constellation/internal/kms/config/config.go
Otto Bittner 0e71322e2e keyservice: move kms code to internal/kms
Recovery (disk-mapper) and init (bootstrapper)
will have to work with multiple external KMSes
in the future.
2023-01-19 13:14:55 +01:00

28 lines
817 B
Go

/*
Copyright (c) Edgeless Systems GmbH
SPDX-License-Identifier: AGPL-3.0-only
*/
package config
const (
// SymmetricKeyLength is the length of symmetric encryption keys in bytes. We use AES256, therefore this is 32 Bytes.
SymmetricKeyLength = 32
)
var (
// KmsTags are the default tags for kms client created KMS solutions.
KmsTags = map[string]string{
"createdBy": "constellation-kms-client",
"component": "constellation-kek",
}
// StorageTags are the default tags for kms client created storage solutions.
StorageTags = map[string]string{
"createdBy": "constellation-kms-client",
"component": "constellation-dek-store",
}
// AWSS3Tag is the default tag string for kms client created AWS S3 storage solutions.
AWSS3Tag = "createdBy=constellation-kms-client&component=constellation-dek-store"
)