kms

package
v0.0.0-...-f0bea5c Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: May 19, 2026 License: Apache-2.0 Imports: 6 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func AddKMSPluginVolumeAndMountToPodSpec

func AddKMSPluginVolumeAndMountToPodSpec(podSpec *corev1.PodSpec, containerName string, featureGateAccessor featuregates.FeatureGateAccess) error

AddKMSPluginVolumeAndMountToPodSpec conditionally adds the KMS plugin volume mount to the specified container. It assumes the pod spec does not already contain the KMS volume or mount; no deduplication is performed. Deprecated: this is a temporary solution to get KMS TP v1 out. We should come up with a different approach afterwards.

func KeyIDFromPluginConfigSecretDataKey

func KeyIDFromPluginConfigSecretDataKey(dataKey string) (string, bool, error)

KeyIDFromPluginConfigSecretDataKey extracts the keyID from a kms-plugin-config data key. Returns the keyID and true if the key matches the "kms-plugin-config-<keyID>" pattern.

func ToPluginConfigSecretDataKeyFor

func ToPluginConfigSecretDataKeyFor(keyID string) (string, error)

ToPluginConfigSecretDataKeyFor constructs the data key for storing a KMS plugin config in the encryption-config Secret. The keyID must be a valid non-negative integer string.

Types

This section is empty.

Directories

Path Synopsis

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL