-
Notifications
You must be signed in to change notification settings - Fork 463
/
etcdencryptiondata.go
69 lines (58 loc) · 2.44 KB
/
etcdencryptiondata.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
/*
* Copyright 2020 SAP SE or an SAP affiliate company. All rights reserved. This file is licensed under the Apache Software License, v. 2 except as noted otherwise in the LICENSE file
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*
*
*/
package etcdencryption
import (
"encoding/json"
"fmt"
"github.com/gardener/gardener/pkg/utils/infodata"
)
// ETCDEncryptionDataType is the type used to denote an ETCDKeyData structure in the ShootState
const ETCDEncryptionDataType = infodata.TypeVersion("etcdEncryption")
// ETCDEncryptionStateDataType is the type used to denote an ETCDEncryptionStateData structure in the ShootState
//const ETCDEncryptionStateDataType = infodata.TypeVersion("etcdEncryptionStateData")
func init() {
infodata.Register(ETCDEncryptionDataType, Unmarshal)
}
// EncryptionKeyData holds the key and its name used to encrypt resources in ETCD
type EncryptionKeyData struct {
Key string `json:"key"`
Name string `json:"name"`
}
// EncryptionConfigData holds a list of keys and information whether resources should be forcefully persisted in plain text and rewritten if the configuration changes.
type EncryptionConfigData struct {
EncryptionKeys []EncryptionKeyData `json:"encryptionKeys"`
ForcePlainTextResources bool `json:"forcePlainTextResources"`
RewriteResources bool `json:"rewriteResources"`
}
// Unmarshal unmarshals an ETCDKeyData json.
func Unmarshal(bytes []byte) (infodata.InfoData, error) {
if bytes == nil {
return nil, fmt.Errorf("no data given")
}
data := &EncryptionConfigData{}
err := json.Unmarshal(bytes, data)
if err != nil {
return nil, err
}
encryptionKeys := make([]EncryptionKey, len(data.EncryptionKeys))
for i, encryptionKey := range data.EncryptionKeys {
encryptionKeys[i].Key = encryptionKey.Key
encryptionKeys[i].Name = encryptionKey.Name
}
return NewEncryptionConfig(encryptionKeys, data.ForcePlainTextResources, data.RewriteResources)
}