OS Manuals

/usr/bin/discover-tempest-config

OpenStack integration test runner — 2026.1 Gazpacho (with keystone/neutron/glance/cinder plugins)

From openstack-tempest-2026.1 46.2.0-r19 (enterprise-packages), captured 2026-11-09 by running discover-tempest-config --help (exit 0). permalink

2026-11-09 15:08:12.129 2 INFO tempest [-] Using tempest config file /etc/tempest/tempest.conf
2026-11-09 15:08:12.171 2 INFO tempest.test_discover.plugins [-] Register additional config options from Tempest plugin: neutron_tests
2026-11-09 15:08:12.172 2 INFO tempest.test_discover.plugins [-] Register additional config options from Tempest plugin: keystone_tests
2026-11-09 15:08:12.172 2 INFO tempest.test_discover.plugins [-] Register additional config options from Tempest plugin: glance_tests
2026-11-09 15:08:12.172 2 INFO tempest.test_discover.plugins [-] Register additional config options from Tempest plugin: cinder_tests
2026-11-09 15:08:12.172 2 INFO tempest.test_discover.plugins [-] List additional config options registered by Tempest plugin: neutron_tests
2026-11-09 15:08:12.172 2 INFO tempest.test_discover.plugins [-] List additional config options registered by Tempest plugin: keystone_tests
2026-11-09 15:08:12.172 2 INFO tempest.test_discover.plugins [-] List additional config options registered by Tempest plugin: glance_tests
2026-11-09 15:08:12.173 2 INFO tempest.test_discover.plugins [-] List additional config options registered by Tempest plugin: cinder_tests
usage:
This script will generate the etc/tempest.conf file by applying a series of
specified options in the following order:

1. Default values provided by the tool.

2. Values using the file provided by the --deployer-input argument to the
script.
Some required options differ among deployed clouds but the right values cannot
be discovered by the user. The file used here could be created by an installer,
or manually if necessary.

3. Values provided in client's cloud config file or as an environment
variables, see documentation of openstacksdk
https://docs.openstack.org/openstacksdk/latest/

4. Values provided on the command line. These override all other values.

5. Discovery. Values that have not been provided in steps [2-4] will be
obtained by querying the cloud.

       [-h] [--os-cloud <name>] [--os-auth-type <name>] [--os-auth-url OS_AUTH_URL]
       [--os-system-scope OS_SYSTEM_SCOPE] [--os-domain-id OS_DOMAIN_ID]
       [--os-domain-name OS_DOMAIN_NAME] [--os-project-id OS_PROJECT_ID]
       [--os-project-name OS_PROJECT_NAME] [--os-project-domain-id OS_PROJECT_DOMAIN_ID]
       [--os-project-domain-name OS_PROJECT_DOMAIN_NAME] [--os-trust-id OS_TRUST_ID]
       [--os-default-domain-id OS_DEFAULT_DOMAIN_ID]
       [--os-default-domain-name OS_DEFAULT_DOMAIN_NAME] [--os-user-id OS_USER_ID]
       [--os-username OS_USERNAME] [--os-user-domain-id OS_USER_DOMAIN_ID]
       [--os-user-domain-name OS_USER_DOMAIN_NAME] [--os-password OS_PASSWORD] [--insecure]
       [--os-cacert <ca-certificate>] [--os-cert <certificate>] [--os-key <key>]
       [--timeout <seconds>] [--collect-timing] [--os-service-type <name>]
       [--os-service-name <name>] [--os-interface <name>] [--os-region-name <name>]
       [--os-endpoint-override <name>] [--os-api-version <name>] [--create] [--out OUT]
       [--deployer-input DEPLOYER_INPUT] [--no-default-deployer] [--password-regex PASSWORD_REGEX]
       [--password-length PASSWORD_LENGTH] [--debug] [--verbose] [--no-rng] [--non-admin]
       [--test-accounts PATH] [--create-accounts-file PATH] [--profile PATH]
       [--generate-profile PATH] [--image-disk-format IMAGE_DISK_FORMAT] [--image IMAGE]
       [--retry-image] [--flavor-min-mem FLAVOR_MIN_MEM] [--flavor-min-disk FLAVOR_MIN_DISK]
       [--convert-to-raw] [--network-id NETWORK_ID] [--network NETWORK]
       [--append SECTION.KEY=VALUE[,VALUE]] [--remove SECTION.KEY=VALUE[,VALUE]]
       [overrides ...]

positional arguments:
  overrides             Override options Key value pairs used to hardcode values in
                        `tempest.conf`. The key is a section.key where section is a section header
                        in the conf file. For example: $ discover-tempest-config \
                        identity.username myname \ identity.password mypass

options:
  -h, --help            show this help message and exit
  --os-cloud <name>     Named cloud to connect to
  --os-auth-type, --os-auth-plugin <name>
                        Authentication type to use
  --create              Create Tempest resources Make *python-tempestconf* to create Tempest
                        resources such as flavors needed for running Tempest tests.
  --out OUT             Output file A name of the file where the discovered Tempest configuration
                        will be written to.
  --deployer-input DEPLOYER_INPUT
                        Path to deployer file A file in the format of tempest.conf that will
                        override the default values. It is usually created by an installer and
                        contains environment specific options. The deployer-input file is an
                        alternative to providing key/value pairs. If there are also key/value
                        pairs they will be applied after the deployer-input file. If the option is
                        **not defined** and **--no-default-deployer** is **not used**, python-
                        tempestconf **will try** to look for the file in `$HOME/tempest-deployer-
                        input.conf` location.
  --no-default-deployer
                        Do not check for the default deployer input in `$HOME/tempest-deployer-
                        input.conf`
  --password-regex PASSWORD_REGEX
                        Define the password regex required to generate a password that meets these
                        conditions. NOTE: In regular expression use double curly brackets
                        `{{`instead of single curly bracket `{` to make the command pass.
  --password-length PASSWORD_LENGTH
                        Specify the password length in combination with the --password-regex
                        option to generate a password that meets these conditions.
  --debug               Print debugging information.
  --verbose, -v         Print more information about the execution.
  --no-rng              Create new flavors and upload images without random number generator
                        device.
  --non-admin           Simulate non-admin credentials. When True, the credentials are used as
                        non-admin ones. No resources are created.
  --test-accounts PATH  Tempest accounts.yaml file Defines a path to a Tempest accounts.yaml file.
                        For example: --test-accounts $HOME/tempest/accounts.yaml
  --create-accounts-file PATH
                        Generate Tempest accounts file Minimal accounts file will be created in
                        the specified path. For example: --create-accounts-file
                        $HOME/accounts.yaml
  --profile PATH        python-tempestconf's profile.yaml file A file which contains definition of
                        python-tempestconf's arguments. NOTE: If this argument is used, other
                        arguments cannot be defined!
  --generate-profile PATH
                        Generate a sample profile.yaml file. A sample profile.yaml will be
                        generated in the specified path. After that python-tempestconf ends. For
                        example: --generate-profile $HOME/profile.yaml
  --image-disk-format IMAGE_DISK_FORMAT
                        A format of an image to be uploaded to glance. Default is 'qcow2'
  --image IMAGE         An image name/path/url to be uploaded to glance if it's not already there.
                        The name of the image is the leaf name of the path. Default is
                        'https://download.cirros-cloud.net/0.6.2/cirros-0.6.2-x86_64-disk.img'
  --retry-image         Allow tempestconf to retry download an image, in case of failure, from
                        these urls: '['https://download.cirros-
                        cloud.net/0.6.2/cirros-0.6.2-x86_64-disk.img',
                        'http://images.rdoproject.org/cirros/cirros-0.6.2-x86_64-disk.img']'
  --flavor-min-mem FLAVOR_MIN_MEM
                        Specify minimum memory for new flavours, default is '128'.
  --flavor-min-disk FLAVOR_MIN_DISK
                        Specify minimum disk size for new flavours, default is '1'.
  --convert-to-raw      Convert images to raw format before uploading to glance.
  --network-id NETWORK_ID
                        Specify which network with external connectivity should be used by the
                        tests.
  --network NETWORK     Specify which network (id/name) with external connectivity should be used
                        by the tests.
  --append SECTION.KEY=VALUE[,VALUE]
                        Append values to tempest.conf Key value pair to be appended to the
                        configuration file. NOTE: Multiple values are supposed to be divided by a
                        COLON only, WITHOUT spaces. For example: $ discover-tempest-config \
                        --append features.ext=tag[,tag-ext] \ --append section.ext=ext[,another-
                        ext]
  --remove SECTION.KEY=VALUE[,VALUE]
                        Remove values from tempest.conf Key value pair to be removed from the
                        configuration file. NOTE: Multiple values are supposed to be divided by a
                        COLON only, WITHOUT spaces. For example: $ discover-tempest-config \
                        --remove identity.username=myname \ --remove feature-
                        enabled.api_ext=http[,https]

Authentication Options:
  Options specific to the password plugin.

  --os-auth-url OS_AUTH_URL
                        Authentication URL
  --os-system-scope OS_SYSTEM_SCOPE
                        Scope for system operations
  --os-domain-id OS_DOMAIN_ID
                        Domain ID to scope to
  --os-domain-name OS_DOMAIN_NAME
                        Domain name to scope to
  --os-project-id, --os-tenant-id OS_PROJECT_ID
                        Project ID to scope to
  --os-project-name, --os-tenant-name OS_PROJECT_NAME
                        Project name to scope to
  --os-project-domain-id OS_PROJECT_DOMAIN_ID
                        Domain ID containing project
  --os-project-domain-name OS_PROJECT_DOMAIN_NAME
                        Domain name containing project
  --os-trust-id OS_TRUST_ID
                        ID of the trust to use as a trustee use
  --os-default-domain-id OS_DEFAULT_DOMAIN_ID
                        Optional domain ID to use with v3 and v2 parameters. It will be used for
                        both the user and project domain in v3 and ignored in v2 authentication.
  --os-default-domain-name OS_DEFAULT_DOMAIN_NAME
                        Optional domain name to use with v3 API and v2 parameters. It will be used
                        for both the user and project domain in v3 and ignored in v2
                        authentication.
  --os-user-id OS_USER_ID
                        User id
  --os-username, --os-user-name OS_USERNAME
                        Username
  --os-user-domain-id OS_USER_DOMAIN_ID
                        User's domain id
  --os-user-domain-name OS_USER_DOMAIN_NAME
                        User's domain name
  --os-password OS_PASSWORD
                        User's password

API Connection Options:
  Options controlling the HTTP API Connections

  --insecure            Explicitly allow client to perform "insecure" TLS (https) requests. The
                        server's certificate will not be verified against any certificate
                        authorities. This option should be used with caution.
  --os-cacert <ca-certificate>
                        Specify a CA bundle file to use in verifying a TLS (https) server
                        certificate. Defaults to env[OS_CACERT].
  --os-cert <certificate>
                        The location for the keystore (PEM formatted) containing the public key of
                        this client. Defaults to env[OS_CERT].
  --os-key <key>        The location for the keystore (PEM formatted) containing the private key
                        of this client. Defaults to env[OS_KEY].
  --timeout <seconds>   Set request timeout (in seconds).
  --collect-timing      Collect per-API call timing information.

Service Options:
  Options controlling the specialization of the API Connection from information found in the
  catalog

  --os-service-type <name>
                        Service type to request from the catalog
  --os-service-name <name>
                        Service name to request from the catalog
  --os-interface <name>
                        API Interface to use [public, internal, admin]
  --os-region-name <name>
                        Region of the cloud to use
  --os-endpoint-override <name>
                        Endpoint to use instead of the endpoint in the catalog
  --os-api-version <name>
                        Which version of the service API to use
Options (55)
OptionDescriptionSource
-h, --helpshow this help message and exithelp
--os-cloud nameNamed cloud to connect tohelp
--os-auth-type, --os-auth-plugin nameAuthentication type to usehelp
--createCreate Tempest resources Make *python-tempestconf* to create Tempest resources such as flavors needed for running Tempest tests.help
--out OUTOutput file A name of the file where the discovered Tempest configuration will be written to.help
--deployer-input DEPLOYER_INPUTPath to deployer file A file in the format of tempest.conf that will override the default values.help
--no-default-deployerDo not check for the default deployer input in `$HOME/tempest-deployer- input.conf`help
--password-regex PASSWORD_REGEXDefine the password regex required to generate a password that meets these conditions.help
--password-length PASSWORD_LENGTHSpecify the password length in combination with the --password-regex option to generate a password that meets these conditions.help
--debugPrint debugging information.help
--verbose, -vPrint more information about the execution.help
--no-rngCreate new flavors and upload images without random number generator device.help
--non-adminSimulate non-admin credentials.help
--test-accounts PATHTempest accounts.yaml file Defines a path to a Tempest accounts.yaml file.help
--create-accounts-file PATHGenerate Tempest accounts file Minimal accounts file will be created in the specified path.help
--profile PATHpython-tempestconf's profile.yaml file A file which contains definition of python-tempestconf's arguments.help
--generate-profile PATHGenerate a sample profile.yaml file.help
--image-disk-format IMAGE_DISK_FORMATA format of an image to be uploaded to glance.help
--image IMAGEAn image name/path/url to be uploaded to glance if it's not already there.help
--retry-imageAllow tempestconf to retry download an image, in case of failure, from these urls: '['https://download.cirros- cloud.net/0.6.2/cirros-0.6.2-x86_64-disk.img',…help
--flavor-min-mem FLAVOR_MIN_MEMSpecify minimum memory for new flavours, default is '128'.help
--flavor-min-disk FLAVOR_MIN_DISKSpecify minimum disk size for new flavours, default is '1'.help
--convert-to-rawConvert images to raw format before uploading to glance.help
--network-id NETWORK_IDSpecify which network with external connectivity should be used by the tests.help
--network NETWORKSpecify which network (id/name) with external connectivity should be used by the tests.help
--append SECTION.KEY=VALUEAppend values to tempest.conf Key value pair to be appended to the configuration file.help
--remove SECTION.KEY=VALUERemove values from tempest.conf Key value pair to be removed from the configuration file.help
--os-auth-url OS_AUTH_URLAuthentication URLhelp
--os-system-scope OS_SYSTEM_SCOPEScope for system operationshelp
--os-domain-id OS_DOMAIN_IDDomain ID to scope tohelp
--os-domain-name OS_DOMAIN_NAMEDomain name to scope tohelp
--os-project-id, --os-tenant-id OS_PROJECT_IDProject ID to scope tohelp
--os-project-name, --os-tenant-name OS_PROJECT_NAMEProject name to scope tohelp
--os-project-domain-id OS_PROJECT_DOMAIN_IDDomain ID containing projecthelp
--os-project-domain-name OS_PROJECT_DOMAIN_NAMEDomain name containing projecthelp
--os-trust-id OS_TRUST_IDID of the trust to use as a trustee usehelp
--os-default-domain-id OS_DEFAULT_DOMAIN_IDOptional domain ID to use with v3 and v2 parameters.help
--os-default-domain-name OS_DEFAULT_DOMAIN_NAMEOptional domain name to use with v3 API and v2 parameters.help
--os-user-id OS_USER_IDUser idhelp
--os-username, --os-user-name OS_USERNAMEUsernamehelp
--os-user-domain-id OS_USER_DOMAIN_IDUser's domain idhelp
--os-user-domain-name OS_USER_DOMAIN_NAMEUser's domain namehelp
--os-password OS_PASSWORDUser's passwordhelp
--insecureExplicitly allow client to perform "insecure" TLS (https) requests.help
--os-cacert ca-certificateSpecify a CA bundle file to use in verifying a TLS (https) server certificate.help
--os-cert certificateThe location for the keystore (PEM formatted) containing the public key of this client.help
--os-key keyThe location for the keystore (PEM formatted) containing the private key of this client.help
--timeout secondsSet request timeout (in seconds).help
--collect-timingCollect per-API call timing information.help
--os-service-type nameService type to request from the cataloghelp
--os-service-name nameService name to request from the cataloghelp
--os-interface nameAPI Interface to use [public, internal, admin]help
--os-region-name nameRegion of the cloud to usehelp
--os-endpoint-override nameEndpoint to use instead of the endpoint in the cataloghelp
--os-api-version nameWhich version of the service API to usehelp

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.