Hi,

(this is for pebbles)

Currently, we have nice automatic DNS entries created in bind on the
admin node for the different nodes. This means that we get, for
instance, a public.d52-54-00-fa-12-cb.$domain DNS entry for the
d52-54-00-fa-12-cb.

However, in the past, with SUSE Cloud 1.0, we realized that these DNS
entries were not always published externally and that, therefore, they
cannot always be relied on.

This is not necessarily a big deal, except that with SSL support that
we're adding, we will want to change the endpoints registered in
keystone to use hostnames instead of IP addresses. The reason for that
is simply that SSL certificates are usually associated to hostnames, not
IP addresses, and so we want that to have the validation work fine.

What we did in SUSE Cloud 1.0 was to add an optional attribute to each
node, which is the public hostname of the node. Simply put, this is the
DNS entry that is published externally; some people do that manually. So
when this is available, we would use $PUBLIC_HOSTNAME instead of
public.d52-54-00-fa-12-cb.$domain as endpoint. (And when no SSL is used,
we keep using the IP address for the endpoint, since that won't cause
any issue in that case).

It's really a trivial patch to barclamp-crowbar, and then updating each
openstack barclamp registering endpoints to use that.

Any objection?

Vincent

-- 
Les gens heureux ne sont pas pressés.

_______________________________________________
Crowbar mailing list
[email protected]
https://lists.us.dell.com/mailman/listinfo/crowbar
For more information: http://crowbar.github.com/

Reply via email to