Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove the mechanisms around "configuring" central admin #13966

Merged
merged 2 commits into from
Feb 20, 2017

Conversation

carbonin
Copy link
Member

This was put in place because the authentication method we were using involved encrypting a token using a remote region's v2_key.

The initial assumption was that regions could have different keys so we needed to do some configuration to fetch the remote key for each subscription.

That assumption has been proven incorrect; all regions in the enterprise should be using the same v2_key. This allows us to authenticate with remote regions as soon as replication is configured.

Related UI PR ManageIQ/manageiq-ui-classic#421

This was put in place because the authentication method we were
using involved encrypting a token using a remote region's v2_key.

The initial assumption was that regions could have different keys
so we needed to do some configuration to fetch the remote key
for each subscription.

That assumption has been proven incorrect; all regions in the
enterprise should be using the same v2_key. This allows us to
authenticate with remote regions as soon as replication is configured.
@carbonin
Copy link
Member Author

Keeping this WIP until the UI side is merged. I don't imagine much change here though so feel free to review 😄

Copy link
Member

@gtanzillo gtanzillo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, nice ✂️ 👍

@Fryguy
Copy link
Member

Fryguy commented Feb 17, 2017

Do you need a data migration to remove the offending auth records?

@carbonin
Copy link
Member Author

@Fryguy Yup, forgot about that, thanks for remembering 😄

The AuthenticationMixin was added to MiqRegion specifically for
saving these records. Because of this we can just remove all the
authentication records that point to an MiqRegion resource.
@miq-bot
Copy link
Member

miq-bot commented Feb 17, 2017

Checked commits carbonin/manageiq@96d528c~...37f854e with ruby 2.2.6, rubocop 0.47.1, and haml-lint 0.20.0
9 files checked, 0 offenses detected
Everything looks good. ⭐

@carbonin carbonin changed the title [WIP] Remove the mechanisms around "configuring" central admin Remove the mechanisms around "configuring" central admin Feb 20, 2017
@carbonin carbonin removed the wip label Feb 20, 2017
@carbonin
Copy link
Member Author

Th UI PR was merged so this is ready to go.

@gtanzillo gtanzillo added this to the Sprint 55 Ending Feb 27, 2017 milestone Feb 20, 2017
@gtanzillo gtanzillo merged commit 33c19ae into ManageIQ:master Feb 20, 2017
@gtanzillo gtanzillo mentioned this pull request Mar 1, 2017
@carbonin carbonin deleted the remove_central_admin_enable branch March 7, 2017 16:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants