From 8ea579ebca8bcbeb1325837666a3093e86d45fa4 Mon Sep 17 00:00:00 2001 From: Aleksandr Nogikh Date: Thu, 8 May 2025 12:36:37 +0200 Subject: pkg/gcs: add helper methods for secret retrieval Add a method for querying the current project name. Add a method for querying the latest secret version. --- pkg/gce/gcp_secret.go | 25 ++++++++++++++++++++++++- 1 file changed, 24 insertions(+), 1 deletion(-) (limited to 'pkg/gce') diff --git a/pkg/gce/gcp_secret.go b/pkg/gce/gcp_secret.go index f9b607bf4..ef4eb2341 100644 --- a/pkg/gce/gcp_secret.go +++ b/pkg/gce/gcp_secret.go @@ -5,18 +5,23 @@ package gce import ( "context" + "fmt" + "cloud.google.com/go/compute/metadata" secretmanager "cloud.google.com/go/secretmanager/apiv1" "cloud.google.com/go/secretmanager/apiv1/secretmanagerpb" ) // GcpSecret returns the GCP Secret Manager blob as a []byte data. func GcpSecret(name string) ([]byte, error) { + return GcpSecretWithContext(context.Background(), name) +} + +func GcpSecretWithContext(ctx context.Context, name string) ([]byte, error) { // name := "projects/my-project/secrets/my-secret/versions/5" // name := "projects/my-project/secrets/my-secret/versions/latest" // Create the client. - ctx := context.Background() client, err := secretmanager.NewClient(ctx) if err != nil { return nil, err @@ -36,3 +41,21 @@ func GcpSecret(name string) ([]byte, error) { return result.Payload.Data, nil } + +// LatestGcpSecret returns the latest secret value. +func LatestGcpSecret(ctx context.Context, projectName, key string) ([]byte, error) { + return GcpSecretWithContext(ctx, + fmt.Sprintf("projects/%s/secrets/%s/versions/latest", projectName, key)) +} + +// ProjectName returns the name of the GCP project the code is running on. +func ProjectName(ctx context.Context) (string, error) { + if !metadata.OnGCE() { + return "", fmt.Errorf("not running on GKE/GCE") + } + projectID, err := metadata.ProjectIDWithContext(ctx) + if err != nil { + return "", err + } + return projectID, nil +} -- cgit mrf-deployment