Adding compute engine private key generation sample.

[theacodes]

No description provided.

[tmatsuo]

How about to make this script a real utility by just printing out the wrapperd_rsa_key, and receiving the csek filename as an argument? That way, customers can use this script like following:

cd compute/encryption/
pip install -r requirements.txt
touch /somewhere/my_wrapped_key
chmod 0600 /somewhere/my_wrapped_key
generate_wrapped_rsa_key.py /somewhere/my_private_key > /somewhere/my_wrapped_key
gcloud beta compute instances create example-instance --csek-key-file /somewhere/my_wrapped_key

Of course you can write a python script that uses functions in this file, but I think it's easier for some users to just use shell scripting.

[theacodes]

Fair enough, I'll do that.

[theacodes]

Done.

[tmatsuo]

The code LGTM with few minor suggestions.

[tmatsuo]

It will print out:

Base-64 encoded private key: xxxxxxxxxx
Wrapped RSA key: xxxxxxxx

so it can not be used for producing the file which you can use with gcloud. Does it make sense to only print out the wrapped key so that you can use this script in your shell scripting?

Maybe I'm wrong, and this use case should be covered by gcloud sdk (gcloud should provide wrap-private-key subcommand, or something) though.

[theacodes]

sed can extract it if someone is hard-headed enough to use this for shell scripting but too adverse to actually modify the file. :P