kms: rename kms to keyservice

In the light of extending our eKMS support it will be helpful
to have a tighter use of the word "KMS".
KMS should refer to the actual component that manages keys.
The keyservice, also called KMS in the constellation code,
does not manage keys itself. It talks to a KMS backend,
which in turn does the actual key management.

cli/internal/helm/testdata/Azure/constellation-services/charts/azuredisk-csi-driver/templates/csi-azuredisk-node.yaml

@@ -107,7 +107,7 @@ spec:
             - "--allow-empty-cloud-config=true"
             - "--support-zone=true"
             - "--get-node-info-from-labels=false"
-            - "--kms-addr=kms.testNamespace:9000"
+            - "--kms-addr=keyservice.testNamespace:9000"
           ports:
             - containerPort: 29603
               name: healthz

cli/internal/helm/testdata/Azure/constellation-services/charts/join-service/templates/daemonset.yaml

@@ -38,7 +38,7 @@ spec:
           image: joinServiceImage
           args:
             - --cloud-provider=Azure
-            - --kms-endpoint=kms.testNamespace:9000
+            - --keyservice-endpoint=keyservice.testNamespace:9000
           volumeMounts:
             - mountPath: /var/config
               name: config

cli/internal/helm/testdata/Azure/constellation-services/charts/keyservice/templates/clusterrole.yaml

@@ -2,8 +2,8 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   labels:
-    k8s-app: kms
-  name: kms
+    k8s-app: keyservice
+  name: keyservice
 rules:
 - apiGroups:
   - ""

cli/internal/helm/testdata/Azure/constellation-services/charts/keyservice/templates/clusterrolebinding.yaml

@@ -1,12 +1,12 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
-  name: kms
+  name: keyservice
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
-  name: kms
+  name: keyservice
 subjects:
 - kind: ServiceAccount
-  name: kms
+  name: keyservice
   namespace: testNamespace

cli/internal/helm/testdata/Azure/constellation-services/charts/keyservice/templates/daemonset.yaml

@@ -2,23 +2,23 @@ apiVersion: apps/v1
 kind: DaemonSet
 metadata:
   labels:
-    component: kms
-    k8s-app: kms
+    component: keyservice
+    k8s-app: keyservice
     kubernetes.io/cluster-service: "true"
-  name: kms
+  name: keyservice
   namespace: testNamespace
 spec:
   selector:
     matchLabels:
-      k8s-app: kms
+      k8s-app: keyservice
   template:
     metadata:
       labels:
-        k8s-app: kms
+        k8s-app: keyservice
     spec:
       containers:
-        - name: kms
-          image: kmsImage
+        - name: keyservice
+          image: keyserviceImage
           args:
             - --port=9000
           volumeMounts:
@@ -29,7 +29,7 @@ spec:
       nodeSelector:
         node-role.kubernetes.io/control-plane: ""
       priorityClassName: system-cluster-critical
-      serviceAccountName: kms
+      serviceAccountName: keyservice
       tolerations:
       - key: CriticalAddonsOnly
         operator: Exists

cli/internal/helm/testdata/Azure/constellation-services/charts/keyservice/templates/service.yaml

@@ -1,7 +1,7 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: kms
+  name: keyservice
   namespace: testNamespace
 spec:
   ports:
@@ -10,7 +10,7 @@ spec:
     protocol: TCP
     targetPort: 9000
   selector:
-    k8s-app: kms
+    k8s-app: keyservice
   type: ClusterIP
 status:
   loadBalancer: {}

cli/internal/helm/testdata/Azure/constellation-services/charts/keyservice/templates/serviceaccount.yaml

@@ -1,5 +1,5 @@
 apiVersion: v1
 kind: ServiceAccount
 metadata:
-  name: kms
+  name: keyservice
   namespace: testNamespace

cli/internal/helm/testdata/GCP/constellation-services/charts/gcp-compute-persistent-disk-csi-driver/templates/node.yaml

@@ -41,7 +41,7 @@ spec:
             - "--v=5"
             - "--endpoint=unix:/csi/csi.sock"
             - "--run-controller-service=false"
-            - "--kms-addr=kms.testNamespace:9000"
+            - "--kms-addr=keyservice.testNamespace:9000"
           securityContext:
             privileged: true
           volumeMounts:

cli/internal/helm/testdata/GCP/constellation-services/charts/join-service/templates/daemonset.yaml

@@ -38,7 +38,7 @@ spec:
           image: joinServiceImage
           args:
             - --cloud-provider=GCP
-            - --kms-endpoint=kms.testNamespace:9000
+            - --keyservice-endpoint=keyservice.testNamespace:9000
           volumeMounts:
             - mountPath: /var/config
               name: config

cli/internal/helm/testdata/GCP/constellation-services/charts/keyservice/templates/clusterrole.yaml

@@ -2,8 +2,8 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   labels:
-    k8s-app: kms
-  name: kms
+    k8s-app: keyservice
+  name: keyservice
 rules:
 - apiGroups:
   - ""

cli/internal/helm/testdata/GCP/constellation-services/charts/keyservice/templates/clusterrolebinding.yaml

@@ -1,12 +1,12 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
-  name: kms
+  name: keyservice
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
-  name: kms
+  name: keyservice
 subjects:
 - kind: ServiceAccount
-  name: kms
+  name: keyservice
   namespace: testNamespace

cli/internal/helm/testdata/GCP/constellation-services/charts/keyservice/templates/daemonset.yaml

@@ -2,23 +2,23 @@ apiVersion: apps/v1
 kind: DaemonSet
 metadata:
   labels:
-    component: kms
-    k8s-app: kms
+    component: keyservice
+    k8s-app: keyservice
     kubernetes.io/cluster-service: "true"
-  name: kms
+  name: keyservice
   namespace: testNamespace
 spec:
   selector:
     matchLabels:
-      k8s-app: kms
+      k8s-app: keyservice
   template:
     metadata:
       labels:
-        k8s-app: kms
+        k8s-app: keyservice
     spec:
       containers:
-        - name: kms
-          image: kmsImage
+        - name: keyservice
+          image: keyserviceImage
           args:
             - --port=9000
           volumeMounts:
@@ -29,7 +29,7 @@ spec:
       nodeSelector:
         node-role.kubernetes.io/control-plane: ""
       priorityClassName: system-cluster-critical
-      serviceAccountName: kms
+      serviceAccountName: keyservice
       tolerations:
       - key: CriticalAddonsOnly
         operator: Exists

cli/internal/helm/testdata/GCP/constellation-services/charts/keyservice/templates/service.yaml

@@ -1,7 +1,7 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: kms
+  name: keyservice
   namespace: testNamespace
 spec:
   ports:
@@ -10,7 +10,7 @@ spec:
     protocol: TCP
     targetPort: 9000
   selector:
-    k8s-app: kms
+    k8s-app: keyservice
   type: ClusterIP
 status:
   loadBalancer: {}

cli/internal/helm/testdata/GCP/constellation-services/charts/keyservice/templates/serviceaccount.yaml

@@ -1,5 +1,5 @@
 apiVersion: v1
 kind: ServiceAccount
 metadata:
-  name: kms
+  name: keyservice
   namespace: testNamespace

cli/internal/helm/testdata/QEMU/constellation-services/charts/join-service/templates/daemonset.yaml

@@ -38,7 +38,7 @@ spec:
           image: joinServiceImage
           args:
             - --cloud-provider=QEMU
-            - --kms-endpoint=kms.testNamespace:9000
+            - --keyservice-endpoint=keyservice.testNamespace:9000
           volumeMounts:
             - mountPath: /var/config
               name: config

cli/internal/helm/testdata/QEMU/constellation-services/charts/keyservice/templates/clusterrole.yaml

@@ -2,8 +2,8 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   labels:
-    k8s-app: kms
-  name: kms
+    k8s-app: keyservice
+  name: keyservice
 rules:
 - apiGroups:
   - ""

cli/internal/helm/testdata/QEMU/constellation-services/charts/keyservice/templates/clusterrolebinding.yaml

@@ -1,12 +1,12 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
-  name: kms
+  name: keyservice
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
-  name: kms
+  name: keyservice
 subjects:
 - kind: ServiceAccount
-  name: kms
+  name: keyservice
   namespace: testNamespace

cli/internal/helm/testdata/QEMU/constellation-services/charts/keyservice/templates/daemonset.yaml

@@ -2,23 +2,23 @@ apiVersion: apps/v1
 kind: DaemonSet
 metadata:
   labels:
-    component: kms
-    k8s-app: kms
+    component: keyservice
+    k8s-app: keyservice
     kubernetes.io/cluster-service: "true"
-  name: kms
+  name: keyservice
   namespace: testNamespace
 spec:
   selector:
     matchLabels:
-      k8s-app: kms
+      k8s-app: keyservice
   template:
     metadata:
       labels:
-        k8s-app: kms
+        k8s-app: keyservice
     spec:
       containers:
-        - name: kms
-          image: kmsImage
+        - name: keyservice
+          image: keyserviceImage
           args:
             - --port=9000
           volumeMounts:
@@ -29,7 +29,7 @@ spec:
       nodeSelector:
         node-role.kubernetes.io/control-plane: ""
       priorityClassName: system-cluster-critical
-      serviceAccountName: kms
+      serviceAccountName: keyservice
       tolerations:
       - key: CriticalAddonsOnly
         operator: Exists

cli/internal/helm/testdata/QEMU/constellation-services/charts/keyservice/templates/service.yaml

@@ -1,7 +1,7 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: kms
+  name: keyservice
   namespace: testNamespace
 spec:
   ports:
@@ -10,7 +10,7 @@ spec:
     protocol: TCP
     targetPort: 9000
   selector:
-    k8s-app: kms
+    k8s-app: keyservice
   type: ClusterIP
 status:
   loadBalancer: {}

cli/internal/helm/testdata/QEMU/constellation-services/charts/keyservice/templates/serviceaccount.yaml

@@ -1,5 +1,5 @@
 apiVersion: v1
 kind: ServiceAccount
 metadata:
-  name: kms
+  name: keyservice
   namespace: testNamespace