Maniphest T95519

Automatically clean salt and puppet certs on instance deletion
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Andrew
	Apr 9 2015, 3:14 AM

Tags

Referenced Files

None

Subscribers

Description

We need to clean up so that new instances can re-use cert names.

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		Andrew	T42525 Cant add a security group to an existing instance
		Resolved		Andrew	T87279 Make OpenStack Horizon useful for production labs
		Resolved		hashar	T96670 Instances created by Nodepool cant run puppet due to missing certificate
		Resolved		Andrew	T97163 Support instance creation/deletion via nova commandline
		Resolved		Andrew	T91987 Nova Instance creation hook for ldap
		Duplicate		Andrew	T95910 Abolish use of ec2 ids
		Resolved		Andrew	T95911 Remove puppet and salt keys on instance deletion
		Resolved		Andrew	T1154 Make labs salt use instance names than ids
		Resolved		Andrew	T95480 Abolish use of ec2id in cert names
		Resolved		Andrew	T95519 Automatically clean salt and puppet certs on instance deletion

Event Timeline

Andrew created this task.Apr 9 2015, 3:14 AM

Andrew claimed this task.

Andrew raised the priority of this task from to Medium.

Andrew updated the task description. (Show Details)

Andrew added a project: Cloud-Services.

Andrew added subscribers: Aklapper, Andrew.

yuvipanda mentioned this in rOPUPc8d9139419b3: puppetsigner: Clean up certs and salt keys for instances we can't find in ldap.May 4 2015, 1:52 PM

Andrew mentioned this in rOPUP5b8df0895622: Better handling for invalid cert names:.May 4 2015, 2:20 PM

OK! It's a bit racy but the puppetsigner now cleans up discarded puppet certs.