Version: v0.2.2 Latest Latest

This package is not in the latest version of its module.

Go to latest
Published: Jan 10, 2020 License: Apache-2.0 Imports: 10 Imported by: 28



Copyright 2018 Google LLC

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.



View Source
const (
	// Public Key constant for Attestation Secrets.
	PrivateKey = "private"
	// Private Key constant for Attestation Secrets.
	PublicKey = "public"
	// Passphrase constant for Attestation Secrets.
	Passphrase = "passphrase"


This section is empty.


func KeyAndFingerprint added in v0.2.0

func KeyAndFingerprint(publicKeyData string) (key, fingerprint string, err error)

KeyAndFingerprint returns the key and the fingerprint from the base64 encoded public key data


type Fetcher

type Fetcher func(namespace string, name string) (*PGPSigningSecret, error)

Fetcher is the function used to fetch kubernetes secret.

type PGPSigningSecret

type PGPSigningSecret struct {
	PgpKey     *PgpKey
	SecretName string

PGPSigningSecret represents gpg private/public key pair secret in your kubernetes cluster, where private key was decrypted with the passphrase. The secret expects private and public key to be stored in "private" and "public" keys, and private key to be decrypted with the "passphrase" key e.g. kubectl create secret generic my-secret --from-file=public=pub.gpg \ --from-file=private=priv.key --from-literal=passphrase=<value>

func Fetch

func Fetch(namespace string, name string) (*PGPSigningSecret, error)

Fetch fetches kubernetes secret

type PgpKey

type PgpKey struct {
	// contains filtered or unexported fields

PgpKey struct converts the base64 encoded PEM keys into openpgp private and public keys

func NewPgpKey

func NewPgpKey(privateKeyStr string, passphrase string, publicKeyStr string) (*PgpKey, error)

func (*PgpKey) Fingerprint

func (key *PgpKey) Fingerprint() string

func (*PgpKey) PrivateKey

func (key *PgpKey) PrivateKey() *packet.PrivateKey

func (*PgpKey) PublicKey

func (key *PgpKey) PublicKey() *packet.PublicKey

type SecretTestData added in v0.1.1

type SecretTestData struct {
	// contains filtered or unexported fields

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
t or T : Toggle theme light dark auto
y or Y : Canonical URL