tripleo-heat-templates/environments/barbican-backend-simple-crypto.yaml
Ade Lee 2089a53afd Barbican: Add ability to specify KEK for simple crypto plugin
It adds the profile to enable the backend and a relevant environment
file that will be used.

Co-Authored-By: Juan Antonio Osorio Robles <jaosorior@redhat.com>
Depends-On: I44391b91b01bc03c9773410152e117ec6bbba491
Change-Id: I39ce9f203af0dea20f7c14ba8b484f600f4aad49
2017-11-02 15:31:17 +00:00

12 lines
508 B
YAML

# A Heat environment file to enable the barbican simple crypto backend. Note
# that barbican needs to be enabled in order to use this.
parameter_defaults:
# In order to use this backend, you need to uncomment this value and
# provide an appropriate KEK that barbican will use to encrypt secrets
# in the database.
#
# SimpleCryptoKek: The Key-Encryption-Key goes here.
resource_registry:
OS::TripleO::Services::BarbicanBackendSimpleCrypto: ../puppet/services/barbican-backend-simple-crypto.yaml