[DEFAULT]
state_path=/var/lib/manila
host=my-storage-host.example.com
storage_availability_zone=nova
rootwrap_config=/etc/manila/rootwrap.conf
auth_strategy=keystone
enabled_share_backends=service_instance
backup_mount_export=/var/lib/manila/backups
osapi_share_listen=0.0.0.0
osapi_share_workers=8
driver_handles_share_servers=True
delete_share_server_with_last_share=False
log_dir=/var/log/manila
transport_url=rabbit://manila:my-very-secret-password-here@my-rabbitmq.example.com:5671/manila
api_paste_config=/etc/manila/api-paste.ini
ssl_cert_file=/etc/manila/ssl/my-storage-host.example.com_cert.pem
ssl_key_file=/etc/manila/ssl/private/my-storage-host.example.com_key.pem
ssl_ca_file=/etc/pki/ca-trust/source/anchors/CA_root_intermediate_only.pem

[cinder]
region_name=RegionOne
auth_url=https://my-keystone.example.com:5000
auth_type=password
cafile=/etc/pki/ca-trust/source/anchors/CA_root_intermediate_only.pem
password=my-very-secret-password-here
project_domain_name=Default
project_name=services
user_domain_name=Default
username=cinder

[database]
connection=mysql+pymysql://manila:my-very-secret-password-here@my-db.example.com/manila?charset=utf8&ssl_ca=/etc/pki/ca-trust/source/anchors/CA_root_intermediate_only.pem&ssl_cert=/etc/manila/ssl/my-storage-host.example.com_cert.pem&ssl_key=/etc/manila/ssl/private/my-storage-host.example.com_key.pem

[glance]
region_name=RegionOne
auth_url=https://my-keystone.example.com:5000
auth_type=password
cafile=/etc/pki/ca-trust/source/anchors/CA_root_intermediate_only.pem
certfile=/etc/manila/ssl/my-storage-host.example.com_cert.pem
keyfile=/etc/manila/ssl/private/my-storage-host.example.com_key.pem
password=my-very-secret-password-here
project_domain_name=Default
project_name=services
user_domain_name=Default
username=cinder

[keystone_authtoken]
www_authenticate_uri=https://my-keystone.example.com:5000
certfile=/etc/manila/ssl/my-storage-host.example.com_cert.pem
keyfile=/etc/manila/ssl/private/my-storage-host.example.com_key.pem
cafile=/etc/pki/ca-trust/source/anchors/CA_root_intermediate_only.pem
region_name=RegionOne
service_token_roles=admin,service,share
service_token_roles_required=True
auth_type=password
auth_url=https://my-keystone.example.com:5000
username=manila
password=my-very-secret-password-here
user_domain_name=Default
project_name=services
project_domain_name=Default

[neutron]
region_name=RegionOne
auth_url=https://my-keystone.example.com:5000
auth_type=password
cafile=/etc/pki/ca-trust/source/anchors/CA_root_intermediate_only.pem
password=my-very-secret-password-here
project_domain_name=Default
project_name=services
user_domain_name=Default
username=neutron

[nova]
region_name=RegionOne
auth_url=https://my-keystone.example.com:5000
auth_type=password
cafile=/etc/pki/ca-trust/source/anchors/CA_root_intermediate_only.pem
insecure=False
password=my-very-secret-password-here
project_domain_name=Default
project_name=services
user_domain_name=Default
username=nova

[oslo_concurrency]
lock_path=/var/lib/manila/tmp

[oslo_messaging_notifications]
driver=messagingv2
transport_url=rabbit://manila:my-very-secret-password-here@my-rabbitmq.example.com:5671/manila

[oslo_messaging_rabbit]
ssl=True
ssl_key_file=/etc/manila/ssl/private/my-storage-host.example.com_key.pem
ssl_cert_file=/etc/manila/ssl/my-storage-host.example.com_cert.pem
ssl_ca_file=/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem

[oslo_policy]
policy_file=/etc/manila/policy.yaml

[service_instance]
driver_handles_share_server=True
service_image_name=manila-service-image
service_instance_name_template=manila_service_instance_%s
service_instance_user=manila
manila_service_keypair_name=manila-service
path_to_public_key=/etc/manila/ssl/private/manila_rsa.pub
path_to_private_key=/etc/manila/ssl/private/manila_rsa
max_time_to_build_instance=300
service_instance_security_group=manila-service
service_instance_flavor_id=100
service_network_name=manila_service_network
service_network_cidr=10.254.0.0/16
service_network_division_mask=28
interface_driver=manila.network.linux.interface.OVSInterfaceDriver
connect_share_server_to_tenant_network=False