[Feature Request] <Decouple the use of CryptoPlugin and CryptoKeyProviderPlugin>

[asonje]

Is your feature request related to a problem? Please describe

crypto-kms plugin is a CryptoKeyProviderPlugin which currently fails to load on server startup even after being successfully installed. This happens because the CryptoHandlerRegistry would not load a CryptoKeyProviderPlugin without a CryptoPlugin present even though no CryptoPlugin implementation exists yet.

Describe the solution you'd like

The use of a CryptoKeyProviderPlugin should be decoupled from a CryptoPlugin; at least Opensearch should be able to load one plugin without the other. This can be easily achieved by modifying the logic in CryptoHandlerRegistry constructor that disallows this

Related component

Plugins

Describe alternatives you've considered

No response

Additional context

This proposed plugin (#12451, #12902) relies on a CryptoKeyProviderPlugin for managing keys and will not work without this feature

[andrross]

/cc @vikasvb90

[vikasvb90]

Thanks for notifying @andrross!
@asonje Do you see any use of key provider plugin without CryptoPlugin? If yes, then we can remove the strict check of CryptoPlugin to exist.

[peternied]

[Triage - attendees 1 2 3 4 5]
@asonje Thanks for filing - there might be other ways we can restructure this plugin to make its interfaces cleaner that would be worthwhile to consider during this effort.