Documentation
¶
Overview ¶
Package secrets loads secrets from the Google Cloud Secret Manager.
Index ¶
- type Config
- func (c *Config) LoadPrometheus(ctx context.Context, client SecretClient, user, pass string) (*prometheus.Credentials, error)
- func (c *Config) LoadSigner(ctx context.Context, client SecretClient, name string) (*token.Signer, error)
- func (c *Config) LoadVerifier(ctx context.Context, client SecretClient, name string) (*token.Verifier, error)
- type LocalConfig
- func (c *LocalConfig) LoadPrometheus(ctx context.Context, client SecretClient, user, pass string) (*prometheus.Credentials, error)
- func (c *LocalConfig) LoadSigner(ctx context.Context, client SecretClient, name string) (*token.Signer, error)
- func (c *LocalConfig) LoadVerifier(ctx context.Context, client SecretClient, name string) (*token.Verifier, error)
- type SecretClient
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Config ¶
type Config struct {
Project string
// contains filtered or unexported fields
}
Config contains settings for secrets.
func (*Config) LoadPrometheus ¶ added in v0.13.0
func (c *Config) LoadPrometheus(ctx context.Context, client SecretClient, user, pass string) (*prometheus.Credentials, error)
LoadPrometheus fetches the latest version of the named secrets containing the Prometheus username and password. It returns a *prometheus.Credentials object.
func (*Config) LoadSigner ¶
func (c *Config) LoadSigner(ctx context.Context, client SecretClient, name string) (*token.Signer, error)
LoadSigner fetches the oldest enabled version of the named secret containing the JWT signer key from the Secret Manager API and returns a *token.Signer.
func (*Config) LoadVerifier ¶
func (c *Config) LoadVerifier(ctx context.Context, client SecretClient, name string) (*token.Verifier, error)
LoadVerifier fetches all enabled versions of the named secret containing the JWT verifier keys and returns a * token.Verifier.
type LocalConfig ¶ added in v0.9.0
type LocalConfig struct{}
LocalConfig supports loading signer and verifier keys from a local file rather than from secretmanager.
func NewLocalConfig ¶ added in v0.9.0
func NewLocalConfig() *LocalConfig
NewLocalConfig creates a new instance for loading local signer and verifier keys.
func (*LocalConfig) LoadPrometheus ¶ added in v0.13.0
func (c *LocalConfig) LoadPrometheus(ctx context.Context, client SecretClient, user, pass string) (*prometheus.Credentials, error)
LoadPrometheus reads the username and password secrets from the named files. The client parameter is ignored.
func (*LocalConfig) LoadSigner ¶ added in v0.9.0
func (c *LocalConfig) LoadSigner(ctx context.Context, client SecretClient, name string) (*token.Signer, error)
LoadSigner reads the secret from the named file. The client parameter is ignored.
func (*LocalConfig) LoadVerifier ¶ added in v0.9.0
func (c *LocalConfig) LoadVerifier(ctx context.Context, client SecretClient, name string) (*token.Verifier, error)
LoadVerifier reads the secret from the named file. The client parameter is ignored.
type SecretClient ¶
type SecretClient interface {
AccessSecretVersion(ctx context.Context, req *secretmanagerpb.AccessSecretVersionRequest, opts ...gax.CallOption) (*secretmanagerpb.AccessSecretVersionResponse, error)
ListSecretVersions(ctx context.Context, req *secretmanagerpb.ListSecretVersionsRequest, opts ...gax.CallOption) *secretmanager.SecretVersionIterator
}
SecretClient wraps the AccessSecretVersion function provided by the secretmanager.Client.
Source Files