Use internal endpoint for barbican key manager

When use-internal-endpoints is enabled, write barbican_endpoint_type =
internal so castellan discovers barbican via the internal keystone
catalog interface instead of public. Needed when the public network is
not reachable from compute hosts, e.g. for vTPM secrets or encrypted
volume (LUKS) key retrieval.

Closes-Bug: #2158067
Change-Id: Ib474efbbf597272b8f8088ec0c9f7130e126c537
Signed-off-by: Seyeong Kim <seyeong.kim@canonical.com>
This commit is contained in:
Seyeong Kim committed 2026-06-24 08:34:22 +00:00
1 parent 77f2e9e1da
commit 3f5972fdab
2 files changed
+6

No files matched your search

+4
View File
@@ -0,0 +1,4 @@
{% if use_internal_endpoints -%}
[barbican]
barbican_endpoint_type = internal
{% endif -%}
+2
View File
@@ -382,6 +382,8 @@ skip_cpu_compare_on_dest = {{ skip_cpu_compare_on_dest }}
{% include "parts/section-placement" %}
{% include "parts/section-barbican" %}
{% include "parts/section-ironic" %}
[compute]