resolver

Documentation

Index

• func ResolveAuthRefAndPodIdentity(ctx context.Context, client client.Client, logger logr.Logger, ...) (map[string]string, kedav1alpha1.AuthPodIdentity, error)
• func ResolveContainerEnv(ctx context.Context, client client.Client, logger logr.Logger, ...) (map[string]string, error)
• func ResolveScaleTargetPodSpec(ctx context.Context, kubeClient client.Client, scalableObject interface{}) (*corev1.PodTemplateSpec, string, error)
• type AwsSecretManagerHandler
  • func NewAwsSecretManagerHandler(a *kedav1alpha1.AwsSecretManager) *AwsSecretManagerHandler
  • func (ash *AwsSecretManagerHandler) Initialize(ctx context.Context, client client.Client, logger logr.Logger, ...) error
  • func (ash *AwsSecretManagerHandler) Read(ctx context.Context, logger logr.Logger, ...) (string, error)
  • func (ash *AwsSecretManagerHandler) Stop()
• type AzureKeyVaultHandler
  • func NewAzureKeyVaultHandler(v *kedav1alpha1.AzureKeyVault) *AzureKeyVaultHandler
  • func (vh *AzureKeyVaultHandler) Initialize(ctx context.Context, client client.Client, logger logr.Logger, ...) error
  • func (vh *AzureKeyVaultHandler) Read(ctx context.Context, secretName string, version string) (string, error)
• type GCPSecretManagerHandler
  • func NewGCPSecretManagerHandler(v *kedav1alpha1.GCPSecretManager) *GCPSecretManagerHandler
  • func (vh *GCPSecretManagerHandler) Initialize(ctx context.Context, client client.Client, logger logr.Logger, ...) error
  • func (vh *GCPSecretManagerHandler) Read(ctx context.Context, secretID, secretVersion string) (string, error)
• type HashicorpVaultHandler
  • func NewHashicorpVaultHandler(v *kedav1alpha1.HashiCorpVault) *HashicorpVaultHandler
  • func (vh *HashicorpVaultHandler) Initialize(logger logr.Logger) error
  • func (vh *HashicorpVaultHandler) Read(path string) (*vaultapi.Secret, error)
  • func (vh *HashicorpVaultHandler) ResolveSecrets(secrets []kedav1alpha1.VaultSecret) ([]kedav1alpha1.VaultSecret, error)
  • func (vh *HashicorpVaultHandler) Stop()
  • func (vh *HashicorpVaultHandler) Write(path string, data map[string]interface{}) (*vaultapi.Secret, error)
• type SecretGroup

Functions

func ResolveAuthRefAndPodIdentity

func ResolveAuthRefAndPodIdentity(ctx context.Context, client client.Client, logger logr.Logger,
	triggerAuthRef *kedav1alpha1.AuthenticationRef, podTemplateSpec *corev1.PodTemplateSpec,
	namespace string, secretsLister corev1listers.SecretLister) (map[string]string, kedav1alpha1.AuthPodIdentity, error)

ResolveAuthRefAndPodIdentity provides authentication parameters and pod identity needed authenticate scaler with the environment.

func ResolveContainerEnv

func ResolveContainerEnv(ctx context.Context, client client.Client, logger logr.Logger, podSpec *corev1.PodSpec, containerName, namespace string, secretsLister corev1listers.SecretLister) (map[string]string, error)

ResolveContainerEnv resolves all environment variables in a container. It returns either map of env variable key and value or error if there is any.

func ResolveScaleTargetPodSpec

func ResolveScaleTargetPodSpec(ctx context.Context, kubeClient client.Client, scalableObject interface{}) (*corev1.PodTemplateSpec, string, error)

ResolveScaleTargetPodSpec for given scalableObject inspects the scale target workload, which could be almost any k8s resource (Deployment, StatefulSet, CustomResource...) and for the given resource returns *corev1.PodTemplateSpec and a name of the container which is being used for referencing environment variables

Types

type AwsSecretManagerHandler

type AwsSecretManagerHandler struct {
	// contains filtered or unexported fields
}

func NewAwsSecretManagerHandler

func NewAwsSecretManagerHandler(a *kedav1alpha1.AwsSecretManager) *AwsSecretManagerHandler

func (*AwsSecretManagerHandler) Initialize

func (ash *AwsSecretManagerHandler) Initialize(ctx context.Context, client client.Client, logger logr.Logger, triggerNamespace string, secretsLister corev1listers.SecretLister, podSpec *corev1.PodSpec) error

Initialize sets up the AWS Secret Manager handler by configuring AWS credentials, AWS region, or using pod identity. It initializes the AWS Secret Manager session and metadata.

func (*AwsSecretManagerHandler) Read

func (ash *AwsSecretManagerHandler) Read(ctx context.Context, logger logr.Logger, secretName, versionID, versionStage string) (string, error)

Read fetches the secret value from AWS Secret Manager using the provided secret name, version ID(optional), and version stage(optional). It returns the secret value as a string.

func (*AwsSecretManagerHandler) Stop

func (ash *AwsSecretManagerHandler) Stop()

type AzureKeyVaultHandler

type AzureKeyVaultHandler struct {
	// contains filtered or unexported fields
}

func NewAzureKeyVaultHandler

func NewAzureKeyVaultHandler(v *kedav1alpha1.AzureKeyVault) *AzureKeyVaultHandler

func (*AzureKeyVaultHandler) Initialize

func (vh *AzureKeyVaultHandler) Initialize(ctx context.Context, client client.Client, logger logr.Logger, triggerNamespace string, secretsLister corev1listers.SecretLister) error

func (*AzureKeyVaultHandler) Read

func (vh *AzureKeyVaultHandler) Read(ctx context.Context, secretName string, version string) (string, error)

type GCPSecretManagerHandler

type GCPSecretManagerHandler struct {
	// contains filtered or unexported fields
}

func NewGCPSecretManagerHandler

func NewGCPSecretManagerHandler(v *kedav1alpha1.GCPSecretManager) *GCPSecretManagerHandler

NewGCPSecretManagerHandler creates a GCPSecretManagerHandler object

func (*GCPSecretManagerHandler) Initialize

func (vh *GCPSecretManagerHandler) Initialize(ctx context.Context, client client.Client, logger logr.Logger, triggerNamespace string, secretsLister corev1listers.SecretLister) error

Initialize the GCP Secret Manager client

func (*GCPSecretManagerHandler) Read

func (vh *GCPSecretManagerHandler) Read(ctx context.Context, secretID, secretVersion string) (string, error)

type HashicorpVaultHandler

type HashicorpVaultHandler struct {
	// contains filtered or unexported fields
}

HashicorpVaultHandler is specification of Hashi Corp Vault

func NewHashicorpVaultHandler

func NewHashicorpVaultHandler(v *kedav1alpha1.HashiCorpVault) *HashicorpVaultHandler

NewHashicorpVaultHandler creates a HashicorpVaultHandler object

func (*HashicorpVaultHandler) Initialize

func (vh *HashicorpVaultHandler) Initialize(logger logr.Logger) error

Initialize the Vault client

func (*HashicorpVaultHandler) Read

func (vh *HashicorpVaultHandler) Read(path string) (*vaultapi.Secret, error)

Read is used to get a secret from vault Read api. (e.g. secret)

func (*HashicorpVaultHandler) ResolveSecrets

func (vh *HashicorpVaultHandler) ResolveSecrets(secrets []kedav1alpha1.VaultSecret) ([]kedav1alpha1.VaultSecret, error)

ResolveSecrets allows to resolve a slice of secrets by vault. The function returns the list of secrets with the value updated. If multiple secret refers to the same SecretGroup, the secret will be fetched only once.

func (*HashicorpVaultHandler) Stop

func (vh *HashicorpVaultHandler) Stop()

Stop is responsible for stopping the renewal token process

func (*HashicorpVaultHandler) Write

func (vh *HashicorpVaultHandler) Write(path string, data map[string]interface{}) (*vaultapi.Secret, error)

Write is used to get a secret from vault that needs to pass along data and uses the vault Write api. (e.g. pki)

type SecretGroup

type SecretGroup struct {
	// contains filtered or unexported fields
}

SecretGroup is used to group secret together by path, secretType and vaultPkiData.