tree b13f10f121c4ea31a95a8d3cc0431ad320bd9bd8
parent 3617b5866c93f5247df6340409520e6dd58d8b15
author Elena Ezhova <eezhova@mirantis.com> 1500293792 +0400
committer Elena Ezhova <eezhova@mirantis.com> 1500454367 +0400

Manage certificates for Octavia controller-amphora communication

Octavia presently allows for one method for the controller to
communicate with amphorae: the amphora REST API. Both amphora API and
Octavia controller do bi-directional certificate-based authentication in
order to authenticate and encrypt communication.

This change doesn't affect Octavia user-facing API.

What this change does:

- Creates Octavia CA stored on a node where Octavia controller
  is running
- Creates certificates for controller-amphora communication
  signed by this CA. (Amphora-side certs are generated by Octavia
  itself)

Depends on: https://gerrit.mcp.mirantis.net/7680
Related PROD: PROD-11933

Change-Id: Iedca3b5888af6e331005ed7387d4ca68d34e0261