feat(encryption): implement AWS KMS integration with encryption provider and update related configurations

ansible/roles/encryption/tasks/main.yml

@@ -5,8 +5,12 @@
     name:
       - cryptsetup
       - curl
+      - libc6
     state: present
   when: ansible_os_family == 'Debian'
+  tags:
+    - roles::encryption::packages
+    - roles::encryption::volume
 
 - name: Create folder to store volume
   become: true
@@ -14,6 +18,8 @@
     path: "{{ encryption_volumes_path }}"
     state: directory
     mode: "0750"
+  tags:
+    - roles::encryption::volume
 
 - name: Copy required scripts
   become: true
@@ -24,9 +30,19 @@
   with_items:
     - "open_volume"
     - "read_system_id"
+  tags:
+    - roles::encryption::volume
 
 - name: Create encrypted volumes
   ansible.builtin.include_tasks: volume.yml
   loop: "{{ encryption_volumes }}"
   loop_control:
     loop_var: item
+  tags:
+    - roles::encryption::volume
+
+- name: Create KMS service
+  ansible.builtin.include_tasks: kms.yml
+  when: encryption_aws_access_key_id is defined and encryption_aws_secret_access_key is defined and encryption_kms_arn is defined
+  tags:
+    - roles::encryption::kms