ocikms

Documentation

Overview

Copyright © 2019, Oracle and/or its affiliates.

Index

• Constants
• type OCIKMSMechanism
• type OCIKMSSeal
  • func NewSeal(logger log.Logger) *OCIKMSSeal
  • func (k *OCIKMSSeal) Decrypt(ctx context.Context, in *physical.EncryptedBlobInfo) ([]byte, error)
  • func (k *OCIKMSSeal) Encrypt(ctx context.Context, plaintext []byte) (*physical.EncryptedBlobInfo, error)
  • func (k *OCIKMSSeal) Finalize(context.Context) error
  • func (k *OCIKMSSeal) Init(context.Context) error
  • func (k *OCIKMSSeal) KeyID() string
  • func (k *OCIKMSSeal) SealType() string
  • func (k *OCIKMSSeal) SetConfig(config map[string]string) (map[string]string, error)

Constants

const (
	// OCI KMS key ID to use for encryption and decryption
	EnvOCIKMSSealKeyID = "VAULT_OCIKMS_SEAL_KEY_ID"
	// OCI KMS crypto endpoint to use for encryption and decryption
	EnvOCIKMSCryptoEndpoint = "VAULT_OCIKMS_CRYPTO_ENDPOINT"
	// OCI KMS management endpoint to manage keys
	EnvOCIKMSManagementEndpoint = "VAULT_OCIKMS_MANAGEMENT_ENDPOINT"
	// Maximum number of retries
	KMSMaximumNumberOfRetries = 5
	// keyID config
	KMSConfigKeyID = "key_id"
	// cryptoEndpoint config
	KMSConfigCryptoEndpoint = "crypto_endpoint"
	// managementEndpoint config
	KMSConfigManagementEndpoint = "management_endpoint"
	// authTypeAPIKey config
	KMSConfigAuthTypeAPIKey = "auth_type_api_key"
)

Types

type OCIKMSMechanism

type OCIKMSMechanism uint32

OCIKMSMechanism is the method used to encrypt/decrypt in auto unseal process

type OCIKMSSeal

type OCIKMSSeal struct {
	// contains filtered or unexported fields
}

func NewSeal

func NewSeal(logger log.Logger) *OCIKMSSeal

NewSeal creates a new OCIKMSSeal seal with the provided logger

func (*OCIKMSSeal) Decrypt

func (k *OCIKMSSeal) Decrypt(ctx context.Context, in *physical.EncryptedBlobInfo) ([]byte, error)

func (*OCIKMSSeal) Encrypt

func (k *OCIKMSSeal) Encrypt(ctx context.Context, plaintext []byte) (*physical.EncryptedBlobInfo, error)

func (*OCIKMSSeal) Finalize

func (k *OCIKMSSeal) Finalize(context.Context) error

func (*OCIKMSSeal) Init

func (k *OCIKMSSeal) Init(context.Context) error

func (*OCIKMSSeal) KeyID

func (k *OCIKMSSeal) KeyID() string

func (*OCIKMSSeal) SealType

func (k *OCIKMSSeal) SealType() string

func (*OCIKMSSeal) SetConfig

func (k *OCIKMSSeal) SetConfig(config map[string]string) (map[string]string, error)