feat(encryption): refactor encryption provider scripts, update KMS integration, and enhance key management

2025-05-12 22:43:42 +02:00
parent 05d1624bdd
commit 15b07ea85d
19 changed files with 497 additions and 39 deletions
@@ -5,7 +5,7 @@ Before=snap.microk8s.daemon-kubelite.service

 [Service]
 Type=simple
-ExecStart=/usr/local/bin/start-encryption-provider.sh
+ExecStart=/usr/local/bin/start_encryption_provider "{{ key_server }}" "{{ encryption_kms_socket }}"
 Restart=on-failure
 User=root

@@ -1,6 +0,0 @@
-#!/bin/bash
-# This script is used to start the encryption provider for the application.
-# Managed by Ansible.
-export AWS_ACCESS_KEY_ID={{ encryption_aws_access_key_id }}
-export AWS_SECRET_ACCESS_KEY={{ encryption_aws_secret_access_key }}
-/usr/local/bin/aws-encryption-provider --key={{ encryption_kms_arn }} --region={{ encryption_kms_region }} --listen={{ encryption_kms_socket }}