secretsencrypt

package
v0.0.0-...-f4dfa5d Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jan 16, 2024 License: Apache-2.0 Imports: 25 Imported by: 0

Documentation

Index

Constants

View Source
const (
	EncryptionStart             string = "start"
	EncryptionPrepare           string = "prepare"
	EncryptionRotate            string = "rotate"
	EncryptionRotateKeys        string = "rotate_keys"
	EncryptionReencryptRequest  string = "reencrypt_request"
	EncryptionReencryptActive   string = "reencrypt_active"
	EncryptionReencryptFinished string = "reencrypt_finished"
)

Variables

View Source
var EncryptionHashAnnotation = version.Program + ".io/encryption-config-hash"

Functions

func BootstrapEncryptionHashAnnotation

func BootstrapEncryptionHashAnnotation(node *corev1.Node, runtime *config.ControlRuntime) error

func GenEncryptionConfigHash

func GenEncryptionConfigHash(runtime *config.ControlRuntime) (string, error)

func GenReencryptHash

func GenReencryptHash(runtime *config.ControlRuntime, keyName string) (string, error)

GenReencryptHash generates a sha256 hash from the existing secrets keys and a new key based on the input arguments.

func GetEncryptionKeys

func GetEncryptionKeys(runtime *config.ControlRuntime) ([]apiserverconfigv1.Key, error)

func Register

func Register(
	ctx context.Context,
	k8s kubernetes.Interface,
	controlConfig *config.Control,
	nodes coreclient.NodeController,
	secrets coreclient.SecretController,
) error

func WriteEncryptionConfig

func WriteEncryptionConfig(runtime *config.ControlRuntime, keys []apiserverconfigv1.Key, enable bool) error

func WriteEncryptionHashAnnotation

func WriteEncryptionHashAnnotation(runtime *config.ControlRuntime, node *corev1.Node, stage string) error

Types

This section is empty.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL