Package google.registry.privileges.secretmanager

Class KeyringSecretStore

java.lang.Object

google.registry.privileges.secretmanager.KeyringSecretStore

public class KeyringSecretStore
extends Object

Storage for 'keyring' secrets, backed by the Secret Manager.

This store is for secrets and credentials that must be set up manually and/or do not require non-disruptive password changes, e.g., passwords to regulatory reporting websites, which are used by cron jobs.

In contrast, the SqlCredentialStore is designed to support non-disruptive credential changes with Cloud SQL.

Constructor Summary

Constructors

Constructor	Description
KeyringSecretStore(SecretManagerClient csmClient)

Method Summary

Modifier and Type	Method	Description
void	createOrUpdateSecret(String label, byte[] data)
byte[]	getSecret(String label)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

KeyringSecretStore

@Inject
public KeyringSecretStore(SecretManagerClient csmClient)

Method Details

createOrUpdateSecret

public void createOrUpdateSecret(String label,
 byte[] data)

getSecret

public byte[] getSecret(String label)