secretexpire

Documentation

Overview

Package secretexpire provides a worker for tracking and notifying when a secret revision should expire.

Index

• func New(config Config) (worker.Worker, error)
• type Config
  • func (config Config) Validate() error
• type SecretManagerFacade
• type Worker
  • func (w *Worker) Kill()
  • func (w *Worker) Wait() error

Functions

func New

func New(config Config) (worker.Worker, error)

New returns a Secret Expiry Worker backed by config, or an error.

Types

type Config

type Config struct {
	SecretManagerFacade SecretManagerFacade
	Logger              logger.Logger
	Clock               clock.Clock

	SecretOwners    []names.Tag
	ExpireRevisions chan<- []string
}

Config defines the operation of the Worker.

func (Config) Validate

func (config Config) Validate() error

Validate returns an error if config cannot drive the Worker.

type SecretManagerFacade

type SecretManagerFacade interface {
	WatchSecretRevisionsExpiryChanges(ctx context.Context, ownerTags ...names.Tag) (watcher.SecretTriggerWatcher, error)
}

SecretManagerFacade instances provide a watcher for secret revision expiry changes.

type Worker

type Worker struct {
	// contains filtered or unexported fields
}

Worker fires events when secret revisions should be expired.

func (*Worker) Kill

func (w *Worker) Kill()

Kill is defined on worker.Worker.

func (*Worker) Wait

func (w *Worker) Wait() error

Wait is part of the worker.Worker interface.