Open Stack

Hello All!

With encryption support coming in OpenStack for volumes, objects, it is logical to collect and maintain
user preferences (at the domain, project and/or individual user).

Please weigh in on:

1)      Collecting user encryption preference at domain/tenant/user time.

2)      Keystone may be the logical place to save it, part of the domain/tenant/user profile data

3)      Enrich keystone client to extract such preferences (starting from user, then travel up to tenant, and up to domain to see if any preference provided, else return a configured system wide default)

4)      The Horizon UI for the security panel would be a logical place to display/collect such data.

5)      The available options would be those extracted from DM_crypt/open-ssl depending on volume/object encryption.

Regards
Malini
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20130523/e1653ddc/attachment.html>