Add EKS Secret envelope encryption support (#772)

This adds support for configuring EKS clusters that utilise envelope
encryption for Secrets:

- https://aws.amazon.com/about-aws/whats-new/2020/03/amazon-eks-adds-envelope-encryption-for-secrets-with-aws-kms/

- https://aws.amazon.com/blogs/containers/using-eks-encryption-provider-support-for-defense-in-depth/
This commit is contained in:
Wolodja Wentland
2020-03-11 11:26:06 +00:00
committed by GitHub
parent 2715b01e4e
commit 23c005e5ef
8 changed files with 218 additions and 2 deletions

View File

@@ -15,6 +15,7 @@ project adheres to [Semantic Versioning](http://semver.org/).
- Add support for ASG max instance lifetime (by @sidprak)
- Add `default_cooldown` and `health_check_grace_period` options to workers ASG (by @ArieLevs)
- Fix support for ASG max instance lifetime for workers (by @barryib)
- Add support for envelope encryption of Secrets (by @babilen5)
# History