OTSUKA, Yuanying
1727c1728f
To implement TLS support, we should store CA and client cert for each bay. This patch adds common library to store cert to Barbican. Magnum uses service admin privilege to store the cert, this means that end user can't retrieve CA cert and private key from Barbican directly. This patch is copied from neutron-lbaas project. * I435189b2637e32803a13ebd4951e61fac4ab234d Change-Id: I519228d9749ad610db3e0c698caa1144813f9d52 Partial-Implements: blueprint magnum-as-a-ca
41 lines
1.3 KiB
Python
41 lines
1.3 KiB
Python
# Copyright 2015 Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
from oslo_config import cfg
|
|
from stevedore import driver
|
|
|
|
CONF = cfg.CONF
|
|
|
|
DEFAULT_CERT_MANAGER = 'barbican'
|
|
|
|
cert_manager_opts = [
|
|
cfg.StrOpt('cert_manager_type',
|
|
default=DEFAULT_CERT_MANAGER,
|
|
help='Certificate Manager plugin. '
|
|
'Defaults to {0}.'.format(DEFAULT_CERT_MANAGER))
|
|
]
|
|
|
|
CONF.register_opts(cert_manager_opts, group='certificates')
|
|
|
|
_CERT_MANAGER_PLUGIN = None
|
|
|
|
|
|
def get_backend():
|
|
global _CERT_MANAGER_PLUGIN
|
|
if not _CERT_MANAGER_PLUGIN:
|
|
_CERT_MANAGER_PLUGIN = driver.DriverManager(
|
|
"magnum.cert_manager.backend",
|
|
cfg.CONF.certificates.cert_manager_type).driver
|
|
return _CERT_MANAGER_PLUGIN
|