TrilioVault WorkloadManager (Kubernetes)
Platform:
| Channel | Revision | Published | Runs on |
|---|---|---|---|
| latest/candidate | 10 | 25 Jul 2026 | |
| 6.2/stable | 24 | 02 Sep 2026 | |
| 6.2/candidate | 24 | 02 Sep 2026 |
juju deploy trilio-wlm-k8s --channel candidate
-
amqp-durable-queues | boolean
Default: True
Standard oslo.messaging amqp_durable_queues setting. Must match nova.conf's convention on the compute nodes for the same reason as rabbit-quorum-queue.
-
api-workers | int
Default: 2
Number of wlm-api worker processes
-
cinder-endpoint | string
Default: http://cinder.openstack.svc.cluster.local:8776/v3/%(tenant_id)s
Cinder internal endpoint URL for WLM to call
-
cloud-admin-domain | string
Default: admin_domain
Keystone domain name (or ID) of the cloud administrator. Sunbeam default is "admin_domain".
-
cloud-admin-project-id | string
Keystone UUID of the cloud admin project — same purpose and same auto-population behavior as cloud-admin-user-id above (sourced from the identity-service relation's admin-project-id field when left empty). Set explicitly only if it differs from the relation's own admin project (e.g. openstack project show <project> -f value -c id).
-
cloud-admin-role | string
Default: admin
Keystone role name of the cloud administrator.
-
cloud-admin-user-id | string
Keystone UUID of the cloud admin user, needed for workloadmgr's own cloud-admin trust lookup (workloadmgr/compute/nova.py's _get_trusts('cloud_admin', CONF.cloud_admin_project_id)) to find the trust created by the create-cloud-admin-trust action. Leave empty (default) to auto-populate from the identity-service relation's admin-user-id field, which keystone-k8s already publishes — no manual lookup needed in the normal case. Set explicitly only if the cloud-admin identity differs from the relation's own admin user (e.g. openstack user show <user> -f value -c id).
-
cloud-unique-id | string
Keystone UUID of the WLM service user. Uniquely identifies this WLM deployment to other TrilioVault components. Populate after deployment: openstack user show <wlm-service-username> -f value -c id
-
debug | boolean
Enable debug logging for all WLM services
-
glance-endpoint | string
Default: http://glance.openstack.svc.cluster.local:9292
Glance internal endpoint URL for WLM to call
-
neutron-endpoint | string
Default: http://neutron.openstack.svc.cluster.local:9696
Neutron internal endpoint URL for WLM to call
-
nova-endpoint | string
Default: http://nova.openstack.svc.cluster.local:8774/v2.1
Nova internal endpoint URL for WLM to call
-
rabbit-quorum-queue | boolean
Default: True
Must match nova.conf's rabbit_quorum_queue on the compute nodes — contego shares RPC queue names with dm-api/DMS, and declaring the same queue with a different durability flag on each side gets a 406 PRECONDITION_FAILED from RabbitMQ. Sunbeam/Caracal defaults to true; override only if your deployment's nova.conf sets this to false.
-
region | string
Default: RegionOne
OpenStack region name
-
trustee-role | string
Default: member, creator, admin
Keystone role(s) that WLM delegates via trusts during backup and restore. Comma-separated. Must match the role(s) assigned to tenant users in Keystone. "admin" is required on Caracal (2024.1) and later — Nova's Secure RBAC policy restricts the OS-EXT-SRV-ATTR:host field (dm-api needs it to route contego RPCs to the right compute host) to the admin role; without it, contego calls fail with a KeyError on that field.
-
workloads-workers | int
Default: 2
Number of wlm-workloads worker processes