Open Stack

On 01/04/2016 11:03 AM, Eric Harney wrote:
> On 01/04/2016 10:46 AM, Farr, Kaitlin M. wrote:
>>> The fixed key manager is useful for easy testing (we're using it in the
>>> gate in places where barbican isn't available). Is there anything
>>> equivalent with Catellan?
>>>
>>>         -Sean
>>>
>>> --
>>> Sean Dague
>>> http://dague.net
>>
>> There is no fixed-key back end with Castellan. I agree that using a
>> fixed key makes for very easy testing, but the tests use a
>> configuration (ConfKeyManager) that should not be used in deployment.
>> The tests could be made much more useful if they used a more realistic
>> configuration (Barbican).
>>
>> Adding a gate that tests using DevStack with Barbican enabled would
>> be a more valuable than the existing tests for two reasons:
>>
>>  1. ConfKeyManager could be removed.
>>  2. It would test the feature configured more closely to how a
>>     deployment would actually look.
>>
>> As part of this change to deprecate ConfKeyManager and integrate
>> Castellan, I would like to add this new gate.
>>
>>  -Kaitlin
>>
> 
> Aiming toward tests that mirror real-world deployment is certainly a
> good thing, but I don't think we should remove ConfKeyManager.
> 
> We will want to maintain the ability to test these Cinder/Nova code
> paths in development environments or in some automated environments
> without requiring additional services to be configured.
> 
> We can address this by having ConfKeyManager emit warning messages
> indicating that it isn't for production environments.

Right, effectively the fixed key manager was a Testing Fixture for us.
That's really important because it reduces the number of moving parts
when testing this stuff as a full stack.

	-Sean

-- 
Sean Dague
http://dague.net