apiserver/pkg/server/options/encryptionconfig
Monis Khan 298cf1beec Encryption config: correctly handle overlapping providers
This change updates NewPrefixTransformers to not short-circuit on
the first transformer that has a matching prefix.  If the same type
of encryption ProviderConfiguration is used more than once, they
will share the same prefix.  A failure in the first one should not
prevent a later match from being attempted.

Added TestCBCKeyRotationWithOverlappingProviders unit test to
prevent regressions.  Note that this test explicitly exercises this
flow using an EncryptionConfiguration object as the structure of the
resulting transformer is an important part of the check.

Signed-off-by: Monis Khan <mkhan@redhat.com>

Kubernetes-commit: 4dc16f29a7285a4bcaff1915728953d8a55e1b6e
2019-09-06 12:09:43 -04:00
..
OWNERS Updated OWNERS files to include link to docs 2019-01-30 20:05:00 +01:00
config.go rename healthz methodNames to be more consistent w/ present day usages 2019-08-13 12:42:13 -07:00
config_test.go Encryption config: correctly handle overlapping providers 2019-09-06 12:09:43 -04:00