-
Notifications
You must be signed in to change notification settings - Fork 898
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove the mechanisms around "configuring" central admin #13966
Remove the mechanisms around "configuring" central admin #13966
Conversation
This was put in place because the authentication method we were using involved encrypting a token using a remote region's v2_key. The initial assumption was that regions could have different keys so we needed to do some configuration to fetch the remote key for each subscription. That assumption has been proven incorrect; all regions in the enterprise should be using the same v2_key. This allows us to authenticate with remote regions as soon as replication is configured.
Keeping this WIP until the UI side is merged. I don't imagine much change here though so feel free to review 😄 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, nice ✂️ 👍
Do you need a data migration to remove the offending auth records? |
@Fryguy Yup, forgot about that, thanks for remembering 😄 |
The AuthenticationMixin was added to MiqRegion specifically for saving these records. Because of this we can just remove all the authentication records that point to an MiqRegion resource.
Checked commits carbonin/manageiq@96d528c~...37f854e with ruby 2.2.6, rubocop 0.47.1, and haml-lint 0.20.0 |
Th UI PR was merged so this is ready to go. |
This was put in place because the authentication method we were using involved encrypting a token using a remote region's v2_key.
The initial assumption was that regions could have different keys so we needed to do some configuration to fetch the remote key for each subscription.
That assumption has been proven incorrect; all regions in the enterprise should be using the same v2_key. This allows us to authenticate with remote regions as soon as replication is configured.
Related UI PR ManageIQ/manageiq-ui-classic#421