Re: [Openstack] PKI Issue vs UUID

2015-09-20 Thread Adam Young
On 09/19/2015 03:52 PM, Remo Mattei wrote: Hello all, I have notice that when I do the RDO installation of Kilo with the UUID and login with the admin account, I can select which project to spin up new instances and also which project to select from the pull down menu. If I do the same instal

Re: [Openstack] PKI Issue vs UUID

2015-09-20 Thread Shinobu Kinjo
Fernet token sounds like not being persistent, and not having too much information. Meaning that it sounds like more secure than UUID and PKI. And performance wise, it also going to be more reasonable than them. It's because of less processes for users validation. And that deployment doesn't loo

Re: [Openstack] PKI Issue vs UUID

2015-09-20 Thread Morgan Fainberg
> On Sep 20, 2015, at 19:17, Shinobu Kinjo wrote: > > Fernet token sounds like not being persistent, and not having too much > information. > Meaning that it sounds like more secure than UUID and PKI. > > And performance wise, it also going to be more reasonable than them. > It's because of l

Re: [Openstack] PKI Issue vs UUID

2015-09-20 Thread Shinobu Kinjo
> No system but keystone needs access to these keys. Yeah, this triggers my concerns since keystone would have huge responsibility about security for the stack. Keystone have r/w permission to key files, and encrypt/decrypt 119 with open(key_file, 'w') as f: 120 f.write(ke

Re: [Openstack] PKI Issue vs UUID

2015-09-20 Thread Morgan Fainberg
On Sep 20, 2015, at 20:46, Shinobu Kinjo wrote: >> No system but keystone needs access to these keys. > > Yeah, this triggers my concerns since keystone would have huge responsibility > about security for the stack. > > Keystone have r/w permission to key files, and encrypt/decrypt > Keys

Re: [Openstack] Openstack Digest, Vol 27, Issue 20

2015-09-20 Thread sahil arora
Hi Folks , I have three Node openstack setup installed on my PC ,Earlier I was using the Virt-Manager to create the images from iso and than i would use those Opensuse Images to run my application but now i have tried to convert that image using Glance into qcow2 and even followed the instructions

[Openstack] Need help to find code which populates compute_nodes table in nova database

2015-09-20 Thread Mahendra Ladhe
Hi,    Could someone please tell me which code (filename and/or function name) actually populates thecompute_nodes table under 'nova' database ? I am unable to find it on my own. Thank youMahendra ___ Mailing list: http://lists.openstack.org/cgi-bin/mai

Re: [Openstack] Need help to find code which populates compute_nodes table in nova database

2015-09-20 Thread Kekane, Abhishek
Hi Mahendra, openstack-dev mailing list is proper mailing list to ask this question. There are many locations which are populating compute_nodes records, one of them is hypervisor-stats. Please check https://github.com/openstack/nova/blob/master/nova/api/openstack/compute/hypervisors.py#L91 Ho