Barbican is a RESTful key manager service service for cloud applications.
Barbican includes a REST API (called Barbican) designed for the secure storage, provisioning and management of secrets. The API can interface with security appliances (such as HSMs).
The OpenStack community maintains several clients to this API:
* openstacksdk - https:/
* OpenStackClient - https:/
*
Barbican is part of OpenStack, and uses middleware to configure Keystone authentication/
Project information
- Licence:
- Apache Licence
View full history Series and milestones
2025.2 series is the current focus of development.
All code Code
- Version control system:
- Git
- Programming languages:
- python
All packages Packages in Distributions
-
barbican source package in Xenial
Version 1:2.0.0-0ubuntu1.1 uploaded -
barbican source package in Stonking
Version 2:22.0.0-0ubuntu1 uploaded -
barbican source package in Resolute
Version 2:22.0.0-0ubuntu1 uploaded -
barbican source package in Questing
Version 2:21.0.0-0ubuntu1 uploaded -
barbican source package in Plucky
Version 2:20.0.0-0ubuntu1 uploaded
All bugs Latest bugs reported
-
Bug #2154355: extend disk with ceph backend and luks
Reported -
Bug #2153413: Barbican Vault integration does not remove KV key after secret deletion
Reported -
Bug #2152897: keystone-listener fails to start
Reported -
Bug #2147221: Bit length validation rejects valid EC key orders (P-521)
Reported -
Bug #2147167: SimpleCryptoPlugin crashes with TypeError on Python 3.14 when kek is unconfigured
Reported
All blueprints Latest blueprints
-
Add support for setting the KV engine version for Vault backends
Registered -
Add pre-ping to verify pooled DB connections before use
Registered -
PKCS#11 Mechanism List
Registered -
PKCS#11 Key Type Rotation
Registered -
Add authentication to AES-CBC encryption in PKCS#11 backend
Registered
More contributors Top contributors
- OpenStack Infra 47 points
- Takashi Kajinami 25 points
- Tim Shephard 16 points
- Rajiv Mucheli 12 points
- Przemysław Kuczyński 10 points

