)]}'
{"doc/source/configure-barbican.rst":[{"author":{"_account_id":13095,"name":"Marc Gariépy","email":"gariepy.marc@gmail.com","username":"mgariepy"},"change_message_id":"d1d539659d2c05fae4dfc2b0ff48b4227dab4915","unresolved":true,"context_lines":[{"line_number":4,"context_line":""},{"line_number":5,"context_line":"First of all we need to set env.d parameters and define hosts where we want to"},{"line_number":6,"context_line":"run barbican-api. For that we can either extend `openstack_user_config.yml` or"},{"line_number":7,"context_line":"add file `/etc/openstack_deploy/conf.d/barbican.conf` with the following"},{"line_number":8,"context_line":"content:"},{"line_number":9,"context_line":""},{"line_number":10,"context_line":" .. code-block:: yaml"}],"source_content_type":"text/x-rst","patch_set":5,"id":"35bca36a_262c6e16","line":7,"range":{"start_line":7,"start_character":48,"end_line":7,"end_character":52},"updated":"2021-02-16 16:44:45.000000000","message":"barbican.yml ?","commit_id":"c908cf5b794ef5a0fe8fc6ad045ff1fdbd193f11"},{"author":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"change_message_id":"403fce8d58cd67365a84460e42b3e5a66bb65894","unresolved":false,"context_lines":[{"line_number":4,"context_line":""},{"line_number":5,"context_line":"First of all we need to set env.d parameters and define hosts where we want to"},{"line_number":6,"context_line":"run barbican-api. For that we can either extend `openstack_user_config.yml` or"},{"line_number":7,"context_line":"add file `/etc/openstack_deploy/conf.d/barbican.conf` with the following"},{"line_number":8,"context_line":"content:"},{"line_number":9,"context_line":""},{"line_number":10,"context_line":" .. code-block:: yaml"}],"source_content_type":"text/x-rst","patch_set":5,"id":"74680b0c_f0940bbd","line":7,"range":{"start_line":7,"start_character":48,"end_line":7,"end_character":52},"in_reply_to":"35bca36a_262c6e16","updated":"2021-02-16 19:23:05.000000000","message":"Done","commit_id":"c908cf5b794ef5a0fe8fc6ad045ff1fdbd193f11"},{"author":{"_account_id":13095,"name":"Marc Gariépy","email":"gariepy.marc@gmail.com","username":"mgariepy"},"change_message_id":"d1d539659d2c05fae4dfc2b0ff48b4227dab4915","unresolved":true,"context_lines":[{"line_number":64,"context_line":"MKEK is Master Key Encryption Key, which is used to encrypt KEKs that are"},{"line_number":65,"context_line":"uniq and created per project. All keys within project are encrypted with KEK."},{"line_number":66,"context_line":""},{"line_number":67,"context_line":"You need to create a DPOD sevice and complete an initialization of the"},{"line_number":68,"context_line":"Luna slot. You can follow `lunacm documentation \u003chttps://thalesdocs.com/gphsm/luna/6.3/docs/network/Content/configuration/ppso_partition_config/partition-so_action_to_config_pw-ppso_partition_2.htm\u003e`_"},{"line_number":69,"context_line":"for more details. As a result of setup you should have:"},{"line_number":70,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"fd122aac_933914b5","line":67,"range":{"start_line":67,"start_character":21,"end_line":67,"end_character":25},"updated":"2021-02-16 16:44:45.000000000","message":"maybe define the acronym ?","commit_id":"c908cf5b794ef5a0fe8fc6ad045ff1fdbd193f11"},{"author":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"change_message_id":"403fce8d58cd67365a84460e42b3e5a66bb65894","unresolved":false,"context_lines":[{"line_number":64,"context_line":"MKEK is Master Key Encryption Key, which is used to encrypt KEKs that are"},{"line_number":65,"context_line":"uniq and created per project. All keys within project are encrypted with KEK."},{"line_number":66,"context_line":""},{"line_number":67,"context_line":"You need to create a DPOD sevice and complete an initialization of the"},{"line_number":68,"context_line":"Luna slot. You can follow `lunacm documentation \u003chttps://thalesdocs.com/gphsm/luna/6.3/docs/network/Content/configuration/ppso_partition_config/partition-so_action_to_config_pw-ppso_partition_2.htm\u003e`_"},{"line_number":69,"context_line":"for more details. As a result of setup you should have:"},{"line_number":70,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"765a0050_89644ff5","line":67,"range":{"start_line":67,"start_character":21,"end_line":67,"end_character":25},"in_reply_to":"fd122aac_933914b5","updated":"2021-02-16 19:23:05.000000000","message":"Done","commit_id":"c908cf5b794ef5a0fe8fc6ad045ff1fdbd193f11"},{"author":{"_account_id":25023,"name":"Jonathan Rosser","email":"jonathan.rosser@rd.bbc.co.uk","username":"jrosser"},"change_message_id":"be761e4aecc54664e4d6b226f842c8b04cfefcd7","unresolved":true,"context_lines":[{"line_number":62,"context_line":"decrypt keys that are stored in Barbican MySQL database."},{"line_number":63,"context_line":""},{"line_number":64,"context_line":"MKEK is Master Key Encryption Key, which is used to encrypt KEKs that are"},{"line_number":65,"context_line":"uniq and created per project. All keys within project are encrypted with KEK."},{"line_number":66,"context_line":""},{"line_number":67,"context_line":"You need to create a Data Protection On Demand sevice and complete an"},{"line_number":68,"context_line":"initialization of the Luna slot. You can follow `lunacm documentation \u003chttps://thalesdocs.com/gphsm/luna/6.3/docs/network/Content/configuration/ppso_partition_config/partition-so_action_to_config_pw-ppso_partition_2.htm\u003e`_"}],"source_content_type":"text/x-rst","patch_set":6,"id":"3cbe52c2_d93676d2","line":65,"range":{"start_line":65,"start_character":46,"end_line":65,"end_character":53},"updated":"2021-02-17 17:41:48.000000000","message":"a project / the project ?","commit_id":"18d1ee4e6d14c7f781cb7ceb00985a2126a3dbe7"},{"author":{"_account_id":25023,"name":"Jonathan Rosser","email":"jonathan.rosser@rd.bbc.co.uk","username":"jrosser"},"change_message_id":"be761e4aecc54664e4d6b226f842c8b04cfefcd7","unresolved":true,"context_lines":[{"line_number":62,"context_line":"decrypt keys that are stored in Barbican MySQL database."},{"line_number":63,"context_line":""},{"line_number":64,"context_line":"MKEK is Master Key Encryption Key, which is used to encrypt KEKs that are"},{"line_number":65,"context_line":"uniq and created per project. All keys within project are encrypted with KEK."},{"line_number":66,"context_line":""},{"line_number":67,"context_line":"You need to create a Data Protection On Demand sevice and complete an"},{"line_number":68,"context_line":"initialization of the Luna slot. You can follow `lunacm documentation \u003chttps://thalesdocs.com/gphsm/luna/6.3/docs/network/Content/configuration/ppso_partition_config/partition-so_action_to_config_pw-ppso_partition_2.htm\u003e`_"}],"source_content_type":"text/x-rst","patch_set":6,"id":"99e792e5_773948cf","line":65,"range":{"start_line":65,"start_character":0,"end_line":65,"end_character":4},"updated":"2021-02-17 17:41:48.000000000","message":"unique","commit_id":"18d1ee4e6d14c7f781cb7ceb00985a2126a3dbe7"},{"author":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"change_message_id":"146d9191d608cf87d0c1cd03a0a6a7513d23b48a","unresolved":false,"context_lines":[{"line_number":62,"context_line":"decrypt keys that are stored in Barbican MySQL database."},{"line_number":63,"context_line":""},{"line_number":64,"context_line":"MKEK is Master Key Encryption Key, which is used to encrypt KEKs that are"},{"line_number":65,"context_line":"uniq and created per project. All keys within project are encrypted with KEK."},{"line_number":66,"context_line":""},{"line_number":67,"context_line":"You need to create a Data Protection On Demand sevice and complete an"},{"line_number":68,"context_line":"initialization of the Luna slot. You can follow `lunacm documentation \u003chttps://thalesdocs.com/gphsm/luna/6.3/docs/network/Content/configuration/ppso_partition_config/partition-so_action_to_config_pw-ppso_partition_2.htm\u003e`_"}],"source_content_type":"text/x-rst","patch_set":6,"id":"47719909_d6b7f6ce","line":65,"range":{"start_line":65,"start_character":46,"end_line":65,"end_character":53},"in_reply_to":"3cbe52c2_d93676d2","updated":"2021-02-17 18:20:43.000000000","message":"Done","commit_id":"18d1ee4e6d14c7f781cb7ceb00985a2126a3dbe7"},{"author":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"change_message_id":"146d9191d608cf87d0c1cd03a0a6a7513d23b48a","unresolved":false,"context_lines":[{"line_number":62,"context_line":"decrypt keys that are stored in Barbican MySQL database."},{"line_number":63,"context_line":""},{"line_number":64,"context_line":"MKEK is Master Key Encryption Key, which is used to encrypt KEKs that are"},{"line_number":65,"context_line":"uniq and created per project. All keys within project are encrypted with KEK."},{"line_number":66,"context_line":""},{"line_number":67,"context_line":"You need to create a Data Protection On Demand sevice and complete an"},{"line_number":68,"context_line":"initialization of the Luna slot. You can follow `lunacm documentation \u003chttps://thalesdocs.com/gphsm/luna/6.3/docs/network/Content/configuration/ppso_partition_config/partition-so_action_to_config_pw-ppso_partition_2.htm\u003e`_"}],"source_content_type":"text/x-rst","patch_set":6,"id":"0528cf72_57d28ef8","line":65,"range":{"start_line":65,"start_character":0,"end_line":65,"end_character":4},"in_reply_to":"99e792e5_773948cf","updated":"2021-02-17 18:20:43.000000000","message":"Done","commit_id":"18d1ee4e6d14c7f781cb7ceb00985a2126a3dbe7"},{"author":{"_account_id":25023,"name":"Jonathan Rosser","email":"jonathan.rosser@rd.bbc.co.uk","username":"jrosser"},"change_message_id":"be761e4aecc54664e4d6b226f842c8b04cfefcd7","unresolved":true,"context_lines":[{"line_number":75,"context_line":".. note::"},{"line_number":76,"context_line":""},{"line_number":77,"context_line":"  At the moment barbican does not support Thales FIPS mode. Also mention, that"},{"line_number":78,"context_line":"  Crypto Officer password has to be reseted on the first login, which should"},{"line_number":79,"context_line":"  be done right after initialization of the role."},{"line_number":80,"context_line":""},{"line_number":81,"context_line":"Once setup of the Thales is done, we can define all required variables that are"}],"source_content_type":"text/x-rst","patch_set":6,"id":"2ae90482_2ae9079f","line":78,"range":{"start_line":78,"start_character":36,"end_line":78,"end_character":43},"updated":"2021-02-17 17:41:48.000000000","message":"reset","commit_id":"18d1ee4e6d14c7f781cb7ceb00985a2126a3dbe7"},{"author":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"change_message_id":"146d9191d608cf87d0c1cd03a0a6a7513d23b48a","unresolved":false,"context_lines":[{"line_number":75,"context_line":".. note::"},{"line_number":76,"context_line":""},{"line_number":77,"context_line":"  At the moment barbican does not support Thales FIPS mode. Also mention, that"},{"line_number":78,"context_line":"  Crypto Officer password has to be reseted on the first login, which should"},{"line_number":79,"context_line":"  be done right after initialization of the role."},{"line_number":80,"context_line":""},{"line_number":81,"context_line":"Once setup of the Thales is done, we can define all required variables that are"}],"source_content_type":"text/x-rst","patch_set":6,"id":"74a52ac9_eaa5c22f","line":78,"range":{"start_line":78,"start_character":36,"end_line":78,"end_character":43},"in_reply_to":"2ae90482_2ae9079f","updated":"2021-02-17 18:20:43.000000000","message":"Done","commit_id":"18d1ee4e6d14c7f781cb7ceb00985a2126a3dbe7"},{"author":{"_account_id":25023,"name":"Jonathan Rosser","email":"jonathan.rosser@rd.bbc.co.uk","username":"jrosser"},"change_message_id":"be761e4aecc54664e4d6b226f842c8b04cfefcd7","unresolved":true,"context_lines":[{"line_number":76,"context_line":""},{"line_number":77,"context_line":"  At the moment barbican does not support Thales FIPS mode. Also mention, that"},{"line_number":78,"context_line":"  Crypto Officer password has to be reseted on the first login, which should"},{"line_number":79,"context_line":"  be done right after initialization of the role."},{"line_number":80,"context_line":""},{"line_number":81,"context_line":"Once setup of the Thales is done, we can define all required variables that are"},{"line_number":82,"context_line":"needed for the Barbican deployment. Define in `user_variables.yml` following:"}],"source_content_type":"text/x-rst","patch_set":6,"id":"0ec2c03c_978a27b2","line":79,"range":{"start_line":79,"start_character":44,"end_line":79,"end_character":48},"updated":"2021-02-17 17:41:48.000000000","message":"assume this is not ansible role?","commit_id":"18d1ee4e6d14c7f781cb7ceb00985a2126a3dbe7"},{"author":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"change_message_id":"146d9191d608cf87d0c1cd03a0a6a7513d23b48a","unresolved":true,"context_lines":[{"line_number":76,"context_line":""},{"line_number":77,"context_line":"  At the moment barbican does not support Thales FIPS mode. Also mention, that"},{"line_number":78,"context_line":"  Crypto Officer password has to be reseted on the first login, which should"},{"line_number":79,"context_line":"  be done right after initialization of the role."},{"line_number":80,"context_line":""},{"line_number":81,"context_line":"Once setup of the Thales is done, we can define all required variables that are"},{"line_number":82,"context_line":"needed for the Barbican deployment. Define in `user_variables.yml` following:"}],"source_content_type":"text/x-rst","patch_set":6,"id":"d539139c_d444bc75","line":79,"range":{"start_line":79,"start_character":44,"end_line":79,"end_character":48},"in_reply_to":"0ec2c03c_978a27b2","updated":"2021-02-17 18:20:43.000000000","message":"nope, not ansible. Command to init Crypto Officer in lunacm looks like this:\nrole init -name Crypto Officer\n\nSo I meant CO role here...","commit_id":"18d1ee4e6d14c7f781cb7ceb00985a2126a3dbe7"}]}