Integrate OpenStack Barbican Secret Manager

[artashesbalabekyan]

The KES doesn't support OpenStack Barbican Secret Manager.

This PR adds the support of Openstack Barbican Secret Manager along with other Key Management providers.

Testing this PR

1. Setup two KES instance (source and target). Therefore create a new TLS private/public key pair:

kes identity new --ip 127.0.0.1 --dns localhost localhost

address: 0.0.0.0:7373 # Listen on all network interfaces on port 7373

admin:
  identity: 273de8a8d40c110047de8dcbaaa85896704fad73c9b0e093c8bb822e872b41c2

tls:
  key: private.key # The KES server TLS private key
  cert: public.crt # The KES server TLS certificate

policy:
  my-app:
    allow:
      - /v1/key/*/*
    identities:
    - c9aff4f0d135b88f70429ab9b4c11479d94c32301e801449f332b6eef4521bec


keystore:
  openstack:
    barbican:
      auth_url: <auth_url>
      barbican_url: <barbican_url>
      credentials:
        user_domain: "Default"
        username: <user_name>
        password: <password>
        project_domain: "default"
        project_name: <project_name>

Run the test

go test edge/*.go  -test.run ^TestOpenStack$ -openstack.config ./config.yml

[A1ca7raz]

After Hashicorp Vault changing their license, I was looking for an open-source alternative until I saw this pr. Thank you!

[allanrogerr]

@artashesbalabekyan Is this still being worked on?

[artashesbalabekyan]

@artashesbalabekyan Is this still being worked on?

@allanrogerr Yes. It is tested, and it works