pulumi/pkg/secrets
Pat Gavlin 40b0f8cbab
Cache ciphertext for secret properties. (#3183)
This caching is enabled by wrapping the `secrets.Manager` returned by
`DefaultSecretsProvider.OfType` in an outer `secrets.Manager` that
cooperates with `stack.{Serialize,Deserialize}PropertyValue`. Ciphertext
is cached on a per-secret-instance basis (i.e. not a per-plaintext-value
basis). Cached ciphertext is only reused if the plaintext for the secret
value has not changed. Entries are inserted into the cache upon both
encryption and decryption so that values that originated from ciphertext
and that have not changed can aoid re-encryption.

Contributes to #3178.
2019-09-18 15:52:31 -07:00
..
b64 Refactor the way secrets managers are provided (#3001) 2019-08-01 10:33:52 -07:00
cloud Support additional cloud secrets providers (#2994) 2019-08-02 16:12:16 -07:00
passphrase Refactor the way secrets managers are provided (#3001) 2019-08-01 10:33:52 -07:00
service Refactor the way secrets managers are provided (#3001) 2019-08-01 10:33:52 -07:00
manager.go Cache ciphertext for secret properties. (#3183) 2019-09-18 15:52:31 -07:00