secrethelper

Documentation

Overview

Package secrethelper implements the secrethelper subcommand.

This subcommand is shared between multiple agent binaries.

It provides a "read" command to fetch secrets. It can be used in 2 different ways:

1) With the "--with-provider-prefixes" option enabled. Each input secret should follow this format: "providerPrefix/some/path". The provider prefix indicates where to fetch the secrets from. At the moment, we support "file" and "k8s_secret". The path can mean different things depending on the provider. In "file" it's a file system path. In "k8s_secret", it follows this format: "namespace/name/key".

2) Without the "--with-provider-prefixes" option. The program expects a root path in the arguments and input secrets are just paths relative to the root one. So for example, if the secret is "my_secret" and the root path is "/some/path", the fetched value of the secret will be the contents of "/some/path/my_secret". This option was offered before introducing "--with-provider-prefixes" and is kept to avoid breaking compatibility.

Index

• func Commands() []*cobra.Command
• type NewKubeClient

Functions

func Commands

func Commands() []*cobra.Command

Commands returns a slice of subcommands of the parent command.

Types

type NewKubeClient

type NewKubeClient func(timeout time.Duration, qps float32, burst int) (kubernetes.Interface, error)

NewKubeClient returns a new kubernetes.Interface