kubernetes-operator/internal/constants/constants.go

package constants

import "errors"

const USER_AGENT_NAME = "k8-operator"

const KMS_SECRET_KIND = "KMSSecret"

const SERVICE_ACCOUNT_ACCESS_KEY = "serviceAccountAccessKey"
const SERVICE_ACCOUNT_PUBLIC_KEY = "serviceAccountPublicKey"
const SERVICE_ACCOUNT_PRIVATE_KEY = "serviceAccountPrivateKey"

const KMS_MACHINE_IDENTITY_CLIENT_ID = "clientId"
const KMS_MACHINE_IDENTITY_CLIENT_SECRET = "clientSecret"

const KMS_TOKEN_SECRET_KEY_NAME = "kmsToken"
const SECRET_VERSION_ANNOTATION = "kms.hanzo.ai/version"                  // used to set the version of secrets via Etag
const MANAGED_LABELS_ANNOTATION = "kms.hanzo.ai/managed-labels"           // comma-separated list of label keys we manage
const MANAGED_ANNOTATIONS_ANNOTATION = "kms.hanzo.ai/managed-annotations" // comma-separated list of annotation keys we manage
const OPERATOR_SETTINGS_CONFIGMAP_NAME = "kms-config"
const OPERATOR_SETTINGS_CONFIGMAP_NAMESPACE = "kms-operator-system"
const KMS_DOMAIN = "https://kms.hanzo.ai/api"

const KMS_PUSH_SECRET_FINALIZER_NAME = "pushsecret.kms.hanzo.ai/finalizer"
const KMS_DYNAMIC_SECRET_FINALIZER_NAME = "dynamicsecret.kms.hanzo.ai/finalizer"

type PushSecretReplacePolicy string
type PushSecretDeletionPolicy string

const (
	PUSH_SECRET_REPLACE_POLICY_ENABLED PushSecretReplacePolicy  = "Replace"
	PUSH_SECRET_DELETE_POLICY_ENABLED  PushSecretDeletionPolicy = "Delete"
)

type ManagedKubeResourceType string

const (
	MANAGED_KUBE_RESOURCE_TYPE_SECRET     ManagedKubeResourceType = "Secret"
	MANAGED_KUBE_RESOURCE_TYPE_CONFIG_MAP ManagedKubeResourceType = "ConfigMap"
)

type DynamicSecretLeaseRevocationPolicy string

const (
	DYNAMIC_SECRET_LEASE_REVOCATION_POLICY_ENABLED DynamicSecretLeaseRevocationPolicy = "Revoke"
)

var ErrInvalidLease = errors.New("invalid dynamic secret lease")