AWS KMS key_identifier upgrade (#314)

* Allow use of key_identifier_file or key_identifier_value in place of key_metadata_file Signed-off-by: aniket patel <[email protected]> * Change key identifier values to have enabled flags Signed-off-by: aniket patel <[email protected]> * Update charts/spire/charts/spire-server/templates/configmap.yaml Co-authored-by: kfox1111 <[email protected]> Signed-off-by: anhpatel <[email protected]> * Update charts/spire/charts/spire-server/templates/configmap.yaml Co-authored-by: kfox1111 <[email protected]> Signed-off-by: anhpatel <[email protected]> * Update charts/spire/charts/spire-server/values.yaml Co-authored-by: kfox1111 <[email protected]> Signed-off-by: anhpatel <[email protected]> * Update docs Signed-off-by: aniket patel <[email protected]> * Update charts/spire/charts/spire-server/values.yaml Co-authored-by: kfox1111 <[email protected]> Signed-off-by: anhpatel <[email protected]> * Update docs Signed-off-by: aniket patel <[email protected]> --------- Signed-off-by: aniket patel <[email protected]> Signed-off-by: anhpatel <[email protected]> Co-authored-by: kfox1111 <[email protected]>
2024-04-10 06:26:10 -07:00
parent 7aa8cb360e
commit bc79f58ab7
3 changed files with 20 additions and 0 deletions
@@ -307,6 +307,14 @@ keyManager:
    enabled: false
    ## @param keyManager.awsKMS.region Specify the region for AWS KMS
    region: ""
+    keyIdentifierFile:
+      ## @param keyManager.awsKMS.keyIdentifierFile.enabled Enable key identifier data to be stored in a file in persistent storage.
+      enabled: false
+    keyIdentifierValue:
+      ## @param keyManager.awsKMS.keyIdentifierValue.enabled Enable specifying a key identifier value for AWS KMS
+      enabled: false
+      ## @param keyManager.awsKMS.keyIdentifierValue.identifier Static identifier for the SPIRE server instance
+      identifier: ""
    ## @extra keyManager.awsKMS.keyPolicy Policy to use when creating keys. If no policy is specified, a default policy will be used.
    keyPolicy:
      ## @param keyManager.awsKMS.keyPolicy.policy [nullable] Key policy in JSON format.