encrypt

Documentation

Overview

Package encrypt represents the nodes current encryption state. It is used by the datapath to learn current encryption configuration and managed by golang linux datapath ./pkg/datapath/linux/ objects. This will reflect any key rotations/updates. +groupName=maps

Index

• Constants
• func MapCreate() error
• func MapUpdateContext(ctxID uint32, keyID uint8) error
• type EncryptKey
  • func (k EncryptKey) New() bpf.MapKey
  • func (k EncryptKey) String() string
• type EncryptValue
  • func (v EncryptValue) New() bpf.MapValue
  • func (v EncryptValue) String() string

Constants

const (
	// MapName name of map used to pin map for datapath
	MapName = "cilium_encrypt_state"

	// MaxEntries represents the maximum number of current encryption contexts
	MaxEntries = 1
)

Functions

func MapCreate

func MapCreate() error

MapCreate will create an encrypt map

func MapUpdateContext

func MapUpdateContext(ctxID uint32, keyID uint8) error

MapUpdateContext updates the encrypt state with ctxID to use the new keyID

Types

type EncryptKey

type EncryptKey struct {
	// contains filtered or unexported fields
}

EncryptKey is the context ID for the encryption session

func (EncryptKey) New

func (k EncryptKey) New() bpf.MapKey

func (EncryptKey) String

func (k EncryptKey) String() string

String pretty print the EncryptKey

type EncryptValue

type EncryptValue struct {
	// contains filtered or unexported fields
}

EncryptValue is ID assigned to the keys

func (EncryptValue) New

func (v EncryptValue) New() bpf.MapValue

func (EncryptValue) String

func (v EncryptValue) String() string

String pretty print the encryption key index.