common

Documentation

Overview

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Index

• func NewGrpcConnection(ctx context.Context, apiEndpoint string, apiEndpointID string, ...) (*grpc.ClientConn, error)
• type AdaptInputFunc
• type IamToken
  • func NewIamToken(ctx context.Context, apiEndpoint string, authorizedKey *iamkey.Key, ...) (*IamToken, error)
• type NewIamTokenFunc
• type NewSecretGetterFunc
• type NewSecretSetterFunc
• type PerRPCCredentials
  • func (t PerRPCCredentials) GetRequestMetadata(_ context.Context, _ ...string) (map[string]string, error)
  • func (PerRPCCredentials) RequireTransportSecurity() bool
• type SecretGetter
• type SecretSetter
• type SecretsClientInput
• type YandexCloudProvider
  • func InitYandexCloudProvider(logger logr.Logger, clock clock2.Clock, adaptInputFunc AdaptInputFunc, ...) *YandexCloudProvider
  • func (p *YandexCloudProvider) Capabilities() esv1beta1.SecretStoreCapabilities
  • func (p *YandexCloudProvider) CleanUpIamTokenMap()
  • func (p *YandexCloudProvider) IsIamTokenCached(authorizedKey *iamkey.Key) bool
  • func (p *YandexCloudProvider) NewClient(ctx context.Context, store esv1beta1.GenericStore, kube kclient.Client, ...) (esv1beta1.SecretsClient, error)
  • func (p *YandexCloudProvider) ValidateStore(store esv1beta1.GenericStore) error

Functions

func NewGrpcConnection

func NewGrpcConnection(
	ctx context.Context,
	apiEndpoint string,
	apiEndpointID string,
	authorizedKey *iamkey.Key,
	caCertificate []byte,
) (*grpc.ClientConn, error)

Creates a connection to the given Yandex.Cloud API endpoint.

Types

type AdaptInputFunc

type AdaptInputFunc func(store esv1beta1.GenericStore) (*SecretsClientInput, error)

type IamToken

type IamToken struct {
	Token     string
	ExpiresAt time.Time
}

func NewIamToken

func NewIamToken(ctx context.Context, apiEndpoint string, authorizedKey *iamkey.Key, caCertificate []byte) (*IamToken, error)

Exchanges the given authorized key to an IAM token.

type NewIamTokenFunc

type NewIamTokenFunc func(ctx context.Context, apiEndpoint string, authorizedKey *iamkey.Key, caCertificate []byte) (*IamToken, error)

type NewSecretGetterFunc

type NewSecretGetterFunc func(ctx context.Context, apiEndpoint string, authorizedKey *iamkey.Key, caCertificate []byte) (SecretGetter, error)

type NewSecretSetterFunc

type NewSecretSetterFunc func()

type PerRPCCredentials

type PerRPCCredentials struct {
	IamToken string
}

func (PerRPCCredentials) GetRequestMetadata

func (t PerRPCCredentials) GetRequestMetadata(_ context.Context, _ ...string) (map[string]string, error)

func (PerRPCCredentials) RequireTransportSecurity

func (PerRPCCredentials) RequireTransportSecurity() bool

type SecretGetter

type SecretGetter interface {
	GetSecret(ctx context.Context, iamToken, resourceID, versionID, property string) ([]byte, error)
	GetSecretMap(ctx context.Context, iamToken, resourceID, versionID string) (map[string][]byte, error)
}

Adapts the secrets received from a remote Yandex.Cloud service for the format expected by v1beta1.SecretsClient.

type SecretSetter

type SecretSetter interface {
	SetSecret() error
}

type SecretsClientInput

type SecretsClientInput struct {
	APIEndpoint   string
	AuthorizedKey esmeta.SecretKeySelector
	CACertificate *esmeta.SecretKeySelector
}

type YandexCloudProvider

type YandexCloudProvider struct {
	// contains filtered or unexported fields
}

Implementation of v1beta1.Provider.

func InitYandexCloudProvider

func InitYandexCloudProvider(
	logger logr.Logger,
	clock clock2.Clock,
	adaptInputFunc AdaptInputFunc,
	newSecretGetterFunc NewSecretGetterFunc,
	newIamTokenFunc NewIamTokenFunc,
	iamTokenCleanupDelay time.Duration,
) *YandexCloudProvider

func (*YandexCloudProvider) Capabilities

func (p *YandexCloudProvider) Capabilities() esv1beta1.SecretStoreCapabilities

func (*YandexCloudProvider) CleanUpIamTokenMap

func (p *YandexCloudProvider) CleanUpIamTokenMap()

func (*YandexCloudProvider) IsIamTokenCached

func (p *YandexCloudProvider) IsIamTokenCached(authorizedKey *iamkey.Key) bool

Used for testing.

func (*YandexCloudProvider) NewClient

func (p *YandexCloudProvider) NewClient(ctx context.Context, store esv1beta1.GenericStore, kube kclient.Client, namespace string) (esv1beta1.SecretsClient, error)

NewClient constructs a Yandex.Cloud Provider.

func (*YandexCloudProvider) ValidateStore

func (p *YandexCloudProvider) ValidateStore(store esv1beta1.GenericStore) error