[KMS] Add support for ReplicaKey resource to enable multi-region key management #2664
Description
Is your feature request related to a problem?
No
Add support for the ReplicaKey resource to the ACK KMS controller to enable users to create and manage multi-region key replicas in AWS KMS.
Currently, the ACK KMS controller supports creating multi-region primary keys via the Key resource with multiRegion: true, but there is no way to create replicas of these keys in other AWS regions.
Describe the solution you'd like
Implement the ReplicaKey custom resource that maps to the AWS KMS
ReplicateKey API operation.
Resource Definition:
apiVersion: kms.services.k8s.aws/v1alpha1
kind: ReplicaKey
metadata:
name: my-replica-key
spec:
# Reference to the primary multi-region key
keyRef:
from:
name: my-primary-key
# Target region for the replica
replicaRegion: us-east-1
# Optional fields
description: "Replica key for disaster recovery"
policy: |
{ "Statement": [...] }
tags:
- tagKey: Environment
tagValue: Production
**Describe alternatives you've considered**
NA