commit c69e8c8436abd768fd4f3f2bb0d704abdd8d6dc7
author Oleksandr Bryndzii <obryndzii@mirantis.com> Fri Sep 28 23:27:30 2018 +0000
committer Oleksandr Bryndzii <obryndzii@mirantis.com> Tue Oct 09 17:50:08 2018 +0300
tree 632c39c8333cfa95846466764dc429d6b501149e
parent 05598cc543f95ee8461d18f04e4d059d341c6743

Implement glance memcache security strategy

Provides an option to authenticate and optionally encrypt the token
data stored in the cache:
memcache_security_strategy = MAC/ENCRYPT
memcache_secret_key = secret_key

Change-Id: I1ba1f4fa61684d3dd5f0aa1478044e0f46b7cffc
Related-Prod: PROD-22099

README.rst

diff --git a/README.rst b/README.rst
index 6e96364..f050338 100644
--- a/README.rst
+++ b/README.rst
@@ -446,6 +446,26 @@
 You can read more about it here:
     https://docs.openstack.org/security-guide/databases/database-access-control.html
 
+Glance services on controller node with memcached caching and security strategy:
+
+.. code-block:: yaml
+
+    glance:
+      server:
+        enabled: true
+        ...
+        cache:
+          engine: memcached
+          members:
+          - host: 127.0.0.1
+            port: 11211
+          - host: 127.0.0.1
+            port: 11211
+          security:
+            enabled: true
+            strategy: ENCRYPT
+            secret_key: secret
+
 Usage
 =====