694067492c
Design document: https://docs.google.com/document/d/1EjiCuXoiy8DEEXe15KxVJ4iWrwogCyG113_0LdzcWzQ/edit?usp=drive_web&ouid=102644738301620637153 This is the second of multiple patchsets to support encryption and decryption in airshipctl Complete feature: https://review.opendev.org/#/c/742695/ Depends-On: https://review.opendev.org/#/c/749892/ Change-Id: I1a0553622049366977af8c2efbec12012a6fa641
27 lines
1.1 KiB
Plaintext
27 lines
1.1 KiB
Plaintext
Create or modify an encryption config in the airshipctl config file.
|
|
|
|
Encryption configs are local files or kubernetes secrets that are used to encrypt and decrypt kubernetes objects
|
|
|
|
Usage:
|
|
set-encryption-config NAME [flags]
|
|
|
|
Examples:
|
|
|
|
# Create an encryption config with local gpg key source
|
|
airshipctl config set-encryption-config exampleConfig \
|
|
--encryption-key path-to-encryption-key \
|
|
--decryption-key path-to-encryption-key
|
|
|
|
# Create an encryption config with kube api server secret as the store to store encryption keys
|
|
airshipctl config set-encryption-config exampleConfig \
|
|
--secret-name secretName \
|
|
--secret-namespace secretNamespace
|
|
|
|
|
|
Flags:
|
|
--decryption-key-path string the path to the decryption key file
|
|
--encryption-key-path string the path to the encryption key file
|
|
-h, --help help for set-encryption-config
|
|
--secret-name string name of the secret consisting of the encryption and decryption keys
|
|
--secret-namespace string namespace of the secret consisting of the encryption and decryption keys
|