Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func AddKMSPluginVolumeAndMountToPodSpec ¶
func AddKMSPluginVolumeAndMountToPodSpec(podSpec *corev1.PodSpec, containerName string, featureGateAccessor featuregates.FeatureGateAccess) error
AddKMSPluginVolumeAndMountToPodSpec conditionally adds the KMS plugin volume mount to the specified container. It assumes the pod spec does not already contain the KMS volume or mount; no deduplication is performed. Deprecated: this is a temporary solution to get KMS TP v1 out. We should come up with a different approach afterwards.
func KeyIDFromPluginConfigSecretDataKey ¶
KeyIDFromPluginConfigSecretDataKey extracts the keyID from a kms-plugin-config data key. Returns the keyID and true if the key matches the "kms-plugin-config-<keyID>" pattern.
func ToPluginConfigSecretDataKeyFor ¶
ToPluginConfigSecretDataKeyFor constructs the data key for storing a KMS plugin config in the encryption-config Secret. The keyID must be a valid non-negative integer string.
Types ¶
This section is empty.