I tried following the steps, and this is what I found:

• https://docs.redhat.com/en/documentation/openshift_sandboxed_containers/1.8/html/user_guide/deploying-cc_azure-cc#configuring-trustee_azure-cc . Here it says reference vaules are optionals for Trustee. They are not. I tried without mentioning them in the KbsConfig and it still complains. Also in the example below of KbsConfig they are defined kbsResourcePolicyConfigMapName: resource-policy.
• All references to oc apply secret generic -from-file are wrong, apply doesn't go well with -from-file
• https://docs.redhat.com/en/documentation/openshift_sandboxed_containers/1.8/html/user_guide/deploying-cc_azure-cc#cc-creating-tru[...]-secret_azure-cc it must be clearly stated that the secret names here MUST be privateKey and publicKey . It doesn't work otherwise