Bruno
9091ac6f5c
Secrets: add basic namespace and name checks to keeper store and secure value store ( #114355 )
2025-11-25 10:04:43 -03:00
Matheus Macabu
5e949fc955
Secrets: Fix secure value creation timestamp changing when updating it ( #114290 )
2025-11-21 16:31:17 +01:00
Bruno and Matheus Macabu
0d67442f1a
Secrets manager: create secure value using the active keeper ( #114039 )
...
* Secrets manager: create secure value using the active keeper
* SecureValueService.Update: fetch secure value from db to get the keeper
* fix keeper_store_test.go
* SecureValueService: fix bug in update where the current version keeper wasn't being passed to the createNewVersion method
* make gofmt
* remove outdated test
* update TestModel
* undo enterprise_imports changes
* use xkube.Namespace
* migrator: set secret_secure_value.keeper to 'system' when the column is null
* indent cue
* fix tests
* fix enterprise imports
* properly fix enterprise imports
* make update-workspace
* go mod tidy
---------
Co-authored-by: Matheus Macabu <macabu.matheus@gmail.com >
2025-11-21 11:20:16 -03:00
f8cd7049e8
Secrets: garbage collection ( #110247 )
...
* clean up older secret versions
* start gargbage collection worker as background service
* make gen-go
* fix typo
* make update-workspace
* undo go mod changes
* undo go work sum changes
* Update pkg/registry/apis/secret/garbagecollectionworker/worker.go
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
* Update pkg/registry/apis/secret/garbagecollectionworker/worker.go
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
* default gc_worker_batch_size to 1 minute
* fix typo
* fix typo
* add test to ensure cleaning up secure values is idempotent
* make gen-go
* make update-workspace
* undo go.mod and .sum changes
* undo enterprise imports
---------
Co-authored-by: Matheus Macabu <macabu.matheus@gmail.com >
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
2025-09-02 11:11:01 -03:00
lean.dev
21fc58f632
SecretsManager: fix span name for SetVersion operations ( #110035 )
...
SecretsManager: fix span name for SetVersion operations
2025-08-22 12:01:41 +00:00
lean.dev
3106abf1a6
SecretsManager: clear unused metrics and standarize labels( #109515 )
2025-08-13 14:01:50 +01:00
lean.dev
e022b6593b
SecretsManager: fix log ( #108970 )
2025-07-31 11:51:04 +00:00
Matheus Macabu
80d7892d6a
Secrets: Save owner reference fields in secure value db table ( #108905 )
...
* Secrets: Save owner reference fields in secure value db table
* Save api group and version separately
2025-07-31 10:42:19 +02:00
lean.dev
6bf542889a
SecretsManager: Refactor and clean metrics ( #108908 )
2025-07-30 20:00:30 +01:00
Bruno
01692bc876
Secrets: remove unused SecureValueMetadataStorage.ReadForDecrypt method ( #108181 )
...
* Secrets: remove unused SecureValueMetadataStorage.ReadForDecrypt method
* remove unused struct: secureValueForDecrypt
2025-07-16 11:52:26 -03:00
Matheus Macabu
2c4bbf8b1d
Secrets: Reduce amount of feature toggle checks to only app entrypoint ( #108110 )
...
* Secrets: Reduce amount of feature toggle checks to only app entrypoint
* Wire: Fix merge conflict
* Wire: Fix merge conflict
2025-07-16 10:56:59 +02:00
Matheus Macabu
403d6380fa
Secrets: Remove gating with experimental APIs feature toggle ( #108058 )
2025-07-14 17:46:17 +02:00
Bruno
baa89f3eac
Secrets: encryption encryption storage uses versioning ( #108036 )
...
* Secrets: delete unused FakeKeeper
* Secrets: encrypted value storage stores versions
* add version to span
* trigger build
* remove ineffectual assignment
* lint
* drop secret_encrypted_value.uid / add name and version columns
2025-07-14 09:28:07 -03:00
Matheus Macabu
9c1b2fb792
Secrets: Bump API version to v1beta1 ( #108026 )
2025-07-11 19:14:05 +02:00
8283d35e56
Secrets: make operations sync ( #107732 )
...
* Secrets: make operations sync
* k8s gen / update query to list secure values to include the version
* always store new version of a secret
* make update-workspace
* go mod tidy
* update queries
* update queries
* improve and use testutils in decrypt_store_test
* fix broken test
* make update-workspace
* ./hack/update-codegen.sh secret
* update Test_SecureValueMetadataStorage_CreateAndRead
* undo dependency changes
* linter: fix remaining errors
---------
Co-authored-by: Matheus Macabu <macabu.matheus@gmail.com >
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
2025-07-09 10:43:34 -03:00
Dana Axinte and Michael Mandrus
a59ec345c2
SecretsManager: Introduce metrics and logs ( #107582 )
...
Co-authored-by: Michael Mandrus <michael.mandrus@grafana.com >
2025-07-03 17:32:18 +01:00
Matheus Macabu
f32d944b23
Secrets: Add initial tracing instrumentation ( #107513 )
2025-07-02 14:43:36 +02:00
6097841e67
SecretsManager: add secure value store ( #106708 )
...
* SecretsManager: add secure value model and sql templates
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
Co-authored-by: Dana Axinte <53751979+dana-axinte@users.noreply.github.com >
Co-authored-by: Leandro Deveikis <leandro.deveikis@gmail.com >
Co-authored-by: PoorlyDefinedBehaviour <brunotj2015@hotmail.com >
* SecretsManager: secure value rest layer to use store
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
Co-authored-by: Dana Axinte <53751979+dana-axinte@users.noreply.github.com >
Co-authored-by: Leandro Deveikis <leandro.deveikis@gmail.com >
Co-authored-by: PoorlyDefinedBehaviour <brunotj2015@hotmail.com >
* SecretsManager: temporary add actor prefix to decrypters
* Remove list securevalue by namefor now
---------
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
Co-authored-by: Leandro Deveikis <leandro.deveikis@gmail.com >
Co-authored-by: PoorlyDefinedBehaviour <brunotj2015@hotmail.com >
2025-06-16 10:19:44 +01:00
8c64078965
SecretsManager: Keeper and secure value contracts, secretkeeper changes ( #105379 )
...
Co-authored-by: PoorlyDefinedBehaviour <brunotj2015@hotmail.com >
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
2025-05-14 15:24:25 +01:00
3aba5cb2b7
SecretsManager: Bootstrap API service ( #102444 )
...
Co-authored-by: Dana Axinte <53751979+dana-axinte@users.noreply.github.com >
Co-authored-by: Michael Mandrus <michael.mandrus@grafana.com >
2025-03-19 13:41:29 +01:00
Bruno
Matheus Macabu
lean.dev
Dana AxinteandMichael Mandrus
