[openstack-dev] [Barbican] Multiple KMIP servers on a single barbican

Christopher N Solis cnsolis at us.ibm.com
Fri Jun 5 17:41:05 UTC 2015


Hey all.

I wanted to get people's opinion on allowing barbican to talk to multiple
KMIP servers.
I got good advice from Nathan and John and it seems like it would be pretty
easy keeping track of
which secret resides in which KMIP applicance. You would just store the url
in the DTO.
However, in order for barbican to be aware of all KMIP servers wouldn't
that mean that each
kmip server url would need to be in the barbican-api.conf file? Or
somewhere for barbican
to know that multiple kmip servers are available? I noticed that there is a
blueprint to introduce
the concept of a single active and multiple inactive secret store plugins
so I'm trying to stray away from
making multiple active plugins.

Regards,

  Chris Solis
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20150605/a9b2a07d/attachment.html>


More information about the OpenStack-dev mailing list