Larry Bordowitz
bcbfebce3d
Implement the Azure Key Provider
...
This uses the same auth package as the newly-rewritten Azure State
Backend, so many of the properties and environment variables are the
same. I have put this through both the compliance test as well as built
the binary and run some end-to-end tests, and found that it
appropriately uses the Azure key as expected.
Signed-off-by: Larry Bordowitz <laurence.bordowitz@gmail.com >
2025-09-29 06:19:02 -04:00
Andrei Ciobanu
4adc571c8c
Fix a typo in the external method code snippet ( #2881 )
...
Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org >
2025-06-02 15:19:47 +03:00
Skyper
26a77c9156
website: mark input passphrase for state encryption as sensitive
...
Signed-off-by: Paul-Emmanuel Raoul <skyper@skyplabs.net >
2025-05-07 16:39:01 -07:00
Andrei Ciobanu
0d3d36778d
Update some names in the encryption docs ( #2762 )
...
Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org >
2025-05-07 16:06:22 +03:00
AbstractionFactory
60fdd359d5
Fixes #2337 : External encryption method ( #2367 )
...
Signed-off-by: AbstractionFactory <179820029+abstractionfactory@users.noreply.github.com >
2025-01-31 12:13:18 -05:00
AbstractionFactory
b036e534b2
Fixing incorrect keyprovider-external.tofu ( #2365 )
...
Signed-off-by: AbstractionFactory <179820029+abstractionfactory@users.noreply.github.com >
2025-01-13 15:53:05 +01:00
AbstractionFactory
5a6d2d3e98
Fixes #2022 : Running external commands as a key provider ( #2023 )
...
Signed-off-by: AbstractionFactory <179820029+abstractionfactory@users.noreply.github.com >
Signed-off-by: ollevche <ollevche@gmail.com >
Co-authored-by: Oleksandr Levchenkov <ollevche@gmail.com >
2025-01-08 12:08:30 -05:00
AbstractionFactory
9d842aa920
Fixes #1605 : Customizable metadata key on encryption key providers ( #2080 )
...
Signed-off-by: AbstractionFactory <179820029+abstractionfactory@users.noreply.github.com >
2024-10-30 19:52:23 +01:00
Oleksandr Levchenkov
19b5287b8f
allow static evaluations in encryption configuration ( #1728 )
...
Signed-off-by: ollevche <ollevche@gmail.com >
Signed-off-by: Christian Mesh <christianmesh1@gmail.com >
Signed-off-by: Oleksandr Levchenkov <ollevche@gmail.com >
Co-authored-by: Christian Mesh <christianmesh1@gmail.com >
2024-06-24 10:18:16 -04:00
Janos
27ed1d8dcd
Fixes #1644 : Incorrect encryption env config documentation ( #1670 )
...
Signed-off-by: Janos <86970079+janosdebugs@users.noreply.github.com >
2024-05-22 19:52:52 +02:00
Janos
07d88c0786
Cleaning up encryption docs for 1.7.0-beta1 ( #1495 )
...
Signed-off-by: Janos <86970079+janosdebugs@users.noreply.github.com >
Signed-off-by: James Humphries <James@james-humphries.co.uk >
Co-authored-by: James Humphries <James@james-humphries.co.uk >
Co-authored-by: Siddhartha Sonker <34684647+siddharthasonker@users.noreply.github.com >
2024-04-18 09:19:17 +01:00
Christian Mesh
d7e96665f6
Add unencrypted Method for migrations ( #1458 )
...
Signed-off-by: Christian Mesh <christianmesh1@gmail.com >
2024-04-12 09:38:21 -04:00
Oleksandr Levchenkov
e1e182987b
add OpenBao as key provider for state encryption ( #1436 )
...
Signed-off-by: ollevche <ollevche@gmail.com >
2024-04-08 13:38:17 +01:00
Александар Симић
f75920b609
Fix for setting the env variable on Unix/Linux ( #1463 )
...
Signed-off-by: Александар Симић <a@repl.ist >
2024-04-04 09:58:49 -04:00
Oleksandr Levchenkov
3fdd533d9c
add website docs for GCP KMS key provider ( #1459 )
...
Signed-off-by: ollevche <ollevche@gmail.com >
2024-04-04 12:08:33 +03:00
Janos
1a34c658a3
Adding AWS KMS documentation ( #1399 )
...
Signed-off-by: Janos <86970079+janosdebugs@users.noreply.github.com >
2024-03-14 16:18:04 +01:00
Janos
19a994ee7f
Documentation updates for 1.7.0-alpha1 (state encryption) ( #1396 )
...
Signed-off-by: Janos <86970079+janosdebugs@users.noreply.github.com >
2024-03-14 15:05:05 +01:00
Janos
a18e643a8d
PBKDF2 passphrase key provider ( #1310 )
...
Signed-off-by: Janos <86970079+janosdebugs@users.noreply.github.com >
Signed-off-by: Christian Mesh <christianmesh1@gmail.com >
Co-authored-by: Christian Mesh <christianmesh1@gmail.com >
Co-authored-by: James Humphries <jamesh@spacelift.io >
2024-03-11 14:24:31 +01:00
Janos
fa638907f1
Fixes #1169 : AES-GCM implementation ( #1291 )
...
Signed-off-by: Janos <86970079+janosdebugs@users.noreply.github.com >
Signed-off-by: Mikel Olasagasti Uranga <mikel@olasagasti.info >
Signed-off-by: Christian Mesh <christianmesh1@gmail.com >
Signed-off-by: James Humphries <James@james-humphries.co.uk >
Co-authored-by: James Humphries <jamesh@spacelift.io >
Co-authored-by: Serdar Dalgıç <serdardalgic@users.noreply.github.com >
Co-authored-by: Mikel Olasagasti Uranga <mikel@olasagasti.info >
Co-authored-by: Christian Mesh <christianmesh1@gmail.com >
2024-03-07 10:24:37 +00:00
