tacker/tacker/keymgr
Yan Xing'an 07428d4985 Support to use barbican to encode vim password
1. Add new option 'use_barbican' in config file [vim_keys] section,
   default value is False for Pike.
2. Use fernet to encrypt vim password, and save the fernet key into
   barbican as a secret.
3. Add new fields 'key_type', 'secret_uuid' into VimAuth.auth_cred
   json string. secret_uuid is masked in vim-show or vim-list response.
4. Set the vim's default 'shared' value to False,
   vim can only be used by who created it.
5. Add a devref to show how to test.
6. Add a release note.

Implements: blueprint encryption-with-barbican
Partial-bug: #1667652

Change-Id: I5c779041df5a08a361b9aaefac7d241369732551
2017-06-26 07:23:10 -07:00
..
__init__.py Support to use barbican to encode vim password 2017-06-26 07:23:10 -07:00
barbican_key_manager.py Support to use barbican to encode vim password 2017-06-26 07:23:10 -07:00
exception.py Support to use barbican to encode vim password 2017-06-26 07:23:10 -07:00
key_manager.py Support to use barbican to encode vim password 2017-06-26 07:23:10 -07:00