havana: neutron SSL support needs to be documented

[Tom Fifield]

If https://review.openstack.org/#/c/20459/ is merged, SSL support will be added to quantum. The manuals should be updated to reflect this, including a new section on enabling, and an update of the config reference. The method used is the same as glance, so documentation could be copied from there.

 33 # Sets the value of TCP_KEEPIDLE in seconds for each server socket.
   34 # Not supported on OS X.
   35 #tcp_keepidle = 600
   36
   37 # Number of backlog requests to configure the socket with.
   38 #backlog = 4096
   39
   40 # Certificate file to use when starting API server securely
   41 #ssl_cert_file = /path/to/certfile
   42
   43 # Private key file to use when starting API server securely
   44 #ssl_key_file = /path/to/keyfile
   45
   46 # CA certificate file to use to verify connecting clients
   47 #ssl_ca_file = /path/to/cafile
   48

[Tom Fifield (fifieldt)]

review in progress

[Tom Fifield (fifieldt)]

review in progress

[Tom Fifield (fifieldt)]

See also: https://review.openstack.org/#/c/20922/ which adds

   50 cfg.BoolOpt('quantum_api_insecure',
   51 default=False,
   52 help='if set, ignore any SSL validation issues'),

to quantum consumers - in this case nova

[Tom Fifield (fifieldt)]

May get a FFE to make it into grizzly.

[Tom Fifield (fifieldt)]

Not in grizzly.

[Tom Fifield (fifieldt)]

patch was merged - quantum h-1

[Tom Fifield (fifieldt)]

There is some content in the OpenStack Security Guide that can be used for this.

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/35726
Committed: http://github.com/openstack/openstack-manuals/commit/eae9f5b9b5509a6988d2900038c05dab14d2e573
Submitter: Jenkins
Branch: master

commit eae9f5b9b5509a6988d2900038c05dab14d2e573
Author: Tom Fifield <email address hidden>
Date: Fri Jul 5 11:07:55 2013 +1000

    Add Autogenerate-config-doc code to tools

    This patch brings the auto-generate-config doc tool into
    the openstack-manuals repo, where it can be used to update
    the configuration option tables.

    patchset2 fixes obvious things noted by reviewers, likely
    needs more fixing.

    patchset 4 adds update feature, fixes pep8

    patchset 5 removes debugging print

    patchset 6 adds warning to tables regarding their
               automatically generated nature

    patchset 7 updated nova flagmappings for H2 and
               adds updated nova tables

    patchset 8 adds a seciton in the readme with a worked example
               from a recent use of the script

    patchset 10 fixes for cinder
    patchset 11 testing, fixing
    patchset 12 testing, fixing
    patchset 13 adds categories to cinder.flagmappings, generates
                docbook tables for cinder
    patchset 14 adds mappings for neutron, and generates docbook
                tables based on these

    patchset 15 adds list of bugs this patch will fix

    patchset 16 fixes whitespace error in automatically generated tables :(

    fixes bug 1192225
    Partial-Bug 1207550
    Partial-Bug 1207549
    fixes bug 1206827
    Partial-Bug 1206336
    fixes bug 1204484
    Partial-Bug 1204205
    fixes bug 1202260
    fixes bug 1201710
    fixes bug 1200794
    Partial-Bug 1200740
    Partial-Bug 1200418
    Partial-Bug 1200047
    Partial-Bug 1199209
    Partial-Bug 1197657
    fixes bug 1197653
    fixes bug 1197295
    Partial-Bug 1197088
    Partial-Bug 1195900
    fixes bug 1195560
    fixes bug 1195433
    Partial-Bug 1192752
    fixes bug 1187278
    Partial-Bug 1106428
    Change-Id: Icd3f4496850c375c9359a10eddb25ab5c722595e
    bp:autogenerate-config-tables

[Edgar Magana (emagana)]

I will take care of this

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/81937

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/81937
Committed: https://git.openstack.org/cgit/openstack/openstack-manuals/commit/?id=48543a85e5a0ecc7c4160a397461c10ce057a32f
Submitter: Jenkins
Branch: master

commit 48543a85e5a0ecc7c4160a397461c10ce057a32f
Author: Edgar Magana <email address hidden>
Date: Thu Mar 20 15:54:49 2014 -0700

    Adds a section about SSL configuration for Neutron API

    In this commit a new sub-section is added to explain the
    varaibles needed to enable SSL in Neutron API.

    Closes-Bug: #1106428

    Change-Id: If4fd24d58c8187ea4260f753a44ff48ca1b83172

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-manuals 15.0.0 release.