resolvers

Documentation

Index

• Constants
• Variables
• func GeneratorRef(ctx context.Context, cl client.Client, scheme *runtime.Scheme, ...) (genv1alpha1.Generator, *apiextensions.JSON, error)
• func SecretKeyRef(ctx context.Context, c client.Client, storeKind string, esNamespace string, ...) (string, error)

Constants

const (

	// This is used to determine if a store is cluster-scoped or not.
	// The EmptyStoreKind is not cluster-scoped, hence resources
	// cannot be resolved across namespaces.
	// TODO: when we implement cluster-scoped generators
	// we can remove this and replace it with a interface.
	EmptyStoreKind = "EmptyStoreKind"
)

Variables

var (
	// ErrUnableToGetGenerator is returned when a generator reference cannot be resolved.
	ErrUnableToGetGenerator = fmt.Errorf("unable to get generator")
)

these errors are explicitly defined so we can detect them with `errors.Is()`.

Functions

func GeneratorRef

func GeneratorRef(ctx context.Context, cl client.Client, scheme *runtime.Scheme, namespace string, generatorRef *esv1beta1.GeneratorRef) (genv1alpha1.Generator, *apiextensions.JSON, error)

GeneratorRef resolves a generator reference to a generator implementation.

func SecretKeyRef

func SecretKeyRef(
	ctx context.Context,
	c client.Client,
	storeKind string,
	esNamespace string,
	ref *esmeta.SecretKeySelector) (string, error)

SecretKeyRef resolves a metav1.SecretKeySelector and returns the value of the secret it points to. A user must pass the namespace of the originating ExternalSecret, as this may differ from the namespace defined in the SecretKeySelector. This func ensures that only a ClusterSecretStore is able to request secrets across namespaces.