5ef6c3e2e4
Added code to devstack libraries to allow KMIP secret store to be enabled. This edits barbican.conf to enable the KMIP secret store. The Barbican PyKMIP client can be configured to connect to an existing KMIP device or use PyKMIP's server. If the client configuration is all that is needed then enable the 'barbican-pykmip' service in the devstack configuration and set the appropriate key, certificate, and CA path variables. This will allow the Barbican KMIP secret store to connect to an existing KMIP server. If a KMIP server is requested then also enable the 'pykmip-server' service in the devstack configuration. This will install, configure, and start the KMIP server. This option requires the 'barbican-pykmip' service be configured as well. Added passenv command to tox to allow the KMIP_PLUGIN_ENABLED environment variable to be passed to the underlying command. Without this the environment variable will not be seen by the tox command. Change-Id: Ib804fa97545f14ed866bfd73bb251e85923a2e4e Depends-On: Ifda13a84607bb199b794dc24f5dbba0ee8108dbf
35 lines
1.1 KiB
Plaintext
35 lines
1.1 KiB
Plaintext
# Defaults
|
|
# --------
|
|
|
|
# Set up default directories
|
|
BARBICAN_DIR=$DEST/barbican
|
|
BARBICANCLIENT_DIR=$DEST/python-barbicanclient
|
|
BARBICAN_CONF_DIR=${BARBICAN_CONF_DIR:-/etc/barbican}
|
|
BARBICAN_CONF=$BARBICAN_CONF_DIR/barbican.conf
|
|
BARBICAN_PASTE_CONF=$BARBICAN_CONF_DIR/barbican-api-paste.ini
|
|
BARBICAN_API_LOG_DIR=$DEST/logs
|
|
BARBICAN_AUTH_CACHE_DIR=${BARBICAN_AUTH_CACHE_DIR:-/var/cache/barbican}
|
|
|
|
PYKMIP_CONF_DIR=${PYKMIP_CONF_DIR:-/etc/pykmip}
|
|
PYKMIP_CONF=${PYKMIP_CONF_DIR}/server.conf
|
|
PYKMIP_LOG_DIR=${PYKMIP_LOG_DIR:-/var/log/pykmip}
|
|
|
|
# Support potential entry-points console scripts
|
|
BARBICAN_BIN_DIR=$(get_python_exec_prefix)
|
|
|
|
# Set Barbican repository
|
|
BARBICAN_REPO=${BARBICAN_REPO:-${GIT_BASE}/openstack/barbican.git}
|
|
BARBICAN_BRANCH=${BARBICAN_BRANCH:-master}
|
|
|
|
# Set client library repository
|
|
BARBICANCLIENT_REPO=${BARBICANCLIENT_REPO:-${GIT_BASE}/openstack/python-barbicanclient.git}
|
|
BARBICANCLIENT_BRANCH=${BARBICANCLIENT_BRANCH:-master}
|
|
|
|
# Set host href
|
|
BARBICAN_HOST_HREF=${BARBICAN_HOST_HREF:-http://${SERVICE_HOST}:9311}
|
|
|
|
# Tell Tempest this project is present
|
|
TEMPEST_SERVICES+=,barbican
|
|
|
|
enable_service barbican
|