secret

Documentation

Index

• Constants
• func FilterCosignSigningSecrets(secrets []*corev1.Secret) []*corev1.Secret
• type BasicAuth
  • func ReadBasicAuthSecret(secretVolume, secretName string) (BasicAuth, error)
• type Fetcher
  • func (f *Fetcher) SecretsForServiceAccount(ctx context.Context, serviceAccount, namespace string) ([]*corev1.Secret, error)
  • func (f *Fetcher) SecretsForSystemServiceAccount(ctx context.Context) ([]*corev1.Secret, error)
• type KeyType
• type SSH
  • func ReadSshSecret(secretVolume, secretName string) (SSH, error)
• type SigningKey
  • func FilterAndExtractSLSASecrets(secrets []*corev1.Secret) ([]SigningKey, error)

Constants

const (
	CosignSecretPrivateKey = "cosign.key"
	CosignSecretPassword   = "cosign.password"
	CosignSecretPublicKey  = "cosign.pub"

	CosignDockerMediaTypesAnnotation = "kpack.io/cosign.docker-media-types"
	CosignRepositoryAnnotation       = "kpack.io/cosign.repository"

	PKCS8SecretKey = "ssh-privatekey"

	SLSASecretAnnotation           = "kpack.io/slsa"
	SLSADockerMediaTypesAnnotation = "kpack.io/slsa.docker-media-types"
)

const (
	SSHAuthKnownHostsKey = "known_hosts"
)

Functions

func FilterCosignSigningSecrets

func FilterCosignSigningSecrets(secrets []*corev1.Secret) []*corev1.Secret

Types

type BasicAuth

type BasicAuth struct {
	Username string
	Password string
}

func ReadBasicAuthSecret

func ReadBasicAuthSecret(secretVolume, secretName string) (BasicAuth, error)

type Fetcher

type Fetcher struct {
	Client k8sclient.Interface

	SystemNamespace          string
	SystemServiceAccountName string
}

func (*Fetcher) SecretsForServiceAccount

func (f *Fetcher) SecretsForServiceAccount(ctx context.Context, serviceAccount, namespace string) ([]*corev1.Secret, error)

func (*Fetcher) SecretsForSystemServiceAccount

func (f *Fetcher) SecretsForSystemServiceAccount(ctx context.Context) ([]*corev1.Secret, error)

type KeyType

type KeyType int

const (
	CosignKeyType KeyType = iota
	PKCS8KeyType
)

type SSH

type SSH struct {
	PrivateKey string
	KnownHosts string
}

func ReadSshSecret

func ReadSshSecret(secretVolume, secretName string) (SSH, error)

type SigningKey

type SigningKey struct {
	SecretName string
	Key        []byte
	Password   []byte
	Type       KeyType
}

func FilterAndExtractSLSASecrets

func FilterAndExtractSLSASecrets(secrets []*corev1.Secret) ([]SigningKey, error)