- Share type extra-spec "encryption_support" should be set to
"share_server".
- Use encryption_key_ref from user provided share create API option
- Create ACL for barbican user from current user context, so barbican
user can fetch the secret from secret_ref in backend driver.
- Create server_encryption_keys project level quota which helps to
control the encrypted share servers. Such share servers do not support
migration/unmanage etc.
- Create application credentials for barbican user during share server
creation and delete during share server deletion.
partially-implements: blueprint share-encryption
Change-Id: I9e3ff98e12027eaf75cdc5f6089a016c102315d3
Signed-off-by: Kiran Pawar <kinpaa@gmail.com>
82a94bbcec