Create a cryptolib.Signer interface to Cloud KMS

grafeas / kritis

Deploy-time Policy Enforcer for Kubernetes applications

https://github.com/grafeas/kritis/blob/master/docs/binary-authorization.md

Apache License 2.0

696 stars 133 forks source link

Create a cryptolib.Signer interface to Cloud KMS #539

Closed nenaddedic closed 4 years ago

nenaddedic commented 4 years ago

I had to update vendor/ because the existing kms client libs didn't have any of the asymmetric crypto methods, which are required for signing.

ooq commented 4 years ago

FYI, #518 is merged. Updating with master should pass this PR on the GCB test. Let's add an integration test for KMS signing as well. As part of it, we probably need to add KMS access to GCB service account.