b86d6b5660
This change moves existing files. It is not meant to be the final word on how the main page looks or how the other files are organized, but it gets everything roughly into shape. If the barbican team wants to make changes, please do those as follow-up patches. Note this does not touch the api directory, this one needs to be migrated to the api-ref. This is part of the docs migration work for Pike. Change-Id: Ibb9d971806964ac185882272514ee9563089d69d
74 lines
3.7 KiB
ReStructuredText
74 lines
3.7 KiB
ReStructuredText
.. _verify:
|
|
|
|
Verify operation
|
|
~~~~~~~~~~~~~~~~
|
|
|
|
Verify operation of the Key Manager (barbican) service.
|
|
|
|
.. note::
|
|
|
|
Perform these commands on the controller node.
|
|
|
|
#. Source the ``admin`` credentials to be able to perform Barbican
|
|
API calls:
|
|
|
|
.. code-block:: console
|
|
|
|
$ . admin-openrc
|
|
|
|
#. Use the OpenStack CLI to store a secret:
|
|
|
|
.. code-block:: console
|
|
|
|
$ openstack secret store --name mysecret --payload j4=]d21
|
|
+---------------+-----------------------------------------------------------------------+
|
|
| Field | Value |
|
|
+---------------+-----------------------------------------------------------------------+
|
|
| Secret href | http://10.0.2.15:9311/v1/secrets/655d7d30-c11a-49d9-a0f1-34cdf53a36fa |
|
|
| Name | mysecret |
|
|
| Created | None |
|
|
| Status | None |
|
|
| Content types | None |
|
|
| Algorithm | aes |
|
|
| Bit length | 256 |
|
|
| Secret type | opaque |
|
|
| Mode | cbc |
|
|
| Expiration | None |
|
|
+---------------+-----------------------------------------------------------------------+
|
|
|
|
#. Confirm that the secret was stored by retrieving it:
|
|
|
|
.. code-block:: console
|
|
|
|
$ openstack secret get http://10.0.2.15:9311/v1/secrets/655d7d30-c11a-49d9-a0f1-34cdf53a36fa
|
|
+---------------+-----------------------------------------------------------------------+
|
|
| Field | Value |
|
|
+---------------+-----------------------------------------------------------------------+
|
|
| Secret href | http://10.0.2.15:9311/v1/secrets/655d7d30-c11a-49d9-a0f1-34cdf53a36fa |
|
|
| Name | mysecret |
|
|
| Created | 2016-08-16 16:04:10+00:00 |
|
|
| Status | ACTIVE |
|
|
| Content types | {u'default': u'application/octet-stream'} |
|
|
| Algorithm | aes |
|
|
| Bit length | 256 |
|
|
| Secret type | opaque |
|
|
| Mode | cbc |
|
|
| Expiration | None |
|
|
+---------------+-----------------------------------------------------------------------+
|
|
|
|
.. note::
|
|
|
|
Some items are populated after the secret has been created and will only
|
|
display when retrieving it.
|
|
|
|
#. Confirm that the secret payload was stored by retrieving it:
|
|
|
|
.. code-block:: console
|
|
|
|
$ openstack secret get http://10.0.2.15:9311/v1/secrets/655d7d30-c11a-49d9-a0f1-34cdf53a36fa --payload
|
|
+---------+---------+
|
|
| Field | Value |
|
|
+---------+---------+
|
|
| Payload | j4=]d21 |
|
|
+---------+---------+
|