resolvers

Documentation

Index

• Constants
• func SecretKeyRef(ctx context.Context, c client.Client, storeKind string, esNamespace string, ...) (string, error)

Constants

const (

	// This is used to determine if a store is cluster-scoped or not.
	// The EmptyStoreKind is not cluster-scoped, hence resources
	// cannot be resolved across namespaces.
	// TODO: when we implement cluster-scoped generators
	// we can remove this and replace it with a interface.
	EmptyStoreKind = "EmptyStoreKind"
)

Functions

func SecretKeyRef

func SecretKeyRef(
	ctx context.Context,
	c client.Client,
	storeKind string,
	esNamespace string,
	ref *esmeta.SecretKeySelector) (string, error)

SecretKeyRef resolves a metav1.SecretKeySelector and returns the value of the secret it points to. A user must pass the namespace of the originating ExternalSecret, as this may differ from the namespace defined in the SecretKeySelector. This func ensures that only a ClusterSecretStore is able to request secrets across namespaces.