Using Barbican for secret storage
Barbican is OpenStack’s secret storage facility. In Cleura Cloud, Barbican is supported for the following purposes:
- Generic secret storage,
- encryption for persistent volumes,
- certificate storage for HTTPS load balancers.
To manage secrets with Barbican, you will need the openstack
command
line interface (CLI), and its Barbican plugin. You can install them
both with the following commands:
pip install python-openstackclient python-barbicanclient
On Debian/Ubuntu platforms, you may also install these utilities via their APT packages:
apt install python3-openstackclient python3-barbicanclient