Improve how SecretStore's AWS provider is managed

This commit is contained in:
Philippe Merle
2025-10-24 16:02:18 +02:00
parent e71aa716f8
commit 37bb689197
3 changed files with 14 additions and 7 deletions

Binary file not shown.

Before

Width:  |  Height:  |  Size: 83 KiB

After

Width:  |  Height:  |  Size: 76 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 68 KiB

After

Width:  |  Height:  |  Size: 67 KiB

View File

@@ -48,22 +48,22 @@ nodes:
edges: | edges: |
# Edge to the AWS Secrets Manager of this secret store # Edge to the AWS Secrets Manager of this secret store
edges.add_edge_to( edges.add_edge_to(
"spec.provider.aws.service", "spec.provider.aws",
".", query_path(resource, "spec.provider.aws.region"),
None, None,
"SecretsManager", query_path(resource, "spec.provider.aws.service"),
"aws/v1", "aws/v1",
"REFERENCE" "REFERENCE"
) )
nodes: | nodes: |
# Create an AWS Secrets Manager node if defined # Create an AWS Secrets Manager node if defined
provider_aws_service = query_path(resource, "spec.provider.aws.service") provider_aws_region = query_path(resource, "spec.provider.aws.region")
if provider_aws_service is not None: if provider_aws_region is not None:
nodes.append({ nodes.append({
"kind": "SecretsManager", "kind": query_path(resource, "spec.provider.aws.service"),
"apiVersion": "aws/v1", "apiVersion": "aws/v1",
"metadata": { "metadata": {
"name": provider_aws_service "name": provider_aws_region
} }
}) })
SecretStore/external-secrets.io/v1alpha1: SecretStore/external-secrets.io/v1 SecretStore/external-secrets.io/v1alpha1: SecretStore/external-secrets.io/v1
@@ -75,3 +75,10 @@ nodes:
SecretsManager/aws/v1: SecretsManager/aws/v1:
scope: Outside # of the Kubernetes world scope: Outside # of the Kubernetes world
diagram_node_classname: diagrams.aws.security.SecretsManager diagram_node_classname: diagrams.aws.security.SecretsManager
#
# AWS Parameter Store
#
ParameterStore/aws/v1:
scope: Outside # of the Kubernetes world
diagram_node_classname: diagrams.aws.management.SystemsManagerParameterStore