Make key manager interface interoperable with Barbican

Registered by Joel Coffman

The Cinder volume encryption feature [1] added to OpenStack for the Havana release included a basic key manager interface [2, 3]. Unfortunately, this key manager interface lacks an implementation for Barbican. Resolving this issue is a high priority for those who wish to use Barbican to manage their encryption keys.

The existing lack of interoperability can be remedied via an adapter that translates invocations of the existing interface into the appropriate python-barbicanclient calls.

References

[1] https://blueprints.launchpad.net/nova/+spec/encrypt-cinder-volumes
[2] https://review.openstack.org/#/c/30973/
[3] https://review.openstack.org/#/c/39292/

Blueprint information

Status:
Complete
Approver:
John Garbutt
Priority:
Low
Drafter:
Joel Coffman
Direction:
Approved
Assignee:
Brianna Poulos
Definition:
Approved
Series goal:
Accepted for kilo
Implementation:
Implemented
Milestone target:
milestone icon 2015.1.0
Started by
Joel Coffman
Completed by
Thierry Carrez

Related branches

Sprints

Whiteboard

Gerrit topic: https://review.openstack.org/#q,topic:bp/encryption-with-barbican,n,z

Addressed by: https://review.openstack.org/94918
    Add Barbican wrapper specification

Will set priority once we see some code up for review --johnthetubaguy (17th June 2014)

Addressed by: https://review.openstack.org/104001
    Adds barbican keymgr wrapper

Gerrit topic: https://review.openstack.org/#q,topic:bp/lvm-ephemeral-storage-encryption,n,z

https://review.openstack.org/#/c/104001/ Has a +2, so leaving in juno for now. --johnthetubaguy 2nd September 2014

Sorry, this has not yet been approved, so this will have to wait until kilo. Please contact me on IRC, or via email, for more details. Thank you. --johnthetubaguy 3rd September 2014

Please note, we really need a kilo spec before this is approved for kilo --johnthetubaguy 2nd December 2014

Addressed by: https://review.openstack.org/140144
    Add Barbican Wrapper Specification

Note that the spec has been merged to Kilo. --bpoulos 15th December 2014

One remaining patch, has negative reviews right now

======
pending
======

Addressed by: https://review.openstack.org/104001
    Adds barbican keymgr wrapper

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.