Improve how SecretStore's AWS provider is managed

This commit is contained in:
Philippe Merle
2025-10-24 16:02:18 +02:00
parent e71aa716f8
commit 37bb689197
3 changed files with 14 additions and 7 deletions

Binary file not shown.

Before

Width:  |  Height:  |  Size: 83 KiB

After

Width:  |  Height:  |  Size: 76 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 68 KiB

After

Width:  |  Height:  |  Size: 67 KiB

View File

@@ -48,22 +48,22 @@ nodes:
edges: |
# Edge to the AWS Secrets Manager of this secret store
edges.add_edge_to(
"spec.provider.aws.service",
".",
"spec.provider.aws",
query_path(resource, "spec.provider.aws.region"),
None,
"SecretsManager",
query_path(resource, "spec.provider.aws.service"),
"aws/v1",
"REFERENCE"
)
nodes: |
# Create an AWS Secrets Manager node if defined
provider_aws_service = query_path(resource, "spec.provider.aws.service")
if provider_aws_service is not None:
provider_aws_region = query_path(resource, "spec.provider.aws.region")
if provider_aws_region is not None:
nodes.append({
"kind": "SecretsManager",
"kind": query_path(resource, "spec.provider.aws.service"),
"apiVersion": "aws/v1",
"metadata": {
"name": provider_aws_service
"name": provider_aws_region
}
})
SecretStore/external-secrets.io/v1alpha1: SecretStore/external-secrets.io/v1
@@ -75,3 +75,10 @@ nodes:
SecretsManager/aws/v1:
scope: Outside # of the Kubernetes world
diagram_node_classname: diagrams.aws.security.SecretsManager
#
# AWS Parameter Store
#
ParameterStore/aws/v1:
scope: Outside # of the Kubernetes world
diagram_node_classname: diagrams.aws.management.SystemsManagerParameterStore