openstack/openstack-manuals
Code Issues Proposed changes

New key manager config update

Browse Source 
A configuration guide update for nova.conf and cinder.conf is needed
due to a new key manager interface. The interface is based on the
Castellan key manager which provides a consistent front-end interface
to support different back end key managers (Barbican is the default
back-end.) The code patch for Nova is merged, and corresponding patch
for Cinder is in review.

Depends-On: Ib563b0ea4b8b4bc1833bf52bf49a68546c384996
Depends-On: Ief8885bb4ca8d62b03cf1a52c25dd0e62c835bfe
Closes-Bug: #1592026

Change-Id: I99bcaf014c210f2598c1809b52ea46967b025a74
This commit is contained in:
Bruce Benjamin 2016-06-27 12:55:52 -04:00 committed by bruce-benjamin
parent 5be2d01514
commit 8a2467162f
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
doc/config-reference/source/block-storage/volume-encryption.rst
View File

@ -17,13 +17,13 @@ Steps to update ``cinder-api`` servers:
#. Edit the ``/etc/cinder/cinder.conf`` file to use Key management service
as follows:
* Look for the ``[keymgr]`` section.
* Look for the ``[key_manager]`` section.
* Enter a new line directly below ``[keymgr]`` with the following:
* Enter a new line directly below ``[key_manager]`` with the following:
.. code-block:: ini
api_class = cinder.keymgr.barbican.BarbicanKeyManager
api_class = cinder.key_manager.barbican.BarbicanKeyManager
.. note::
@ -41,8 +41,8 @@ Update ``nova-compute`` servers:
.. code-block:: ini
[keymgr]
api_class = nova.keymgr.barbican.BarbicanKeyManager
[key_manager]
api_class = nova.key_manager.barbican.BarbicanKeyManager
#. Restart ``nova-compute``.