Bug 1333141

Summary:	[RFE] Packaging Barbican for OSP (fully supported)
Product:	Red Hat OpenStack	Reporter:	Maxime Payant-Chartier <mpayantc>
Component:	openstack-barbican	Assignee:	Ade Lee <alee>
Status:	CLOSED ERRATA	QA Contact:	Prasanth Anbalagan <panbalag>
Severity:	high	Docs Contact:
Priority:	high
Version:	13.0 (Queens)	CC:	alee, apevec, atelang, brault, bschmaus, fduthill, gkadam, hrybacki, ibodunov, jliberma, jraju, jschluet, kbasil, knylande, lhh, ltoscano, markmc, mlinden, nkinder, panbalag, pcaruana, pneedle, rfreire, sclewis, smerrow, smulholland, srevivo, tshefi, tvignaud, tvvcox, vumrao, yohmura
Target Milestone:	beta	Keywords:	FutureFeature, Triaged
Target Release:	13.0 (Queens)
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	openstack-barbican-6.0.0-0.20180123051321.3d3ea33.el7ost python-barbican-tests-tempest-0.0.1-0.20180122200349.5db05b8.el7ost puppet-barbican-12.2.0-0.20180119081204.eef142e.el7ost python-castellan-0.17.0-0.20180118222347.8e2929b.el7ost	Doc Type:	Enhancement
Doc Text:	Cause: Consequence: Fix: Result:	Story Points:	---
Clone Of:		Environment:
Last Closed:	2018-06-27 13:26:26 UTC	Type:	Feature Request
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1434225, 1305024, 1365571, 1403917, 1412823, 1419556, 1419948, 1433388, 1465537

Description Maxime Payant-Chartier 2016-05-04 18:39:37 UTC

Description of problem:

Multiple use cases require Barbican currently. Octavia project needs Barbican in order to move forward, Cisco needs it for managing disk encryption keys (which is required for secure deployment of OpenStack).


Have barbican packaged into RDO and added to delorean is necessary to support all of these use cases and address certain security concerns within OpenStack.

Comment 12 Nathan Kinder 2017-03-17 17:50:46 UTC

*** Bug 1403917 has been marked as a duplicate of this bug. ***

Comment 36 Jon Schlueter 2018-02-01 19:43:28 UTC

Following RPMs are available in 13 so far:

openstack-barbican-6.0.0-0.20180123051321.3d3ea33.el7ost
python-barbican-tests-tempest-0.0.1-0.20180122200349.5db05b8.el7ost
puppet-barbican-12.2.0-0.20180119081204.eef142e.el7ost
python-castellan-0.17.0-0.20180118222347.8e2929b.el7ost
python-barbicanclient-4.5.2-0.20171003135933.714fce2.el7ost

The following container images are also available:

openstack-barbican-base-docker-13.0-4
openstack-barbican-api-docker-13.0-2
openstack-barbican-keystone-listener-docker-13.0-3
openstack-barbican-worker-docker-13.0-2

Please review if any other moving pieces are needed to move this to MODIFIED

Comment 37 Ade Lee 2018-02-01 21:36:35 UTC

LGTM

Comment 40 Prasanth Anbalagan 2018-03-20 23:47:14 UTC

(overcloud) [stack@undercloud-0 testrun1]$ tempest run --regex test_volume_encryption
{0} barbican_tempest_plugin.tests.scenario.test_volume_encryption.VolumeEncryptionTest.test_encrypted_cinder_volumes_cryptsetup [87.735962s] ... ok
{0} barbican_tempest_plugin.tests.scenario.test_volume_encryption.VolumeEncryptionTest.test_encrypted_cinder_volumes_luks [69.108078s] ... ok

======
Totals
======
Ran: 2 tests in 187.0000 sec.
 - Passed: 2
 - Skipped: 0
 - Expected Fail: 0
 - Unexpected Success: 0
 - Failed: 0
Sum of execute time for each test: 156.8440 sec.

Comment 41 Prasanth Anbalagan 2018-03-21 02:05:10 UTC

(overcloud) [stack@undercloud-0 testrun1]$ tempest run --regex test_ephemeral_disk_encryption
{0} barbican_tempest_plugin.tests.scenario.test_ephemeral_disk_encryption.EphemeralStorageEncryptionTest.test_encrypted_ephemeral_lvm_storage [55.038254s] ... ok

======
Totals
======
Ran: 1 tests in 84.0000 sec.
 - Passed: 1
 - Skipped: 0
 - Expected Fail: 0
 - Unexpected Success: 0
 - Failed: 0
Sum of execute time for each test: 55.0383 sec.

Comment 42 Prasanth Anbalagan 2018-03-21 21:29:15 UTC

[stack@undercloud-0 testrun1]$ tempest run --regex test_image_signing
{0} barbican_tempest_plugin.tests.scenario.test_image_signing.ImageSigningTest.test_signed_image_upload_and_boot [29.944981s] ... ok
{0} barbican_tempest_plugin.tests.scenario.test_image_signing.ImageSigningTest.test_signed_image_upload_boot_failure [12.585326s] ... ok

======
Totals
======
Ran: 2 tests in 72.0000 sec.
 - Passed: 2
 - Skipped: 0
 - Expected Fail: 0
 - Unexpected Success: 0
 - Failed: 0
Sum of execute time for each test: 42.5303 sec.

Comment 46 errata-xmlrpc 2018-06-27 13:26:26 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2018:2086

Comment 48 Red Hat Bugzilla 2023-09-14 23:59:28 UTC

The needinfo request[s] on this closed bug have been removed as they have been unresolved for 500 days