alexpires.me/a13labs.infra
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

feat(encryption): refactor encryption provider scripts, update KMS integration, and enhance key management

Browse Source
This commit is contained in:
Alexandre Pires
2025-05-12 22:43:42 +02:00
parent 05d1624bdd
commit 15b07ea85d
19 changed files with 497 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ansible/host_vars/prod-01.alexpires.me.yml
+1 -3
View File
@@ -138,9 +138,7 @@ encryption_volumes:
mount_service_before: snap.microk8s.daemon-kubelite.service
mount_service_wantedby: snap.microk8s.daemon-kubelite.service
mount_permission: "0755"
encryption_aws_access_key_id: "{{ lookup('env', 'KMS_ACCESS_KEY') }}"
encryption_aws_secret_access_key: "{{ lookup('env', 'KMS_SECRET_KEY') }}"
encryption_kms_arn: "arn:aws:kms:eu-west-1:001604727293:key/977d08fd-8230-40bf-8a4f-d8a3264c5990"
encryption_kms_socket: /var/run/kmsplugin/socket.sock
# Kubernetes specific settings