openstack-ansible/releasenotes/notes/certificate_generation-a9cdcc8e3b1e186f.yaml
Jean-Philippe Evrard 38b333ba30 Freeze roles for Milestone 2 release
Change-Id: Ia5a65510c58972c07a74c74eec3ab52aa82eedec
2018-06-07 09:30:22 +02:00

15 lines
486 B
YAML

---
features:
- |
Octavia requires SSL certificates for communication with the amphora. This
adds the automatic creation of self signed certificates for this purpose.
It uses different certificate authorities for amphora and control plane
thus insuring maximum security.
security:
- |
It is recommended that the certificate generation is always reviewed by
security professionals since algorithms and key-lengths considered secure
change all the time.