vault

Documentation

Index

• Variables
• func AuthServiceAccountName(vaultName string, clusterName string) string
• func BucketName(vaultName string, clusterName string) string
• func CreateAuthServiceAccount(client kubernetes.Interface, vaultName, namespace, clusterName string) (string, error)
• func CreateBucket(vaultName, clusterName, projectId, zone string) (string, error)
• func CreateGCPServiceAccount(kubeClient kubernetes.Interface, ...) (string, error)
• func GcpServiceAccountSecretName(vaultName string, clusterName string) string
• func KeyName(vaultName string, clusterName string) string
• func KeyringName(vaultName string, clusterName string) string
• func ServiceAccountName(vaultName string, clusterName string) string
• type KmsConfig
  • func CreateKmsConfig(vaultName, clusterName, projectId string) (*KmsConfig, error)

Variables

var (
	ServiceAccountRoles = []string{"roles/storage.objectAdmin",
		"roles/cloudkms.admin",
		"roles/cloudkms.cryptoKeyEncrypterDecrypter",
	}
)

Functions

func AuthServiceAccountName

func AuthServiceAccountName(vaultName string, clusterName string) string

AuthServiceAccountName creates a service account name for a given vault and cluster name

func BucketName

func BucketName(vaultName string, clusterName string) string

BucketName creates a Bucket name for a given vault name and cluster name

func CreateAuthServiceAccount

func CreateAuthServiceAccount(client kubernetes.Interface, vaultName, namespace, clusterName string) (string, error)

CreateAuthServiceAccount creates a Serivce Account for the Auth service for vault

func CreateBucket

func CreateBucket(vaultName, clusterName, projectId, zone string) (string, error)

CreateBucket Creates a bucket in GKE to store the backend (encrypted) data for vault

func CreateGCPServiceAccount

func CreateGCPServiceAccount(kubeClient kubernetes.Interface, vaultName, namespace, clusterName, projectId string) (string, error)

CreateGCPServiceAccount creates a service account in GCP for the vault service

func GcpServiceAccountSecretName

func GcpServiceAccountSecretName(vaultName string, clusterName string) string

GcpServiceAccountSecretName builds the secret name where the GCP service account is stored

func KeyName

func KeyName(vaultName string, clusterName string) string

KeyName creates a key name for a given vault and cluster name

func KeyringName

func KeyringName(vaultName string, clusterName string) string

KeyringName creates a keyring name for a given vault and cluster name

func ServiceAccountName

func ServiceAccountName(vaultName string, clusterName string) string

ServiceAccountName creates a service account name for a given vault and cluster name

Types

type KmsConfig

type KmsConfig struct {
	Keyring  string
	Key      string
	Location string
	// contains filtered or unexported fields
}

KmsConfig keeps the configuration for Google KMS service

func CreateKmsConfig

func CreateKmsConfig(vaultName, clusterName, projectId string) (*KmsConfig, error)

CreateKmsConfig creates a KMS config for the GKE Vault