Key Manager settings should moved from cinder::api to init

Bug #1886081 reported by Alan Bishop
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
puppet-cinder
Fix Released
Undecided
Alan Bishop

Bug Description

The Key Manager settings are currently configured by cinder::api, but cinder-api is not the only service that accesses the Key Manager. The cinder-volume and cinder-backup services need to be able to clone encryption keys. However, the parameters are not configured unless the node is also running the cinder-api service.

The problem can be fixed by moving the keymgr_XXX parameters from cinder::api to init.

Changed in puppet-cinder:
assignee: nobody → Alan Bishop (alan-bishop)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-cinder (master)

Fix proposed to branch: master
Review: https://review.opendev.org/739126

Changed in puppet-cinder:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-cinder (master)

Reviewed: https://review.opendev.org/739126
Committed: https://git.openstack.org/cgit/openstack/puppet-cinder/commit/?id=970fa8d7a1fdee5e599d6724b30f8cf1ee71dd99
Submitter: Zuul
Branch: master

commit 970fa8d7a1fdee5e599d6724b30f8cf1ee71dd99
Author: Alan Bishop <email address hidden>
Date: Thu Jul 2 10:16:49 2020 -0700

    Move the keymgr_XXX parameters from cinder::api to init

    The Key Manager is used by several cinder services, and not just
    cinder-api. For example, the cinder-backup and cinder-volume services
    use the Key Manager to clone encryption keys. Moving the Key Manager
    parameters from cinder::api to init ensures the settings are always
    configured, even when the cinder-api service isn't included in the
    deployment.

    Closes-Bug: #1886081
    Change-Id: Ie3c95da2c0dab83e3c4b7e10f8a3531301692da5

Changed in puppet-cinder:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.