[openstack-dev] [tc][keystone][tacker]

yanxingan at cmss.chinamobile.com yanxingan at cmss.chinamobile.com
Sun Mar 12 14:33:24 UTC 2017


Hi, folks:

    Currently tacker server node stores fernet keys for vim password decryption on local root file system. 
If Tacker service serves API requests through a load balancer, then the operation will fail if the request 
is not fulfilled by the server node which created and stored the fernet key.
    So we need a possible solution for syncing the keys across multiple server nodes. Currently we are 
thinking about storing the fernet keys via ceph or swift. 
  Do you have any suggestions on this approach, or does other project has already dealt with this problem?

Thanks.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20170312/a9ae7b4c/attachment.html>


More information about the OpenStack-dev mailing list