provisioning/taskservs/kms/info.md
2025-09-22 23:11:41 +01:00

1.0 KiB

Cosmian KMS taskserv has been successfully added to the provisioning system! The service includes:

Created files:

  • taskservs/kms/kcl/kms.k - KCL schema definitions for KMS configuration
  • taskservs/kms/default/provisioning.toml - Service metadata
  • taskservs/kms/default/env-kms.j2 - Environment variable template
  • taskservs/kms/default/kms.toml.j2 - KMS configuration file template
  • taskservs/kms/default/kms.service.j2 - Systemd service template
  • taskservs/kms/default/install-kms.sh - Installation script
  • taskservs/kms/default/prepare - Preparation script

Features:

  • Configurable Cosmian KMS server (default port 9998)
  • Multiple database backends: SQLite, MySQL, PostgreSQL, Redis
  • JWT authentication support with configurable IdP
  • TLS/SSL support with certificate configuration
  • FIPS mode support
  • Systemd service integration with security hardening
  • User and permission management
  • Automatic service discovery

The service can now be deployed using: ./core/nulib/provisioning taskserv create kms