Re: [openstack-dev] [oslo][oslo.config] Pluggable drivers and protect plaintext secrets

2017-08-05 Thread Doug Hellmann
: Friday, August 04, 2017 1:49 PM > To: openstack-dev > Subject: Re: [openstack-dev] [oslo][oslo.config] Pluggable drivers and > protect plaintext secrets > > Excerpts from Fox, Kevin M's message of 2017-08-04 20:21:19 +: > > I would really like to see secrets separat

Re: [openstack-dev] [oslo][oslo.config] Pluggable drivers and protect plaintext secrets

2017-08-04 Thread Fox, Kevin M
Hellmann [d...@doughellmann.com] Sent: Friday, August 04, 2017 1:49 PM To: openstack-dev Subject: Re: [openstack-dev] [oslo][oslo.config] Pluggable drivers and protect plaintext secrets Excerpts from Fox, Kevin M's message of 2017-08-04 20:21:19 +: > I would really like to see secrets separa

Re: [openstack-dev] [oslo][oslo.config] Pluggable drivers and protect plaintext secrets

2017-08-04 Thread Doug Hellmann
Excerpts from Fox, Kevin M's message of 2017-08-04 20:21:19 +: > I would really like to see secrets separated from config. Always have... They > are two separate things. > > If nothing else, a separate config file so it can be permissioned differently. > > This could be combined with k8s

Re: [openstack-dev] [oslo][oslo.config] Pluggable drivers and protect plaintext secrets

2017-08-04 Thread Fox, Kevin M
+1. Please keep me in the loop for when the PTG session is. Thanks, Kevin From: Doug Hellmann [d...@doughellmann.com] Sent: Friday, August 04, 2017 12:46 PM To: openstack-dev Subject: Re: [openstack-dev] [oslo][oslo.config] Pluggable drivers and protect

Re: [openstack-dev] [oslo][oslo.config] Pluggable drivers and protect plaintext secrets

2017-08-04 Thread Fox, Kevin M
I would really like to see secrets separated from config. Always have... They are two separate things. If nothing else, a separate config file so it can be permissioned differently. This could be combined with k8s secrets/configmaps better too. Or make it much easier to version config in git

Re: [openstack-dev] [oslo][oslo.config] Pluggable drivers and protect plaintext secrets

2017-08-04 Thread Doug Hellmann
Excerpts from Raildo Mascena de Sousa Filho's message of 2017-08-04 19:34:25 +: > Hi all, > > We had a couple of discussions with the Oslo team related to implement > Pluggable drivers for oslo.config[0] and use those feature to implement > support to protect plaintext secret on

Re: [openstack-dev] [oslo][oslo.config] Pluggable drivers and protect plaintext secrets

2017-08-04 Thread Davanum Srinivas
Raildo, I am interested in this topic. PTG session sounds great! Thanks, Dims On Fri, Aug 4, 2017 at 3:34 PM, Raildo Mascena de Sousa Filho < rmasc...@redhat.com> wrote: > Hi all, > > We had a couple of discussions with the Oslo team related to implement > Pluggable drivers for oslo.config[0]