Struct secret_keeper_cloudkms::CloudKmsKeeper

pub struct CloudKmsKeeper { /* fields omitted */ }

SecretKeeper implementation that uses Google Cloud KMS for key storage

Implementations

impl CloudKmsKeeper

pub async fn new_default() -> Result<Self, Error>

Constructs a new Google Cloud KMS keeper with default options

pub async fn new(_opt: CloudKmsOptions) -> Result<Self, Error>

Constructs a new google CloudKMS keeper

pub async fn register(self) -> Result<(), Error>

register with SecretKeeper so it can be discovered with SecretKeeper::for_uri

Trait Implementations

impl Create for CloudKmsKeeper

fn create_key<'life0, 'life1, 'life2, 'async_trait>(
    &'life0 self,
    key_name: &'life1 str,
    params: &'life2 str
) -> Pin<Box<dyn Future<Output = Result<(), Error>> + Send + 'async_trait>> where
    'life0: 'async_trait,
    'life1: 'async_trait,
    'life2: 'async_trait,
    Self: 'async_trait, 

Creates the key. key_name is any valid key name params are url-encoded parameters that can be created with serde_urlencoded

Params:

• 'parent' : /PROJECT/LOCATION/KEYRING

impl Debug for CloudKmsKeeper

Implement Debug that skips Token

fn fmt(&self, f: &mut Formatter) -> Result

Formats the value using the given formatter.

impl Display for CloudKmsKeeper

Implement Display that skips Token

fn fmt(&self, f: &mut Formatter) -> Result

Formats the value using the given formatter.

impl<'a> SecretKeeper for CloudKmsKeeper

fn wrap<'life0, 'life1, 'life2, 'life3, 'async_trait>(
    &'life0 self,
    uri: &'life1 str,
    _nonce: &'life2 [u8],
    key: &'life3 [u8]
) -> Pin<Box<dyn Future<Output = Result<WrappedKey, Error>> + Send + 'async_trait>> where
    'life0: 'async_trait,
    'life1: 'async_trait,
    'life2: 'async_trait,
    'life3: 'async_trait,
    Self: 'async_trait, 

Sends key to cloud to be encrypted. key-encryption-key never leavs the Hashicorp vault. Returned encrypted key is a string

fn unwrap<'life0, 'life1, 'life2, 'async_trait>(
    &'life0 self,
    _nonce: &'life1 [u8],
    wk: &'life2 WrappedKey
) -> Pin<Box<dyn Future<Output = Result<Bytes, Error>> + Send + 'async_trait>> where
    'life0: 'async_trait,
    'life1: 'async_trait,
    'life2: 'async_trait,
    Self: 'async_trait, 

Sends key to hashicorp vault to be decrypted. key-encryption-key never leavs the Hashicorp vault.

fn get_scheme(&self) -> &str

Returns the scheme 'hashivault'

fn as_create(&self) -> Result<&dyn Create, Error>

Returns instance of Create

#[must_use]fn init_cipher<'life0, 'life1, 'life2, 'async_trait>(
    &'life0 self,
    ckind: CipherKind,
    nonce: &'life1 [u8],
    wrapped: Option<&'life2 WrappedKey>
) -> Pin<Box<dyn Future<Output = Result<Box<dyn Cipher + 'static>, Error>> + 'async_trait + Send>> where
    'life0: 'async_trait,
    'life1: 'async_trait,
    'life2: 'async_trait,
    Self: 'async_trait, 

Initialize a new encryption cipher.

impl Sync for CloudKmsKeeper