apiserver/pkg/storage/value
Saksham Sharma 0b1c13686c Add configuration options for encryption providers
Add location transformer, config for transformers

Location transformer helps choose the most specific transformer for
read/write operations depending on the path of resource being accessed.

Configuration allows use of --experimental-encryption-provider-config
to set up encryption providers. Only AEAD is supported at the moment.

Add new files to BUILD, AEAD => k8s-aes-gcm

Use group resources to select encryption provider

Update tests for configuration parsing

Remove location transformer

Allow specifying providers per resource group in configuration

Add IdentityTransformer configuration option

Fix minor issues with initial AEAD implementation

Unified parsing of all configurations

Parse configuration using a union struct

Run configuration parsing in APIserver, refactor parsing

More gdoc, fix minor bugs

Add test coverage for combined transformers

Use table driven tests for encryptionconfig

Kubernetes-commit: 9760d00d08ef0619e30a7b1b90fd290cab960069
2017-06-13 20:47:30 +00:00
..
encrypt Add configuration options for encryption providers 2017-06-13 20:47:30 +00:00
BUILD generated: bazel 2017-05-17 17:27:53 +00:00
transformer.go Add configuration options for encryption providers 2017-06-13 20:47:30 +00:00
transformer_test.go Add an AEAD encrypting transformer for storing secrets encrypted at rest 2017-05-17 17:27:53 +00:00