Anbox Cloud

Learn about configurations >

• certificate-extra-sans | string

  Config options to add extra-sans to the ones used when requesting server certificates. The extra-sans are specified by comma-separated names to be added when requesting signed certificates. Use "{unit}" as a placeholder to be filled with the unit number, e.g. "worker-{unit}" will be translated as "worker-0" for unit 0 and "worker-1" for unit 1 when requesting the certificate.

• client-certificate-domain | string

  Config option to specify a domain to be added to the common names in certificate signing requests for client certificates. Example: "mydomain.com". This must match the allowed domains from the TLS provider. In the case of Vault, this should be set to one of the domains configured in "pki_allowed_domains".

• election-timeout | int

  Default: 1000

  How long, in milliseconds, a follower node will go without hearing a heartbeat before attempting to become leader itself. The value should be at least 10x the value of <heartbeat-interval>, and must not exceed 50000.

• heartbeat-interval | int

  Default: 100

  The frequency, in milliseconds, with which the leader will notify followers that it is still the leader. For best practices, the parameter should be set around round-trip time between members. The value must be between 10 and 5000 at most.

• pause-after-unit-refresh | string

  Default: first

  Wait for manual confirmation to resume refresh after these units refresh Allowed values: "all", "first", "none"

• peer-certificate-domain | string

  Config option to specify a domain to be added to the common names in certificate signing requests for peer server certificates. Example: "mydomain.com". This must match the allowed domains from the TLS provider. In the case of Vault, this should be set to one of the domains configured in "pki_allowed_domains".

• quota-backend-bytes | string

  Default: auto

  Sets the backend database size limit in bytes for each etcd member. When this limit is exceeded, the cluster raises a NOSPACE alarm and enters a read-only mode, rejecting all write requests. This value should be sized according to the cluster's workload and available RAM. The value needs to be `auto` or an integer representing the size in bytes. If value is set to 'auto' the formula used is min(100GiB, 0.9*memory, 0.9*data_storage_size) The community-recommended maximum is 8 GiB. A minimum of 100MiB is enforced. WARNING: The LXD 'dir' storage driver exposes the host's total disk space to containers, which can cause inaccurate quota calculations.

• system-users | secret

  Configure the internal system user and it's password. The password will be auto-generated if this option is not set. It is for internal use only and SHOULD NOT be used by applications. This needs to be a Juju Secret URI pointing to a secret that contains the following content: `root: <password>`.

• tls-client-private-key | secret

  A Juju secret URI of a secret containing the private key for client-to-server TLS certificates.

• tls-peer-private-key | secret

  A Juju secret URI of a secret containing the private key for peer-to-peer TLS certificates.