You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
33 lines
938 B
33 lines
938 B
# The address:port of the kes server - i.e. on the local machine.
|
|
address = "127.0.0.1:7373"
|
|
|
|
[tls]
|
|
key = "./kes-tls.key"
|
|
cert = "./kes-tls.crt"
|
|
|
|
[policy.minio]
|
|
paths = [
|
|
"/v1/key/create/minio-*",
|
|
"/v1/key/generate/minio-*",
|
|
"/v1/key/decrypt/minio-*"
|
|
]
|
|
identities = [ "dd46485bedc9ad2909d2e8f9017216eec4413bc5c64b236d992f7ec19c843c5f" ]
|
|
|
|
[cache.expiry]
|
|
all = "5m"
|
|
unused = "20s"
|
|
|
|
[keystore.vault]
|
|
address = "https://127.0.0.1:8200" # The Vault endpoint - i.e. https://127.0.0.1:8200
|
|
name = "minio" # The domain resp. prefix at Vault's K/V backend
|
|
|
|
[keystore.vault.approle]
|
|
id = "" # Your AppRole Role ID
|
|
secret = "" # Your AppRole Secret ID
|
|
retry = "15s" # Duration until the server tries to re-authenticate after connection loss.
|
|
|
|
[keystore.vault.tls]
|
|
ca = "./vault-tls.crt" # Since we use self-signed certificates
|
|
|
|
[keystore.vault.status]
|
|
ping = "10s"
|
|
|