Chapter 18. Object Storage (swift) Parameters You can modify the swift service with object storage parameters. Parameter Description EnforceSecureRbac Setting this option to True will configure each OpenStack service to enforce Secure RBAC by setting [oslo_policy] enforce_new_defaults and [oslo_policy] enforce_scope to True. This introduces a consistent set of RBAC personas across OpenStack services that include support for system and project scope, as well as keystone's default roles, admin, member, and reader. Do not enable this functionality until all services in your deployment actually support secure RBAC. The default value is false . MemcachedTLS Set to True to enable TLS on Memcached service. Because not all services support Memcached TLS, during the migration period, Memcached will listen on 2 ports - on the port set with MemcachedPort parameter (above) and on 11211, without TLS. The default value is false . SwiftAccountWorkers Number of workers for Swift account service. The default value is 0 . SwiftCeilometerIgnoreProjects Comma-seperated list of project names to ignore. The default value is ['service'] . SwiftCeilometerPipelineEnabled Set to False to disable the object storage proxy ceilometer pipeline. The default value is false . SwiftContainerSharderEnabled Set to True to enable Swift container sharder service. The default value is false . SwiftContainerWorkers Number of workers for Swift account service. The default value is 0 . SwiftCorsAllowedOrigin Indicate whether this resource may be shared with the domain received in the request "origin" header. SwiftEncryptionEnabled Set to True to enable data-at-rest encryption in Swift. The default value is false . SwiftHashPrefix A random string to be used as an extra salt when hashing to determine mappings in the ring. SwiftHashSuffix A random string to be used as a salt when hashing to determine mappings in the ring. SwiftMinPartHours The minimum time (in hours) before a partition in a ring can be moved following a rebalance. The default value is 1 . SwiftMountCheck Check if the devices are mounted to prevent accidentally writing to the root device. The default value is false . SwiftObjectWorkers Number of workers for Swift account service. The default value is 0 . SwiftPartPower Partition power to use when building object storage rings. The default value is 10 . SwiftPassword The password for the object storage service account. SwiftProxyNodeTimeout Timeout for requests going from swift-proxy to account, container, and object services. The default value is 60 . SwiftProxyRecoverableNodeTimeout Timeout for GET/HEAD requests going from swift-proxy to swift a/c/o services. The default value is 30 . SwiftRawDisks Additional raw devices to use for the object storage backend. For example: {sdb: {}} SwiftReplicas Number of replicas to use in the object storage rings. The default value is 3 . SwiftRingBuild Whether to manage object storage rings or not. The default value is true . SwiftRingGetTempurl A temporary Swift URL to download rings from. SwiftRingPutTempurl A temporary Swift URL to upload rings to. SwiftUseLocalDir Use a local directory for object storage services when building rings. The default value is true . SwiftUseNodeDataLookup Use NodeDataLookup for disk devices in order to use persistent naming. The default value is false . SwiftWorkers Number of workers for object storage service. Note that more workers creates a larger number of processes on systems, which results in excess memory consumption. It is recommended to choose a suitable non-default value on systems with high CPU core counts. 0 sets to the OpenStack internal default, which is equal to the number of CPU cores on the node. The default value is 0 .

Commands: