apiserver/pkg/storage/value
Monis Khan 242620fc19 kmsv2: validate encrypt response at DEK generation time
Prior to this change, we wait until the DEK is used to perform an
encryption before validating the response.  This means that the
plugin could report healthy but all TransformToStorage calls would
fail.  Now we correctly cause the plugin to become unhealthy and do
not attempt to use the newly generated DEK.

Signed-off-by: Monis Khan <mok@microsoft.com>

Kubernetes-commit: 5469c198e5d074c7e88e14c3dcbc3ebb2b37cfa8
2023-03-22 21:27:47 -04:00
..
encrypt kmsv2: validate encrypt response at DEK generation time 2023-03-22 21:27:47 -04:00
OWNERS k8s.io/apiserver/pkg/storage/value: allow encryption-at-rest approval 2022-10-17 17:07:56 -04:00
metrics.go kmsv2: add metrics 2023-01-29 22:40:18 -08:00
metrics_test.go kmsv2: add metrics 2023-01-29 22:40:18 -08:00
transformer.go kmsv2: add metrics 2023-01-29 22:40:18 -08:00
transformer_test.go storage: transformers: pass a context.Context 2022-02-17 07:29:44 -08:00