onepassword

package

v1.11.0 Latest Latest Go to latest Published: Feb 9, 2026 License: MIT Imports: 21 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/1Password/onepassword-operator

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func AppendAnnotationUpdatedSecret(annotations map[string]string, secrets map[string]*corev1.Secret, ...) map[string]*corev1.Secret
func AppendUpdatedContainerSecrets(containers []corev1.Container, secrets map[string]*corev1.Secret, ...) map[string]*corev1.Secret
func AppendUpdatedVolumeSecrets(volumes []corev1.Volume, secrets map[string]*corev1.Secret, ...) map[string]*corev1.Secret
func AreAnnotationsUsingSecrets(annotations map[string]string, secrets map[string]*corev1.Secret) bool
func AreContainersUsingSecrets(containers []corev1.Container, secrets map[string]*corev1.Secret) bool
func AreVolumesUsingSecrets(volumes []corev1.Volume, secrets map[string]*corev1.Secret) bool
func FilterAnnotations(annotations map[string]string, regex *regexp.Regexp) map[string]string
func GetAnnotationsForDeployment(deployment *appsv1.Deployment, regex *regexp.Regexp) (map[string]string, bool)
func GetOnePasswordItemByPath(ctx context.Context, opClient opclient.Client, path string) (*model.Item, error)
func IsDeploymentUsingSecrets(deployment *appsv1.Deployment, secrets map[string]*corev1.Secret) bool
func IsValidClientUUID(uuid string) bool
func IsVolumeUsingSecret(volume corev1.Volume, secrets map[string]*corev1.Secret) *corev1.Secret
func IsVolumeUsingSecretProjection(volume corev1.Volume, secrets map[string]*corev1.Secret) *corev1.Secret
func ParseVaultAndItemFromPath(path string) (string, string, error)
func SetupConnect(ctx context.Context, kubeClient client.Client, deploymentNamespace string) error
type SecretUpdateHandler
- func NewSecretUpdateHandler(kubernetesClient client.Client, apiReader client.Reader, ...) *SecretUpdateHandler
- func (h *SecretUpdateHandler) UpdateKubernetesSecretsTask(ctx context.Context) error
type SecretUpdateHandlerConfig

Constants ¶

View Source

const (
	OnepasswordPrefix             = "operator.1password.io"
	ItemPathAnnotation            = OnepasswordPrefix + "/item-path"
	NameAnnotation                = OnepasswordPrefix + "/item-name"
	VersionAnnotation             = OnepasswordPrefix + "/item-version"
	RestartAnnotation             = OnepasswordPrefix + "/last-restarted"
	AutoRestartWorkloadAnnotation = OnepasswordPrefix + "/auto-restart"
)

View Source

const UUIDLength = 26

UUIDLength defines the required length of UUIDs

Variables ¶

This section is empty.

Functions ¶

func AppendAnnotationUpdatedSecret ¶ added in v1.0.0

func AppendAnnotationUpdatedSecret(
	annotations map[string]string,
	secrets map[string]*corev1.Secret,
	updatedDeploymentSecrets map[string]*corev1.Secret,
) map[string]*corev1.Secret

func AppendUpdatedContainerSecrets ¶ added in v1.0.0

func AppendUpdatedContainerSecrets(
	containers []corev1.Container,
	secrets map[string]*corev1.Secret,
	updatedDeploymentSecrets map[string]*corev1.Secret,
) map[string]*corev1.Secret

func AppendUpdatedVolumeSecrets ¶ added in v1.0.0

func AppendUpdatedVolumeSecrets(
	volumes []corev1.Volume,
	secrets map[string]*corev1.Secret,
	updatedDeploymentSecrets map[string]*corev1.Secret,
) map[string]*corev1.Secret

func AreAnnotationsUsingSecrets ¶

func AreAnnotationsUsingSecrets(annotations map[string]string, secrets map[string]*corev1.Secret) bool

func AreContainersUsingSecrets ¶

func AreContainersUsingSecrets(containers []corev1.Container, secrets map[string]*corev1.Secret) bool

func AreVolumesUsingSecrets ¶

func AreVolumesUsingSecrets(volumes []corev1.Volume, secrets map[string]*corev1.Secret) bool

func FilterAnnotations ¶

func FilterAnnotations(annotations map[string]string, regex *regexp.Regexp) map[string]string

func GetAnnotationsForDeployment ¶

func GetAnnotationsForDeployment(deployment *appsv1.Deployment, regex *regexp.Regexp) (map[string]string, bool)

func GetOnePasswordItemByPath ¶

func GetOnePasswordItemByPath(ctx context.Context, opClient opclient.Client, path string) (*model.Item, error)

func IsDeploymentUsingSecrets ¶

func IsDeploymentUsingSecrets(deployment *appsv1.Deployment, secrets map[string]*corev1.Secret) bool

func IsValidClientUUID ¶ added in v0.0.2

func IsValidClientUUID(uuid string) bool

IsValidClientUUID returns true if the given client uuid is valid.

func IsVolumeUsingSecret ¶ added in v1.8.0

func IsVolumeUsingSecret(volume corev1.Volume, secrets map[string]*corev1.Secret) *corev1.Secret

func IsVolumeUsingSecretProjection ¶ added in v1.8.0

func IsVolumeUsingSecretProjection(volume corev1.Volume, secrets map[string]*corev1.Secret) *corev1.Secret

func ParseVaultAndItemFromPath ¶ added in v0.0.2

func ParseVaultAndItemFromPath(path string) (string, string, error)

func SetupConnect ¶ added in v1.0.0

func SetupConnect(ctx context.Context, kubeClient client.Client, deploymentNamespace string) error

Types ¶

type SecretUpdateHandler ¶

type SecretUpdateHandler struct {
	// contains filtered or unexported fields
}

func NewSecretUpdateHandler ¶ added in v1.11.0

func NewSecretUpdateHandler(
	kubernetesClient client.Client,
	apiReader client.Reader,
	opClient opclient.Client,
	config SecretUpdateHandlerConfig,
) *SecretUpdateHandler

func (*SecretUpdateHandler) UpdateKubernetesSecretsTask ¶

func (h *SecretUpdateHandler) UpdateKubernetesSecretsTask(ctx context.Context) error

type SecretUpdateHandlerConfig ¶ added in v1.11.0

type SecretUpdateHandlerConfig struct {
	ShouldAutoRestartWorkloadsGlobally bool
	AllowEmptyValues                   bool
	WatchedNamespaces                  []string
}

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
client
connect
sdk
testing
testing/mock
model

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL