Tim Gross c970d22164 keyring: support external KMS for key encryption key (KEK) (#23580) ...

In Nomad 1.4.0, we shipped support for encrypted Variables and signed Workload
Identities, but the key material is protected only by a AEAD encrypting the
KEK. Add support for Vault transit encryption and external KMS from major cloud
providers. The servers call out to the external service to decrypt each key in
the on-disk keystore.

Ref: https://hashicorp.atlassian.net/browse/NET-10334
Fixes: https://github.com/hashicorp/nomad/issues/14852

2024-07-18 09:42:28 -04:00

..

sample0.json

keyring: support external KMS for key encryption key (KEK) (#23580)

2024-07-18 09:42:28 -04:00

sample1.json

keyring: support external KMS for key encryption key (KEK) (#23580)

2024-07-18 09:42:28 -04:00

sample2.hcl

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00