Add Cloud KMS based secret storage

-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=147791972
This commit is contained in:
shikhman 2017-02-16 17:55:19 -08:00 committed by Ben McIlwain
parent ab6e7b177a
commit be30ecdf66
24 changed files with 2255 additions and 0 deletions

View file

@ -182,3 +182,11 @@ braintree:
# currency). For example, one entry might be:
# USD: accountIdUsingUSD
merchantAccountIdsMap: {}
kms:
# GCP project containing the KMS keyring. Should only be used for KMS in
# order to keep a simple locked down IAM configuration.
projectId: registry-kms-project-id
# The name to use for the Cloud KMS KeyRing which will store encryption keys
# for Nomulus secrets.
keyringName: nomulus