COMPUTED VALUES: backup: external_ceph_rbd: admin_keyring: null conf: global: null osd: null configmap: null enabled: false posix: volume: class_name: general size: 10Gi bootstrap: bootstrap_conf_backends: true enabled: true ks_user: admin volume_types: name: group: null volume_backend_name: null ceph_client: configmap: ceph-etc enable_external_ceph_backend: false external_ceph: conf: global: null osd: null configmap: null rbd_user: null rbd_user_keyring: null internal_ceph_backend: rbd1 user_secret_name: pvc-ceph-client-key conf: api_audit_map: DEFAULT: target_endpoint_type: None custom_actions: associate: update/associate associations: read/list/associations disassociate: update/disassociate_all disassociate_all: update/disassociate_all path_keywords: defaults: None detail: None limits: None os-quota-specs: project qos-specs: qos-spec snapshots: snapshot types: type volumes: volume service_endpoints: volume: service/storage/block volumev2: service/storage/block volumev3: service/storage/block backends: rbd1: image_volume_cache_enabled: true image_volume_cache_max_count: 50 image_volume_cache_max_size_gb: 200 rados_connect_timeout: -1 rbd_ceph_conf: /etc/ceph/ceph.conf rbd_flatten_volume_from_snapshot: false rbd_max_clone_depth: 5 rbd_pool: cinder.volumes rbd_secret_uuid: 457eb676-33da-42ec-9a8c-9293d545c337 rbd_store_chunk_size: 4 rbd_user: cinder report_discard_supported: true volume_backend_name: rbd1 volume_driver: cinder.volume.drivers.rbd.RBDDriver ceph: admin_keyring: null append: null monitors: [] override: null pools: backup: app_name: cinder-backup chunk_size: 8 crush_rule: replicated_rule replication: 1 cinder.volumes: app_name: cinder-volume chunk_size: 8 crush_rule: replicated_rule replication: 1 cinder: DEFAULT: allowed_direct_url_schemes: cinder auth_strategy: keystone backup_ceph_conf: /etc/ceph/ceph.conf backup_ceph_pool: cinder.backups backup_ceph_user: cinderbackup backup_driver: cinder.backup.drivers.ceph.CephBackupDriver backup_posix_path: /var/lib/cinder/backup default_volume_type: rbd1 enable_v1_api: false enable_v2_api: false enabled_backends: rbd1 glance_api_version: 2 host: cinder-volume-worker image_conversion_disable: true internal_project_name: internal_cinder internal_user_name: internal_cinder os_region_name: RegionOne osapi_volume_listen_port: null osapi_volume_workers: 2 resource_query_filters_file: /etc/cinder/resource_filters.json use_stderr: true use_syslog: false volume_name_template: volume-%s volume_usage_audit_period: hour barbican: barbican_endpoint_type: internal coordination: backend_url: file:///var/lib/cinder/coordination cors: allowed_origins: '*' database: connection_recycle_time: 600 max_overflow: 50 max_pool_size: 5 max_retries: -1 pool_timeout: 30 keystone_authtoken: auth_type: password auth_uri: http://keystone-api.openstack.svc.cluster.local:5000/ auth_url: http://keystone-api.openstack.svc.cluster.local:5000/ auth_version: v3 memcache_secret_key: dzWGW86CFXUq1VbpFa252n612c33vhII memcache_security_strategy: ENCRYPT memcached_servers: memcached.openstack.svc.cluster.local:11211 password: 18tmLS9YV5KxO5M5CU9gkF1GnckSbfWe project_domain_name: service project_name: service region_name: RegionOne service_token_roles: service service_token_roles_required: true service_type: volumev3 user_domain_name: service username: cinder-RegionOne nova: auth_type: password auth_url: http://keystone-api.openstack.svc.cluster.local:5000/ auth_version: v3 interface: internal password: 18tmLS9YV5KxO5M5CU9gkF1GnckSbfWe project_domain_name: service project_name: service region_name: RegionOne user_domain_name: service username: cinder-RegionOne oslo_concurrency: lock_path: /var/lib/cinder/tmp oslo_messaging_notifications: driver: noop oslo_messaging_rabbit: rabbit_ha_queues: true oslo_middleware: enable_proxy_headers_parsing: true oslo_policy: policy_file: /etc/cinder/policy.yaml privsep_osbrick: helper_command: sudo cinder-rootwrap /etc/cinder/rootwrap.conf privsep-helper --config-file /etc/cinder/cinder.conf service_user: auth_type: password auth_url: http://keystone-api.openstack.svc.cluster.local:5000/ password: 18tmLS9YV5KxO5M5CU9gkF1GnckSbfWe project_domain_name: service project_name: service region_name: RegionOne send_service_user_token: true user_domain_name: service username: cinder-RegionOne cinder_api_uwsgi: uwsgi: add-header: 'Connection: close' buffer-size: 65535 chunked-input-limit: "4096000" die-on-term: true enable-threads: true exit-on-reload: false hook-master-start: unix_signal:15 gracefully_kill_them_all http-auto-chunked: true http-raw-body: true http-socket: 0.0.0.0:8776 lazy-apps: true log-x-forwarded-for: true master: true need-app: true processes: 2 procname-prefix-spaced: 'cinder-api:' route-user-agent: '^kube-probe.* donotlog:' socket-timeout: 10 thunder-lock: true worker-reload-mercy: 80 wsgi-file: /var/lib/openstack/bin/cinder-wsgi cinder_sudoers: | # This sudoers file supports rootwrap for both Kolla and LOCI Images. Defaults !requiretty Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin:/var/lib/openstack/bin:/var/lib/kolla/venv/bin" cinder ALL = (root) NOPASSWD: /var/lib/kolla/venv/bin/cinder-rootwrap /etc/cinder/rootwrap.conf *, /var/lib/openstack/bin/cinder-rootwrap /etc/cinder/rootwrap.conf * enable_iscsi: false logging: formatter_context: class: oslo_log.formatters.ContextFormatter datefmt: '%Y-%m-%d %H:%M:%S' formatter_default: datefmt: '%Y-%m-%d %H:%M:%S' format: '%(message)s' formatters: keys: - context - default handler_null: args: () class: logging.NullHandler formatter: default handler_stderr: args: (sys.stderr,) class: StreamHandler formatter: context handler_stdout: args: (sys.stdout,) class: StreamHandler formatter: context handlers: keys: - stdout - stderr - "null" logger_amqp: handlers: stderr level: WARNING qualname: amqp logger_amqplib: handlers: stderr level: WARNING qualname: amqplib logger_boto: handlers: stderr level: WARNING qualname: boto logger_cinder: handlers: - stdout level: INFO qualname: cinder logger_eventletwsgi: handlers: stderr level: WARNING qualname: eventlet.wsgi.server logger_root: handlers: "null" level: WARNING logger_sqlalchemy: handlers: stderr level: WARNING qualname: sqlalchemy loggers: keys: - root - cinder paste: app:apiv1: paste.app_factory: cinder.api.v1.router:APIRouter.factory app:apiv2: paste.app_factory: cinder.api.v2.router:APIRouter.factory app:apiv3: paste.app_factory: cinder.api.v3.router:APIRouter.factory app:osvolumeversionapp: paste.app_factory: cinder.api.versions:Versions.factory composite:openstack_volume_api_v1: keystone: cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler authtoken audit keystonecontext apiv1 keystone_nolimit: cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler authtoken audit keystonecontext apiv1 noauth: cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler noauth apiv1 use: call:cinder.api.middleware.auth:pipeline_factory composite:openstack_volume_api_v2: keystone: cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler authtoken audit keystonecontext apiv2 keystone_nolimit: cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler authtoken audit keystonecontext apiv2 noauth: cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler noauth apiv2 use: call:cinder.api.middleware.auth:pipeline_factory composite:openstack_volume_api_v3: keystone: cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler authtoken audit keystonecontext apiv3 keystone_nolimit: cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler authtoken audit keystonecontext apiv3 noauth: cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler noauth apiv3 use: call:cinder.api.middleware.auth:pipeline_factory composite:osapi_volume: /: apiversions /v1: openstack_volume_api_v1 /v2: openstack_volume_api_v2 /v3: openstack_volume_api_v3 use: call:cinder.api:root_app_factory filter:audit: audit_map_file: /etc/cinder/api_audit_map.conf paste.filter_factory: keystonemiddleware.audit:filter_factory filter:authtoken: paste.filter_factory: keystonemiddleware.auth_token:filter_factory filter:cors: oslo_config_project: cinder paste.filter_factory: oslo_middleware.cors:filter_factory filter:faultwrap: paste.filter_factory: cinder.api.middleware.fault:FaultWrapper.factory filter:http_proxy_to_wsgi: paste.filter_factory: oslo_middleware.http_proxy_to_wsgi:HTTPProxyToWSGI.factory filter:keystonecontext: paste.filter_factory: cinder.api.middleware.auth:CinderKeystoneContext.factory filter:noauth: paste.filter_factory: cinder.api.middleware.auth:NoAuthMiddleware.factory filter:osprofiler: paste.filter_factory: osprofiler.web:WsgiMiddleware.factory filter:request_id: paste.filter_factory: oslo_middleware.request_id:RequestId.factory filter:sizelimit: paste.filter_factory: oslo_middleware.sizelimit:RequestBodySizeLimiter.factory pipeline:apiversions: pipeline: cors http_proxy_to_wsgi faultwrap osvolumeversionapp policy: {} rabbitmq: policies: - apply-to: all definition: ha-mode: all ha-sync-mode: automatic message-ttl: 70000 name: ha_ttl_cinder pattern: ^(?!(amq\.|reply_)).* priority: 0 vhost: cinder rally_tests: clean_up: | VOLUMES=$(openstack volume list -f value | grep -e "^s_rally_" | awk '{ print $1 }') if [ -n "$VOLUMES" ]; then echo $VOLUMES | xargs openstack volume delete fi run_tempest: false tests: CinderVolumes.create_and_delete_volume: - args: size: 1 runner: concurrency: 1 times: 1 type: constant sla: failure_rate: max: 0 - args: size: max: 5 min: 1 runner: concurrency: 1 times: 1 type: constant sla: failure_rate: max: 0 resource_filters: attachment: - volume_id - status - instance_id - attach_status backup: - name - status - volume_id group: [] group_snapshot: - status - group_id message: - resource_uuid - resource_type - event_id - request_id - message_level pool: - name - volume_type snapshot: - name - status - volume_id - metadata - availability_zone volume: - name - status - metadata - bootable - migration_status - availability_zone - group_id volume_type: [] rootwrap: | # Configuration for cinder-rootwrap # This file should be owned by (and only-writeable by) the root user [DEFAULT] # List of directories to load filter definitions from (separated by ','). # These directories MUST all be only writeable by root ! filters_path=/etc/cinder/rootwrap.d # List of directories to search executables in, in case filters do not # explicitely specify a full path (separated by ',') # If not specified, defaults to system PATH environment variable. # These directories MUST all be only writeable by root ! exec_dirs=/sbin,/usr/sbin,/bin,/usr/bin,/usr/local/bin,/usr/local/sbin,/var/lib/openstack/bin,/var/lib/kolla/venv/bin # Enable logging to syslog # Default value is False use_syslog=False # Which syslog facility to use. # Valid values include auth, authpriv, syslog, local0, local1... # Default value is 'syslog' syslog_log_facility=syslog # Which messages to log. # INFO means log all usage # ERROR means only log unsuccessful attempts syslog_log_level=ERROR rootwrap_filters: volume: content: | # cinder-rootwrap command filters for volume nodes # This file should be owned by (and only-writeable by) the root user [Filters] # cinder/volume/iscsi.py: iscsi_helper '--op' ... ietadm: CommandFilter, ietadm, root tgtadm: CommandFilter, tgtadm, root iscsictl: CommandFilter, iscsictl, root tgt-admin: CommandFilter, tgt-admin, root cinder-rtstool: CommandFilter, cinder-rtstool, root scstadmin: CommandFilter, scstadmin, root # LVM related show commands pvs: EnvFilter, env, root, LC_ALL=C, pvs vgs: EnvFilter, env, root, LC_ALL=C, vgs lvs: EnvFilter, env, root, LC_ALL=C, lvs lvdisplay: EnvFilter, env, root, LC_ALL=C, lvdisplay # -LVM related show commands with suppress fd warnings pvs_fdwarn: EnvFilter, env, root, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, pvs vgs_fdwarn: EnvFilter, env, root, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, vgs lvs_fdwarn: EnvFilter, env, root, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, lvs lvdisplay_fdwarn: EnvFilter, env, root, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, lvdisplay # -LVM related show commands conf var pvs_lvmconf: EnvFilter, env, root, LVM_SYSTEM_DIR=, LC_ALL=C, pvs vgs_lvmconf: EnvFilter, env, root, LVM_SYSTEM_DIR=, LC_ALL=C, vgs lvs_lvmconf: EnvFilter, env, root, LVM_SYSTEM_DIR=, LC_ALL=C, lvs lvdisplay_lvmconf: EnvFilter, env, root, LVM_SYSTEM_DIR=, LC_ALL=C, lvdisplay # -LVM conf var with suppress fd_warnings pvs_lvmconf: EnvFilter, env, root, LVM_SYSTEM_DIR=, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, pvs vgs_lvmconf: EnvFilter, env, root, LVM_SYSTEM_DIR=, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, vgs lvs_lvmconf: EnvFilter, env, root, LVM_SYSTEM_DIR=, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, lvs lvdisplay_lvmconf: EnvFilter, env, root, LVM_SYSTEM_DIR=, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, lvdisplay # os-brick library commands # os_brick.privileged.run_as_root oslo.privsep context # This line ties the superuser privs with the config files, context name, # and (implicitly) the actual python code invoked. privsep-rootwrap: RegExpFilter, privsep-helper, root, privsep-helper, --config-file, /etc/(?!\.\.).*, --privsep_context, os_brick.privileged.default, --privsep_sock_path, /tmp/.* # The following and any cinder/brick/* entries should all be obsoleted # by privsep, and may be removed once the os-brick version requirement # is updated appropriately. scsi_id: CommandFilter, /lib/udev/scsi_id, root drbdadm: CommandFilter, drbdadm, root # cinder/brick/local_dev/lvm.py: 'vgcreate', vg_name, pv_list vgcreate: CommandFilter, vgcreate, root # cinder/brick/local_dev/lvm.py: 'lvcreate', '-L', sizestr, '-n', volume_name,.. # cinder/brick/local_dev/lvm.py: 'lvcreate', '-L', ... lvcreate: EnvFilter, env, root, LC_ALL=C, lvcreate lvcreate_lvmconf: EnvFilter, env, root, LVM_SYSTEM_DIR=, LC_ALL=C, lvcreate lvcreate_fdwarn: EnvFilter, env, root, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, lvcreate lvcreate_lvmconf_fdwarn: EnvFilter, env, root, LVM_SYSTEM_DIR=, LVM_SUPPRESS_FD_WARNINGS=, LC_ALL=C, lvcreate # cinder/volume/driver.py: 'dd', 'if=%s' % srcstr, 'of=%s' % deststr,... dd: CommandFilter, dd, root # cinder/volume/driver.py: 'lvremove', '-f', %s/%s % ... lvremove: CommandFilter, lvremove, root # cinder/volume/driver.py: 'lvrename', '%(vg)s', '%(orig)s' '(new)s'... lvrename: CommandFilter, lvrename, root # cinder/brick/local_dev/lvm.py: 'lvextend', '-L' '%(new_size)s', '%(lv_name)s' ... # cinder/brick/local_dev/lvm.py: 'lvextend', '-L' '%(new_size)s', '%(thin_pool)s' ... lvextend: EnvFilter, env, root, LC_ALL=C, lvextend lvextend_lvmconf: EnvFilter, env, root, LVM_SYSTEM_DIR=, LC_ALL=C, lvextend lvextend_fdwarn: EnvFilter, env, root, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, lvextend lvextend_lvmconf_fdwarn: EnvFilter, env, root, LVM_SYSTEM_DIR=, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, lvextend # cinder/brick/local_dev/lvm.py: 'lvchange -a y -K ' lvchange: CommandFilter, lvchange, root # cinder/brick/local_dev/lvm.py: 'lvconvert', '--merge', snapshot_name lvconvert: CommandFilter, lvconvert, root # cinder/volume/driver.py: 'iscsiadm', '-m', 'discovery', '-t',... # cinder/volume/driver.py: 'iscsiadm', '-m', 'node', '-T', ... iscsiadm: CommandFilter, iscsiadm, root # cinder/volume/utils.py: utils.temporary_chown(path, 0) chown: CommandFilter, chown, root # cinder/volume/utils.py: copy_volume(..., ionice='...') ionice_1: ChainingRegExpFilter, ionice, root, ionice, -c[0-3], -n[0-7] ionice_2: ChainingRegExpFilter, ionice, root, ionice, -c[0-3] # cinder/volume/utils.py: setup_blkio_cgroup() cgcreate: CommandFilter, cgcreate, root cgset: CommandFilter, cgset, root cgexec: ChainingRegExpFilter, cgexec, root, cgexec, -g, blkio:\S+ # cinder/volume/driver.py dmsetup: CommandFilter, dmsetup, root ln: CommandFilter, ln, root # cinder/image/image_utils.py qemu-img: EnvFilter, env, root, LC_ALL=C, qemu-img qemu-img_convert: CommandFilter, qemu-img, root udevadm: CommandFilter, udevadm, root # cinder/volume/driver.py: utils.read_file_as_root() cat: CommandFilter, cat, root # cinder/volume/nfs.py stat: CommandFilter, stat, root mount: CommandFilter, mount, root df: CommandFilter, df, root du: CommandFilter, du, root truncate: CommandFilter, truncate, root chmod: CommandFilter, chmod, root rm: CommandFilter, rm, root # cinder/volume/drivers/remotefs.py mkdir: CommandFilter, mkdir, root # cinder/volume/drivers/netapp/nfs.py: netapp_nfs_find: RegExpFilter, find, root, find, ^[/]*([^/\0]+(/+)?)*$, -maxdepth, \d+, -name, img-cache.*, -amin, \+\d+ # cinder/volume/drivers/glusterfs.py chgrp: CommandFilter, chgrp, root umount: CommandFilter, umount, root fallocate: CommandFilter, fallocate, root # cinder/volumes/drivers/hds/hds.py: hus-cmd: CommandFilter, hus-cmd, root hus-cmd_local: CommandFilter, /usr/local/bin/hus-cmd, root # cinder/volumes/drivers/hds/hnas_backend.py ssc: CommandFilter, ssc, root # cinder/brick/initiator/connector.py: ls: CommandFilter, ls, root tee: CommandFilter, tee, root multipath: CommandFilter, multipath, root multipathd: CommandFilter, multipathd, root systool: CommandFilter, systool, root # cinder/volume/drivers/block_device.py blockdev: CommandFilter, blockdev, root # cinder/volume/drivers/ibm/gpfs.py # cinder/volume/drivers/tintri.py mv: CommandFilter, mv, root # cinder/volume/drivers/ibm/gpfs.py cp: CommandFilter, cp, root mmgetstate: CommandFilter, /usr/lpp/mmfs/bin/mmgetstate, root mmclone: CommandFilter, /usr/lpp/mmfs/bin/mmclone, root mmlsattr: CommandFilter, /usr/lpp/mmfs/bin/mmlsattr, root mmchattr: CommandFilter, /usr/lpp/mmfs/bin/mmchattr, root mmlsconfig: CommandFilter, /usr/lpp/mmfs/bin/mmlsconfig, root mmlsfs: CommandFilter, /usr/lpp/mmfs/bin/mmlsfs, root mmlspool: CommandFilter, /usr/lpp/mmfs/bin/mmlspool, root mkfs: CommandFilter, mkfs, root mmcrfileset: CommandFilter, /usr/lpp/mmfs/bin/mmcrfileset, root mmlinkfileset: CommandFilter, /usr/lpp/mmfs/bin/mmlinkfileset, root mmunlinkfileset: CommandFilter, /usr/lpp/mmfs/bin/mmunlinkfileset, root mmdelfileset: CommandFilter, /usr/lpp/mmfs/bin/mmdelfileset, root mmcrsnapshot: CommandFilter, /usr/lpp/mmfs/bin/mmcrsnapshot, root mmdelsnapshot: CommandFilter, /usr/lpp/mmfs/bin/mmdelsnapshot, root # cinder/volume/drivers/ibm/gpfs.py # cinder/volume/drivers/ibm/ibmnas.py find_maxdepth_inum: RegExpFilter, find, root, find, ^[/]*([^/\0]+(/+)?)*$, -maxdepth, \d+, -ignore_readdir_race, -inum, \d+, -print0, -quit # cinder/brick/initiator/connector.py: aoe-revalidate: CommandFilter, aoe-revalidate, root aoe-discover: CommandFilter, aoe-discover, root aoe-flush: CommandFilter, aoe-flush, root # cinder/brick/initiator/linuxscsi.py: sg_scan: CommandFilter, sg_scan, root #cinder/backup/services/tsm.py dsmc:CommandFilter,/usr/bin/dsmc,root # cinder/volume/drivers/hitachi/hbsd_horcm.py raidqry: CommandFilter, raidqry, root raidcom: CommandFilter, raidcom, root pairsplit: CommandFilter, pairsplit, root paircreate: CommandFilter, paircreate, root pairdisplay: CommandFilter, pairdisplay, root pairevtwait: CommandFilter, pairevtwait, root horcmstart.sh: CommandFilter, horcmstart.sh, root horcmshutdown.sh: CommandFilter, horcmshutdown.sh, root horcmgr: EnvFilter, env, root, HORCMINST=, /etc/horcmgr # cinder/volume/drivers/hitachi/hbsd_snm2.py auman: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/auman auluref: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/auluref auhgdef: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/auhgdef aufibre1: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/aufibre1 auhgwwn: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/auhgwwn auhgmap: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/auhgmap autargetmap: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/autargetmap aureplicationvvol: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/aureplicationvvol auluadd: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/auluadd auludel: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/auludel auluchgsize: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/auluchgsize auchapuser: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/auchapuser autargetdef: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/autargetdef autargetopt: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/autargetopt autargetini: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/autargetini auiscsi: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/auiscsi audppool: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/audppool aureplicationlocal: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/aureplicationlocal aureplicationmon: EnvFilter, env, root, LANG=, STONAVM_HOME=, LD_LIBRARY_PATH=, STONAVM_RSP_PASS=, STONAVM_ACT=, /usr/stonavm/aureplicationmon # cinder/volume/drivers/hgst.py vgc-cluster: CommandFilter, vgc-cluster, root # cinder/volume/drivers/vzstorage.py pstorage-mount: CommandFilter, pstorage-mount, root pstorage: CommandFilter, pstorage, root ploop: CommandFilter, ploop, root # initiator/connector.py: drv_cfg: CommandFilter, /opt/emc/scaleio/sdc/bin/drv_cfg, root, /opt/emc/scaleio/sdc/bin/drv_cfg, --query_guid pods: - volume dependencies: dynamic: common: local_image_registry: jobs: - cinder-image-repo-sync services: - endpoint: node service: local_image_registry static: api: jobs: - cinder-db-sync - cinder-ks-user - cinder-ks-endpoints - cinder-rabbit-init - cinder-storage-init services: - endpoint: internal service: oslo_db - endpoint: internal service: identity backup: jobs: - cinder-db-sync - cinder-ks-user - cinder-ks-endpoints - cinder-rabbit-init - cinder-storage-init - cinder-backup-storage-init services: - endpoint: internal service: identity - endpoint: internal service: volume backup_storage_init: jobs: null bootstrap: pod: - labels: application: cinder component: volume requireSameNode: false services: - endpoint: internal service: identity - endpoint: internal service: volume clean: jobs: null create_internal_tenant: services: - endpoint: internal service: identity db_drop: services: - endpoint: internal service: oslo_db db_init: services: - endpoint: internal service: oslo_db db_sync: jobs: - cinder-db-init services: - endpoint: internal service: oslo_db image_repo_sync: services: - endpoint: internal service: local_image_registry ks_endpoints: jobs: - cinder-ks-service services: - endpoint: internal service: identity ks_service: services: - endpoint: internal service: identity ks_user: services: - endpoint: internal service: identity rabbit_init: services: - endpoint: internal service: oslo_messaging scheduler: jobs: - cinder-db-sync - cinder-ks-user - cinder-ks-endpoints - cinder-rabbit-init - cinder-storage-init services: - endpoint: internal service: identity - endpoint: internal service: volume storage_init: jobs: null tests: services: - endpoint: internal service: identity - endpoint: internal service: volume volume: jobs: - cinder-db-sync - cinder-ks-user - cinder-ks-endpoints - cinder-rabbit-init - cinder-storage-init services: - endpoint: internal service: identity - endpoint: internal service: volume volume_usage_audit: jobs: - cinder-db-sync - cinder-ks-user - cinder-ks-endpoints - cinder-rabbit-init - cinder-storage-init services: - endpoint: internal service: identity - endpoint: internal service: volume endpoints: cluster_domain_suffix: cluster.local fluentd: host_fqdn_override: default: null hosts: default: fluentd-logging name: fluentd namespace: null path: default: null port: metrics: default: 24220 service: default: 24224 scheme: http identity: auth: admin: password: NU9Ty4yKqkcE87qqS20t5Ew0MR4buda6 project_domain_name: default project_name: admin region_name: RegionOne user_domain_name: default username: admin-RegionOne cinder: password: 18tmLS9YV5KxO5M5CU9gkF1GnckSbfWe project_domain_name: service project_name: service region_name: RegionOne role: admin,service user_domain_name: service username: cinder-RegionOne glance: password: jEhNLduudv16XYTNlaSpxxe4yC7ykvCV region_name: RegionOne username: glance-RegionOne test: password: password project_domain_name: service project_name: test region_name: RegionOne role: admin user_domain_name: service username: cinder-test host_fqdn_override: default: null public: host: identity.199-19-213-139.nip.io hosts: default: keystone-api internal: keystone-api name: keystone path: default: / port: api: default: 5000 internal: 5000 public: 443 scheme: default: http public: https image: host_fqdn_override: default: null public: host: image.199-19-213-139.nip.io hosts: default: glance-api public: glance name: glance path: default: null port: api: default: 9292 public: 443 scheme: default: http public: https ingress: hosts: default: ingress name: ingress namespace: null port: ingress: default: 80 kube_dns: host_fqdn_override: default: null hosts: default: kube-dns name: kubernetes-dns namespace: kube-system path: default: null port: dns: default: 53 protocol: UDP scheme: http local_image_registry: host_fqdn_override: default: null hosts: default: localhost internal: docker-registry node: localhost name: docker-registry namespace: docker-registry port: registry: node: 5000 oci_image_registry: auth: cinder: password: password username: cinder enabled: false host_fqdn_override: default: null hosts: default: localhost name: oci-image-registry namespace: oci-image-registry port: registry: default: null oslo_cache: auth: memcache_secret_key: dzWGW86CFXUq1VbpFa252n612c33vhII host_fqdn_override: default: null hosts: default: memcached port: memcache: default: 11211 oslo_db: auth: admin: password: Ndgb3j0V2azYmkXviEExoJYauJMLjqs6 secret: tls: internal: mariadb-tls-direct username: root cinder: password: cF5I3bZsqNK8vlMiASWn8YHG0DXjHOnb username: cinder glance: password: YKWGpBM8CvGwvgWrDNY69BWy1CAFInK6 keystone: password: bmjWsPgwD19v6EmDB81MSBRS9rkAQolI host_fqdn_override: default: null hosts: default: percona-xtradb-haproxy path: /cinder port: mysql: default: 3306 scheme: mysql+pymysql oslo_messaging: auth: admin: password: RfJuxjKNkhgkfqNOP9sgjZqguzxJBxpG secret: tls: internal: rabbitmq-tls-direct username: default_user_uXpVt6MXoVIhFS2MTyJ cinder: password: aA8Kf8AJ9fwTVJkCZvmcDp3jbEsIEDxr username: cinder glance: password: QYKEd56JEsLNCUVGWWCT8qpM20Sg9WKl keystone: password: VUHly7yFCSJS9JRiGFLsalS498VEiDYV user: password: RfJuxjKNkhgkfqNOP9sgjZqguzxJBxpG username: default_user_uXpVt6MXoVIhFS2MTyJ host_fqdn_override: default: null hosts: default: rabbitmq-cinder path: /cinder port: amqp: default: 5672 http: default: 15672 scheme: rabbit volume: host_fqdn_override: default: null hosts: default: cinder-api public: cinder name: cinder path: default: /v1/%(tenant_id)s port: api: default: 8776 public: 80 scheme: default: http volumev2: host_fqdn_override: default: null hosts: default: cinder-api public: cinder name: cinderv2 path: default: /v2/%(tenant_id)s port: api: default: 8776 public: 80 scheme: default: http volumev3: host_fqdn_override: default: null public: host: volume.199-19-213-139.nip.io hosts: default: cinder-api public: cinder name: cinderv3 path: default: /v3/%(tenant_id)s port: api: default: 8776 public: 443 scheme: default: http public: https helm-toolkit: global: {} helm3_hook: true images: local_registry: active: false exclude: - dep_check - image_repo_sync pull_policy: IfNotPresent tags: bootstrap: harbor.atmosphere.dev/ghcr.io/vexxhost/heat:2023.1@sha256:9c12c53cfda60bc105bd618bb5eaa74380cf8685a59dc2c8c5c8ddae006630f8 cinder_api: harbor.atmosphere.dev/ghcr.io/vexxhost/cinder:2023.1@sha256:7c8429fe1742b9072b158a75d3e0fd7fbc404dcbaf9d7ce3dcb9971fc55e2ba1 cinder_backup: harbor.atmosphere.dev/ghcr.io/vexxhost/cinder:2023.1@sha256:7c8429fe1742b9072b158a75d3e0fd7fbc404dcbaf9d7ce3dcb9971fc55e2ba1 cinder_backup_storage_init: harbor.atmosphere.dev/ghcr.io/vexxhost/cinder:2023.1@sha256:7c8429fe1742b9072b158a75d3e0fd7fbc404dcbaf9d7ce3dcb9971fc55e2ba1 cinder_db_sync: harbor.atmosphere.dev/ghcr.io/vexxhost/cinder:2023.1@sha256:7c8429fe1742b9072b158a75d3e0fd7fbc404dcbaf9d7ce3dcb9971fc55e2ba1 cinder_scheduler: harbor.atmosphere.dev/ghcr.io/vexxhost/cinder:2023.1@sha256:7c8429fe1742b9072b158a75d3e0fd7fbc404dcbaf9d7ce3dcb9971fc55e2ba1 cinder_storage_init: harbor.atmosphere.dev/ghcr.io/vexxhost/cinder:2023.1@sha256:7c8429fe1742b9072b158a75d3e0fd7fbc404dcbaf9d7ce3dcb9971fc55e2ba1 cinder_volume: harbor.atmosphere.dev/ghcr.io/vexxhost/cinder:2023.1@sha256:7c8429fe1742b9072b158a75d3e0fd7fbc404dcbaf9d7ce3dcb9971fc55e2ba1 cinder_volume_usage_audit: harbor.atmosphere.dev/ghcr.io/vexxhost/cinder:2023.1@sha256:7c8429fe1742b9072b158a75d3e0fd7fbc404dcbaf9d7ce3dcb9971fc55e2ba1 db_drop: harbor.atmosphere.dev/ghcr.io/vexxhost/heat:2023.1@sha256:9c12c53cfda60bc105bd618bb5eaa74380cf8685a59dc2c8c5c8ddae006630f8 db_init: harbor.atmosphere.dev/ghcr.io/vexxhost/heat:2023.1@sha256:9c12c53cfda60bc105bd618bb5eaa74380cf8685a59dc2c8c5c8ddae006630f8 dep_check: harbor.atmosphere.dev/ghcr.io/vexxhost/kubernetes-entrypoint:edge@sha256:8921b64b87af184a1421dd856b2703bcf3cff9f50863cd0d18371cf964a87bd3 image_repo_sync: docker.io/docker:17.07.0 ks_endpoints: harbor.atmosphere.dev/ghcr.io/vexxhost/heat:2023.1@sha256:9c12c53cfda60bc105bd618bb5eaa74380cf8685a59dc2c8c5c8ddae006630f8 ks_service: harbor.atmosphere.dev/ghcr.io/vexxhost/heat:2023.1@sha256:9c12c53cfda60bc105bd618bb5eaa74380cf8685a59dc2c8c5c8ddae006630f8 ks_user: harbor.atmosphere.dev/ghcr.io/vexxhost/heat:2023.1@sha256:9c12c53cfda60bc105bd618bb5eaa74380cf8685a59dc2c8c5c8ddae006630f8 rabbit_init: harbor.atmosphere.dev/docker.io/library/rabbitmq:3.11.28-management test: docker.io/xrally/xrally-openstack:2.0.0 jobs: volume_usage_audit: cron: 5 * * * * history: failed: 1 success: 3 starting_deadline: 600 labels: api: node_selector_key: openstack-control-plane node_selector_value: enabled backup: node_selector_key: openstack-control-plane node_selector_value: enabled job: node_selector_key: openstack-control-plane node_selector_value: enabled scheduler: node_selector_key: openstack-control-plane node_selector_value: enabled test: node_selector_key: openstack-control-plane node_selector_value: enabled volume: node_selector_key: openstack-control-plane node_selector_value: enabled manifests: certificates: false configmap_bin: true configmap_etc: true cron_volume_usage_audit: true deployment_api: true deployment_backup: true deployment_scheduler: true deployment_volume: true ingress_api: false job_backup_storage_init: true job_bootstrap: true job_clean: false job_create_internal_tenant: true job_db_drop: false job_db_init: true job_db_sync: true job_image_repo_sync: true job_ks_endpoints: true job_ks_service: true job_ks_user: true job_rabbit_init: true job_storage_init: true network_policy: false pdb_api: true pod_rally_test: true pvc_backup: true secret_db: true secret_ingress_tls: true secret_keystone: true secret_rabbitmq: true secret_registry: true service_api: true service_ingress_api: false network: api: external_policy_local: false ingress: annotations: nginx.ingress.kubernetes.io/rewrite-target: / classes: cluster: nginx-cluster namespace: nginx public: true node_port: enabled: false port: 30877 network_policy: cinder: egress: - {} ingress: - {} pod: affinity: anti: topologyKey: default: kubernetes.io/hostname type: default: preferredDuringSchedulingIgnoredDuringExecution weight: default: 10 labels: include_app_kubernetes_io: false lifecycle: disruption_budget: api: min_available: 0 termination_grace_period: api: timeout: 30 upgrades: deployments: pod_replacement_strategy: RollingUpdate revision_history: 3 rolling_update: max_surge: 3 max_unavailable: 1 mounts: cinder_api: cinder_api: volumeMounts: null volumes: null init_container: null cinder_backup: cinder_backup: volumeMounts: null volumes: null init_container: null cinder_db_sync: cinder_db_sync: volumeMounts: null volumes: null cinder_scheduler: cinder_scheduler: volumeMounts: null volumes: null init_container: null cinder_tests: cinder_tests: volumeMounts: null volumes: null init_container: null cinder_volume: cinder_volume: volumeMounts: - mountPath: /var/lib/cinder/tmp name: cinder-tmp volumes: - emptyDir: {} name: cinder-tmp init_container: null cinder_volume_usage_audit: cinder_volume_usage_audit: volumeMounts: null volumes: null init_container: null replicas: api: 1 backup: 1 scheduler: 1 volume: 1 resources: api: limits: cpu: 2000m memory: 1024Mi requests: cpu: 100m memory: 128Mi enabled: false jobs: backup_storage_init: limits: cpu: 2000m memory: 1024Mi requests: cpu: 100m memory: 128Mi bootstrap: limits: cpu: 2000m memory: 1024Mi requests: cpu: 100m memory: 128Mi clean: limits: cpu: 2000m memory: 1024Mi requests: cpu: 100m memory: 128Mi db_drop: limits: cpu: 2000m memory: 1024Mi requests: cpu: 100m memory: 128Mi db_init: limits: cpu: 2000m memory: 1024Mi requests: cpu: 100m memory: 128Mi db_sync: limits: cpu: 2000m memory: 1024Mi requests: cpu: 100m memory: 128Mi image_repo_sync: limits: cpu: 2000m memory: 1024Mi requests: cpu: 100m memory: 128Mi ks_endpoints: limits: cpu: 2000m memory: 1024Mi requests: cpu: 100m memory: 128Mi ks_service: limits: cpu: 2000m memory: 1024Mi requests: cpu: 100m memory: 128Mi ks_user: limits: cpu: 2000m memory: 1024Mi requests: cpu: 100m memory: 128Mi rabbit_init: limits: cpu: 2000m memory: 1024Mi requests: cpu: 100m memory: 128Mi storage_init: limits: cpu: 2000m memory: 1024Mi requests: cpu: 100m memory: 128Mi tests: limits: cpu: 2000m memory: 1024Mi requests: cpu: 100m memory: 128Mi volume_usage_audit: limits: cpu: 2000m memory: 1024Mi requests: cpu: 100m memory: 128Mi scheduler: limits: cpu: 2000m memory: 1024Mi requests: cpu: 100m memory: 128Mi volume: limits: cpu: 2000m memory: 1024Mi requests: cpu: 100m memory: 128Mi security_context: cinder_api: container: ceph_coordination_volume_perms: readOnlyRootFilesystem: true runAsUser: 0 cinder_api: allowPrivilegeEscalation: false readOnlyRootFilesystem: true pod: runAsUser: 42424 cinder_backup: container: ceph_backup_keyring_placement: readOnlyRootFilesystem: true runAsUser: 0 ceph_backup_volume_perms: readOnlyRootFilesystem: true runAsUser: 0 ceph_coordination_volume_perms: readOnlyRootFilesystem: true runAsUser: 0 ceph_keyring_placement: readOnlyRootFilesystem: true runAsUser: 0 cinder_backup: capabilities: add: - SYS_ADMIN readOnlyRootFilesystem: true runAsUser: 0 pod: runAsUser: 42424 cinder_scheduler: container: ceph_coordination_volume_perms: readOnlyRootFilesystem: true runAsUser: 0 cinder_scheduler: allowPrivilegeEscalation: false readOnlyRootFilesystem: true pod: runAsUser: 42424 cinder_volume: container: ceph_coordination_volume_perms: readOnlyRootFilesystem: true runAsUser: 0 ceph_keyring_placement: readOnlyRootFilesystem: true runAsUser: 0 cinder_volume: capabilities: add: - SYS_ADMIN privileged: true readOnlyRootFilesystem: true init_cinder_conf: readOnlyRootFilesystem: true runAsUser: 0 pod: runAsUser: 42424 clean: container: cinder_volume_rbd_secret_clean: allowPrivilegeEscalation: false readOnlyRootFilesystem: true pod: runAsUser: 42424 create_internal_tenant: container: create_internal_tenant: allowPrivilegeEscalation: false readOnlyRootFilesystem: true pod: runAsUser: 42424 storage_init: container: ceph_keyring_placement: readOnlyRootFilesystem: true runAsUser: 0 cinder_backup_storage_init: allowPrivilegeEscalation: false readOnlyRootFilesystem: true pod: runAsUser: 42424 volume_usage_audit: container: cinder_volume_usage_audit: allowPrivilegeEscalation: false readOnlyRootFilesystem: true pod: runAsUser: 42424 tolerations: cinder: enabled: false tolerations: - effect: NoSchedule key: node-role.kubernetes.io/master operator: Exists - effect: NoSchedule key: node-role.kubernetes.io/control-plane operator: Exists useHostNetwork: backup: false volume: false release_group: null secrets: identity: admin: cinder-keystone-admin cinder: cinder-keystone-user test: cinder-keystone-test oci_image_registry: cinder: cinder-oci-image-registry oslo_db: admin: cinder-db-admin cinder: cinder-db-user oslo_messaging: admin: cinder-rabbitmq-admin cinder: cinder-rabbitmq-user rbd: backup: cinder-backup-rbd-keyring volume: cinder-volume-rbd-keyring volume_external: cinder-volume-external-rbd-keyring tls: volume: api: internal: cinder-tls-api public: cinder-tls-public storage: ceph tls: identity: false oslo_db: false oslo_messaging: false