bcbfebce3d
This uses the same auth package as the newly-rewritten Azure State Backend, so many of the properties and environment variables are the same. I have put this through both the compliance test as well as built the binary and run some end-to-end tests, and found that it appropriately uses the Azure key as expected. Signed-off-by: Larry Bordowitz <laurence.bordowitz@gmail.com>
OpenTofu State and Plan encryption
Warning
This file is not an end-user documentation, it is intended for developers. Please follow the user documentation on the OpenTofu website unless you want to work on the encryption code.
This folder contains the code for state and plan encryption. For a quick example on how to use this package, please take a look at the example_test.go file.
Structure
The current folder contains the top level API. It requires a registry for holding the available key providers and encryption methods, which is located in the registry folder. The key providers are located in the keyprovider folder, while the encryption methods are located in the method folder. You can also find the configuration struct and its related functions in the config folder.
Further reading
For a detailed design document on state encryption, please read this document.