From c0d7ae7a690b2c0392ba698ebda4d2b86c4ca417 Mon Sep 17 00:00:00 2001
From: Alan Bishop <abishop@redhat.com>
Date: Wed, 6 Dec 2023 18:14:02 -0500
Subject: [PATCH] Configure barbican access

Add the [barbican] settings so that all cinder services can access
barbican via its internal endpoint. Barbican is already the default
key manager.

Jira: OSPRH-1376
---
 templates/cinder/config/00-global-defaults.conf | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/templates/cinder/config/00-global-defaults.conf b/templates/cinder/config/00-global-defaults.conf
index 0c97b74c..1fb1d670 100644
--- a/templates/cinder/config/00-global-defaults.conf
+++ b/templates/cinder/config/00-global-defaults.conf
@@ -30,6 +30,10 @@ osapi_volume_workers = 4
 control_exchange = openstack
 api_paste_config = /etc/cinder/api-paste.ini
 
+[barbican]
+auth_endpoint = {{ .KeystoneInternalURL }}
+barbican_endpoint_type = internal
+
 [database]
 connection = {{ .DatabaseConnection }}
 max_retries = -1