2022-04-25 11:57:45 -05:00
|
|
|
package kvstore
|
|
|
|
|
|
|
|
import (
|
|
|
|
"context"
|
|
|
|
|
|
|
|
"github.com/grafana/grafana/pkg/infra/log"
|
|
|
|
"github.com/grafana/grafana/pkg/services/secrets"
|
|
|
|
"github.com/grafana/grafana/pkg/services/sqlstore"
|
|
|
|
)
|
|
|
|
|
|
|
|
const (
|
|
|
|
// Wildcard to query all organizations
|
|
|
|
AllOrganizations = -1
|
|
|
|
)
|
|
|
|
|
2022-06-09 12:19:27 -05:00
|
|
|
func ProvideService(sqlStore sqlstore.Store, secretsService secrets.Service, remoteCheck UseRemoteSecretsPluginCheck) SecretsKVStore {
|
|
|
|
logger := log.New("secrets.kvstore")
|
|
|
|
if remoteCheck.ShouldUseRemoteSecretsPlugin() {
|
|
|
|
logger.Debug("secrets kvstore is using a remote plugin for secrets management")
|
|
|
|
secretsPlugin, err := remoteCheck.GetPlugin()
|
|
|
|
if err != nil {
|
|
|
|
logger.Error("plugin client was nil, falling back to SQL implementation")
|
|
|
|
} else {
|
|
|
|
return &secretsKVStorePlugin{
|
|
|
|
secretsPlugin: secretsPlugin,
|
|
|
|
secretsService: secretsService,
|
|
|
|
log: logger,
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
logger.Debug("secrets kvstore is using the default (SQL) implementation for secrets management")
|
2022-04-25 11:57:45 -05:00
|
|
|
return &secretsKVStoreSQL{
|
|
|
|
sqlStore: sqlStore,
|
|
|
|
secretsService: secretsService,
|
2022-06-09 12:19:27 -05:00
|
|
|
log: logger,
|
2022-04-25 11:57:45 -05:00
|
|
|
decryptionCache: decryptionCache{
|
|
|
|
cache: make(map[int64]cachedDecrypted),
|
|
|
|
},
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
// SecretsKVStore is an interface for k/v store.
|
|
|
|
type SecretsKVStore interface {
|
|
|
|
Get(ctx context.Context, orgId int64, namespace string, typ string) (string, bool, error)
|
|
|
|
Set(ctx context.Context, orgId int64, namespace string, typ string, value string) error
|
|
|
|
Del(ctx context.Context, orgId int64, namespace string, typ string) error
|
|
|
|
Keys(ctx context.Context, orgId int64, namespace string, typ string) ([]Key, error)
|
|
|
|
Rename(ctx context.Context, orgId int64, namespace string, typ string, newNamespace string) error
|
|
|
|
}
|
|
|
|
|
|
|
|
// WithType returns a kvstore wrapper with fixed orgId and type.
|
|
|
|
func With(kv SecretsKVStore, orgId int64, namespace string, typ string) *FixedKVStore {
|
|
|
|
return &FixedKVStore{
|
|
|
|
kvStore: kv,
|
|
|
|
OrgId: orgId,
|
|
|
|
Namespace: namespace,
|
|
|
|
Type: typ,
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
// FixedKVStore is a SecretsKVStore wrapper with fixed orgId, namespace and type.
|
|
|
|
type FixedKVStore struct {
|
|
|
|
kvStore SecretsKVStore
|
|
|
|
OrgId int64
|
|
|
|
Namespace string
|
|
|
|
Type string
|
|
|
|
}
|
|
|
|
|
|
|
|
func (kv *FixedKVStore) Get(ctx context.Context) (string, bool, error) {
|
|
|
|
return kv.kvStore.Get(ctx, kv.OrgId, kv.Namespace, kv.Type)
|
|
|
|
}
|
|
|
|
|
|
|
|
func (kv *FixedKVStore) Set(ctx context.Context, value string) error {
|
|
|
|
return kv.kvStore.Set(ctx, kv.OrgId, kv.Namespace, kv.Type, value)
|
|
|
|
}
|
|
|
|
|
|
|
|
func (kv *FixedKVStore) Del(ctx context.Context) error {
|
|
|
|
return kv.kvStore.Del(ctx, kv.OrgId, kv.Namespace, kv.Type)
|
|
|
|
}
|
|
|
|
|
|
|
|
func (kv *FixedKVStore) Keys(ctx context.Context) ([]Key, error) {
|
|
|
|
return kv.kvStore.Keys(ctx, kv.OrgId, kv.Namespace, kv.Type)
|
|
|
|
}
|
|
|
|
|
|
|
|
func (kv *FixedKVStore) Rename(ctx context.Context, newNamespace string) error {
|
|
|
|
err := kv.kvStore.Rename(ctx, kv.OrgId, kv.Namespace, kv.Type, newNamespace)
|
|
|
|
if err != nil {
|
|
|
|
return err
|
|
|
|
}
|
|
|
|
kv.Namespace = newNamespace
|
|
|
|
return nil
|
|
|
|
}
|