Documentation
¶
Overview ¶
Package catalogueapp is what creating a catalogue App leaves behind: the App's record, and its key.
One Secret holds every catalogue App, each under its catalogue id. An installed App is three keys — `<id>.github_app_id`, `<id>.github_app_installation_id`, `<id>.github_app_private_key` — beside its record, `<id>.record.json`, so a deployment can copy one App anywhere (into a secret manager with an External Secrets PushSecret, for one) by naming keys, without reshaping a document, and a restore of the Secret alone brings every App back.
An App created and not yet installed keeps its key under another name, `<id>.pending_private_key`, so the three keys never exist without an installation: a copy made in between never hands anybody an App that cannot mint a token.
The service reads the key to ask GitHub what the App and its installation hold now, and to uninstall it on Disconnect. A token exchange reads it by id, with the installation beside it.
Index ¶
- Constants
- Variables
- func Encode(r Record, privateKey string) (map[string][]byte, error)
- func Key(id, property string) string
- func Keys(id string) []string
- func OfRecordKey(key string) (string, bool)
- func PrivateKeyOf(data map[string][]byte, id string) (string, bool)
- func RecordKey(id string) string
- func SecretName(release string) string
- type Record
Constants ¶
const ( AppIDProperty = "github_app_id" InstallationIDProperty = "github_app_installation_id" PrivateKeyProperty = "github_app_private_key" RecordProperty = "record.json" // PendingKeyProperty holds the key of an App not installed yet. PendingKeyProperty = "pending_private_key" )
The property names of one App.
const Version = 1
Version is the record version this build writes and reads.
Variables ¶
var ErrVersion = errors.New("catalogueapp: unsupported record version")
ErrVersion is a record of a version this build does not read.
Functions ¶
func Encode ¶
Encode writes one App: its record, and its three properties once it is installed, or its pending key until then. Keys lists every key an App can have, so a writer removes those first.
func OfRecordKey ¶
OfRecordKey reads the id back out of a record key.
func PrivateKeyOf ¶
PrivateKeyOf reads one App's key from the Secret's data, installed or pending.
func SecretName ¶
SecretName is the object holding every catalogue App.
Types ¶
type Record ¶
type Record struct {
Version int `json:"version"`
ID string `json:"id"`
Org string `json:"org"`
AppID int64 `json:"app_id"`
AppSlug string `json:"app_slug"`
// InstallationID is zero between Create and Install.
InstallationID int64 `json:"installation_id,omitempty"`
HTMLURL string `json:"html_url,omitempty"`
ConnectedAt time.Time `json:"connected_at"`
ConnectedBy string `json:"connected_by"`
}
Record is one catalogue App, as the console shows it. Never the key.
Source Files