<div dir="ltr"><br><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">External dependencies are fine, obviously. The difference is whether we<br>
actually have code to interface with those external dependencies. We<br>
have code to talk to databases and message queues. There's no code<br>
right now to interface with anything for key management.<br></blockquote><div><br></div><div>Ok, this makes sense. I generally assume that people deploying OpenStack have some integration work to do anyway. So, for me, writing a few python methods isn't much different than writing a configuration file. Having said this, I do understand where you are coming from here.</div>
<div><br></div><div>I do believe that a static key configuration is a useful starting place for a lot of users. I spoke with Joel this morning and I think he is going to try to put together an example key management driver that does this today. Such a solution would allow deployers to use their existing orchestration tools to write a key to a configuration file.</div>
<div><br></div><div>Cheers,</div><div>-bryan</div></div></div></div>