Goal

• Find a suitable way to deliver the AWS KMS image for releases (OpenShift 4.14 and OpenShift 4.15) prior to the inclusion in the release payload

Why is this important?

• To have a reliable source of AWS KMS images for customers
• To pick up any fix that might be backported to those releases

Scenarios

1. Hosted Cluster creation in ROSA/HCP needs AWS KMS image to be sourced from a supported source

Acceptance Criteria

• Approved registry location
• Low dev maintenance
• CI - Covered by CI
• QE - Covered by HyperShift promotion testing in ROSA/HCP

Dependencies (internal and external)

1. https://github.com/openshift/aws-encryption-provider

Previous Work (Optional):

1. HOSTEDCP-1310

Open questions:

1. Should this be promoted by CI?
2. Should this be CI mirrored?
3. Should we use Konflux to deliver the images to prod-service registry?

Done Checklist

• CI - CI is running, tests are automated and merged.
• DEV - Upstream documentation merged: <link to meaningful PR or GitHub Issue>
• DEV - Document the source of the images for SRE and support