When key_manager.api_class is set in the cinder config file, the changes will not be reflected in the service and the service will always try to use ConfKeyManager.
cinder/keymgr/__init__.py includes some logic to maintain backwards compatibility, and sets the key manager to be ConfKeyManager if none is set. This code worked correctly at first because it used oslo config objects that had been properly initialized with values from the config file. However, as the key manager code was used in other areas of the project, it seems as though the logic to handle backwards compatibility is called on config objects too early in the service initialization process. Using a python debugger, it seems as though the first time the key manager initialization is called, the oslo config object passed in to the does not yet have the api_class option read in from the config file, and so the key manager initialization will override the option with the ConfKeyManager.
https:/