qontract-reconcile 0.10.1rc1176__py3-none-any.whl → 0.10.1rc1177__py3-none-any.whl

{qontract_reconcile-0.10.1rc1176.dist-info → qontract_reconcile-0.10.1rc1177.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: qontract-reconcile
-Version: 0.10.1rc1176
+Version: 0.10.1rc1177
 Summary: Collection of tools to reconcile services with their desired state as defined in the app-interface DB.
 Home-page: https://github.com/app-sre/qontract-reconcile
 Author: Red Hat App-SRE Team

{qontract_reconcile-0.10.1rc1176.dist-info → qontract_reconcile-0.10.1rc1177.dist-info}/RECORD

@@ -201,7 +201,7 @@ reconcile/external_resources/meta.py,sha256=noaytFzmShpzLA_ebGh7wuP45mOfHIOnnoUx
 reconcile/external_resources/metrics.py,sha256=nMbyonGZEJDD1lYzpQY2eR9TNwvxYC4ZCcpi6wrExcM,1037
 reconcile/external_resources/model.py,sha256=H3elpiqehg_jACy28fGV5_77n8gKclVO77-7cfbaMNA,9178
 reconcile/external_resources/reconciler.py,sha256=K9QvbQCIOCuOHnPIxQE_P_jFtrkF3dGo8d_cCCh08Ys,8973
-reconcile/external_resources/secrets_sync.py,sha256=6n0oDPLjd9Ql0lf6zsr1AZw8A6EEe3yCzl20XodtgkE,16229
+reconcile/external_resources/secrets_sync.py,sha256=fxzrNreggWJvASonIPUr3CB5M637M1ljZLZr6dct9xU,16329
 reconcile/external_resources/state.py,sha256=z086bnIUTOkzFmQvS9rSAhFsM3Aw_9PLKHBACJ-0tQc,9690
 reconcile/glitchtip/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 reconcile/glitchtip/integration.py,sha256=XtewM9nfTPLnPSpYebP50GrveYOnhTvKNq3seSvL6u8,8343
@@ -880,8 +880,8 @@ tools/test/test_qontract_cli.py,sha256=iuzKbQ6ahinvjoQmQLBrG4shey0z-1rB6qCgS8T6d
 tools/test/test_saas_promotion_state.py,sha256=dy4kkSSAQ7bC0Xp2CociETGN-2aABEfL6FU5D9Jl00Y,6056
 tools/test/test_sd_app_sre_alert_report.py,sha256=v363r9zM7__0kR5K6mvJoGFcM9BvE33fWAayrqkpojA,2116
 tools/test/test_sre_checkpoints.py,sha256=SKqPPTl9ua0RFdSSofnoQX-JZE6dFLO3LRhfQzqtfh8,2607
-qontract_reconcile-0.10.1rc1176.dist-info/METADATA,sha256=FO4VVCgyw7g9Ej_-qTU5yN7o37gXyNGXakWuCm-G49c,2213
-qontract_reconcile-0.10.1rc1176.dist-info/WHEEL,sha256=bFJAMchF8aTQGUgMZzHJyDDMPTO3ToJ7x23SLJa1SVo,92
-qontract_reconcile-0.10.1rc1176.dist-info/entry_points.txt,sha256=GKQqCl2j2X1BJQ69een6rHcR26PmnxnONLNOQB-nRjY,491
-qontract_reconcile-0.10.1rc1176.dist-info/top_level.txt,sha256=l5ISPoXzt0SdR4jVdkfa7RPSKNc8zAHYWAnR-Dw8Ey8,24
-qontract_reconcile-0.10.1rc1176.dist-info/RECORD,,
+qontract_reconcile-0.10.1rc1177.dist-info/METADATA,sha256=8O5LR5k-BcwSY1W0Io2-slA90MktSdccM9h4L8Fm2Aw,2213
+qontract_reconcile-0.10.1rc1177.dist-info/WHEEL,sha256=bFJAMchF8aTQGUgMZzHJyDDMPTO3ToJ7x23SLJa1SVo,92
+qontract_reconcile-0.10.1rc1177.dist-info/entry_points.txt,sha256=GKQqCl2j2X1BJQ69een6rHcR26PmnxnONLNOQB-nRjY,491
+qontract_reconcile-0.10.1rc1177.dist-info/top_level.txt,sha256=l5ISPoXzt0SdR4jVdkfa7RPSKNc8zAHYWAnR-Dw8Ey8,24
+qontract_reconcile-0.10.1rc1177.dist-info/RECORD,,

reconcile/external_resources/secrets_sync.py

@@ -195,6 +195,9 @@ class SecretsReconciler:
             integration=QONTRACT_INTEGRATION,
         )
 
+    def secret_path(self, vault_path: str, spec: ExternalResourceSpec) -> str:
+        return f"{vault_path}/{spec.cluster_name}/{spec.namespace_name}/{spec.output_resource_name}"
+
     def sync_secrets(
         self, specs: Iterable[ExternalResourceSpec]
     ) -> list[ExternalResourceSpec]:
@@ -363,10 +366,12 @@ class InClusterSecretsReconciler(SecretsReconciler):
         self.oc.delete(namespace=self.namespace, kind="Secret", name=secret_name)
 
     def _write_secret_to_vault(self, spec: ExternalResourceSpec) -> None:
-        secret_path = f"{self.vault_path}/{spec.cluster_name}/{spec.namespace_name}/{spec.identifier}"
         secret = {k: str(v) for k, v in spec.secret.items()}
         secret[SECRET_UPDATED_AT] = spec.metadata[SECRET_UPDATED_AT]
-        desired_secret = {"path": secret_path, "data": secret}
+        desired_secret = {
+            "path": self.secret_path(self.vault_path, spec),
+            "data": secret,
+        }
         self.vault_client.write(desired_secret, decode_base64=False)  # type: ignore[attr-defined]
 
     def sync_secrets(
@@ -447,7 +452,7 @@ class VaultSecretsReconciler(SecretsReconciler):
         threaded.run(self._read_secret, specs, self.thread_pool_size)
 
     def _read_secret(self, spec: ExternalResourceSpec) -> None:
-        secret_path = f"{self.vault_path}/{spec.cluster_name}/{spec.namespace_name}/{spec.identifier}"
+        secret_path = self.secret_path(self.vault_path, spec)
         try:
             logging.debug("Reading Secret %s", secret_path)
             data = self.secrets_reader.read_all({"path": secret_path})