openstack/tripleo-heat-templates
Code Issues Proposed changes

scenario002: configure SimpleCryptoKek

Browse Source 
Some work in progress is made to enable a default plugin with a
generated key for Barbican but until this is done, let's set the
parameters in the scenario002 environment, so we can start testing
boot from encrypted volume.

Change-Id: I3d4aea0959f31f0978c9774892b7c88d2eed6ce4
This commit is contained in:
Emilien Macchi 2017-12-01 14:33:17 -08:00
parent ae34bee527
commit a76090aca7
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
ci/environments/scenario002-multinode-containers.yaml
View File

@ -13,6 +13,7 @@ resource_registry:
OS::TripleO::Services::MySQL: ../../docker/services/pacemaker/database/mysql.yaml
OS::TripleO::Services::CinderBackup: ../../docker/services/pacemaker/cinder-backup.yaml
OS::TripleO::Services::CinderVolume: ../../docker/services/pacemaker/cinder-volume.yaml
OS::TripleO::Services::BarbicanBackendSimpleCrypto: ../../puppet/services/barbican-backend-simple-crypto.yaml
OS::TripleO::Services::Keepalived: OS::Heat::None
OS::TripleO::Tasks::ControllerPreConfig: OS::Heat::None
OS::TripleO::Tasks::ControllerPostConfig: OS::Heat::None
@ -63,6 +64,7 @@ parameter_defaults:
- OS::TripleO::Services::SwiftStorage
- OS::TripleO::Services::SwiftRingBuilder
- OS::TripleO::Services::BarbicanApi
- OS::TripleO::Services::BarbicanBackendSimpleCrypto
- OS::TripleO::Services::Zaqar
- OS::TripleO::Services::Ec2Api
- OS::TripleO::Services::TripleoPackages
@ -89,3 +91,5 @@ parameter_defaults:
ZaqarManagementStore: 'sqlalchemy'
SwiftCeilometerPipelineEnabled: false
NotificationDriver: 'noop'
# For now, we hardcode it but soon it'll be generated in tripleo-common
SimpleCryptoKek: dGhpcnR5X3R3b19ieXRlX2tleWJsYWhibGFoYmxhaGg=