secretmanager

Documentation

Index

• Constants
• func NewTokenSource(ctx context.Context, auth esv1beta1.GCPSMAuth, projectID, storeKind string, ...) (oauth2.TokenSource, error)
• type Client
  • func (c *Client) Close(_ context.Context) error
  • func (c *Client) DeleteSecret(ctx context.Context, remoteRef esv1beta1.PushSecretRemoteRef) error
  • func (c *Client) GetAllSecrets(ctx context.Context, ref esv1beta1.ExternalSecretFind) (map[string][]byte, error)
  • func (c *Client) GetSecret(ctx context.Context, ref esv1beta1.ExternalSecretDataRemoteRef) ([]byte, error)
  • func (c *Client) GetSecretMap(ctx context.Context, ref esv1beta1.ExternalSecretDataRemoteRef) (map[string][]byte, error)
  • func (c *Client) PushSecret(ctx context.Context, secret *corev1.Secret, ...) error
  • func (c *Client) SecretExists(_ context.Context, _ esv1beta1.PushSecretRemoteRef) (bool, error)
  • func (c *Client) Validate() (esv1beta1.ValidationResult, error)
• type GoogleSecretManagerClient
• type IamClient
• type Metadata
• type Provider
  • func (p *Provider) Capabilities() esv1beta1.SecretStoreCapabilities
  • func (p *Provider) NewClient(ctx context.Context, store esv1beta1.GenericStore, kube kclient.Client, ...) (esv1beta1.SecretsClient, error)
  • func (p *Provider) ValidateStore(store esv1beta1.GenericStore) (admission.Warnings, error)

Constants

const (
	CloudPlatformRole = "https://www.googleapis.com/auth/cloud-platform"
)

Functions

func NewTokenSource

func NewTokenSource(ctx context.Context, auth esv1beta1.GCPSMAuth, projectID, storeKind string, kube kclient.Client, namespace string) (oauth2.TokenSource, error)

Types

type Client

type Client struct {
	// contains filtered or unexported fields
}

func (*Client) Close

func (c *Client) Close(_ context.Context) error

func (*Client) DeleteSecret

func (c *Client) DeleteSecret(ctx context.Context, remoteRef esv1beta1.PushSecretRemoteRef) error

func (*Client) GetAllSecrets

func (c *Client) GetAllSecrets(ctx context.Context, ref esv1beta1.ExternalSecretFind) (map[string][]byte, error)

GetAllSecrets syncs multiple secrets from gcp provider into a single Kubernetes Secret.

func (*Client) GetSecret

func (c *Client) GetSecret(ctx context.Context, ref esv1beta1.ExternalSecretDataRemoteRef) ([]byte, error)

GetSecret returns a single secret from the provider.

func (*Client) GetSecretMap

func (c *Client) GetSecretMap(ctx context.Context, ref esv1beta1.ExternalSecretDataRemoteRef) (map[string][]byte, error)

GetSecretMap returns multiple k/v pairs from the provider.

func (*Client) PushSecret

func (c *Client) PushSecret(ctx context.Context, secret *corev1.Secret, pushSecretData esv1beta1.PushSecretData) error

PushSecret pushes a kubernetes secret key into gcp provider Secret.

func (*Client) SecretExists

func (c *Client) SecretExists(_ context.Context, _ esv1beta1.PushSecretRemoteRef) (bool, error)

func (*Client) Validate

func (c *Client) Validate() (esv1beta1.ValidationResult, error)

type GoogleSecretManagerClient

type GoogleSecretManagerClient interface {
	DeleteSecret(ctx context.Context, req *secretmanagerpb.DeleteSecretRequest, opts ...gax.CallOption) error
	AccessSecretVersion(ctx context.Context, req *secretmanagerpb.AccessSecretVersionRequest, opts ...gax.CallOption) (*secretmanagerpb.AccessSecretVersionResponse, error)
	ListSecrets(ctx context.Context, req *secretmanagerpb.ListSecretsRequest, opts ...gax.CallOption) *secretmanager.SecretIterator
	AddSecretVersion(ctx context.Context, req *secretmanagerpb.AddSecretVersionRequest, opts ...gax.CallOption) (*secretmanagerpb.SecretVersion, error)
	CreateSecret(ctx context.Context, req *secretmanagerpb.CreateSecretRequest, opts ...gax.CallOption) (*secretmanagerpb.Secret, error)
	Close() error
	GetSecret(ctx context.Context, req *secretmanagerpb.GetSecretRequest, opts ...gax.CallOption) (*secretmanagerpb.Secret, error)
	UpdateSecret(context.Context, *secretmanagerpb.UpdateSecretRequest, ...gax.CallOption) (*secretmanagerpb.Secret, error)
}

type IamClient

type IamClient interface {
	GenerateAccessToken(ctx context.Context, req *credentialspb.GenerateAccessTokenRequest, opts ...gax.CallOption) (*credentialspb.GenerateAccessTokenResponse, error)
	Close() error
}

interface to GCP IAM API.

type Metadata

type Metadata struct {
	Annotations map[string]string `json:"annotations"`
	Labels      map[string]string `json:"labels"`
}

type Provider

type Provider struct{}

Provider is a secrets provider for GCP Secret Manager. It implements the necessary NewClient() and ValidateStore() funcs.

func (*Provider) Capabilities

func (p *Provider) Capabilities() esv1beta1.SecretStoreCapabilities

func (*Provider) NewClient

func (p *Provider) NewClient(ctx context.Context, store esv1beta1.GenericStore, kube kclient.Client, namespace string) (esv1beta1.SecretsClient, error)

NewClient constructs a GCP Provider.

func (*Provider) ValidateStore

func (p *Provider) ValidateStore(store esv1beta1.GenericStore) (admission.Warnings, error)