feat(encryption): implement AWS KMS integration with encryption provider and update related configurations

ansible/host_vars/prod-01.alexpires.me.yml

@@ -138,6 +138,10 @@ encryption_volumes:
     mount_service_before: snap.microk8s.daemon-kubelite.service
     mount_service_wantedby: snap.microk8s.daemon-kubelite.service
     mount_permission: "0755"
+encryption_aws_access_key_id: "{{ lookup('env', 'KMS_ACCESS_KEY') }}"
+encryption_aws_secret_access_key: "{{ lookup('env', 'KMS_SECRET_KEY') }}"
+encryption_kms_arn: "arn:aws:kms:eu-west-1:001604727293:key/977d08fd-8230-40bf-8a4f-d8a3264c5990"
+encryption_kms_socket: /var/run/kmsplugin/socket.sock
 
 # Kubernetes specific settings
 microk8s_version: 1.29
@@ -149,6 +153,7 @@ microk8s_alt_names: "{{ hostname }}"
 microk8s_issuer_email: c.alexandre.pires@alexpires.me
 microk8s_encryption_cfg: /mnt/microk8s_config/microk8s_encryption.yaml
 microk8s_encryption_secret: "{{ lookup('env', 'MICROK8S_ENCRYPTION_SECRET') }}"
+microk8s_encryption_kms_socket: /var/run/kmsplugin/socket.sock
 microk8s_users:
   - username: operator
     enabled: true