Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove password based etcd authentication #37

Closed
mbukatov opened this issue Sep 20, 2017 · 4 comments
Closed

Remove password based etcd authentication #37

mbukatov opened this issue Sep 20, 2017 · 4 comments
Assignees

Comments

@mbukatov
Copy link
Collaborator

mbukatov commented Sep 20, 2017

Since using password based etcd authentication mode makes whole Tendrl stack extremely slow, with etcd itself consuming about 95% of cpu processing power, changes of the etcd auth configuration needs to be made across Tendrl stack.

Related issues concerned with etcd password auth:

Since the root cause seems to be etcd issue: etcd-io/etcd#3223 (comment), the etcd auth should be removed. This is blocked by: Tendrl/api#294

This basically boils down to reverting changes introduced in #34

@mbukatov mbukatov added this to the changes_for_v1.5.2 milestone Sep 20, 2017
@mbukatov mbukatov self-assigned this Sep 20, 2017
@mbukatov
Copy link
Collaborator Author

Removal verified by @r0h4n during A daily meeting of Tendrl developers today. Updates wrt cert based auth will be provided in tendrl issues linked in description of this issue.

@mbukatov
Copy link
Collaborator Author

mbukatov commented Sep 21, 2017

Since Tendrl/api#295 has been merged, I'm going to just change the default for https://github.com/Tendrl/tendrl-ansible/milestone/2 and move this password auth removal issue into https://github.com/Tendrl/tendrl-ansible/milestone/3.

@mbukatov
Copy link
Collaborator Author

mbukatov commented Oct 2, 2017

Now we have a new cert base approach details drafted here: https://github.com/Tendrl/documentation/wiki/Tendrl-with-a-secure-etcd-cluster so I will proceed with removing password based auth.

mbukatov added a commit that referenced this issue Oct 4, 2017
@mbukatov
Copy link
Collaborator Author

mbukatov commented Oct 4, 2017

Fixed by 5428aad

@mbukatov mbukatov closed this as completed Oct 4, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant