secretsencrypt

Documentation

Index

• Constants
• Variables
• func BootstrapEncryptionHashAnnotation(node *corev1.Node, runtime *config.ControlRuntime) error
• func GenEncryptionConfigHash(runtime *config.ControlRuntime) (string, error)
• func GenReencryptHash(runtime *config.ControlRuntime, keyName string) (string, error)
• func GetEncryptionKeys(runtime *config.ControlRuntime) ([]apiserverconfigv1.Key, error)
• func GetEncryptionProviders(runtime *config.ControlRuntime) ([]apiserverconfigv1.ProviderConfiguration, error)
• func Register(ctx context.Context, k8s kubernetes.Interface, controlConfig *config.Control, ...) error
• func WriteEncryptionConfig(runtime *config.ControlRuntime, keys []apiserverconfigv1.Key, enable bool) error
• func WriteEncryptionHashAnnotation(runtime *config.ControlRuntime, node *corev1.Node, stage string) error

Constants

const (
	EncryptionStart             string = "start"
	EncryptionPrepare           string = "prepare"
	EncryptionRotate            string = "rotate"
	EncryptionReencryptRequest  string = "reencrypt_request"
	EncryptionReencryptActive   string = "reencrypt_active"
	EncryptionReencryptFinished string = "reencrypt_finished"
)

Variables

var EncryptionHashAnnotation = version.Program + ".io/encryption-config-hash"

Functions

func BootstrapEncryptionHashAnnotation

func BootstrapEncryptionHashAnnotation(node *corev1.Node, runtime *config.ControlRuntime) error

func GenEncryptionConfigHash

func GenEncryptionConfigHash(runtime *config.ControlRuntime) (string, error)

func GenReencryptHash

func GenReencryptHash(runtime *config.ControlRuntime, keyName string) (string, error)

GenReencryptHash generates a sha256 hash from the existing secrets keys and a new key based on the input arguments.

func GetEncryptionKeys

func GetEncryptionKeys(runtime *config.ControlRuntime) ([]apiserverconfigv1.Key, error)

func GetEncryptionProviders

func GetEncryptionProviders(runtime *config.ControlRuntime) ([]apiserverconfigv1.ProviderConfiguration, error)

func Register

func Register(
	ctx context.Context,
	k8s kubernetes.Interface,
	controlConfig *config.Control,
	nodes coreclient.NodeController,
	secrets coreclient.SecretController,
) error

func WriteEncryptionConfig

func WriteEncryptionConfig(runtime *config.ControlRuntime, keys []apiserverconfigv1.Key, enable bool) error

func WriteEncryptionHashAnnotation

func WriteEncryptionHashAnnotation(runtime *config.ControlRuntime, node *corev1.Node, stage string) error