20-snf-cyclades-app-api.conf 4.28 KB
Newer Older
1
2
3
4
5
6
7
8
9
## -*- coding: utf-8 -*-
##
## API configuration
######################
#
#
#DEBUG = False
#
## Top-level URL for deployment. Numerous other URLs depend on this.
10
#CYCLADES_BASE_URL = "https://host:port/cyclades"
11
12
13
#
## The API implementation needs to accept and return absolute references
## to its resources. Thus, it needs to know its public URL.
14
#API_ROOT_URL = CYCLADES_BASE_URL.rstrip('/') + '/api'
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
#
## The API will return HTTP Bad Request if the ?changes-since
## parameter refers to a point in time more than POLL_LIMIT seconds ago.
#POLL_LIMIT = 3600
#
##
## Network Configuration
##
#
## Maximum allowed network size for private networks.
#MAX_CIDR_BLOCK = 22
#
## Default settings used by network flavors
#DEFAULT_MAC_PREFIX = 'aa:00:0'
#DEFAULT_BRIDGE = 'br0'
#
## Boolean value indicating whether synnefo would hold a Pool and allocate IP
## addresses. If this setting is set to False, IP pool management will be
## delegated to Ganeti. If machines have been created with this option as False,
## you must run network reconciliation after turning it to True.
#PUBLIC_USE_POOL = True
#
## Network flavors that users are allowed to create through API requests
#API_ENABLED_NETWORK_FLAVORS = ['MAC_FILTERED']
#
## Settings for IP_LESS_ROUTED network:
## -----------------------------------
## In this case VMCs act as routers that forward the traffic to/from VMs, based
## on the defined routing table($DEFAULT_ROUTING_TABLE) and ip rules, that
## exist in every node, implenting an IP-less routed and proxy-arp setup.
#DEFAULT_ROUTING_TABLE = 'snf_public'
#
## Settings for MAC_FILTERED network:
## ------------------------------------------
## All networks of this type are bridged to the same bridge. Isolation between
## networks is achieved by assigning a unique MAC-prefix to each network and
## filtering packets via ebtables.
#DEFAULT_MAC_FILTERED_BRIDGE = 'prv0'
#
#
## Firewalling
#GANETI_FIREWALL_ENABLED_TAG = 'synnefo:network:0:protected'
#GANETI_FIREWALL_DISABLED_TAG = 'synnefo:network:0:unprotected'
#GANETI_FIREWALL_PROTECTED_TAG = 'synnefo:network:0:limited'
#
## The default firewall profile that will be in effect if no tags are defined
#DEFAULT_FIREWALL_PROFILE = 'DISABLED'
#
## our REST API would prefer to be explicit about trailing slashes
#APPEND_SLASH = False
#
## Fixed mapping of user VMs to a specific backend.
67
## e.g. BACKEND_PER_USER = {'example@synnefo.org': 2}
68
69
70
71
72
73
74
75
76
#BACKEND_PER_USER = {}
#
## List of backend IDs used *only* for archipelago.
#ARCHIPELAGO_BACKENDS = []
#
#
## URL templates for the stat graphs.
## The API implementation replaces '%s' with the encrypted backend id.
## FIXME: For now we do not encrypt the backend id.
77
78
79
80
#CPU_BAR_GRAPH_URL = 'http://stats.synnefo.org/%s/cpu-bar.png'
#CPU_TIMESERIES_GRAPH_URL = 'http://stats.synnefo.org/%s/cpu-ts.png'
#NET_BAR_GRAPH_URL = 'http://stats.synnefo.org/%s/net-bar.png'
#NET_TIMESERIES_GRAPH_URL = 'http://stats.synnefo.org/%s/net-ts.png'
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
#
## Recommended refresh period for server stats
#STATS_REFRESH_PERIOD = 60
#
## The maximum number of file path/content pairs that can be supplied on server
## build
#MAX_PERSONALITY = 5
#
## The maximum size, in bytes, for each personality file
#MAX_PERSONALITY_SIZE = 10240
#
## Available storage types to be used as disk templates
## Use ext_<provider_name> to map specific provider for `ext` disk template.
#GANETI_DISK_TEMPLATES = ('blockdev', 'diskless', 'drbd', 'file', 'plain',
#                         'rbd',  'sharedfile')
#DEFAULT_GANETI_DISK_TEMPLATE = 'drbd'
#
98
99
## Top-level URL of the astakos instance to be used for user management
#ASTAKOS_BASE_URL = 'https://accounts.example.synnefo.org/'
100
101
102
103
104
105
106
107
108
109
110
#
## Key for password encryption-decryption. After changing this setting, synnefo
## will be unable to decrypt all existing Backend passwords. You will need to
## store again the new password by using 'snf-manage backend-modify'.
## SECRET_ENCRYPTION_KEY may up to 32 bytes. Keys bigger than 32 bytes are not
## supported.
#SECRET_ENCRYPTION_KEY= "Password Encryption Key"
#
## Astakos service token
## The token used for astakos service api calls (e.g. api to retrieve user email
## using a user uuid)
111
#CYCLADES_SERVICE_TOKEN = ''
112
113
114
115
116

# Let cyclades proxy user specific api calls to astakos, via self served
# endpoints. Set this to False if you deploy cyclades-app/astakos-app on the
# same machine.
#CYCLADES_PROXY_USER_SERVICES = True