
+# When using the ImagePropertiesFilter, it is possible that you want
+# to define
+# a default architecture to make the user experience easier and avoid
+# having
+# something like x86_64 images landing on aarch64 compute nodes
+# because the
+# user did not specify the 'hw_architecture' property in Glance.
+#
+# Possible values:
+#
+# * CPU Architectures such as x86_64, aarch64, s390x.
+#  (string value)
+# Possible values:
+# alpha - <No description provided>
+# armv6 - <No description provided>
+# armv7l - <No description provided>
+# armv7b - <No description provided>
+# aarch64 - <No description provided>
+# cris - <No description provided>
+# i686 - <No description provided>
+# ia64 - <No description provided>
+# lm32 - <No description provided>
+# m68k - <No description provided>
+# microblaze - <No description provided>
+# microblazeel - <No description provided>
+# mips - <No description provided>
+# mipsel - <No description provided>
+# mips64 - <No description provided>
+# mips64el - <No description provided>
+# openrisc - <No description provided>
+# parisc - <No description provided>
+# parisc64 - <No description provided>
+# ppc - <No description provided>
+# ppcle - <No description provided>
+# ppc64 - <No description provided>
+# ppc64le - <No description provided>
+# ppcemb - <No description provided>
+# s390 - <No description provided>
+# s390x - <No description provided>
+# sh4 - <No description provided>
+# sh4eb - <No description provided>
+# sparc - <No description provided>
+# sparc64 - <No description provided>
+# unicore32 - <No description provided>
+# x86_64 - <No description provided>
+# xtensa - <No description provided>
+# xtensaeb - <No description provided>
+#image_properties_default_architecture = <None>
+
+#
+# List of UUIDs for images that can only be run on certain hosts.
+#
+# If there is a need to restrict some images to only run on certain
+# designated
+# hosts, list those image UUIDs here.
+#
+# This option is only used by the FilterScheduler and its subclasses;
+# if you use
+# a different scheduler, this option has no effect. Also note that
+# this setting
+# only affects scheduling if the 'IsolatedHostsFilter' filter is
+# enabled.
+#
+# Possible values:
+#
+# * A list of UUID strings, where each string corresponds to the UUID
+# of an
+#   image
+#
+# Related options:
+#
+# * scheduler/isolated_hosts
+# * scheduler/restrict_isolated_hosts_to_isolated_images
+#  (list value)
+#isolated_images =
+
+#
+# List of hosts that can only run certain images.
+#
+# If there is a need to restrict some images to only run on certain
+# designated
+# hosts, list those host names here.
+#
+# This option is only used by the FilterScheduler and its subclasses;
+# if you use
+# a different scheduler, this option has no effect. Also note that
+# this setting
+# only affects scheduling if the 'IsolatedHostsFilter' filter is
+# enabled.
+#
+# Possible values:
+#
+# * A list of strings, where each string corresponds to the name of a
+# host
+#
+# Related options:
+#
+# * scheduler/isolated_images
+# * scheduler/restrict_isolated_hosts_to_isolated_images
+#  (list value)
+#isolated_hosts =
+
+#
+# Prevent non-isolated images from being built on isolated hosts.
+#
+# This option is only used by the FilterScheduler and its subclasses;
+# if you use
+# a different scheduler, this option has no effect. Also note that
+# this setting
+# only affects scheduling if the 'IsolatedHostsFilter' filter is
+# enabled. Even
+# then, this option doesn't affect the behavior of requests for
+# isolated images,
+# which will *always* be restricted to isolated hosts.
+#
+# Related options:
+#
+# * scheduler/isolated_images
+# * scheduler/isolated_hosts
+#  (boolean value)
+#restrict_isolated_hosts_to_isolated_images = true
+
+#
+# Image property namespace for use in the host aggregate.
+#
+# Images and hosts can be configured so that certain images can only
+# be scheduled
+# to hosts in a particular aggregate. This is done with metadata
+# values set on
+# the host aggregate that are identified by beginning with the value
+# of this
+# option. If the host is part of an aggregate with such a metadata
+# key, the image
+# in the request spec must have the value of that metadata in its
+# properties in
+# order for the scheduler to consider the host as acceptable.
+#
+# This option is only used by the FilterScheduler and its subclasses;
+# if you use
+# a different scheduler, this option has no effect. Also note that
+# this setting
+# only affects scheduling if the
+# 'aggregate_image_properties_isolation' filter is
+# enabled.
+#
+# Possible values:
+#
+# * A string, where the string corresponds to an image property
+# namespace
+#
+# Related options:
+#
+# * aggregate_image_properties_isolation_separator
+#  (string value)
+#aggregate_image_properties_isolation_namespace = <None>
+
+#
+# Separator character(s) for image property namespace and name.
+#
+# When using the aggregate_image_properties_isolation filter, the
+# relevant
+# metadata keys are prefixed with the namespace defined in the
+# aggregate_image_properties_isolation_namespace configuration option
+# plus a
+# separator. This option defines the separator to be used.
+#
+# This option is only used by the FilterScheduler and its subclasses;
+# if you use
+# a different scheduler, this option has no effect. Also note that
+# this setting
+# only affects scheduling if the
+# 'aggregate_image_properties_isolation' filter
+# is enabled.
+#
+# Possible values:
+#
+# * A string, where the string corresponds to an image property
+# namespace
+#   separator character
+#
+# Related options:
+#
+# * aggregate_image_properties_isolation_namespace
+#  (string value)
+#aggregate_image_properties_isolation_separator = .
+
+
+[glance]
+# Configuration options for the Image service
+
+#
+# From nova.conf
+#
+
+#
+# List of glance api servers endpoints available to nova.
+#
+# https is used for ssl-based glance api servers.
+#
+# NOTE: The preferred mechanism for endpoint discovery is via
+# keystoneauth1
+# loading options. Only use api_servers if you need multiple endpoints
+# and are
+# unable to use a load balancer for some reason.
+#
+# Possible values:
+#
+# * A list of any fully qualified url of the form
+# "scheme://hostname:port[/path]"
+#   (i.e. "http://10.0.1.0:9292" or "https://my.glance.server/image").
+#  (list value)
+#api_servers = <None>
+api_servers = http://10.167.4.35:9292
+
+#
+# Enable glance operation retries.
+#
+# Specifies the number of retries when uploading / downloading
+# an image to / from glance. 0 means no retries.
+#  (integer value)
+# Minimum value: 0
+#num_retries = 0
+
+# DEPRECATED:
+# List of url schemes that can be directly accessed.
+#
+# This option specifies a list of url schemes that can be downloaded
+# directly via the direct_url. This direct_URL can be fetched from
+# Image metadata which can be used by nova to get the
+# image more efficiently. nova-compute could benefit from this by
+# invoking a copy when it has access to the same file system as
+# glance.
+#
+# Possible values:
+#
+# * [file], Empty list (default)
+#  (list value)
+# This option is deprecated for removal since 17.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# This was originally added for the 'nova.image.download.file'
+# FileTransfer
+# extension which was removed in the 16.0.0 Pike release. The
+# 'nova.image.download.modules' extension point is not maintained
+# and there is no indication of its use in production clouds.
+#allowed_direct_url_schemes =
+
+#
+# Enable image signature verification.
+#
+# nova uses the image signature metadata from glance and verifies the
+# signature
+# of a signed image while downloading that image. If the image
+# signature cannot
+# be verified or if the image signature metadata is either incomplete
+# or
+# unavailable, then nova will not boot the image and instead will
+# place the
+# instance into an error state. This provides end users with stronger
+# assurances
+# of the integrity of the image data they are using to create servers.
+#
+# Related options:
+#
+# * The options in the `key_manager` group, as the key_manager is used
+#   for the signature validation.
+# * Both enable_certificate_validation and
+# default_trusted_certificate_ids
+#   below depend on this option being enabled.
+#  (boolean value)
+verify_glance_signatures=true
+
+# DEPRECATED:
+# Enable certificate validation for image signature verification.
+#
+# During image signature verification nova will first verify the
+# validity of the
+# image's signing certificate using the set of trusted certificates
+# associated
+# with the instance. If certificate validation fails, signature
+# verification
+# will not be performed and the image will be placed into an error
+# state. This
+# provides end users with stronger assurances that the image data is
+# unmodified
+# and trustworthy. If left disabled, image signature verification can
+# still
+# occur but the end user will not have any assurance that the signing
+# certificate used to generate the image signature is still
+# trustworthy.
+#
+# Related options:
+#
+# * This option only takes effect if verify_glance_signatures is
+# enabled.
+# * The value of default_trusted_certificate_ids may be used when this
+# option
+#   is enabled.
+#  (boolean value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# This option is intended to ease the transition for deployments
+# leveraging
+# image signature verification. The intended state long-term is for
+# signature
+# verification and certificate validation to always happen together.
+#enable_certificate_validation = false
+
+#
+# List of certificate IDs for certificates that should be trusted.
+#
+# May be used as a default list of trusted certificate IDs for
+# certificate
+# validation. The value of this option will be ignored if the user
+# provides a
+# list of trusted certificate IDs with an instance API request. The
+# value of
+# this option will be persisted with the instance data if signature
+# verification
+# and certificate validation are enabled and if the user did not
+# provide an
+# alternative list. If left empty when certificate validation is
+# enabled the
+# user must provide a list of trusted certificate IDs otherwise
+# certificate
+# validation will fail.
+#
+# Related options:
+#
+# * The value of this option may be used if both
+# verify_glance_signatures and
+#   enable_certificate_validation are enabled.
+#  (list value)
+#default_trusted_certificate_ids =
+
+# Enable or disable debug logging with glanceclient. (boolean value)
+#debug = false
+
+# PEM encoded Certificate Authority to use when verifying HTTPs
+# connections. (string value)
+#cafile = <None>
+
+# PEM encoded client certificate cert file (string value)
+#certfile = <None>
+
+# PEM encoded client certificate key file (string value)
+#keyfile = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# Timeout value for http requests (integer value)
+#timeout = <None>
+
+# The default service_type for endpoint URL discovery. (string value)
+#service_type = image
+
+# The default service_name for endpoint URL discovery. (string value)
+#service_name = <None>
+
+# List of interfaces, in order of preference, for endpoint URL. (list
+# value)
+#valid_interfaces = internal,public
+
+# The default region_name for endpoint URL discovery. (string value)
+#region_name = <None>
+
+# Always use this endpoint URL for requests for this client. NOTE: The
+# unversioned endpoint should be specified here; to request a
+# particular API version, use the `version`, `min-version`, and/or
+# `max-version` options. (string value)
+#endpoint_override = <None>
+
+
+[guestfs]
+#
+# libguestfs is a set of tools for accessing and modifying virtual
+# machine (VM) disk images. You can use this for viewing and editing
+# files inside guests, scripting changes to VMs, monitoring disk
+# used/free statistics, creating guests, P2V, V2V, performing backups,
+# cloning VMs, building VMs, formatting disks and resizing disks.
+
+#
+# From nova.conf
+#
+
+#
+# Enable/disables guestfs logging.
+#
+# This configures guestfs to debug messages and push them to OpenStack
+# logging system. When set to True, it traces libguestfs API calls and
+# enable verbose debug messages. In order to use the above feature,
+# "libguestfs" package must be installed.
+#
+# Related options:
+# Since libguestfs access and modifies VM's managed by libvirt, below
+# options
+# should be set to give access to those VM's.
+#     * libvirt.inject_key
+#     * libvirt.inject_partition
+#     * libvirt.inject_password
+#  (boolean value)
+#debug = false
+
+
+[hyperv]
+#
+# The hyperv feature allows you to configure the Hyper-V hypervisor
+# driver to be used within an OpenStack deployment.
+
+#
+# From nova.conf
+#
+
+#
+# Dynamic memory ratio
+#
+# Enables dynamic memory allocation (ballooning) when set to a value
+# greater than 1. The value expresses the ratio between the total RAM
+# assigned to an instance and its startup RAM amount. For example a
+# ratio of 2.0 for an instance with 1024MB of RAM implies 512MB of
+# RAM allocated at startup.
+#
+# Possible values:
+#
+# * 1.0: Disables dynamic memory allocation (Default).
+# * Float values greater than 1.0: Enables allocation of total implied
+#   RAM divided by this value for startup.
+#  (floating point value)
+#dynamic_memory_ratio = 1.0
+
+#
+# Enable instance metrics collection
+#
+# Enables metrics collections for an instance by using Hyper-V's
+# metric APIs. Collected data can be retrieved by other apps and
+# services, e.g.: Ceilometer.
+#  (boolean value)
+#enable_instance_metrics_collection = false
+
+#
+# Instances path share
+#
+# The name of a Windows share mapped to the "instances_path" dir
+# and used by the resize feature to copy files to the target host.
+# If left blank, an administrative share (hidden network share) will
+# be used, looking for the same "instances_path" used locally.
+#
+# Possible values:
+#
+# * "": An administrative share will be used (Default).
+# * Name of a Windows share.
+#
+# Related options:
+#
+# * "instances_path": The directory which will be used if this option
+#   here is left blank.
+#  (string value)
+#instances_path_share =
+
+#
+# Limit CPU features
+#
+# This flag is needed to support live migration to hosts with
+# different CPU features and checked during instance creation
+# in order to limit the CPU features used by the instance.
+#  (boolean value)
+#limit_cpu_features = false
+
+#
+# Mounted disk query retry count
+#
+# The number of times to retry checking for a mounted disk.
+# The query runs until the device can be found or the retry
+# count is reached.
+#
+# Possible values:
+#
+# * Positive integer values. Values greater than 1 is recommended
+#   (Default: 10).
+#
+# Related options:
+#
+# * Time interval between disk mount retries is declared with
+#   "mounted_disk_query_retry_interval" option.
+#  (integer value)
+# Minimum value: 0
+#mounted_disk_query_retry_count = 10
+
+#
+# Mounted disk query retry interval
+#
+# Interval between checks for a mounted disk, in seconds.
+#
+# Possible values:
+#
+# * Time in seconds (Default: 5).
+#
+# Related options:
+#
+# * This option is meaningful when the mounted_disk_query_retry_count
+#   is greater than 1.
+# * The retry loop runs with mounted_disk_query_retry_count and
+#   mounted_disk_query_retry_interval configuration options.
+#  (integer value)
+# Minimum value: 0
+#mounted_disk_query_retry_interval = 5
+
+#
+# Power state check timeframe
+#
+# The timeframe to be checked for instance power state changes.
+# This option is used to fetch the state of the instance from Hyper-V
+# through the WMI interface, within the specified timeframe.
+#
+# Possible values:
+#
+# * Timeframe in seconds (Default: 60).
+#  (integer value)
+# Minimum value: 0
+#power_state_check_timeframe = 60
+
+#
+# Power state event polling interval
+#
+# Instance power state change event polling frequency. Sets the
+# listener interval for power state events to the given value.
+# This option enhances the internal lifecycle notifications of
+# instances that reboot themselves. It is unlikely that an operator
+# has to change this value.
+#
+# Possible values:
+#
+# * Time in seconds (Default: 2).
+#  (integer value)
+# Minimum value: 0
+#power_state_event_polling_interval = 2
+
+#
+# qemu-img command
+#
+# qemu-img is required for some of the image related operations
+# like converting between different image types. You can get it
+# from here: (http://qemu.weilnetz.de/) or you can install the
+# Cloudbase OpenStack Hyper-V Compute Driver
+# (https://cloudbase.it/openstack-hyperv-driver/) which automatically
+# sets the proper path for this config option. You can either give the
+# full path of qemu-img.exe or set its path in the PATH environment
+# variable and leave this option to the default value.
+#
+# Possible values:
+#
+# * Name of the qemu-img executable, in case it is in the same
+#   directory as the nova-compute service or its path is in the
+#   PATH environment variable (Default).
+# * Path of qemu-img command (DRIVELETTER:\PATH\TO\QEMU-IMG\COMMAND).
+#
+# Related options:
+#
+# * If the config_drive_cdrom option is False, qemu-img will be used
+# to
+#   convert the ISO to a VHD, otherwise the configuration drive will
+#   remain an ISO. To use configuration drive with Hyper-V, you must
+#   set the mkisofs_cmd value to the full path to an mkisofs.exe
+#   installation.
+#  (string value)
+#qemu_img_cmd = qemu-img.exe
+
+#
+# External virtual switch name
+#
+# The Hyper-V Virtual Switch is a software-based layer-2 Ethernet
+# network switch that is available with the installation of the
+# Hyper-V server role. The switch includes programmatically managed
+# and extensible capabilities to connect virtual machines to both
+# virtual networks and the physical network. In addition, Hyper-V
+# Virtual Switch provides policy enforcement for security, isolation,
+# and service levels. The vSwitch represented by this config option
+# must be an external one (not internal or private).
+#
+# Possible values:
+#
+# * If not provided, the first of a list of available vswitches
+#   is used. This list is queried using WQL.
+# * Virtual switch name.
+#  (string value)
+#vswitch_name = <None>
+
+#
+# Wait soft reboot seconds
+#
+# Number of seconds to wait for instance to shut down after soft
+# reboot request is made. We fall back to hard reboot if instance
+# does not shutdown within this window.
+#
+# Possible values:
+#
+# * Time in seconds (Default: 60).
+#  (integer value)
+# Minimum value: 0
+#wait_soft_reboot_seconds = 60
+
+#
+# Configuration drive cdrom
+#
+# OpenStack can be configured to write instance metadata to
+# a configuration drive, which is then attached to the
+# instance before it boots. The configuration drive can be
+# attached as a disk drive (default) or as a CD drive.
+#
+# Possible values:
+#
+# * True: Attach the configuration drive image as a CD drive.
+# * False: Attach the configuration drive image as a disk drive
+# (Default).
+#
+# Related options:
+#
+# * This option is meaningful with force_config_drive option set to
+# 'True'
+#   or when the REST API call to create an instance will have
+#   '--config-drive=True' flag.
+# * config_drive_format option must be set to 'iso9660' in order to
+# use
+#   CD drive as the configuration drive image.
+# * To use configuration drive with Hyper-V, you must set the
+#   mkisofs_cmd value to the full path to an mkisofs.exe installation.
+#   Additionally, you must set the qemu_img_cmd value to the full path
+#   to an qemu-img command installation.
+# * You can configure the Compute service to always create a
+# configuration
+#   drive by setting the force_config_drive option to 'True'.
+#  (boolean value)
+#config_drive_cdrom = false
+
+#
+# Configuration drive inject password
+#
+# Enables setting the admin password in the configuration drive image.
+#
+# Related options:
+#
+# * This option is meaningful when used with other options that enable
+#   configuration drive usage with Hyper-V, such as
+# force_config_drive.
+# * Currently, the only accepted config_drive_format is 'iso9660'.
+#  (boolean value)
+#config_drive_inject_password = false
+
+#
+# Volume attach retry count
+#
+# The number of times to retry attaching a volume. Volume attachment
+# is retried until success or the given retry count is reached.
+#
+# Possible values:
+#
+# * Positive integer values (Default: 10).
+#
+# Related options:
+#
+# * Time interval between attachment attempts is declared with
+#   volume_attach_retry_interval option.
+#  (integer value)
+# Minimum value: 0
+#volume_attach_retry_count = 10
+
+#
+# Volume attach retry interval
+#
+# Interval between volume attachment attempts, in seconds.
+#
+# Possible values:
+#
+# * Time in seconds (Default: 5).
+#
+# Related options:
+#
+# * This options is meaningful when volume_attach_retry_count
+#   is greater than 1.
+# * The retry loop runs with volume_attach_retry_count and
+#   volume_attach_retry_interval configuration options.
+#  (integer value)
+# Minimum value: 0
+#volume_attach_retry_interval = 5
+
+#
+# Enable RemoteFX feature
+#
+# This requires at least one DirectX 11 capable graphics adapter for
+# Windows / Hyper-V Server 2012 R2 or newer and RDS-Virtualization
+# feature has to be enabled.
+#
+# Instances with RemoteFX can be requested with the following flavor
+# extra specs:
+#
+# **os:resolution**. Guest VM screen resolution size. Acceptable
+# values::
+#
+#     1024x768, 1280x1024, 1600x1200, 1920x1200, 2560x1600, 3840x2160
+#
+# ``3840x2160`` is only available on Windows / Hyper-V Server 2016.
+#
+# **os:monitors**. Guest VM number of monitors. Acceptable values::
+#
+#     [1, 4] - Windows / Hyper-V Server 2012 R2
+#     [1, 8] - Windows / Hyper-V Server 2016
+#
+# **os:vram**. Guest VM VRAM amount. Only available on
+# Windows / Hyper-V Server 2016. Acceptable values::
+#
+#     64, 128, 256, 512, 1024
+#  (boolean value)
+#enable_remotefx = false
+
+#
+# Use multipath connections when attaching iSCSI or FC disks.
+#
+# This requires the Multipath IO Windows feature to be enabled. MPIO
+# must be
+# configured to claim such devices.
+#  (boolean value)
+#use_multipath_io = false
+
+#
+# List of iSCSI initiators that will be used for estabilishing iSCSI
+# sessions.
+#
+# If none are specified, the Microsoft iSCSI initiator service will
+# choose the
+# initiator.
+#  (list value)
+#iscsi_initiator_list =
+
+
+
+
+[key_manager]
+
+#
+# From nova.conf
+#
+
+#
+# Fixed key returned by key manager, specified in hex.
+#
+# Possible values:
+#
+# * Empty string or a key in hex value
+#  (string value)
+#fixed_key = <None>
+api_class=castellan.key_manager.barbican_key_manager.BarbicanKeyManager
+
+# Specify the key manager implementation. Options are "barbican" and
+# "vault". Default is  "barbican". Will support the  values earlier
+# set using [key_manager]/api_class for some time. (string value)
+# Deprecated group/name - [key_manager]/api_class
+#backend = barbican
+
+# The type of authentication credential to create. Possible values are
+# 'token', 'password', 'keystone_token', and 'keystone_password'.
+# Required if no context is passed to the credential factory. (string
+# value)
+#auth_type = <None>
+
+# Token for authentication. Required for 'token' and 'keystone_token'
+# auth_type if no context is passed to the credential factory. (string
+# value)
+#token = <None>
+
+# Username for authentication. Required for 'password' auth_type.
+# Optional for the 'keystone_password' auth_type. (string value)
+#username = <None>
+
+# Password for authentication. Required for 'password' and
+# 'keystone_password' auth_type. (string value)
+#password = <None>
+
+# Use this endpoint to connect to Keystone. (string value)
+#auth_url = <None>
+
+# User ID for authentication. Optional for 'keystone_token' and
+# 'keystone_password' auth_type. (string value)
+#user_id = <None>
+
+# User's domain ID for authentication. Optional for 'keystone_token'
+# and 'keystone_password' auth_type. (string value)
+#user_domain_id = <None>
+
+# User's domain name for authentication. Optional for 'keystone_token'
+# and 'keystone_password' auth_type. (string value)
+#user_domain_name = <None>
+
+# Trust ID for trust scoping. Optional for 'keystone_token' and
+# 'keystone_password' auth_type. (string value)
+#trust_id = <None>
+
+# Domain ID for domain scoping. Optional for 'keystone_token' and
+# 'keystone_password' auth_type. (string value)
+#domain_id = <None>
+
+# Domain name for domain scoping. Optional for 'keystone_token' and
+# 'keystone_password' auth_type. (string value)
+#domain_name = <None>
+
+# Project ID for project scoping. Optional for 'keystone_token' and
+# 'keystone_password' auth_type. (string value)
+#project_id = <None>
+
+# Project name for project scoping. Optional for 'keystone_token' and
+# 'keystone_password' auth_type. (string value)
+#project_name = <None>
+
+# Project's domain ID for project. Optional for 'keystone_token' and
+# 'keystone_password' auth_type. (string value)
+#project_domain_id = <None>
+
+# Project's domain name for project. Optional for 'keystone_token' and
+# 'keystone_password' auth_type. (string value)
+#project_domain_name = <None>
+
+# Allow fetching a new token if the current one is going to expire.
+# Optional for 'keystone_token' and 'keystone_password' auth_type.
+# (boolean value)
+#reauthenticate = true
+
+
+[keystone]
+# Configuration options for the identity service
+
+#
+# From nova.conf
+#
+
+# PEM encoded Certificate Authority to use when verifying HTTPs
+# connections. (string value)
+#cafile = <None>
+
+# PEM encoded client certificate cert file (string value)
+#certfile = <None>
+
+# PEM encoded client certificate key file (string value)
+#keyfile = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# Timeout value for http requests (integer value)
+#timeout = <None>
+
+# The default service_type for endpoint URL discovery. (string value)
+#service_type = identity
+
+# The default service_name for endpoint URL discovery. (string value)
+#service_name = <None>
+
+# List of interfaces, in order of preference, for endpoint URL. (list
+# value)
+#valid_interfaces = internal,public
+
+# The default region_name for endpoint URL discovery. (string value)
+#region_name = <None>
+
+# Always use this endpoint URL for requests for this client. NOTE: The
+# unversioned endpoint should be specified here; to request a
+# particular API version, use the `version`, `min-version`, and/or
+# `max-version` options. (string value)
+#endpoint_override = <None>
+
+
+[libvirt]
+#
+# Libvirt options allows cloud administrator to configure related
+# libvirt hypervisor driver to be used within an OpenStack deployment.
+#
+# Almost all of the libvirt config options are influence by
+# ``virt_type`` config
+# which describes the virtualization type (or so called domain type)
+# libvirt
+# should use for specific features such as live migration, snapshot.
+
+#
+# From nova.conf
+#
+virt_type = kvm
+
+inject_partition = -1
+
+#
+# The ID of the image to boot from to rescue data from a corrupted
+# instance.
+#
+# If the rescue REST API operation doesn't provide an ID of an image
+# to
+# use, the image which is referenced by this ID is used. If this
+# option is not set, the image from the instance is used.
+#
+# Possible values:
+#
+# * An ID of an image or nothing. If it points to an *Amazon Machine
+#   Image* (AMI), consider to set the config options
+# ``rescue_kernel_id``
+#   and ``rescue_ramdisk_id`` too. If nothing is set, the image of the
+# instance
+#   is used.
+#
+# Related options:
+#
+# * ``rescue_kernel_id``: If the chosen rescue image allows the
+# separate
+#   definition of its kernel disk, the value of this option is used,
+#   if specified. This is the case when *Amazon*'s AMI/AKI/ARI image
+#   format is used for the rescue image.
+# * ``rescue_ramdisk_id``: If the chosen rescue image allows the
+# separate
+#   definition of its RAM disk, the value of this option is used if,
+#   specified. This is the case when *Amazon*'s AMI/AKI/ARI image
+#   format is used for the rescue image.
+#  (string value)
+#rescue_image_id = <None>
+
+#
+# The ID of the kernel (AKI) image to use with the rescue image.
+#
+# If the chosen rescue image allows the separate definition of its
+# kernel
+# disk, the value of this option is used, if specified. This is the
+# case
+# when *Amazon*'s AMI/AKI/ARI image format is used for the rescue
+# image.
+#
+# Possible values:
+#
+# * An ID of an kernel image or nothing. If nothing is specified, the
+# kernel
+#   disk from the instance is used if it was launched with one.
+#
+# Related options:
+#
+# * ``rescue_image_id``: If that option points to an image in
+# *Amazon*'s
+#   AMI/AKI/ARI image format, it's useful to use ``rescue_kernel_id``
+# too.
+#  (string value)
+#rescue_kernel_id = <None>
+
+#
+# The ID of the RAM disk (ARI) image to use with the rescue image.
+#
+# If the chosen rescue image allows the separate definition of its RAM
+# disk, the value of this option is used, if specified. This is the
+# case
+# when *Amazon*'s AMI/AKI/ARI image format is used for the rescue
+# image.
+#
+# Possible values:
+#
+# * An ID of a RAM disk image or nothing. If nothing is specified, the
+# RAM
+#   disk from the instance is used if it was launched with one.
+#
+# Related options:
+#
+# * ``rescue_image_id``: If that option points to an image in
+# *Amazon*'s
+#   AMI/AKI/ARI image format, it's useful to use ``rescue_ramdisk_id``
+# too.
+#  (string value)
+#rescue_ramdisk_id = <None>
+
+#
+# Describes the virtualization type (or so called domain type) libvirt
+# should
+# use.
+#
+# The choice of this type must match the underlying virtualization
+# strategy
+# you have chosen for this host.
+#
+# Possible values:
+#
+# * See the predefined set of case-sensitive values.
+#
+# Related options:
+#
+# * ``connection_uri``: depends on this
+# * ``disk_prefix``: depends on this
+# * ``cpu_mode``: depends on this
+# * ``cpu_model``: depends on this
+#  (string value)
+# Possible values:
+# kvm - <No description provided>
+# lxc - <No description provided>
+# qemu - <No description provided>
+# uml - <No description provided>
+# xen - <No description provided>
+# parallels - <No description provided>
+#virt_type = kvm
+
+#
+# Overrides the default libvirt URI of the chosen virtualization type.
+#
+# If set, Nova will use this URI to connect to libvirt.
+#
+# Possible values:
+#
+# * An URI like ``qemu:///system`` or ``xen+ssh://oirase/`` for
+# example.
+#   This is only necessary if the URI differs to the commonly known
+# URIs
+#   for the chosen virtualization type.
+#
+# Related options:
+#
+# * ``virt_type``: Influences what is used as default value here.
+#  (string value)
+#connection_uri =
+
+#
+# Algorithm used to hash the injected password.
+# Note that it must be supported by libc on the compute host
+# _and_ by libc inside *any guest image* that will be booted by this
+# compute
+# host whith requested password injection.
+# In case the specified algorithm is not supported by libc on the
+# compute host,
+# a fallback to DES algorithm will be performed.
+#
+# Related options:
+#
+# * ``inject_password``
+# * ``inject_partition``
+#  (string value)
+# Possible values:
+# SHA-512 - <No description provided>
+# SHA-256 - <No description provided>
+# MD5 - <No description provided>
+#inject_password_algorithm = MD5
+
+#
+# Allow the injection of an admin password for instance only at
+# ``create`` and
+# ``rebuild`` process.
+#
+# There is no agent needed within the image to do this. If
+# *libguestfs* is
+# available on the host, it will be used. Otherwise *nbd* is used. The
+# file
+# system of the image will be mounted and the admin password, which is
+# provided
+# in the REST API call will be injected as password for the root user.
+# If no
+# root user is available, the instance won't be launched and an error
+# is thrown.
+# Be aware that the injection is *not* possible when the instance gets
+# launched
+# from a volume.
+#
+# Possible values:
+#
+# * True: Allows the injection.
+# * False (default): Disallows the injection. Any via the REST API
+# provided
+# admin password will be silently ignored.
+#
+# Related options:
+#
+# * ``inject_partition``: That option will decide about the discovery
+# and usage
+#   of the file system. It also can disable the injection at all.
+#  (boolean value)
+#inject_password = false
+
+#
+# Allow the injection of an SSH key at boot time.
+#
+# There is no agent needed within the image to do this. If
+# *libguestfs* is
+# available on the host, it will be used. Otherwise *nbd* is used. The
+# file
+# system of the image will be mounted and the SSH key, which is
+# provided
+# in the REST API call will be injected as SSH key for the root user
+# and
+# appended to the ``authorized_keys`` of that user. The SELinux
+# context will
+# be set if necessary. Be aware that the injection is *not* possible
+# when the
+# instance gets launched from a volume.
+#
+# This config option will enable directly modifying the instance disk
+# and does
+# not affect what cloud-init may do using data from config_drive
+# option or the
+# metadata service.
+#
+# Related options:
+#
+# * ``inject_partition``: That option will decide about the discovery
+# and usage
+#   of the file system. It also can disable the injection at all.
+#  (boolean value)
+#inject_key = false
+
+#
+# Determines the way how the file system is chosen to inject data into
+# it.
+#
+# *libguestfs* will be used a first solution to inject data. If that's
+# not
+# available on the host, the image will be locally mounted on the host
+# as a
+# fallback solution. If libguestfs is not able to determine the root
+# partition
+# (because there are more or less than one root partition) or cannot
+# mount the
+# file system it will result in an error and the instance won't be
+# boot.
+#
+# Possible values:
+#
+# * -2 => disable the injection of data.
+# * -1 => find the root partition with the file system to mount with
+# libguestfs
+# *  0 => The image is not partitioned
+# * >0 => The number of the partition to use for the injection
+#
+# Related options:
+#
+# * ``inject_key``: If this option allows the injection of a SSH key
+# it depends
+#   on value greater or equal to -1 for ``inject_partition``.
+# * ``inject_password``: If this option allows the injection of an
+# admin password
+#   it depends on value greater or equal to -1 for
+# ``inject_partition``.
+# * ``guestfs`` You can enable the debug log level of libguestfs with
+# this
+#   config option. A more verbose output will help in debugging
+# issues.
+# * ``virt_type``: If you use ``lxc`` as virt_type it will be treated
+# as a
+#   single partition image
+#  (integer value)
+# Minimum value: -2
+#inject_partition = -2
+
+# DEPRECATED:
+# Enable a mouse cursor within a graphical VNC or SPICE sessions.
+#
+# This will only be taken into account if the VM is fully virtualized
+# and VNC
+# and/or SPICE is enabled. If the node doesn't support a graphical
+# framebuffer,
+# then it is valid to set this to False.
+#
+# Related options:
+# * ``[vnc]enabled``: If VNC is enabled, ``use_usb_tablet`` will have
+# an effect.
+# * ``[spice]enabled`` + ``[spice].agent_enabled``: If SPICE is
+# enabled and the
+#   spice agent is disabled, the config value of ``use_usb_tablet``
+# will have
+#   an effect.
+#  (boolean value)
+# This option is deprecated for removal since 14.0.0.
+# Its value may be silently ignored in the future.
+# Reason: This option is being replaced by the 'pointer_model' option.
+use_usb_tablet = true
+
+#
+# The IP address or hostname to be used as the target for live
+# migration traffic.
+#
+# If this option is set to None, the hostname of the migration target
+# compute
+# node will be used.
+#
+# This option is useful in environments where the live-migration
+# traffic can
+# impact the network plane significantly. A separate network for live-
+# migration
+# traffic can then use this config option and avoids the impact on the
+# management network.
+#
+# Possible values:
+#
+# * A valid IP address or hostname, else None.
+#
+# Related options:
+#
+# * ``live_migration_tunnelled``: The live_migration_inbound_addr
+# value is
+#   ignored if tunneling is enabled.
+#  (string value)
+#live_migration_inbound_addr = <None>
+
+# DEPRECATED:
+# Live migration target URI to use.
+#
+# Override the default libvirt live migration target URI (which is
+# dependent
+# on virt_type). Any included "%s" is replaced with the migration
+# target
+# hostname.
+#
+# If this option is set to None (which is the default), Nova will
+# automatically
+# generate the `live_migration_uri` value based on only 4 supported
+# `virt_type`
+# in following list:
+#
+# * 'kvm': 'qemu+tcp://%s/system'
+# * 'qemu': 'qemu+tcp://%s/system'
+# * 'xen': 'xenmigr://%s/system'
+# * 'parallels': 'parallels+tcp://%s/system'
+#
+# Related options:
+#
+# * ``live_migration_inbound_addr``: If
+# ``live_migration_inbound_addr`` value
+#   is not None and ``live_migration_tunnelled`` is False, the
+# ip/hostname
+#   address of target compute node is used instead of
+# ``live_migration_uri`` as
+#   the uri for live migration.
+# * ``live_migration_scheme``: If ``live_migration_uri`` is not set,
+# the scheme
+#   used for live migration is taken from ``live_migration_scheme``
+# instead.
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# live_migration_uri is deprecated for removal in favor of two other
+# options that
+# allow to change live migration scheme and target URI:
+# ``live_migration_scheme``
+# and ``live_migration_inbound_addr`` respectively.
+#live_migration_uri = <None>
+
+#
+# URI scheme used for live migration.
+#
+# Override the default libvirt live migration scheme (which is
+# dependent on
+# virt_type). If this option is set to None, nova will automatically
+# choose a
+# sensible default based on the hypervisor. It is not recommended that
+# you change
+# this unless you are very sure that hypervisor supports a particular
+# scheme.
+#
+# Related options:
+#
+# * ``virt_type``: This option is meaningful only when ``virt_type``
+# is set to
+#   `kvm` or `qemu`.
+# * ``live_migration_uri``: If ``live_migration_uri`` value is not
+# None, the
+#   scheme used for live migration is taken from
+# ``live_migration_uri`` instead.
+#  (string value)
+#live_migration_scheme = <None>
+
+#
+# Enable tunnelled migration.
+#
+# This option enables the tunnelled migration feature, where migration
+# data is
+# transported over the libvirtd connection. If enabled, we use the
+# VIR_MIGRATE_TUNNELLED migration flag, avoiding the need to configure
+# the network to allow direct hypervisor to hypervisor communication.
+# If False, use the native transport. If not set, Nova will choose a
+# sensible default based on, for example the availability of native
+# encryption support in the hypervisor. Enabling this option will
+# definitely
+# impact performance massively.
+#
+# Note that this option is NOT compatible with use of block migration.
+#
+# Related options:
+#
+# * ``live_migration_inbound_addr``: The live_migration_inbound_addr
+# value is
+#   ignored if tunneling is enabled.
+#  (boolean value)
+#live_migration_tunnelled = false
+
+#
+# Maximum bandwidth(in MiB/s) to be used during migration.
+#
+# If set to 0, the hypervisor will choose a suitable default. Some
+# hypervisors
+# do not support this feature and will return an error if bandwidth is
+# not 0.
+# Please refer to the libvirt documentation for further details.
+#  (integer value)
+#live_migration_bandwidth = 0
+
+#
+# Maximum permitted downtime, in milliseconds, for live migration
+# switchover.
+#
+# Will be rounded up to a minimum of 100ms. You can increase this
+# value
+# if you want to allow live-migrations to complete faster, or avoid
+# live-migration timeout errors by allowing the guest to be paused for
+# longer during the live-migration switch over.
+#
+# Related options:
+#
+# * live_migration_completion_timeout
+#  (integer value)
+# Minimum value: 100
+#live_migration_downtime = 500
+
+#
+# Number of incremental steps to reach max downtime value.
+#
+# Will be rounded up to a minimum of 3 steps.
+#  (integer value)
+# Minimum value: 3
+#live_migration_downtime_steps = 10
+
+#
+# Time to wait, in seconds, between each step increase of the
+# migration
+# downtime.
+#
+# Minimum delay is 3 seconds. Value is per GiB of guest RAM + disk to
+# be
+# transferred, with lower bound of a minimum of 2 GiB per device.
+#  (integer value)
+# Minimum value: 3
+#live_migration_downtime_delay = 75
+
+#
+# Time to wait, in seconds, for migration to successfully complete
+# transferring
+# data before aborting the operation.
+#
+# Value is per GiB of guest RAM + disk to be transferred, with lower
+# bound of
+# a minimum of 2 GiB. Should usually be larger than downtime delay *
+# downtime
+# steps. Set to 0 to disable timeouts.
+#
+# Related options:
+#
+# * live_migration_downtime
+# * live_migration_downtime_steps
+# * live_migration_downtime_delay
+#  (integer value)
+# Note: This option can be changed without restarting.
+#live_migration_completion_timeout = 800
+
+# DEPRECATED:
+# Time to wait, in seconds, for migration to make forward progress in
+# transferring data before aborting the operation.
+#
+# Set to 0 to disable timeouts.
+#
+# This is deprecated, and now disabled by default because we have
+# found serious
+# bugs in this feature that caused false live-migration timeout
+# failures. This
+# feature will be removed or replaced in a future release.
+#  (integer value)
+# Note: This option can be changed without restarting.
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Serious bugs found in this feature.
+#live_migration_progress_timeout = 0
+
+#
+# This option allows nova to switch an on-going live migration to
+# post-copy
+# mode, i.e., switch the active VM to the one on the destination node
+# before the
+# migration is complete, therefore ensuring an upper bound on the
+# memory that
+# needs to be transferred. Post-copy requires libvirt>=1.3.3 and
+# QEMU>=2.5.0.
+#
+# When permitted, post-copy mode will be automatically activated if a
+# live-migration memory copy iteration does not make percentage
+# increase of at
+# least 10% over the last iteration.
+#
+# The live-migration force complete API also uses post-copy when
+# permitted. If
+# post-copy mode is not available, force complete falls back to
+# pausing the VM
+# to ensure the live-migration operation will complete.
+#
+# When using post-copy mode, if the source and destination hosts loose
+# network
+# connectivity, the VM being live-migrated will need to be rebooted.
+# For more
+# details, please see the Administration guide.
+#
+# Related options:
+#
+#     * live_migration_permit_auto_converge
+#  (boolean value)
+#live_migration_permit_post_copy = false
+
+#
+# This option allows nova to start live migration with auto converge
+# on.
+#
+# Auto converge throttles down CPU if a progress of on-going live
+# migration
+# is slow. Auto converge will only be used if this flag is set to True
+# and
+# post copy is not permitted or post copy is unavailable due to the
+# version
+# of libvirt and QEMU in use.
+#
+# Related options:
+#
+#     * live_migration_permit_post_copy
+#  (boolean value)
+#live_migration_permit_auto_converge = false
+
+#
+# Determine the snapshot image format when sending to the image
+# service.
+#
+# If set, this decides what format is used when sending the snapshot
+# to the
+# image service.
+# If not set, defaults to same type as source image.
+#
+# Possible values:
+#
+# * ``raw``: RAW disk format
+# * ``qcow2``: KVM default disk format
+# * ``vmdk``: VMWare default disk format
+# * ``vdi``: VirtualBox default disk format
+# * If not set, defaults to same type as source image.
+#  (string value)
+# Possible values:
+# raw - <No description provided>
+# qcow2 - <No description provided>
+# vmdk - <No description provided>
+# vdi - <No description provided>
+#snapshot_image_format = <None>
+
+#
+# Override the default disk prefix for the devices attached to an
+# instance.
+#
+# If set, this is used to identify a free disk device name for a bus.
+#
+# Possible values:
+#
+# * Any prefix which will result in a valid disk device name like
+# 'sda' or 'hda'
+#   for example. This is only necessary if the device names differ to
+# the
+#   commonly known device name prefixes for a virtualization type such
+# as: sd,
+#   xvd, uvd, vd.
+#
+# Related options:
+#
+# * ``virt_type``: Influences which device type is used, which
+# determines
+#   the default disk prefix.
+#  (string value)
+#disk_prefix = <None>
+
+# Number of seconds to wait for instance to shut down after soft
+# reboot request is made. We fall back to hard reboot if instance does
+# not shutdown within this window. (integer value)
+#wait_soft_reboot_seconds = 120
+
+#
+# Is used to set the CPU mode an instance should have.
+#
+# If virt_type="kvm|qemu", it will default to "host-model", otherwise
+# it will
+# default to "none".
+#
+# Possible values:
+#
+# * ``host-model``: Clones the host CPU feature flags
+# * ``host-passthrough``: Use the host CPU model exactly
+# * ``custom``: Use a named CPU model
+# * ``none``: Don't set a specific CPU model. For instances with
+# ``virt_type`` as KVM/QEMU, the default CPU model from QEMU will be
+# used,
+# which provides a basic set of CPU features that are compatible with
+# most
+# hosts.
+#
+# Related options:
+#
+# * ``cpu_model``: This should be set ONLY when ``cpu_mode`` is set to
+# ``custom``. Otherwise, it would result in an error and the instance
+# launch will fail.
+#
+#  (string value)
+# Possible values:
+# host-model - <No description provided>
+# host-passthrough - <No description provided>
+# custom - <No description provided>
+# none - <No description provided>
+# cpu_model = <None>
+
+#
+# Set the name of the libvirt CPU model the instance should use.
+#
+# Possible values:
+#
+# * The named CPU models listed in ``/usr/share/libvirt/cpu_map.xml``
+#
+# Related options:
+#
+# * ``cpu_mode``: This should be set to ``custom`` ONLY when you want
+# to
+# configure (via ``cpu_model``) a specific named CPU model.
+# Otherwise, it
+# would result in an error and the instance launch will fail.
+#
+# * ``virt_type``: Only the virtualization types ``kvm`` and ``qemu``
+# use this.
+#  (string value)
+#cpu_model = <None>
+
+
+#
+# This allows specifying granular CPU feature flags when specifying
+# CPU
+# models.  For example, to explicitly specify the ``pcid``
+# (Process-Context ID, an Intel processor feature) flag to the
+# "IvyBridge"
+# virtual CPU model::
+#
+#     [libvirt]
+#     cpu_mode = custom
+#     cpu_model = IvyBridge
+#     cpu_model_extra_flags = pcid
+#
+# Currently, the choice is restricted to only one option: ``pcid``
+# (the
+# option is case-insensitive, so ``PCID`` is also valid).  This flag
+# is
+# now required to address the guest performance degradation as a
+# result of
+# applying the "Meltdown" CVE fixes on certain Intel CPU models.
+#
+# Note that when using this config attribute to set the 'PCID' CPU
+# flag,
+# not all virtual (i.e. libvirt / QEMU) CPU models need it:
+#
+# * The only virtual CPU models that include the 'PCID' capability are
+#   Intel "Haswell", "Broadwell", and "Skylake" variants.
+#
+# * The libvirt / QEMU CPU models "Nehalem", "Westmere",
+# "SandyBridge",
+#   and "IvyBridge" will _not_ expose the 'PCID' capability by
+# default,
+#   even if the host CPUs by the same name include it.  I.e.  'PCID'
+# needs
+#   to be explicitly specified when using the said virtual CPU models.
+#
+# For now, the ``cpu_model_extra_flags`` config attribute is valid
+# only in
+# combination with ``cpu_mode`` + ``cpu_model`` options.
+#
+# Besides ``custom``, the libvirt driver has two other CPU modes: The
+# default, ``host-model``, tells it to do the right thing with respect
+# to
+# handling 'PCID' CPU flag for the guest -- *assuming* you are running
+# updated processor microcode, host and guest kernel, libvirt, and
+# QEMU.
+# The other mode, ``host-passthrough``, checks if 'PCID' is available
+# in
+# the hardware, and if so directly passes it through to the Nova
+# guests.
+# Thus, in context of 'PCID', with either of these CPU modes
+# (``host-model`` or ``host-passthrough``), there is no need to use
+# the
+# ``cpu_model_extra_flags``.
+#
+# Related options:
+#
+# * cpu_mode
+# * cpu_model
+#  (list value)
+#cpu_model_extra_flags =
+
+# Location where libvirt driver will store snapshots before uploading
+# them to image service (string value)
+#snapshots_directory = $instances_path/snapshots
+
+# Location where the Xen hvmloader is kept (string value)
+#xen_hvmloader_path = /usr/lib/xen/boot/hvmloader
+
+#
+# Specific cache modes to use for different disk types.
+#
+# For example: file=directsync,block=none,network=writeback
+#
+# For local or direct-attached storage, it is recommended that you use
+# writethrough (default) mode, as it ensures data integrity and has
+# acceptable
+# I/O performance for applications running in the guest, especially
+# for read
+# operations. However, caching mode none is recommended for remote NFS
+# storage,
+# because direct I/O operations (O_DIRECT) perform better than
+# synchronous I/O
+# operations (with O_SYNC). Caching mode none effectively turns all
+# guest I/O
+# operations into direct I/O operations on the host, which is the NFS
+# client in
+# this environment.
+#
+# Possible cache modes:
+#
+# * default: Same as writethrough.
+# * none: With caching mode set to none, the host page cache is
+# disabled, but
+#   the disk write cache is enabled for the guest. In this mode, the
+# write
+#   performance in the guest is optimal because write operations
+# bypass the host
+#   page cache and go directly to the disk write cache. If the disk
+# write cache
+#   is battery-backed, or if the applications or storage stack in the
+# guest
+#   transfer data properly (either through fsync operations or file
+# system
+#   barriers), then data integrity can be ensured. However, because
+# the host
+#   page cache is disabled, the read performance in the guest would
+# not be as
+#   good as in the modes where the host page cache is enabled, such as
+#   writethrough mode. Shareable disk devices, like for a multi-
+# attachable block
+#   storage volume, will have their cache mode set to 'none'
+# regardless of
+#   configuration.
+# * writethrough: writethrough mode is the default caching mode. With
+#   caching set to writethrough mode, the host page cache is enabled,
+# but the
+#   disk write cache is disabled for the guest. Consequently, this
+# caching mode
+#   ensures data integrity even if the applications and storage stack
+# in the
+#   guest do not transfer data to permanent storage properly (either
+# through
+#   fsync operations or file system barriers). Because the host page
+# cache is
+#   enabled in this mode, the read performance for applications
+# running in the
+#   guest is generally better. However, the write performance might be
+# reduced
+#   because the disk write cache is disabled.
+# * writeback: With caching set to writeback mode, both the host page
+# cache
+#   and the disk write cache are enabled for the guest. Because of
+# this, the
+#   I/O performance for applications running in the guest is good, but
+# the data
+#   is not protected in a power failure. As a result, this caching
+# mode is
+#   recommended only for temporary data where potential data loss is
+# not a
+#   concern.
+# * directsync: Like "writethrough", but it bypasses the host page
+# cache.
+# * unsafe: Caching mode of unsafe ignores cache transfer operations
+#   completely. As its name implies, this caching mode should be used
+# only for
+#   temporary data where data loss is not a concern. This mode can be
+# useful for
+#   speeding up guest installations, but you should switch to another
+# caching
+#   mode in production environments.
+#  (list value)
+#disk_cachemodes =
+
+# A path to a device that will be used as source of entropy on the
+# host. Permitted options are: /dev/random or /dev/hwrng (string
+# value)
+#rng_dev_path = <None>
+
+# For qemu or KVM guests, set this option to specify a default machine
+# type per host architecture. You can find a list of supported machine
+# types in your environment by checking the output of the "virsh
+# capabilities"command. The format of the value for this config option
+# is host-arch=machine-type. For example:
+# x86_64=machinetype1,armv7l=machinetype2 (list value)
+#hw_machine_type = <None>
+
+# The data source used to the populate the host "serial" UUID exposed
+# to guest in the virtual BIOS. (string value)
+# Possible values:
+# none - <No description provided>
+# os - <No description provided>
+# hardware - <No description provided>
+# auto - <No description provided>
+#sysinfo_serial = auto
+
+# A number of seconds to memory usage statistics period. Zero or
+# negative value mean to disable memory usage statistics. (integer
+# value)
+#mem_stats_period_seconds = 10
+
+# List of uid targets and ranges.Syntax is guest-uid:host-
+# uid:countMaximum of 5 allowed. (list value)
+#uid_maps =
+
+# List of guid targets and ranges.Syntax is guest-gid:host-
+# gid:countMaximum of 5 allowed. (list value)
+#gid_maps =
+
+# In a realtime host context vCPUs for guest will run in that
+# scheduling priority. Priority depends on the host kernel (usually
+# 1-99) (integer value)
+#realtime_scheduler_priority = 1
+
+#
+# This is a performance event list which could be used as monitor.
+# These events
+# will be passed to libvirt domain xml while creating a new instances.
+# Then event statistics data can be collected from libvirt.  The
+# minimum
+# libvirt version is 2.0.0. For more information about `Performance
+# monitoring
+# events`, refer https://libvirt.org/formatdomain.html#elementsPerf .
+#
+# Possible values:
+# * A string list. For example: ``enabled_perf_events = cmt, mbml,
+# mbmt``
+#   The supported events list can be found in
+#   https://libvirt.org/html/libvirt-libvirt-domain.html ,
+#   which you may need to search key words ``VIR_PERF_PARAM_*``
+#  (list value)
+#enabled_perf_events =
+
+#
+# VM Images format.
+#
+# If default is specified, then use_cow_images flag is used instead of
+# this
+# one.
+#
+# Related options:
+#
+# * virt.use_cow_images
+# * images_volume_group
+#  (string value)
+# Possible values:
+# raw - <No description provided>
+# flat - <No description provided>
+# qcow2 - <No description provided>
+# lvm - <No description provided>
+# rbd - <No description provided>
+# ploop - <No description provided>
+# default - <No description provided>
+#images_type = default
+
+#
+# LVM Volume Group that is used for VM images, when you specify
+# images_type=lvm
+#
+# Related options:
+#
+# * images_type
+#  (string value)
+#images_volume_group = <None>
+
+#
+# Create sparse logical volumes (with virtualsize) if this flag is set
+# to True.
+#  (boolean value)
+#sparse_logical_volumes = false
+
+# The RADOS pool in which rbd volumes are stored (string value)
+#images_rbd_pool = rbd
+
+# Path to the ceph configuration file to use (string value)
+#images_rbd_ceph_conf =
+
+#
+# Discard option for nova managed disks.
+#
+# Requires:
+#
+# * Libvirt >= 1.0.6
+# * Qemu >= 1.5 (raw format)
+# * Qemu >= 1.6 (qcow2 format)
+#  (string value)
+# Possible values:
+# ignore - <No description provided>
+# unmap - <No description provided>
+#hw_disk_discard = <None>
+
+# DEPRECATED: Allows image information files to be stored in non-
+# standard locations (string value)
+# This option is deprecated for removal since 14.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Image info files are no longer used by the image cache
+#image_info_filename_pattern = $instances_path/$image_cache_subdirectory_name/%(image)s.info
+
+# Unused resized base images younger than this will not be removed
+# (integer value)
+#remove_unused_resized_minimum_age_seconds = 3600
+
+# DEPRECATED: Write a checksum for files in _base to disk (boolean
+# value)
+# This option is deprecated for removal since 14.0.0.
+# Its value may be silently ignored in the future.
+# Reason: The image cache no longer periodically calculates checksums
+# of stored images. Data integrity can be checked at the block or
+# filesystem level.
+#checksum_base_images = false
+
+# DEPRECATED: How frequently to checksum base images (integer value)
+# This option is deprecated for removal since 14.0.0.
+# Its value may be silently ignored in the future.
+# Reason: The image cache no longer periodically calculates checksums
+# of stored images. Data integrity can be checked at the block or
+# filesystem level.
+#checksum_interval_seconds = 3600
+
+#
+# Method used to wipe ephemeral disks when they are deleted. Only
+# takes effect
+# if LVM is set as backing storage.
+#
+# Possible values:
+#
+# * none - do not wipe deleted volumes
+# * zero - overwrite volumes with zeroes
+# * shred - overwrite volume repeatedly
+#
+# Related options:
+#
+# * images_type - must be set to ``lvm``
+# * volume_clear_size
+#  (string value)
+# Possible values:
+# none - <No description provided>
+# zero - <No description provided>
+# shred - <No description provided>
+#volume_clear = zero
+
+#
+# Size of area in MiB, counting from the beginning of the allocated
+# volume,
+# that will be cleared using method set in ``volume_clear`` option.
+#
+# Possible values:
+#
+# * 0 - clear whole volume
+# * >0 - clear specified amount of MiB
+#
+# Related options:
+#
+# * images_type - must be set to ``lvm``
+# * volume_clear - must be set and the value must be different than
+# ``none``
+#   for this option to have any impact
+#  (integer value)
+# Minimum value: 0
+#volume_clear_size = 0
+
+#
+# Enable snapshot compression for ``qcow2`` images.
+#
+# Note: you can set ``snapshot_image_format`` to ``qcow2`` to force
+# all
+# snapshots to be in ``qcow2`` format, independently from their
+# original image
+# type.
+#
+# Related options:
+#
+# * snapshot_image_format
+#  (boolean value)
+#snapshot_compression = false
+
+# Use virtio for bridge interfaces with KVM/QEMU (boolean value)
+use_virtio_for_bridges = true
+
+#
+# Use multipath connection of the iSCSI or FC volume
+#
+# Volumes can be connected in the LibVirt as multipath devices. This
+# will
+# provide high availability and fault tolerance.
+#  (boolean value)
+# Deprecated group/name - [libvirt]/iscsi_use_multipath
+#volume_use_multipath = false
+
+#
+# Number of times to scan given storage protocol to find volume.
+#  (integer value)
+# Deprecated group/name - [libvirt]/num_iscsi_scan_tries
+#num_volume_scan_tries = 5
+
+#
+# Number of times to rediscover AoE target to find volume.
+#
+# Nova provides support for block storage attaching to hosts via AOE
+# (ATA over
+# Ethernet). This option allows the user to specify the maximum number
+# of retry
+# attempts that can be made to discover the AoE device.
+#  (integer value)
+#num_aoe_discover_tries = 3
+
+#
+# The iSCSI transport iface to use to connect to target in case
+# offload support
+# is desired.
+#
+# Default format is of the form <transport_name>.<hwaddress> where
+# <transport_name> is one of (be2iscsi, bnx2i, cxgb3i, cxgb4i,
+# qla4xxx, ocs) and
+# <hwaddress> is the MAC address of the interface and can be generated
+# via the
+# iscsiadm -m iface command. Do not confuse the iscsi_iface parameter
+# to be
+# provided here with the actual transport name.
+#  (string value)
+# Deprecated group/name - [libvirt]/iscsi_transport
+#iscsi_iface = <None>
+
+#
+# Number of times to scan iSER target to find volume.
+#
+# iSER is a server network protocol that extends iSCSI protocol to use
+# Remote
+# Direct Memory Access (RDMA). This option allows the user to specify
+# the maximum
+# number of scan attempts that can be made to find iSER volume.
+#  (integer value)
+#num_iser_scan_tries = 5
+
+#
+# Use multipath connection of the iSER volume.
+#
+# iSER volumes can be connected as multipath devices. This will
+# provide high
+# availability and fault tolerance.
+#  (boolean value)
+#iser_use_multipath = false
+
+#
+# The RADOS client name for accessing rbd(RADOS Block Devices)
+# volumes.
+#
+# Libvirt will refer to this user when connecting and authenticating
+# with
+# the Ceph RBD server.
+#  (string value)
+#rbd_user = <None>
+
+#
+# The libvirt UUID of the secret for the rbd_user volumes.
+#  (string value)
+#rbd_secret_uuid = <None>
+
+#
+# Directory where the NFS volume is mounted on the compute node.
+# The default is 'mnt' directory of the location where nova's Python
+# module
+# is installed.
+#
+# NFS provides shared storage for the OpenStack Block Storage service.
+#
+# Possible values:
+#
+# * A string representing absolute path of mount point.
+#  (string value)
+#nfs_mount_point_base = $state_path/mnt
+
+#
+# Mount options passed to the NFS client. See section of the nfs man
+# page
+# for details.
+#
+# Mount options controls the way the filesystem is mounted and how the
+# NFS client behaves when accessing files on this mount point.
+#
+# Possible values:
+#
+# * Any string representing mount options separated by commas.
+# * Example string: vers=3,lookupcache=pos
+#  (string value)
+#nfs_mount_options = <None>
+
+#
+# Directory where the Quobyte volume is mounted on the compute node.
+#
+# Nova supports Quobyte volume driver that enables storing Block
+# Storage
+# service volumes on a Quobyte storage back end. This Option specifies
+# the
+# path of the directory where Quobyte volume is mounted.
+#
+# Possible values:
+#
+# * A string representing absolute path of mount point.
+#  (string value)
+#quobyte_mount_point_base = $state_path/mnt
+
+# Path to a Quobyte Client configuration file. (string value)
+#quobyte_client_cfg = <None>
+
+#
+# Directory where the SMBFS shares are mounted on the compute node.
+#  (string value)
+#smbfs_mount_point_base = $state_path/mnt
+
+#
+# Mount options passed to the SMBFS client.
+#
+# Provide SMBFS options as a single string containing all parameters.
+# See mount.cifs man page for details. Note that the libvirt-qemu
+# ``uid``
+# and ``gid`` must be specified.
+#  (string value)
+#smbfs_mount_options =
+
+#
+# libvirt's transport method for remote file operations.
+#
+# Because libvirt cannot use RPC to copy files over network to/from
+# other
+# compute nodes, other method must be used for:
+#
+# * creating directory on remote host
+# * creating file on remote host
+# * removing file from remote host
+# * copying file to remote host
+#  (string value)
+# Possible values:
+# ssh - <No description provided>
+# rsync - <No description provided>
+#remote_filesystem_transport = ssh
+
+#
+# Directory where the Virtuozzo Storage clusters are mounted on the
+# compute
+# node.
+#
+# This option defines non-standard mountpoint for Vzstorage cluster.
+#
+# Related options:
+#
+# * vzstorage_mount_* group of parameters
+#  (string value)
+#vzstorage_mount_point_base = $state_path/mnt
+
+#
+# Mount owner user name.
+#
+# This option defines the owner user of Vzstorage cluster mountpoint.
+#
+# Related options:
+#
+# * vzstorage_mount_* group of parameters
+#  (string value)
+#vzstorage_mount_user = stack
+
+#
+# Mount owner group name.
+#
+# This option defines the owner group of Vzstorage cluster mountpoint.
+#
+# Related options:
+#
+# * vzstorage_mount_* group of parameters
+#  (string value)
+#vzstorage_mount_group = qemu
+
+#
+# Mount access mode.
+#
+# This option defines the access bits of Vzstorage cluster mountpoint,
+# in the format similar to one of chmod(1) utility, like this: 0770.
+# It consists of one to four digits ranging from 0 to 7, with missing
+# lead digits assumed to be 0's.
+#
+# Related options:
+#
+# * vzstorage_mount_* group of parameters
+#  (string value)
+#vzstorage_mount_perms = 0770
+
+#
+# Path to vzstorage client log.
+#
+# This option defines the log of cluster operations,
+# it should include "%(cluster_name)s" template to separate
+# logs from multiple shares.
+#
+# Related options:
+#
+# * vzstorage_mount_opts may include more detailed logging options.
+#  (string value)
+#vzstorage_log_path = /var/log/vstorage/%(cluster_name)s/nova.log.gz
+
+#
+# Path to the SSD cache file.
+#
+# You can attach an SSD drive to a client and configure the drive to
+# store
+# a local cache of frequently accessed data. By having a local cache
+# on a
+# client's SSD drive, you can increase the overall cluster performance
+# by
+# up to 10 and more times.
+# WARNING! There is a lot of SSD models which are not server grade and
+# may loose arbitrary set of data changes on power loss.
+# Such SSDs should not be used in Vstorage and are dangerous as may
+# lead
+# to data corruptions and inconsistencies. Please consult with the
+# manual
+# on which SSD models are known to be safe or verify it using
+# vstorage-hwflush-check(1) utility.
+#
+# This option defines the path which should include "%(cluster_name)s"
+# template to separate caches from multiple shares.
+#
+# Related options:
+#
+# * vzstorage_mount_opts may include more detailed cache options.
+#  (string value)
+#vzstorage_cache_path = <None>
+
+#
+# Extra mount options for pstorage-mount
+#
+# For full description of them, see
+# https://static.openvz.org/vz-man/man1/pstorage-mount.1.gz.html
+# Format is a python string representation of arguments list, like:
+# "['-v', '-R', '500']"
+# Shouldn't include -c, -l, -C, -u, -g and -m as those have
+# explicit vzstorage_* options.
+#
+# Related options:
+#
+# * All other vzstorage_* options
+#  (list value)
+#vzstorage_mount_opts =
+
+
+[metrics]
+#
+# Configuration options for metrics
+#
+# Options under this group allow to adjust how values assigned to
+# metrics are
+# calculated.
+
+#
+# From nova.conf
+#
+
+#
+# When using metrics to weight the suitability of a host, you can use
+# this option
+# to change how the calculated weight influences the weight assigned
+# to a host as
+# follows:
+#
+# * >1.0: increases the effect of the metric on overall weight
+# * 1.0: no change to the calculated weight
+# * >0.0,<1.0: reduces the effect of the metric on overall weight
+# * 0.0: the metric value is ignored, and the value of the
+#   'weight_of_unavailable' option is returned instead
+# * >-1.0,<0.0: the effect is reduced and reversed
+# * -1.0: the effect is reversed
+# * <-1.0: the effect is increased proportionally and reversed
+#
+# This option is only used by the FilterScheduler and its subclasses;
+# if you use
+# a different scheduler, this option has no effect.
+#
+# Possible values:
+#
+# * An integer or float value, where the value corresponds to the
+# multipler
+#   ratio for this weigher.
+#
+# Related options:
+#
+# * weight_of_unavailable
+#  (floating point value)
+#weight_multiplier = 1.0
+
+#
+# This setting specifies the metrics to be weighed and the relative
+# ratios for
+# each metric. This should be a single string value, consisting of a
+# series of
+# one or more 'name=ratio' pairs, separated by commas, where 'name' is
+# the name
+# of the metric to be weighed, and 'ratio' is the relative weight for
+# that
+# metric.
+#
+# Note that if the ratio is set to 0, the metric value is ignored, and
+# instead
+# the weight will be set to the value of the 'weight_of_unavailable'
+# option.
+#
+# As an example, let's consider the case where this option is set to:
+#
+#     ``name1=1.0, name2=-1.3``
+#
+# The final weight will be:
+#
+#     ``(name1.value * 1.0) + (name2.value * -1.3)``
+#
+# This option is only used by the FilterScheduler and its subclasses;
+# if you use
+# a different scheduler, this option has no effect.
+#
+# Possible values:
+#
+# * A list of zero or more key/value pairs separated by commas, where
+# the key is
+#   a string representing the name of a metric and the value is a
+# numeric weight
+#   for that metric. If any value is set to 0, the value is ignored
+# and the
+#   weight will be set to the value of the 'weight_of_unavailable'
+# option.
+#
+# Related options:
+#
+# * weight_of_unavailable
+#  (list value)
+#weight_setting =
+
+#
+# This setting determines how any unavailable metrics are treated. If
+# this option
+# is set to True, any hosts for which a metric is unavailable will
+# raise an
+# exception, so it is recommended to also use the MetricFilter to
+# filter out
+# those hosts before weighing.
+#
+# This option is only used by the FilterScheduler and its subclasses;
+# if you use
+# a different scheduler, this option has no effect.
+#
+# Possible values:
+#
+# * True or False, where False ensures any metric being unavailable
+# for a host
+#   will set the host weight to 'weight_of_unavailable'.
+#
+# Related options:
+#
+# * weight_of_unavailable
+#  (boolean value)
+#required = true
+
+#
+# When any of the following conditions are met, this value will be
+# used in place
+# of any actual metric value:
+#
+# * One of the metrics named in 'weight_setting' is not available for
+# a host,
+#   and the value of 'required' is False
+# * The ratio specified for a metric in 'weight_setting' is 0
+# * The 'weight_multiplier' option is set to 0
+#
+# This option is only used by the FilterScheduler and its subclasses;
+# if you use
+# a different scheduler, this option has no effect.
+#
+# Possible values:
+#
+# * An integer or float value, where the value corresponds to the
+# multipler
+#   ratio for this weigher.
+#
+# Related options:
+#
+# * weight_setting
+# * required
+# * weight_multiplier
+#  (floating point value)
+#weight_of_unavailable = -10000.0
+
+
+[mks]
+#
+# Nova compute node uses WebMKS, a desktop sharing protocol to provide
+# instance console access to VM's created by VMware hypervisors.
+#
+# Related options:
+# Following options must be set to provide console access.
+# * mksproxy_base_url
+# * enabled
+
+#
+# From nova.conf
+#
+
+#
+# Location of MKS web console proxy
+#
+# The URL in the response points to a WebMKS proxy which
+# starts proxying between client and corresponding vCenter
+# server where instance runs. In order to use the web based
+# console access, WebMKS proxy should be installed and configured
+#
+# Possible values:
+#
+# * Must be a valid URL of the form:``http://host:port/`` or
+#   ``https://host:port/``
+#  (uri value)
+#mksproxy_base_url = http://127.0.0.1:6090/
+
+#
+# Enables graphical console access for virtual machines.
+#  (boolean value)
+#enabled = false
+
+
+[neutron]
+#
+# Configuration options for neutron (network connectivity as a
+# service).
+
+#
+# From nova.conf
+#
+
+# DEPRECATED:
+# This option specifies the URL for connecting to Neutron.
+#
+# Possible values:
+#
+# * Any valid URL that points to the Neutron API service is
+# appropriate here.
+#   This typically matches the URL returned for the 'network' service
+# type
+#   from the Keystone service catalog.
+#  (uri value)
+# This option is deprecated for removal since 17.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Endpoint lookup uses the service catalog via common
+# keystoneauth1 Adapter configuration options. In the current release,
+# "url" will override this behavior, but will be ignored and/or
+# removed in a future release. To achieve the same result, use the
+# endpoint_override option instead.
+#url = http://127.0.0.1:9696
+
+#
+# Default name for the Open vSwitch integration bridge.
+#
+# Specifies the name of an integration bridge interface used by
+# OpenvSwitch.
+# This option is only used if Neutron does not specify the OVS bridge
+# name in
+# port binding responses.
+#  (string value)
+#ovs_bridge = br-int
+
+#
+# Default name for the floating IP pool.
+#
+# Specifies the name of floating IP pool used for allocating floating
+# IPs. This
+# option is only used if Neutron does not specify the floating IP pool
+# name in
+# port binding reponses.
+#  (string value)
+#default_floating_pool = nova
+
+#
+# Integer value representing the number of seconds to wait before
+# querying
+# Neutron for extensions.  After this number of seconds the next time
+# Nova
+# needs to create a resource in Neutron it will requery Neutron for
+# the
+# extensions that it has loaded.  Setting value to 0 will refresh the
+# extensions with no wait.
+#  (integer value)
+# Minimum value: 0
+#extension_sync_interval = 600
+
+#
+# When set to True, this option indicates that Neutron will be used to
+# proxy
+# metadata requests and resolve instance ids. Otherwise, the instance
+# ID must be
+# passed to the metadata request in the 'X-Instance-ID' header.
+#
+# Related options:
+#
+# * metadata_proxy_shared_secret
+#  (boolean value)
+#service_metadata_proxy = false
+service_metadata_proxy=True
+
+#
+# This option holds the shared secret string used to validate proxy
+# requests to
+# Neutron metadata requests. In order to be used, the
+# 'X-Metadata-Provider-Signature' header must be supplied in the
+# request.
+#
+# Related options:
+#
+# * service_metadata_proxy
+#  (string value)
+#metadata_proxy_shared_secret =
+metadata_proxy_shared_secret = opnfv_secret
+
+# PEM encoded Certificate Authority to use when verifying HTTPs
+# connections. (string value)
+#cafile = <None>
+
+# PEM encoded client certificate cert file (string value)
+#certfile = <None>
+
+# PEM encoded client certificate key file (string value)
+#keyfile = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# Timeout value for http requests (integer value)
+#timeout = <None>
+timeout=300
+
+# Authentication type to load (string value)
+# Deprecated group/name - [neutron]/auth_plugin
+#auth_type = <None>
+auth_type = v3password
+
+# Config Section from which to load plugin specific options (string
+# value)
+#auth_section = <None>
+
+# Authentication URL (string value)
+#auth_url = <None>
+auth_url = http://10.167.4.35:35357/v3
+
+# Scope for system operations (string value)
+#system_scope = <None>
+
+# Domain ID to scope to (string value)
+#domain_id = <None>
+
+# Domain name to scope to (string value)
+#domain_name = <None>
+
+# Project ID to scope to (string value)
+#project_id = <None>
+
+# Project name to scope to (string value)
+#project_name = <None>
+
+# Domain ID containing project (string value)
+#project_domain_id = <None>
+
+# Domain name containing project (string value)
+#project_domain_name = <None>
+project_domain_name = Default
+
+# Trust ID (string value)
+#trust_id = <None>
+
+# Optional domain ID to use with v3 and v2 parameters. It will be used
+# for both the user and project domain in v3 and ignored in v2
+# authentication. (string value)
+#default_domain_id = <None>
+
+# Optional domain name to use with v3 API and v2 parameters. It will
+# be used for both the user and project domain in v3 and ignored in v2
+# authentication. (string value)
+#default_domain_name = <None>
+
+# User ID (string value)
+#user_id = <None>
+
+# Username (string value)
+# Deprecated group/name - [neutron]/user_name
+#username = <None>
+
+# User's domain id (string value)
+#user_domain_id = <None>
+
+# User's domain name (string value)
+#user_domain_name = <None>
+user_domain_name = Default
+
+# User's password (string value)
+#password = <None>
+
+# Tenant ID (string value)
+#tenant_id = <None>
+
+# Tenant Name (string value)
+#tenant_name = <None>
+
+# The default service_type for endpoint URL discovery. (string value)
+#service_type = network
+
+# The default service_name for endpoint URL discovery. (string value)
+#service_name = <None>
+
+# List of interfaces, in order of preference, for endpoint URL. (list
+# value)
+#valid_interfaces = internal,public
+
+# The default region_name for endpoint URL discovery. (string value)
+#region_name = <None>
+
+# Always use this endpoint URL for requests for this client. NOTE: The
+# unversioned endpoint should be specified here; to request a
+# particular API version, use the `version`, `min-version`, and/or
+# `max-version` options. (string value)
+#endpoint_override = <None>
+
+password = opnfv_secret
+project_name = service
+username = neutron
+region_name = RegionOne
+
+
+[notifications]
+#
+# Most of the actions in Nova which manipulate the system state
+# generate
+# notifications which are posted to the messaging component (e.g.
+# RabbitMQ) and
+# can be consumed by any service outside the OpenStack. More technical
+# details
+# at
+# https://docs.openstack.org/nova/latest/reference/notifications.html
+
+#
+# From nova.conf
+#
+
+#
+# If set, send compute.instance.update notifications on
+# instance state changes.
+#
+# Please refer to
+# https://docs.openstack.org/nova/latest/reference/notifications.html
+# for
+# additional information on notifications.
+#
+# Possible values:
+#
+# * None - no notifications
+# * "vm_state" - notifications are sent with VM state transition
+# information in
+#   the ``old_state`` and ``state`` fields. The ``old_task_state`` and
+#   ``new_task_state`` fields will be set to the current task_state of
+# the
+#   instance.
+# * "vm_and_task_state" - notifications are sent with VM and task
+# state
+#   transition information.
+#  (string value)
+# Possible values:
+# <None> - <No description provided>
+# vm_state - <No description provided>
+# vm_and_task_state - <No description provided>
+#notify_on_state_change = <None>
+notify_on_state_change = vm_and_task_state
+
+#
+# If enabled, send api.fault notifications on caught exceptions in the
+# API service.
+#  (boolean value)
+# Deprecated group/name - [DEFAULT]/notify_api_faults
+#notify_on_api_faults=false
+notify_on_api_faults=false
+
+# Default notification level for outgoing notifications. (string
+# value)
+# Possible values:
+# DEBUG - <No description provided>
+# INFO - <No description provided>
+# WARN - <No description provided>
+# ERROR - <No description provided>
+# CRITICAL - <No description provided>
+# Deprecated group/name - [DEFAULT]/default_notification_level
+#default_level = INFO
+
+# DEPRECATED:
+# Default publisher_id for outgoing notifications. If you consider
+# routing
+# notifications using different publisher, change this value
+# accordingly.
+#
+# Possible values:
+#
+# * Defaults to the current hostname of this host, but it can be any
+# valid
+#   oslo.messaging publisher_id
+#
+# Related options:
+#
+# *  host - Hostname, FQDN or IP address of this host.
+#  (string value)
+# This option is deprecated for removal since 17.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# This option is only used when ``monkey_patch=True`` and
+# ``monkey_patch_modules`` is configured to specify the legacy
+# notify_decorator.
+# Since the monkey_patch and monkey_patch_modules options are
+# deprecated, this
+# option is also deprecated.
+#default_publisher_id = $host
+
+#
+# Specifies which notification format shall be used by nova.
+#
+# The default value is fine for most deployments and rarely needs to
+# be changed.
+# This value can be set to 'versioned' once the infrastructure moves
+# closer to
+# consuming the newer format of notifications. After this occurs, this
+# option
+# will be removed.
+#
+# Note that notifications can be completely disabled by setting
+# ``driver=noop``
+# in the ``[oslo_messaging_notifications]`` group.
+#
+# Possible values:
+# * unversioned: Only the legacy unversioned notifications are
+# emitted.
+# * versioned: Only the new versioned notifications are emitted.
+# * both: Both the legacy unversioned and the new versioned
+# notifications are
+#   emitted. (Default)
+#
+# The list of versioned notifications is visible in
+# https://docs.openstack.org/nova/latest/reference/notifications.html
+#  (string value)
+# Possible values:
+# unversioned - <No description provided>
+# versioned - <No description provided>
+# both - <No description provided>
+#notification_format = both
+
+#
+# Specifies the topics for the versioned notifications issued by nova.
+#
+# The default value is fine for most deployments and rarely needs to
+# be changed.
+# However, if you have a third-party service that consumes versioned
+# notifications, it might be worth getting a topic for that service.
+# Nova will send a message containing a versioned notification payload
+# to each
+# topic queue in this list.
+#
+# The list of versioned notifications is visible in
+# https://docs.openstack.org/nova/latest/reference/notifications.html
+#  (list value)
+#versioned_notifications_topics = versioned_notifications
+
+#
+# If enabled, include block device information in the versioned
+# notification
+# payload. Sending block device information is disabled by default as
+# providing
+# that information can incur some overhead on the system since the
+# information
+# may need to be loaded from the database.
+#  (boolean value)
+#bdms_in_notifications = false
+
+
+[osapi_v21]
+
+#
+# From nova.conf
+#
+
+# DEPRECATED:
+# This option is a string representing a regular expression (regex)
+# that matches
+# the project_id as contained in URLs. If not set, it will match
+# normal UUIDs
+# created by keystone.
+#
+# Possible values:
+#
+# * A string representing any legal regular expression
+#  (string value)
+# This option is deprecated for removal since 13.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# Recent versions of nova constrain project IDs to hexadecimal
+# characters and
+# dashes. If your installation uses IDs outside of this range, you
+# should use
+# this option to provide your own regex and give you time to migrate
+# offending
+# projects to valid IDs before the next release.
+#project_id_regex = <None>
+
+
+[pci]
+
+#
+# From nova.conf
+#
+
+#
+# An alias for a PCI passthrough device requirement.
+#
+# This allows users to specify the alias in the extra specs for a
+# flavor, without
+# needing to repeat all the PCI property requirements.
+#
+# Possible Values:
+#
+# * A list of JSON values which describe the aliases. For example::
+#
+#     alias = {
+#       "name": "QuickAssist",
+#       "product_id": "0443",
+#       "vendor_id": "8086",
+#       "device_type": "type-PCI",
+#       "numa_policy": "required"
+#     }
+#
+#   This defines an alias for the Intel QuickAssist card. (multi
+# valued). Valid
+#   key values are :
+#
+#   ``name``
+#     Name of the PCI alias.
+#
+#   ``product_id``
+#     Product ID of the device in hexadecimal.
+#
+#   ``vendor_id``
+#     Vendor ID of the device in hexadecimal.
+#
+#   ``device_type``
+#     Type of PCI device. Valid values are: ``type-PCI``, ``type-PF``
+# and
+#     ``type-VF``.
+#
+#   ``numa_policy``
+#     Required NUMA affinity of device. Valid values are: ``legacy``,
+#     ``preferred`` and ``required``.
+#  (multi valued)
+# Deprecated group/name - [DEFAULT]/pci_alias
+#alias =
+
+#
+# White list of PCI devices available to VMs.
+#
+# Possible values:
+#
+# * A JSON dictionary which describe a whitelisted PCI device. It
+# should take
+#   the following format:
+#
+#     ["vendor_id": "<id>",] ["product_id": "<id>",]
+#     ["address": "[[[[<domain>]:]<bus>]:][<slot>][.[<function>]]" |
+#      "devname": "<name>",]
+#     {"<tag>": "<tag_value>",}
+#
+#   Where '[' indicates zero or one occurrences, '{' indicates zero or
+# multiple
+#   occurrences, and '|' mutually exclusive options. Note that any
+# missing
+#   fields are automatically wildcarded.
+#
+#   Valid key values are :
+#
+#   * "vendor_id": Vendor ID of the device in hexadecimal.
+#   * "product_id": Product ID of the device in hexadecimal.
+#   * "address": PCI address of the device.
+#   * "devname": Device name of the device (for e.g. interface name).
+# Not all
+#     PCI devices have a name.
+#   * "<tag>": Additional <tag> and <tag_value> used for matching PCI
+# devices.
+#     Supported <tag>: "physical_network".
+#
+#   The address key supports traditional glob style and regular
+# expression
+#   syntax. Valid examples are:
+#
+#     passthrough_whitelist = {"devname":"eth0",
+#                              "physical_network":"physnet"}
+#     passthrough_whitelist = {"address":"*:0a:00.*"}
+#     passthrough_whitelist = {"address":":0a:00.",
+#                              "physical_network":"physnet1"}
+#     passthrough_whitelist = {"vendor_id":"1137",
+#                              "product_id":"0071"}
+#     passthrough_whitelist = {"vendor_id":"1137",
+#                              "product_id":"0071",
+#                              "address": "0000:0a:00.1",
+#                              "physical_network":"physnet1"}
+#     passthrough_whitelist = {"address":{"domain": ".*",
+#                                         "bus": "02", "slot": "01",
+#                                         "function": "[2-7]"},
+#                              "physical_network":"physnet1"}
+#     passthrough_whitelist = {"address":{"domain": ".*",
+#                                         "bus": "02", "slot":
+# "0[1-2]",
+#                                         "function": ".*"},
+#                              "physical_network":"physnet1"}
+#
+#   The following are invalid, as they specify mutually exclusive
+# options:
+#
+#     passthrough_whitelist = {"devname":"eth0",
+#                              "physical_network":"physnet",
+#                              "address":"*:0a:00.*"}
+#
+# * A JSON list of JSON dictionaries corresponding to the above
+# format. For
+#   example:
+#
+#     passthrough_whitelist = [{"product_id":"0001",
+# "vendor_id":"8086"},
+#                              {"product_id":"0002",
+# "vendor_id":"8086"}]
+#  (multi valued)
+# Deprecated group/name - [DEFAULT]/pci_passthrough_whitelist
+#passthrough_whitelist =
+
+[placement]
+
+#
+# From nova.conf
+#
+
+# DEPRECATED:
+# Region name of this node. This is used when picking the URL in the
+# service
+# catalog.
+#
+# Possible values:
+#
+# * Any string representing region name
+#  (string value)
+# This option is deprecated for removal since 17.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Endpoint lookup uses the service catalog via common
+# keystoneauth1 Adapter configuration options.  Use the region_name
+# option instead.
+os_region_name = RegionOne
+
+# DEPRECATED:
+# Endpoint interface for this node. This is used when picking the URL
+# in the
+# service catalog.
+#  (string value)
+# This option is deprecated for removal since 17.0.0.
+# Its value may be silently ignored in the future.
+# Reason: Endpoint lookup uses the service catalog via common
+# keystoneauth1 Adapter configuration options.  Use the
+# valid_interfaces option instead.
+#os_interface = <None>
+
+#
+# If True, when limiting allocation candidate results, the results
+# will be
+# a random sampling of the full result set. If False, allocation
+# candidates
+# are returned in a deterministic but undefined order. That is, all
+# things
+# being equal, two requests for allocation candidates will return the
+# same
+# results in the same order; but no guarantees are made as to how that
+# order
+# is determined.
+#  (boolean value)
+#randomize_allocation_candidates = false
+
+# PEM encoded Certificate Authority to use when verifying HTTPs
+# connections. (string value)
+#cafile = <None>
+
+# PEM encoded client certificate cert file (string value)
+#certfile = <None>
+
+# PEM encoded client certificate key file (string value)
+#keyfile = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# Timeout value for http requests (integer value)
+#timeout = <None>
+
+# Authentication type to load (string value)
+# Deprecated group/name - [placement]/auth_plugin
+auth_type = password
+
+# Config Section from which to load plugin specific options (string
+# value)
+#auth_section = <None>
+
+# Authentication URL (string value)
+#auth_url = <None>
+auth_url=http://10.167.4.35:35357/v3
+
+# Scope for system operations (string value)
+#system_scope = <None>
+
+# Domain ID to scope to (string value)
+#domain_id = <None>
+
+# Domain name to scope to (string value)
+#domain_name = <None>
+
+# Project ID to scope to (string value)
+#project_id = <None>
+
+# Project name to scope to (string value)
+project_name = service
+
+# Domain ID containing project (string value)
+project_domain_id = default
+
+# Domain name containing project (string value)
+#project_domain_name = <None>
+
+# Trust ID (string value)
+#trust_id = <None>
+
+# Optional domain ID to use with v3 and v2 parameters. It will be used
+# for both the user and project domain in v3 and ignored in v2
+# authentication. (string value)
+#default_domain_id = <None>
+
+# Optional domain name to use with v3 API and v2 parameters. It will
+# be used for both the user and project domain in v3 and ignored in v2
+# authentication. (string value)
+#default_domain_name = <None>
+
+# User ID (string value)
+#user_id = <None>
+
+# Username (string value)
+# Deprecated group/name - [placement]/user_name
+username = nova
+
+# User's domain id (string value)
+user_domain_id = default
+
+# User's domain name (string value)
+#user_domain_name = <None>
+
+# User's password (string value)
+password = opnfv_secret
+
+# Tenant ID (string value)
+#tenant_id = <None>
+
+# Tenant Name (string value)
+#tenant_name = <None>
+
+# The default service_type for endpoint URL discovery. (string value)
+#service_type = placement
+
+# The default service_name for endpoint URL discovery. (string value)
+#service_name = <None>
+
+# List of interfaces, in order of preference, for endpoint URL. (list
+# value)
+# Deprecated group/name - [placement]/os_interface
+valid_interfaces = internal
+
+# The default region_name for endpoint URL discovery. (string value)
+# Deprecated group/name - [placement]/os_region_name
+#region_name = <None>
+
+# Always use this endpoint URL for requests for this client. NOTE: The
+# unversioned endpoint should be specified here; to request a
+# particular API version, use the `version`, `min-version`, and/or
+# `max-version` options. (string value)
+#endpoint_override = <None>
+
+
+[quota]
+#
+# Quota options allow to manage quotas in openstack deployment.
+
+#
+# From nova.conf
+#
+
+#
+# The number of instances allowed per project.
+#
+# Possible Values
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_instances
+#instances = 10
+
+#
+# The number of instance cores or vCPUs allowed per project.
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_cores
+#cores = 20
+
+#
+# The number of megabytes of instance RAM allowed per project.
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_ram
+#ram = 51200
+
+# DEPRECATED:
+# The number of floating IPs allowed per project.
+#
+# Floating IPs are not allocated to instances by default. Users need
+# to select
+# them from the pool configured by the OpenStack administrator to
+# attach to their
+# instances.
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_floating_ips
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#floating_ips = 10
+
+# DEPRECATED:
+# The number of fixed IPs allowed per project.
+#
+# Unlike floating IPs, fixed IPs are allocated dynamically by the
+# network
+# component when instances boot up.  This quota value should be at
+# least the
+# number of instances allowed
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_fixed_ips
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#fixed_ips = -1
+
+#
+# The number of metadata items allowed per instance.
+#
+# Users can associate metadata with an instance during instance
+# creation. This
+# metadata takes the form of key-value pairs.
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_metadata_items
+#metadata_items = 128
+
+#
+# The number of injected files allowed.
+#
+# File injection allows users to customize the personality of an
+# instance by
+# injecting data into it upon boot. Only text file injection is
+# permitted: binary
+# or ZIP files are not accepted. During file injection, any existing
+# files that
+# match specified files are renamed to include ``.bak`` extension
+# appended with a
+# timestamp.
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_injected_files
+#injected_files = 5
+
+#
+# The number of bytes allowed per injected file.
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_injected_file_content_bytes
+#injected_file_content_bytes = 10240
+
+#
+# The maximum allowed injected file path length.
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_injected_file_path_length
+#injected_file_path_length = 255
+
+# DEPRECATED:
+# The number of security groups per project.
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_security_groups
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#security_groups = 10
+
+# DEPRECATED:
+# The number of security rules per security group.
+#
+# The associated rules in each security group control the traffic to
+# instances in
+# the group.
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_security_group_rules
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# nova-network is deprecated, as are any related configuration
+# options.
+#security_group_rules = 20
+
+#
+# The maximum number of key pairs allowed per user.
+#
+# Users can create at least one key pair for each project and use the
+# key pair
+# for multiple instances that belong to that project.
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_key_pairs
+#key_pairs = 100
+
+#
+# The maxiumum number of server groups per project.
+#
+# Server groups are used to control the affinity and anti-affinity
+# scheduling
+# policy for a group of servers or instances. Reducing the quota will
+# not affect
+# any existing group, but new servers will not be allowed into groups
+# that have
+# become over quota.
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_server_groups
+#server_groups = 10
+
+#
+# The maximum number of servers per server group.
+#
+# Possible values:
+#
+# * A positive integer or 0.
+# * -1 to disable the quota.
+#  (integer value)
+# Minimum value: -1
+# Deprecated group/name - [DEFAULT]/quota_server_group_members
+#server_group_members = 10
+
+#
+# The number of seconds until a reservation expires.
+#
+# This quota represents the time period for invalidating quota
+# reservations.
+#  (integer value)
+#reservation_expire = 86400
+
+#
+# The count of reservations until usage is refreshed.
+#
+# This defaults to 0 (off) to avoid additional load but it is useful
+# to turn on
+# to help keep quota usage up-to-date and reduce the impact of out of
+# sync usage
+# issues.
+#  (integer value)
+# Minimum value: 0
+#until_refresh = 0
+
+#
+# The number of seconds between subsequent usage refreshes.
+#
+# This defaults to 0 (off) to avoid additional load but it is useful
+# to turn on
+# to help keep quota usage up-to-date and reduce the impact of out of
+# sync usage
+# issues. Note that quotas are not updated on a periodic task, they
+# will update
+# on a new reservation if max_age has passed since the last
+# reservation.
+#  (integer value)
+# Minimum value: 0
+#max_age = 0
+
+# DEPRECATED:
+# The quota enforcer driver.
+#
+# Provides abstraction for quota checks. Users can configure a
+# specific
+# driver to use for quota checks.
+#
+# Possible values:
+#
+# * nova.quota.DbQuotaDriver (default) or any string representing
+# fully
+#   qualified class name.
+#  (string value)
+# Deprecated group/name - [DEFAULT]/quota_driver
+# This option is deprecated for removal since 14.0.0.
+# Its value may be silently ignored in the future.
+#driver = nova.quota.DbQuotaDriver
+
+#
+# Recheck quota after resource creation to prevent allowing quota to
+# be exceeded.
+#
+# This defaults to True (recheck quota after resource creation) but
+# can be set to
+# False to avoid additional load if allowing quota to be exceeded
+# because of
+# racing requests is considered acceptable. For example, when set to
+# False, if a
+# user makes highly parallel REST API requests to create servers, it
+# will be
+# possible for them to create more servers than their allowed quota
+# during the
+# race. If their quota is 10 servers, they might be able to create 50
+# during the
+# burst. After the burst, they will not be able to create any more
+# servers but
+# they will be able to keep their 50 servers until they delete them.
+#
+# The initial quota check is done before resources are created, so if
+# multiple
+# parallel requests arrive at the same time, all could pass the quota
+# check and
+# create resources, potentially exceeding quota. When recheck_quota is
+# True,
+# quota will be checked a second time after resources have been
+# created and if
+# the resource is over quota, it will be deleted and OverQuota will be
+# raised,
+# usually resulting in a 403 response to the REST API user. This makes
+# it
+# impossible for a user to exceed their quota with the caveat that it
+# will,
+# however, be possible for a REST API user to be rejected with a 403
+# response in
+# the event of a collision close to reaching their quota limit, even
+# if the user
+# has enough quota available when they made the request.
+#  (boolean value)
+#recheck_quota = true
+
+
+[rdp]
+#
+# Options under this group enable and configure Remote Desktop
+# Protocol (
+# RDP) related features.
+#
+# This group is only relevant to Hyper-V users.
+
+#
+# From nova.conf
+#
+
+#
+# Enable Remote Desktop Protocol (RDP) related features.
+#
+# Hyper-V, unlike the majority of the hypervisors employed on Nova
+# compute
+# nodes, uses RDP instead of VNC and SPICE as a desktop sharing
+# protocol to
+# provide instance console access. This option enables RDP for
+# graphical
+# console access for virtual machines created by Hyper-V.
+#
+# **Note:** RDP should only be enabled on compute nodes that support
+# the Hyper-V
+# virtualization platform.
+#
+# Related options:
+#
+# * ``compute_driver``: Must be hyperv.
+#
+#  (boolean value)
+#enabled = false
+
+#
+# The URL an end user would use to connect to the RDP HTML5 console
+# proxy.
+# The console proxy service is called with this token-embedded URL and
+# establishes the connection to the proper instance.
+#
+# An RDP HTML5 console proxy service will need to be configured to
+# listen on the
+# address configured here. Typically the console proxy service would
+# be run on a
+# controller node. The localhost address used as default would only
+# work in a
+# single node environment i.e. devstack.
+#
+# An RDP HTML5 proxy allows a user to access via the web the text or
+# graphical
+# console of any Windows server or workstation using RDP. RDP HTML5
+# console
+# proxy services include FreeRDP, wsgate.
+# See https://github.com/FreeRDP/FreeRDP-WebConnect
+#
+# Possible values:
+#
+# * <scheme>://<ip-address>:<port-number>/
+#
+#   The scheme must be identical to the scheme configured for the RDP
+# HTML5
+#   console proxy service. It is ``http`` or ``https``.
+#
+#   The IP address must be identical to the address on which the RDP
+# HTML5
+#   console proxy service is listening.
+#
+#   The port must be identical to the port on which the RDP HTML5
+# console proxy
+#   service is listening.
+#
+# Related options:
+#
+# * ``rdp.enabled``: Must be set to ``True`` for
+# ``html5_proxy_base_url`` to be
+#   effective.
+#  (uri value)
+#html5_proxy_base_url = http://127.0.0.1:6083/
+
+
+[remote_debug]
+
+#
+# From nova.conf
+#
+
+#
+# Debug host (IP or name) to connect to. This command line parameter
+# is used when
+# you want to connect to a nova service via a debugger running on a
+# different
+# host.
+#
+# Note that using the remote debug option changes how Nova uses the
+# eventlet
+# library to support async IO. This could result in failures that do
+# not occur
+# under normal operation. Use at your own risk.
+#
+# Possible Values:
+#
+#    * IP address of a remote host as a command line parameter
+#      to a nova service. For Example:
+#
+#     /usr/local/bin/nova-compute --config-file /etc/nova/nova.conf
+#     --remote_debug-host <IP address where the debugger is running>
+#  (unknown value)
+#host = <None>
+
+#
+# Debug port to connect to. This command line parameter allows you to
+# specify
+# the port you want to use to connect to a nova service via a debugger
+# running
+# on different host.
+#
+# Note that using the remote debug option changes how Nova uses the
+# eventlet
+# library to support async IO. This could result in failures that do
+# not occur
+# under normal operation. Use at your own risk.
+#
+# Possible Values:
+#
+#    * Port number you want to use as a command line parameter
+#      to a nova service. For Example:
+#
+#     /usr/local/bin/nova-compute --config-file /etc/nova/nova.conf
+#     --remote_debug-host <IP address where the debugger is running>
+#     --remote_debug-port <port> it's listening on>.
+#  (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#port = <None>
+
+
+[scheduler]
+
+#
+# From nova.conf
+#
+
+#
+# The scheduler host manager to use.
+#
+# The host manager manages the in-memory picture of the hosts that the
+# scheduler
+# uses. The options values are chosen from the entry points under the
+# namespace
+# 'nova.scheduler.host_manager' in 'setup.cfg'.
+#
+# NOTE: The "ironic_host_manager" option is deprecated as of the
+# 17.0.0 Queens
+# release.
+#  (string value)
+# Possible values:
+# host_manager - <No description provided>
+# ironic_host_manager - <No description provided>
+# Deprecated group/name - [DEFAULT]/scheduler_host_manager
+#host_manager = host_manager
+
+#
+# The class of the driver used by the scheduler. This should be chosen
+# from one
+# of the entrypoints under the namespace 'nova.scheduler.driver' of
+# file
+# 'setup.cfg'. If nothing is specified in this option, the
+# 'filter_scheduler' is
+# used.
+#
+# Other options are:
+#
+# * 'caching_scheduler' which aggressively caches the system state for
+# better
+#   individual scheduler performance at the risk of more retries when
+# running
+#   multiple schedulers. [DEPRECATED]
+# * 'chance_scheduler' which simply picks a host at random.
+# [DEPRECATED]
+# * 'fake_scheduler' which is used for testing.
+#
+# Possible values:
+#
+# * Any of the drivers included in Nova:
+# ** filter_scheduler
+# ** caching_scheduler
+# ** chance_scheduler
+# ** fake_scheduler
+# * You may also set this to the entry point name of a custom
+# scheduler driver,
+#   but you will be responsible for creating and maintaining it in
+# your setup.cfg
+#   file.
+#  (string value)
+# Deprecated group/name - [DEFAULT]/scheduler_driver
+#driver = filter_scheduler
+
+#
+# Periodic task interval.
+#
+# This value controls how often (in seconds) to run periodic tasks in
+# the
+# scheduler. The specific tasks that are run for each period are
+# determined by
+# the particular scheduler being used.
+#
+# If this is larger than the nova-service 'service_down_time' setting,
+# Nova may
+# report the scheduler service as down. This is because the scheduler
+# driver is
+# responsible for sending a heartbeat and it will only do that as
+# often as this
+# option allows. As each scheduler can work a little differently than
+# the others,
+# be sure to test this with your selected scheduler.
+#
+# Possible values:
+#
+# * An integer, where the integer corresponds to periodic task
+# interval in
+#   seconds. 0 uses the default interval (60 seconds). A negative
+# value disables
+#   periodic tasks.
+#
+# Related options:
+#
+# * ``nova-service service_down_time``
+#  (integer value)
+# Deprecated group/name - [DEFAULT]/scheduler_driver_task_period
+#periodic_task_interval = 60
+
+#
+# This is the maximum number of attempts that will be made for a given
+# instance
+# build/move operation. It limits the number of alternate hosts
+# returned by the
+# scheduler. When that list of hosts is exhausted, a
+# MaxRetriesExceeded
+# exception is raised and the instance is set to an error state.
+#
+# Possible values:
+#
+# * A positive integer, where the integer corresponds to the max
+# number of
+#   attempts that can be made when building or moving an instance.
+#          (integer value)
+# Minimum value: 1
+# Deprecated group/name - [DEFAULT]/scheduler_max_attempts
+#max_attempts = 3
+
+#
+# Periodic task interval.
+#
+# This value controls how often (in seconds) the scheduler should
+# attempt
+# to discover new hosts that have been added to cells. If negative
+# (the
+# default), no automatic discovery will occur.
+#
+# Deployments where compute nodes come and go frequently may want this
+# enabled, where others may prefer to manually discover hosts when one
+# is added to avoid any overhead from constantly checking. If enabled,
+# every time this runs, we will select any unmapped hosts out of each
+# cell database on every run.
+#  (integer value)
+# Minimum value: -1
+#discover_hosts_in_cells_interval = -1
+
+#
+# This setting determines the maximum limit on results received from
+# the
+# placement service during a scheduling operation. It effectively
+# limits
+# the number of hosts that may be considered for scheduling requests
+# that
+# match a large number of candidates.
+#
+# A value of 1 (the minimum) will effectively defer scheduling to the
+# placement
+# service strictly on "will it fit" grounds. A higher value will put
+# an upper
+# cap on the number of results the scheduler will consider during the
+# filtering
+# and weighing process. Large deployments may need to set this lower
+# than the
+# total number of hosts available to limit memory consumption, network
+# traffic,
+# etc. of the scheduler.
+#
+# This option is only used by the FilterScheduler; if you use a
+# different
+# scheduler, this option has no effect.
+#  (integer value)
+# Minimum value: 1
+#max_placement_results = 1000
+
+
+[serial_console]
+#
+# The serial console feature allows you to connect to a guest in case
+# a
+# graphical console like VNC, RDP or SPICE is not available. This is
+# only
+# currently supported for the libvirt, Ironic and hyper-v drivers.
+
+#
+# From nova.conf
+#
+
+#
+# Enable the serial console feature.
+#
+# In order to use this feature, the service ``nova-serialproxy`` needs
+# to run.
+# This service is typically executed on the controller node.
+#  (boolean value)
+#enabled = false
+
+#
+# A range of TCP ports a guest can use for its backend.
+#
+# Each instance which gets created will use one port out of this
+# range. If the
+# range is not big enough to provide another port for an new instance,
+# this
+# instance won't get launched.
+#
+# Possible values:
+#
+# * Each string which passes the regex ``\d+:\d+`` For example
+# ``10000:20000``.
+#   Be sure that the first port number is lower than the second port
+# number
+#   and that both are in range from 0 to 65535.
+#  (string value)
+#port_range = 10000:20000
+
+#
+# The URL an end user would use to connect to the ``nova-serialproxy``
+# service.
+#
+# The ``nova-serialproxy`` service is called with this token enriched
+# URL
+# and establishes the connection to the proper instance.
+#
+# Related options:
+#
+# * The IP address must be identical to the address to which the
+#   ``nova-serialproxy`` service is listening (see option
+# ``serialproxy_host``
+#   in this section).
+# * The port must be the same as in the option ``serialproxy_port`` of
+# this
+#   section.
+# * If you choose to use a secured websocket connection, then start
+# this option
+#   with ``wss://`` instead of the unsecured ``ws://``. The options
+# ``cert``
+#   and ``key`` in the ``[DEFAULT]`` section have to be set for that.
+#  (uri value)
+#base_url = ws://127.0.0.1:6083/
+
+#
+# The IP address to which proxy clients (like ``nova-serialproxy``)
+# should
+# connect to get the serial console of an instance.
+#
+# This is typically the IP address of the host of a ``nova-compute``
+# service.
+#  (string value)
+#proxyclient_address = 127.0.0.1
+
+#
+# The IP address which is used by the ``nova-serialproxy`` service to
+# listen
+# for incoming requests.
+#
+# The ``nova-serialproxy`` service listens on this IP address for
+# incoming
+# connection requests to instances which expose serial console.
+#
+# Related options:
+#
+# * Ensure that this is the same IP address which is defined in the
+# option
+#   ``base_url`` of this section or use ``0.0.0.0`` to listen on all
+# addresses.
+#  (string value)
+#serialproxy_host = 0.0.0.0
+
+#
+# The port number which is used by the ``nova-serialproxy`` service to
+# listen
+# for incoming requests.
+#
+# The ``nova-serialproxy`` service listens on this port number for
+# incoming
+# connection requests to instances which expose serial console.
+#
+# Related options:
+#
+# * Ensure that this is the same port number which is defined in the
+# option
+#   ``base_url`` of this section.
+#  (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#serialproxy_port = 6083
+
+
+[service_user]
+#
+# Configuration options for service to service authentication using a
+# service
+# token. These options allow sending a service token along with the
+# user's token
+# when contacting external REST APIs.
+
+#
+# From nova.conf
+#
+
+#
+# When True, if sending a user token to a REST API, also send a
+# service token.
+#
+# Nova often reuses the user token provided to the nova-api to talk to
+# other REST
+# APIs, such as Cinder, Glance and Neutron. It is possible that while
+# the user
+# token was valid when the request was made to Nova, the token may
+# expire before
+# it reaches the other service. To avoid any failures, and to make it
+# clear it is
+# Nova calling the service on the user's behalf, we include a service
+# token along
+# with the user token. Should the user's token have expired, a valid
+# service
+# token ensures the REST API request will still be accepted by the
+# keystone
+# middleware.
+#  (boolean value)
+#send_service_user_token = false
+
+# PEM encoded Certificate Authority to use when verifying HTTPs
+# connections. (string value)
+#cafile = <None>
+
+# PEM encoded client certificate cert file (string value)
+#certfile = <None>
+
+# PEM encoded client certificate key file (string value)
+#keyfile = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# Timeout value for http requests (integer value)
+#timeout = <None>
+
+# Authentication type to load (string value)
+# Deprecated group/name - [service_user]/auth_plugin
+#auth_type = <None>
+
+# Config Section from which to load plugin specific options (string
+# value)
+#auth_section = <None>
+
+# Authentication URL (string value)
+#auth_url = <None>
+
+# Scope for system operations (string value)
+#system_scope = <None>
+
+# Domain ID to scope to (string value)
+#domain_id = <None>
+
+# Domain name to scope to (string value)
+#domain_name = <None>
+
+# Project ID to scope to (string value)
+#project_id = <None>
+
+# Project name to scope to (string value)
+#project_name = <None>
+
+# Domain ID containing project (string value)
+#project_domain_id = <None>
+
+# Domain name containing project (string value)
+#project_domain_name = <None>
+
+# Trust ID (string value)
+#trust_id = <None>
+
+# Optional domain ID to use with v3 and v2 parameters. It will be used
+# for both the user and project domain in v3 and ignored in v2
+# authentication. (string value)
+#default_domain_id = <None>
+
+# Optional domain name to use with v3 API and v2 parameters. It will
+# be used for both the user and project domain in v3 and ignored in v2
+# authentication. (string value)
+#default_domain_name = <None>
+
+# User ID (string value)
+#user_id = <None>
+
+# Username (string value)
+# Deprecated group/name - [service_user]/user_name
+#username = <None>
+
+# User's domain id (string value)
+#user_domain_id = <None>
+
+# User's domain name (string value)
+#user_domain_name = <None>
+
+# User's password (string value)
+#password = <None>
+
+# Tenant ID (string value)
+#tenant_id = <None>
+
+# Tenant Name (string value)
+#tenant_name = <None>
+
+
+[spice]
+#
+# SPICE console feature allows you to connect to a guest virtual
+# machine.
+# SPICE is a replacement for fairly limited VNC protocol.
+#
+# Following requirements must be met in order to use SPICE:
+#
+# * Virtualization driver must be libvirt
+# * spice.enabled set to True
+# * vnc.enabled set to False
+# * update html5proxy_base_url
+# * update server_proxyclient_address
+
+#
+# From nova.conf
+#
+
+#
+# Enable SPICE related features.
+#
+# Related options:
+#
+# * VNC must be explicitly disabled to get access to the SPICE
+# console. Set the
+#   enabled option to False in the [vnc] section to disable the VNC
+# console.
+#  (boolean value)
+#enabled = false
+enabled = false
+#
+# Enable the SPICE guest agent support on the instances.
+#
+# The Spice agent works with the Spice protocol to offer a better
+# guest console
+# experience. However, the Spice console can still be used without the
+# Spice
+# Agent. With the Spice agent installed the following features are
+# enabled:
+#
+# * Copy & Paste of text and images between the guest and client
+# machine
+# * Automatic adjustment of resolution when the client screen changes
+# - e.g.
+#   if you make the Spice console full screen the guest resolution
+# will adjust to
+#   match it rather than letterboxing.
+# * Better mouse integration - The mouse can be captured and released
+# without
+#   needing to click inside the console or press keys to release it.
+# The
+#   performance of mouse movement is also improved.
+#  (boolean value)
+#agent_enabled = true
+
+#
+# Location of the SPICE HTML5 console proxy.
+#
+# End user would use this URL to connect to the `nova-
+# spicehtml5proxy``
+# service. This service will forward request to the console of an
+# instance.
+#
+# In order to use SPICE console, the service ``nova-spicehtml5proxy``
+# should be
+# running. This service is typically launched on the controller node.
+#
+# Possible values:
+#
+# * Must be a valid URL of the form:
+# ``http://host:port/spice_auto.html``
+#   where host is the node running ``nova-spicehtml5proxy`` and the
+# port is
+#   typically 6082. Consider not using default value as it is not well
+# defined
+#   for any real deployment.
+#
+# Related options:
+#
+# * This option depends on ``html5proxy_host`` and ``html5proxy_port``
+# options.
+#   The access URL returned by the compute node must have the host
+#   and port where the ``nova-spicehtml5proxy`` service is listening.
+#  (uri value)
+#html5proxy_base_url = http://127.0.0.1:6082/spice_auto.html
+html5proxy_base_url = https://172.30.10.101:6080/spice_auto.html
+
+#
+# The  address where the SPICE server running on the instances should
+# listen.
+#
+# Typically, the ``nova-spicehtml5proxy`` proxy client runs on the
+# controller
+# node and connects over the private network to this address on the
+# compute
+# node(s).
+#
+# Possible values:
+#
+# * IP address to listen on.
+#  (string value)
+#server_listen = 127.0.0.1
+
+#
+# The address used by ``nova-spicehtml5proxy`` client to connect to
+# instance
+# console.
+#
+# Typically, the ``nova-spicehtml5proxy`` proxy client runs on the
+# controller node and connects over the private network to this
+# address on the
+# compute node(s).
+#
+# Possible values:
+#
+# * Any valid IP address on the compute node.
+#
+# Related options:
+#
+# * This option depends on the ``server_listen`` option.
+#   The proxy client must be able to access the address specified in
+#   ``server_listen`` using the value of this option.
+#  (string value)
+#server_proxyclient_address = 127.0.0.1
+
+#
+# A keyboard layout which is supported by the underlying hypervisor on
+# this
+# node.
+#
+# Possible values:
+# * This is usually an 'IETF language tag' (default is 'en-us'). If
+# you
+#   use QEMU as hypervisor, you should find the list of supported
+# keyboard
+#   layouts at /usr/share/qemu/keymaps.
+#  (string value)
+#keymap = en-us
+
+#
+# IP address or a hostname on which the ``nova-spicehtml5proxy``
+# service
+# listens for incoming requests.
+#
+# Related options:
+#
+# * This option depends on the ``html5proxy_base_url`` option.
+#   The ``nova-spicehtml5proxy`` service must be listening on a host
+# that is
+#   accessible from the HTML5 client.
+#  (unknown value)
+#html5proxy_host = 0.0.0.0
+
+#
+# Port on which the ``nova-spicehtml5proxy`` service listens for
+# incoming
+# requests.
+#
+# Related options:
+#
+# * This option depends on the ``html5proxy_base_url`` option.
+#   The ``nova-spicehtml5proxy`` service must be listening on a port
+# that is
+#   accessible from the HTML5 client.
+#  (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#html5proxy_port = 6082
+
+
+[upgrade_levels]
+#
+# upgrade_levels options are used to set version cap for RPC
+# messages sent between different nova services.
+#
+# By default all services send messages using the latest version
+# they know about.
+#
+# The compute upgrade level is an important part of rolling upgrades
+# where old and new nova-compute services run side by side.
+#
+# The other options can largely be ignored, and are only kept to
+# help with a possible future backport issue.
+
+#
+# From nova.conf
+#
+
+#
+# Compute RPC API version cap.
+#
+# By default, we always send messages using the most recent version
+# the client knows about.
+#
+# Where you have old and new compute services running, you should set
+# this to the lowest deployed version. This is to guarantee that all
+# services never send messages that one of the compute nodes can't
+# understand. Note that we only support upgrading from release N to
+# release N+1.
+#
+# Set this option to "auto" if you want to let the compute RPC module
+# automatically determine what version to use based on the service
+# versions in the deployment.
+#
+# Possible values:
+#
+# * By default send the latest version the client knows about
+# * 'auto': Automatically determines what version to use based on
+#   the service versions in the deployment.
+# * A string representing a version number in the format 'N.N';
+#   for example, possible values might be '1.12' or '2.0'.
+# * An OpenStack release name, in lower case, such as 'mitaka' or
+#   'liberty'.
+#  (string value)
+#compute = <None>
+
+# Cells RPC API version cap (string value)
+#cells = <None>
+
+# Intercell RPC API version cap (string value)
+#intercell = <None>
+
+# Cert RPC API version cap (string value)
+#cert = <None>
+
+# Scheduler RPC API version cap (string value)
+#scheduler = <None>
+
+# Conductor RPC API version cap (string value)
+#conductor = <None>
+
+# Console RPC API version cap (string value)
+#console = <None>
+
+# Consoleauth RPC API version cap (string value)
+#consoleauth = <None>
+
+# Network RPC API version cap (string value)
+#network = <None>
+
+# Base API RPC API version cap (string value)
+#baseapi = <None>
+
+
+[vault]
+
+#
+# From nova.conf
+#
+
+# root token for vault (string value)
+#root_token_id = <None>
+
+# Use this endpoint to connect to Vault, for example:
+# "http://127.0.0.1:8200" (string value)
+#vault_url = http://127.0.0.1:8200
+
+# Absolute path to ca cert file (string value)
+#ssl_ca_crt_file = <None>
+
+# SSL Enabled/Disabled (boolean value)
+#use_ssl = false
+
+
+[vendordata_dynamic_auth]
+#
+# Options within this group control the authentication of the
+# vendordata
+# subsystem of the metadata API server (and config drive) with
+# external systems.
+
+#
+# From nova.conf
+#
+
+# PEM encoded Certificate Authority to use when verifying HTTPs
+# connections. (string value)
+#cafile = <None>
+
+# PEM encoded client certificate cert file (string value)
+#certfile = <None>
+
+# PEM encoded client certificate key file (string value)
+#keyfile = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# Timeout value for http requests (integer value)
+#timeout = <None>
+
+# Authentication type to load (string value)
+# Deprecated group/name - [vendordata_dynamic_auth]/auth_plugin
+#auth_type = <None>
+
+# Config Section from which to load plugin specific options (string
+# value)
+#auth_section = <None>
+
+# Authentication URL (string value)
+#auth_url = <None>
+
+# Scope for system operations (string value)
+#system_scope = <None>
+
+# Domain ID to scope to (string value)
+#domain_id = <None>
+
+# Domain name to scope to (string value)
+#domain_name = <None>
+
+# Project ID to scope to (string value)
+#project_id = <None>
+
+# Project name to scope to (string value)
+#project_name = <None>
+
+# Domain ID containing project (string value)
+#project_domain_id = <None>
+
+# Domain name containing project (string value)
+#project_domain_name = <None>
+
+# Trust ID (string value)
+#trust_id = <None>
+
+# Optional domain ID to use with v3 and v2 parameters. It will be used
+# for both the user and project domain in v3 and ignored in v2
+# authentication. (string value)
+#default_domain_id = <None>
+
+# Optional domain name to use with v3 API and v2 parameters. It will
+# be used for both the user and project domain in v3 and ignored in v2
+# authentication. (string value)
+#default_domain_name = <None>
+
+# User ID (string value)
+#user_id = <None>
+
+# Username (string value)
+# Deprecated group/name - [vendordata_dynamic_auth]/user_name
+#username = <None>
+
+# User's domain id (string value)
+#user_domain_id = <None>
+
+# User's domain name (string value)
+#user_domain_name = <None>
+
+# User's password (string value)
+#password = <None>
+
+# Tenant ID (string value)
+#tenant_id = <None>
+
+# Tenant Name (string value)
+#tenant_name = <None>
+
+[vnc]
+#
+# Virtual Network Computer (VNC) can be used to provide remote desktop
+# console access to instances for tenants and/or administrators.
+
+#
+# From nova.conf
+#
+
+#
+# Enable VNC related features.
+#
+# Guests will get created with graphical devices to support this.
+# Clients
+# (for example Horizon) can then establish a VNC connection to the
+# guest.
+#  (boolean value)
+# Deprecated group/name - [DEFAULT]/vnc_enabled
+enabled = true
+
+novncproxy_host = 10.167.4.37
+novncproxy_base_url = https://172.30.10.101:6080/vnc_auto.html
+novncproxy_port=6080
+vncserver_listen=10.167.4.37
+
+#
+# Keymap for VNC.
+#
+# The keyboard mapping (keymap) determines which keyboard layout a VNC
+# session should use by default.
+#
+# Possible values:
+#
+# * A keyboard layout which is supported by the underlying hypervisor
+# on
+#   this node. This is usually an 'IETF language tag' (for example
+#   'en-us').  If you use QEMU as hypervisor, you should find the
+# list
+#   of supported keyboard layouts at ``/usr/share/qemu/keymaps``.
+#  (string value)
+# Deprecated group/name - [DEFAULT]/vnc_keymap
+keymap = en-us
+
+#
+# The IP address or hostname on which an instance should listen to for
+# incoming VNC connection requests on this node.
+#  (unknown value)
+# Deprecated group/name - [DEFAULT]/vncserver_listen
+# Deprecated group/name - [vnc]/vncserver_listen
+#server_listen = 127.0.0.1
+
+#
+# Private, internal IP address or hostname of VNC console proxy.
+#
+# The VNC proxy is an OpenStack component that enables compute service
+# users to access their instances through VNC clients.
+#
+# This option sets the private address to which proxy clients, such as
+# ``nova-xvpvncproxy``, should connect to.
+#  (unknown value)
+# Deprecated group/name - [DEFAULT]/vncserver_proxyclient_address
+# Deprecated group/name - [vnc]/vncserver_proxyclient_address
+#server_proxyclient_address = 127.0.0.1
+
+#
+# Public address of noVNC VNC console proxy.
+#
+# The VNC proxy is an OpenStack component that enables compute service
+# users to access their instances through VNC clients. noVNC provides
+# VNC support through a websocket-based client.
+#
+# This option sets the public base URL to which client systems will
+# connect. noVNC clients can use this address to connect to the noVNC
+# instance and, by extension, the VNC sessions.
+#
+# Related options:
+#
+# * novncproxy_host
+# * novncproxy_port
+#  (uri value)
+#novncproxy_base_url = http://127.0.0.1:6080/vnc_auto.html
+
+#
+# IP address or hostname that the XVP VNC console proxy should bind
+# to.
+#
+# The VNC proxy is an OpenStack component that enables compute service
+# users to access their instances through VNC clients. Xen provides
+# the Xenserver VNC Proxy, or XVP, as an alternative to the
+# websocket-based noVNC proxy used by Libvirt. In contrast to noVNC,
+# XVP clients are Java-based.
+#
+# This option sets the private address to which the XVP VNC console
+# proxy
+# service should bind to.
+#
+# Related options:
+#
+# * xvpvncproxy_port
+# * xvpvncproxy_base_url
+#  (unknown value)
+#xvpvncproxy_host = 0.0.0.0
+
+#
+# Port that the XVP VNC console proxy should bind to.
+#
+# The VNC proxy is an OpenStack component that enables compute service
+# users to access their instances through VNC clients. Xen provides
+# the Xenserver VNC Proxy, or XVP, as an alternative to the
+# websocket-based noVNC proxy used by Libvirt. In contrast to noVNC,
+# XVP clients are Java-based.
+#
+# This option sets the private port to which the XVP VNC console proxy
+# service should bind to.
+#
+# Related options:
+#
+# * xvpvncproxy_host
+# * xvpvncproxy_base_url
+#  (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#xvpvncproxy_port = 6081
+
+#
+# Public URL address of XVP VNC console proxy.
+#
+# The VNC proxy is an OpenStack component that enables compute service
+# users to access their instances through VNC clients. Xen provides
+# the Xenserver VNC Proxy, or XVP, as an alternative to the
+# websocket-based noVNC proxy used by Libvirt. In contrast to noVNC,
+# XVP clients are Java-based.
+#
+# This option sets the public base URL to which client systems will
+# connect. XVP clients can use this address to connect to the XVP
+# instance and, by extension, the VNC sessions.
+#
+# Related options:
+#
+# * xvpvncproxy_host
+# * xvpvncproxy_port
+#  (uri value)
+#xvpvncproxy_base_url = http://127.0.0.1:6081/console
+
+#
+# IP address that the noVNC console proxy should bind to.
+#
+# The VNC proxy is an OpenStack component that enables compute service
+# users to access their instances through VNC clients. noVNC provides
+# VNC support through a websocket-based client.
+#
+# This option sets the private address to which the noVNC console
+# proxy
+# service should bind to.
+#
+# Related options:
+#
+# * novncproxy_port
+# * novncproxy_base_url
+#  (string value)
+#novncproxy_host = 0.0.0.0
+
+#
+# Port that the noVNC console proxy should bind to.
+#
+# The VNC proxy is an OpenStack component that enables compute service
+# users to access their instances through VNC clients. noVNC provides
+# VNC support through a websocket-based client.
+#
+# This option sets the private port to which the noVNC console proxy
+# service should bind to.
+#
+# Related options:
+#
+# * novncproxy_host
+# * novncproxy_base_url
+#  (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#novncproxy_port = 6080
+
+#
+# The authentication schemes to use with the compute node.
+#
+# Control what RFB authentication schemes are permitted for
+# connections between
+# the proxy and the compute host. If multiple schemes are enabled, the
+# first
+# matching scheme will be used, thus the strongest schemes should be
+# listed
+# first.
+#
+# Possible values:
+#
+# * ``none``: allow connection without authentication
+# * ``vencrypt``: use VeNCrypt authentication scheme
+#
+# Related options:
+#
+# * ``[vnc]vencrypt_client_key``, ``[vnc]vencrypt_client_cert``: must
+# also be set
+#  (list value)
+#auth_schemes = none
+
+# The path to the client certificate PEM file (for x509)
+#
+# The fully qualified path to a PEM file containing the private key
+# which the VNC
+# proxy server presents to the compute node during VNC authentication.
+#
+# Related options:
+#
+# * ``vnc.auth_schemes``: must include ``vencrypt``
+# * ``vnc.vencrypt_client_cert``: must also be set
+#  (string value)
+#vencrypt_client_key = <None>
+
+# The path to the client key file (for x509)
+#
+# The fully qualified path to a PEM file containing the x509
+# certificate which
+# the VNC proxy server presents to the compute node during VNC
+# authentication.
+#
+# Realted options:
+#
+# * ``vnc.auth_schemes``: must include ``vencrypt``
+# * ``vnc.vencrypt_client_key``: must also be set
+#  (string value)
+#vencrypt_client_cert = <None>
+
+# The path to the CA certificate PEM file
+#
+# The fully qualified path to a PEM file containing one or more x509
+# certificates
+# for the certificate authorities used by the compute node VNC server.
+#
+# Related options:
+#
+# * ``vnc.auth_schemes``: must include ``vencrypt``
+#  (string value)
+#vencrypt_ca_certs = <None>
+
+
+[workarounds]
+#
+# A collection of workarounds used to mitigate bugs or issues found in
+# system
+# tools (e.g. Libvirt or QEMU) or Nova itself under certain
+# conditions. These
+# should only be enabled in exceptional circumstances. All options are
+# linked
+# against bug IDs, where more information on the issue can be found.
+
+#
+# From nova.conf
+#
+
+#
+# Use sudo instead of rootwrap.
+#
+# Allow fallback to sudo for performance reasons.
+#
+# For more information, refer to the bug report:
+#
+#   https://bugs.launchpad.net/nova/+bug/1415106
+#
+# Possible values:
+#
+# * True: Use sudo instead of rootwrap
+# * False: Use rootwrap as usual
+#
+# Interdependencies to other options:
+#
+# * Any options that affect 'rootwrap' will be ignored.
+#  (boolean value)
+#disable_rootwrap = false
+
+#
+# Disable live snapshots when using the libvirt driver.
+#
+# Live snapshots allow the snapshot of the disk to happen without an
+# interruption to the guest, using coordination with a guest agent to
+# quiesce the filesystem.
+#
+# When using libvirt 1.2.2 live snapshots fail intermittently under
+# load
+# (likely related to concurrent libvirt/qemu operations). This config
+# option provides a mechanism to disable live snapshot, in favor of
+# cold
+# snapshot, while this is resolved. Cold snapshot causes an instance
+# outage while the guest is going through the snapshotting process.
+#
+# For more information, refer to the bug report:
+#
+#   https://bugs.launchpad.net/nova/+bug/1334398
+#
+# Possible values:
+#
+# * True: Live snapshot is disabled when using libvirt
+# * False: Live snapshots are always used when snapshotting (as long
+# as
+#   there is a new enough libvirt and the backend storage supports it)
+#  (boolean value)
+#disable_libvirt_livesnapshot = false
+disable_libvirt_livesnapshot = true
+
+#
+# Enable handling of events emitted from compute drivers.
+#
+# Many compute drivers emit lifecycle events, which are events that
+# occur when,
+# for example, an instance is starting or stopping. If the instance is
+# going
+# through task state changes due to an API operation, like resize, the
+# events
+# are ignored.
+#
+# This is an advanced feature which allows the hypervisor to signal to
+# the
+# compute service that an unexpected state change has occurred in an
+# instance
+# and that the instance can be shutdown automatically. Unfortunately,
+# this can
+# race in some conditions, for example in reboot operations or when
+# the compute
+# service or when host is rebooted (planned or due to an outage). If
+# such races
+# are common, then it is advisable to disable this feature.
+#
+# Care should be taken when this feature is disabled and
+# 'sync_power_state_interval' is set to a negative value. In this
+# case, any
+# instances that get out of sync between the hypervisor and the Nova
+# database
+# will have to be synchronized manually.
+#
+# For more information, refer to the bug report:
+#
+#   https://bugs.launchpad.net/bugs/1444630
+#
+# Interdependencies to other options:
+#
+# * If ``sync_power_state_interval`` is negative and this feature is
+# disabled,
+#   then instances that get out of sync between the hypervisor and the
+# Nova
+#   database will have to be synchronized manually.
+#  (boolean value)
+#handle_virt_lifecycle_events = true
+
+#
+# Disable the server group policy check upcall in compute.
+#
+# In order to detect races with server group affinity policy, the
+# compute
+# service attempts to validate that the policy was not violated by the
+# scheduler. It does this by making an upcall to the API database to
+# list
+# the instances in the server group for one that it is booting, which
+# violates
+# our api/cell isolation goals. Eventually this will be solved by
+# proper affinity
+# guarantees in the scheduler and placement service, but until then,
+# this late
+# check is needed to ensure proper affinity policy.
+#
+# Operators that desire api/cell isolation over this check should
+# enable this flag, which will avoid making that upcall from compute.
+#
+# Related options:
+#
+# * [filter_scheduler]/track_instance_changes also relies on upcalls
+# from the
+#   compute service to the scheduler service.
+#  (boolean value)
+#disable_group_policy_check_upcall = false
+
+
+[wsgi]
+#
+# Options under this group are used to configure WSGI (Web Server
+# Gateway
+# Interface). WSGI is used to serve API requests.
+
+#
+# From nova.conf
+#
+
+#
+# This option represents a file name for the paste.deploy config for
+# nova-api.
+#
+# Possible values:
+#
+# * A string representing file name for the paste.deploy config.
+#  (string value)
+api_paste_config = /etc/nova/api-paste.ini
+
+# DEPRECATED:
+# It represents a python format string that is used as the template to
+# generate
+# log lines. The following values can be formatted into it: client_ip,
+# date_time, request_line, status_code, body_length, wall_seconds.
+#
+# This option is used for building custom request loglines when
+# running
+# nova-api under eventlet. If used under uwsgi or apache, this option
+# has no effect.
+#
+# Possible values:
+#
+# * '%(client_ip)s "%(request_line)s" status: %(status_code)s'
+#   'len: %(body_length)s time: %(wall_seconds).7f' (default)
+# * Any formatted string formed by specific values.
+#  (string value)
+# This option is deprecated for removal since 16.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# This option only works when running nova-api under eventlet, and
+# encodes very eventlet specific pieces of information. Starting in
+# Pike
+# the preferred model for running nova-api is under uwsgi or apache
+# mod_wsgi.
+#wsgi_log_format = %(client_ip)s "%(request_line)s" status: %(status_code)s len: %(body_length)s time: %(wall_seconds).7f
+
+#
+# This option specifies the HTTP header used to determine the protocol
+# scheme
+# for the original request, even if it was removed by a SSL
+# terminating proxy.
+#
+# Possible values:
+#
+# * None (default) - the request scheme is not influenced by any HTTP
+# headers
+# * Valid HTTP header, like HTTP_X_FORWARDED_PROTO
+#
+# WARNING: Do not set this unless you know what you are doing.
+#
+# Make sure ALL of the following are true before setting this
+# (assuming the
+# values from the example above):
+# * Your API is behind a proxy.
+# * Your proxy strips the X-Forwarded-Proto header from all incoming
+# requests.
+#   In other words, if end users include that header in their
+# requests, the proxy
+#   will discard it.
+# * Your proxy sets the X-Forwarded-Proto header and sends it to API,
+# but only
+#   for requests that originally come in via HTTPS.
+#
+# If any of those are not true, you should keep this setting set to
+# None.
+#
+#  (string value)
+#secure_proxy_ssl_header = <None>
+
+#
+# This option allows setting path to the CA certificate file that
+# should be used
+# to verify connecting clients.
+#
+# Possible values:
+#
+# * String representing path to the CA certificate file.
+#
+# Related options:
+#
+# * enabled_ssl_apis
+#  (string value)
+#ssl_ca_file = <None>
+
+#
+# This option allows setting path to the SSL certificate of API
+# server.
+#
+# Possible values:
+#
+# * String representing path to the SSL certificate.
+#
+# Related options:
+#
+# * enabled_ssl_apis
+#  (string value)
+#ssl_cert_file = <None>
+
+#
+# This option specifies the path to the file where SSL private key of
+# API
+# server is stored when SSL is in effect.
+#
+# Possible values:
+#
+# * String representing path to the SSL private key.
+#
+# Related options:
+#
+# * enabled_ssl_apis
+#  (string value)
+#ssl_key_file = <None>
+
+#
+# This option sets the value of TCP_KEEPIDLE in seconds for each
+# server socket.
+# It specifies the duration of time to keep connection active. TCP
+# generates a
+# KEEPALIVE transmission for an application that requests to keep
+# connection
+# active. Not supported on OS X.
+#
+# Related options:
+#
+# * keep_alive
+#  (integer value)
+# Minimum value: 0
+#tcp_keepidle = 600
+
+#
+# This option specifies the size of the pool of greenthreads used by
+# wsgi.
+# It is possible to limit the number of concurrent connections using
+# this
+# option.
+#  (integer value)
+# Minimum value: 0
+# Deprecated group/name - [DEFAULT]/wsgi_default_pool_size
+#default_pool_size = 1000
+
+#
+# This option specifies the maximum line size of message headers to be
+# accepted.
+# max_header_line may need to be increased when using large tokens
+# (typically
+# those generated by the Keystone v3 API with big service catalogs).
+#
+# Since TCP is a stream based protocol, in order to reuse a
+# connection, the HTTP
+# has to have a way to indicate the end of the previous response and
+# beginning
+# of the next. Hence, in a keep_alive case, all messages must have a
+# self-defined message length.
+#  (integer value)
+# Minimum value: 0
+#max_header_line = 16384
+
+#
+# This option allows using the same TCP connection to send and receive
+# multiple
+# HTTP requests/responses, as opposed to opening a new one for every
+# single
+# request/response pair. HTTP keep-alive indicates HTTP connection
+# reuse.
+#
+# Possible values:
+#
+# * True : reuse HTTP connection.
+# * False : closes the client socket connection explicitly.
+#
+# Related options:
+#
+# * tcp_keepidle
+#  (boolean value)
+# Deprecated group/name - [DEFAULT]/wsgi_keep_alive
+#keep_alive = true
+
+#
+# This option specifies the timeout for client connections' socket
+# operations.
+# If an incoming connection is idle for this number of seconds it will
+# be
+# closed. It indicates timeout on individual read/writes on the socket
+# connection. To wait forever set to 0.
+#  (integer value)
+# Minimum value: 0
+#client_socket_timeout = 900
+
+
+[xenserver]
+#
+# XenServer options are used when the compute_driver is set to use
+# XenServer (compute_driver=xenapi.XenAPIDriver).
+#
+# Must specify connection_url, connection_password and
+# ovs_integration_bridge to
+# use compute_driver=xenapi.XenAPIDriver.
+
+#
+# From nova.conf
+#
+
+#
+# Number of seconds to wait for agent's reply to a request.
+#
+# Nova configures/performs certain administrative actions on a server
+# with the
+# help of an agent that's installed on the server. The communication
+# between
+# Nova and the agent is achieved via sharing messages, called records,
+# over
+# xenstore, a shared storage across all the domains on a Xenserver
+# host.
+# Operations performed by the agent on behalf of nova are: 'version','
+# key_init',
+# 'password','resetnetwork','inject_file', and 'agentupdate'.
+#
+# To perform one of the above operations, the xapi 'agent' plugin
+# writes the
+# command and its associated parameters to a certain location known to
+# the domain
+# and awaits response. On being notified of the message, the agent
+# performs
+# appropriate actions on the server and writes the result back to
+# xenstore. This
+# result is then read by the xapi 'agent' plugin to determine the
+# success/failure
+# of the operation.
+#
+# This config option determines how long the xapi 'agent' plugin shall
+# wait to
+# read the response off of xenstore for a given request/command. If
+# the agent on
+# the instance fails to write the result in this time period, the
+# operation is
+# considered to have timed out.
+#
+# Related options:
+#
+# * ``agent_version_timeout``
+# * ``agent_resetnetwork_timeout``
+#
+#  (integer value)
+# Minimum value: 0
+#agent_timeout = 30
+
+#
+# Number of seconds to wait for agent't reply to version request.
+#
+# This indicates the amount of time xapi 'agent' plugin waits for the
+# agent to
+# respond to the 'version' request specifically. The generic timeout
+# for agent
+# communication ``agent_timeout`` is ignored in this case.
+#
+# During the build process the 'version' request is used to determine
+# if the
+# agent is available/operational to perform other requests such as
+# 'resetnetwork', 'password', 'key_init' and 'inject_file'. If the
+# 'version' call
+# fails, the other configuration is skipped. So, this configuration
+# option can
+# also be interpreted as time in which agent is expected to be fully
+# operational.
+#  (integer value)
+# Minimum value: 0
+#agent_version_timeout = 300
+
+#
+# Number of seconds to wait for agent's reply to resetnetwork
+# request.
+#
+# This indicates the amount of time xapi 'agent' plugin waits for the
+# agent to
+# respond to the 'resetnetwork' request specifically. The generic
+# timeout for
+# agent communication ``agent_timeout`` is ignored in this case.
+#  (integer value)
+# Minimum value: 0
+#agent_resetnetwork_timeout = 60
+
+#
+# Path to locate guest agent on the server.
+#
+# Specifies the path in which the XenAPI guest agent should be
+# located. If the
+# agent is present, network configuration is not injected into the
+# image.
+#
+# Related options:
+#
+# For this option to have an effect:
+# * ``flat_injected`` should be set to ``True``
+# * ``compute_driver`` should be set to ``xenapi.XenAPIDriver``
+#
+#  (string value)
+#agent_path = usr/sbin/xe-update-networking
+
+#
+# Disables the use of XenAPI agent.
+#
+# This configuration option suggests whether the use of agent should
+# be enabled
+# or not regardless of what image properties are present. Image
+# properties have
+# an effect only when this is set to ``True``. Read description of
+# config option
+# ``use_agent_default`` for more information.
+#
+# Related options:
+#
+# * ``use_agent_default``
+#
+#  (boolean value)
+#disable_agent = false
+
+#
+# Whether or not to use the agent by default when its usage is enabled
+# but not
+# indicated by the image.
+#
+# The use of XenAPI agent can be disabled altogether using the
+# configuration
+# option ``disable_agent``. However, if it is not disabled, the use of
+# an agent
+# can still be controlled by the image in use through one of its
+# properties,
+# ``xenapi_use_agent``. If this property is either not present or
+# specified
+# incorrectly on the image, the use of agent is determined by this
+# configuration
+# option.
+#
+# Note that if this configuration is set to ``True`` when the agent is
+# not
+# present, the boot times will increase significantly.
+#
+# Related options:
+#
+# * ``disable_agent``
+#
+#  (boolean value)
+#use_agent_default = false
+
+# Timeout in seconds for XenAPI login. (integer value)
+# Minimum value: 0
+#login_timeout = 10
+
+#
+# Maximum number of concurrent XenAPI connections.
+#
+# In nova, multiple XenAPI requests can happen at a time.
+# Configuring this option will parallelize access to the XenAPI
+# session, which allows you to make concurrent XenAPI connections.
+#  (integer value)
+# Minimum value: 1
+#connection_concurrent = 5
+
+#
+# Cache glance images locally.
+#
+# The value for this option must be chosen from the choices listed
+# here. Configuring a value other than these will default to 'all'.
+#
+# Note: There is nothing that deletes these images.
+#
+# Possible values:
+#
+# * `all`: will cache all images.
+# * `some`: will only cache images that have the
+#   image_property `cache_in_nova=True`.
+# * `none`: turns off caching entirely.
+#  (string value)
+# Possible values:
+# all - <No description provided>
+# some - <No description provided>
+# none - <No description provided>
+#cache_images = all
+
+#
+# Compression level for images.
+#
+# By setting this option we can configure the gzip compression level.
+# This option sets GZIP environment variable before spawning tar -cz
+# to force the compression level. It defaults to none, which means the
+# GZIP environment variable is not set and the default (usually -6)
+# is used.
+#
+# Possible values:
+#
+# * Range is 1-9, e.g., 9 for gzip -9, 9 being most
+#   compressed but most CPU intensive on dom0.
+# * Any values out of this range will default to None.
+#  (integer value)
+# Minimum value: 1
+# Maximum value: 9
+#image_compression_level = <None>
+
+# Default OS type used when uploading an image to glance (string
+# value)
+#default_os_type = linux
+
+# Time in secs to wait for a block device to be created (integer
+# value)
+# Minimum value: 1
+#block_device_creation_timeout = 10
+
+#
+# Maximum size in bytes of kernel or ramdisk images.
+#
+# Specifying the maximum size of kernel or ramdisk will avoid copying
+# large files to dom0 and fill up /boot/guest.
+#  (integer value)
+#max_kernel_ramdisk_size = 16777216
+
+#
+# Filter for finding the SR to be used to install guest instances on.
+#
+# Possible values:
+#
+# * To use the Local Storage in default XenServer/XCP installations
+#   set this flag to other-config:i18n-key=local-storage.
+# * To select an SR with a different matching criteria, you could
+#   set it to other-config:my_favorite_sr=true.
+# * To fall back on the Default SR, as displayed by XenCenter,
+#   set this flag to: default-sr:true.
+#  (string value)
+#sr_matching_filter = default-sr:true
+
+#
+# Whether to use sparse_copy for copying data on a resize down.
+# (False will use standard dd). This speeds up resizes down
+# considerably since large runs of zeros won't have to be rsynced.
+#  (boolean value)
+#sparse_copy = true
+
+#
+# Maximum number of retries to unplug VBD.
+# If set to 0, should try once, no retries.
+#  (integer value)
+# Minimum value: 0
+#num_vbd_unplug_retries = 10
+
+#
+# Name of network to use for booting iPXE ISOs.
+#
+# An iPXE ISO is a specially crafted ISO which supports iPXE booting.
+# This feature gives a means to roll your own image.
+#
+# By default this option is not set. Enable this option to
+# boot an iPXE ISO.
+#
+# Related Options:
+#
+# * `ipxe_boot_menu_url`
+# * `ipxe_mkisofs_cmd`
+#  (string value)
+#ipxe_network_name = <None>
+
+#
+# URL to the iPXE boot menu.
+#
+# An iPXE ISO is a specially crafted ISO which supports iPXE booting.
+# This feature gives a means to roll your own image.
+#
+# By default this option is not set. Enable this option to
+# boot an iPXE ISO.
+#
+# Related Options:
+#
+# * `ipxe_network_name`
+# * `ipxe_mkisofs_cmd`
+#  (string value)
+#ipxe_boot_menu_url = <None>
+
+#
+# Name and optionally path of the tool used for ISO image creation.
+#
+# An iPXE ISO is a specially crafted ISO which supports iPXE booting.
+# This feature gives a means to roll your own image.
+#
+# Note: By default `mkisofs` is not present in the Dom0, so the
+# package can either be manually added to Dom0 or include the
+# `mkisofs` binary in the image itself.
+#
+# Related Options:
+#
+# * `ipxe_network_name`
+# * `ipxe_boot_menu_url`
+#  (string value)
+#ipxe_mkisofs_cmd = mkisofs
+
+#
+# URL for connection to XenServer/Xen Cloud Platform. A special value
+# of unix://local can be used to connect to the local unix socket.
+#
+# Possible values:
+#
+# * Any string that represents a URL. The connection_url is
+#   generally the management network IP address of the XenServer.
+# * This option must be set if you chose the XenServer driver.
+#  (string value)
+#connection_url = <None>
+
+# Username for connection to XenServer/Xen Cloud Platform (string
+# value)
+#connection_username = root
+
+# Password for connection to XenServer/Xen Cloud Platform (string
+# value)
+#connection_password = <None>
+
+#
+# The interval used for polling of coalescing vhds.
+#
+# This is the interval after which the task of coalesce VHD is
+# performed, until it reaches the max attempts that is set by
+# vhd_coalesce_max_attempts.
+#
+# Related options:
+#
+# * `vhd_coalesce_max_attempts`
+#  (floating point value)
+# Minimum value: 0
+#vhd_coalesce_poll_interval = 5.0
+
+#
+# Ensure compute service is running on host XenAPI connects to.
+# This option must be set to false if the 'independent_compute'
+# option is set to true.
+#
+# Possible values:
+#
+# * Setting this option to true will make sure that compute service
+#   is running on the same host that is specified by connection_url.
+# * Setting this option to false, doesn't perform the check.
+#
+# Related options:
+#
+# * `independent_compute`
+#  (boolean value)
+#check_host = true
+
+#
+# Max number of times to poll for VHD to coalesce.
+#
+# This option determines the maximum number of attempts that can be
+# made for coalescing the VHD before giving up.
+#
+# Related opitons:
+#
+# * `vhd_coalesce_poll_interval`
+#  (integer value)
+# Minimum value: 0
+#vhd_coalesce_max_attempts = 20
+
+# Base path to the storage repository on the XenServer host. (string
+# value)
+#sr_base_path = /var/run/sr-mount
+
+#
+# The iSCSI Target Host.
+#
+# This option represents the hostname or ip of the iSCSI Target.
+# If the target host is not present in the connection information from
+# the volume provider then the value from this option is taken.
+#
+# Possible values:
+#
+# * Any string that represents hostname/ip of Target.
+#  (unknown value)
+#target_host = <None>
+
+#
+# The iSCSI Target Port.
+#
+# This option represents the port of the iSCSI Target. If the
+# target port is not present in the connection information from the
+# volume provider then the value from this option is taken.
+#  (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#target_port = 3260
+
+#
+# Used to prevent attempts to attach VBDs locally, so Nova can
+# be run in a VM on a different host.
+#
+# Related options:
+#
+# * ``CONF.flat_injected`` (Must be False)
+# * ``CONF.xenserver.check_host`` (Must be False)
+# * ``CONF.default_ephemeral_format`` (Must be unset or 'ext3')
+# * Joining host aggregates (will error if attempted)
+# * Swap disks for Windows VMs (will error if attempted)
+# * Nova-based auto_configure_disk (will error if attempted)
+#  (boolean value)
+#independent_compute = false
+
+#
+# Wait time for instances to go to running state.
+#
+# Provide an integer value representing time in seconds to set the
+# wait time for an instance to go to running state.
+#
+# When a request to create an instance is received by nova-api and
+# communicated to nova-compute, the creation of the instance occurs
+# through interaction with Xen via XenAPI in the compute node. Once
+# the node on which the instance(s) are to be launched is decided by
+# nova-schedule and the launch is triggered, a certain amount of wait
+# time is involved until the instance(s) can become available and
+# 'running'. This wait time is defined by running_timeout. If the
+# instances do not go to running state within this specified wait
+# time, the launch expires and the instance(s) are set to 'error'
+# state.
+#  (integer value)
+# Minimum value: 0
+#running_timeout = 60
+
+# DEPRECATED:
+# The XenAPI VIF driver using XenServer Network APIs.
+#
+# Provide a string value representing the VIF XenAPI vif driver to use
+# for
+# plugging virtual network interfaces.
+#
+# Xen configuration uses bridging within the backend domain to allow
+# all VMs to appear on the network as individual hosts. Bridge
+# interfaces are used to create a XenServer VLAN network in which
+# the VIFs for the VM instances are plugged. If no VIF bridge driver
+# is plugged, the bridge is not made available. This configuration
+# option takes in a value for the VIF driver.
+#
+# Possible values:
+#
+# * nova.virt.xenapi.vif.XenAPIOpenVswitchDriver (default)
+# * nova.virt.xenapi.vif.XenAPIBridgeDriver (deprecated)
+#
+# Related options:
+#
+# * ``vlan_interface``
+# * ``ovs_integration_bridge``
+#  (string value)
+# This option is deprecated for removal since 15.0.0.
+# Its value may be silently ignored in the future.
+# Reason:
+# There are only two in-tree vif drivers for XenServer.
+# XenAPIBridgeDriver is for
+# nova-network which is deprecated and XenAPIOpenVswitchDriver is for
+# Neutron
+# which is the default configuration for Nova since the 15.0.0 Ocata
+# release. In
+# the future the "use_neutron" configuration option will be used to
+# determine
+# which vif driver to use.
+#vif_driver = nova.virt.xenapi.vif.XenAPIOpenVswitchDriver
+
+#
+# Dom0 plugin driver used to handle image uploads.
+#
+# Provide a string value representing a plugin driver required to
+# handle the image uploading to GlanceStore.
+#
+# Images, and snapshots from XenServer need to be uploaded to the data
+# store for use. image_upload_handler takes in a value for the Dom0
+# plugin driver. This driver is then called to uplaod images to the
+# GlanceStore.
+#  (string value)
+#image_upload_handler = nova.virt.xenapi.image.glance.GlanceStore
+
+#
+# Number of seconds to wait for SR to settle if the VDI
+# does not exist when first introduced.
+#
+# Some SRs, particularly iSCSI connections are slow to see the VDIs
+# right after they got introduced. Setting this option to a
+# time interval will make the SR to wait for that time period
+# before raising VDI not found exception.
+#  (integer value)
+# Minimum value: 0
+#introduce_vdi_retry_wait = 20
+
+#
+# The name of the integration Bridge that is used with xenapi
+# when connecting with Open vSwitch.
+#
+# Note: The value of this config option is dependent on the
+# environment, therefore this configuration value must be set
+# accordingly if you are using XenAPI.
+#
+# Possible values:
+#
+# * Any string that represents a bridge name.
+#  (string value)
+#ovs_integration_bridge = <None>
+
+#
+# When adding new host to a pool, this will append a --force flag to
+# the
+# command, forcing hosts to join a pool, even if they have different
+# CPUs.
+#
+# Since XenServer version 5.6 it is possible to create a pool of hosts
+# that have
+# different CPU capabilities. To accommodate CPU differences,
+# XenServer limited
+# features it uses to determine CPU compatibility to only the ones
+# that are
+# exposed by CPU and support for CPU masking was added.
+# Despite this effort to level differences between CPUs, it is still
+# possible
+# that adding new host will fail, thus option to force join was
+# introduced.
+#  (boolean value)
+#use_join_force = true
+
+#
+# Publicly visible name for this console host.
+#
+# Possible values:
+#
+# * Current hostname (default) or any string representing hostname.
+#  (string value)
+#console_public_hostname = <current_hostname>
+
+
+[xvp]
+#
+# Configuration options for XVP.
+#
+# xvp (Xen VNC Proxy) is a proxy server providing password-protected
+# VNC-based
+# access to the consoles of virtual machines hosted on Citrix
+# XenServer.
+
+#
+# From nova.conf
+#
+
+# XVP conf template (string value)
+#console_xvp_conf_template = $pybasedir/nova/console/xvp.conf.template
+
+# Generated XVP conf file (string value)
+#console_xvp_conf = /etc/xvp.conf
+
+# XVP master process pid file (string value)
+#console_xvp_pid = /var/run/xvp.pid
+
+# XVP log file (string value)
+#console_xvp_log = /var/log/xvp.log
+
+# Port for XVP to multiplex VNC connections on (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#console_xvp_multiplex_port = 5900
+
+[matchmaker_redis]
+
+[oslo_messaging_notifications]
+#
+# From oslo.messaging
+#
+
+# The Drivers(s) to handle sending notifications. Possible values are
+# messaging, messagingv2, routing, log, test, noop (multi valued)
+# Deprecated group/name - [DEFAULT]/notification_driver
+#driver =
+driver = messagingv2
+
+# A URL representing the messaging driver to use for notifications. If
+# not set, we fall back to the same configuration used for RPC.
+# (string value)
+# Deprecated group/name - [DEFAULT]/notification_transport_url
+#transport_url = <None>
+
+# AMQP topic used for OpenStack notifications. (list value)
+# Deprecated group/name - [rpc_notifier2]/topics
+# Deprecated group/name - [DEFAULT]/notification_topics
+#topics = notifications
+
+# The maximum number of attempts to re-send a notification message
+# which failed to be delivered due to a recoverable error. 0 - No
+# retry, -1 - indefinite (integer value)
+#retry = -1
+[oslo_messaging_rabbit]
+#
+# From oslo.messaging
+#
+
+# Use durable queues in AMQP. (boolean value)
+# Deprecated group/name - [DEFAULT]/amqp_durable_queues
+# Deprecated group/name - [DEFAULT]/rabbit_durable_queues
+#amqp_durable_queues = false
+
+# Auto-delete queues in AMQP. (boolean value)
+#amqp_auto_delete = false
+
+# Enable SSL (boolean value)
+#ssl = <None>
+
+
+# How long to wait before reconnecting in response to an AMQP consumer
+# cancel notification. (floating point value)
+#kombu_reconnect_delay = 1.0
+
+# EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression
+# will not be used. This option may not be available in future
+# versions. (string value)
+#kombu_compression = <None>
+
+# How long to wait a missing client before abandoning to send it its
+# replies. This value should not be longer than rpc_response_timeout.
+# (integer value)
+# Deprecated group/name - [oslo_messaging_rabbit]/kombu_reconnect_timeout
+#kombu_missing_consumer_retry_timeout = 60
+
+# Determines how the next RabbitMQ node is chosen in case the one we
+# are currently connected to becomes unavailable. Takes effect only if
+# more than one RabbitMQ node is provided in config. (string value)
+# Possible values:
+# round-robin - <No description provided>
+# shuffle - <No description provided>
+#kombu_failover_strategy = round-robin
+
+# DEPRECATED: The RabbitMQ broker address where a single node is used.
+# (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_host = localhost
+
+# DEPRECATED: The RabbitMQ broker port where a single node is used.
+# (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_port = 5672
+
+# DEPRECATED: RabbitMQ HA cluster host:port pairs. (list value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_hosts = $rabbit_host:$rabbit_port
+
+# DEPRECATED: The RabbitMQ userid. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_userid = guest
+
+# DEPRECATED: The RabbitMQ password. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_password = guest
+
+# The RabbitMQ login method. (string value)
+# Possible values:
+# PLAIN - <No description provided>
+# AMQPLAIN - <No description provided>
+# RABBIT-CR-DEMO - <No description provided>
+#rabbit_login_method = AMQPLAIN
+
+# DEPRECATED: The RabbitMQ virtual host. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_virtual_host = /
+
+# How frequently to retry connecting with RabbitMQ. (integer value)
+#rabbit_retry_interval = 1
+
+# How long to backoff for between retries when connecting to RabbitMQ.
+# (integer value)
+#rabbit_retry_backoff = 2
+
+# Maximum interval of RabbitMQ connection retries. Default is 30
+# seconds. (integer value)
+#rabbit_interval_max = 30
+
+# DEPRECATED: Maximum number of RabbitMQ connection retries. Default
+# is 0 (infinite retry count). (integer value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#rabbit_max_retries = 0
+
+# Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change
+# this option, you must wipe the RabbitMQ database. In RabbitMQ 3.0,
+# queue mirroring is no longer controlled by the x-ha-policy argument
+# when declaring a queue. If you just want to make sure that all
+# queues (except those with auto-generated names) are mirrored across
+# all nodes, run: "rabbitmqctl set_policy HA '^(?!amq\.).*' '{"ha-
+# mode": "all"}' " (boolean value)
+#rabbit_ha_queues = false
+
+# Positive integer representing duration in seconds for queue TTL
+# (x-expires). Queues which are unused for the duration of the TTL are
+# automatically deleted. The parameter affects only reply and fanout
+# queues. (integer value)
+# Minimum value: 1
+#rabbit_transient_queues_ttl = 1800
+
+# Specifies the number of messages to prefetch. Setting to zero allows
+# unlimited messages. (integer value)
+#rabbit_qos_prefetch_count = 64
+
+# Number of seconds after which the Rabbit broker is considered down
+# if heartbeat's keep-alive fails (0 disable the heartbeat).
+# EXPERIMENTAL (integer value)
+#heartbeat_timeout_threshold = 60
+
+# How often times during the heartbeat_timeout_threshold we check the
+# heartbeat. (integer value)
+#heartbeat_rate = 2
+
+# Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake
+# (boolean value)
+#fake_rabbit = false
+
+# Maximum number of channels to allow (integer value)
+#channel_max = <None>
+
+# The maximum byte size for an AMQP frame (integer value)
+#frame_max = <None>
+
+# How often to send heartbeats for consumer's connections (integer
+# value)
+#heartbeat_interval = 3
+
+# Arguments passed to ssl.wrap_socket (dict value)
+#ssl_options = <None>
+
+# Set socket timeout in seconds for connection's socket (floating
+# point value)
+#socket_timeout = 0.25
+
+# Set TCP_USER_TIMEOUT in seconds for connection's socket (floating
+# point value)
+#tcp_user_timeout = 0.25
+
+# Set delay for reconnection to some host which has connection error
+# (floating point value)
+#host_connection_reconnect_delay = 0.25
+
+# Connection factory implementation (string value)
+# Possible values:
+# new - <No description provided>
+# single - <No description provided>
+# read_write - <No description provided>
+#connection_factory = single
+
+# Maximum number of connections to keep queued. (integer value)
+#pool_max_size = 30
+
+# Maximum number of connections to create above `pool_max_size`.
+# (integer value)
+#pool_max_overflow = 0
+
+# Default number of seconds to wait for a connections to available
+# (integer value)
+#pool_timeout = 30
+
+# Lifetime of a connection (since creation) in seconds or None for no
+# recycling. Expired connections are closed on acquire. (integer
+# value)
+#pool_recycle = 600
+
+# Threshold at which inactive (since release) connections are
+# considered stale in seconds or None for no staleness. Stale
+# connections are closed on acquire. (integer value)
+#pool_stale = 60
+
+# Default serialization mechanism for serializing/deserializing
+# outgoing/incoming messages (string value)
+# Possible values:
+# json - <No description provided>
+# msgpack - <No description provided>
+#default_serializer_type = json
+
+# Persist notification messages. (boolean value)
+#notification_persistence = false
+
+# Exchange name for sending notifications (string value)
+#default_notification_exchange = ${control_exchange}_notification
+
+# Max number of not acknowledged message which RabbitMQ can send to
+# notification listener. (integer value)
+#notification_listener_prefetch_count = 100
+
+# Reconnecting retry count in case of connectivity problem during
+# sending notification, -1 means infinite retry. (integer value)
+#default_notification_retry_attempts = -1
+
+# Reconnecting retry delay in case of connectivity problem during
+# sending notification message (floating point value)
+#notification_retry_delay = 0.25
+
+# Time to live for rpc queues without consumers in seconds. (integer
+# value)
+#rpc_queue_expiration = 60
+
+# Exchange name for sending RPC messages (string value)
+#default_rpc_exchange = ${control_exchange}_rpc
+
+# Exchange name for receiving RPC replies (string value)
+#rpc_reply_exchange = ${control_exchange}_rpc_reply
+
+# Max number of not acknowledged message which RabbitMQ can send to
+# rpc listener. (integer value)
+#rpc_listener_prefetch_count = 100
+
+# Max number of not acknowledged message which RabbitMQ can send to
+# rpc reply listener. (integer value)
+#rpc_reply_listener_prefetch_count = 100
+
+# Reconnecting retry count in case of connectivity problem during
+# sending reply. -1 means infinite retry during rpc_timeout (integer
+# value)
+#rpc_reply_retry_attempts = -1
+
+# Reconnecting retry delay in case of connectivity problem during
+# sending reply. (floating point value)
+#rpc_reply_retry_delay = 0.25
+
+# Reconnecting retry count in case of connectivity problem during
+# sending RPC message, -1 means infinite retry. If actual retry
+# attempts in not 0 the rpc request could be processed more than one
+# time (integer value)
+#default_rpc_retry_attempts = -1
+
+# Reconnecting retry delay in case of connectivity problem during
+# sending RPC message (floating point value)
+#rpc_retry_delay = 0.25
+
+
+[oslo_policy]
+
+[database]
+#
+# From oslo.db
+#
+
+# If True, SQLite uses synchronous mode. (boolean value)
+#sqlite_synchronous = true
+
+# The back end to use for the database. (string value)
+# Deprecated group/name - [DEFAULT]/db_backend
+#backend = sqlalchemy
+
+# The SQLAlchemy connection string to use to connect to the database.
+# (string value)
+# Deprecated group/name - [DEFAULT]/sql_connection
+# Deprecated group/name - [DATABASE]/sql_connection
+# Deprecated group/name - [sql]/connection
+#connection = <None>
+connection = mysql+pymysql://nova:opnfv_secret@10.167.4.23/nova?charset=utf8
+# The SQLAlchemy connection string to use to connect to the slave
+# database. (string value)
+#slave_connection = <None>
+
+# The SQL mode to be used for MySQL sessions. This option, including
+# the default, overrides any server-set SQL mode. To use whatever SQL
+# mode is set by the server configuration, set this to no value.
+# Example: mysql_sql_mode= (string value)
+#mysql_sql_mode = TRADITIONAL
+
+# If True, transparently enables support for handling MySQL Cluster
+# (NDB). (boolean value)
+#mysql_enable_ndb = false
+
+# Connections which have been present in the connection pool longer
+# than this number of seconds will be replaced with a new one the next
+# time they are checked out from the pool. (integer value)
+# Deprecated group/name - [DATABASE]/idle_timeout
+# Deprecated group/name - [database]/idle_timeout
+# Deprecated group/name - [DEFAULT]/sql_idle_timeout
+# Deprecated group/name - [DATABASE]/sql_idle_timeout
+# Deprecated group/name - [sql]/idle_timeout
+#connection_recycle_time = 3600
+connection_recycle_time = 300
+
+# Minimum number of SQL connections to keep open in a pool. (integer
+# value)
+# Deprecated group/name - [DEFAULT]/sql_min_pool_size
+# Deprecated group/name - [DATABASE]/sql_min_pool_size
+#min_pool_size = 1
+
+# Maximum number of SQL connections to keep open in a pool. Setting a
+# value of 0 indicates no limit. (integer value)
+# Deprecated group/name - [DEFAULT]/sql_max_pool_size
+# Deprecated group/name - [DATABASE]/sql_max_pool_size
+#max_pool_size = 5
+max_pool_size = 10
+
+# Maximum number of database connection retries during startup. Set to
+# -1 to specify an infinite retry count. (integer value)
+# Deprecated group/name - [DEFAULT]/sql_max_retries
+# Deprecated group/name - [DATABASE]/sql_max_retries
+#max_retries = 10
+max_retries = -1
+
+# Interval between retries of opening a SQL connection. (integer
+# value)
+# Deprecated group/name - [DEFAULT]/sql_retry_interval
+# Deprecated group/name - [DATABASE]/reconnect_interval
+#retry_interval = 10
+
+# If set, use this value for max_overflow with SQLAlchemy. (integer
+# value)
+# Deprecated group/name - [DEFAULT]/sql_max_overflow
+# Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
+#max_overflow = 50
+max_overflow = 30
+
+# Verbosity of SQL debugging information: 0=None, 100=Everything.
+# (integer value)
+# Minimum value: 0
+# Maximum value: 100
+# Deprecated group/name - [DEFAULT]/sql_connection_debug
+#connection_debug = 0
+
+# Add Python stack traces to SQL as comment strings. (boolean value)
+# Deprecated group/name - [DEFAULT]/sql_connection_trace
+#connection_trace = false
+
+# If set, use this value for pool_timeout with SQLAlchemy. (integer
+# value)
+# Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
+#pool_timeout = <None>
+
+# Enable the experimental use of database reconnect on connection
+# lost. (boolean value)
+#use_db_reconnect = false
+
+# Seconds between retries of a database transaction. (integer value)
+#db_retry_interval = 1
+
+# If True, increases the interval between retries of a database
+# operation up to db_max_retry_interval. (boolean value)
+#db_inc_retry_interval = true
+
+# If db_inc_retry_interval is set, the maximum seconds between retries
+# of a database operation. (integer value)
+#db_max_retry_interval = 10
+
+# Maximum retries in case of connection error or deadlock error before
+# error is raised. Set to -1 to specify an infinite retry count.
+# (integer value)
+#db_max_retries = 20
+
+#
+# From oslo.db.concurrency
+#
+
+# Enable the experimental use of thread pooling for all DB API calls
+# (boolean value)
+# Deprecated group/name - [DEFAULT]/dbapi_use_tpool
+#use_tpool = false
+
+[oslo_middleware]
+#
+# From oslo.middleware
+#
+
+# The maximum body size for each  request, in bytes. (integer value)
+# Deprecated group/name - [DEFAULT]/osapi_max_request_body_size
+# Deprecated group/name - [DEFAULT]/max_request_body_size
+#max_request_body_size = 114688
+
+# DEPRECATED: The HTTP Header that will be used to determine what the
+# original request protocol scheme was, even if it was hidden by a SSL
+# termination proxy. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#secure_proxy_ssl_header = X-Forwarded-Proto
+
+# Whether the application is behind a proxy or not. This determines if
+# the middleware should parse the headers or not. (boolean value)
+enable_proxy_headers_parsing = True
 
 [keystone_authtoken]
-
 #
 # From keystonemiddleware.auth_token
 #
 
 # Complete "public" Identity API endpoint. This endpoint should not be an
-# "admin" endpoint, as it should be accessible by all end users. Unauthenticated
-# clients are redirected to this endpoint to authenticate. Although this
-# endpoint should ideally be unversioned, client support in the wild varies. If
-# you're using a versioned v2 endpoint here, then this should *not* be the same
-# endpoint the service user utilizes for validating tokens, because normal end
-# users may not be able to reach that endpoint. (string value)
+# "admin" endpoint, as it should be accessible by all end users.
+# Unauthenticated clients are redirected to this endpoint to authenticate.
+# Although this endpoint should ideally be unversioned, client support in the
+# wild varies. If you're using a versioned v2 endpoint here, then this should
+# *not* be the same endpoint the service user utilizes for validating tokens,
+# because normal end users may not be able to reach that endpoint. (string
+# value)
 # Deprecated group/name - [keystone_authtoken]/auth_uri
 #www_authenticate_uri = <None>
+www_authenticate_uri = http://10.167.4.35:5000
 
 # DEPRECATED: Complete "public" Identity API endpoint. This endpoint should not
 # be an "admin" endpoint, as it should be accessible by all end users.
@@ -534,9 +11487,10 @@
 # release. (string value)
 # This option is deprecated for removal since Queens.
 # Its value may be silently ignored in the future.
-# Reason: The auth_uri option is deprecated in favor of www_authenticate_uri and
-# will be removed in the S  release.
+# Reason: The auth_uri option is deprecated in favor of www_authenticate_uri
+# and will be removed in the S  release.
 #auth_uri = <None>
+auth_uri = http://10.167.4.35:5000
 
 # API version of the admin Identity API endpoint. (string value)
 #auth_version = <None>
@@ -549,8 +11503,8 @@
 # value)
 #http_connect_timeout = <None>
 
-# How many times are we trying to reconnect when communicating with Identity API
-# Server. (integer value)
+# How many times are we trying to reconnect when communicating with Identity
+# API Server. (integer value)
 #http_request_max_retries = 3
 
 # Request environment key where the Swift cache object is stored. When
@@ -574,10 +11528,11 @@
 
 # The region in which the identity server can be found. (string value)
 #region_name = <None>
+region_name = RegionOne
 
 # DEPRECATED: Directory used to cache files related to PKI tokens. This option
-# has been deprecated in the Ocata release and will be removed in the P release.
-# (string value)
+# has been deprecated in the Ocata release and will be removed in the P
+# release. (string value)
 # This option is deprecated for removal since Ocata.
 # Its value may be silently ignored in the future.
 # Reason: PKI token format is no longer supported.
@@ -589,15 +11544,15 @@
 #memcached_servers = <None>
 
 # In order to prevent excessive effort spent validating tokens, the middleware
-# caches previously-seen tokens for a configurable duration (in seconds). Set to
-# -1 to disable caching completely. (integer value)
+# caches previously-seen tokens for a configurable duration (in seconds). Set
+# to -1 to disable caching completely. (integer value)
 #token_cache_time = 300
 
 # DEPRECATED: Determines the frequency at which the list of revoked tokens is
 # retrieved from the Identity service (in seconds). A high number of revocation
 # events combined with a low cache duration may significantly reduce
-# performance. Only valid for PKI tokens. This option has been deprecated in the
-# Ocata release and will be removed in the P release. (integer value)
+# performance. Only valid for PKI tokens. This option has been deprecated in
+# the Ocata release and will be removed in the P release. (integer value)
 # This option is deprecated for removal since Ocata.
 # Its value may be silently ignored in the future.
 # Reason: PKI token format is no longer supported.
@@ -622,8 +11577,8 @@
 # tried again. (integer value)
 #memcache_pool_dead_retry = 300
 
-# (Optional) Maximum total number of open connections to every memcached server.
-# (integer value)
+# (Optional) Maximum total number of open connections to every memcached
+# server. (integer value)
 #memcache_pool_maxsize = 10
 
 # (Optional) Socket timeout in seconds for communicating with a memcached
@@ -649,11 +11604,11 @@
 
 # Used to control the use and type of token binding. Can be set to: "disabled"
 # to not check token binding. "permissive" (default) to validate binding
-# information if the bind type is of a form known to the server and ignore it if
-# not. "strict" like "permissive" but if the bind type is unknown the token will
-# be rejected. "required" any form of token binding is needed to be allowed.
-# Finally the name of a binding method that must be present in tokens. (string
-# value)
+# information if the bind type is of a form known to the server and ignore it
+# if not. "strict" like "permissive" but if the bind type is unknown the token
+# will be rejected. "required" any form of token binding is needed to be
+# allowed. Finally the name of a binding method that must be present in tokens.
+# (string value)
 #enforce_token_bind = permissive
 
 # DEPRECATED: If true, the revocation list will be checked for cached tokens.
@@ -680,886 +11635,127 @@
 # A choice of roles that must be present in a service token. Service tokens are
 # allowed to request that an expired token can be used and so this check should
 # tightly control that only actual services should be sending this token. Roles
-# here are applied as an ANY check so any role in this list must be present. For
-# backwards compatibility reasons this currently only affects the allow_expired
-# check. (list value)
+# here are applied as an ANY check so any role in this list must be present.
+# For backwards compatibility reasons this currently only affects the
+# allow_expired check. (list value)
 #service_token_roles = service
 
-# For backwards compatibility reasons we must let valid service tokens pass that
-# don't pass the service_token_roles check as valid. Setting this true will
-# become the default in a future release and should be enabled if possible.
-# (boolean value)
+# For backwards compatibility reasons we must let valid service tokens pass
+# that don't pass the service_token_roles check as valid. Setting this true
+# will become the default in a future release and should be enabled if
+# possible. (boolean value)
 #service_token_roles_required = false
-
-# Prefix to prepend at the beginning of the path. Deprecated, use identity_uri.
-# (string value)
-#auth_admin_prefix =
-
-# Host providing the admin Identity API endpoint. Deprecated, use identity_uri.
-# (string value)
-#auth_host = 127.0.0.1
-
-# Port of the admin Identity API endpoint. Deprecated, use identity_uri.
-# (integer value)
-#auth_port = 35357
-
-# Protocol of the admin Identity API endpoint. Deprecated, use identity_uri.
-# (string value)
-# Possible values:
-# http - <No description provided>
-# https - <No description provided>
-#auth_protocol = https
-
-# Complete admin Identity API endpoint. This should specify the unversioned root
-# endpoint e.g. https://localhost:35357/ (string value)
-#identity_uri = <None>
-
-# This option is deprecated and may be removed in a future release. Single
-# shared secret with the Keystone configuration used for bootstrapping a
-# Keystone installation, or otherwise bypassing the normal authentication
-# process. This option should not be used, use `admin_user` and `admin_password`
-# instead. (string value)
-#admin_token = <None>
-
-# Service username. (string value)
-#admin_user = <None>
-
-# Service user password. (string value)
-#admin_password = <None>
-
-# Service tenant name. (string value)
-#admin_tenant_name = admin
 
 # Authentication type to load (string value)
 # Deprecated group/name - [keystone_authtoken]/auth_plugin
 #auth_type = <None>
+auth_type = password
 
 # Config Section from which to load plugin specific options (string value)
 #auth_section = <None>
 
-
-[matchmaker_redis]
-
-#
-# From oslo.messaging
-#
-
-# DEPRECATED: Host to locate redis. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#host = 127.0.0.1
-
-# DEPRECATED: Use this port to connect to redis host. (port value)
-# Minimum value: 0
-# Maximum value: 65535
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#port = 6379
-
-# DEPRECATED: Password for Redis server (optional). (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#password =
-
-# DEPRECATED: List of Redis Sentinel hosts (fault tolerance mode), e.g.,
-# [host:port, host1:port ... ] (list value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#sentinel_hosts =
-
-# Redis replica set name. (string value)
-#sentinel_group_name = oslo-messaging-zeromq
-
-# Time in ms to wait between connection attempts. (integer value)
-#wait_timeout = 2000
-
-# Time in ms to wait before the transaction is killed. (integer value)
-#check_timeout = 20000
-
-# Timeout in ms on blocking socket operations. (integer value)
-#socket_timeout = 10000
-
-
-[oslo_concurrency]
-
-#
-# From oslo.concurrency
-#
-
-# Enables or disables inter-process locks. (boolean value)
-#disable_process_locking = false
-
-# Directory to use for lock files.  For security, the specified directory should
-# only be writable by the user running the processes that need locking. Defaults
-# to environment variable OSLO_LOCK_PATH. If OSLO_LOCK_PATH is not set in the
-# environment, use the Python tempfile.gettempdir function to find a suitable
-# location. If external locks are used, a lock path must be set. (string value)
-#lock_path = /tmp
-
-
-[oslo_messaging_amqp]
-
-#
-# From oslo.messaging
-#
-
-# Name for the AMQP container. must be globally unique. Defaults to a generated
-# UUID (string value)
-#container_name = <None>
-
-# Timeout for inactive connections (in seconds) (integer value)
-#idle_timeout = 0
-
-# Debug: dump AMQP frames to stdout (boolean value)
-#trace = false
-
-# Attempt to connect via SSL. If no other ssl-related parameters are given, it
-# will use the system's CA-bundle to verify the server's certificate. (boolean
+# Name of nova region to use. Useful if keystone manages more than one region.
+# (string value)
+#region_name = <None>
+region_name = RegionOne
+
+# Type of the nova endpoint to use.  This endpoint will be looked up in the
+# keystone catalog and should be one of public, internal or admin. (string
 # value)
-#ssl = false
-
-# CA certificate PEM file used to verify the server's certificate (string value)
-#ssl_ca_file =
-
-# Self-identifying certificate PEM file for client authentication (string value)
-#ssl_cert_file =
-
-# Private key PEM file used to sign ssl_cert_file certificate (optional) (string
+# Possible values:
+# public - <No description provided>
+# admin - <No description provided>
+# internal - <No description provided>
+#endpoint_type = public
+endpoint_type = internal
+
+# API version of the admin Identity API endpoint. (string value)
+#auth_version = <None>
+
+
+# Authentication URL (string value)
+#auth_url = <None>
+auth_url = http://10.167.4.35:35357
+
+# Authentication type to load (string value)
+# Deprecated group/name - [nova]/auth_plugin
+#auth_type = <None>
+auth_type = password
+
+# Required if identity server requires client certificate (string value)
+#certfile = <None>
+
+# A PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# Defaults to system CAs. (string value)
+#cafile = <None>
+
+# Optional domain ID to use with v3 and v2 parameters. It will be used for both
+# the user and project domain in v3 and ignored in v2 authentication. (string
 # value)
-#ssl_key_file =
-
-# Password for decrypting ssl_key_file (if encrypted) (string value)
-#ssl_key_password = <None>
-
-# By default SSL checks that the name in the server's certificate matches the
-# hostname in the transport_url. In some configurations it may be preferable to
-# use the virtual hostname instead, for example if the server uses the Server
-# Name Indication TLS extension (rfc6066) to provide a certificate per virtual
-# host. Set ssl_verify_vhost to True if the server's SSL certificate uses the
-# virtual host name instead of the DNS name. (boolean value)
-#ssl_verify_vhost = false
-
-# DEPRECATED: Accept clients using either SSL or plain TCP (boolean value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Not applicable - not a SSL server
-#allow_insecure_clients = false
-
-# Space separated list of acceptable SASL mechanisms (string value)
-#sasl_mechanisms =
-
-# Path to directory that contains the SASL configuration (string value)
-#sasl_config_dir =
-
-# Name of configuration file (without .conf suffix) (string value)
-#sasl_config_name =
-
-# SASL realm to use if no realm present in username (string value)
-#sasl_default_realm =
-
-# DEPRECATED: User name for message broker authentication (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the username.
-#username =
-
-# DEPRECATED: Password for message broker authentication (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the password.
-#password =
-
-# Seconds to pause before attempting to re-connect. (integer value)
-# Minimum value: 1
-#connection_retry_interval = 1
-
-# Increase the connection_retry_interval by this many seconds after each
-# unsuccessful failover attempt. (integer value)
-# Minimum value: 0
-#connection_retry_backoff = 2
-
-# Maximum limit for connection_retry_interval + connection_retry_backoff
-# (integer value)
-# Minimum value: 1
-#connection_retry_interval_max = 30
-
-# Time to pause between re-connecting an AMQP 1.0 link that failed due to a
-# recoverable error. (integer value)
-# Minimum value: 1
-#link_retry_delay = 10
-
-# The maximum number of attempts to re-send a reply message which failed due to
-# a recoverable error. (integer value)
-# Minimum value: -1
-#default_reply_retry = 0
-
-# The deadline for an rpc reply message delivery. (integer value)
-# Minimum value: 5
-#default_reply_timeout = 30
-
-# The deadline for an rpc cast or call message delivery. Only used when caller
-# does not provide a timeout expiry. (integer value)
-# Minimum value: 5
-#default_send_timeout = 30
-
-# The deadline for a sent notification message delivery. Only used when caller
-# does not provide a timeout expiry. (integer value)
-# Minimum value: 5
-#default_notify_timeout = 30
-
-# The duration to schedule a purge of idle sender links. Detach link after
-# expiry. (integer value)
-# Minimum value: 1
-#default_sender_link_timeout = 600
-
-# Indicates the addressing mode used by the driver.
-# Permitted values:
-# 'legacy'   - use legacy non-routable addressing
-# 'routable' - use routable addresses
-# 'dynamic'  - use legacy addresses if the message bus does not support routing
-# otherwise use routable addressing (string value)
-#addressing_mode = dynamic
-
-# Enable virtual host support for those message buses that do not natively
-# support virtual hosting (such as qpidd). When set to true the virtual host
-# name will be added to all message bus addresses, effectively creating a
-# private 'subnet' per virtual host. Set to False if the message bus supports
-# virtual hosting using the 'hostname' field in the AMQP 1.0 Open performative
-# as the name of the virtual host. (boolean value)
-#pseudo_vhost = true
-
-# address prefix used when sending to a specific server (string value)
-#server_request_prefix = exclusive
-
-# address prefix used when broadcasting to all servers (string value)
-#broadcast_prefix = broadcast
-
-# address prefix when sending to any server in group (string value)
-#group_request_prefix = unicast
-
-# Address prefix for all generated RPC addresses (string value)
-#rpc_address_prefix = openstack.org/om/rpc
-
-# Address prefix for all generated Notification addresses (string value)
-#notify_address_prefix = openstack.org/om/notify
-
-# Appended to the address prefix when sending a fanout message. Used by the
-# message bus to identify fanout messages. (string value)
-#multicast_address = multicast
-
-# Appended to the address prefix when sending to a particular RPC/Notification
-# server. Used by the message bus to identify messages sent to a single
-# destination. (string value)
-#unicast_address = unicast
-
-# Appended to the address prefix when sending to a group of consumers. Used by
-# the message bus to identify messages that should be delivered in a round-robin
-# fashion across consumers. (string value)
-#anycast_address = anycast
-
-# Exchange name used in notification addresses.
-# Exchange name resolution precedence:
-# Target.exchange if set
-# else default_notification_exchange if set
-# else control_exchange if set
-# else 'notify' (string value)
-#default_notification_exchange = <None>
-
-# Exchange name used in RPC addresses.
-# Exchange name resolution precedence:
-# Target.exchange if set
-# else default_rpc_exchange if set
-# else control_exchange if set
-# else 'rpc' (string value)
-#default_rpc_exchange = <None>
-
-# Window size for incoming RPC Reply messages. (integer value)
-# Minimum value: 1
-#reply_link_credit = 200
-
-# Window size for incoming RPC Request messages (integer value)
-# Minimum value: 1
-#rpc_server_credit = 100
-
-# Window size for incoming Notification messages (integer value)
-# Minimum value: 1
-#notify_server_credit = 100
-
-# Send messages of this type pre-settled.
-# Pre-settled messages will not receive acknowledgement
-# from the peer. Note well: pre-settled messages may be
-# silently discarded if the delivery fails.
-# Permitted values:
-# 'rpc-call' - send RPC Calls pre-settled
-# 'rpc-reply'- send RPC Replies pre-settled
-# 'rpc-cast' - Send RPC Casts pre-settled
-# 'notify'   - Send Notifications pre-settled
-#  (multi valued)
-#pre_settled = rpc-cast
-#pre_settled = rpc-reply
-
-
-[oslo_messaging_kafka]
-
-#
-# From oslo.messaging
-#
-
-# DEPRECATED: Default Kafka broker Host (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#kafka_default_host = localhost
-
-# DEPRECATED: Default Kafka broker Port (port value)
-# Minimum value: 0
-# Maximum value: 65535
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#kafka_default_port = 9092
-
-# Max fetch bytes of Kafka consumer (integer value)
-#kafka_max_fetch_bytes = 1048576
-
-# Default timeout(s) for Kafka consumers (floating point value)
-#kafka_consumer_timeout = 1.0
-
-# DEPRECATED: Pool Size for Kafka Consumers (integer value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#pool_size = 10
-
-# DEPRECATED: The pool size limit for connections expiration policy (integer
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#conn_pool_min_size = 2
-
-# DEPRECATED: The time-to-live in sec of idle connections in the pool (integer
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#conn_pool_ttl = 1200
-
-# Group id for Kafka consumer. Consumers in one group will coordinate message
-# consumption (string value)
-#consumer_group = oslo_messaging_consumer
-
-# Upper bound on the delay for KafkaProducer batching in seconds (floating point
-# value)
-#producer_batch_timeout = 0.0
-
-# Size of batch for the producer async send (integer value)
-#producer_batch_size = 16384
-
-
-[oslo_messaging_notifications]
-
-#
-# From oslo.messaging
-#
-
-# The Drivers(s) to handle sending notifications. Possible values are messaging,
-# messagingv2, routing, log, test, noop (multi valued)
-# Deprecated group/name - [DEFAULT]/notification_driver
-#driver =
-
-# A URL representing the messaging driver to use for notifications. If not set,
-# we fall back to the same configuration used for RPC. (string value)
-# Deprecated group/name - [DEFAULT]/notification_transport_url
-#transport_url = <None>
-
-# AMQP topic used for OpenStack notifications. (list value)
-# Deprecated group/name - [rpc_notifier2]/topics
-# Deprecated group/name - [DEFAULT]/notification_topics
-#topics = notifications
-
-# The maximum number of attempts to re-send a notification message which failed
-# to be delivered due to a recoverable error. 0 - No retry, -1 - indefinite
-# (integer value)
-#retry = -1
-
-
-[oslo_messaging_rabbit]
-
-#
-# From oslo.messaging
-#
-
-# Use durable queues in AMQP. (boolean value)
-# Deprecated group/name - [DEFAULT]/amqp_durable_queues
-# Deprecated group/name - [DEFAULT]/rabbit_durable_queues
-#amqp_durable_queues = false
-
-# Auto-delete queues in AMQP. (boolean value)
-#amqp_auto_delete = false
-
-# Enable SSL (boolean value)
-#ssl = <None>
-
-# SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and
-# SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some
-# distributions. (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_version
-#ssl_version =
-
-# SSL key file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_keyfile
-#ssl_key_file =
-
-# SSL cert file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_certfile
-#ssl_cert_file =
-
-# SSL certification authority file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_ca_certs
-#ssl_ca_file =
-
-# How long to wait before reconnecting in response to an AMQP consumer cancel
-# notification. (floating point value)
-#kombu_reconnect_delay = 1.0
-
-# EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression will not
-# be used. This option may not be available in future versions. (string value)
-#kombu_compression = <None>
-
-# How long to wait a missing client before abandoning to send it its replies.
-# This value should not be longer than rpc_response_timeout. (integer value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_reconnect_timeout
-#kombu_missing_consumer_retry_timeout = 60
-
-# Determines how the next RabbitMQ node is chosen in case the one we are
-# currently connected to becomes unavailable. Takes effect only if more than one
-# RabbitMQ node is provided in config. (string value)
-# Possible values:
-# round-robin - <No description provided>
-# shuffle - <No description provided>
-#kombu_failover_strategy = round-robin
-
-# DEPRECATED: The RabbitMQ broker address where a single node is used. (string
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_host = localhost
-
-# DEPRECATED: The RabbitMQ broker port where a single node is used. (port value)
-# Minimum value: 0
-# Maximum value: 65535
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_port = 5672
-
-# DEPRECATED: RabbitMQ HA cluster host:port pairs. (list value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_hosts = $rabbit_host:$rabbit_port
-
-# DEPRECATED: The RabbitMQ userid. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_userid = guest
-
-# DEPRECATED: The RabbitMQ password. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_password = guest
-
-# The RabbitMQ login method. (string value)
-# Possible values:
-# PLAIN - <No description provided>
-# AMQPLAIN - <No description provided>
-# RABBIT-CR-DEMO - <No description provided>
-#rabbit_login_method = AMQPLAIN
-
-# DEPRECATED: The RabbitMQ virtual host. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rabbit_virtual_host = /
-
-# How frequently to retry connecting with RabbitMQ. (integer value)
-#rabbit_retry_interval = 1
-
-# How long to backoff for between retries when connecting to RabbitMQ. (integer
-# value)
-#rabbit_retry_backoff = 2
-
-# Maximum interval of RabbitMQ connection retries. Default is 30 seconds.
-# (integer value)
-#rabbit_interval_max = 30
-
-# DEPRECATED: Maximum number of RabbitMQ connection retries. Default is 0
-# (infinite retry count). (integer value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-#rabbit_max_retries = 0
-
-# Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change this
-# option, you must wipe the RabbitMQ database. In RabbitMQ 3.0, queue mirroring
-# is no longer controlled by the x-ha-policy argument when declaring a queue. If
-# you just want to make sure that all queues (except those with auto-generated
-# names) are mirrored across all nodes, run: "rabbitmqctl set_policy HA
-# '^(?!amq\.).*' '{"ha-mode": "all"}' " (boolean value)
-#rabbit_ha_queues = false
-
-# Positive integer representing duration in seconds for queue TTL (x-expires).
-# Queues which are unused for the duration of the TTL are automatically deleted.
-# The parameter affects only reply and fanout queues. (integer value)
-# Minimum value: 1
-#rabbit_transient_queues_ttl = 1800
-
-# Specifies the number of messages to prefetch. Setting to zero allows unlimited
-# messages. (integer value)
-#rabbit_qos_prefetch_count = 64
-
-# Number of seconds after which the Rabbit broker is considered down if
-# heartbeat's keep-alive fails (0 disable the heartbeat). EXPERIMENTAL (integer
-# value)
-#heartbeat_timeout_threshold = 60
-
-# How often times during the heartbeat_timeout_threshold we check the heartbeat.
-# (integer value)
-#heartbeat_rate = 2
-
-# Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake (boolean value)
-#fake_rabbit = false
-
-# Maximum number of channels to allow (integer value)
-#channel_max = <None>
-
-# The maximum byte size for an AMQP frame (integer value)
-#frame_max = <None>
-
-# How often to send heartbeats for consumer's connections (integer value)
-#heartbeat_interval = 3
-
-# Arguments passed to ssl.wrap_socket (dict value)
-#ssl_options = <None>
-
-# Set socket timeout in seconds for connection's socket (floating point value)
-#socket_timeout = 0.25
-
-# Set TCP_USER_TIMEOUT in seconds for connection's socket (floating point value)
-#tcp_user_timeout = 0.25
-
-# Set delay for reconnection to some host which has connection error (floating
-# point value)
-#host_connection_reconnect_delay = 0.25
-
-# Connection factory implementation (string value)
-# Possible values:
-# new - <No description provided>
-# single - <No description provided>
-# read_write - <No description provided>
-#connection_factory = single
-
-# Maximum number of connections to keep queued. (integer value)
-#pool_max_size = 30
-
-# Maximum number of connections to create above `pool_max_size`. (integer value)
-#pool_max_overflow = 0
-
-# Default number of seconds to wait for a connections to available (integer
-# value)
-#pool_timeout = 30
-
-# Lifetime of a connection (since creation) in seconds or None for no recycling.
-# Expired connections are closed on acquire. (integer value)
-#pool_recycle = 600
-
-# Threshold at which inactive (since release) connections are considered stale
-# in seconds or None for no staleness. Stale connections are closed on acquire.
-# (integer value)
-#pool_stale = 60
-
-# Default serialization mechanism for serializing/deserializing
-# outgoing/incoming messages (string value)
-# Possible values:
-# json - <No description provided>
-# msgpack - <No description provided>
-#default_serializer_type = json
-
-# Persist notification messages. (boolean value)
-#notification_persistence = false
-
-# Exchange name for sending notifications (string value)
-#default_notification_exchange = ${control_exchange}_notification
-
-# Max number of not acknowledged message which RabbitMQ can send to notification
-# listener. (integer value)
-#notification_listener_prefetch_count = 100
-
-# Reconnecting retry count in case of connectivity problem during sending
-# notification, -1 means infinite retry. (integer value)
-#default_notification_retry_attempts = -1
-
-# Reconnecting retry delay in case of connectivity problem during sending
-# notification message (floating point value)
-#notification_retry_delay = 0.25
-
-# Time to live for rpc queues without consumers in seconds. (integer value)
-#rpc_queue_expiration = 60
-
-# Exchange name for sending RPC messages (string value)
-#default_rpc_exchange = ${control_exchange}_rpc
-
-# Exchange name for receiving RPC replies (string value)
-#rpc_reply_exchange = ${control_exchange}_rpc_reply
-
-# Max number of not acknowledged message which RabbitMQ can send to rpc
-# listener. (integer value)
-#rpc_listener_prefetch_count = 100
-
-# Max number of not acknowledged message which RabbitMQ can send to rpc reply
-# listener. (integer value)
-#rpc_reply_listener_prefetch_count = 100
-
-# Reconnecting retry count in case of connectivity problem during sending reply.
-# -1 means infinite retry during rpc_timeout (integer value)
-#rpc_reply_retry_attempts = -1
-
-# Reconnecting retry delay in case of connectivity problem during sending reply.
-# (floating point value)
-#rpc_reply_retry_delay = 0.25
-
-# Reconnecting retry count in case of connectivity problem during sending RPC
-# message, -1 means infinite retry. If actual retry attempts in not 0 the rpc
-# request could be processed more than one time (integer value)
-#default_rpc_retry_attempts = -1
-
-# Reconnecting retry delay in case of connectivity problem during sending RPC
-# message (floating point value)
-#rpc_retry_delay = 0.25
-
-
-[oslo_messaging_zmq]
-
-#
-# From oslo.messaging
-#
-
-# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
-# The "host" option should point or resolve to this address. (string value)
-#rpc_zmq_bind_address = *
-
-# MatchMaker driver. (string value)
-# Possible values:
-# redis - <No description provided>
-# sentinel - <No description provided>
-# dummy - <No description provided>
-#rpc_zmq_matchmaker = redis
-
-# Number of ZeroMQ contexts, defaults to 1. (integer value)
-#rpc_zmq_contexts = 1
-
-# Maximum number of ingress messages to locally buffer per topic. Default is
-# unlimited. (integer value)
-#rpc_zmq_topic_backlog = <None>
-
-# Directory for holding IPC sockets. (string value)
-#rpc_zmq_ipc_dir = /var/run/openstack
-
-# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
-# "host" option, if running Nova. (string value)
-#rpc_zmq_host = localhost
-
-# Number of seconds to wait before all pending messages will be sent after
-# closing a socket. The default value of -1 specifies an infinite linger period.
-# The value of 0 specifies no linger period. Pending messages shall be discarded
-# immediately when the socket is closed. Positive values specify an upper bound
-# for the linger period. (integer value)
-# Deprecated group/name - [DEFAULT]/rpc_cast_timeout
-#zmq_linger = -1
-
-# The default number of seconds that poll should wait. Poll raises timeout
-# exception when timeout expired. (integer value)
-#rpc_poll_timeout = 1
-
-# Expiration timeout in seconds of a name service record about existing target (
-# < 0 means no timeout). (integer value)
-#zmq_target_expire = 300
-
-# Update period in seconds of a name service record about existing target.
-# (integer value)
-#zmq_target_update = 180
-
-# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
-# value)
-#use_pub_sub = false
-
-# Use ROUTER remote proxy. (boolean value)
-#use_router_proxy = false
-
-# This option makes direct connections dynamic or static. It makes sense only
-# with use_router_proxy=False which means to use direct connections for direct
-# message types (ignored otherwise). (boolean value)
-#use_dynamic_connections = false
-
-# How many additional connections to a host will be made for failover reasons.
-# This option is actual only in dynamic connections mode. (integer value)
-#zmq_failover_connections = 2
-
-# Minimal port number for random ports range. (port value)
-# Minimum value: 0
-# Maximum value: 65535
-#rpc_zmq_min_port = 49153
-
-# Maximal port number for random ports range. (integer value)
-# Minimum value: 1
-# Maximum value: 65536
-#rpc_zmq_max_port = 65536
-
-# Number of retries to find free port number before fail with ZMQBindError.
-# (integer value)
-#rpc_zmq_bind_port_retries = 100
-
-# Default serialization mechanism for serializing/deserializing
-# outgoing/incoming messages (string value)
-# Possible values:
-# json - <No description provided>
-# msgpack - <No description provided>
-#rpc_zmq_serialization = json
-
-# This option configures round-robin mode in zmq socket. True means not keeping
-# a queue when server side disconnects. False means to keep queue and messages
-# even if server is disconnected, when the server appears we send all
-# accumulated messages to it. (boolean value)
-#zmq_immediate = true
-
-# Enable/disable TCP keepalive (KA) mechanism. The default value of -1 (or any
-# other negative value) means to skip any overrides and leave it to OS default;
-# 0 and 1 (or any other positive value) mean to disable and enable the option
-# respectively. (integer value)
-#zmq_tcp_keepalive = -1
-
-# The duration between two keepalive transmissions in idle condition. The unit
-# is platform dependent, for example, seconds in Linux, milliseconds in Windows
-# etc. The default value of -1 (or any other negative value and 0) means to skip
-# any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_idle = -1
-
-# The number of retransmissions to be carried out before declaring that remote
-# end is not available. The default value of -1 (or any other negative value and
-# 0) means to skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_cnt = -1
-
-# The duration between two successive keepalive retransmissions, if
-# acknowledgement to the previous keepalive transmission is not received. The
-# unit is platform dependent, for example, seconds in Linux, milliseconds in
-# Windows etc. The default value of -1 (or any other negative value and 0) means
-# to skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_intvl = -1
-
-# Maximum number of (green) threads to work concurrently. (integer value)
-#rpc_thread_pool_size = 100
-
-# Expiration timeout in seconds of a sent/received message after which it is not
-# tracked anymore by a client/server. (integer value)
-#rpc_message_ttl = 300
-
-# Wait for message acknowledgements from receivers. This mechanism works only
-# via proxy without PUB/SUB. (boolean value)
-#rpc_use_acks = false
-
-# Number of seconds to wait for an ack from a cast/call. After each retry
-# attempt this timeout is multiplied by some specified multiplier. (integer
-# value)
-#rpc_ack_timeout_base = 15
-
-# Number to multiply base ack timeout by after each retry attempt. (integer
-# value)
-#rpc_ack_timeout_multiplier = 2
-
-# Default number of message sending attempts in case of any problems occurred:
-# positive value N means at most N retries, 0 means no retries, None or -1 (or
-# any other negative values) mean to retry forever. This option is used only if
-# acknowledgments are enabled. (integer value)
-#rpc_retry_attempts = 3
-
-# List of publisher hosts SubConsumer can subscribe on. This option has higher
-# priority then the default publishers list taken from the matchmaker. (list
-# value)
-#subscribe_on =
-
-
-[oslo_middleware]
-
-#
-# From oslo.middleware
-#
-
-# The maximum body size for each  request, in bytes. (integer value)
-# Deprecated group/name - [DEFAULT]/osapi_max_request_body_size
-# Deprecated group/name - [DEFAULT]/max_request_body_size
-#max_request_body_size = 114688
-
-# DEPRECATED: The HTTP Header that will be used to determine what the original
-# request protocol scheme was, even if it was hidden by a SSL termination proxy.
+#default_domain_id = <None>
+
+# Optional domain name to use with v3 API and v2 parameters. It will be used for
+# both the user and project domain in v3 and ignored in v2 authentication.
 # (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-#secure_proxy_ssl_header = X-Forwarded-Proto
-
-# Whether the application is behind a proxy or not. This determines if the
-# middleware should parse the headers or not. (boolean value)
-#enable_proxy_headers_parsing = false
-
-
-[oslo_policy]
-
-#
-# From oslo.policy
-#
-
-# This option controls whether or not to enforce scope when evaluating policies.
-# If ``True``, the scope of the token used in the request is compared to the
-# ``scope_types`` of the policy being enforced. If the scopes do not match, an
-# ``InvalidScope`` exception will be raised. If ``False``, a message will be
-# logged informing operators that policies are being invoked with mismatching
-# scope. (boolean value)
-#enforce_scope = false
-
-# The file that defines policies. (string value)
-#policy_file = policy.json
-
-# Default rule. Enforced when a requested rule is not found. (string value)
-#policy_default_rule = default
-
-# Directories where policy configuration files are stored. They can be relative
-# to any directory in the search path defined by the config_dir option, or
-# absolute paths. The file defined by policy_file must exist for these
-# directories to be searched.  Missing or empty directories are ignored. (multi
-# valued)
-#policy_dirs = policy.d
-
-# Content Type to send and receive data for REST based policy check (string
-# value)
-# Possible values:
-# application/x-www-form-urlencoded - <No description provided>
-# application/json - <No description provided>
-#remote_content_type = application/x-www-form-urlencoded
-
-# server identity verification for REST based policy check (boolean value)
-#remote_ssl_verify_server_crt = false
-
-# Absolute path to ca cert file for REST based policy check (string value)
-#remote_ssl_ca_crt_file = <None>
-
-# Absolute path to client cert for REST based policy check (string value)
-#remote_ssl_client_crt_file = <None>
-
-# Absolute path client key file REST based policy check (string value)
-#remote_ssl_client_key_file = <None>
+#default_domain_name = <None>
+
+# Domain ID to scope to (string value)
+#domain_id = <None>
+
+# Domain name to scope to (string value)
+#domain_name = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# Required if identity server requires client certificate (string value)
+#keyfile = <None>
+
+# User's password (string value)
+#password = <None>
+password = opnfv_secret
+
+# Domain ID containing project (string value)
+#project_domain_id = <None>
+project_domain_id = default
+
+# Domain name containing project (string value)
+#project_domain_name = <None>
+
+# Project ID to scope to (string value)
+#project_id = <None>
+
+# Project name to scope to (string value)
+#project_name = <None>
+project_name = service
+
+# Scope for system operations (string value)
+#system_scope = <None>
+
+# Tenant ID (string value)
+#tenant_id = <None>
+
+# Tenant Name (string value)
+#tenant_name = <None>
+
+# Timeout value for http requests (integer value)
+#timeout = <None>
+
+# Trust ID (string value)
+#trust_id = <None>
+
+# User's domain id (string value)
+#user_domain_id = <None>
+user_domain_id = default
+
+# User's domain name (string value)
+#user_domain_name = <None>
+
+# User ID (string value)
+#user_id = <None>
+
+# Username (string value)
+# Deprecated group/name - [neutron]/user_name
+#username = <None>
+username = nova
+

2018-09-01 22:45:16,981 [salt.state       :1941][INFO    ][23485] Completed state [/etc/nova/nova.conf] at time 22:45:16.981764 duration_in_ms=395.315
2018-09-01 22:45:16,982 [salt.state       :1770][INFO    ][23485] Running state [nova-manage api_db sync] at time 22:45:16.982831
2018-09-01 22:45:16,983 [salt.state       :1803][INFO    ][23485] Executing state cmd.run for [nova-manage api_db sync]
2018-09-01 22:45:16,983 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command 'nova-manage api_db sync' in directory '/root'
2018-09-01 22:45:21,257 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224521249729
2018-09-01 22:45:21,268 [salt.minion      :1431][INFO    ][28960] Starting a new job with PID 28960
2018-09-01 22:45:21,290 [salt.minion      :1708][INFO    ][28960] Returning information for job: 20180901224521249729
2018-09-01 22:45:31,417 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224531408050
2018-09-01 22:45:31,437 [salt.minion      :1431][INFO    ][29159] Starting a new job with PID 29159
2018-09-01 22:45:31,455 [salt.minion      :1708][INFO    ][29159] Returning information for job: 20180901224531408050
2018-09-01 22:45:33,523 [salt.state       :290 ][INFO    ][23485] {'pid': 28840, 'retcode': 0, 'stderr': "/usr/lib/python2.7/dist-packages/oslo_db/sqlalchemy/enginefacade.py:332: NotSupportedWarning: Configuration option(s) ['use_tpool'] not supported\n  exception.NotSupportedWarning", 'stdout': '2018-09-01 22:45:19.304 28841 INFO migrate.versioning.api [-] 0 -> 1... \n2018-09-01 22:45:19.599 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:19.600 28841 INFO migrate.versioning.api [-] 1 -> 2... \n2018-09-01 22:45:20.047 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:20.047 28841 INFO migrate.versioning.api [-] 2 -> 3... \n2018-09-01 22:45:20.372 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:20.372 28841 INFO migrate.versioning.api [-] 3 -> 4... \n2018-09-01 22:45:20.637 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:20.637 28841 INFO migrate.versioning.api [-] 4 -> 5... \n2018-09-01 22:45:21.406 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:21.406 28841 INFO migrate.versioning.api [-] 5 -> 6... \n2018-09-01 22:45:21.688 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:21.688 28841 INFO migrate.versioning.api [-] 6 -> 7... \n2018-09-01 22:45:21.944 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:21.944 28841 INFO migrate.versioning.api [-] 7 -> 8... \n2018-09-01 22:45:21.954 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:21.955 28841 INFO migrate.versioning.api [-] 8 -> 9... \n2018-09-01 22:45:21.967 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:21.967 28841 INFO migrate.versioning.api [-] 9 -> 10... \n2018-09-01 22:45:21.977 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:21.977 28841 INFO migrate.versioning.api [-] 10 -> 11... \n2018-09-01 22:45:21.987 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:21.987 28841 INFO migrate.versioning.api [-] 11 -> 12... \n2018-09-01 22:45:21.997 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:21.997 28841 INFO migrate.versioning.api [-] 12 -> 13... \n2018-09-01 22:45:22.572 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:22.572 28841 INFO migrate.versioning.api [-] 13 -> 14... \n2018-09-01 22:45:22.819 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:22.819 28841 INFO migrate.versioning.api [-] 14 -> 15... \n2018-09-01 22:45:23.877 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:23.877 28841 INFO migrate.versioning.api [-] 15 -> 16... \n2018-09-01 22:45:25.282 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:25.282 28841 INFO migrate.versioning.api [-] 16 -> 17... \n2018-09-01 22:45:26.109 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:26.109 28841 INFO migrate.versioning.api [-] 17 -> 18... \n2018-09-01 22:45:26.773 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:26.773 28841 INFO migrate.versioning.api [-] 18 -> 19... \n2018-09-01 22:45:26.980 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:26.981 28841 INFO migrate.versioning.api [-] 19 -> 20... \n2018-09-01 22:45:27.308 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:27.308 28841 INFO migrate.versioning.api [-] 20 -> 21... \n2018-09-01 22:45:27.317 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:27.317 28841 INFO migrate.versioning.api [-] 21 -> 22... \n2018-09-01 22:45:27.326 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:27.326 28841 INFO migrate.versioning.api [-] 22 -> 23... \n2018-09-01 22:45:27.335 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:27.335 28841 INFO migrate.versioning.api [-] 23 -> 24... \n2018-09-01 22:45:27.344 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:27.344 28841 INFO migrate.versioning.api [-] 24 -> 25... \n2018-09-01 22:45:27.353 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:27.353 28841 INFO migrate.versioning.api [-] 25 -> 26... \n2018-09-01 22:45:27.530 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:27.530 28841 INFO migrate.versioning.api [-] 26 -> 27... \n2018-09-01 22:45:29.108 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:29.108 28841 INFO migrate.versioning.api [-] 27 -> 28... \n2018-09-01 22:45:29.395 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:29.395 28841 INFO migrate.versioning.api [-] 28 -> 29... \n2018-09-01 22:45:29.643 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:29.643 28841 INFO migrate.versioning.api [-] 29 -> 30... \n2018-09-01 22:45:29.663 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:29.664 28841 INFO migrate.versioning.api [-] 30 -> 31... \n2018-09-01 22:45:29.675 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:29.675 28841 INFO migrate.versioning.api [-] 31 -> 32... \n2018-09-01 22:45:29.686 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:29.686 28841 INFO migrate.versioning.api [-] 32 -> 33... \n2018-09-01 22:45:29.714 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:29.714 28841 INFO migrate.versioning.api [-] 33 -> 34... \n2018-09-01 22:45:29.725 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:29.726 28841 INFO migrate.versioning.api [-] 34 -> 35... \n2018-09-01 22:45:29.735 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:29.735 28841 INFO migrate.versioning.api [-] 35 -> 36... \n2018-09-01 22:45:29.747 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:29.748 28841 INFO migrate.versioning.api [-] 36 -> 37... \n2018-09-01 22:45:29.757 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:29.757 28841 INFO migrate.versioning.api [-] 37 -> 38... \n2018-09-01 22:45:29.765 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:29.765 28841 INFO migrate.versioning.api [-] 38 -> 39... \n2018-09-01 22:45:29.774 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:29.774 28841 INFO migrate.versioning.api [-] 39 -> 40... \n2018-09-01 22:45:29.780 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:29.780 28841 INFO migrate.versioning.api [-] 40 -> 41... \n2018-09-01 22:45:30.222 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:30.222 28841 INFO migrate.versioning.api [-] 41 -> 42... \n2018-09-01 22:45:30.451 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:30.451 28841 INFO migrate.versioning.api [-] 42 -> 43... \n2018-09-01 22:45:30.761 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:30.762 28841 INFO migrate.versioning.api [-] 43 -> 44... \n2018-09-01 22:45:31.611 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:31.612 28841 INFO migrate.versioning.api [-] 44 -> 45... \n2018-09-01 22:45:31.621 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:31.622 28841 INFO migrate.versioning.api [-] 45 -> 46... \n2018-09-01 22:45:31.631 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:31.631 28841 INFO migrate.versioning.api [-] 46 -> 47... \n2018-09-01 22:45:31.640 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:31.640 28841 INFO migrate.versioning.api [-] 47 -> 48... \n2018-09-01 22:45:31.744 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:31.745 28841 INFO migrate.versioning.api [-] 48 -> 49... \n2018-09-01 22:45:31.754 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:31.755 28841 INFO migrate.versioning.api [-] 49 -> 50... \n2018-09-01 22:45:31.942 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:31.942 28841 INFO migrate.versioning.api [-] 50 -> 51... \n2018-09-01 22:45:33.119 28841 INFO migrate.versioning.api [-] done\n2018-09-01 22:45:33.120 28841 INFO migrate.versioning.api [-] 51 -> 52... \n2018-09-01 22:45:33.381 28841 INFO migrate.versioning.api [-] done'}
2018-09-01 22:45:33,524 [salt.state       :1941][INFO    ][23485] Completed state [nova-manage api_db sync] at time 22:45:33.524278 duration_in_ms=16541.446
2018-09-01 22:45:33,525 [salt.state       :1770][INFO    ][23485] Running state [nova-manage cell_v2 map_cell0] at time 22:45:33.525651
2018-09-01 22:45:33,525 [salt.state       :1803][INFO    ][23485] Executing state cmd.run for [nova-manage cell_v2 map_cell0]
2018-09-01 22:45:33,526 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command 'nova-manage cell_v2 map_cell0' in directory '/root'
2018-09-01 22:45:35,923 [salt.state       :290 ][INFO    ][23485] {'pid': 29209, 'retcode': 0, 'stderr': "/usr/lib/python2.7/dist-packages/oslo_db/sqlalchemy/enginefacade.py:332: NotSupportedWarning: Configuration option(s) ['use_tpool'] not supported\n  exception.NotSupportedWarning", 'stdout': ''}
2018-09-01 22:45:35,924 [salt.state       :1941][INFO    ][23485] Completed state [nova-manage cell_v2 map_cell0] at time 22:45:35.924216 duration_in_ms=2398.565
2018-09-01 22:45:35,925 [salt.state       :1770][INFO    ][23485] Running state [nova-manage cell_v2 create_cell --name=cell1 --verbose] at time 22:45:35.925444
2018-09-01 22:45:35,925 [salt.state       :1803][INFO    ][23485] Executing state cmd.run for [nova-manage cell_v2 create_cell --name=cell1 --verbose]
2018-09-01 22:45:35,926 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command 'nova-manage cell_v2 list_cells | grep cell1' in directory '/root'
2018-09-01 22:45:38,363 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command 'nova-manage cell_v2 create_cell --name=cell1 --verbose' in directory '/root'
2018-09-01 22:45:40,719 [salt.state       :290 ][INFO    ][23485] {'pid': 29326, 'retcode': 0, 'stderr': "/usr/lib/python2.7/dist-packages/oslo_db/sqlalchemy/enginefacade.py:332: NotSupportedWarning: Configuration option(s) ['use_tpool'] not supported\n  exception.NotSupportedWarning", 'stdout': 'aae4085b-1719-43f4-8f7f-6d1f6d954b3e'}
2018-09-01 22:45:40,720 [salt.state       :1941][INFO    ][23485] Completed state [nova-manage cell_v2 create_cell --name=cell1 --verbose] at time 22:45:40.719978 duration_in_ms=4794.531
2018-09-01 22:45:40,721 [salt.state       :1770][INFO    ][23485] Running state [nova-manage db sync] at time 22:45:40.721749
2018-09-01 22:45:40,722 [salt.state       :1803][INFO    ][23485] Executing state cmd.run for [nova-manage db sync]
2018-09-01 22:45:40,723 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command 'nova-manage db sync' in directory '/root'
2018-09-01 22:45:41,571 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224541565390
2018-09-01 22:45:41,586 [salt.minion      :1431][INFO    ][29394] Starting a new job with PID 29394
2018-09-01 22:45:41,604 [salt.minion      :1708][INFO    ][29394] Returning information for job: 20180901224541565390
2018-09-01 22:45:51,725 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224551717566
2018-09-01 22:45:51,747 [salt.minion      :1431][INFO    ][29597] Starting a new job with PID 29597
2018-09-01 22:45:51,766 [salt.minion      :1708][INFO    ][29597] Returning information for job: 20180901224551717566
2018-09-01 22:46:01,888 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224601880153
2018-09-01 22:46:01,910 [salt.minion      :1431][INFO    ][29799] Starting a new job with PID 29799
2018-09-01 22:46:01,930 [salt.minion      :1708][INFO    ][29799] Returning information for job: 20180901224601880153
2018-09-01 22:46:12,059 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224612049487
2018-09-01 22:46:12,080 [salt.minion      :1431][INFO    ][29999] Starting a new job with PID 29999
2018-09-01 22:46:12,101 [salt.minion      :1708][INFO    ][29999] Returning information for job: 20180901224612049487
2018-09-01 22:46:22,232 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224622222972
2018-09-01 22:46:22,255 [salt.minion      :1431][INFO    ][30205] Starting a new job with PID 30205
2018-09-01 22:46:22,273 [salt.minion      :1708][INFO    ][30205] Returning information for job: 20180901224622222972
2018-09-01 22:46:32,404 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224632395970
2018-09-01 22:46:32,425 [salt.minion      :1431][INFO    ][30417] Starting a new job with PID 30417
2018-09-01 22:46:32,444 [salt.minion      :1708][INFO    ][30417] Returning information for job: 20180901224632395970
2018-09-01 22:46:42,583 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224642573845
2018-09-01 22:46:42,602 [salt.minion      :1431][INFO    ][30614] Starting a new job with PID 30614
2018-09-01 22:46:42,616 [salt.minion      :1708][INFO    ][30614] Returning information for job: 20180901224642573845
2018-09-01 22:46:52,752 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224652742832
2018-09-01 22:46:52,770 [salt.minion      :1431][INFO    ][30824] Starting a new job with PID 30824
2018-09-01 22:46:52,789 [salt.minion      :1708][INFO    ][30824] Returning information for job: 20180901224652742832
2018-09-01 22:47:02,933 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224702924217
2018-09-01 22:47:02,953 [salt.minion      :1431][INFO    ][31033] Starting a new job with PID 31033
2018-09-01 22:47:02,969 [salt.minion      :1708][INFO    ][31033] Returning information for job: 20180901224702924217
2018-09-01 22:47:13,113 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224713103845
2018-09-01 22:47:13,131 [salt.minion      :1431][INFO    ][31236] Starting a new job with PID 31236
2018-09-01 22:47:13,145 [salt.minion      :1708][INFO    ][31236] Returning information for job: 20180901224713103845
2018-09-01 22:47:23,284 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224723275145
2018-09-01 22:47:23,301 [salt.minion      :1431][INFO    ][31428] Starting a new job with PID 31428
2018-09-01 22:47:23,315 [salt.minion      :1708][INFO    ][31428] Returning information for job: 20180901224723275145
2018-09-01 22:47:33,459 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224733451743
2018-09-01 22:47:33,476 [salt.minion      :1431][INFO    ][31634] Starting a new job with PID 31634
2018-09-01 22:47:33,490 [salt.minion      :1708][INFO    ][31634] Returning information for job: 20180901224733451743
2018-09-01 22:47:43,638 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224743631638
2018-09-01 22:47:43,656 [salt.minion      :1431][INFO    ][31804] Starting a new job with PID 31804
2018-09-01 22:47:43,672 [salt.minion      :1708][INFO    ][31804] Returning information for job: 20180901224743631638
2018-09-01 22:47:48,726 [salt.state       :290 ][INFO    ][23485] {'pid': 29383, 'retcode': 0, 'stderr': '/usr/lib/python2.7/dist-packages/oslo_db/sqlalchemy/enginefacade.py:332: NotSupportedWarning: Configuration option(s) [\'use_tpool\'] not supported\n  exception.NotSupportedWarning\n/usr/lib/python2.7/dist-packages/pymysql/cursors.py:165: Warning: (1831, u"Duplicate index \'block_device_mapping_instance_uuid_virtual_name_device_name_idx\' defined on the table \'nova_cell0.block_device_mapping\'. This is deprecated and will be disallowed in a future release.")\n  result = self._query(query)\n/usr/lib/python2.7/dist-packages/pymysql/cursors.py:165: Warning: (1831, u"Duplicate index \'uniq_instances0uuid\' defined on the table \'nova_cell0.instances\'. This is deprecated and will be disallowed in a future release.")\n  result = self._query(query)\n/usr/lib/python2.7/dist-packages/pymysql/cursors.py:165: Warning: (1831, u"Duplicate index \'block_device_mapping_instance_uuid_virtual_name_device_name_idx\' defined on the table \'nova.block_device_mapping\'. This is deprecated and will be disallowed in a future release.")\n  result = self._query(query)\n/usr/lib/python2.7/dist-packages/pymysql/cursors.py:165: Warning: (1831, u"Duplicate index \'uniq_instances0uuid\' defined on the table \'nova.instances\'. This is deprecated and will be disallowed in a future release.")\n  result = self._query(query)', 'stdout': '2018-09-01 22:45:43.222 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 215 -> 216... \n2018-09-01 22:46:13.378 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:13.378 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 216 -> 217... \n2018-09-01 22:46:13.384 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:13.385 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 217 -> 218... \n2018-09-01 22:46:13.391 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:13.391 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 218 -> 219... \n2018-09-01 22:46:13.398 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:13.398 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 219 -> 220... \n2018-09-01 22:46:13.405 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:13.405 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 220 -> 221... \n2018-09-01 22:46:13.413 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:13.413 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 221 -> 222... \n2018-09-01 22:46:13.420 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:13.420 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 222 -> 223... \n2018-09-01 22:46:13.427 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:13.427 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 223 -> 224... \n2018-09-01 22:46:13.434 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:13.435 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 224 -> 225... \n2018-09-01 22:46:13.442 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:13.442 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 225 -> 226... \n2018-09-01 22:46:13.450 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:13.450 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 226 -> 227... \n2018-09-01 22:46:13.462 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:13.462 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 227 -> 228... \n2018-09-01 22:46:13.817 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:13.818 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 228 -> 229... \n2018-09-01 22:46:14.192 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:14.193 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 229 -> 230... \n2018-09-01 22:46:14.854 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:14.854 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 230 -> 231... \n2018-09-01 22:46:15.368 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:15.369 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 231 -> 232... \n2018-09-01 22:46:16.118 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:16.118 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 232 -> 233... \n2018-09-01 22:46:16.934 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:16.934 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 233 -> 234... \n2018-09-01 22:46:17.032 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:17.033 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 234 -> 235... \n2018-09-01 22:46:17.043 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:17.043 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 235 -> 236... \n2018-09-01 22:46:17.053 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:17.054 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 236 -> 237... \n2018-09-01 22:46:17.063 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:17.064 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 237 -> 238... \n2018-09-01 22:46:17.073 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:17.074 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 238 -> 239... \n2018-09-01 22:46:17.083 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:17.084 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 239 -> 240... \n2018-09-01 22:46:17.092 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:17.093 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 240 -> 241... \n2018-09-01 22:46:17.101 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:17.102 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 241 -> 242... \n2018-09-01 22:46:17.111 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:17.112 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 242 -> 243... \n2018-09-01 22:46:17.122 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:17.122 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 243 -> 244... \n2018-09-01 22:46:17.330 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:17.330 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 244 -> 245... \n2018-09-01 22:46:19.113 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:19.114 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 245 -> 246... \n2018-09-01 22:46:19.366 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:19.366 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 246 -> 247... \n2018-09-01 22:46:20.388 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:20.388 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 247 -> 248... \n2018-09-01 22:46:20.411 29384 INFO 248_add_expire_reservations_index [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] Skipped adding reservations_deleted_expire_idx because an equivalent index already exists.\n2018-09-01 22:46:20.419 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:20.419 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 248 -> 249... \n2018-09-01 22:46:20.494 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:20.495 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 249 -> 250... \n2018-09-01 22:46:20.676 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:20.676 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 250 -> 251... \n2018-09-01 22:46:21.027 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:21.028 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 251 -> 252... \n2018-09-01 22:46:21.746 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:21.746 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 252 -> 253... \n2018-09-01 22:46:22.099 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:22.099 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 253 -> 254... \n2018-09-01 22:46:22.475 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:22.475 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 254 -> 255... \n2018-09-01 22:46:22.486 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:22.486 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 255 -> 256... \n2018-09-01 22:46:22.496 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:22.496 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 256 -> 257... \n2018-09-01 22:46:22.504 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:22.505 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 257 -> 258... \n2018-09-01 22:46:22.515 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:22.515 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 258 -> 259... \n2018-09-01 22:46:22.525 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:22.525 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 259 -> 260... \n2018-09-01 22:46:22.536 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:22.536 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 260 -> 261... \n2018-09-01 22:46:22.545 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:22.546 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 261 -> 262... \n2018-09-01 22:46:22.556 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:22.556 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 262 -> 263... \n2018-09-01 22:46:22.569 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:22.569 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 263 -> 264... \n2018-09-01 22:46:22.578 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:22.578 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 264 -> 265... \n2018-09-01 22:46:22.807 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:22.808 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 265 -> 266... \n2018-09-01 22:46:23.038 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:23.038 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 266 -> 267... \n2018-09-01 22:46:23.994 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:23.995 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 267 -> 268... \n2018-09-01 22:46:24.436 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:24.437 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 268 -> 269... \n2018-09-01 22:46:24.879 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:24.880 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 269 -> 270... \n2018-09-01 22:46:25.270 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:25.270 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 270 -> 271... \n2018-09-01 22:46:25.652 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:25.652 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 271 -> 272... \n2018-09-01 22:46:25.662 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:25.662 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 272 -> 273... \n2018-09-01 22:46:25.672 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:25.672 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 273 -> 274... \n2018-09-01 22:46:25.853 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:25.853 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 274 -> 275... \n2018-09-01 22:46:26.217 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:26.218 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 275 -> 276... \n2018-09-01 22:46:26.598 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:26.599 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 276 -> 277... \n2018-09-01 22:46:26.695 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:26.696 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 277 -> 278... \n2018-09-01 22:46:27.202 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:27.203 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 278 -> 279... \n2018-09-01 22:46:27.368 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:27.368 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 279 -> 280... \n2018-09-01 22:46:27.706 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:27.706 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 280 -> 281... \n2018-09-01 22:46:27.714 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:27.714 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 281 -> 282... \n2018-09-01 22:46:27.723 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:27.723 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 282 -> 283... \n2018-09-01 22:46:27.730 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:27.730 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 283 -> 284... \n2018-09-01 22:46:27.738 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:27.738 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 284 -> 285... \n2018-09-01 22:46:27.744 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:27.745 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 285 -> 286... \n2018-09-01 22:46:27.751 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:27.752 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 286 -> 287... \n2018-09-01 22:46:27.758 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:27.759 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 287 -> 288... \n2018-09-01 22:46:27.765 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:27.766 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 288 -> 289... \n2018-09-01 22:46:27.773 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:27.773 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 289 -> 290... \n2018-09-01 22:46:27.781 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:27.781 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 290 -> 291... \n2018-09-01 22:46:27.802 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:27.803 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 291 -> 292... \n2018-09-01 22:46:28.307 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:28.308 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 292 -> 293... \n2018-09-01 22:46:29.126 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:29.127 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 293 -> 294... \n2018-09-01 22:46:29.463 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:29.464 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 294 -> 295... \n2018-09-01 22:46:29.600 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:29.600 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 295 -> 296... \n2018-09-01 22:46:29.611 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:29.611 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 296 -> 297... \n2018-09-01 22:46:29.999 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:29.999 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 297 -> 298... \n2018-09-01 22:46:30.264 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:30.265 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 298 -> 299... \n2018-09-01 22:46:30.666 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:30.667 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 299 -> 300... \n2018-09-01 22:46:31.007 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:31.007 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 300 -> 301... \n2018-09-01 22:46:31.737 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:31.738 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 301 -> 302... \n2018-09-01 22:46:31.748 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:31.748 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 302 -> 303... \n2018-09-01 22:46:31.756 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:31.756 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 303 -> 304... \n2018-09-01 22:46:31.764 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:31.764 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 304 -> 305... \n2018-09-01 22:46:31.772 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:31.772 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 305 -> 306... \n2018-09-01 22:46:31.781 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:31.782 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 306 -> 307... \n2018-09-01 22:46:31.790 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:31.790 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 307 -> 308... \n2018-09-01 22:46:31.798 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:31.798 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 308 -> 309... \n2018-09-01 22:46:31.806 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:31.807 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 309 -> 310... \n2018-09-01 22:46:31.815 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:31.815 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 310 -> 311... \n2018-09-01 22:46:31.824 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:31.825 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 311 -> 312... \n2018-09-01 22:46:31.835 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:31.836 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 312 -> 313... \n2018-09-01 22:46:32.300 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:32.300 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 313 -> 314... \n2018-09-01 22:46:33.688 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:33.689 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 314 -> 315... \n2018-09-01 22:46:36.002 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:36.002 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 315 -> 316... \n2018-09-01 22:46:36.341 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:36.341 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 316 -> 317... \n2018-09-01 22:46:36.754 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:36.754 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 317 -> 318... \n2018-09-01 22:46:38.495 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:38.495 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 318 -> 319... \n2018-09-01 22:46:38.620 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:38.621 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 319 -> 320... \n2018-09-01 22:46:38.632 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:38.632 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 320 -> 321... \n2018-09-01 22:46:38.642 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:38.642 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 321 -> 322... \n2018-09-01 22:46:38.653 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:38.653 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 322 -> 323... \n2018-09-01 22:46:38.662 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:38.662 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 323 -> 324... \n2018-09-01 22:46:38.672 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:38.672 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 324 -> 325... \n2018-09-01 22:46:38.681 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:38.682 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 325 -> 326... \n2018-09-01 22:46:38.690 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:38.690 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 326 -> 327... \n2018-09-01 22:46:38.699 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:38.699 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 327 -> 328... \n2018-09-01 22:46:38.707 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:38.707 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 328 -> 329... \n2018-09-01 22:46:38.715 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:38.715 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 329 -> 330... \n2018-09-01 22:46:38.750 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:38.750 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 330 -> 331... \n2018-09-01 22:46:39.584 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:39.585 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 331 -> 332... \n2018-09-01 22:46:39.935 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:39.935 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 332 -> 333... \n2018-09-01 22:46:40.359 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:40.360 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 333 -> 334... \n2018-09-01 22:46:40.715 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:40.716 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 334 -> 335... \n2018-09-01 22:46:40.722 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:40.722 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 335 -> 336... \n2018-09-01 22:46:40.730 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:40.731 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 336 -> 337... \n2018-09-01 22:46:40.738 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:40.738 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 337 -> 338... \n2018-09-01 22:46:40.747 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:40.747 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 338 -> 339... \n2018-09-01 22:46:40.756 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:40.756 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 339 -> 340... \n2018-09-01 22:46:40.764 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:40.764 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 340 -> 341... \n2018-09-01 22:46:40.771 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:40.772 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 341 -> 342... \n2018-09-01 22:46:40.779 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:40.779 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 342 -> 343... \n2018-09-01 22:46:40.787 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:40.787 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 343 -> 344... \n2018-09-01 22:46:40.798 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:40.798 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 344 -> 345... \n2018-09-01 22:46:40.831 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:40.831 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 345 -> 346... \n2018-09-01 22:46:41.368 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:41.368 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 346 -> 347... \n2018-09-01 22:46:41.580 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:41.580 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 347 -> 348... \n2018-09-01 22:46:41.591 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:41.591 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 348 -> 349... \n2018-09-01 22:46:41.600 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:41.600 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 349 -> 350... \n2018-09-01 22:46:41.610 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:41.610 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 350 -> 351... \n2018-09-01 22:46:41.620 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:41.620 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 351 -> 352... \n2018-09-01 22:46:41.629 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:41.630 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 352 -> 353... \n2018-09-01 22:46:41.638 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:41.638 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 353 -> 354... \n2018-09-01 22:46:41.647 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:41.647 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 354 -> 355... \n2018-09-01 22:46:41.656 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:41.657 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 355 -> 356... \n2018-09-01 22:46:41.666 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:41.666 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 356 -> 357... \n2018-09-01 22:46:41.675 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:41.676 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 357 -> 358... \n2018-09-01 22:46:42.136 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:42.137 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 358 -> 359... \n2018-09-01 22:46:42.593 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:42.594 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 359 -> 360... \n2018-09-01 22:46:42.924 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:42.924 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 360 -> 361... \n2018-09-01 22:46:43.062 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:43.063 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 361 -> 362... \n2018-09-01 22:46:43.451 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:43.451 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 362 -> 363... \n2018-09-01 22:46:43.459 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:43.459 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 363 -> 364... \n2018-09-01 22:46:43.466 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:43.466 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 364 -> 365... \n2018-09-01 22:46:43.474 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:43.474 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 365 -> 366... \n2018-09-01 22:46:43.484 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:43.484 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 366 -> 367... \n2018-09-01 22:46:43.492 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:43.492 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 367 -> 368... \n2018-09-01 22:46:43.500 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:43.500 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 368 -> 369... \n2018-09-01 22:46:43.508 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:43.508 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 369 -> 370... \n2018-09-01 22:46:43.516 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:43.516 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 370 -> 371... \n2018-09-01 22:46:43.524 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:43.524 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 371 -> 372... \n2018-09-01 22:46:43.532 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:43.532 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 372 -> 373... \n2018-09-01 22:46:44.167 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:44.167 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 373 -> 374... \n2018-09-01 22:46:44.627 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:44.627 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 374 -> 375... \n2018-09-01 22:46:44.911 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:44.912 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 375 -> 376... \n2018-09-01 22:46:45.002 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:45.002 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 376 -> 377... \n2018-09-01 22:46:45.132 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:45.133 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 377 -> 378... \n2018-09-01 22:46:45.232 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:46:45.431 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 215 -> 216... \n2018-09-01 22:47:17.103 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:17.104 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 216 -> 217... \n2018-09-01 22:47:17.112 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:17.112 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 217 -> 218... \n2018-09-01 22:47:17.120 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:17.120 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 218 -> 219... \n2018-09-01 22:47:17.129 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:17.130 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 219 -> 220... \n2018-09-01 22:47:17.139 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:17.139 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 220 -> 221... \n2018-09-01 22:47:17.148 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:17.148 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 221 -> 222... \n2018-09-01 22:47:17.156 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:17.156 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 222 -> 223... \n2018-09-01 22:47:17.165 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:17.165 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 223 -> 224... \n2018-09-01 22:47:17.174 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:17.174 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 224 -> 225... \n2018-09-01 22:47:17.183 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:17.183 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 225 -> 226... \n2018-09-01 22:47:17.192 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:17.192 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 226 -> 227... \n2018-09-01 22:47:17.206 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:17.206 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 227 -> 228... \n2018-09-01 22:47:17.577 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:17.578 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 228 -> 229... \n2018-09-01 22:47:17.963 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:17.964 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 229 -> 230... \n2018-09-01 22:47:18.634 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:18.635 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 230 -> 231... \n2018-09-01 22:47:19.126 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:19.127 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 231 -> 232... \n2018-09-01 22:47:19.731 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:19.732 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 232 -> 233... \n2018-09-01 22:47:20.218 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:20.218 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 233 -> 234... \n2018-09-01 22:47:20.315 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:20.315 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 234 -> 235... \n2018-09-01 22:47:20.324 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:20.324 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 235 -> 236... \n2018-09-01 22:47:20.332 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:20.333 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 236 -> 237... \n2018-09-01 22:47:20.341 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:20.341 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 237 -> 238... \n2018-09-01 22:47:20.349 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:20.350 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 238 -> 239... \n2018-09-01 22:47:20.359 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:20.359 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 239 -> 240... \n2018-09-01 22:47:20.367 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:20.367 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 240 -> 241... \n2018-09-01 22:47:20.375 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:20.376 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 241 -> 242... \n2018-09-01 22:47:20.384 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:20.384 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 242 -> 243... \n2018-09-01 22:47:20.392 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:20.392 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 243 -> 244... \n2018-09-01 22:47:20.633 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:20.634 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 244 -> 245... \n2018-09-01 22:47:22.459 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:22.459 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 245 -> 246... \n2018-09-01 22:47:22.782 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:22.783 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 246 -> 247... \n2018-09-01 22:47:23.846 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:23.846 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 247 -> 248... \n2018-09-01 22:47:23.856 29384 INFO 248_add_expire_reservations_index [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] Skipped adding reservations_deleted_expire_idx because an equivalent index already exists.\n2018-09-01 22:47:23.866 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:23.867 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 248 -> 249... \n2018-09-01 22:47:23.948 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:23.948 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 249 -> 250... \n2018-09-01 22:47:24.115 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:24.116 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 250 -> 251... \n2018-09-01 22:47:24.488 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:24.488 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 251 -> 252... \n2018-09-01 22:47:25.245 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:25.246 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 252 -> 253... \n2018-09-01 22:47:25.630 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:25.631 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 253 -> 254... \n2018-09-01 22:47:25.997 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:25.998 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 254 -> 255... \n2018-09-01 22:47:26.007 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:26.007 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 255 -> 256... \n2018-09-01 22:47:26.016 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:26.016 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 256 -> 257... \n2018-09-01 22:47:26.026 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:26.027 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 257 -> 258... \n2018-09-01 22:47:26.036 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:26.036 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 258 -> 259... \n2018-09-01 22:47:26.045 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:26.046 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 259 -> 260... \n2018-09-01 22:47:26.055 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:26.055 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 260 -> 261... \n2018-09-01 22:47:26.064 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:26.064 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 261 -> 262... \n2018-09-01 22:47:26.073 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:26.073 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 262 -> 263... \n2018-09-01 22:47:26.082 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:26.082 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 263 -> 264... \n2018-09-01 22:47:26.091 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:26.092 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 264 -> 265... \n2018-09-01 22:47:26.260 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:26.260 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 265 -> 266... \n2018-09-01 22:47:26.472 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:26.473 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 266 -> 267... \n2018-09-01 22:47:27.430 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:27.430 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 267 -> 268... \n2018-09-01 22:47:27.937 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:27.938 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 268 -> 269... \n2018-09-01 22:47:28.339 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:28.339 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 269 -> 270... \n2018-09-01 22:47:28.692 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:28.693 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 270 -> 271... \n2018-09-01 22:47:29.048 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:29.048 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 271 -> 272... \n2018-09-01 22:47:29.058 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:29.058 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 272 -> 273... \n2018-09-01 22:47:29.068 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:29.068 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 273 -> 274... \n2018-09-01 22:47:29.265 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:29.265 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 274 -> 275... \n2018-09-01 22:47:29.579 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:29.579 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 275 -> 276... \n2018-09-01 22:47:30.035 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:30.036 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 276 -> 277... \n2018-09-01 22:47:30.134 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:30.135 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 277 -> 278... \n2018-09-01 22:47:30.603 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:30.604 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 278 -> 279... \n2018-09-01 22:47:30.750 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:30.751 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 279 -> 280... \n2018-09-01 22:47:31.086 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:31.086 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 280 -> 281... \n2018-09-01 22:47:31.095 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:31.096 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 281 -> 282... \n2018-09-01 22:47:31.105 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:31.106 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 282 -> 283... \n2018-09-01 22:47:31.117 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:31.117 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 283 -> 284... \n2018-09-01 22:47:31.127 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:31.128 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 284 -> 285... \n2018-09-01 22:47:31.138 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:31.139 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 285 -> 286... \n2018-09-01 22:47:31.148 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:31.148 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 286 -> 287... \n2018-09-01 22:47:31.157 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:31.158 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 287 -> 288... \n2018-09-01 22:47:31.166 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:31.166 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 288 -> 289... \n2018-09-01 22:47:31.175 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:31.175 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 289 -> 290... \n2018-09-01 22:47:31.184 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:31.185 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 290 -> 291... \n2018-09-01 22:47:31.212 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:31.213 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 291 -> 292... \n2018-09-01 22:47:31.708 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:31.708 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 292 -> 293... \n2018-09-01 22:47:32.468 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:32.468 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 293 -> 294... \n2018-09-01 22:47:32.795 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:32.796 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 294 -> 295... \n2018-09-01 22:47:32.907 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:32.908 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 295 -> 296... \n2018-09-01 22:47:32.916 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:32.916 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 296 -> 297... \n2018-09-01 22:47:33.330 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:33.331 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 297 -> 298... \n2018-09-01 22:47:33.580 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:33.580 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 298 -> 299... \n2018-09-01 22:47:33.942 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:33.943 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 299 -> 300... \n2018-09-01 22:47:34.304 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:34.305 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 300 -> 301... \n2018-09-01 22:47:35.166 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:35.167 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 301 -> 302... \n2018-09-01 22:47:35.176 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:35.176 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 302 -> 303... \n2018-09-01 22:47:35.185 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:35.186 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 303 -> 304... \n2018-09-01 22:47:35.195 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:35.195 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 304 -> 305... \n2018-09-01 22:47:35.205 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:35.205 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 305 -> 306... \n2018-09-01 22:47:35.215 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:35.215 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 306 -> 307... \n2018-09-01 22:47:35.225 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:35.226 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 307 -> 308... \n2018-09-01 22:47:35.236 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:35.236 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 308 -> 309... \n2018-09-01 22:47:35.245 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:35.246 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 309 -> 310... \n2018-09-01 22:47:35.256 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:35.256 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 310 -> 311... \n2018-09-01 22:47:35.266 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:35.266 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 311 -> 312... \n2018-09-01 22:47:35.276 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:35.276 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 312 -> 313... \n2018-09-01 22:47:35.755 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:35.756 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 313 -> 314... \n2018-09-01 22:47:37.076 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:37.076 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 314 -> 315... \n2018-09-01 22:47:39.333 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:39.333 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 315 -> 316... \n2018-09-01 22:47:39.677 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:39.678 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 316 -> 317... \n2018-09-01 22:47:40.100 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:40.100 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 317 -> 318... \n2018-09-01 22:47:41.706 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:41.707 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 318 -> 319... \n2018-09-01 22:47:41.829 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:41.829 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 319 -> 320... \n2018-09-01 22:47:41.838 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:41.838 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 320 -> 321... \n2018-09-01 22:47:41.848 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:41.848 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 321 -> 322... \n2018-09-01 22:47:41.857 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:41.857 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 322 -> 323... \n2018-09-01 22:47:41.868 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:41.869 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 323 -> 324... \n2018-09-01 22:47:41.878 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:41.878 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 324 -> 325... \n2018-09-01 22:47:41.887 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:41.887 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 325 -> 326... \n2018-09-01 22:47:41.897 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:41.897 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 326 -> 327... \n2018-09-01 22:47:41.906 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:41.907 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 327 -> 328... \n2018-09-01 22:47:41.916 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:41.916 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 328 -> 329... \n2018-09-01 22:47:41.927 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:41.927 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 329 -> 330... \n2018-09-01 22:47:41.967 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:41.968 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 330 -> 331... \n2018-09-01 22:47:42.713 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:42.714 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 331 -> 332... \n2018-09-01 22:47:43.136 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:43.136 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 332 -> 333... \n2018-09-01 22:47:43.580 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:43.581 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 333 -> 334... \n2018-09-01 22:47:43.963 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:43.963 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 334 -> 335... \n2018-09-01 22:47:43.973 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:43.973 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 335 -> 336... \n2018-09-01 22:47:43.983 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:43.983 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 336 -> 337... \n2018-09-01 22:47:43.993 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:43.993 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 337 -> 338... \n2018-09-01 22:47:44.004 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:44.004 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 338 -> 339... \n2018-09-01 22:47:44.014 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:44.014 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 339 -> 340... \n2018-09-01 22:47:44.024 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:44.024 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 340 -> 341... \n2018-09-01 22:47:44.033 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:44.033 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 341 -> 342... \n2018-09-01 22:47:44.043 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:44.043 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 342 -> 343... \n2018-09-01 22:47:44.052 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:44.052 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 343 -> 344... \n2018-09-01 22:47:44.061 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:44.062 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 344 -> 345... \n2018-09-01 22:47:44.116 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:44.116 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 345 -> 346... \n2018-09-01 22:47:44.647 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:44.648 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 346 -> 347... \n2018-09-01 22:47:44.919 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:44.919 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 347 -> 348... \n2018-09-01 22:47:44.929 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:44.929 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 348 -> 349... \n2018-09-01 22:47:44.939 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:44.939 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 349 -> 350... \n2018-09-01 22:47:44.950 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:44.950 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 350 -> 351... \n2018-09-01 22:47:44.959 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:44.960 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 351 -> 352... \n2018-09-01 22:47:44.969 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:44.969 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 352 -> 353... \n2018-09-01 22:47:44.979 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:44.979 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 353 -> 354... \n2018-09-01 22:47:44.989 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:44.989 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 354 -> 355... \n2018-09-01 22:47:44.999 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:45.000 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 355 -> 356... \n2018-09-01 22:47:45.009 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:45.010 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 356 -> 357... \n2018-09-01 22:47:45.019 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:45.020 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 357 -> 358... \n2018-09-01 22:47:45.450 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:45.451 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 358 -> 359... \n2018-09-01 22:47:45.929 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:45.930 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 359 -> 360... \n2018-09-01 22:47:46.312 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:46.313 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 360 -> 361... \n2018-09-01 22:47:46.388 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:46.388 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 361 -> 362... \n2018-09-01 22:47:46.839 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:46.840 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 362 -> 363... \n2018-09-01 22:47:46.848 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:46.848 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 363 -> 364... \n2018-09-01 22:47:46.856 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:46.857 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 364 -> 365... \n2018-09-01 22:47:46.866 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:46.866 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 365 -> 366... \n2018-09-01 22:47:46.875 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:46.875 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 366 -> 367... \n2018-09-01 22:47:46.884 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:46.884 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 367 -> 368... \n2018-09-01 22:47:46.893 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:46.893 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 368 -> 369... \n2018-09-01 22:47:46.902 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:46.902 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 369 -> 370... \n2018-09-01 22:47:46.911 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:46.911 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 370 -> 371... \n2018-09-01 22:47:46.920 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:46.920 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 371 -> 372... \n2018-09-01 22:47:46.930 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:46.930 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 372 -> 373... \n2018-09-01 22:47:47.479 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:47.480 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 373 -> 374... \n2018-09-01 22:47:47.958 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:47.959 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 374 -> 375... \n2018-09-01 22:47:48.222 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:48.222 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 375 -> 376... \n2018-09-01 22:47:48.306 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:48.307 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 376 -> 377... \n2018-09-01 22:47:48.415 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done\n2018-09-01 22:47:48.416 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] 377 -> 378... \n2018-09-01 22:47:48.553 29384 INFO migrate.versioning.api [req-378f843f-e436-4768-90bd-2d1d66a3f4f2 - - - - -] done'}
2018-09-01 22:47:48,736 [salt.state       :1941][INFO    ][23485] Completed state [nova-manage db sync] at time 22:47:48.736323 duration_in_ms=128014.574
2018-09-01 22:47:48,742 [salt.state       :1770][INFO    ][23485] Running state [/etc/nova/api-paste.ini] at time 22:47:48.742166
2018-09-01 22:47:48,742 [salt.state       :1803][INFO    ][23485] Executing state file.managed for [/etc/nova/api-paste.ini]
2018-09-01 22:47:48,772 [salt.fileclient  :1215][INFO    ][23485] Fetching file from saltenv 'base', ** done ** 'nova/files/queens/api-paste.ini.Debian'
2018-09-01 22:47:48,860 [salt.state       :290 ][INFO    ][23485] File changed:
--- 
+++ 
@@ -36,6 +36,9 @@
 noauth2 = cors http_proxy_to_wsgi compute_req_id faultwrap request_log sizelimit osprofiler noauth2 legacy_v2_compatible osapi_compute_app_v21
 keystone = cors http_proxy_to_wsgi compute_req_id faultwrap request_log sizelimit osprofiler authtoken keystonecontext legacy_v2_compatible osapi_compute_app_v21
 
+[filter:request_id]
+paste.filter_factory = oslo_middleware:RequestId.factory
+
 [filter:request_log]
 paste.filter_factory = nova.api.openstack.requestlog:RequestLog.factory
 
@@ -68,7 +71,6 @@
 
 [app:oscomputeversionapp]
 paste.app_factory = nova.api.openstack.compute.versions:Versions.factory
-
 ##########
 # Shared #
 ##########

2018-09-01 22:47:48,862 [salt.state       :1941][INFO    ][23485] Completed state [/etc/nova/api-paste.ini] at time 22:47:48.862627 duration_in_ms=120.461
2018-09-01 22:47:48,863 [salt.state       :1770][INFO    ][23485] Running state [/etc/default/nova-api] at time 22:47:48.863262
2018-09-01 22:47:48,863 [salt.state       :1803][INFO    ][23485] Executing state file.managed for [/etc/default/nova-api]
2018-09-01 22:47:48,879 [salt.fileclient  :1215][INFO    ][23485] Fetching file from saltenv 'base', ** done ** 'nova/files/default'
2018-09-01 22:47:48,887 [salt.state       :290 ][INFO    ][23485] File changed:
New file
2018-09-01 22:47:48,888 [salt.state       :1941][INFO    ][23485] Completed state [/etc/default/nova-api] at time 22:47:48.887990 duration_in_ms=24.728
2018-09-01 22:47:48,888 [salt.state       :1770][INFO    ][23485] Running state [/etc/default/nova-consoleauth] at time 22:47:48.888683
2018-09-01 22:47:48,889 [salt.state       :1803][INFO    ][23485] Executing state file.managed for [/etc/default/nova-consoleauth]
2018-09-01 22:47:48,906 [salt.state       :290 ][INFO    ][23485] File changed:
New file
2018-09-01 22:47:48,907 [salt.state       :1941][INFO    ][23485] Completed state [/etc/default/nova-consoleauth] at time 22:47:48.907230 duration_in_ms=18.547
2018-09-01 22:47:48,908 [salt.state       :1770][INFO    ][23485] Running state [/etc/default/nova-scheduler] at time 22:47:48.908075
2018-09-01 22:47:48,908 [salt.state       :1803][INFO    ][23485] Executing state file.managed for [/etc/default/nova-scheduler]
2018-09-01 22:47:48,922 [salt.state       :290 ][INFO    ][23485] File changed:
New file
2018-09-01 22:47:48,923 [salt.state       :1941][INFO    ][23485] Completed state [/etc/default/nova-scheduler] at time 22:47:48.923432 duration_in_ms=15.358
2018-09-01 22:47:48,924 [salt.state       :1770][INFO    ][23485] Running state [/etc/default/nova-conductor] at time 22:47:48.924092
2018-09-01 22:47:48,924 [salt.state       :1803][INFO    ][23485] Executing state file.managed for [/etc/default/nova-conductor]
2018-09-01 22:47:48,941 [salt.state       :290 ][INFO    ][23485] File changed:
New file
2018-09-01 22:47:48,942 [salt.state       :1941][INFO    ][23485] Completed state [/etc/default/nova-conductor] at time 22:47:48.942159 duration_in_ms=18.067
2018-09-01 22:47:48,943 [salt.state       :1770][INFO    ][23485] Running state [/etc/default/nova-novncproxy] at time 22:47:48.942998
2018-09-01 22:47:48,943 [salt.state       :1803][INFO    ][23485] Executing state file.managed for [/etc/default/nova-novncproxy]
2018-09-01 22:47:48,958 [salt.state       :290 ][INFO    ][23485] File changed:
New file
2018-09-01 22:47:48,958 [salt.state       :1941][INFO    ][23485] Completed state [/etc/default/nova-novncproxy] at time 22:47:48.958634 duration_in_ms=15.636
2018-09-01 22:47:48,960 [salt.state       :1770][INFO    ][23485] Running state [nova-api] at time 22:47:48.960371
2018-09-01 22:47:48,960 [salt.state       :1803][INFO    ][23485] Executing state service.running for [nova-api]
2018-09-01 22:47:48,961 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'status', 'nova-api.service', '-n', '0'] in directory '/root'
2018-09-01 22:47:48,992 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'is-active', 'nova-api.service'] in directory '/root'
2018-09-01 22:47:49,019 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'is-enabled', 'nova-api.service'] in directory '/root'
2018-09-01 22:47:49,045 [salt.state       :290 ][INFO    ][23485] The service nova-api is already running
2018-09-01 22:47:49,047 [salt.state       :1941][INFO    ][23485] Completed state [nova-api] at time 22:47:49.047007 duration_in_ms=86.635
2018-09-01 22:47:49,048 [salt.state       :1770][INFO    ][23485] Running state [nova-api] at time 22:47:49.048041
2018-09-01 22:47:49,049 [salt.state       :1803][INFO    ][23485] Executing state service.mod_watch for [nova-api]
2018-09-01 22:47:49,051 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'is-active', 'nova-api.service'] in directory '/root'
2018-09-01 22:47:49,075 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'nova-api.service'] in directory '/root'
2018-09-01 22:47:49,935 [salt.state       :290 ][INFO    ][23485] {'nova-api': True}
2018-09-01 22:47:49,936 [salt.state       :1941][INFO    ][23485] Completed state [nova-api] at time 22:47:49.936311 duration_in_ms=888.271
2018-09-01 22:47:49,938 [salt.state       :1770][INFO    ][23485] Running state [nova-consoleauth] at time 22:47:49.938628
2018-09-01 22:47:49,939 [salt.state       :1803][INFO    ][23485] Executing state service.running for [nova-consoleauth]
2018-09-01 22:47:49,940 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'status', 'nova-consoleauth.service', '-n', '0'] in directory '/root'
2018-09-01 22:47:49,963 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'is-active', 'nova-consoleauth.service'] in directory '/root'
2018-09-01 22:47:49,981 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'is-enabled', 'nova-consoleauth.service'] in directory '/root'
2018-09-01 22:47:49,998 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemd-run', '--scope', 'systemctl', 'start', 'nova-consoleauth.service'] in directory '/root'
2018-09-01 22:47:50,034 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'is-active', 'nova-consoleauth.service'] in directory '/root'
2018-09-01 22:47:50,051 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'is-enabled', 'nova-consoleauth.service'] in directory '/root'
2018-09-01 22:47:50,067 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'is-enabled', 'nova-consoleauth.service'] in directory '/root'
2018-09-01 22:47:50,085 [salt.state       :290 ][INFO    ][23485] {'nova-consoleauth': True}
2018-09-01 22:47:50,085 [salt.state       :1941][INFO    ][23485] Completed state [nova-consoleauth] at time 22:47:50.085552 duration_in_ms=146.924
2018-09-01 22:47:50,088 [salt.state       :1770][INFO    ][23485] Running state [nova-scheduler] at time 22:47:50.088815
2018-09-01 22:47:50,089 [salt.state       :1803][INFO    ][23485] Executing state service.running for [nova-scheduler]
2018-09-01 22:47:50,090 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'status', 'nova-scheduler.service', '-n', '0'] in directory '/root'
2018-09-01 22:47:50,110 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'is-active', 'nova-scheduler.service'] in directory '/root'
2018-09-01 22:47:50,130 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'is-enabled', 'nova-scheduler.service'] in directory '/root'
2018-09-01 22:47:50,149 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemd-run', '--scope', 'systemctl', 'start', 'nova-scheduler.service'] in directory '/root'
2018-09-01 22:47:50,181 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'is-active', 'nova-scheduler.service'] in directory '/root'
2018-09-01 22:47:50,201 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'is-enabled', 'nova-scheduler.service'] in directory '/root'
2018-09-01 22:47:50,215 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'is-enabled', 'nova-scheduler.service'] in directory '/root'
2018-09-01 22:47:50,229 [salt.state       :290 ][INFO    ][23485] {'nova-scheduler': True}
2018-09-01 22:47:50,230 [salt.state       :1941][INFO    ][23485] Completed state [nova-scheduler] at time 22:47:50.230193 duration_in_ms=141.377
2018-09-01 22:47:50,232 [salt.state       :1770][INFO    ][23485] Running state [nova-conductor] at time 22:47:50.232221
2018-09-01 22:47:50,232 [salt.state       :1803][INFO    ][23485] Executing state service.running for [nova-conductor]
2018-09-01 22:47:50,233 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'status', 'nova-conductor.service', '-n', '0'] in directory '/root'
2018-09-01 22:47:50,249 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'is-active', 'nova-conductor.service'] in directory '/root'
2018-09-01 22:47:50,262 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'is-enabled', 'nova-conductor.service'] in directory '/root'
2018-09-01 22:47:50,276 [salt.state       :290 ][INFO    ][23485] The service nova-conductor is already running
2018-09-01 22:47:50,277 [salt.state       :1941][INFO    ][23485] Completed state [nova-conductor] at time 22:47:50.277179 duration_in_ms=44.957
2018-09-01 22:47:50,277 [salt.state       :1770][INFO    ][23485] Running state [nova-conductor] at time 22:47:50.277397
2018-09-01 22:47:50,277 [salt.state       :1803][INFO    ][23485] Executing state service.mod_watch for [nova-conductor]
2018-09-01 22:47:50,278 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'is-active', 'nova-conductor.service'] in directory '/root'
2018-09-01 22:47:50,292 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'nova-conductor.service'] in directory '/root'
2018-09-01 22:47:50,900 [salt.state       :290 ][INFO    ][23485] {'nova-conductor': True}
2018-09-01 22:47:50,900 [salt.state       :1941][INFO    ][23485] Completed state [nova-conductor] at time 22:47:50.900501 duration_in_ms=623.104
2018-09-01 22:47:50,902 [salt.state       :1770][INFO    ][23485] Running state [nova-novncproxy] at time 22:47:50.902837
2018-09-01 22:47:50,903 [salt.state       :1803][INFO    ][23485] Executing state service.running for [nova-novncproxy]
2018-09-01 22:47:50,905 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'status', 'nova-novncproxy.service', '-n', '0'] in directory '/root'
2018-09-01 22:47:50,922 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'is-active', 'nova-novncproxy.service'] in directory '/root'
2018-09-01 22:47:50,940 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'is-enabled', 'nova-novncproxy.service'] in directory '/root'
2018-09-01 22:47:50,975 [salt.state       :290 ][INFO    ][23485] The service nova-novncproxy is already running
2018-09-01 22:47:50,976 [salt.state       :1941][INFO    ][23485] Completed state [nova-novncproxy] at time 22:47:50.976047 duration_in_ms=73.21
2018-09-01 22:47:50,976 [salt.state       :1770][INFO    ][23485] Running state [nova-novncproxy] at time 22:47:50.976301
2018-09-01 22:47:50,976 [salt.state       :1803][INFO    ][23485] Executing state service.mod_watch for [nova-novncproxy]
2018-09-01 22:47:50,977 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'is-active', 'nova-novncproxy.service'] in directory '/root'
2018-09-01 22:47:50,993 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'nova-novncproxy.service'] in directory '/root'
2018-09-01 22:47:51,114 [salt.state       :290 ][INFO    ][23485] {'nova-novncproxy': True}
2018-09-01 22:47:51,115 [salt.state       :1941][INFO    ][23485] Completed state [nova-novncproxy] at time 22:47:51.115274 duration_in_ms=138.972
2018-09-01 22:47:51,116 [salt.state       :1770][INFO    ][23485] Running state [nova-manage db online_data_migrations] at time 22:47:51.116583
2018-09-01 22:47:51,116 [salt.state       :1803][INFO    ][23485] Executing state cmd.run for [nova-manage db online_data_migrations]
2018-09-01 22:47:51,117 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command '/bin/true' in directory '/root'
2018-09-01 22:47:51,277 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command 'nova-manage db online_data_migrations' in directory '/root'
2018-09-01 22:47:53,826 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224753817643
2018-09-01 22:47:53,864 [salt.minion      :1431][INFO    ][32170] Starting a new job with PID 32170
2018-09-01 22:47:53,891 [salt.minion      :1708][INFO    ][32170] Returning information for job: 20180901224753817643
2018-09-01 22:47:54,608 [salt.state       :290 ][INFO    ][23485] {'pid': 32130, 'retcode': 0, 'stderr': "/usr/lib/python2.7/dist-packages/oslo_db/sqlalchemy/enginefacade.py:332: NotSupportedWarning: Configuration option(s) ['use_tpool'] not supported\n  exception.NotSupportedWarning", 'stdout': 'Running batches of 50 until complete\n+---------------------------------------------+--------------+-----------+\n|                  Migration                  | Total Needed | Completed |\n+---------------------------------------------+--------------+-----------+\n| delete_build_requests_with_no_instance_uuid |      0       |     0     |\n|    migrate_aggregate_reset_autoincrement    |      0       |     0     |\n|              migrate_aggregates             |      0       |     0     |\n|      migrate_instance_groups_to_api_db      |      0       |     0     |\n|      migrate_instances_add_request_spec     |      0       |     0     |\n|          migrate_keypairs_to_api_db         |      0       |     0     |\n|       migrate_quota_classes_to_api_db       |      0       |     0     |\n|        migrate_quota_limits_to_api_db       |      0       |     0     |\n|          migration_migrate_to_uuid          |      0       |     0     |\n|     populate_missing_availability_zones     |      0       |     0     |\n|                populate_uuids               |      0       |     0     |\n|     service_uuids_online_data_migration     |      0       |     0     |\n+---------------------------------------------+--------------+-----------+'}
2018-09-01 22:47:54,608 [salt.state       :1941][INFO    ][23485] Completed state [nova-manage db online_data_migrations] at time 22:47:54.608530 duration_in_ms=3491.946
2018-09-01 22:47:54,609 [salt.state       :1770][INFO    ][23485] Running state [/etc/systemd/system/nova-placement-api.service] at time 22:47:54.608990
2018-09-01 22:47:54,609 [salt.state       :1803][INFO    ][23485] Executing state file.symlink for [/etc/systemd/system/nova-placement-api.service]
2018-09-01 22:47:54,610 [salt.state       :290 ][INFO    ][23485] {'new': '/etc/systemd/system/nova-placement-api.service'}
2018-09-01 22:47:54,610 [salt.state       :1941][INFO    ][23485] Completed state [/etc/systemd/system/nova-placement-api.service] at time 22:47:54.610943 duration_in_ms=1.952
2018-09-01 22:47:54,612 [salt.state       :1770][INFO    ][23485] Running state [nova-placement-api] at time 22:47:54.612026
2018-09-01 22:47:54,612 [salt.state       :1803][INFO    ][23485] Executing state pkg.installed for [nova-placement-api]
2018-09-01 22:47:54,634 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 22:47:54,665 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'nova-placement-api'] in directory '/root'
2018-09-01 22:47:57,360 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:47:57,417 [salt.state       :290 ][INFO    ][23485] Made the following changes:
'nova-placement-api' changed from 'absent' to '2:17.0.5-5~u16.04+mcp142'

2018-09-01 22:47:57,437 [salt.state       :905 ][INFO    ][23485] Loading fresh modules for state activity
2018-09-01 22:47:57,462 [salt.state       :1941][INFO    ][23485] Completed state [nova-placement-api] at time 22:47:57.462316 duration_in_ms=2850.289
2018-09-01 22:47:57,466 [salt.state       :1770][INFO    ][23485] Running state [/etc/apache2/sites-available/nova-placement-api.conf] at time 22:47:57.466203
2018-09-01 22:47:57,466 [salt.state       :1803][INFO    ][23485] Executing state file.managed for [/etc/apache2/sites-available/nova-placement-api.conf]
2018-09-01 22:47:57,490 [salt.fileclient  :1215][INFO    ][23485] Fetching file from saltenv 'base', ** done ** 'nova/files/queens/nova-placement-api.conf'
2018-09-01 22:47:57,581 [salt.state       :290 ][INFO    ][23485] File changed:
--- 
+++ 
@@ -1,6 +1,7 @@
-Listen 8778
 
-<VirtualHost *:8778>
+Listen 10.167.4.37:8778
+
+<VirtualHost 10.167.4.37:8778>
     WSGIScriptAlias / /usr/bin/nova-placement-api
     WSGIDaemonProcess nova-placement processes=5 threads=1 user=nova group=nova display-name=%{GROUP}
     WSGIProcessGroup nova-placement
@@ -13,7 +14,7 @@
     </IfVersion>
 
     ErrorLog /var/log/apache2/nova_placement_error.log
-    CustomLog /var/log/apache2/nova_placement_access.log combined
+    CustomLog /var/log/apache2/nova_placement_access.log "%v:%p %h %l %u %t \"%r\" %>s %D %O \"%{Referer}i\" \"%{User-Agent}i\""
 
     <Directory /usr/bin>
         <IfVersion >= 2.4>

2018-09-01 22:47:57,581 [salt.state       :1941][INFO    ][23485] Completed state [/etc/apache2/sites-available/nova-placement-api.conf] at time 22:47:57.581467 duration_in_ms=115.264
2018-09-01 22:47:57,595 [salt.state       :1770][INFO    ][23485] Running state [nova-placement-api] at time 22:47:57.595864
2018-09-01 22:47:57,596 [salt.state       :1803][INFO    ][23485] Executing state apache_site.enabled for [nova-placement-api]
2018-09-01 22:47:57,599 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['a2ensite', 'nova-placement-api'] in directory '/root'
2018-09-01 22:47:57,647 [salt.state       :290 ][INFO    ][23485] {'new': 'nova-placement-api', 'old': None}
2018-09-01 22:47:57,648 [salt.state       :1941][INFO    ][23485] Completed state [nova-placement-api] at time 22:47:57.648436 duration_in_ms=52.572
2018-09-01 22:47:57,650 [salt.state       :1770][INFO    ][23485] Running state [nova-manage cell_v2 discover_hosts --verbose] at time 22:47:57.650905
2018-09-01 22:47:57,651 [salt.state       :1803][INFO    ][23485] Executing state cmd.run for [nova-manage cell_v2 discover_hosts --verbose]
2018-09-01 22:47:57,652 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command 'nova-manage cell_v2 discover_hosts --verbose' in directory '/root'
2018-09-01 22:48:00,173 [salt.state       :290 ][INFO    ][23485] {'pid': 32276, 'retcode': 0, 'stderr': "/usr/lib/python2.7/dist-packages/oslo_db/sqlalchemy/enginefacade.py:332: NotSupportedWarning: Configuration option(s) ['use_tpool'] not supported\n  exception.NotSupportedWarning", 'stdout': "Found 2 cell mappings.\nSkipping cell0 since it does not contain hosts.\nGetting computes from cell 'cell1': aae4085b-1719-43f4-8f7f-6d1f6d954b3e\nFound 0 unmapped computes in cell: aae4085b-1719-43f4-8f7f-6d1f6d954b3e"}
2018-09-01 22:48:00,173 [salt.state       :1941][INFO    ][23485] Completed state [nova-manage cell_v2 discover_hosts --verbose] at time 22:48:00.173535 duration_in_ms=2522.629
2018-09-01 22:48:00,179 [salt.state       :1770][INFO    ][23485] Running state [cell1] at time 22:48:00.179871
2018-09-01 22:48:00,180 [salt.state       :1803][INFO    ][23485] Executing state novang.map_instances for [cell1]
2018-09-01 22:48:00,180 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command 'nova-manage cell_v2 list_cells 2>/dev/null | awk '/cell1/ {print $4}'' in directory '/root'
2018-09-01 22:48:02,557 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command 'nova-manage cell_v2 map_instances --cell_uuid aae4085b-1719-43f4-8f7f-6d1f6d954b3e' in directory '/root'
2018-09-01 22:48:03,849 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901224803840225
2018-09-01 22:48:03,870 [salt.minion      :1431][INFO    ][32315] Starting a new job with PID 32315
2018-09-01 22:48:03,891 [salt.minion      :1708][INFO    ][32315] Returning information for job: 20180901224803840225
2018-09-01 22:48:05,059 [salt.state       :290 ][INFO    ][23485] {'Instances': 'Mapped to cell named cell1'}
2018-09-01 22:48:05,060 [salt.state       :1941][INFO    ][23485] Completed state [cell1] at time 22:48:05.059920 duration_in_ms=4880.047
2018-09-01 22:48:05,595 [salt.state       :1770][INFO    ][23485] Running state [apache2] at time 22:48:05.595786
2018-09-01 22:48:05,596 [salt.state       :1803][INFO    ][23485] Executing state service.running for [apache2]
2018-09-01 22:48:05,596 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-09-01 22:48:05,618 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-09-01 22:48:05,649 [salt.state       :290 ][INFO    ][23485] The service apache2 is already running
2018-09-01 22:48:05,650 [salt.state       :1941][INFO    ][23485] Completed state [apache2] at time 22:48:05.650078 duration_in_ms=54.291
2018-09-01 22:48:05,650 [salt.state       :1770][INFO    ][23485] Running state [apache2] at time 22:48:05.650535
2018-09-01 22:48:05,651 [salt.state       :1803][INFO    ][23485] Executing state service.mod_watch for [apache2]
2018-09-01 22:48:05,652 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-09-01 22:48:05,672 [salt.loaded.int.module.cmdmod:395 ][INFO    ][23485] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'apache2.service'] in directory '/root'
2018-09-01 22:48:07,977 [salt.state       :290 ][INFO    ][23485] {'apache2': True}
2018-09-01 22:48:07,977 [salt.state       :1941][INFO    ][23485] Completed state [apache2] at time 22:48:07.977489 duration_in_ms=2326.954
2018-09-01 22:48:07,983 [salt.minion      :1708][INFO    ][23485] Returning information for job: 20180901224324656990
2018-09-01 22:52:23,437 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command test.ping with jid 20180901225223428664
2018-09-01 22:52:23,462 [salt.minion      :1431][INFO    ][32687] Starting a new job with PID 32687
2018-09-01 22:52:23,485 [salt.minion      :1708][INFO    ][32687] Returning information for job: 20180901225223428664
2018-09-01 22:52:23,615 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command state.sls with jid 20180901225223604824
2018-09-01 22:52:23,640 [salt.minion      :1431][INFO    ][32692] Starting a new job with PID 32692
2018-09-01 22:52:27,810 [salt.state       :905 ][INFO    ][32692] Loading fresh modules for state activity
2018-09-01 22:52:27,856 [salt.fileclient  :1215][INFO    ][32692] Fetching file from saltenv 'base', ** done ** 'heat/init.sls'
2018-09-01 22:52:27,885 [salt.fileclient  :1215][INFO    ][32692] Fetching file from saltenv 'base', ** done ** 'heat/server.sls'
2018-09-01 22:52:27,995 [salt.fileclient  :1215][INFO    ][32692] Fetching file from saltenv 'base', ** done ** 'heat/db/offline_sync.sls'
2018-09-01 22:52:28,721 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901225228708118
2018-09-01 22:52:28,749 [salt.minion      :1431][INFO    ][32708] Starting a new job with PID 32708
2018-09-01 22:52:28,770 [salt.minion      :1708][INFO    ][32708] Returning information for job: 20180901225228708118
2018-09-01 22:52:29,031 [salt.state       :1770][INFO    ][32692] Running state [heat-api] at time 22:52:29.031367
2018-09-01 22:52:29,031 [salt.state       :1803][INFO    ][32692] Executing state pkg.installed for [heat-api]
2018-09-01 22:52:29,032 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:52:29,403 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['apt-cache', '-q', 'policy', 'heat-api'] in directory '/root'
2018-09-01 22:52:29,527 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-09-01 22:52:31,608 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 22:52:31,637 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'heat-api'] in directory '/root'
2018-09-01 22:52:38,877 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901225238866668
2018-09-01 22:52:38,906 [salt.minion      :1431][INFO    ][727] Starting a new job with PID 727
2018-09-01 22:52:38,944 [salt.minion      :1708][INFO    ][727] Returning information for job: 20180901225238866668
2018-09-01 22:52:49,056 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901225249044882
2018-09-01 22:52:49,075 [salt.minion      :1431][INFO    ][1182] Starting a new job with PID 1182
2018-09-01 22:52:49,091 [salt.minion      :1708][INFO    ][1182] Returning information for job: 20180901225249044882
2018-09-01 22:52:56,857 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:52:56,916 [salt.state       :290 ][INFO    ][32692] Made the following changes:
'python-magnumclient' changed from 'absent' to '2.8.0-1.0~u16.04+mcp1'
'python-octaviaclient' changed from 'absent' to '1.4.0-2.0~u16.04+mcp5'
'python-zunclient' changed from 'absent' to '1.1.0-1.0~u16.04+mcp1'
'python-heatclient' changed from 'absent' to '1.14.0-1.0~u16.04+mcp4'
'python-manilaclient' changed from 'absent' to '1.21.1-1.0~u16.04+mcp6'
'python-websocket' changed from 'absent' to '0.44.0-1.0~u16.04+mcp1'
'python-zaqarclient' changed from 'absent' to '1.9.0-1.0~u16.04+mcp2'
'python-gnocchiclient' changed from 'absent' to '7.0.2-1~u16.04+mcp0'
'python-senlinclient' changed from 'absent' to '1.7.0-1.0~u16.04+mcp2'
'python-ujson' changed from 'absent' to '1.35-2~cloud0'
'python-aodhclient' changed from 'absent' to '0.9.0-1~u16.04+mcp4'
'python-croniter' changed from 'absent' to '0.3.8-1'
'python-monascaclient' changed from 'absent' to '1.10.0-1.0~u16.04+mcp6'
'python-yaql' changed from 'absent' to '1.1.3-2~u16.04+mcp1'
'python-backports.ssl-match-hostname' changed from 'absent' to '3.5.0.1-1~cloud0'
'python-mistralclient' changed from 'absent' to '1:3.3.0-1.0~u16.04+mcp1'
'heat-common' changed from 'absent' to '1:10.0.1-1.0~u16.04+mcp45'
'python-manilaclient-doc' changed from 'absent' to '1.21.1-1.0~u16.04+mcp6'
'python-docker' changed from 'absent' to '1.9.0-1~cloud0'
'python-designateclient' changed from 'absent' to '2.9.0-1.0~u16.04+mcp4'
'python-troveclient' changed from 'absent' to '1:2.14.0-1.0~u16.04+mcp2'
'python-heat' changed from 'absent' to '1:10.0.1-1.0~u16.04+mcp45'
'python-saharaclient' changed from 'absent' to '1.5.0-1.0~u16.04+mcp1'
'heat-api' changed from 'absent' to '1:10.0.1-1.0~u16.04+mcp45'
'python-swiftclient' changed from 'absent' to '1:3.4.0-1~u16.04+mcp2'

2018-09-01 22:52:56,944 [salt.state       :905 ][INFO    ][32692] Loading fresh modules for state activity
2018-09-01 22:52:56,968 [salt.state       :1941][INFO    ][32692] Completed state [heat-api] at time 22:52:56.968881 duration_in_ms=27937.514
2018-09-01 22:52:56,973 [salt.state       :1770][INFO    ][32692] Running state [heat-api-cfn] at time 22:52:56.972998
2018-09-01 22:52:56,973 [salt.state       :1803][INFO    ][32692] Executing state pkg.installed for [heat-api-cfn]
2018-09-01 22:52:57,544 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 22:52:57,578 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'heat-api-cfn'] in directory '/root'
2018-09-01 22:52:59,196 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901225259187011
2018-09-01 22:52:59,218 [salt.minion      :1431][INFO    ][1623] Starting a new job with PID 1623
2018-09-01 22:52:59,238 [salt.minion      :1708][INFO    ][1623] Returning information for job: 20180901225259187011
2018-09-01 22:53:01,759 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:53:01,811 [salt.state       :290 ][INFO    ][32692] Made the following changes:
'heat-api-cfn' changed from 'absent' to '1:10.0.1-1.0~u16.04+mcp45'

2018-09-01 22:53:01,831 [salt.state       :905 ][INFO    ][32692] Loading fresh modules for state activity
2018-09-01 22:53:01,874 [salt.state       :1941][INFO    ][32692] Completed state [heat-api-cfn] at time 22:53:01.874844 duration_in_ms=4901.846
2018-09-01 22:53:01,878 [salt.state       :1770][INFO    ][32692] Running state [heat-engine] at time 22:53:01.878956
2018-09-01 22:53:01,879 [salt.state       :1803][INFO    ][32692] Executing state pkg.installed for [heat-engine]
2018-09-01 22:53:02,399 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 22:53:02,433 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'heat-engine'] in directory '/root'
2018-09-01 22:53:06,258 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:53:06,308 [salt.state       :290 ][INFO    ][32692] Made the following changes:
'heat-engine' changed from 'absent' to '1:10.0.1-1.0~u16.04+mcp45'

2018-09-01 22:53:06,329 [salt.state       :905 ][INFO    ][32692] Loading fresh modules for state activity
2018-09-01 22:53:06,460 [salt.state       :1941][INFO    ][32692] Completed state [heat-engine] at time 22:53:06.460006 duration_in_ms=4581.048
2018-09-01 22:53:06,467 [salt.state       :1770][INFO    ][32692] Running state [heat-common] at time 22:53:06.467714
2018-09-01 22:53:06,468 [salt.state       :1803][INFO    ][32692] Executing state pkg.installed for [heat-common]
2018-09-01 22:53:06,979 [salt.state       :290 ][INFO    ][32692] All specified packages are already installed
2018-09-01 22:53:06,979 [salt.state       :1941][INFO    ][32692] Completed state [heat-common] at time 22:53:06.979609 duration_in_ms=511.894
2018-09-01 22:53:06,980 [salt.state       :1770][INFO    ][32692] Running state [python-heatclient] at time 22:53:06.980012
2018-09-01 22:53:06,980 [salt.state       :1803][INFO    ][32692] Executing state pkg.installed for [python-heatclient]
2018-09-01 22:53:06,985 [salt.state       :290 ][INFO    ][32692] All specified packages are already installed
2018-09-01 22:53:06,986 [salt.state       :1941][INFO    ][32692] Completed state [python-heatclient] at time 22:53:06.986210 duration_in_ms=6.198
2018-09-01 22:53:06,986 [salt.state       :1770][INFO    ][32692] Running state [gettext-base] at time 22:53:06.986537
2018-09-01 22:53:06,986 [salt.state       :1803][INFO    ][32692] Executing state pkg.installed for [gettext-base]
2018-09-01 22:53:06,991 [salt.state       :290 ][INFO    ][32692] All specified packages are already installed
2018-09-01 22:53:06,992 [salt.state       :1941][INFO    ][32692] Completed state [gettext-base] at time 22:53:06.992106 duration_in_ms=5.568
2018-09-01 22:53:06,997 [salt.state       :1770][INFO    ][32692] Running state [/etc/heat/heat.conf] at time 22:53:06.996981
2018-09-01 22:53:06,997 [salt.state       :1803][INFO    ][32692] Executing state file.managed for [/etc/heat/heat.conf]
2018-09-01 22:53:07,066 [salt.fileclient  :1215][INFO    ][32692] Fetching file from saltenv 'base', ** done ** 'heat/files/queens/heat.conf.Debian'
2018-09-01 22:53:07,263 [salt.fileclient  :1215][INFO    ][32692] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/queens/oslo/service/_ssl.conf'
2018-09-01 22:53:07,297 [salt.state       :290 ][INFO    ][32692] File changed:
--- 
+++ 
@@ -1,4 +1,209 @@
+
+
 [DEFAULT]
+#
+# From oslo.messaging
+#
+
+# Size of RPC connection pool. (integer value)
+#rpc_conn_pool_size = 30
+
+# The pool size limit for connections expiration policy (integer
+# value)
+#conn_pool_min_size = 2
+
+# The time-to-live in sec of idle connections in the pool (integer
+# value)
+#conn_pool_ttl = 1200
+
+# ZeroMQ bind address. Should be a wildcard (*), an ethernet
+# interface, or IP. The "host" option should point or resolve to this
+# address. (string value)
+#rpc_zmq_bind_address = *
+
+# MatchMaker driver. (string value)
+# Possible values:
+# redis - <No description provided>
+# sentinel - <No description provided>
+# dummy - <No description provided>
+#rpc_zmq_matchmaker = redis
+
+# Number of ZeroMQ contexts, defaults to 1. (integer value)
+#rpc_zmq_contexts = 1
+
+# Maximum number of ingress messages to locally buffer per topic.
+# Default is unlimited. (integer value)
+#rpc_zmq_topic_backlog = <None>
+
+# Directory for holding IPC sockets. (string value)
+#rpc_zmq_ipc_dir = /var/run/openstack
+
+# Name of this node. Must be a valid hostname, FQDN, or IP address.
+# Must match "host" option, if running Nova. (string value)
+#rpc_zmq_host = localhost
+
+# Number of seconds to wait before all pending messages will be sent
+# after closing a socket. The default value of -1 specifies an
+# infinite linger period. The value of 0 specifies no linger period.
+# Pending messages shall be discarded immediately when the socket is
+# closed. Positive values specify an upper bound for the linger
+# period. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_cast_timeout
+#zmq_linger = -1
+
+# The default number of seconds that poll should wait. Poll raises
+# timeout exception when timeout expired. (integer value)
+#rpc_poll_timeout = 1
+
+# Expiration timeout in seconds of a name service record about
+# existing target ( < 0 means no timeout). (integer value)
+#zmq_target_expire = 300
+
+# Update period in seconds of a name service record about existing
+# target. (integer value)
+#zmq_target_update = 180
+
+# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy.
+# (boolean value)
+#use_pub_sub = false
+
+# Use ROUTER remote proxy. (boolean value)
+#use_router_proxy = false
+
+# This option makes direct connections dynamic or static. It makes
+# sense only with use_router_proxy=False which means to use direct
+# connections for direct message types (ignored otherwise). (boolean
+# value)
+#use_dynamic_connections = false
+
+# How many additional connections to a host will be made for failover
+# reasons. This option is actual only in dynamic connections mode.
+# (integer value)
+#zmq_failover_connections = 2
+
+# Minimal port number for random ports range. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#rpc_zmq_min_port = 49153
+
+# Maximal port number for random ports range. (integer value)
+# Minimum value: 1
+# Maximum value: 65536
+#rpc_zmq_max_port = 65536
+
+# Number of retries to find free port number before fail with
+# ZMQBindError. (integer value)
+#rpc_zmq_bind_port_retries = 100
+
+# Default serialization mechanism for serializing/deserializing
+# outgoing/incoming messages (string value)
+# Possible values:
+# json - <No description provided>
+# msgpack - <No description provided>
+#rpc_zmq_serialization = json
+
+# This option configures round-robin mode in zmq socket. True means
+# not keeping a queue when server side disconnects. False means to
+# keep queue and messages even if server is disconnected, when the
+# server appears we send all accumulated messages to it. (boolean
+# value)
+#zmq_immediate = true
+
+# Enable/disable TCP keepalive (KA) mechanism. The default value of -1
+# (or any other negative value) means to skip any overrides and leave
+# it to OS default; 0 and 1 (or any other positive value) mean to
+# disable and enable the option respectively. (integer value)
+#zmq_tcp_keepalive = -1
+
+# The duration between two keepalive transmissions in idle condition.
+# The unit is platform dependent, for example, seconds in Linux,
+# milliseconds in Windows etc. The default value of -1 (or any other
+# negative value and 0) means to skip any overrides and leave it to OS
+# default. (integer value)
+#zmq_tcp_keepalive_idle = -1
+
+# The number of retransmissions to be carried out before declaring
+# that remote end is not available. The default value of -1 (or any
+# other negative value and 0) means to skip any overrides and leave it
+# to OS default. (integer value)
+#zmq_tcp_keepalive_cnt = -1
+
+# The duration between two successive keepalive retransmissions, if
+# acknowledgement to the previous keepalive transmission is not
+# received. The unit is platform dependent, for example, seconds in
+# Linux, milliseconds in Windows etc. The default value of -1 (or any
+# other negative value and 0) means to skip any overrides and leave it
+# to OS default. (integer value)
+#zmq_tcp_keepalive_intvl = -1
+
+# Maximum number of (green) threads to work concurrently. (integer
+# value)
+#rpc_thread_pool_size = 100
+
+# Expiration timeout in seconds of a sent/received message after which
+# it is not tracked anymore by a client/server. (integer value)
+#rpc_message_ttl = 300
+
+# Wait for message acknowledgements from receivers. This mechanism
+# works only via proxy without PUB/SUB. (boolean value)
+#rpc_use_acks = false
+
+# Number of seconds to wait for an ack from a cast/call. After each
+# retry attempt this timeout is multiplied by some specified
+# multiplier. (integer value)
+#rpc_ack_timeout_base = 15
+
+# Number to multiply base ack timeout by after each retry attempt.
+# (integer value)
+#rpc_ack_timeout_multiplier = 2
+
+# Default number of message sending attempts in case of any problems
+# occurred: positive value N means at most N retries, 0 means no
+# retries, None or -1 (or any other negative values) mean to retry
+# forever. This option is used only if acknowledgments are enabled.
+# (integer value)
+#rpc_retry_attempts = 3
+
+# List of publisher hosts SubConsumer can subscribe on. This option
+# has higher priority then the default publishers list taken from the
+# matchmaker. (list value)
+#subscribe_on =
+
+# Size of executor thread pool when executor is threading or eventlet.
+# (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_thread_pool_size
+#executor_thread_pool_size = 64
+
+# Seconds to wait for a response from a call. (integer value)
+#rpc_response_timeout = 60
+rpc_response_timeout = 600
+
+# The network address and optional user credentials for connecting to
+# the messaging backend, in URL format. The expected format is:
+#
+# driver://[user:pass@]host:port[,[userN:passN@]hostN:portN]/virtual_host?query
+#
+# Example: rabbit://rabbitmq:password@127.0.0.1:5672//
+#
+# For full details on the fields in the URL see the documentation of
+# oslo_messaging.TransportURL at
+# https://docs.openstack.org/oslo.messaging/latest/reference/transport.html
+# (string value)
+#transport_url = <None>
+transport_url = rabbit://openstack:opnfv_secret@10.167.4.28:5672,openstack:opnfv_secret@10.167.4.29:5672,openstack:opnfv_secret@10.167.4.30:5672//openstack
+
+# DEPRECATED: The messaging driver to use, defaults to rabbit. Other
+# drivers include amqp and zmq. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rpc_backend = rabbit
+
+# The default exchange under which topics are scoped. May be
+# overridden by an exchange name specified in the transport_url
+# option. (string value)
+#control_exchange = openstack
+
 
 #
 # From heat.common.config
@@ -42,7 +247,7 @@
 
 # Maximum resources allowed per top-level stack. -1 stands for unlimited.
 # (integer value)
-#max_resources_per_stack = 1000
+max_resources_per_stack = 20000
 
 # Maximum number of stacks any one tenant may have active at one time. (integer
 # value)
@@ -182,18 +387,20 @@
 # require instances to use a different endpoint than in the keystone catalog
 # (string value)
 #heat_metadata_server_url = <None>
+heat_metadata_server_url = http://10.167.4.13:8000
 
 # URL of the Heat waitcondition server. (string value)
 #heat_waitcondition_server_url = <None>
+heat_waitcondition_server_url = http://10.167.4.13:8000/v1/waitcondition
 
 # DEPRECATED: URL of the Heat CloudWatch server. (string value)
 # This option is deprecated for removal since 10.0.0.
 # Its value may be silently ignored in the future.
 # Reason: Heat CloudWatch Service has been removed.
-#heat_watch_server_url =
+#heat_watch_server_url = http://10.167.4.13:8003
 
 # Instance connection to CFN/CW API via https. (string value)
-#instance_connection_is_secure = 0
+instance_connection_is_secure = 0
 
 # Instance connection to CFN/CW API validate certs if SSL is used. (string
 # value)
@@ -201,6 +408,7 @@
 
 # Default region name used to get services endpoints. (string value)
 #region_name_for_services = <None>
+region_name_for_services = RegionOne
 
 # Keystone role for heat template-defined users. (string value)
 #heat_stack_user_role = heat_stack_user
@@ -212,17 +420,19 @@
 
 # Keystone domain name which contains heat template-defined users. If
 # `stack_user_domain_id` option is set, this option is ignored. (string value)
-#stack_user_domain_name = <None>
+stack_user_domain_name = heat_user_domain
 
 # Keystone username, a user with roles sufficient to manage users and projects
 # in the stack_user_domain. (string value)
 #stack_domain_admin = <None>
+stack_domain_admin = heat_domain_admin
 
 # Keystone password for stack_domain_admin user. (string value)
 #stack_domain_admin_password = <None>
+stack_domain_admin_password = opnfv_secret
 
 # Maximum raw byte size of any template. (integer value)
-#max_template_size = 524288
+max_template_size = 5440000 
 
 # Maximum depth allowed when using nested stacks. (integer value)
 #max_nested_stack_depth = 5
@@ -237,7 +447,6 @@
 
 # Key used to encrypt authentication info in the database. Length of this key
 # must be 32 characters. (string value)
-#auth_encryption_key = notgood but just long enough i t
 
 #
 # From heat.common.wsgi
@@ -245,7 +454,7 @@
 
 # Maximum raw byte size of JSON request body. Should be larger than
 # max_template_size. (integer value)
-#max_json_body_size = 1048576
+max_json_body_size = 10880000
 
 #
 # From heat.engine.clients
@@ -277,343 +486,122 @@
 
 # Custom template for the built-in loadbalancer nested stack. (string value)
 #loadbalancer_template = <None>
-
 #
 # From oslo.log
 #
 
-# If set to true, the logging level will be set to DEBUG instead of the default
-# INFO level. (boolean value)
+# If set to true, the logging level will be set to DEBUG instead of
+# the default INFO level. (boolean value)
 # Note: This option can be changed without restarting.
 #debug = false
 
-# The name of a logging configuration file. This file is appended to any
-# existing logging configuration files. For details about logging configuration
-# files, see the Python logging module documentation. Note that when logging
-# configuration files are used then all logging configuration is set in the
-# configuration file and other logging configuration options are ignored (for
-# example, logging_context_format_string). (string value)
+# The name of a logging configuration file. This file is appended to
+# any existing logging configuration files. For details about logging
+# configuration files, see the Python logging module documentation.
+# Note that when logging configuration files are used then all logging
+# configuration is set in the configuration file and other logging
+# configuration options are ignored (for example,
+# logging_context_format_string). (string value)
 # Note: This option can be changed without restarting.
 # Deprecated group/name - [DEFAULT]/log_config
-#log_config_append = <None>
 
 # Defines the format string for %%(asctime)s in log records. Default:
-# %(default)s . This option is ignored if log_config_append is set. (string
-# value)
+# %(default)s . This option is ignored if log_config_append is set.
+# (string value)
 #log_date_format = %Y-%m-%d %H:%M:%S
 
-# (Optional) Name of log file to send logging output to. If no default is set,
-# logging will go to stderr as defined by use_stderr. This option is ignored if
-# log_config_append is set. (string value)
+# (Optional) Name of log file to send logging output to. If no default
+# is set, logging will go to stderr as defined by use_stderr. This
+# option is ignored if log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logfile
 #log_file = <None>
-
-# (Optional) The base directory used for relative log_file  paths. This option
-# is ignored if log_config_append is set. (string value)
+log_file = /var/log/heat/heat.log
+
+# (Optional) The base directory used for relative log_file  paths.
+# This option is ignored if log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logdir
 #log_dir = <None>
 
-# Uses logging handler designed to watch file system. When log file is moved or
-# removed this handler will open a new log file with specified path
-# instantaneously. It makes sense only if log_file option is specified and
-# Linux platform is used. This option is ignored if log_config_append is set.
+# Uses logging handler designed to watch file system. When log file is
+# moved or removed this handler will open a new log file with
+# specified path instantaneously. It makes sense only if log_file
+# option is specified and Linux platform is used. This option is
+# ignored if log_config_append is set. (boolean value)
+#watch_log_file = false
+
+# Use syslog for logging. Existing syslog format is DEPRECATED and
+# will be changed later to honor RFC5424. This option is ignored if
+# log_config_append is set. (boolean value)
+#use_syslog = false
+
+# Enable journald for logging. If running in a systemd environment you
+# may wish to enable journal support. Doing so will use the journal
+# native protocol which includes structured metadata in addition to
+# log messages.This option is ignored if log_config_append is set.
 # (boolean value)
-#watch_log_file = false
-
-# Use syslog for logging. Existing syslog format is DEPRECATED and will be
-# changed later to honor RFC5424. This option is ignored if log_config_append
-# is set. (boolean value)
-#use_syslog = false
-
-# Enable journald for logging. If running in a systemd environment you may wish
-# to enable journal support. Doing so will use the journal native protocol
-# which includes structured metadata in addition to log messages.This option is
-# ignored if log_config_append is set. (boolean value)
 #use_journal = false
 
 # Syslog facility to receive log lines. This option is ignored if
 # log_config_append is set. (string value)
 #syslog_log_facility = LOG_USER
 
-# Use JSON formatting for logging. This option is ignored if log_config_append
-# is set. (boolean value)
+# Use JSON formatting for logging. This option is ignored if
+# log_config_append is set. (boolean value)
 #use_json = false
 
-# Log output to standard error. This option is ignored if log_config_append is
-# set. (boolean value)
+# Log output to standard error. This option is ignored if
+# log_config_append is set. (boolean value)
 #use_stderr = false
 
 # Format string to use for log messages with context. (string value)
 #logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
 
-# Format string to use for log messages when context is undefined. (string
-# value)
+# Format string to use for log messages when context is undefined.
+# (string value)
 #logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
 
-# Additional data to append to log message when logging level for the message
-# is DEBUG. (string value)
+# Additional data to append to log message when logging level for the
+# message is DEBUG. (string value)
 #logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
 
-# Prefix each line of exception output with this format. (string value)
+# Prefix each line of exception output with this format. (string
+# value)
 #logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
 
 # Defines the format string for %(user_identity)s that is used in
 # logging_context_format_string. (string value)
 #logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
 
-# List of package logging levels in logger=LEVEL pairs. This option is ignored
-# if log_config_append is set. (list value)
+# List of package logging levels in logger=LEVEL pairs. This option is
+# ignored if log_config_append is set. (list value)
 #default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
 
 # Enables or disables publication of error events. (boolean value)
 #publish_errors = false
 
-# The format for an instance that is passed with the log message. (string
-# value)
+# The format for an instance that is passed with the log message.
+# (string value)
 #instance_format = "[instance: %(uuid)s] "
 
-# The format for an instance UUID that is passed with the log message. (string
-# value)
+# The format for an instance UUID that is passed with the log message.
+# (string value)
 #instance_uuid_format = "[instance: %(uuid)s] "
 
 # Interval, number of seconds, of log rate limiting. (integer value)
 #rate_limit_interval = 0
 
-# Maximum number of logged messages per rate_limit_interval. (integer value)
+# Maximum number of logged messages per rate_limit_interval. (integer
+# value)
 #rate_limit_burst = 0
 
-# Log level name used by rate limiting: CRITICAL, ERROR, INFO, WARNING, DEBUG
-# or empty string. Logs with level greater or equal to rate_limit_except_level
-# are not filtered. An empty string means that all levels are filtered. (string
-# value)
+# Log level name used by rate limiting: CRITICAL, ERROR, INFO,
+# WARNING, DEBUG or empty string. Logs with level greater or equal to
+# rate_limit_except_level are not filtered. An empty string means that
+# all levels are filtered. (string value)
 #rate_limit_except_level = CRITICAL
 
 # Enables or disables fatal status of deprecations. (boolean value)
 #fatal_deprecations = false
-
-#
-# From oslo.messaging
-#
-
-# Size of RPC connection pool. (integer value)
-#rpc_conn_pool_size = 30
-
-# The pool size limit for connections expiration policy (integer value)
-#conn_pool_min_size = 2
-
-# The time-to-live in sec of idle connections in the pool (integer value)
-#conn_pool_ttl = 1200
-
-# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
-# The "host" option should point or resolve to this address. (string value)
-#rpc_zmq_bind_address = *
-
-# MatchMaker driver. (string value)
-# Possible values:
-# redis - <No description provided>
-# sentinel - <No description provided>
-# dummy - <No description provided>
-#rpc_zmq_matchmaker = redis
-
-# Number of ZeroMQ contexts, defaults to 1. (integer value)
-#rpc_zmq_contexts = 1
-
-# Maximum number of ingress messages to locally buffer per topic. Default is
-# unlimited. (integer value)
-#rpc_zmq_topic_backlog = <None>
-
-# Directory for holding IPC sockets. (string value)
-#rpc_zmq_ipc_dir = /var/run/openstack
-
-# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
-# "host" option, if running Nova. (string value)
-#rpc_zmq_host = localhost
-
-# Number of seconds to wait before all pending messages will be sent after
-# closing a socket. The default value of -1 specifies an infinite linger
-# period. The value of 0 specifies no linger period. Pending messages shall be
-# discarded immediately when the socket is closed. Positive values specify an
-# upper bound for the linger period. (integer value)
-# Deprecated group/name - [DEFAULT]/rpc_cast_timeout
-#zmq_linger = -1
-
-# The default number of seconds that poll should wait. Poll raises timeout
-# exception when timeout expired. (integer value)
-#rpc_poll_timeout = 1
-
-# Expiration timeout in seconds of a name service record about existing target
-# ( < 0 means no timeout). (integer value)
-#zmq_target_expire = 300
-
-# Update period in seconds of a name service record about existing target.
-# (integer value)
-#zmq_target_update = 180
-
-# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
-# value)
-#use_pub_sub = false
-
-# Use ROUTER remote proxy. (boolean value)
-#use_router_proxy = false
-
-# This option makes direct connections dynamic or static. It makes sense only
-# with use_router_proxy=False which means to use direct connections for direct
-# message types (ignored otherwise). (boolean value)
-#use_dynamic_connections = false
-
-# How many additional connections to a host will be made for failover reasons.
-# This option is actual only in dynamic connections mode. (integer value)
-#zmq_failover_connections = 2
-
-# Minimal port number for random ports range. (port value)
-# Minimum value: 0
-# Maximum value: 65535
-#rpc_zmq_min_port = 49153
-
-# Maximal port number for random ports range. (integer value)
-# Minimum value: 1
-# Maximum value: 65536
-#rpc_zmq_max_port = 65536
-
-# Number of retries to find free port number before fail with ZMQBindError.
-# (integer value)
-#rpc_zmq_bind_port_retries = 100
-
-# Default serialization mechanism for serializing/deserializing
-# outgoing/incoming messages (string value)
-# Possible values:
-# json - <No description provided>
-# msgpack - <No description provided>
-#rpc_zmq_serialization = json
-
-# This option configures round-robin mode in zmq socket. True means not keeping
-# a queue when server side disconnects. False means to keep queue and messages
-# even if server is disconnected, when the server appears we send all
-# accumulated messages to it. (boolean value)
-#zmq_immediate = true
-
-# Enable/disable TCP keepalive (KA) mechanism. The default value of -1 (or any
-# other negative value) means to skip any overrides and leave it to OS default;
-# 0 and 1 (or any other positive value) mean to disable and enable the option
-# respectively. (integer value)
-#zmq_tcp_keepalive = -1
-
-# The duration between two keepalive transmissions in idle condition. The unit
-# is platform dependent, for example, seconds in Linux, milliseconds in Windows
-# etc. The default value of -1 (or any other negative value and 0) means to
-# skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_idle = -1
-
-# The number of retransmissions to be carried out before declaring that remote
-# end is not available. The default value of -1 (or any other negative value
-# and 0) means to skip any overrides and leave it to OS default. (integer
-# value)
-#zmq_tcp_keepalive_cnt = -1
-
-# The duration between two successive keepalive retransmissions, if
-# acknowledgement to the previous keepalive transmission is not received. The
-# unit is platform dependent, for example, seconds in Linux, milliseconds in
-# Windows etc. The default value of -1 (or any other negative value and 0)
-# means to skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_intvl = -1
-
-# Maximum number of (green) threads to work concurrently. (integer value)
-#rpc_thread_pool_size = 100
-
-# Expiration timeout in seconds of a sent/received message after which it is
-# not tracked anymore by a client/server. (integer value)
-#rpc_message_ttl = 300
-
-# Wait for message acknowledgements from receivers. This mechanism works only
-# via proxy without PUB/SUB. (boolean value)
-#rpc_use_acks = false
-
-# Number of seconds to wait for an ack from a cast/call. After each retry
-# attempt this timeout is multiplied by some specified multiplier. (integer
-# value)
-#rpc_ack_timeout_base = 15
-
-# Number to multiply base ack timeout by after each retry attempt. (integer
-# value)
-#rpc_ack_timeout_multiplier = 2
-
-# Default number of message sending attempts in case of any problems occurred:
-# positive value N means at most N retries, 0 means no retries, None or -1 (or
-# any other negative values) mean to retry forever. This option is used only if
-# acknowledgments are enabled. (integer value)
-#rpc_retry_attempts = 3
-
-# List of publisher hosts SubConsumer can subscribe on. This option has higher
-# priority then the default publishers list taken from the matchmaker. (list
-# value)
-#subscribe_on =
-
-# Size of executor thread pool when executor is threading or eventlet. (integer
-# value)
-# Deprecated group/name - [DEFAULT]/rpc_thread_pool_size
-#executor_thread_pool_size = 64
-
-# Seconds to wait for a response from a call. (integer value)
-#rpc_response_timeout = 60
-
-# The network address and optional user credentials for connecting to the
-# messaging backend, in URL format. The expected format is:
-#
-# driver://[user:pass@]host:port[,[userN:passN@]hostN:portN]/virtual_host?query
-#
-# Example: rabbit://rabbitmq:password@127.0.0.1:5672//
-#
-# For full details on the fields in the URL see the documentation of
-# oslo_messaging.TransportURL at
-# https://docs.openstack.org/oslo.messaging/latest/reference/transport.html
-# (string value)
-#transport_url = <None>
-
-# DEPRECATED: The messaging driver to use, defaults to rabbit. Other drivers
-# include amqp and zmq. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#rpc_backend = rabbit
-
-# The default exchange under which topics are scoped. May be overridden by an
-# exchange name specified in the transport_url option. (string value)
-#control_exchange = openstack
-
-#
-# From oslo.service.periodic_task
-#
-
-# Some periodic tasks can be run in a separate process. Should we run them
-# here? (boolean value)
-#run_external_periodic_tasks = true
-
-#
-# From oslo.service.service
-#
-
-# Enable eventlet backdoor.  Acceptable values are 0, <port>, and
-# <start>:<end>, where 0 results in listening on a random tcp port number;
-# <port> results in listening on the specified port number (and not enabling
-# backdoor if that port is in use); and <start>:<end> results in listening on
-# the smallest unused port number within the specified range of port numbers.
-# The chosen port is displayed in the service's log file. (string value)
-#backdoor_port = <None>
-
-# Enable eventlet backdoor, using the provided path as a unix socket that can
-# receive connections. This option is mutually exclusive with 'backdoor_port'
-# in that only one should be provided. If both are provided then the existence
-# of this option overrides the usage of that option. (string value)
-#backdoor_socket = <None>
-
-# Enables or disables logging values of all registered options when starting a
-# service (at DEBUG level). (boolean value)
-#log_options = true
-
-# Specify a timeout after which a gracefully shutdown server will exit. Zero
-# value means endless wait. (integer value)
-#graceful_shutdown_timeout = 60
-
 
 [auth_password]
 
@@ -638,18 +626,13 @@
 # Type of endpoint in Identity service catalog to use for communication with
 # the OpenStack service. (string value)
 #endpoint_type = publicURL
-
-# Optional CA cert file to use in SSL connections. (string value)
-#ca_file = <None>
+endpoint_type = internalURL
 
 # Optional PEM-formatted certificate chain file. (string value)
 #cert_file = <None>
 
 # Optional PEM-formatted file that contains the private key. (string value)
 #key_file = <None>
-
-# If set, then the server's certificate will not be verified. (boolean value)
-#insecure = false
 
 
 [clients_aodh]
@@ -802,6 +785,7 @@
 # Type of endpoint in Identity service catalog to use for communication with
 # the OpenStack service. (string value)
 #endpoint_type = <None>
+endpoint_type = publicURL
 
 # Optional CA cert file to use in SSL connections. (string value)
 #ca_file = <None>
@@ -811,9 +795,6 @@
 
 # Optional PEM-formatted file that contains the private key. (string value)
 #key_file = <None>
-
-# If set, then the server's certificate will not be verified. (boolean value)
-#insecure = <None>
 
 # Optional heat url in format like http://0.0.0.0:8004/v1/%(tenant_id)s.
 # (string value)
@@ -825,26 +806,19 @@
 #
 # From heat.common.config
 #
+# Unversioned keystone url in format like http://0.0.0.0:5000. (string value)
+#auth_uri =
+auth_uri=http://10.167.4.35:35357
 
 # Type of endpoint in Identity service catalog to use for communication with
 # the OpenStack service. (string value)
 #endpoint_type = <None>
 
-# Optional CA cert file to use in SSL connections. (string value)
-#ca_file = <None>
-
 # Optional PEM-formatted certificate chain file. (string value)
 #cert_file = <None>
 
 # Optional PEM-formatted file that contains the private key. (string value)
 #key_file = <None>
-
-# If set, then the server's certificate will not be verified. (boolean value)
-#insecure = <None>
-
-# Unversioned keystone url in format like http://0.0.0.0:5000. (string value)
-#auth_uri =
-
 
 [clients_magnum]
 
@@ -1125,141 +1099,6 @@
 #insecure = <None>
 
 
-[cors]
-
-#
-# From oslo.middleware
-#
-
-# Indicate whether this resource may be shared with the domain received in the
-# requests "origin" header. Format: "<protocol>://<host>[:<port>]", no trailing
-# slash. Example: https://horizon.example.com (list value)
-#allowed_origin = <None>
-
-# Indicate that the actual request can include user credentials (boolean value)
-#allow_credentials = true
-
-# Indicate which headers are safe to expose to the API. Defaults to HTTP Simple
-# Headers. (list value)
-#expose_headers = X-Auth-Token,X-Subject-Token,X-Service-Token,X-OpenStack-Request-ID
-
-# Maximum cache age of CORS preflight requests. (integer value)
-#max_age = 3600
-
-# Indicate which methods can be used during the actual request. (list value)
-#allow_methods = GET,PUT,POST,DELETE,PATCH
-
-# Indicate which header field names may be used during the actual request.
-# (list value)
-#allow_headers = X-Auth-Token,X-Identity-Status,X-Roles,X-Service-Catalog,X-User-Id,X-Tenant-Id,X-OpenStack-Request-ID
-
-
-[database]
-
-#
-# From oslo.db
-#
-
-# If True, SQLite uses synchronous mode. (boolean value)
-#sqlite_synchronous = true
-
-# The back end to use for the database. (string value)
-# Deprecated group/name - [DEFAULT]/db_backend
-#backend = sqlalchemy
-
-# The SQLAlchemy connection string to use to connect to the database. (string
-# value)
-# Deprecated group/name - [DEFAULT]/sql_connection
-# Deprecated group/name - [DATABASE]/sql_connection
-# Deprecated group/name - [sql]/connection
-#connection = <None>
-
-# The SQLAlchemy connection string to use to connect to the slave database.
-# (string value)
-#slave_connection = <None>
-
-# The SQL mode to be used for MySQL sessions. This option, including the
-# default, overrides any server-set SQL mode. To use whatever SQL mode is set
-# by the server configuration, set this to no value. Example: mysql_sql_mode=
-# (string value)
-#mysql_sql_mode = TRADITIONAL
-
-# If True, transparently enables support for handling MySQL Cluster (NDB).
-# (boolean value)
-#mysql_enable_ndb = false
-
-# Connections which have been present in the connection pool longer than this
-# number of seconds will be replaced with a new one the next time they are
-# checked out from the pool. (integer value)
-# Deprecated group/name - [DATABASE]/idle_timeout
-# Deprecated group/name - [database]/idle_timeout
-# Deprecated group/name - [DEFAULT]/sql_idle_timeout
-# Deprecated group/name - [DATABASE]/sql_idle_timeout
-# Deprecated group/name - [sql]/idle_timeout
-#connection_recycle_time = 3600
-
-# Minimum number of SQL connections to keep open in a pool. (integer value)
-# Deprecated group/name - [DEFAULT]/sql_min_pool_size
-# Deprecated group/name - [DATABASE]/sql_min_pool_size
-#min_pool_size = 1
-
-# Maximum number of SQL connections to keep open in a pool. Setting a value of
-# 0 indicates no limit. (integer value)
-# Deprecated group/name - [DEFAULT]/sql_max_pool_size
-# Deprecated group/name - [DATABASE]/sql_max_pool_size
-#max_pool_size = 5
-
-# Maximum number of database connection retries during startup. Set to -1 to
-# specify an infinite retry count. (integer value)
-# Deprecated group/name - [DEFAULT]/sql_max_retries
-# Deprecated group/name - [DATABASE]/sql_max_retries
-#max_retries = 10
-
-# Interval between retries of opening a SQL connection. (integer value)
-# Deprecated group/name - [DEFAULT]/sql_retry_interval
-# Deprecated group/name - [DATABASE]/reconnect_interval
-#retry_interval = 10
-
-# If set, use this value for max_overflow with SQLAlchemy. (integer value)
-# Deprecated group/name - [DEFAULT]/sql_max_overflow
-# Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
-#max_overflow = 50
-
-# Verbosity of SQL debugging information: 0=None, 100=Everything. (integer
-# value)
-# Minimum value: 0
-# Maximum value: 100
-# Deprecated group/name - [DEFAULT]/sql_connection_debug
-#connection_debug = 0
-
-# Add Python stack traces to SQL as comment strings. (boolean value)
-# Deprecated group/name - [DEFAULT]/sql_connection_trace
-#connection_trace = false
-
-# If set, use this value for pool_timeout with SQLAlchemy. (integer value)
-# Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
-#pool_timeout = <None>
-
-# Enable the experimental use of database reconnect on connection lost.
-# (boolean value)
-#use_db_reconnect = false
-
-# Seconds between retries of a database transaction. (integer value)
-#db_retry_interval = 1
-
-# If True, increases the interval between retries of a database operation up to
-# db_max_retry_interval. (boolean value)
-#db_inc_retry_interval = true
-
-# If db_inc_retry_interval is set, the maximum seconds between retries of a
-# database operation. (integer value)
-#db_max_retry_interval = 10
-
-# Maximum retries in case of connection error or deadlock error before error is
-# raised. Set to -1 to specify an infinite retry count. (integer value)
-#db_max_retries = 20
-
-
 [ec2authtoken]
 
 #
@@ -1268,6 +1107,8 @@
 
 # Authentication Endpoint URI. (string value)
 #auth_uri = <None>
+# NOTE(vsaienko) autodiscovery doesn't work here. Set version explicitly
+auth_uri = http://10.167.4.35:5000/v3
 
 # Allow orchestration of multiple clouds. (boolean value)
 #multi_cloud = false
@@ -1304,34 +1145,6 @@
 #client_socket_timeout = 900
 
 
-[healthcheck]
-
-#
-# From oslo.middleware
-#
-
-# DEPRECATED: The path to respond to healtcheck requests on. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-#path = /healthcheck
-
-# Show more detailed information as part of the response (boolean value)
-#detailed = false
-
-# Additional backends that can perform health checks and report that
-# information back as part of a request. (list value)
-#backends =
-
-# Check the presence of a file to determine if an application is running on a
-# port. Used by DisableByFileHealthcheck plugin. (string value)
-#disable_by_file_path = <None>
-
-# Check the presence of a file based on a port to determine if an application
-# is running on a port. Expects a "port:path" list of strings. Used by
-# DisableByFilesPortsHealthcheck plugin. (list value)
-#disable_by_file_paths =
-
-
 [heat_api]
 
 #
@@ -1341,6 +1154,7 @@
 # Address to bind the server. Useful when selecting a particular network
 # interface. (IP address value)
 #bind_host = 0.0.0.0
+bind_host = 10.167.4.37
 
 # The port on which the server will listen. (port value)
 # Minimum value: 0
@@ -1360,6 +1174,7 @@
 # start number of workers equal number of cores on server. (integer value)
 # Minimum value: 0
 #workers = 0
+workers = 4
 
 # Maximum line size of message headers to be accepted. max_header_line may need
 # to be increased when using large tokens (typically those generated by the
@@ -1380,7 +1195,7 @@
 
 # Address to bind the server. Useful when selecting a particular network
 # interface. (IP address value)
-#bind_host = 0.0.0.0
+bind_host = 10.167.4.37
 
 # The port on which the server will listen. (port value)
 # Minimum value: 0
@@ -1422,7 +1237,7 @@
 # This option is deprecated for removal since 10.0.0.
 # Its value may be silently ignored in the future.
 # Reason: Heat CloudWatch API has been removed.
-#bind_host = 0.0.0.0
+#bind_host = 10.167.4.37
 
 # DEPRECATED: The port on which the server will listen. (port value)
 # Minimum value: 0
@@ -1478,8 +1293,238 @@
 #tcp_keepidle = 600
 
 
+[noauth]
+
+#
+# From heat.common.config
+#
+
+# JSON file containing the content returned by the noauth middleware. (string
+# value)
+#token_response =
+
+
+[paste_deploy]
+
+#
+# From heat.common.config
+#
+
+# The flavor to use. (string value)
+#flavor = <None>
+
+# The API paste config file to use. (string value)
+#api_paste_config = api-paste.ini
+
+
+[profiler]
+
+#
+# From heat.common.config
+#
+
+#
+# Enables the profiling for all services on this node. Default value is False
+# (fully disable the profiling feature).
+#
+# Possible values:
+#
+# * True: Enables the feature
+# * False: Disables the feature. The profiling cannot be started via this
+# project
+# operations. If the profiling is triggered by another project, this project
+# part
+# will be empty.
+#  (boolean value)
+# Deprecated group/name - [profiler]/profiler_enabled
+#enabled = false
+
+#
+# Enables SQL requests profiling in services. Default value is False (SQL
+# requests won't be traced).
+#
+# Possible values:
+#
+# * True: Enables SQL requests profiling. Each SQL query will be part of the
+# trace and can the be analyzed by how much time was spent for that.
+# * False: Disables SQL requests profiling. The spent time is only shown on a
+# higher level of operations. Single SQL queries cannot be analyzed this
+# way.
+#  (boolean value)
+#trace_sqlalchemy = false
+
+#
+# Secret key(s) to use for encrypting context data for performance profiling.
+# This string value should have the following format:
+# <key1>[,<key2>,...<keyn>],
+# where each key is some random string. A user who triggers the profiling via
+# the REST API has to set one of these keys in the headers of the REST API call
+# to include profiling results of this node for this particular project.
+#
+# Both "enabled" flag and "hmac_keys" config options should be set to enable
+# profiling. Also, to generate correct profiling information across all
+# services
+# at least one key needs to be consistent between OpenStack projects. This
+# ensures it can be used from client side to generate the trace, containing
+# information from all possible resources. (string value)
+#hmac_keys = SECRET_KEY
+
+#
+# Connection string for a notifier backend. Default value is messaging:// which
+# sets the notifier to oslo_messaging.
+#
+# Examples of possible values:
+#
+# * messaging://: use oslo_messaging driver for sending notifications.
+# * mongodb://127.0.0.1:27017 : use mongodb driver for sending notifications.
+# * elasticsearch://127.0.0.1:9200 : use elasticsearch driver for sending
+# notifications.
+#  (string value)
+#connection_string = messaging://
+
+#
+# Document type for notification indexing in elasticsearch.
+#  (string value)
+#es_doc_type = notification
+
+#
+# This parameter is a time value parameter (for example: es_scroll_time=2m),
+# indicating for how long the nodes that participate in the search will
+# maintain
+# relevant resources in order to continue and support it.
+#  (string value)
+#es_scroll_time = 2m
+
+#
+# Elasticsearch splits large requests in batches. This parameter defines
+# maximum size of each batch (for example: es_scroll_size=10000).
+#  (integer value)
+#es_scroll_size = 10000
+
+#
+# Redissentinel provides a timeout option on the connections.
+# This parameter defines that timeout (for example: socket_timeout=0.1).
+#  (floating point value)
+#socket_timeout = 0.1
+
+#
+# Redissentinel uses a service name to identify a master redis service.
+# This parameter defines the name (for example:
+# sentinal_service_name=mymaster).
+#  (string value)
+#sentinel_service_name = mymaster
+
+#
+# Enable filter traces that contain error/exception to a separated place.
+# Default value is set to False.
+#
+# Possible values:
+#
+# * True: Enable filter traces that contain error/exception.
+# * False: Disable the filter.
+#  (boolean value)
+#filter_error_trace = false
+
+
+[revision]
+
+#
+# From heat.common.config
+#
+
+# Heat build revision. If you would prefer to manage your build revision
+# separately, you can move this section to a different file and add it as
+# another config option. (string value)
+#heat_revision = unknown
+
+
+[trustee]
+
+#
+# From heat.common.context
+#
+
+# Authentication type to load (string value)
+# Deprecated group/name - [trustee]/auth_plugin
+auth_type = password
+
+# Config Section from which to load plugin specific options (string value)
+#auth_section = <None>
+
+# Authentication URL (string value)
+#auth_url = <None>
+auth_url = http://10.167.4.35:35357
+
+# Scope for system operations (string value)
+#system_scope = <None>
+
+# Domain ID to scope to (string value)
+#domain_id = <None>
+
+# Domain name to scope to (string value)
+#domain_name = <None>
+
+# Project ID to scope to (string value)
+# Deprecated group/name - [trustee]/tenant_id
+#project_id = <None>
+
+# Project name to scope to (string value)
+# Deprecated group/name - [trustee]/tenant_name
+#project_name = <None>
+
+# Domain ID containing project (string value)
+#project_domain_id = <None>
+project_domain_id = default
+
+# Domain name containing project (string value)
+#project_domain_name = <None>
+
+# Trust ID (string value)
+#trust_id = <None>
+
+# Optional domain ID to use with v3 and v2 parameters. It will be used for both
+# the user and project domain in v3 and ignored in v2 authentication. (string
+# value)
+#default_domain_id = <None>
+
+# Optional domain name to use with v3 API and v2 parameters. It will be used
+# for both the user and project domain in v3 and ignored in v2 authentication.
+# (string value)
+#default_domain_name = <None>
+
+# User id (string value)
+#user_id = <None>
+
+# Username (string value)
+# Deprecated group/name - [trustee]/user_name
+#username = <None>
+username = heat
+
+# User's domain id (string value)
+#user_domain_id = <None>
+user_domain_id = default
+
+# User's domain name (string value)
+#user_domain_name = <None>
+user_domain_name = default
+
+# User's password (string value)
+#password = <None>
+password = opnfv_secret
+
+
+[volumes]
+
+#
+# From heat.common.config
+#
+
+# Indicate if cinder-backup service is enabled. This is a temporary workaround
+# until cinder-backup service becomes discoverable, see LP#1334856. (boolean
+# value)
+#backups_enabled = true
+
 [keystone_authtoken]
-
 #
 # From keystonemiddleware.auth_token
 #
@@ -1494,6 +1539,7 @@
 # value)
 # Deprecated group/name - [keystone_authtoken]/auth_uri
 #www_authenticate_uri = <None>
+www_authenticate_uri = http://10.167.4.35:5000
 
 # DEPRECATED: Complete "public" Identity API endpoint. This endpoint should not
 # be an "admin" endpoint, as it should be accessible by all end users.
@@ -1509,6 +1555,7 @@
 # Reason: The auth_uri option is deprecated in favor of www_authenticate_uri
 # and will be removed in the S  release.
 #auth_uri = <None>
+auth_uri = http://10.167.4.35:5000
 
 # API version of the admin Identity API endpoint. (string value)
 #auth_version = <None>
@@ -1663,376 +1710,119 @@
 # possible. (boolean value)
 #service_token_roles_required = false
 
-# Prefix to prepend at the beginning of the path. Deprecated, use identity_uri.
-# (string value)
-#auth_admin_prefix =
-
-# Host providing the admin Identity API endpoint. Deprecated, use identity_uri.
-# (string value)
-#auth_host = 127.0.0.1
-
-# Port of the admin Identity API endpoint. Deprecated, use identity_uri.
-# (integer value)
-#auth_port = 35357
-
-# Protocol of the admin Identity API endpoint. Deprecated, use identity_uri.
-# (string value)
-# Possible values:
-# http - <No description provided>
-# https - <No description provided>
-#auth_protocol = https
-
-# Complete admin Identity API endpoint. This should specify the unversioned
-# root endpoint e.g. https://localhost:35357/ (string value)
-#identity_uri = <None>
-
-# This option is deprecated and may be removed in a future release. Single
-# shared secret with the Keystone configuration used for bootstrapping a
-# Keystone installation, or otherwise bypassing the normal authentication
-# process. This option should not be used, use `admin_user` and
-# `admin_password` instead. (string value)
-#admin_token = <None>
-
-# Service username. (string value)
-#admin_user = <None>
-
-# Service user password. (string value)
-#admin_password = <None>
-
-# Service tenant name. (string value)
-#admin_tenant_name = admin
-
 # Authentication type to load (string value)
 # Deprecated group/name - [keystone_authtoken]/auth_plugin
 #auth_type = <None>
+auth_type = password
 
 # Config Section from which to load plugin specific options (string value)
 #auth_section = <None>
 
-
-[matchmaker_redis]
-
-#
-# From oslo.messaging
-#
-
-# DEPRECATED: Host to locate redis. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#host = 127.0.0.1
-
-# DEPRECATED: Use this port to connect to redis host. (port value)
-# Minimum value: 0
-# Maximum value: 65535
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#port = 6379
-
-# DEPRECATED: Password for Redis server (optional). (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#password =
-
-# DEPRECATED: List of Redis Sentinel hosts (fault tolerance mode), e.g.,
-# [host:port, host1:port ... ] (list value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#sentinel_hosts =
-
-# Redis replica set name. (string value)
-#sentinel_group_name = oslo-messaging-zeromq
-
-# Time in ms to wait between connection attempts. (integer value)
-#wait_timeout = 2000
-
-# Time in ms to wait before the transaction is killed. (integer value)
-#check_timeout = 20000
-
-# Timeout in ms on blocking socket operations. (integer value)
-#socket_timeout = 10000
-
-
-[noauth]
-
-#
-# From heat.common.config
-#
-
-# JSON file containing the content returned by the noauth middleware. (string
-# value)
-#token_response =
-
-
-[oslo_messaging_amqp]
-
-#
-# From oslo.messaging
-#
-
-# Name for the AMQP container. must be globally unique. Defaults to a generated
-# UUID (string value)
-#container_name = <None>
-
-# Timeout for inactive connections (in seconds) (integer value)
-#idle_timeout = 0
-
-# Debug: dump AMQP frames to stdout (boolean value)
-#trace = false
-
-# Attempt to connect via SSL. If no other ssl-related parameters are given, it
-# will use the system's CA-bundle to verify the server's certificate. (boolean
-# value)
-#ssl = false
-
-# CA certificate PEM file used to verify the server's certificate (string
-# value)
-#ssl_ca_file =
-
-# Self-identifying certificate PEM file for client authentication (string
-# value)
-#ssl_cert_file =
-
-# Private key PEM file used to sign ssl_cert_file certificate (optional)
+# Name of nova region to use. Useful if keystone manages more than one region.
 # (string value)
-#ssl_key_file =
-
-# Password for decrypting ssl_key_file (if encrypted) (string value)
-#ssl_key_password = <None>
-
-# By default SSL checks that the name in the server's certificate matches the
-# hostname in the transport_url. In some configurations it may be preferable to
-# use the virtual hostname instead, for example if the server uses the Server
-# Name Indication TLS extension (rfc6066) to provide a certificate per virtual
-# host. Set ssl_verify_vhost to True if the server's SSL certificate uses the
-# virtual host name instead of the DNS name. (boolean value)
-#ssl_verify_vhost = false
-
-# DEPRECATED: Accept clients using either SSL or plain TCP (boolean value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Not applicable - not a SSL server
-#allow_insecure_clients = false
-
-# Space separated list of acceptable SASL mechanisms (string value)
-#sasl_mechanisms =
-
-# Path to directory that contains the SASL configuration (string value)
-#sasl_config_dir =
-
-# Name of configuration file (without .conf suffix) (string value)
-#sasl_config_name =
-
-# SASL realm to use if no realm present in username (string value)
-#sasl_default_realm =
-
-# DEPRECATED: User name for message broker authentication (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the
-# username.
-#username =
-
-# DEPRECATED: Password for message broker authentication (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the
-# password.
-#password =
-
-# Seconds to pause before attempting to re-connect. (integer value)
-# Minimum value: 1
-#connection_retry_interval = 1
-
-# Increase the connection_retry_interval by this many seconds after each
-# unsuccessful failover attempt. (integer value)
-# Minimum value: 0
-#connection_retry_backoff = 2
-
-# Maximum limit for connection_retry_interval + connection_retry_backoff
-# (integer value)
-# Minimum value: 1
-#connection_retry_interval_max = 30
-
-# Time to pause between re-connecting an AMQP 1.0 link that failed due to a
-# recoverable error. (integer value)
-# Minimum value: 1
-#link_retry_delay = 10
-
-# The maximum number of attempts to re-send a reply message which failed due to
-# a recoverable error. (integer value)
-# Minimum value: -1
-#default_reply_retry = 0
-
-# The deadline for an rpc reply message delivery. (integer value)
-# Minimum value: 5
-#default_reply_timeout = 30
-
-# The deadline for an rpc cast or call message delivery. Only used when caller
-# does not provide a timeout expiry. (integer value)
-# Minimum value: 5
-#default_send_timeout = 30
-
-# The deadline for a sent notification message delivery. Only used when caller
-# does not provide a timeout expiry. (integer value)
-# Minimum value: 5
-#default_notify_timeout = 30
-
-# The duration to schedule a purge of idle sender links. Detach link after
-# expiry. (integer value)
-# Minimum value: 1
-#default_sender_link_timeout = 600
-
-# Indicates the addressing mode used by the driver.
-# Permitted values:
-# 'legacy'   - use legacy non-routable addressing
-# 'routable' - use routable addresses
-# 'dynamic'  - use legacy addresses if the message bus does not support routing
-# otherwise use routable addressing (string value)
-#addressing_mode = dynamic
-
-# Enable virtual host support for those message buses that do not natively
-# support virtual hosting (such as qpidd). When set to true the virtual host
-# name will be added to all message bus addresses, effectively creating a
-# private 'subnet' per virtual host. Set to False if the message bus supports
-# virtual hosting using the 'hostname' field in the AMQP 1.0 Open performative
-# as the name of the virtual host. (boolean value)
-#pseudo_vhost = true
-
-# address prefix used when sending to a specific server (string value)
-#server_request_prefix = exclusive
-
-# address prefix used when broadcasting to all servers (string value)
-#broadcast_prefix = broadcast
-
-# address prefix when sending to any server in group (string value)
-#group_request_prefix = unicast
-
-# Address prefix for all generated RPC addresses (string value)
-#rpc_address_prefix = openstack.org/om/rpc
-
-# Address prefix for all generated Notification addresses (string value)
-#notify_address_prefix = openstack.org/om/notify
-
-# Appended to the address prefix when sending a fanout message. Used by the
-# message bus to identify fanout messages. (string value)
-#multicast_address = multicast
-
-# Appended to the address prefix when sending to a particular RPC/Notification
-# server. Used by the message bus to identify messages sent to a single
-# destination. (string value)
-#unicast_address = unicast
-
-# Appended to the address prefix when sending to a group of consumers. Used by
-# the message bus to identify messages that should be delivered in a round-
-# robin fashion across consumers. (string value)
-#anycast_address = anycast
-
-# Exchange name used in notification addresses.
-# Exchange name resolution precedence:
-# Target.exchange if set
-# else default_notification_exchange if set
-# else control_exchange if set
-# else 'notify' (string value)
-#default_notification_exchange = <None>
-
-# Exchange name used in RPC addresses.
-# Exchange name resolution precedence:
-# Target.exchange if set
-# else default_rpc_exchange if set
-# else control_exchange if set
-# else 'rpc' (string value)
-#default_rpc_exchange = <None>
-
-# Window size for incoming RPC Reply messages. (integer value)
-# Minimum value: 1
-#reply_link_credit = 200
-
-# Window size for incoming RPC Request messages (integer value)
-# Minimum value: 1
-#rpc_server_credit = 100
-
-# Window size for incoming Notification messages (integer value)
-# Minimum value: 1
-#notify_server_credit = 100
-
-# Send messages of this type pre-settled.
-# Pre-settled messages will not receive acknowledgement
-# from the peer. Note well: pre-settled messages may be
-# silently discarded if the delivery fails.
-# Permitted values:
-# 'rpc-call' - send RPC Calls pre-settled
-# 'rpc-reply'- send RPC Replies pre-settled
-# 'rpc-cast' - Send RPC Casts pre-settled
-# 'notify'   - Send Notifications pre-settled
-#  (multi valued)
-#pre_settled = rpc-cast
-#pre_settled = rpc-reply
-
-
-[oslo_messaging_kafka]
-
-#
-# From oslo.messaging
-#
-
-# DEPRECATED: Default Kafka broker Host (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#kafka_default_host = localhost
-
-# DEPRECATED: Default Kafka broker Port (port value)
-# Minimum value: 0
-# Maximum value: 65535
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#kafka_default_port = 9092
-
-# Max fetch bytes of Kafka consumer (integer value)
-#kafka_max_fetch_bytes = 1048576
-
-# Default timeout(s) for Kafka consumers (floating point value)
-#kafka_consumer_timeout = 1.0
-
-# DEPRECATED: Pool Size for Kafka Consumers (integer value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#pool_size = 10
-
-# DEPRECATED: The pool size limit for connections expiration policy (integer
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#conn_pool_min_size = 2
-
-# DEPRECATED: The time-to-live in sec of idle connections in the pool (integer
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#conn_pool_ttl = 1200
-
-# Group id for Kafka consumer. Consumers in one group will coordinate message
-# consumption (string value)
-#consumer_group = oslo_messaging_consumer
-
-# Upper bound on the delay for KafkaProducer batching in seconds (floating
-# point value)
-#producer_batch_timeout = 0.0
-
-# Size of batch for the producer async send (integer value)
-#producer_batch_size = 16384
-
+#region_name = <None>
+
+# Type of the nova endpoint to use.  This endpoint will be looked up in the
+# keystone catalog and should be one of public, internal or admin. (string
+# value)
+# Possible values:
+# public - <No description provided>
+# admin - <No description provided>
+# internal - <No description provided>
+#endpoint_type = public
+endpoint_type = internal
+
+# API version of the admin Identity API endpoint. (string value)
+#auth_version = <None>
+
+
+# Authentication URL (string value)
+#auth_url = <None>
+auth_url = http://10.167.4.35:35357
+
+# Authentication type to load (string value)
+# Deprecated group/name - [nova]/auth_plugin
+#auth_type = <None>
+auth_type = password
+
+# Required if identity server requires client certificate (string value)
+#certfile = <None>
+
+# A PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# Defaults to system CAs. (string value)
+#cafile = <None>
+
+# Optional domain ID to use with v3 and v2 parameters. It will be used for both
+# the user and project domain in v3 and ignored in v2 authentication. (string
+# value)
+#default_domain_id = <None>
+
+# Optional domain name to use with v3 API and v2 parameters. It will be used for
+# both the user and project domain in v3 and ignored in v2 authentication.
+# (string value)
+#default_domain_name = <None>
+
+# Domain ID to scope to (string value)
+#domain_id = <None>
+
+# Domain name to scope to (string value)
+#domain_name = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# Required if identity server requires client certificate (string value)
+#keyfile = <None>
+
+# User's password (string value)
+#password = <None>
+password = opnfv_secret
+
+# Domain ID containing project (string value)
+#project_domain_id = <None>
+project_domain_id = default
+
+# Domain name containing project (string value)
+#project_domain_name = <None>
+
+# Project ID to scope to (string value)
+#project_id = <None>
+
+# Project name to scope to (string value)
+#project_name = <None>
+project_name = service
+
+# Scope for system operations (string value)
+#system_scope = <None>
+
+# Tenant ID (string value)
+#tenant_id = <None>
+
+# Tenant Name (string value)
+#tenant_name = <None>
+
+# Timeout value for http requests (integer value)
+#timeout = <None>
+
+# Trust ID (string value)
+#trust_id = <None>
+
+# User's domain id (string value)
+#user_domain_id = <None>
+user_domain_id = default
+
+# User's domain name (string value)
+#user_domain_name = <None>
+
+# User ID (string value)
+#user_id = <None>
+
+# Username (string value)
+# Deprecated group/name - [neutron]/user_name
+#username = <None>
+username = heat
 
 [oslo_messaging_notifications]
-
 #
 # From oslo.messaging
 #
@@ -2041,9 +1831,11 @@
 # messaging, messagingv2, routing, log, test, noop (multi valued)
 # Deprecated group/name - [DEFAULT]/notification_driver
 #driver =
-
-# A URL representing the messaging driver to use for notifications. If not set,
-# we fall back to the same configuration used for RPC. (string value)
+driver=messagingv2
+
+# A URL representing the messaging driver to use for notifications. If
+# not set, we fall back to the same configuration used for RPC.
+# (string value)
 # Deprecated group/name - [DEFAULT]/notification_transport_url
 #transport_url = <None>
 
@@ -2052,14 +1844,11 @@
 # Deprecated group/name - [DEFAULT]/notification_topics
 #topics = notifications
 
-# The maximum number of attempts to re-send a notification message which failed
-# to be delivered due to a recoverable error. 0 - No retry, -1 - indefinite
-# (integer value)
+# The maximum number of attempts to re-send a notification message
+# which failed to be delivered due to a recoverable error. 0 - No
+# retry, -1 - indefinite (integer value)
 #retry = -1
-
-
 [oslo_messaging_rabbit]
-
 #
 # From oslo.messaging
 #
@@ -2075,54 +1864,39 @@
 # Enable SSL (boolean value)
 #ssl = <None>
 
-# SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and
-# SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some
-# distributions. (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_version
-#ssl_version =
-
-# SSL key file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_keyfile
-#ssl_key_file =
-
-# SSL cert file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_certfile
-#ssl_cert_file =
-
-# SSL certification authority file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_ca_certs
-#ssl_ca_file =
-
-# How long to wait before reconnecting in response to an AMQP consumer cancel
-# notification. (floating point value)
+
+# How long to wait before reconnecting in response to an AMQP consumer
+# cancel notification. (floating point value)
 #kombu_reconnect_delay = 1.0
 
-# EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression will not
-# be used. This option may not be available in future versions. (string value)
+# EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression
+# will not be used. This option may not be available in future
+# versions. (string value)
 #kombu_compression = <None>
 
-# How long to wait a missing client before abandoning to send it its replies.
-# This value should not be longer than rpc_response_timeout. (integer value)
+# How long to wait a missing client before abandoning to send it its
+# replies. This value should not be longer than rpc_response_timeout.
+# (integer value)
 # Deprecated group/name - [oslo_messaging_rabbit]/kombu_reconnect_timeout
 #kombu_missing_consumer_retry_timeout = 60
 
-# Determines how the next RabbitMQ node is chosen in case the one we are
-# currently connected to becomes unavailable. Takes effect only if more than
-# one RabbitMQ node is provided in config. (string value)
+# Determines how the next RabbitMQ node is chosen in case the one we
+# are currently connected to becomes unavailable. Takes effect only if
+# more than one RabbitMQ node is provided in config. (string value)
 # Possible values:
 # round-robin - <No description provided>
 # shuffle - <No description provided>
 #kombu_failover_strategy = round-robin
 
-# DEPRECATED: The RabbitMQ broker address where a single node is used. (string
-# value)
+# DEPRECATED: The RabbitMQ broker address where a single node is used.
+# (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
 #rabbit_host = localhost
 
-# DEPRECATED: The RabbitMQ broker port where a single node is used. (port
-# value)
+# DEPRECATED: The RabbitMQ broker port where a single node is used.
+# (port value)
 # Minimum value: 0
 # Maximum value: 65535
 # This option is deprecated for removal.
@@ -2164,31 +1938,33 @@
 # How frequently to retry connecting with RabbitMQ. (integer value)
 #rabbit_retry_interval = 1
 
-# How long to backoff for between retries when connecting to RabbitMQ. (integer
-# value)
+# How long to backoff for between retries when connecting to RabbitMQ.
+# (integer value)
 #rabbit_retry_backoff = 2
 
-# Maximum interval of RabbitMQ connection retries. Default is 30 seconds.
-# (integer value)
+# Maximum interval of RabbitMQ connection retries. Default is 30
+# seconds. (integer value)
 #rabbit_interval_max = 30
 
-# DEPRECATED: Maximum number of RabbitMQ connection retries. Default is 0
-# (infinite retry count). (integer value)
+# DEPRECATED: Maximum number of RabbitMQ connection retries. Default
+# is 0 (infinite retry count). (integer value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 #rabbit_max_retries = 0
 
-# Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change this
-# option, you must wipe the RabbitMQ database. In RabbitMQ 3.0, queue mirroring
-# is no longer controlled by the x-ha-policy argument when declaring a queue.
-# If you just want to make sure that all queues (except those with auto-
-# generated names) are mirrored across all nodes, run: "rabbitmqctl set_policy
-# HA '^(?!amq\.).*' '{"ha-mode": "all"}' " (boolean value)
+# Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change
+# this option, you must wipe the RabbitMQ database. In RabbitMQ 3.0,
+# queue mirroring is no longer controlled by the x-ha-policy argument
+# when declaring a queue. If you just want to make sure that all
+# queues (except those with auto-generated names) are mirrored across
+# all nodes, run: "rabbitmqctl set_policy HA '^(?!amq\.).*' '{"ha-
+# mode": "all"}' " (boolean value)
 #rabbit_ha_queues = false
 
-# Positive integer representing duration in seconds for queue TTL (x-expires).
-# Queues which are unused for the duration of the TTL are automatically
-# deleted. The parameter affects only reply and fanout queues. (integer value)
+# Positive integer representing duration in seconds for queue TTL
+# (x-expires). Queues which are unused for the duration of the TTL are
+# automatically deleted. The parameter affects only reply and fanout
+# queues. (integer value)
 # Minimum value: 1
 #rabbit_transient_queues_ttl = 1800
 
@@ -2196,16 +1972,17 @@
 # unlimited messages. (integer value)
 #rabbit_qos_prefetch_count = 64
 
-# Number of seconds after which the Rabbit broker is considered down if
-# heartbeat's keep-alive fails (0 disable the heartbeat). EXPERIMENTAL (integer
-# value)
+# Number of seconds after which the Rabbit broker is considered down
+# if heartbeat's keep-alive fails (0 disable the heartbeat).
+# EXPERIMENTAL (integer value)
 #heartbeat_timeout_threshold = 60
 
 # How often times during the heartbeat_timeout_threshold we check the
 # heartbeat. (integer value)
 #heartbeat_rate = 2
 
-# Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake (boolean value)
+# Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake
+# (boolean value)
 #fake_rabbit = false
 
 # Maximum number of channels to allow (integer value)
@@ -2214,21 +1991,23 @@
 # The maximum byte size for an AMQP frame (integer value)
 #frame_max = <None>
 
-# How often to send heartbeats for consumer's connections (integer value)
+# How often to send heartbeats for consumer's connections (integer
+# value)
 #heartbeat_interval = 3
 
 # Arguments passed to ssl.wrap_socket (dict value)
 #ssl_options = <None>
 
-# Set socket timeout in seconds for connection's socket (floating point value)
+# Set socket timeout in seconds for connection's socket (floating
+# point value)
 #socket_timeout = 0.25
 
-# Set TCP_USER_TIMEOUT in seconds for connection's socket (floating point
-# value)
+# Set TCP_USER_TIMEOUT in seconds for connection's socket (floating
+# point value)
 #tcp_user_timeout = 0.25
 
-# Set delay for reconnection to some host which has connection error (floating
-# point value)
+# Set delay for reconnection to some host which has connection error
+# (floating point value)
 #host_connection_reconnect_delay = 0.25
 
 # Connection factory implementation (string value)
@@ -2241,21 +2020,22 @@
 # Maximum number of connections to keep queued. (integer value)
 #pool_max_size = 30
 
-# Maximum number of connections to create above `pool_max_size`. (integer
-# value)
+# Maximum number of connections to create above `pool_max_size`.
+# (integer value)
 #pool_max_overflow = 0
 
-# Default number of seconds to wait for a connections to available (integer
-# value)
+# Default number of seconds to wait for a connections to available
+# (integer value)
 #pool_timeout = 30
 
 # Lifetime of a connection (since creation) in seconds or None for no
-# recycling. Expired connections are closed on acquire. (integer value)
+# recycling. Expired connections are closed on acquire. (integer
+# value)
 #pool_recycle = 600
 
-# Threshold at which inactive (since release) connections are considered stale
-# in seconds or None for no staleness. Stale connections are closed on acquire.
-# (integer value)
+# Threshold at which inactive (since release) connections are
+# considered stale in seconds or None for no staleness. Stale
+# connections are closed on acquire. (integer value)
 #pool_stale = 60
 
 # Default serialization mechanism for serializing/deserializing
@@ -2275,15 +2055,16 @@
 # notification listener. (integer value)
 #notification_listener_prefetch_count = 100
 
-# Reconnecting retry count in case of connectivity problem during sending
-# notification, -1 means infinite retry. (integer value)
+# Reconnecting retry count in case of connectivity problem during
+# sending notification, -1 means infinite retry. (integer value)
 #default_notification_retry_attempts = -1
 
-# Reconnecting retry delay in case of connectivity problem during sending
-# notification message (floating point value)
+# Reconnecting retry delay in case of connectivity problem during
+# sending notification message (floating point value)
 #notification_retry_delay = 0.25
 
-# Time to live for rpc queues without consumers in seconds. (integer value)
+# Time to live for rpc queues without consumers in seconds. (integer
+# value)
 #rpc_queue_expiration = 60
 
 # Exchange name for sending RPC messages (string value)
@@ -2292,185 +2073,60 @@
 # Exchange name for receiving RPC replies (string value)
 #rpc_reply_exchange = ${control_exchange}_rpc_reply
 
-# Max number of not acknowledged message which RabbitMQ can send to rpc
-# listener. (integer value)
+# Max number of not acknowledged message which RabbitMQ can send to
+# rpc listener. (integer value)
 #rpc_listener_prefetch_count = 100
 
-# Max number of not acknowledged message which RabbitMQ can send to rpc reply
-# listener. (integer value)
+# Max number of not acknowledged message which RabbitMQ can send to
+# rpc reply listener. (integer value)
 #rpc_reply_listener_prefetch_count = 100
 
-# Reconnecting retry count in case of connectivity problem during sending
-# reply. -1 means infinite retry during rpc_timeout (integer value)
+# Reconnecting retry count in case of connectivity problem during
+# sending reply. -1 means infinite retry during rpc_timeout (integer
+# value)
 #rpc_reply_retry_attempts = -1
 
-# Reconnecting retry delay in case of connectivity problem during sending
-# reply. (floating point value)
+# Reconnecting retry delay in case of connectivity problem during
+# sending reply. (floating point value)
 #rpc_reply_retry_delay = 0.25
 
-# Reconnecting retry count in case of connectivity problem during sending RPC
-# message, -1 means infinite retry. If actual retry attempts in not 0 the rpc
-# request could be processed more than one time (integer value)
+# Reconnecting retry count in case of connectivity problem during
+# sending RPC message, -1 means infinite retry. If actual retry
+# attempts in not 0 the rpc request could be processed more than one
+# time (integer value)
 #default_rpc_retry_attempts = -1
 
-# Reconnecting retry delay in case of connectivity problem during sending RPC
-# message (floating point value)
+# Reconnecting retry delay in case of connectivity problem during
+# sending RPC message (floating point value)
 #rpc_retry_delay = 0.25
 
 
-[oslo_messaging_zmq]
-
-#
-# From oslo.messaging
-#
-
-# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
-# The "host" option should point or resolve to this address. (string value)
-#rpc_zmq_bind_address = *
-
-# MatchMaker driver. (string value)
-# Possible values:
-# redis - <No description provided>
-# sentinel - <No description provided>
-# dummy - <No description provided>
-#rpc_zmq_matchmaker = redis
-
-# Number of ZeroMQ contexts, defaults to 1. (integer value)
-#rpc_zmq_contexts = 1
-
-# Maximum number of ingress messages to locally buffer per topic. Default is
-# unlimited. (integer value)
-#rpc_zmq_topic_backlog = <None>
-
-# Directory for holding IPC sockets. (string value)
-#rpc_zmq_ipc_dir = /var/run/openstack
-
-# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
-# "host" option, if running Nova. (string value)
-#rpc_zmq_host = localhost
-
-# Number of seconds to wait before all pending messages will be sent after
-# closing a socket. The default value of -1 specifies an infinite linger
-# period. The value of 0 specifies no linger period. Pending messages shall be
-# discarded immediately when the socket is closed. Positive values specify an
-# upper bound for the linger period. (integer value)
-# Deprecated group/name - [DEFAULT]/rpc_cast_timeout
-#zmq_linger = -1
-
-# The default number of seconds that poll should wait. Poll raises timeout
-# exception when timeout expired. (integer value)
-#rpc_poll_timeout = 1
-
-# Expiration timeout in seconds of a name service record about existing target
-# ( < 0 means no timeout). (integer value)
-#zmq_target_expire = 300
-
-# Update period in seconds of a name service record about existing target.
-# (integer value)
-#zmq_target_update = 180
-
-# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
-# value)
-#use_pub_sub = false
-
-# Use ROUTER remote proxy. (boolean value)
-#use_router_proxy = false
-
-# This option makes direct connections dynamic or static. It makes sense only
-# with use_router_proxy=False which means to use direct connections for direct
-# message types (ignored otherwise). (boolean value)
-#use_dynamic_connections = false
-
-# How many additional connections to a host will be made for failover reasons.
-# This option is actual only in dynamic connections mode. (integer value)
-#zmq_failover_connections = 2
-
-# Minimal port number for random ports range. (port value)
-# Minimum value: 0
-# Maximum value: 65535
-#rpc_zmq_min_port = 49153
-
-# Maximal port number for random ports range. (integer value)
-# Minimum value: 1
-# Maximum value: 65536
-#rpc_zmq_max_port = 65536
-
-# Number of retries to find free port number before fail with ZMQBindError.
-# (integer value)
-#rpc_zmq_bind_port_retries = 100
-
-# Default serialization mechanism for serializing/deserializing
-# outgoing/incoming messages (string value)
-# Possible values:
-# json - <No description provided>
-# msgpack - <No description provided>
-#rpc_zmq_serialization = json
-
-# This option configures round-robin mode in zmq socket. True means not keeping
-# a queue when server side disconnects. False means to keep queue and messages
-# even if server is disconnected, when the server appears we send all
-# accumulated messages to it. (boolean value)
-#zmq_immediate = true
-
-# Enable/disable TCP keepalive (KA) mechanism. The default value of -1 (or any
-# other negative value) means to skip any overrides and leave it to OS default;
-# 0 and 1 (or any other positive value) mean to disable and enable the option
-# respectively. (integer value)
-#zmq_tcp_keepalive = -1
-
-# The duration between two keepalive transmissions in idle condition. The unit
-# is platform dependent, for example, seconds in Linux, milliseconds in Windows
-# etc. The default value of -1 (or any other negative value and 0) means to
-# skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_idle = -1
-
-# The number of retransmissions to be carried out before declaring that remote
-# end is not available. The default value of -1 (or any other negative value
-# and 0) means to skip any overrides and leave it to OS default. (integer
-# value)
-#zmq_tcp_keepalive_cnt = -1
-
-# The duration between two successive keepalive retransmissions, if
-# acknowledgement to the previous keepalive transmission is not received. The
-# unit is platform dependent, for example, seconds in Linux, milliseconds in
-# Windows etc. The default value of -1 (or any other negative value and 0)
-# means to skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_intvl = -1
-
-# Maximum number of (green) threads to work concurrently. (integer value)
-#rpc_thread_pool_size = 100
-
-# Expiration timeout in seconds of a sent/received message after which it is
-# not tracked anymore by a client/server. (integer value)
-#rpc_message_ttl = 300
-
-# Wait for message acknowledgements from receivers. This mechanism works only
-# via proxy without PUB/SUB. (boolean value)
-#rpc_use_acks = false
-
-# Number of seconds to wait for an ack from a cast/call. After each retry
-# attempt this timeout is multiplied by some specified multiplier. (integer
-# value)
-#rpc_ack_timeout_base = 15
-
-# Number to multiply base ack timeout by after each retry attempt. (integer
-# value)
-#rpc_ack_timeout_multiplier = 2
-
-# Default number of message sending attempts in case of any problems occurred:
-# positive value N means at most N retries, 0 means no retries, None or -1 (or
-# any other negative values) mean to retry forever. This option is used only if
-# acknowledgments are enabled. (integer value)
-#rpc_retry_attempts = 3
-
-# List of publisher hosts SubConsumer can subscribe on. This option has higher
-# priority then the default publishers list taken from the matchmaker. (list
-# value)
-#subscribe_on =
+[cors]
+#
+# From oslo.middleware
+#
+
+# Indicate whether this resource may be shared with the domain
+# received in the requests "origin" header. Format:
+# "<protocol>://<host>[:<port>]", no trailing slash. Example:
+# https://horizon.example.com (list value)
+
+# Indicate that the actual request can include user credentials
+# (boolean value)
+
+# Indicate which headers are safe to expose to the API. Defaults to
+# HTTP Simple Headers. (list value)
+
+# Maximum cache age of CORS preflight requests. (integer value)
+
+# Indicate which methods can be used during the actual request. (list
+# value)
+
+# Indicate which header field names may be used during the actual
+# request. (list value)
 
 
 [oslo_middleware]
-
 #
 # From oslo.middleware
 #
@@ -2480,190 +2136,142 @@
 # Deprecated group/name - [DEFAULT]/max_request_body_size
 #max_request_body_size = 114688
 
-# DEPRECATED: The HTTP Header that will be used to determine what the original
-# request protocol scheme was, even if it was hidden by a SSL termination
-# proxy. (string value)
+# DEPRECATED: The HTTP Header that will be used to determine what the
+# original request protocol scheme was, even if it was hidden by a SSL
+# termination proxy. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 #secure_proxy_ssl_header = X-Forwarded-Proto
 
-# Whether the application is behind a proxy or not. This determines if the
-# middleware should parse the headers or not. (boolean value)
-#enable_proxy_headers_parsing = false
-
+# Whether the application is behind a proxy or not. This determines if
+# the middleware should parse the headers or not. (boolean value)
+enable_proxy_headers_parsing = True
+
+[database]
+#
+# From oslo.db
+#
+
+# If True, SQLite uses synchronous mode. (boolean value)
+#sqlite_synchronous = true
+
+# The back end to use for the database. (string value)
+# Deprecated group/name - [DEFAULT]/db_backend
+#backend = sqlalchemy
+
+# The SQLAlchemy connection string to use to connect to the database.
+# (string value)
+# Deprecated group/name - [DEFAULT]/sql_connection
+# Deprecated group/name - [DATABASE]/sql_connection
+# Deprecated group/name - [sql]/connection
+#connection = <None>
+connection = mysql+pymysql://heat:opnfv_secret@10.167.4.23/heat?charset=utf8
+# The SQLAlchemy connection string to use to connect to the slave
+# database. (string value)
+#slave_connection = <None>
+
+# The SQL mode to be used for MySQL sessions. This option, including
+# the default, overrides any server-set SQL mode. To use whatever SQL
+# mode is set by the server configuration, set this to no value.
+# Example: mysql_sql_mode= (string value)
+#mysql_sql_mode = TRADITIONAL
+
+# If True, transparently enables support for handling MySQL Cluster
+# (NDB). (boolean value)
+#mysql_enable_ndb = false
+
+# Connections which have been present in the connection pool longer
+# than this number of seconds will be replaced with a new one the next
+# time they are checked out from the pool. (integer value)
+# Deprecated group/name - [DATABASE]/idle_timeout
+# Deprecated group/name - [database]/idle_timeout
+# Deprecated group/name - [DEFAULT]/sql_idle_timeout
+# Deprecated group/name - [DATABASE]/sql_idle_timeout
+# Deprecated group/name - [sql]/idle_timeout
+#connection_recycle_time = 3600
+connection_recycle_time = 300
+
+# Minimum number of SQL connections to keep open in a pool. (integer
+# value)
+# Deprecated group/name - [DEFAULT]/sql_min_pool_size
+# Deprecated group/name - [DATABASE]/sql_min_pool_size
+#min_pool_size = 1
+
+# Maximum number of SQL connections to keep open in a pool. Setting a
+# value of 0 indicates no limit. (integer value)
+# Deprecated group/name - [DEFAULT]/sql_max_pool_size
+# Deprecated group/name - [DATABASE]/sql_max_pool_size
+#max_pool_size = 5
+max_pool_size = 10
+
+# Maximum number of database connection retries during startup. Set to
+# -1 to specify an infinite retry count. (integer value)
+# Deprecated group/name - [DEFAULT]/sql_max_retries
+# Deprecated group/name - [DATABASE]/sql_max_retries
+#max_retries = 10
+max_retries = -1
+
+# Interval between retries of opening a SQL connection. (integer
+# value)
+# Deprecated group/name - [DEFAULT]/sql_retry_interval
+# Deprecated group/name - [DATABASE]/reconnect_interval
+#retry_interval = 10
+
+# If set, use this value for max_overflow with SQLAlchemy. (integer
+# value)
+# Deprecated group/name - [DEFAULT]/sql_max_overflow
+# Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
+#max_overflow = 50
+max_overflow = 30
+
+# Verbosity of SQL debugging information: 0=None, 100=Everything.
+# (integer value)
+# Minimum value: 0
+# Maximum value: 100
+# Deprecated group/name - [DEFAULT]/sql_connection_debug
+#connection_debug = 0
+
+# Add Python stack traces to SQL as comment strings. (boolean value)
+# Deprecated group/name - [DEFAULT]/sql_connection_trace
+#connection_trace = false
+
+# If set, use this value for pool_timeout with SQLAlchemy. (integer
+# value)
+# Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
+#pool_timeout = <None>
+
+# Enable the experimental use of database reconnect on connection
+# lost. (boolean value)
+#use_db_reconnect = false
+
+# Seconds between retries of a database transaction. (integer value)
+#db_retry_interval = 1
+
+# If True, increases the interval between retries of a database
+# operation up to db_max_retry_interval. (boolean value)
+#db_inc_retry_interval = true
+
+# If db_inc_retry_interval is set, the maximum seconds between retries
+# of a database operation. (integer value)
+#db_max_retry_interval = 10
+
+# Maximum retries in case of connection error or deadlock error before
+# error is raised. Set to -1 to specify an infinite retry count.
+# (integer value)
+#db_max_retries = 20
+
+#
+# From oslo.db.concurrency
+#
+
+# Enable the experimental use of thread pooling for all DB API calls
+# (boolean value)
+# Deprecated group/name - [DEFAULT]/dbapi_use_tpool
+#use_tpool = false
 
 [oslo_policy]
 
-#
-# From oslo.policy
-#
-
-# This option controls whether or not to enforce scope when evaluating
-# policies. If ``True``, the scope of the token used in the request is compared
-# to the ``scope_types`` of the policy being enforced. If the scopes do not
-# match, an ``InvalidScope`` exception will be raised. If ``False``, a message
-# will be logged informing operators that policies are being invoked with
-# mismatching scope. (boolean value)
-#enforce_scope = false
-
-# The file that defines policies. (string value)
-#policy_file = policy.json
-
-# Default rule. Enforced when a requested rule is not found. (string value)
-#policy_default_rule = default
-
-# Directories where policy configuration files are stored. They can be relative
-# to any directory in the search path defined by the config_dir option, or
-# absolute paths. The file defined by policy_file must exist for these
-# directories to be searched.  Missing or empty directories are ignored. (multi
-# valued)
-#policy_dirs = policy.d
-
-# Content Type to send and receive data for REST based policy check (string
-# value)
-# Possible values:
-# application/x-www-form-urlencoded - <No description provided>
-# application/json - <No description provided>
-#remote_content_type = application/x-www-form-urlencoded
-
-# server identity verification for REST based policy check (boolean value)
-#remote_ssl_verify_server_crt = false
-
-# Absolute path to ca cert file for REST based policy check (string value)
-#remote_ssl_ca_crt_file = <None>
-
-# Absolute path to client cert for REST based policy check (string value)
-#remote_ssl_client_crt_file = <None>
-
-# Absolute path client key file REST based policy check (string value)
-#remote_ssl_client_key_file = <None>
-
-
-[paste_deploy]
-
-#
-# From heat.common.config
-#
-
-# The flavor to use. (string value)
-#flavor = <None>
-
-# The API paste config file to use. (string value)
-#api_paste_config = api-paste.ini
-
-
-[profiler]
-
-#
-# From heat.common.config
-#
-
-#
-# Enables the profiling for all services on this node. Default value is False
-# (fully disable the profiling feature).
-#
-# Possible values:
-#
-# * True: Enables the feature
-# * False: Disables the feature. The profiling cannot be started via this
-# project
-# operations. If the profiling is triggered by another project, this project
-# part
-# will be empty.
-#  (boolean value)
-# Deprecated group/name - [profiler]/profiler_enabled
-#enabled = false
-
-#
-# Enables SQL requests profiling in services. Default value is False (SQL
-# requests won't be traced).
-#
-# Possible values:
-#
-# * True: Enables SQL requests profiling. Each SQL query will be part of the
-# trace and can the be analyzed by how much time was spent for that.
-# * False: Disables SQL requests profiling. The spent time is only shown on a
-# higher level of operations. Single SQL queries cannot be analyzed this
-# way.
-#  (boolean value)
-#trace_sqlalchemy = false
-
-#
-# Secret key(s) to use for encrypting context data for performance profiling.
-# This string value should have the following format:
-# <key1>[,<key2>,...<keyn>],
-# where each key is some random string. A user who triggers the profiling via
-# the REST API has to set one of these keys in the headers of the REST API call
-# to include profiling results of this node for this particular project.
-#
-# Both "enabled" flag and "hmac_keys" config options should be set to enable
-# profiling. Also, to generate correct profiling information across all
-# services
-# at least one key needs to be consistent between OpenStack projects. This
-# ensures it can be used from client side to generate the trace, containing
-# information from all possible resources. (string value)
-#hmac_keys = SECRET_KEY
-
-#
-# Connection string for a notifier backend. Default value is messaging:// which
-# sets the notifier to oslo_messaging.
-#
-# Examples of possible values:
-#
-# * messaging://: use oslo_messaging driver for sending notifications.
-# * mongodb://127.0.0.1:27017 : use mongodb driver for sending notifications.
-# * elasticsearch://127.0.0.1:9200 : use elasticsearch driver for sending
-# notifications.
-#  (string value)
-#connection_string = messaging://
-
-#
-# Document type for notification indexing in elasticsearch.
-#  (string value)
-#es_doc_type = notification
-
-#
-# This parameter is a time value parameter (for example: es_scroll_time=2m),
-# indicating for how long the nodes that participate in the search will
-# maintain
-# relevant resources in order to continue and support it.
-#  (string value)
-#es_scroll_time = 2m
-
-#
-# Elasticsearch splits large requests in batches. This parameter defines
-# maximum size of each batch (for example: es_scroll_size=10000).
-#  (integer value)
-#es_scroll_size = 10000
-
-#
-# Redissentinel provides a timeout option on the connections.
-# This parameter defines that timeout (for example: socket_timeout=0.1).
-#  (floating point value)
-#socket_timeout = 0.1
-
-#
-# Redissentinel uses a service name to identify a master redis service.
-# This parameter defines the name (for example:
-# sentinal_service_name=mymaster).
-#  (string value)
-#sentinel_service_name = mymaster
-
-
-[revision]
-
-#
-# From heat.common.config
-#
-
-# Heat build revision. If you would prefer to manage your build revision
-# separately, you can move this section to a different file and add it as
-# another config option. (string value)
-#heat_revision = unknown
-
-
 [ssl]
-
 #
 # From oslo.service.sslutils
 #
@@ -2688,84 +2296,3 @@
 # Sets the list of available ciphers. value should be a string in the OpenSSL
 # cipher list format. (string value)
 #ciphers = <None>
-
-
-[trustee]
-
-#
-# From heat.common.context
-#
-
-# Authentication type to load (string value)
-# Deprecated group/name - [trustee]/auth_plugin
-#auth_type = <None>
-
-# Config Section from which to load plugin specific options (string value)
-#auth_section = <None>
-
-# Authentication URL (string value)
-#auth_url = <None>
-
-# Scope for system operations (string value)
-#system_scope = <None>
-
-# Domain ID to scope to (string value)
-#domain_id = <None>
-
-# Domain name to scope to (string value)
-#domain_name = <None>
-
-# Project ID to scope to (string value)
-# Deprecated group/name - [trustee]/tenant_id
-#project_id = <None>
-
-# Project name to scope to (string value)
-# Deprecated group/name - [trustee]/tenant_name
-#project_name = <None>
-
-# Domain ID containing project (string value)
-#project_domain_id = <None>
-
-# Domain name containing project (string value)
-#project_domain_name = <None>
-
-# Trust ID (string value)
-#trust_id = <None>
-
-# Optional domain ID to use with v3 and v2 parameters. It will be used for both
-# the user and project domain in v3 and ignored in v2 authentication. (string
-# value)
-#default_domain_id = <None>
-
-# Optional domain name to use with v3 API and v2 parameters. It will be used
-# for both the user and project domain in v3 and ignored in v2 authentication.
-# (string value)
-#default_domain_name = <None>
-
-# User id (string value)
-#user_id = <None>
-
-# Username (string value)
-# Deprecated group/name - [trustee]/user_name
-#username = <None>
-
-# User's domain id (string value)
-#user_domain_id = <None>
-
-# User's domain name (string value)
-#user_domain_name = <None>
-
-# User's password (string value)
-#password = <None>
-
-
-[volumes]
-
-#
-# From heat.common.config
-#
-
-# Indicate if cinder-backup service is enabled. This is a temporary workaround
-# until cinder-backup service becomes discoverable, see LP#1334856. (boolean
-# value)
-#backups_enabled = true

2018-09-01 22:53:07,301 [salt.state       :1941][INFO    ][32692] Completed state [/etc/heat/heat.conf] at time 22:53:07.300756 duration_in_ms=303.773
2018-09-01 22:53:07,303 [salt.state       :1770][INFO    ][32692] Running state [heat-manage db_sync] at time 22:53:07.302992
2018-09-01 22:53:07,303 [salt.state       :1803][INFO    ][32692] Executing state cmd.run for [heat-manage db_sync]
2018-09-01 22:53:07,304 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command 'heat-manage db_sync' in directory '/root'
2018-09-01 22:53:09,352 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901225309343307
2018-09-01 22:53:09,378 [salt.minion      :1431][INFO    ][2149] Starting a new job with PID 2149
2018-09-01 22:53:09,397 [salt.minion      :1708][INFO    ][2149] Returning information for job: 20180901225309343307
2018-09-01 22:53:14,847 [salt.state       :290 ][INFO    ][32692] {'pid': 2140, 'retcode': 0, 'stderr': '', 'stdout': '2018-09-01 22:53:08.476 2141 INFO migrate.versioning.api [-] 70 -> 71... \n2018-09-01 22:53:11.896 2141 INFO migrate.versioning.api [-] done\n2018-09-01 22:53:11.896 2141 INFO migrate.versioning.api [-] 71 -> 72... \n2018-09-01 22:53:12.477 2141 INFO migrate.versioning.api [-] done\n2018-09-01 22:53:12.477 2141 INFO migrate.versioning.api [-] 72 -> 73... \n2018-09-01 22:53:12.829 2141 INFO migrate.versioning.api [-] done\n2018-09-01 22:53:12.829 2141 INFO migrate.versioning.api [-] 73 -> 74... \n2018-09-01 22:53:12.840 2141 INFO migrate.versioning.api [-] done\n2018-09-01 22:53:12.840 2141 INFO migrate.versioning.api [-] 74 -> 75... \n2018-09-01 22:53:12.850 2141 INFO migrate.versioning.api [-] done\n2018-09-01 22:53:12.851 2141 INFO migrate.versioning.api [-] 75 -> 76... \n2018-09-01 22:53:12.861 2141 INFO migrate.versioning.api [-] done\n2018-09-01 22:53:12.861 2141 INFO migrate.versioning.api [-] 76 -> 77... \n2018-09-01 22:53:12.871 2141 INFO migrate.versioning.api [-] done\n2018-09-01 22:53:12.871 2141 INFO migrate.versioning.api [-] 77 -> 78... \n2018-09-01 22:53:12.882 2141 INFO migrate.versioning.api [-] done\n2018-09-01 22:53:12.883 2141 INFO migrate.versioning.api [-] 78 -> 79... \n2018-09-01 22:53:14.090 2141 INFO migrate.versioning.api [-] done\n2018-09-01 22:53:14.091 2141 INFO migrate.versioning.api [-] 79 -> 80... \n2018-09-01 22:53:14.696 2141 INFO migrate.versioning.api [-] done\n2018-09-01 22:53:14.697 2141 INFO migrate.versioning.api [-] 80 -> 81... \n2018-09-01 22:53:14.707 2141 INFO migrate.versioning.api [-] done\n2018-09-01 22:53:14.707 2141 INFO migrate.versioning.api [-] 81 -> 82... \n2018-09-01 22:53:14.717 2141 INFO migrate.versioning.api [-] done\n2018-09-01 22:53:14.717 2141 INFO migrate.versioning.api [-] 82 -> 83... \n2018-09-01 22:53:14.727 2141 INFO migrate.versioning.api [-] done\n2018-09-01 22:53:14.727 2141 INFO migrate.versioning.api [-] 83 -> 84... \n2018-09-01 22:53:14.737 2141 INFO migrate.versioning.api [-] done\n2018-09-01 22:53:14.737 2141 INFO migrate.versioning.api [-] 84 -> 85... \n2018-09-01 22:53:14.747 2141 INFO migrate.versioning.api [-] done'}
2018-09-01 22:53:14,848 [salt.state       :1941][INFO    ][32692] Completed state [heat-manage db_sync] at time 22:53:14.848756 duration_in_ms=7545.763
2018-09-01 22:53:14,850 [salt.state       :1770][INFO    ][32692] Running state [/etc/heat/api-paste.ini] at time 22:53:14.850203
2018-09-01 22:53:14,850 [salt.state       :1803][INFO    ][32692] Executing state file.managed for [/etc/heat/api-paste.ini]
2018-09-01 22:53:14,876 [salt.fileclient  :1215][INFO    ][32692] Fetching file from saltenv 'base', ** done ** 'heat/files/queens/api-paste.ini'
2018-09-01 22:53:14,887 [salt.state       :290 ][INFO    ][32692] {'mode': '0640'}
2018-09-01 22:53:14,887 [salt.state       :1941][INFO    ][32692] Completed state [/etc/heat/api-paste.ini] at time 22:53:14.887182 duration_in_ms=36.98
2018-09-01 22:53:14,887 [salt.state       :1770][INFO    ][32692] Running state [/etc/default/heat-api] at time 22:53:14.887558
2018-09-01 22:53:14,887 [salt.state       :1803][INFO    ][32692] Executing state file.managed for [/etc/default/heat-api]
2018-09-01 22:53:14,905 [salt.fileclient  :1215][INFO    ][32692] Fetching file from saltenv 'base', ** done ** 'heat/files/default'
2018-09-01 22:53:14,915 [salt.state       :290 ][INFO    ][32692] File changed:
New file
2018-09-01 22:53:14,915 [salt.state       :1941][INFO    ][32692] Completed state [/etc/default/heat-api] at time 22:53:14.915394 duration_in_ms=27.836
2018-09-01 22:53:14,915 [salt.state       :1770][INFO    ][32692] Running state [/etc/default/heat-api-cfn] at time 22:53:14.915728
2018-09-01 22:53:14,915 [salt.state       :1803][INFO    ][32692] Executing state file.managed for [/etc/default/heat-api-cfn]
2018-09-01 22:53:14,932 [salt.state       :290 ][INFO    ][32692] File changed:
New file
2018-09-01 22:53:14,932 [salt.state       :1941][INFO    ][32692] Completed state [/etc/default/heat-api-cfn] at time 22:53:14.932940 duration_in_ms=17.212
2018-09-01 22:53:14,933 [salt.state       :1770][INFO    ][32692] Running state [/etc/default/heat-engine] at time 22:53:14.933300
2018-09-01 22:53:14,933 [salt.state       :1803][INFO    ][32692] Executing state file.managed for [/etc/default/heat-engine]
2018-09-01 22:53:14,952 [salt.state       :290 ][INFO    ][32692] File changed:
New file
2018-09-01 22:53:14,952 [salt.state       :1941][INFO    ][32692] Completed state [/etc/default/heat-engine] at time 22:53:14.952336 duration_in_ms=19.035
2018-09-01 22:53:14,952 [salt.state       :1770][INFO    ][32692] Running state [source /root/keystonercv3; heat-keystone-setup-domain --stack-user-domain-name heat_user_domain --stack-domain-admin heat_domain_admin --stack-domain-admin-password opnfv_secret] at time 22:53:14.952702
2018-09-01 22:53:14,953 [salt.state       :1803][INFO    ][32692] Executing state cmd.run for [source /root/keystonercv3; heat-keystone-setup-domain --stack-user-domain-name heat_user_domain --stack-domain-admin heat_domain_admin --stack-domain-admin-password opnfv_secret]
2018-09-01 22:53:14,953 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command 'source /root/keystonercv3; heat-keystone-setup-domain --stack-user-domain-name heat_user_domain --stack-domain-admin heat_domain_admin --stack-domain-admin-password opnfv_secret' in directory '/root'
2018-09-01 22:53:18,383 [salt.state       :290 ][INFO    ][32692] {'pid': 2160, 'retcode': 0, 'stderr': "/usr/lib/python2.7/dist-packages/keystoneauth1/adapter.py:179: UserWarning: Using keystoneclient sessions has been deprecated. Please update your software to use keystoneauth1.\n  warnings.warn('Using keystoneclient sessions has been deprecated. '", 'stdout': '2018-09-01 22:53:16.080 2161 INFO __main__ [-] Creating domain heat_user_domain\n\nPlease update your heat.conf with the following in [DEFAULT]\n\nstack_user_domain_id=fa08e8124cfa43e1b1aa91a8c83ab6c2\nstack_domain_admin=heat_domain_admin\nstack_domain_admin_password=opnfv_secret'}
2018-09-01 22:53:18,384 [salt.state       :1941][INFO    ][32692] Completed state [source /root/keystonercv3; heat-keystone-setup-domain --stack-user-domain-name heat_user_domain --stack-domain-admin heat_domain_admin --stack-domain-admin-password opnfv_secret] at time 22:53:18.384631 duration_in_ms=3431.927
2018-09-01 22:53:18,387 [salt.state       :1770][INFO    ][32692] Running state [chown heat:heat /var/log/heat/ -R] at time 22:53:18.387231
2018-09-01 22:53:18,388 [salt.state       :1803][INFO    ][32692] Executing state cmd.run for [chown heat:heat /var/log/heat/ -R]
2018-09-01 22:53:18,389 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command 'chown heat:heat /var/log/heat/ -R' in directory '/root'
2018-09-01 22:53:18,410 [salt.state       :290 ][INFO    ][32692] {'pid': 2167, 'retcode': 0, 'stderr': '', 'stdout': ''}
2018-09-01 22:53:18,410 [salt.state       :1941][INFO    ][32692] Completed state [chown heat:heat /var/log/heat/ -R] at time 22:53:18.410848 duration_in_ms=23.618
2018-09-01 22:53:18,415 [salt.state       :1770][INFO    ][32692] Running state [heat-api] at time 22:53:18.415093
2018-09-01 22:53:18,415 [salt.state       :1803][INFO    ][32692] Executing state service.running for [heat-api]
2018-09-01 22:53:18,416 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['systemctl', 'status', 'heat-api.service', '-n', '0'] in directory '/root'
2018-09-01 22:53:18,441 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['systemctl', 'is-active', 'heat-api.service'] in directory '/root'
2018-09-01 22:53:18,464 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['systemctl', 'is-enabled', 'heat-api.service'] in directory '/root'
2018-09-01 22:53:18,479 [salt.state       :290 ][INFO    ][32692] The service heat-api is already running
2018-09-01 22:53:18,480 [salt.state       :1941][INFO    ][32692] Completed state [heat-api] at time 22:53:18.480804 duration_in_ms=65.711
2018-09-01 22:53:18,481 [salt.state       :1770][INFO    ][32692] Running state [heat-api] at time 22:53:18.481319
2018-09-01 22:53:18,482 [salt.state       :1803][INFO    ][32692] Executing state service.mod_watch for [heat-api]
2018-09-01 22:53:18,483 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['systemctl', 'is-active', 'heat-api.service'] in directory '/root'
2018-09-01 22:53:18,507 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'heat-api.service'] in directory '/root'
2018-09-01 22:53:18,597 [salt.state       :290 ][INFO    ][32692] {'heat-api': True}
2018-09-01 22:53:18,597 [salt.state       :1941][INFO    ][32692] Completed state [heat-api] at time 22:53:18.597776 duration_in_ms=116.458
2018-09-01 22:53:18,598 [salt.state       :1770][INFO    ][32692] Running state [heat-api-cfn] at time 22:53:18.598866
2018-09-01 22:53:18,599 [salt.state       :1803][INFO    ][32692] Executing state service.running for [heat-api-cfn]
2018-09-01 22:53:18,601 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['systemctl', 'status', 'heat-api-cfn.service', '-n', '0'] in directory '/root'
2018-09-01 22:53:18,619 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['systemctl', 'is-active', 'heat-api-cfn.service'] in directory '/root'
2018-09-01 22:53:18,635 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['systemctl', 'is-enabled', 'heat-api-cfn.service'] in directory '/root'
2018-09-01 22:53:18,650 [salt.state       :290 ][INFO    ][32692] The service heat-api-cfn is already running
2018-09-01 22:53:18,650 [salt.state       :1941][INFO    ][32692] Completed state [heat-api-cfn] at time 22:53:18.650864 duration_in_ms=51.998
2018-09-01 22:53:18,651 [salt.state       :1770][INFO    ][32692] Running state [heat-api-cfn] at time 22:53:18.651139
2018-09-01 22:53:18,651 [salt.state       :1803][INFO    ][32692] Executing state service.mod_watch for [heat-api-cfn]
2018-09-01 22:53:18,652 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['systemctl', 'is-active', 'heat-api-cfn.service'] in directory '/root'
2018-09-01 22:53:18,669 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'heat-api-cfn.service'] in directory '/root'
2018-09-01 22:53:18,706 [salt.state       :290 ][INFO    ][32692] {'heat-api-cfn': True}
2018-09-01 22:53:18,706 [salt.state       :1941][INFO    ][32692] Completed state [heat-api-cfn] at time 22:53:18.706526 duration_in_ms=55.385
2018-09-01 22:53:18,709 [salt.state       :1770][INFO    ][32692] Running state [heat-engine] at time 22:53:18.708235
2018-09-01 22:53:18,709 [salt.state       :1803][INFO    ][32692] Executing state service.running for [heat-engine]
2018-09-01 22:53:18,710 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['systemctl', 'status', 'heat-engine.service', '-n', '0'] in directory '/root'
2018-09-01 22:53:18,730 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['systemctl', 'is-active', 'heat-engine.service'] in directory '/root'
2018-09-01 22:53:18,746 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['systemctl', 'is-enabled', 'heat-engine.service'] in directory '/root'
2018-09-01 22:53:18,764 [salt.state       :290 ][INFO    ][32692] The service heat-engine is already running
2018-09-01 22:53:18,765 [salt.state       :1941][INFO    ][32692] Completed state [heat-engine] at time 22:53:18.765075 duration_in_ms=56.84
2018-09-01 22:53:18,765 [salt.state       :1770][INFO    ][32692] Running state [heat-engine] at time 22:53:18.765455
2018-09-01 22:53:18,765 [salt.state       :1803][INFO    ][32692] Executing state service.mod_watch for [heat-engine]
2018-09-01 22:53:18,766 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['systemctl', 'is-active', 'heat-engine.service'] in directory '/root'
2018-09-01 22:53:18,783 [salt.loaded.int.module.cmdmod:395 ][INFO    ][32692] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'heat-engine.service'] in directory '/root'
2018-09-01 22:53:18,965 [salt.state       :290 ][INFO    ][32692] {'heat-engine': True}
2018-09-01 22:53:18,965 [salt.state       :1941][INFO    ][32692] Completed state [heat-engine] at time 22:53:18.965426 duration_in_ms=199.971
2018-09-01 22:53:18,968 [salt.minion      :1708][INFO    ][32692] Returning information for job: 20180901225223604824
2018-09-01 22:54:46,734 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command test.ping with jid 20180901225446727565
2018-09-01 22:54:46,754 [salt.minion      :1431][INFO    ][2387] Starting a new job with PID 2387
2018-09-01 22:54:46,775 [salt.minion      :1708][INFO    ][2387] Returning information for job: 20180901225446727565
2018-09-01 22:54:46,914 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command state.sls with jid 20180901225446904408
2018-09-01 22:54:46,936 [salt.minion      :1431][INFO    ][2392] Starting a new job with PID 2392
2018-09-01 22:54:50,632 [salt.state       :905 ][INFO    ][2392] Loading fresh modules for state activity
2018-09-01 22:54:50,675 [salt.fileclient  :1215][INFO    ][2392] Fetching file from saltenv 'base', ** done ** 'cinder/init.sls'
2018-09-01 22:54:50,703 [salt.fileclient  :1215][INFO    ][2392] Fetching file from saltenv 'base', ** done ** 'cinder/controller.sls'
2018-09-01 22:54:50,802 [salt.fileclient  :1215][INFO    ][2392] Fetching file from saltenv 'base', ** done ** 'cinder/user.sls'
2018-09-01 22:54:51,244 [salt.fileclient  :1215][INFO    ][2392] Fetching file from saltenv 'base', ** done ** 'cinder/db/offline_sync.sls'
2018-09-01 22:54:51,296 [salt.fileclient  :1215][INFO    ][2392] Fetching file from saltenv 'base', ** done ** 'cinder/volume.sls'
2018-09-01 22:54:52,006 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901225451993907
2018-09-01 22:54:52,028 [salt.minion      :1431][INFO    ][2425] Starting a new job with PID 2425
2018-09-01 22:54:52,045 [salt.minion      :1708][INFO    ][2425] Returning information for job: 20180901225451993907
2018-09-01 22:54:52,400 [salt.state       :1770][INFO    ][2392] Running state [apache2] at time 22:54:52.399991
2018-09-01 22:54:52,400 [salt.state       :1803][INFO    ][2392] Executing state pkg.installed for [apache2]
2018-09-01 22:54:52,400 [salt.loaded.int.module.cmdmod:395 ][INFO    ][2392] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:54:52,831 [salt.state       :290 ][INFO    ][2392] All specified packages are already installed
2018-09-01 22:54:52,831 [salt.state       :1941][INFO    ][2392] Completed state [apache2] at time 22:54:52.831592 duration_in_ms=431.6
2018-09-01 22:54:52,831 [salt.state       :1770][INFO    ][2392] Running state [openssl] at time 22:54:52.831825
2018-09-01 22:54:52,832 [salt.state       :1803][INFO    ][2392] Executing state pkg.installed for [openssl]
2018-09-01 22:54:52,836 [salt.state       :290 ][INFO    ][2392] All specified packages are already installed
2018-09-01 22:54:52,837 [salt.state       :1941][INFO    ][2392] Completed state [openssl] at time 22:54:52.837052 duration_in_ms=5.227
2018-09-01 22:54:52,837 [salt.state       :1770][INFO    ][2392] Running state [a2enmod ssl] at time 22:54:52.837430
2018-09-01 22:54:52,837 [salt.state       :1803][INFO    ][2392] Executing state cmd.run for [a2enmod ssl]
2018-09-01 22:54:52,837 [salt.state       :290 ][INFO    ][2392] /etc/apache2/mods-enabled/ssl.load exists
2018-09-01 22:54:52,838 [salt.state       :1941][INFO    ][2392] Completed state [a2enmod ssl] at time 22:54:52.838006 duration_in_ms=0.576
2018-09-01 22:54:52,838 [salt.state       :1770][INFO    ][2392] Running state [a2enmod rewrite] at time 22:54:52.838338
2018-09-01 22:54:52,838 [salt.state       :1803][INFO    ][2392] Executing state cmd.run for [a2enmod rewrite]
2018-09-01 22:54:52,838 [salt.state       :290 ][INFO    ][2392] /etc/apache2/mods-enabled/rewrite.load exists
2018-09-01 22:54:52,838 [salt.state       :1941][INFO    ][2392] Completed state [a2enmod rewrite] at time 22:54:52.838882 duration_in_ms=0.544
2018-09-01 22:54:52,839 [salt.state       :1770][INFO    ][2392] Running state [libapache2-mod-wsgi] at time 22:54:52.839181
2018-09-01 22:54:52,839 [salt.state       :1803][INFO    ][2392] Executing state pkg.installed for [libapache2-mod-wsgi]
2018-09-01 22:54:52,844 [salt.state       :290 ][INFO    ][2392] All specified packages are already installed
2018-09-01 22:54:52,844 [salt.state       :1941][INFO    ][2392] Completed state [libapache2-mod-wsgi] at time 22:54:52.844614 duration_in_ms=5.433
2018-09-01 22:54:52,844 [salt.state       :1770][INFO    ][2392] Running state [a2enmod wsgi] at time 22:54:52.844924
2018-09-01 22:54:52,845 [salt.state       :1803][INFO    ][2392] Executing state cmd.run for [a2enmod wsgi]
2018-09-01 22:54:52,845 [salt.state       :290 ][INFO    ][2392] /etc/apache2/mods-enabled/wsgi.load exists
2018-09-01 22:54:52,845 [salt.state       :1941][INFO    ][2392] Completed state [a2enmod wsgi] at time 22:54:52.845444 duration_in_ms=0.52
2018-09-01 22:54:52,847 [salt.state       :1770][INFO    ][2392] Running state [/etc/apache2/mods-enabled/mpm_prefork.load] at time 22:54:52.847537
2018-09-01 22:54:52,847 [salt.state       :1803][INFO    ][2392] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_prefork.load]
2018-09-01 22:54:52,847 [salt.state       :290 ][INFO    ][2392] File /etc/apache2/mods-enabled/mpm_prefork.load is not present
2018-09-01 22:54:52,848 [salt.state       :1941][INFO    ][2392] Completed state [/etc/apache2/mods-enabled/mpm_prefork.load] at time 22:54:52.848118 duration_in_ms=0.581
2018-09-01 22:54:52,848 [salt.state       :1770][INFO    ][2392] Running state [/etc/apache2/mods-enabled/mpm_prefork.conf] at time 22:54:52.848274
2018-09-01 22:54:52,848 [salt.state       :1803][INFO    ][2392] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_prefork.conf]
2018-09-01 22:54:52,848 [salt.state       :290 ][INFO    ][2392] File /etc/apache2/mods-enabled/mpm_prefork.conf is not present
2018-09-01 22:54:52,848 [salt.state       :1941][INFO    ][2392] Completed state [/etc/apache2/mods-enabled/mpm_prefork.conf] at time 22:54:52.848784 duration_in_ms=0.51
2018-09-01 22:54:52,848 [salt.state       :1770][INFO    ][2392] Running state [/etc/apache2/mods-enabled/mpm_worker.load] at time 22:54:52.848933
2018-09-01 22:54:52,849 [salt.state       :1803][INFO    ][2392] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_worker.load]
2018-09-01 22:54:52,849 [salt.state       :290 ][INFO    ][2392] File /etc/apache2/mods-enabled/mpm_worker.load is not present
2018-09-01 22:54:52,849 [salt.state       :1941][INFO    ][2392] Completed state [/etc/apache2/mods-enabled/mpm_worker.load] at time 22:54:52.849406 duration_in_ms=0.472
2018-09-01 22:54:52,849 [salt.state       :1770][INFO    ][2392] Running state [/etc/apache2/mods-enabled/mpm_worker.conf] at time 22:54:52.849552
2018-09-01 22:54:52,849 [salt.state       :1803][INFO    ][2392] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_worker.conf]
2018-09-01 22:54:52,849 [salt.state       :290 ][INFO    ][2392] File /etc/apache2/mods-enabled/mpm_worker.conf is not present
2018-09-01 22:54:52,850 [salt.state       :1941][INFO    ][2392] Completed state [/etc/apache2/mods-enabled/mpm_worker.conf] at time 22:54:52.850018 duration_in_ms=0.466
2018-09-01 22:54:52,851 [salt.state       :1770][INFO    ][2392] Running state [/etc/apache2/mods-available/mpm_event.conf] at time 22:54:52.851410
2018-09-01 22:54:52,851 [salt.state       :1803][INFO    ][2392] Executing state file.managed for [/etc/apache2/mods-available/mpm_event.conf]
2018-09-01 22:54:52,901 [salt.state       :290 ][INFO    ][2392] File /etc/apache2/mods-available/mpm_event.conf is in the correct state
2018-09-01 22:54:52,901 [salt.state       :1941][INFO    ][2392] Completed state [/etc/apache2/mods-available/mpm_event.conf] at time 22:54:52.901140 duration_in_ms=49.731
2018-09-01 22:54:52,901 [salt.state       :1770][INFO    ][2392] Running state [a2enmod mpm_event] at time 22:54:52.901681
2018-09-01 22:54:52,901 [salt.state       :1803][INFO    ][2392] Executing state cmd.run for [a2enmod mpm_event]
2018-09-01 22:54:52,902 [salt.state       :290 ][INFO    ][2392] /etc/apache2/mods-enabled/mpm_event.load exists
2018-09-01 22:54:52,902 [salt.state       :1941][INFO    ][2392] Completed state [a2enmod mpm_event] at time 22:54:52.902219 duration_in_ms=0.537
2018-09-01 22:54:52,902 [salt.state       :1770][INFO    ][2392] Running state [apache_server_service_task] at time 22:54:52.902798
2018-09-01 22:54:52,902 [salt.state       :1803][INFO    ][2392] Executing state test.show_notification for [apache_server_service_task]
2018-09-01 22:54:52,903 [salt.state       :290 ][INFO    ][2392] Running apache.server.service
2018-09-01 22:54:52,903 [salt.state       :1941][INFO    ][2392] Completed state [apache_server_service_task] at time 22:54:52.903263 duration_in_ms=0.464
2018-09-01 22:54:52,903 [salt.state       :1770][INFO    ][2392] Running state [/etc/apache2/ports.conf] at time 22:54:52.903596
2018-09-01 22:54:52,903 [salt.state       :1803][INFO    ][2392] Executing state file.managed for [/etc/apache2/ports.conf]
2018-09-01 22:54:52,945 [salt.state       :290 ][INFO    ][2392] File /etc/apache2/ports.conf is in the correct state
2018-09-01 22:54:52,945 [salt.state       :1941][INFO    ][2392] Completed state [/etc/apache2/ports.conf] at time 22:54:52.945529 duration_in_ms=41.933
2018-09-01 22:54:52,945 [salt.state       :1770][INFO    ][2392] Running state [/etc/apache2/conf-available/security.conf] at time 22:54:52.945846
2018-09-01 22:54:52,946 [salt.state       :1803][INFO    ][2392] Executing state file.managed for [/etc/apache2/conf-available/security.conf]
2018-09-01 22:54:52,990 [salt.state       :290 ][INFO    ][2392] File /etc/apache2/conf-available/security.conf is in the correct state
2018-09-01 22:54:52,990 [salt.state       :1941][INFO    ][2392] Completed state [/etc/apache2/conf-available/security.conf] at time 22:54:52.990288 duration_in_ms=44.442
2018-09-01 22:54:52,996 [salt.state       :1770][INFO    ][2392] Running state [/etc/apache2/sites-enabled/000-default.conf] at time 22:54:52.996158
2018-09-01 22:54:52,996 [salt.state       :1803][INFO    ][2392] Executing state file.absent for [/etc/apache2/sites-enabled/000-default.conf]
2018-09-01 22:54:52,996 [salt.state       :290 ][INFO    ][2392] File /etc/apache2/sites-enabled/000-default.conf is not present
2018-09-01 22:54:52,996 [salt.state       :1941][INFO    ][2392] Completed state [/etc/apache2/sites-enabled/000-default.conf] at time 22:54:52.996718 duration_in_ms=0.559
2018-09-01 22:54:52,997 [salt.state       :1770][INFO    ][2392] Running state [/etc/apache2/sites-available/wsgi_barbican_admin.conf] at time 22:54:52.997085
2018-09-01 22:54:52,997 [salt.state       :1803][INFO    ][2392] Executing state file.managed for [/etc/apache2/sites-available/wsgi_barbican_admin.conf]
2018-09-01 22:54:53,164 [salt.state       :290 ][INFO    ][2392] File /etc/apache2/sites-available/wsgi_barbican_admin.conf is in the correct state
2018-09-01 22:54:53,164 [salt.state       :1941][INFO    ][2392] Completed state [/etc/apache2/sites-available/wsgi_barbican_admin.conf] at time 22:54:53.164275 duration_in_ms=167.19
2018-09-01 22:54:53,164 [salt.state       :1770][INFO    ][2392] Running state [/etc/apache2/sites-available/wsgi_barbican.conf] at time 22:54:53.164747
2018-09-01 22:54:53,165 [salt.state       :1803][INFO    ][2392] Executing state file.managed for [/etc/apache2/sites-available/wsgi_barbican.conf]
2018-09-01 22:54:53,326 [salt.state       :290 ][INFO    ][2392] File /etc/apache2/sites-available/wsgi_barbican.conf is in the correct state
2018-09-01 22:54:53,327 [salt.state       :1941][INFO    ][2392] Completed state [/etc/apache2/sites-available/wsgi_barbican.conf] at time 22:54:53.327116 duration_in_ms=162.369
2018-09-01 22:54:53,327 [salt.state       :1770][INFO    ][2392] Running state [/etc/apache2/sites-available/keystone_wsgi.conf] at time 22:54:53.327540
2018-09-01 22:54:53,327 [salt.state       :1803][INFO    ][2392] Executing state file.managed for [/etc/apache2/sites-available/keystone_wsgi.conf]
2018-09-01 22:54:53,537 [salt.state       :290 ][INFO    ][2392] File /etc/apache2/sites-available/keystone_wsgi.conf is in the correct state
2018-09-01 22:54:53,538 [salt.state       :1941][INFO    ][2392] Completed state [/etc/apache2/sites-available/keystone_wsgi.conf] at time 22:54:53.538160 duration_in_ms=210.619
2018-09-01 22:54:53,538 [salt.state       :1770][INFO    ][2392] Running state [/etc/apache2/sites-enabled/keystone_wsgi.conf] at time 22:54:53.538606
2018-09-01 22:54:53,538 [salt.state       :1803][INFO    ][2392] Executing state file.symlink for [/etc/apache2/sites-enabled/keystone_wsgi.conf]
2018-09-01 22:54:53,540 [salt.state       :290 ][INFO    ][2392] Symlink /etc/apache2/sites-enabled/keystone_wsgi.conf is present and owned by root:root
2018-09-01 22:54:53,540 [salt.state       :1941][INFO    ][2392] Completed state [/etc/apache2/sites-enabled/keystone_wsgi.conf] at time 22:54:53.540633 duration_in_ms=2.028
2018-09-01 22:54:53,542 [salt.state       :1770][INFO    ][2392] Running state [apache2] at time 22:54:53.542587
2018-09-01 22:54:53,542 [salt.state       :1803][INFO    ][2392] Executing state service.running for [apache2]
2018-09-01 22:54:53,543 [salt.loaded.int.module.cmdmod:395 ][INFO    ][2392] Executing command ['systemctl', 'status', 'apache2.service', '-n', '0'] in directory '/root'
2018-09-01 22:54:53,591 [salt.loaded.int.module.cmdmod:395 ][INFO    ][2392] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-09-01 22:54:53,610 [salt.loaded.int.module.cmdmod:395 ][INFO    ][2392] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-09-01 22:54:53,641 [salt.state       :290 ][INFO    ][2392] The service apache2 is already running
2018-09-01 22:54:53,641 [salt.state       :1941][INFO    ][2392] Completed state [apache2] at time 22:54:53.641842 duration_in_ms=99.254
2018-09-01 22:54:53,643 [salt.state       :1770][INFO    ][2392] Running state [/etc/apache2/conf-enabled/security.conf] at time 22:54:53.643708
2018-09-01 22:54:53,644 [salt.state       :1803][INFO    ][2392] Executing state file.symlink for [/etc/apache2/conf-enabled/security.conf]
2018-09-01 22:54:53,647 [salt.state       :290 ][INFO    ][2392] Symlink /etc/apache2/conf-enabled/security.conf is present and owned by root:root
2018-09-01 22:54:53,648 [salt.state       :1941][INFO    ][2392] Completed state [/etc/apache2/conf-enabled/security.conf] at time 22:54:53.648182 duration_in_ms=4.474
2018-09-01 22:54:53,648 [salt.state       :1770][INFO    ][2392] Running state [/etc/apache2/sites-enabled/keystone_wsgi] at time 22:54:53.648660
2018-09-01 22:54:53,649 [salt.state       :1803][INFO    ][2392] Executing state file.absent for [/etc/apache2/sites-enabled/keystone_wsgi]
2018-09-01 22:54:53,649 [salt.state       :290 ][INFO    ][2392] File /etc/apache2/sites-enabled/keystone_wsgi is not present
2018-09-01 22:54:53,650 [salt.state       :1941][INFO    ][2392] Completed state [/etc/apache2/sites-enabled/keystone_wsgi] at time 22:54:53.650103 duration_in_ms=1.442
2018-09-01 22:54:53,657 [salt.state       :1770][INFO    ][2392] Running state [cinder] at time 22:54:53.656961
2018-09-01 22:54:53,657 [salt.state       :1803][INFO    ][2392] Executing state group.present for [cinder]
2018-09-01 22:54:53,657 [salt.loaded.int.module.cmdmod:395 ][INFO    ][2392] Executing command ['groupadd', '-g 304', '-r', 'cinder'] in directory '/root'
2018-09-01 22:54:53,771 [salt.state       :290 ][INFO    ][2392] {'passwd': 'x', 'gid': 304, 'name': 'cinder', 'members': []}
2018-09-01 22:54:53,773 [salt.state       :1941][INFO    ][2392] Completed state [cinder] at time 22:54:53.772901 duration_in_ms=115.939
2018-09-01 22:54:53,774 [salt.state       :1770][INFO    ][2392] Running state [cinder] at time 22:54:53.774569
2018-09-01 22:54:53,775 [salt.state       :1803][INFO    ][2392] Executing state user.present for [cinder]
2018-09-01 22:54:53,777 [salt.loaded.int.module.cmdmod:395 ][INFO    ][2392] Executing command ['useradd', '-s', '/bin/false', '-u', '304', '-g', '304', '-m', '-d', '/var/lib/cinder', '-r', 'cinder'] in directory '/root'
2018-09-01 22:54:53,900 [salt.state       :290 ][INFO    ][2392] {'shell': '/bin/false', 'workphone': '', 'uid': 304, 'passwd': 'x', 'roomnumber': '', 'groups': ['cinder'], 'home': '/var/lib/cinder', 'name': 'cinder', 'gid': 304, 'fullname': '', 'homephone': ''}
2018-09-01 22:54:53,903 [salt.state       :1941][INFO    ][2392] Completed state [cinder] at time 22:54:53.903257 duration_in_ms=128.687
2018-09-01 22:54:53,905 [salt.state       :1770][INFO    ][2392] Running state [cinder-scheduler] at time 22:54:53.905735
2018-09-01 22:54:53,906 [salt.state       :1803][INFO    ][2392] Executing state pkg.installed for [cinder-scheduler]
2018-09-01 22:54:53,928 [salt.loaded.int.module.cmdmod:395 ][INFO    ][2392] Executing command ['apt-cache', '-q', 'policy', 'cinder-scheduler'] in directory '/root'
2018-09-01 22:54:54,035 [salt.loaded.int.module.cmdmod:395 ][INFO    ][2392] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-09-01 22:54:56,139 [salt.loaded.int.module.cmdmod:395 ][INFO    ][2392] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 22:54:56,177 [salt.loaded.int.module.cmdmod:395 ][INFO    ][2392] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'cinder-scheduler'] in directory '/root'
2018-09-01 22:55:02,152 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901225502143741
2018-09-01 22:55:02,173 [salt.minion      :1431][INFO    ][2947] Starting a new job with PID 2947
2018-09-01 22:55:02,193 [salt.minion      :1708][INFO    ][2947] Returning information for job: 20180901225502143741
2018-09-01 22:55:12,287 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901225512283872
2018-09-01 22:55:12,310 [salt.minion      :1431][INFO    ][3566] Starting a new job with PID 3566
2018-09-01 22:55:12,330 [salt.minion      :1708][INFO    ][3566] Returning information for job: 20180901225512283872
2018-09-01 22:55:20,858 [salt.loaded.int.module.cmdmod:395 ][INFO    ][2392] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:55:20,908 [salt.state       :290 ][INFO    ][2392] Made the following changes:
'python-rtslib-fb' changed from 'absent' to '2.1.57+debian-3'
'python-uritemplate' changed from 'absent' to '0.6-1ubuntu1'
'python-googleapi' changed from 'absent' to '1.4.2-1ubuntu1.1'
'python-cinder' changed from 'absent' to '2:12.0.3-2~u16.04+mcp79'
'python-oauth2client' changed from 'absent' to '2.0.1-1'
'python-suds' changed from 'absent' to '0.7~git20150727.94664dd-3'
'python-oslo.vmware' changed from 'absent' to '2.26.0-1.0~u16.04+mcp2'
'cinder-common' changed from 'absent' to '2:12.0.3-2~u16.04+mcp79'
'python2.7-googleapi' changed from 'absent' to '1'
'python-rsa' changed from 'absent' to '3.2.3-1.1'
'python2.7-rtslib-fb' changed from 'absent' to '1'
'cinder-scheduler' changed from 'absent' to '2:12.0.3-2~u16.04+mcp79'

2018-09-01 22:55:20,933 [salt.state       :905 ][INFO    ][2392] Loading fresh modules for state activity
2018-09-01 22:55:20,957 [salt.state       :1941][INFO    ][2392] Completed state [cinder-scheduler] at time 22:55:20.957212 duration_in_ms=27051.478
2018-09-01 22:55:20,961 [salt.state       :1770][INFO    ][2392] Running state [lvm2] at time 22:55:20.961794
2018-09-01 22:55:20,962 [salt.state       :1803][INFO    ][2392] Executing state pkg.installed for [lvm2]
2018-09-01 22:55:21,497 [salt.state       :290 ][INFO    ][2392] All specified packages are already installed
2018-09-01 22:55:21,498 [salt.state       :1941][INFO    ][2392] Completed state [lvm2] at time 22:55:21.498206 duration_in_ms=536.411
2018-09-01 22:55:21,499 [salt.state       :1770][INFO    ][2392] Running state [python-cinder] at time 22:55:21.499520
2018-09-01 22:55:21,499 [salt.state       :1803][INFO    ][2392] Executing state pkg.installed for [python-cinder]
2018-09-01 22:55:21,505 [salt.state       :290 ][INFO    ][2392] All specified packages are already installed
2018-09-01 22:55:21,505 [salt.state       :1941][INFO    ][2392] Completed state [python-cinder] at time 22:55:21.505763 duration_in_ms=6.243
2018-09-01 22:55:21,506 [salt.state       :1770][INFO    ][2392] Running state [gettext-base] at time 22:55:21.506142
2018-09-01 22:55:21,506 [salt.state       :1803][INFO    ][2392] Executing state pkg.installed for [gettext-base]
2018-09-01 22:55:21,511 [salt.state       :290 ][INFO    ][2392] All specified packages are already installed
2018-09-01 22:55:21,511 [salt.state       :1941][INFO    ][2392] Completed state [gettext-base] at time 22:55:21.511696 duration_in_ms=5.555
2018-09-01 22:55:21,512 [salt.state       :1770][INFO    ][2392] Running state [python-memcache] at time 22:55:21.512045
2018-09-01 22:55:21,512 [salt.state       :1803][INFO    ][2392] Executing state pkg.installed for [python-memcache]
2018-09-01 22:55:21,519 [salt.state       :290 ][INFO    ][2392] All specified packages are already installed
2018-09-01 22:55:21,519 [salt.state       :1941][INFO    ][2392] Completed state [python-memcache] at time 22:55:21.519803 duration_in_ms=7.757
2018-09-01 22:55:21,520 [salt.state       :1770][INFO    ][2392] Running state [python-pycadf] at time 22:55:21.520148
2018-09-01 22:55:21,520 [salt.state       :1803][INFO    ][2392] Executing state pkg.installed for [python-pycadf]
2018-09-01 22:55:21,525 [salt.state       :290 ][INFO    ][2392] All specified packages are already installed
2018-09-01 22:55:21,525 [salt.state       :1941][INFO    ][2392] Completed state [python-pycadf] at time 22:55:21.525501 duration_in_ms=5.352
2018-09-01 22:55:21,527 [salt.state       :1770][INFO    ][2392] Running state [/etc/cinder/cinder.conf] at time 22:55:21.527332
2018-09-01 22:55:21,527 [salt.state       :1803][INFO    ][2392] Executing state file.managed for [/etc/cinder/cinder.conf]
2018-09-01 22:55:21,556 [salt.fileclient  :1215][INFO    ][2392] Fetching file from saltenv 'base', ** done ** 'cinder/files/queens/cinder.conf.controller.Debian'
2018-09-01 22:55:21,686 [salt.fileclient  :1215][INFO    ][2392] Fetching file from saltenv 'base', ** done ** 'cinder/files/backend/_lvm.conf'
2018-09-01 22:55:21,793 [salt.state       :290 ][INFO    ][2392] File changed:
--- 
+++ 
@@ -1,15 +1,4403 @@
+
 [DEFAULT]
+
+#
+# From cinder
+#
+
 rootwrap_config = /etc/cinder/rootwrap.conf
 api_paste_confg = /etc/cinder/api-paste.ini
+#
+# From oslo.messaging
+#
+
+# Size of RPC connection pool. (integer value)
+#rpc_conn_pool_size = 30
+
+# The pool size limit for connections expiration policy (integer
+# value)
+#conn_pool_min_size = 2
+
+# The time-to-live in sec of idle connections in the pool (integer
+# value)
+#conn_pool_ttl = 1200
+
+# ZeroMQ bind address. Should be a wildcard (*), an ethernet
+# interface, or IP. The "host" option should point or resolve to this
+# address. (string value)
+#rpc_zmq_bind_address = *
+
+# MatchMaker driver. (string value)
+# Possible values:
+# redis - <No description provided>
+# sentinel - <No description provided>
+# dummy - <No description provided>
+#rpc_zmq_matchmaker = redis
+
+# Number of ZeroMQ contexts, defaults to 1. (integer value)
+#rpc_zmq_contexts = 1
+
+# Maximum number of ingress messages to locally buffer per topic.
+# Default is unlimited. (integer value)
+#rpc_zmq_topic_backlog = <None>
+
+# Directory for holding IPC sockets. (string value)
+#rpc_zmq_ipc_dir = /var/run/openstack
+
+# Name of this node. Must be a valid hostname, FQDN, or IP address.
+# Must match "host" option, if running Nova. (string value)
+#rpc_zmq_host = localhost
+
+# Number of seconds to wait before all pending messages will be sent
+# after closing a socket. The default value of -1 specifies an
+# infinite linger period. The value of 0 specifies no linger period.
+# Pending messages shall be discarded immediately when the socket is
+# closed. Positive values specify an upper bound for the linger
+# period. (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_cast_timeout
+#zmq_linger = -1
+
+# The default number of seconds that poll should wait. Poll raises
+# timeout exception when timeout expired. (integer value)
+#rpc_poll_timeout = 1
+
+# Expiration timeout in seconds of a name service record about
+# existing target ( < 0 means no timeout). (integer value)
+#zmq_target_expire = 300
+
+# Update period in seconds of a name service record about existing
+# target. (integer value)
+#zmq_target_update = 180
+
+# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy.
+# (boolean value)
+#use_pub_sub = false
+
+# Use ROUTER remote proxy. (boolean value)
+#use_router_proxy = false
+
+# This option makes direct connections dynamic or static. It makes
+# sense only with use_router_proxy=False which means to use direct
+# connections for direct message types (ignored otherwise). (boolean
+# value)
+#use_dynamic_connections = false
+
+# How many additional connections to a host will be made for failover
+# reasons. This option is actual only in dynamic connections mode.
+# (integer value)
+#zmq_failover_connections = 2
+
+# Minimal port number for random ports range. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#rpc_zmq_min_port = 49153
+
+# Maximal port number for random ports range. (integer value)
+# Minimum value: 1
+# Maximum value: 65536
+#rpc_zmq_max_port = 65536
+
+# Number of retries to find free port number before fail with
+# ZMQBindError. (integer value)
+#rpc_zmq_bind_port_retries = 100
+
+# Default serialization mechanism for serializing/deserializing
+# outgoing/incoming messages (string value)
+# Possible values:
+# json - <No description provided>
+# msgpack - <No description provided>
+#rpc_zmq_serialization = json
+
+# This option configures round-robin mode in zmq socket. True means
+# not keeping a queue when server side disconnects. False means to
+# keep queue and messages even if server is disconnected, when the
+# server appears we send all accumulated messages to it. (boolean
+# value)
+#zmq_immediate = true
+
+# Enable/disable TCP keepalive (KA) mechanism. The default value of -1
+# (or any other negative value) means to skip any overrides and leave
+# it to OS default; 0 and 1 (or any other positive value) mean to
+# disable and enable the option respectively. (integer value)
+#zmq_tcp_keepalive = -1
+
+# The duration between two keepalive transmissions in idle condition.
+# The unit is platform dependent, for example, seconds in Linux,
+# milliseconds in Windows etc. The default value of -1 (or any other
+# negative value and 0) means to skip any overrides and leave it to OS
+# default. (integer value)
+#zmq_tcp_keepalive_idle = -1
+
+# The number of retransmissions to be carried out before declaring
+# that remote end is not available. The default value of -1 (or any
+# other negative value and 0) means to skip any overrides and leave it
+# to OS default. (integer value)
+#zmq_tcp_keepalive_cnt = -1
+
+# The duration between two successive keepalive retransmissions, if
+# acknowledgement to the previous keepalive transmission is not
+# received. The unit is platform dependent, for example, seconds in
+# Linux, milliseconds in Windows etc. The default value of -1 (or any
+# other negative value and 0) means to skip any overrides and leave it
+# to OS default. (integer value)
+#zmq_tcp_keepalive_intvl = -1
+
+# Maximum number of (green) threads to work concurrently. (integer
+# value)
+#rpc_thread_pool_size = 100
+
+# Expiration timeout in seconds of a sent/received message after which
+# it is not tracked anymore by a client/server. (integer value)
+#rpc_message_ttl = 300
+
+# Wait for message acknowledgements from receivers. This mechanism
+# works only via proxy without PUB/SUB. (boolean value)
+#rpc_use_acks = false
+
+# Number of seconds to wait for an ack from a cast/call. After each
+# retry attempt this timeout is multiplied by some specified
+# multiplier. (integer value)
+#rpc_ack_timeout_base = 15
+
+# Number to multiply base ack timeout by after each retry attempt.
+# (integer value)
+#rpc_ack_timeout_multiplier = 2
+
+# Default number of message sending attempts in case of any problems
+# occurred: positive value N means at most N retries, 0 means no
+# retries, None or -1 (or any other negative values) mean to retry
+# forever. This option is used only if acknowledgments are enabled.
+# (integer value)
+#rpc_retry_attempts = 3
+
+# List of publisher hosts SubConsumer can subscribe on. This option
+# has higher priority then the default publishers list taken from the
+# matchmaker. (list value)
+#subscribe_on =
+
+# Size of executor thread pool when executor is threading or eventlet.
+# (integer value)
+# Deprecated group/name - [DEFAULT]/rpc_thread_pool_size
+#executor_thread_pool_size = 64
+
+# Seconds to wait for a response from a call. (integer value)
+#rpc_response_timeout = 60
+rpc_response_timeout = 3600
+
+# The network address and optional user credentials for connecting to
+# the messaging backend, in URL format. The expected format is:
+#
+# driver://[user:pass@]host:port[,[userN:passN@]hostN:portN]/virtual_host?query
+#
+# Example: rabbit://rabbitmq:password@127.0.0.1:5672//
+#
+# For full details on the fields in the URL see the documentation of
+# oslo_messaging.TransportURL at
+# https://docs.openstack.org/oslo.messaging/latest/reference/transport.html
+# (string value)
+#transport_url = <None>
+transport_url = rabbit://openstack:opnfv_secret@10.167.4.28:5672,openstack:opnfv_secret@10.167.4.29:5672,openstack:opnfv_secret@10.167.4.30:5672//openstack
+
+# DEPRECATED: The messaging driver to use, defaults to rabbit. Other
+# drivers include amqp and zmq. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rpc_backend = rabbit
+
+# The default exchange under which topics are scoped. May be
+# overridden by an exchange name specified in the transport_url
+# option. (string value)
+#control_exchange = openstack
+control_exchange = cinder
+
+#
+# From oslo.log
+#
+
+# If set to true, the logging level will be set to DEBUG instead of
+# the default INFO level. (boolean value)
+# Note: This option can be changed without restarting.
+#debug = false
+
+# The name of a logging configuration file. This file is appended to
+# any existing logging configuration files. For details about logging
+# configuration files, see the Python logging module documentation.
+# Note that when logging configuration files are used then all logging
+# configuration is set in the configuration file and other logging
+# configuration options are ignored (for example,
+# logging_context_format_string). (string value)
+# Note: This option can be changed without restarting.
+# Deprecated group/name - [DEFAULT]/log_config
+
+# Defines the format string for %%(asctime)s in log records. Default:
+# %(default)s . This option is ignored if log_config_append is set.
+# (string value)
+#log_date_format = %Y-%m-%d %H:%M:%S
+
+# (Optional) Name of log file to send logging output to. If no default
+# is set, logging will go to stderr as defined by use_stderr. This
+# option is ignored if log_config_append is set. (string value)
+# Deprecated group/name - [DEFAULT]/logfile
+#log_file = <None>
+
+# (Optional) The base directory used for relative log_file  paths.
+# This option is ignored if log_config_append is set. (string value)
+# Deprecated group/name - [DEFAULT]/logdir
+#log_dir = <None>
+
+# Uses logging handler designed to watch file system. When log file is
+# moved or removed this handler will open a new log file with
+# specified path instantaneously. It makes sense only if log_file
+# option is specified and Linux platform is used. This option is
+# ignored if log_config_append is set. (boolean value)
+#watch_log_file = false
+
+# Use syslog for logging. Existing syslog format is DEPRECATED and
+# will be changed later to honor RFC5424. This option is ignored if
+# log_config_append is set. (boolean value)
+#use_syslog = false
+
+# Enable journald for logging. If running in a systemd environment you
+# may wish to enable journal support. Doing so will use the journal
+# native protocol which includes structured metadata in addition to
+# log messages.This option is ignored if log_config_append is set.
+# (boolean value)
+#use_journal = false
+
+# Syslog facility to receive log lines. This option is ignored if
+# log_config_append is set. (string value)
+#syslog_log_facility = LOG_USER
+
+# Use JSON formatting for logging. This option is ignored if
+# log_config_append is set. (boolean value)
+#use_json = false
+
+# Log output to standard error. This option is ignored if
+# log_config_append is set. (boolean value)
+#use_stderr = false
+
+# Format string to use for log messages with context. (string value)
+#logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
+
+# Format string to use for log messages when context is undefined.
+# (string value)
+#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
+
+# Additional data to append to log message when logging level for the
+# message is DEBUG. (string value)
+#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
+
+# Prefix each line of exception output with this format. (string
+# value)
+#logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
+
+# Defines the format string for %(user_identity)s that is used in
+# logging_context_format_string. (string value)
+#logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
+
+# List of package logging levels in logger=LEVEL pairs. This option is
+# ignored if log_config_append is set. (list value)
+#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
+
+# Enables or disables publication of error events. (boolean value)
+#publish_errors = false
+
+# The format for an instance that is passed with the log message.
+# (string value)
+#instance_format = "[instance: %(uuid)s] "
+
+# The format for an instance UUID that is passed with the log message.
+# (string value)
+#instance_uuid_format = "[instance: %(uuid)s] "
+
+# Interval, number of seconds, of log rate limiting. (integer value)
+#rate_limit_interval = 0
+
+# Maximum number of logged messages per rate_limit_interval. (integer
+# value)
+#rate_limit_burst = 0
+
+# Log level name used by rate limiting: CRITICAL, ERROR, INFO,
+# WARNING, DEBUG or empty string. Logs with level greater or equal to
+# rate_limit_except_level are not filtered. An empty string means that
+# all levels are filtered. (string value)
+#rate_limit_except_level = CRITICAL
+
+# Enables or disables fatal status of deprecations. (boolean value)
+#fatal_deprecations = false
+
+# The maximum number of items that a collection resource returns in a single
+# response (integer value)
+#osapi_max_limit = 1000
+
+# Json file indicating user visible filter parameters for list queries. (string
+# value)
+# Deprecated group/name - [DEFAULT]/query_volume_filters
+#resource_query_filters_file = /etc/cinder/resource_filters.json
+
+# DEPRECATED: Volume filter options which non-admin user could use to query
+# volumes. Default values are: ['name', 'status', 'metadata',
+# 'availability_zone' ,'bootable', 'group_id'] (list value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#query_volume_filters = name,status,metadata,availability_zone,bootable,group_id
+
+# DEPRECATED: Allow the ability to modify the extra-spec settings of an in-use
+# volume-type. (boolean value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#allow_inuse_volume_type_modification = false
+
+# Treat X-Forwarded-For as the canonical remote address. Only enable this if
+# you have a sanitizing proxy. (boolean value)
+#use_forwarded_for = false
+
+# Public url to use for versions endpoint. The default is None, which will use
+# the request's host_url attribute to populate the URL base. If Cinder is
+# operating behind a proxy, you will want to change this to represent the
+# proxy's URL. (string value)
+#public_endpoint = <None>
+
+# Backup services use same backend. (boolean value)
+#backup_use_same_host = false
+
+# Compression algorithm (None to disable) (string value)
+# Possible values:
+# none - <No description provided>
+# off - <No description provided>
+# no - <No description provided>
+# zlib - <No description provided>
+# gzip - <No description provided>
+# bz2 - <No description provided>
+# bzip2 - <No description provided>
+#backup_compression_algorithm = zlib
+
+# Backup metadata version to be used when backing up volume metadata. If this
+# number is bumped, make sure the service doing the restore supports the new
+# version. (integer value)
+#backup_metadata_version = 2
+
+# The number of chunks or objects, for which one Ceilometer notification will
+# be sent (integer value)
+#backup_object_number_per_notification = 10
+
+# Interval, in seconds, between two progress notifications reporting the backup
+# status (integer value)
+#backup_timer_interval = 120
+
+# Ceph configuration file to use. (string value)
+#backup_ceph_conf = /etc/ceph/ceph.conf
+
+# The Ceph user to connect with. Default here is to use the same user as for
+# Cinder volumes. If not using cephx this should be set to None. (string value)
+#backup_ceph_user = cinder
+
+# The chunk size, in bytes, that a backup is broken into before transfer to the
+# Ceph object store. (integer value)
+#backup_ceph_chunk_size = 134217728
+
+# The Ceph pool where volume backups are stored. (string value)
+#backup_ceph_pool = backups
+
+# RBD stripe unit to use when creating a backup image. (integer value)
+#backup_ceph_stripe_unit = 0
+
+# RBD stripe count to use when creating a backup image. (integer value)
+#backup_ceph_stripe_count = 0
+
+# If True, apply JOURNALING and EXCLUSIVE_LOCK feature bits to the backup RBD
+# objects to allow mirroring (boolean value)
+#backup_ceph_image_journals = false
+
+# If True, always discard excess bytes when restoring volumes i.e. pad with
+# zeroes. (boolean value)
+#restore_discard_excess_bytes = true
+
+# The GCS bucket to use. (string value)
+#backup_gcs_bucket = <None>
+
+# The size in bytes of GCS backup objects. (integer value)
+#backup_gcs_object_size = 52428800
+
+# The size in bytes that changes are tracked for incremental backups.
+# backup_gcs_object_size has to be multiple of backup_gcs_block_size. (integer
+# value)
+#backup_gcs_block_size = 32768
+
+# GCS object will be downloaded in chunks of bytes. (integer value)
+#backup_gcs_reader_chunk_size = 2097152
+
+# GCS object will be uploaded in chunks of bytes. Pass in a value of -1 if the
+# file is to be uploaded as a single chunk. (integer value)
+#backup_gcs_writer_chunk_size = 2097152
+
+# Number of times to retry. (integer value)
+#backup_gcs_num_retries = 3
+
+# List of GCS error codes. (list value)
+#backup_gcs_retry_error_codes = 429
+
+# Location of GCS bucket. (string value)
+#backup_gcs_bucket_location = US
+
+# Storage class of GCS bucket. (string value)
+#backup_gcs_storage_class = NEARLINE
+
+# Absolute path of GCS service account credential file. (string value)
+#backup_gcs_credential_file = <None>
+
+# Owner project id for GCS bucket. (string value)
+#backup_gcs_project_id = <None>
+
+# Http user-agent string for gcs api. (string value)
+#backup_gcs_user_agent = gcscinder
+
+# Enable or Disable the timer to send the periodic progress notifications to
+# Ceilometer when backing up the volume to the GCS backend storage. The default
+# value is True to enable the timer. (boolean value)
+#backup_gcs_enable_progress_timer = true
+
+# URL for http proxy access. (uri value)
+#backup_gcs_proxy_url = <None>
+
+# Base dir containing mount point for gluster share. (string value)
+#glusterfs_backup_mount_point = $state_path/backup_mount
+
+# GlusterFS share in <hostname|ipv4addr|ipv6addr>:<gluster_vol_name> format.
+# Eg: 1.2.3.4:backup_vol (string value)
+#glusterfs_backup_share = <None>
+
+# Base dir containing mount point for NFS share. (string value)
+#backup_mount_point_base = $state_path/backup_mount
+
+# NFS share in hostname:path, ipv4addr:path, or "[ipv6addr]:path" format.
+# (string value)
+#backup_share = <None>
+
+# Mount options passed to the NFS client. See NFS man page for details. (string
+# value)
+#backup_mount_options = <None>
+
+# The maximum size in bytes of the files used to hold backups. If the volume
+# being backed up exceeds this size, then it will be backed up into multiple
+# files.backup_file_size must be a multiple of backup_sha_block_size_bytes.
+# (integer value)
+#backup_file_size = 1999994880
+
+# The size in bytes that changes are tracked for incremental backups.
+# backup_file_size has to be multiple of backup_sha_block_size_bytes. (integer
+# value)
+#backup_sha_block_size_bytes = 32768
+
+# Enable or Disable the timer to send the periodic progress notifications to
+# Ceilometer when backing up the volume to the backend storage. The default
+# value is True to enable the timer. (boolean value)
+#backup_enable_progress_timer = true
+
+# Path specifying where to store backups. (string value)
+#backup_posix_path = $state_path/backup
+
+# Custom directory to use for backups. (string value)
+#backup_container = <None>
+
+# The URL of the Swift endpoint (uri value)
+#backup_swift_url = <None>
+
+# The URL of the Keystone endpoint (uri value)
+#backup_swift_auth_url = <None>
+
+# Info to match when looking for swift in the service catalog. Format is:
+# separated values of the form: <service_type>:<service_name>:<endpoint_type> -
+# Only used if backup_swift_url is unset (string value)
+#swift_catalog_info = object-store:swift:publicURL
+
+# Info to match when looking for keystone in the service catalog. Format is:
+# separated values of the form: <service_type>:<service_name>:<endpoint_type> -
+# Only used if backup_swift_auth_url is unset (string value)
+#keystone_catalog_info = identity:Identity Service:publicURL
+
+# Swift authentication mechanism (per_user or single_user). (string value)
+# Possible values:
+# per_user - <No description provided>
+# single_user - <No description provided>
+#backup_swift_auth = per_user
+
+# Swift authentication version. Specify "1" for auth 1.0, or "2" for auth 2.0
+# or "3" for auth 3.0 (string value)
+#backup_swift_auth_version = 1
+
+# Swift tenant/account name. Required when connecting to an auth 2.0 system
+# (string value)
+#backup_swift_tenant = <None>
+
+# Swift user domain name. Required when connecting to an auth 3.0 system
+# (string value)
+#backup_swift_user_domain = <None>
+
+# Swift project domain name. Required when connecting to an auth 3.0 system
+# (string value)
+#backup_swift_project_domain = <None>
+
+# Swift project/account name. Required when connecting to an auth 3.0 system
+# (string value)
+#backup_swift_project = <None>
+
+# Swift user name (string value)
+#backup_swift_user = <None>
+
+# Swift key for authentication (string value)
+#backup_swift_key = <None>
+
+# The default Swift container to use (string value)
+#backup_swift_container = volumebackups
+
+# The size in bytes of Swift backup objects (integer value)
+#backup_swift_object_size = 52428800
+
+# The size in bytes that changes are tracked for incremental backups.
+# backup_swift_object_size has to be multiple of backup_swift_block_size.
+# (integer value)
+#backup_swift_block_size = 32768
+
+# The number of retries to make for Swift operations (integer value)
+#backup_swift_retry_attempts = 3
+
+# The backoff time in seconds between Swift retries (integer value)
+#backup_swift_retry_backoff = 2
+
+# Enable or Disable the timer to send the periodic progress notifications to
+# Ceilometer when backing up the volume to the Swift backend storage. The
+# default value is True to enable the timer. (boolean value)
+#backup_swift_enable_progress_timer = true
+
+# Location of the CA certificate file to use for swift client requests. (string
+# value)
+#backup_swift_ca_cert_file = <None>
+
+# Bypass verification of server certificate when making SSL connection to
+# Swift. (boolean value)
+#backup_swift_auth_insecure = false
+
+# Volume prefix for the backup id when backing up to TSM (string value)
+#backup_tsm_volume_prefix = backup
+
+# TSM password for the running username (string value)
+#backup_tsm_password = password
+
+# Enable or Disable compression for backups (boolean value)
+#backup_tsm_compression = true
+
+# Driver to use for backups. (string value)
+#backup_driver = cinder.backup.drivers.swift.SwiftBackupDriver
+
+# Offload pending backup delete during backup service startup. If false, the
+# backup service will remain down until all pending backups are deleted.
+# (boolean value)
+#backup_service_inithost_offload = true
+
+# Size of the native threads pool for the backups.  Most backup drivers rely
+# heavily on this, it can be decreased for specific drivers that don't.
+# (integer value)
+# Minimum value: 20
+#backup_native_threads_pool_size = 60
+
+# Number of backup processes to launch. Improves performance with concurrent
+# backups. (integer value)
+# Minimum value: 1
+# Maximum value: 4
+#backup_workers = 1
+
+# Name of this cluster. Used to group volume hosts that share the same backend
+# configurations to work in HA Active-Active mode.  Active-Active is not yet
+# supported. (string value)
+#cluster = <None>
+
+# Top-level directory for maintaining cinder's state (string value)
+state_path = /var/lib/cinder
+
+# IP address of this host (host address value)
+#my_ip = <HOST_IP_ADDRESS>
+
+# A list of the URLs of glance API servers available to cinder
+# ([http[s]://][hostname|ip]:port). If protocol is not specified it defaults to
+# http. (list value)
+glance_api_servers = http://10.167.4.35:9292
+
+# Number retries when downloading an image from glance (integer value)
+# Minimum value: 0
+glance_num_retries = 0
+
+# Allow to perform insecure SSL (https) requests to glance (https will be used
+# but cert validation will not be performed). (boolean value)
+#glance_api_insecure = false
+
+# Enables or disables negotiation of SSL layer compression. In some cases
+# disabling compression can improve data throughput, such as when high network
+# bandwidth is available and you use compressed image formats like qcow2.
+# (boolean value)
+#glance_api_ssl_compression = false
+
+# Location of ca certificates file to use for glance client requests. (string
+# value)
+
+# http/https timeout value for glance operations. If no value (None) is
+# supplied here, the glanceclient default value is used. (integer value)
+#glance_request_timeout = <None>
+
+# DEPRECATED: Deploy v2 of the Cinder API. (boolean value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#enable_v2_api = true
+
+# Deploy v3 of the Cinder API. (boolean value)
+enable_v3_api = true
+
+# Enables or disables rate limit of the API. (boolean value)
+#api_rate_limit = true
+
+# Specify list of extensions to load when using osapi_volume_extension option
+# with cinder.api.contrib.select_extensions (list value)
+#osapi_volume_ext_list =
+
+# osapi volume extension to load (multi valued)
+osapi_volume_extension = cinder.api.contrib.standard_extensions
+
+# Full class name for the Manager for volume (string value)
+#volume_manager = cinder.volume.manager.VolumeManager
+
+# Full class name for the Manager for volume backup (string value)
+#backup_manager = cinder.backup.manager.BackupManager
+
+# Full class name for the Manager for scheduler (string value)
+#scheduler_manager = cinder.scheduler.manager.SchedulerManager
+
+# Name of this node.  This can be an opaque identifier. It is not necessarily a
+# host name, FQDN, or IP address. (host address value)
+#host = localhost
+
+# Availability zone of this node. Can be overridden per volume backend with the
+# option "backend_availability_zone". (string value)
+#storage_availability_zone = nova
+
+# Default availability zone for new volumes. If not set, the
+# storage_availability_zone option value is used as the default for new
+# volumes. (string value)
+#default_availability_zone = <None>
+
+# If the requested Cinder availability zone is unavailable, fall back to the
+# value of default_availability_zone, then storage_availability_zone, instead
+# of failing. (boolean value)
+allow_availability_zone_fallback = True
+
+# Default volume type to use (string value)
+#default_volume_type = <None>
+
+# Default group type to use (string value)
+#default_group_type = <None>
+
+# Time period for which to generate volume usages. The options are hour, day,
+# month, or year. (string value)
+#volume_usage_audit_period = month
+
+# Path to the rootwrap configuration file to use for running commands as root
+# (string value)
+#rootwrap_config = /etc/cinder/rootwrap.conf
+
+# Enable monkey patching (boolean value)
+#monkey_patch = false
+
+# List of modules/decorators to monkey patch (list value)
+#monkey_patch_modules =
+
+# Maximum time since last check-in for a service to be considered up (integer
+# value)
+#service_down_time = 60
+
+# The full class name of the volume API class to use (string value)
+#volume_api_class = cinder.volume.api.API
+
+# The full class name of the volume backup API class (string value)
+#backup_api_class = cinder.backup.api.API
+
+# The strategy to use for auth. Supports noauth or keystone. (string value)
+# Possible values:
+# noauth - <No description provided>
+# keystone - <No description provided>
+auth_strategy = keystone
+
+# A list of backend names to use. These backend names should be backed by a
+# unique [CONFIG] group with its options (list value)
+#enabled_backends = <None>
+default_volume_type=lvm-driver
+
+enabled_backends=lvm-driver
+
+
+# Whether snapshots count against gigabyte quota (boolean value)
+#no_snapshot_gb_quota = false
+
+# The full class name of the volume transfer API class (string value)
+#transfer_api_class = cinder.transfer.api.API
+
+# The full class name of the consistencygroup API class (string value)
+#consistencygroup_api_class = cinder.consistencygroup.api.API
+
+# The full class name of the group API class (string value)
+#group_api_class = cinder.group.api.API
+
+# The full class name of the compute API class to use (string value)
+#compute_api_class = cinder.compute.nova.API
+
+# ID of the project which will be used as the Cinder internal tenant. (string
+# value)
+#cinder_internal_tenant_project_id = <None>
+
+# ID of the user to be used in volume operations as the Cinder internal tenant.
+# (string value)
+#cinder_internal_tenant_user_id = <None>
+
+# Services to be added to the available pool on create (boolean value)
+#enable_new_services = true
+
+# Template string to be used to generate volume names (string value)
+volume_name_template = volume-%s
+
+# Template string to be used to generate snapshot names (string value)
+#snapshot_name_template = snapshot-%s
+
+# Template string to be used to generate backup names (string value)
+#backup_name_template = backup-%s
+
+# Driver to use for database access (string value)
+#db_driver = cinder.db
+
+# A list of url schemes that can be downloaded directly via the direct_url.
+# Currently supported schemes: [file, cinder]. (list value)
+#allowed_direct_url_schemes =
+
+# Info to match when looking for glance in the service catalog. Format is:
+# separated values of the form: <service_type>:<service_name>:<endpoint_type> -
+# Only used if glance_api_servers are not provided. (string value)
+#glance_catalog_info = image:glance:publicURL
+
+# Default core properties of image (list value)
+#glance_core_properties = checksum,container_format,disk_format,image_name,image_id,min_disk,min_ram,name,size
+
+# Directory used for temporary storage during image conversion (string value)
+#image_conversion_dir = $state_path/conversion
+
+# message minimum life in seconds. (integer value)
+#message_ttl = 2592000
+
+# interval between periodic task runs to clean expired messages in seconds.
+# (integer value)
+#message_reap_interval = 86400
+
+# Number of volumes allowed per project (integer value)
+#quota_volumes = 10
+
+# Number of volume snapshots allowed per project (integer value)
+#quota_snapshots = 10
+
+# Number of consistencygroups allowed per project (integer value)
+#quota_consistencygroups = 10
+
+# Number of groups allowed per project (integer value)
+#quota_groups = 10
+
+# Total amount of storage, in gigabytes, allowed for volumes and snapshots per
+# project (integer value)
+#quota_gigabytes = 1000
+
+# Number of volume backups allowed per project (integer value)
+#quota_backups = 10
+
+# Total amount of storage, in gigabytes, allowed for backups per project
+# (integer value)
+#quota_backup_gigabytes = 1000
+
+# Number of seconds until a reservation expires (integer value)
+#reservation_expire = 86400
+
+# Interval between periodic task runs to clean expired reservations in seconds.
+# (integer value)
+#reservation_clean_interval = $reservation_expire
+
+# Count of reservations until usage is refreshed (integer value)
+#until_refresh = 0
+
+# Number of seconds between subsequent usage refreshes (integer value)
+#max_age = 0
+
+# Default driver to use for quota checks (string value)
+#quota_driver = cinder.quota.DbQuotaDriver
+
+# Enables or disables use of default quota class with default quota. (boolean
+# value)
+#use_default_quota_class = true
+
+# Max size allowed per volume, in gigabytes (integer value)
+#per_volume_size_limit = -1
+
+# The scheduler host manager class to use (string value)
+#scheduler_host_manager = cinder.scheduler.host_manager.HostManager
+
+# Maximum number of attempts to schedule a volume (integer value)
+#scheduler_max_attempts = 3
+
+# Which filter class names to use for filtering hosts when not specified in the
+# request. (list value)
+#scheduler_default_filters = AvailabilityZoneFilter,CapacityFilter,CapabilitiesFilter
+
+# Which weigher class names to use for weighing hosts. (list value)
+#scheduler_default_weighers = CapacityWeigher
+
+# Which handler to use for selecting the host/pool after weighing (string
+# value)
+#scheduler_weight_handler = cinder.scheduler.weights.OrderedHostWeightHandler
+
+# Default scheduler driver to use (string value)
+#scheduler_driver = cinder.scheduler.filter_scheduler.FilterScheduler
+
+# Absolute path to scheduler configuration JSON file. (string value)
+#scheduler_json_config_location =
+
+# Multiplier used for weighing free capacity. Negative numbers mean to stack vs
+# spread. (floating point value)
+#capacity_weight_multiplier = 1.0
+
+# Multiplier used for weighing allocated capacity. Positive numbers mean to
+# stack vs spread. (floating point value)
+#allocated_capacity_weight_multiplier = -1.0
+
+# Multiplier used for weighing volume number. Negative numbers mean to spread
+# vs stack. (floating point value)
+#volume_number_multiplier = -1.0
+
+# Interval, in seconds, between nodes reporting state to datastore (integer
+# value)
+#report_interval = 10
+
+# Interval, in seconds, between running periodic tasks (integer value)
+#periodic_interval = 60
+
+# Range, in seconds, to randomly delay when starting the periodic task
+# scheduler to reduce stampeding. (Disable by setting to 0) (integer value)
+#periodic_fuzzy_delay = 60
+
+# IP address on which OpenStack Volume API listens (string value)
+osapi_volume_listen = 10.167.4.37
+
+# Port on which OpenStack Volume API listens (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#osapi_volume_listen_port = 8776
+
+# Number of workers for OpenStack Volume API service. The default is equal to
+# the number of CPUs available. (integer value)
+osapi_volume_workers = 4
+
+# Wraps the socket in a SSL context if True is set. A certificate file and key
+# file must be specified. (boolean value)
+#osapi_volume_use_ssl = false
+
+# Option to enable strict host key checking.  When set to "True" Cinder will
+# only connect to systems with a host key present in the configured
+# "ssh_hosts_key_file".  When set to "False" the host key will be saved upon
+# first connection and used for subsequent connections.  Default=False (boolean
+# value)
+#strict_ssh_host_key_policy = false
+
+# File containing SSH host keys for the systems with which Cinder needs to
+# communicate.  OPTIONAL: Default=$state_path/ssh_known_hosts (string value)
+#ssh_hosts_key_file = $state_path/ssh_known_hosts
+
+# The number of characters in the salt. (integer value)
+#volume_transfer_salt_length = 8
+
+# The number of characters in the autogenerated auth key. (integer value)
+#volume_transfer_key_length = 16
+
+# Enables the Force option on upload_to_image. This enables running
+# upload_volume on in-use volumes for backends that support it. (boolean value)
+#enable_force_upload = false
+enable_force_upload = false
+
+# Create volume from snapshot at the host where snapshot resides (boolean
+# value)
+#snapshot_same_host = true
+
+# Ensure that the new volumes are the same AZ as snapshot or source volume
+# (boolean value)
+#cloned_volume_same_az = true
+
+# Cache volume availability zones in memory for the provided duration in
+# seconds (integer value)
+#az_cache_duration = 3600
+
+# Number of times to attempt to run flakey shell commands (integer value)
+#num_shell_tries = 3
+
+# The percentage of backend capacity is reserved (integer value)
+# Minimum value: 0
+# Maximum value: 100
+#reserved_percentage = 0
+
+# Prefix for iSCSI volumes (string value)
+# Deprecated group/name - [DEFAULT]/iscsi_target_prefix
+#target_prefix = iqn.2010-10.org.openstack:
+
+# The IP address that the iSCSI daemon is listening on (string value)
+# Deprecated group/name - [DEFAULT]/iscsi_ip_address
+#target_ip_address = $my_ip
+
+# The list of secondary IP addresses of the iSCSI daemon (list value)
+#iscsi_secondary_ip_addresses =
+
+# The port that the iSCSI daemon is listening on (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# Deprecated group/name - [DEFAULT]/iscsi_port
+#target_port = 3260
+
+# The maximum number of times to rescan targets to find volume (integer value)
+#num_volume_device_scan_tries = 3
+
+# The backend name for a given driver implementation (string value)
+volume_backend_name = DEFAULT
+
+# Do we attach/detach volumes in cinder using multipath for volume to image and
+# image to volume transfers? (boolean value)
+#use_multipath_for_image_xfer = false
+
+# If this is set to True, attachment of volumes for image transfer will be
+# aborted when multipathd is not running. Otherwise, it will fallback to single
+# path. (boolean value)
+#enforce_multipath_for_image_xfer = false
+
+# Method used to wipe old volumes (string value)
+# Possible values:
+# none - <No description provided>
+# zero - <No description provided>
+#volume_clear = zero
+volume_clear = none
+
+# Size in MiB to wipe at start of old volumes. 1024 MiBat max. 0 => all
+# (integer value)
+# Maximum value: 1024
+#volume_clear_size = 0
+
+# The flag to pass to ionice to alter the i/o priority of the process used to
+# zero a volume after deletion, for example "-c3" for idle only priority.
+# (string value)
+#volume_clear_ionice = <None>
+
+# Target user-land tool to use. tgtadm is default, use lioadm for LIO iSCSI
+# support, scstadmin for SCST target support, ietadm for iSCSI Enterprise
+# Target, iscsictl for Chelsio iSCSI Target, nvmet for NVMEoF support, or fake
+# for testing. (string value)
+# Possible values:
+# tgtadm - <No description provided>
+# lioadm - <No description provided>
+# scstadmin - <No description provided>
+# iscsictl - <No description provided>
+# ietadm - <No description provided>
+# nvmet - <No description provided>
+# fake - <No description provided>
+# Deprecated group/name - [DEFAULT]/iscsi_helper
+target_helper = tgtadm
+
+# Volume configuration file storage directory (string value)
+volumes_dir = /var/lib/cinder/volumes
+
+# IET configuration file (string value)
+#iet_conf = /etc/iet/ietd.conf
+
+# Chiscsi (CXT) global defaults configuration file (string value)
+#chiscsi_conf = /etc/chelsio-iscsi/chiscsi.conf
+
+# Sets the behavior of the iSCSI target to either perform blockio or fileio
+# optionally, auto can be set and Cinder will autodetect type of backing device
+# (string value)
+# Possible values:
+# blockio - <No description provided>
+# fileio - <No description provided>
+# auto - <No description provided>
+#iscsi_iotype = fileio
+
+# The default block size used when copying/clearing volumes (string value)
+#volume_dd_blocksize = 1M
+
+# The blkio cgroup name to be used to limit bandwidth of volume copy (string
+# value)
+#volume_copy_blkio_cgroup_name = cinder-volume-copy
+
+# The upper limit of bandwidth of volume copy. 0 => unlimited (integer value)
+#volume_copy_bps_limit = 0
+
+# Sets the behavior of the iSCSI target to either perform write-back(on) or
+# write-through(off). This parameter is valid if target_helper is set to
+# tgtadm. (string value)
+# Possible values:
+# on - <No description provided>
+# off - <No description provided>
+#iscsi_write_cache = on
+
+# Sets the target-specific flags for the iSCSI target. Only used for tgtadm to
+# specify backing device flags using bsoflags option. The specified string is
+# passed as is to the underlying tool. (string value)
+#iscsi_target_flags =
+
+# Determines the target protocol for new volumes, created with tgtadm, lioadm
+# and nvmet target helpers. In order to enable RDMA, this parameter should be
+# set with the value "iser". The supported iSCSI protocol values are "iscsi"
+# and "iser", in case of nvmet target set to "nvmet_rdma". (string value)
+# Possible values:
+# iscsi - <No description provided>
+# iser - <No description provided>
+# nvmet_rdma - <No description provided>
+# Deprecated group/name - [DEFAULT]/iscsi_protocol
+#target_protocol = iscsi
+
+# The path to the client certificate key for verification, if the driver
+# supports it. (string value)
+#driver_client_cert_key = <None>
+
+# The path to the client certificate for verification, if the driver supports
+# it. (string value)
+#driver_client_cert = <None>
+
+# Tell driver to use SSL for connection to backend storage if the driver
+# supports it. (boolean value)
+#driver_use_ssl = false
+
+# Representation of the over subscription ratio when thin provisioning is
+# enabled. Default ratio is 20.0, meaning provisioned capacity can be 20 times
+# of the total physical capacity. If the ratio is 10.5, it means provisioned
+# capacity can be 10.5 times of the total physical capacity. A ratio of 1.0
+# means provisioned capacity cannot exceed the total physical capacity. If
+# ratio is 'auto', Cinder will automatically calculate the ratio based on the
+# provisioned capacity and the used space. If not set to auto, the ratio has to
+# be a minimum of 1.0. (string value)
+#max_over_subscription_ratio = 20.0
+
+# Certain ISCSI targets have predefined target names, SCST target driver uses
+# this name. (string value)
+#scst_target_iqn_name = <None>
+
+# SCST target implementation can choose from multiple SCST target drivers.
+# (string value)
+#scst_target_driver = iscsi
+
+# Option to enable/disable CHAP authentication for targets. (boolean value)
+#use_chap_auth = false
+
+# CHAP user name. (string value)
+#chap_username =
+
+# Password for specified CHAP account name. (string value)
+#chap_password =
+
+# Namespace for driver private data values to be saved in. (string value)
+#driver_data_namespace = <None>
+
+# String representation for an equation that will be used to filter hosts. Only
+# used when the driver filter is set to be used by the Cinder scheduler.
+# (string value)
+#filter_function = <None>
+
+# String representation for an equation that will be used to determine the
+# goodness of a host. Only used when using the goodness weigher is set to be
+# used by the Cinder scheduler. (string value)
+#goodness_function = <None>
+
+# If set to True the http client will validate the SSL certificate of the
+# backend endpoint. (boolean value)
+#driver_ssl_cert_verify = false
+
+# Can be used to specify a non default path to a CA_BUNDLE file or directory
+# with certificates of trusted CAs, which will be used to validate the backend
+# (string value)
+#driver_ssl_cert_path = <None>
+
+# List of options that control which trace info is written to the DEBUG log
+# level to assist developers. Valid values are method and api. (list value)
+#trace_flags = <None>
+
+# Multi opt of dictionaries to represent a replication target device.  This
+# option may be specified multiple times in a single config section to specify
+# multiple replication target devices.  Each entry takes the standard dict
+# config form: replication_device =
+# target_device_id:<required>,key1:value1,key2:value2... (dict value)
+#replication_device = <None>
+
+# If set to True, upload-to-image in raw format will create a cloned volume and
+# register its location to the image service, instead of uploading the volume
+# content. The cinder backend and locations support must be enabled in the
+# image service. (boolean value)
+#image_upload_use_cinder_backend = false
+
+# If set to True, the image volume created by upload-to-image will be placed in
+# the internal tenant. Otherwise, the image volume is created in the current
+# context's tenant. (boolean value)
+#image_upload_use_internal_tenant = false
+
+# Enable the image volume cache for this backend. (boolean value)
+#image_volume_cache_enabled = false
+
+# Max size of the image volume cache for this backend in GB. 0 => unlimited.
+# (integer value)
+#image_volume_cache_max_size_gb = 0
+
+# Max number of entries allowed in the image volume cache. 0 => unlimited.
+# (integer value)
+#image_volume_cache_max_count = 0
+
+# Report to clients of Cinder that the backend supports discard (aka.
+# trim/unmap). This will not actually change the behavior of the backend or the
+# client directly, it will only notify that it can be used. (boolean value)
+#report_discard_supported = false
+
+# Protocol for transferring data between host and storage back-end. (string
+# value)
+# Possible values:
+# iscsi - <No description provided>
+# fc - <No description provided>
+#storage_protocol = iscsi
+
+# If this is set to True, a temporary snapshot will be created for performing
+# non-disruptive backups. Otherwise a temporary volume will be cloned in order
+# to perform a backup. (boolean value)
+#backup_use_temp_snapshot = false
+
+# Set this to True when you want to allow an unsupported driver to start.
+# Drivers that haven't maintained a working CI system and testing are marked as
+# unsupported until CI is working again.  This also marks a driver as
+# deprecated and may be removed in the next release. (boolean value)
+#enable_unsupported_driver = false
+
+# Availability zone for this volume backend. If not set, the
+# storage_availability_zone option value is used as the default for all
+# backends. (string value)
+#backend_availability_zone = <None>
+
+# The maximum number of times to rescan iSER targetto find volume (integer
+# value)
+#num_iser_scan_tries = 3
+
+# Prefix for iSER volumes (string value)
+#iser_target_prefix = iqn.2010-10.org.openstack:
+
+# The IP address that the iSER daemon is listening on (string value)
+#iser_ip_address = $my_ip
+
+# The port that the iSER daemon is listening on (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#iser_port = 3260
+
+# The name of the iSER target user-land tool to use (string value)
+#iser_helper = tgtadm
+
+# The port that the NVMe target is listening on. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#nvmet_port_id = 1
+
+# The namespace id associated with the subsystem that will be created with the
+# path for the LVM volume. (integer value)
+#nvmet_ns_id = 10
+
+# DataCore virtual disk type (single/mirrored). Mirrored virtual disks require
+# two storage servers in the server group. (string value)
+# Possible values:
+# single - <No description provided>
+# mirrored - <No description provided>
+#datacore_disk_type = single
+
+# DataCore virtual disk storage profile. (string value)
+#datacore_storage_profile = <None>
+
+# List of DataCore disk pools that can be used by volume driver. (list value)
+#datacore_disk_pools =
+
+# Seconds to wait for a response from a DataCore API call. (integer value)
+# Minimum value: 1
+#datacore_api_timeout = 300
+
+# Seconds to wait for DataCore virtual disk to come out of the "Failed" state.
+# (integer value)
+# Minimum value: 0
+#datacore_disk_failed_delay = 15
+
+# List of iSCSI targets that cannot be used to attach volume. To prevent the
+# DataCore iSCSI volume driver from using some front-end targets in volume
+# attachment, specify this option and list the iqn and target machine for each
+# target as the value, such as <iqn:target name>, <iqn:target name>,
+# <iqn:target name>. (list value)
+#datacore_iscsi_unallowed_targets =
+
+# Configure CHAP authentication for iSCSI connections. (boolean value)
+#datacore_iscsi_chap_enabled = false
+
+# iSCSI CHAP authentication password storage file. (string value)
+#datacore_iscsi_chap_storage = <None>
+
+# Storage system autoexpand parameter for volumes (True/False) (boolean value)
+#instorage_mcs_vol_autoexpand = true
+
+# Storage system compression option for volumes (boolean value)
+#instorage_mcs_vol_compression = false
+
+# Enable InTier for volumes (boolean value)
+#instorage_mcs_vol_intier = true
+
+# Allow tenants to specify QOS on create (boolean value)
+#instorage_mcs_allow_tenant_qos = false
+
+# Storage system grain size parameter for volumes (32/64/128/256) (integer
+# value)
+# Minimum value: 32
+# Maximum value: 256
+#instorage_mcs_vol_grainsize = 256
+
+# Storage system space-efficiency parameter for volumes (percentage) (integer
+# value)
+# Minimum value: -1
+# Maximum value: 100
+#instorage_mcs_vol_rsize = 2
+
+# Storage system threshold for volume capacity warnings (percentage) (integer
+# value)
+# Minimum value: -1
+# Maximum value: 100
+#instorage_mcs_vol_warning = 0
+
+# Maximum number of seconds to wait for LocalCopy to be prepared. (integer
+# value)
+# Minimum value: 1
+# Maximum value: 600
+#instorage_mcs_localcopy_timeout = 120
+
+# Specifies the InStorage LocalCopy copy rate to be used when creating a full
+# volume copy. The default is rate is 50, and the valid rates are 1-100.
+# (integer value)
+# Minimum value: 1
+# Maximum value: 100
+#instorage_mcs_localcopy_rate = 50
+
+# The I/O group in which to allocate volumes. It can be a comma-separated list
+# in which case the driver will select an io_group based on least number of
+# volumes associated with the io_group. (string value)
+#instorage_mcs_vol_iogrp = 0
+
+# Specifies secondary management IP or hostname to be used if san_ip is invalid
+# or becomes inaccessible. (string value)
+#instorage_san_secondary_ip = <None>
+
+# Comma separated list of storage system storage pools for volumes. (list
+# value)
+#instorage_mcs_volpool_name = volpool
+
+# Configure CHAP authentication for iSCSI connections (Default: Enabled)
+# (boolean value)
+#instorage_mcs_iscsi_chap_enabled = true
+
+# The StorPool template for volumes with no type. (string value)
+#storpool_template = <None>
+
+# The default StorPool chain replication value.  Used when creating a volume
+# with no specified type if storpool_template is not set.  Also used for
+# calculating the apparent free space reported in the stats. (integer value)
+#storpool_replication = 3
+
+# Create sparse Lun. (boolean value)
+#vrts_lun_sparse = true
+
+# VA config file. (string value)
+#vrts_target_config = /etc/cinder/vrts_target.xml
+
+# Timeout for creating the volume to migrate to when performing volume
+# migration (seconds) (integer value)
+#migration_create_volume_timeout_secs = 300
+
+# Offload pending volume delete during volume service startup (boolean value)
+#volume_service_inithost_offload = false
+
+# FC Zoning mode configured, only 'fabric' is supported now. (string value)
+#zoning_mode = <None>
+
+# Sets the value of TCP_KEEPALIVE (True/False) for each server socket. (boolean
+# value)
+#tcp_keepalive = true
+
+# Sets the value of TCP_KEEPINTVL in seconds for each server socket. Not
+# supported on OS X. (integer value)
+#tcp_keepalive_interval = <None>
+
+# Sets the value of TCP_KEEPCNT for each server socket. Not supported on OS X.
+# (integer value)
+#tcp_keepalive_count = <None>
+
+
+[backend]
+
+#
+# From cinder
+#
+
+# Backend override of host value. (string value)
+#backend_host = <None>
+[lvm-driver]
+host=ctl02
+volume_driver = cinder.volume.drivers.lvm.LVMVolumeDriver
+volume_backend_name=lvm-driver
 iscsi_helper = tgtadm
-volume_name_template = volume-%s
-volume_group = cinder-volumes
-verbose = True
-auth_strategy = keystone
-state_path = /var/lib/cinder
-lock_path = /var/lock/cinder
-volumes_dir = /var/lib/cinder/volumes
-enabled_backends = lvm
+volume_group = cinder-volume
+
+
+[backend_defaults]
+
+#
+# From cinder
+#
+
+# Number of times to attempt to run flakey shell commands (integer value)
+#num_shell_tries = 3
+
+# The percentage of backend capacity is reserved (integer value)
+# Minimum value: 0
+# Maximum value: 100
+#reserved_percentage = 0
+
+# Prefix for iSCSI volumes (string value)
+# Deprecated group/name - [backend_defaults]/iscsi_target_prefix
+#target_prefix = iqn.2010-10.org.openstack:
+
+# The IP address that the iSCSI daemon is listening on (string value)
+# Deprecated group/name - [backend_defaults]/iscsi_ip_address
+#target_ip_address = $my_ip
+
+# The list of secondary IP addresses of the iSCSI daemon (list value)
+#iscsi_secondary_ip_addresses =
+
+# The port that the iSCSI daemon is listening on (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# Deprecated group/name - [backend_defaults]/iscsi_port
+#target_port = 3260
+
+# The maximum number of times to rescan targets to find volume (integer value)
+#num_volume_device_scan_tries = 3
+
+# The backend name for a given driver implementation (string value)
+#volume_backend_name = <None>
+
+# Do we attach/detach volumes in cinder using multipath for volume to image and
+# image to volume transfers? (boolean value)
+#use_multipath_for_image_xfer = false
+
+# If this is set to True, attachment of volumes for image transfer will be
+# aborted when multipathd is not running. Otherwise, it will fallback to single
+# path. (boolean value)
+#enforce_multipath_for_image_xfer = false
+
+# Method used to wipe old volumes (string value)
+# Possible values:
+# none - <No description provided>
+# zero - <No description provided>
+#volume_clear = zero
+
+# Size in MiB to wipe at start of old volumes. 1024 MiBat max. 0 => all
+# (integer value)
+# Maximum value: 1024
+#volume_clear_size = 0
+
+# The flag to pass to ionice to alter the i/o priority of the process used to
+# zero a volume after deletion, for example "-c3" for idle only priority.
+# (string value)
+#volume_clear_ionice = <None>
+
+# Target user-land tool to use. tgtadm is default, use lioadm for LIO iSCSI
+# support, scstadmin for SCST target support, ietadm for iSCSI Enterprise
+# Target, iscsictl for Chelsio iSCSI Target, nvmet for NVMEoF support, or fake
+# for testing. (string value)
+# Possible values:
+# tgtadm - <No description provided>
+# lioadm - <No description provided>
+# scstadmin - <No description provided>
+# iscsictl - <No description provided>
+# ietadm - <No description provided>
+# nvmet - <No description provided>
+# fake - <No description provided>
+# Deprecated group/name - [backend_defaults]/iscsi_helper
+#target_helper = tgtadm
+
+# Volume configuration file storage directory (string value)
+#volumes_dir = $state_path/volumes
+
+# IET configuration file (string value)
+#iet_conf = /etc/iet/ietd.conf
+
+# Chiscsi (CXT) global defaults configuration file (string value)
+#chiscsi_conf = /etc/chelsio-iscsi/chiscsi.conf
+
+# Sets the behavior of the iSCSI target to either perform blockio or fileio
+# optionally, auto can be set and Cinder will autodetect type of backing device
+# (string value)
+# Possible values:
+# blockio - <No description provided>
+# fileio - <No description provided>
+# auto - <No description provided>
+#iscsi_iotype = fileio
+
+# The default block size used when copying/clearing volumes (string value)
+#volume_dd_blocksize = 1M
+
+# The blkio cgroup name to be used to limit bandwidth of volume copy (string
+# value)
+#volume_copy_blkio_cgroup_name = cinder-volume-copy
+
+# The upper limit of bandwidth of volume copy. 0 => unlimited (integer value)
+#volume_copy_bps_limit = 0
+
+# Sets the behavior of the iSCSI target to either perform write-back(on) or
+# write-through(off). This parameter is valid if target_helper is set to
+# tgtadm. (string value)
+# Possible values:
+# on - <No description provided>
+# off - <No description provided>
+#iscsi_write_cache = on
+
+# Sets the target-specific flags for the iSCSI target. Only used for tgtadm to
+# specify backing device flags using bsoflags option. The specified string is
+# passed as is to the underlying tool. (string value)
+#iscsi_target_flags =
+
+# Determines the target protocol for new volumes, created with tgtadm, lioadm
+# and nvmet target helpers. In order to enable RDMA, this parameter should be
+# set with the value "iser". The supported iSCSI protocol values are "iscsi"
+# and "iser", in case of nvmet target set to "nvmet_rdma". (string value)
+# Possible values:
+# iscsi - <No description provided>
+# iser - <No description provided>
+# nvmet_rdma - <No description provided>
+# Deprecated group/name - [backend_defaults]/iscsi_protocol
+#target_protocol = iscsi
+
+# The path to the client certificate key for verification, if the driver
+# supports it. (string value)
+#driver_client_cert_key = <None>
+
+# The path to the client certificate for verification, if the driver supports
+# it. (string value)
+#driver_client_cert = <None>
+
+# Tell driver to use SSL for connection to backend storage if the driver
+# supports it. (boolean value)
+#driver_use_ssl = false
+
+# Representation of the over subscription ratio when thin provisioning is
+# enabled. Default ratio is 20.0, meaning provisioned capacity can be 20 times
+# of the total physical capacity. If the ratio is 10.5, it means provisioned
+# capacity can be 10.5 times of the total physical capacity. A ratio of 1.0
+# means provisioned capacity cannot exceed the total physical capacity. If
+# ratio is 'auto', Cinder will automatically calculate the ratio based on the
+# provisioned capacity and the used space. If not set to auto, the ratio has to
+# be a minimum of 1.0. (string value)
+#max_over_subscription_ratio = 20.0
+
+# Certain ISCSI targets have predefined target names, SCST target driver uses
+# this name. (string value)
+#scst_target_iqn_name = <None>
+
+# SCST target implementation can choose from multiple SCST target drivers.
+# (string value)
+#scst_target_driver = iscsi
+
+# Option to enable/disable CHAP authentication for targets. (boolean value)
+#use_chap_auth = false
+
+# CHAP user name. (string value)
+#chap_username =
+
+# Password for specified CHAP account name. (string value)
+#chap_password =
+
+# Namespace for driver private data values to be saved in. (string value)
+#driver_data_namespace = <None>
+
+# String representation for an equation that will be used to filter hosts. Only
+# used when the driver filter is set to be used by the Cinder scheduler.
+# (string value)
+#filter_function = <None>
+
+# String representation for an equation that will be used to determine the
+# goodness of a host. Only used when using the goodness weigher is set to be
+# used by the Cinder scheduler. (string value)
+#goodness_function = <None>
+
+# If set to True the http client will validate the SSL certificate of the
+# backend endpoint. (boolean value)
+#driver_ssl_cert_verify = false
+
+# Can be used to specify a non default path to a CA_BUNDLE file or directory
+# with certificates of trusted CAs, which will be used to validate the backend
+# (string value)
+#driver_ssl_cert_path = <None>
+
+# List of options that control which trace info is written to the DEBUG log
+# level to assist developers. Valid values are method and api. (list value)
+#trace_flags = <None>
+
+# Multi opt of dictionaries to represent a replication target device.  This
+# option may be specified multiple times in a single config section to specify
+# multiple replication target devices.  Each entry takes the standard dict
+# config form: replication_device =
+# target_device_id:<required>,key1:value1,key2:value2... (dict value)
+#replication_device = <None>
+
+# If set to True, upload-to-image in raw format will create a cloned volume and
+# register its location to the image service, instead of uploading the volume
+# content. The cinder backend and locations support must be enabled in the
+# image service. (boolean value)
+#image_upload_use_cinder_backend = false
+
+# If set to True, the image volume created by upload-to-image will be placed in
+# the internal tenant. Otherwise, the image volume is created in the current
+# context's tenant. (boolean value)
+#image_upload_use_internal_tenant = false
+
+# Enable the image volume cache for this backend. (boolean value)
+#image_volume_cache_enabled = false
+
+# Max size of the image volume cache for this backend in GB. 0 => unlimited.
+# (integer value)
+#image_volume_cache_max_size_gb = 0
+
+# Max number of entries allowed in the image volume cache. 0 => unlimited.
+# (integer value)
+#image_volume_cache_max_count = 0
+
+# Report to clients of Cinder that the backend supports discard (aka.
+# trim/unmap). This will not actually change the behavior of the backend or the
+# client directly, it will only notify that it can be used. (boolean value)
+#report_discard_supported = false
+
+# Protocol for transferring data between host and storage back-end. (string
+# value)
+# Possible values:
+# iscsi - <No description provided>
+# fc - <No description provided>
+#storage_protocol = iscsi
+
+# If this is set to True, a temporary snapshot will be created for performing
+# non-disruptive backups. Otherwise a temporary volume will be cloned in order
+# to perform a backup. (boolean value)
+#backup_use_temp_snapshot = false
+
+# Set this to True when you want to allow an unsupported driver to start.
+# Drivers that haven't maintained a working CI system and testing are marked as
+# unsupported until CI is working again.  This also marks a driver as
+# deprecated and may be removed in the next release. (boolean value)
+#enable_unsupported_driver = false
+
+# Availability zone for this volume backend. If not set, the
+# storage_availability_zone option value is used as the default for all
+# backends. (string value)
+#backend_availability_zone = <None>
+
+# The maximum number of times to rescan iSER targetto find volume (integer
+# value)
+#num_iser_scan_tries = 3
+
+# Prefix for iSER volumes (string value)
+#iser_target_prefix = iqn.2010-10.org.openstack:
+
+# The IP address that the iSER daemon is listening on (string value)
+#iser_ip_address = $my_ip
+
+# The port that the iSER daemon is listening on (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#iser_port = 3260
+
+# The name of the iSER target user-land tool to use (string value)
+#iser_helper = tgtadm
+
+# The port that the NVMe target is listening on. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#nvmet_port_id = 1
+
+# The namespace id associated with the subsystem that will be created with the
+# path for the LVM volume. (integer value)
+#nvmet_ns_id = 10
+
+# Hostname for the CoprHD Instance (string value)
+#coprhd_hostname = <None>
+
+# Port for the CoprHD Instance (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#coprhd_port = 4443
+
+# Username for accessing the CoprHD Instance (string value)
+#coprhd_username = <None>
+
+# Password for accessing the CoprHD Instance (string value)
+#coprhd_password = <None>
+
+# Tenant to utilize within the CoprHD Instance (string value)
+#coprhd_tenant = <None>
+
+# Project to utilize within the CoprHD Instance (string value)
+#coprhd_project = <None>
+
+# Virtual Array to utilize within the CoprHD Instance (string value)
+#coprhd_varray = <None>
+
+# True | False to indicate if the storage array in CoprHD is VMAX or VPLEX
+# (boolean value)
+#coprhd_emulate_snapshot = false
+
+# Rest Gateway IP or FQDN for Scaleio (string value)
+#coprhd_scaleio_rest_gateway_host = None
+
+# Rest Gateway Port for Scaleio (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#coprhd_scaleio_rest_gateway_port = 4984
+
+# Username for Rest Gateway (string value)
+#coprhd_scaleio_rest_server_username = <None>
+
+# Rest Gateway Password (string value)
+#coprhd_scaleio_rest_server_password = <None>
+
+# verify server certificate (boolean value)
+#scaleio_verify_server_certificate = false
+
+# Server certificate path (string value)
+#scaleio_server_certificate_path = <None>
+
+# Datera API port. (string value)
+#datera_api_port = 7717
+
+# DEPRECATED: Datera API version. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#datera_api_version = 2
+
+# Timeout for HTTP 503 retry messages (integer value)
+#datera_503_timeout = 120
+
+# Interval between 503 retries (integer value)
+#datera_503_interval = 5
+
+# True to set function arg and return logging (boolean value)
+#datera_debug = false
+
+# ONLY FOR DEBUG/TESTING PURPOSES
+# True to set replica_count to 1 (boolean value)
+#datera_debug_replica_count_override = false
+
+# If set to 'Map' --> OpenStack project ID will be mapped implicitly to Datera
+# tenant ID
+# If set to 'None' --> Datera tenant ID will not be used during volume
+# provisioning
+# If set to anything else --> Datera tenant ID will be the provided value
+# (string value)
+#datera_tenant_id = <None>
+
+# Set to True to disable profiling in the Datera driver (boolean value)
+#datera_disable_profiler = false
+
+# Group name to use for creating volumes. Defaults to "group-0". (string value)
+#eqlx_group_name = group-0
+
+# Maximum retry count for reconnection. Default is 5. (integer value)
+# Minimum value: 0
+#eqlx_cli_max_retries = 5
+
+# Pool in which volumes will be created. Defaults to "default". (string value)
+#eqlx_pool = default
+
+# Storage Center System Serial Number (integer value)
+#dell_sc_ssn = 64702
+
+# Dell API port (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#dell_sc_api_port = 3033
+
+# Name of the server folder to use on the Storage Center (string value)
+#dell_sc_server_folder = openstack
+
+# Name of the volume folder to use on the Storage Center (string value)
+#dell_sc_volume_folder = openstack
+
+# Enable HTTPS SC certificate verification (boolean value)
+#dell_sc_verify_cert = false
+
+# IP address of secondary DSM controller (string value)
+#secondary_san_ip =
+
+# Secondary DSM user name (string value)
+#secondary_san_login = Admin
+
+# Secondary DSM user password name (string value)
+#secondary_san_password =
+
+# Secondary Dell API port (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#secondary_sc_api_port = 3033
+
+# Dell SC API async call default timeout in seconds. (integer value)
+#dell_api_async_rest_timeout = 15
+
+# Dell SC API sync call default timeout in seconds. (integer value)
+#dell_api_sync_rest_timeout = 30
+
+# Domain IP to be excluded from iSCSI returns. (IP address value)
+#excluded_domain_ip = <None>
+
+# Server OS type to use when creating a new server on the Storage Center.
+# (string value)
+#dell_server_os = Red Hat Linux 6.x
+
+# REST server port. (string value)
+#sio_rest_server_port = 443
+
+# Verify server certificate. (boolean value)
+#sio_verify_server_certificate = false
+
+# Server certificate path. (string value)
+#sio_server_certificate_path = <None>
+
+# Round up volume capacity. (boolean value)
+#sio_round_volume_capacity = true
+
+# Unmap volume before deletion. (boolean value)
+#sio_unmap_volume_before_deletion = false
+
+# Storage Pools. (string value)
+#sio_storage_pools = <None>
+
+# DEPRECATED: Protection Domain ID. (string value)
+# This option is deprecated for removal since Pike.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by sio_storage_pools option
+#sio_protection_domain_id = <None>
+
+# DEPRECATED: Protection Domain name. (string value)
+# This option is deprecated for removal since Pike.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by sio_storage_pools option
+#sio_protection_domain_name = <None>
+
+# DEPRECATED: Storage Pool name. (string value)
+# This option is deprecated for removal since Pike.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by sio_storage_pools option
+#sio_storage_pool_name = <None>
+
+# DEPRECATED: Storage Pool ID. (string value)
+# This option is deprecated for removal since Pike.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by sio_storage_pools option
+#sio_storage_pool_id = <None>
+
+# ScaleIO API version. (string value)
+#sio_server_api_version = <None>
+
+# max_over_subscription_ratio setting for the ScaleIO driver. This replaces the
+# general max_over_subscription_ratio which has no effect in this
+# driver.Maximum value allowed for ScaleIO is 10.0. (floating point value)
+#sio_max_over_subscription_ratio = 10.0
+
+# Allow thick volumes to be created in Storage Pools when zero padding is
+# disabled. This option should not be enabled if multiple tenants will utilize
+# thick volumes from a shared Storage Pool. (boolean value)
+#sio_allow_non_padded_thick_volumes = false
+
+# A comma-separated list of storage pool names to be used. (list value)
+#unity_storage_pool_names = <None>
+
+# A comma-separated list of iSCSI or FC ports to be used. Each port can be
+# Unix-style glob expressions. (list value)
+#unity_io_ports = <None>
+
+# To remove the host from Unity when the last LUN is detached from it. By
+# default, it is False. (boolean value)
+#remove_empty_host = false
+
+# DEPRECATED: Use this file for cinder emc plugin config data. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#cinder_dell_emc_config_file = /etc/cinder/cinder_dell_emc_config.xml
+
+# Use this value to specify length of the interval in seconds. (integer value)
+#interval = 3
+
+# Use this value to specify number of retries. (integer value)
+#retries = 200
+
+# Use this value to enable the initiator_check. (boolean value)
+#initiator_check = false
+
+# REST server port number. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#san_rest_port = 8443
+
+# Serial number of the array to connect to. (string value)
+#vmax_array = <None>
+
+# Storage resource pool on array to use for provisioning. (string value)
+#vmax_srp = <None>
+
+# Service level to use for provisioning storage. (string value)
+#vmax_service_level = <None>
+
+# Workload (string value)
+#vmax_workload = <None>
+
+# List of port groups containing frontend ports configured prior for server
+# connection. (list value)
+#vmax_port_groups = <None>
+
+# VNX authentication scope type. By default, the value is global. (string
+# value)
+#storage_vnx_authentication_type = global
+
+# Directory path that contains the VNX security file. Make sure the security
+# file is generated first. (string value)
+#storage_vnx_security_file_dir = <None>
+
+# Naviseccli Path. (string value)
+#naviseccli_path = <None>
+
+# Comma-separated list of storage pool names to be used. (list value)
+#storage_vnx_pool_names = <None>
+
+# Default timeout for CLI operations in minutes. For example, LUN migration is
+# a typical long running operation, which depends on the LUN size and the load
+# of the array. An upper bound in the specific deployment can be set to avoid
+# unnecessary long wait. By default, it is 365 days long. (integer value)
+#default_timeout = 31536000
+
+# Default max number of LUNs in a storage group. By default, the value is 255.
+# (integer value)
+#max_luns_per_storage_group = 255
+
+# To destroy storage group when the last LUN is removed from it. By default,
+# the value is False. (boolean value)
+#destroy_empty_storage_group = false
+
+# Mapping between hostname and its iSCSI initiator IP addresses. (string value)
+#iscsi_initiators = <None>
+
+# Comma separated iSCSI or FC ports to be used in Nova or Cinder. (list value)
+#io_port_list = <None>
+
+# Automatically register initiators. By default, the value is False. (boolean
+# value)
+#initiator_auto_registration = false
+
+# Automatically deregister initiators after the related storage group is
+# destroyed. By default, the value is False. (boolean value)
+#initiator_auto_deregistration = false
+
+# DEPRECATED: Report free_capacity_gb as 0 when the limit to maximum number of
+# pool LUNs is reached. By default, the value is False. (boolean value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#check_max_pool_luns_threshold = false
+
+# Delete a LUN even if it is in Storage Groups. By default, the value is False.
+# (boolean value)
+#force_delete_lun_in_storagegroup = false
+
+# Force LUN creation even if the full threshold of pool is reached. By default,
+# the value is False. (boolean value)
+#ignore_pool_full_threshold = false
+
+# XMS cluster id in multi-cluster environment (string value)
+#xtremio_cluster_name =
+
+# Number of retries in case array is busy (integer value)
+#xtremio_array_busy_retry_count = 5
+
+# Interval between retries in case array is busy (integer value)
+#xtremio_array_busy_retry_interval = 5
+
+# Number of volumes created from each cached glance image (integer value)
+#xtremio_volumes_per_glance_cache = 100
+
+# Should the driver remove initiator groups with no volumes after the last
+# connection was terminated. Since the behavior till now was to leave the IG
+# be, we default to False (not deleting IGs without connected volumes); setting
+# this parameter to True will remove any IG after terminating its connection to
+# the last volume. (boolean value)
+#xtremio_clean_unused_ig = false
+
+# The IP of DMS client socket server (IP address value)
+#disco_client = 127.0.0.1
+
+# The port to connect DMS client socket server (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#disco_client_port = 9898
+
+# DEPRECATED: Path to the wsdl file to communicate with DISCO request manager
+# (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#disco_wsdl_path = /etc/cinder/DISCOService.wsdl
+
+# DEPRECATED: The IP address of the REST server (IP address value)
+# Deprecated group/name - [DEFAULT]/rest_ip
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Using san_ip later
+#disco_rest_ip = <None>
+
+# Use soap client or rest client for communicating with DISCO. Possible values
+# are "soap" or "rest". (string value)
+# Possible values:
+# soap - <No description provided>
+# rest - <No description provided>
+# Deprecated group/name - [DEFAULT]/choice_client
+#disco_choice_client = <None>
+
+# DEPRECATED: The port of DISCO source API (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Using san_api_port later
+#disco_src_api_port = 8080
+
+# Prefix before volume name to differentiate DISCO volume created through
+# openstack and the other ones (string value)
+# Deprecated group/name - [backend_defaults]/volume_name_prefix
+#disco_volume_name_prefix = openstack-
+
+# How long we check whether a snapshot is finished before we give up (integer
+# value)
+# Deprecated group/name - [backend_defaults]/snapshot_check_timeout
+#disco_snapshot_check_timeout = 3600
+
+# How long we check whether a restore is finished before we give up (integer
+# value)
+# Deprecated group/name - [backend_defaults]/restore_check_timeout
+#disco_restore_check_timeout = 3600
+
+# How long we check whether a clone is finished before we give up (integer
+# value)
+# Deprecated group/name - [backend_defaults]/clone_check_timeout
+#disco_clone_check_timeout = 3600
+
+# How long we wait before retrying to get an item detail (integer value)
+# Deprecated group/name - [backend_defaults]/retry_interval
+#disco_retry_interval = 1
+
+# Number of nodes that should replicate the data. (integer value)
+#drbdmanage_redundancy = 1
+
+# Resource deployment completion wait policy. (string value)
+#drbdmanage_resource_policy = {"ratio": "0.51", "timeout": "60"}
+
+# Disk options to set on new resources. See http://www.drbd.org/en/doc/users-
+# guide-90/re-drbdconf for all the details. (string value)
+#drbdmanage_disk_options = {"c-min-rate": "4M"}
+
+# Net options to set on new resources. See http://www.drbd.org/en/doc/users-
+# guide-90/re-drbdconf for all the details. (string value)
+#drbdmanage_net_options = {"connect-int": "4", "allow-two-primaries": "yes", "ko-count": "30", "max-buffers": "20000", "ping-timeout": "100"}
+
+# Resource options to set on new resources. See
+# http://www.drbd.org/en/doc/users-guide-90/re-drbdconf for all the details.
+# (string value)
+#drbdmanage_resource_options = {"auto-promote-timeout": "300"}
+
+# Snapshot completion wait policy. (string value)
+#drbdmanage_snapshot_policy = {"count": "1", "timeout": "60"}
+
+# Volume resize completion wait policy. (string value)
+#drbdmanage_resize_policy = {"timeout": "60"}
+
+# Resource deployment completion wait plugin. (string value)
+#drbdmanage_resource_plugin = drbdmanage.plugins.plugins.wait_for.WaitForResource
+
+# Snapshot completion wait plugin. (string value)
+#drbdmanage_snapshot_plugin = drbdmanage.plugins.plugins.wait_for.WaitForSnapshot
+
+# Volume resize completion wait plugin. (string value)
+#drbdmanage_resize_plugin = drbdmanage.plugins.plugins.wait_for.WaitForVolumeSize
+
+# If set, the c-vol node will receive a useable
+#                 /dev/drbdX device, even if the actual data is stored on
+#                 other nodes only.
+#                 This is useful for debugging, maintenance, and to be
+#                 able to do the iSCSI export from the c-vol node. (boolean
+# value)
+#drbdmanage_devs_on_controller = true
+
+# config file for cinder eternus_dx volume driver (string value)
+#cinder_eternus_config_file = /etc/cinder/cinder_fujitsu_eternus_dx.xml
+
+# The flag of thin storage allocation. (boolean value)
+#dsware_isthin = false
+
+# Fusionstorage manager ip addr for cinder-volume. (string value)
+#dsware_manager =
+
+# Fusionstorage agent ip addr range. (string value)
+#fusionstorageagent =
+
+# Pool type, like sata-2copy. (string value)
+#pool_type = default
+
+# Pool id permit to use. (list value)
+#pool_id_filter =
+
+# Create clone volume timeout. (integer value)
+#clone_volume_timeout = 680
+
+# Space network name to use for data transfer (string value)
+#hgst_net = Net 1 (IPv4)
+
+# Comma separated list of Space storage servers:devices. ex:
+# os1_stor:gbd0,os2_stor:gbd0 (string value)
+#hgst_storage_servers = os:gbd0
+
+# Should spaces be redundantly stored (1/0) (string value)
+#hgst_redundancy = 0
+
+# User to own created spaces (string value)
+#hgst_space_user = root
+
+# Group to own created spaces (string value)
+#hgst_space_group = disk
+
+# UNIX mode for created spaces (string value)
+#hgst_space_mode = 0600
+
+# 3PAR WSAPI Server Url like https://<3par ip>:8080/api/v1 (string value)
+#hpe3par_api_url =
+
+# 3PAR username with the 'edit' role (string value)
+#hpe3par_username =
+
+# 3PAR password for the user specified in hpe3par_username (string value)
+#hpe3par_password =
+
+# List of the CPG(s) to use for volume creation (list value)
+#hpe3par_cpg = OpenStack
+
+# The CPG to use for Snapshots for volumes. If empty the userCPG will be used.
+# (string value)
+#hpe3par_cpg_snap =
+
+# The time in hours to retain a snapshot.  You can't delete it before this
+# expires. (string value)
+#hpe3par_snapshot_retention =
+
+# The time in hours when a snapshot expires  and is deleted.  This must be
+# larger than expiration (string value)
+#hpe3par_snapshot_expiration =
+
+# Enable HTTP debugging to 3PAR (boolean value)
+#hpe3par_debug = false
+
+# List of target iSCSI addresses to use. (list value)
+#hpe3par_iscsi_ips =
+
+# Enable CHAP authentication for iSCSI connections. (boolean value)
+#hpe3par_iscsi_chap_enabled = false
+
+# HPE LeftHand WSAPI Server Url like https://<LeftHand ip>:8081/lhos (uri
+# value)
+# Deprecated group/name - [backend_defaults]/hplefthand_api_url
+#hpelefthand_api_url = <None>
+
+# HPE LeftHand Super user username (string value)
+# Deprecated group/name - [backend_defaults]/hplefthand_username
+#hpelefthand_username = <None>
+
+# HPE LeftHand Super user password (string value)
+# Deprecated group/name - [backend_defaults]/hplefthand_password
+#hpelefthand_password = <None>
+
+# HPE LeftHand cluster name (string value)
+# Deprecated group/name - [backend_defaults]/hplefthand_clustername
+#hpelefthand_clustername = <None>
+
+# Configure CHAP authentication for iSCSI connections (Default: Disabled)
+# (boolean value)
+# Deprecated group/name - [backend_defaults]/hplefthand_iscsi_chap_enabled
+#hpelefthand_iscsi_chap_enabled = false
+
+# Enable HTTP debugging to LeftHand (boolean value)
+# Deprecated group/name - [backend_defaults]/hplefthand_debug
+#hpelefthand_debug = false
+
+# Port number of SSH service. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#hpelefthand_ssh_port = 16022
+
+# The configuration file for the Cinder Huawei driver. (string value)
+#cinder_huawei_conf_file = /etc/cinder/cinder_huawei_conf.xml
+
+# The remote device hypermetro will use. (string value)
+#hypermetro_devices = <None>
+
+# The remote metro device san user. (string value)
+#metro_san_user = <None>
+
+# The remote metro device san password. (string value)
+#metro_san_password = <None>
+
+# The remote metro device domain name. (string value)
+#metro_domain_name = <None>
+
+# The remote metro device request url. (string value)
+#metro_san_address = <None>
+
+# The remote metro device pool names. (string value)
+#metro_storage_pools = <None>
+
+# Connection protocol should be FC. (Default is FC.) (string value)
+#flashsystem_connection_protocol = FC
+
+# Allows vdisk to multi host mapping. (Default is True) (boolean value)
+#flashsystem_multihostmap_enabled = true
+
+# DEPRECATED: This option no longer has any affect. It is deprecated and will
+# be removed in the next release. (boolean value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#flashsystem_multipath_enabled = false
+
+# Default iSCSI Port ID of FlashSystem. (Default port is 0.) (integer value)
+#flashsystem_iscsi_portid = 0
+
+# Specifies the path of the GPFS directory where Block Storage volume and
+# snapshot files are stored. (string value)
+#gpfs_mount_point_base = <None>
+
+# Specifies the path of the Image service repository in GPFS.  Leave undefined
+# if not storing images in GPFS. (string value)
+#gpfs_images_dir = <None>
+
+# Specifies the type of image copy to be used.  Set this when the Image service
+# repository also uses GPFS so that image files can be transferred efficiently
+# from the Image service to the Block Storage service. There are two valid
+# values: "copy" specifies that a full copy of the image is made;
+# "copy_on_write" specifies that copy-on-write optimization strategy is used
+# and unmodified blocks of the image file are shared efficiently. (string
+# value)
+# Possible values:
+# copy - <No description provided>
+# copy_on_write - <No description provided>
+# <None> - <No description provided>
+#gpfs_images_share_mode = <None>
+
+# Specifies an upper limit on the number of indirections required to reach a
+# specific block due to snapshots or clones.  A lengthy chain of copy-on-write
+# snapshots or clones can have a negative impact on performance, but improves
+# space utilization.  0 indicates unlimited clone depth. (integer value)
+#gpfs_max_clone_depth = 0
+
+# Specifies that volumes are created as sparse files which initially consume no
+# space. If set to False, the volume is created as a fully allocated file, in
+# which case, creation may take a significantly longer time. (boolean value)
+#gpfs_sparse_volumes = true
+
+# Specifies the storage pool that volumes are assigned to. By default, the
+# system storage pool is used. (string value)
+#gpfs_storage_pool = system
+
+# Comma-separated list of IP address or hostnames of GPFS nodes. (list value)
+#gpfs_hosts =
+
+# Username for GPFS nodes. (string value)
+#gpfs_user_login = root
+
+# Password for GPFS node user. (string value)
+#gpfs_user_password =
+
+# Filename of private key to use for SSH authentication. (string value)
+#gpfs_private_key =
+
+# SSH port to use. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#gpfs_ssh_port = 22
+
+# File containing SSH host keys for the gpfs nodes with which driver needs to
+# communicate. Default=$state_path/ssh_known_hosts (string value)
+#gpfs_hosts_key_file = $state_path/ssh_known_hosts
+
+# Option to enable strict gpfs host key checking while connecting to gpfs
+# nodes. Default=False (boolean value)
+#gpfs_strict_host_key_policy = false
+
+# Mapping between IODevice address and unit address. (string value)
+#ds8k_devadd_unitadd_mapping =
+
+# Set the first two digits of SSID. (string value)
+#ds8k_ssid_prefix = FF
+
+# Reserve LSSs for consistency group. (string value)
+#lss_range_for_cg =
+
+# Set to zLinux if your OpenStack version is prior to Liberty and you're
+# connecting to zLinux systems. Otherwise set to auto. Valid values for this
+# parameter are: 'auto', 'AMDLinuxRHEL', 'AMDLinuxSuse', 'AppleOSX', 'Fujitsu',
+# 'Hp', 'HpTru64', 'HpVms', 'LinuxDT', 'LinuxRF', 'LinuxRHEL', 'LinuxSuse',
+# 'Novell', 'SGI', 'SVC', 'SanFsAIX', 'SanFsLinux', 'Sun', 'VMWare', 'Win2000',
+# 'Win2003', 'Win2008', 'Win2012', 'iLinux', 'nSeries', 'pLinux', 'pSeries',
+# 'pSeriesPowerswap', 'zLinux', 'iSeries'. (string value)
+#ds8k_host_type = auto
+
+# Proxy driver that connects to the IBM Storage Array (string value)
+#proxy = cinder.volume.drivers.ibm.ibm_storage.proxy.IBMStorageProxy
+
+# Connection type to the IBM Storage Array (string value)
+# Possible values:
+# fibre_channel - <No description provided>
+# iscsi - <No description provided>
+#connection_type = iscsi
+
+# CHAP authentication mode, effective only for iscsi (disabled|enabled) (string
+# value)
+# Possible values:
+# disabled - <No description provided>
+# enabled - <No description provided>
+#chap = disabled
+
+# List of Management IP addresses (separated by commas) (string value)
+#management_ips =
+
+# Comma separated list of storage system storage pools for volumes. (list
+# value)
+#storwize_svc_volpool_name = volpool
+
+# Storage system space-efficiency parameter for volumes (percentage) (integer
+# value)
+# Minimum value: -1
+# Maximum value: 100
+#storwize_svc_vol_rsize = 2
+
+# Storage system threshold for volume capacity warnings (percentage) (integer
+# value)
+# Minimum value: -1
+# Maximum value: 100
+#storwize_svc_vol_warning = 0
+
+# Storage system autoexpand parameter for volumes (True/False) (boolean value)
+#storwize_svc_vol_autoexpand = true
+
+# Storage system grain size parameter for volumes (32/64/128/256) (integer
+# value)
+#storwize_svc_vol_grainsize = 256
+
+# Storage system compression option for volumes (boolean value)
+#storwize_svc_vol_compression = false
+
+# Enable Easy Tier for volumes (boolean value)
+#storwize_svc_vol_easytier = true
+
+# The I/O group in which to allocate volumes. It can be a comma-separated list
+# in which case the driver will select an io_group based on least number of
+# volumes associated with the io_group. (string value)
+#storwize_svc_vol_iogrp = 0
+
+# Maximum number of seconds to wait for FlashCopy to be prepared. (integer
+# value)
+# Minimum value: 1
+# Maximum value: 600
+#storwize_svc_flashcopy_timeout = 120
+
+# DEPRECATED: This option no longer has any affect. It is deprecated and will
+# be removed in the next release. (boolean value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#storwize_svc_multihostmap_enabled = true
+
+# Allow tenants to specify QOS on create (boolean value)
+#storwize_svc_allow_tenant_qos = false
+
+# If operating in stretched cluster mode, specify the name of the pool in which
+# mirrored copies are stored.Example: "pool2" (string value)
+#storwize_svc_stretched_cluster_partner = <None>
+
+# Specifies secondary management IP or hostname to be used if san_ip is invalid
+# or becomes inaccessible. (string value)
+#storwize_san_secondary_ip = <None>
+
+# Specifies that the volume not be formatted during creation. (boolean value)
+#storwize_svc_vol_nofmtdisk = false
+
+# Specifies the Storwize FlashCopy copy rate to be used when creating a full
+# volume copy. The default is rate is 50, and the valid rates are 1-150.
+# (integer value)
+# Minimum value: 1
+# Maximum value: 150
+#storwize_svc_flashcopy_rate = 50
+
+# Specifies the name of the pool in which mirrored copy is stored. Example:
+# "pool2" (string value)
+#storwize_svc_mirror_pool = <None>
+
+# Specifies the name of the peer pool for hyperswap volume, the peer pool must
+# exist on the other site. (string value)
+#storwize_peer_pool = <None>
+
+# Specifies the site information for host. One WWPN or multi WWPNs used in the
+# host can be specified. For example:
+# storwize_preferred_host_site=site1:wwpn1,site2:wwpn2&wwpn3 or
+# storwize_preferred_host_site=site1:iqn1,site2:iqn2 (dict value)
+#storwize_preferred_host_site =
+
+# This defines an optional cycle period that applies to Global Mirror
+# relationships with a cycling mode of multi. A Global Mirror relationship
+# using the multi cycling_mode performs a complete cycle at most once each
+# period. The default is 300 seconds, and the valid seconds are 60-86400.
+# (integer value)
+# Minimum value: 60
+# Maximum value: 86400
+#cycle_period_seconds = 300
+
+# Connect with multipath (FC only; iSCSI multipath is controlled by Nova)
+# (boolean value)
+#storwize_svc_multipath_enabled = false
+
+# Configure CHAP authentication for iSCSI connections (Default: Enabled)
+# (boolean value)
+#storwize_svc_iscsi_chap_enabled = true
+
+# Name of the pool from which volumes are allocated (string value)
+#infinidat_pool_name = <None>
+
+# Protocol for transferring data between host and storage back-end. (string
+# value)
+# Possible values:
+# iscsi - <No description provided>
+# fc - <No description provided>
+#infinidat_storage_protocol = fc
+
+# List of names of network spaces to use for iSCSI connectivity (list value)
+#infinidat_iscsi_netspaces =
+
+# Specifies whether to turn on compression for newly created volumes. (boolean
+# value)
+#infinidat_use_compression = false
+
+# K2 driver will calculate max_oversubscription_ratio on setting this option as
+# True. (boolean value)
+#auto_calc_max_oversubscription_ratio = false
+
+# Whether or not our private network has unique FQDN on each initiator or not.
+# For example networks with QA systems usually have multiple servers/VMs with
+# the same FQDN.  When true this will create host entries on K2 using the FQDN,
+# when false it will use the reversed IQN/WWNN. (boolean value)
+#unique_fqdn_network = true
+
+# Disabling iSCSI discovery (sendtargets) for multipath connections on K2
+# driver. (boolean value)
+#disable_discovery = false
+
+# Pool or Vdisk name to use for volume creation. (string value)
+#lenovo_backend_name = A
+
+# linear (for VDisk) or virtual (for Pool). (string value)
+# Possible values:
+# linear - <No description provided>
+# virtual - <No description provided>
+#lenovo_backend_type = virtual
+
+# Lenovo api interface protocol. (string value)
+# Possible values:
+# http - <No description provided>
+# https - <No description provided>
+#lenovo_api_protocol = https
+
+# Whether to verify Lenovo array SSL certificate. (boolean value)
+#lenovo_verify_certificate = false
+
+# Lenovo array SSL certificate path. (string value)
+#lenovo_verify_certificate_path = <None>
+
+# List of comma-separated target iSCSI IP addresses. (list value)
+#lenovo_iscsi_ips =
+
+# Name for the VG that will contain exported volumes (string value)
+#volume_group = cinder-volumes
+
+# If >0, create LVs with multiple mirrors. Note that this requires lvm_mirrors
+# + 2 PVs with available space (integer value)
+#lvm_mirrors = 0
+
+# Type of LVM volumes to deploy; (default, thin, or auto). Auto defaults to
+# thin if thin is supported. (string value)
+# Possible values:
+# default - <No description provided>
+# thin - <No description provided>
+# auto - <No description provided>
+#lvm_type = auto
+
+# LVM conf file to use for the LVM driver in Cinder; this setting is ignored if
+# the specified file does not exist (You can also specify 'None' to not use a
+# conf file even if one exists). (string value)
+#lvm_conf_file = /etc/cinder/lvm.conf
+
+# Suppress leaked file descriptor warnings in LVM commands. (boolean value)
+#lvm_suppress_fd_warnings = false
+
+# The storage family type used on the storage system; valid values are
+# ontap_cluster for using clustered Data ONTAP, or eseries for using E-Series.
+# (string value)
+# Possible values:
+# ontap_cluster - <No description provided>
+# eseries - <No description provided>
+#netapp_storage_family = ontap_cluster
+
+# The storage protocol to be used on the data path with the storage system.
+# (string value)
+# Possible values:
+# iscsi - <No description provided>
+# fc - <No description provided>
+# nfs - <No description provided>
+#netapp_storage_protocol = <None>
+
+# The hostname (or IP address) for the storage system or proxy server. (string
+# value)
+#netapp_server_hostname = <None>
+
+# The TCP port to use for communication with the storage system or proxy
+# server. If not specified, Data ONTAP drivers will use 80 for HTTP and 443 for
+# HTTPS; E-Series will use 8080 for HTTP and 8443 for HTTPS. (integer value)
+#netapp_server_port = <None>
+
+# The transport protocol used when communicating with the storage system or
+# proxy server. (string value)
+# Possible values:
+# http - <No description provided>
+# https - <No description provided>
+#netapp_transport_type = http
+
+# Administrative user account name used to access the storage system or proxy
+# server. (string value)
+#netapp_login = <None>
+
+# Password for the administrative user account specified in the netapp_login
+# option. (string value)
+#netapp_password = <None>
+
+# This option specifies the virtual storage server (Vserver) name on the
+# storage cluster on which provisioning of block storage volumes should occur.
+# (string value)
+#netapp_vserver = <None>
+
+# The quantity to be multiplied by the requested volume size to ensure enough
+# space is available on the virtual storage server (Vserver) to fulfill the
+# volume creation request.  Note: this option is deprecated and will be removed
+# in favor of "reserved_percentage" in the Mitaka release. (floating point
+# value)
+#netapp_size_multiplier = 1.2
+
+# This option determines if storage space is reserved for LUN allocation. If
+# enabled, LUNs are thick provisioned. If space reservation is disabled,
+# storage space is allocated on demand. (string value)
+# Possible values:
+# enabled - <No description provided>
+# disabled - <No description provided>
+#netapp_lun_space_reservation = enabled
+
+# If the percentage of available space for an NFS share has dropped below the
+# value specified by this option, the NFS image cache will be cleaned. (integer
+# value)
+#thres_avl_size_perc_start = 20
+
+# When the percentage of available space on an NFS share has reached the
+# percentage specified by this option, the driver will stop clearing files from
+# the NFS image cache that have not been accessed in the last M minutes, where
+# M is the value of the expiry_thres_minutes configuration option. (integer
+# value)
+#thres_avl_size_perc_stop = 60
+
+# This option specifies the threshold for last access time for images in the
+# NFS image cache. When a cache cleaning cycle begins, images in the cache that
+# have not been accessed in the last M minutes, where M is the value of this
+# parameter, will be deleted from the cache to create free space on the NFS
+# share. (integer value)
+#expiry_thres_minutes = 720
+
+# This option is used to specify the path to the E-Series proxy application on
+# a proxy server. The value is combined with the value of the
+# netapp_transport_type, netapp_server_hostname, and netapp_server_port options
+# to create the URL used by the driver to connect to the proxy application.
+# (string value)
+#netapp_webservice_path = /devmgr/v2
+
+# This option is only utilized when the storage family is configured to
+# eseries. This option is used to restrict provisioning to the specified
+# controllers. Specify the value of this option to be a comma separated list of
+# controller hostnames or IP addresses to be used for provisioning. (string
+# value)
+#netapp_controller_ips = <None>
+
+# Password for the NetApp E-Series storage array. (string value)
+#netapp_sa_password = <None>
+
+# This option specifies whether the driver should allow operations that require
+# multiple attachments to a volume. An example would be live migration of
+# servers that have volumes attached. When enabled, this backend is limited to
+# 256 total volumes in order to guarantee volumes can be accessed by more than
+# one host. (boolean value)
+#netapp_enable_multiattach = false
+
+# This option specifies the path of the NetApp copy offload tool binary. Ensure
+# that the binary has execute permissions set which allow the effective user of
+# the cinder-volume process to execute the file. (string value)
+#netapp_copyoffload_tool_path = <None>
+
+# This option defines the type of operating system that will access a LUN
+# exported from Data ONTAP; it is assigned to the LUN at the time it is
+# created. (string value)
+#netapp_lun_ostype = <None>
+
+# This option defines the type of operating system for all initiators that can
+# access a LUN. This information is used when mapping LUNs to individual hosts
+# or groups of hosts. (string value)
+#netapp_host_type = <None>
+
+# This option is used to restrict provisioning to the specified pools. Specify
+# the value of this option to be a regular expression which will be applied to
+# the names of objects from the storage backend which represent pools in
+# Cinder. This option is only utilized when the storage protocol is configured
+# to use iSCSI or FC. (string value)
+# Deprecated group/name - [backend_defaults]/netapp_volume_list
+# Deprecated group/name - [backend_defaults]/netapp_storage_pools
+#netapp_pool_name_search_pattern = (.+)
+
+# Multi opt of dictionaries to represent the aggregate mapping between source
+# and destination back ends when using whole back end replication. For every
+# source aggregate associated with a cinder pool (NetApp FlexVol), you would
+# need to specify the destination aggregate on the replication target device. A
+# replication target device is configured with the configuration option
+# replication_device. Specify this option as many times as you have replication
+# devices. Each entry takes the standard dict config form:
+# netapp_replication_aggregate_map =
+# backend_id:<name_of_replication_device_section>,src_aggr_name1:dest_aggr_name1,src_aggr_name2:dest_aggr_name2,...
+# (dict value)
+#netapp_replication_aggregate_map = <None>
+
+# The maximum time in seconds to wait for existing SnapMirror transfers to
+# complete before aborting during a failover. (integer value)
+# Minimum value: 0
+#netapp_snapmirror_quiesce_timeout = 3600
+
+# IP address of Nexenta SA (string value)
+#nexenta_host =
+
+# HTTP(S) port to connect to Nexenta REST API server. If it is equal zero, 8443
+# for HTTPS and 8080 for HTTP is used (integer value)
+#nexenta_rest_port = 0
+
+# Use http or https for REST connection (default auto) (string value)
+# Possible values:
+# http - <No description provided>
+# https - <No description provided>
+# auto - <No description provided>
+#nexenta_rest_protocol = auto
+
+# Use secure HTTP for REST connection (default True) (boolean value)
+#nexenta_use_https = true
+
+# User name to connect to Nexenta SA (string value)
+#nexenta_user = admin
+
+# Password to connect to Nexenta SA (string value)
+#nexenta_password = nexenta
+
+# Nexenta target portal port (integer value)
+#nexenta_iscsi_target_portal_port = 3260
+
+# SA Pool that holds all volumes (string value)
+#nexenta_volume = cinder
+
+# IQN prefix for iSCSI targets (string value)
+#nexenta_target_prefix = iqn.1986-03.com.sun:02:cinder-
+
+# Prefix for iSCSI target groups on SA (string value)
+#nexenta_target_group_prefix = cinder/
+
+# Volume group for ns5 (string value)
+#nexenta_volume_group = iscsi
+
+# Compression value for new ZFS folders. (string value)
+# Possible values:
+# on - <No description provided>
+# off - <No description provided>
+# gzip - <No description provided>
+# gzip-1 - <No description provided>
+# gzip-2 - <No description provided>
+# gzip-3 - <No description provided>
+# gzip-4 - <No description provided>
+# gzip-5 - <No description provided>
+# gzip-6 - <No description provided>
+# gzip-7 - <No description provided>
+# gzip-8 - <No description provided>
+# gzip-9 - <No description provided>
+# lzjb - <No description provided>
+# zle - <No description provided>
+# lz4 - <No description provided>
+#nexenta_dataset_compression = on
+
+# Deduplication value for new ZFS folders. (string value)
+# Possible values:
+# on - <No description provided>
+# off - <No description provided>
+# sha256 - <No description provided>
+# verify - <No description provided>
+# sha256, verify - <No description provided>
+#nexenta_dataset_dedup = off
+
+# Human-readable description for the folder. (string value)
+#nexenta_dataset_description =
+
+# Block size for datasets (integer value)
+#nexenta_blocksize = 4096
+
+# Block size for datasets (integer value)
+#nexenta_ns5_blocksize = 32
+
+# Enables or disables the creation of sparse datasets (boolean value)
+#nexenta_sparse = false
+
+# File with the list of available nfs shares (string value)
+#nexenta_shares_config = /etc/cinder/nfs_shares
+
+# Base directory that contains NFS share mount points (string value)
+#nexenta_mount_point_base = $state_path/mnt
+
+# Enables or disables the creation of volumes as sparsed files that take no
+# space. If disabled (False), volume is created as a regular file, which takes
+# a long time. (boolean value)
+#nexenta_sparsed_volumes = true
+
+# If set True cache NexentaStor appliance volroot option value. (boolean value)
+#nexenta_nms_cache_volroot = true
+
+# Enable stream compression, level 1..9. 1 - gives best speed; 9 - gives best
+# compression. (integer value)
+#nexenta_rrmgr_compression = 0
+
+# TCP Buffer size in KiloBytes. (integer value)
+#nexenta_rrmgr_tcp_buf_size = 4096
+
+# Number of TCP connections. (integer value)
+#nexenta_rrmgr_connections = 2
+
+# NexentaEdge logical path of directory to store symbolic links to NBDs (string
+# value)
+#nexenta_nbd_symlinks_dir = /dev/disk/by-path
+
+# IP address of NexentaEdge management REST API endpoint (string value)
+#nexenta_rest_address =
+
+# User name to connect to NexentaEdge (string value)
+#nexenta_rest_user = admin
+
+# Password to connect to NexentaEdge (string value)
+#nexenta_rest_password = nexenta
+
+# NexentaEdge logical path of bucket for LUNs (string value)
+#nexenta_lun_container =
+
+# NexentaEdge iSCSI service name (string value)
+#nexenta_iscsi_service =
+
+# NexentaEdge iSCSI Gateway client address for non-VIP service (string value)
+#nexenta_client_address =
+
+# NexentaEdge iSCSI LUN object chunk size (integer value)
+#nexenta_chunksize = 32768
+
+# File with the list of available NFS shares. (string value)
+#nfs_shares_config = /etc/cinder/nfs_shares
+
+# Create volumes as sparsed files which take no space. If set to False volume
+# is created as regular file. In such case volume creation takes a lot of time.
+# (boolean value)
+#nfs_sparsed_volumes = true
+
+# Create volumes as QCOW2 files rather than raw files. (boolean value)
+#nfs_qcow2_volumes = false
+
+# Base dir containing mount points for NFS shares. (string value)
+#nfs_mount_point_base = $state_path/mnt
+
+# Mount options passed to the NFS client. See section of the NFS man page for
+# details. (string value)
+#nfs_mount_options = <None>
+
+# The number of attempts to mount NFS shares before raising an error.  At least
+# one attempt will be made to mount an NFS share, regardless of the value
+# specified. (integer value)
+#nfs_mount_attempts = 3
+
+# Enable support for snapshots on the NFS driver. Platforms using libvirt
+# <1.2.7 will encounter issues with this feature. (boolean value)
+#nfs_snapshot_support = false
+
+# Nimble Controller pool name (string value)
+#nimble_pool_name = default
+
+# Nimble Subnet Label (string value)
+#nimble_subnet_label = *
+
+# Whether to verify Nimble SSL Certificate (boolean value)
+#nimble_verify_certificate = false
+
+# Path to Nimble Array SSL certificate (string value)
+#nimble_verify_cert_path = <None>
+
+# DPL pool uuid in which DPL volumes are stored. (string value)
+#dpl_pool =
+
+# DPL port number. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#dpl_port = 8357
+
+# REST API authorization token. (string value)
+#pure_api_token = <None>
+
+# Automatically determine an oversubscription ratio based on the current total
+# data reduction values. If used this calculated value will override the
+# max_over_subscription_ratio config option. (boolean value)
+#pure_automatic_max_oversubscription_ratio = true
+
+# Snapshot replication interval in seconds. (integer value)
+#pure_replica_interval_default = 3600
+
+# Retain all snapshots on target for this time (in seconds.) (integer value)
+#pure_replica_retention_short_term_default = 14400
+
+# Retain how many snapshots for each day. (integer value)
+#pure_replica_retention_long_term_per_day_default = 3
+
+# Retain snapshots per day on target for this time (in days.) (integer value)
+#pure_replica_retention_long_term_default = 7
+
+# When enabled, all Pure volumes, snapshots, and protection groups will be
+# eradicated at the time of deletion in Cinder. Data will NOT be recoverable
+# after a delete with this set to True! When disabled, volumes and snapshots
+# will go into pending eradication state and can be recovered. (boolean value)
+#pure_eradicate_on_delete = false
+
+# The URL to management QNAP Storage. Driver does not support IPv6 address in
+# URL. (uri value)
+#qnap_management_url = <None>
+
+# The pool name in the QNAP Storage (string value)
+#qnap_poolname = <None>
+
+# Communication protocol to access QNAP storage (string value)
+#qnap_storage_protocol = iscsi
+
+# Quobyte URL to the Quobyte volume using e.g. a DNS SRV record (preferred) or
+# a host list (alternatively) like quobyte://<DIR host1>, <DIR host2>/<volume
+# name> (string value)
+#quobyte_volume_url = <None>
+
+# Path to a Quobyte Client configuration file. (string value)
+#quobyte_client_cfg = <None>
+
+# Create volumes as sparse files which take no space. If set to False, volume
+# is created as regular file. (boolean value)
+#quobyte_sparsed_volumes = true
+
+# Create volumes as QCOW2 files rather than raw files. (boolean value)
+#quobyte_qcow2_volumes = true
+
+# Base dir containing the mount point for the Quobyte volume. (string value)
+#quobyte_mount_point_base = $state_path/mnt
+
+# Create a cache of volumes from merged snapshots to speed up creation of
+# multiple volumes from a single snapshot. (boolean value)
+#quobyte_volume_from_snapshot_cache = false
+
+# The name of ceph cluster (string value)
+#rbd_cluster_name = ceph
+
+# The RADOS pool where rbd volumes are stored (string value)
+#rbd_pool = rbd
+
+# The RADOS client name for accessing rbd volumes - only set when using cephx
+# authentication (string value)
+#rbd_user = <None>
+
+# Path to the ceph configuration file (string value)
+#rbd_ceph_conf =
+
+# Path to the ceph keyring file (string value)
+#rbd_keyring_conf =
+
+# Flatten volumes created from snapshots to remove dependency from volume to
+# snapshot (boolean value)
+#rbd_flatten_volume_from_snapshot = false
+
+# The libvirt uuid of the secret for the rbd_user volumes (string value)
+#rbd_secret_uuid = <None>
+
+# Maximum number of nested volume clones that are taken before a flatten
+# occurs. Set to 0 to disable cloning. (integer value)
+#rbd_max_clone_depth = 5
+
+# Volumes will be chunked into objects of this size (in megabytes). (integer
+# value)
+#rbd_store_chunk_size = 4
+
+# Timeout value (in seconds) used when connecting to ceph cluster. If value <
+# 0, no timeout is set and default librados value is used. (integer value)
+#rados_connect_timeout = -1
+
+# Number of retries if connection to ceph cluster failed. (integer value)
+#rados_connection_retries = 3
+
+# Interval value (in seconds) between connection retries to ceph cluster.
+# (integer value)
+#rados_connection_interval = 5
+
+# Timeout value (in seconds) used when connecting to ceph cluster to do a
+# demotion/promotion of volumes. If value < 0, no timeout is set and default
+# librados value is used. (integer value)
+#replication_connect_timeout = 5
+
+# Set to True for driver to report total capacity as a dynamic value -used +
+# current free- and to False to report a static value -quota max bytes if
+# defined and global size of cluster if not. (boolean value)
+#report_dynamic_total_capacity = true
+
+# Set to True if the pool is used exclusively by Cinder. On exclusive use
+# driver won't query images' provisioned size as they will match the value
+# calculated by the Cinder core code for allocated_capacity_gb. This reduces
+# the load on the Ceph cluster as well as on the volume service. (boolean
+# value)
+#rbd_exclusive_cinder_pool = false
+
+# IP address or Hostname of NAS system. (string value)
+#nas_host =
+
+# User name to connect to NAS system. (string value)
+#nas_login = admin
+
+# Password to connect to NAS system. (string value)
+#nas_password =
+
+# SSH port to use to connect to NAS system. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#nas_ssh_port = 22
+
+# Filename of private key to use for SSH authentication. (string value)
+#nas_private_key =
+
+# Allow network-attached storage systems to operate in a secure environment
+# where root level access is not permitted. If set to False, access is as the
+# root user and insecure. If set to True, access is not as root. If set to
+# auto, a check is done to determine if this is a new installation: True is
+# used if so, otherwise False. Default is auto. (string value)
+#nas_secure_file_operations = auto
+
+# Set more secure file permissions on network-attached storage volume files to
+# restrict broad other/world access. If set to False, volumes are created with
+# open permissions. If set to True, volumes are created with permissions for
+# the cinder user and group (660). If set to auto, a check is done to determine
+# if this is a new installation: True is used if so, otherwise False. Default
+# is auto. (string value)
+#nas_secure_file_permissions = auto
+
+# Path to the share to use for storing Cinder volumes. For example:
+# "/srv/export1" for an NFS server export available at 10.0.5.10:/srv/export1 .
+# (string value)
+#nas_share_path =
+
+# Options used to mount the storage backend file system where Cinder volumes
+# are stored. (string value)
+#nas_mount_options = <None>
+
+# Provisioning type that will be used when creating volumes. (string value)
+# Possible values:
+# thin - <No description provided>
+# thick - <No description provided>
+#nas_volume_prov_type = thin
+
+# Pool or Vdisk name to use for volume creation. (string value)
+#hpmsa_backend_name = A
+
+# linear (for Vdisk) or virtual (for Pool). (string value)
+# Possible values:
+# linear - <No description provided>
+# virtual - <No description provided>
+#hpmsa_backend_type = virtual
+
+# HPMSA API interface protocol. (string value)
+# Possible values:
+# http - <No description provided>
+# https - <No description provided>
+#hpmsa_api_protocol = https
+
+# Whether to verify HPMSA array SSL certificate. (boolean value)
+#hpmsa_verify_certificate = false
+
+# HPMSA array SSL certificate path. (string value)
+#hpmsa_verify_certificate_path = <None>
+
+# List of comma-separated target iSCSI IP addresses. (list value)
+#hpmsa_iscsi_ips =
+
+# Use thin provisioning for SAN volumes? (boolean value)
+#san_thin_provision = true
+
+# IP address of SAN controller (string value)
+#san_ip =
+
+# Username for SAN controller (string value)
+#san_login = admin
+
+# Password for SAN controller (string value)
+#san_password =
+
+# Filename of private key to use for SSH authentication (string value)
+#san_private_key =
+
+# Cluster name to use for creating volumes (string value)
+#san_clustername =
+
+# SSH port to use with SAN (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#san_ssh_port = 22
+
+# Port to use to access the SAN API (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#san_api_port = <None>
+
+# Execute commands locally instead of over SSH; use if the volume service is
+# running on the SAN device (boolean value)
+#san_is_local = false
+
+# SSH connection timeout in seconds (integer value)
+#ssh_conn_timeout = 30
+
+# Minimum ssh connections in the pool (integer value)
+#ssh_min_pool_conn = 1
+
+# Maximum ssh connections in the pool (integer value)
+#ssh_max_pool_conn = 5
+
+# IP address of sheep daemon. (string value)
+#sheepdog_store_address = 127.0.0.1
+
+# Port of sheep daemon. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#sheepdog_store_port = 7000
+
+# Set 512 byte emulation on volume creation;  (boolean value)
+#sf_emulate_512 = true
+
+# Allow tenants to specify QOS on create (boolean value)
+#sf_allow_tenant_qos = false
+
+# Create SolidFire accounts with this prefix. Any string can be used here, but
+# the string "hostname" is special and will create a prefix using the cinder
+# node hostname (previous default behavior).  The default is NO prefix. (string
+# value)
+#sf_account_prefix = <None>
+
+# Create SolidFire volumes with this prefix. Volume names are of the form
+# <sf_volume_prefix><cinder-volume-id>.  The default is to use a prefix of
+# 'UUID-'. (string value)
+#sf_volume_prefix = UUID-
+
+# Account name on the SolidFire Cluster to use as owner of template/cache
+# volumes (created if does not exist). (string value)
+#sf_template_account_name = openstack-vtemplate
+
+# DEPRECATED: This option is deprecated and will be removed in the next
+# OpenStack release.  Please use the general cinder image-caching feature
+# instead. (boolean value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: The Cinder caching feature should be used rather than this driver
+# specific implementation.
+#sf_allow_template_caching = false
+
+# Overrides default cluster SVIP with the one specified. This is required or
+# deployments that have implemented the use of VLANs for iSCSI networks in
+# their cloud. (string value)
+#sf_svip = <None>
+
+# SolidFire API port. Useful if the device api is behind a proxy on a different
+# port. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#sf_api_port = 443
+
+# Utilize volume access groups on a per-tenant basis. (boolean value)
+#sf_enable_vag = false
+
+# Volume on Synology storage to be used for creating lun. (string value)
+#synology_pool_name =
+
+# Management port for Synology storage. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#synology_admin_port = 5000
+
+# Administrator of Synology storage. (string value)
+#synology_username = admin
+
+# Password of administrator for logging in Synology storage. (string value)
+#synology_password =
+
+# Do certificate validation or not if $driver_use_ssl is True (boolean value)
+#synology_ssl_verify = true
+
+# One time password of administrator for logging in Synology storage if OTP is
+# enabled. (string value)
+#synology_one_time_pass = <None>
+
+# Device id for skip one time password check for logging in Synology storage if
+# OTP is enabled. (string value)
+#synology_device_id = <None>
+
+# The hostname (or IP address) for the storage system (string value)
+#tintri_server_hostname = <None>
+
+# User name for the storage system (string value)
+#tintri_server_username = <None>
+
+# Password for the storage system (string value)
+#tintri_server_password = <None>
+
+# API version for the storage system (string value)
+#tintri_api_version = v310
+
+# Delete unused image snapshots older than mentioned days (integer value)
+#tintri_image_cache_expiry_days = 30
+
+# Path to image nfs shares file (string value)
+#tintri_image_shares_config = <None>
+
+# IP address for connecting to VMware vCenter server. (string value)
+#vmware_host_ip = <None>
+
+# Port number for connecting to VMware vCenter server. (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#vmware_host_port = 443
+
+# Username for authenticating with VMware vCenter server. (string value)
+#vmware_host_username = <None>
+
+# Password for authenticating with VMware vCenter server. (string value)
+#vmware_host_password = <None>
+
+# Optional VIM service WSDL Location e.g http://<server>/vimService.wsdl.
+# Optional over-ride to default location for bug work-arounds. (string value)
+#vmware_wsdl_location = <None>
+
+# Number of times VMware vCenter server API must be retried upon connection
+# related issues. (integer value)
+#vmware_api_retry_count = 10
+
+# The interval (in seconds) for polling remote tasks invoked on VMware vCenter
+# server. (floating point value)
+#vmware_task_poll_interval = 2.0
+
+# Name of the vCenter inventory folder that will contain Cinder volumes. This
+# folder will be created under "OpenStack/<project_folder>", where
+# project_folder is of format "Project (<volume_project_id>)". (string value)
+#vmware_volume_folder = Volumes
+
+# Timeout in seconds for VMDK volume transfer between Cinder and Glance.
+# (integer value)
+#vmware_image_transfer_timeout_secs = 7200
+
+# Max number of objects to be retrieved per batch. Query results will be
+# obtained in batches from the server and not in one shot. Server may still
+# limit the count to something less than the configured value. (integer value)
+#vmware_max_objects_retrieval = 100
+
+# Optional string specifying the VMware vCenter server version. The driver
+# attempts to retrieve the version from VMware vCenter server. Set this
+# configuration only if you want to override the vCenter server version.
+# (string value)
+#vmware_host_version = <None>
+
+# Directory where virtual disks are stored during volume backup and restore.
+# (string value)
+#vmware_tmp_dir = /tmp
+
+# CA bundle file to use in verifying the vCenter server certificate. (string
+# value)
+#vmware_ca_file = <None>
+
+# If true, the vCenter server certificate is not verified. If false, then the
+# default CA truststore is used for verification. This option is ignored if
+# "vmware_ca_file" is set. (boolean value)
+#vmware_insecure = false
+
+# Name of a vCenter compute cluster where volumes should be created. (multi
+# valued)
+#vmware_cluster_name =
+
+# Maximum number of connections in http connection pool. (integer value)
+#vmware_connection_pool_size = 10
+
+# Default adapter type to be used for attaching volumes. (string value)
+# Possible values:
+# lsiLogic - <No description provided>
+# busLogic - <No description provided>
+# lsiLogicsas - <No description provided>
+# paraVirtual - <No description provided>
+# ide - <No description provided>
+#vmware_adapter_type = lsiLogic
+
+# Volume snapshot format in vCenter server. (string value)
+# Possible values:
+# template - <No description provided>
+# COW - <No description provided>
+#vmware_snapshot_format = template
+
+# If true, the backend volume in vCenter server is created lazily when the
+# volume is created without any source. The backend volume is created when the
+# volume is attached, uploaded to image service or during backup. (boolean
+# value)
+#vmware_lazy_create = true
+
+# Regular expression pattern to match the name of datastores where backend
+# volumes are created. (string value)
+#vmware_datastore_regex = <None>
+
+# File with the list of available vzstorage shares. (string value)
+#vzstorage_shares_config = /etc/cinder/vzstorage_shares
+
+# Create volumes as sparsed files which take no space rather than regular files
+# when using raw format, in which case volume creation takes lot of time.
+# (boolean value)
+#vzstorage_sparsed_volumes = true
+
+# Percent of ACTUAL usage of the underlying volume before no new volumes can be
+# allocated to the volume destination. (floating point value)
+#vzstorage_used_ratio = 0.95
+
+# Base dir containing mount points for vzstorage shares. (string value)
+#vzstorage_mount_point_base = $state_path/mnt
+
+# Mount options passed to the vzstorage client. See section of the pstorage-
+# mount man page for details. (list value)
+#vzstorage_mount_options = <None>
+
+# Default format that will be used when creating volumes if no volume format is
+# specified. (string value)
+#vzstorage_default_volume_format = raw
+
+# Path to store VHD backed volumes (string value)
+#windows_iscsi_lun_path = C:\iSCSIVirtualDisks
+
+# File with the list of available smbfs shares. (string value)
+#smbfs_shares_config = C:\OpenStack\smbfs_shares.txt
+
+# Default format that will be used when creating volumes if no volume format is
+# specified. (string value)
+# Possible values:
+# vhd - <No description provided>
+# vhdx - <No description provided>
+#smbfs_default_volume_format = vhd
+
+# Base dir containing mount points for smbfs shares. (string value)
+#smbfs_mount_point_base = C:\OpenStack\_mnt
+
+# Mappings between share locations and pool names. If not specified, the share
+# names will be used as pool names. Example:
+# //addr/share:pool_name,//addr/share2:pool_name2 (dict value)
+#smbfs_pool_mappings =
+
+# VPSA - Use ISER instead of iSCSI (boolean value)
+#zadara_use_iser = true
+
+# VPSA - Management Host name or IP address (string value)
+#zadara_vpsa_host = <None>
+
+# VPSA - Port number (port value)
+# Minimum value: 0
+# Maximum value: 65535
+#zadara_vpsa_port = <None>
+
+# VPSA - Use SSL connection (boolean value)
+#zadara_vpsa_use_ssl = false
+
+# If set to True the http client will validate the SSL certificate of the VPSA
+# endpoint. (boolean value)
+#zadara_ssl_cert_verify = true
+
+# VPSA - Username (string value)
+#zadara_user = <None>
+
+# VPSA - Password (string value)
+#zadara_password = <None>
+
+# VPSA - Storage Pool assigned for volumes (string value)
+#zadara_vpsa_poolname = <None>
+
+# VPSA - Default encryption policy for volumes (boolean value)
+#zadara_vol_encrypt = false
+
+# VPSA - Default template for VPSA volume names (string value)
+#zadara_vol_name_template = OS_%s
+
+# VPSA - Attach snapshot policy for volumes (boolean value)
+#zadara_default_snap_policy = false
+
+# Storage pool name. (string value)
+#zfssa_pool = <None>
+
+# Project name. (string value)
+#zfssa_project = <None>
+
+# Block size. (string value)
+# Possible values:
+# 512 - <No description provided>
+# 1k - <No description provided>
+# 2k - <No description provided>
+# 4k - <No description provided>
+# 8k - <No description provided>
+# 16k - <No description provided>
+# 32k - <No description provided>
+# 64k - <No description provided>
+# 128k - <No description provided>
+#zfssa_lun_volblocksize = 8k
+
+# Flag to enable sparse (thin-provisioned): True, False. (boolean value)
+#zfssa_lun_sparse = false
+
+# Data compression. (string value)
+# Possible values:
+# off - <No description provided>
+# lzjb - <No description provided>
+# gzip-2 - <No description provided>
+# gzip - <No description provided>
+# gzip-9 - <No description provided>
+#zfssa_lun_compression = off
+
+# Synchronous write bias. (string value)
+# Possible values:
+# latency - <No description provided>
+# throughput - <No description provided>
+#zfssa_lun_logbias = latency
+
+# iSCSI initiator group. (string value)
+#zfssa_initiator_group =
+
+# iSCSI initiator IQNs. (comma separated) (string value)
+#zfssa_initiator =
+
+# iSCSI initiator CHAP user (name). (string value)
+#zfssa_initiator_user =
+
+# Secret of the iSCSI initiator CHAP user. (string value)
+#zfssa_initiator_password =
+
+# iSCSI initiators configuration. (string value)
+#zfssa_initiator_config =
+
+# iSCSI target group name. (string value)
+#zfssa_target_group = tgt-grp
+
+# iSCSI target CHAP user (name). (string value)
+#zfssa_target_user =
+
+# Secret of the iSCSI target CHAP user. (string value)
+#zfssa_target_password =
+
+# iSCSI target portal (Data-IP:Port, w.x.y.z:3260). (string value)
+#zfssa_target_portal = <None>
+
+# Network interfaces of iSCSI targets. (comma separated) (string value)
+#zfssa_target_interfaces = <None>
+
+# REST connection timeout. (seconds) (integer value)
+#zfssa_rest_timeout = <None>
+
+# IP address used for replication data. (maybe the same as data ip) (string
+# value)
+#zfssa_replication_ip =
+
+# Flag to enable local caching: True, False. (boolean value)
+#zfssa_enable_local_cache = true
+
+# Name of ZFSSA project where cache volumes are stored. (string value)
+#zfssa_cache_project = os-cinder-cache
+
+# Driver policy for volume manage. (string value)
+# Possible values:
+# loose - <No description provided>
+# strict - <No description provided>
+#zfssa_manage_policy = loose
+
+# Data path IP address (string value)
+#zfssa_data_ip = <None>
+
+# HTTPS port number (string value)
+#zfssa_https_port = 443
+
+# Options to be passed while mounting share over nfs (string value)
+#zfssa_nfs_mount_options =
+
+# Storage pool name. (string value)
+#zfssa_nfs_pool =
+
+# Project name. (string value)
+#zfssa_nfs_project = NFSProject
+
+# Share name. (string value)
+#zfssa_nfs_share = nfs_share
+
+# Data compression. (string value)
+# Possible values:
+# off - <No description provided>
+# lzjb - <No description provided>
+# gzip-2 - <No description provided>
+# gzip - <No description provided>
+# gzip-9 - <No description provided>
+#zfssa_nfs_share_compression = off
+
+# Synchronous write bias-latency, throughput. (string value)
+# Possible values:
+# latency - <No description provided>
+# throughput - <No description provided>
+#zfssa_nfs_share_logbias = latency
+
+# Name of directory inside zfssa_nfs_share where cache volumes are stored.
+# (string value)
+#zfssa_cache_directory = os-cinder-cache
+
+# Driver to use for volume creation (string value)
+#volume_driver = cinder.volume.drivers.lvm.LVMVolumeDriver
+
+# User defined capabilities, a JSON formatted string specifying key/value
+# pairs. The key/value pairs can be used by the CapabilitiesFilter to select
+# between backends when requests specify volume types. For example, specifying
+# a service level or the geographical location of a backend, then creating a
+# volume type to allow the user to select by these different properties.
+# (string value)
+#extra_capabilities = {}
+
+# Suppress requests library SSL certificate warnings. (boolean value)
+#suppress_requests_ssl_warnings = false
+
+# Size of the native threads pool for the backend.  Increase for backends that
+# heavily rely on this, like the RBD driver. (integer value)
+# Minimum value: 20
+#backend_native_threads_pool_size = 20
+
+
+[coordination]
+
+#
+# From cinder
+#
+
+# The backend URL to use for distributed coordination. (string value)
+#backend_url = file://$state_path
+
+
+[fc-zone-manager]
+
+#
+# From cinder
+#
+
+# South bound connector for zoning operation (string value)
+#brcd_sb_connector = HTTP
+
+# Southbound connector for zoning operation (string value)
+#cisco_sb_connector = cinder.zonemanager.drivers.cisco.cisco_fc_zone_client_cli.CiscoFCZoneClientCLI
+
+# FC Zone Driver responsible for zone management (string value)
+#zone_driver = cinder.zonemanager.drivers.brocade.brcd_fc_zone_driver.BrcdFCZoneDriver
+
+# Zoning policy configured by user; valid values include "initiator-target" or
+# "initiator" (string value)
+#zoning_policy = initiator-target
+
+# Comma separated list of Fibre Channel fabric names. This list of names is
+# used to retrieve other SAN credentials for connecting to each SAN fabric
+# (string value)
+#fc_fabric_names = <None>
+
+# FC SAN Lookup Service (string value)
+#fc_san_lookup_service = cinder.zonemanager.drivers.brocade.brcd_fc_san_lookup_service.BrcdFCSanLookupService
+
+# Set this to True when you want to allow an unsupported zone manager driver to
+# start.  Drivers that haven't maintained a working CI system and testing are
+# marked as unsupported until CI is working again.  This also marks a driver as
+# deprecated and may be removed in the next release. (boolean value)
+#enable_unsupported_driver = false
+
+
+[nova]
+
+#
+# From cinder
+#
+
+# Name of nova region to use. Useful if keystone manages more than one region.
+# (string value)
+#region_name = <None>
+
+# Type of the nova endpoint to use.  This endpoint will be looked up in the
+# keystone catalog and should be one of public, internal or admin. (string
+# value)
+# Possible values:
+# public - <No description provided>
+# admin - <No description provided>
+# internal - <No description provided>
+#interface = public
+
+# The authentication URL for the nova connection when using the current users
+# token (string value)
+#token_auth_url = <None>
+
+# PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# (string value)
+#cafile = <None>
+
+# PEM encoded client certificate cert file (string value)
+#certfile = <None>
+
+# PEM encoded client certificate key file (string value)
+#keyfile = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# Timeout value for http requests (integer value)
+#timeout = <None>
+
+# Authentication type to load (string value)
+# Deprecated group/name - [nova]/auth_plugin
+#auth_type = <None>
+
+# Config Section from which to load plugin specific options (string value)
+#auth_section = <None>
+
+
+[service_user]
+
+#
+# From cinder
+#
+
+#
+# When True, if sending a user token to an REST API, also send a service token.
+#  (boolean value)
+#send_service_user_token = false
+[barbican]
+#
+# From castellan.config
+#
+
+# Use this endpoint to connect to Barbican, for example:
+# "http://localhost:9311/" (string value)
+#barbican_endpoint = <None>
+
+# Version of the Barbican API, for example: "v1" (string value)
+#barbican_api_version = <None>
+
+# Use this endpoint to connect to Keystone (string value)
+# Deprecated group/name - [key_manager]/auth_url
+#auth_endpoint = http://localhost/identity/v3
+auth_endpoint = http://10.167.4.35:35357/v3
+
+# Number of seconds to wait before retrying poll for key creation completion
+# (integer value)
+#retry_delay = 1
+
+# Number of times to retry poll for key creation completion (integer value)
+#number_of_retries = 60
+
+# Specifies if insecure TLS (https) requests. If False, the server's
+# certificate will not be validated (boolean value)
+#verify_ssl = true
+
+# Specifies the type of endpoint.  Allowed values are: public, private, and
+# admin (string value)
+# Possible values:
+# public - <No description provided>
+# internal - <No description provided>
+# admin - <No description provided>
+#barbican_endpoint_type = public
+
+
+
+[key_manager]
+#
+# From castellan.config
+#
+
+# Specify the key manager implementation. Options are "barbican" and "vault".
+# Default is  "barbican". Will support the  values earlier set using
+# [key_manager]/api_class for some time. (string value)
+# Deprecated group/name - [key_manager]/api_class
+#backend = barbican
+backend = barbican
+# Name of nova region to use. Useful if keystone manages more than one region.
+# (string value)
+#region_name = <None>
+region_name = RegionOne
+
+# Type of the nova endpoint to use.  This endpoint will be looked up in the
+# keystone catalog and should be one of public, internal or admin. (string
+# value)
+# Possible values:
+# public - <No description provided>
+# admin - <No description provided>
+# internal - <No description provided>
+#endpoint_type = public
+endpoint_type = internalURL
+
+# API version of the admin Identity API endpoint. (string value)
+#auth_version = <None>
+
+
+# Authentication URL (string value)
+#auth_url = <None>
+auth_url = http://10.167.4.35:35357
+
+# Authentication type to load (string value)
+# Deprecated group/name - [nova]/auth_plugin
+#auth_type = <None>
+auth_type = password
+
+# Required if identity server requires client certificate (string value)
+#certfile = <None>
+
+# A PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# Defaults to system CAs. (string value)
+#cafile = <None>
+
+# Optional domain ID to use with v3 and v2 parameters. It will be used for both
+# the user and project domain in v3 and ignored in v2 authentication. (string
+# value)
+#default_domain_id = <None>
+
+# Optional domain name to use with v3 API and v2 parameters. It will be used for
+# both the user and project domain in v3 and ignored in v2 authentication.
+# (string value)
+#default_domain_name = <None>
+
+# Domain ID to scope to (string value)
+#domain_id = <None>
+
+# Domain name to scope to (string value)
+#domain_name = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# Required if identity server requires client certificate (string value)
+#keyfile = <None>
+
+# User's password (string value)
+#password = <None>
+password = opnfv_secret
+
+# Domain ID containing project (string value)
+#project_domain_id = <None>
+project_domain_id = default
+
+# Domain name containing project (string value)
+#project_domain_name = <None>
+
+# Project ID to scope to (string value)
+#project_id = <None>
+
+# Project name to scope to (string value)
+#project_name = <None>
+project_name = service
+
+# Scope for system operations (string value)
+#system_scope = <None>
+
+# Tenant ID (string value)
+#tenant_id = <None>
+
+# Tenant Name (string value)
+#tenant_name = <None>
+
+# Timeout value for http requests (integer value)
+#timeout = <None>
+
+# Trust ID (string value)
+#trust_id = <None>
+
+# User's domain id (string value)
+#user_domain_id = <None>
+user_domain_id = default
+
+# User's domain name (string value)
+#user_domain_name = <None>
+
+# User ID (string value)
+#user_id = <None>
+
+# Username (string value)
+# Deprecated group/name - [neutron]/user_name
+#username = <None>
+username = cinder
+
+[keystone_authtoken]
+#
+# From keystonemiddleware.auth_token
+#
+
+# Complete "public" Identity API endpoint. This endpoint should not be an
+# "admin" endpoint, as it should be accessible by all end users.
+# Unauthenticated clients are redirected to this endpoint to authenticate.
+# Although this endpoint should ideally be unversioned, client support in the
+# wild varies. If you're using a versioned v2 endpoint here, then this should
+# *not* be the same endpoint the service user utilizes for validating tokens,
+# because normal end users may not be able to reach that endpoint. (string
+# value)
+# Deprecated group/name - [keystone_authtoken]/auth_uri
+#www_authenticate_uri = <None>
+www_authenticate_uri = http://10.167.4.35:5000
+
+# DEPRECATED: Complete "public" Identity API endpoint. This endpoint should not
+# be an "admin" endpoint, as it should be accessible by all end users.
+# Unauthenticated clients are redirected to this endpoint to authenticate.
+# Although this endpoint should ideally be unversioned, client support in the
+# wild varies. If you're using a versioned v2 endpoint here, then this should
+# *not* be the same endpoint the service user utilizes for validating tokens,
+# because normal end users may not be able to reach that endpoint. This option
+# is deprecated in favor of www_authenticate_uri and will be removed in the S
+# release. (string value)
+# This option is deprecated for removal since Queens.
+# Its value may be silently ignored in the future.
+# Reason: The auth_uri option is deprecated in favor of www_authenticate_uri
+# and will be removed in the S  release.
+#auth_uri = <None>
+auth_uri = http://10.167.4.35:5000
+
+# API version of the admin Identity API endpoint. (string value)
+#auth_version = <None>
+
+# Do not handle authorization requests within the middleware, but delegate the
+# authorization decision to downstream WSGI components. (boolean value)
+#delay_auth_decision = false
+
+# Request timeout value for communicating with Identity API server. (integer
+# value)
+#http_connect_timeout = <None>
+
+# How many times are we trying to reconnect when communicating with Identity
+# API Server. (integer value)
+#http_request_max_retries = 3
+
+# Request environment key where the Swift cache object is stored. When
+# auth_token middleware is deployed with a Swift cache, use this option to have
+# the middleware share a caching backend with swift. Otherwise, use the
+# ``memcached_servers`` option instead. (string value)
+#cache = <None>
+
+# Required if identity server requires client certificate (string value)
+#certfile = <None>
+
+# Required if identity server requires client certificate (string value)
+#keyfile = <None>
+
+# A PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# Defaults to system CAs. (string value)
+#cafile = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# The region in which the identity server can be found. (string value)
+#region_name = <None>
+region_name = RegionOne
+
+# DEPRECATED: Directory used to cache files related to PKI tokens. This option
+# has been deprecated in the Ocata release and will be removed in the P
+# release. (string value)
+# This option is deprecated for removal since Ocata.
+# Its value may be silently ignored in the future.
+# Reason: PKI token format is no longer supported.
+#signing_dir = <None>
+
+# Optionally specify a list of memcached server(s) to use for caching. If left
+# undefined, tokens will instead be cached in-process. (list value)
+# Deprecated group/name - [keystone_authtoken]/memcache_servers
+#memcached_servers = <None>
+
+# In order to prevent excessive effort spent validating tokens, the middleware
+# caches previously-seen tokens for a configurable duration (in seconds). Set
+# to -1 to disable caching completely. (integer value)
+#token_cache_time = 300
+
+# DEPRECATED: Determines the frequency at which the list of revoked tokens is
+# retrieved from the Identity service (in seconds). A high number of revocation
+# events combined with a low cache duration may significantly reduce
+# performance. Only valid for PKI tokens. This option has been deprecated in
+# the Ocata release and will be removed in the P release. (integer value)
+# This option is deprecated for removal since Ocata.
+# Its value may be silently ignored in the future.
+# Reason: PKI token format is no longer supported.
+#revocation_cache_time = 10
+
+# (Optional) If defined, indicate whether token data should be authenticated or
+# authenticated and encrypted. If MAC, token data is authenticated (with HMAC)
+# in the cache. If ENCRYPT, token data is encrypted and authenticated in the
+# cache. If the value is not one of these options or empty, auth_token will
+# raise an exception on initialization. (string value)
+# Possible values:
+# None - <No description provided>
+# MAC - <No description provided>
+# ENCRYPT - <No description provided>
+#memcache_security_strategy = None
+
+# (Optional, mandatory if memcache_security_strategy is defined) This string is
+# used for key derivation. (string value)
+#memcache_secret_key = <None>
+
+# (Optional) Number of seconds memcached server is considered dead before it is
+# tried again. (integer value)
+#memcache_pool_dead_retry = 300
+
+# (Optional) Maximum total number of open connections to every memcached
+# server. (integer value)
+#memcache_pool_maxsize = 10
+
+# (Optional) Socket timeout in seconds for communicating with a memcached
+# server. (integer value)
+#memcache_pool_socket_timeout = 3
+
+# (Optional) Number of seconds a connection to memcached is held unused in the
+# pool before it is closed. (integer value)
+#memcache_pool_unused_timeout = 60
+
+# (Optional) Number of seconds that an operation will wait to get a memcached
+# client connection from the pool. (integer value)
+#memcache_pool_conn_get_timeout = 10
+
+# (Optional) Use the advanced (eventlet safe) memcached client pool. The
+# advanced pool will only work under python 2.x. (boolean value)
+#memcache_use_advanced_pool = false
+
+# (Optional) Indicate whether to set the X-Service-Catalog header. If False,
+# middleware will not ask for service catalog on token validation and will not
+# set the X-Service-Catalog header. (boolean value)
+#include_service_catalog = true
+
+# Used to control the use and type of token binding. Can be set to: "disabled"
+# to not check token binding. "permissive" (default) to validate binding
+# information if the bind type is of a form known to the server and ignore it
+# if not. "strict" like "permissive" but if the bind type is unknown the token
+# will be rejected. "required" any form of token binding is needed to be
+# allowed. Finally the name of a binding method that must be present in tokens.
+# (string value)
+#enforce_token_bind = permissive
+
+# DEPRECATED: If true, the revocation list will be checked for cached tokens.
+# This requires that PKI tokens are configured on the identity server. (boolean
+# value)
+# This option is deprecated for removal since Ocata.
+# Its value may be silently ignored in the future.
+# Reason: PKI token format is no longer supported.
+#check_revocations_for_cached = false
+
+# DEPRECATED: Hash algorithms to use for hashing PKI tokens. This may be a
+# single algorithm or multiple. The algorithms are those supported by Python
+# standard hashlib.new(). The hashes will be tried in the order given, so put
+# the preferred one first for performance. The result of the first hash will be
+# stored in the cache. This will typically be set to multiple values only while
+# migrating from a less secure algorithm to a more secure one. Once all the old
+# tokens are expired this option should be set to a single value for better
+# performance. (list value)
+# This option is deprecated for removal since Ocata.
+# Its value may be silently ignored in the future.
+# Reason: PKI token format is no longer supported.
+#hash_algorithms = md5
+
+# A choice of roles that must be present in a service token. Service tokens are
+# allowed to request that an expired token can be used and so this check should
+# tightly control that only actual services should be sending this token. Roles
+# here are applied as an ANY check so any role in this list must be present.
+# For backwards compatibility reasons this currently only affects the
+# allow_expired check. (list value)
+#service_token_roles = service
+
+# For backwards compatibility reasons we must let valid service tokens pass
+# that don't pass the service_token_roles check as valid. Setting this true
+# will become the default in a future release and should be enabled if
+# possible. (boolean value)
+#service_token_roles_required = false
+
+# Authentication type to load (string value)
+# Deprecated group/name - [keystone_authtoken]/auth_plugin
+#auth_type = <None>
+auth_type = password
+
+# Config Section from which to load plugin specific options (string value)
+#auth_section = <None>
+
+# Name of nova region to use. Useful if keystone manages more than one region.
+# (string value)
+#region_name = <None>
+region_name = RegionOne
+
+# Type of the nova endpoint to use.  This endpoint will be looked up in the
+# keystone catalog and should be one of public, internal or admin. (string
+# value)
+# Possible values:
+# public - <No description provided>
+# admin - <No description provided>
+# internal - <No description provided>
+#endpoint_type = public
+endpoint_type = internalURL
+
+# API version of the admin Identity API endpoint. (string value)
+#auth_version = <None>
+
+
+# Authentication URL (string value)
+#auth_url = <None>
+auth_url = http://10.167.4.35:35357
+
+# Authentication type to load (string value)
+# Deprecated group/name - [nova]/auth_plugin
+#auth_type = <None>
+auth_type = password
+
+# Required if identity server requires client certificate (string value)
+#certfile = <None>
+
+# A PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# Defaults to system CAs. (string value)
+#cafile = <None>
+
+# Optional domain ID to use with v3 and v2 parameters. It will be used for both
+# the user and project domain in v3 and ignored in v2 authentication. (string
+# value)
+#default_domain_id = <None>
+
+# Optional domain name to use with v3 API and v2 parameters. It will be used for
+# both the user and project domain in v3 and ignored in v2 authentication.
+# (string value)
+#default_domain_name = <None>
+
+# Domain ID to scope to (string value)
+#domain_id = <None>
+
+# Domain name to scope to (string value)
+#domain_name = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# Required if identity server requires client certificate (string value)
+#keyfile = <None>
+
+# User's password (string value)
+#password = <None>
+password = opnfv_secret
+
+# Domain ID containing project (string value)
+#project_domain_id = <None>
+project_domain_id = default
+
+# Domain name containing project (string value)
+#project_domain_name = <None>
+
+# Project ID to scope to (string value)
+#project_id = <None>
+
+# Project name to scope to (string value)
+#project_name = <None>
+project_name = service
+
+# Scope for system operations (string value)
+#system_scope = <None>
+
+# Tenant ID (string value)
+#tenant_id = <None>
+
+# Tenant Name (string value)
+#tenant_name = <None>
+
+# Timeout value for http requests (integer value)
+#timeout = <None>
+
+# Trust ID (string value)
+#trust_id = <None>
+
+# User's domain id (string value)
+#user_domain_id = <None>
+user_domain_id = default
+
+# User's domain name (string value)
+#user_domain_name = <None>
+
+# User ID (string value)
+#user_id = <None>
+
+# Username (string value)
+# Deprecated group/name - [neutron]/user_name
+#username = <None>
+username = cinder
+
+[profiler]
+
+[oslo_concurrency]
 
 [database]
-connection = sqlite:////var/lib/cinder/cinder.sqlite
+#
+# From oslo.db
+#
+
+# If True, SQLite uses synchronous mode. (boolean value)
+#sqlite_synchronous = true
+
+# The back end to use for the database. (string value)
+# Deprecated group/name - [DEFAULT]/db_backend
+#backend = sqlalchemy
+
+# The SQLAlchemy connection string to use to connect to the database.
+# (string value)
+# Deprecated group/name - [DEFAULT]/sql_connection
+# Deprecated group/name - [DATABASE]/sql_connection
+# Deprecated group/name - [sql]/connection
+#connection = <None>
+connection = mysql+pymysql://cinder:opnfv_secret@10.167.4.23/cinder?charset=utf8
+# The SQLAlchemy connection string to use to connect to the slave
+# database. (string value)
+#slave_connection = <None>
+
+# The SQL mode to be used for MySQL sessions. This option, including
+# the default, overrides any server-set SQL mode. To use whatever SQL
+# mode is set by the server configuration, set this to no value.
+# Example: mysql_sql_mode= (string value)
+#mysql_sql_mode = TRADITIONAL
+
+# If True, transparently enables support for handling MySQL Cluster
+# (NDB). (boolean value)
+#mysql_enable_ndb = false
+
+# Connections which have been present in the connection pool longer
+# than this number of seconds will be replaced with a new one the next
+# time they are checked out from the pool. (integer value)
+# Deprecated group/name - [DATABASE]/idle_timeout
+# Deprecated group/name - [database]/idle_timeout
+# Deprecated group/name - [DEFAULT]/sql_idle_timeout
+# Deprecated group/name - [DATABASE]/sql_idle_timeout
+# Deprecated group/name - [sql]/idle_timeout
+#connection_recycle_time = 3600
+connection_recycle_time = 300
+
+# Minimum number of SQL connections to keep open in a pool. (integer
+# value)
+# Deprecated group/name - [DEFAULT]/sql_min_pool_size
+# Deprecated group/name - [DATABASE]/sql_min_pool_size
+#min_pool_size = 1
+
+# Maximum number of SQL connections to keep open in a pool. Setting a
+# value of 0 indicates no limit. (integer value)
+# Deprecated group/name - [DEFAULT]/sql_max_pool_size
+# Deprecated group/name - [DATABASE]/sql_max_pool_size
+#max_pool_size = 5
+max_pool_size = 10
+
+# Maximum number of database connection retries during startup. Set to
+# -1 to specify an infinite retry count. (integer value)
+# Deprecated group/name - [DEFAULT]/sql_max_retries
+# Deprecated group/name - [DATABASE]/sql_max_retries
+#max_retries = 10
+max_retries = -1
+
+# Interval between retries of opening a SQL connection. (integer
+# value)
+# Deprecated group/name - [DEFAULT]/sql_retry_interval
+# Deprecated group/name - [DATABASE]/reconnect_interval
+#retry_interval = 10
+
+# If set, use this value for max_overflow with SQLAlchemy. (integer
+# value)
+# Deprecated group/name - [DEFAULT]/sql_max_overflow
+# Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
+#max_overflow = 50
+max_overflow = 30
+
+# Verbosity of SQL debugging information: 0=None, 100=Everything.
+# (integer value)
+# Minimum value: 0
+# Maximum value: 100
+# Deprecated group/name - [DEFAULT]/sql_connection_debug
+#connection_debug = 0
+
+# Add Python stack traces to SQL as comment strings. (boolean value)
+# Deprecated group/name - [DEFAULT]/sql_connection_trace
+#connection_trace = false
+
+# If set, use this value for pool_timeout with SQLAlchemy. (integer
+# value)
+# Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
+#pool_timeout = <None>
+
+# Enable the experimental use of database reconnect on connection
+# lost. (boolean value)
+#use_db_reconnect = false
+
+# Seconds between retries of a database transaction. (integer value)
+#db_retry_interval = 1
+
+# If True, increases the interval between retries of a database
+# operation up to db_max_retry_interval. (boolean value)
+#db_inc_retry_interval = true
+
+# If db_inc_retry_interval is set, the maximum seconds between retries
+# of a database operation. (integer value)
+#db_max_retry_interval = 10
+
+# Maximum retries in case of connection error or deadlock error before
+# error is raised. Set to -1 to specify an infinite retry count.
+# (integer value)
+#db_max_retries = 20
+
+#
+# From oslo.db.concurrency
+#
+
+# Enable the experimental use of thread pooling for all DB API calls
+# (boolean value)
+# Deprecated group/name - [DEFAULT]/dbapi_use_tpool
+#use_tpool = false
+
+[oslo_messaging_notifications]
+#
+# From oslo.messaging
+#
+
+# The Drivers(s) to handle sending notifications. Possible values are
+# messaging, messagingv2, routing, log, test, noop (multi valued)
+# Deprecated group/name - [DEFAULT]/notification_driver
+#driver =
+driver=messagingv2
+
+# A URL representing the messaging driver to use for notifications. If
+# not set, we fall back to the same configuration used for RPC.
+# (string value)
+# Deprecated group/name - [DEFAULT]/notification_transport_url
+#transport_url = <None>
+
+# AMQP topic used for OpenStack notifications. (list value)
+# Deprecated group/name - [rpc_notifier2]/topics
+# Deprecated group/name - [DEFAULT]/notification_topics
+#topics = notifications
+
+# The maximum number of attempts to re-send a notification message
+# which failed to be delivered due to a recoverable error. 0 - No
+# retry, -1 - indefinite (integer value)
+#retry = -1
+[oslo_messaging_rabbit]
+#
+# From oslo.messaging
+#
+
+# Use durable queues in AMQP. (boolean value)
+# Deprecated group/name - [DEFAULT]/amqp_durable_queues
+# Deprecated group/name - [DEFAULT]/rabbit_durable_queues
+#amqp_durable_queues = false
+
+# Auto-delete queues in AMQP. (boolean value)
+#amqp_auto_delete = false
+
+# Enable SSL (boolean value)
+#ssl = <None>
+
+
+# How long to wait before reconnecting in response to an AMQP consumer
+# cancel notification. (floating point value)
+#kombu_reconnect_delay = 1.0
+
+# EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression
+# will not be used. This option may not be available in future
+# versions. (string value)
+#kombu_compression = <None>
+
+# How long to wait a missing client before abandoning to send it its
+# replies. This value should not be longer than rpc_response_timeout.
+# (integer value)
+# Deprecated group/name - [oslo_messaging_rabbit]/kombu_reconnect_timeout
+#kombu_missing_consumer_retry_timeout = 60
+
+# Determines how the next RabbitMQ node is chosen in case the one we
+# are currently connected to becomes unavailable. Takes effect only if
+# more than one RabbitMQ node is provided in config. (string value)
+# Possible values:
+# round-robin - <No description provided>
+# shuffle - <No description provided>
+#kombu_failover_strategy = round-robin
+
+# DEPRECATED: The RabbitMQ broker address where a single node is used.
+# (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_host = localhost
+
+# DEPRECATED: The RabbitMQ broker port where a single node is used.
+# (port value)
+# Minimum value: 0
+# Maximum value: 65535
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_port = 5672
+
+# DEPRECATED: RabbitMQ HA cluster host:port pairs. (list value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_hosts = $rabbit_host:$rabbit_port
+
+# DEPRECATED: The RabbitMQ userid. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_userid = guest
+
+# DEPRECATED: The RabbitMQ password. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_password = guest
+
+# The RabbitMQ login method. (string value)
+# Possible values:
+# PLAIN - <No description provided>
+# AMQPLAIN - <No description provided>
+# RABBIT-CR-DEMO - <No description provided>
+#rabbit_login_method = AMQPLAIN
+
+# DEPRECATED: The RabbitMQ virtual host. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+# Reason: Replaced by [DEFAULT]/transport_url
+#rabbit_virtual_host = /
+
+# How frequently to retry connecting with RabbitMQ. (integer value)
+#rabbit_retry_interval = 1
+
+# How long to backoff for between retries when connecting to RabbitMQ.
+# (integer value)
+#rabbit_retry_backoff = 2
+
+# Maximum interval of RabbitMQ connection retries. Default is 30
+# seconds. (integer value)
+#rabbit_interval_max = 30
+
+# DEPRECATED: Maximum number of RabbitMQ connection retries. Default
+# is 0 (infinite retry count). (integer value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#rabbit_max_retries = 0
+
+# Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change
+# this option, you must wipe the RabbitMQ database. In RabbitMQ 3.0,
+# queue mirroring is no longer controlled by the x-ha-policy argument
+# when declaring a queue. If you just want to make sure that all
+# queues (except those with auto-generated names) are mirrored across
+# all nodes, run: "rabbitmqctl set_policy HA '^(?!amq\.).*' '{"ha-
+# mode": "all"}' " (boolean value)
+#rabbit_ha_queues = false
+
+# Positive integer representing duration in seconds for queue TTL
+# (x-expires). Queues which are unused for the duration of the TTL are
+# automatically deleted. The parameter affects only reply and fanout
+# queues. (integer value)
+# Minimum value: 1
+#rabbit_transient_queues_ttl = 1800
+
+# Specifies the number of messages to prefetch. Setting to zero allows
+# unlimited messages. (integer value)
+#rabbit_qos_prefetch_count = 64
+
+# Number of seconds after which the Rabbit broker is considered down
+# if heartbeat's keep-alive fails (0 disable the heartbeat).
+# EXPERIMENTAL (integer value)
+#heartbeat_timeout_threshold = 60
+
+# How often times during the heartbeat_timeout_threshold we check the
+# heartbeat. (integer value)
+#heartbeat_rate = 2
+
+# Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake
+# (boolean value)
+#fake_rabbit = false
+
+# Maximum number of channels to allow (integer value)
+#channel_max = <None>
+
+# The maximum byte size for an AMQP frame (integer value)
+#frame_max = <None>
+
+# How often to send heartbeats for consumer's connections (integer
+# value)
+#heartbeat_interval = 3
+
+# Arguments passed to ssl.wrap_socket (dict value)
+#ssl_options = <None>
+
+# Set socket timeout in seconds for connection's socket (floating
+# point value)
+#socket_timeout = 0.25
+
+# Set TCP_USER_TIMEOUT in seconds for connection's socket (floating
+# point value)
+#tcp_user_timeout = 0.25
+
+# Set delay for reconnection to some host which has connection error
+# (floating point value)
+#host_connection_reconnect_delay = 0.25
+
+# Connection factory implementation (string value)
+# Possible values:
+# new - <No description provided>
+# single - <No description provided>
+# read_write - <No description provided>
+#connection_factory = single
+
+# Maximum number of connections to keep queued. (integer value)
+#pool_max_size = 30
+
+# Maximum number of connections to create above `pool_max_size`.
+# (integer value)
+#pool_max_overflow = 0
+
+# Default number of seconds to wait for a connections to available
+# (integer value)
+#pool_timeout = 30
+
+# Lifetime of a connection (since creation) in seconds or None for no
+# recycling. Expired connections are closed on acquire. (integer
+# value)
+#pool_recycle = 600
+
+# Threshold at which inactive (since release) connections are
+# considered stale in seconds or None for no staleness. Stale
+# connections are closed on acquire. (integer value)
+#pool_stale = 60
+
+# Default serialization mechanism for serializing/deserializing
+# outgoing/incoming messages (string value)
+# Possible values:
+# json - <No description provided>
+# msgpack - <No description provided>
+#default_serializer_type = json
+
+# Persist notification messages. (boolean value)
+#notification_persistence = false
+
+# Exchange name for sending notifications (string value)
+#default_notification_exchange = ${control_exchange}_notification
+
+# Max number of not acknowledged message which RabbitMQ can send to
+# notification listener. (integer value)
+#notification_listener_prefetch_count = 100
+
+# Reconnecting retry count in case of connectivity problem during
+# sending notification, -1 means infinite retry. (integer value)
+#default_notification_retry_attempts = -1
+
+# Reconnecting retry delay in case of connectivity problem during
+# sending notification message (floating point value)
+#notification_retry_delay = 0.25
+
+# Time to live for rpc queues without consumers in seconds. (integer
+# value)
+#rpc_queue_expiration = 60
+
+# Exchange name for sending RPC messages (string value)
+#default_rpc_exchange = ${control_exchange}_rpc
+
+# Exchange name for receiving RPC replies (string value)
+#rpc_reply_exchange = ${control_exchange}_rpc_reply
+
+# Max number of not acknowledged message which RabbitMQ can send to
+# rpc listener. (integer value)
+#rpc_listener_prefetch_count = 100
+
+# Max number of not acknowledged message which RabbitMQ can send to
+# rpc reply listener. (integer value)
+#rpc_reply_listener_prefetch_count = 100
+
+# Reconnecting retry count in case of connectivity problem during
+# sending reply. -1 means infinite retry during rpc_timeout (integer
+# value)
+#rpc_reply_retry_attempts = -1
+
+# Reconnecting retry delay in case of connectivity problem during
+# sending reply. (floating point value)
+#rpc_reply_retry_delay = 0.25
+
+# Reconnecting retry count in case of connectivity problem during
+# sending RPC message, -1 means infinite retry. If actual retry
+# attempts in not 0 the rpc request could be processed more than one
+# time (integer value)
+#default_rpc_retry_attempts = -1
+
+# Reconnecting retry delay in case of connectivity problem during
+# sending RPC message (floating point value)
+#rpc_retry_delay = 0.25
+
+
+[oslo_middleware]
+#
+# From oslo.middleware
+#
+
+# The maximum body size for each  request, in bytes. (integer value)
+# Deprecated group/name - [DEFAULT]/osapi_max_request_body_size
+# Deprecated group/name - [DEFAULT]/max_request_body_size
+#max_request_body_size = 114688
+
+# DEPRECATED: The HTTP Header that will be used to determine what the
+# original request protocol scheme was, even if it was hidden by a SSL
+# termination proxy. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#secure_proxy_ssl_header = X-Forwarded-Proto
+
+# Whether the application is behind a proxy or not. This determines if
+# the middleware should parse the headers or not. (boolean value)
+enable_proxy_headers_parsing = True
+
+[oslo_policy]
+
+[oslo_reports]

2018-09-01 22:55:21,796 [salt.state       :1941][INFO    ][2392] Completed state [/etc/cinder/cinder.conf] at time 22:55:21.796325 duration_in_ms=268.993
2018-09-01 22:55:21,796 [salt.state       :1770][INFO    ][2392] Running state [/etc/cinder/api-paste.ini] at time 22:55:21.796859
2018-09-01 22:55:21,797 [salt.state       :1803][INFO    ][2392] Executing state file.managed for [/etc/cinder/api-paste.ini]
2018-09-01 22:55:21,814 [salt.fileclient  :1215][INFO    ][2392] Fetching file from saltenv 'base', ** done ** 'cinder/files/queens/api-paste.ini.controller.Debian'
2018-09-01 22:55:21,869 [salt.state       :290 ][INFO    ][2392] {'mode': '0640'}
2018-09-01 22:55:21,869 [salt.state       :1941][INFO    ][2392] Completed state [/etc/cinder/api-paste.ini] at time 22:55:21.869591 duration_in_ms=72.731
2018-09-01 22:55:21,871 [salt.state       :1770][INFO    ][2392] Running state [cinder-manage db sync; sleep 5;] at time 22:55:21.871224
2018-09-01 22:55:21,871 [salt.state       :1803][INFO    ][2392] Executing state cmd.run for [cinder-manage db sync; sleep 5;]
2018-09-01 22:55:21,872 [salt.loaded.int.module.cmdmod:395 ][INFO    ][2392] Executing command 'cinder-manage db sync; sleep 5;' in directory '/root'
2018-09-01 22:55:22,433 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901225522425734
2018-09-01 22:55:22,449 [salt.minion      :1431][INFO    ][3856] Starting a new job with PID 3856
2018-09-01 22:55:22,465 [salt.minion      :1708][INFO    ][3856] Returning information for job: 20180901225522425734
2018-09-01 22:55:32,581 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901225532572140
2018-09-01 22:55:32,607 [salt.minion      :1431][INFO    ][4037] Starting a new job with PID 4037
2018-09-01 22:55:32,627 [salt.minion      :1708][INFO    ][4037] Returning information for job: 20180901225532572140
2018-09-01 22:55:41,052 [salt.state       :290 ][INFO    ][2392] {'pid': 3850, 'retcode': 0, 'stderr': '', 'stdout': '2018-09-01 22:55:23.224 3851 INFO migrate.versioning.api [-] 84 -> 85... \n2018-09-01 22:55:30.917 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:30.917 3851 INFO migrate.versioning.api [-] 85 -> 86... \n2018-09-01 22:55:30.958 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:30.958 3851 INFO migrate.versioning.api [-] 86 -> 87... \n2018-09-01 22:55:31.124 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:31.125 3851 INFO migrate.versioning.api [-] 87 -> 88... \n2018-09-01 22:55:31.681 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:31.681 3851 INFO migrate.versioning.api [-] 88 -> 89... \n2018-09-01 22:55:31.846 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:31.846 3851 INFO migrate.versioning.api [-] 89 -> 90... \n2018-09-01 22:55:32.084 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:32.084 3851 INFO migrate.versioning.api [-] 90 -> 91... \n2018-09-01 22:55:32.345 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:32.346 3851 INFO migrate.versioning.api [-] 91 -> 92... \n2018-09-01 22:55:32.355 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:32.355 3851 INFO migrate.versioning.api [-] 92 -> 93... \n2018-09-01 22:55:32.364 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:32.365 3851 INFO migrate.versioning.api [-] 93 -> 94... \n2018-09-01 22:55:32.374 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:32.375 3851 INFO migrate.versioning.api [-] 94 -> 95... \n2018-09-01 22:55:32.385 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:32.386 3851 INFO migrate.versioning.api [-] 95 -> 96... \n2018-09-01 22:55:32.396 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:32.396 3851 INFO migrate.versioning.api [-] 96 -> 97... \n2018-09-01 22:55:32.434 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:32.434 3851 INFO migrate.versioning.api [-] 97 -> 98... \n2018-09-01 22:55:32.536 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:32.537 3851 INFO migrate.versioning.api [-] 98 -> 99... \n2018-09-01 22:55:32.737 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:32.737 3851 INFO migrate.versioning.api [-] 99 -> 100... \n2018-09-01 22:55:32.746 3851 INFO 100_add_foreign_key_indexes [-] Skipped adding attachment_specs_attachment_id_idx because an equivalent index already exists.\n2018-09-01 22:55:32.753 3851 INFO 100_add_foreign_key_indexes [-] Skipped adding cgsnapshots_consistencygroup_id_idx because an equivalent index already exists.\n2018-09-01 22:55:32.760 3851 INFO 100_add_foreign_key_indexes [-] Skipped adding group_snapshots_group_id_idx because an equivalent index already exists.\n2018-09-01 22:55:32.768 3851 INFO 100_add_foreign_key_indexes [-] Skipped adding group_type_specs_group_type_id_idx because an equivalent index already exists.\n2018-09-01 22:55:32.774 3851 INFO 100_add_foreign_key_indexes [-] Skipped adding group_volume_type_mapping_group_id_idx because an equivalent index already exists.\n2018-09-01 22:55:32.780 3851 INFO 100_add_foreign_key_indexes [-] Skipped adding group_volume_type_mapping_volume_type_id_idx because an equivalent index already exists.\n2018-09-01 22:55:32.786 3851 INFO 100_add_foreign_key_indexes [-] Skipped adding quality_of_service_specs_specs_id_idx because an equivalent index already exists.\n2018-09-01 22:55:32.792 3851 INFO 100_add_foreign_key_indexes [-] Skipped adding reservations_allocated_id_idx because an equivalent index already exists.\n2018-09-01 22:55:32.798 3851 INFO 100_add_foreign_key_indexes [-] Skipped adding reservations_usage_id_idx because an equivalent index already exists.\n2018-09-01 22:55:32.803 3851 INFO 100_add_foreign_key_indexes [-] Skipped adding snapshot_metadata_snapshot_id_idx because an equivalent index already exists.\n2018-09-01 22:55:32.809 3851 INFO 100_add_foreign_key_indexes [-] Skipped adding snapshots_cgsnapshot_id_idx because an equivalent index already exists.\n2018-09-01 22:55:32.815 3851 INFO 100_add_foreign_key_indexes [-] Skipped adding snapshots_group_snapshot_id_idx because an equivalent index already exists.\n2018-09-01 22:55:32.821 3851 INFO 100_add_foreign_key_indexes [-] Skipped adding snapshots_volume_id_idx because an equivalent index already exists.\n2018-09-01 22:55:32.827 3851 INFO 100_add_foreign_key_indexes [-] Skipped adding transfers_volume_id_idx because an equivalent index already exists.\n2018-09-01 22:55:32.833 3851 INFO 100_add_foreign_key_indexes [-] Skipped adding volume_admin_metadata_volume_id_idx because an equivalent index already exists.\n2018-09-01 22:55:32.839 3851 INFO 100_add_foreign_key_indexes [-] Skipped adding volume_attachment_volume_id_idx because an equivalent index already exists.\n2018-09-01 22:55:32.847 3851 INFO 100_add_foreign_key_indexes [-] Skipped adding volume_glance_metadata_snapshot_id_idx because an equivalent index already exists.\n2018-09-01 22:55:32.855 3851 INFO 100_add_foreign_key_indexes [-] Skipped adding volume_glance_metadata_volume_id_idx because an equivalent index already exists.\n2018-09-01 22:55:32.861 3851 INFO 100_add_foreign_key_indexes [-] Skipped adding volume_metadata_volume_id_idx because an equivalent index already exists.\n2018-09-01 22:55:32.867 3851 INFO 100_add_foreign_key_indexes [-] Skipped adding volume_type_extra_specs_volume_type_id_idx because an equivalent index already exists.\n2018-09-01 22:55:32.873 3851 INFO 100_add_foreign_key_indexes [-] Skipped adding volume_types_qos_specs_id_idx because an equivalent index already exists.\n2018-09-01 22:55:32.880 3851 INFO 100_add_foreign_key_indexes [-] Skipped adding volumes_consistencygroup_id_idx because an equivalent index already exists.\n2018-09-01 22:55:32.886 3851 INFO 100_add_foreign_key_indexes [-] Skipped adding volumes_group_id_idx because an equivalent index already exists.\n2018-09-01 22:55:32.893 3851 INFO 100_add_foreign_key_indexes [-] Skipped adding workers_service_id_idx because an equivalent index already exists.\n2018-09-01 22:55:32.902 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:32.903 3851 INFO migrate.versioning.api [-] 100 -> 101... \n2018-09-01 22:55:32.926 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:32.926 3851 INFO migrate.versioning.api [-] 101 -> 102... \n2018-09-01 22:55:33.104 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:33.104 3851 INFO migrate.versioning.api [-] 102 -> 103... \n2018-09-01 22:55:33.515 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:33.515 3851 INFO migrate.versioning.api [-] 103 -> 104... \n2018-09-01 22:55:33.746 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:33.747 3851 INFO migrate.versioning.api [-] 104 -> 105... \n2018-09-01 22:55:33.930 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:33.930 3851 INFO migrate.versioning.api [-] 105 -> 106... \n2018-09-01 22:55:33.942 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:33.942 3851 INFO migrate.versioning.api [-] 106 -> 107... \n2018-09-01 22:55:33.953 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:33.953 3851 INFO migrate.versioning.api [-] 107 -> 108... \n2018-09-01 22:55:33.964 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:33.964 3851 INFO migrate.versioning.api [-] 108 -> 109... \n2018-09-01 22:55:33.975 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:33.975 3851 INFO migrate.versioning.api [-] 109 -> 110... \n2018-09-01 22:55:33.986 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:33.986 3851 INFO migrate.versioning.api [-] 110 -> 111... \n2018-09-01 22:55:34.092 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:34.092 3851 INFO migrate.versioning.api [-] 111 -> 112... \n2018-09-01 22:55:34.387 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:34.387 3851 INFO migrate.versioning.api [-] 112 -> 113... \n2018-09-01 22:55:34.510 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:34.510 3851 INFO migrate.versioning.api [-] 113 -> 114... \n2018-09-01 22:55:35.148 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:35.148 3851 INFO migrate.versioning.api [-] 114 -> 115... \n2018-09-01 22:55:35.501 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:35.501 3851 INFO migrate.versioning.api [-] 115 -> 116... \n2018-09-01 22:55:35.708 3851 INFO migrate.versioning.api [-] done\n2018-09-01 22:55:35.709 3851 INFO migrate.versioning.api [-] 116 -> 117... \n2018-09-01 22:55:35.912 3851 INFO migrate.versioning.api [-] done'}
2018-09-01 22:55:41,053 [salt.state       :1941][INFO    ][2392] Completed state [cinder-manage db sync; sleep 5;] at time 22:55:41.053493 duration_in_ms=19182.267
2018-09-01 22:55:41,055 [salt.state       :1770][INFO    ][2392] Running state [/etc/default/cinder-scheduler] at time 22:55:41.055745
2018-09-01 22:55:41,056 [salt.state       :1803][INFO    ][2392] Executing state file.managed for [/etc/default/cinder-scheduler]
2018-09-01 22:55:41,081 [salt.fileclient  :1215][INFO    ][2392] Fetching file from saltenv 'base', ** done ** 'cinder/files/default'
2018-09-01 22:55:41,093 [salt.state       :290 ][INFO    ][2392] File changed:
New file
2018-09-01 22:55:41,094 [salt.state       :1941][INFO    ][2392] Completed state [/etc/default/cinder-scheduler] at time 22:55:41.093976 duration_in_ms=38.232
2018-09-01 22:55:41,094 [salt.state       :1770][INFO    ][2392] Running state [/etc/apache2/conf-available/cinder-wsgi.conf] at time 22:55:41.094512
2018-09-01 22:55:41,094 [salt.state       :1803][INFO    ][2392] Executing state file.managed for [/etc/apache2/conf-available/cinder-wsgi.conf]
2018-09-01 22:55:41,111 [salt.fileclient  :1215][INFO    ][2392] Fetching file from saltenv 'base', ** done ** 'cinder/files/queens/cinder-wsgi.conf'
2018-09-01 22:55:41,154 [salt.state       :290 ][INFO    ][2392] File changed:
New file
2018-09-01 22:55:41,154 [salt.state       :1941][INFO    ][2392] Completed state [/etc/apache2/conf-available/cinder-wsgi.conf] at time 22:55:41.154273 duration_in_ms=59.761
2018-09-01 22:55:41,161 [salt.state       :1770][INFO    ][2392] Running state [cinder-wsgi] at time 22:55:41.161413
2018-09-01 22:55:41,161 [salt.state       :1803][INFO    ][2392] Executing state apache_conf.enabled for [cinder-wsgi]
2018-09-01 22:55:41,162 [salt.loaded.int.module.cmdmod:395 ][INFO    ][2392] Executing command ['a2enconf', 'cinder-wsgi'] in directory '/root'
2018-09-01 22:55:41,213 [salt.state       :290 ][INFO    ][2392] {'new': 'cinder-wsgi', 'old': None}
2018-09-01 22:55:41,214 [salt.state       :1941][INFO    ][2392] Completed state [cinder-wsgi] at time 22:55:41.214164 duration_in_ms=52.751
2018-09-01 22:55:41,216 [salt.state       :1770][INFO    ][2392] Running state [cinder-api] at time 22:55:41.216232
2018-09-01 22:55:41,216 [salt.state       :1803][INFO    ][2392] Executing state service.dead for [cinder-api]
2018-09-01 22:55:41,217 [salt.loaded.int.module.cmdmod:395 ][INFO    ][2392] Executing command ['systemctl', 'status', 'cinder-api.service', '-n', '0'] in directory '/root'
2018-09-01 22:55:41,235 [salt.state       :290 ][INFO    ][2392] The named service cinder-api is not available
2018-09-01 22:55:41,236 [salt.state       :1941][INFO    ][2392] Completed state [cinder-api] at time 22:55:41.236029 duration_in_ms=19.797
2018-09-01 22:55:41,238 [salt.state       :1770][INFO    ][2392] Running state [apache2] at time 22:55:41.238277
2018-09-01 22:55:41,238 [salt.state       :1803][INFO    ][2392] Executing state service.running for [apache2]
2018-09-01 22:55:41,239 [salt.loaded.int.module.cmdmod:395 ][INFO    ][2392] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-09-01 22:55:41,258 [salt.loaded.int.module.cmdmod:395 ][INFO    ][2392] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-09-01 22:55:41,286 [salt.state       :290 ][INFO    ][2392] The service apache2 is already running
2018-09-01 22:55:41,287 [salt.state       :1941][INFO    ][2392] Completed state [apache2] at time 22:55:41.287099 duration_in_ms=48.822
2018-09-01 22:55:41,287 [salt.state       :1770][INFO    ][2392] Running state [apache2] at time 22:55:41.287615
2018-09-01 22:55:41,288 [salt.state       :1803][INFO    ][2392] Executing state service.mod_watch for [apache2]
2018-09-01 22:55:41,289 [salt.loaded.int.module.cmdmod:395 ][INFO    ][2392] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-09-01 22:55:41,312 [salt.loaded.int.module.cmdmod:395 ][INFO    ][2392] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'apache2.service'] in directory '/root'
2018-09-01 22:55:42,738 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901225542728995
2018-09-01 22:55:42,759 [salt.minion      :1431][INFO    ][4362] Starting a new job with PID 4362
2018-09-01 22:55:42,779 [salt.minion      :1708][INFO    ][4362] Returning information for job: 20180901225542728995
2018-09-01 22:55:43,592 [salt.state       :290 ][INFO    ][2392] {'apache2': True}
2018-09-01 22:55:43,592 [salt.state       :1941][INFO    ][2392] Completed state [apache2] at time 22:55:43.592756 duration_in_ms=2305.141
2018-09-01 22:55:43,594 [salt.state       :1770][INFO    ][2392] Running state [cinder-scheduler] at time 22:55:43.594334
2018-09-01 22:55:43,594 [salt.state       :1803][INFO    ][2392] Executing state service.running for [cinder-scheduler]
2018-09-01 22:55:43,595 [salt.loaded.int.module.cmdmod:395 ][INFO    ][2392] Executing command ['systemctl', 'status', 'cinder-scheduler.service', '-n', '0'] in directory '/root'
2018-09-01 22:55:43,610 [salt.loaded.int.module.cmdmod:395 ][INFO    ][2392] Executing command ['systemctl', 'is-active', 'cinder-scheduler.service'] in directory '/root'
2018-09-01 22:55:43,624 [salt.loaded.int.module.cmdmod:395 ][INFO    ][2392] Executing command ['systemctl', 'is-enabled', 'cinder-scheduler.service'] in directory '/root'
2018-09-01 22:55:43,646 [salt.loaded.int.module.cmdmod:395 ][INFO    ][2392] Executing command ['systemd-run', '--scope', 'systemctl', 'start', 'cinder-scheduler.service'] in directory '/root'
2018-09-01 22:55:43,676 [salt.loaded.int.module.cmdmod:395 ][INFO    ][2392] Executing command ['systemctl', 'is-active', 'cinder-scheduler.service'] in directory '/root'
2018-09-01 22:55:43,692 [salt.loaded.int.module.cmdmod:395 ][INFO    ][2392] Executing command ['systemctl', 'is-enabled', 'cinder-scheduler.service'] in directory '/root'
2018-09-01 22:55:43,714 [salt.loaded.int.module.cmdmod:395 ][INFO    ][2392] Executing command ['systemctl', 'is-enabled', 'cinder-scheduler.service'] in directory '/root'
2018-09-01 22:55:43,728 [salt.state       :290 ][INFO    ][2392] {'cinder-scheduler': True}
2018-09-01 22:55:43,728 [salt.state       :1941][INFO    ][2392] Completed state [cinder-scheduler] at time 22:55:43.728548 duration_in_ms=134.214
2018-09-01 22:55:43,731 [salt.state       :1770][INFO    ][2392] Running state [lvm-driver] at time 22:55:43.731826
2018-09-01 22:55:43,732 [salt.state       :1803][INFO    ][2392] Executing state cinderng.volume_type_present for [lvm-driver]
2018-09-01 22:55:52,941 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901225552933328
2018-09-01 22:55:52,965 [salt.minion      :1431][INFO    ][4504] Starting a new job with PID 4504
2018-09-01 22:55:52,983 [salt.minion      :1708][INFO    ][4504] Returning information for job: 20180901225552933328
2018-09-01 22:55:54,277 [salt.state       :290 ][INFO    ][2392] {'Volume type': 'Created'}
2018-09-01 22:55:54,278 [salt.state       :1941][INFO    ][2392] Completed state [lvm-driver] at time 22:55:54.278230 duration_in_ms=10546.402
2018-09-01 22:55:54,279 [salt.state       :1770][INFO    ][2392] Running state [lvm-driver] at time 22:55:54.279811
2018-09-01 22:55:54,280 [salt.state       :1803][INFO    ][2392] Executing state cinderng.volume_type_key_present for [lvm-driver]
2018-09-01 22:56:03,094 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901225603085986
2018-09-01 22:56:03,122 [salt.minion      :1431][INFO    ][4541] Starting a new job with PID 4541
2018-09-01 22:56:03,140 [salt.minion      :1708][INFO    ][4541] Returning information for job: 20180901225603085986
2018-09-01 22:56:03,391 [salt.state       :290 ][INFO    ][2392] {'Volume type keys': 'Updated'}
2018-09-01 22:56:03,392 [salt.state       :1941][INFO    ][2392] Completed state [lvm-driver] at time 22:56:03.392060 duration_in_ms=9112.249
2018-09-01 22:56:03,398 [salt.minion      :1708][INFO    ][2392] Returning information for job: 20180901225446904408
2018-09-01 22:58:04,211 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command state.sls with jid 20180901225804205230
2018-09-01 22:58:04,232 [salt.minion      :1431][INFO    ][4549] Starting a new job with PID 4549
2018-09-01 22:58:09,944 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901225809941454
2018-09-01 22:58:09,950 [salt.state       :905 ][INFO    ][4549] Loading fresh modules for state activity
2018-09-01 22:58:09,966 [salt.minion      :1431][INFO    ][4556] Starting a new job with PID 4556
2018-09-01 22:58:09,982 [salt.minion      :1708][INFO    ][4556] Returning information for job: 20180901225809941454
2018-09-01 22:58:11,720 [salt.state       :1770][INFO    ][4549] Running state [apache2] at time 22:58:11.720798
2018-09-01 22:58:11,721 [salt.state       :1803][INFO    ][4549] Executing state pkg.installed for [apache2]
2018-09-01 22:58:11,721 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4549] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 22:58:12,115 [salt.state       :290 ][INFO    ][4549] All specified packages are already installed
2018-09-01 22:58:12,116 [salt.state       :1941][INFO    ][4549] Completed state [apache2] at time 22:58:12.116412 duration_in_ms=395.615
2018-09-01 22:58:12,116 [salt.state       :1770][INFO    ][4549] Running state [openssl] at time 22:58:12.116866
2018-09-01 22:58:12,117 [salt.state       :1803][INFO    ][4549] Executing state pkg.installed for [openssl]
2018-09-01 22:58:12,122 [salt.state       :290 ][INFO    ][4549] All specified packages are already installed
2018-09-01 22:58:12,122 [salt.state       :1941][INFO    ][4549] Completed state [openssl] at time 22:58:12.122679 duration_in_ms=5.812
2018-09-01 22:58:12,123 [salt.state       :1770][INFO    ][4549] Running state [a2enmod ssl] at time 22:58:12.123344
2018-09-01 22:58:12,123 [salt.state       :1803][INFO    ][4549] Executing state cmd.run for [a2enmod ssl]
2018-09-01 22:58:12,124 [salt.state       :290 ][INFO    ][4549] /etc/apache2/mods-enabled/ssl.load exists
2018-09-01 22:58:12,124 [salt.state       :1941][INFO    ][4549] Completed state [a2enmod ssl] at time 22:58:12.124550 duration_in_ms=1.206
2018-09-01 22:58:12,125 [salt.state       :1770][INFO    ][4549] Running state [a2enmod rewrite] at time 22:58:12.125055
2018-09-01 22:58:12,125 [salt.state       :1803][INFO    ][4549] Executing state cmd.run for [a2enmod rewrite]
2018-09-01 22:58:12,125 [salt.state       :290 ][INFO    ][4549] /etc/apache2/mods-enabled/rewrite.load exists
2018-09-01 22:58:12,126 [salt.state       :1941][INFO    ][4549] Completed state [a2enmod rewrite] at time 22:58:12.126200 duration_in_ms=1.144
2018-09-01 22:58:12,126 [salt.state       :1770][INFO    ][4549] Running state [libapache2-mod-wsgi] at time 22:58:12.126686
2018-09-01 22:58:12,127 [salt.state       :1803][INFO    ][4549] Executing state pkg.installed for [libapache2-mod-wsgi]
2018-09-01 22:58:12,131 [salt.state       :290 ][INFO    ][4549] All specified packages are already installed
2018-09-01 22:58:12,132 [salt.state       :1941][INFO    ][4549] Completed state [libapache2-mod-wsgi] at time 22:58:12.132274 duration_in_ms=5.587
2018-09-01 22:58:12,132 [salt.state       :1770][INFO    ][4549] Running state [a2enmod wsgi] at time 22:58:12.132768
2018-09-01 22:58:12,133 [salt.state       :1803][INFO    ][4549] Executing state cmd.run for [a2enmod wsgi]
2018-09-01 22:58:12,133 [salt.state       :290 ][INFO    ][4549] /etc/apache2/mods-enabled/wsgi.load exists
2018-09-01 22:58:12,133 [salt.state       :1941][INFO    ][4549] Completed state [a2enmod wsgi] at time 22:58:12.133915 duration_in_ms=1.146
2018-09-01 22:58:12,137 [salt.state       :1770][INFO    ][4549] Running state [/etc/apache2/mods-enabled/mpm_prefork.load] at time 22:58:12.137122
2018-09-01 22:58:12,137 [salt.state       :1803][INFO    ][4549] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_prefork.load]
2018-09-01 22:58:12,137 [salt.state       :290 ][INFO    ][4549] File /etc/apache2/mods-enabled/mpm_prefork.load is not present
2018-09-01 22:58:12,138 [salt.state       :1941][INFO    ][4549] Completed state [/etc/apache2/mods-enabled/mpm_prefork.load] at time 22:58:12.138239 duration_in_ms=1.118
2018-09-01 22:58:12,138 [salt.state       :1770][INFO    ][4549] Running state [/etc/apache2/mods-enabled/mpm_prefork.conf] at time 22:58:12.138578
2018-09-01 22:58:12,138 [salt.state       :1803][INFO    ][4549] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_prefork.conf]
2018-09-01 22:58:12,139 [salt.state       :290 ][INFO    ][4549] File /etc/apache2/mods-enabled/mpm_prefork.conf is not present
2018-09-01 22:58:12,139 [salt.state       :1941][INFO    ][4549] Completed state [/etc/apache2/mods-enabled/mpm_prefork.conf] at time 22:58:12.139642 duration_in_ms=1.063
2018-09-01 22:58:12,140 [salt.state       :1770][INFO    ][4549] Running state [/etc/apache2/mods-enabled/mpm_worker.load] at time 22:58:12.139978
2018-09-01 22:58:12,140 [salt.state       :1803][INFO    ][4549] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_worker.load]
2018-09-01 22:58:12,140 [salt.state       :290 ][INFO    ][4549] File /etc/apache2/mods-enabled/mpm_worker.load is not present
2018-09-01 22:58:12,141 [salt.state       :1941][INFO    ][4549] Completed state [/etc/apache2/mods-enabled/mpm_worker.load] at time 22:58:12.141009 duration_in_ms=1.031
2018-09-01 22:58:12,141 [salt.state       :1770][INFO    ][4549] Running state [/etc/apache2/mods-enabled/mpm_worker.conf] at time 22:58:12.141343
2018-09-01 22:58:12,141 [salt.state       :1803][INFO    ][4549] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_worker.conf]
2018-09-01 22:58:12,142 [salt.state       :290 ][INFO    ][4549] File /etc/apache2/mods-enabled/mpm_worker.conf is not present
2018-09-01 22:58:12,142 [salt.state       :1941][INFO    ][4549] Completed state [/etc/apache2/mods-enabled/mpm_worker.conf] at time 22:58:12.142377 duration_in_ms=1.035
2018-09-01 22:58:12,144 [salt.state       :1770][INFO    ][4549] Running state [/etc/apache2/mods-available/mpm_event.conf] at time 22:58:12.144019
2018-09-01 22:58:12,144 [salt.state       :1803][INFO    ][4549] Executing state file.managed for [/etc/apache2/mods-available/mpm_event.conf]
2018-09-01 22:58:12,191 [salt.state       :290 ][INFO    ][4549] File /etc/apache2/mods-available/mpm_event.conf is in the correct state
2018-09-01 22:58:12,192 [salt.state       :1941][INFO    ][4549] Completed state [/etc/apache2/mods-available/mpm_event.conf] at time 22:58:12.192148 duration_in_ms=48.129
2018-09-01 22:58:12,192 [salt.state       :1770][INFO    ][4549] Running state [a2enmod mpm_event] at time 22:58:12.192853
2018-09-01 22:58:12,193 [salt.state       :1803][INFO    ][4549] Executing state cmd.run for [a2enmod mpm_event]
2018-09-01 22:58:12,193 [salt.state       :290 ][INFO    ][4549] /etc/apache2/mods-enabled/mpm_event.load exists
2018-09-01 22:58:12,193 [salt.state       :1941][INFO    ][4549] Completed state [a2enmod mpm_event] at time 22:58:12.193940 duration_in_ms=1.087
2018-09-01 22:58:12,194 [salt.state       :1770][INFO    ][4549] Running state [apache_server_service_task] at time 22:58:12.194739
2018-09-01 22:58:12,195 [salt.state       :1803][INFO    ][4549] Executing state test.show_notification for [apache_server_service_task]
2018-09-01 22:58:12,195 [salt.state       :290 ][INFO    ][4549] Running apache.server.service
2018-09-01 22:58:12,195 [salt.state       :1941][INFO    ][4549] Completed state [apache_server_service_task] at time 22:58:12.195774 duration_in_ms=1.035
2018-09-01 22:58:12,196 [salt.state       :1770][INFO    ][4549] Running state [/etc/apache2/ports.conf] at time 22:58:12.196318
2018-09-01 22:58:12,196 [salt.state       :1803][INFO    ][4549] Executing state file.managed for [/etc/apache2/ports.conf]
2018-09-01 22:58:12,235 [salt.state       :290 ][INFO    ][4549] File /etc/apache2/ports.conf is in the correct state
2018-09-01 22:58:12,236 [salt.state       :1941][INFO    ][4549] Completed state [/etc/apache2/ports.conf] at time 22:58:12.236058 duration_in_ms=39.74
2018-09-01 22:58:12,236 [salt.state       :1770][INFO    ][4549] Running state [/etc/apache2/conf-available/security.conf] at time 22:58:12.236621
2018-09-01 22:58:12,237 [salt.state       :1803][INFO    ][4549] Executing state file.managed for [/etc/apache2/conf-available/security.conf]
2018-09-01 22:58:12,280 [salt.state       :290 ][INFO    ][4549] File /etc/apache2/conf-available/security.conf is in the correct state
2018-09-01 22:58:12,281 [salt.state       :1941][INFO    ][4549] Completed state [/etc/apache2/conf-available/security.conf] at time 22:58:12.281189 duration_in_ms=44.569
2018-09-01 22:58:12,287 [salt.state       :1770][INFO    ][4549] Running state [/etc/apache2/sites-enabled/000-default.conf] at time 22:58:12.287297
2018-09-01 22:58:12,287 [salt.state       :1803][INFO    ][4549] Executing state file.absent for [/etc/apache2/sites-enabled/000-default.conf]
2018-09-01 22:58:12,288 [salt.state       :290 ][INFO    ][4549] File /etc/apache2/sites-enabled/000-default.conf is not present
2018-09-01 22:58:12,288 [salt.state       :1941][INFO    ][4549] Completed state [/etc/apache2/sites-enabled/000-default.conf] at time 22:58:12.288411 duration_in_ms=1.115
2018-09-01 22:58:12,288 [salt.state       :1770][INFO    ][4549] Running state [/etc/apache2/sites-available/wsgi_barbican_admin.conf] at time 22:58:12.288939
2018-09-01 22:58:12,289 [salt.state       :1803][INFO    ][4549] Executing state file.managed for [/etc/apache2/sites-available/wsgi_barbican_admin.conf]
2018-09-01 22:58:12,435 [salt.state       :290 ][INFO    ][4549] File /etc/apache2/sites-available/wsgi_barbican_admin.conf is in the correct state
2018-09-01 22:58:12,436 [salt.state       :1941][INFO    ][4549] Completed state [/etc/apache2/sites-available/wsgi_barbican_admin.conf] at time 22:58:12.436381 duration_in_ms=147.442
2018-09-01 22:58:12,437 [salt.state       :1770][INFO    ][4549] Running state [/etc/apache2/sites-available/wsgi_barbican.conf] at time 22:58:12.436965
2018-09-01 22:58:12,437 [salt.state       :1803][INFO    ][4549] Executing state file.managed for [/etc/apache2/sites-available/wsgi_barbican.conf]
2018-09-01 22:58:12,591 [salt.state       :290 ][INFO    ][4549] File /etc/apache2/sites-available/wsgi_barbican.conf is in the correct state
2018-09-01 22:58:12,592 [salt.state       :1941][INFO    ][4549] Completed state [/etc/apache2/sites-available/wsgi_barbican.conf] at time 22:58:12.592187 duration_in_ms=155.222
2018-09-01 22:58:12,592 [salt.state       :1770][INFO    ][4549] Running state [/etc/apache2/sites-available/keystone_wsgi.conf] at time 22:58:12.592777
2018-09-01 22:58:12,593 [salt.state       :1803][INFO    ][4549] Executing state file.managed for [/etc/apache2/sites-available/keystone_wsgi.conf]
2018-09-01 22:58:12,817 [salt.state       :290 ][INFO    ][4549] File /etc/apache2/sites-available/keystone_wsgi.conf is in the correct state
2018-09-01 22:58:12,818 [salt.state       :1941][INFO    ][4549] Completed state [/etc/apache2/sites-available/keystone_wsgi.conf] at time 22:58:12.818193 duration_in_ms=225.416
2018-09-01 22:58:12,818 [salt.state       :1770][INFO    ][4549] Running state [/etc/apache2/sites-enabled/keystone_wsgi.conf] at time 22:58:12.818815
2018-09-01 22:58:12,819 [salt.state       :1803][INFO    ][4549] Executing state file.symlink for [/etc/apache2/sites-enabled/keystone_wsgi.conf]
2018-09-01 22:58:12,820 [salt.state       :290 ][INFO    ][4549] Symlink /etc/apache2/sites-enabled/keystone_wsgi.conf is present and owned by root:root
2018-09-01 22:58:12,821 [salt.state       :1941][INFO    ][4549] Completed state [/etc/apache2/sites-enabled/keystone_wsgi.conf] at time 22:58:12.821307 duration_in_ms=2.492
2018-09-01 22:58:12,823 [salt.state       :1770][INFO    ][4549] Running state [apache2] at time 22:58:12.823698
2018-09-01 22:58:12,824 [salt.state       :1803][INFO    ][4549] Executing state service.running for [apache2]
2018-09-01 22:58:12,824 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4549] Executing command ['systemctl', 'status', 'apache2.service', '-n', '0'] in directory '/root'
2018-09-01 22:58:12,863 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4549] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-09-01 22:58:12,886 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4549] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-09-01 22:58:12,908 [salt.state       :290 ][INFO    ][4549] The service apache2 is already running
2018-09-01 22:58:12,909 [salt.state       :1941][INFO    ][4549] Completed state [apache2] at time 22:58:12.909680 duration_in_ms=85.981
2018-09-01 22:58:12,911 [salt.state       :1770][INFO    ][4549] Running state [/etc/apache2/conf-enabled/security.conf] at time 22:58:12.911648
2018-09-01 22:58:12,912 [salt.state       :1803][INFO    ][4549] Executing state file.symlink for [/etc/apache2/conf-enabled/security.conf]
2018-09-01 22:58:12,916 [salt.state       :290 ][INFO    ][4549] Symlink /etc/apache2/conf-enabled/security.conf is present and owned by root:root
2018-09-01 22:58:12,917 [salt.state       :1941][INFO    ][4549] Completed state [/etc/apache2/conf-enabled/security.conf] at time 22:58:12.917097 duration_in_ms=5.449
2018-09-01 22:58:12,917 [salt.state       :1770][INFO    ][4549] Running state [/etc/apache2/sites-enabled/keystone_wsgi] at time 22:58:12.917846
2018-09-01 22:58:12,918 [salt.state       :1803][INFO    ][4549] Executing state file.absent for [/etc/apache2/sites-enabled/keystone_wsgi]
2018-09-01 22:58:12,919 [salt.state       :290 ][INFO    ][4549] File /etc/apache2/sites-enabled/keystone_wsgi is not present
2018-09-01 22:58:12,919 [salt.state       :1941][INFO    ][4549] Completed state [/etc/apache2/sites-enabled/keystone_wsgi] at time 22:58:12.919865 duration_in_ms=2.02
2018-09-01 22:58:12,921 [salt.state       :1770][INFO    ][4549] Running state [cinder-scheduler] at time 22:58:12.921424
2018-09-01 22:58:12,921 [salt.state       :1803][INFO    ][4549] Executing state pkg.installed for [cinder-scheduler]
2018-09-01 22:58:12,928 [salt.state       :290 ][INFO    ][4549] All specified packages are already installed
2018-09-01 22:58:12,929 [salt.state       :1941][INFO    ][4549] Completed state [cinder-scheduler] at time 22:58:12.929273 duration_in_ms=7.849
2018-09-01 22:58:12,929 [salt.state       :1770][INFO    ][4549] Running state [lvm2] at time 22:58:12.929652
2018-09-01 22:58:12,930 [salt.state       :1803][INFO    ][4549] Executing state pkg.installed for [lvm2]
2018-09-01 22:58:12,935 [salt.state       :290 ][INFO    ][4549] All specified packages are already installed
2018-09-01 22:58:12,936 [salt.state       :1941][INFO    ][4549] Completed state [lvm2] at time 22:58:12.936037 duration_in_ms=6.386
2018-09-01 22:58:12,936 [salt.state       :1770][INFO    ][4549] Running state [python-cinder] at time 22:58:12.936541
2018-09-01 22:58:12,936 [salt.state       :1803][INFO    ][4549] Executing state pkg.installed for [python-cinder]
2018-09-01 22:58:12,942 [salt.state       :290 ][INFO    ][4549] All specified packages are already installed
2018-09-01 22:58:12,942 [salt.state       :1941][INFO    ][4549] Completed state [python-cinder] at time 22:58:12.942692 duration_in_ms=6.15
2018-09-01 22:58:12,943 [salt.state       :1770][INFO    ][4549] Running state [gettext-base] at time 22:58:12.943060
2018-09-01 22:58:12,943 [salt.state       :1803][INFO    ][4549] Executing state pkg.installed for [gettext-base]
2018-09-01 22:58:12,948 [salt.state       :290 ][INFO    ][4549] All specified packages are already installed
2018-09-01 22:58:12,949 [salt.state       :1941][INFO    ][4549] Completed state [gettext-base] at time 22:58:12.949168 duration_in_ms=6.108
2018-09-01 22:58:12,949 [salt.state       :1770][INFO    ][4549] Running state [python-memcache] at time 22:58:12.949532
2018-09-01 22:58:12,949 [salt.state       :1803][INFO    ][4549] Executing state pkg.installed for [python-memcache]
2018-09-01 22:58:12,955 [salt.state       :290 ][INFO    ][4549] All specified packages are already installed
2018-09-01 22:58:12,955 [salt.state       :1941][INFO    ][4549] Completed state [python-memcache] at time 22:58:12.955579 duration_in_ms=6.047
2018-09-01 22:58:12,955 [salt.state       :1770][INFO    ][4549] Running state [python-pycadf] at time 22:58:12.955937
2018-09-01 22:58:12,956 [salt.state       :1803][INFO    ][4549] Executing state pkg.installed for [python-pycadf]
2018-09-01 22:58:12,961 [salt.state       :290 ][INFO    ][4549] All specified packages are already installed
2018-09-01 22:58:12,962 [salt.state       :1941][INFO    ][4549] Completed state [python-pycadf] at time 22:58:12.962079 duration_in_ms=6.142
2018-09-01 22:58:12,962 [salt.state       :1770][INFO    ][4549] Running state [/etc/cinder/cinder.conf] at time 22:58:12.962627
2018-09-01 22:58:12,963 [salt.state       :1803][INFO    ][4549] Executing state file.managed for [/etc/cinder/cinder.conf]
2018-09-01 22:58:13,196 [salt.state       :290 ][INFO    ][4549] File /etc/cinder/cinder.conf is in the correct state
2018-09-01 22:58:13,196 [salt.state       :1941][INFO    ][4549] Completed state [/etc/cinder/cinder.conf] at time 22:58:13.196304 duration_in_ms=233.676
2018-09-01 22:58:13,196 [salt.state       :1770][INFO    ][4549] Running state [/etc/cinder/api-paste.ini] at time 22:58:13.196733
2018-09-01 22:58:13,196 [salt.state       :1803][INFO    ][4549] Executing state file.managed for [/etc/cinder/api-paste.ini]
2018-09-01 22:58:13,244 [salt.state       :290 ][INFO    ][4549] File /etc/cinder/api-paste.ini is in the correct state
2018-09-01 22:58:13,244 [salt.state       :1941][INFO    ][4549] Completed state [/etc/cinder/api-paste.ini] at time 22:58:13.244744 duration_in_ms=48.011
2018-09-01 22:58:13,245 [salt.state       :1770][INFO    ][4549] Running state [cinder-manage db sync; sleep 5;] at time 22:58:13.245279
2018-09-01 22:58:13,245 [salt.state       :1803][INFO    ][4549] Executing state cmd.run for [cinder-manage db sync; sleep 5;]
2018-09-01 22:58:13,245 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4549] Executing command 'cinder-manage db sync; sleep 5;' in directory '/root'
2018-09-01 22:58:19,575 [salt.state       :290 ][INFO    ][4549] {'pid': 4615, 'retcode': 0, 'stderr': '', 'stdout': ''}
2018-09-01 22:58:19,576 [salt.state       :1941][INFO    ][4549] Completed state [cinder-manage db sync; sleep 5;] at time 22:58:19.576519 duration_in_ms=6331.238
2018-09-01 22:58:19,578 [salt.state       :1770][INFO    ][4549] Running state [/etc/default/cinder-scheduler] at time 22:58:19.578677
2018-09-01 22:58:19,579 [salt.state       :1803][INFO    ][4549] Executing state file.managed for [/etc/default/cinder-scheduler]
2018-09-01 22:58:19,604 [salt.state       :290 ][INFO    ][4549] File /etc/default/cinder-scheduler is in the correct state
2018-09-01 22:58:19,605 [salt.state       :1941][INFO    ][4549] Completed state [/etc/default/cinder-scheduler] at time 22:58:19.605044 duration_in_ms=26.369
2018-09-01 22:58:19,605 [salt.state       :1770][INFO    ][4549] Running state [/etc/apache2/conf-available/cinder-wsgi.conf] at time 22:58:19.605571
2018-09-01 22:58:19,605 [salt.state       :1803][INFO    ][4549] Executing state file.managed for [/etc/apache2/conf-available/cinder-wsgi.conf]
2018-09-01 22:58:19,659 [salt.state       :290 ][INFO    ][4549] File /etc/apache2/conf-available/cinder-wsgi.conf is in the correct state
2018-09-01 22:58:19,659 [salt.state       :1941][INFO    ][4549] Completed state [/etc/apache2/conf-available/cinder-wsgi.conf] at time 22:58:19.659917 duration_in_ms=54.346
2018-09-01 22:58:19,661 [salt.state       :1770][INFO    ][4549] Running state [cinder-wsgi] at time 22:58:19.661004
2018-09-01 22:58:19,661 [salt.state       :1803][INFO    ][4549] Executing state apache_conf.enabled for [cinder-wsgi]
2018-09-01 22:58:19,661 [salt.state       :290 ][INFO    ][4549] cinder-wsgi already enabled.
2018-09-01 22:58:19,661 [salt.state       :1941][INFO    ][4549] Completed state [cinder-wsgi] at time 22:58:19.661743 duration_in_ms=0.739
2018-09-01 22:58:19,662 [salt.state       :1770][INFO    ][4549] Running state [cinder-api] at time 22:58:19.662191
2018-09-01 22:58:19,662 [salt.state       :1803][INFO    ][4549] Executing state service.dead for [cinder-api]
2018-09-01 22:58:19,663 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4549] Executing command ['systemctl', 'status', 'cinder-api.service', '-n', '0'] in directory '/root'
2018-09-01 22:58:19,686 [salt.state       :290 ][INFO    ][4549] The named service cinder-api is not available
2018-09-01 22:58:19,687 [salt.state       :1941][INFO    ][4549] Completed state [cinder-api] at time 22:58:19.687025 duration_in_ms=24.833
2018-09-01 22:58:19,691 [salt.state       :1770][INFO    ][4549] Running state [apache2] at time 22:58:19.691715
2018-09-01 22:58:19,692 [salt.state       :1803][INFO    ][4549] Executing state service.running for [apache2]
2018-09-01 22:58:19,694 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4549] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-09-01 22:58:19,718 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4549] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-09-01 22:58:19,746 [salt.state       :290 ][INFO    ][4549] The service apache2 is already running
2018-09-01 22:58:19,748 [salt.state       :1941][INFO    ][4549] Completed state [apache2] at time 22:58:19.747852 duration_in_ms=56.137
2018-09-01 22:58:19,751 [salt.state       :1770][INFO    ][4549] Running state [cinder-scheduler] at time 22:58:19.751874
2018-09-01 22:58:19,752 [salt.state       :1803][INFO    ][4549] Executing state service.running for [cinder-scheduler]
2018-09-01 22:58:19,754 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4549] Executing command ['systemctl', 'status', 'cinder-scheduler.service', '-n', '0'] in directory '/root'
2018-09-01 22:58:19,780 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4549] Executing command ['systemctl', 'is-active', 'cinder-scheduler.service'] in directory '/root'
2018-09-01 22:58:19,800 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4549] Executing command ['systemctl', 'is-enabled', 'cinder-scheduler.service'] in directory '/root'
2018-09-01 22:58:19,826 [salt.state       :290 ][INFO    ][4549] The service cinder-scheduler is already running
2018-09-01 22:58:19,827 [salt.state       :1941][INFO    ][4549] Completed state [cinder-scheduler] at time 22:58:19.827561 duration_in_ms=75.687
2018-09-01 22:58:19,833 [salt.state       :1770][INFO    ][4549] Running state [lvm-driver] at time 22:58:19.833681
2018-09-01 22:58:19,834 [salt.state       :1803][INFO    ][4549] Executing state cinderng.volume_type_present for [lvm-driver]
2018-09-01 22:58:20,156 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901225820144632
2018-09-01 22:58:20,174 [salt.minion      :1431][INFO    ][4638] Starting a new job with PID 4638
2018-09-01 22:58:20,192 [salt.minion      :1708][INFO    ][4638] Returning information for job: 20180901225820144632
2018-09-01 22:58:22,489 [salt.state       :290 ][INFO    ][4549] Volume type "lvm-driver" already exists
2018-09-01 22:58:22,490 [salt.state       :1941][INFO    ][4549] Completed state [lvm-driver] at time 22:58:22.489997 duration_in_ms=2656.315
2018-09-01 22:58:22,491 [salt.state       :1770][INFO    ][4549] Running state [lvm-driver] at time 22:58:22.491636
2018-09-01 22:58:22,492 [salt.state       :1803][INFO    ][4549] Executing state cinderng.volume_type_key_present for [lvm-driver]
2018-09-01 22:58:26,705 [salt.state       :290 ][INFO    ][4549] Volume type keys "{u'volume_backend_name': u'lvm-driver'}" in volume type "lvm-driver" already exist
2018-09-01 22:58:26,706 [salt.state       :1941][INFO    ][4549] Completed state [lvm-driver] at time 22:58:26.705957 duration_in_ms=4214.321
2018-09-01 22:58:26,711 [salt.minion      :1708][INFO    ][4549] Returning information for job: 20180901225804205230
2018-09-01 23:00:31,593 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command state.sls with jid 20180901230031586326
2018-09-01 23:00:31,617 [salt.minion      :1431][INFO    ][4655] Starting a new job with PID 4655
2018-09-01 23:00:36,349 [salt.state       :905 ][INFO    ][4655] Loading fresh modules for state activity
2018-09-01 23:00:36,832 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901230036824244
2018-09-01 23:00:36,857 [salt.minion      :1431][INFO    ][4662] Starting a new job with PID 4662
2018-09-01 23:00:36,876 [salt.minion      :1708][INFO    ][4662] Returning information for job: 20180901230036824244
2018-09-01 23:00:39,204 [salt.state       :1770][INFO    ][4655] Running state [apache2] at time 23:00:39.204389
2018-09-01 23:00:39,204 [salt.state       :1803][INFO    ][4655] Executing state pkg.installed for [apache2]
2018-09-01 23:00:39,205 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4655] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 23:00:39,528 [salt.state       :290 ][INFO    ][4655] All specified packages are already installed
2018-09-01 23:00:39,529 [salt.state       :1941][INFO    ][4655] Completed state [apache2] at time 23:00:39.529043 duration_in_ms=324.653
2018-09-01 23:00:39,529 [salt.state       :1770][INFO    ][4655] Running state [openssl] at time 23:00:39.529317
2018-09-01 23:00:39,529 [salt.state       :1803][INFO    ][4655] Executing state pkg.installed for [openssl]
2018-09-01 23:00:39,534 [salt.state       :290 ][INFO    ][4655] All specified packages are already installed
2018-09-01 23:00:39,534 [salt.state       :1941][INFO    ][4655] Completed state [openssl] at time 23:00:39.534455 duration_in_ms=5.139
2018-09-01 23:00:39,534 [salt.state       :1770][INFO    ][4655] Running state [a2enmod ssl] at time 23:00:39.534937
2018-09-01 23:00:39,535 [salt.state       :1803][INFO    ][4655] Executing state cmd.run for [a2enmod ssl]
2018-09-01 23:00:39,535 [salt.state       :290 ][INFO    ][4655] /etc/apache2/mods-enabled/ssl.load exists
2018-09-01 23:00:39,535 [salt.state       :1941][INFO    ][4655] Completed state [a2enmod ssl] at time 23:00:39.535551 duration_in_ms=0.614
2018-09-01 23:00:39,535 [salt.state       :1770][INFO    ][4655] Running state [a2enmod rewrite] at time 23:00:39.535868
2018-09-01 23:00:39,536 [salt.state       :1803][INFO    ][4655] Executing state cmd.run for [a2enmod rewrite]
2018-09-01 23:00:39,536 [salt.state       :290 ][INFO    ][4655] /etc/apache2/mods-enabled/rewrite.load exists
2018-09-01 23:00:39,536 [salt.state       :1941][INFO    ][4655] Completed state [a2enmod rewrite] at time 23:00:39.536393 duration_in_ms=0.525
2018-09-01 23:00:39,536 [salt.state       :1770][INFO    ][4655] Running state [libapache2-mod-wsgi] at time 23:00:39.536692
2018-09-01 23:00:39,536 [salt.state       :1803][INFO    ][4655] Executing state pkg.installed for [libapache2-mod-wsgi]
2018-09-01 23:00:39,541 [salt.state       :290 ][INFO    ][4655] All specified packages are already installed
2018-09-01 23:00:39,541 [salt.state       :1941][INFO    ][4655] Completed state [libapache2-mod-wsgi] at time 23:00:39.541675 duration_in_ms=4.982
2018-09-01 23:00:39,542 [salt.state       :1770][INFO    ][4655] Running state [a2enmod wsgi] at time 23:00:39.541994
2018-09-01 23:00:39,542 [salt.state       :1803][INFO    ][4655] Executing state cmd.run for [a2enmod wsgi]
2018-09-01 23:00:39,542 [salt.state       :290 ][INFO    ][4655] /etc/apache2/mods-enabled/wsgi.load exists
2018-09-01 23:00:39,542 [salt.state       :1941][INFO    ][4655] Completed state [a2enmod wsgi] at time 23:00:39.542521 duration_in_ms=0.528
2018-09-01 23:00:39,545 [salt.state       :1770][INFO    ][4655] Running state [/etc/apache2/mods-enabled/mpm_prefork.load] at time 23:00:39.545455
2018-09-01 23:00:39,545 [salt.state       :1803][INFO    ][4655] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_prefork.load]
2018-09-01 23:00:39,545 [salt.state       :290 ][INFO    ][4655] File /etc/apache2/mods-enabled/mpm_prefork.load is not present
2018-09-01 23:00:39,546 [salt.state       :1941][INFO    ][4655] Completed state [/etc/apache2/mods-enabled/mpm_prefork.load] at time 23:00:39.546041 duration_in_ms=0.586
2018-09-01 23:00:39,546 [salt.state       :1770][INFO    ][4655] Running state [/etc/apache2/mods-enabled/mpm_prefork.conf] at time 23:00:39.546198
2018-09-01 23:00:39,546 [salt.state       :1803][INFO    ][4655] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_prefork.conf]
2018-09-01 23:00:39,546 [salt.state       :290 ][INFO    ][4655] File /etc/apache2/mods-enabled/mpm_prefork.conf is not present
2018-09-01 23:00:39,546 [salt.state       :1941][INFO    ][4655] Completed state [/etc/apache2/mods-enabled/mpm_prefork.conf] at time 23:00:39.546685 duration_in_ms=0.488
2018-09-01 23:00:39,546 [salt.state       :1770][INFO    ][4655] Running state [/etc/apache2/mods-enabled/mpm_worker.load] at time 23:00:39.546836
2018-09-01 23:00:39,546 [salt.state       :1803][INFO    ][4655] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_worker.load]
2018-09-01 23:00:39,547 [salt.state       :290 ][INFO    ][4655] File /etc/apache2/mods-enabled/mpm_worker.load is not present
2018-09-01 23:00:39,547 [salt.state       :1941][INFO    ][4655] Completed state [/etc/apache2/mods-enabled/mpm_worker.load] at time 23:00:39.547335 duration_in_ms=0.499
2018-09-01 23:00:39,547 [salt.state       :1770][INFO    ][4655] Running state [/etc/apache2/mods-enabled/mpm_worker.conf] at time 23:00:39.547493
2018-09-01 23:00:39,547 [salt.state       :1803][INFO    ][4655] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_worker.conf]
2018-09-01 23:00:39,547 [salt.state       :290 ][INFO    ][4655] File /etc/apache2/mods-enabled/mpm_worker.conf is not present
2018-09-01 23:00:39,547 [salt.state       :1941][INFO    ][4655] Completed state [/etc/apache2/mods-enabled/mpm_worker.conf] at time 23:00:39.547969 duration_in_ms=0.476
2018-09-01 23:00:39,549 [salt.state       :1770][INFO    ][4655] Running state [/etc/apache2/mods-available/mpm_event.conf] at time 23:00:39.549308
2018-09-01 23:00:39,549 [salt.state       :1803][INFO    ][4655] Executing state file.managed for [/etc/apache2/mods-available/mpm_event.conf]
2018-09-01 23:00:39,600 [salt.state       :290 ][INFO    ][4655] File /etc/apache2/mods-available/mpm_event.conf is in the correct state
2018-09-01 23:00:39,601 [salt.state       :1941][INFO    ][4655] Completed state [/etc/apache2/mods-available/mpm_event.conf] at time 23:00:39.601110 duration_in_ms=51.803
2018-09-01 23:00:39,601 [salt.state       :1770][INFO    ][4655] Running state [a2enmod mpm_event] at time 23:00:39.601628
2018-09-01 23:00:39,601 [salt.state       :1803][INFO    ][4655] Executing state cmd.run for [a2enmod mpm_event]
2018-09-01 23:00:39,602 [salt.state       :290 ][INFO    ][4655] /etc/apache2/mods-enabled/mpm_event.load exists
2018-09-01 23:00:39,602 [salt.state       :1941][INFO    ][4655] Completed state [a2enmod mpm_event] at time 23:00:39.602170 duration_in_ms=0.541
2018-09-01 23:00:39,602 [salt.state       :1770][INFO    ][4655] Running state [apache_server_service_task] at time 23:00:39.602703
2018-09-01 23:00:39,602 [salt.state       :1803][INFO    ][4655] Executing state test.show_notification for [apache_server_service_task]
2018-09-01 23:00:39,603 [salt.state       :290 ][INFO    ][4655] Running apache.server.service
2018-09-01 23:00:39,603 [salt.state       :1941][INFO    ][4655] Completed state [apache_server_service_task] at time 23:00:39.603189 duration_in_ms=0.487
2018-09-01 23:00:39,603 [salt.state       :1770][INFO    ][4655] Running state [/etc/apache2/ports.conf] at time 23:00:39.603527
2018-09-01 23:00:39,603 [salt.state       :1803][INFO    ][4655] Executing state file.managed for [/etc/apache2/ports.conf]
2018-09-01 23:00:39,645 [salt.state       :290 ][INFO    ][4655] File /etc/apache2/ports.conf is in the correct state
2018-09-01 23:00:39,645 [salt.state       :1941][INFO    ][4655] Completed state [/etc/apache2/ports.conf] at time 23:00:39.645780 duration_in_ms=42.252
2018-09-01 23:00:39,646 [salt.state       :1770][INFO    ][4655] Running state [/etc/apache2/conf-available/security.conf] at time 23:00:39.646092
2018-09-01 23:00:39,646 [salt.state       :1803][INFO    ][4655] Executing state file.managed for [/etc/apache2/conf-available/security.conf]
2018-09-01 23:00:39,689 [salt.state       :290 ][INFO    ][4655] File /etc/apache2/conf-available/security.conf is in the correct state
2018-09-01 23:00:39,689 [salt.state       :1941][INFO    ][4655] Completed state [/etc/apache2/conf-available/security.conf] at time 23:00:39.689800 duration_in_ms=43.707
2018-09-01 23:00:39,695 [salt.state       :1770][INFO    ][4655] Running state [/etc/apache2/sites-enabled/000-default.conf] at time 23:00:39.695592
2018-09-01 23:00:39,695 [salt.state       :1803][INFO    ][4655] Executing state file.absent for [/etc/apache2/sites-enabled/000-default.conf]
2018-09-01 23:00:39,696 [salt.state       :290 ][INFO    ][4655] File /etc/apache2/sites-enabled/000-default.conf is not present
2018-09-01 23:00:39,696 [salt.state       :1941][INFO    ][4655] Completed state [/etc/apache2/sites-enabled/000-default.conf] at time 23:00:39.696147 duration_in_ms=0.554
2018-09-01 23:00:39,696 [salt.state       :1770][INFO    ][4655] Running state [/etc/apache2/sites-available/wsgi_barbican_admin.conf] at time 23:00:39.696473
2018-09-01 23:00:39,696 [salt.state       :1803][INFO    ][4655] Executing state file.managed for [/etc/apache2/sites-available/wsgi_barbican_admin.conf]
2018-09-01 23:00:39,844 [salt.state       :290 ][INFO    ][4655] File /etc/apache2/sites-available/wsgi_barbican_admin.conf is in the correct state
2018-09-01 23:00:39,844 [salt.state       :1941][INFO    ][4655] Completed state [/etc/apache2/sites-available/wsgi_barbican_admin.conf] at time 23:00:39.844472 duration_in_ms=148.0
2018-09-01 23:00:39,844 [salt.state       :1770][INFO    ][4655] Running state [/etc/apache2/sites-available/wsgi_barbican.conf] at time 23:00:39.844804
2018-09-01 23:00:39,845 [salt.state       :1803][INFO    ][4655] Executing state file.managed for [/etc/apache2/sites-available/wsgi_barbican.conf]
2018-09-01 23:00:40,010 [salt.state       :290 ][INFO    ][4655] File /etc/apache2/sites-available/wsgi_barbican.conf is in the correct state
2018-09-01 23:00:40,011 [salt.state       :1941][INFO    ][4655] Completed state [/etc/apache2/sites-available/wsgi_barbican.conf] at time 23:00:40.011131 duration_in_ms=166.327
2018-09-01 23:00:40,011 [salt.state       :1770][INFO    ][4655] Running state [/etc/apache2/sites-available/keystone_wsgi.conf] at time 23:00:40.011704
2018-09-01 23:00:40,012 [salt.state       :1803][INFO    ][4655] Executing state file.managed for [/etc/apache2/sites-available/keystone_wsgi.conf]
2018-09-01 23:00:40,223 [salt.state       :290 ][INFO    ][4655] File /etc/apache2/sites-available/keystone_wsgi.conf is in the correct state
2018-09-01 23:00:40,223 [salt.state       :1941][INFO    ][4655] Completed state [/etc/apache2/sites-available/keystone_wsgi.conf] at time 23:00:40.223606 duration_in_ms=211.902
2018-09-01 23:00:40,224 [salt.state       :1770][INFO    ][4655] Running state [/etc/apache2/sites-enabled/keystone_wsgi.conf] at time 23:00:40.224040
2018-09-01 23:00:40,224 [salt.state       :1803][INFO    ][4655] Executing state file.symlink for [/etc/apache2/sites-enabled/keystone_wsgi.conf]
2018-09-01 23:00:40,225 [salt.state       :290 ][INFO    ][4655] Symlink /etc/apache2/sites-enabled/keystone_wsgi.conf is present and owned by root:root
2018-09-01 23:00:40,226 [salt.state       :1941][INFO    ][4655] Completed state [/etc/apache2/sites-enabled/keystone_wsgi.conf] at time 23:00:40.226061 duration_in_ms=2.021
2018-09-01 23:00:40,228 [salt.state       :1770][INFO    ][4655] Running state [apache2] at time 23:00:40.228343
2018-09-01 23:00:40,228 [salt.state       :1803][INFO    ][4655] Executing state service.running for [apache2]
2018-09-01 23:00:40,229 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4655] Executing command ['systemctl', 'status', 'apache2.service', '-n', '0'] in directory '/root'
2018-09-01 23:00:40,274 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4655] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-09-01 23:00:40,294 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4655] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-09-01 23:00:40,318 [salt.state       :290 ][INFO    ][4655] The service apache2 is already running
2018-09-01 23:00:40,319 [salt.state       :1941][INFO    ][4655] Completed state [apache2] at time 23:00:40.319129 duration_in_ms=90.785
2018-09-01 23:00:40,321 [salt.state       :1770][INFO    ][4655] Running state [/etc/apache2/conf-enabled/security.conf] at time 23:00:40.321144
2018-09-01 23:00:40,321 [salt.state       :1803][INFO    ][4655] Executing state file.symlink for [/etc/apache2/conf-enabled/security.conf]
2018-09-01 23:00:40,325 [salt.state       :290 ][INFO    ][4655] Symlink /etc/apache2/conf-enabled/security.conf is present and owned by root:root
2018-09-01 23:00:40,326 [salt.state       :1941][INFO    ][4655] Completed state [/etc/apache2/conf-enabled/security.conf] at time 23:00:40.326326 duration_in_ms=5.182
2018-09-01 23:00:40,326 [salt.state       :1770][INFO    ][4655] Running state [/etc/apache2/sites-enabled/keystone_wsgi] at time 23:00:40.326832
2018-09-01 23:00:40,327 [salt.state       :1803][INFO    ][4655] Executing state file.absent for [/etc/apache2/sites-enabled/keystone_wsgi]
2018-09-01 23:00:40,327 [salt.state       :290 ][INFO    ][4655] File /etc/apache2/sites-enabled/keystone_wsgi is not present
2018-09-01 23:00:40,328 [salt.state       :1941][INFO    ][4655] Completed state [/etc/apache2/sites-enabled/keystone_wsgi] at time 23:00:40.328181 duration_in_ms=1.35
2018-09-01 23:00:40,329 [salt.state       :1770][INFO    ][4655] Running state [cinder-scheduler] at time 23:00:40.329606
2018-09-01 23:00:40,329 [salt.state       :1803][INFO    ][4655] Executing state pkg.installed for [cinder-scheduler]
2018-09-01 23:00:40,336 [salt.state       :290 ][INFO    ][4655] All specified packages are already installed
2018-09-01 23:00:40,336 [salt.state       :1941][INFO    ][4655] Completed state [cinder-scheduler] at time 23:00:40.336835 duration_in_ms=7.229
2018-09-01 23:00:40,337 [salt.state       :1770][INFO    ][4655] Running state [lvm2] at time 23:00:40.337058
2018-09-01 23:00:40,337 [salt.state       :1803][INFO    ][4655] Executing state pkg.installed for [lvm2]
2018-09-01 23:00:40,342 [salt.state       :290 ][INFO    ][4655] All specified packages are already installed
2018-09-01 23:00:40,342 [salt.state       :1941][INFO    ][4655] Completed state [lvm2] at time 23:00:40.342812 duration_in_ms=5.754
2018-09-01 23:00:40,343 [salt.state       :1770][INFO    ][4655] Running state [python-cinder] at time 23:00:40.343023
2018-09-01 23:00:40,343 [salt.state       :1803][INFO    ][4655] Executing state pkg.installed for [python-cinder]
2018-09-01 23:00:40,348 [salt.state       :290 ][INFO    ][4655] All specified packages are already installed
2018-09-01 23:00:40,348 [salt.state       :1941][INFO    ][4655] Completed state [python-cinder] at time 23:00:40.348741 duration_in_ms=5.717
2018-09-01 23:00:40,348 [salt.state       :1770][INFO    ][4655] Running state [gettext-base] at time 23:00:40.348954
2018-09-01 23:00:40,349 [salt.state       :1803][INFO    ][4655] Executing state pkg.installed for [gettext-base]
2018-09-01 23:00:40,354 [salt.state       :290 ][INFO    ][4655] All specified packages are already installed
2018-09-01 23:00:40,354 [salt.state       :1941][INFO    ][4655] Completed state [gettext-base] at time 23:00:40.354348 duration_in_ms=5.394
2018-09-01 23:00:40,354 [salt.state       :1770][INFO    ][4655] Running state [python-memcache] at time 23:00:40.354551
2018-09-01 23:00:40,354 [salt.state       :1803][INFO    ][4655] Executing state pkg.installed for [python-memcache]
2018-09-01 23:00:40,359 [salt.state       :290 ][INFO    ][4655] All specified packages are already installed
2018-09-01 23:00:40,360 [salt.state       :1941][INFO    ][4655] Completed state [python-memcache] at time 23:00:40.359978 duration_in_ms=5.426
2018-09-01 23:00:40,360 [salt.state       :1770][INFO    ][4655] Running state [python-pycadf] at time 23:00:40.360174
2018-09-01 23:00:40,360 [salt.state       :1803][INFO    ][4655] Executing state pkg.installed for [python-pycadf]
2018-09-01 23:00:40,365 [salt.state       :290 ][INFO    ][4655] All specified packages are already installed
2018-09-01 23:00:40,365 [salt.state       :1941][INFO    ][4655] Completed state [python-pycadf] at time 23:00:40.365654 duration_in_ms=5.48
2018-09-01 23:00:40,366 [salt.state       :1770][INFO    ][4655] Running state [/etc/cinder/cinder.conf] at time 23:00:40.366035
2018-09-01 23:00:40,366 [salt.state       :1803][INFO    ][4655] Executing state file.managed for [/etc/cinder/cinder.conf]
2018-09-01 23:00:40,594 [salt.state       :290 ][INFO    ][4655] File /etc/cinder/cinder.conf is in the correct state
2018-09-01 23:00:40,595 [salt.state       :1941][INFO    ][4655] Completed state [/etc/cinder/cinder.conf] at time 23:00:40.595053 duration_in_ms=229.018
2018-09-01 23:00:40,595 [salt.state       :1770][INFO    ][4655] Running state [/etc/cinder/api-paste.ini] at time 23:00:40.595495
2018-09-01 23:00:40,595 [salt.state       :1803][INFO    ][4655] Executing state file.managed for [/etc/cinder/api-paste.ini]
2018-09-01 23:00:40,644 [salt.state       :290 ][INFO    ][4655] File /etc/cinder/api-paste.ini is in the correct state
2018-09-01 23:00:40,644 [salt.state       :1941][INFO    ][4655] Completed state [/etc/cinder/api-paste.ini] at time 23:00:40.644759 duration_in_ms=49.265
2018-09-01 23:00:40,645 [salt.state       :1770][INFO    ][4655] Running state [cinder-manage db sync; sleep 5;] at time 23:00:40.645296
2018-09-01 23:00:40,645 [salt.state       :1803][INFO    ][4655] Executing state cmd.run for [cinder-manage db sync; sleep 5;]
2018-09-01 23:00:40,645 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4655] Executing command 'cinder-manage db sync; sleep 5;' in directory '/root'
2018-09-01 23:00:46,923 [salt.state       :290 ][INFO    ][4655] {'pid': 4721, 'retcode': 0, 'stderr': '', 'stdout': ''}
2018-09-01 23:00:46,924 [salt.state       :1941][INFO    ][4655] Completed state [cinder-manage db sync; sleep 5;] at time 23:00:46.924514 duration_in_ms=6279.216
2018-09-01 23:00:46,926 [salt.state       :1770][INFO    ][4655] Running state [/etc/default/cinder-scheduler] at time 23:00:46.926730
2018-09-01 23:00:46,927 [salt.state       :1803][INFO    ][4655] Executing state file.managed for [/etc/default/cinder-scheduler]
2018-09-01 23:00:46,951 [salt.state       :290 ][INFO    ][4655] File /etc/default/cinder-scheduler is in the correct state
2018-09-01 23:00:46,951 [salt.state       :1941][INFO    ][4655] Completed state [/etc/default/cinder-scheduler] at time 23:00:46.951434 duration_in_ms=24.705
2018-09-01 23:00:46,951 [salt.state       :1770][INFO    ][4655] Running state [/etc/apache2/conf-available/cinder-wsgi.conf] at time 23:00:46.951904
2018-09-01 23:00:46,952 [salt.state       :1803][INFO    ][4655] Executing state file.managed for [/etc/apache2/conf-available/cinder-wsgi.conf]
2018-09-01 23:00:46,953 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901230046943491
2018-09-01 23:00:46,977 [salt.minion      :1431][INFO    ][4735] Starting a new job with PID 4735
2018-09-01 23:00:46,995 [salt.minion      :1708][INFO    ][4735] Returning information for job: 20180901230046943491
2018-09-01 23:00:47,006 [salt.state       :290 ][INFO    ][4655] File /etc/apache2/conf-available/cinder-wsgi.conf is in the correct state
2018-09-01 23:00:47,007 [salt.state       :1941][INFO    ][4655] Completed state [/etc/apache2/conf-available/cinder-wsgi.conf] at time 23:00:47.007236 duration_in_ms=55.332
2018-09-01 23:00:47,008 [salt.state       :1770][INFO    ][4655] Running state [cinder-wsgi] at time 23:00:47.008535
2018-09-01 23:00:47,008 [salt.state       :1803][INFO    ][4655] Executing state apache_conf.enabled for [cinder-wsgi]
2018-09-01 23:00:47,009 [salt.state       :290 ][INFO    ][4655] cinder-wsgi already enabled.
2018-09-01 23:00:47,009 [salt.state       :1941][INFO    ][4655] Completed state [cinder-wsgi] at time 23:00:47.009329 duration_in_ms=0.794
2018-09-01 23:00:47,009 [salt.state       :1770][INFO    ][4655] Running state [cinder-api] at time 23:00:47.009738
2018-09-01 23:00:47,009 [salt.state       :1803][INFO    ][4655] Executing state service.dead for [cinder-api]
2018-09-01 23:00:47,010 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4655] Executing command ['systemctl', 'status', 'cinder-api.service', '-n', '0'] in directory '/root'
2018-09-01 23:00:47,037 [salt.state       :290 ][INFO    ][4655] The named service cinder-api is not available
2018-09-01 23:00:47,038 [salt.state       :1941][INFO    ][4655] Completed state [cinder-api] at time 23:00:47.038270 duration_in_ms=28.532
2018-09-01 23:00:47,041 [salt.state       :1770][INFO    ][4655] Running state [apache2] at time 23:00:47.041052
2018-09-01 23:00:47,041 [salt.state       :1803][INFO    ][4655] Executing state service.running for [apache2]
2018-09-01 23:00:47,042 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4655] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-09-01 23:00:47,070 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4655] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-09-01 23:00:47,101 [salt.state       :290 ][INFO    ][4655] The service apache2 is already running
2018-09-01 23:00:47,102 [salt.state       :1941][INFO    ][4655] Completed state [apache2] at time 23:00:47.102556 duration_in_ms=61.502
2018-09-01 23:00:47,105 [salt.state       :1770][INFO    ][4655] Running state [cinder-scheduler] at time 23:00:47.105917
2018-09-01 23:00:47,106 [salt.state       :1803][INFO    ][4655] Executing state service.running for [cinder-scheduler]
2018-09-01 23:00:47,107 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4655] Executing command ['systemctl', 'status', 'cinder-scheduler.service', '-n', '0'] in directory '/root'
2018-09-01 23:00:47,135 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4655] Executing command ['systemctl', 'is-active', 'cinder-scheduler.service'] in directory '/root'
2018-09-01 23:00:47,162 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4655] Executing command ['systemctl', 'is-enabled', 'cinder-scheduler.service'] in directory '/root'
2018-09-01 23:00:47,190 [salt.state       :290 ][INFO    ][4655] The service cinder-scheduler is already running
2018-09-01 23:00:47,191 [salt.state       :1941][INFO    ][4655] Completed state [cinder-scheduler] at time 23:00:47.191740 duration_in_ms=85.822
2018-09-01 23:00:47,198 [salt.state       :1770][INFO    ][4655] Running state [lvm-driver] at time 23:00:47.198023
2018-09-01 23:00:47,198 [salt.state       :1803][INFO    ][4655] Executing state cinderng.volume_type_present for [lvm-driver]
2018-09-01 23:00:48,714 [salt.state       :290 ][INFO    ][4655] Volume type "lvm-driver" already exists
2018-09-01 23:00:48,715 [salt.state       :1941][INFO    ][4655] Completed state [lvm-driver] at time 23:00:48.714896 duration_in_ms=1516.873
2018-09-01 23:00:48,716 [salt.state       :1770][INFO    ][4655] Running state [lvm-driver] at time 23:00:48.716556
2018-09-01 23:00:48,717 [salt.state       :1803][INFO    ][4655] Executing state cinderng.volume_type_key_present for [lvm-driver]
2018-09-01 23:00:51,807 [salt.state       :290 ][INFO    ][4655] Volume type keys "{u'volume_backend_name': u'lvm-driver'}" in volume type "lvm-driver" already exist
2018-09-01 23:00:51,808 [salt.state       :1941][INFO    ][4655] Completed state [lvm-driver] at time 23:00:51.808370 duration_in_ms=3091.814
2018-09-01 23:00:51,813 [salt.minion      :1708][INFO    ][4655] Returning information for job: 20180901230031586326
2018-09-01 23:00:53,496 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command test.ping with jid 20180901230053487324
2018-09-01 23:00:53,521 [salt.minion      :1431][INFO    ][4752] Starting a new job with PID 4752
2018-09-01 23:00:53,544 [salt.minion      :1708][INFO    ][4752] Returning information for job: 20180901230053487324
2018-09-01 23:00:53,670 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command state.sls with jid 20180901230053661240
2018-09-01 23:00:53,694 [salt.minion      :1431][INFO    ][4757] Starting a new job with PID 4757
2018-09-01 23:00:57,621 [salt.state       :905 ][INFO    ][4757] Loading fresh modules for state activity
2018-09-01 23:00:57,665 [salt.fileclient  :1215][INFO    ][4757] Fetching file from saltenv 'base', ** done ** 'neutron/init.sls'
2018-09-01 23:00:57,700 [salt.fileclient  :1215][INFO    ][4757] Fetching file from saltenv 'base', ** done ** 'neutron/server.sls'
2018-09-01 23:00:57,807 [salt.fileclient  :1215][INFO    ][4757] Fetching file from saltenv 'base', ** done ** 'neutron/db/offline_sync.sls'
2018-09-01 23:00:57,868 [salt.fileclient  :1215][INFO    ][4757] Fetching file from saltenv 'base', ** done ** 'neutron/db/plugins/midonet.sls'
2018-09-01 23:00:57,926 [salt.fileclient  :1215][INFO    ][4757] Fetching file from saltenv 'base', ** done ** 'neutron/db/plugins/service/bgpvpn.sls'
2018-09-01 23:00:58,003 [salt.fileclient  :1215][INFO    ][4757] Fetching file from saltenv 'base', ** done ** 'neutron/fwaas.sls'
2018-09-01 23:00:58,771 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901230058759432
2018-09-01 23:00:58,792 [salt.minion      :1431][INFO    ][4779] Starting a new job with PID 4779
2018-09-01 23:00:58,805 [salt.minion      :1708][INFO    ][4779] Returning information for job: 20180901230058759432
2018-09-01 23:00:59,150 [salt.state       :1770][INFO    ][4757] Running state [/usr/sbin/policy-rc.d] at time 23:00:59.150278
2018-09-01 23:00:59,150 [salt.state       :1803][INFO    ][4757] Executing state file.managed for [/usr/sbin/policy-rc.d]
2018-09-01 23:00:59,160 [salt.state       :290 ][INFO    ][4757] File changed:
New file
2018-09-01 23:00:59,160 [salt.state       :1941][INFO    ][4757] Completed state [/usr/sbin/policy-rc.d] at time 23:00:59.160631 duration_in_ms=10.353
2018-09-01 23:00:59,161 [salt.state       :1770][INFO    ][4757] Running state [neutron-server] at time 23:00:59.161023
2018-09-01 23:00:59,161 [salt.state       :1803][INFO    ][4757] Executing state pkg.installed for [neutron-server]
2018-09-01 23:00:59,161 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4757] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 23:00:59,541 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4757] Executing command ['apt-cache', '-q', 'policy', 'neutron-server'] in directory '/root'
2018-09-01 23:00:59,664 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4757] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-09-01 23:01:01,813 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4757] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 23:01:01,852 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4757] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'neutron-server'] in directory '/root'
2018-09-01 23:01:08,915 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901230108904644
2018-09-01 23:01:08,941 [salt.minion      :1431][INFO    ][5281] Starting a new job with PID 5281
2018-09-01 23:01:08,961 [salt.minion      :1708][INFO    ][5281] Returning information for job: 20180901230108904644
2018-09-01 23:01:19,083 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901230119075451
2018-09-01 23:01:19,104 [salt.minion      :1431][INFO    ][5725] Starting a new job with PID 5725
2018-09-01 23:01:19,123 [salt.minion      :1708][INFO    ][5725] Returning information for job: 20180901230119075451
2018-09-01 23:01:22,735 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4757] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 23:01:22,792 [salt.state       :290 ][INFO    ][4757] Made the following changes:
'python-waitress' changed from 'absent' to '0.8.10-1'
'ipset' changed from 'absent' to '6.29-1'
'neutron-server' changed from 'absent' to '2:12.0.3-4~u16.04+mcp96'
'python2.7-ryu' changed from 'absent' to '1'
'python-neutron-fwaas' changed from 'absent' to '2:12.0.0-1.0~u16.04+mcp17'
'python-neutron-lib' changed from 'absent' to '1.13.0-1.0~u16.04+mcp1'
'neutron-plugin-ml2' changed from 'absent' to '2:12.0.3-4~u16.04+mcp96'
'libipset3' changed from 'absent' to '6.29-1'
'python-weakrefmethod' changed from 'absent' to '1.0.3-2~u16.04+mcp1'
'python-neutron' changed from 'absent' to '2:12.0.3-4~u16.04+mcp96'
'python-ryu' changed from 'absent' to '4.15-1~u16.04+mcp2'
'python-pecan' changed from 'absent' to '1.1.2-1.1~u16.04+mcp2'
'python-logutils' changed from 'absent' to '0.3.3-5'
'ipset-6.29' changed from 'absent' to '1'
'python-openvswitch' changed from 'absent' to '2.8.0-4~u16.04+mcp1'
'python-tinyrpc' changed from 'absent' to '0.5-1.1~u16.04+mcp2'
'python-webtest' changed from 'absent' to '2.0.28-1.0~u16.04+mcp1'
'neutron-plugin' changed from 'absent' to '1'
'neutron-common' changed from 'absent' to '2:12.0.3-4~u16.04+mcp96'
'python2.7-neutron' changed from 'absent' to '1'
'python-ovsdbapp' changed from 'absent' to '0.9.1-1.0~u16.04+mcp2'
'python2.7-waitress' changed from 'absent' to '1'

2018-09-01 23:01:22,827 [salt.state       :905 ][INFO    ][4757] Loading fresh modules for state activity
2018-09-01 23:01:22,853 [salt.state       :1941][INFO    ][4757] Completed state [neutron-server] at time 23:01:22.853651 duration_in_ms=23692.626
2018-09-01 23:01:22,858 [salt.state       :1770][INFO    ][4757] Running state [python-neutron-lbaas] at time 23:01:22.858426
2018-09-01 23:01:22,858 [salt.state       :1803][INFO    ][4757] Executing state pkg.installed for [python-neutron-lbaas]
2018-09-01 23:01:23,433 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4757] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 23:01:23,463 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4757] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'python-neutron-lbaas'] in directory '/root'
2018-09-01 23:01:27,008 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4757] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 23:01:27,046 [salt.state       :290 ][INFO    ][4757] Made the following changes:
'python-neutron-lbaas' changed from 'absent' to '2:12.0.0-2~u16.04+mcp32'

2018-09-01 23:01:27,069 [salt.state       :905 ][INFO    ][4757] Loading fresh modules for state activity
2018-09-01 23:01:27,091 [salt.state       :1941][INFO    ][4757] Completed state [python-neutron-lbaas] at time 23:01:27.091889 duration_in_ms=4233.462
2018-09-01 23:01:27,098 [salt.state       :1770][INFO    ][4757] Running state [gettext-base] at time 23:01:27.098610
2018-09-01 23:01:27,098 [salt.state       :1803][INFO    ][4757] Executing state pkg.installed for [gettext-base]
2018-09-01 23:01:27,638 [salt.state       :290 ][INFO    ][4757] All specified packages are already installed
2018-09-01 23:01:27,639 [salt.state       :1941][INFO    ][4757] Completed state [gettext-base] at time 23:01:27.639175 duration_in_ms=540.564
2018-09-01 23:01:27,639 [salt.state       :1770][INFO    ][4757] Running state [python-pycadf] at time 23:01:27.639605
2018-09-01 23:01:27,639 [salt.state       :1803][INFO    ][4757] Executing state pkg.installed for [python-pycadf]
2018-09-01 23:01:27,645 [salt.state       :290 ][INFO    ][4757] All specified packages are already installed
2018-09-01 23:01:27,645 [salt.state       :1941][INFO    ][4757] Completed state [python-pycadf] at time 23:01:27.645523 duration_in_ms=5.918
2018-09-01 23:01:27,645 [salt.state       :1770][INFO    ][4757] Running state [neutron-plugin-ml2] at time 23:01:27.645689
2018-09-01 23:01:27,645 [salt.state       :1803][INFO    ][4757] Executing state pkg.installed for [neutron-plugin-ml2]
2018-09-01 23:01:27,650 [salt.state       :290 ][INFO    ][4757] All specified packages are already installed
2018-09-01 23:01:27,650 [salt.state       :1941][INFO    ][4757] Completed state [neutron-plugin-ml2] at time 23:01:27.650939 duration_in_ms=5.251
2018-09-01 23:01:27,652 [salt.state       :1770][INFO    ][4757] Running state [/etc/neutron/plugins/ml2/ml2_conf.ini] at time 23:01:27.652753
2018-09-01 23:01:27,652 [salt.state       :1803][INFO    ][4757] Executing state file.managed for [/etc/neutron/plugins/ml2/ml2_conf.ini]
2018-09-01 23:01:27,681 [salt.fileclient  :1215][INFO    ][4757] Fetching file from saltenv 'base', ** done ** 'neutron/files/queens/ml2_conf.ini'
2018-09-01 23:01:27,776 [salt.state       :290 ][INFO    ][4757] File changed:
--- 
+++ 
@@ -1,118 +1,120 @@
+
 [DEFAULT]
-
 #
 # From oslo.log
 #
 
-# If set to true, the logging level will be set to DEBUG instead of the default
-# INFO level. (boolean value)
+# If set to true, the logging level will be set to DEBUG instead of
+# the default INFO level. (boolean value)
 # Note: This option can be changed without restarting.
 #debug = false
 
-# The name of a logging configuration file. This file is appended to any
-# existing logging configuration files. For details about logging configuration
-# files, see the Python logging module documentation. Note that when logging
-# configuration files are used then all logging configuration is set in the
-# configuration file and other logging configuration options are ignored (for
-# example, logging_context_format_string). (string value)
+# The name of a logging configuration file. This file is appended to
+# any existing logging configuration files. For details about logging
+# configuration files, see the Python logging module documentation.
+# Note that when logging configuration files are used then all logging
+# configuration is set in the configuration file and other logging
+# configuration options are ignored (for example,
+# logging_context_format_string). (string value)
 # Note: This option can be changed without restarting.
 # Deprecated group/name - [DEFAULT]/log_config
-#log_config_append = <None>
 
 # Defines the format string for %%(asctime)s in log records. Default:
-# %(default)s . This option is ignored if log_config_append is set. (string
-# value)
+# %(default)s . This option is ignored if log_config_append is set.
+# (string value)
 #log_date_format = %Y-%m-%d %H:%M:%S
 
-# (Optional) Name of log file to send logging output to. If no default is set,
-# logging will go to stderr as defined by use_stderr. This option is ignored if
-# log_config_append is set. (string value)
+# (Optional) Name of log file to send logging output to. If no default
+# is set, logging will go to stderr as defined by use_stderr. This
+# option is ignored if log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logfile
 #log_file = <None>
 
-# (Optional) The base directory used for relative log_file  paths. This option
-# is ignored if log_config_append is set. (string value)
+# (Optional) The base directory used for relative log_file  paths.
+# This option is ignored if log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logdir
 #log_dir = <None>
 
-# Uses logging handler designed to watch file system. When log file is moved or
-# removed this handler will open a new log file with specified path
-# instantaneously. It makes sense only if log_file option is specified and
-# Linux platform is used. This option is ignored if log_config_append is set.
+# Uses logging handler designed to watch file system. When log file is
+# moved or removed this handler will open a new log file with
+# specified path instantaneously. It makes sense only if log_file
+# option is specified and Linux platform is used. This option is
+# ignored if log_config_append is set. (boolean value)
+#watch_log_file = false
+
+# Use syslog for logging. Existing syslog format is DEPRECATED and
+# will be changed later to honor RFC5424. This option is ignored if
+# log_config_append is set. (boolean value)
+#use_syslog = false
+
+# Enable journald for logging. If running in a systemd environment you
+# may wish to enable journal support. Doing so will use the journal
+# native protocol which includes structured metadata in addition to
+# log messages.This option is ignored if log_config_append is set.
 # (boolean value)
-#watch_log_file = false
-
-# Use syslog for logging. Existing syslog format is DEPRECATED and will be
-# changed later to honor RFC5424. This option is ignored if log_config_append
-# is set. (boolean value)
-#use_syslog = false
-
-# Enable journald for logging. If running in a systemd environment you may wish
-# to enable journal support. Doing so will use the journal native protocol
-# which includes structured metadata in addition to log messages.This option is
-# ignored if log_config_append is set. (boolean value)
 #use_journal = false
 
 # Syslog facility to receive log lines. This option is ignored if
 # log_config_append is set. (string value)
 #syslog_log_facility = LOG_USER
 
-# Use JSON formatting for logging. This option is ignored if log_config_append
-# is set. (boolean value)
+# Use JSON formatting for logging. This option is ignored if
+# log_config_append is set. (boolean value)
 #use_json = false
 
-# Log output to standard error. This option is ignored if log_config_append is
-# set. (boolean value)
+# Log output to standard error. This option is ignored if
+# log_config_append is set. (boolean value)
 #use_stderr = false
 
 # Format string to use for log messages with context. (string value)
 #logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
 
-# Format string to use for log messages when context is undefined. (string
+# Format string to use for log messages when context is undefined.
+# (string value)
+#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
+
+# Additional data to append to log message when logging level for the
+# message is DEBUG. (string value)
+#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
+
+# Prefix each line of exception output with this format. (string
 # value)
-#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
-
-# Additional data to append to log message when logging level for the message
-# is DEBUG. (string value)
-#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
-
-# Prefix each line of exception output with this format. (string value)
 #logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
 
 # Defines the format string for %(user_identity)s that is used in
 # logging_context_format_string. (string value)
 #logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
 
-# List of package logging levels in logger=LEVEL pairs. This option is ignored
-# if log_config_append is set. (list value)
+# List of package logging levels in logger=LEVEL pairs. This option is
+# ignored if log_config_append is set. (list value)
 #default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
 
 # Enables or disables publication of error events. (boolean value)
 #publish_errors = false
 
-# The format for an instance that is passed with the log message. (string
-# value)
+# The format for an instance that is passed with the log message.
+# (string value)
 #instance_format = "[instance: %(uuid)s] "
 
-# The format for an instance UUID that is passed with the log message. (string
-# value)
+# The format for an instance UUID that is passed with the log message.
+# (string value)
 #instance_uuid_format = "[instance: %(uuid)s] "
 
 # Interval, number of seconds, of log rate limiting. (integer value)
 #rate_limit_interval = 0
 
-# Maximum number of logged messages per rate_limit_interval. (integer value)
+# Maximum number of logged messages per rate_limit_interval. (integer
+# value)
 #rate_limit_burst = 0
 
-# Log level name used by rate limiting: CRITICAL, ERROR, INFO, WARNING, DEBUG
-# or empty string. Logs with level greater or equal to rate_limit_except_level
-# are not filtered. An empty string means that all levels are filtered. (string
-# value)
+# Log level name used by rate limiting: CRITICAL, ERROR, INFO,
+# WARNING, DEBUG or empty string. Logs with level greater or equal to
+# rate_limit_except_level are not filtered. An empty string means that
+# all levels are filtered. (string value)
 #rate_limit_except_level = CRITICAL
 
 # Enables or disables fatal status of deprecations. (boolean value)
 #fatal_deprecations = false
-
 
 [l2pop]
 
@@ -139,27 +141,35 @@
 # value 'local' is useful for single-box testing but provides no connectivity
 # between hosts. (list value)
 #tenant_network_types = local
+tenant_network_types = flat,vxlan
 
 # An ordered list of networking mechanism driver entrypoints to be loaded from
 # the neutron.ml2.mechanism_drivers namespace. (list value)
 #mechanism_drivers =
+mechanism_drivers = openvswitch,l2population
 
 # An ordered list of extension driver entrypoints to be loaded from the
 # neutron.ml2.extension_drivers namespace. For example: extension_drivers =
 # port_security,qos (list value)
 #extension_drivers =
+
+
+extension_drivers=port_security
 
 # Maximum size of an IP packet (MTU) that can traverse the underlying physical
 # network infrastructure without fragmentation when using an overlay/tunnel
 # protocol. This option allows specifying a physical network MTU value that
 # differs from the default global_physnet_mtu value. (integer value)
 #path_mtu = 0
+path_mtu = 1500
 
 # A list of mappings of physical networks to MTU values. The format of the
 # mapping is <physnet>:<mtu val>. This mapping allows specifying a physical
 # network MTU value that differs from the default global_physnet_mtu value.
 # (list value)
 #physical_network_mtus =
+
+physical_network_mtus = physnet1:1500
 
 # Default network type for external networks when no provider attributes are
 # specified. By default it is None, which means that if provider attributes are
@@ -185,6 +195,8 @@
 # an empty list to disable flat networks. (list value)
 #flat_networks = *
 
+flat_networks = *
+
 
 [ml2_type_geneve]
 
@@ -195,6 +207,7 @@
 # Comma-separated list of <vni_min>:<vni_max> tuples enumerating ranges of
 # Geneve VNI IDs that are available for tenant network allocation (list value)
 #vni_ranges =
+vni_ranges = 1:65536
 
 # Geneve encapsulation header size is dynamic, this value is used to calculate
 # the maximum MTU for the driver. This is the sum of the sizes of the outer ETH
@@ -202,6 +215,7 @@
 # which is the size of the Geneve header without any additional option headers.
 # (integer value)
 #max_header_size = 30
+max_header_size = 38
 
 
 [ml2_type_gre]
@@ -213,6 +227,7 @@
 # Comma-separated list of <tun_min>:<tun_max> tuples enumerating ranges of GRE
 # tunnel IDs that are available for tenant network allocation (list value)
 #tunnel_id_ranges =
+tunnel_id_ranges =2:65535
 
 
 [ml2_type_vlan]
@@ -227,6 +242,7 @@
 # tenant networks. (list value)
 #network_vlan_ranges =
 
+network_vlan_ranges = 
 
 [ml2_type_vxlan]
 
@@ -237,11 +253,13 @@
 # Comma-separated list of <vni_min>:<vni_max> tuples enumerating ranges of
 # VXLAN VNI IDs that are available for tenant network allocation (list value)
 #vni_ranges =
+vni_ranges = 2:65535
 
 # Multicast group for VXLAN. When configured, will enable sending all broadcast
 # traffic to this multicast group. When left unconfigured, will disable
 # multicast VXLAN mode. (string value)
 #vxlan_group = <None>
+vxlan_group = 224.0.0.1
 
 
 [securitygroup]
@@ -252,11 +270,13 @@
 
 # Driver for security groups firewall in the L2 agent (string value)
 #firewall_driver = <None>
+firewall_driver = openvswitch
 
 # Controls whether the neutron security group API is enabled in the server. It
 # should be false when using no security groups or using the nova security
 # group API. (boolean value)
 #enable_security_group = true
+enable_security_group = True
 
 # Use ipset to speed-up the iptables based security groups. Enabling ipset
 # support requires that ipset is installed on L2 agent node. (boolean value)

2018-09-01 23:01:27,777 [salt.state       :1941][INFO    ][4757] Completed state [/etc/neutron/plugins/ml2/ml2_conf.ini] at time 23:01:27.777196 duration_in_ms=124.442
2018-09-01 23:01:27,777 [salt.state       :1770][INFO    ][4757] Running state [/etc/neutron/neutron.conf] at time 23:01:27.777549
2018-09-01 23:01:27,777 [salt.state       :1803][INFO    ][4757] Executing state file.managed for [/etc/neutron/neutron.conf]
2018-09-01 23:01:27,795 [salt.fileclient  :1215][INFO    ][4757] Fetching file from saltenv 'base', ** done ** 'neutron/files/queens/neutron-server.conf'
2018-09-01 23:01:27,921 [salt.fileclient  :1215][INFO    ][4757] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/queens/oslo/service/_wsgi_default.conf'
2018-09-01 23:01:28,001 [salt.fileclient  :1215][INFO    ][4757] Fetching file from saltenv 'base', ** done ** 'oslo_templates/files/queens/oslo/_concurrency.conf'
2018-09-01 23:01:28,056 [salt.fileclient  :1215][INFO    ][4757] Fetching file from saltenv 'base', ** done ** 'neutron/files/queens/bgpvpn.conf'
2018-09-01 23:01:28,074 [salt.state       :290 ][INFO    ][4757] File changed:
--- 
+++ 
@@ -1,5 +1,5 @@
+
 [DEFAULT]
-core_plugin = ml2
 
 #
 # From neutron
@@ -8,14 +8,17 @@
 # Where to store Neutron state files. This directory must be writable by the
 # agent. (string value)
 #state_path = /var/lib/neutron
+state_path = /var/lib/neutron
 
 # The host IP to bind to. (unknown value)
 #bind_host = 0.0.0.0
+bind_host = 10.167.4.37
 
 # The port to bind to (port value)
 # Minimum value: 0
 # Maximum value: 65535
 #bind_port = 9696
+bind_port = 9696
 
 # The path for API extensions. Note that this can be a colon-separated list of
 # paths. For example: api_extensions_path =
@@ -26,9 +29,17 @@
 
 # The type of authentication to use (string value)
 #auth_strategy = keystone
-
-# The core plugin Neutron will use (string value)
-#core_plugin = <None>
+auth_strategy = keystone
+
+
+
+core_plugin = neutron.plugins.ml2.plugin.Ml2Plugin
+
+
+
+
+
+service_plugins = neutron.services.l3_router.l3_router_plugin.L3RouterPlugin,metering,trunk
 
 # The service plugins Neutron will use (list value)
 #service_plugins =
@@ -44,6 +55,7 @@
 # The maximum number of items returned in a single response, value was
 # 'infinite' or negative integer means no limit (string value)
 #pagination_max_limit = -1
+pagination_max_limit = -1
 
 # Default value of availability zone hints. The availability zone aware
 # schedulers use this when the resources availability_zone_hints is empty.
@@ -70,9 +82,11 @@
 # DHCP lease duration (in seconds). Use -1 to tell dnsmasq to use infinite
 # lease times. (integer value)
 #dhcp_lease_duration = 86400
+dhcp_lease_duration = 600
 
 # Domain to use for building the hostnames (string value)
 #dns_domain = openstacklocal
+dns_domain = novalocal
 
 # Driver for external DNS integration. (string value)
 #external_dns_driver = <None>
@@ -84,6 +98,7 @@
 # MUST be set to False if Neutron is being used in conjunction with Nova
 # security groups. (boolean value)
 #allow_overlapping_ips = false
+allow_overlapping_ips = True
 
 # Hostname to be used by the Neutron server, agents and services running on
 # this machine. All the agents and services running on this machine must use
@@ -97,10 +112,12 @@
 
 # Send notification to nova when port status changes (boolean value)
 #notify_nova_on_port_status_changes = true
+notify_nova_on_port_status_changes = true
 
 # Send notification to nova when port data (fixed_ips/floatingip) changes so
 # nova can update its cache. (boolean value)
 #notify_nova_on_port_data_changes = true
+notify_nova_on_port_data_changes = true
 
 # Number of seconds between sending events to nova if there are any events to
 # send. (integer value)
@@ -121,6 +138,7 @@
 # value. Defaults to 1500, the standard value for Ethernet. (integer value)
 # Deprecated group/name - [ml2]/segment_mtu
 #global_physnet_mtu = 1500
+global_physnet_mtu = 1500
 
 # Number of backlog requests to configure the socket with (integer value)
 #backlog = 4096
@@ -141,10 +159,13 @@
 
 # Number of RPC worker processes for service. (integer value)
 #rpc_workers = 1
+rpc_workers = 4
+
 
 # Number of RPC worker processes dedicated to state reports queue. (integer
 # value)
 #rpc_state_report_workers = 1
+rpc_state_report_workers = 4
 
 # Range of seconds to randomly delay when starting the periodic task scheduler
 # to reduce stampeding. (Disable by setting to 0) (integer value)
@@ -218,6 +239,7 @@
 # a given tenant network, providing high availability for DHCP service.
 # (integer value)
 #dhcp_agents_per_network = 1
+dhcp_agents_per_network = 2
 
 # Enable services on an agent with admin_state_up False. If this option is
 # False, when admin_state_up of an agent is turned False, services on it will
@@ -237,13 +259,16 @@
 # System-wide flag to determine the type of router that tenants can create.
 # Only admin can override. (boolean value)
 #router_distributed = false
+router_distributed = False
 
 # Determine if setup is configured for DVR. If False, DVR API extension will be
 # disabled. (boolean value)
 #enable_dvr = true
+enable_dvr = False
 
 # Driver to use for scheduling router to a default L3 agent (string value)
 #router_scheduler_driver = neutron.scheduler.l3_agent_scheduler.LeastRoutersScheduler
+router_scheduler_driver = neutron.scheduler.l3_agent_scheduler.ChanceScheduler
 
 # Allow auto scheduling of routers to L3 agent. (boolean value)
 #router_auto_schedule = true
@@ -251,13 +276,16 @@
 # Automatically reschedule routers from offline L3 agents to online L3 agents.
 # (boolean value)
 #allow_automatic_l3agent_failover = false
+allow_automatic_l3agent_failover = true
 
 # Enable HA mode for virtual routers. (boolean value)
 #l3_ha = false
+l3_ha = False
 
 # Maximum number of L3 agents which a HA router will be scheduled on. If it is
 # set to 0 then the router will be scheduled on every agent. (integer value)
 #max_l3_agents_per_router = 3
+max_l3_agents_per_router = 0
 
 # Subnet used for the l3 HA admin network. (string value)
 #l3_ha_net_cidr = 169.254.192.0/18
@@ -278,120 +306,121 @@
 
 # Maximum number of allowed address pairs (integer value)
 #max_allowed_address_pair = 10
-
 #
 # From oslo.log
 #
 
-# If set to true, the logging level will be set to DEBUG instead of the default
-# INFO level. (boolean value)
+# If set to true, the logging level will be set to DEBUG instead of
+# the default INFO level. (boolean value)
 # Note: This option can be changed without restarting.
 #debug = false
 
-# The name of a logging configuration file. This file is appended to any
-# existing logging configuration files. For details about logging configuration
-# files, see the Python logging module documentation. Note that when logging
-# configuration files are used then all logging configuration is set in the
-# configuration file and other logging configuration options are ignored (for
-# example, logging_context_format_string). (string value)
+# The name of a logging configuration file. This file is appended to
+# any existing logging configuration files. For details about logging
+# configuration files, see the Python logging module documentation.
+# Note that when logging configuration files are used then all logging
+# configuration is set in the configuration file and other logging
+# configuration options are ignored (for example,
+# logging_context_format_string). (string value)
 # Note: This option can be changed without restarting.
 # Deprecated group/name - [DEFAULT]/log_config
-#log_config_append = <None>
 
 # Defines the format string for %%(asctime)s in log records. Default:
-# %(default)s . This option is ignored if log_config_append is set. (string
-# value)
+# %(default)s . This option is ignored if log_config_append is set.
+# (string value)
 #log_date_format = %Y-%m-%d %H:%M:%S
 
-# (Optional) Name of log file to send logging output to. If no default is set,
-# logging will go to stderr as defined by use_stderr. This option is ignored if
-# log_config_append is set. (string value)
+# (Optional) Name of log file to send logging output to. If no default
+# is set, logging will go to stderr as defined by use_stderr. This
+# option is ignored if log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logfile
 #log_file = <None>
 
-# (Optional) The base directory used for relative log_file  paths. This option
-# is ignored if log_config_append is set. (string value)
+# (Optional) The base directory used for relative log_file  paths.
+# This option is ignored if log_config_append is set. (string value)
 # Deprecated group/name - [DEFAULT]/logdir
 #log_dir = <None>
 
-# Uses logging handler designed to watch file system. When log file is moved or
-# removed this handler will open a new log file with specified path
-# instantaneously. It makes sense only if log_file option is specified and
-# Linux platform is used. This option is ignored if log_config_append is set.
+# Uses logging handler designed to watch file system. When log file is
+# moved or removed this handler will open a new log file with
+# specified path instantaneously. It makes sense only if log_file
+# option is specified and Linux platform is used. This option is
+# ignored if log_config_append is set. (boolean value)
+#watch_log_file = false
+
+# Use syslog for logging. Existing syslog format is DEPRECATED and
+# will be changed later to honor RFC5424. This option is ignored if
+# log_config_append is set. (boolean value)
+#use_syslog = false
+
+# Enable journald for logging. If running in a systemd environment you
+# may wish to enable journal support. Doing so will use the journal
+# native protocol which includes structured metadata in addition to
+# log messages.This option is ignored if log_config_append is set.
 # (boolean value)
-#watch_log_file = false
-
-# Use syslog for logging. Existing syslog format is DEPRECATED and will be
-# changed later to honor RFC5424. This option is ignored if log_config_append
-# is set. (boolean value)
-#use_syslog = false
-
-# Enable journald for logging. If running in a systemd environment you may wish
-# to enable journal support. Doing so will use the journal native protocol
-# which includes structured metadata in addition to log messages.This option is
-# ignored if log_config_append is set. (boolean value)
 #use_journal = false
 
 # Syslog facility to receive log lines. This option is ignored if
 # log_config_append is set. (string value)
 #syslog_log_facility = LOG_USER
 
-# Use JSON formatting for logging. This option is ignored if log_config_append
-# is set. (boolean value)
+# Use JSON formatting for logging. This option is ignored if
+# log_config_append is set. (boolean value)
 #use_json = false
 
-# Log output to standard error. This option is ignored if log_config_append is
-# set. (boolean value)
+# Log output to standard error. This option is ignored if
+# log_config_append is set. (boolean value)
 #use_stderr = false
 
 # Format string to use for log messages with context. (string value)
 #logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
 
-# Format string to use for log messages when context is undefined. (string
-# value)
+# Format string to use for log messages when context is undefined.
+# (string value)
 #logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
 
-# Additional data to append to log message when logging level for the message
-# is DEBUG. (string value)
+# Additional data to append to log message when logging level for the
+# message is DEBUG. (string value)
 #logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
 
-# Prefix each line of exception output with this format. (string value)
+# Prefix each line of exception output with this format. (string
+# value)
 #logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
 
 # Defines the format string for %(user_identity)s that is used in
 # logging_context_format_string. (string value)
 #logging_user_identity_format = %(user)s %(tenant)s %(domain)s %(user_domain)s %(project_domain)s
 
-# List of package logging levels in logger=LEVEL pairs. This option is ignored
-# if log_config_append is set. (list value)
+# List of package logging levels in logger=LEVEL pairs. This option is
+# ignored if log_config_append is set. (list value)
 #default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,oslo_messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN,taskflow=WARN,keystoneauth=WARN,oslo.cache=INFO,dogpile.core.dogpile=INFO
 
 # Enables or disables publication of error events. (boolean value)
 #publish_errors = false
 
-# The format for an instance that is passed with the log message. (string
-# value)
+# The format for an instance that is passed with the log message.
+# (string value)
 #instance_format = "[instance: %(uuid)s] "
 
-# The format for an instance UUID that is passed with the log message. (string
-# value)
+# The format for an instance UUID that is passed with the log message.
+# (string value)
 #instance_uuid_format = "[instance: %(uuid)s] "
 
 # Interval, number of seconds, of log rate limiting. (integer value)
 #rate_limit_interval = 0
 
-# Maximum number of logged messages per rate_limit_interval. (integer value)
+# Maximum number of logged messages per rate_limit_interval. (integer
+# value)
 #rate_limit_burst = 0
 
-# Log level name used by rate limiting: CRITICAL, ERROR, INFO, WARNING, DEBUG
-# or empty string. Logs with level greater or equal to rate_limit_except_level
-# are not filtered. An empty string means that all levels are filtered. (string
-# value)
+# Log level name used by rate limiting: CRITICAL, ERROR, INFO,
+# WARNING, DEBUG or empty string. Logs with level greater or equal to
+# rate_limit_except_level are not filtered. An empty string means that
+# all levels are filtered. (string value)
 #rate_limit_except_level = CRITICAL
 
 # Enables or disables fatal status of deprecations. (boolean value)
 #fatal_deprecations = false
-
 #
 # From oslo.messaging
 #
@@ -399,14 +428,17 @@
 # Size of RPC connection pool. (integer value)
 #rpc_conn_pool_size = 30
 
-# The pool size limit for connections expiration policy (integer value)
+# The pool size limit for connections expiration policy (integer
+# value)
 #conn_pool_min_size = 2
 
-# The time-to-live in sec of idle connections in the pool (integer value)
+# The time-to-live in sec of idle connections in the pool (integer
+# value)
 #conn_pool_ttl = 1200
 
-# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
-# The "host" option should point or resolve to this address. (string value)
+# ZeroMQ bind address. Should be a wildcard (*), an ethernet
+# interface, or IP. The "host" option should point or resolve to this
+# address. (string value)
 #rpc_zmq_bind_address = *
 
 # MatchMaker driver. (string value)
@@ -419,51 +451,54 @@
 # Number of ZeroMQ contexts, defaults to 1. (integer value)
 #rpc_zmq_contexts = 1
 
-# Maximum number of ingress messages to locally buffer per topic. Default is
-# unlimited. (integer value)
+# Maximum number of ingress messages to locally buffer per topic.
+# Default is unlimited. (integer value)
 #rpc_zmq_topic_backlog = <None>
 
 # Directory for holding IPC sockets. (string value)
 #rpc_zmq_ipc_dir = /var/run/openstack
 
-# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
-# "host" option, if running Nova. (string value)
+# Name of this node. Must be a valid hostname, FQDN, or IP address.
+# Must match "host" option, if running Nova. (string value)
 #rpc_zmq_host = localhost
 
-# Number of seconds to wait before all pending messages will be sent after
-# closing a socket. The default value of -1 specifies an infinite linger
-# period. The value of 0 specifies no linger period. Pending messages shall be
-# discarded immediately when the socket is closed. Positive values specify an
-# upper bound for the linger period. (integer value)
+# Number of seconds to wait before all pending messages will be sent
+# after closing a socket. The default value of -1 specifies an
+# infinite linger period. The value of 0 specifies no linger period.
+# Pending messages shall be discarded immediately when the socket is
+# closed. Positive values specify an upper bound for the linger
+# period. (integer value)
 # Deprecated group/name - [DEFAULT]/rpc_cast_timeout
 #zmq_linger = -1
 
-# The default number of seconds that poll should wait. Poll raises timeout
-# exception when timeout expired. (integer value)
+# The default number of seconds that poll should wait. Poll raises
+# timeout exception when timeout expired. (integer value)
 #rpc_poll_timeout = 1
 
-# Expiration timeout in seconds of a name service record about existing target
-# ( < 0 means no timeout). (integer value)
+# Expiration timeout in seconds of a name service record about
+# existing target ( < 0 means no timeout). (integer value)
 #zmq_target_expire = 300
 
-# Update period in seconds of a name service record about existing target.
-# (integer value)
+# Update period in seconds of a name service record about existing
+# target. (integer value)
 #zmq_target_update = 180
 
-# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
-# value)
+# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy.
+# (boolean value)
 #use_pub_sub = false
 
 # Use ROUTER remote proxy. (boolean value)
 #use_router_proxy = false
 
-# This option makes direct connections dynamic or static. It makes sense only
-# with use_router_proxy=False which means to use direct connections for direct
-# message types (ignored otherwise). (boolean value)
+# This option makes direct connections dynamic or static. It makes
+# sense only with use_router_proxy=False which means to use direct
+# connections for direct message types (ignored otherwise). (boolean
+# value)
 #use_dynamic_connections = false
 
-# How many additional connections to a host will be made for failover reasons.
-# This option is actual only in dynamic connections mode. (integer value)
+# How many additional connections to a host will be made for failover
+# reasons. This option is actual only in dynamic connections mode.
+# (integer value)
 #zmq_failover_connections = 2
 
 # Minimal port number for random ports range. (port value)
@@ -476,8 +511,8 @@
 # Maximum value: 65536
 #rpc_zmq_max_port = 65536
 
-# Number of retries to find free port number before fail with ZMQBindError.
-# (integer value)
+# Number of retries to find free port number before fail with
+# ZMQBindError. (integer value)
 #rpc_zmq_bind_port_retries = 100
 
 # Default serialization mechanism for serializing/deserializing
@@ -487,78 +522,83 @@
 # msgpack - <No description provided>
 #rpc_zmq_serialization = json
 
-# This option configures round-robin mode in zmq socket. True means not keeping
-# a queue when server side disconnects. False means to keep queue and messages
-# even if server is disconnected, when the server appears we send all
-# accumulated messages to it. (boolean value)
+# This option configures round-robin mode in zmq socket. True means
+# not keeping a queue when server side disconnects. False means to
+# keep queue and messages even if server is disconnected, when the
+# server appears we send all accumulated messages to it. (boolean
+# value)
 #zmq_immediate = true
 
-# Enable/disable TCP keepalive (KA) mechanism. The default value of -1 (or any
-# other negative value) means to skip any overrides and leave it to OS default;
-# 0 and 1 (or any other positive value) mean to disable and enable the option
-# respectively. (integer value)
+# Enable/disable TCP keepalive (KA) mechanism. The default value of -1
+# (or any other negative value) means to skip any overrides and leave
+# it to OS default; 0 and 1 (or any other positive value) mean to
+# disable and enable the option respectively. (integer value)
 #zmq_tcp_keepalive = -1
 
-# The duration between two keepalive transmissions in idle condition. The unit
-# is platform dependent, for example, seconds in Linux, milliseconds in Windows
-# etc. The default value of -1 (or any other negative value and 0) means to
-# skip any overrides and leave it to OS default. (integer value)
+# The duration between two keepalive transmissions in idle condition.
+# The unit is platform dependent, for example, seconds in Linux,
+# milliseconds in Windows etc. The default value of -1 (or any other
+# negative value and 0) means to skip any overrides and leave it to OS
+# default. (integer value)
 #zmq_tcp_keepalive_idle = -1
 
-# The number of retransmissions to be carried out before declaring that remote
-# end is not available. The default value of -1 (or any other negative value
-# and 0) means to skip any overrides and leave it to OS default. (integer
-# value)
+# The number of retransmissions to be carried out before declaring
+# that remote end is not available. The default value of -1 (or any
+# other negative value and 0) means to skip any overrides and leave it
+# to OS default. (integer value)
 #zmq_tcp_keepalive_cnt = -1
 
 # The duration between two successive keepalive retransmissions, if
-# acknowledgement to the previous keepalive transmission is not received. The
-# unit is platform dependent, for example, seconds in Linux, milliseconds in
-# Windows etc. The default value of -1 (or any other negative value and 0)
-# means to skip any overrides and leave it to OS default. (integer value)
+# acknowledgement to the previous keepalive transmission is not
+# received. The unit is platform dependent, for example, seconds in
+# Linux, milliseconds in Windows etc. The default value of -1 (or any
+# other negative value and 0) means to skip any overrides and leave it
+# to OS default. (integer value)
 #zmq_tcp_keepalive_intvl = -1
 
-# Maximum number of (green) threads to work concurrently. (integer value)
+# Maximum number of (green) threads to work concurrently. (integer
+# value)
 #rpc_thread_pool_size = 100
 
-# Expiration timeout in seconds of a sent/received message after which it is
-# not tracked anymore by a client/server. (integer value)
+# Expiration timeout in seconds of a sent/received message after which
+# it is not tracked anymore by a client/server. (integer value)
 #rpc_message_ttl = 300
 
-# Wait for message acknowledgements from receivers. This mechanism works only
-# via proxy without PUB/SUB. (boolean value)
+# Wait for message acknowledgements from receivers. This mechanism
+# works only via proxy without PUB/SUB. (boolean value)
 #rpc_use_acks = false
 
-# Number of seconds to wait for an ack from a cast/call. After each retry
-# attempt this timeout is multiplied by some specified multiplier. (integer
-# value)
+# Number of seconds to wait for an ack from a cast/call. After each
+# retry attempt this timeout is multiplied by some specified
+# multiplier. (integer value)
 #rpc_ack_timeout_base = 15
 
-# Number to multiply base ack timeout by after each retry attempt. (integer
-# value)
+# Number to multiply base ack timeout by after each retry attempt.
+# (integer value)
 #rpc_ack_timeout_multiplier = 2
 
-# Default number of message sending attempts in case of any problems occurred:
-# positive value N means at most N retries, 0 means no retries, None or -1 (or
-# any other negative values) mean to retry forever. This option is used only if
-# acknowledgments are enabled. (integer value)
+# Default number of message sending attempts in case of any problems
+# occurred: positive value N means at most N retries, 0 means no
+# retries, None or -1 (or any other negative values) mean to retry
+# forever. This option is used only if acknowledgments are enabled.
+# (integer value)
 #rpc_retry_attempts = 3
 
-# List of publisher hosts SubConsumer can subscribe on. This option has higher
-# priority then the default publishers list taken from the matchmaker. (list
-# value)
+# List of publisher hosts SubConsumer can subscribe on. This option
+# has higher priority then the default publishers list taken from the
+# matchmaker. (list value)
 #subscribe_on =
 
-# Size of executor thread pool when executor is threading or eventlet. (integer
-# value)
+# Size of executor thread pool when executor is threading or eventlet.
+# (integer value)
 # Deprecated group/name - [DEFAULT]/rpc_thread_pool_size
 #executor_thread_pool_size = 64
 
 # Seconds to wait for a response from a call. (integer value)
 #rpc_response_timeout = 60
 
-# The network address and optional user credentials for connecting to the
-# messaging backend, in URL format. The expected format is:
+# The network address and optional user credentials for connecting to
+# the messaging backend, in URL format. The expected format is:
 #
 # driver://[user:pass@]host:port[,[userN:passN@]hostN:portN]/virtual_host?query
 #
@@ -569,18 +609,19 @@
 # https://docs.openstack.org/oslo.messaging/latest/reference/transport.html
 # (string value)
 #transport_url = <None>
-
-# DEPRECATED: The messaging driver to use, defaults to rabbit. Other drivers
-# include amqp and zmq. (string value)
+transport_url = rabbit://openstack:opnfv_secret@10.167.4.28:5672,openstack:opnfv_secret@10.167.4.29:5672,openstack:opnfv_secret@10.167.4.30:5672//openstack
+
+# DEPRECATED: The messaging driver to use, defaults to rabbit. Other
+# drivers include amqp and zmq. (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
 #rpc_backend = rabbit
 
-# The default exchange under which topics are scoped. May be overridden by an
-# exchange name specified in the transport_url option. (string value)
-#control_exchange = neutron
-
+# The default exchange under which topics are scoped. May be
+# overridden by an exchange name specified in the transport_url
+# option. (string value)
+#control_exchange = openstack
 #
 # From oslo.service.wsgi
 #
@@ -614,9 +655,10 @@
 # wait forever. (integer value)
 #client_socket_timeout = 900
 
+nova_url = http://10.167.4.35:8774/v2
+
 
 [agent]
-root_helper = "sudo /usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf"
 
 #
 # From neutron.agent
@@ -626,7 +668,8 @@
 # /etc/neutron/rootwrap.conf' to use the real root filter facility. Change to
 # 'sudo' to skip the filtering and just run the command directly. (string
 # value)
-#root_helper = sudo
+#root_helper_daemon = <None>
+root_helper = sudo /usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf
 
 # Use the root helper when listing the namespaces on a system. This may not be
 # required depending on the security configuration. If the root helper is not
@@ -643,6 +686,7 @@
 # agent_down_time, best if it is half or less than agent_down_time. (floating
 # point value)
 #report_interval = 30
+report_interval = 10
 
 # Log agent heartbeats (boolean value)
 #log_agent_heartbeats = false
@@ -674,45 +718,32 @@
 
 
 [cors]
-
-#
-# From oslo.middleware.cors
-#
-
-# Indicate whether this resource may be shared with the domain received in the
-# requests "origin" header. Format: "<protocol>://<host>[:<port>]", no trailing
-# slash. Example: https://horizon.example.com (list value)
-#allowed_origin = <None>
-
-# Indicate that the actual request can include user credentials (boolean value)
-#allow_credentials = true
-
-# Indicate which headers are safe to expose to the API. Defaults to HTTP Simple
-# Headers. (list value)
-#expose_headers = X-Auth-Token,X-Subject-Token,X-Service-Token,X-OpenStack-Request-ID,OpenStack-Volume-microversion
+#
+# From oslo.middleware
+#
+
+# Indicate whether this resource may be shared with the domain
+# received in the requests "origin" header. Format:
+# "<protocol>://<host>[:<port>]", no trailing slash. Example:
+# https://horizon.example.com (list value)
+
+# Indicate that the actual request can include user credentials
+# (boolean value)
+
+# Indicate which headers are safe to expose to the API. Defaults to
+# HTTP Simple Headers. (list value)
 
 # Maximum cache age of CORS preflight requests. (integer value)
-#max_age = 3600
-
-# Indicate which methods can be used during the actual request. (list value)
-#allow_methods = GET,PUT,POST,DELETE,PATCH
-
-# Indicate which header field names may be used during the actual request.
-# (list value)
-#allow_headers = X-Auth-Token,X-Identity-Status,X-Roles,X-Service-Catalog,X-User-Id,X-Tenant-Id,X-OpenStack-Request-ID
+
+# Indicate which methods can be used during the actual request. (list
+# value)
+
+# Indicate which header field names may be used during the actual
+# request. (list value)
+
 
 
 [database]
-connection = sqlite:////var/lib/neutron/neutron.sqlite
-
-#
-# From neutron.db
-#
-
-# Database engine for which script will be generated when using offline
-# migration. (string value)
-#engine =
-
 #
 # From oslo.db
 #
@@ -724,66 +755,73 @@
 # Deprecated group/name - [DEFAULT]/db_backend
 #backend = sqlalchemy
 
-# The SQLAlchemy connection string to use to connect to the database. (string
-# value)
+# The SQLAlchemy connection string to use to connect to the database.
+# (string value)
 # Deprecated group/name - [DEFAULT]/sql_connection
 # Deprecated group/name - [DATABASE]/sql_connection
 # Deprecated group/name - [sql]/connection
 #connection = <None>
-
-# The SQLAlchemy connection string to use to connect to the slave database.
-# (string value)
+connection = mysql+pymysql://neutron:opnfv_secret@10.167.4.23/neutron?charset=utf8
+# The SQLAlchemy connection string to use to connect to the slave
+# database. (string value)
 #slave_connection = <None>
 
-# The SQL mode to be used for MySQL sessions. This option, including the
-# default, overrides any server-set SQL mode. To use whatever SQL mode is set
-# by the server configuration, set this to no value. Example: mysql_sql_mode=
-# (string value)
+# The SQL mode to be used for MySQL sessions. This option, including
+# the default, overrides any server-set SQL mode. To use whatever SQL
+# mode is set by the server configuration, set this to no value.
+# Example: mysql_sql_mode= (string value)
 #mysql_sql_mode = TRADITIONAL
 
-# If True, transparently enables support for handling MySQL Cluster (NDB).
-# (boolean value)
+# If True, transparently enables support for handling MySQL Cluster
+# (NDB). (boolean value)
 #mysql_enable_ndb = false
 
-# Connections which have been present in the connection pool longer than this
-# number of seconds will be replaced with a new one the next time they are
-# checked out from the pool. (integer value)
+# Connections which have been present in the connection pool longer
+# than this number of seconds will be replaced with a new one the next
+# time they are checked out from the pool. (integer value)
 # Deprecated group/name - [DATABASE]/idle_timeout
 # Deprecated group/name - [database]/idle_timeout
 # Deprecated group/name - [DEFAULT]/sql_idle_timeout
 # Deprecated group/name - [DATABASE]/sql_idle_timeout
 # Deprecated group/name - [sql]/idle_timeout
 #connection_recycle_time = 3600
-
-# Minimum number of SQL connections to keep open in a pool. (integer value)
+connection_recycle_time = 300
+
+# Minimum number of SQL connections to keep open in a pool. (integer
+# value)
 # Deprecated group/name - [DEFAULT]/sql_min_pool_size
 # Deprecated group/name - [DATABASE]/sql_min_pool_size
 #min_pool_size = 1
 
-# Maximum number of SQL connections to keep open in a pool. Setting a value of
-# 0 indicates no limit. (integer value)
+# Maximum number of SQL connections to keep open in a pool. Setting a
+# value of 0 indicates no limit. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_max_pool_size
 # Deprecated group/name - [DATABASE]/sql_max_pool_size
 #max_pool_size = 5
-
-# Maximum number of database connection retries during startup. Set to -1 to
-# specify an infinite retry count. (integer value)
+max_pool_size = 10
+
+# Maximum number of database connection retries during startup. Set to
+# -1 to specify an infinite retry count. (integer value)
 # Deprecated group/name - [DEFAULT]/sql_max_retries
 # Deprecated group/name - [DATABASE]/sql_max_retries
 #max_retries = 10
-
-# Interval between retries of opening a SQL connection. (integer value)
+max_retries = -1
+
+# Interval between retries of opening a SQL connection. (integer
+# value)
 # Deprecated group/name - [DEFAULT]/sql_retry_interval
 # Deprecated group/name - [DATABASE]/reconnect_interval
 #retry_interval = 10
 
-# If set, use this value for max_overflow with SQLAlchemy. (integer value)
+# If set, use this value for max_overflow with SQLAlchemy. (integer
+# value)
 # Deprecated group/name - [DEFAULT]/sql_max_overflow
 # Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
 #max_overflow = 50
-
-# Verbosity of SQL debugging information: 0=None, 100=Everything. (integer
-# value)
+max_overflow = 30
+
+# Verbosity of SQL debugging information: 0=None, 100=Everything.
+# (integer value)
 # Minimum value: 0
 # Maximum value: 100
 # Deprecated group/name - [DEFAULT]/sql_connection_debug
@@ -793,32 +831,41 @@
 # Deprecated group/name - [DEFAULT]/sql_connection_trace
 #connection_trace = false
 
-# If set, use this value for pool_timeout with SQLAlchemy. (integer value)
+# If set, use this value for pool_timeout with SQLAlchemy. (integer
+# value)
 # Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
 #pool_timeout = <None>
 
-# Enable the experimental use of database reconnect on connection lost.
-# (boolean value)
+# Enable the experimental use of database reconnect on connection
+# lost. (boolean value)
 #use_db_reconnect = false
 
 # Seconds between retries of a database transaction. (integer value)
 #db_retry_interval = 1
 
-# If True, increases the interval between retries of a database operation up to
-# db_max_retry_interval. (boolean value)
+# If True, increases the interval between retries of a database
+# operation up to db_max_retry_interval. (boolean value)
 #db_inc_retry_interval = true
 
-# If db_inc_retry_interval is set, the maximum seconds between retries of a
-# database operation. (integer value)
+# If db_inc_retry_interval is set, the maximum seconds between retries
+# of a database operation. (integer value)
 #db_max_retry_interval = 10
 
-# Maximum retries in case of connection error or deadlock error before error is
-# raised. Set to -1 to specify an infinite retry count. (integer value)
+# Maximum retries in case of connection error or deadlock error before
+# error is raised. Set to -1 to specify an infinite retry count.
+# (integer value)
 #db_max_retries = 20
 
+#
+# From oslo.db.concurrency
+#
+
+# Enable the experimental use of thread pooling for all DB API calls
+# (boolean value)
+# Deprecated group/name - [DEFAULT]/dbapi_use_tpool
+#use_tpool = false
 
 [keystone_authtoken]
-
 #
 # From keystonemiddleware.auth_token
 #
@@ -833,6 +880,7 @@
 # value)
 # Deprecated group/name - [keystone_authtoken]/auth_uri
 #www_authenticate_uri = <None>
+www_authenticate_uri = http://10.167.4.35:5000
 
 # DEPRECATED: Complete "public" Identity API endpoint. This endpoint should not
 # be an "admin" endpoint, as it should be accessible by all end users.
@@ -848,6 +896,7 @@
 # Reason: The auth_uri option is deprecated in favor of www_authenticate_uri
 # and will be removed in the S  release.
 #auth_uri = <None>
+auth_uri = http://10.167.4.35:5000
 
 # API version of the admin Identity API endpoint. (string value)
 #auth_version = <None>
@@ -885,6 +934,7 @@
 
 # The region in which the identity server can be found. (string value)
 #region_name = <None>
+region_name = RegionOne
 
 # DEPRECATED: Directory used to cache files related to PKI tokens. This option
 # has been deprecated in the Ocata release and will be removed in the P
@@ -1002,108 +1052,18 @@
 # possible. (boolean value)
 #service_token_roles_required = false
 
-# Prefix to prepend at the beginning of the path. Deprecated, use identity_uri.
-# (string value)
-#auth_admin_prefix =
-
-# Host providing the admin Identity API endpoint. Deprecated, use identity_uri.
-# (string value)
-#auth_host = 127.0.0.1
-
-# Port of the admin Identity API endpoint. Deprecated, use identity_uri.
-# (integer value)
-#auth_port = 35357
-
-# Protocol of the admin Identity API endpoint. Deprecated, use identity_uri.
-# (string value)
-# Possible values:
-# http - <No description provided>
-# https - <No description provided>
-#auth_protocol = https
-
-# Complete admin Identity API endpoint. This should specify the unversioned
-# root endpoint e.g. https://localhost:35357/ (string value)
-#identity_uri = <None>
-
-# This option is deprecated and may be removed in a future release. Single
-# shared secret with the Keystone configuration used for bootstrapping a
-# Keystone installation, or otherwise bypassing the normal authentication
-# process. This option should not be used, use `admin_user` and
-# `admin_password` instead. (string value)
-#admin_token = <None>
-
-# Service username. (string value)
-#admin_user = <None>
-
-# Service user password. (string value)
-#admin_password = <None>
-
-# Service tenant name. (string value)
-#admin_tenant_name = admin
-
 # Authentication type to load (string value)
 # Deprecated group/name - [keystone_authtoken]/auth_plugin
 #auth_type = <None>
+auth_type = password
 
 # Config Section from which to load plugin specific options (string value)
 #auth_section = <None>
-
-
-[matchmaker_redis]
-
-#
-# From oslo.messaging
-#
-
-# DEPRECATED: Host to locate redis. (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#host = 127.0.0.1
-
-# DEPRECATED: Use this port to connect to redis host. (port value)
-# Minimum value: 0
-# Maximum value: 65535
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#port = 6379
-
-# DEPRECATED: Password for Redis server (optional). (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#password =
-
-# DEPRECATED: List of Redis Sentinel hosts (fault tolerance mode), e.g.,
-# [host:port, host1:port ... ] (list value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#sentinel_hosts =
-
-# Redis replica set name. (string value)
-#sentinel_group_name = oslo-messaging-zeromq
-
-# Time in ms to wait between connection attempts. (integer value)
-#wait_timeout = 2000
-
-# Time in ms to wait before the transaction is killed. (integer value)
-#check_timeout = 20000
-
-# Timeout in ms on blocking socket operations. (integer value)
-#socket_timeout = 10000
-
-
-[nova]
-
-#
-# From neutron
-#
 
 # Name of nova region to use. Useful if keystone manages more than one region.
 # (string value)
 #region_name = <None>
+region_name = RegionOne
 
 # Type of the nova endpoint to use.  This endpoint will be looked up in the
 # keystone catalog and should be one of public, internal or admin. (string
@@ -1113,32 +1073,35 @@
 # admin - <No description provided>
 # internal - <No description provided>
 #endpoint_type = public
-
-#
-# From nova.auth
-#
+endpoint_type = internal
+
+# API version of the admin Identity API endpoint. (string value)
+#auth_version = <None>
+
 
 # Authentication URL (string value)
 #auth_url = <None>
+auth_url = http://10.167.4.35:35357
 
 # Authentication type to load (string value)
 # Deprecated group/name - [nova]/auth_plugin
 #auth_type = <None>
-
-# PEM encoded Certificate Authority to use when verifying HTTPs connections.
-# (string value)
+auth_type = password
+
+# Required if identity server requires client certificate (string value)
+#certfile = <None>
+
+# A PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# Defaults to system CAs. (string value)
 #cafile = <None>
-
-# PEM encoded client certificate cert file (string value)
-#certfile = <None>
 
 # Optional domain ID to use with v3 and v2 parameters. It will be used for both
 # the user and project domain in v3 and ignored in v2 authentication. (string
 # value)
 #default_domain_id = <None>
 
-# Optional domain name to use with v3 API and v2 parameters. It will be used
-# for both the user and project domain in v3 and ignored in v2 authentication.
+# Optional domain name to use with v3 API and v2 parameters. It will be used for
+# both the user and project domain in v3 and ignored in v2 authentication.
 # (string value)
 #default_domain_name = <None>
 
@@ -1151,25 +1114,26 @@
 # Verify HTTPS connections. (boolean value)
 #insecure = false
 
-# PEM encoded client certificate key file (string value)
+# Required if identity server requires client certificate (string value)
 #keyfile = <None>
 
 # User's password (string value)
 #password = <None>
+password = opnfv_secret
 
 # Domain ID containing project (string value)
 #project_domain_id = <None>
+project_domain_id = default
 
 # Domain name containing project (string value)
 #project_domain_name = <None>
 
 # Project ID to scope to (string value)
-# Deprecated group/name - [nova]/tenant_id
 #project_id = <None>
 
 # Project name to scope to (string value)
-# Deprecated group/name - [nova]/tenant_name
 #project_name = <None>
+project_name = service
 
 # Scope for system operations (string value)
 #system_scope = <None>
@@ -1188,20 +1152,128 @@
 
 # User's domain id (string value)
 #user_domain_id = <None>
+user_domain_id = default
 
 # User's domain name (string value)
 #user_domain_name = <None>
 
-# User id (string value)
+# User ID (string value)
 #user_id = <None>
 
 # Username (string value)
-# Deprecated group/name - [nova]/user_name
+# Deprecated group/name - [neutron]/user_name
 #username = <None>
+username = neutron
+
+
+[nova]
+# Name of nova region to use. Useful if keystone manages more than one region.
+# (string value)
+#region_name = <None>
+region_name = RegionOne
+
+# Type of the nova endpoint to use.  This endpoint will be looked up in the
+# keystone catalog and should be one of public, internal or admin. (string
+# value)
+# Possible values:
+# public - <No description provided>
+# admin - <No description provided>
+# internal - <No description provided>
+#endpoint_type = public
+endpoint_type = internal
+
+# API version of the admin Identity API endpoint. (string value)
+#auth_version = <None>
+
+
+# Authentication URL (string value)
+#auth_url = <None>
+auth_url = http://10.167.4.35:5000
+
+# Authentication type to load (string value)
+# Deprecated group/name - [nova]/auth_plugin
+#auth_type = <None>
+auth_type = password
+
+# Required if identity server requires client certificate (string value)
+#certfile = <None>
+
+# A PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# Defaults to system CAs. (string value)
+#cafile = <None>
+
+# Optional domain ID to use with v3 and v2 parameters. It will be used for both
+# the user and project domain in v3 and ignored in v2 authentication. (string
+# value)
+#default_domain_id = <None>
+
+# Optional domain name to use with v3 API and v2 parameters. It will be used for
+# both the user and project domain in v3 and ignored in v2 authentication.
+# (string value)
+#default_domain_name = <None>
+
+# Domain ID to scope to (string value)
+#domain_id = <None>
+
+# Domain name to scope to (string value)
+#domain_name = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# Required if identity server requires client certificate (string value)
+#keyfile = <None>
+
+# User's password (string value)
+#password = <None>
+password = opnfv_secret
+
+# Domain ID containing project (string value)
+#project_domain_id = <None>
+project_domain_id = default
+
+# Domain name containing project (string value)
+#project_domain_name = <None>
+
+# Project ID to scope to (string value)
+#project_id = <None>
+
+# Project name to scope to (string value)
+#project_name = <None>
+project_name = service
+
+# Scope for system operations (string value)
+#system_scope = <None>
+
+# Tenant ID (string value)
+#tenant_id = <None>
+
+# Tenant Name (string value)
+#tenant_name = <None>
+
+# Timeout value for http requests (integer value)
+#timeout = <None>
+
+# Trust ID (string value)
+#trust_id = <None>
+
+# User's domain id (string value)
+#user_domain_id = <None>
+user_domain_id = default
+
+# User's domain name (string value)
+#user_domain_name = <None>
+
+# User ID (string value)
+#user_id = <None>
+
+# Username (string value)
+# Deprecated group/name - [neutron]/user_name
+#username = <None>
+username = nova
 
 
 [oslo_concurrency]
-
 #
 # From oslo.concurrency
 #
@@ -1209,308 +1281,14 @@
 # Enables or disables inter-process locks. (boolean value)
 #disable_process_locking = false
 
-# Directory to use for lock files.  For security, the specified directory
-# should only be writable by the user running the processes that need locking.
-# Defaults to environment variable OSLO_LOCK_PATH. If OSLO_LOCK_PATH is not set
-# in the environment, use the Python tempfile.gettempdir function to find a
-# suitable location. If external locks are used, a lock path must be set.
-# (string value)
+# Directory to use for lock files.  For security, the specified
+# directory should only be writable by the user running the processes
+# that need locking. Defaults to environment variable OSLO_LOCK_PATH.
+# If OSLO_LOCK_PATH is not set in the environment, use the Python
+# tempfile.gettempdir function to find a suitable location. If
+# external locks are used, a lock path must be set. (string value)
 #lock_path = /tmp
-
-
-[oslo_messaging_amqp]
-
-#
-# From oslo.messaging
-#
-
-# Name for the AMQP container. must be globally unique. Defaults to a generated
-# UUID (string value)
-#container_name = <None>
-
-# Timeout for inactive connections (in seconds) (integer value)
-#idle_timeout = 0
-
-# Debug: dump AMQP frames to stdout (boolean value)
-#trace = false
-
-# Attempt to connect via SSL. If no other ssl-related parameters are given, it
-# will use the system's CA-bundle to verify the server's certificate. (boolean
-# value)
-#ssl = false
-
-# CA certificate PEM file used to verify the server's certificate (string
-# value)
-#ssl_ca_file =
-
-# Self-identifying certificate PEM file for client authentication (string
-# value)
-#ssl_cert_file =
-
-# Private key PEM file used to sign ssl_cert_file certificate (optional)
-# (string value)
-#ssl_key_file =
-
-# Password for decrypting ssl_key_file (if encrypted) (string value)
-#ssl_key_password = <None>
-
-# By default SSL checks that the name in the server's certificate matches the
-# hostname in the transport_url. In some configurations it may be preferable to
-# use the virtual hostname instead, for example if the server uses the Server
-# Name Indication TLS extension (rfc6066) to provide a certificate per virtual
-# host. Set ssl_verify_vhost to True if the server's SSL certificate uses the
-# virtual host name instead of the DNS name. (boolean value)
-#ssl_verify_vhost = false
-
-# DEPRECATED: Accept clients using either SSL or plain TCP (boolean value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Not applicable - not a SSL server
-#allow_insecure_clients = false
-
-# Space separated list of acceptable SASL mechanisms (string value)
-#sasl_mechanisms =
-
-# Path to directory that contains the SASL configuration (string value)
-#sasl_config_dir =
-
-# Name of configuration file (without .conf suffix) (string value)
-#sasl_config_name =
-
-# SASL realm to use if no realm present in username (string value)
-#sasl_default_realm =
-
-# DEPRECATED: User name for message broker authentication (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the
-# username.
-#username =
-
-# DEPRECATED: Password for message broker authentication (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the
-# password.
-#password =
-
-# Seconds to pause before attempting to re-connect. (integer value)
-# Minimum value: 1
-#connection_retry_interval = 1
-
-# Increase the connection_retry_interval by this many seconds after each
-# unsuccessful failover attempt. (integer value)
-# Minimum value: 0
-#connection_retry_backoff = 2
-
-# Maximum limit for connection_retry_interval + connection_retry_backoff
-# (integer value)
-# Minimum value: 1
-#connection_retry_interval_max = 30
-
-# Time to pause between re-connecting an AMQP 1.0 link that failed due to a
-# recoverable error. (integer value)
-# Minimum value: 1
-#link_retry_delay = 10
-
-# The maximum number of attempts to re-send a reply message which failed due to
-# a recoverable error. (integer value)
-# Minimum value: -1
-#default_reply_retry = 0
-
-# The deadline for an rpc reply message delivery. (integer value)
-# Minimum value: 5
-#default_reply_timeout = 30
-
-# The deadline for an rpc cast or call message delivery. Only used when caller
-# does not provide a timeout expiry. (integer value)
-# Minimum value: 5
-#default_send_timeout = 30
-
-# The deadline for a sent notification message delivery. Only used when caller
-# does not provide a timeout expiry. (integer value)
-# Minimum value: 5
-#default_notify_timeout = 30
-
-# The duration to schedule a purge of idle sender links. Detach link after
-# expiry. (integer value)
-# Minimum value: 1
-#default_sender_link_timeout = 600
-
-# Indicates the addressing mode used by the driver.
-# Permitted values:
-# 'legacy'   - use legacy non-routable addressing
-# 'routable' - use routable addresses
-# 'dynamic'  - use legacy addresses if the message bus does not support routing
-# otherwise use routable addressing (string value)
-#addressing_mode = dynamic
-
-# Enable virtual host support for those message buses that do not natively
-# support virtual hosting (such as qpidd). When set to true the virtual host
-# name will be added to all message bus addresses, effectively creating a
-# private 'subnet' per virtual host. Set to False if the message bus supports
-# virtual hosting using the 'hostname' field in the AMQP 1.0 Open performative
-# as the name of the virtual host. (boolean value)
-#pseudo_vhost = true
-
-# address prefix used when sending to a specific server (string value)
-#server_request_prefix = exclusive
-
-# address prefix used when broadcasting to all servers (string value)
-#broadcast_prefix = broadcast
-
-# address prefix when sending to any server in group (string value)
-#group_request_prefix = unicast
-
-# Address prefix for all generated RPC addresses (string value)
-#rpc_address_prefix = openstack.org/om/rpc
-
-# Address prefix for all generated Notification addresses (string value)
-#notify_address_prefix = openstack.org/om/notify
-
-# Appended to the address prefix when sending a fanout message. Used by the
-# message bus to identify fanout messages. (string value)
-#multicast_address = multicast
-
-# Appended to the address prefix when sending to a particular RPC/Notification
-# server. Used by the message bus to identify messages sent to a single
-# destination. (string value)
-#unicast_address = unicast
-
-# Appended to the address prefix when sending to a group of consumers. Used by
-# the message bus to identify messages that should be delivered in a round-
-# robin fashion across consumers. (string value)
-#anycast_address = anycast
-
-# Exchange name used in notification addresses.
-# Exchange name resolution precedence:
-# Target.exchange if set
-# else default_notification_exchange if set
-# else control_exchange if set
-# else 'notify' (string value)
-#default_notification_exchange = <None>
-
-# Exchange name used in RPC addresses.
-# Exchange name resolution precedence:
-# Target.exchange if set
-# else default_rpc_exchange if set
-# else control_exchange if set
-# else 'rpc' (string value)
-#default_rpc_exchange = <None>
-
-# Window size for incoming RPC Reply messages. (integer value)
-# Minimum value: 1
-#reply_link_credit = 200
-
-# Window size for incoming RPC Request messages (integer value)
-# Minimum value: 1
-#rpc_server_credit = 100
-
-# Window size for incoming Notification messages (integer value)
-# Minimum value: 1
-#notify_server_credit = 100
-
-# Send messages of this type pre-settled.
-# Pre-settled messages will not receive acknowledgement
-# from the peer. Note well: pre-settled messages may be
-# silently discarded if the delivery fails.
-# Permitted values:
-# 'rpc-call' - send RPC Calls pre-settled
-# 'rpc-reply'- send RPC Replies pre-settled
-# 'rpc-cast' - Send RPC Casts pre-settled
-# 'notify'   - Send Notifications pre-settled
-#  (multi valued)
-#pre_settled = rpc-cast
-#pre_settled = rpc-reply
-
-
-[oslo_messaging_kafka]
-
-#
-# From oslo.messaging
-#
-
-# DEPRECATED: Default Kafka broker Host (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#kafka_default_host = localhost
-
-# DEPRECATED: Default Kafka broker Port (port value)
-# Minimum value: 0
-# Maximum value: 65535
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#kafka_default_port = 9092
-
-# Max fetch bytes of Kafka consumer (integer value)
-#kafka_max_fetch_bytes = 1048576
-
-# Default timeout(s) for Kafka consumers (floating point value)
-#kafka_consumer_timeout = 1.0
-
-# DEPRECATED: Pool Size for Kafka Consumers (integer value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#pool_size = 10
-
-# DEPRECATED: The pool size limit for connections expiration policy (integer
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#conn_pool_min_size = 2
-
-# DEPRECATED: The time-to-live in sec of idle connections in the pool (integer
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#conn_pool_ttl = 1200
-
-# Group id for Kafka consumer. Consumers in one group will coordinate message
-# consumption (string value)
-#consumer_group = oslo_messaging_consumer
-
-# Upper bound on the delay for KafkaProducer batching in seconds (floating
-# point value)
-#producer_batch_timeout = 0.0
-
-# Size of batch for the producer async send (integer value)
-#producer_batch_size = 16384
-
-
-[oslo_messaging_notifications]
-
-#
-# From oslo.messaging
-#
-
-# The Drivers(s) to handle sending notifications. Possible values are
-# messaging, messagingv2, routing, log, test, noop (multi valued)
-# Deprecated group/name - [DEFAULT]/notification_driver
-#driver =
-
-# A URL representing the messaging driver to use for notifications. If not set,
-# we fall back to the same configuration used for RPC. (string value)
-# Deprecated group/name - [DEFAULT]/notification_transport_url
-#transport_url = <None>
-
-# AMQP topic used for OpenStack notifications. (list value)
-# Deprecated group/name - [rpc_notifier2]/topics
-# Deprecated group/name - [DEFAULT]/notification_topics
-#topics = notifications
-
-# The maximum number of attempts to re-send a notification message which failed
-# to be delivered due to a recoverable error. 0 - No retry, -1 - indefinite
-# (integer value)
-#retry = -1
-
-
 [oslo_messaging_rabbit]
-
 #
 # From oslo.messaging
 #
@@ -1526,54 +1304,39 @@
 # Enable SSL (boolean value)
 #ssl = <None>
 
-# SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and
-# SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some
-# distributions. (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_version
-#ssl_version =
-
-# SSL key file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_keyfile
-#ssl_key_file =
-
-# SSL cert file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_certfile
-#ssl_cert_file =
-
-# SSL certification authority file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_ca_certs
-#ssl_ca_file =
-
-# How long to wait before reconnecting in response to an AMQP consumer cancel
-# notification. (floating point value)
+
+# How long to wait before reconnecting in response to an AMQP consumer
+# cancel notification. (floating point value)
 #kombu_reconnect_delay = 1.0
 
-# EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression will not
-# be used. This option may not be available in future versions. (string value)
+# EXPERIMENTAL: Possible values are: gzip, bz2. If not set compression
+# will not be used. This option may not be available in future
+# versions. (string value)
 #kombu_compression = <None>
 
-# How long to wait a missing client before abandoning to send it its replies.
-# This value should not be longer than rpc_response_timeout. (integer value)
+# How long to wait a missing client before abandoning to send it its
+# replies. This value should not be longer than rpc_response_timeout.
+# (integer value)
 # Deprecated group/name - [oslo_messaging_rabbit]/kombu_reconnect_timeout
 #kombu_missing_consumer_retry_timeout = 60
 
-# Determines how the next RabbitMQ node is chosen in case the one we are
-# currently connected to becomes unavailable. Takes effect only if more than
-# one RabbitMQ node is provided in config. (string value)
+# Determines how the next RabbitMQ node is chosen in case the one we
+# are currently connected to becomes unavailable. Takes effect only if
+# more than one RabbitMQ node is provided in config. (string value)
 # Possible values:
 # round-robin - <No description provided>
 # shuffle - <No description provided>
 #kombu_failover_strategy = round-robin
 
-# DEPRECATED: The RabbitMQ broker address where a single node is used. (string
-# value)
+# DEPRECATED: The RabbitMQ broker address where a single node is used.
+# (string value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 # Reason: Replaced by [DEFAULT]/transport_url
 #rabbit_host = localhost
 
-# DEPRECATED: The RabbitMQ broker port where a single node is used. (port
-# value)
+# DEPRECATED: The RabbitMQ broker port where a single node is used.
+# (port value)
 # Minimum value: 0
 # Maximum value: 65535
 # This option is deprecated for removal.
@@ -1615,31 +1378,33 @@
 # How frequently to retry connecting with RabbitMQ. (integer value)
 #rabbit_retry_interval = 1
 
-# How long to backoff for between retries when connecting to RabbitMQ. (integer
-# value)
+# How long to backoff for between retries when connecting to RabbitMQ.
+# (integer value)
 #rabbit_retry_backoff = 2
 
-# Maximum interval of RabbitMQ connection retries. Default is 30 seconds.
-# (integer value)
+# Maximum interval of RabbitMQ connection retries. Default is 30
+# seconds. (integer value)
 #rabbit_interval_max = 30
 
-# DEPRECATED: Maximum number of RabbitMQ connection retries. Default is 0
-# (infinite retry count). (integer value)
+# DEPRECATED: Maximum number of RabbitMQ connection retries. Default
+# is 0 (infinite retry count). (integer value)
 # This option is deprecated for removal.
 # Its value may be silently ignored in the future.
 #rabbit_max_retries = 0
 
-# Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change this
-# option, you must wipe the RabbitMQ database. In RabbitMQ 3.0, queue mirroring
-# is no longer controlled by the x-ha-policy argument when declaring a queue.
-# If you just want to make sure that all queues (except those with auto-
-# generated names) are mirrored across all nodes, run: "rabbitmqctl set_policy
-# HA '^(?!amq\.).*' '{"ha-mode": "all"}' " (boolean value)
+# Try to use HA queues in RabbitMQ (x-ha-policy: all). If you change
+# this option, you must wipe the RabbitMQ database. In RabbitMQ 3.0,
+# queue mirroring is no longer controlled by the x-ha-policy argument
+# when declaring a queue. If you just want to make sure that all
+# queues (except those with auto-generated names) are mirrored across
+# all nodes, run: "rabbitmqctl set_policy HA '^(?!amq\.).*' '{"ha-
+# mode": "all"}' " (boolean value)
 #rabbit_ha_queues = false
 
-# Positive integer representing duration in seconds for queue TTL (x-expires).
-# Queues which are unused for the duration of the TTL are automatically
-# deleted. The parameter affects only reply and fanout queues. (integer value)
+# Positive integer representing duration in seconds for queue TTL
+# (x-expires). Queues which are unused for the duration of the TTL are
+# automatically deleted. The parameter affects only reply and fanout
+# queues. (integer value)
 # Minimum value: 1
 #rabbit_transient_queues_ttl = 1800
 
@@ -1647,16 +1412,17 @@
 # unlimited messages. (integer value)
 #rabbit_qos_prefetch_count = 64
 
-# Number of seconds after which the Rabbit broker is considered down if
-# heartbeat's keep-alive fails (0 disable the heartbeat). EXPERIMENTAL (integer
-# value)
+# Number of seconds after which the Rabbit broker is considered down
+# if heartbeat's keep-alive fails (0 disable the heartbeat).
+# EXPERIMENTAL (integer value)
 #heartbeat_timeout_threshold = 60
 
 # How often times during the heartbeat_timeout_threshold we check the
 # heartbeat. (integer value)
 #heartbeat_rate = 2
 
-# Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake (boolean value)
+# Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake
+# (boolean value)
 #fake_rabbit = false
 
 # Maximum number of channels to allow (integer value)
@@ -1665,21 +1431,23 @@
 # The maximum byte size for an AMQP frame (integer value)
 #frame_max = <None>
 
-# How often to send heartbeats for consumer's connections (integer value)
+# How often to send heartbeats for consumer's connections (integer
+# value)
 #heartbeat_interval = 3
 
 # Arguments passed to ssl.wrap_socket (dict value)
 #ssl_options = <None>
 
-# Set socket timeout in seconds for connection's socket (floating point value)
+# Set socket timeout in seconds for connection's socket (floating
+# point value)
 #socket_timeout = 0.25
 
-# Set TCP_USER_TIMEOUT in seconds for connection's socket (floating point
-# value)
+# Set TCP_USER_TIMEOUT in seconds for connection's socket (floating
+# point value)
 #tcp_user_timeout = 0.25
 
-# Set delay for reconnection to some host which has connection error (floating
-# point value)
+# Set delay for reconnection to some host which has connection error
+# (floating point value)
 #host_connection_reconnect_delay = 0.25
 
 # Connection factory implementation (string value)
@@ -1692,21 +1460,22 @@
 # Maximum number of connections to keep queued. (integer value)
 #pool_max_size = 30
 
-# Maximum number of connections to create above `pool_max_size`. (integer
-# value)
+# Maximum number of connections to create above `pool_max_size`.
+# (integer value)
 #pool_max_overflow = 0
 
-# Default number of seconds to wait for a connections to available (integer
-# value)
+# Default number of seconds to wait for a connections to available
+# (integer value)
 #pool_timeout = 30
 
 # Lifetime of a connection (since creation) in seconds or None for no
-# recycling. Expired connections are closed on acquire. (integer value)
+# recycling. Expired connections are closed on acquire. (integer
+# value)
 #pool_recycle = 600
 
-# Threshold at which inactive (since release) connections are considered stale
-# in seconds or None for no staleness. Stale connections are closed on acquire.
-# (integer value)
+# Threshold at which inactive (since release) connections are
+# considered stale in seconds or None for no staleness. Stale
+# connections are closed on acquire. (integer value)
 #pool_stale = 60
 
 # Default serialization mechanism for serializing/deserializing
@@ -1726,15 +1495,16 @@
 # notification listener. (integer value)
 #notification_listener_prefetch_count = 100
 
-# Reconnecting retry count in case of connectivity problem during sending
-# notification, -1 means infinite retry. (integer value)
+# Reconnecting retry count in case of connectivity problem during
+# sending notification, -1 means infinite retry. (integer value)
 #default_notification_retry_attempts = -1
 
-# Reconnecting retry delay in case of connectivity problem during sending
-# notification message (floating point value)
+# Reconnecting retry delay in case of connectivity problem during
+# sending notification message (floating point value)
 #notification_retry_delay = 0.25
 
-# Time to live for rpc queues without consumers in seconds. (integer value)
+# Time to live for rpc queues without consumers in seconds. (integer
+# value)
 #rpc_queue_expiration = 60
 
 # Exchange name for sending RPC messages (string value)
@@ -1743,239 +1513,85 @@
 # Exchange name for receiving RPC replies (string value)
 #rpc_reply_exchange = ${control_exchange}_rpc_reply
 
-# Max number of not acknowledged message which RabbitMQ can send to rpc
-# listener. (integer value)
+# Max number of not acknowledged message which RabbitMQ can send to
+# rpc listener. (integer value)
 #rpc_listener_prefetch_count = 100
 
-# Max number of not acknowledged message which RabbitMQ can send to rpc reply
-# listener. (integer value)
+# Max number of not acknowledged message which RabbitMQ can send to
+# rpc reply listener. (integer value)
 #rpc_reply_listener_prefetch_count = 100
 
-# Reconnecting retry count in case of connectivity problem during sending
-# reply. -1 means infinite retry during rpc_timeout (integer value)
+# Reconnecting retry count in case of connectivity problem during
+# sending reply. -1 means infinite retry during rpc_timeout (integer
+# value)
 #rpc_reply_retry_attempts = -1
 
-# Reconnecting retry delay in case of connectivity problem during sending
-# reply. (floating point value)
+# Reconnecting retry delay in case of connectivity problem during
+# sending reply. (floating point value)
 #rpc_reply_retry_delay = 0.25
 
-# Reconnecting retry count in case of connectivity problem during sending RPC
-# message, -1 means infinite retry. If actual retry attempts in not 0 the rpc
-# request could be processed more than one time (integer value)
+# Reconnecting retry count in case of connectivity problem during
+# sending RPC message, -1 means infinite retry. If actual retry
+# attempts in not 0 the rpc request could be processed more than one
+# time (integer value)
 #default_rpc_retry_attempts = -1
 
-# Reconnecting retry delay in case of connectivity problem during sending RPC
-# message (floating point value)
+# Reconnecting retry delay in case of connectivity problem during
+# sending RPC message (floating point value)
 #rpc_retry_delay = 0.25
 
 
-[oslo_messaging_zmq]
-
+[oslo_messaging_notifications]
 #
 # From oslo.messaging
 #
 
-# ZeroMQ bind address. Should be a wildcard (*), an ethernet interface, or IP.
-# The "host" option should point or resolve to this address. (string value)
-#rpc_zmq_bind_address = *
-
-# MatchMaker driver. (string value)
-# Possible values:
-# redis - <No description provided>
-# sentinel - <No description provided>
-# dummy - <No description provided>
-#rpc_zmq_matchmaker = redis
-
-# Number of ZeroMQ contexts, defaults to 1. (integer value)
-#rpc_zmq_contexts = 1
-
-# Maximum number of ingress messages to locally buffer per topic. Default is
-# unlimited. (integer value)
-#rpc_zmq_topic_backlog = <None>
-
-# Directory for holding IPC sockets. (string value)
-#rpc_zmq_ipc_dir = /var/run/openstack
-
-# Name of this node. Must be a valid hostname, FQDN, or IP address. Must match
-# "host" option, if running Nova. (string value)
-#rpc_zmq_host = localhost
-
-# Number of seconds to wait before all pending messages will be sent after
-# closing a socket. The default value of -1 specifies an infinite linger
-# period. The value of 0 specifies no linger period. Pending messages shall be
-# discarded immediately when the socket is closed. Positive values specify an
-# upper bound for the linger period. (integer value)
-# Deprecated group/name - [DEFAULT]/rpc_cast_timeout
-#zmq_linger = -1
-
-# The default number of seconds that poll should wait. Poll raises timeout
-# exception when timeout expired. (integer value)
-#rpc_poll_timeout = 1
-
-# Expiration timeout in seconds of a name service record about existing target
-# ( < 0 means no timeout). (integer value)
-#zmq_target_expire = 300
-
-# Update period in seconds of a name service record about existing target.
-# (integer value)
-#zmq_target_update = 180
-
-# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy. (boolean
-# value)
-#use_pub_sub = false
-
-# Use ROUTER remote proxy. (boolean value)
-#use_router_proxy = false
-
-# This option makes direct connections dynamic or static. It makes sense only
-# with use_router_proxy=False which means to use direct connections for direct
-# message types (ignored otherwise). (boolean value)
-#use_dynamic_connections = false
-
-# How many additional connections to a host will be made for failover reasons.
-# This option is actual only in dynamic connections mode. (integer value)
-#zmq_failover_connections = 2
-
-# Minimal port number for random ports range. (port value)
-# Minimum value: 0
-# Maximum value: 65535
-#rpc_zmq_min_port = 49153
-
-# Maximal port number for random ports range. (integer value)
-# Minimum value: 1
-# Maximum value: 65536
-#rpc_zmq_max_port = 65536
-
-# Number of retries to find free port number before fail with ZMQBindError.
-# (integer value)
-#rpc_zmq_bind_port_retries = 100
-
-# Default serialization mechanism for serializing/deserializing
-# outgoing/incoming messages (string value)
-# Possible values:
-# json - <No description provided>
-# msgpack - <No description provided>
-#rpc_zmq_serialization = json
-
-# This option configures round-robin mode in zmq socket. True means not keeping
-# a queue when server side disconnects. False means to keep queue and messages
-# even if server is disconnected, when the server appears we send all
-# accumulated messages to it. (boolean value)
-#zmq_immediate = true
-
-# Enable/disable TCP keepalive (KA) mechanism. The default value of -1 (or any
-# other negative value) means to skip any overrides and leave it to OS default;
-# 0 and 1 (or any other positive value) mean to disable and enable the option
-# respectively. (integer value)
-#zmq_tcp_keepalive = -1
-
-# The duration between two keepalive transmissions in idle condition. The unit
-# is platform dependent, for example, seconds in Linux, milliseconds in Windows
-# etc. The default value of -1 (or any other negative value and 0) means to
-# skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_idle = -1
-
-# The number of retransmissions to be carried out before declaring that remote
-# end is not available. The default value of -1 (or any other negative value
-# and 0) means to skip any overrides and leave it to OS default. (integer
-# value)
-#zmq_tcp_keepalive_cnt = -1
-
-# The duration between two successive keepalive retransmissions, if
-# acknowledgement to the previous keepalive transmission is not received. The
-# unit is platform dependent, for example, seconds in Linux, milliseconds in
-# Windows etc. The default value of -1 (or any other negative value and 0)
-# means to skip any overrides and leave it to OS default. (integer value)
-#zmq_tcp_keepalive_intvl = -1
-
-# Maximum number of (green) threads to work concurrently. (integer value)
-#rpc_thread_pool_size = 100
-
-# Expiration timeout in seconds of a sent/received message after which it is
-# not tracked anymore by a client/server. (integer value)
-#rpc_message_ttl = 300
-
-# Wait for message acknowledgements from receivers. This mechanism works only
-# via proxy without PUB/SUB. (boolean value)
-#rpc_use_acks = false
-
-# Number of seconds to wait for an ack from a cast/call. After each retry
-# attempt this timeout is multiplied by some specified multiplier. (integer
-# value)
-#rpc_ack_timeout_base = 15
-
-# Number to multiply base ack timeout by after each retry attempt. (integer
-# value)
-#rpc_ack_timeout_multiplier = 2
-
-# Default number of message sending attempts in case of any problems occurred:
-# positive value N means at most N retries, 0 means no retries, None or -1 (or
-# any other negative values) mean to retry forever. This option is used only if
-# acknowledgments are enabled. (integer value)
-#rpc_retry_attempts = 3
-
-# List of publisher hosts SubConsumer can subscribe on. This option has higher
-# priority then the default publishers list taken from the matchmaker. (list
-# value)
-#subscribe_on =
+# The Drivers(s) to handle sending notifications. Possible values are
+# messaging, messagingv2, routing, log, test, noop (multi valued)
+# Deprecated group/name - [DEFAULT]/notification_driver
+#driver =
+driver = messagingv2
+
+# A URL representing the messaging driver to use for notifications. If
+# not set, we fall back to the same configuration used for RPC.
+# (string value)
+# Deprecated group/name - [DEFAULT]/notification_transport_url
+#transport_url = <None>
+
+# AMQP topic used for OpenStack notifications. (list value)
+# Deprecated group/name - [rpc_notifier2]/topics
+# Deprecated group/name - [DEFAULT]/notification_topics
+#topics = notifications
+
+# The maximum number of attempts to re-send a notification message
+# which failed to be delivered due to a recoverable error. 0 - No
+# retry, -1 - indefinite (integer value)
+#retry = -1
 
 
 [oslo_middleware]
-
-#
-# From oslo.middleware.http_proxy_to_wsgi
-#
-
-# Whether the application is behind a proxy or not. This determines if the
-# middleware should parse the headers or not. (boolean value)
-#enable_proxy_headers_parsing = false
+#
+# From oslo.middleware
+#
+
+# The maximum body size for each  request, in bytes. (integer value)
+# Deprecated group/name - [DEFAULT]/osapi_max_request_body_size
+# Deprecated group/name - [DEFAULT]/max_request_body_size
+#max_request_body_size = 114688
+
+# DEPRECATED: The HTTP Header that will be used to determine what the
+# original request protocol scheme was, even if it was hidden by a SSL
+# termination proxy. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#secure_proxy_ssl_header = X-Forwarded-Proto
+
+# Whether the application is behind a proxy or not. This determines if
+# the middleware should parse the headers or not. (boolean value)
+enable_proxy_headers_parsing = True
 
 
 [oslo_policy]
-
-#
-# From oslo.policy
-#
-
-# This option controls whether or not to enforce scope when evaluating
-# policies. If ``True``, the scope of the token used in the request is compared
-# to the ``scope_types`` of the policy being enforced. If the scopes do not
-# match, an ``InvalidScope`` exception will be raised. If ``False``, a message
-# will be logged informing operators that policies are being invoked with
-# mismatching scope. (boolean value)
-#enforce_scope = false
-
-# The file that defines policies. (string value)
-#policy_file = policy.json
-
-# Default rule. Enforced when a requested rule is not found. (string value)
-#policy_default_rule = default
-
-# Directories where policy configuration files are stored. They can be relative
-# to any directory in the search path defined by the config_dir option, or
-# absolute paths. The file defined by policy_file must exist for these
-# directories to be searched.  Missing or empty directories are ignored. (multi
-# valued)
-#policy_dirs = policy.d
-
-# Content Type to send and receive data for REST based policy check (string
-# value)
-# Possible values:
-# application/x-www-form-urlencoded - <No description provided>
-# application/json - <No description provided>
-#remote_content_type = application/x-www-form-urlencoded
-
-# server identity verification for REST based policy check (boolean value)
-#remote_ssl_verify_server_crt = false
-
-# Absolute path to ca cert file for REST based policy check (string value)
-#remote_ssl_ca_crt_file = <None>
-
-# Absolute path to client cert for REST based policy check (string value)
-#remote_ssl_client_crt_file = <None>
-
-# Absolute path client key file REST based policy check (string value)
-#remote_ssl_client_key_file = <None>
 
 
 [quotas]
@@ -2030,7 +1646,6 @@
 
 
 [ssl]
-
 #
 # From oslo.service.sslutils
 #
@@ -2055,3 +1670,14 @@
 # Sets the list of available ciphers. value should be a string in the OpenSSL
 # cipher list format. (string value)
 #ciphers = <None>
+
+[ovs]
+
+# Advanced services configs
+
+
+
+# BGPVPN config
+
+[service_providers]
+

2018-09-01 23:01:28,075 [salt.state       :1941][INFO    ][4757] Completed state [/etc/neutron/neutron.conf] at time 23:01:28.075427 duration_in_ms=297.877
2018-09-01 23:01:28,076 [salt.state       :1770][INFO    ][4757] Running state [neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head] at time 23:01:28.076351
2018-09-01 23:01:28,076 [salt.state       :1803][INFO    ][4757] Executing state cmd.run for [neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head]
2018-09-01 23:01:28,077 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4757] Executing command '/bin/true' in directory '/root'
2018-09-01 23:01:28,091 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4757] Executing command 'neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head' in directory '/root'
2018-09-01 23:01:29,228 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901230129220399
2018-09-01 23:01:29,254 [salt.minion      :1431][INFO    ][6062] Starting a new job with PID 6062
2018-09-01 23:01:29,270 [salt.minion      :1708][INFO    ][6062] Returning information for job: 20180901230129220399
2018-09-01 23:01:39,395 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901230139385930
2018-09-01 23:01:39,410 [salt.minion      :1431][INFO    ][6067] Starting a new job with PID 6067
2018-09-01 23:01:39,430 [salt.minion      :1708][INFO    ][6067] Returning information for job: 20180901230139385930
2018-09-01 23:01:49,540 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901230149530907
2018-09-01 23:01:49,562 [salt.minion      :1431][INFO    ][6072] Starting a new job with PID 6072
2018-09-01 23:01:49,582 [salt.minion      :1708][INFO    ][6072] Returning information for job: 20180901230149530907
2018-09-01 23:01:59,760 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901230159750793
2018-09-01 23:01:59,780 [salt.minion      :1431][INFO    ][6077] Starting a new job with PID 6077
2018-09-01 23:02:00,056 [salt.minion      :1708][INFO    ][6077] Returning information for job: 20180901230159750793
2018-09-01 23:02:09,958 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901230209949853
2018-09-01 23:02:09,977 [salt.minion      :1431][INFO    ][6082] Starting a new job with PID 6082
2018-09-01 23:02:09,996 [salt.minion      :1708][INFO    ][6082] Returning information for job: 20180901230209949853
2018-09-01 23:02:20,115 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901230220102589
2018-09-01 23:02:20,138 [salt.minion      :1431][INFO    ][6087] Starting a new job with PID 6087
2018-09-01 23:02:20,159 [salt.minion      :1708][INFO    ][6087] Returning information for job: 20180901230220102589
2018-09-01 23:02:30,277 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901230230267837
2018-09-01 23:02:30,301 [salt.minion      :1431][INFO    ][6092] Starting a new job with PID 6092
2018-09-01 23:02:30,324 [salt.minion      :1708][INFO    ][6092] Returning information for job: 20180901230230267837
2018-09-01 23:02:40,441 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901230240432036
2018-09-01 23:02:40,465 [salt.minion      :1431][INFO    ][6097] Starting a new job with PID 6097
2018-09-01 23:02:40,487 [salt.minion      :1708][INFO    ][6097] Returning information for job: 20180901230240432036
2018-09-01 23:02:46,138 [salt.state       :290 ][INFO    ][4757] {'pid': 6053, 'retcode': 0, 'stderr': 'INFO  [alembic.runtime.migration] Context impl MySQLImpl.\nINFO  [alembic.runtime.migration] Will assume non-transactional DDL.\nINFO  [alembic.runtime.migration] Context impl MySQLImpl.\nINFO  [alembic.runtime.migration] Will assume non-transactional DDL.\nINFO  [alembic.runtime.migration] Running upgrade  -> kilo, kilo_initial\nINFO  [alembic.runtime.migration] Running upgrade kilo -> 354db87e3225, nsxv_vdr_metadata.py\nINFO  [alembic.runtime.migration] Running upgrade 354db87e3225 -> 599c6a226151, neutrodb_ipam\nINFO  [alembic.runtime.migration] Running upgrade 599c6a226151 -> 52c5312f6baf, Initial operations in support of address scopes\nINFO  [alembic.runtime.migration] Running upgrade 52c5312f6baf -> 313373c0ffee, Flavor framework\nINFO  [alembic.runtime.migration] Running upgrade 313373c0ffee -> 8675309a5c4f, network_rbac\nINFO  [alembic.runtime.migration] Running upgrade 8675309a5c4f -> 45f955889773, quota_usage\nINFO  [alembic.runtime.migration] Running upgrade 45f955889773 -> 26c371498592, subnetpool hash\nINFO  [alembic.runtime.migration] Running upgrade 26c371498592 -> 1c844d1677f7, add order to dnsnameservers\nINFO  [alembic.runtime.migration] Running upgrade 1c844d1677f7 -> 1b4c6e320f79, address scope support in subnetpool\nINFO  [alembic.runtime.migration] Running upgrade 1b4c6e320f79 -> 48153cb5f051, qos db changes\nINFO  [alembic.runtime.migration] Running upgrade 48153cb5f051 -> 9859ac9c136, quota_reservations\nINFO  [alembic.runtime.migration] Running upgrade 9859ac9c136 -> 34af2b5c5a59, Add dns_name to Port\nINFO  [alembic.runtime.migration] Running upgrade 34af2b5c5a59 -> 59cb5b6cf4d, Add availability zone\nINFO  [alembic.runtime.migration] Running upgrade 59cb5b6cf4d -> 13cfb89f881a, add is_default to subnetpool\nINFO  [alembic.runtime.migration] Running upgrade 13cfb89f881a -> 32e5974ada25, Add standard attribute table\nINFO  [alembic.runtime.migration] Running upgrade 32e5974ada25 -> ec7fcfbf72ee, Add network availability zone\nINFO  [alembic.runtime.migration] Running upgrade ec7fcfbf72ee -> dce3ec7a25c9, Add router availability zone\nINFO  [alembic.runtime.migration] Running upgrade dce3ec7a25c9 -> c3a73f615e4, Add ip_version to AddressScope\nINFO  [alembic.runtime.migration] Running upgrade c3a73f615e4 -> 659bf3d90664, Add tables and attributes to support external DNS integration\nINFO  [alembic.runtime.migration] Running upgrade 659bf3d90664 -> 1df244e556f5, add_unique_ha_router_agent_port_bindings\nINFO  [alembic.runtime.migration] Running upgrade 1df244e556f5 -> 19f26505c74f, Auto Allocated Topology - aka Get-Me-A-Network\nINFO  [alembic.runtime.migration] Running upgrade 19f26505c74f -> 15be73214821, add dynamic routing model data\nINFO  [alembic.runtime.migration] Running upgrade 15be73214821 -> b4caf27aae4, add_bgp_dragent_model_data\nINFO  [alembic.runtime.migration] Running upgrade b4caf27aae4 -> 15e43b934f81, rbac_qos_policy\nINFO  [alembic.runtime.migration] Running upgrade 15e43b934f81 -> 31ed664953e6, Add resource_versions row to agent table\nINFO  [alembic.runtime.migration] Running upgrade 31ed664953e6 -> 2f9e956e7532, tag support\nINFO  [alembic.runtime.migration] Running upgrade 2f9e956e7532 -> 3894bccad37f, add_timestamp_to_base_resources\nINFO  [alembic.runtime.migration] Running upgrade 3894bccad37f -> 0e66c5227a8a, Add desc to standard attr table\nINFO  [alembic.runtime.migration] Running upgrade 0e66c5227a8a -> 45f8dd33480b, qos dscp db addition\nINFO  [alembic.runtime.migration] Running upgrade 45f8dd33480b -> 5abc0278ca73, Add support for VLAN trunking\nINFO  [alembic.runtime.migration] Running upgrade 5abc0278ca73 -> d3435b514502, Add device_id index to Port\nINFO  [alembic.runtime.migration] Running upgrade d3435b514502 -> 30107ab6a3ee, provisioning_blocks.py\nINFO  [alembic.runtime.migration] Running upgrade 30107ab6a3ee -> c415aab1c048, add revisions table\nINFO  [alembic.runtime.migration] Running upgrade c415aab1c048 -> a963b38d82f4, add dns name to portdnses\nINFO  [alembic.runtime.migration] Running upgrade kilo -> 30018084ec99, Initial no-op Liberty contract rule.\nINFO  [alembic.runtime.migration] Running upgrade 30018084ec99 -> 4ffceebfada, network_rbac\nINFO  [alembic.runtime.migration] Running upgrade 4ffceebfada -> 5498d17be016, Drop legacy OVS and LB plugin tables\nINFO  [alembic.runtime.migration] Running upgrade 5498d17be016 -> 2a16083502f3, Metaplugin removal\nINFO  [alembic.runtime.migration] Running upgrade 2a16083502f3 -> 2e5352a0ad4d, Add missing foreign keys\nINFO  [alembic.runtime.migration] Running upgrade 2e5352a0ad4d -> 11926bcfe72d, add geneve ml2 type driver\nINFO  [alembic.runtime.migration] Running upgrade 11926bcfe72d -> 4af11ca47297, Drop cisco monolithic tables\nINFO  [alembic.runtime.migration] Running upgrade 4af11ca47297 -> 1b294093239c, Drop embrane plugin table\nINFO  [alembic.runtime.migration] Running upgrade 1b294093239c -> 8a6d8bdae39, standardattributes migration\nINFO  [alembic.runtime.migration] Running upgrade 8a6d8bdae39 -> 2b4c2465d44b, DVR sheduling refactoring\nINFO  [alembic.runtime.migration] Running upgrade 2b4c2465d44b -> e3278ee65050, Drop NEC plugin tables\nINFO  [alembic.runtime.migration] Running upgrade e3278ee65050 -> c6c112992c9, rbac_qos_policy\nINFO  [alembic.runtime.migration] Running upgrade c6c112992c9 -> 5ffceebfada, network_rbac_external\nINFO  [alembic.runtime.migration] Running upgrade 5ffceebfada -> 4ffceebfcdc, standard_desc\nINFO  [alembic.runtime.migration] Running upgrade 4ffceebfcdc -> 7bbb25278f53, device_owner_ha_replicate_int\nINFO  [alembic.runtime.migration] Running upgrade 7bbb25278f53 -> 89ab9a816d70, Rename ml2_network_segments table\nINFO  [alembic.runtime.migration] Running upgrade a963b38d82f4 -> 3d0e74aa7d37, Add flavor_id to Router\nINFO  [alembic.runtime.migration] Running upgrade 3d0e74aa7d37 -> 030a959ceafa, uniq_routerports0port_id\nINFO  [alembic.runtime.migration] Running upgrade 030a959ceafa -> a5648cfeeadf, Add support for Subnet Service Types\nINFO  [alembic.runtime.migration] Running upgrade a5648cfeeadf -> 0f5bef0f87d4, add_qos_minimum_bandwidth_rules\nINFO  [alembic.runtime.migration] Running upgrade 0f5bef0f87d4 -> 67daae611b6e, add standardattr to qos policies\nINFO  [alembic.runtime.migration] Running upgrade 89ab9a816d70 -> c879c5e1ee90, Add segment_id to subnet\nINFO  [alembic.runtime.migration] Running upgrade c879c5e1ee90 -> 8fd3918ef6f4, Add segment_host_mapping table.\nINFO  [alembic.runtime.migration] Running upgrade 8fd3918ef6f4 -> 4bcd4df1f426, Rename ml2_dvr_port_bindings\nINFO  [alembic.runtime.migration] Running upgrade 4bcd4df1f426 -> b67e765a3524, Remove mtu column from networks.\nINFO  [alembic.runtime.migration] Running upgrade 67daae611b6e -> 6b461a21bcfc, uniq_floatingips0floating_network_id0fixed_port_id0fixed_ip_addr\nINFO  [alembic.runtime.migration] Running upgrade 6b461a21bcfc -> 5cd92597d11d, Add ip_allocation to port\nINFO  [alembic.runtime.migration] Running upgrade 5cd92597d11d -> 929c968efe70, add_pk_version_table\nINFO  [alembic.runtime.migration] Running upgrade 929c968efe70 -> a9c43481023c, extend_pk_with_host_and_add_status_to_ml2_port_binding\nINFO  [alembic.runtime.migration] Running upgrade a9c43481023c -> 804a3c76314c, Add data_plane_status to Port\nINFO  [alembic.runtime.migration] Running upgrade 804a3c76314c -> 2b42d90729da, qos add direction to bw_limit_rule table\nINFO  [alembic.runtime.migration] Running upgrade 2b42d90729da -> 62c781cb6192, add is default to qos policies\nINFO  [alembic.runtime.migration] Running upgrade 62c781cb6192 -> c8c222d42aa9, logging api\nINFO  [alembic.runtime.migration] Running upgrade c8c222d42aa9 -> 349b6fd605a6, Add dns_domain to portdnses\nINFO  [alembic.runtime.migration] Running upgrade 349b6fd605a6 -> 7d32f979895f, add mtu for networks\nINFO  [alembic.runtime.migration] Running upgrade 7d32f979895f -> 594422d373ee, fip qos\nINFO  [alembic.runtime.migration] Running upgrade b67e765a3524 -> a84ccf28f06a, migrate dns name from port\nINFO  [alembic.runtime.migration] Running upgrade a84ccf28f06a -> 7d9d8eeec6ad, rename tenant to project\nINFO  [alembic.runtime.migration] Running upgrade 7d9d8eeec6ad -> a8b517cff8ab, Add routerport bindings for L3 HA\nINFO  [alembic.runtime.migration] Running upgrade a8b517cff8ab -> 3b935b28e7a0, migrate to pluggable ipam\nINFO  [alembic.runtime.migration] Running upgrade 3b935b28e7a0 -> b12a3ef66e62, add standardattr to qos policies\nINFO  [alembic.runtime.migration] Running upgrade b12a3ef66e62 -> 97c25b0d2353, Add Name and Description to the networksegments table\nINFO  [alembic.runtime.migration] Running upgrade 97c25b0d2353 -> 2e0d7a8a1586, Add binding index to RouterL3AgentBinding\nINFO  [alembic.runtime.migration] Running upgrade 2e0d7a8a1586 -> 5c85685d616d, Remove availability ranges.\nINFO  [alembic.runtime.migration] Context impl MySQLImpl.\nINFO  [alembic.runtime.migration] Will assume non-transactional DDL.\nINFO  [alembic.runtime.migration] Context impl MySQLImpl.\nINFO  [alembic.runtime.migration] Will assume non-transactional DDL.\nINFO  [alembic.runtime.migration] Running upgrade  -> start_neutron_fwaas, start neutron-fwaas chain\nINFO  [alembic.runtime.migration] Running upgrade start_neutron_fwaas -> 4202e3047e47, add_index_tenant_id\nINFO  [alembic.runtime.migration] Running upgrade 4202e3047e47 -> 540142f314f4, FWaaS router insertion\nINFO  [alembic.runtime.migration] Running upgrade 540142f314f4 -> 796c68dffbb, cisco_csr_fwaas\nINFO  [alembic.runtime.migration] Running upgrade 796c68dffbb -> kilo, kilo\nINFO  [alembic.runtime.migration] Running upgrade kilo -> c40fbb377ad, Initial Liberty no-op script.\nINFO  [alembic.runtime.migration] Running upgrade c40fbb377ad -> 4b47ea298795, add reject rule\nINFO  [alembic.runtime.migration] Running upgrade 4b47ea298795 -> d6a12e637e28, neutron-fwaas v2.0\nINFO  [alembic.runtime.migration] Running upgrade d6a12e637e28 -> 876782258a43, create_default_firewall_groups_table\nINFO  [alembic.runtime.migration] Running upgrade 876782258a43 -> f24e0d5e5bff, uniq_firewallgroupportassociation0port\nINFO  [alembic.runtime.migration] Running upgrade kilo -> 67c8e8d61d5, Initial Liberty no-op script.\nINFO  [alembic.runtime.migration] Running upgrade 67c8e8d61d5 -> 458aa42b14b, fw_table_alter script to make <name> column case sensitive\nINFO  [alembic.runtime.migration] Running upgrade 458aa42b14b -> f83a0b2964d0, rename tenant to project\nINFO  [alembic.runtime.migration] Running upgrade f83a0b2964d0 -> fd38cd995cc0, change shared attribute for firewall resource\nINFO  [alembic.runtime.migration] Context impl MySQLImpl.\nINFO  [alembic.runtime.migration] Will assume non-transactional DDL.\nINFO  [alembic.runtime.migration] Context impl MySQLImpl.\nINFO  [alembic.runtime.migration] Will assume non-transactional DDL.\nINFO  [alembic.runtime.migration] Running upgrade  -> start_neutron_lbaas, start neutron-lbaas chain\nINFO  [alembic.runtime.migration] Running upgrade start_neutron_lbaas -> lbaasv2, lbaas version 2 api\nINFO  [alembic.runtime.migration] Running upgrade lbaasv2 -> 4deef6d81931, add provisioning and operating statuses\nINFO  [alembic.runtime.migration] Running upgrade 4deef6d81931 -> 4b6d8d5310b8, add_index_tenant_id\nINFO  [alembic.runtime.migration] Running upgrade 4b6d8d5310b8 -> 364f9b6064f0, agentv2\nINFO  [alembic.runtime.migration] Running upgrade 364f9b6064f0 -> lbaasv2_tls, lbaasv2 TLS\nINFO  [alembic.runtime.migration] Running upgrade lbaasv2_tls -> 4ba00375f715, edge_driver\nINFO  [alembic.runtime.migration] Running upgrade 4ba00375f715 -> kilo, kilo\nINFO  [alembic.runtime.migration] Running upgrade kilo -> 3345facd0452, Initial Liberty no-op expand script.\nINFO  [alembic.runtime.migration] Running upgrade 3345facd0452 -> 4a408dd491c2, Addition of Name column to lbaas_members and lbaas_healthmonitors table\nINFO  [alembic.runtime.migration] Running upgrade 4a408dd491c2 -> 3426acbc12de, Add flavor id\nINFO  [alembic.runtime.migration] Running upgrade 3426acbc12de -> 6aee0434f911, independent pools\nINFO  [alembic.runtime.migration] Running upgrade 6aee0434f911 -> 3543deab1547, add_l7_tables\nINFO  [alembic.runtime.migration] Running upgrade 3543deab1547 -> 62deca5010cd, Add tenant-id index for L7 tables\nINFO  [alembic.runtime.migration] Running upgrade kilo -> 130ebfdef43, Initial Liberty no-op contract revision.\nINFO  [alembic.runtime.migration] Running upgrade 130ebfdef43 -> 4b4dc6d5d843, rename tenant to project\nINFO  [alembic.runtime.migration] Running upgrade 4b4dc6d5d843 -> e6417a8b114d, Drop v1 tables\nINFO  [alembic.runtime.migration] Running upgrade 62deca5010cd -> 844352f9fe6f, Add healthmonitor max retries down', 'stdout': 'Running upgrade for neutron ...\nOK\nRunning upgrade for neutron-fwaas ...\nOK\nRunning upgrade for neutron-lbaas ...\nOK'}
2018-09-01 23:02:46,140 [salt.state       :1941][INFO    ][4757] Completed state [neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head] at time 23:02:46.139923 duration_in_ms=78063.571
2018-09-01 23:02:46,141 [salt.state       :1770][INFO    ][4757] Running state [neutron-db-manage --subproject networking-midonet upgrade head] at time 23:02:46.141361
2018-09-01 23:02:46,142 [salt.state       :1803][INFO    ][4757] Executing state cmd.run for [neutron-db-manage --subproject networking-midonet upgrade head]
2018-09-01 23:02:46,143 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4757] Executing command '/bin/false' in directory '/root'
2018-09-01 23:02:46,205 [salt.state       :290 ][INFO    ][4757] onlyif execution failed
2018-09-01 23:02:46,206 [salt.state       :1941][INFO    ][4757] Completed state [neutron-db-manage --subproject networking-midonet upgrade head] at time 23:02:46.206780 duration_in_ms=65.418
2018-09-01 23:02:46,208 [salt.state       :1770][INFO    ][4757] Running state [neutron-db-manage --config-file /etc/neutron/neutron.conf --subproject networking-bgpvpn upgrade head] at time 23:02:46.208227
2018-09-01 23:02:46,209 [salt.state       :1803][INFO    ][4757] Executing state cmd.run for [neutron-db-manage --config-file /etc/neutron/neutron.conf --subproject networking-bgpvpn upgrade head]
2018-09-01 23:02:46,210 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4757] Executing command '/bin/false' in directory '/root'
2018-09-01 23:02:46,232 [salt.state       :290 ][INFO    ][4757] onlyif execution failed
2018-09-01 23:02:46,232 [salt.state       :1941][INFO    ][4757] Completed state [neutron-db-manage --config-file /etc/neutron/neutron.conf --subproject networking-bgpvpn upgrade head] at time 23:02:46.232790 duration_in_ms=24.564
2018-09-01 23:02:46,233 [salt.state       :1770][INFO    ][4757] Running state [/usr/sbin/policy-rc.d] at time 23:02:46.233731
2018-09-01 23:02:46,234 [salt.state       :1803][INFO    ][4757] Executing state file.absent for [/usr/sbin/policy-rc.d]
2018-09-01 23:02:46,235 [salt.state       :290 ][INFO    ][4757] {'removed': '/usr/sbin/policy-rc.d'}
2018-09-01 23:02:46,235 [salt.state       :1941][INFO    ][4757] Completed state [/usr/sbin/policy-rc.d] at time 23:02:46.235521 duration_in_ms=1.789
2018-09-01 23:02:46,236 [salt.state       :1770][INFO    ][4757] Running state [ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini] at time 23:02:46.236311
2018-09-01 23:02:46,236 [salt.state       :1803][INFO    ][4757] Executing state cmd.run for [ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini]
2018-09-01 23:02:46,237 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4757] Executing command 'test -e /etc/neutron/plugin.ini' in directory '/root'
2018-09-01 23:02:46,254 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4757] Executing command 'ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini' in directory '/root'
2018-09-01 23:02:46,278 [salt.state       :290 ][INFO    ][4757] {'pid': 6105, 'retcode': 0, 'stderr': '', 'stdout': ''}
2018-09-01 23:02:46,279 [salt.state       :1941][INFO    ][4757] Completed state [ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini] at time 23:02:46.279398 duration_in_ms=43.085
2018-09-01 23:02:46,281 [salt.state       :1770][INFO    ][4757] Running state [/etc/neutron/api-paste.ini] at time 23:02:46.281055
2018-09-01 23:02:46,281 [salt.state       :1803][INFO    ][4757] Executing state file.managed for [/etc/neutron/api-paste.ini]
2018-09-01 23:02:46,308 [salt.fileclient  :1215][INFO    ][4757] Fetching file from saltenv 'base', ** done ** 'neutron/files/queens/api-paste.ini'
2018-09-01 23:02:46,363 [salt.state       :290 ][INFO    ][4757] File changed:
--- 
+++ 
@@ -1,3 +1,4 @@
+
 [composite:neutron]
 use = egg:Paste#urlmap
 /: neutronversions_composite

2018-09-01 23:02:46,363 [salt.state       :1941][INFO    ][4757] Completed state [/etc/neutron/api-paste.ini] at time 23:02:46.363223 duration_in_ms=82.17
2018-09-01 23:02:46,363 [salt.state       :1770][INFO    ][4757] Running state [/etc/default/neutron-server] at time 23:02:46.363558
2018-09-01 23:02:46,363 [salt.state       :1803][INFO    ][4757] Executing state file.managed for [/etc/default/neutron-server]
2018-09-01 23:02:46,380 [salt.fileclient  :1215][INFO    ][4757] Fetching file from saltenv 'base', ** done ** 'neutron/files/queens/neutron-server'
2018-09-01 23:02:46,425 [salt.state       :290 ][INFO    ][4757] File changed:
--- 
+++ 
@@ -1,5 +1,8 @@
+# Generated by Salt.
+
 # defaults for neutron-server
 
 # path to config file corresponding to the core_plugin specified in
 # neutron.conf
+#NEUTRON_PLUGIN_CONFIG="/etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini"
 NEUTRON_PLUGIN_CONFIG="/etc/neutron/plugins/ml2/ml2_conf.ini"

2018-09-01 23:02:46,425 [salt.state       :1941][INFO    ][4757] Completed state [/etc/default/neutron-server] at time 23:02:46.425293 duration_in_ms=61.735
2018-09-01 23:02:46,426 [salt.state       :1770][INFO    ][4757] Running state [neutron-server] at time 23:02:46.426444
2018-09-01 23:02:46,426 [salt.state       :1803][INFO    ][4757] Executing state service.running for [neutron-server]
2018-09-01 23:02:46,427 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4757] Executing command ['systemctl', 'status', 'neutron-server.service', '-n', '0'] in directory '/root'
2018-09-01 23:02:46,453 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4757] Executing command ['systemctl', 'is-active', 'neutron-server.service'] in directory '/root'
2018-09-01 23:02:46,475 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4757] Executing command ['systemctl', 'is-enabled', 'neutron-server.service'] in directory '/root'
2018-09-01 23:02:46,502 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4757] Executing command ['systemd-run', '--scope', 'systemctl', 'start', 'neutron-server.service'] in directory '/root'
2018-09-01 23:02:46,535 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4757] Executing command ['systemctl', 'is-active', 'neutron-server.service'] in directory '/root'
2018-09-01 23:02:46,551 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4757] Executing command ['systemctl', 'is-enabled', 'neutron-server.service'] in directory '/root'
2018-09-01 23:02:46,569 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4757] Executing command ['systemctl', 'is-enabled', 'neutron-server.service'] in directory '/root'
2018-09-01 23:02:46,591 [salt.state       :290 ][INFO    ][4757] {'neutron-server': True}
2018-09-01 23:02:46,591 [salt.state       :1941][INFO    ][4757] Completed state [neutron-server] at time 23:02:46.591867 duration_in_ms=165.422
2018-09-01 23:02:46,594 [salt.minion      :1708][INFO    ][4757] Returning information for job: 20180901230053661240
2018-09-01 23:07:18,645 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command test.ping with jid 20180901230718639327
2018-09-01 23:07:18,673 [salt.minion      :1431][INFO    ][6199] Starting a new job with PID 6199
2018-09-01 23:07:18,690 [salt.minion      :1708][INFO    ][6199] Returning information for job: 20180901230718639327
2018-09-01 23:07:18,821 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command state.sls with jid 20180901230718813235
2018-09-01 23:07:18,843 [salt.minion      :1431][INFO    ][6204] Starting a new job with PID 6204
2018-09-01 23:07:22,746 [salt.state       :905 ][INFO    ][6204] Loading fresh modules for state activity
2018-09-01 23:07:22,792 [salt.fileclient  :1215][INFO    ][6204] Fetching file from saltenv 'base', ** done ** 'barbican/init.sls'
2018-09-01 23:07:22,819 [salt.fileclient  :1215][INFO    ][6204] Fetching file from saltenv 'base', ** done ** 'barbican/server.sls'
2018-09-01 23:07:23,347 [salt.fileclient  :1215][INFO    ][6204] Fetching file from saltenv 'base', ** done ** 'barbican/_ssl.sls'
2018-09-01 23:07:23,897 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901230723888565
2018-09-01 23:07:23,921 [salt.minion      :1431][INFO    ][6237] Starting a new job with PID 6237
2018-09-01 23:07:23,937 [salt.minion      :1708][INFO    ][6237] Returning information for job: 20180901230723888565
2018-09-01 23:07:24,563 [salt.state       :1770][INFO    ][6204] Running state [apache2] at time 23:07:24.563359
2018-09-01 23:07:24,564 [salt.state       :1803][INFO    ][6204] Executing state pkg.installed for [apache2]
2018-09-01 23:07:24,564 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 23:07:24,941 [salt.state       :290 ][INFO    ][6204] All specified packages are already installed
2018-09-01 23:07:24,942 [salt.state       :1941][INFO    ][6204] Completed state [apache2] at time 23:07:24.942168 duration_in_ms=378.809
2018-09-01 23:07:24,942 [salt.state       :1770][INFO    ][6204] Running state [openssl] at time 23:07:24.942455
2018-09-01 23:07:24,942 [salt.state       :1803][INFO    ][6204] Executing state pkg.installed for [openssl]
2018-09-01 23:07:24,948 [salt.state       :290 ][INFO    ][6204] All specified packages are already installed
2018-09-01 23:07:24,948 [salt.state       :1941][INFO    ][6204] Completed state [openssl] at time 23:07:24.948155 duration_in_ms=5.7
2018-09-01 23:07:24,948 [salt.state       :1770][INFO    ][6204] Running state [a2enmod ssl] at time 23:07:24.948651
2018-09-01 23:07:24,948 [salt.state       :1803][INFO    ][6204] Executing state cmd.run for [a2enmod ssl]
2018-09-01 23:07:24,949 [salt.state       :290 ][INFO    ][6204] /etc/apache2/mods-enabled/ssl.load exists
2018-09-01 23:07:24,949 [salt.state       :1941][INFO    ][6204] Completed state [a2enmod ssl] at time 23:07:24.949292 duration_in_ms=0.64
2018-09-01 23:07:24,949 [salt.state       :1770][INFO    ][6204] Running state [a2enmod rewrite] at time 23:07:24.949645
2018-09-01 23:07:24,949 [salt.state       :1803][INFO    ][6204] Executing state cmd.run for [a2enmod rewrite]
2018-09-01 23:07:24,950 [salt.state       :290 ][INFO    ][6204] /etc/apache2/mods-enabled/rewrite.load exists
2018-09-01 23:07:24,950 [salt.state       :1941][INFO    ][6204] Completed state [a2enmod rewrite] at time 23:07:24.950237 duration_in_ms=0.593
2018-09-01 23:07:24,950 [salt.state       :1770][INFO    ][6204] Running state [libapache2-mod-wsgi] at time 23:07:24.950561
2018-09-01 23:07:24,950 [salt.state       :1803][INFO    ][6204] Executing state pkg.installed for [libapache2-mod-wsgi]
2018-09-01 23:07:24,955 [salt.state       :290 ][INFO    ][6204] All specified packages are already installed
2018-09-01 23:07:24,956 [salt.state       :1941][INFO    ][6204] Completed state [libapache2-mod-wsgi] at time 23:07:24.956044 duration_in_ms=5.483
2018-09-01 23:07:24,956 [salt.state       :1770][INFO    ][6204] Running state [a2enmod wsgi] at time 23:07:24.956371
2018-09-01 23:07:24,956 [salt.state       :1803][INFO    ][6204] Executing state cmd.run for [a2enmod wsgi]
2018-09-01 23:07:24,956 [salt.state       :290 ][INFO    ][6204] /etc/apache2/mods-enabled/wsgi.load exists
2018-09-01 23:07:24,956 [salt.state       :1941][INFO    ][6204] Completed state [a2enmod wsgi] at time 23:07:24.956964 duration_in_ms=0.594
2018-09-01 23:07:24,960 [salt.state       :1770][INFO    ][6204] Running state [/etc/apache2/mods-enabled/mpm_prefork.load] at time 23:07:24.960104
2018-09-01 23:07:24,960 [salt.state       :1803][INFO    ][6204] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_prefork.load]
2018-09-01 23:07:24,960 [salt.state       :290 ][INFO    ][6204] File /etc/apache2/mods-enabled/mpm_prefork.load is not present
2018-09-01 23:07:24,960 [salt.state       :1941][INFO    ][6204] Completed state [/etc/apache2/mods-enabled/mpm_prefork.load] at time 23:07:24.960765 duration_in_ms=0.662
2018-09-01 23:07:24,960 [salt.state       :1770][INFO    ][6204] Running state [/etc/apache2/mods-enabled/mpm_prefork.conf] at time 23:07:24.960941
2018-09-01 23:07:24,961 [salt.state       :1803][INFO    ][6204] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_prefork.conf]
2018-09-01 23:07:24,961 [salt.state       :290 ][INFO    ][6204] File /etc/apache2/mods-enabled/mpm_prefork.conf is not present
2018-09-01 23:07:24,961 [salt.state       :1941][INFO    ][6204] Completed state [/etc/apache2/mods-enabled/mpm_prefork.conf] at time 23:07:24.961503 duration_in_ms=0.562
2018-09-01 23:07:24,961 [salt.state       :1770][INFO    ][6204] Running state [/etc/apache2/mods-enabled/mpm_worker.load] at time 23:07:24.961675
2018-09-01 23:07:24,961 [salt.state       :1803][INFO    ][6204] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_worker.load]
2018-09-01 23:07:24,962 [salt.state       :290 ][INFO    ][6204] File /etc/apache2/mods-enabled/mpm_worker.load is not present
2018-09-01 23:07:24,962 [salt.state       :1941][INFO    ][6204] Completed state [/etc/apache2/mods-enabled/mpm_worker.load] at time 23:07:24.962224 duration_in_ms=0.549
2018-09-01 23:07:24,962 [salt.state       :1770][INFO    ][6204] Running state [/etc/apache2/mods-enabled/mpm_worker.conf] at time 23:07:24.962394
2018-09-01 23:07:24,962 [salt.state       :1803][INFO    ][6204] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_worker.conf]
2018-09-01 23:07:24,962 [salt.state       :290 ][INFO    ][6204] File /etc/apache2/mods-enabled/mpm_worker.conf is not present
2018-09-01 23:07:24,962 [salt.state       :1941][INFO    ][6204] Completed state [/etc/apache2/mods-enabled/mpm_worker.conf] at time 23:07:24.962928 duration_in_ms=0.534
2018-09-01 23:07:24,964 [salt.state       :1770][INFO    ][6204] Running state [/etc/apache2/mods-available/mpm_event.conf] at time 23:07:24.964502
2018-09-01 23:07:24,964 [salt.state       :1803][INFO    ][6204] Executing state file.managed for [/etc/apache2/mods-available/mpm_event.conf]
2018-09-01 23:07:25,016 [salt.state       :290 ][INFO    ][6204] File /etc/apache2/mods-available/mpm_event.conf is in the correct state
2018-09-01 23:07:25,016 [salt.state       :1941][INFO    ][6204] Completed state [/etc/apache2/mods-available/mpm_event.conf] at time 23:07:25.016184 duration_in_ms=51.682
2018-09-01 23:07:25,016 [salt.state       :1770][INFO    ][6204] Running state [a2enmod mpm_event] at time 23:07:25.016825
2018-09-01 23:07:25,017 [salt.state       :1803][INFO    ][6204] Executing state cmd.run for [a2enmod mpm_event]
2018-09-01 23:07:25,017 [salt.state       :290 ][INFO    ][6204] /etc/apache2/mods-enabled/mpm_event.load exists
2018-09-01 23:07:25,017 [salt.state       :1941][INFO    ][6204] Completed state [a2enmod mpm_event] at time 23:07:25.017503 duration_in_ms=0.678
2018-09-01 23:07:25,018 [salt.state       :1770][INFO    ][6204] Running state [apache_server_service_task] at time 23:07:25.018220
2018-09-01 23:07:25,018 [salt.state       :1803][INFO    ][6204] Executing state test.show_notification for [apache_server_service_task]
2018-09-01 23:07:25,018 [salt.state       :290 ][INFO    ][6204] Running apache.server.service
2018-09-01 23:07:25,018 [salt.state       :1941][INFO    ][6204] Completed state [apache_server_service_task] at time 23:07:25.018811 duration_in_ms=0.591
2018-09-01 23:07:25,019 [salt.state       :1770][INFO    ][6204] Running state [/etc/apache2/ports.conf] at time 23:07:25.019177
2018-09-01 23:07:25,019 [salt.state       :1803][INFO    ][6204] Executing state file.managed for [/etc/apache2/ports.conf]
2018-09-01 23:07:25,063 [salt.state       :290 ][INFO    ][6204] File /etc/apache2/ports.conf is in the correct state
2018-09-01 23:07:25,063 [salt.state       :1941][INFO    ][6204] Completed state [/etc/apache2/ports.conf] at time 23:07:25.063320 duration_in_ms=44.143
2018-09-01 23:07:25,063 [salt.state       :1770][INFO    ][6204] Running state [/etc/apache2/conf-available/security.conf] at time 23:07:25.063715
2018-09-01 23:07:25,063 [salt.state       :1803][INFO    ][6204] Executing state file.managed for [/etc/apache2/conf-available/security.conf]
2018-09-01 23:07:25,115 [salt.state       :290 ][INFO    ][6204] File /etc/apache2/conf-available/security.conf is in the correct state
2018-09-01 23:07:25,116 [salt.state       :1941][INFO    ][6204] Completed state [/etc/apache2/conf-available/security.conf] at time 23:07:25.116188 duration_in_ms=52.473
2018-09-01 23:07:25,122 [salt.state       :1770][INFO    ][6204] Running state [/etc/apache2/sites-enabled/000-default.conf] at time 23:07:25.122517
2018-09-01 23:07:25,122 [salt.state       :1803][INFO    ][6204] Executing state file.absent for [/etc/apache2/sites-enabled/000-default.conf]
2018-09-01 23:07:25,123 [salt.state       :290 ][INFO    ][6204] File /etc/apache2/sites-enabled/000-default.conf is not present
2018-09-01 23:07:25,123 [salt.state       :1941][INFO    ][6204] Completed state [/etc/apache2/sites-enabled/000-default.conf] at time 23:07:25.123757 duration_in_ms=1.239
2018-09-01 23:07:25,124 [salt.state       :1770][INFO    ][6204] Running state [/etc/apache2/sites-available/wsgi_barbican_admin.conf] at time 23:07:25.124303
2018-09-01 23:07:25,124 [salt.state       :1803][INFO    ][6204] Executing state file.managed for [/etc/apache2/sites-available/wsgi_barbican_admin.conf]
2018-09-01 23:07:25,280 [salt.state       :290 ][INFO    ][6204] File /etc/apache2/sites-available/wsgi_barbican_admin.conf is in the correct state
2018-09-01 23:07:25,281 [salt.state       :1941][INFO    ][6204] Completed state [/etc/apache2/sites-available/wsgi_barbican_admin.conf] at time 23:07:25.281312 duration_in_ms=157.009
2018-09-01 23:07:25,282 [salt.state       :1770][INFO    ][6204] Running state [barbican-api] at time 23:07:25.282577
2018-09-01 23:07:25,283 [salt.state       :1803][INFO    ][6204] Executing state pkg.installed for [barbican-api]
2018-09-01 23:07:25,298 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['apt-cache', '-q', 'policy', 'barbican-api'] in directory '/root'
2018-09-01 23:07:25,405 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-09-01 23:07:27,579 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 23:07:27,612 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'barbican-api'] in directory '/root'
2018-09-01 23:07:34,044 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901230734037922
2018-09-01 23:07:34,070 [salt.minion      :1431][INFO    ][7029] Starting a new job with PID 7029
2018-09-01 23:07:34,092 [salt.minion      :1708][INFO    ][7029] Returning information for job: 20180901230734037922
2018-09-01 23:07:34,892 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 23:07:34,951 [salt.state       :290 ][INFO    ][6204] Made the following changes:
'python-barbican' changed from 'absent' to '1:6.0.0-4~u16.04+mcp1'
'python-ldap3' changed from 'absent' to '1.0.3-1'
'barbican-api' changed from 'absent' to '1:6.0.0-4~u16.04+mcp1'
'barbican-common' changed from 'absent' to '1:6.0.0-4~u16.04+mcp1'
'python2.7-ldap' changed from 'absent' to '1'
'python-ldap' changed from 'absent' to '2.4.22-0.1'

2018-09-01 23:07:34,975 [salt.state       :905 ][INFO    ][6204] Loading fresh modules for state activity
2018-09-01 23:07:34,998 [salt.state       :1941][INFO    ][6204] Completed state [barbican-api] at time 23:07:34.998085 duration_in_ms=9715.508
2018-09-01 23:07:35,001 [salt.state       :1770][INFO    ][6204] Running state [barbican-keystone-listener] at time 23:07:35.001950
2018-09-01 23:07:35,002 [salt.state       :1803][INFO    ][6204] Executing state pkg.installed for [barbican-keystone-listener]
2018-09-01 23:07:35,638 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 23:07:35,667 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'barbican-keystone-listener'] in directory '/root'
2018-09-01 23:07:39,712 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 23:07:39,769 [salt.state       :290 ][INFO    ][6204] Made the following changes:
'barbican-keystone-listener' changed from 'absent' to '1:6.0.0-4~u16.04+mcp1'

2018-09-01 23:07:39,789 [salt.state       :905 ][INFO    ][6204] Loading fresh modules for state activity
2018-09-01 23:07:39,811 [salt.state       :1941][INFO    ][6204] Completed state [barbican-keystone-listener] at time 23:07:39.811718 duration_in_ms=4809.767
2018-09-01 23:07:39,815 [salt.state       :1770][INFO    ][6204] Running state [barbican-worker] at time 23:07:39.815683
2018-09-01 23:07:39,815 [salt.state       :1803][INFO    ][6204] Executing state pkg.installed for [barbican-worker]
2018-09-01 23:07:40,361 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-01 23:07:40,393 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'barbican-worker'] in directory '/root'
2018-09-01 23:07:44,208 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901230744196161
2018-09-01 23:07:44,235 [salt.minion      :1431][INFO    ][7633] Starting a new job with PID 7633
2018-09-01 23:07:44,255 [salt.minion      :1708][INFO    ][7633] Returning information for job: 20180901230744196161
2018-09-01 23:07:44,409 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-01 23:07:44,467 [salt.state       :290 ][INFO    ][6204] Made the following changes:
'barbican-worker' changed from 'absent' to '1:6.0.0-4~u16.04+mcp1'

2018-09-01 23:07:44,488 [salt.state       :905 ][INFO    ][6204] Loading fresh modules for state activity
2018-09-01 23:07:44,516 [salt.state       :1941][INFO    ][6204] Completed state [barbican-worker] at time 23:07:44.516384 duration_in_ms=4700.699
2018-09-01 23:07:44,522 [salt.state       :1770][INFO    ][6204] Running state [/etc/apache2/sites-available/barbican-api.conf] at time 23:07:44.522842
2018-09-01 23:07:44,523 [salt.state       :1803][INFO    ][6204] Executing state file.absent for [/etc/apache2/sites-available/barbican-api.conf]
2018-09-01 23:07:44,524 [salt.state       :290 ][INFO    ][6204] File /etc/apache2/sites-available/barbican-api.conf is not present
2018-09-01 23:07:44,524 [salt.state       :1941][INFO    ][6204] Completed state [/etc/apache2/sites-available/barbican-api.conf] at time 23:07:44.524654 duration_in_ms=1.811
2018-09-01 23:07:44,525 [salt.state       :1770][INFO    ][6204] Running state [/etc/apache2/sites-enabled/barbican-api.conf] at time 23:07:44.525080
2018-09-01 23:07:44,525 [salt.state       :1803][INFO    ][6204] Executing state file.absent for [/etc/apache2/sites-enabled/barbican-api.conf]
2018-09-01 23:07:44,525 [salt.state       :290 ][INFO    ][6204] File /etc/apache2/sites-enabled/barbican-api.conf is not present
2018-09-01 23:07:44,525 [salt.state       :1941][INFO    ][6204] Completed state [/etc/apache2/sites-enabled/barbican-api.conf] at time 23:07:44.525904 duration_in_ms=0.825
2018-09-01 23:07:44,526 [salt.state       :1770][INFO    ][6204] Running state [/etc/apache2/conf-enabled/barbican-api.conf] at time 23:07:44.526073
2018-09-01 23:07:44,526 [salt.state       :1803][INFO    ][6204] Executing state file.absent for [/etc/apache2/conf-enabled/barbican-api.conf]
2018-09-01 23:07:44,526 [salt.state       :290 ][INFO    ][6204] File /etc/apache2/conf-enabled/barbican-api.conf is not present
2018-09-01 23:07:44,526 [salt.state       :1941][INFO    ][6204] Completed state [/etc/apache2/conf-enabled/barbican-api.conf] at time 23:07:44.526582 duration_in_ms=0.509
2018-09-01 23:07:44,527 [salt.state       :1770][INFO    ][6204] Running state [/etc/apache2/sites-available/wsgi_barbican_admin.conf] at time 23:07:44.527137
2018-09-01 23:07:44,527 [salt.state       :1803][INFO    ][6204] Executing state file.exists for [/etc/apache2/sites-available/wsgi_barbican_admin.conf]
2018-09-01 23:07:44,527 [salt.state       :290 ][INFO    ][6204] Path /etc/apache2/sites-available/wsgi_barbican_admin.conf exists
2018-09-01 23:07:44,527 [salt.state       :1941][INFO    ][6204] Completed state [/etc/apache2/sites-available/wsgi_barbican_admin.conf] at time 23:07:44.527680 duration_in_ms=0.543
2018-09-01 23:07:44,528 [salt.state       :1770][INFO    ][6204] Running state [/etc/apache2/sites-available/wsgi_barbican.conf] at time 23:07:44.528013
2018-09-01 23:07:44,528 [salt.state       :1803][INFO    ][6204] Executing state file.managed for [/etc/apache2/sites-available/wsgi_barbican.conf]
2018-09-01 23:07:44,705 [salt.state       :290 ][INFO    ][6204] File /etc/apache2/sites-available/wsgi_barbican.conf is in the correct state
2018-09-01 23:07:44,706 [salt.state       :1941][INFO    ][6204] Completed state [/etc/apache2/sites-available/wsgi_barbican.conf] at time 23:07:44.706388 duration_in_ms=178.374
2018-09-01 23:07:44,707 [salt.state       :1770][INFO    ][6204] Running state [/etc/apache2/sites-available/wsgi_barbican.conf] at time 23:07:44.707269
2018-09-01 23:07:44,709 [salt.state       :1803][INFO    ][6204] Executing state file.exists for [/etc/apache2/sites-available/wsgi_barbican.conf]
2018-09-01 23:07:44,709 [salt.state       :290 ][INFO    ][6204] Path /etc/apache2/sites-available/wsgi_barbican.conf exists
2018-09-01 23:07:44,710 [salt.state       :1941][INFO    ][6204] Completed state [/etc/apache2/sites-available/wsgi_barbican.conf] at time 23:07:44.710416 duration_in_ms=3.147
2018-09-01 23:07:44,717 [salt.state       :1770][INFO    ][6204] Running state [/etc/apache2/sites-available/keystone_wsgi.conf] at time 23:07:44.717004
2018-09-01 23:07:44,717 [salt.state       :1803][INFO    ][6204] Executing state file.managed for [/etc/apache2/sites-available/keystone_wsgi.conf]
2018-09-01 23:07:44,965 [salt.state       :290 ][INFO    ][6204] File /etc/apache2/sites-available/keystone_wsgi.conf is in the correct state
2018-09-01 23:07:44,966 [salt.state       :1941][INFO    ][6204] Completed state [/etc/apache2/sites-available/keystone_wsgi.conf] at time 23:07:44.966417 duration_in_ms=249.413
2018-09-01 23:07:44,967 [salt.state       :1770][INFO    ][6204] Running state [/etc/apache2/sites-enabled/keystone_wsgi.conf] at time 23:07:44.967124
2018-09-01 23:07:44,967 [salt.state       :1803][INFO    ][6204] Executing state file.symlink for [/etc/apache2/sites-enabled/keystone_wsgi.conf]
2018-09-01 23:07:44,975 [salt.state       :290 ][INFO    ][6204] Symlink /etc/apache2/sites-enabled/keystone_wsgi.conf is present and owned by root:root
2018-09-01 23:07:44,975 [salt.state       :1941][INFO    ][6204] Completed state [/etc/apache2/sites-enabled/keystone_wsgi.conf] at time 23:07:44.975550 duration_in_ms=8.426
2018-09-01 23:07:45,398 [salt.state       :1770][INFO    ][6204] Running state [apache2] at time 23:07:45.398626
2018-09-01 23:07:45,399 [salt.state       :1803][INFO    ][6204] Executing state service.running for [apache2]
2018-09-01 23:07:45,399 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemctl', 'status', 'apache2.service', '-n', '0'] in directory '/root'
2018-09-01 23:07:45,430 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-09-01 23:07:45,460 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-09-01 23:07:45,487 [salt.state       :290 ][INFO    ][6204] The service apache2 is already running
2018-09-01 23:07:45,488 [salt.state       :1941][INFO    ][6204] Completed state [apache2] at time 23:07:45.488607 duration_in_ms=89.98
2018-09-01 23:07:45,490 [salt.state       :1770][INFO    ][6204] Running state [/etc/apache2/conf-enabled/security.conf] at time 23:07:45.490458
2018-09-01 23:07:45,494 [salt.state       :1803][INFO    ][6204] Executing state file.symlink for [/etc/apache2/conf-enabled/security.conf]
2018-09-01 23:07:45,497 [salt.state       :290 ][INFO    ][6204] Symlink /etc/apache2/conf-enabled/security.conf is present and owned by root:root
2018-09-01 23:07:45,497 [salt.state       :1941][INFO    ][6204] Completed state [/etc/apache2/conf-enabled/security.conf] at time 23:07:45.497898 duration_in_ms=7.439
2018-09-01 23:07:45,498 [salt.state       :1770][INFO    ][6204] Running state [/etc/apache2/sites-enabled/keystone_wsgi] at time 23:07:45.498315
2018-09-01 23:07:45,498 [salt.state       :1803][INFO    ][6204] Executing state file.absent for [/etc/apache2/sites-enabled/keystone_wsgi]
2018-09-01 23:07:45,499 [salt.state       :290 ][INFO    ][6204] File /etc/apache2/sites-enabled/keystone_wsgi is not present
2018-09-01 23:07:45,499 [salt.state       :1941][INFO    ][6204] Completed state [/etc/apache2/sites-enabled/keystone_wsgi] at time 23:07:45.499386 duration_in_ms=1.071
2018-09-01 23:07:45,500 [salt.state       :1770][INFO    ][6204] Running state [/etc/barbican/barbican.conf] at time 23:07:45.499990
2018-09-01 23:07:45,500 [salt.state       :1803][INFO    ][6204] Executing state file.managed for [/etc/barbican/barbican.conf]
2018-09-01 23:07:45,530 [salt.fileclient  :1215][INFO    ][6204] Fetching file from saltenv 'base', ** done ** 'barbican/files/queens/barbican.conf.Debian'
2018-09-01 23:07:45,639 [salt.fileclient  :1215][INFO    ][6204] Fetching file from saltenv 'base', ** done ** 'barbican/files/queens/plugin/_simple_crypto.conf'
2018-09-01 23:07:45,740 [salt.state       :290 ][INFO    ][6204] File changed:
--- 
+++ 
@@ -16,9 +16,11 @@
 # Maximum allowed http request size against the barbican-api. (integer
 # value)
 #max_allowed_request_size_in_bytes = 15000
+max_allowed_request_size_in_bytes = 1000000
 
 # Maximum allowed secret size in bytes. (integer value)
 #max_allowed_secret_in_bytes = 10000
+max_allowed_secret_in_bytes = 10000
 
 # Host name, for use in HATEOAS-style references Note: Typically this
 # would be the load balanced endpoint that clients would use to
@@ -27,6 +29,7 @@
 # to override default config value which is 'http://localhost:9311'
 # (string value)
 #host_href = http://localhost:9311
+host_href = http://10.167.4.35:9311
 
 # SQLAlchemy connection string for the reference implementation
 # registry server. Any valid SQLAlchemy connection string is fine.
@@ -35,6 +38,7 @@
 # Note: For absolute addresses, use '////' slashes after 'sqlite:'.
 # (string value)
 #sql_connection = sqlite:///barbican.sqlite
+sql_connection = mysql+pymysql://barbican:opnfv_secret@10.167.4.23/barbican
 
 # Period in seconds after which SQLAlchemy should reestablish its
 # connection to the database. MySQL uses a default `wait_timeout` of 8
@@ -43,6 +47,7 @@
 # value to ensure that SQLAlchemy reconnects before MySQL can drop the
 # connection. (integer value)
 #sql_idle_timeout = 3600
+sql_idle_timeout = 180
 
 # Maximum number of database connection retries during startup. Set to
 # -1 to specify an infinite retry count. (integer value)
@@ -54,14 +59,17 @@
 
 # Create the Barbican database on service startup. (boolean value)
 #db_auto_create = true
+db_auto_create = False
 
 # Maximum page size for the 'limit' paging URL parameter. (integer
 # value)
 #max_limit_paging = 100
+max_limit_paging = 100
 
 # Default page size for the 'limit' paging URL parameter. (integer
 # value)
 #default_limit_paging = 10
+default_limit_paging = 10
 
 # Accepts a class imported from the sqlalchemy.pool module, and
 # handles the details of building the pool for you. If commented out,
@@ -109,7 +117,6 @@
 # provided then the existence of this option overrides the usage of
 # that option. (string value)
 #backdoor_socket = <None>
-
 #
 # From oslo.log
 #
@@ -128,7 +135,6 @@
 # logging_context_format_string). (string value)
 # Note: This option can be changed without restarting.
 # Deprecated group/name - [DEFAULT]/log_config
-#log_config_append = <None>
 
 # Defines the format string for %%(asctime)s in log records. Default:
 # %(default)s . This option is ignored if log_config_append is set.
@@ -226,7 +232,6 @@
 
 # Enables or disables fatal status of deprecations. (boolean value)
 #fatal_deprecations = false
-
 #
 # From oslo.messaging
 #
@@ -415,6 +420,7 @@
 # https://docs.openstack.org/oslo.messaging/latest/reference/transport.html
 # (string value)
 #transport_url = <None>
+transport_url = rabbit://openstack:opnfv_secret@10.167.4.28:5672,openstack:opnfv_secret@10.167.4.29:5672,openstack:opnfv_secret@10.167.4.30:5672//openstack
 
 # DEPRECATED: The messaging driver to use, defaults to rabbit. Other
 # drivers include amqp and zmq. (string value)
@@ -428,49 +434,45 @@
 # option. (string value)
 #control_exchange = openstack
 
+
 #
 # From oslo.service.periodic_task
 #
 
 # Some periodic tasks can be run in a separate process. Should we run
 # them here? (boolean value)
-#run_external_periodic_tasks = true
-
-#
+#run_external_periodic_tasks = true#
 # From oslo.service.wsgi
 #
 
 # File name for the paste.deploy config for api service (string value)
 #api_paste_config = api-paste.ini
 
-# A python format string that is used as the template to generate log
-# lines. The following values can beformatted into it: client_ip,
-# date_time, request_line, status_code, body_length, wall_seconds.
-# (string value)
+# A python format string that is used as the template to generate log lines.
+# The following values can beformatted into it: client_ip, date_time,
+# request_line, status_code, body_length, wall_seconds. (string value)
 #wsgi_log_format = %(client_ip)s "%(request_line)s" status: %(status_code)s  len: %(body_length)s time: %(wall_seconds).7f
 
-# Sets the value of TCP_KEEPIDLE in seconds for each server socket.
-# Not supported on OS X. (integer value)
+# Sets the value of TCP_KEEPIDLE in seconds for each server socket. Not
+# supported on OS X. (integer value)
 #tcp_keepidle = 600
 
 # Size of the pool of greenthreads used by wsgi (integer value)
 #wsgi_default_pool_size = 100
 
-# Maximum line size of message headers to be accepted. max_header_line
-# may need to be increased when using large tokens (typically those
-# generated when keystone is configured to use PKI tokens with big
-# service catalogs). (integer value)
+# Maximum line size of message headers to be accepted. max_header_line may need
+# to be increased when using large tokens (typically those generated when
+# keystone is configured to use PKI tokens with big service catalogs). (integer
+# value)
 #max_header_line = 16384
 
-# If False, closes the client socket connection explicitly. (boolean
-# value)
+# If False, closes the client socket connection explicitly. (boolean value)
 #wsgi_keep_alive = true
 
-# Timeout for client connections' socket operations. If an incoming
-# connection is idle for this number of seconds it will be closed. A
-# value of '0' means wait forever. (integer value)
+# Timeout for client connections' socket operations. If an incoming connection
+# is idle for this number of seconds it will be closed. A value of '0' means
+# wait forever. (integer value)
 #client_socket_timeout = 900
-
 
 [certificate]
 
@@ -500,35 +502,6 @@
 
 [cors]
 
-#
-# From oslo.middleware.cors
-#
-
-# Indicate whether this resource may be shared with the domain
-# received in the requests "origin" header. Format:
-# "<protocol>://<host>[:<port>]", no trailing slash. Example:
-# https://horizon.example.com (list value)
-#allowed_origin = <None>
-
-# Indicate that the actual request can include user credentials
-# (boolean value)
-#allow_credentials = true
-
-# Indicate which headers are safe to expose to the API. Defaults to
-# HTTP Simple Headers. (list value)
-#expose_headers = X-Auth-Token,X-Openstack-Request-Id,X-Project-Id,X-Identity-Status,X-User-Id,X-Storage-Token,X-Domain-Id,X-User-Domain-Id,X-Project-Domain-Id,X-Roles
-
-# Maximum cache age of CORS preflight requests. (integer value)
-#max_age = 3600
-
-# Indicate which methods can be used during the actual request. (list
-# value)
-#allow_methods = GET,PUT,POST,DELETE,PATCH
-
-# Indicate which header field names may be used during the actual
-# request. (list value)
-#allow_headers = X-Auth-Token,X-Openstack-Request-Id,X-Project-Id,X-Identity-Status,X-User-Id,X-Storage-Token,X-Domain-Id,X-User-Domain-Id,X-Project-Domain-Id,X-Roles
-
 
 [crypto]
 
@@ -538,119 +511,94 @@
 
 # Extension namespace to search for plugins. (string value)
 #namespace = barbican.crypto.plugin
+namespace = barbican.crypto.plugin
 
 # List of crypto plugins to load. (multi valued)
 #enabled_crypto_plugins = simple_crypto
 
 
-[dogtag_plugin]
-
-#
-# From barbican.plugin.dogtag
-#
-
-# Path to PEM file for authentication (string value)
-#pem_path = /etc/barbican/kra_admin_cert.pem
-
-# Hostname for the Dogtag instance (string value)
-#dogtag_host = localhost
-
-# Port for the Dogtag instance (port value)
-# Minimum value: 0
-# Maximum value: 65535
-#dogtag_port = 8443
-
-# Path to the NSS certificate database (string value)
-#nss_db_path = /etc/barbican/alias
-
-# Password for the NSS certificate databases (string value)
-#nss_password = <None>
-
-# Profile for simple CMC requests (string value)
-#simple_cmc_profile = caOtherCert
-
-# List of automatically approved enrollment profiles (string value)
-#auto_approved_profiles = caServerCert
-
-# Time in days for CA entries to expire (string value)
-#ca_expiration_time = 1
-
-# Working directory for Dogtag plugin (string value)
-#plugin_working_dir = /etc/barbican/dogtag
+[secretstore:software]
+secret_store_plugin = store_crypto
+crypto_plugin = simple_crypto
+global_default = True
+
+
+
+[simple_crypto_plugin]
+#
+# From barbican.plugin.crypto.simple
+#
+
+# Key encryption key to be used by Simple Crypto Plugin (string value)
+#kek = dGhpcnR5X3R3b19ieXRlX2tleWJsYWhibGFoYmxhaGg=
+kek = 'YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXoxMjM0NTY='
 
 # User friendly plugin name (string value)
-#plugin_name = Dogtag KRA
-
-# Retries when storing or generating secrets (integer value)
-#retries = 3
+#plugin_name = Software Only Crypto
 
 
 [keystone_authtoken]
-
 #
 # From keystonemiddleware.auth_token
 #
 
-# Complete "public" Identity API endpoint. This endpoint should not be
-# an "admin" endpoint, as it should be accessible by all end users.
-# Unauthenticated clients are redirected to this endpoint to
-# authenticate. Although this endpoint should ideally be unversioned,
-# client support in the wild varies. If you're using a versioned v2
-# endpoint here, then this should *not* be the same endpoint the
-# service user utilizes for validating tokens, because normal end
-# users may not be able to reach that endpoint. (string value)
+# Complete "public" Identity API endpoint. This endpoint should not be an
+# "admin" endpoint, as it should be accessible by all end users.
+# Unauthenticated clients are redirected to this endpoint to authenticate.
+# Although this endpoint should ideally be unversioned, client support in the
+# wild varies. If you're using a versioned v2 endpoint here, then this should
+# *not* be the same endpoint the service user utilizes for validating tokens,
+# because normal end users may not be able to reach that endpoint. (string
+# value)
 # Deprecated group/name - [keystone_authtoken]/auth_uri
 #www_authenticate_uri = <None>
-
-# DEPRECATED: Complete "public" Identity API endpoint. This endpoint
-# should not be an "admin" endpoint, as it should be accessible by all
-# end users. Unauthenticated clients are redirected to this endpoint
-# to authenticate. Although this endpoint should ideally be
-# unversioned, client support in the wild varies. If you're using a
-# versioned v2 endpoint here, then this should *not* be the same
-# endpoint the service user utilizes for validating tokens, because
-# normal end users may not be able to reach that endpoint. This option
-# is deprecated in favor of www_authenticate_uri and will be removed
-# in the S release. (string value)
+www_authenticate_uri = http://10.167.4.35:5000
+
+# DEPRECATED: Complete "public" Identity API endpoint. This endpoint should not
+# be an "admin" endpoint, as it should be accessible by all end users.
+# Unauthenticated clients are redirected to this endpoint to authenticate.
+# Although this endpoint should ideally be unversioned, client support in the
+# wild varies. If you're using a versioned v2 endpoint here, then this should
+# *not* be the same endpoint the service user utilizes for validating tokens,
+# because normal end users may not be able to reach that endpoint. This option
+# is deprecated in favor of www_authenticate_uri and will be removed in the S
+# release. (string value)
 # This option is deprecated for removal since Queens.
 # Its value may be silently ignored in the future.
-# Reason: The auth_uri option is deprecated in favor of
-# www_authenticate_uri and will be removed in the S  release.
+# Reason: The auth_uri option is deprecated in favor of www_authenticate_uri
+# and will be removed in the S  release.
 #auth_uri = <None>
+auth_uri = http://10.167.4.35:5000
 
 # API version of the admin Identity API endpoint. (string value)
 #auth_version = <None>
 
-# Do not handle authorization requests within the middleware, but
-# delegate the authorization decision to downstream WSGI components.
-# (boolean value)
+# Do not handle authorization requests within the middleware, but delegate the
+# authorization decision to downstream WSGI components. (boolean value)
 #delay_auth_decision = false
 
-# Request timeout value for communicating with Identity API server.
-# (integer value)
+# Request timeout value for communicating with Identity API server. (integer
+# value)
 #http_connect_timeout = <None>
 
-# How many times are we trying to reconnect when communicating with
-# Identity API Server. (integer value)
+# How many times are we trying to reconnect when communicating with Identity
+# API Server. (integer value)
 #http_request_max_retries = 3
 
 # Request environment key where the Swift cache object is stored. When
-# auth_token middleware is deployed with a Swift cache, use this
-# option to have the middleware share a caching backend with swift.
-# Otherwise, use the ``memcached_servers`` option instead. (string
-# value)
+# auth_token middleware is deployed with a Swift cache, use this option to have
+# the middleware share a caching backend with swift. Otherwise, use the
+# ``memcached_servers`` option instead. (string value)
 #cache = <None>
 
-# Required if identity server requires client certificate (string
-# value)
+# Required if identity server requires client certificate (string value)
 #certfile = <None>
 
-# Required if identity server requires client certificate (string
-# value)
+# Required if identity server requires client certificate (string value)
 #keyfile = <None>
 
-# A PEM encoded Certificate Authority to use when verifying HTTPs
-# connections. Defaults to system CAs. (string value)
+# A PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# Defaults to system CAs. (string value)
 #cafile = <None>
 
 # Verify HTTPS connections. (boolean value)
@@ -659,177 +607,233 @@
 # The region in which the identity server can be found. (string value)
 #region_name = <None>
 
-# DEPRECATED: Directory used to cache files related to PKI tokens.
-# This option has been deprecated in the Ocata release and will be
-# removed in the P release. (string value)
+# DEPRECATED: Directory used to cache files related to PKI tokens. This option
+# has been deprecated in the Ocata release and will be removed in the P
+# release. (string value)
 # This option is deprecated for removal since Ocata.
 # Its value may be silently ignored in the future.
 # Reason: PKI token format is no longer supported.
 #signing_dir = <None>
 
-# Optionally specify a list of memcached server(s) to use for caching.
-# If left undefined, tokens will instead be cached in-process. (list
-# value)
+# Optionally specify a list of memcached server(s) to use for caching. If left
+# undefined, tokens will instead be cached in-process. (list value)
 # Deprecated group/name - [keystone_authtoken]/memcache_servers
 #memcached_servers = <None>
 
-# In order to prevent excessive effort spent validating tokens, the
-# middleware caches previously-seen tokens for a configurable duration
-# (in seconds). Set to -1 to disable caching completely. (integer
-# value)
+# In order to prevent excessive effort spent validating tokens, the middleware
+# caches previously-seen tokens for a configurable duration (in seconds). Set
+# to -1 to disable caching completely. (integer value)
 #token_cache_time = 300
 
-# DEPRECATED: Determines the frequency at which the list of revoked
-# tokens is retrieved from the Identity service (in seconds). A high
-# number of revocation events combined with a low cache duration may
-# significantly reduce performance. Only valid for PKI tokens. This
-# option has been deprecated in the Ocata release and will be removed
-# in the P release. (integer value)
+# DEPRECATED: Determines the frequency at which the list of revoked tokens is
+# retrieved from the Identity service (in seconds). A high number of revocation
+# events combined with a low cache duration may significantly reduce
+# performance. Only valid for PKI tokens. This option has been deprecated in
+# the Ocata release and will be removed in the P release. (integer value)
 # This option is deprecated for removal since Ocata.
 # Its value may be silently ignored in the future.
 # Reason: PKI token format is no longer supported.
 #revocation_cache_time = 10
 
-# (Optional) If defined, indicate whether token data should be
-# authenticated or authenticated and encrypted. If MAC, token data is
-# authenticated (with HMAC) in the cache. If ENCRYPT, token data is
-# encrypted and authenticated in the cache. If the value is not one of
-# these options or empty, auth_token will raise an exception on
-# initialization. (string value)
+# (Optional) If defined, indicate whether token data should be authenticated or
+# authenticated and encrypted. If MAC, token data is authenticated (with HMAC)
+# in the cache. If ENCRYPT, token data is encrypted and authenticated in the
+# cache. If the value is not one of these options or empty, auth_token will
+# raise an exception on initialization. (string value)
 # Possible values:
 # None - <No description provided>
 # MAC - <No description provided>
 # ENCRYPT - <No description provided>
 #memcache_security_strategy = None
 
-# (Optional, mandatory if memcache_security_strategy is defined) This
-# string is used for key derivation. (string value)
+# (Optional, mandatory if memcache_security_strategy is defined) This string is
+# used for key derivation. (string value)
 #memcache_secret_key = <None>
 
-# (Optional) Number of seconds memcached server is considered dead
-# before it is tried again. (integer value)
+# (Optional) Number of seconds memcached server is considered dead before it is
+# tried again. (integer value)
 #memcache_pool_dead_retry = 300
 
-# (Optional) Maximum total number of open connections to every
-# memcached server. (integer value)
+# (Optional) Maximum total number of open connections to every memcached
+# server. (integer value)
 #memcache_pool_maxsize = 10
 
-# (Optional) Socket timeout in seconds for communicating with a
-# memcached server. (integer value)
+# (Optional) Socket timeout in seconds for communicating with a memcached
+# server. (integer value)
 #memcache_pool_socket_timeout = 3
 
-# (Optional) Number of seconds a connection to memcached is held
-# unused in the pool before it is closed. (integer value)
+# (Optional) Number of seconds a connection to memcached is held unused in the
+# pool before it is closed. (integer value)
 #memcache_pool_unused_timeout = 60
 
-# (Optional) Number of seconds that an operation will wait to get a
-# memcached client connection from the pool. (integer value)
+# (Optional) Number of seconds that an operation will wait to get a memcached
+# client connection from the pool. (integer value)
 #memcache_pool_conn_get_timeout = 10
 
-# (Optional) Use the advanced (eventlet safe) memcached client pool.
-# The advanced pool will only work under python 2.x. (boolean value)
+# (Optional) Use the advanced (eventlet safe) memcached client pool. The
+# advanced pool will only work under python 2.x. (boolean value)
 #memcache_use_advanced_pool = false
 
-# (Optional) Indicate whether to set the X-Service-Catalog header. If
-# False, middleware will not ask for service catalog on token
-# validation and will not set the X-Service-Catalog header. (boolean
-# value)
+# (Optional) Indicate whether to set the X-Service-Catalog header. If False,
+# middleware will not ask for service catalog on token validation and will not
+# set the X-Service-Catalog header. (boolean value)
 #include_service_catalog = true
 
-# Used to control the use and type of token binding. Can be set to:
-# "disabled" to not check token binding. "permissive" (default) to
-# validate binding information if the bind type is of a form known to
-# the server and ignore it if not. "strict" like "permissive" but if
-# the bind type is unknown the token will be rejected. "required" any
-# form of token binding is needed to be allowed. Finally the name of a
-# binding method that must be present in tokens. (string value)
+# Used to control the use and type of token binding. Can be set to: "disabled"
+# to not check token binding. "permissive" (default) to validate binding
+# information if the bind type is of a form known to the server and ignore it
+# if not. "strict" like "permissive" but if the bind type is unknown the token
+# will be rejected. "required" any form of token binding is needed to be
+# allowed. Finally the name of a binding method that must be present in tokens.
+# (string value)
 #enforce_token_bind = permissive
 
-# DEPRECATED: If true, the revocation list will be checked for cached
-# tokens. This requires that PKI tokens are configured on the identity
-# server. (boolean value)
+# DEPRECATED: If true, the revocation list will be checked for cached tokens.
+# This requires that PKI tokens are configured on the identity server. (boolean
+# value)
 # This option is deprecated for removal since Ocata.
 # Its value may be silently ignored in the future.
 # Reason: PKI token format is no longer supported.
 #check_revocations_for_cached = false
 
-# DEPRECATED: Hash algorithms to use for hashing PKI tokens. This may
-# be a single algorithm or multiple. The algorithms are those
-# supported by Python standard hashlib.new(). The hashes will be tried
-# in the order given, so put the preferred one first for performance.
-# The result of the first hash will be stored in the cache. This will
-# typically be set to multiple values only while migrating from a less
-# secure algorithm to a more secure one. Once all the old tokens are
-# expired this option should be set to a single value for better
+# DEPRECATED: Hash algorithms to use for hashing PKI tokens. This may be a
+# single algorithm or multiple. The algorithms are those supported by Python
+# standard hashlib.new(). The hashes will be tried in the order given, so put
+# the preferred one first for performance. The result of the first hash will be
+# stored in the cache. This will typically be set to multiple values only while
+# migrating from a less secure algorithm to a more secure one. Once all the old
+# tokens are expired this option should be set to a single value for better
 # performance. (list value)
 # This option is deprecated for removal since Ocata.
 # Its value may be silently ignored in the future.
 # Reason: PKI token format is no longer supported.
 #hash_algorithms = md5
 
-# A choice of roles that must be present in a service token. Service
-# tokens are allowed to request that an expired token can be used and
-# so this check should tightly control that only actual services
-# should be sending this token. Roles here are applied as an ANY check
-# so any role in this list must be present. For backwards
-# compatibility reasons this currently only affects the allow_expired
-# check. (list value)
+# A choice of roles that must be present in a service token. Service tokens are
+# allowed to request that an expired token can be used and so this check should
+# tightly control that only actual services should be sending this token. Roles
+# here are applied as an ANY check so any role in this list must be present.
+# For backwards compatibility reasons this currently only affects the
+# allow_expired check. (list value)
 #service_token_roles = service
 
-# For backwards compatibility reasons we must let valid service tokens
-# pass that don't pass the service_token_roles check as valid. Setting
-# this true will become the default in a future release and should be
-# enabled if possible. (boolean value)
+# For backwards compatibility reasons we must let valid service tokens pass
+# that don't pass the service_token_roles check as valid. Setting this true
+# will become the default in a future release and should be enabled if
+# possible. (boolean value)
 #service_token_roles_required = false
-
-# Prefix to prepend at the beginning of the path. Deprecated, use
-# identity_uri. (string value)
-#auth_admin_prefix =
-
-# Host providing the admin Identity API endpoint. Deprecated, use
-# identity_uri. (string value)
-#auth_host = 127.0.0.1
-
-# Port of the admin Identity API endpoint. Deprecated, use
-# identity_uri. (integer value)
-#auth_port = 35357
-
-# Protocol of the admin Identity API endpoint. Deprecated, use
-# identity_uri. (string value)
-# Possible values:
-# http - <No description provided>
-# https - <No description provided>
-#auth_protocol = https
-
-# Complete admin Identity API endpoint. This should specify the
-# unversioned root endpoint e.g. https://localhost:35357/ (string
-# value)
-#identity_uri = <None>
-
-# This option is deprecated and may be removed in a future release.
-# Single shared secret with the Keystone configuration used for
-# bootstrapping a Keystone installation, or otherwise bypassing the
-# normal authentication process. This option should not be used, use
-# `admin_user` and `admin_password` instead. (string value)
-#admin_token = <None>
-
-# Service username. (string value)
-#admin_user = <None>
-
-# Service user password. (string value)
-#admin_password = <None>
-
-# Service tenant name. (string value)
-#admin_tenant_name = admin
 
 # Authentication type to load (string value)
 # Deprecated group/name - [keystone_authtoken]/auth_plugin
 #auth_type = <None>
-
-# Config Section from which to load plugin specific options (string
-# value)
+auth_type = password
+
+# Config Section from which to load plugin specific options (string value)
 #auth_section = <None>
 
+# Name of nova region to use. Useful if keystone manages more than one region.
+# (string value)
+#region_name = <None>
+
+# Type of the nova endpoint to use.  This endpoint will be looked up in the
+# keystone catalog and should be one of public, internal or admin. (string
+# value)
+# Possible values:
+# public - <No description provided>
+# admin - <No description provided>
+# internal - <No description provided>
+#endpoint_type = public
+endpoint_type = internalURL
+
+# API version of the admin Identity API endpoint. (string value)
+#auth_version = <None>
+
+
+# Authentication URL (string value)
+#auth_url = <None>
+auth_url = http://10.167.4.35:35357
+
+# Authentication type to load (string value)
+# Deprecated group/name - [nova]/auth_plugin
+#auth_type = <None>
+auth_type = password
+
+# Required if identity server requires client certificate (string value)
+#certfile = <None>
+
+# A PEM encoded Certificate Authority to use when verifying HTTPs connections.
+# Defaults to system CAs. (string value)
+#cafile = <None>
+
+# Optional domain ID to use with v3 and v2 parameters. It will be used for both
+# the user and project domain in v3 and ignored in v2 authentication. (string
+# value)
+#default_domain_id = <None>
+
+# Optional domain name to use with v3 API and v2 parameters. It will be used for
+# both the user and project domain in v3 and ignored in v2 authentication.
+# (string value)
+#default_domain_name = <None>
+
+# Domain ID to scope to (string value)
+#domain_id = <None>
+
+# Domain name to scope to (string value)
+#domain_name = <None>
+
+# Verify HTTPS connections. (boolean value)
+#insecure = false
+
+# Required if identity server requires client certificate (string value)
+#keyfile = <None>
+
+# User's password (string value)
+#password = <None>
+password = opnfv_secret
+
+# Domain ID containing project (string value)
+#project_domain_id = <None>
+project_domain_id = default
+
+# Domain name containing project (string value)
+#project_domain_name = <None>
+
+# Project ID to scope to (string value)
+#project_id = <None>
+
+# Project name to scope to (string value)
+#project_name = <None>
+project_name = service
+
+# Scope for system operations (string value)
+#system_scope = <None>
+
+# Tenant ID (string value)
+#tenant_id = <None>
+
+# Tenant Name (string value)
+#tenant_name = <None>
+
+# Timeout value for http requests (integer value)
+#timeout = <None>
+
+# Trust ID (string value)
+#trust_id = <None>
+
+# User's domain id (string value)
+#user_domain_id = <None>
+user_domain_id = default
+
+# User's domain name (string value)
+#user_domain_name = <None>
+
+# User ID (string value)
+#user_id = <None>
+
+# Username (string value)
+# Deprecated group/name - [neutron]/user_name
+#username = <None>
+username = barbican
 
 [keystone_notifications]
 
@@ -840,6 +844,7 @@
 # True enables keystone notification listener  functionality. (boolean
 # value)
 #enable = false
+enable = True
 
 # The default exchange under which topics are scoped. May be
 # overridden by an exchange name specified in the transport_url
@@ -860,6 +865,7 @@
 # error. Enable this only when underlying transport supports this
 # feature. (boolean value)
 #allow_requeue = false
+allow_requeue = False
 
 # Version of tasks invoked via notifications (string value)
 #version = 1.0
@@ -867,46 +873,6 @@
 # Define the number of max threads to be used for notification server
 # processing functionality. (integer value)
 #thread_pool_size = 10
-
-
-[kmip_plugin]
-
-#
-# From barbican.plugin.secret_store.kmip
-#
-
-# Username for authenticating with KMIP server (string value)
-#username = <None>
-
-# Password for authenticating with KMIP server (string value)
-#password = <None>
-
-# Address of the KMIP server (string value)
-#host = localhost
-
-# Port for the KMIP server (port value)
-# Minimum value: 0
-# Maximum value: 65535
-#port = 5696
-
-# SSL version, maps to the module ssl's constants (string value)
-#ssl_version = PROTOCOL_TLSv1_2
-
-# File path to concatenated "certification authority" certificates
-# (string value)
-#ca_certs = <None>
-
-# File path to local client certificate (string value)
-#certfile = <None>
-
-# File path to local client certificate keyfile (string value)
-#keyfile = <None>
-
-# Only support PKCS#1 encoding of asymmetric keys (boolean value)
-#pkcs1_only = false
-
-# User friendly plugin name (string value)
-#plugin_name = KMIP HSM
 
 
 [matchmaker_redis]
@@ -953,309 +919,7 @@
 
 # Timeout in ms on blocking socket operations. (integer value)
 #socket_timeout = 10000
-
-
-[oslo_messaging_amqp]
-
-#
-# From oslo.messaging
-#
-
-# Name for the AMQP container. must be globally unique. Defaults to a
-# generated UUID (string value)
-#container_name = <None>
-
-# Timeout for inactive connections (in seconds) (integer value)
-#idle_timeout = 0
-
-# Debug: dump AMQP frames to stdout (boolean value)
-#trace = false
-
-# Attempt to connect via SSL. If no other ssl-related parameters are
-# given, it will use the system's CA-bundle to verify the server's
-# certificate. (boolean value)
-#ssl = false
-
-# CA certificate PEM file used to verify the server's certificate
-# (string value)
-#ssl_ca_file =
-
-# Self-identifying certificate PEM file for client authentication
-# (string value)
-#ssl_cert_file =
-
-# Private key PEM file used to sign ssl_cert_file certificate
-# (optional) (string value)
-#ssl_key_file =
-
-# Password for decrypting ssl_key_file (if encrypted) (string value)
-#ssl_key_password = <None>
-
-# By default SSL checks that the name in the server's certificate
-# matches the hostname in the transport_url. In some configurations it
-# may be preferable to use the virtual hostname instead, for example
-# if the server uses the Server Name Indication TLS extension
-# (rfc6066) to provide a certificate per virtual host. Set
-# ssl_verify_vhost to True if the server's SSL certificate uses the
-# virtual host name instead of the DNS name. (boolean value)
-#ssl_verify_vhost = false
-
-# DEPRECATED: Accept clients using either SSL or plain TCP (boolean
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Not applicable - not a SSL server
-#allow_insecure_clients = false
-
-# Space separated list of acceptable SASL mechanisms (string value)
-#sasl_mechanisms =
-
-# Path to directory that contains the SASL configuration (string
-# value)
-#sasl_config_dir =
-
-# Name of configuration file (without .conf suffix) (string value)
-#sasl_config_name =
-
-# SASL realm to use if no realm present in username (string value)
-#sasl_default_realm =
-
-# DEPRECATED: User name for message broker authentication (string
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the
-# username.
-#username =
-
-# DEPRECATED: Password for message broker authentication (string
-# value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Should use configuration option transport_url to provide the
-# password.
-#password =
-
-# Seconds to pause before attempting to re-connect. (integer value)
-# Minimum value: 1
-#connection_retry_interval = 1
-
-# Increase the connection_retry_interval by this many seconds after
-# each unsuccessful failover attempt. (integer value)
-# Minimum value: 0
-#connection_retry_backoff = 2
-
-# Maximum limit for connection_retry_interval +
-# connection_retry_backoff (integer value)
-# Minimum value: 1
-#connection_retry_interval_max = 30
-
-# Time to pause between re-connecting an AMQP 1.0 link that failed due
-# to a recoverable error. (integer value)
-# Minimum value: 1
-#link_retry_delay = 10
-
-# The maximum number of attempts to re-send a reply message which
-# failed due to a recoverable error. (integer value)
-# Minimum value: -1
-#default_reply_retry = 0
-
-# The deadline for an rpc reply message delivery. (integer value)
-# Minimum value: 5
-#default_reply_timeout = 30
-
-# The deadline for an rpc cast or call message delivery. Only used
-# when caller does not provide a timeout expiry. (integer value)
-# Minimum value: 5
-#default_send_timeout = 30
-
-# The deadline for a sent notification message delivery. Only used
-# when caller does not provide a timeout expiry. (integer value)
-# Minimum value: 5
-#default_notify_timeout = 30
-
-# The duration to schedule a purge of idle sender links. Detach link
-# after expiry. (integer value)
-# Minimum value: 1
-#default_sender_link_timeout = 600
-
-# Indicates the addressing mode used by the driver.
-# Permitted values:
-# 'legacy'   - use legacy non-routable addressing
-# 'routable' - use routable addresses
-# 'dynamic'  - use legacy addresses if the message bus does not
-# support routing otherwise use routable addressing (string value)
-#addressing_mode = dynamic
-
-# Enable virtual host support for those message buses that do not
-# natively support virtual hosting (such as qpidd). When set to true
-# the virtual host name will be added to all message bus addresses,
-# effectively creating a private 'subnet' per virtual host. Set to
-# False if the message bus supports virtual hosting using the
-# 'hostname' field in the AMQP 1.0 Open performative as the name of
-# the virtual host. (boolean value)
-#pseudo_vhost = true
-
-# address prefix used when sending to a specific server (string value)
-#server_request_prefix = exclusive
-
-# address prefix used when broadcasting to all servers (string value)
-#broadcast_prefix = broadcast
-
-# address prefix when sending to any server in group (string value)
-#group_request_prefix = unicast
-
-# Address prefix for all generated RPC addresses (string value)
-#rpc_address_prefix = openstack.org/om/rpc
-
-# Address prefix for all generated Notification addresses (string
-# value)
-#notify_address_prefix = openstack.org/om/notify
-
-# Appended to the address prefix when sending a fanout message. Used
-# by the message bus to identify fanout messages. (string value)
-#multicast_address = multicast
-
-# Appended to the address prefix when sending to a particular
-# RPC/Notification server. Used by the message bus to identify
-# messages sent to a single destination. (string value)
-#unicast_address = unicast
-
-# Appended to the address prefix when sending to a group of consumers.
-# Used by the message bus to identify messages that should be
-# delivered in a round-robin fashion across consumers. (string value)
-#anycast_address = anycast
-
-# Exchange name used in notification addresses.
-# Exchange name resolution precedence:
-# Target.exchange if set
-# else default_notification_exchange if set
-# else control_exchange if set
-# else 'notify' (string value)
-#default_notification_exchange = <None>
-
-# Exchange name used in RPC addresses.
-# Exchange name resolution precedence:
-# Target.exchange if set
-# else default_rpc_exchange if set
-# else control_exchange if set
-# else 'rpc' (string value)
-#default_rpc_exchange = <None>
-
-# Window size for incoming RPC Reply messages. (integer value)
-# Minimum value: 1
-#reply_link_credit = 200
-
-# Window size for incoming RPC Request messages (integer value)
-# Minimum value: 1
-#rpc_server_credit = 100
-
-# Window size for incoming Notification messages (integer value)
-# Minimum value: 1
-#notify_server_credit = 100
-
-# Send messages of this type pre-settled.
-# Pre-settled messages will not receive acknowledgement
-# from the peer. Note well: pre-settled messages may be
-# silently discarded if the delivery fails.
-# Permitted values:
-# 'rpc-call' - send RPC Calls pre-settled
-# 'rpc-reply'- send RPC Replies pre-settled
-# 'rpc-cast' - Send RPC Casts pre-settled
-# 'notify'   - Send Notifications pre-settled
-#  (multi valued)
-#pre_settled = rpc-cast
-#pre_settled = rpc-reply
-
-
-[oslo_messaging_kafka]
-
-#
-# From oslo.messaging
-#
-
-# DEPRECATED: Default Kafka broker Host (string value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#kafka_default_host = localhost
-
-# DEPRECATED: Default Kafka broker Port (port value)
-# Minimum value: 0
-# Maximum value: 65535
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Replaced by [DEFAULT]/transport_url
-#kafka_default_port = 9092
-
-# Max fetch bytes of Kafka consumer (integer value)
-#kafka_max_fetch_bytes = 1048576
-
-# Default timeout(s) for Kafka consumers (floating point value)
-#kafka_consumer_timeout = 1.0
-
-# DEPRECATED: Pool Size for Kafka Consumers (integer value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#pool_size = 10
-
-# DEPRECATED: The pool size limit for connections expiration policy
-# (integer value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#conn_pool_min_size = 2
-
-# DEPRECATED: The time-to-live in sec of idle connections in the pool
-# (integer value)
-# This option is deprecated for removal.
-# Its value may be silently ignored in the future.
-# Reason: Driver no longer uses connection pool.
-#conn_pool_ttl = 1200
-
-# Group id for Kafka consumer. Consumers in one group will coordinate
-# message consumption (string value)
-#consumer_group = oslo_messaging_consumer
-
-# Upper bound on the delay for KafkaProducer batching in seconds
-# (floating point value)
-#producer_batch_timeout = 0.0
-
-# Size of batch for the producer async send (integer value)
-#producer_batch_size = 16384
-
-
-[oslo_messaging_notifications]
-
-#
-# From oslo.messaging
-#
-
-# The Drivers(s) to handle sending notifications. Possible values are
-# messaging, messagingv2, routing, log, test, noop (multi valued)
-# Deprecated group/name - [DEFAULT]/notification_driver
-#driver =
-
-# A URL representing the messaging driver to use for notifications. If
-# not set, we fall back to the same configuration used for RPC.
-# (string value)
-# Deprecated group/name - [DEFAULT]/notification_transport_url
-#transport_url = <None>
-
-# AMQP topic used for OpenStack notifications. (list value)
-# Deprecated group/name - [rpc_notifier2]/topics
-# Deprecated group/name - [DEFAULT]/notification_topics
-#topics = notifications
-
-# The maximum number of attempts to re-send a notification message
-# which failed to be delivered due to a recoverable error. 0 - No
-# retry, -1 - indefinite (integer value)
-#retry = -1
-
-
 [oslo_messaging_rabbit]
-
 #
 # From oslo.messaging
 #
@@ -1271,24 +935,6 @@
 # Enable SSL (boolean value)
 #ssl = <None>
 
-# SSL version to use (valid only if SSL enabled). Valid values are
-# TLSv1 and SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be
-# available on some distributions. (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_version
-#ssl_version =
-
-# SSL key file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_keyfile
-#ssl_key_file =
-
-# SSL cert file (valid only if SSL enabled). (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_certfile
-#ssl_cert_file =
-
-# SSL certification authority file (valid only if SSL enabled).
-# (string value)
-# Deprecated group/name - [oslo_messaging_rabbit]/kombu_ssl_ca_certs
-#ssl_ca_file =
 
 # How long to wait before reconnecting in response to an AMQP consumer
 # cancel notification. (floating point value)
@@ -1526,279 +1172,58 @@
 #rpc_retry_delay = 0.25
 
 
-[oslo_messaging_zmq]
-
+
+[oslo_messaging_notifications]
 #
 # From oslo.messaging
 #
 
-# ZeroMQ bind address. Should be a wildcard (*), an ethernet
-# interface, or IP. The "host" option should point or resolve to this
-# address. (string value)
-#rpc_zmq_bind_address = *
-
-# MatchMaker driver. (string value)
-# Possible values:
-# redis - <No description provided>
-# sentinel - <No description provided>
-# dummy - <No description provided>
-#rpc_zmq_matchmaker = redis
-
-# Number of ZeroMQ contexts, defaults to 1. (integer value)
-#rpc_zmq_contexts = 1
-
-# Maximum number of ingress messages to locally buffer per topic.
-# Default is unlimited. (integer value)
-#rpc_zmq_topic_backlog = <None>
-
-# Directory for holding IPC sockets. (string value)
-#rpc_zmq_ipc_dir = /var/run/openstack
-
-# Name of this node. Must be a valid hostname, FQDN, or IP address.
-# Must match "host" option, if running Nova. (string value)
-#rpc_zmq_host = localhost
-
-# Number of seconds to wait before all pending messages will be sent
-# after closing a socket. The default value of -1 specifies an
-# infinite linger period. The value of 0 specifies no linger period.
-# Pending messages shall be discarded immediately when the socket is
-# closed. Positive values specify an upper bound for the linger
-# period. (integer value)
-# Deprecated group/name - [DEFAULT]/rpc_cast_timeout
-#zmq_linger = -1
-
-# The default number of seconds that poll should wait. Poll raises
-# timeout exception when timeout expired. (integer value)
-#rpc_poll_timeout = 1
-
-# Expiration timeout in seconds of a name service record about
-# existing target ( < 0 means no timeout). (integer value)
-#zmq_target_expire = 300
-
-# Update period in seconds of a name service record about existing
-# target. (integer value)
-#zmq_target_update = 180
-
-# Use PUB/SUB pattern for fanout methods. PUB/SUB always uses proxy.
-# (boolean value)
-#use_pub_sub = false
-
-# Use ROUTER remote proxy. (boolean value)
-#use_router_proxy = false
-
-# This option makes direct connections dynamic or static. It makes
-# sense only with use_router_proxy=False which means to use direct
-# connections for direct message types (ignored otherwise). (boolean
-# value)
-#use_dynamic_connections = false
-
-# How many additional connections to a host will be made for failover
-# reasons. This option is actual only in dynamic connections mode.
-# (integer value)
-#zmq_failover_connections = 2
-
-# Minimal port number for random ports range. (port value)
-# Minimum value: 0
-# Maximum value: 65535
-#rpc_zmq_min_port = 49153
-
-# Maximal port number for random ports range. (integer value)
-# Minimum value: 1
-# Maximum value: 65536
-#rpc_zmq_max_port = 65536
-
-# Number of retries to find free port number before fail with
-# ZMQBindError. (integer value)
-#rpc_zmq_bind_port_retries = 100
-
-# Default serialization mechanism for serializing/deserializing
-# outgoing/incoming messages (string value)
-# Possible values:
-# json - <No description provided>
-# msgpack - <No description provided>
-#rpc_zmq_serialization = json
-
-# This option configures round-robin mode in zmq socket. True means
-# not keeping a queue when server side disconnects. False means to
-# keep queue and messages even if server is disconnected, when the
-# server appears we send all accumulated messages to it. (boolean
-# value)
-#zmq_immediate = true
-
-# Enable/disable TCP keepalive (KA) mechanism. The default value of -1
-# (or any other negative value) means to skip any overrides and leave
-# it to OS default; 0 and 1 (or any other positive value) mean to
-# disable and enable the option respectively. (integer value)
-#zmq_tcp_keepalive = -1
-
-# The duration between two keepalive transmissions in idle condition.
-# The unit is platform dependent, for example, seconds in Linux,
-# milliseconds in Windows etc. The default value of -1 (or any other
-# negative value and 0) means to skip any overrides and leave it to OS
-# default. (integer value)
-#zmq_tcp_keepalive_idle = -1
-
-# The number of retransmissions to be carried out before declaring
-# that remote end is not available. The default value of -1 (or any
-# other negative value and 0) means to skip any overrides and leave it
-# to OS default. (integer value)
-#zmq_tcp_keepalive_cnt = -1
-
-# The duration between two successive keepalive retransmissions, if
-# acknowledgement to the previous keepalive transmission is not
-# received. The unit is platform dependent, for example, seconds in
-# Linux, milliseconds in Windows etc. The default value of -1 (or any
-# other negative value and 0) means to skip any overrides and leave it
-# to OS default. (integer value)
-#zmq_tcp_keepalive_intvl = -1
-
-# Maximum number of (green) threads to work concurrently. (integer
-# value)
-#rpc_thread_pool_size = 100
-
-# Expiration timeout in seconds of a sent/received message after which
-# it is not tracked anymore by a client/server. (integer value)
-#rpc_message_ttl = 300
-
-# Wait for message acknowledgements from receivers. This mechanism
-# works only via proxy without PUB/SUB. (boolean value)
-#rpc_use_acks = false
-
-# Number of seconds to wait for an ack from a cast/call. After each
-# retry attempt this timeout is multiplied by some specified
-# multiplier. (integer value)
-#rpc_ack_timeout_base = 15
-
-# Number to multiply base ack timeout by after each retry attempt.
-# (integer value)
-#rpc_ack_timeout_multiplier = 2
-
-# Default number of message sending attempts in case of any problems
-# occurred: positive value N means at most N retries, 0 means no
-# retries, None or -1 (or any other negative values) mean to retry
-# forever. This option is used only if acknowledgments are enabled.
-# (integer value)
-#rpc_retry_attempts = 3
-
-# List of publisher hosts SubConsumer can subscribe on. This option
-# has higher priority then the default publishers list taken from the
-# matchmaker. (list value)
-#subscribe_on =
+# The Drivers(s) to handle sending notifications. Possible values are
+# messaging, messagingv2, routing, log, test, noop (multi valued)
+# Deprecated group/name - [DEFAULT]/notification_driver
+#driver =
+driver = messagingv2
+
+# A URL representing the messaging driver to use for notifications. If
+# not set, we fall back to the same configuration used for RPC.
+# (string value)
+# Deprecated group/name - [DEFAULT]/notification_transport_url
+#transport_url = <None>
+
+# AMQP topic used for OpenStack notifications. (list value)
+# Deprecated group/name - [rpc_notifier2]/topics
+# Deprecated group/name - [DEFAULT]/notification_topics
+#topics = notifications
+
+# The maximum number of attempts to re-send a notification message
+# which failed to be delivered due to a recoverable error. 0 - No
+# retry, -1 - indefinite (integer value)
+#retry = -1
 
 
 [oslo_middleware]
-
-#
-# From oslo.middleware.http_proxy_to_wsgi
-#
+#
+# From oslo.middleware
+#
+
+# The maximum body size for each  request, in bytes. (integer value)
+# Deprecated group/name - [DEFAULT]/osapi_max_request_body_size
+# Deprecated group/name - [DEFAULT]/max_request_body_size
+#max_request_body_size = 114688
+
+# DEPRECATED: The HTTP Header that will be used to determine what the
+# original request protocol scheme was, even if it was hidden by a SSL
+# termination proxy. (string value)
+# This option is deprecated for removal.
+# Its value may be silently ignored in the future.
+#secure_proxy_ssl_header = X-Forwarded-Proto
 
 # Whether the application is behind a proxy or not. This determines if
 # the middleware should parse the headers or not. (boolean value)
-#enable_proxy_headers_parsing = false
-
+enable_proxy_headers_parsing = True
 
 [oslo_policy]
 
-#
-# From oslo.policy
-#
-
-# This option controls whether or not to enforce scope when evaluating
-# policies. If ``True``, the scope of the token used in the request is
-# compared to the ``scope_types`` of the policy being enforced. If the
-# scopes do not match, an ``InvalidScope`` exception will be raised.
-# If ``False``, a message will be logged informing operators that
-# policies are being invoked with mismatching scope. (boolean value)
-#enforce_scope = false
-
-# The file that defines policies. (string value)
-#policy_file = policy.json
-
-# Default rule. Enforced when a requested rule is not found. (string
-# value)
-#policy_default_rule = default
-
-# Directories where policy configuration files are stored. They can be
-# relative to any directory in the search path defined by the
-# config_dir option, or absolute paths. The file defined by
-# policy_file must exist for these directories to be searched.
-# Missing or empty directories are ignored. (multi valued)
-#policy_dirs = policy.d
-
-# Content Type to send and receive data for REST based policy check
-# (string value)
-# Possible values:
-# application/x-www-form-urlencoded - <No description provided>
-# application/json - <No description provided>
-#remote_content_type = application/x-www-form-urlencoded
-
-# server identity verification for REST based policy check (boolean
-# value)
-#remote_ssl_verify_server_crt = false
-
-# Absolute path to ca cert file for REST based policy check (string
-# value)
-#remote_ssl_ca_crt_file = <None>
-
-# Absolute path to client cert for REST based policy check (string
-# value)
-#remote_ssl_client_crt_file = <None>
-
-# Absolute path client key file REST based policy check (string value)
-#remote_ssl_client_key_file = <None>
-
-
-[p11_crypto_plugin]
-
-#
-# From barbican.plugin.crypto.p11
-#
-
-# Path to vendor PKCS11 library (string value)
-#library_path = <None>
-
-# Password to login to PKCS11 session (string value)
-#login = <None>
-
-# Master KEK label (used in the HSM) (string value)
-#mkek_label = <None>
-
-# Master KEK length in bytes. (integer value)
-#mkek_length = <None>
-
-# HMAC label (used in the HSM) (string value)
-#hmac_label = <None>
-
-# HSM Slot ID (integer value)
-#slot_id = 1
-
-# Flag for Read/Write Sessions (boolean value)
-#rw_session = true
-
-# Project KEK length in bytes. (integer value)
-#pkek_length = 32
-
-# Project KEK Cache Time To Live, in seconds (integer value)
-#pkek_cache_ttl = 900
-
-# Project KEK Cache Item Limit (integer value)
-#pkek_cache_limit = 100
-
-# Secret encryption algorithm (string value)
-#algorithm = VENDOR_SAFENET_CKM_AES_GCM
-
-# File to pull entropy for seeding RNG (string value)
-#seed_file =
-
-# Amount of data to read from file for seed (integer value)
-#seed_length = 32
-
-# User friendly plugin name (string value)
-#plugin_name = PKCS11 HSM
-
-# Flag for plugin generated iv case (boolean value)
-#generate_iv = false
-
 
 [queue]
 
@@ -1809,6 +1234,7 @@
 # True enables queuing, False invokes workers synchronously (boolean
 # value)
 #enable = false
+
 
 # Queue namespace (string value)
 #namespace = barbican
@@ -1878,73 +1304,36 @@
 # Flag to enable multiple secret store plugin backend support. Default
 # is False (boolean value)
 #enable_multiple_secret_stores = false
+enable_multiple_secret_stores = True
 
 # List of suffix to use for looking up plugins which are supported
 # with multiple backend support. (list value)
 #stores_lookup_suffix = <None>
-
-
-[simple_crypto_plugin]
-
-#
-# From barbican.plugin.crypto.simple
-#
-
-# Key encryption key to be used by Simple Crypto Plugin (string value)
-#kek = dGhpcnR5X3R3b19ieXRlX2tleWJsYWhibGFoYmxhaGg=
-
-# User friendly plugin name (string value)
-#plugin_name = Software Only Crypto
-
-
-[snakeoil_ca_plugin]
-
-#
-# From barbican.certificate.plugin.snakeoil
-#
-
-# Path to CA certificate file (string value)
-#ca_cert_path = <None>
-
-# Path to CA certificate key file (string value)
-#ca_cert_key_path = <None>
-
-# Path to CA certificate chain file (string value)
-#ca_cert_chain_path = <None>
-
-# Path to CA chain pkcs7 file (string value)
-#ca_cert_pkcs7_path = <None>
-
-# Directory in which to store certs/keys for subcas (string value)
-#subca_cert_key_directory = /etc/barbican/snakeoil-cas
+stores_lookup_suffix = software
 
 
 [ssl]
-
 #
 # From oslo.service.sslutils
 #
 
-# CA certificate file to use to verify connecting clients. (string
-# value)
+# CA certificate file to use to verify connecting clients. (string value)
 # Deprecated group/name - [DEFAULT]/ssl_ca_file
 #ca_file = <None>
 
-# Certificate file to use when starting the server securely. (string
-# value)
+# Certificate file to use when starting the server securely. (string value)
 # Deprecated group/name - [DEFAULT]/ssl_cert_file
 #cert_file = <None>
 
-# Private key file to use when starting the server securely. (string
-# value)
+# Private key file to use when starting the server securely. (string value)
 # Deprecated group/name - [DEFAULT]/ssl_key_file
 #key_file = <None>
 
-# SSL version to use (valid only if SSL enabled). Valid values are
-# TLSv1 and SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be
-# available on some distributions. (string value)
+# SSL version to use (valid only if SSL enabled). Valid values are TLSv1 and
+# SSLv23. SSLv2, SSLv3, TLSv1_1, and TLSv1_2 may be available on some
+# distributions. (string value)
 #version = <None>
 
-# Sets the list of available ciphers. value should be a string in the
-# OpenSSL cipher list format. (string value)
+# Sets the list of available ciphers. value should be a string in the OpenSSL
+# cipher list format. (string value)
 #ciphers = <None>

2018-09-01 23:07:45,742 [salt.state       :1941][INFO    ][6204] Completed state [/etc/barbican/barbican.conf] at time 23:07:45.742132 duration_in_ms=242.141
2018-09-01 23:07:45,743 [salt.state       :1770][INFO    ][6204] Running state [barbican-manage db upgrade] at time 23:07:45.743665
2018-09-01 23:07:45,743 [salt.state       :1803][INFO    ][6204] Executing state cmd.run for [barbican-manage db upgrade]
2018-09-01 23:07:45,744 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command 'barbican-manage db upgrade' in directory '/root'
2018-09-01 23:07:54,361 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901230754354886
2018-09-01 23:07:54,386 [salt.minion      :1431][INFO    ][7690] Starting a new job with PID 7690
2018-09-01 23:07:54,406 [salt.minion      :1708][INFO    ][7690] Returning information for job: 20180901230754354886
2018-09-01 23:08:04,525 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901230804517689
2018-09-01 23:08:04,550 [salt.minion      :1431][INFO    ][7695] Starting a new job with PID 7695
2018-09-01 23:08:04,573 [salt.minion      :1708][INFO    ][7695] Returning information for job: 20180901230804517689
2018-09-01 23:08:06,774 [salt.state       :290 ][INFO    ][6204] {'pid': 7684, 'retcode': 0, 'stderr': '/usr/lib/python2.7/dist-packages/pymysql/cursors.py:165: Warning: (1831, u"Duplicate index \'ix_preferred_certificate_authorities_project_id\' defined on the table \'barbican.preferred_certificate_authorities\'. This is deprecated and will be disallowed in a future release.")\n  result = self._query(query)\n/usr/lib/python2.7/dist-packages/pymysql/cursors.py:165: Warning: (1831, u"Duplicate index \'ix_project_secret_store_project_id\' defined on the table \'barbican.project_secret_store\'. This is deprecated and will be disallowed in a future release.")\n  result = self._query(query)', 'stdout': "2018-09-01 23:07:46.459 7685 WARNING oslo_db.sqlalchemy.engines [-] MySQL SQL mode is 'NO_ENGINE_SUBSTITUTION', consider enabling TRADITIONAL or STRICT_ALL_TABLES: Empty\n2018-09-01 23:07:46.464 7685 INFO alembic.runtime.migration [-] Context impl MySQLImpl.\n2018-09-01 23:07:46.465 7685 INFO alembic.runtime.migration [-] Will assume non-transactional DDL.\n2018-09-01 23:07:46.644 7685 INFO alembic.runtime.migration [-] Running upgrade  -> 1a0c2cdafb38, create test table\n2018-09-01 23:07:46.648 7685 INFO alembic.runtime.migration [-] Running upgrade 1a0c2cdafb38 -> juno, juno_initial\n2018-09-01 23:07:48.481 7685 INFO alembic.runtime.migration [-] Running upgrade juno -> 13d127569afa, create_secret_store_metadata_table\n2018-09-01 23:07:48.667 7685 INFO alembic.runtime.migration [-] Running upgrade 13d127569afa -> 1e86c18af2dd, add new columns type meta containerId\n2018-09-01 23:07:49.279 7685 INFO alembic.runtime.migration [-] Running upgrade 1e86c18af2dd -> cd4106a1a0, add-cert-to-container-type\n2018-09-01 23:07:49.331 7685 INFO alembic.runtime.migration [-] Running upgrade cd4106a1a0 -> 47b69e523451, Made plugin names in kek datum non nullable\n2018-09-01 23:07:49.432 7685 INFO alembic.runtime.migration [-] Running upgrade 47b69e523451 -> 4070806f6972, Add orders plugin metadata table and relationships\n2018-09-01 23:07:49.616 7685 INFO alembic.runtime.migration [-] Running upgrade 4070806f6972 -> 2ab3f5371bde, dsa in container type modelbase_to\n2018-09-01 23:07:51.048 7685 INFO alembic.runtime.migration [-] Running upgrade 2ab3f5371bde -> 2843d6469f25, add sub status info for orders\n2018-09-01 23:07:51.417 7685 INFO alembic.runtime.migration [-] Running upgrade 2843d6469f25 -> 254495565185, removing redundant fields from order\n2018-09-01 23:07:52.596 7685 INFO alembic.runtime.migration [-] Running upgrade 254495565185 -> 795737bb3c3, Change tenants to projects\n2018-09-01 23:07:55.475 7685 INFO alembic.runtime.migration [-] Running upgrade 795737bb3c3 -> 256da65e0c5f, Change keystone_id for external_id in Project model\n2018-09-01 23:07:55.707 7685 INFO alembic.runtime.migration [-] Running upgrade 256da65e0c5f -> aa2cf96a1d5, Add OrderRetryTask\n2018-09-01 23:07:55.876 7685 INFO alembic.runtime.migration [-] Running upgrade aa2cf96a1d5 -> 443d6f4a69ac, added secret type column to secrets table\n2018-09-01 23:07:56.103 7685 INFO alembic.runtime.migration [-] Running upgrade 443d6f4a69ac -> 3d36a26b88af, Add OrderBarbicanMetadata table\n2018-09-01 23:07:56.300 7685 INFO alembic.runtime.migration [-] Running upgrade 3d36a26b88af -> 2d21598e7e70, Added CA related tables\n2018-09-01 23:07:57.112 7685 INFO alembic.runtime.migration [-] Running upgrade 2d21598e7e70 -> 1c0f328bfce0, Fixing composite primary keys and adding indexes to foreign key\n2018-09-01 23:07:59.354 7685 INFO alembic.runtime.migration [-] Running upgrade 1c0f328bfce0 -> 1a7cf79559e3, New secret and container ACL tables\n2018-09-01 23:08:00.980 7685 INFO alembic.runtime.migration [-] Running upgrade 1a7cf79559e3 -> 3041b53b95d7, Remove size limits on meta table values\n2018-09-01 23:08:01.479 7685 INFO alembic.runtime.migration [-] Running upgrade 3041b53b95d7 -> 30dba269cc64, Update order_retry_tasks table\n2018-09-01 23:08:02.393 7685 INFO alembic.runtime.migration [-] Running upgrade 30dba269cc64 -> 6a4457517a3, rename ACL creator_only to project_access\n2018-09-01 23:08:02.749 7685 INFO alembic.runtime.migration [-] Running upgrade 6a4457517a3 -> 1bc885808c76, Add project id to Secrets\n2018-09-01 23:08:03.318 7685 INFO alembic.runtime.migration [-] Running upgrade 1bc885808c76 -> 161f8aceb687, fill project_id to secrets where missing\n2018-09-01 23:08:03.966 7685 INFO alembic.runtime.migration [-] Running upgrade 161f8aceb687 -> 1bece815014f, remove ProjectSecret table\n2018-09-01 23:08:04.014 7685 INFO alembic.runtime.migration [-] Running upgrade 1bece815014f -> kilo, kilo\n2018-09-01 23:08:04.019 7685 INFO alembic.runtime.migration [-] Running upgrade kilo -> 46b98cde536, Add project quotas table\n2018-09-01 23:08:04.307 7685 INFO alembic.runtime.migration [-] Running upgrade 46b98cde536 -> 156cd9933643, Add project column to consumer table\n2018-09-01 23:08:04.918 7685 INFO alembic.runtime.migration [-] Running upgrade 156cd9933643 -> 3c3b04040bfe, add owning project and creator to CAs\n2018-09-01 23:08:05.519 7685 INFO alembic.runtime.migration [-] Running upgrade 3c3b04040bfe -> 10220ccbe7fa, Remove transport keys column from project quotas table\n2018-09-01 23:08:05.694 7685 INFO alembic.runtime.migration [-] Running upgrade 10220ccbe7fa -> 4ecde3a3a72a, Add cas column to project quotas table\n2018-09-01 23:08:05.863 7685 INFO alembic.runtime.migration [-] Running upgrade 4ecde3a3a72a -> 39a96e67e990, Add missing constraints\n2018-09-01 23:08:06.060 7685 INFO alembic.runtime.migration [-] Running upgrade 39a96e67e990 -> dce488646127, add-secret-user-metadata\n2018-09-01 23:08:06.230 7685 INFO alembic.runtime.migration [-] Running upgrade dce488646127 -> d2780d5aa510, change_url_length\n2018-09-01 23:08:06.272 7685 INFO alembic.runtime.migration [-] Running upgrade d2780d5aa510 -> 39cf2e645cba, Model for multiple backend support"}
2018-09-01 23:08:06,775 [salt.state       :1941][INFO    ][6204] Completed state [barbican-manage db upgrade] at time 23:08:06.775698 duration_in_ms=21032.03
2018-09-01 23:08:06,779 [salt.state       :1770][INFO    ][6204] Running state [barbican-manage db sync_secret_stores] at time 23:08:06.779565
2018-09-01 23:08:06,780 [salt.state       :1803][INFO    ][6204] Executing state cmd.run for [barbican-manage db sync_secret_stores]
2018-09-01 23:08:06,781 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command 'barbican-manage db sync_secret_stores' in directory '/root'
2018-09-01 23:08:07,664 [salt.state       :290 ][INFO    ][6204] {'pid': 7698, 'retcode': 0, 'stderr': '', 'stdout': "2018-09-01 23:08:07.445 7699 INFO barbican.model.sync [-] Syncing the secret_stores table with barbican.conf\n2018-09-01 23:08:07.446 7699 INFO barbican.model.repositories [-] Setting up database engine and session factory\n2018-09-01 23:08:07.467 7699 WARNING oslo_db.sqlalchemy.engines [-] MySQL SQL mode is 'NO_ENGINE_SUBSTITUTION', consider enabling TRADITIONAL or STRICT_ALL_TABLES: Empty\n2018-09-01 23:08:07.474 7699 INFO barbican.model.repositories [-] Not auto-creating barbican registry DB\n2018-09-01 23:08:07.529 7699 INFO barbican.plugin.crypto.simple_crypto [-] Software Only Crypto initialized"}
2018-09-01 23:08:07,666 [salt.state       :1941][INFO    ][6204] Completed state [barbican-manage db sync_secret_stores] at time 23:08:07.666282 duration_in_ms=886.716
2018-09-01 23:08:07,670 [salt.state       :1770][INFO    ][6204] Running state [wsgi_barbican] at time 23:08:07.670105
2018-09-01 23:08:07,670 [salt.state       :1803][INFO    ][6204] Executing state apache_site.enabled for [wsgi_barbican]
2018-09-01 23:08:07,672 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['a2ensite', 'wsgi_barbican'] in directory '/root'
2018-09-01 23:08:07,724 [salt.state       :290 ][INFO    ][6204] {'new': 'wsgi_barbican', 'old': None}
2018-09-01 23:08:07,726 [salt.state       :1941][INFO    ][6204] Completed state [wsgi_barbican] at time 23:08:07.725995 duration_in_ms=55.89
2018-09-01 23:08:07,728 [salt.state       :1770][INFO    ][6204] Running state [wsgi_barbican_admin] at time 23:08:07.728123
2018-09-01 23:08:07,729 [salt.state       :1803][INFO    ][6204] Executing state apache_site.enabled for [wsgi_barbican_admin]
2018-09-01 23:08:07,731 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['a2ensite', 'wsgi_barbican_admin'] in directory '/root'
2018-09-01 23:08:07,784 [salt.state       :290 ][INFO    ][6204] {'new': 'wsgi_barbican_admin', 'old': None}
2018-09-01 23:08:07,785 [salt.state       :1941][INFO    ][6204] Completed state [wsgi_barbican_admin] at time 23:08:07.785796 duration_in_ms=57.672
2018-09-01 23:08:07,788 [salt.state       :1770][INFO    ][6204] Running state [apache2] at time 23:08:07.788429
2018-09-01 23:08:07,789 [salt.state       :1803][INFO    ][6204] Executing state service.running for [apache2]
2018-09-01 23:08:07,791 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-09-01 23:08:07,809 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-09-01 23:08:07,834 [salt.state       :290 ][INFO    ][6204] The service apache2 is already running
2018-09-01 23:08:07,835 [salt.state       :1941][INFO    ][6204] Completed state [apache2] at time 23:08:07.835408 duration_in_ms=46.98
2018-09-01 23:08:07,835 [salt.state       :1770][INFO    ][6204] Running state [apache2] at time 23:08:07.835708
2018-09-01 23:08:07,836 [salt.state       :1803][INFO    ][6204] Executing state service.mod_watch for [apache2]
2018-09-01 23:08:07,836 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-09-01 23:08:07,853 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'apache2.service'] in directory '/root'
2018-09-01 23:08:10,280 [salt.state       :290 ][INFO    ][6204] {'apache2': True}
2018-09-01 23:08:10,281 [salt.state       :1941][INFO    ][6204] Completed state [apache2] at time 23:08:10.280945 duration_in_ms=2445.235
2018-09-01 23:08:10,283 [salt.state       :1770][INFO    ][6204] Running state [barbican-keystone-listener] at time 23:08:10.283593
2018-09-01 23:08:10,284 [salt.state       :1803][INFO    ][6204] Executing state service.running for [barbican-keystone-listener]
2018-09-01 23:08:10,285 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemctl', 'status', 'barbican-keystone-listener.service', '-n', '0'] in directory '/root'
2018-09-01 23:08:10,309 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemctl', 'is-active', 'barbican-keystone-listener.service'] in directory '/root'
2018-09-01 23:08:10,330 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemctl', 'is-enabled', 'barbican-keystone-listener.service'] in directory '/root'
2018-09-01 23:08:10,351 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemd-run', '--scope', 'systemctl', 'start', 'barbican-keystone-listener.service'] in directory '/root'
2018-09-01 23:08:10,390 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemctl', 'is-active', 'barbican-keystone-listener.service'] in directory '/root'
2018-09-01 23:08:10,407 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemctl', 'is-enabled', 'barbican-keystone-listener.service'] in directory '/root'
2018-09-01 23:08:10,426 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemctl', 'is-enabled', 'barbican-keystone-listener.service'] in directory '/root'
2018-09-01 23:08:10,451 [salt.state       :290 ][INFO    ][6204] {'barbican-keystone-listener': True}
2018-09-01 23:08:10,451 [salt.state       :1941][INFO    ][6204] Completed state [barbican-keystone-listener] at time 23:08:10.451688 duration_in_ms=168.096
2018-09-01 23:08:10,452 [salt.state       :1770][INFO    ][6204] Running state [barbican-worker] at time 23:08:10.452080
2018-09-01 23:08:10,452 [salt.state       :1803][INFO    ][6204] Executing state service.dead for [barbican-worker]
2018-09-01 23:08:10,453 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemctl', 'status', 'barbican-worker.service', '-n', '0'] in directory '/root'
2018-09-01 23:08:10,470 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemctl', 'is-active', 'barbican-worker.service'] in directory '/root'
2018-09-01 23:08:10,484 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemctl', 'is-enabled', 'barbican-worker.service'] in directory '/root'
2018-09-01 23:08:10,499 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemd-run', '--scope', 'systemctl', 'stop', 'barbican-worker.service'] in directory '/root'
2018-09-01 23:08:14,684 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901230814677575
2018-09-01 23:08:14,695 [salt.minion      :1431][INFO    ][8235] Starting a new job with PID 8235
2018-09-01 23:08:14,718 [salt.minion      :1708][INFO    ][8235] Returning information for job: 20180901230814677575
2018-09-01 23:08:24,883 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901230824878770
2018-09-01 23:08:24,904 [salt.minion      :1431][INFO    ][8258] Starting a new job with PID 8258
2018-09-01 23:08:24,922 [salt.minion      :1708][INFO    ][8258] Returning information for job: 20180901230824878770
2018-09-01 23:08:25,595 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemctl', 'is-active', 'barbican-worker.service'] in directory '/root'
2018-09-01 23:08:25,617 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemctl', 'is-enabled', 'barbican-worker.service'] in directory '/root'
2018-09-01 23:08:25,635 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemctl', 'is-enabled', 'barbican-worker.service'] in directory '/root'
2018-09-01 23:08:25,667 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemd-run', '--scope', 'systemctl', 'disable', 'barbican-worker.service'] in directory '/root'
2018-09-01 23:08:26,120 [salt.loaded.int.module.cmdmod:395 ][INFO    ][6204] Executing command ['systemctl', 'is-enabled', 'barbican-worker.service'] in directory '/root'
2018-09-01 23:08:26,145 [salt.state       :290 ][INFO    ][6204] {'barbican-worker': True}
2018-09-01 23:08:26,145 [salt.state       :1941][INFO    ][6204] Completed state [barbican-worker] at time 23:08:26.145788 duration_in_ms=15693.707
2018-09-01 23:08:26,149 [salt.minion      :1708][INFO    ][6204] Returning information for job: 20180901230718813235
2018-09-01 23:10:29,898 [salt.utils.schedule:1375][INFO    ][6180] Running scheduled job: __mine_interval
2018-09-01 23:30:48,638 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command ini.set_option with jid 20180901233048636336
2018-09-01 23:30:48,665 [salt.minion      :1431][INFO    ][8451] Starting a new job with PID 8451
2018-09-01 23:30:53,744 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901233053736642
2018-09-01 23:30:53,769 [salt.minion      :1431][INFO    ][8454] Starting a new job with PID 8454
2018-09-01 23:30:53,787 [salt.minion      :1708][INFO    ][8454] Returning information for job: 20180901233053736642
2018-09-01 23:31:03,937 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command saltutil.find_job with jid 20180901233103931889
2018-09-01 23:31:03,959 [salt.minion      :1431][INFO    ][8469] Starting a new job with PID 8469
2018-09-01 23:31:03,981 [salt.minion      :1708][INFO    ][8469] Returning information for job: 20180901233103931889
2018-09-01 23:31:06,786 [salt.minion      :1708][INFO    ][8451] Returning information for job: 20180901233048636336
2018-09-01 23:31:07,469 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command service.restart with jid 20180901233107461715
2018-09-01 23:31:07,493 [salt.minion      :1431][INFO    ][8476] Starting a new job with PID 8476
2018-09-01 23:31:08,358 [salt.loader.192.168.11.2.int.module.cmdmod:395 ][INFO    ][8476] Executing command ['systemctl', 'status', 'glance-api.service', '-n', '0'] in directory '/root'
2018-09-01 23:31:08,399 [salt.loader.192.168.11.2.int.module.cmdmod:395 ][INFO    ][8476] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'glance-api.service'] in directory '/root'
2018-09-01 23:31:08,601 [salt.minion      :1708][INFO    ][8476] Returning information for job: 20180901233107461715
2018-09-01 23:31:53,876 [salt.minion      :1307][INFO    ][6180] User sudo_ubuntu Executing command cp.push_dir with jid 20180901233153869249
2018-09-01 23:31:53,910 [salt.minion      :1431][INFO    ][8563] Starting a new job with PID 8563
