Encryption: Extend secrets service to support registering key providers (#40626)

* Draft adding kms providers

* Rename defaultProvider to currentProvider

* Add getting current provider from config

* Remove comments

* Make current provider service struct field

* Add methods to secrets service

* Test getting current provider

* Implements missing methods for fake secrets service

* Remove accidental changes

* Fix linter issue

* Update configuration examples

* Rename CurrentProvider method

* Split service interface

* Update wire

Co-authored-by: spinillos <selenepinillos@gmail.com>
This commit is contained in:
Tania B
2021-11-04 19:25:01 +02:00
committed by GitHub
parent 9f205cf1d7
commit e81d434edf
7 changed files with 81 additions and 2 deletions

View File

@@ -222,6 +222,9 @@
# used for signing
;secret_key = SW2YcwTIb9zpOOhoPsMm
# key provider used for envelope encryption, default to static value specified by secret_key
;encryption_provider = secretKey
# disable gravatar profile images
;disable_gravatar = false