kms

Documentation

Index

• func IsInvalidConfig(err error) bool
• func IsKeyNotFound(err error) bool
• func IsKeyScheduledForDeletion(err error) bool
• type Encrypter
  • func NewEncrypter(c *EncrypterConfig) (*Encrypter, error)
  • func (k *Encrypter) Encrypt(ctx context.Context, key, plaintext string) (string, error)
  • func (k *Encrypter) EncryptionKey(ctx context.Context, cr v1alpha1.AWSConfig) (string, error)
  • func (e *Encrypter) EnsureCreatedEncryptionKey(ctx context.Context, cr v1alpha1.AWSConfig) error
  • func (e *Encrypter) EnsureDeletedEncryptionKey(ctx context.Context, cr v1alpha1.AWSConfig) error
  • func (e *Encrypter) IsKeyNotFound(err error) bool
• type EncrypterConfig
• type KMSClient

Functions

func IsInvalidConfig

func IsInvalidConfig(err error) bool

IsInvalidConfig asserts invalidConfigError.

func IsKeyNotFound

func IsKeyNotFound(err error) bool

IsKeyNotFound asserts keyNotFoundError.

func IsKeyScheduledForDeletion

func IsKeyScheduledForDeletion(err error) bool

IsKeyScheduledForDeletion asserts keyScheduledForDeletionError.

Types

type Encrypter

type Encrypter struct {
	// contains filtered or unexported fields
}

func NewEncrypter

func NewEncrypter(c *EncrypterConfig) (*Encrypter, error)

func (*Encrypter) Encrypt

func (k *Encrypter) Encrypt(ctx context.Context, key, plaintext string) (string, error)

func (*Encrypter) EncryptionKey

func (k *Encrypter) EncryptionKey(ctx context.Context, cr v1alpha1.AWSConfig) (string, error)

func (*Encrypter) EnsureCreatedEncryptionKey

func (e *Encrypter) EnsureCreatedEncryptionKey(ctx context.Context, cr v1alpha1.AWSConfig) error

func (*Encrypter) EnsureDeletedEncryptionKey

func (e *Encrypter) EnsureDeletedEncryptionKey(ctx context.Context, cr v1alpha1.AWSConfig) error

func (*Encrypter) IsKeyNotFound

func (e *Encrypter) IsKeyNotFound(err error) bool

type EncrypterConfig

type EncrypterConfig struct {
	Logger micrologger.Logger

	InstallationName string
}

type KMSClient

type KMSClient interface {
	Encrypt(*kms.EncryptInput) (*kms.EncryptOutput, error)
}