Comment 24 for bug 1242597

Revision history for this message
Morgan Fainberg (mdrnstm) wrote : Re: ec2tokens API doesn't handle trust-scoped tokens correctly

For Grizzly, there is no good way to correlate (as far as I can tell) the Trust to the EC2 Credential. EC2 Credential was refactored in Havana to have a lot more information available to it (generic credentials backend that is not limited to the very limited EC2 data set).

The easiest solution is to either
1: Disable EC2 credentials for trust scoped tokens
2: State that it is recommended that trusts and EC2 contrib not be enabled at the same time.

I am not sure what the alternatives for getting more data into the EC2 credential would be in the Grizzly code base. It might be possible to add a migration to grizzly that encompasses the new data and the first migration of Havana for the DB. I think that a new migration is a sub-optimal choice.