kube-apiserver Encryption Configuration (v1)
Package v1 is the v1 version of the API.
EncryptionConfiguration stores the complete configuration for encryption providers.
resources is a list containing resources, and their corresponding encryption providers.
AESConfiguration contains the API configuration for an AES transformer.
keys is a list of keys to be used for creating the AES transformer. Each key has to be 32 bytes long for AES-CBC and 16, 24 or 32 bytes for AES-GCM.
IdentityConfiguration is an empty struct to allow identity transformer in provider configuration.
KMSConfiguration contains the name, cache size and path to configuration file for a KMS based envelope transformer.
apiVersion of KeyManagementService
name is the name of the KMS plugin to be used.
cachesize is the maximum number of secrets which are cached in memory. The default value is 1000. Set to a negative value to disable caching.
endpoint is the gRPC server listening address, for example "unix:///var/run/kms-provider.sock".
timeout for gRPC calls to kms-plugin (ex. 5s). The default is 3 seconds.
Key contains name and secret of the provided key for a transformer.
name is the name of the key to be used while storing data to disk.
secret is the actual key, encoded in base64.
ProviderConfiguration stores the provided configuration for an encryption provider.
aesgcm is the configuration for the AES-GCM transformer.
aescbc is the configuration for the AES-CBC transformer.
secretbox is the configuration for the Secretbox based transformer.
identity is the (empty) configuration for the identity transformer.
kms contains the name, cache size and path to configuration file for a KMS based envelope transformer.
ResourceConfiguration stores per resource configuration.
resources is a list of kubernetes resources which have to be encrypted.
providers is a list of transformers to be used for reading and writing the resources to disk. eg: aesgcm, aescbc, secretbox, identity.
SecretboxConfiguration contains the API configuration for an Secretbox transformer.
keys is a list of keys to be used for creating the Secretbox transformer. Each key has to be 32 bytes long.
This page is automatically generated.
If you plan to report an issue with this page, mention that the page is auto-generated in your issue description. The fix may need to happen elsewhere in the Kubernetes project.