docs: Update KMS purpose field for BSR (#4638)
This commit is contained in:
1 parent
1a77e4da86
commit
9c67029a0a
6 files changed
+6
-6
No files matched your search
@@ -22,7 +22,7 @@ kms "aead" {
|
||||
```
|
||||
|
||||
- `purpose` - Purpose of this KMS, acceptable values are: `worker-auth`, `worker-auth-storage`,
|
||||
`root`, `previous-root`, `recovery`, or `config`.
|
||||
`root`, `previous-root`, `recovery`, `bsr`, or `config`.
|
||||
|
||||
- `aead_type` - The type of encryption this KMS uses. Currently only `aes-gcm` is implemented.
|
||||
|
||||
|
||||
@@ -32,7 +32,7 @@ kms "alicloudkms" {
|
||||
These parameters apply to the `kms` stanza in the Boundary configuration file:
|
||||
|
||||
- `purpose` - Purpose of this KMS, acceptable values are: `worker-auth`, `worker-auth-storage`,
|
||||
`root`, `previous-root`, `recovery`, or `config`.
|
||||
`root`, `previous-root`, `recovery`, `bsr`, or `config`.
|
||||
|
||||
- `region` `(string: <required> "us-east-1")`: The AliCloud region where the encryption key
|
||||
lives. May also be specified by the `ALICLOUD_REGION`
|
||||
|
||||
@@ -33,7 +33,7 @@ kms "azurekeyvault" {
|
||||
These parameters apply to the `kms` stanza in the Vault configuration file:
|
||||
|
||||
- `purpose` - Purpose of this KMS, acceptable values are: `worker-auth`, `worker-auth-storage`,
|
||||
`root`, `previous-root`, `recovery`, or `config`.
|
||||
`root`, `previous-root`, `recovery`, `bsr`, or `config`.
|
||||
|
||||
- `tenant_id` `(string: <required>)`: The tenant id for the Azure Active Directory organization. May
|
||||
also be specified by the `AZURE_TENANT_ID` environment variable.
|
||||
|
||||
@@ -32,7 +32,7 @@ kms "gcpckms" {
|
||||
These parameters apply to the `kms` stanza in the Boundary configuration file:
|
||||
|
||||
- `purpose` - Purpose of this KMS, acceptable values are: `worker-auth`, `worker-auth-storage`,
|
||||
`root`, `previous-root`, `recovery`, or `config`.
|
||||
`root`, `previous-root`, `recovery`, `bsr`, or `config`.
|
||||
|
||||
- `credentials` `(string: <required>)`: The path to the credentials JSON file
|
||||
to use. May be also specified by the `GOOGLE_CREDENTIALS` or
|
||||
|
||||
@@ -31,7 +31,7 @@ kms "ocikms" {
|
||||
These parameters apply to the `kms` stanza in the Boundary configuration file:
|
||||
|
||||
- `purpose` - Purpose of this KMS, acceptable values are: `worker-auth`, `worker-auth-storage`,
|
||||
`root`, `previous-root`, `recovery`, or `config`.
|
||||
`root`, `previous-root`, `recovery`, `bsr`, or `config`.
|
||||
- `key_id` `(string: <required>)`: The OCI KMS key ID to use.
|
||||
- `crypto_endpoint` `(string: <required>)`: The OCI KMS cryptographic endpoint (or data plane endpoint)
|
||||
to be used to make OCI KMS encryption/decryption requests.
|
||||
|
||||
@@ -42,7 +42,7 @@ kms "transit" {
|
||||
These parameters apply to the `kms` stanza in the Vault configuration file:
|
||||
|
||||
- `purpose` - Purpose of this KMS, acceptable values are: `worker-auth`, `worker-auth-storage`,
|
||||
`root`, `previous-root`, `recovery`, or `config`.
|
||||
`root`, `previous-root`, `recovery`, `bsr`, or `config`.
|
||||
|
||||
- `address` `(string: <required>)`: The full address to the Vault cluster.
|
||||
This may also be specified by the `VAULT_ADDR` environment variable.
|
||||
|
||||
Reference in new issue
Block a user