public Secret hasSecret(HasMetadata owner) { return kubeClient().secrets().withName(secretName(owner)).get(); }
private Map.Entry<String, String> allocateUser(HasMetadata deployment) { Secret usernamePoolSecret = kubeClient().secrets().withName(usernamePoolSecretName).get(); Secret consumedUsersSecret = kubeClient().secrets().withName(consumedUsersSecretName).get(); Map<String, String> usernamePool = decodeMap(usernamePoolSecret.getData().get("username-pool")); Collection<String> consumedUsernames = decodeList(consumedUsersSecret.getData().get("consumed-usernames")); // How much of the pool is used userPoolAvailable = ((usernamePool.size() - consumedUsernames.size()) * 100) / usernamePool.size(); // Remove all consumed usernames consumedUsernames.forEach(k -> usernamePool.remove(k)); if (usernamePool.isEmpty()) { throw new IllegalStateException("Username pool is exhausted. Please check Secret " + usernamePoolSecretName + " and " + consumedUsersSecretName); } // Take first element Map.Entry<String, String> pair = usernamePool.entrySet().iterator().next(); consumedUsernames.add(pair.getKey()); Secret updatedSecret = new SecretBuilder() .withNewMetadata() .withAnnotations(consumedUsersSecret.getMetadata().getAnnotations()) .withLabels(consumedUsersSecret.getMetadata().getLabels()) .withName(consumedUsersSecret.getMetadata().getName()) .endMetadata() .withData(null) .withStringData(Collections.singletonMap("consumed-usernames", consumedUsernames.stream().collect(Collectors.joining("\n")))).build(); // TODO handle failure case kubeClient().secrets().createOrReplace(updatedSecret); return pair; }
public void onRemoved(HasMetadata deployment) { String secretName = deployment.getMetadata().getAnnotations().get(TOPIC_SECRET_NAME); if (secretName == null) { secretName = deployment.getMetadata().getName() + "-kafka-credentials"; } log.info("Deleting secret {} for Deployment {}", secretName, deployment.getMetadata().getName()); kubeClient().secrets().withName(secretName).delete(); }
secretName = deployment.getMetadata().getName() + "-kafka-credentials"; Secret exists = kubeClient().secrets().withName(secretName).get(); if (exists != null) { log.debug("Secret with kafka credentials already exists for {}", deployment.getMetadata().getName()); kubeClient().secrets().create(topicSecret); if (useInitializers) { List<Initializer> pending = new ArrayList<>(deployment.getMetadata().getInitializers().getPending());
public Secret createSecret(HasMetadata owner, Map<String, String> values) { Secret secret = new SecretBuilder().withNewMetadata() .withName(secretName(owner)) .endMetadata() .withStringData(values) .build(); setOwnership(secret, owner); return kubeClient().secrets().create(secret); }