2 Commits

Author SHA1 Message Date
Anush Krishnamurthy
5afc8e5745 Deprecate cert option
Mark cert_topic option for deprecation in future [1] & [2].

[1] Removal of nova-cert service as indicated by commit:789edad0e811d866551bec18dc7729541105f59d
    https://review.openstack.org/#q,789edad0e811d866551bec18dc7729541105f59d,n,z

[2] https://wiki.openstack.org/wiki/ConfigOptionsConsistency

Implements: Blueprint "centralize-config-options-newton"

Change-Id: Id7a1fc943cbe6d860a50d3cc776717b55351004b
2016-08-03 20:37:22 +00:00
Sean Dague
789edad0e8 Deprecate os-certificates
Coming out of the Nova midcycle we decided we really needed to
deprecate the os-certificates API and service. It is not used by any
of the rest of Nova. It's an API that requires a dedicated daemon to
be run. It's making Nova assume the responsibility for generating
secure certificates, even though it's not really managing entropy in
any sane way (which is why nova-cert is a service, so you could stick
these on all your computes so as to not run out of entropy).

Change-Id: I0ffa9200d8b4f52da4751e731aecffe09fd3d4be
2016-07-26 10:42:41 -04:00