Use internal endpoint for barbican key manager
When use-internal-endpoints is enabled, write barbican_endpoint_type = internal so castellan discovers barbican via the internal keystone catalog interface instead of public. Needed when the public network is not reachable from compute hosts, e.g. for vTPM secrets or encrypted volume (LUKS) key retrieval. Closes-Bug: #2158067 Change-Id: Ib474efbbf597272b8f8088ec0c9f7130e126c537 Signed-off-by: Seyeong Kim <seyeong.kim@canonical.com>
This commit is contained in:
1 parent
77f2e9e1da
commit
3f5972fdab
2 files changed
+6
No files matched your search
@@ -0,0 +1,4 @@
|
||||
{% if use_internal_endpoints -%}
|
||||
[barbican]
|
||||
barbican_endpoint_type = internal
|
||||
{% endif -%}
|
||||
@@ -382,6 +382,8 @@ skip_cpu_compare_on_dest = {{ skip_cpu_compare_on_dest }}
|
||||
|
||||
{% include "parts/section-placement" %}
|
||||
|
||||
{% include "parts/section-barbican" %}
|
||||
|
||||
{% include "parts/section-ironic" %}
|
||||
|
||||
[compute]
|
||||
|
||||
Reference in new issue
Block a user