Bug 1469332 - [Docs][RFE][Keystone] How to configure fernet key rotation.
Summary: [Docs][RFE][Keystone] How to configure fernet key rotation.
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: documentation
Version: 12.0 (Pike)
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ga
: 12.0 (Pike)
Assignee: Martin Lopes
QA Contact: Charelle Collett
URL:
Whiteboard: docs-accepted
Depends On: 1432479
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-07-11 01:20 UTC by Martin Lopes
Modified: 2017-12-14 23:28 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-12-14 23:28:18 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)

Description Martin Lopes 2017-07-11 01:20:44 UTC 
Describe how to configure and validate fernet key rotation using `keystone-manage fernet_rotate`.
Comment 1 Lucy Bopf 2017-08-08 02:24:18 UTC 
Assigning to Martin for review.
Comment 2 Martin Lopes 2017-08-22 05:42:03 UTC 
Building fernet test env
Comment 19 Juan Antonio Osorio 2017-09-27 04:08:17 UTC 
Initially I hadn't finished the key rotation for containers. But ended up being able to and it's in OSP12. here's the docs about it http://tripleo.org/install/post_deployment/fernet_key_rotation.html
Comment 20 Martin Lopes 2017-12-11 23:53:54 UTC 
Added updates for comment 19
Comment 21 Martin Lopes 2017-12-11 23:54:38 UTC 
Moving to `verified` for tracking
Comment 23 Lucy Bopf 2017-12-14 04:25:45 UTC 
The GA milestone has now passed. Moving this tracker to 'async'.
Comment 24 Martin Lopes 2017-12-14 23:13:04 UTC 
Updated guide was published:

https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/12/html-single/deploy_fernet_on_the_overcloud/#sec-fernet
Comment 27 Martin Lopes 2017-12-14 23:28:18 UTC 
Content was published:

https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/12/html-single/deploy_fernet_on_the_overcloud/#rotate_the_fernet_keys
Note You need to log in before you can comment on or make changes to this bug.