listener

addr

scopable	False
required	False
default
scope order	specific > generic

The ip addr the daemon raw listener must listen on. The empty value used as default means: all ip4 and ip6.

crl

scopable	False
required	False
default	/root/docs/opensvc/var/certs/ca_crl
scope order	specific > generic

The url serving the certificate revocation list. The default points to the path of the cluster ca crl in {var}/certs/ca_crl.

dns_sock_gid

scopable	False
required	False
default	953
scope order	specific > generic

The gid owning the unix socket serving the remote backend to the pdns authoritative server.

dns_sock_uid

scopable	False
required	False
default	953
scope order	specific > generic

The uid owning the unix socket serving the remote backend to the pdns authoritative server.

openid_well_known

scopable	False
required	False
default	None
scope order	specific > generic

The url serving the well-known configuration of an openid provider. If set, the h2 listener will try to validate the Bearer token provided in the requests. If valid the user name is fetched from the ‘preferred_username’ claim (fallback on ‘name’), and the user grants are fetched from the ‘grant’ claim. Grant can be a list, in which case a proper grant value is formatted via concatenation of the list elements.

port

scopable	False
required	False
default	1214
scope order	specific > generic
convert	integer

The port the daemon raw listener must listen on. In pull action mode, the collector sends a tcp packet to the server to notify there are actions to unqueue. The opensvc daemon executes the dequeue actions node action upon receive. The listener.port parameter is sent to the collector upon pushasset. The collector uses this port to notify the node.

tls_addr

scopable	False
required	False
default
scope order	specific > generic

The ip addr the daemon tls listener must listen on. The empty value used as default means: all ip4 and ip6.

tls_port

scopable	False
required	False
default	1215
scope order	specific > generic
convert	integer

The port the daemon tls listener must listen on.

ui

scopable	False
required	False
default	True
scope order	specific > generic
convert	boolean

Serve the ui webapp to browsers getting the api / path.