v4.9.0

4.9.0 (2023-09-11)

Features

• You can now use keys that you created outside this module or from different accounts. You specify the key CRN in the "existing_key_crn" field. When using an existing key crn, user must have an authentication policy that allows the block-storage, cloud-object-storage and secrets-manager to access the Key Management Service in the external account. (#547) (1c27943)
  For example:

  "key_management": {
      "keys": [
          {
              "key_ring": "slz-slz-ring",
              "name": "slz-slz-key",
              "root_key": true
          },
          {
              "name": "slz-atracker-key",
              "existing_key_crn": "xxxx-xxx-xxx"
          }
      ],
      "name": "slz-slz-kms",
      "resource_group": "slz-service-rg",
      "use_hs_crypto": false
  }