This updates the command to our emergent standards. It also enables using a separate config file for a config kms, which allows non-string values to be encrypted. This allowed some nice cleanup as well.
7 lines
179 B
HCL
7 lines
179 B
HCL
int_val = {{encrypt(20)}}
|
|
bool_val = {{encrypt(true)}}
|
|
kms "aead" {
|
|
purpose = "root"
|
|
aead_type = "aes-gcm"
|
|
key ="{{encrypt(aA1hxJo0JUAqcIATx/r0QTjAGD/btCPechEsukI2bt0=)}}"
|
|
} |