roles/barbican/vars/main.yml

# Copyright (c) 2022 VEXXHOST, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.

_barbican_helm_values:
  endpoints: "{{ openstack_helm_endpoints }}"
  images:
    tags: "{{ atmosphere_images | vexxhost.atmosphere.openstack_helm_image_tags('barbican') }}"
  pod:
    replicas:
      api: 3
  conf:
    barbican:
      DEFAULT:
        log_config_append: null
      keystone_authtoken:
        # NOTE(okozachenko1203): We can remove it once the following is merged:
        #                        https://review.opendev.org/883066
        service_type: key-manager
      oslo_messaging_notifications:
        driver: noop
      simple_crypto_plugin:
        kek: "{{ barbican_kek }}"
    simple_crypto_kek_rewrap:
      old_kek: "{{ barbican_kek }}"

  manifests:
    ingress_api: false
    service_ingress_api: false