onepassword

Documentation

Index

• Constants
• func AppendAnnotationUpdatedSecret(annotations map[string]string, secrets map[string]*corev1.Secret, ...) map[string]*corev1.Secret
• func AppendUpdatedContainerSecrets(containers []corev1.Container, secrets map[string]*corev1.Secret, ...) map[string]*corev1.Secret
• func AppendUpdatedVolumeSecrets(volumes []corev1.Volume, secrets map[string]*corev1.Secret, ...) map[string]*corev1.Secret
• func AreAnnotationsUsingSecrets(annotations map[string]string, secrets map[string]*corev1.Secret) bool
• func AreContainersUsingSecrets(containers []corev1.Container, secrets map[string]*corev1.Secret) bool
• func AreVolumesUsingSecrets(volumes []corev1.Volume, secrets map[string]*corev1.Secret) bool
• func FilterAnnotations(annotations map[string]string, regex *regexp.Regexp) map[string]string
• func GetAnnotationsForDeployment(deployment *appsv1.Deployment, regex *regexp.Regexp) (map[string]string, bool)
• func GetOnePasswordItemByPath(opConnectClient connect.Client, path string) (*onepassword.Item, error)
• func GetUpdatedSecretsForDeployment(deployment *appsv1.Deployment, secrets map[string]*corev1.Secret) map[string]*corev1.Secret
• func IsDeploymentUsingSecrets(deployment *appsv1.Deployment, secrets map[string]*corev1.Secret) bool
• func IsValidClientUUID(uuid string) bool
• func IsVolumeUsingSecret(volume corev1.Volume, secrets map[string]*corev1.Secret) *corev1.Secret
• func IsVolumeUsingSecretProjection(volume corev1.Volume, secrets map[string]*corev1.Secret) *corev1.Secret
• func ParseVaultAndItemFromPath(path string) (string, string, error)
• func SetupConnect(kubeClient client.Client, deploymentNamespace string) error
• type SecretUpdateHandler
  • func NewManager(kubernetesClient client.Client, opConnectClient connect.Client, ...) *SecretUpdateHandler
  • func (h *SecretUpdateHandler) UpdateKubernetesSecretsTask() error

Constants

const (
	OnepasswordPrefix            = "operator.1password.io"
	ItemPathAnnotation           = OnepasswordPrefix + "/item-path"
	NameAnnotation               = OnepasswordPrefix + "/item-name"
	VersionAnnotation            = OnepasswordPrefix + "/item-version"
	RestartAnnotation            = OnepasswordPrefix + "/last-restarted"
	RestartDeploymentsAnnotation = OnepasswordPrefix + "/auto-restart"
)

const UUIDLength = 26

UUIDLength defines the required length of UUIDs

Functions

func AppendAnnotationUpdatedSecret

func AppendAnnotationUpdatedSecret(annotations map[string]string, secrets map[string]*corev1.Secret, updatedDeploymentSecrets map[string]*corev1.Secret) map[string]*corev1.Secret

func AppendUpdatedContainerSecrets

func AppendUpdatedContainerSecrets(containers []corev1.Container, secrets map[string]*corev1.Secret, updatedDeploymentSecrets map[string]*corev1.Secret) map[string]*corev1.Secret

func AppendUpdatedVolumeSecrets

func AppendUpdatedVolumeSecrets(volumes []corev1.Volume, secrets map[string]*corev1.Secret, updatedDeploymentSecrets map[string]*corev1.Secret) map[string]*corev1.Secret

func AreAnnotationsUsingSecrets

func AreAnnotationsUsingSecrets(annotations map[string]string, secrets map[string]*corev1.Secret) bool

func AreContainersUsingSecrets

func AreContainersUsingSecrets(containers []corev1.Container, secrets map[string]*corev1.Secret) bool

func AreVolumesUsingSecrets

func AreVolumesUsingSecrets(volumes []corev1.Volume, secrets map[string]*corev1.Secret) bool

func FilterAnnotations

func FilterAnnotations(annotations map[string]string, regex *regexp.Regexp) map[string]string

func GetAnnotationsForDeployment

func GetAnnotationsForDeployment(deployment *appsv1.Deployment, regex *regexp.Regexp) (map[string]string, bool)

func GetOnePasswordItemByPath

func GetOnePasswordItemByPath(opConnectClient connect.Client, path string) (*onepassword.Item, error)

func GetUpdatedSecretsForDeployment

func GetUpdatedSecretsForDeployment(deployment *appsv1.Deployment, secrets map[string]*corev1.Secret) map[string]*corev1.Secret

func IsDeploymentUsingSecrets

func IsDeploymentUsingSecrets(deployment *appsv1.Deployment, secrets map[string]*corev1.Secret) bool

func IsValidClientUUID

func IsValidClientUUID(uuid string) bool

IsValidClientUUID returns true if the given client uuid is valid.

func IsVolumeUsingSecret

func IsVolumeUsingSecret(volume corev1.Volume, secrets map[string]*corev1.Secret) *corev1.Secret

func IsVolumeUsingSecretProjection

func IsVolumeUsingSecretProjection(volume corev1.Volume, secrets map[string]*corev1.Secret) *corev1.Secret

func ParseVaultAndItemFromPath

func ParseVaultAndItemFromPath(path string) (string, string, error)

func SetupConnect

func SetupConnect(kubeClient client.Client, deploymentNamespace string) error

Types

type SecretUpdateHandler

type SecretUpdateHandler struct {
	// contains filtered or unexported fields
}

func NewManager

func NewManager(kubernetesClient client.Client, opConnectClient connect.Client, shouldAutoRestartDeploymentsGlobal bool) *SecretUpdateHandler

func (*SecretUpdateHandler) UpdateKubernetesSecretsTask

func (h *SecretUpdateHandler) UpdateKubernetesSecretsTask() error