diff options
| author | Shaun Smekel <shaun.smekel@theorem.net.au> | 2016-08-05 07:44:42 +1000 |
|---|---|---|
| committer | Shaun Smekel <shaun.smekel@theorem.net.au> | 2016-08-25 20:13:02 +1000 |
| commit | 524868c632b23385145d140e5e6abab82cda50cf (patch) | |
| tree | 0e9b67ec49047c8a849c261a629942b9a7a6a60c /dev | |
| parent | 1e222274e155d6db11c80aee4c48d9e5f3713e22 (diff) | |
| download | kolla-524868c632b23385145d140e5e6abab82cda50cf.tar.gz kolla-524868c632b23385145d140e5e6abab82cda50cf.zip | |
Add dockerfiles for keystone fernet
This adds the docker aspects of fernet key bootstrapping as well as
distributed key rotation.
- Bootstrapping is handled in the same way as keystone bootstrap.
- A new keystone-fernet and keystone-ssh container is created to allow
the nodes to communicate with each other (taken from nova-ssh).
- The keystone-fernet is a keystone container with crontab installed.
This will handle key rotations through keystone-manage and trigger
an rsync to push new tokens to other nodes.
The Ansible component is implemented in:
https://review.openstack.org/#/c/349366
Change-Id: Id610e00e8c63c7f1bc0974c0aa1b3f44c18e1019
Partially-Implements: blueprint keystone-fernet-token
Partially-Implements: blueprint third-party-plugin-support
Diffstat (limited to 'dev')
0 files changed, 0 insertions, 0 deletions