akeyless

Documentation

Index

• Constants
• func GetAKeylessProvider(store esv1beta1.GenericStore) (*esv1beta1.AkeylessProvider, error)
• type Akeyless
  • func (a *Akeyless) Close(_ context.Context) error
  • func (a *Akeyless) DeleteSecret(_ context.Context, _ esv1beta1.PushSecretRemoteRef) error
  • func (a *Akeyless) GetAllSecrets(ctx context.Context, ref esv1beta1.ExternalSecretFind) (map[string][]byte, error)
  • func (a *Akeyless) GetSecret(ctx context.Context, ref esv1beta1.ExternalSecretDataRemoteRef) ([]byte, error)
  • func (a *Akeyless) GetSecretMap(ctx context.Context, ref esv1beta1.ExternalSecretDataRemoteRef) (map[string][]byte, error)
  • func (a *Akeyless) PushSecret(_ context.Context, _ *corev1.Secret, _ esv1beta1.PushSecretData) error
  • func (a *Akeyless) SecretExists(_ context.Context, _ esv1beta1.PushSecretRemoteRef) (bool, error)
  • func (a *Akeyless) Validate() (esv1beta1.ValidationResult, error)
• type Item
• type Provider
  • func (p *Provider) Capabilities() esv1beta1.SecretStoreCapabilities
  • func (p *Provider) NewClient(ctx context.Context, store esv1beta1.GenericStore, kube client.Client, ...) (esv1beta1.SecretsClient, error)
  • func (p *Provider) ValidateStore(store esv1beta1.GenericStore) (admission.Warnings, error)

Constants

const DefServiceAccountFile = "/var/run/secrets/kubernetes.io/serviceaccount/token"

Functions

func GetAKeylessProvider

func GetAKeylessProvider(store esv1beta1.GenericStore) (*esv1beta1.AkeylessProvider, error)

GetAKeylessProvider does the necessary nil checks and returns the akeyless provider or an error.

Types

type Akeyless

type Akeyless struct {
	Client akeylessVaultInterface
	// contains filtered or unexported fields
}

func (*Akeyless) Close

func (a *Akeyless) Close(_ context.Context) error

func (*Akeyless) DeleteSecret

func (a *Akeyless) DeleteSecret(_ context.Context, _ esv1beta1.PushSecretRemoteRef) error

func (*Akeyless) GetAllSecrets

func (a *Akeyless) GetAllSecrets(ctx context.Context, ref esv1beta1.ExternalSecretFind) (map[string][]byte, error)

Implements store.Client.GetAllSecrets Interface. Retrieves a all secrets with defined in ref.Name or tags.

func (*Akeyless) GetSecret

func (a *Akeyless) GetSecret(ctx context.Context, ref esv1beta1.ExternalSecretDataRemoteRef) ([]byte, error)

Implements store.Client.GetSecret Interface. Retrieves a secret with the secret name defined in ref.Name.

func (*Akeyless) GetSecretMap

func (a *Akeyless) GetSecretMap(ctx context.Context, ref esv1beta1.ExternalSecretDataRemoteRef) (map[string][]byte, error)

Implements store.Client.GetSecretMap Interface. New version of GetSecretMap.

func (*Akeyless) PushSecret

func (a *Akeyless) PushSecret(_ context.Context, _ *corev1.Secret, _ esv1beta1.PushSecretData) error

func (*Akeyless) SecretExists

func (a *Akeyless) SecretExists(_ context.Context, _ esv1beta1.PushSecretRemoteRef) (bool, error)

func (*Akeyless) Validate

func (a *Akeyless) Validate() (esv1beta1.ValidationResult, error)

type Item

type Item struct {
	ItemName    string `json:"item_name"`
	ItemType    string `json:"item_type"`
	LastVersion int32  `json:"last_version"`
}

type Provider

type Provider struct{}

Provider satisfies the provider interface.

func (*Provider) Capabilities

func (p *Provider) Capabilities() esv1beta1.SecretStoreCapabilities

Capabilities return the provider supported capabilities (ReadOnly, WriteOnly, ReadWrite).

func (*Provider) NewClient

func (p *Provider) NewClient(ctx context.Context, store esv1beta1.GenericStore, kube client.Client, namespace string) (esv1beta1.SecretsClient, error)

NewClient constructs a new secrets client based on the provided store.

func (*Provider) ValidateStore

func (p *Provider) ValidateStore(store esv1beta1.GenericStore) (admission.Warnings, error)