{"action":"created","issue":{"url":"https://api.github.com/repos/ManageIQ/manageiq/issues/4091","labels_url":"https://api.github.com/repos/ManageIQ/manageiq/issues/4091/labels{/name}","comments_url":"https://api.github.com/repos/ManageIQ/manageiq/issues/4091/comments","events_url":"https://api.github.com/repos/ManageIQ/manageiq/issues/4091/events","html_url":"https://github.com/ManageIQ/manageiq/pull/4091","id":103601527,"number":4091,"title":"[WIP] Support many legacy keys","user":{"login":"kbrock","id":1930,"avatar_url":"https://avatars.githubusercontent.com/u/1930?v=3","gravatar_id":"","url":"https://api.github.com/users/kbrock","html_url":"https://github.com/kbrock","followers_url":"https://api.github.com/users/kbrock/followers","following_url":"https://api.github.com/users/kbrock/following{/other_user}","gists_url":"https://api.github.com/users/kbrock/gists{/gist_id}","starred_url":"https://api.github.com/users/kbrock/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kbrock/subscriptions","organizations_url":"https://api.github.com/users/kbrock/orgs","repos_url":"https://api.github.com/users/kbrock/repos","events_url":"https://api.github.com/users/kbrock/events{/privacy}","received_events_url":"https://api.github.com/users/kbrock/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/ManageIQ/manageiq/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-08-27T21:42:34Z","updated_at":"2015-08-28T02:45:04Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/ManageIQ/manageiq/pulls/4091","html_url":"https://github.com/ManageIQ/manageiq/pull/4091","diff_url":"https://github.com/ManageIQ/manageiq/pull/4091.diff","patch_url":"https://github.com/ManageIQ/manageiq/pull/4091.patch"},"body":"This allows us to migrate from one v2_key to another\r\n\r\n1. fixes not properly clearing legacy key values. taken from #4082\r\n2. consistently leave environment same for all. load local keys when files not necessary\r\n3. external classes and specs no longer rely upon a key's version number\r\n4. allow any number of legacy keys to be present (no longer hard coded to one of each: v0, v1, v2)\r\n5. fix auth can migrate a database from one v2_key to another. (see bz)\r\n6. TODO: add supports to auto include developer key in development. (maybe just use code from #4082)\r\n\r\n/cc @jrafanie \r\n\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=1159009"},"comment":{"url":"https://api.github.com/repos/ManageIQ/manageiq/issues/comments/135617323","html_url":"https://github.com/ManageIQ/manageiq/pull/4091#issuecomment-135617323","issue_url":"https://api.github.com/repos/ManageIQ/manageiq/issues/4091","id":135617323,"user":{"login":"kbrock","id":1930,"avatar_url":"https://avatars.githubusercontent.com/u/1930?v=3","gravatar_id":"","url":"https://api.github.com/users/kbrock","html_url":"https://github.com/kbrock","followers_url":"https://api.github.com/users/kbrock/followers","following_url":"https://api.github.com/users/kbrock/following{/other_user}","gists_url":"https://api.github.com/users/kbrock/gists{/gist_id}","starred_url":"https://api.github.com/users/kbrock/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kbrock/subscriptions","organizations_url":"https://api.github.com/users/kbrock/orgs","repos_url":"https://api.github.com/users/kbrock/repos","events_url":"https://api.github.com/users/kbrock/events{/privacy}","received_events_url":"https://api.github.com/users/kbrock/received_events","type":"User","site_admin":false},"created_at":"2015-08-28T02:45:04Z","updated_at":"2015-08-28T02:45:04Z","body":"@jrafanie @Fryguy I needed to remove the hard coded list of keys to allow admins to specify a few v2 keys during migrations.\r\nThey need this when they want to transition from one key to another due to 1) security breach, 2) security key change policy, 3) migration from dev to prod, 4) multiple key mistake, or others.\r\n\r\n- support for multiple keys could give us more options for #4082\r\n- lets avoid magic key file names\r\n- do we even need a `v2_key` vs `legacy_keys[]` concept at all? Could we just have `keys[]`.\r\n"}}