k8ssecretsstorage

Documentation

Index

• type K8sProvider
  • func NewProvider(traceContext context.Context, retrieveConjurSecrets conjur.RetrieveSecretsFunc, ...) K8sProvider
  • func (p K8sProvider) Provide() (bool, error)
• type K8sProviderConfig

Types

type K8sProvider

type K8sProvider struct {
	// contains filtered or unexported fields
}

K8sProvider is the secret provider to be used for K8s Secrets mode. It makes secrets available to applications by:

• Retrieving a list of required K8s Secrets
• Retrieving all Conjur secrets that are referenced (via variable ID, a.k.a. policy path) by those K8s Secrets.
• Updating the K8s Secrets by replacing each Conjur variable ID with the corresponding secret value that was retrieved from Conjur.

func NewProvider

func NewProvider(
	traceContext context.Context,
	retrieveConjurSecrets conjur.RetrieveSecretsFunc,
	sanitizeEnabled bool,
	config K8sProviderConfig,
) K8sProvider

NewProvider creates a new secret provider for K8s Secrets mode.

func (K8sProvider) Provide

func (p K8sProvider) Provide() (bool, error)

Provide implements a ProviderFunc to retrieve and push secrets to K8s secrets.

type K8sProviderConfig

type K8sProviderConfig struct {
	PodNamespace       string
	RequiredK8sSecrets []string
}

K8sProviderConfig provides config specific to Kubernetes Secrets provider