terraform_encryption_migration

Documentation

Index

• type PayloadDecrypter
• type PayloadEncrypter
• type Service
  • func NewTerraformEncryptionMigrationService(terraformSvc terraformService) *Service
  • func (s *Service) RotateOrRekeyEncryptedTerraformResourceHcl(hclParser hcl.Parser, hclBytes []byte, passphraseSvc *passphrase.Service, ...) (*hclwrite.File, error)

Types

type PayloadDecrypter

type PayloadDecrypter interface {
	Decrypt(encryptedPayload *payload.EncryptedPayload) (*payload.Payload, error)
}

type PayloadEncrypter

type PayloadEncrypter interface {
	Encrypt(payload *payload.Payload) (*payload.EncryptedPayload, error)
}

type Service

type Service struct {
	// contains filtered or unexported fields
}

func NewTerraformEncryptionMigrationService

func NewTerraformEncryptionMigrationService(terraformSvc terraformService) *Service

func (*Service) RotateOrRekeyEncryptedTerraformResourceHcl

func (s *Service) RotateOrRekeyEncryptedTerraformResourceHcl(
	hclParser hcl.Parser,
	hclBytes []byte,
	passphraseSvc *passphrase.Service,
	payloadSerdeSvc *payload.SerdeService,
	oldPayloadDecrypter PayloadDecrypter,
	newPayloadEncrypter PayloadEncrypter,
) (*hclwrite.File, error)

RotateOrRekeyEncryptedTerraformResourceHcl parses and rotates a HCL terraform file with `vault_encrypted_secret` terraform resources encrypted that were using `encrypt` cmd. It decrypts, encrypts and replaces existing terraform `vaulted`. It does not lose/modify resources that are not `vault_encrypted_secret`.