Comment 2 for bug 1568037

Revision history for this message
Stanislaw Bogatkin (sbogatkin) wrote :

I believe that it is a bad idea to cut out private keys from astute.yaml by nailgun. It is pretty much should be smarter way - for example:

1. In case of self-signed certs generated by master node do not copy keys to nodes w/o haproxy.
2. In case of user certs - do not store them in nailgun db at all. We must store them in master node FS some way and then copy them to needed nodes as described in clause 1.

So, I believe that it should be not a bug, but a blueprint. Moved to 10.0.