KMS - Key Rotate

This is the interface for sharing keys between the NooBaa operator and the NooBaa core, endpoint pods for the Master Root Key rotation feature. The Root key rotate - core side #7218

Sample rotating Master Root Key secret

The secret will contain a list of keys and the pointer to the current key.

apiVersion: v1
kind: Secret
type: Opaque
metadata:
  name: noobaa-root-master-key-volume
  namespace: default
data:
  active_root_key: a2V5LTE2Nzg4MjYyMzE1Mjk3ODk0Mzc=
  key-1678826231529789437: cTJ1SG5pbXJYeHViVTJTUVkwZmZ6eWVhMFNQSHAwLzNUMS9Wbi9vcGNPVT0=

NooBaa core, endpoint pods view

The keys secret volume is mounted into the core, endpoint pods as a volume,
under /etc/noobaa-server/root_keys directory

Pod shell view,

bash-4.4$ cd /etc/noobaa-server/root_keys
bash-4.4$ ls -l
total 0
lrwxrwxrwx 1 root root 22 Mar 14 20:37 active_root_key -> ..data/active_root_key
lrwxrwxrwx 1 root root 30 Mar 14 20:37 key-1678826231529789437 -> ..data/key-1678826231529789437
bash-4.4$ for f in *; do echo "$f -> $(cat $f)"; done
active_root_key -> key-1678826231529789437
key-1678826231529789437 -> q2uHnimrXxubU2SQY0ffzyea0SPHp0/3T1/Vn/opcOU=