[openstack-dev] [TripleO][Tuskar] Dealing with passwords in Tuskar-API

Tomas Sedovic tsedovic at redhat.com
Thu Feb 20 15:15:10 UTC 2014


On 20/02/14 16:02, Radomir Dopieralski wrote:
> On 20/02/14 15:57, Tomas Sedovic wrote:
>> On 20/02/14 15:41, Radomir Dopieralski wrote:
>>> On 20/02/14 15:00, Tomas Sedovic wrote:
>>>
>>>> Are we even sure we need to store the passwords in the first place? All
>>>> this encryption talk seems very premature to me.
>>>
>>> How are you going to redeploy without them?
>>>
>>
>> What do you mean by redeploy?
>>
>> 1. Deploy a brand new overcloud, overwriting the old one
>> 2. Updating the services in the existing overcloud (i.e. image updates)
>> 3. Adding new machines to the existing overcloud
>> 4. Autoscaling
>> 5. Something else
>> 6. All of the above
> 
> I mean clicking "scale" in tuskar-ui.
> 

Right. So either Heat's able to handle this on its own or we fix it to
be able to do that or we ask for the necessary parameters again.

I really dislike having to do crypto in tuskar.



More information about the OpenStack-dev mailing list