SecretsManager: Introduce keeper store (#105557)

* SecretsManager: Introduce secret database wrapper

Co-authored-by: PoorlyDefinedBehaviour <brunotj2015@hotmail.com>
Co-authored-by: Leandro Deveikis <leandro.deveikis@gmail.com>
Co-authored-by: Dana Axinte <53751979+dana-axinte@users.noreply.github.com>
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com>

* SecretsManager: Introduce db migrator with keeper table

Co-authored-by: PoorlyDefinedBehaviour <brunotj2015@hotmail.com>
Co-authored-by: Leandro Deveikis <leandro.deveikis@gmail.com>
Co-authored-by: Dana Axinte <53751979+dana-axinte@users.noreply.github.com>
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com>

* SecretsManager: Introduce keeper store

Co-authored-by: Leandro Deveikis <leandro.deveikis@gmail.com>
Co-authored-by: Dana Axinte <53751979+dana-axinte@users.noreply.github.com>
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com>

* new line

* without query listByNameSecureValue

* remove unused extractSecureValues for now

* SecretsManager: Add keeper integration tests

Co-authored-by: Leandro Deveikis <leandro.deveikis@gmail.com>
Co-authored-by: Dana Axinte <53751979+dana-axinte@users.noreply.github.com>
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com>

---------

Co-authored-by: PoorlyDefinedBehaviour <brunotj2015@hotmail.com>
Co-authored-by: Leandro Deveikis <leandro.deveikis@gmail.com>
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com>

pkg/storage/secret/metadata/testdata/mysql--keeper_create-create.sql

@@ -0,0 +1,27 @@
+INSERT INTO `secret_keeper` (
+  `guid`,
+  `name`,
+  `namespace`,
+  `annotations`,
+  `labels`,
+  `created`,
+  `created_by`,
+  `updated`,
+  `updated_by`,
+  `description`,
+  `type`,
+  `payload`
+) VALUES (
+  'abc',
+  'name',
+  'ns',
+  '{"x":"XXXX"}',
+  '{"a":"AAA", "b", "BBBB"}',
+  1234,
+  'user:ryan',
+  5678,
+  'user:cameron',
+  'description',
+  'sql',
+  ''
+);

pkg/storage/secret/metadata/testdata/mysql--keeper_delete-delete.sql

@@ -0,0 +1,4 @@
+DELETE FROM `secret_keeper`
+WHERE  `namespace` = 'ns' AND
+  `name`      = 'name'
+;

pkg/storage/secret/metadata/testdata/mysql--keeper_list-list.sql

@@ -0,0 +1,18 @@
+SELECT
+  `guid`,
+  `name`,
+  `namespace`,
+  `annotations`,
+  `labels`,
+  `created`,
+  `created_by`,
+  `updated`,
+  `updated_by`,
+  `description`,
+  `type`,
+  `payload`
+FROM
+  `secret_keeper`
+WHERE `namespace` = 'ns'
+ORDER BY `updated` DESC
+;

pkg/storage/secret/metadata/testdata/mysql--keeper_listByName-list.sql

@@ -0,0 +1,8 @@
+SELECT
+  `name`
+FROM
+  `secret_keeper`
+WHERE `namespace` = 'ns' AND
+  `name` IN ('a', 'b')
+FOR UPDATE
+;

pkg/storage/secret/metadata/testdata/mysql--keeper_read-read-for-update.sql

@@ -0,0 +1,19 @@
+SELECT
+  `guid`,
+  `name`,
+  `namespace`,
+  `annotations`,
+  `labels`,
+  `created`,
+  `created_by`,
+  `updated`,
+  `updated_by`,
+  `description`,
+  `type`,
+  `payload`
+FROM
+  `secret_keeper`
+WHERE `namespace` = 'ns' AND
+  `name` = 'name'
+FOR UPDATE
+;

pkg/storage/secret/metadata/testdata/mysql--keeper_read-read.sql

@@ -0,0 +1,18 @@
+SELECT
+  `guid`,
+  `name`,
+  `namespace`,
+  `annotations`,
+  `labels`,
+  `created`,
+  `created_by`,
+  `updated`,
+  `updated_by`,
+  `description`,
+  `type`,
+  `payload`
+FROM
+  `secret_keeper`
+WHERE `namespace` = 'ns' AND
+  `name` = 'name'
+;

pkg/storage/secret/metadata/testdata/mysql--keeper_update-update.sql

@@ -0,0 +1,18 @@
+UPDATE
+  `secret_keeper`
+SET
+  `guid` = 'abc',
+  `name` = 'name',
+  `namespace` = 'ns',
+  `annotations` = '{"x":"XXXX"}',
+  `labels` = '{"a":"AAA", "b", "BBBB"}',
+  `created` = 1234,
+  `created_by` = 'user:ryan',
+  `updated` = 5678,
+  `updated_by` = 'user:cameron',
+  `description` = 'description',
+  `type` = 'sql',
+  `payload` = ''
+WHERE `namespace` = 'ns' AND
+  `name` = 'name'
+;

pkg/storage/secret/metadata/testdata/postgres--keeper_create-create.sql

@@ -0,0 +1,27 @@
+INSERT INTO "secret_keeper" (
+  "guid",
+  "name",
+  "namespace",
+  "annotations",
+  "labels",
+  "created",
+  "created_by",
+  "updated",
+  "updated_by",
+  "description",
+  "type",
+  "payload"
+) VALUES (
+  'abc',
+  'name',
+  'ns',
+  '{"x":"XXXX"}',
+  '{"a":"AAA", "b", "BBBB"}',
+  1234,
+  'user:ryan',
+  5678,
+  'user:cameron',
+  'description',
+  'sql',
+  ''
+);

pkg/storage/secret/metadata/testdata/postgres--keeper_delete-delete.sql

@@ -0,0 +1,4 @@
+DELETE FROM "secret_keeper"
+WHERE  "namespace" = 'ns' AND
+  "name"      = 'name'
+;

pkg/storage/secret/metadata/testdata/postgres--keeper_list-list.sql

@@ -0,0 +1,18 @@
+SELECT
+  "guid",
+  "name",
+  "namespace",
+  "annotations",
+  "labels",
+  "created",
+  "created_by",
+  "updated",
+  "updated_by",
+  "description",
+  "type",
+  "payload"
+FROM
+  "secret_keeper"
+WHERE "namespace" = 'ns'
+ORDER BY "updated" DESC
+;

pkg/storage/secret/metadata/testdata/postgres--keeper_listByName-list.sql

@@ -0,0 +1,8 @@
+SELECT
+  "name"
+FROM
+  "secret_keeper"
+WHERE "namespace" = 'ns' AND
+  "name" IN ('a', 'b')
+FOR UPDATE
+;

pkg/storage/secret/metadata/testdata/postgres--keeper_read-read-for-update.sql

@@ -0,0 +1,19 @@
+SELECT
+  "guid",
+  "name",
+  "namespace",
+  "annotations",
+  "labels",
+  "created",
+  "created_by",
+  "updated",
+  "updated_by",
+  "description",
+  "type",
+  "payload"
+FROM
+  "secret_keeper"
+WHERE "namespace" = 'ns' AND
+  "name" = 'name'
+FOR UPDATE
+;

pkg/storage/secret/metadata/testdata/postgres--keeper_read-read.sql

@@ -0,0 +1,18 @@
+SELECT
+  "guid",
+  "name",
+  "namespace",
+  "annotations",
+  "labels",
+  "created",
+  "created_by",
+  "updated",
+  "updated_by",
+  "description",
+  "type",
+  "payload"
+FROM
+  "secret_keeper"
+WHERE "namespace" = 'ns' AND
+  "name" = 'name'
+;

pkg/storage/secret/metadata/testdata/postgres--keeper_update-update.sql

@@ -0,0 +1,18 @@
+UPDATE
+  "secret_keeper"
+SET
+  "guid" = 'abc',
+  "name" = 'name',
+  "namespace" = 'ns',
+  "annotations" = '{"x":"XXXX"}',
+  "labels" = '{"a":"AAA", "b", "BBBB"}',
+  "created" = 1234,
+  "created_by" = 'user:ryan',
+  "updated" = 5678,
+  "updated_by" = 'user:cameron',
+  "description" = 'description',
+  "type" = 'sql',
+  "payload" = ''
+WHERE "namespace" = 'ns' AND
+  "name" = 'name'
+;

pkg/storage/secret/metadata/testdata/sqlite--keeper_create-create.sql

@@ -0,0 +1,27 @@
+INSERT INTO "secret_keeper" (
+  "guid",
+  "name",
+  "namespace",
+  "annotations",
+  "labels",
+  "created",
+  "created_by",
+  "updated",
+  "updated_by",
+  "description",
+  "type",
+  "payload"
+) VALUES (
+  'abc',
+  'name',
+  'ns',
+  '{"x":"XXXX"}',
+  '{"a":"AAA", "b", "BBBB"}',
+  1234,
+  'user:ryan',
+  5678,
+  'user:cameron',
+  'description',
+  'sql',
+  ''
+);

pkg/storage/secret/metadata/testdata/sqlite--keeper_delete-delete.sql

@@ -0,0 +1,4 @@
+DELETE FROM "secret_keeper"
+WHERE  "namespace" = 'ns' AND
+  "name"      = 'name'
+;

pkg/storage/secret/metadata/testdata/sqlite--keeper_list-list.sql

@@ -0,0 +1,18 @@
+SELECT
+  "guid",
+  "name",
+  "namespace",
+  "annotations",
+  "labels",
+  "created",
+  "created_by",
+  "updated",
+  "updated_by",
+  "description",
+  "type",
+  "payload"
+FROM
+  "secret_keeper"
+WHERE "namespace" = 'ns'
+ORDER BY "updated" DESC
+;

pkg/storage/secret/metadata/testdata/sqlite--keeper_listByName-list.sql

@@ -0,0 +1,7 @@
+SELECT
+  "name"
+FROM
+  "secret_keeper"
+WHERE "namespace" = 'ns' AND
+  "name" IN ('a', 'b')
+;

pkg/storage/secret/metadata/testdata/sqlite--keeper_read-read-for-update.sql

@@ -0,0 +1,18 @@
+SELECT
+  "guid",
+  "name",
+  "namespace",
+  "annotations",
+  "labels",
+  "created",
+  "created_by",
+  "updated",
+  "updated_by",
+  "description",
+  "type",
+  "payload"
+FROM
+  "secret_keeper"
+WHERE "namespace" = 'ns' AND
+  "name" = 'name'
+;

pkg/storage/secret/metadata/testdata/sqlite--keeper_read-read.sql

@@ -0,0 +1,18 @@
+SELECT
+  "guid",
+  "name",
+  "namespace",
+  "annotations",
+  "labels",
+  "created",
+  "created_by",
+  "updated",
+  "updated_by",
+  "description",
+  "type",
+  "payload"
+FROM
+  "secret_keeper"
+WHERE "namespace" = 'ns' AND
+  "name" = 'name'
+;

pkg/storage/secret/metadata/testdata/sqlite--keeper_update-update.sql

@@ -0,0 +1,18 @@
+UPDATE
+  "secret_keeper"
+SET
+  "guid" = 'abc',
+  "name" = 'name',
+  "namespace" = 'ns',
+  "annotations" = '{"x":"XXXX"}',
+  "labels" = '{"a":"AAA", "b", "BBBB"}',
+  "created" = 1234,
+  "created_by" = 'user:ryan',
+  "updated" = 5678,
+  "updated_by" = 'user:cameron',
+  "description" = 'description',
+  "type" = 'sql',
+  "payload" = ''
+WHERE "namespace" = 'ns' AND
+  "name" = 'name'
+;