crypto

var (
	// ErrMustUseVTPMOrEncryptedStorageClass is returned by the Reconcile
	// function if an EncryptionClass is specified without using an encrypted
	// StorageClass or vTPM.
	ErrMustUseVTPMOrEncryptedStorageClass = errors.New(
		"must use encrypted StorageClass or have vTPM")

	// ErrMustNotUseVTPMOrEncryptedStorageClass is returned by the Reconcile
	// function is an encrypted StorageClass or vTPM are used without specifying
	// an EncryptionClass or if there is no default key provider.
	ErrMustNotUseVTPMOrEncryptedStorageClass = errors.New(
		"vTPM and/or encrypted StorageClass require encryption")

	// ErrNoDefaultKeyProvider is returned by the Reconcile function if an
	// existing VM is encrypted, no EncryptionClass is specified, and there is
	// no default key provider.
	ErrNoDefaultKeyProvider = errors.New("no default key provider")

	// ErrInvalidKeyProvider is returned if the key provider specified by an
	// EncryptionClass is invalid.
	ErrInvalidKeyProvider = errors.New("invalid key provider")

	// ErrInvalidKeyID is returned if the key id specified by an
	// EncryptionClass is invalid.
	ErrInvalidKeyID = errors.New("invalid key id")
)