# A Heat environment file to enable the barbican PKCS11 crypto backend. Note
# that barbican needs to be enabled in order to use this.
parameter_defaults:
  # In order to use this backend, you need to uncomment these values and
  # provide the appropriate values.
  #
  # BarbicanPkcs11CryptoLibraryPath: Path to vendor PKCS11 library
  # BarbicanPkcs11CryptoLogin: Password to login to PKCS11 session
  # BarbicanPkcs11CryptoMKEKLabel: Label for Master KEK
  # BarbicanPkcs11CryptoMKEKLength: Length of Master KEK in bytes
  # BarbicanPkcs11CryptoHMACLabel: Label for the HMAC key
  # BarbicanPkcs11CryptoSlotId: Slot Id for the HSM
  # BarbicanPkcs11CryptoGlobalDefault: Whether this plugin is the global default plugin
  BarbicanPkcs11CryptoEnabled: true

resource_registry:
  OS::TripleO::Services::BarbicanBackendPkcs11Crypto: ../puppet/services/barbican-backend-pkcs11-crypto.yaml