Event Details

When securing the Openstack services by deploying them behind TLS, we need to figure out how to automatically obtain and manage the required certificates.  Certmonger has long been used for precisely this purpose, but the instance needs credentials.

This talk will explore how a new Nova micro-service (novajoin) is used to enroll nova instances as FreeIPA clients, which in turn provides the credentials to get certificates for hosts and services. Moreover, we get the abilities to implement centralized host and sudo access controls.