Nova's Glance client does not support SSL connections

[Chris Hoge]

Nova's Glance client, defined in nova.image.glance, does not support SSL connections to glance. Nova will attempt to connect through http and fail.

The workaround is to add a new option to _create_glance_client that takes a use_ssl=False parameter to pass along to the GlanceClient constructor. The pick_glance_api_server method should return an additional argument, scheme (http or https), that can be used to set the use_ssl argument to _create_glance_client.

[Vish Ishaya (vishvananda)]

Sounds like a good plan. Are you going to submit a review through gerrit, or did you want someone else to tackle it?

[Chris Hoge (hoge)]

I'm waiting for my CLA approval to go through our legal department. I should be able to contribute next week, probably around the time the conference comes around. If it gets picked up earlier by someone else I'm fine with that too.

[Roman Yepishev (rye)]

This will need to be configurable in nova.conf,
Current config --glance_api_servers=192.168.100.60:9292 - does not allow to provide the schema (this is a list splitted at commas). I guess adding a https:// or http:// prefix won't hurt with the default set to http in order not to break current installations.