pullsecrets

Documentation

Index

• Constants
• func SecretNameFromURL(prefix, url string) string
• type Config
  • func NewConfig() *Config
  • func NewConfigFromSecrets(ctx context.Context, c client.Client, refs []types.NamespacedName) *Config
  • func (c *Config) ECRProviderFromSecret(data map[string][]byte) LoginCredentialProvider
  • func (c Config) ResultingDockerConfig(ctx context.Context) (*ResultingDockerConfig, error)
  • func (c *Config) StaticProviderFromDockerConfig(data []byte) LoginCredentialProvider
• type DockerRegistryConfig
  • func NewDockerRegistryConfig() DockerRegistryConfig
• type ECRLoginCredentialsProvider
  • func NewECRLoginCredentialsProvider(accountID, region, keyID, secretAccessKey string) ECRLoginCredentialsProvider
  • func (p ECRLoginCredentialsProvider) GetURL() string
  • func (p ECRLoginCredentialsProvider) LoginCredentials(ctx context.Context) ([]LoginCredentialsWithDetails, error)
• type ErroredCredentialProvider
  • func NewErroredCredentialProvider(err error) ErroredCredentialProvider
  • func (p ErroredCredentialProvider) LoginCredentials(ctx context.Context) ([]LoginCredentialsWithDetails, error)
• type ErrorsPerSecret
  • func NewErrorsPerSecret() ErrorsPerSecret
  • func (e ErrorsPerSecret) AddSecret(name string)
  • func (e *ErrorsPerSecret) AsError() error
  • func (e ErrorsPerSecret) AsStatus() map[string]string
  • func (e ErrorsPerSecret) FailedSecrets() []string
  • func (e ErrorsPerSecret) SetSecretError(name string, err error)
• type LoginCredentialProvider
• type LoginCredentials
• type LoginCredentialsWithDetails
• type ResultingDockerConfig
  • func (c ResultingDockerConfig) AsSecret(secretNamespace, secretName string) *corev1.Secret
• type StaticLoginCredentialProvider
  • func NewStaticLoginCredentialProvider(parsedDockerConfig DockerRegistryConfig) StaticLoginCredentialProvider
  • func (p StaticLoginCredentialProvider) LoginCredentials(ctx context.Context) ([]LoginCredentialsWithDetails, error)

Constants

const (
	SecretTypeBasicAuth      = "kubernetes.io/dockerconfigjson"
	SecretTypeECRCredentials = "banzaicloud.io/aws-ecr-login-config"

	SecretKeyDockerConfig = ".dockerconfigjson"

	ECRSecretRegion         = "region"
	ECRSecretAccountID      = "accountID"
	ECRSecretKeyAccessKeyID = "accessKeyID"
	ECRSecretSecretKey      = "secretKey"
)

nolint:gosec

const (
	SourceSecretStatus = "Ok"
)

Functions

func SecretNameFromURL

func SecretNameFromURL(prefix, url string) string

Types

type Config

type Config struct {
	Registries map[string]LoginCredentialProvider
}

func NewConfig

func NewConfig() *Config

func NewConfigFromSecrets

func NewConfigFromSecrets(ctx context.Context, c client.Client, refs []types.NamespacedName) *Config

func (*Config) ECRProviderFromSecret

func (c *Config) ECRProviderFromSecret(data map[string][]byte) LoginCredentialProvider

func (Config) ResultingDockerConfig

func (c Config) ResultingDockerConfig(ctx context.Context) (*ResultingDockerConfig, error)

func (*Config) StaticProviderFromDockerConfig

func (c *Config) StaticProviderFromDockerConfig(data []byte) LoginCredentialProvider

type DockerRegistryConfig

type DockerRegistryConfig struct {
	Auths map[string]LoginCredentials `json:"auths"`
}

DockerRegistryConfig represents a docker compliant image pull secret json file

func NewDockerRegistryConfig

func NewDockerRegistryConfig() DockerRegistryConfig

type ECRLoginCredentialsProvider

type ECRLoginCredentialsProvider struct {
	Credentials aws.Credentials
	Region      string
	AccountID   string
}

func NewECRLoginCredentialsProvider

func NewECRLoginCredentialsProvider(accountID, region, keyID, secretAccessKey string) ECRLoginCredentialsProvider

func (ECRLoginCredentialsProvider) GetURL

func (p ECRLoginCredentialsProvider) GetURL() string

func (ECRLoginCredentialsProvider) LoginCredentials

func (p ECRLoginCredentialsProvider) LoginCredentials(ctx context.Context) ([]LoginCredentialsWithDetails, error)

type ErroredCredentialProvider

type ErroredCredentialProvider struct {
	Error error
}

ErroredCredentialProvider can be used to store a setup error into the config object

so that at least the providers that are working correctly gets reconciled.

func NewErroredCredentialProvider

func NewErroredCredentialProvider(err error) ErroredCredentialProvider

func (ErroredCredentialProvider) LoginCredentials

func (p ErroredCredentialProvider) LoginCredentials(ctx context.Context) ([]LoginCredentialsWithDetails, error)

type ErrorsPerSecret

type ErrorsPerSecret map[string]error

func NewErrorsPerSecret

func NewErrorsPerSecret() ErrorsPerSecret

func (ErrorsPerSecret) AddSecret

func (e ErrorsPerSecret) AddSecret(name string)

func (*ErrorsPerSecret) AsError

func (e *ErrorsPerSecret) AsError() error

func (ErrorsPerSecret) AsStatus

func (e ErrorsPerSecret) AsStatus() map[string]string

func (ErrorsPerSecret) FailedSecrets

func (e ErrorsPerSecret) FailedSecrets() []string

func (ErrorsPerSecret) SetSecretError

func (e ErrorsPerSecret) SetSecretError(name string, err error)

type LoginCredentialProvider

type LoginCredentialProvider interface {
	LoginCredentials(context.Context) ([]LoginCredentialsWithDetails, error)
}

type LoginCredentials

type LoginCredentials struct {
	Username string `json:"username"`
	Password string `json:"password"`
	Auth     string `json:"auth"` // base64 encoded username:password
}

type LoginCredentialsWithDetails

type LoginCredentialsWithDetails struct {
	LoginCredentials
	Expiration *time.Time
	URL        string
}

type ResultingDockerConfig

type ResultingDockerConfig struct {
	ErrorsPerSecret
	ConfigContents []byte
	Expiration     *time.Time
}

func (ResultingDockerConfig) AsSecret

func (c ResultingDockerConfig) AsSecret(secretNamespace, secretName string) *corev1.Secret

type StaticLoginCredentialProvider

type StaticLoginCredentialProvider struct {
	Credentials []LoginCredentialsWithDetails
}

func NewStaticLoginCredentialProvider

func NewStaticLoginCredentialProvider(parsedDockerConfig DockerRegistryConfig) StaticLoginCredentialProvider

func (StaticLoginCredentialProvider) LoginCredentials

func (p StaticLoginCredentialProvider) LoginCredentials(ctx context.Context) ([]LoginCredentialsWithDetails, error)