Comment 5 for bug 1917797

Revision history for this message
Adam Harwell (adam-harwell) wrote :

When I say "I think this is the only gap", I don't just mean in Cinder... I mean in the entirety of the core OpenStack ecosystem. With this patch and the patch from the client bug mentioned above, we have tested end-to-end mTLS across all services successfully. mTLS was done as part of the keystonesession work several cycles ago, so this isn't anything new we're implementing, just passing a few config vars through to enable it correctly. :)