diff options
Diffstat (limited to 'pkg/gce')
| -rw-r--r-- | pkg/gce/gcp_secret.go | 25 |
1 files changed, 24 insertions, 1 deletions
diff --git a/pkg/gce/gcp_secret.go b/pkg/gce/gcp_secret.go index f9b607bf4..ef4eb2341 100644 --- a/pkg/gce/gcp_secret.go +++ b/pkg/gce/gcp_secret.go @@ -5,18 +5,23 @@ package gce import ( "context" + "fmt" + "cloud.google.com/go/compute/metadata" secretmanager "cloud.google.com/go/secretmanager/apiv1" "cloud.google.com/go/secretmanager/apiv1/secretmanagerpb" ) // GcpSecret returns the GCP Secret Manager blob as a []byte data. func GcpSecret(name string) ([]byte, error) { + return GcpSecretWithContext(context.Background(), name) +} + +func GcpSecretWithContext(ctx context.Context, name string) ([]byte, error) { // name := "projects/my-project/secrets/my-secret/versions/5" // name := "projects/my-project/secrets/my-secret/versions/latest" // Create the client. - ctx := context.Background() client, err := secretmanager.NewClient(ctx) if err != nil { return nil, err @@ -36,3 +41,21 @@ func GcpSecret(name string) ([]byte, error) { return result.Payload.Data, nil } + +// LatestGcpSecret returns the latest secret value. +func LatestGcpSecret(ctx context.Context, projectName, key string) ([]byte, error) { + return GcpSecretWithContext(ctx, + fmt.Sprintf("projects/%s/secrets/%s/versions/latest", projectName, key)) +} + +// ProjectName returns the name of the GCP project the code is running on. +func ProjectName(ctx context.Context) (string, error) { + if !metadata.OnGCE() { + return "", fmt.Errorf("not running on GKE/GCE") + } + projectID, err := metadata.ProjectIDWithContext(ctx) + if err != nil { + return "", err + } + return projectID, nil +} |