Munir Siddiqui
8089f0d2c0
Currently, the Barbican charm lacks the standard mechanism for overriding policies via a Juju resource, which is present in other charms like Keystone, Octavia, and Designate [0]. This change uses the code in charms.openstack [1], and implements the policyd-override functionality in a similar manner as other reactive charms like Octavia [2] and Designate [3]. [0] https://docs.openstack.org/charm-guide/latest/concepts/policy-overrides.html [1] https://opendev.org/openstack/charms.openstack/src/branch/master/charms_openstack/plugins/classes.py [2]5e3e942cd8[3]08d9d1929bCloses-Bug: #2131898 Change-Id: I5e1ede0efb914a36ce15683dafed7e3c9fd2675e Signed-off-by: Munir Siddiqui <munir.siddiqui@canonical.com>
29 lines
809 B
YAML
29 lines
809 B
YAML
name: barbican
|
|
summary: A REST API for secure storage, provisioning and management of secrets
|
|
maintainer: OpenStack Charmers <openstack-charmers@lists.ubuntu.com>
|
|
description: |
|
|
Barbican is a REST API designed for the secure storage, provisioning and
|
|
management of secrets such as passwords and encryption keys. It is aimed at
|
|
being useful for all environments, including large ephemeral Clouds
|
|
tags:
|
|
- openstack
|
|
subordinate: false
|
|
requires:
|
|
shared-db:
|
|
interface: mysql-shared
|
|
amqp:
|
|
interface: rabbitmq
|
|
identity-service:
|
|
interface: keystone
|
|
hsm:
|
|
interface: barbican-hsm
|
|
optional: true
|
|
secrets:
|
|
interface: barbican-secrets
|
|
optional: true
|
|
resources:
|
|
policyd-override:
|
|
type: file
|
|
filename: policyd-override.zip
|
|
description: The policy.d overrides file
|