in plugin/v2/healthz.go [46:65]
func (h *HealthChecker) PingKMS(ctx context.Context, conn *grpc.ClientConn) error {
client := NewKeyManagementServiceClient(conn)
encryptResponse, err := client.Encrypt(ctx, &EncryptRequest{
Uid: uuid.NewString(),
Plaintext: []byte("secret"),
})
if err != nil {
return fmt.Errorf("failed to ping KMS: %w", err)
}
if _, err = client.Decrypt(ctx, &DecryptRequest{
Uid: uuid.NewString(),
Ciphertext: []byte(encryptResponse.Ciphertext),
}); err != nil {
return fmt.Errorf("failed to ping KMS: %w", err)
}
return nil
}