Class DatabaseEncryption (2.45.0)

Version 2.45.0

• 2.54.0 (latest)
• 2.53.0
• 2.52.0
• 2.50.0
• 2.49.0
• 2.48.0
• 2.47.1
• 2.46.0
• 2.45.0
• 2.44.0
• 2.43.0
• 2.42.0
• 2.41.0
• 2.40.0
• 2.39.0
• 2.38.0
• 2.37.0
• 2.36.0
• 2.35.0
• 2.34.0
• 2.33.0
• 2.32.0
• 2.31.0
• 2.30.0
• 2.29.0
• 2.28.0
• 2.27.0
• 2.26.0
• 2.25.0
• 2.24.0
• 2.23.0
• 2.22.0
• 2.21.0
• 2.20.0
• 2.19.0
• 2.18.0
• 2.17.4
• 2.16.0
• 2.15.0
• 2.14.0
• 2.13.0
• 2.12.2
• 2.11.2
• 2.10.8
• 2.9.0
• 2.8.1
• 2.7.1
• 2.6.1
• 2.5.0
• 2.4.1
• 2.3.1
• 2.2.0
• 2.1.0
• 2.0.1
• 1.0.3
• 0.5.0
• 0.4.0
• 0.3.0

DatabaseEncryption(mapping=None, *, ignore_unknown_fields=False, **kwargs)

Configuration of etcd encryption.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

Attributes
Name	Description
key_name	str Name of CloudKMS key to use for the encryption of secrets in etcd. Ex. projects/my-project/locations/global/keyRings/my-ring/cryptoKeys/my-key
state	google.cloud.container_v1.types.DatabaseEncryption.State The desired state of etcd encryption.
current_state	google.cloud.container_v1.types.DatabaseEncryption.CurrentState Output only. The current state of etcd encryption. This field is a member of oneof_ _current_state.
decryption_keys	MutableSequence[str] Output only. Keys in use by the cluster for decrypting existing objects, in addition to the key in key_name. Each item is a CloudKMS key resource.
last_operation_errors	MutableSequence[google.cloud.container_v1.types.DatabaseEncryption.OperationError] Output only. Records errors seen during DatabaseEncryption update operations.

Classes

CurrentState

CurrentState(value)

Current State of etcd encryption.

Values: CURRENT_STATE_UNSPECIFIED (0): Should never be set CURRENT_STATE_ENCRYPTED (7): Secrets in etcd are encrypted. CURRENT_STATE_DECRYPTED (2): Secrets in etcd are stored in plain text (at etcd level) - this is unrelated to Compute Engine level full disk encryption. CURRENT_STATE_ENCRYPTION_PENDING (3): Encryption (or re-encryption with a different CloudKMS key) of Secrets is in progress. CURRENT_STATE_ENCRYPTION_ERROR (4): Encryption (or re-encryption with a different CloudKMS key) of Secrets in etcd encountered an error. CURRENT_STATE_DECRYPTION_PENDING (5): De-crypting Secrets to plain text in etcd is in progress. CURRENT_STATE_DECRYPTION_ERROR (6): De-crypting Secrets to plain text in etcd encountered an error.

OperationError

OperationError(mapping=None, *, ignore_unknown_fields=False, **kwargs)

OperationError records errors seen from CloudKMS keys encountered during updates to DatabaseEncryption configuration.

State

State(value)

State of etcd encryption.

Values: UNKNOWN (0): Should never be set ENCRYPTED (1): Secrets in etcd are encrypted. DECRYPTED (2): Secrets in etcd are stored in plain text (at etcd level) - this is unrelated to Compute Engine level full disk encryption.