mirror of
https://github.com/external-secrets/external-secrets.git
synced 2024-12-15 17:51:01 +00:00
199c9103db
* feat: Add component labels to custom resource definitions Prerequisite for restricting the CRDs cached by Informer Signed-off-by: Tsubasa Nagasawa <toversus2357@gmail.com> * feat(certcontroller): Allow restricting CRDs and Webhook configs in Informer cache The certcontroller watches CRDs and Webhook configurations, and manages CA certificates for conversion webhooks of CRDs and Webhook configurations. Some clusters have a large number of CRDs and Webhook configurations installed. Additionally, some CRDs have large object sizes. Currently, the certcontroller holds all CRDs and Webhook configurations in the Informer cache. Since this includes CRDs not managed by the certcontroller for CA certificates, memory usage tends to be high. This PR adds a label to the CRDs and configures the Informer cache to hold only the CRDs and Webhook configurations restricted by the label selector. It assumes that the CRDs have a label. Depending on how the External Secrets Operator is managed, it may be possible to update the External Secrets Operator without updating the CRDs, so as a precaution, it can be turned on/off via a startup option. It is disabled by default. Signed-off-by: Tsubasa Nagasawa <toversus2357@gmail.com> --------- Signed-off-by: Tsubasa Nagasawa <toversus2357@gmail.com>
104 lines
4.2 KiB
Go
104 lines
4.2 KiB
Go
/*
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package constants
|
|
|
|
const (
|
|
ProviderAWSSM = "AWS/SecretsManager"
|
|
CallAWSSMGetSecretValue = "GetSecretValue"
|
|
CallAWSPSGetParametersByPath = "GetParametersByPath"
|
|
CallAWSSMDescribeSecret = "DescribeSecret"
|
|
CallAWSSMDeleteSecret = "DeleteSecret"
|
|
CallAWSSMCreateSecret = "CreateSecret"
|
|
CallAWSSMPutSecretValue = "PutSecretValue"
|
|
CallAWSSMListSecrets = "ListSecrets"
|
|
|
|
ProviderAWSPS = "AWS/ParameterStore"
|
|
CallAWSPSGetParameter = "GetParameter"
|
|
CallAWSPSPutParameter = "PutParameter"
|
|
CallAWSPSDeleteParameter = "DeleteParameter"
|
|
CallAWSPSDescribeParameter = "DescribeParameter"
|
|
CallAWSPSListTagsForResource = "ListTagsForResource"
|
|
|
|
ProviderAzureKV = "Azure/KeyVault"
|
|
CallAzureKVGetKey = "GetKey"
|
|
CallAzureKVDeleteKey = "DeleteKey"
|
|
CallAzureKVImportKey = "ImportKey"
|
|
CallAzureKVGetSecret = "GetSecret"
|
|
CallAzureKVGetSecrets = "GetSecrets"
|
|
CallAzureKVDeleteSecret = "DeleteSecret"
|
|
CallAzureKVGetCertificate = "GetCertificate"
|
|
CallAzureKVDeleteCertificate = "DeleteCertificate"
|
|
CallAzureKVImportCertificate = "ImportCertificate"
|
|
|
|
ProviderGCPSM = "GCP/SecretManager"
|
|
CallGCPSMGetSecret = "GetSecret"
|
|
CallGCPSMDeleteSecret = "DeleteSecret"
|
|
CallGCPSMCreateSecret = "CreateSecret"
|
|
CallGCPSMUpdateSecret = "UpdateSecret"
|
|
CallGCPSMAccessSecretVersion = "AccessSecretVersion"
|
|
CallGCPSMAddSecretVersion = "AddSecretVersion"
|
|
CallGCPSMListSecrets = "ListSecrets"
|
|
CallGCPSMGenerateSAToken = "GenerateServiceAccountToken"
|
|
CallGCPSMGenerateIDBindToken = "GenerateIDBindToken"
|
|
CallGCPSMGenerateAccessToken = "GenerateAccessToken"
|
|
|
|
ProviderHCVault = "HashiCorp/Vault"
|
|
CallHCVaultLogin = "Login"
|
|
CallHCVaultRevokeSelf = "RevokeSelf"
|
|
CallHCVaultLookupSelf = "LookupSelf"
|
|
CallHCVaultReadSecretData = "ReadSecretData"
|
|
CallHCVaultWriteSecretData = "WriteSecretData"
|
|
CallHCVaultDeleteSecret = "DeleteSecret"
|
|
CallHCVaultListSecrets = "ListSecrets"
|
|
|
|
ProviderKubernetes = "Kubernetes"
|
|
CallKubernetesGetSecret = "GetSecret"
|
|
CallKubernetesListSecrets = "ListSecrets"
|
|
CallKubernetesCreateSecret = "CreateSecret"
|
|
CallKubernetesDeleteSecret = "DeleteSecret"
|
|
CallKubernetesUpdateSecret = "UpdateSecret"
|
|
CallKubernetesCreateSelfSubjectRulesReview = "CreateSelfSubjectRulesReview"
|
|
|
|
ProviderIBMSM = "IBM/SecretsManager"
|
|
CallIBMSMGetSecret = "GetSecret"
|
|
CallIBMSMListSecrets = "ListSecrets"
|
|
CallIBMSMGetSecretByNameType = "GetSecretByNameType"
|
|
|
|
ProviderWebhook = "Webhook"
|
|
CallWebhookHTTPReq = "HTTPRequest"
|
|
|
|
ProviderGitLab = "GitLab"
|
|
CallGitLabListProjectsGroups = "ListProjectsGroups"
|
|
CallGitLabProjectVariableGet = "ProjectVariableGet"
|
|
CallGitLabProjectListVariables = "ProjectVariablesList"
|
|
CallGitLabGroupGetVariable = "GroupVariableGet"
|
|
CallGitLabGroupListVariables = "GroupVariablesList"
|
|
|
|
ProviderAKEYLESSSM = "AKEYLESSLESS/SecretsManager"
|
|
CallAKEYLESSSMGetSecretValue = "GetSecretValue"
|
|
CallAKEYLESSSMDescribeItem = "DescribeItem"
|
|
CallAKEYLESSSMListItems = "ListItems"
|
|
CallAKEYLESSSMAuth = "Auth"
|
|
CallAKEYLESSSMGetRotatedSecretValue = "GetRotatedSecretValue"
|
|
CallAKEYLESSSMGetCertificateValue = "GetCertificateValue"
|
|
CallAKEYLESSSMGetDynamicSecretValue = "GetDynamicSecretsValue"
|
|
|
|
StatusError = "error"
|
|
StatusSuccess = "success"
|
|
|
|
WellKnownLabelKey = "external-secrets.io/component"
|
|
WellKnownLabelValueController = "controller"
|
|
WellKnownLabelValueWebhook = "webhook"
|
|
)
|