k8ssecretsstorage

Documentation

Index

• type K8sProvider
  • func NewProvider(traceContext context.Context, retrieveConjurSecrets conjur.RetrieveSecretsFunc, ...) K8sProvider
  • func (p K8sProvider) Provide() (bool, error)
• type K8sProviderConfig

Types

type K8sProvider

type K8sProvider struct {
	// contains filtered or unexported fields
}

K8sProvider is the secret provider to be used for K8s Secrets mode. It makes secrets available to applications by:

• Retrieving a list of required K8s Secrets
• Retrieving all Conjur secrets that are referenced (via variable ID, a.k.a. policy path) by those K8s Secrets.
• Updating the K8s Secrets by replacing each Conjur variable ID with the corresponding secret value that was retrieved from Conjur.

func NewProvider

func NewProvider(
	traceContext context.Context,
	retrieveConjurSecrets conjur.RetrieveSecretsFunc,
	providerConfig K8sProviderConfig,
) K8sProvider

NewProvider creates a new secret provider for K8s Secrets mode.

func (K8sProvider) Provide

func (p K8sProvider) Provide() (bool, error)

Provide implements a ProviderFunc to retrieve and push secrets to K8s secrets.

type K8sProviderConfig

type K8sProviderConfig struct {
	PodNamespace       string
	RequiredK8sSecrets []string
}

K8sProviderConfig provides config specific to Kubernetes Secrets provider