openstack
/
puppet-openstack-integration
Code Issues Proposed changes

Enable service user token for Barbican key manager 

We already configure the auth options for this feature but did not
enable it actually.

Change-Id: I2b117ba6ddb962632775afa8bcb5aa01911527f0
This commit is contained in:
Takashi Kajinami 2024-03-20 02:41:13 +09:00
parent 9bb4d22f1d
commit 0775bb5580
3 changed files with 9 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
manifests/cinder.pp
View File

@ -62,8 +62,9 @@ class openstack_integration::cinder (
backend => 'castellan.key_manager.barbican_key_manager.BarbicanKeyManager'
}
class { 'cinder::key_manager::barbican':
barbican_endpoint => "${::openstack_integration::config::base_url}:9311",
auth_endpoint => "${::openstack_integration::config::keystone_auth_uri}/v3"
barbican_endpoint => "${::openstack_integration::config::base_url}:9311",
auth_endpoint => $::openstack_integration::config::keystone_auth_uri,
send_service_user_token => true,
}
class { 'cinder::key_manager::barbican::service_user':
password => 'a_big_secret',

5
manifests/glance.pp
View File

@ -148,8 +148,9 @@ class openstack_integration::glance (
backend => 'castellan.key_manager.barbican_key_manager.BarbicanKeyManager'
}
class { 'glance::key_manager::barbican':
barbican_endpoint => "${::openstack_integration::config::base_url}:9311",
auth_endpoint => "${::openstack_integration::config::keystone_auth_uri}/v3"
barbican_endpoint => "${::openstack_integration::config::base_url}:9311",
auth_endpoint => $::openstack_integration::config::keystone_auth_uri,
send_service_user_token => true,
}
class { 'glance::key_manager::barbican::service_user':
password => 'a_big_secret',

5
manifests/nova.pp
View File

@ -205,8 +205,9 @@ class openstack_integration::nova (
backend => 'castellan.key_manager.barbican_key_manager.BarbicanKeyManager'
}
class { 'nova::key_manager::barbican':
auth_endpoint => "${::openstack_integration::config::keystone_auth_uri}/v3",
barbican_endpoint => "${::openstack_integration::config::base_url}:9311"
auth_endpoint => $::openstack_integration::config::keystone_auth_uri,
barbican_endpoint => "${::openstack_integration::config::base_url}:9311",
send_service_user_token => true,
}
class { 'nova::key_manager::barbican::service_user':
password => 'a_big_secret',