secrets

Dec 8, 2025

Changes in this version

+ const MaxProxyURLLength

Aug 6, 2025

Changes in this version

type AuthMethods

+ GitHubAppData GitHubAppData

+ func (am *AuthMethods) HasGitHubAppData() bool

+ type GitHubAppData = map[string][]byte

+ func GitHubAppDataFromSecret(ctx context.Context, secret *corev1.Secret) (GitHubAppData, error)

+ func GitHubAppDataFromSecretRef(ctx context.Context, c client.Client, secretRef types.NamespacedName) (GitHubAppData, error)

Jul 29, 2025

Changes in this version

type AuthMethodsOption

+ func WithTLSSystemCertPool() AuthMethodsOption

+ type TLSConfigOption func(*tlsConfig)

+ func WithSystemCertPool() TLSConfigOption

Jul 28, 2025

Changes in this version

type AuthMethodsOption

+ func WithTargetURL(targetURL string) AuthMethodsOption

Jul 21, 2025

Changes in this version

+ type AuthMethodsOption func(*authMethodsConfig)

+ func WithTLS(targetURL string, insecure bool) AuthMethodsOption

Jul 18, 2025

Changes in this version

type AuthMethods

+ Token TokenAuth

+ func (am *AuthMethods) HasTokenAuth() bool

+ type TokenAuth string

+ func TokenAuthFromSecret(ctx context.Context, secret *corev1.Secret) (TokenAuth, error)

Jul 17, 2025

Changes in this version

+ type AuthMethods struct

+ Basic *BasicAuth

+ Bearer *BearerAuth

+ SSH *SSHAuth

+ TLS *tls.Config

+ func AuthMethodsFromSecret(ctx context.Context, secret *corev1.Secret) (*AuthMethods, error)

+ func (am *AuthMethods) HasBasicAuth() bool

+ func (am *AuthMethods) HasBearerAuth() bool

+ func (am *AuthMethods) HasSSH() bool

+ func (am *AuthMethods) HasTLS() bool

+ type BasicAuth struct

+ Password string

+ Username string

+ type BasicAuthMalformedError struct

+ Missing string

+ Present string

+ Secret *corev1.Secret

+ func (e *BasicAuthMalformedError) Error() string

+ type BearerAuth struct

+ Token string

+ func BearerAuthFromSecret(ctx context.Context, secret *corev1.Secret) (*BearerAuth, error)

+ type GitHubAppAuth struct

+ AppID string

+ BaseURL string

+ InstallationID string

+ PrivateKey []byte

+ type SSHAuth struct

+ KnownHosts string

+ Password string

+ PrivateKey []byte

+ PublicKey []byte

+ func SSHAuthFromSecret(ctx context.Context, secret *corev1.Secret) (*SSHAuth, error)

+ type SecretTLSValidationError struct

+ Secret *corev1.Secret

+ func (e *SecretTLSValidationError) Error() string

+ func (e *SecretTLSValidationError) Unwrap() error

Jul 14, 2025

Changes in this version

+ func MakeSOPSSecret(name, namespace string, ageKeys, gpgKeys []string) (*corev1.Secret, error)

Jul 13, 2025

Changes in this version

+ const KeyAddress

+ const KeyBearerToken

+ const KeyCACert

+ const KeyGitHubAppBaseURL

+ const KeyGitHubAppID

+ const KeyGitHubAppInstallationID

+ const KeyGitHubAppPrivateKey

+ const KeyPassword

+ const KeySSHKnownHosts

+ const KeySSHPrivateKey

+ const KeySSHPublicKey

+ const KeyTLSCert

+ const KeyTLSPrivateKey

+ const KeyToken

+ const KeyUsername

+ const LegacyKeyCACert

+ const LegacyKeyTLSCert

+ const LegacyKeyTLSPrivateKey

+ func Apply(ctx context.Context, c client.Client, secret *corev1.Secret, ...) error

+ func MakeGitHubAppSecret(name, namespace, appID, installationID, privateKey, baseURL string) (*corev1.Secret, error)

+ func MakeSSHSecret(name, namespace, privateKey, publicKey, knownHosts, password string) (*corev1.Secret, error)

+ type ApplyOption func(*ApplyOptions)

+ func WithAnnotations(annotations map[string]string) ApplyOption

+ func WithForce() ApplyOption

+ func WithImmutable(immutable bool) ApplyOption

+ func WithLabels(labels map[string]string) ApplyOption

+ func WithOwner(owner string) ApplyOption

+ type ApplyOptions struct

Jul 12, 2025

Changes in this version

+ func ProxyURLFromSecretRef(ctx context.Context, c client.Client, secretRef types.NamespacedName) (*url.URL, error)

+ func TLSConfigFromSecretRef(ctx context.Context, c client.Client, secretRef types.NamespacedName) (*tls.Config, error)

Jul 11, 2025

Changes in this version

+ const AddressKey

+ const LegacyCACertKey

+ const LegacyTLSCertFileKey

+ const LegacyTLSPrivateKeyKey

+ const TLSPrivateKeyKey

+ func PullSecretsFromServiceAccountRef(ctx context.Context, c client.Client, saRef types.NamespacedName) ([]corev1.Secret, error)

Jun 25, 2025

Changes in this version

+ const BearerTokenKey

+ const CACertFileKey

+ const CACertKey

+ const PasswordKey

+ const ProxyAddressKey

+ const TLSCertFileKey

+ const TLSCertKey

+ const TLSKeyFileKey

+ const TLSKeyKey

+ const TokenKey

+ const UsernameKey

+ var ErrKeyNotFound = errors.New("key not found in secret")

+ func BasicAuthFromSecret(ctx context.Context, c client.Client, name, namespace string) (string, string, error)

+ func MakeBasicAuthSecret(name, namespace, username, password string) (*corev1.Secret, error)

+ func MakeBearerTokenSecret(name, namespace, token string) (*corev1.Secret, error)

+ func MakeProxySecret(name, namespace, address, username, password string) (*corev1.Secret, error)

+ func MakeRegistrySecret(name, namespace, server, username, password string) (*corev1.Secret, error)

+ func MakeTLSSecret(name, namespace string, opts ...TLSSecretOption) (*corev1.Secret, error)

+ func MakeTokenSecret(name, namespace, token string) (*corev1.Secret, error)

+ func ProxyURLFromSecret(ctx context.Context, c client.Client, name, namespace string) (*url.URL, error)

+ func PullSecretsFromServiceAccount(ctx context.Context, c client.Client, name, namespace string) ([]corev1.Secret, error)

+ func TLSConfigFromSecret(ctx context.Context, c client.Client, name, namespace string, opts ...Option) (*tls.Config, error)

+ type KeyNotFoundError struct

+ Key string

+ Secret *corev1.Secret

+ func (e *KeyNotFoundError) Error() string

+ func (e *KeyNotFoundError) Is(target error) bool

+ type Option func(*options)

+ func WithDeprecatedFieldSupport() Option

+ type TLSSecretOption func(*tlsCertificateData)

+ func WithCAData(caData []byte) TLSSecretOption

+ func WithCertKeyPair(certData, keyData []byte) TLSSecretOption

+ type TLSValidationError struct

+ Type TLSValidationErrorType

+ func (e *TLSValidationError) Error() string

+ type TLSValidationErrorType int

+ const ErrMissingCertificate

+ const ErrMissingPrivateKey

+ const ErrNoCertificatePairOrCA