Search in sources :

Example 1 with GoogleSecretComparatorByVersion

use of org.springframework.cloud.config.server.environment.secretmanager.GoogleSecretComparatorByVersion in project spring-cloud-config by spring-cloud.

the class GoogleSecretManagerEnvironmentRepository method getSecrets.

/**
 * @param application the application name
 * @param profile the profile name
 * @return the properties to add into the environment
 */
private Map<?, ?> getSecrets(String application, String profile) {
    Map<String, String> result = new HashMap<>();
    String prefix = configProvider.getValue(HttpHeaderGoogleConfigProvider.PREFIX_HEADER, false);
    for (Secret secret : accessStrategy.getSecrets()) {
        if (secret.getLabelsOrDefault(applicationLabel, "application").equalsIgnoreCase(application) && secret.getLabelsOrDefault(profileLabel, "profile").equalsIgnoreCase(profile)) {
            result.put(accessStrategy.getSecretName(secret), accessStrategy.getSecretValue(secret, new GoogleSecretComparatorByVersion()));
        } else if (StringUtils.isNotBlank(prefix) && accessStrategy.getSecretName(secret).startsWith(prefix)) {
            result.put(StringUtils.removeStart(accessStrategy.getSecretName(secret), prefix), accessStrategy.getSecretValue(secret, new GoogleSecretComparatorByVersion()));
        }
    }
    return result;
}
Also used : Secret(com.google.cloud.secretmanager.v1.Secret) GoogleSecretComparatorByVersion(org.springframework.cloud.config.server.environment.secretmanager.GoogleSecretComparatorByVersion) HashMap(java.util.HashMap)

Example 2 with GoogleSecretComparatorByVersion

use of org.springframework.cloud.config.server.environment.secretmanager.GoogleSecretComparatorByVersion in project spring-cloud-config by spring-cloud.

the class GoogleSecretManagerEnvironmentRepositoryTests method testGetSecretValues.

@Test
@SuppressWarnings("unchecked")
public void testGetSecretValues() throws IOException {
    RestTemplate rest = mock(RestTemplate.class);
    GoogleConfigProvider provider = mock(HttpHeaderGoogleConfigProvider.class);
    when(provider.getValue(HttpHeaderGoogleConfigProvider.PROJECT_ID_HEADER, true)).thenReturn("test-project");
    SecretManagerServiceClient mock = mock(SecretManagerServiceClient.class);
    SecretManagerServiceClient.ListSecretVersionsPagedResponse response = mock(SecretManagerServiceClient.ListSecretVersionsPagedResponse.class);
    SecretVersion secret1 = SecretVersion.newBuilder().setName("projects/test-project/secrets/test/versions/1").setState(SecretVersion.State.ENABLED).build();
    SecretVersion secret2 = SecretVersion.newBuilder().setName("projects/test-project/secrets/test/versions/2").setState(SecretVersion.State.DISABLED).build();
    List<SecretVersion> secrets = new ArrayList<SecretVersion>();
    secrets.add(secret1);
    secrets.add(secret2);
    when(response.iterateAll()).thenReturn(secrets);
    Mockito.doReturn(response).when(mock).listSecretVersions(any(ListSecretVersionsRequest.class));
    GoogleSecretManagerV1AccessStrategy strategy = new GoogleSecretManagerV1AccessStrategy(rest, provider, mock);
    AccessSecretVersionResponse accessSecretVersionResponse = mock(AccessSecretVersionResponse.class);
    SecretPayload payload = mock(SecretPayload.class);
    ByteString data = mock(ByteString.class);
    when(accessSecretVersionResponse.getPayload()).thenReturn(payload);
    when(payload.getData()).thenReturn(data);
    when(data.toStringUtf8()).thenReturn("test-value");
    ArgumentMatcher<AccessSecretVersionRequest> matcher = new ArgumentMatcher<AccessSecretVersionRequest>() {

        @Override
        public boolean matches(AccessSecretVersionRequest accessSecretVersionRequest) {
            if (accessSecretVersionRequest.getName().equals("projects/test-project/secrets/test/versions/1")) {
                return true;
            }
            return false;
        }
    };
    Mockito.doReturn(accessSecretVersionResponse).when(mock).accessSecretVersion(ArgumentMatchers.argThat(matcher));
    assertThat(strategy.getSecretValue(Secret.newBuilder().setName("projects/test-project/secrets/test").build(), new GoogleSecretComparatorByVersion())).isEqualTo("test-value");
}
Also used : HttpHeaderGoogleConfigProvider(org.springframework.cloud.config.server.environment.secretmanager.HttpHeaderGoogleConfigProvider) GoogleConfigProvider(org.springframework.cloud.config.server.environment.secretmanager.GoogleConfigProvider) AccessSecretVersionRequest(com.google.cloud.secretmanager.v1.AccessSecretVersionRequest) SecretVersion(com.google.cloud.secretmanager.v1.SecretVersion) ByteString(com.google.protobuf.ByteString) ArrayList(java.util.ArrayList) SecretManagerServiceClient(com.google.cloud.secretmanager.v1.SecretManagerServiceClient) GoogleSecretManagerV1AccessStrategy(org.springframework.cloud.config.server.environment.secretmanager.GoogleSecretManagerV1AccessStrategy) AccessSecretVersionResponse(com.google.cloud.secretmanager.v1.AccessSecretVersionResponse) SecretPayload(com.google.cloud.secretmanager.v1.SecretPayload) GoogleSecretComparatorByVersion(org.springframework.cloud.config.server.environment.secretmanager.GoogleSecretComparatorByVersion) ArgumentMatcher(org.mockito.ArgumentMatcher) RestTemplate(org.springframework.web.client.RestTemplate) ListSecretVersionsRequest(com.google.cloud.secretmanager.v1.ListSecretVersionsRequest) Test(org.junit.Test)

Aggregations

GoogleSecretComparatorByVersion (org.springframework.cloud.config.server.environment.secretmanager.GoogleSecretComparatorByVersion)2 AccessSecretVersionRequest (com.google.cloud.secretmanager.v1.AccessSecretVersionRequest)1 AccessSecretVersionResponse (com.google.cloud.secretmanager.v1.AccessSecretVersionResponse)1 ListSecretVersionsRequest (com.google.cloud.secretmanager.v1.ListSecretVersionsRequest)1 Secret (com.google.cloud.secretmanager.v1.Secret)1 SecretManagerServiceClient (com.google.cloud.secretmanager.v1.SecretManagerServiceClient)1 SecretPayload (com.google.cloud.secretmanager.v1.SecretPayload)1 SecretVersion (com.google.cloud.secretmanager.v1.SecretVersion)1 ByteString (com.google.protobuf.ByteString)1 ArrayList (java.util.ArrayList)1 HashMap (java.util.HashMap)1 Test (org.junit.Test)1 ArgumentMatcher (org.mockito.ArgumentMatcher)1 GoogleConfigProvider (org.springframework.cloud.config.server.environment.secretmanager.GoogleConfigProvider)1 GoogleSecretManagerV1AccessStrategy (org.springframework.cloud.config.server.environment.secretmanager.GoogleSecretManagerV1AccessStrategy)1 HttpHeaderGoogleConfigProvider (org.springframework.cloud.config.server.environment.secretmanager.HttpHeaderGoogleConfigProvider)1 RestTemplate (org.springframework.web.client.RestTemplate)1