commit 8f9e3888d7e0207b44958cd98144965bb7a92792
author Oleksandr Bryndzii <obryndzii@mirantis.com> Fri Sep 28 23:08:56 2018 +0000
committer Oleksandr Bryndzii <obryndzii@mirantis.com> Tue Oct 09 17:41:35 2018 +0300
tree c44e88eb4d507aa98bb6d0f8d5d48c928d98e521
parent 9b80ba08ffdb494bb8fdcda678924607fe894aea

Implement cinder memcache security strategy

Provides an option to authenticate and optionally encrypt the token
data stored in the cache:
memcache_security_strategy = MAC/ENCRYPT
memcache_secret_key = secret_key

Change-Id: I06dc593e930992291147614d111aa8c34d9f7ee5
Related-Prod: PROD-22099

tests/pillar/control_cluster.sls

diff --git a/tests/pillar/control_cluster.sls b/tests/pillar/control_cluster.sls
index a9628fb..f85a8c8 100644
--- a/tests/pillar/control_cluster.sls
+++ b/tests/pillar/control_cluster.sls
@@ -50,6 +50,10 @@
         port: 11211
       - host: 127.0.0.1
         port: 11211
+      security:
+        enabled: true
+        strategy: ENCRYPT
+        secret_key: secret
     storage:
       engine: storwize
       host: 192.168.0.1

tests/pillar/control_cluster_intree_wsgi.sls

diff --git a/tests/pillar/control_cluster_intree_wsgi.sls b/tests/pillar/control_cluster_intree_wsgi.sls
index 4c078d4..9ee5d9b 100644
--- a/tests/pillar/control_cluster_intree_wsgi.sls
+++ b/tests/pillar/control_cluster_intree_wsgi.sls
@@ -50,6 +50,10 @@
         port: 11211
       - host: 127.0.0.1
         port: 11211
+      security:
+        enabled: true
+        strategy: ENCRYPT
+        secret_key: secret
     storage:
       engine: storwize
       host: 192.168.0.1

tests/pillar/control_single.sls

diff --git a/tests/pillar/control_single.sls b/tests/pillar/control_single.sls
index 24784bc..655b552 100644
--- a/tests/pillar/control_single.sls
+++ b/tests/pillar/control_single.sls
@@ -48,6 +48,15 @@
     policy:
       'volume:delete': 'rule:admin_or_owner'
       'volume:extend':
+    cache:
+      engine: memcached
+      members:
+      - host: 127.0.0.1
+        port: 11211
+      security:
+        enabled: true
+        strategy: ENCRYPT
+        secret_key: secret
 apache:
   server:
     enabled: true

tests/pillar/volume_single.sls

diff --git a/tests/pillar/volume_single.sls b/tests/pillar/volume_single.sls
index d243510..9ab908c 100644
--- a/tests/pillar/volume_single.sls
+++ b/tests/pillar/volume_single.sls
@@ -45,6 +45,15 @@
       port: 22
       user: username
       password: pass
+    cache:
+      engine: memcached
+      members:
+      - host: 127.0.0.1
+        port: 11211
+      security:
+        enabled: true
+        strategy: ENCRYPT
+        secret_key: secret
 apache:
   server:
     enabled: true

tests/pillar/volume_single_barbican.sls

diff --git a/tests/pillar/volume_single_barbican.sls b/tests/pillar/volume_single_barbican.sls
index e1da081..ff78f89 100644
--- a/tests/pillar/volume_single_barbican.sls
+++ b/tests/pillar/volume_single_barbican.sls
@@ -3,7 +3,7 @@
     enabled: true
     version: ocata
     barbican:
-      enabled: true     
+      enabled: true
     osapi:
       host: 127.0.0.1
     database: