[openstack-dev] [Nova] FFE Request: Encrypt Cinder volumes
Russell Bryant
rbryant at redhat.com
Mon Sep 9 14:25:09 UTC 2013
On 09/09/2013 04:57 AM, Thierry Carrez wrote:
> Russell Bryant wrote:
>> I would be good with the exception for this, assuming that:
>>
>> 1) Those from nova-core that have reviewed the code are still happy with
>> it and would do a final review to get it merged.
>>
>> 2) There is general consensus that the simple config based key manager
>> (single key) does provide some amount of useful security. I believe it
>> does, just want to make sure we're in agreement on it. Obviously we
>> want to improve this in the future.
>
> +1
>
> I think this is sufficiently self-contained that the regression risk is
> extremely limited. It's also nice to have a significant hardening
> improvement in the Havana featurelist. I would just prefer if it landed
> ASAP since I would like as much usage around it as we can get, to make
> sure the previous audits didn't miss an obvious bug/security hole in it.
>
The response seems positive from everyone so far. I think we should
approve this and try to get it merged ASAP (absolutely this week, and
hopefully in the first half of the week).
ACK on the FFE from me.
--
Russell Bryant
More information about the OpenStack-dev
mailing list