This guide lists the third-party applications officially integrated with OVHcloud KMS and links to their documentation.
Objective
OVHcloud maintains dedicated integrations for selected third-party applications, such as plugins, operators, and configuration guides. This reference page lists those integrations and links to the documentation you need to set them up.
Requirements
- An OVHcloud customer account.
- An OKMS domain (for most integrations).
Instructions
Official third-party integrations
The table below is updated as new OVHcloud-maintained integrations are released. Only third-party products with an integration maintained by OVHcloud are listed.
| Third-party product | Integration type | Plugin | Documentation |
|---|---|---|---|
| Kubernetes | ETCD encryption at rest via okms-k8s-encryption-provider
|
okms-k8s-encryption-provider | Encrypt Kubernetes ETCD with OVHcloud KMS |
| Cosign | KMS-backed OCI image signing (ovhcloud:// URI) |
sigstore-kms-ovhcloud |
Secure Image Signing with Cosign and OVHcloud KMS Cosign key management (OVHcloud) |
| OpenBao | Auto-unseal via ovhcloud seal |
openbao-plugins | OVHcloud KMS seal (OpenBao) |
| OpenTofu | State/plan encryption via external key provider | opentofu-kms-ovhcloud | OVHcloud KMS (external) (OpenTofu) |
Products compatible via the KMIP protocol (VMware, Nutanix, MongoDB, OpenBao, etc.) are not listed here: those integrations are maintained by their respective vendors, not by OVHcloud.