provider

Documentation

Index

• Constants
• Variables
• func ParseAzureEnvironment(cloudName string) (*azure.Environment, error)
• type KeyVaultObject
• type Provider
  • func NewProvider() *Provider
  • func (p *Provider) GetKeyVaultObjectContent(ctx context.Context, kvClient *kv.BaseClient, kvObject KeyVaultObject, ...) (content, version string, err error)
  • func (p *Provider) MountSecretsStoreObjectContent(ctx context.Context, attrib map[string]string, secrets map[string]string, ...) (map[string][]byte, map[string]string, error)
• type StringArray

Constants

const (
	// VaultObjectTypeSecret secret vault object type
	VaultObjectTypeSecret string = "secret"
	// VaultObjectTypeKey key vault object type
	VaultObjectTypeKey string = "key"
	// VaultObjectTypeCertificate certificate vault object type
	VaultObjectTypeCertificate string = "cert"
)

Type of Azure Key Vault objects

Variables

var (
	ConstructPEMChain = flag.Bool("construct-pem-chain", true, "explicitly reconstruct the pem chain in the order: SERVER, INTERMEDIATE, ROOT")
)

Functions

func ParseAzureEnvironment

func ParseAzureEnvironment(cloudName string) (*azure.Environment, error)

ParseAzureEnvironment returns azure environment by name

Types

type KeyVaultObject

type KeyVaultObject struct {
	// the name of the Azure Key Vault objects
	ObjectName string `json:"objectName" yaml:"objectName"`
	// the filename the object will be written to
	ObjectAlias string `json:"objectAlias" yaml:"objectAlias"`
	// the version of the Azure Key Vault objects
	ObjectVersion string `json:"objectVersion" yaml:"objectVersion"`
	// the type of the Azure Key Vault objects
	ObjectType string `json:"objectType" yaml:"objectType"`
	// the format of the Azure Key Vault objects
	// supported formats are PEM, PFX
	ObjectFormat string `json:"objectFormat" yaml:"objectFormat"`
	// The encoding of the object in KeyVault
	// Supported encodings are Base64, Hex, Utf-8
	ObjectEncoding string `json:"objectEncoding" yaml:"objectEncoding"`
}

KeyVaultObject holds keyvault object related config

type Provider

type Provider struct {
	// contains filtered or unexported fields
}

Provider implements the secrets-store-csi-driver provider interface

func NewProvider

func NewProvider() *Provider

NewProvider creates a new provider

func (*Provider) GetKeyVaultObjectContent

func (p *Provider) GetKeyVaultObjectContent(ctx context.Context, kvClient *kv.BaseClient, kvObject KeyVaultObject, vaultURL string) (content, version string, err error)

GetKeyVaultObjectContent get content of the keyvault object

func (*Provider) MountSecretsStoreObjectContent

func (p *Provider) MountSecretsStoreObjectContent(ctx context.Context, attrib map[string]string, secrets map[string]string, targetPath string, permission os.FileMode) (map[string][]byte, map[string]string, error)

MountSecretsStoreObjectContent mounts content of the secrets store object to target path

type StringArray

type StringArray struct {
	Array []string `json:"array" yaml:"array"`
}

StringArray ...