Ask Your Question

Revision history [back]

can a normal user create an encrypted volume?

The admin guide for Mitaka indicates that admin credentials are required to create an encrypted volume. A Mitaka cloud I am currently playing with confirms this.

If this is true, is there a way to configure a cloud so that normal users can protect their data at rest?

can a normal user create an encrypted volume?

The admin guide for Mitaka indicates that admin credentials are required to create an encrypted volume. A Mitaka cloud I am currently playing with confirms this.

If this is true, is there a way to configure a cloud so that normal users can protect their data at rest?

EDIT: The error message I am getting when creating an encrypted volume indicates that I can't order a secret with Barbican. And indeed:

$ barbican secret order create key
Starting new HTTPS connection (1): 10.41.148.9
Starting new HTTPS connection (1): 10.41.172.4
4xx Client error: Forbidden
Forbidden
$ barbican secret list
Starting new HTTPS connection (1): 10.41.148.9
Starting new HTTPS connection (1): 10.41.172.4
4xx Client error: Forbidden
Forbidden

So my question is now: How is Barbican configured so that a normal user can use it?

can a normal user create an encrypted volume?

The admin guide for Mitaka indicates that admin credentials are required to create an encrypted volume. A Mitaka cloud I am currently playing with confirms this.

If this is true, is there a way to configure a cloud so that normal users can protect their data at rest?

EDIT: The error message I am getting when creating an encrypted volume indicates that I can't order a secret with Barbican. And indeed:

$ barbican secret order create key
Starting new HTTPS connection (1): 10.41.148.9
Starting new HTTPS connection (1): 10.41.172.4
4xx Client error: Forbidden
Forbidden
$ barbican secret list
Starting new HTTPS connection (1): 10.41.148.9
Starting new HTTPS connection (1): 10.41.172.4
4xx Client error: Forbidden
Forbidden

So my question is now: How is can I configure Barbican configured so that a normal user can use it?