secrets

type Options struct {
	Owner           SecretOwner
	Scheme          *runtime.Scheme
	Activates       *time.Time
	Expires         *time.Time
	Flatten         bool
	FlattenSuffixes []string
}

type SecretClient interface {
	Upsert(ctx context.Context, key SecretKey, data map[string][]byte, opts ...SecretOption) error
	Delete(ctx context.Context, key SecretKey, opts ...SecretOption) error
	Get(ctx context.Context, key SecretKey, opts ...SecretOption) (map[string][]byte, error)
	GetSecretNamingVersion() SecretNamingVersion

	// We really shouldn't want/need such a method but unfortunately some resources have specific KeyVault handling for how
	// they name things so our abstraction breaks down
	IsKeyVault() bool
}

type SecretKey struct {
	// Name is the name of the resource the secret is for.
	// We don't need the full "path" to the Azure resource because those relationships are all flattened in Kubernetes
	// and since Kubernetes forbids conflicting resources of the same kind in the same namespace + name we only need the
	// 3-tuple of kind, namespace, name.
	Name string
	// Namespace is the namespace of the resource the secret is for
	Namespace string
	// Kind is the kind of resource - this can be gathered from metav1.TypeMeta.Kind usually
	Kind string
}

type SecretNamingVersion string

type SecretOption func(*Options)

type SecretOwner interface {
	runtime.Object
	metav1.Object
}