kubeseal

Documentation

Index

• func EncryptSecretItem(w io.Writer, secretName, ns string, data []byte, scope ssv1alpha1.SealingScope, ...) error
• func OpenCert(ctx context.Context, clientConfig ClientConfig, ...) (io.ReadCloser, error)
• func ParseFromFile(s string) (string, string)
• func ParseKey(r io.Reader) (*rsa.PublicKey, error)
• func ReEncryptSealedSecret(ctx context.Context, clientConfig ClientConfig, ...) error
• func Seal(clientConfig ClientConfig, outputFormat string, in io.Reader, out io.Writer, ...) error
• func SealMergingInto(clientConfig ClientConfig, outputFormat string, in io.Reader, filename string, ...) error
• func UnsealSealedSecret(w io.Writer, in io.Reader, privKeysFilenames []string, outputFormat string, ...) error
• func ValidateSealedSecret(ctx context.Context, clientConfig ClientConfig, ...) error
• type ClientConfig

Functions

func EncryptSecretItem

func EncryptSecretItem(w io.Writer, secretName, ns string, data []byte, scope ssv1alpha1.SealingScope, pubKey *rsa.PublicKey) error

func OpenCert

func OpenCert(ctx context.Context, clientConfig ClientConfig, controllerNs, controllerName string, certURL string) (io.ReadCloser, error)

func ParseFromFile

func ParseFromFile(s string) (string, string)

parseFromFile parses a value of the kubectl --from-file flag, which can optionally include an item name preceding the first equals sign.

func ParseKey

func ParseKey(r io.Reader) (*rsa.PublicKey, error)

func ReEncryptSealedSecret

func ReEncryptSealedSecret(ctx context.Context, clientConfig ClientConfig, controllerNs, controllerName, outputFormat string, in io.Reader, out io.Writer, codecs runtimeserializer.CodecFactory) error

func Seal

func Seal(clientConfig ClientConfig, outputFormat string, in io.Reader, out io.Writer, codecs runtimeserializer.CodecFactory, pubKey *rsa.PublicKey, scope ssv1alpha1.SealingScope, allowEmptyData bool, overrideName, overrideNamespace string) error

Seal reads a k8s Secret resource parsed from an input reader by a given codec, encrypts all its secrets with a given public key, using the name and namespace found in the input secret, unless explicitly overridden by the overrideName and overrideNamespace arguments.

func SealMergingInto

func SealMergingInto(clientConfig ClientConfig, outputFormat string, in io.Reader, filename string, codecs runtimeserializer.CodecFactory, pubKey *rsa.PublicKey, scope ssv1alpha1.SealingScope, allowEmptyData bool) error

func UnsealSealedSecret

func UnsealSealedSecret(w io.Writer, in io.Reader, privKeysFilenames []string, outputFormat string, codecs runtimeserializer.CodecFactory) error

func ValidateSealedSecret

func ValidateSealedSecret(ctx context.Context, clientConfig ClientConfig, controllerNs, controllerName string, in io.Reader) error

Types

type ClientConfig

type ClientConfig interface {
	ClientConfig() (*rest.Config, error)
	Namespace() (string, bool, error)
}