Make key manager interface interoperable with Barbican

Registered by Brianna Poulos

The Cinder volume encryption feature [1] added to OpenStack for the Havana release included a basic key manager interface [2, 3]. Unfortunately, this key manager interface lacks an implementation for Barbican. Resolving this issue is a high priority for those who wish to use Barbican to manage their encryption keys.

The existing lack of interoperability can be remedied via an adapter that translates invocations of the existing interface into the appropriate python-barbicanclient calls.

References
[1] https://blueprints.launchpad.net/nova/+spec/encrypt-cinder-volumes
[2] https://review.openstack.org/#/c/30973/
[3] https://review.openstack.org/#/c/39292/

Blueprint information

Status:
Complete
Approver:
John Griffith
Priority:
Undefined
Drafter:
Brianna Poulos
Direction:
Needs approval
Assignee:
Brianna Poulos
Definition:
New
Series goal:
None
Implementation:
Implemented
Milestone target:
None
Started by
Brianna Poulos
Completed by
Brianna Poulos

Related branches

Sprints

Whiteboard

Gerrit topic: https://review.openstack.org/#q,topic:bp/encryption-with-barbican,n,z

Addressed by: https://review.openstack.org/104339
    Adds barbican keymgr wrapper

Gerrit topic: https://review.openstack.org/#q,topic:bp/s,n,z

Addressed by: https://review.openstack.org/106437
    Add Barbican wrapper specification

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.

Subscribers

No subscribers.