encryption

Documentation

Index

• Constants
• type ClientEncryptionOptions
  • func (in *ClientEncryptionOptions) DeepCopy() *ClientEncryptionOptions
  • func (in *ClientEncryptionOptions) DeepCopyInto(out *ClientEncryptionOptions)
• type EncryptionSettings
  • func (in *EncryptionSettings) DeepCopy() *EncryptionSettings
  • func (in *EncryptionSettings) DeepCopyInto(out *EncryptionSettings)
• type ServerEncryptionOptions
  • func (in *ServerEncryptionOptions) DeepCopy() *ServerEncryptionOptions
  • func (in *ServerEncryptionOptions) DeepCopyInto(out *ServerEncryptionOptions)
• type StoreName
• type StoreType
• type Stores
  • func (in *Stores) DeepCopy() *Stores
  • func (in *Stores) DeepCopyInto(out *Stores)

Constants

const (
	StoreTypeClient = StoreType("client")
	StoreTypeServer = StoreType("server")
)

const (
	StoreNameKeystore   = StoreName("keystore")
	StoreNameTruststore = StoreName("truststore")
)

Types

type ClientEncryptionOptions

type ClientEncryptionOptions struct {
	EncryptionSettings `json:",inline" cass-config:";recurse"`
	Enabled            bool `json:"enabled" cass-config:"enabled;retainzero"`
	Optional           bool `json:"optional,omitempty" cass-config:"optional"`
}

See the cassandra.yaml file for explanations on how to set these options: https://github.com/apache/cassandra/blob/cassandra-4.0/conf/cassandra.yaml#L1091-L1183 +kubebuilder:object:generate=true

func (*ClientEncryptionOptions) DeepCopy

func (in *ClientEncryptionOptions) DeepCopy() *ClientEncryptionOptions

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClientEncryptionOptions.

func (*ClientEncryptionOptions) DeepCopyInto

func (in *ClientEncryptionOptions) DeepCopyInto(out *ClientEncryptionOptions)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type EncryptionSettings

type EncryptionSettings struct {
	// +kubebuilder:validation:optional
	Protocol string `json:"protocol,omitempty" cass-config:"protocol"`

	// +kubebuilder:validation:optional
	AcceptedProtocols []string `json:"accepted_protocols,omitempty" cass-config:"accepted_protocols"`

	// +kubebuilder:validation:optional
	Algorithm string `json:"algorithm,omitempty" cass-config:"algorithm"`

	// +kubebuilder:validation:optional
	StoreType string `json:"store_type,omitempty" cass-config:"store_type"`

	// +kubebuilder:validation:optional
	CipherSuites []string `json:"cipher_suites,omitempty" cass-config:"cipher_suites"`

	// +kubebuilder:default=false
	// +kubebuilder:validation:optional
	RequireClientAuth bool `json:"require_client_auth,omitempty" cass-config:"require_client_auth"`
}

See the cassandra.yaml file for explanations on how to set these options: https://github.com/apache/cassandra/blob/cassandra-4.0/conf/cassandra.yaml#L1091-L1183 +kubebuilder:object:generate=true

func (*EncryptionSettings) DeepCopy

func (in *EncryptionSettings) DeepCopy() *EncryptionSettings

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EncryptionSettings.

func (*EncryptionSettings) DeepCopyInto

func (in *EncryptionSettings) DeepCopyInto(out *EncryptionSettings)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ServerEncryptionOptions

type ServerEncryptionOptions struct {
	// +kubebuilder:default=false
	// +kubebuilder:validation:optional
	Optional *bool `json:"optional,omitempty" cass-config:">=4.x,dse@>=6.8.x:optional"`

	// +kubebuilder:validation:Enum=none;dc;rack;all
	// +kubebuilder:default=none
	// +kubebuilder:validation:optional
	InternodeEncryption string `json:"internode_encryption,omitempty" cass-config:"internode_encryption"`

	// +kubebuilder:default=false
	// +kubebuilder:validation:optional
	RequireEndpointVerification bool `json:"require_endpoint_verification,omitempty" cass-config:"require_endpoint_verification"`

	// +kubebuilder:default=false
	// +kubebuilder:validation:optional
	EnableLegacySslStoragePort bool `json:"enable_legacy_ssl_storage_port,omitempty" cass-config:"enable_legacy_ssl_storage_port"`

	EncryptionSettings `json:",inline" cass-config:";recurse"`
}

See the cassandra.yaml file for explanations on how to set these options: https://github.com/apache/cassandra/blob/cassandra-4.0/conf/cassandra.yaml#L1091-L1183 +kubebuilder:object:generate=true

func (*ServerEncryptionOptions) DeepCopy

func (in *ServerEncryptionOptions) DeepCopy() *ServerEncryptionOptions

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServerEncryptionOptions.

func (*ServerEncryptionOptions) DeepCopyInto

func (in *ServerEncryptionOptions) DeepCopyInto(out *ServerEncryptionOptions)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type StoreName

type StoreName string

type StoreType

type StoreType string

type Stores

type Stores struct {
	// ref to the secret that contains the keystore and its password
	// the expected format of the secret is a "keystore" entry and a "keystore-password" entry
	// +kubebuilder:validation:Required
	KeystoreSecretRef corev1.LocalObjectReference `json:"keystoreSecretRef"`

	// ref to the secret that contains the truststore and its password
	// the expected format of the secret is a "truststore" entry and a "truststore-password" entry
	// +kubebuilder:validation:Required
	TruststoreSecretRef corev1.LocalObjectReference `json:"truststoreSecretRef"`
}

+kubebuilder:object:generate=true

func (*Stores) DeepCopy

func (in *Stores) DeepCopy() *Stores

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Stores.

func (*Stores) DeepCopyInto

func (in *Stores) DeepCopyInto(out *Stores)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.