in generatebundlefile/bundle.go [121:144]
func GetBundleSignature(ctx context.Context, bundle *api.PackageBundle, key string) (string, error) {
digest, _, err := sig.GetDigest(bundle, sig.EksaDomain)
if err != nil {
return "", err
}
conf, err := config.LoadDefaultConfig(context.TODO(), config.WithRegion(defaultRegion))
if err != nil {
return "", err
}
client := kms.NewFromConfig(conf)
input := &kms.SignInput{
KeyId: &key,
SigningAlgorithm: types.SigningAlgorithmSpecEcdsaSha256,
MessageType: types.MessageTypeDigest,
Message: digest[:],
}
out, err := client.Sign(context.Background(), input)
if err != nil {
return "", err
}
return base64.StdEncoding.EncodeToString(out.Signature), nil
}