Sample manila.conf

updated: 2026-10-28 05:41
Contents

Sample manila.conf

Without Replication

This section provides an sample Manila configuration file (manila.conf) that contains three backends for ONTAP. Two without share server management. One with share server management.

[keystone_authtoken]
signing_dir = /var/cache/manila
admin_password = nomoresecrete
admin_user = manila
admin_tenant_name = service
auth_protocol = http
auth_port = 35357
auth_host = 10.236.168.134

[DEFAULT]
rabbit_userid = stackrabbit
rabbit_password = stackqueue
rabbit_hosts = 10.236.168.134
rpc_backend = rabbit
enabled_share_backends = cdotSingleSVM01, cdotSingleSVM02, cdotMultipleSVM
enabled_share_protocols = NFS,CIFS
neutron_admin_password = nomoresecrete
default_share_type = default
state_path = /opt/stack/data/manila
osapi_share_extension = manila.api.contrib.standard_extensions
rootwrap_config = /etc/manila/rootwrap.conf
api_paste_config = /etc/manila/api-paste.ini
share_name_template = share-%s
scheduler_driver = manila.scheduler.drivers.filter.FilterScheduler
debug = True
auth_strategy = keystone
use_scheduler_creating_share_from_snapshot = True

[DATABASE]
connection = mysql://root:stackdb@127.0.0.1/manila?charset=utf8

[oslo_concurrency]
lock_path = /opt/stack/manila/manila_locks

[cdotSingleSVM01]
share_backend_name = cdotSingleSVM01
share_driver = manila.share.drivers.netapp.common.NetAppDriver
driver_handles_share_servers = False
netapp_storage_family = ontap_cluster
netapp_server_hostname = 10.63.40.150
netapp_server_port = 443
netapp_login = admin
netapp_password = netapp1!
netapp_vserver = manila-vserver-1
netapp_transport_type = https
netapp_ssl_cert_path = /etc/manila/ontap_cert.pem
netapp_aggregate_name_search_pattern = ^((?!aggr0).)*$

[cdotSingleSVM02]
share_backend_name = cdotSingleSVM02
share_driver = manila.share.drivers.netapp.common.NetAppDriver
driver_handles_share_servers = False
netapp_storage_family = ontap_cluster
netapp_server_hostname = 10.63.40.151
netapp_server_port = 443
netapp_login = admin
netapp_password = netapp1!
netapp_vserver = manila-vserver-2
netapp_transport_type = https
netapp_ssl_cert_path = /etc/manila/ontap_cert.pem
netapp_aggregate_name_search_pattern = ^((?!aggr0).)*$

[cdotMultipleSVM]
share_backend_name = cdotMultipleSVM
share_driver = manila.share.drivers.netapp.common.NetAppDriver
driver_handles_share_servers = True
netapp_storage_family = ontap_cluster
netapp_server_hostname = hostname
netapp_server_port = 443
netapp_login = admin
netapp_password = netapp1!
netapp_transport_type = https
netapp_ssl_cert_path = /etc/manila/ontap_cert.pem
netapp_root_volume_aggregate = aggr1
netapp_aggregate_name_search_pattern = ^((?!aggr0).)*$

With Replication

This section provides a sample Manila configuration file (manila.conf) that contains one backend, cdotSingleSVM1, that is in the same replication domain as cdotSingleSVM02. For the purpose of replication management, both backends must be included. Only the backend cdotSingleSVM01 is enabled.

Important

SVM names must be unique, even across clusters, in order to support replication between them.

[keystone_authtoken]
signing_dir = /var/cache/manila
admin_password = nomoresecrete
admin_user = manila
admin_tenant_name = service
auth_protocol = http
auth_port = 35357
auth_host = 10.236.168.134

[DEFAULT]
rabbit_userid = stackrabbit
rabbit_password = stackqueue
rabbit_hosts = 10.236.168.134
rpc_backend = rabbit
enabled_share_backends = cdotSingleSVM01
enabled_share_protocols = NFS,CIFS
neutron_admin_password = nomoresecrete
default_share_type = default
state_path = /opt/stack/data/manila
osapi_share_extension = manila.api.contrib.standard_extensions
rootwrap_config = /etc/manila/rootwrap.conf
api_paste_config = /etc/manila/api-paste.ini
share_name_template = share-%s
scheduler_driver = manila.scheduler.filter_scheduler.FilterScheduler
debug = True
auth_strategy = keystone
replica_state_update_interval = 300
use_scheduler_creating_share_from_snapshot = True

[DATABASE]
connection = mysql://root:stackdb@127.0.0.1/manila?charset=utf8

[oslo_concurrency]
lock_path = /opt/stack/manila/manila_locks

[cdotSingleSVM01]
share_backend_name = cdotSingleSVM01
share_driver = manila.share.drivers.netapp.common.NetAppDriver
driver_handles_share_servers = False
netapp_storage_family = ontap_cluster
netapp_server_hostname = 10.63.40.150
netapp_server_port = 443
netapp_login = admin
netapp_password = netapp1!
netapp_vserver = manila-vserver-1
netapp_transport_type = https
netapp_ssl_cert_path = /etc/manila/ontap_cert.pem
netapp_aggregate_name_search_pattern = ^((?!aggr0).)*$
replication_domain = replication_domain_1

[cdotSingleSVM02]
share_backend_name = cdotSingleSVM02
share_driver = manila.share.drivers.netapp.common.NetAppDriver
driver_handles_share_servers = False
netapp_storage_family = ontap_cluster
netapp_server_hostname = 10.63.40.151
netapp_server_port = 443
netapp_login = admin
netapp_password = netapp1!
netapp_vserver = manila-vserver-2
netapp_transport_type = https
netapp_ssl_cert_path = /etc/manila/ontap_cert.pem
netapp_aggregate_name_search_pattern = ^((?!aggr0).)*$
replication_domain = replication_domain_1

For Encrypted Share

This section provides the sample content on what to update in the Manila configuration file (manila.conf) to create an encrypted share.

Important

Beginning with the Hibiscus release, the netapp_dns_* options in the backend stanza below give each SVM created by this backend a DNS name service. Configure them for Barbican-encrypted shares in enterprise deployments such as Red Hat OpenStack Services on OpenShift (RHOSO), where the SVM must resolve the Barbican hostname. See DNS Configuration for SVMs in DHSS=True Mode (Available from Hibiscus Release).

[key_manager]
backend = barbican

[barbican]
barbican_endpoint_type = internal
auth_endpoint = https://<devstack_ip>/identity
auth_url = https://<devstack_ip>/identity
cafile = /opt/stack/data/ca-bundle.pem
project_domain_name = Default
project_name = service
user_domain_name = Default
password = <ADMIN_PASSWORD_mentioned_in_local.conf>
username = barbican
auth_type = password

[ontap_backend_dhss_true]
vendor_name = NetApp
share_driver = manila.share.drivers.netapp.common.NetAppDriver
driver_handles_share_servers = True
netapp_login = admin
netapp_password <password>
netapp_server_hostname = <ip>
netapp_server_port = 443
netapp_transport_type = https
netapp_ssl_cert_path = /etc/manila/ontap_cert.pem
netapp_storage_family = ontap_cluster
netapp_storage_protocol = NFS_CIFS
max_over_subscription_ratio=1
netapp_trace_flags=method,api
network_api_class = manila.network.standalone_network_plugin.StandaloneNetworkPlugin
standalone_network_plugin_allowed_ip_ranges = <ip_range>
standalone_network_plugin_gateway = <gateway_ip>
standalone_network_plugin_mask = <netmask>
standalone_network_plugin_ip_version = 4
standalone_network_plugin_network_type = flat
#Uncomment to select the REST client. Fallback to ZAPI stays enabled
#unless netapp_zapi_fallback_enabled is set to false.
#netapp_use_legacy_client = false
#netapp_zapi_fallback_enabled = true
netapp_identity_auth_token_path = /v3/auth/tokens
#Few deployments may not need above path, please check "openstack endpoint list | grep key-manager".
#If endpoint doesn't have the token path in it, the user can use above path.

# Infrastructure DNS for SVMs created by this backend (Hibiscus and later).
# Recommended for Barbican-encrypted shares in enterprise deployments
# such as RHOSO. See the SVM DNS key-concepts section.
netapp_dns_domains = apps.example.com,example.com
netapp_dns_nameservers = 10.0.0.53,10.0.0.54
netapp_dns_hosts = barbican.example.com:10.0.0.10

#Enable backends in  [DEFAULT] stanza,
[DEFAULT]
#################
enabled_share_backends = ontap_backend_dhss_true
#################
updated: 2026-10-28 05:41

This document is licensed under Apache 2.0 license.

found an error? report a bug questions?