secrets

Documentation

Index

• Constants
• func ReplaceSecrets(ctx *pulumi.Context, source string) (string, error)
• func ReplaceSecretsFromAWS(conf *config.Config, source string) (string, error)
• func ReplaceSecretsFromGCP(conf *config.Config, source string) (string, error)
• func ReplaceSecretsFromPulumi(conf *config.Config, source string) (string, error)
• type SecretProvider
  • func SecretProviderFromString(secretProvider string) SecretProvider
  • func (s SecretProvider) String() string

Constants

const (
	SecretProviderTypePulumi  = "pulumi"
	SecretProviderTypeAWS     = "aws"
	SecretProviderTypeGCP     = "gcp"
	SecretProviderTypeUnknown = "unknown"
)

SecretProvider string values

Functions

func ReplaceSecrets

func ReplaceSecrets(ctx *pulumi.Context, source string) (string, error)

ReplaceSecrets uses the configured secret provider to retrieve secret values and replace them in the given string using catalyst squad templatying syntax, i.e. given <<mySecretValue>> in the string, the secret named `mySecretValue` will be pulled from the secret provider, and <<mySecretValue>> in the source string will be replaced with the value from the secret. Authentication/authorization should happen before running `pulumi up`. This makes no attempt to auth to providers and depends on that configuration already being present via env vars.

func ReplaceSecretsFromAWS

func ReplaceSecretsFromAWS(conf *config.Config, source string) (string, error)

ReplaceSecretsFromAWS uses AWS Secrets Manager as the secrets provider to retrieve secrets

func ReplaceSecretsFromGCP

func ReplaceSecretsFromGCP(conf *config.Config, source string) (string, error)

ReplaceSecretsFromGCP uses GCP Secrets Manager as the secrets provider to retrieve secrets

func ReplaceSecretsFromPulumi

func ReplaceSecretsFromPulumi(conf *config.Config, source string) (string, error)

ReplaceSecretsFromPulumi uses pulumi as the secrets provider to retrieve secrets

Types

type SecretProvider

type SecretProvider int64

SecretProvider enum

const (
	Unknown SecretProvider = iota
	Pulumi
	AWS
	GCP
)

SecretProvider num values

func SecretProviderFromString

func SecretProviderFromString(secretProvider string) SecretProvider

SecretProviderFromString transforms a string into a SecretProvider enum

func (SecretProvider) String

func (s SecretProvider) String() string

String transforms a secret provider enum into its string reprsentation