From 1e3792470f272fa4e08cfe29b9eb8ab49b1d774d Mon Sep 17 00:00:00 2001 From: Ade Lee <alee@redhat.com> Date: Wed, 29 Nov 2017 23:35:17 -0500 Subject: [PATCH] Add glance config for barbican Configure glance to use barbican as a key manager when barbican is enabled for image signing. Change-Id: I2cad0b81eeab07785dfd4bb66e582d359504b0aa --- puppet/services/barbican-api.yaml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/puppet/services/barbican-api.yaml b/puppet/services/barbican-api.yaml index fb865960c8..7fa43b8f58 100644 --- a/puppet/services/barbican-api.yaml +++ b/puppet/services/barbican-api.yaml @@ -185,6 +185,13 @@ outputs: get_param: [EndpointMap, BarbicanInternal, uri] cinder::api::keymgr_encryption_auth_url: get_param: [EndpointMap, KeystoneInternal, uri_no_suffix] + glance_api: + glance::api::keymgr_backend: > + castellan.key_manager.barbican_key_manager.BarbicanKeyManager + glance::api::keymgr_encryption_api_url: + get_param: [EndpointMap, BarbicanInternal, uri] + glance::api::keymgr_encryption_auth_url: + get_param: [EndpointMap, KeystoneInternal, uri_no_suffix] metadata_settings: get_attr: [ApacheServiceBase, role_data, metadata_settings] upgrade_tasks: