[Ceilometer] cookbook lack of some auth settings attributes

[Chen Xiao]

# A PEM encoded Certificate Authority to use when verifying
# HTTPs connections. Defaults to system CAs. (string value)
#cafile=<None>

# Optionally specify a list of memcached server(s) to use for
# caching. If left undefined, tokens will instead be cached
# in-process. (list value)
# Deprecated group/name - [DEFAULT]/memcache_servers
#memcached_servers=<None>

# (optional) if defined, indicate whether token data should be
# authenticated or authenticated and encrypted. Acceptable
# values are MAC or ENCRYPT. If MAC, token data is
# authenticated (with HMAC) in the cache. If ENCRYPT, token
# data is encrypted and authenticated in the cache. If the
# value is not one of these options or empty, auth_token will
# raise an exception on initialization. (string value)
#memcache_security_strategy=<None>

# (optional, mandatory if memcache_security_strategy is
# defined) this string is used for key derivation. (string
# value)
#memcache_secret_key=<None>

# Hash algorithms to use for hashing PKI tokens. This may be a
# single algorithm or multiple. The algorithms are those
# supported by Python standard hashlib.new(). The hashes will
# be tried in the order given, so put the preferred one first
# for performance. The result of the first hash will be stored
# in the cache. This will typically be set to multiple values
# only while migrating from a less secure algorithm to a more
# secure one. Once all the old tokens are expired this option
# should be set to a single value for better performance.
# (list value)
#hash_algorithms=md5

 [service_credentials]
os_cacert = '/var/cache/ceilometer/api/server.crt'
insecure = false

[Dina Belova (dbelova)]

Actually I wonder what is this bug about.

May you please describe where this config file was grabbed from , for what version of MOS, and may you please add the snapshots to the bug description as well? Also may you please say, what kind of behaviour are you expecting here (if it's ceilo config file), as these security options are usually set to the default (None) in common case - do you want kind of special mode where they will be turned on?

Cheers
Dina

[Dmitry Mescheryakov (dmitrymex)]

The bug is hanging too long in incomplete state without any input from the bug submitter, hence moving it to the invalid state.