kubernetes
/
apiserver
mirror of https://github.com/kubernetes/apiserver.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
apiserver/pkg/storage/value
History
Anish Ramasekar b21cb57710 [KMSv2] use encDEK, keyID and annotations to generate cache key 
It is possible for a KMSv2 plugin to return a static value as Ciphertext
and store the actual encrypted DEK in the annotations. In this case,
using the encDEK will not work. Instead, we are now using a combination
of the encDEK, keyID and annotations to generate the cache key.

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

Kubernetes-commit: 8eacf09649ac9042c7e998b5c24ac59d68ae7e6c
 		2023-03-14 19:38:30 +00:00
..
encrypt [KMSv2] use encDEK, keyID and annotations to generate cache key 2023-03-14 19:38:30 +00:00
OWNERS k8s.io/apiserver/pkg/storage/value: allow encryption-at-rest approval 2022-10-17 17:07:56 -04:00
metrics.go kmsv2: add metrics 2023-01-29 22:40:18 -08:00
metrics_test.go kmsv2: add metrics 2023-01-29 22:40:18 -08:00
transformer.go kmsv2: add metrics 2023-01-29 22:40:18 -08:00
transformer_test.go storage: transformers: pass a context.Context 2022-02-17 07:29:44 -08:00