Load Balancing as a Service (LBaaS) for OpenStack
Go to file
Bharath M f4da51c27d Add CA Cert file config option to validate against SSL endpoints
Currently Octavia cannot validate against SSL service endpoints,
which would be keystone, neutron, nova and glance in this case.

This patch adds a config option under nova, neutron and glance
sections to read the specified CA certificate files
for validation. It's slightly different in the case of glance,
because glance session method invocations depend on the endpoint
URL whether it starts with HTTP or HTTPS.

Also added is the "insecure" option for these services in case
the cert validation needs to be skipped.

For keystone, we read config params from keystone middleware. Thus,
instead of defining a new config option, we can make use of it's
pre-defined "cafile".

Barbican is not added because we do not yet have a barbican endpoint
override in it's config. This could be added in the future as a
separate patch, if needed.

Lastly, unrelated to the above, fixes the amphora REST api default
bind_port in octavia.conf

Change-Id: Id57672a3dc7c962b8ee07db0cb7a743041082c66
Closes-Bug: #1552987
2016-03-09 10:15:44 -08:00
bin Implement UDP heartbeat sender and receiver 2015-09-09 06:48:24 +00:00
client Initial directory skeleton 2014-09-04 15:28:10 -06:00
devstack glance: support relying on tags to extract image id 2016-03-01 20:43:33 +01:00
diskimage-create Reduce devstack build time by properly using pip caches 2016-02-21 16:37:49 -06:00
doc/source Fix health monitor URL in API documentation 2016-02-23 20:13:32 -08:00
elements Fixes Octavia Amphora RHEL based images 2016-02-03 15:51:48 -06:00
etc Add CA Cert file config option to validate against SSL endpoints 2016-03-09 10:15:44 -08:00
octavia Add CA Cert file config option to validate against SSL endpoints 2016-03-09 10:15:44 -08:00
releasenotes glance: support relying on tags to extract image id 2016-03-01 20:43:33 +01:00
specs glance: support relying on tags to extract image id 2016-03-01 20:43:33 +01:00
specs-tests Fix ups so pbr and setup works 2015-04-23 16:04:27 -05:00
tools Initial directory skeleton 2014-09-04 15:28:10 -06:00
.coveragerc Fix a typo in the .coveragerc file 2015-09-29 17:37:35 +00:00
.gitignore Add reno for release notes management 2015-12-04 14:42:32 -06:00
.gitreview Update .gitreview file for project rename 2015-06-12 23:12:30 +00:00
.testr.conf Initial directory skeleton 2014-09-04 15:28:10 -06:00
CONSTITUTION.rst Hacking fixes in CONSTITUTION, ROADMAP, & HACKING 2014-08-16 00:13:00 -05:00
HACKING.rst Use assertIs(Not)None instead of assert(Not)Equal 2015-11-09 20:48:07 +01:00
LICENSE Populate repository with common initial files 2014-07-02 20:30:14 -07:00
MANIFEST.in Populate repository with common initial files 2014-07-02 20:30:14 -07:00
README.rst Update some release related texts 2015-10-01 23:58:03 +00:00
doc-requirements.txt Revert "Add Pillow to docs-requirements.txt" 2015-10-25 22:40:27 +11:00
requirements.txt Updated from global requirements 2016-03-02 04:03:29 +00:00
setup.cfg Delete SSH amphora driver 2016-02-17 13:51:11 -08:00
setup.py Updated from global requirements 2015-09-17 12:15:32 +00:00
test-requirements.txt Updated from global requirements 2016-01-16 03:30:39 +00:00
tox.ini Update flake8 exclude 2016-02-21 01:34:34 +08:00

README.rst

Octavia

Latest Version

Downloads

Operator-grade open source scalable load balancer.

The Octavia project seeks to become the standard operator-grade load balancer in use in large OpenStack deployments. Note that it is not competing with the Neutron LBaaS extension and may never actually replace it. Rather, Octavia should be seen as "yet another vendor" which is accessed via a driver for Neutron LBaaS.

For more information on project direction and guiding principles for contributors, please see the CONSTITUTION.rst file in this directory, or specifications in the specs/ subdirectory. Other documentation can be found in the docs/ directory.

Please also see https://wiki.openstack.org/wiki/Octavia/Roadmap for the latest version of our project roadmap.