gardenerconfig

README

Gardener Config Credential Repository

The gardener config credential repository implements the retrieval of secrets in a data format specified by the gardener concourse utils (https://github.com/gardener/cc-utils/tree/master/model). It supports either handing in the data via a local json file or retrieve it from a secret server (as defined in https://github.com/gardener/cc-utils/blob/master/ccc/secrets_server.py#L29).

Documentation

Index

• Constants
• func IdentityMatcher(pattern, cur, id cpi.ConsumerIdentity) bool
• type Cipher
• type Repositories
  • func (r *Repositories) GetRepository(ctx cpi.Context, url string, configType gardenercfgcpi.ConfigType, ...) (*Repository, error)
• type Repository
  • func NewRepository(ctx cpi.Context, url string, configType gardenercfgcpi.ConfigType, ...) (*Repository, error)
  • func (r *Repository) ExistsCredentials(name string) (bool, error)
  • func (r *Repository) LookupCredentials(name string) (cpi.Credentials, error)
  • func (r *Repository) WriteCredentials(name string, creds cpi.Credentials) (cpi.Credentials, error)
• type RepositorySpec
  • func NewRepositorySpec(url string, configType gardenercfgcpi.ConfigType, cipher Cipher, ...) *RepositorySpec
  • func (a *RepositorySpec) GetType() string
  • func (a *RepositorySpec) Repository(ctx cpi.Context, creds cpi.Credentials) (cpi.Repository, error)

Constants

const (
	RepositoryType   = "GardenerConfig"
	RepositoryTypeV1 = RepositoryType + runtime.VersionSeparator + "v1"
	CONSUMER_TYPE    = "Buildcredentials" + common.OCM_TYPE_GROUP_SUFFIX
)

const ATTR_REPOS = "github.com/open-component-model/ocm/pkg/contexts/credentials/repositories/gardenerconfig"

Functions

func IdentityMatcher

func IdentityMatcher(pattern, cur, id cpi.ConsumerIdentity) bool

Types

type Cipher

type Cipher string

const (
	Plaintext Cipher = "PLAINTEXT"
	AESECB    Cipher = "AES.ECB"
)

type Repositories

type Repositories struct {
	// contains filtered or unexported fields
}

func (*Repositories) GetRepository

func (r *Repositories) GetRepository(ctx cpi.Context, url string, configType gardenercfgcpi.ConfigType, cipher Cipher, key []byte, propagateConsumerIdentity bool) (*Repository, error)

type Repository

type Repository struct {
	// contains filtered or unexported fields
}

func NewRepository

func NewRepository(ctx cpi.Context, url string, configType gardenercfgcpi.ConfigType, cipher Cipher, key []byte, propagateConsumerIdentity bool) (*Repository, error)

func (*Repository) ExistsCredentials

func (r *Repository) ExistsCredentials(name string) (bool, error)

func (*Repository) LookupCredentials

func (r *Repository) LookupCredentials(name string) (cpi.Credentials, error)

func (*Repository) WriteCredentials

func (r *Repository) WriteCredentials(name string, creds cpi.Credentials) (cpi.Credentials, error)

type RepositorySpec

type RepositorySpec struct {
	runtime.ObjectVersionedType `json:",inline"`
	URL                         string                    `json:"url"`
	ConfigType                  gardenercfgcpi.ConfigType `json:"configType"`
	Cipher                      Cipher                    `json:"cipher"`
	PropagateConsumerIdentity   bool                      `json:"propagateConsumerIdentity"`
}

RepositorySpec describes a secret server based credential repository interface.

func NewRepositorySpec

func NewRepositorySpec(url string, configType gardenercfgcpi.ConfigType, cipher Cipher, propagateConsumerIdentity bool) *RepositorySpec

NewRepositorySpec creates a new memory RepositorySpec.

func (*RepositorySpec) GetType

func (a *RepositorySpec) GetType() string

func (*RepositorySpec) Repository

func (a *RepositorySpec) Repository(ctx cpi.Context, creds cpi.Credentials) (cpi.Repository, error)