encrypt

Documentation

Overview

Package encrypt represents the nodes current encryption state. It is used by the datapath to learn current encryption configuration and managed by golang linux datapath ./pkg/datapath/linux/ objects. This will reflect any key rotations/updates. +groupName=maps

Index

• Constants
• func MapCreate() error
• func MapUpdateContext(ctxID uint32, keyID uint8) error
• func MapUpdateContextWithMap(m *bpf.Map, ctxID uint32, keyID uint8) error
• func NewMap(MapName string) *bpf.Map
• type EncryptKey
  • func (k EncryptKey) New() bpf.MapKey
  • func (k EncryptKey) String() string
• type EncryptValue
  • func (v EncryptValue) New() bpf.MapValue
  • func (v EncryptValue) String() string

Constants

const (
	// MapName name of map used to pin map for datapath
	MapName = "cilium_encrypt_state"

	// MaxEntries represents the maximum number of current encryption contexts
	MaxEntries = 1
)

Functions

func MapCreate

func MapCreate() error

MapCreate will create an encrypt map that is ready for use.

func MapUpdateContext

func MapUpdateContext(ctxID uint32, keyID uint8) error

MapUpdateContext updates the encrypt state with ctxID to use the new keyID

func MapUpdateContextWithMap

func MapUpdateContextWithMap(m *bpf.Map, ctxID uint32, keyID uint8) error

MapUpdateContextWithMap updates the encrypt state with ctxID to use the new keyID with the map as its argument.

This is primarily used in tests.

func NewMap

func NewMap(MapName string) *bpf.Map

NewMap will construct a bpf.Map that is not open or created yet.

Types

type EncryptKey

type EncryptKey struct {
	// contains filtered or unexported fields
}

EncryptKey is the context ID for the encryption session

func (EncryptKey) New

func (k EncryptKey) New() bpf.MapKey

func (EncryptKey) String

func (k EncryptKey) String() string

String pretty print the EncryptKey

type EncryptValue

type EncryptValue struct {
	// contains filtered or unexported fields
}

EncryptValue is ID assigned to the keys

func (EncryptValue) New

func (v EncryptValue) New() bpf.MapValue

func (EncryptValue) String

func (v EncryptValue) String() string

String pretty print the encryption key index.