Search in sources :

Example 1 with GoogleCloudCredentials

use of io.stackgres.common.crd.storages.GoogleCloudCredentials in project stackgres by ongres.

the class BackupConfigSourceValidatorTest method setGcsCredentials.

private void setGcsCredentials(final BackupConfigReview review, String serviceAccountJsonKeyName, String serviceAccountJsonKeyKey) {
    BackupStorage storage = review.getRequest().getObject().getSpec().getStorage();
    storage.setType("gcs");
    storage.setGcs(new GoogleCloudStorage());
    storage.getGcs().setCredentials(new GoogleCloudCredentials());
    storage.getGcs().getCredentials().setSecretKeySelectors(new GoogleCloudSecretKeySelector());
    GoogleCloudSecretKeySelector awsSecretKeySelector = storage.getGcs().getCredentials().getSecretKeySelectors();
    awsSecretKeySelector.setServiceAccountJsonKey(new SecretKeySelector(serviceAccountJsonKeyKey, serviceAccountJsonKeyName));
}
Also used : GoogleCloudSecretKeySelector(io.stackgres.common.crd.storages.GoogleCloudSecretKeySelector) GoogleCloudStorage(io.stackgres.common.crd.storages.GoogleCloudStorage) BackupStorage(io.stackgres.common.crd.storages.BackupStorage) GoogleCloudCredentials(io.stackgres.common.crd.storages.GoogleCloudCredentials) SecretKeySelector(io.stackgres.common.crd.SecretKeySelector) AzureBlobSecretKeySelector(io.stackgres.common.crd.storages.AzureBlobSecretKeySelector) AwsSecretKeySelector(io.stackgres.common.crd.storages.AwsSecretKeySelector) GoogleCloudSecretKeySelector(io.stackgres.common.crd.storages.GoogleCloudSecretKeySelector)

Example 2 with GoogleCloudCredentials

use of io.stackgres.common.crd.storages.GoogleCloudCredentials in project stackgres by ongres.

the class BackupConfigStorageValidator method validate.

@Override
public void validate(BackupConfigReview review) throws ValidationFailed {
    Operation operation = review.getRequest().getOperation();
    if (operation == Operation.CREATE || operation == Operation.UPDATE) {
        String namespace = review.getRequest().getObject().getMetadata().getNamespace();
        String storageType = review.getRequest().getObject().getSpec().getStorage().getType();
        if (storageType.equals("s3") && review.getRequest().getObject().getSpec().getStorage().getS3() != null) {
            AwsCredentials credentials = review.getRequest().getObject().getSpec().getStorage().getS3().getAwsCredentials();
            checkSecret(namespace, storageType, "accessKeyId", credentials.getSecretKeySelectors().getAccessKeyId());
            checkSecret(namespace, storageType, "secretAccessKey", credentials.getSecretKeySelectors().getSecretAccessKey());
        }
        if (storageType.equals("s3compatible") && review.getRequest().getObject().getSpec().getStorage().getS3Compatible() != null) {
            AwsCredentials credentials = review.getRequest().getObject().getSpec().getStorage().getS3Compatible().getAwsCredentials();
            checkSecret(namespace, storageType, "accessKeyId", credentials.getSecretKeySelectors().getAccessKeyId());
            checkSecret(namespace, storageType, "secretAccessKey", credentials.getSecretKeySelectors().getSecretAccessKey());
        }
        if (storageType.equals("azureblob") && review.getRequest().getObject().getSpec().getStorage().getAzureBlob() != null) {
            AzureBlobStorageCredentials credentials = review.getRequest().getObject().getSpec().getStorage().getAzureBlob().getAzureCredentials();
            checkSecret(namespace, storageType, "account", credentials.getSecretKeySelectors().getAccount());
            checkSecret(namespace, storageType, "accessKey", credentials.getSecretKeySelectors().getAccessKey());
        }
        if (storageType.equals("gcs") && review.getRequest().getObject().getSpec().getStorage().getGcs() != null && review.getRequest().getObject().getSpec().getStorage().getGcs().getCredentials().getSecretKeySelectors() != null) {
            GoogleCloudCredentials credentials = review.getRequest().getObject().getSpec().getStorage().getGcs().getCredentials();
            checkSecret(namespace, storageType, "serviceAccountJsonKey", credentials.getSecretKeySelectors().getServiceAccountJsonKey());
        }
    }
}
Also used : GoogleCloudCredentials(io.stackgres.common.crd.storages.GoogleCloudCredentials) AwsCredentials(io.stackgres.common.crd.storages.AwsCredentials) AzureBlobStorageCredentials(io.stackgres.common.crd.storages.AzureBlobStorageCredentials) Operation(io.stackgres.operatorframework.admissionwebhook.Operation)

Aggregations

GoogleCloudCredentials (io.stackgres.common.crd.storages.GoogleCloudCredentials)2 SecretKeySelector (io.stackgres.common.crd.SecretKeySelector)1 AwsCredentials (io.stackgres.common.crd.storages.AwsCredentials)1 AwsSecretKeySelector (io.stackgres.common.crd.storages.AwsSecretKeySelector)1 AzureBlobSecretKeySelector (io.stackgres.common.crd.storages.AzureBlobSecretKeySelector)1 AzureBlobStorageCredentials (io.stackgres.common.crd.storages.AzureBlobStorageCredentials)1 BackupStorage (io.stackgres.common.crd.storages.BackupStorage)1 GoogleCloudSecretKeySelector (io.stackgres.common.crd.storages.GoogleCloudSecretKeySelector)1 GoogleCloudStorage (io.stackgres.common.crd.storages.GoogleCloudStorage)1 Operation (io.stackgres.operatorframework.admissionwebhook.Operation)1