public/grafana
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

SecretsManager: add data key store (#107396)

Browse Source 
* SecretsManager: Add data key store

Co-authored-by: Michael Mandrus <michael.mandrus@grafana.com>
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com>
Co-authored-by: Dana Axinte <53751979+dana-axinte@users.noreply.github.com>

* SecretsManager: Add wiring of data key store

Co-authored-by: Michael Mandrus <michael.mandrus@grafana.com>
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com>
Co-authored-by: Dana Axinte <53751979+dana-axinte@users.noreply.github.com>

---------

Co-authored-by: Michael Mandrus <michael.mandrus@grafana.com>
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com>
This commit is contained in:
Dana Axinte
2025-06-30 17:17:07 +01:00
committed by GitHub
co-authored by Michael Mandrus Matheus Macabu
parent 2d634639a2
commit 0fccc01ebe
39 changed files with 1097 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/storage/secret/encryption/testdata/mysql--data_key_create-create-not-active.sql
Vendored Executable
+19
View File
@@ -0,0 +1,19 @@
INSERT INTO `secret_data_key` (
`uid`,
`namespace`,
`label`,
`provider`,
`encrypted_data`,
`active`,
`created`,
`updated`
) VALUES (
'abc123',
'ns',
'label',
'provider',
'[115 101 99 114 101 116]',
FALSE,
'0001-01-01 00:00:00 +0000 UTC',
'0001-01-01 00:00:00 +0000 UTC'
);
pkg/storage/secret/encryption/testdata/mysql--data_key_create-create.sql
Vendored Executable
+19
View File
@@ -0,0 +1,19 @@
INSERT INTO `secret_data_key` (
`uid`,
`namespace`,
`label`,
`provider`,
`encrypted_data`,
`active`,
`created`,
`updated`
) VALUES (
'abc123',
'ns',
'label',
'provider',
'[115 101 99 114 101 116]',
TRUE,
'0001-01-01 00:00:00 +0000 UTC',
'0001-01-01 00:00:00 +0000 UTC'
);
pkg/storage/secret/encryption/testdata/mysql--data_key_delete-delete-no-uid.sql
Vendored Executable
+4
View File
@@ -0,0 +1,4 @@
DELETE FROM `secret_data_key`
WHERE `namespace` = 'ns' AND
`uid` = ''
;
pkg/storage/secret/encryption/testdata/mysql--data_key_delete-delete.sql
Vendored Executable
+4
View File
@@ -0,0 +1,4 @@
DELETE FROM `secret_data_key`
WHERE `namespace` = 'ns' AND
`uid` = 'abc123'
;
pkg/storage/secret/encryption/testdata/mysql--data_key_disable-disable.sql
Vendored Executable
+8
View File
@@ -0,0 +1,8 @@
UPDATE
`secret_data_key`
SET
`active` = false,
`updated` = '2025-01-01 00:00:00 +0000 UTC'
WHERE `namespace` = 'ns' AND
`active` = true
;
pkg/storage/secret/encryption/testdata/mysql--data_key_list-list.sql
Vendored Executable
+13
View File
@@ -0,0 +1,13 @@
SELECT
`uid`,
`namespace`,
`label`,
`provider`,
`encrypted_data`,
`active`,
`created`,
`updated`
FROM
`secret_data_key`
WHERE `namespace` = 'ns'
;
pkg/storage/secret/encryption/testdata/mysql--data_key_read-read.sql
Vendored Executable
+14
View File
@@ -0,0 +1,14 @@
SELECT
`uid`,
`namespace`,
`label`,
`provider`,
`encrypted_data`,
`active`,
`created`,
`updated`
FROM
`secret_data_key`
WHERE `namespace` = 'ns' AND
`uid` = 'abc123'
;
pkg/storage/secret/encryption/testdata/mysql--data_key_read_current-read_current.sql
Vendored Executable
+15
View File
@@ -0,0 +1,15 @@
SELECT
`uid`,
`namespace`,
`label`,
`provider`,
`encrypted_data`,
`active`,
`created`,
`updated`
FROM
`secret_data_key`
WHERE `namespace` = 'ns' AND
`label` = 'label' AND
`active` = true
;
pkg/storage/secret/encryption/testdata/postgres--data_key_create-create-not-active.sql
Vendored Executable
+19
View File
@@ -0,0 +1,19 @@
INSERT INTO "secret_data_key" (
"uid",
"namespace",
"label",
"provider",
"encrypted_data",
"active",
"created",
"updated"
) VALUES (
'abc123',
'ns',
'label',
'provider',
'[115 101 99 114 101 116]',
FALSE,
'0001-01-01 00:00:00 +0000 UTC',
'0001-01-01 00:00:00 +0000 UTC'
);
pkg/storage/secret/encryption/testdata/postgres--data_key_create-create.sql
Vendored Executable
+19
View File
@@ -0,0 +1,19 @@
INSERT INTO "secret_data_key" (
"uid",
"namespace",
"label",
"provider",
"encrypted_data",
"active",
"created",
"updated"
) VALUES (
'abc123',
'ns',
'label',
'provider',
'[115 101 99 114 101 116]',
TRUE,
'0001-01-01 00:00:00 +0000 UTC',
'0001-01-01 00:00:00 +0000 UTC'
);
pkg/storage/secret/encryption/testdata/postgres--data_key_delete-delete-no-uid.sql
Vendored Executable
+4
View File
@@ -0,0 +1,4 @@
DELETE FROM "secret_data_key"
WHERE "namespace" = 'ns' AND
"uid" = ''
;
pkg/storage/secret/encryption/testdata/postgres--data_key_delete-delete.sql
Vendored Executable
+4
View File
@@ -0,0 +1,4 @@
DELETE FROM "secret_data_key"
WHERE "namespace" = 'ns' AND
"uid" = 'abc123'
;
pkg/storage/secret/encryption/testdata/postgres--data_key_disable-disable.sql
Vendored Executable
+8
View File
@@ -0,0 +1,8 @@
UPDATE
"secret_data_key"
SET
"active" = false,
"updated" = '2025-01-01 00:00:00 +0000 UTC'
WHERE "namespace" = 'ns' AND
"active" = true
;
pkg/storage/secret/encryption/testdata/postgres--data_key_list-list.sql
Vendored Executable
+13
View File
@@ -0,0 +1,13 @@
SELECT
"uid",
"namespace",
"label",
"provider",
"encrypted_data",
"active",
"created",
"updated"
FROM
"secret_data_key"
WHERE "namespace" = 'ns'
;
pkg/storage/secret/encryption/testdata/postgres--data_key_read-read.sql
Vendored Executable
+14
View File
@@ -0,0 +1,14 @@
SELECT
"uid",
"namespace",
"label",
"provider",
"encrypted_data",
"active",
"created",
"updated"
FROM
"secret_data_key"
WHERE "namespace" = 'ns' AND
"uid" = 'abc123'
;
pkg/storage/secret/encryption/testdata/postgres--data_key_read_current-read_current.sql
Vendored Executable
+15
View File
@@ -0,0 +1,15 @@
SELECT
"uid",
"namespace",
"label",
"provider",
"encrypted_data",
"active",
"created",
"updated"
FROM
"secret_data_key"
WHERE "namespace" = 'ns' AND
"label" = 'label' AND
"active" = true
;
pkg/storage/secret/encryption/testdata/sqlite--data_key_create-create-not-active.sql
Vendored Executable
+19
View File
@@ -0,0 +1,19 @@
INSERT INTO "secret_data_key" (
"uid",
"namespace",
"label",
"provider",
"encrypted_data",
"active",
"created",
"updated"
) VALUES (
'abc123',
'ns',
'label',
'provider',
'[115 101 99 114 101 116]',
FALSE,
'0001-01-01 00:00:00 +0000 UTC',
'0001-01-01 00:00:00 +0000 UTC'
);
pkg/storage/secret/encryption/testdata/sqlite--data_key_create-create.sql
Vendored Executable
+19
View File
@@ -0,0 +1,19 @@
INSERT INTO "secret_data_key" (
"uid",
"namespace",
"label",
"provider",
"encrypted_data",
"active",
"created",
"updated"
) VALUES (
'abc123',
'ns',
'label',
'provider',
'[115 101 99 114 101 116]',
TRUE,
'0001-01-01 00:00:00 +0000 UTC',
'0001-01-01 00:00:00 +0000 UTC'
);
pkg/storage/secret/encryption/testdata/sqlite--data_key_delete-delete-no-uid.sql
Vendored Executable
+4
View File
@@ -0,0 +1,4 @@
DELETE FROM "secret_data_key"
WHERE "namespace" = 'ns' AND
"uid" = ''
;
pkg/storage/secret/encryption/testdata/sqlite--data_key_delete-delete.sql
Vendored Executable
+4
View File
@@ -0,0 +1,4 @@
DELETE FROM "secret_data_key"
WHERE "namespace" = 'ns' AND
"uid" = 'abc123'
;
pkg/storage/secret/encryption/testdata/sqlite--data_key_disable-disable.sql
Vendored Executable
+8
View File
@@ -0,0 +1,8 @@
UPDATE
"secret_data_key"
SET
"active" = false,
"updated" = '2025-01-01 00:00:00 +0000 UTC'
WHERE "namespace" = 'ns' AND
"active" = true
;
pkg/storage/secret/encryption/testdata/sqlite--data_key_list-list.sql
Vendored Executable
+13
View File
@@ -0,0 +1,13 @@
SELECT
"uid",
"namespace",
"label",
"provider",
"encrypted_data",
"active",
"created",
"updated"
FROM
"secret_data_key"
WHERE "namespace" = 'ns'
;
pkg/storage/secret/encryption/testdata/sqlite--data_key_read-read.sql
Vendored Executable
+14
View File
@@ -0,0 +1,14 @@
SELECT
"uid",
"namespace",
"label",
"provider",
"encrypted_data",
"active",
"created",
"updated"
FROM
"secret_data_key"
WHERE "namespace" = 'ns' AND
"uid" = 'abc123'
;
pkg/storage/secret/encryption/testdata/sqlite--data_key_read_current-read_current.sql
Vendored Executable
+15
View File
@@ -0,0 +1,15 @@
SELECT
"uid",
"namespace",
"label",
"provider",
"encrypted_data",
"active",
"created",
"updated"
FROM
"secret_data_key"
WHERE "namespace" = 'ns' AND
"label" = 'label' AND
"active" = true
;