nova/releasenotes/notes/deprecate_os_cert-f0aa07bab1a229aa.yaml
Sean Dague 789edad0e8 Deprecate os-certificates
Coming out of the Nova midcycle we decided we really needed to
deprecate the os-certificates API and service. It is not used by any
of the rest of Nova. It's an API that requires a dedicated daemon to
be run. It's making Nova assume the responsibility for generating
secure certificates, even though it's not really managing entropy in
any sane way (which is why nova-cert is a service, so you could stick
these on all your computes so as to not run out of entropy).

Change-Id: I0ffa9200d8b4f52da4751e731aecffe09fd3d4be
2016-07-26 10:42:41 -04:00

10 lines
404 B
YAML

---
deprecations:
- The ``/os-certificates`` API is deprecated, as well as the
``nova-cert`` service which powers it. This is a vestigial part of
the Nova API that existed only for EC2 support, which is now
maintained out of tree. It does not interact with any of the rest
of nova, and should not just be used as a certificates as a
service, which is all it is currently good for.