Sample manila.conf

updated: 2025-09-29 06:50
Contents

Sample manila.conf

Without Replication

This section provides an sample Manila configuration file (manila.conf) that contains three backends for ONTAP. Two without share server management. One with share server management.

[keystone_authtoken]
signing_dir = /var/cache/manila
admin_password = nomoresecrete
admin_user = manila
admin_tenant_name = service
auth_protocol = http
auth_port = 35357
auth_host = 10.236.168.134

[DEFAULT]
rabbit_userid = stackrabbit
rabbit_password = stackqueue
rabbit_hosts = 10.236.168.134
rpc_backend = rabbit
enabled_share_backends = cdotSingleSVM01, cdotSingleSVM02, cdotMultipleSVM
enabled_share_protocols = NFS,CIFS
neutron_admin_password = nomoresecrete
default_share_type = default
state_path = /opt/stack/data/manila
osapi_share_extension = manila.api.contrib.standard_extensions
rootwrap_config = /etc/manila/rootwrap.conf
api_paste_config = /etc/manila/api-paste.ini
share_name_template = share-%s
scheduler_driver = manila.scheduler.drivers.filter.FilterScheduler
debug = True
auth_strategy = keystone
use_scheduler_creating_share_from_snapshot = True

[DATABASE]
connection = mysql://root:stackdb@127.0.0.1/manila?charset=utf8

[oslo_concurrency]
lock_path = /opt/stack/manila/manila_locks

[cdotSingleSVM01]
share_backend_name = cdotSingleSVM01
share_driver = manila.share.drivers.netapp.common.NetAppDriver
driver_handles_share_servers = False
netapp_storage_family = ontap_cluster
netapp_server_hostname = 10.63.40.150
netapp_server_port = 443
netapp_login = admin
netapp_password = netapp1!
netapp_vserver = manila-vserver-1
netapp_transport_type = https
netapp_aggregate_name_search_pattern = ^((?!aggr0).)*$

[cdotSingleSVM02]
share_backend_name = cdotSingleSVM02
share_driver = manila.share.drivers.netapp.common.NetAppDriver
driver_handles_share_servers = False
netapp_storage_family = ontap_cluster
netapp_server_hostname = 10.63.40.151
netapp_server_port = 443
netapp_login = admin
netapp_password = netapp1!
netapp_vserver = manila-vserver-2
netapp_transport_type = https
netapp_aggregate_name_search_pattern = ^((?!aggr0).)*$

[cdotMultipleSVM]
share_backend_name = cdotMultipleSVM
share_driver = manila.share.drivers.netapp.common.NetAppDriver
driver_handles_share_servers = True
netapp_storage_family = ontap_cluster
netapp_server_hostname = hostname
netapp_server_port = 443
netapp_login = admin
netapp_password = netapp1!
netapp_transport_type = https
netapp_root_volume_aggregate = aggr1
netapp_aggregate_name_search_pattern = ^((?!aggr0).)*$

With Replication

This section provides a sample Manila configuration file (manila.conf) that contains one backend, cdotSingleSVM1, that is in the same replication domain as cdotSingleSVM02. For the purpose of replication management, both backends must be included. Only the backend cdotSingleSVM01 is enabled.

Important

SVM names must be unique, even across clusters, in order to support replication between them.

[keystone_authtoken]
signing_dir = /var/cache/manila
admin_password = nomoresecrete
admin_user = manila
admin_tenant_name = service
auth_protocol = http
auth_port = 35357
auth_host = 10.236.168.134

[DEFAULT]
rabbit_userid = stackrabbit
rabbit_password = stackqueue
rabbit_hosts = 10.236.168.134
rpc_backend = rabbit
enabled_share_backends = cdotSingleSVM01
enabled_share_protocols = NFS,CIFS
neutron_admin_password = nomoresecrete
default_share_type = default
state_path = /opt/stack/data/manila
osapi_share_extension = manila.api.contrib.standard_extensions
rootwrap_config = /etc/manila/rootwrap.conf
api_paste_config = /etc/manila/api-paste.ini
share_name_template = share-%s
scheduler_driver = manila.scheduler.filter_scheduler.FilterScheduler
debug = True
auth_strategy = keystone
replica_state_update_interval = 300
use_scheduler_creating_share_from_snapshot = True

[DATABASE]
connection = mysql://root:stackdb@127.0.0.1/manila?charset=utf8

[oslo_concurrency]
lock_path = /opt/stack/manila/manila_locks

[cdotSingleSVM01]
share_backend_name = cdotSingleSVM01
share_driver = manila.share.drivers.netapp.common.NetAppDriver
driver_handles_share_servers = False
netapp_storage_family = ontap_cluster
netapp_server_hostname = 10.63.40.150
netapp_server_port = 80
netapp_login = admin
netapp_password = netapp1!
netapp_vserver = manila-vserver-1
netapp_transport_type = http
netapp_aggregate_name_search_pattern = ^((?!aggr0).)*$
replication_domain = replication_domain_1

[cdotSingleSVM02]
share_backend_name = cdotSingleSVM02
share_driver = manila.share.drivers.netapp.common.NetAppDriver
driver_handles_share_servers = False
netapp_storage_family = ontap_cluster
netapp_server_hostname = 10.63.40.151
netapp_server_port = 80
netapp_login = admin
netapp_password = netapp1!
netapp_vserver = manila-vserver-2
netapp_transport_type = http
netapp_aggregate_name_search_pattern = ^((?!aggr0).)*$
replication_domain = replication_domain_1

For Encrypted Share

This section provides the sample content on what to update in the Manila configuration file (manila.conf) to create an encrypted share.

[key_manager]
backend = barbican

[barbican]
barbican_endpoint_type = internal
auth_endpoint = https://<devstack_ip>/identity
auth_url = https://<devstack_ip>/identity
cafile = /opt/stack/data/ca-bundle.pem
project_domain_name = Default
project_name = service
user_domain_name = Default
password = <ADMIN_PASSWORD_mentioned_in_local.conf>
username = barbican
auth_type = password

[ontap_backend_dhss_true]
vendor_name = NetApp
share_driver = manila.share.drivers.netapp.common.NetAppDriver
driver_handles_share_servers = True
netapp_login = admin
netapp_password <password>
netapp_server_hostname = <ip>
netapp_server_port = 80
netapp_transport_type = http
netapp_storage_family = ontap_cluster
netapp_storage_protocol = NFS_CIFS
max_over_subscription_ratio=1
netapp_trace_flags=method,api
network_api_class = manila.network.standalone_network_plugin.StandaloneNetworkPlugin
standalone_network_plugin_allowed_ip_ranges = <ip_range>
standalone_network_plugin_gateway = <gateway_ip>
standalone_network_plugin_mask = <netmask>
standalone_network_plugin_ip_version = 4
standalone_network_plugin_network_type = flat
#Uncomment below line for REST workflow
#netapp_use_legacy_client = false
netapp_identity_auth_token_path = /v3/auth/tokens
#Few deployments may not need above path, please check "openstack endpoint list | grep key-manager".
#If endpoint doesn't have the token path in it, the user can use above path.

#Enable backends in  [DEFAULT] stanza,
[DEFAULT]
#################
enabled_share_backends = ontap_backend_dhss_true
#################
updated: 2025-09-29 06:50

This document is licensed under Apache 2.0 license.

found an error? report a bug questions?