tripleo-heat-templates/releasenotes/notes/barbican-thales-ha-581fbe9b5ef4dc87.yaml
Ade Lee 75857d3a28 Add parameters to allow multiple nshield HSMs
With this change, it is possible to configure Barbican to connect
to multiple nShield HSMs in HA mode.

Change-Id: Id086b5e661e01991913c20c0b354800a9b6e2674
2021-02-16 17:43:29 -05:00

12 lines
536 B
YAML

---
features:
- The logic to configure the connection from barbican to nShield HSMs has
been augmented to parse a nshield_hsms parameter, which allows the
specification of multiple HSMs. The underlying ansible role
(ansible-role-thales-hsm) will configure the HSMs in load sharing mode
to provide HA.
deprecations:
- Some parameters within ThalesVars have been deprecated. These are -
thales_hsm_ip_address and thales_hsm_config_location. See
environments/barbican-backend-pkcs11-thales.yaml for details.