Comment 5 for bug 2056656

Revision history for this message
Takashi Kajinami (kajinamit) wrote (last edit ):

We implemented redis sentinel support during this cycle, which enables SSL and authentication consistently to both redis and sentinel.
We updated the other libraries(tooz and taskflow) to follow that behavior. I personally assumed that people may not enable auth when redis sentinel is used (because we could enable authentication for only redis and redis sentinel was deployed with no-auth) but kolla was using that deployment architecture.

IMO the ideal goal is to enable authentication for sentinel, instead of that "partial" authentication configurations. However I'm aware that Redis storage driver in gnocchi currently supports only partial authentication (enabled in redis, disabled in sentinel). I'll work on it later but we don't know if that change is included in the version distros pick up.

So it's probably better to restore the previous behavior which uses partial authentication, to keep the existing usage in kolla. I'll submit patches for it.