From 1e3792470f272fa4e08cfe29b9eb8ab49b1d774d Mon Sep 17 00:00:00 2001
From: Ade Lee <alee@redhat.com>
Date: Wed, 29 Nov 2017 23:35:17 -0500
Subject: [PATCH] Add glance config for barbican

Configure glance to use barbican as a key manager
when barbican is enabled for image signing.

Change-Id: I2cad0b81eeab07785dfd4bb66e582d359504b0aa
---
 puppet/services/barbican-api.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/puppet/services/barbican-api.yaml b/puppet/services/barbican-api.yaml
index fb865960c8..7fa43b8f58 100644
--- a/puppet/services/barbican-api.yaml
+++ b/puppet/services/barbican-api.yaml
@@ -185,6 +185,13 @@ outputs:
             get_param: [EndpointMap, BarbicanInternal, uri]
           cinder::api::keymgr_encryption_auth_url:
             get_param: [EndpointMap, KeystoneInternal, uri_no_suffix]
+        glance_api:
+          glance::api::keymgr_backend: >
+            castellan.key_manager.barbican_key_manager.BarbicanKeyManager
+          glance::api::keymgr_encryption_api_url:
+            get_param: [EndpointMap, BarbicanInternal, uri]
+          glance::api::keymgr_encryption_auth_url:
+            get_param: [EndpointMap, KeystoneInternal, uri_no_suffix]
       metadata_settings:
         get_attr: [ApacheServiceBase, role_data, metadata_settings]
       upgrade_tasks: