[openstack-dev] [TripleO] FFE for novajoin in TripleO's undercloud

Ben Nemec openstack at nemebean.com
Fri Feb 3 17:52:26 UTC 2017



On 02/03/2017 10:21 AM, Juan Antonio Osorio wrote:
>
>
> On Fri, Feb 3, 2017 at 5:31 PM, Ben Nemec <openstack at nemebean.com
> <mailto:openstack at nemebean.com>> wrote:
>
>
>
>     On 02/02/2017 06:27 PM, Juan Antonio Osorio wrote:
>
>         Hello,
>
>         I would like to request an FFE to properly support the novajoin
>         vendordata plugin in TripleO. Most of the work has landed,
>         however, we
>         still need to add it to TripleO's CI in order to have it officially
>         supported.
>
>         This is crucial for TLS-everywhere configuration's usability,
>         since it
>         makes it easier to populate the required field's in the CA
>         (which in our
>         case is FreeIPA). I'm currently working on a patch to add it to the
>         fakeha-caserver OVB job; which, after this is done, I hope to
>         move from
>         the experimental queue, to the periodic one.
>
>
>     I thought we had bumped TLS everywhere to next release.  Is there
>     still a use case for novajoin in Ocata?
>
>
> Well, one can deploy most base services with TLS in the internal network
> already. So one can actually try it out.

Okay, so to use a downstream-ism it's tech preview in Ocata and will be 
supported in Pike?

To be clear, I don't have any major objection to the FFE, I just want to 
understand the status of this work.



More information about the OpenStack-dev mailing list