secretsmanager

Documentation

Index

• Constants
• type SMInterface
• type SecretsManager
  • func New(sess *session.Session, cfg *aws.Config, ...) (*SecretsManager, error)
  • func (sm *SecretsManager) Capabilities() esv1beta1.SecretStoreCapabilities
  • func (sm *SecretsManager) Close(_ context.Context) error
  • func (sm *SecretsManager) DeleteSecret(ctx context.Context, remoteRef esv1beta1.PushSecretRemoteRef) error
  • func (sm *SecretsManager) GetAllSecrets(ctx context.Context, ref esv1beta1.ExternalSecretFind) (map[string][]byte, error)
  • func (sm *SecretsManager) GetSecret(ctx context.Context, ref esv1beta1.ExternalSecretDataRemoteRef) ([]byte, error)
  • func (sm *SecretsManager) GetSecretMap(ctx context.Context, ref esv1beta1.ExternalSecretDataRemoteRef) (map[string][]byte, error)
  • func (sm *SecretsManager) PushSecret(ctx context.Context, secret *corev1.Secret, psd esv1beta1.PushSecretData) error
  • func (sm *SecretsManager) SecretExists(ctx context.Context, pushSecretRef esv1beta1.PushSecretRemoteRef) (bool, error)
  • func (sm *SecretsManager) Validate() (esv1beta1.ValidationResult, error)

Constants

const (
	SecretPushFormatKey    = "secretPushFormat"
	SecretPushFormatString = "string"
	SecretPushFormatBinary = "binary"
)

Declares metadata information for pushing secrets to AWS Secret Store.

Types

type SMInterface

type SMInterface interface {
	ListSecrets(*awssm.ListSecretsInput) (*awssm.ListSecretsOutput, error)
	GetSecretValue(*awssm.GetSecretValueInput) (*awssm.GetSecretValueOutput, error)
	CreateSecretWithContext(aws.Context, *awssm.CreateSecretInput, ...request.Option) (*awssm.CreateSecretOutput, error)
	GetSecretValueWithContext(aws.Context, *awssm.GetSecretValueInput, ...request.Option) (*awssm.GetSecretValueOutput, error)
	PutSecretValueWithContext(aws.Context, *awssm.PutSecretValueInput, ...request.Option) (*awssm.PutSecretValueOutput, error)
	DescribeSecretWithContext(aws.Context, *awssm.DescribeSecretInput, ...request.Option) (*awssm.DescribeSecretOutput, error)
	DeleteSecretWithContext(ctx aws.Context, input *awssm.DeleteSecretInput, opts ...request.Option) (*awssm.DeleteSecretOutput, error)
}

SMInterface is a subset of the smiface api. see: https://docs.aws.amazon.com/sdk-for-go/api/service/secretsmanager/secretsmanageriface/

type SecretsManager

type SecretsManager struct {
	// contains filtered or unexported fields
}

SecretsManager is a provider for AWS SecretsManager.

func New

func New(sess *session.Session, cfg *aws.Config, secretsManagerCfg *esv1beta1.SecretsManager, referentAuth bool) (*SecretsManager, error)

New creates a new SecretsManager client.

func (*SecretsManager) Capabilities

func (sm *SecretsManager) Capabilities() esv1beta1.SecretStoreCapabilities

func (*SecretsManager) Close

func (sm *SecretsManager) Close(_ context.Context) error

func (*SecretsManager) DeleteSecret

func (sm *SecretsManager) DeleteSecret(ctx context.Context, remoteRef esv1beta1.PushSecretRemoteRef) error

func (*SecretsManager) GetAllSecrets

func (sm *SecretsManager) GetAllSecrets(ctx context.Context, ref esv1beta1.ExternalSecretFind) (map[string][]byte, error)

GetAllSecrets syncs multiple secrets from aws provider into a single Kubernetes Secret.

func (*SecretsManager) GetSecret

func (sm *SecretsManager) GetSecret(ctx context.Context, ref esv1beta1.ExternalSecretDataRemoteRef) ([]byte, error)

GetSecret returns a single secret from the provider.

func (*SecretsManager) GetSecretMap

func (sm *SecretsManager) GetSecretMap(ctx context.Context, ref esv1beta1.ExternalSecretDataRemoteRef) (map[string][]byte, error)

GetSecretMap returns multiple k/v pairs from the provider.

func (*SecretsManager) PushSecret

func (sm *SecretsManager) PushSecret(ctx context.Context, secret *corev1.Secret, psd esv1beta1.PushSecretData) error

func (*SecretsManager) SecretExists

func (sm *SecretsManager) SecretExists(ctx context.Context, pushSecretRef esv1beta1.PushSecretRemoteRef) (bool, error)

func (*SecretsManager) Validate

func (sm *SecretsManager) Validate() (esv1beta1.ValidationResult, error)