Skip to content

Fix #1142

Pre-release
Pre-release
Compare
Choose a tag to compare
@onjen onjen released this 06 Dec 15:04
fix(gcpkms): Set quota project to API project

Like described in the linked issue, if the GCP KMS key is stored in
project foo, but the service account is created in project bar, sops
complains that KMS API is not enabled in project bar.

The quota project used by default is the one encoded in the service
account key. With this commit, the behavior changes, so the project
where the KMS key and API reside, is read from the key ID and set
via the quota project option.

Fixes #1142

Signed-off-by: Johannes Rothe <[email protected]>