registry team mailing list archive

[gholt <665383@xxxxxxxxxxxxxxxxxx>]

This is something we should discuss a bit. We dropped the services
server because it was old and crusty, used xmlrpc, and we didn't have
time to rewrite it then. That "stuff" moved into the auth server, which
required it to have access to all backend account servers. Later with
the auth updates, it moved into the proxy so the auth just required
proxy access.

I like having a separate service for account puts and deletes as it
gives just a little more security with firewall rules and such. But, it
does kinda stink to have a whole extra service just for account puts and
deletes.

One possibility is to have an option to turn on account puts and deletes
(and make them off by default). To run what used to be called services
you just run an instance or two of the proxy server with this option on.
If you run in a more trusted scenario you can just enable it in your
main proxy servers.

-- 
Add an interface to the Proxy to delete accounts
https://bugs.launchpad.net/bugs/665383
You received this bug notification because you are a member of Registry
Administrators, which is subscribed to OpenStack Object Storage (swift).