use of com.marcnuri.yakc.model.io.k8s.api.core.v1.Secret in project yakc by manusa.
the class AuthIT method retrieveSecretForServiceAccount.
private Secret retrieveSecretForServiceAccount() throws IOException {
final ServiceAccount sa = KC.create(CoreV1Api.class).listNamespacedServiceAccount(NAMESPACE).stream().findFirst().orElseThrow(() -> new AssertionError("No Service Account found"));
final String secretName = sa.getSecrets() == null ? null : sa.getSecrets().stream().findFirst().map(ObjectReference::getName).orElse(null);
if (secretName != null) {
return KC.create(CoreV1Api.class).listNamespacedSecret(NAMESPACE).stream().filter(s -> s.getType().equals("kubernetes.io/service-account-token")).filter(s -> s.getMetadata().getName().equals(secretName)).findAny().orElseThrow(() -> new AssertionError(String.format("Secret %s doesn't exist", secretName)));
} else {
// https://kubernetes.io/docs/concepts/configuration/secret/#service-account-token-secrets
final Secret serviceAccountTokenSecret = Secret.builder().metadata(ObjectMeta.builder().name(sa.getMetadata().getName() + "-token").putInAnnotations("kubernetes.io/service-account.name", sa.getMetadata().getName()).build()).type("kubernetes.io/service-account-token").putInStringData("token", "my-secret-token").build();
return KC.create(CoreV1Api.class).createNamespacedSecret(NAMESPACE, serviceAccountTokenSecret).get();
}
}
use of com.marcnuri.yakc.model.io.k8s.api.core.v1.Secret in project yakc by manusa.
the class SecretIT method readNamespacedSecret.
@Test
@DisplayName("readNamespacedSecret, should read newly created Secret")
void readNamespacedSecret() throws IOException {
// When
final Secret secretFromServer = KC.create(CoreV1Api.class).readNamespacedSecret(secretName, NAMESPACE).get();
// Then
assertThat(secretFromServer).isNotNull().hasFieldOrPropertyWithValue("metadata.name", secretName).extracting(Secret::getData).asInstanceOf(InstanceOfAssertFactories.MAP).hasSize(3).containsEntry("FOO", "QkFS");
}
Aggregations