diff options
| author | Shaun Smekel <shaun.smekel@theorem.net.au> | 2016-08-05 07:44:42 +1000 |
|---|---|---|
| committer | Shaun Smekel <shaun.smekel@theorem.net.au> | 2016-08-25 20:13:02 +1000 |
| commit | 524868c632b23385145d140e5e6abab82cda50cf (patch) | |
| tree | 0e9b67ec49047c8a849c261a629942b9a7a6a60c /kolla | |
| parent | 1e222274e155d6db11c80aee4c48d9e5f3713e22 (diff) | |
| download | kolla-524868c632b23385145d140e5e6abab82cda50cf.tar.gz kolla-524868c632b23385145d140e5e6abab82cda50cf.zip | |
Add dockerfiles for keystone fernet
This adds the docker aspects of fernet key bootstrapping as well as
distributed key rotation.
- Bootstrapping is handled in the same way as keystone bootstrap.
- A new keystone-fernet and keystone-ssh container is created to allow
the nodes to communicate with each other (taken from nova-ssh).
- The keystone-fernet is a keystone container with crontab installed.
This will handle key rotations through keystone-manage and trigger
an rsync to push new tokens to other nodes.
The Ansible component is implemented in:
https://review.openstack.org/#/c/349366
Change-Id: Id610e00e8c63c7f1bc0974c0aa1b3f44c18e1019
Partially-Implements: blueprint keystone-fernet-token
Partially-Implements: blueprint third-party-plugin-support
Diffstat (limited to 'kolla')
| -rw-r--r-- | kolla/common/config.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/kolla/common/config.py b/kolla/common/config.py index 4be0bebce..687b425cb 100644 --- a/kolla/common/config.py +++ b/kolla/common/config.py @@ -207,7 +207,7 @@ SOURCES = { 'type': 'url', 'location': ('http://tarballs.openstack.org/ironic/' 'ironic-master.tar.gz')}, - 'keystone': { + 'keystone-base': { 'type': 'url', 'location': ('http://tarballs.openstack.org/keystone/' 'keystone-master.tar.gz')}, |
