in plugin/v1/healthz.go [47:66]
func (h *HealthChecker) PingKMS(ctx context.Context, conn *grpc.ClientConn) error {
client := NewKeyManagementServiceClient(conn)
encryptResponse, err := client.Encrypt(ctx, &EncryptRequest{
Version: apiVersion,
Plain: []byte("secret"),
})
if err != nil {
return fmt.Errorf("failed to ping KMS: %w", err)
}
if _, err = client.Decrypt(ctx, &DecryptRequest{
Version: apiVersion,
Cipher: []byte(encryptResponse.Cipher),
}); err != nil {
return fmt.Errorf("failed to ping KMS: %w", err)
}
return nil
}