openstack
/
octavia
Code Issues Proposed changes
octavia/devstack
History
Nir Magnezi dc4c0b6249 Encrypt certs and keys 
Octavia creates certificates and keys to manage encrypted
communication channel to amphorae.
When debug is enabled, the python taskflow module will log
all the information we provide to tasks (and sub-flows)
when we create amphorae or handle with anything related to
certificates and keys management (rotations, etc).

There are ways to tell taskflow to exclude specific things
from being logged (e.g., I136081045787c1bbe3ee846d5845a34201c57864).
While this handles some information in specific flows from being
logged, it is susceptive to code changes.

To avoid an everlasting whack-a-mole game, this patch will merely
encrypt sensitive information so we can safely log it and decrypts
it only when we need to use it.

Conflicts:
       octavia/controller/worker/controller_worker.py
       octavia/controller/worker/tasks/database_tasks.py

Change-Id: I06d329ca53bc36bd27f7870ae7c7ca0cf18575b2
(cherry picked from commit ae7c87f54a)
 		2019-03-06 09:46:10 +02:00
..
contrib Change used keystone token provider in devstack 2018-03-25 12:15:48 +03:00
etc/octavia Enable support for multinode in the gate hook 2016-10-17 10:50:31 +02:00
files Switch to ubuntu-minimal for default amphora image 2018-04-16 18:07:31 -07:00
pregenerated Fixes pregenerated certificates validity to 50y 2016-10-14 18:05:12 +02:00
samples Rename q- to neutron- services 2018-03-12 10:48:26 +01:00
upgrade Add grenade support 2018-06-14 09:43:04 +01:00
README.md Update devstack readme.md 2017-08-09 12:22:45 -07:00
plugin.sh Encrypt certs and keys 2019-03-06 09:46:10 +02:00
settings Allow setting load balancer topology in Devstack 2018-07-10 14:05:58 +00:00

README.md

This directory contains the octavia devstack plugin. To configure octavia, in the local section you will need to enable the octavia devstack plugin and enable the octavia service by editing the local section of your local.conf file.

  1. Enable the plugin

To enable the octavia plugin, add a line of the form:

enable_plugin octavia <GITURL> [GITREF]

where

<GITURL> is the URL of an octavia repository
[GITREF] is an optional git ref (branch/ref/tag).  The default is
         master.

For example

enable_plugin octavia https://git.openstack.org/openstack/octavia master
  1. Enable the Octavia services

For example

ENABLED_SERVICES+=octavia,o-api,o-cw,o-hk,o-hm

For more information, see the "Externally Hosted Plugins" section of https://docs.openstack.org/devstack/latest/plugins.html