Justin Santa Barbara
7f3d3544c4
Refactor: clean up SecretStore to not use KeystoreItem
...
More moving to use API objects, except in this case we eventually want
to deprecate SecretStore entirely.
2017-12-19 11:43:43 -05:00
Justin Santa Barbara
bf74133fd4
Refactor CAStore to use API types
...
We now return KeySet objects
2017-12-17 20:09:00 -05:00
Kashif Saadat
79eef3cc6c
Support replacing kops secrets via force flag
2017-11-21 11:47:03 +00:00
chrislovecnm
609e268a1d
gazelle updates with new bazel version
2017-11-05 17:41:53 -07:00
chrislovecnm
8d1ee1fa16
updating files for goimports
2017-11-01 12:51:43 -06:00
Justin Santa Barbara
b2bcba4a6d
GCE: Use object-level permissions for files in GCS
...
This lets us configure cross-project permissions while ourselves needing
minimal permissions, but also gives us a nice hook for future lockdown
of object-level permissions.
2017-10-29 19:17:00 -04:00
Justin Santa Barbara
0143be7c4f
autogen: BUILD and BUILD.bazel
2017-10-02 14:27:21 -04:00
Justin Santa Barbara
a4a58d277d
Mirroring - Fixes from code review
2017-09-30 22:05:14 -04:00
Justin Santa Barbara
559d885480
Mirror keystore & secretstore
...
This allows us to have our API objects in kops-server, but our
configuration on S3 or GCS.
2017-09-24 00:09:02 -04:00
Justin Santa Barbara
d9a3c46b0b
Clientset fixes per code review
2017-09-17 23:22:14 -04:00
Justin Santa Barbara
914fe68ee2
SecretStore and CAStore implementations backed by API
...
Not yet wired in
2017-09-17 23:01:13 -04:00
Justin Santa Barbara
0769d218dc
Fxies per code review
2017-09-14 09:33:06 -04:00
Justin Santa Barbara
106875115d
Support for deleting tokens & keypairs
...
This now allows for deleting all secrets, which means we can have a
procedure for rotating all keys.
2017-09-09 01:04:45 -04:00
chrislovecnm
8fa2aac99f
fixing more headers
2016-10-15 19:20:56 -06:00
Justin Santa Barbara
f7fa324858
Initial k8s-style kops API
...
We try to emulate the k8s Clientset approach
2016-10-07 01:13:02 -04:00