mirror of
https://github.com/kemko/nomad.git
synced 2026-01-01 16:05:42 +03:00
c970d22164
In Nomad 1.4.0, we shipped support for encrypted Variables and signed Workload Identities, but the key material is protected only by a AEAD encrypting the KEK. Add support for Vault transit encryption and external KMS from major cloud providers. The servers call out to the external service to decrypt each key in the on-disk keystore. Ref: https://hashicorp.atlassian.net/browse/NET-10334 Fixes: https://github.com/hashicorp/nomad/issues/14852
4 lines
116 B
Plaintext
4 lines
116 B
Plaintext
```release-note:improvement
|
|
keyring: Added support for encrypting the keyring via Vault transit or external KMS
|
|
```
|