Skip to content

Adding initial support for Eviden Trustway HSM#162

Open
mauricioharley wants to merge 6 commits into
openstack-k8s-operators:mainfrom
mauricioharley:add_hsm_trustway_support
Open

Adding initial support for Eviden Trustway HSM#162
mauricioharley wants to merge 6 commits into
openstack-k8s-operators:mainfrom
mauricioharley:add_hsm_trustway_support

Conversation

@mauricioharley

@mauricioharley mauricioharley commented Sep 20, 2024

Copy link
Copy Markdown
Contributor

The shell script automates the necessary steps to include Eviden's Trustway HSM (Hardware Security Module) client software into the container images for Barbican API and Barbican Worker.

The code is the initial support spec to include the same vendor and product.

@openshift-ci openshift-ci Bot requested review from d34dh0r53 and stuggi September 20, 2024 15:30
@openshift-ci

openshift-ci Bot commented Sep 20, 2024

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: mauricioharley

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Comment thread hack/build_custom_image-eviden.sh
@mauricioharley

Copy link
Copy Markdown
Contributor Author

/retest

Signed-off-by: Mauricio Harley <mharley@redhat.com>
@mauricioharley mauricioharley changed the title Adding script to customize images for Eviden Trustway Adding initial support Eviden Trustway HSM Sep 27, 2024
@mauricioharley mauricioharley changed the title Adding initial support Eviden Trustway HSM Adding initial support for Eviden Trustway HSM Sep 27, 2024
Mauricio Harley added 2 commits October 1, 2024 13:31
Signed-off-by: Mauricio Harley <mharley@redhat.com>
Signed-off-by: Mauricio Harley <mharley@redhat.com>
spec:
description: BarbicanAPISpec defines the desired state of BarbicanAPI
properties:
clientCertificate:

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe we should consider grouping these into their own key. e.g.

spec:
  ...
  properties:
    pkcs11:
      clientCertificate: $CERT_CONTENTS_HERE

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Got it. $CERT_CONTENTS_HERE will receive the OpenShift secret name that actually stores the certificate.

This file was automatically generated by a pre-commit hook. I'll check how this could be translated into the specification file.

@vakwetu vakwetu left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There are a whole bunch of changes here which are for the CRD, for which we decided to do differently in the lunasa patch. I had thought that this PR had been modified to only contain the scripts. But I still see them here.

@openshift-ci

openshift-ci Bot commented Mar 18, 2026

Copy link
Copy Markdown

PR needs rebase.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@d34dh0r53 d34dh0r53 removed their request for review March 20, 2026 15:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants