Rely on barbican to manage barbican keys association of cinder-volume and cinder-backup services

Bug #1615473 reported by Jyoti Ranjan
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Cinder
New
Undecided
Unassigned

Bug Description

The bug is in continuation of issue seen at https://review.openstack.org/#/c/351005/. The suggestion was to decouple cinder backup service with cinder volume service deployment. As of now,
cinder backup service assumes that keyring for ceph for volume operation is present on node running cinder backup service instance. It is an implicit assumption and expected to be
fullfilled by cloud deployer. We can break this hard coupling in two ways:

1. [Medium term] Pass the keyring over the wire as part of response of initialize_connection() call.
2. [short term] Relying on barbican to manage barbican keys association of cinder-volume and cinder-backup services. Cons: cinder will have dependency on barbican

This defect is to address the coupling aspect in long term i.e. option (2).

Related defect:

https://review.openstack.org/#/c/351005/: tells about why we need to decouple cinder backup and cinder volume service
https://bugs.launchpad.net/cinder/+bug/1615472: a medium term solution to decouple ring dependency between cinder volume and cinder backup service

Tags: backup ceph rbd
Eric Harney (eharney)
tags: added: backup ceph rbd
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.