tacker/devstack
Yan Xing'an 07428d4985 Support to use barbican to encode vim password
1. Add new option 'use_barbican' in config file [vim_keys] section,
   default value is False for Pike.
2. Use fernet to encrypt vim password, and save the fernet key into
   barbican as a secret.
3. Add new fields 'key_type', 'secret_uuid' into VimAuth.auth_cred
   json string. secret_uuid is masked in vim-show or vim-list response.
4. Set the vim's default 'shared' value to False,
   vim can only be used by who created it.
5. Add a devref to show how to test.
6. Add a release note.

Implements: blueprint encryption-with-barbican
Partial-bug: #1667652

Change-Id: I5c779041df5a08a361b9aaefac7d241369732551
2017-06-26 07:23:10 -07:00
..
lib Support to use barbican to encode vim password 2017-06-26 07:23:10 -07:00
local.conf.example Support to use barbican to encode vim password 2017-06-26 07:23:10 -07:00
local.conf.standalone Allow to install tacker only env 2016-11-07 09:38:14 +00:00
local.sh.mysql_fix Re-organize tacker sample templates 2016-05-23 22:19:32 +00:00
plugin.sh Implement vim status update in conductor 2017-06-20 11:47:16 +08:00
README.rst Update DevStack README 2016-02-20 23:31:28 -05:00
settings Support to use barbican to encode vim password 2017-06-26 07:23:10 -07:00
vim_config.yaml Add domain name info into auth for keystone v3 2016-08-01 14:15:22 -07:00