keymanager

Documentation

Index

• Constants
• type KeyManager
• type PassthroughKeyManager
  • func NewPassthroughKeyManager(ctx context.Context, key []byte) (*PassthroughKeyManager, error)
  • func (w *PassthroughKeyManager) RetrievalToken(ctx context.Context) ([]byte, error)
  • func (w *PassthroughKeyManager) Wrapper() wrapping.Wrapper

Constants

const (
	KeyID = "root"
)

Types

type KeyManager

type KeyManager interface {
	// Returns a wrapping.Wrapper which can be used to perform key-related operations.
	Wrapper() wrapping.Wrapper
	// RetrievalToken is the material returned which can be used to source back the
	// encryption key. Depending on the implementation, the token can be the
	// encryption key itself or a token/identifier used to exchange the token.
	RetrievalToken(ctx context.Context) ([]byte, error)
}

type PassthroughKeyManager

type PassthroughKeyManager struct {
	// contains filtered or unexported fields
}

func NewPassthroughKeyManager

func NewPassthroughKeyManager(ctx context.Context, key []byte) (*PassthroughKeyManager, error)

NewPassthroughKeyManager returns a new instance of the Kube encryption key. If a key is provided, it will be used as the encryption key for the wrapper, otherwise one will be generated.

func (*PassthroughKeyManager) RetrievalToken

func (w *PassthroughKeyManager) RetrievalToken(ctx context.Context) ([]byte, error)

RetrievalToken returns the key that was used on the wrapper since this key manager is simply a passthrough and does not provide a mechanism to abstract this key.

func (*PassthroughKeyManager) Wrapper

func (w *PassthroughKeyManager) Wrapper() wrapping.Wrapper

Wrapper returns the manager's wrapper for key operations.