<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Happy Monday OpenStack community, </div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I hope everyone is doing well and staying safe.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Coming back to the questions that Alex raised previous week. </div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Did you have a chance to review our request? </div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thank you,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Yuliia Romanova<br>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Alexander Yeremko <a.yeremko@connectria.com><br>
<b>Sent:</b> Tuesday, March 22, 2022 1:11 PM<br>
<b>To:</b> openstack-discuss@lists.openstack.org <openstack-discuss@lists.openstack.org><br>
<b>Cc:</b> Tina Wisbiski <t.wisbiski@connectria.com>; Kelsi Parenteau <k.parenteau@connectria.com>; Yuliia Romanova <y.romanova@connectria.com><br>
<b>Subject:</b> question on plain text config parameters encryption feature</font>
<div> </div>
</div>
<style type="text/css" style="display:none">
<!--
p
{margin-top:0;
margin-bottom:0}
-->
</style>
<div dir="ltr">
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Dear OpenStack community,
<div><br>
</div>
<div>we are developing plain text config secrets encryption feature according to the next specification:</div>
<div><br>
</div>
<div>https://specs.openstack.org/openstack/openstack-ansible-specs/specs/xena/protecting-plaintext-configs.html</div>
<div><br>
</div>
<div>We started from Glance OS service and submitted two patchsets already:</div>
<div><br>
</div>
<div>https://review.opendev.org/c/openstack/openstack-ansible-os_glance/+/814865</div>
<div><br>
</div>
<div>Now we have two questions that we need to clarify to proceed our work on that feature and finish our development:</div>
<div><br>
</div>
<div>1. Is it correct that we need to develop more patchsets to rework some logic of encryption mechanism according</div>
<div>to comment to 'files/encypt_secrets.py' script that arised at the second patchset (PatchSet 2) dated Nov/30/2021 ?</div>
<div>Comment is by Dmitry Rabotyagov: "We _really_ should make it as an ansible plugin and re-work logic"</div>
<div><br>
</div>
<div>2. We wish to have such feature in previous releases also, not just in upcoming Yoga or Zed.
</div>
<div>Stein, Train and Victoria - it would be excellent to have plain text secrets encryption with these releases also.</div>
<div>So question is how is it possible to use our feature in those releases also? Can we push some backports to those releases openstack-ansible repo?</div>
<div><br>
</div>
<div>Best regards and wishes,</div>
Alex Yeremko<br>
</div>
</div>
This E-Mail (including any attachments) may contain privileged or confidential information. It is intended only for the addressee(s) indicated above. The sender does not waive any of its rights, privileges or other protections respecting this information. Any
distribution, copying or other use of this E-Mail or the information it contains, by other than an intended recipient, is not sanctioned and is prohibited. If you received this E-Mail in error, please delete it and advise the sender (by return E-Mail or otherwise)
immediately. Any calls held by you with Connectria may be recorded by an automated note taking system to ensure prompt follow up and for information collection purposes, and your attendance on any calls with Connectria confirms your consent to this. Any E-mail
received by or sent from Connectria is subject to review by Connectria supervisory personnel.
</body>
</html>