[Openstack-operators] Sharing fernet tokens

Matt Fischer matt at mattfischer.com
Wed Feb 8 15:14:26 UTC 2017


I think that you just replied to me directly. But you are asking about
sharing keys.

Since keys do not need to be in-sync on all nodes at the same time you can
use any number of sharing mechanisms. We used puppet + ansible (our normal
deploy process). Key rotation allows them to be out of sync which
simplifies the problem for you.

On Tue, Feb 7, 2017 at 9:25 PM, Matt Fischer <matt at mattfischer.com> wrote:

> Do you mean sharing tokens or keys?
>
> On Feb 7, 2017 11:34 AM, "Ignazio Cassano" <ignaziocassano at gmail.com>
> wrote:
>
>> Hi everybody,
>> Can anyone talk me about Sebring fernet tokens in an openstack with more
>> than one controller?
>> Regards
>> Ignazio
>>
>>
>>
>> _______________________________________________
>> OpenStack-operators mailing list
>> OpenStack-operators at lists.openstack.org
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>>
>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20170208/5795ea51/attachment.html>


More information about the OpenStack-operators mailing list