airshipctl/airshipctl_config_set-encryption-config.md at 07c44eedb7914a6d7f16e6a1de1b41ea37d1b291

uday.ruddarraju 694067492c Adding commands to get and set encryption configs

Design document: https://docs.google.com/document/d/1EjiCuXoiy8DEEXe15KxVJ4iWrwogCyG113_0LdzcWzQ/edit?usp=drive_web&ouid=102644738301620637153

This is the second of multiple patchsets to support
encryption and decryption in airshipctl

Complete feature: https://review.opendev.org/#/c/742695/

Depends-On: https://review.opendev.org/#/c/749892/
Change-Id: I1a0553622049366977af8c2efbec12012a6fa641

2020-09-16 15:58:16 +00:00

1.6 KiB

Raw Blame History

airshipctl config set-encryption-config

Manage encryption configs in airship config

Synopsis

Create or modify an encryption config in the airshipctl config file.

Encryption configs are local files or kubernetes secrets that are used to encrypt and decrypt kubernetes objects

airshipctl config set-encryption-config NAME [flags]

Examples


# Create an encryption config with local gpg key source
airshipctl config set-encryption-config exampleConfig \
  --encryption-key path-to-encryption-key \
  --decryption-key path-to-encryption-key

# Create an encryption config with kube api server secret as the store to store encryption keys
airshipctl config set-encryption-config exampleConfig \
  --secret-name secretName \
  --secret-namespace secretNamespace

Options

      --decryption-key-path string   the path to the decryption key file
      --encryption-key-path string   the path to the encryption key file
  -h, --help                         help for set-encryption-config
      --secret-name string           name of the secret consisting of the encryption and decryption keys
      --secret-namespace string      namespace of the secret consisting of the encryption and decryption keys

Options inherited from parent commands

      --airshipconf string   Path to file for airshipctl configuration. (default "$HOME/.airship/config")
      --debug                enable verbose output
      --kubeconfig string    Path to kubeconfig associated with airshipctl configuration. (default "$HOME/.airship/kubeconfig")

1.6 KiB Raw Blame History