gke

Documentation

Index

• Constants
• Variables
• func BucketExists(projectId string, bucketName string) (bool, error)
• func CheckPermission(perm string, projectId string) (bool, error)
• func CreateBucket(projectId string, bucketName string, location string) error
• func CreateKmsKey(keyName string, keyringName string, projectId string) error
• func CreateKmsKeyring(keyringName string, projectId string) error
• func DeleteAllObjectsInBucket(bucketName string) error
• func DeleteBucket(bucketName string) error
• func DeleteServiceAccount(serviceAccount string, projectId string, roles []string) error
• func EnableApis(projectId string, apis ...string) error
• func FindBucket(bucketName string) bool
• func FindServiceAccount(serviceAccount string, projectId string) bool
• func GetEnabledApis(projectId string) ([]string, error)
• func GetGoogleMachineTypes() []string
• func GetGoogleProjects() ([]string, error)
• func GetGoogleZones(project string) ([]string, error)
• func GetOrCreateServiceAccount(serviceAccount string, projectId string, clusterConfigDir string, ...) (string, error)
• func GetRegionFromZone(zone string) string
• func IsKmsKeyAvailable(keyName string, keyringName string, projectId string) bool
• func IsKmsKeyringAvailable(keyringName string, projectId string) bool
• func Login(serviceAccountKeyPath string, skipLogin bool) error
• func VaultBucketName(vaultName string) string
• func VaultServiceAccountName(vaultName string) string

Constants

const KmsLocation = "global"

Variables

var (
	REQUIRED_SERVICE_ACCOUNT_ROLES = []string{"roles/compute.instanceAdmin.v1",
		"roles/iam.serviceAccountActor",
		"roles/container.clusterAdmin",
		"roles/container.admin",
		"roles/container.developer",
		"roles/storage.objectAdmin",
		"roles/editor"}

	VaultServiceAccountRoles = []string{"roles/storage.objectAdmin",
		"roles/cloudkms.admin",
		"roles/cloudkms.cryptoKeyEncrypterDecrypter",
	}
)

var PROJECT_LIST_HEADER = "PROJECT_ID"

Functions

func BucketExists

func BucketExists(projectId string, bucketName string) (bool, error)

func CheckPermission

func CheckPermission(perm string, projectId string) (bool, error)

func CreateBucket

func CreateBucket(projectId string, bucketName string, location string) error

func CreateKmsKey

func CreateKmsKey(keyName string, keyringName string, projectId string) error

CreateKmsKey creates a new KMS key in the given keyring

func CreateKmsKeyring

func CreateKmsKeyring(keyringName string, projectId string) error

CreateKmsKeyring creates a new KMS keyring

func DeleteAllObjectsInBucket

func DeleteAllObjectsInBucket(bucketName string) error

func DeleteBucket

func DeleteBucket(bucketName string) error

func DeleteServiceAccount

func DeleteServiceAccount(serviceAccount string, projectId string, roles []string) error

func EnableApis

func EnableApis(projectId string, apis ...string) error

func FindBucket

func FindBucket(bucketName string) bool

func FindServiceAccount

func FindServiceAccount(serviceAccount string, projectId string) bool

func GetEnabledApis

func GetEnabledApis(projectId string) ([]string, error)

func GetGoogleMachineTypes

func GetGoogleMachineTypes() []string

func GetGoogleProjects

func GetGoogleProjects() ([]string, error)

func GetGoogleZones

func GetGoogleZones(project string) ([]string, error)

func GetOrCreateServiceAccount

func GetOrCreateServiceAccount(serviceAccount string, projectId string, clusterConfigDir string, roles []string) (string, error)

func GetRegionFromZone

func GetRegionFromZone(zone string) string

func IsKmsKeyAvailable

func IsKmsKeyAvailable(keyName string, keyringName string, projectId string) bool

IsKmsKeyAvailable cheks if the KMS key is already available

func IsKmsKeyringAvailable

func IsKmsKeyringAvailable(keyringName string, projectId string) bool

IsKmsKeyringAvailable checks if the KMS keyring is already available

func Login

func Login(serviceAccountKeyPath string, skipLogin bool) error

func VaultBucketName

func VaultBucketName(vaultName string) string

func VaultServiceAccountName

func VaultServiceAccountName(vaultName string) string