cinder/releasenotes/notes/deprecate-rbd_keyring_conf-432efbcd47e52c8a.yaml
Brian Rosmaita b3c68b777a Deprecate rbd_keyring_conf option
This option presents a security risk; see OSSN-0085.

Change-Id: I345a3b4bf3b328b0e547016f481518d252f734b9
Partial-bug: #1849624
2019-11-01 11:12:29 -04:00

19 lines
807 B
YAML

---
security:
- |
Due to `OSSN-0085
<https://wiki.openstack.org/wiki/OSSN/OSSN-0085>`_:
Cinder configuration option can leak secret key from Ceph backend,
deployers using the ``rbd_keyring_conf`` option are advised to stop
using it immediately. The option has been deprecated for removal
early in the 'V' development cycle.
deprecations:
- |
The configuration option ``rbd_keyring_conf`` for the Ceph cinder
driver presents a security risk and the option is hereby deprecated
and scheduled to be removed early in the 'V' development cycle,
following the standard OpenStack deprecation policy. For more
information, see `OSSN-0085
<https://wiki.openstack.org/wiki/OSSN/OSSN-0085>`_:
Cinder configuration option can leak secret key from Ceph backend.