cloud state requirements
Jan Provaznik
jprovazn at redhat.com
Mon May 28 12:31:29 UTC 2012
>> TODO: how to handle credentials? will the stateful app keep credentails
>> permanently for each instance being checked?
>
> As much as this worries me from a security standpoint, I don't see
> another way around this - cloud API's generally don't allow any
> delegation of auth.
>
> There's a couple more TODO's connected to credentials:
>
> TODO: how are credentials changes handled (user revokes API Key and
> generates a new one) ? [not for the first cut]
>
We might allow update action for the Instance resource, this can then be
easily called from Conductor.
> TODO: when are stored credentials purged ? We want to make sure we get
> rid of them as quickly as possible.
>
I would say that credentials are deleted together with the instance with
which they are associated.
Jan
More information about the aeolus-devel
mailing list