openstack/openstack-ansible-os_cinder
Code Issues Proposed changes

Replace deprecated key_manager

Browse Source 
Usage of module path is a deprecated behaviour. All cinder docs
suggest using just `barbican` for [key_manager]/backend value.

We also explicitly specify for barbican to talk over internal
interface instead of public which is default behaviour.

Change-Id: I3d0d401c2024c6051b7fb61a929dd4e6975b0a30
This commit is contained in:
Dmitriy Rabotyagov 2021-02-22 17:08:20 +02:00
parent 6fd2a1a255
commit 3c0106b97c
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
templates/cinder.conf.j2
View File

@ -135,9 +135,10 @@ hmac_keys = {{ cinder_profiler_hmac_key }}
{% if cinder_barbican_enabled %}
[barbican]
auth_endpoint = {{ keystone_service_internaluri }}/v3
barbican_endpoint_type = internal
[key_manager]
backend = castellan.key_manager.barbican_key_manager.BarbicanKeyManager
backend = barbican
{% endif %}
[keystone_authtoken]