{"action":"created","issue":{"url":"https://api.github.com/repos/ClusterHQ/flocker/issues/1357","labels_url":"https://api.github.com/repos/ClusterHQ/flocker/issues/1357/labels{/name}","comments_url":"https://api.github.com/repos/ClusterHQ/flocker/issues/1357/comments","events_url":"https://api.github.com/repos/ClusterHQ/flocker/issues/1357/events","html_url":"https://github.com/ClusterHQ/flocker/pull/1357","id":72157679,"number":1357,"title":"[FLOC-1785] CA cluster UUID","user":{"login":"dwgebler","id":646585,"avatar_url":"https://avatars.githubusercontent.com/u/646585?v=3","gravatar_id":"","url":"https://api.github.com/users/dwgebler","html_url":"https://github.com/dwgebler","followers_url":"https://api.github.com/users/dwgebler/followers","following_url":"https://api.github.com/users/dwgebler/following{/other_user}","gists_url":"https://api.github.com/users/dwgebler/gists{/gist_id}","starred_url":"https://api.github.com/users/dwgebler/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dwgebler/subscriptions","organizations_url":"https://api.github.com/users/dwgebler/orgs","repos_url":"https://api.github.com/users/dwgebler/repos","events_url":"https://api.github.com/users/dwgebler/events{/privacy}","received_events_url":"https://api.github.com/users/dwgebler/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-04-30T13:22:21Z","updated_at":"2015-05-04T13:38:30Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/ClusterHQ/flocker/pulls/1357","html_url":"https://github.com/ClusterHQ/flocker/pull/1357","diff_url":"https://github.com/ClusterHQ/flocker/pull/1357.diff","patch_url":"https://github.com/ClusterHQ/flocker/pull/1357.patch"},"body":"Fixes FLOC-1785"},"comment":{"url":"https://api.github.com/repos/ClusterHQ/flocker/issues/comments/98706418","html_url":"https://github.com/ClusterHQ/flocker/pull/1357#issuecomment-98706418","issue_url":"https://api.github.com/repos/ClusterHQ/flocker/issues/1357","id":98706418,"user":{"login":"itamarst","id":3266662,"avatar_url":"https://avatars.githubusercontent.com/u/3266662?v=3","gravatar_id":"","url":"https://api.github.com/users/itamarst","html_url":"https://github.com/itamarst","followers_url":"https://api.github.com/users/itamarst/followers","following_url":"https://api.github.com/users/itamarst/following{/other_user}","gists_url":"https://api.github.com/users/itamarst/gists{/gist_id}","starred_url":"https://api.github.com/users/itamarst/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/itamarst/subscriptions","organizations_url":"https://api.github.com/users/itamarst/orgs","repos_url":"https://api.github.com/users/itamarst/repos","events_url":"https://api.github.com/users/itamarst/events{/privacy}","received_events_url":"https://api.github.com/users/itamarst/received_events","type":"User","site_admin":false},"created_at":"2015-05-04T13:38:30Z","updated_at":"2015-05-04T13:38:30Z","body":"The downside of this design is that it puts an extra burden on the administrator and whoever is implementing clients.\r\n\r\nIn order to configure a node you now need to distribute CA certificate, node certificate and node key, as well as having the UUID configured in a config file somewhere. This is because you can't just validate the control service based on being signed by CA and having `control-service` as the common name.\r\nFor usage of HTTP API, e.g. via `curl`, this is also the case: you need to distribute yet another piece of information, it's tricker to use `curl`, etc..\r\n\r\nI would rather the cluster UUID be encoded in the CA certificate, since we need to distribute that anyway."}}