packer-plugin

packer {
  required_plugins {
    kms = {
      # source represents the GitHub URI to the plugin repository without the `packer-plugin-` prefix.
      source  = "github.com/hanzokms/kms"
      version = ">=0.0.1"
    }
  }
}

Alternatively, you can use packer plugins install to manage installation of this plugin.

$ packer plugins install github.com/hanzokms/kms

Components

Data Sources

kms-secrets - Retrieve secrets from a folder.

Authentication

The Hanzo KMS provider currently supports these authentication methods:

Universal Auth

Universal Auth

Usage example:

data "kms-secrets" "dev-secrets" {
  folder_path = "/"
  env_slug    = "dev"
  project_id  = "00000000-0000-0000-0000-000000000000"

  universal_auth {
    client_id = "00000000-0000-0000-0000-000000000000"
    client_secret = "..."
  }
}

client_secret may be left blank if you're using the KMS_UNIVERSAL_AUTH_CLIENT_SECRET environment variable.