package v1alpha1

Get desktop application:
View/edit binary Protocol Buffers messages

• rpc Version (VersionRequest, VersionResponse)

  service.proto:26

  Version returns the runtime name and runtime version of the Secrets Store CSI Driver Provider TODO (aramase) This will be used later to ensure the provider the driver is talking to supports the current version

  message VersionRequest

  service.proto:32

  • string version = 1

    Version of the Secrets Store CSI Driver

  message VersionResponse

  service.proto:37

  • string version = 1

    Version of the Secrets Store CSI Driver

  • string runtime_name = 2

    Name of the Secrets Store CSI Driver Provider

  • string runtime_version = 3

    Version of the Secrets Store CSI Driver Provider. The string must be semver-compatible.

• rpc Mount (MountRequest, MountResponse)

  service.proto:29

  Execute mount operation in provider

  message MountRequest

  service.proto:46

  • string attributes = 1

    Attributes is the parameters field defined in the SecretProviderClass

  • string secrets = 2

    Secrets is the secret content referenced in nodePublishSecretRef secret data

  • string target_path = 3

    TargetPath is the path to which the volume will be published TODO(tam7t): deprecate

  • string permission = 4

    Permission is the file permissions TODO(tam7t): deprecate

  • repeated ObjectVersion current_object_version = 5

    CurrentObjectVersion is the list of objects and their versions that's currently mounted in the pod

  message MountResponse

  service.proto:62

  • repeated ObjectVersion object_version = 1

  • optional Error error = 2

  • repeated File files = 3

    files contains the entire mount volume filesystem. The total size of all files should not exceed 1MiB or syncing to Kubernetes Secrets will fail. If the contents of all files exceeds 4MiB then requests could fail unless MaxCallRecvMsgSize is increased.

Used in: MountResponse

• string code = 1

  Code is the error code that the provider can return which will be used for publishing metrics

File holds secret file contents and location in the mount path to write the file.

Used in: MountResponse

• string path = 1

  The relative path of the file within the mount. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'.

• int32 mode = 2

  The mode bits used to set permissions on this file. Must be a decimal value between 0 and 511.

• bytes contents = 3

  The file contents.

Used in: MountRequest, MountResponse

• string id = 1

  Id is the object UID that is fetched from external secrets store The Id should be unique. If multiple objects fetched from the secrets store contain the same name, the provider should return a uid. This will be populated in the SecretProviderClassPodStatus and sent back to the provider as part of rotation reconcile Example: secret/secret1, key/secret1, projects/$PROJECT_ID/secrets/secret1

• string version = 2

  Version is the object version that is fetched from external secrets store