cloud

Documentation

Overview

Package cloud implements support for a generic cloud secret manager.

Index

• Constants
• func GenerateNewDataKey(url string) ([]byte, error)
• func NewCloudSecretsManagerFromState(state json.RawMessage) (secrets.Manager, error)
• type Manager
  • func NewCloudSecretsManager(url string, encryptedDataKey []byte) (*Manager, error)
  • func (m *Manager) Decrypter() (config.Decrypter, error)
  • func (m *Manager) EncryptedKey() []byte
  • func (m *Manager) Encrypter() (config.Encrypter, error)
  • func (m *Manager) State() interface{}
  • func (m *Manager) Type() string

Constants

const Type = "cloud"

Type is the type of secrets managed by this secrets provider

Functions

func GenerateNewDataKey

func GenerateNewDataKey(url string) ([]byte, error)

GenerateNewDataKey generates a new DataKey seeded by a fresh random 32-byte key and encrypted using the target coud key management service.

func NewCloudSecretsManagerFromState

func NewCloudSecretsManagerFromState(state json.RawMessage) (secrets.Manager, error)

NewCloudSecretsManagerFromState deserialize configuration from state and returns a secrets manager that uses the target cloud key management service to encrypt/decrypt a data key used for envelope encyrtion of secrets values.

Types

type Manager

type Manager struct {
	// contains filtered or unexported fields
}

Manager is the secrets.Manager implementation for cloud key management services

func NewCloudSecretsManager

func NewCloudSecretsManager(url string, encryptedDataKey []byte) (*Manager, error)

NewCloudSecretsManager returns a secrets manager that uses the target cloud key management service to encrypt/decrypt a data key used for envelope encryption of secrets values.

func (*Manager) Decrypter

func (m *Manager) Decrypter() (config.Decrypter, error)

func (*Manager) EncryptedKey

func (m *Manager) EncryptedKey() []byte

func (*Manager) Encrypter

func (m *Manager) Encrypter() (config.Encrypter, error)

func (*Manager) State

func (m *Manager) State() interface{}

func (*Manager) Type

func (m *Manager) Type() string