vault

Documentation

Index

• Variables
• func AuthServiceAccountName(vaultName string, clusterName string) string
• func BucketName(vaultName string, clusterName string) string
• func CreateAuthServiceAccount(client kubernetes.Interface, vaultName, namespace, clusterName string) (string, error)
• func CreateBucket(vaultName, clusterName, projectId, zone string) (string, error)
• func CreateGCPServiceAccount(kubeClient kubernetes.Interface, ...) (string, error)
• func KeyName(vaultName string, clusterName string) string
• func KeyringName(vaultName string, clusterName string) string
• func ServiceAccountName(vaultName string, clusterName string) string
• type KmsConfig
  • func CreateKmsConfig(vaultName, clusterName, projectId string) (*KmsConfig, error)

Variables

var (
	ServiceAccountRoles = []string{"roles/storage.objectAdmin",
		"roles/cloudkms.admin",
		"roles/cloudkms.cryptoKeyEncrypterDecrypter",
	}
)

Functions

func AuthServiceAccountName

func AuthServiceAccountName(vaultName string, clusterName string) string

AuthServiceAccountName creates a service account name for a given vault and cluster name

func BucketName

func BucketName(vaultName string, clusterName string) string

BucketName creates a Bucket name for a given vault name and cluster name

func CreateAuthServiceAccount

func CreateAuthServiceAccount(client kubernetes.Interface, vaultName, namespace, clusterName string) (string, error)

CreateAuthServiceAccount creates a Serivce Account for the Auth service for vault

func CreateBucket

func CreateBucket(vaultName, clusterName, projectId, zone string) (string, error)

CreateBucket Creates a bucket in GKE to store the backend (encrypted) data for vault

func CreateGCPServiceAccount

func CreateGCPServiceAccount(kubeClient kubernetes.Interface, vaultName, namespace, clusterName, projectId string) (string, error)

CreateGCPServiceAccount creates a service account in GCP for the vault service

func KeyName

func KeyName(vaultName string, clusterName string) string

KeyName creates a key name for a given vault and cluster name

func KeyringName

func KeyringName(vaultName string, clusterName string) string

KeyringName creates a keyring name for a given vault and cluster name

func ServiceAccountName

func ServiceAccountName(vaultName string, clusterName string) string

ServiceAccountName creates a service account name for a given vault and cluster name

Types

type KmsConfig

type KmsConfig struct {
	Keyring  string
	Key      string
	Location string
	// contains filtered or unexported fields
}

func CreateKmsConfig

func CreateKmsConfig(vaultName, clusterName, projectId string) (*KmsConfig, error)

CreateKmsConfig creates a KMS config for the GKE Vault