mirrors/talos
1
0
Fork 0
mirror of https://github.com/siderolabs/talos.git synced 2025-10-28 06:51:34 +01:00
Code Issues Packages Projects Releases Wiki Activity
4,253 Commits 28 Branches 542 Tags
Commit Graph

4 Commits

Author SHA1 Message Date
Andrey Smirnov
a096f05a56
chore: update gRPC library and enable shared write buffers 
Fixes #7576

See https://github.com/grpc/grpc-go/pull/6309

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
 2023-09-13 21:27:46 +04:00
Artem Chernyshev
936111ce06
fix: properly set up tls for KMS endpoint 
The condition was inverted 🤦

Signed-off-by: Artem Chernyshev <artem.chernyshev@talos-systems.com>
 2023-07-10 21:10:02 +03:00
Artem Chernyshev
cb226eec46
fix: rewrite encryption system information flow 
Pass getter to the key handler instead of already fetched node uuid.

Signed-off-by: Artem Chernyshev <artem.chernyshev@talos-systems.com>
 2023-07-10 19:07:46 +03:00
Artem Chernyshev
ce63abb219
feat: add KMS assisted encryption key handler 
Talos now supports new type of encryption keys which rely on Sealing/Unsealing randomly generated bytes with a KMS server:

```
systemDiskEncryption:
  ephemeral:
    keys:
      - kms:
          endpoint: https://1.2.3.4:443
        slot: 0
```
gRPC API definitions and a simple reference implementation of the KMS server can be found in this
[repository](https://github.com/siderolabs/kms-client/blob/main/cmd/kms-server/main.go).

Signed-off-by: Artem Chernyshev <artem.chernyshev@talos-systems.com>
 2023-07-07 19:02:39 +03:00