secretsmanager

Documentation

Index

• type Service
  • func NewService(secretsScope cloud.ClusterScoper) *Service
  • func (s *Service) Create(m *scope.MachineScope, data []byte) (string, int32, error)
  • func (s *Service) Delete(m *scope.MachineScope) error
  • func (s *Service) UserData(secretPrefix string, chunks int32, region string, ...) ([]byte, error)

Types

type Service

type Service struct {
	SecretsManagerClient secretsmanageriface.SecretsManagerAPI
	// contains filtered or unexported fields
}

Service holds a collection of interfaces. The interfaces are broken down like this to group functions together. One alternative is to have a large list of functions from the ec2 client.

func NewService

func NewService(secretsScope cloud.ClusterScoper) *Service

NewService returns a new service given the api clients.

func (*Service) Create

func (s *Service) Create(m *scope.MachineScope, data []byte) (string, int32, error)

Create stores data in AWS Secrets Manager for a given machine, chunking at 10kb per secret. The prefix of the secret ARN and the number of chunks are returned.

func (*Service) Delete

func (s *Service) Delete(m *scope.MachineScope) error

Delete the secret belonging to a machine from AWS Secrets Manager.

func (*Service) UserData

func (s *Service) UserData(secretPrefix string, chunks int32, region string, endpoints []scope.ServiceEndpoint) ([]byte, error)

UserData creates a multi-part MIME document including a script boothook to download userdata from AWS Secrets Manager and then restart cloud-init, and an include part specifying the on disk location of the new userdata.