On 1/4/2016 10:03 AM, Eric Harney wrote:
On 01/04/2016 10:46 AM, Farr, Kaitlin M. wrote:The fixed key manager is useful for easy testing (we're using it in the gate in places where barbican isn't available). Is there anything equivalent with Catellan? -Sean -- Sean Dague http://dague.netThere is no fixed-key back end with Castellan. I agree that using a fixed key makes for very easy testing, but the tests use a configuration (ConfKeyManager) that should not be used in deployment. The tests could be made much more useful if they used a more realistic configuration (Barbican). Adding a gate that tests using DevStack with Barbican enabled would be a more valuable than the existing tests for two reasons: 1. ConfKeyManager could be removed. 2. It would test the feature configured more closely to how a deployment would actually look. As part of this change to deprecate ConfKeyManager and integrate Castellan, I would like to add this new gate. -KaitlinAiming toward tests that mirror real-world deployment is certainly a good thing, but I don't think we should remove ConfKeyManager. We will want to maintain the ability to test these Cinder/Nova code paths in development environments or in some automated environments without requiring additional services to be configured. We can address this by having ConfKeyManager emit warning messages indicating that it isn't for production environments. Thanks, Eric __________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Note that at least in nova, the single key manager already emits a warning when used [1].
[1] https://github.com/openstack/nova/commit/97d63d8745cd9b3b391ce96b94b4da263b3a053d#L40
-- Thanks, Matt Riedemann __________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
