rgw: Replace deprecated Barbican payload endpoint with alternative

`GET /v1/secrets/{uuid}` with Header `Accept:
application/octet-stream` has been deprecated in favor of `GET
/v1/secrets/{uuid}/payload` in OpenStack Barbican.

The old API is still functional, but generates a warning level log
message on Barbican for every access.

Deprecation commit from 2015:
https://github.com/openstack/barbican/commit/b4b64be6f259acf4d8677eadbc35d37fab3a6df0

Signed-off-by: Marcel Lauhoff <marcel.lauhoff@clyso.com>
On-behalf-of: SAP marcel.lauhoff@sap.com

diff --git a/src/rgw/rgw_kms.cc b/src/rgw/rgw_kms.cc
index d9b7e8848a26edea352fbf138b6e3a5d33a77ea2..2fea8802b9e7c328e7e507568a991280863a67fb 100644 (file)
--- a/src/rgw/rgw_kms.cc
+++ b/src/rgw/rgw_kms.cc
@@ -929,6 +929,7 @@ static int request_key_from_barbican(const DoutPrefixProvider *dpp,
   }
   concat_url(secret_url, "/v1/secrets/");
   concat_url(secret_url, std::string(key_id));
+  concat_url(secret_url, "/payload");
 
   bufferlist secret_bl;
   RGWHTTPTransceiver secret_req(cct, "GET", secret_url, &secret_bl);