fix(kms): resolve Vault auth from the environment at startup and add Kubernetes auth (#6095)

2026-08-22 04:16:38 +00:00 · 2026-08-17 14:12:39 +08:00
parent c04ee41cf0
commit d091554ffe
10 changed files with 862 additions and 104 deletions
@@ -550,6 +550,7 @@ impl VaultKmsClient {
            address: config.address.clone(),
            namespace: config.namespace.clone(),
            attempt_timeout: kms_config.effective_timeout(),
+            skip_tls_verify: config.tls.as_ref().is_some_and(|tls| tls.skip_verify),
        };
        let source = token_source_for(&config.auth_method, &settings)?;
        let policy = VaultCredentialPolicy::from_kms_config(