[Cinder] cookbook lack of some keystone authtoken attributes

Bug #1370906 reported by Chen Xiao
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack + Chef
Fix Released
Undecided
Chen Xiao

Bug Description

# A PEM encoded Certificate Authority to use when verifying
# HTTPs connections. Defaults to system CAs. (string value)
#cafile=<None>

# Optionally specify a list of memcached server(s) to use for
# caching. If left undefined, tokens will instead be cached
# in-process. (list value)
# Deprecated group/name - [DEFAULT]/memcache_servers
#memcached_servers=<None>

# (optional) if defined, indicate whether token data should be
# authenticated or authenticated and encrypted. Acceptable
# values are MAC or ENCRYPT. If MAC, token data is
# authenticated (with HMAC) in the cache. If ENCRYPT, token
# data is encrypted and authenticated in the cache. If the
# value is not one of these options or empty, auth_token will
# raise an exception on initialization. (string value)
#memcache_security_strategy=<None>

# (optional, mandatory if memcache_security_strategy is
# defined) this string is used for key derivation. (string
# value)
#memcache_secret_key=<None>

# Hash algorithms to use for hashing PKI tokens. This may be a
# single algorithm or multiple. The algorithms are those
# supported by Python standard hashlib.new(). The hashes will
# be tried in the order given, so put the preferred one first
# for performance. The result of the first hash will be stored
# in the cache. This will typically be set to multiple values
# only while migrating from a less secure algorithm to a more
# secure one. Once all the old tokens are expired this option
# should be set to a single value for better performance.
# (list value)
#hash_algorithms=md5

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to cookbook-openstack-block-storage (master)

Fix proposed to branch: master
Review: https://review.openstack.org/122593

Changed in openstack-chef:
assignee: nobody → Chen Xiao (chenxiao)
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to cookbook-openstack-block-storage (master)

Reviewed: https://review.openstack.org/122593
Committed: https://git.openstack.org/cgit/stackforge/cookbook-openstack-block-storage/commit/?id=5641af2512bbf285ef80732d6baf28d66fc811ad
Submitter: Jenkins
Branch: master

commit 5641af2512bbf285ef80732d6baf28d66fc811ad
Author: chenxiao <email address hidden>
Date: Fri Sep 19 10:46:07 2014 +0800

    Allow cinder authtoken settings to be configurable

    This patch is for allowing cafile, insecure,
    memcached_servers, memcache_security_strategy,
    memcache_secret_key and hash_algorithms to be
    configurable.

    Change-Id: If4e75092f969bb6b5df29d715e1cff696e41a9a3
    Closes-Bug: #1370906

Changed in openstack-chef:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.