============================
Key Manager service overview
============================

The Key Manager service provides secure storage, provisioning and management of
secrets, such as passwords, encryption keys, etc.

The Key Manager service consists of the following components:

``barbican-api`` service
  Provides an OpenStack-native RESTful API that supports provisioning and managing
  Barbican secrets.

``barbican-worker`` service
  Provides an Openstack RPC interface that interacts with ``barbican-api``
  and reads from the barbican message queue.  Supports the fulfillment of
  Barbican orders.

``barbican-keystone-listener`` service
  Listens to messages from the Keystone notification service.
  Used to manage the representation of Keystone projects in the Barbican
  database when projects are deleted.