Documentation
¶
Overview ¶
Package secret is the function-facing secret service (ADR-0249): it answers the local API's /secret routes with the keys and values of the Secrets a Function binds, on every read and with no cache, each Secret asked secret::read as the calling Function (ADR-0321), and the readiness check's question for each of them; and it writes one key of a bound Secret for its writers, asked secret::write as the calling Function (ADR-0327).
Index ¶
- type Deps
- type Facade
- func (f *Facade) CheckRead(ctx context.Context, ns v1.NamespaceName, fn v1.ObjectName, name string) error
- func (f *Facade) Delete(ctx context.Context, ns v1.NamespaceName, fn v1.ObjectName, ...) error
- func (f *Facade) Get(ctx context.Context, ns v1.NamespaceName, fn v1.ObjectName, key string) (string, bool, error)
- func (f *Facade) List(ctx context.Context, ns v1.NamespaceName, fn v1.ObjectName) ([]string, error)
- func (f *Facade) Put(ctx context.Context, ns v1.NamespaceName, fn v1.ObjectName, ...) error
- type Resolver
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Facade ¶
type Facade struct {
// contains filtered or unexported fields
}
Facade implements local.Secrets.
func (*Facade) CheckRead ¶ added in v0.42.0
func (f *Facade) CheckRead(ctx context.Context, ns v1.NamespaceName, fn v1.ObjectName, name string) error
CheckRead answers the readiness check for Secret name, which fn binds (ADR-0321 Decision 4): may fn read it.
func (*Facade) Delete ¶ added in v0.44.0
func (f *Facade) Delete(ctx context.Context, ns v1.NamespaceName, fn v1.ObjectName, binding, key string) error
Delete removes key from Secret binding, which fn binds and may write; a key the Secret lacks is no error.
func (*Facade) Get ¶
func (f *Facade) Get(ctx context.Context, ns v1.NamespaceName, fn v1.ObjectName, key string) (string, bool, error)
Get returns key's value among the Secrets fn binds, or found false when none holds it.
type Resolver ¶
type Resolver interface {
ResolveEnv(ctx context.Context, id auth.Identity, ns v1.NamespaceName, names []string) (map[string]string, error)
CheckRead(ctx context.Context, id auth.Identity, ns v1.NamespaceName, name string) error
CheckWrite(ctx context.Context, id auth.Identity, ns v1.NamespaceName, name string) error
}
Resolver resolves Secret names into one key-value map for id (ADR-0057); *secrets.Resolver satisfies it.
Source Files