TrilioVault WorkloadManager (Kubernetes)

Shyam Biradar Publisher

Platform:

Channel Revision Published Runs on
latest/candidate 10 25 Jul 2026
Ubuntu 22.04
6.2/stable 24 02 Sep 2026
Ubuntu 22.04
6.2/candidate 24 02 Sep 2026
Ubuntu 22.04
juju deploy trilio-wlm-k8s --channel candidate

Learn about configurations >

  • amqp-durable-queues | boolean

    Default: True

    Standard oslo.messaging amqp_durable_queues setting. Must match nova.conf's convention on the compute nodes for the same reason as rabbit-quorum-queue.

  • api-workers | int

    Default: 2

    Number of wlm-api worker processes

  • cinder-endpoint | string

    Default: http://cinder.openstack.svc.cluster.local:8776/v3/%(tenant_id)s

    Cinder internal endpoint URL for WLM to call

  • cloud-admin-domain | string

    Default: admin_domain

    Keystone domain name (or ID) of the cloud administrator. Sunbeam default is "admin_domain".

  • cloud-admin-project-id | string

    Keystone UUID of the cloud admin project — same purpose and same auto-population behavior as cloud-admin-user-id above (sourced from the identity-service relation's admin-project-id field when left empty). Set explicitly only if it differs from the relation's own admin project (e.g. openstack project show <project> -f value -c id).

  • cloud-admin-role | string

    Default: admin

    Keystone role name of the cloud administrator.

  • cloud-admin-user-id | string

    Keystone UUID of the cloud admin user, needed for workloadmgr's own cloud-admin trust lookup (workloadmgr/compute/nova.py's _get_trusts('cloud_admin', CONF.cloud_admin_project_id)) to find the trust created by the create-cloud-admin-trust action. Leave empty (default) to auto-populate from the identity-service relation's admin-user-id field, which keystone-k8s already publishes — no manual lookup needed in the normal case. Set explicitly only if the cloud-admin identity differs from the relation's own admin user (e.g. openstack user show <user> -f value -c id).

  • cloud-unique-id | string

    Keystone UUID of the WLM service user. Uniquely identifies this WLM deployment to other TrilioVault components. Populate after deployment: openstack user show <wlm-service-username> -f value -c id

  • debug | boolean

    Enable debug logging for all WLM services

  • glance-endpoint | string

    Default: http://glance.openstack.svc.cluster.local:9292

    Glance internal endpoint URL for WLM to call

  • neutron-endpoint | string

    Default: http://neutron.openstack.svc.cluster.local:9696

    Neutron internal endpoint URL for WLM to call

  • nova-endpoint | string

    Default: http://nova.openstack.svc.cluster.local:8774/v2.1

    Nova internal endpoint URL for WLM to call

  • rabbit-quorum-queue | boolean

    Default: True

    Must match nova.conf's rabbit_quorum_queue on the compute nodes — contego shares RPC queue names with dm-api/DMS, and declaring the same queue with a different durability flag on each side gets a 406 PRECONDITION_FAILED from RabbitMQ. Sunbeam/Caracal defaults to true; override only if your deployment's nova.conf sets this to false.

  • region | string

    Default: RegionOne

    OpenStack region name

  • trustee-role | string

    Default: member, creator, admin

    Keystone role(s) that WLM delegates via trusts during backup and restore. Comma-separated. Must match the role(s) assigned to tenant users in Keystone. "admin" is required on Caracal (2024.1) and later — Nova's Secure RBAC policy restricts the OS-EXT-SRV-ATTR:host field (dm-api needs it to route contego RPCs to the right compute host) to the admin role; without it, contego calls fail with a KeyError on that field.

  • workloads-workers | int

    Default: 2

    Number of wlm-workloads worker processes