kms

Documentation

Index

• Constants
• func NewAWSKMSProvider(kmsSpec *hyperv1.AWSKMSSpec, kmsImage, tokenMinterImage string) (*awsKMSProvider, error)
• func NewAzureKMSProvider(kmsSpec *hyperv1.AzureKMSSpec, image string) (*azureKMSProvider, error)
• func NewIBMCloudKMSProvider(ibmCloud *hyperv1.IBMCloudKMSSpec, kmsImage string) (*ibmCloudKMSProvider, error)
• type KMSPodConfig
• type KMSProvider

Constants

const (
	KasMainContainerName = "kube-apiserver"
)

Functions

func NewAWSKMSProvider

func NewAWSKMSProvider(kmsSpec *hyperv1.AWSKMSSpec, kmsImage, tokenMinterImage string) (*awsKMSProvider, error)

func NewAzureKMSProvider

func NewAzureKMSProvider(kmsSpec *hyperv1.AzureKMSSpec, image string) (*azureKMSProvider, error)

func NewIBMCloudKMSProvider

func NewIBMCloudKMSProvider(ibmCloud *hyperv1.IBMCloudKMSSpec, kmsImage string) (*ibmCloudKMSProvider, error)

Types

type KMSPodConfig

type KMSPodConfig struct {
	Containers []corev1.Container
	Volumes    []corev1.Volume

	KASContainerMutate func(c *corev1.Container)
}

type KMSProvider

type KMSProvider interface {
	GenerateKMSEncryptionConfig(apiVersion string) (*v1.EncryptionConfiguration, error)

	GenerateKMSPodConfig() (*KMSPodConfig, error)
}