feat(encryption): implement AWS KMS integration with encryption provider and update related configurations

2025-05-11 19:41:48 +02:00
parent 3e12b13d95
commit 457f2bd810
17 changed files with 268 additions and 48 deletions
@@ -0,0 +1,20 @@
+---
+apiVersion: apiserver.config.k8s.io/v1
+kind: EncryptionConfiguration
+resources:
+  - resources:
+    - secrets
+    - configmaps
+    providers:
+{% if microk8s_encryption_kms_socket is defined %}
+    - kms:
+        apiVersion: v2
+        name: aws-encryption-provider
+        endpoint: unix://{{ microk8s_encryption_kms_socket }}
+        timeout: 3s
+{% endif %}
+    - aescbc:
+        keys:
+        - name: k8s-crypto
+          secret: {{ microk8s_encryption_secret }}
+    - identity: {}