Chapter 18. Object Storage (swift) Parameters

EnforceSecureRbac

Setting this option to True will configure each OpenStack service to enforce Secure RBAC by setting [oslo_policy] enforce_new_defaults and [oslo_policy] enforce_scope to True. This introduces a consistent set of RBAC personas across OpenStack services that include support for system and project scope, as well as keystone’s default roles, admin, member, and reader. Do not enable this functionality until all services in your deployment actually support secure RBAC. The default value is false.

MemcachedTLS

Set to True to enable TLS on Memcached service. Because not all services support Memcached TLS, during the migration period, Memcached will listen on 2 ports - on the port set with MemcachedPort parameter (above) and on 11211, without TLS. The default value is false.

SwiftAccountWorkers

Number of workers for Swift account service. The default value is 0.

SwiftCeilometerIgnoreProjects

Comma-seperated list of project names to ignore. The default value is ['service'].

SwiftCeilometerPipelineEnabled

Set to False to disable the object storage proxy ceilometer pipeline. The default value is false.

SwiftContainerSharderEnabled

Set to True to enable Swift container sharder service. The default value is false.

SwiftContainerWorkers

Number of workers for Swift account service. The default value is 0.

SwiftCorsAllowedOrigin

Indicate whether this resource may be shared with the domain received in the request "origin" header.

SwiftEncryptionEnabled

Set to True to enable data-at-rest encryption in Swift. The default value is false.

SwiftHashPrefix

A random string to be used as an extra salt when hashing to determine mappings in the ring.

SwiftHashSuffix

A random string to be used as a salt when hashing to determine mappings in the ring.

SwiftMinPartHours

The minimum time (in hours) before a partition in a ring can be moved following a rebalance. The default value is 1.

SwiftMountCheck

Check if the devices are mounted to prevent accidentally writing to the root device. The default value is false.

SwiftObjectWorkers

Number of workers for Swift account service. The default value is 0.

SwiftPartPower

Partition power to use when building object storage rings. The default value is 10.

SwiftPassword

The password for the object storage service account.

SwiftProxyNodeTimeout

Timeout for requests going from swift-proxy to account, container, and object services. The default value is 60.

SwiftProxyRecoverableNodeTimeout

Timeout for GET/HEAD requests going from swift-proxy to swift a/c/o services. The default value is 30.

SwiftRawDisks

Additional raw devices to use for the object storage backend. For example: {sdb: {}}

SwiftReplicas

Number of replicas to use in the object storage rings. The default value is 3.

SwiftRingBuild

Whether to manage object storage rings or not. The default value is true.

SwiftRingGetTempurl

A temporary Swift URL to download rings from.

SwiftRingPutTempurl

A temporary Swift URL to upload rings to.

SwiftUseLocalDir

Use a local directory for object storage services when building rings. The default value is true.

SwiftUseNodeDataLookup

Use NodeDataLookup for disk devices in order to use persistent naming. The default value is false.

SwiftWorkers

Number of workers for object storage service. Note that more workers creates a larger number of processes on systems, which results in excess memory consumption. It is recommended to choose a suitable non-default value on systems with high CPU core counts. 0 sets to the OpenStack internal default, which is equal to the number of CPU cores on the node. The default value is 0.