On 30.4.2014 09:02, Steve Kowalik wrote: > Hi, > > I'm looking at moving init-keystone from tripleo-incubator to > os-cloud-config, and I've drafted a spec at > https://etherpad.openstack.org/p/tripleo-init-keystone-os-cloud-config . > > Feedback welcome. > > Cheers, > Hi Steve, that looks good :) Just to clarify -- should the long-term plan for Keystone PKI initialization still be to generate the key+certs on undercloud and push it to overcloud via Heat? (Likewise for seed->undercloud.) Thanks Jirka