Red Hat Bugzilla – Bug 1333141
[RFE] Packaging Barbican for OSP (fully supported)
Last modified: 2018-06-27 09:26:26 EDT
Description of problem: Multiple use cases require Barbican currently. Octavia project needs Barbican in order to move forward, Cisco needs it for managing disk encryption keys (which is required for secure deployment of OpenStack). Have barbican packaged into RDO and added to delorean is necessary to support all of these use cases and address certain security concerns within OpenStack.
*** Bug 1403917 has been marked as a duplicate of this bug. ***
Following RPMs are available in 13 so far: openstack-barbican-6.0.0-0.20180123051321.3d3ea33.el7ost python-barbican-tests-tempest-0.0.1-0.20180122200349.5db05b8.el7ost puppet-barbican-12.2.0-0.20180119081204.eef142e.el7ost python-castellan-0.17.0-0.20180118222347.8e2929b.el7ost python-barbicanclient-4.5.2-0.20171003135933.714fce2.el7ost The following container images are also available: openstack-barbican-base-docker-13.0-4 openstack-barbican-api-docker-13.0-2 openstack-barbican-keystone-listener-docker-13.0-3 openstack-barbican-worker-docker-13.0-2 Please review if any other moving pieces are needed to move this to MODIFIED
LGTM
(overcloud) [stack@undercloud-0 testrun1]$ tempest run --regex test_volume_encryption {0} barbican_tempest_plugin.tests.scenario.test_volume_encryption.VolumeEncryptionTest.test_encrypted_cinder_volumes_cryptsetup [87.735962s] ... ok {0} barbican_tempest_plugin.tests.scenario.test_volume_encryption.VolumeEncryptionTest.test_encrypted_cinder_volumes_luks [69.108078s] ... ok ====== Totals ====== Ran: 2 tests in 187.0000 sec. - Passed: 2 - Skipped: 0 - Expected Fail: 0 - Unexpected Success: 0 - Failed: 0 Sum of execute time for each test: 156.8440 sec.
(overcloud) [stack@undercloud-0 testrun1]$ tempest run --regex test_ephemeral_disk_encryption {0} barbican_tempest_plugin.tests.scenario.test_ephemeral_disk_encryption.EphemeralStorageEncryptionTest.test_encrypted_ephemeral_lvm_storage [55.038254s] ... ok ====== Totals ====== Ran: 1 tests in 84.0000 sec. - Passed: 1 - Skipped: 0 - Expected Fail: 0 - Unexpected Success: 0 - Failed: 0 Sum of execute time for each test: 55.0383 sec.
[stack@undercloud-0 testrun1]$ tempest run --regex test_image_signing {0} barbican_tempest_plugin.tests.scenario.test_image_signing.ImageSigningTest.test_signed_image_upload_and_boot [29.944981s] ... ok {0} barbican_tempest_plugin.tests.scenario.test_image_signing.ImageSigningTest.test_signed_image_upload_boot_failure [12.585326s] ... ok ====== Totals ====== Ran: 2 tests in 72.0000 sec. - Passed: 2 - Skipped: 0 - Expected Fail: 0 - Unexpected Success: 0 - Failed: 0 Sum of execute time for each test: 42.5303 sec.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2018:2086