openstack
/
barbican
Code Issues Proposed changes

Add support for Vault Namespaces 

Change https://review.opendev.org/c/openstack/castellan/+/810124
added support for Vault namespaces to castellan.

In order to be able to use that functionality in Barbican, we need
to register and pass a corresponding config option in Barbican as well.

Change-Id: I4abb46dba51a00628c58eeb516074e1a149b8f35
This commit is contained in:
Pavlo Shchelokovskyy 2021-09-09 18:55:33 +03:00 committed by Pavlo Shchelokovskyy
parent aba0bd074e
commit 2a23260a34
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
barbican/plugin/vault_secret_store.py
View File

@ -46,6 +46,10 @@ vault_opts = [
cfg.BoolOpt('use_ssl',
default=False,
help=_('SSL Enabled/Disabled')),
cfg.StrOpt("namespace",
help=_("Vault Namespace to use for all requests. "
"Namespaces is a feature available in HasiCorp Vault "
"Enterprise only.")),
]
CONF = config.new_config()
@ -83,7 +87,8 @@ class VaultSecretStore(css.CastellanSecretStore):
vault_kv_mountpoint=conf.vault_plugin.kv_mountpoint,
vault_url=conf.vault_plugin.vault_url,
vault_ssl_ca_crt_file=conf.vault_plugin.ssl_ca_crt_file,
vault_use_ssl=conf.vault_plugin.use_ssl
vault_use_ssl=conf.vault_plugin.use_ssl,
vault_namespace=conf.vault_plugin.namespace
)
return vault_conf