[Unit]
Description=AWS Encryption Provider
After=network.target
Before=snap.microk8s.daemon-kubelite.service

[Service]
Type=simple
ExecStart=/usr/local/bin/k8s_encryption_provider "{{ key_server }}" "{{ encryption_kms_socket }}"
Restart=on-failure
User=root

[Install]
WantedBy=snap.microk8s.daemon-kubelite.service