Goal

This epic tracks the work to implement the adoption of a Proteccio HSM as a secure backend for the Barbican (Key Manager) service, migrating from a legacy RHOSP 17.1 environment to RHOSO 18.

Scope & Approach

This work involves creating the necessary documentation to enable and configure the PKCS11/Proteccio HSM backend in Barbican via the OpenStackControlPlane CR.

Documentation Note

The documentation for this epic should extend the current Barbican adoption documentation, which only covers the simple_crypto backend. It needs to include the specific steps and configurations required for the Proteccio HSM.

Key Tasks

• Create the documentation page detailing the end-to-end adoption procedure.
• Manually verify the successful storage and retrieval of secrets from the HSM.