openstack/puppet-openstack-integration
Code Issues Proposed changes

Enable service user token for Barbican key manager

Browse Source 
We already configure the auth options for this feature but did not
enable it actually.

Change-Id: I2b117ba6ddb962632775afa8bcb5aa01911527f0
This commit is contained in:
Takashi Kajinami 2024-03-20 02:41:13 +09:00
parent 9bb4d22f1d
commit 0775bb5580
3 changed files with 9 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
manifests/cinder.pp
View File

@ -62,8 +62,9 @@ class openstack_integration::cinder (
backend => 'castellan.key_manager.barbican_key_manager.BarbicanKeyManager'
}
class { 'cinder::key_manager::barbican':
barbican_endpoint => "${::openstack_integration::config::base_url}:9311",
auth_endpoint => "${::openstack_integration::config::keystone_auth_uri}/v3"
barbican_endpoint => "${::openstack_integration::config::base_url}:9311",
auth_endpoint => $::openstack_integration::config::keystone_auth_uri,
send_service_user_token => true,
}
class { 'cinder::key_manager::barbican::service_user':
password => 'a_big_secret',

5
manifests/glance.pp
View File

@ -148,8 +148,9 @@ class openstack_integration::glance (
backend => 'castellan.key_manager.barbican_key_manager.BarbicanKeyManager'
}
class { 'glance::key_manager::barbican':
barbican_endpoint => "${::openstack_integration::config::base_url}:9311",
auth_endpoint => "${::openstack_integration::config::keystone_auth_uri}/v3"
barbican_endpoint => "${::openstack_integration::config::base_url}:9311",
auth_endpoint => $::openstack_integration::config::keystone_auth_uri,
send_service_user_token => true,
}
class { 'glance::key_manager::barbican::service_user':
password => 'a_big_secret',

5
manifests/nova.pp
View File

@ -205,8 +205,9 @@ class openstack_integration::nova (
backend => 'castellan.key_manager.barbican_key_manager.BarbicanKeyManager'
}
class { 'nova::key_manager::barbican':
auth_endpoint => "${::openstack_integration::config::keystone_auth_uri}/v3",
barbican_endpoint => "${::openstack_integration::config::base_url}:9311"
auth_endpoint => $::openstack_integration::config::keystone_auth_uri,
barbican_endpoint => "${::openstack_integration::config::base_url}:9311",
send_service_user_token => true,
}
class { 'nova::key_manager::barbican::service_user':
password => 'a_big_secret',