encrypt

Documentation

Overview

Package encrypt represents the nodes current encryption state. It is used by the datapath to learn current encryption configuration and managed by golang linux datapath ./pkg/datapath/linux/ objects. This will reflect any key rotations/updates.

Index

• Constants
• func MapCreate()
• func MapUpdateContext(ctxID uint32, keyID uint8) error
• type EncryptKey
  • func (k *EncryptKey) GetKeyPtr() unsafe.Pointer
  • func (k EncryptKey) NewValue() bpf.MapValue
  • func (k EncryptKey) String() string
• type EncryptValue
  • func (v *EncryptValue) GetValuePtr() unsafe.Pointer
  • func (v EncryptValue) String() string

Constants

const (
	// MapName name of map used to pin map for datapath
	MapName = "cilium_encrypt_state"

	// MaxEntries represents the maximum number of current encryption contexts
	MaxEntries = 1
)

Functions

func MapCreate

func MapCreate()

MapCreate will create an encrypt map

func MapUpdateContext

func MapUpdateContext(ctxID uint32, keyID uint8) error

MapUpdateContext updates the encrypt state with ctxID to use the new keyID

Types

type EncryptKey

type EncryptKey struct {
	// contains filtered or unexported fields
}

EncryptKey is the context ID for the encryption session

func (*EncryptKey) GetKeyPtr

func (k *EncryptKey) GetKeyPtr() unsafe.Pointer

GetKeyPtr returns the unsafe pointer to the BPF key

func (EncryptKey) NewValue

func (k EncryptKey) NewValue() bpf.MapValue

NewValue returns a new empty instance of the structure represeting the BPF map value

func (EncryptKey) String

func (k EncryptKey) String() string

String pretty print the EncryptKey

type EncryptValue

type EncryptValue struct {
	// contains filtered or unexported fields
}

EncryptValue is ID assigned to the keys

func (*EncryptValue) GetValuePtr

func (v *EncryptValue) GetValuePtr() unsafe.Pointer

GetValuePtr returns the unsafe pointer to the BPF value.

func (EncryptValue) String

func (v EncryptValue) String() string

String pretty print the encyrption key index.