Add validation checks for config option amazon_web_services.eks_kms_a…

…rn to ensure KMS-key ARN available
nebari-dev · Sep 27, 2024 · a89989c · a89989c
1 parent e13fdb3
commit a89989c
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/src/_nebari/stages/infrastructure/__init__.py b/src/_nebari/stages/infrastructure/__init__.py
@@ -565,8 +565,13 @@ def _check_input(cls, data: Any) -> Any:
         # check if kms key is valid
         available_kms_keys = amazon_web_services.kms_key_arns(data["region"])
         if "eks_kms_arn" in data:
-            key_id = [id for id in available_kms_keys.keys() if id in data["eks_kms_arn"]]
-            if len(key_id) == 1 and available_kms_keys[key_id[0]]["Arn"] == data["eks_kms_arn"]:
+            key_id = [
+                id for id in available_kms_keys.keys() if id in data["eks_kms_arn"]
+            ]
+            if (
+                len(key_id) == 1
+                and available_kms_keys[key_id[0]]["Arn"] == data["eks_kms_arn"]
+            ):
                 key_id = key_id[0]
                 if available_kms_keys[key_id]["KeyUsage"] != "ENCRYPT_DECRYPT":
                     raise ValueError(