Index
All Classes and Interfaces|All Packages|Constant Field Values
A
- accept(T, U) - Method in interface com.atlassian.secrets.service.dao.IoBiConsumer
-
Performs this operation on the given arguments.
- AES_ALGORITHM - Static variable in class com.atlassian.secrets.service.aes.AESEncryptionBackend
- AESConfig - Class in com.atlassian.secrets.service.aes
- AESConfig(Path) - Constructor for class com.atlassian.secrets.service.aes.AESConfig
- AESEncryptionBackend - Class in com.atlassian.secrets.service.aes
-
This class, AESInPlaceEncryptionService, implements the SecretService interface and provides methods for sealing (encrypting) and unsealing (decrypting) secrets using the
AES/GCM/NoPaddingalgorithm. - AESEncryptionBackend(String, AESConfig) - Constructor for class com.atlassian.secrets.service.aes.AESEncryptionBackend
- AESKeyGenerator - Class in com.atlassian.secrets.service.aes
-
This class is responsible for generating a 256-bit AES key and writing it to a file.
- AESKeyGenerator() - Constructor for class com.atlassian.secrets.service.aes.AESKeyGenerator
-
Default constructor that uses system UTC clock and UUID entropy for filename
- AESKeyGenerator(Clock, Supplier<String>) - Constructor for class com.atlassian.secrets.service.aes.AESKeyGenerator
-
Constructor for testing purposes.
- ALGORITHM_SPECIFICATION - Static variable in class com.atlassian.secrets.service.aes.AESEncryptionBackend
- AtomicFileWriter - Class in com.atlassian.secrets.service.file
- AtomicFileWriter() - Constructor for class com.atlassian.secrets.service.file.AtomicFileWriter
- AWS_FORCE_DELETE_SECRET_SYSTEM_PROP_KEY - Static variable in class com.atlassian.secrets.service.aws.AWSSecretBackend
- AWSSecretBackend - Class in com.atlassian.secrets.service.aws
-
A
SecretServiceBackendimplementation for storing and retrieving secret data from AWS Secrets manager. - AWSSecretBackend(String, AWSSecretBackendConfig) - Constructor for class com.atlassian.secrets.service.aws.AWSSecretBackend
- AWSSecretBackend(String, AWSSecretBackendConfig, SecretsManagerClientFactory) - Constructor for class com.atlassian.secrets.service.aws.AWSSecretBackend
- AWSSecretBackendConfig - Class in com.atlassian.secrets.service.aws
- AWSSecretBackendConfig(String, String, String) - Constructor for class com.atlassian.secrets.service.aws.AWSSecretBackendConfig
B
- BackendConfig - Class in com.atlassian.secrets.service.config
- BackendConfig(String, Map<String, Object>) - Constructor for class com.atlassian.secrets.service.config.BackendConfig
- backendId - Variable in class com.atlassian.secrets.service.aes.AESEncryptionBackend
- build() - Method in class com.atlassian.secrets.service.SecretServiceParams.SecretServiceParamsBuilder
- builder() - Static method in class com.atlassian.secrets.service.SecretServiceParams
C
- CBORFormat - Class in com.atlassian.secrets.service
- CBORFormat() - Constructor for class com.atlassian.secrets.service.CBORFormat
- close() - Method in interface com.atlassian.secrets.service.dao.Underlock.LockedFile
-
Releases the lock and updates the locked file with the changes staged through
Underlock.LockedFile.edit(com.atlassian.secrets.service.dao.IoBiConsumer<? super java.io.BufferedReader, ? super java.io.Writer>, boolean),Underlock.LockedFile.editRaw(com.atlassian.secrets.service.dao.IoBiConsumer<? super java.io.InputStream, ? super java.io.OutputStream>, boolean)orUnderlock.LockedFile.write(java.nio.channels.ReadableByteChannel)(unless they have beenrolled back). - com.atlassian.secrets.service - package com.atlassian.secrets.service
- com.atlassian.secrets.service.aes - package com.atlassian.secrets.service.aes
- com.atlassian.secrets.service.aws - package com.atlassian.secrets.service.aws
- com.atlassian.secrets.service.config - package com.atlassian.secrets.service.config
- com.atlassian.secrets.service.dao - package com.atlassian.secrets.service.dao
- com.atlassian.secrets.service.file - package com.atlassian.secrets.service.file
- com.atlassian.secrets.service.utils - package com.atlassian.secrets.service.utils
- com.atlassian.secrets.service.vault - package com.atlassian.secrets.service.vault
D
- DEFAULT_FILE_WRITER - Static variable in class com.atlassian.secrets.service.SecretServiceParams
- DefaultSecretService - Class in com.atlassian.secrets.service
-
The default
SecretServicewhich supports multiple routing between multipleSecretServiceBackendobjects based on the secret identifier. - DefaultSecretService(SecretDao, Map<String, SecretServiceBackend>, String) - Constructor for class com.atlassian.secrets.service.DefaultSecretService
- delete(String) - Method in class com.atlassian.secrets.service.aes.AESEncryptionBackend
- delete(String) - Method in class com.atlassian.secrets.service.aws.AWSSecretBackend
- delete(String) - Method in class com.atlassian.secrets.service.dao.FileSecretDao
- delete(String) - Method in class com.atlassian.secrets.service.dao.MultiFileSecretDao
- delete(String) - Method in class com.atlassian.secrets.service.DefaultSecretService
- delete(String) - Method in class com.atlassian.secrets.service.DisabledSecretService
- delete(String) - Method in class com.atlassian.secrets.service.vault.VaultSecretBackend
- DisabledSecretService - Class in com.atlassian.secrets.service
-
An implementation of the
SecretServiceinterface that represents a disabled secret service. - DisabledSecretService() - Constructor for class com.atlassian.secrets.service.DisabledSecretService
E
- edit(IoBiConsumer<? super BufferedReader, ? super Writer>, boolean) - Method in class com.atlassian.secrets.service.dao.Underlock
-
Edits the file, complete with locking to prevent concurrent edits by other cluster nodes or
gitprocesses. - edit(IoBiConsumer<? super BufferedReader, ? super Writer>, boolean) - Method in interface com.atlassian.secrets.service.dao.Underlock.LockedFile
-
Edits the file, under lock, to prevent concurrent edits by other threads or processes.
- editRaw(IoBiConsumer<? super InputStream, ? super OutputStream>, boolean) - Method in class com.atlassian.secrets.service.dao.Underlock
-
Edits the file, complete with locking to prevent concurrent edits by other cluster nodes or
gitprocesses. - editRaw(IoBiConsumer<? super InputStream, ? super OutputStream>, boolean) - Method in interface com.atlassian.secrets.service.dao.Underlock.LockedFile
-
Edits the file, under lock, to prevent concurrent edits by other threads or processes.
- EncryptionBasedSecret - Class in com.atlassian.secrets.service
- EncryptionBasedSecret(String, String, String, byte[], byte[], byte[]) - Constructor for class com.atlassian.secrets.service.EncryptionBasedSecret
- equals(Object) - Method in class com.atlassian.secrets.service.EncryptionBasedSecret
- equals(Object) - Method in class com.atlassian.secrets.service.IdentifierBasedSecret
F
- FileSecretDao - Class in com.atlassian.secrets.service.dao
-
A
SecretDaoimplementation where all SealedSecret objects are stored in a single file. - FileSecretDao(Path) - Constructor for class com.atlassian.secrets.service.dao.FileSecretDao
- forFile(Path) - Static method in class com.atlassian.secrets.service.dao.Underlock
- forFile(Path, Duration) - Static method in class com.atlassian.secrets.service.dao.Underlock
- fromString(String) - Method in class com.atlassian.secrets.service.CBORFormat
G
- generateDefaultKey(Path) - Method in class com.atlassian.secrets.service.aes.AESKeyGenerator
-
Generates a default key and writes it to the specified directory.
- generateIV() - Static method in class com.atlassian.secrets.service.aes.AESEncryptionBackend
- get() - Static method in class com.atlassian.secrets.service.aes.SecurityProvider
- get(String) - Method in class com.atlassian.secrets.service.dao.FileSecretDao
- get(String) - Method in class com.atlassian.secrets.service.dao.MultiFileSecretDao
- get(String) - Method in class com.atlassian.secrets.service.DefaultSecretService
- get(String) - Method in class com.atlassian.secrets.service.DisabledSecretService
- getAlgorithm() - Method in class com.atlassian.secrets.service.EncryptionBasedSecret
- getBackendId() - Method in class com.atlassian.secrets.service.dao.SecretRecord
- getBackendId() - Method in class com.atlassian.secrets.service.EncryptionBasedSecret
- getBackendId() - Method in class com.atlassian.secrets.service.IdentifierBasedSecret
- getBackendIds() - Method in class com.atlassian.secrets.service.DefaultSecretService
- getBackends() - Method in class com.atlassian.secrets.service.config.SecretServiceConfig
- getConfiguration() - Method in class com.atlassian.secrets.service.DefaultSecretService
- getConfiguration() - Method in class com.atlassian.secrets.service.DisabledSecretService
- getDefaultBackend() - Method in class com.atlassian.secrets.service.config.SecretServiceConfig
- getEncryptedData() - Method in class com.atlassian.secrets.service.EncryptionBasedSecret
- getEndpointOverride() - Method in class com.atlassian.secrets.service.aws.AWSSecretBackendConfig
- getFileWriter() - Method in class com.atlassian.secrets.service.SecretServiceParams
- getIdentifier() - Method in class com.atlassian.secrets.service.dao.SecretRecord
- getIdentifier() - Method in class com.atlassian.secrets.service.EncryptionBasedSecret
- getIdentifier() - Method in class com.atlassian.secrets.service.IdentifierBasedSecret
- getIdsForBackend(String) - Method in class com.atlassian.secrets.service.dao.FileSecretDao
- getIdsForBackend(String) - Method in class com.atlassian.secrets.service.dao.MultiFileSecretDao
- getIv() - Method in class com.atlassian.secrets.service.EncryptionBasedSecret
- getKey() - Method in class com.atlassian.secrets.service.aes.AESConfig
- getKeyAsString() - Method in class com.atlassian.secrets.service.aes.AESConfig
-
By default, Jackson will serialize Path objects as file strings with the file:// prefix.
- getKeyDirectory() - Method in class com.atlassian.secrets.service.SecretServiceParams
- getKeyHash() - Method in class com.atlassian.secrets.service.EncryptionBasedSecret
- getProperties() - Method in class com.atlassian.secrets.service.config.BackendConfig
- getRegion() - Method in class com.atlassian.secrets.service.aws.AWSSecretBackendConfig
- getSecret() - Method in class com.atlassian.secrets.service.dao.SecretRecord
- getSecretDao() - Method in class com.atlassian.secrets.service.SecretServiceParams
- getSecretNamePrefix() - Method in class com.atlassian.secrets.service.aws.AWSSecretBackendConfig
- getSecretsConfigFile() - Method in class com.atlassian.secrets.service.SecretServiceParams
- getSecretService(SecretServiceParams) - Static method in class com.atlassian.secrets.service.SecretServiceFactory
-
This function will read the configuration file (defaults to secrets-config.yaml) from the home directory and return a SecretService instance that is capable of routing requests to the appropriate backend.
- getStringRegion() - Method in class com.atlassian.secrets.service.aws.AWSSecretBackendConfig
- getType() - Method in class com.atlassian.secrets.service.aes.AESEncryptionBackend
- getType() - Method in class com.atlassian.secrets.service.aws.AWSSecretBackend
- getType() - Method in class com.atlassian.secrets.service.config.BackendConfig
- getType() - Method in class com.atlassian.secrets.service.vault.VaultSecretBackend
- getUUIDFilenameEntropy() - Static method in class com.atlassian.secrets.service.aes.AESKeyGenerator
-
Generates a random UUID string for entropy.
H
- hashCode() - Method in class com.atlassian.secrets.service.EncryptionBasedSecret
- hashCode() - Method in class com.atlassian.secrets.service.IdentifierBasedSecret
I
- IdentifierBasedSecret - Class in com.atlassian.secrets.service
- IdentifierBasedSecret(String, String) - Constructor for class com.atlassian.secrets.service.IdentifierBasedSecret
- IoBiConsumer<T,
U> - Interface in com.atlassian.secrets.service.dao - isWindows() - Static method in class com.atlassian.secrets.service.utils.OSUtils
-
Check if the current OS is Windows.
- IV_LENGTH - Static variable in class com.atlassian.secrets.service.aes.AESEncryptionBackend
L
- lock() - Method in class com.atlassian.secrets.service.dao.Underlock
-
Acquires a lock on the file, returning a
Underlock.LockedFilethat can be used to release the lock. - LOCK_TIMEOUT_DEFAULT_IN_MS - Static variable in class com.atlassian.secrets.service.SecretServiceFactory
- LOCK_TIMEOUT_SYS_PROP - Static variable in class com.atlassian.secrets.service.SecretServiceFactory
- lockIndefinitely(String) - Method in class com.atlassian.secrets.service.dao.Underlock
-
Checks whether the lock is currently held, and if not, creates the lock file with the provided
contentas the file content.
M
- MAX_AES_KEY_SIZE - Static variable in class com.atlassian.secrets.service.aes.AESEncryptionBackend
- migrate(String, String) - Method in class com.atlassian.secrets.service.DefaultSecretService
- MultiFileSecretDao - Class in com.atlassian.secrets.service.dao
-
A
SecretDaoimplementation where each SealedSecret is stored as an individual file within a base directory. - MultiFileSecretDao(Path) - Constructor for class com.atlassian.secrets.service.dao.MultiFileSecretDao
- MultiFileSecretDao(Path, FileWriter) - Constructor for class com.atlassian.secrets.service.dao.MultiFileSecretDao
O
- OSUtils - Class in com.atlassian.secrets.service.utils
-
Utility class for OS related operations.
- OSUtils() - Constructor for class com.atlassian.secrets.service.utils.OSUtils
P
- put(String, String) - Method in class com.atlassian.secrets.service.DefaultSecretService
- put(String, String) - Method in class com.atlassian.secrets.service.DisabledSecretService
- put(Set<SealedSecret>) - Method in class com.atlassian.secrets.service.dao.FileSecretDao
- put(Set<SealedSecret>) - Method in class com.atlassian.secrets.service.dao.MultiFileSecretDao
R
- releaseIfNotHeld() - Method in class com.atlassian.secrets.service.dao.Underlock
-
Releases a
previously acquired lock, including stale lock files, or locks that were created throughUnderlock.lockIndefinitely(String). - releaseIfNotHeld(Runnable) - Method in class com.atlassian.secrets.service.dao.Underlock
-
Releases a
previously acquired lock, including stale lock files, or locks that were created throughUnderlock.lockIndefinitely(String). - rollBack() - Method in interface com.atlassian.secrets.service.dao.Underlock.LockedFile
-
Rolls back any changes to the file content staged through
Underlock.LockedFile.edit(IoBiConsumer, boolean),Underlock.LockedFile.editRaw(IoBiConsumer, boolean)orUnderlock.LockedFile.write(ReadableByteChannel)
S
- seal(String, String) - Method in class com.atlassian.secrets.service.aes.AESEncryptionBackend
- seal(String, String) - Method in class com.atlassian.secrets.service.aws.AWSSecretBackend
- seal(String, String) - Method in class com.atlassian.secrets.service.vault.VaultSecretBackend
-
Seals a secret in HashiCorp Vault.
- SECRET_DIRECTORY_NAME - Static variable in class com.atlassian.secrets.service.dao.MultiFileSecretDao
- SECRET_KEY - Static variable in class com.atlassian.secrets.service.vault.VaultSecretBackend
- SECRET_KEY_DIR - Static variable in class com.atlassian.secrets.service.SecretServiceParams
- SecretConfigManager - Class in com.atlassian.secrets.service
- SecretRecord - Class in com.atlassian.secrets.service.dao
- SecretRecord(String, String, String) - Constructor for class com.atlassian.secrets.service.dao.SecretRecord
- SECRETS_CONFIG_FILE_NAME - Static variable in class com.atlassian.secrets.service.SecretServiceParams
- SECRETS_CONFIG_LOCK_FILE_NAME - Static variable in class com.atlassian.secrets.service.SecretServiceFactory
- SecretServiceConfig - Class in com.atlassian.secrets.service.config
-
This class represents the configuration of the Secret Service.
- SecretServiceConfig(String, Map<String, BackendConfig>) - Constructor for class com.atlassian.secrets.service.config.SecretServiceConfig
- SecretServiceFactory - Class in com.atlassian.secrets.service
- SecretServiceParams - Class in com.atlassian.secrets.service
-
This class represents the parameters required for the secret service.
- SecretServiceParams.SecretServiceParamsBuilder - Class in com.atlassian.secrets.service
- SecretServiceParamsBuilder() - Constructor for class com.atlassian.secrets.service.SecretServiceParams.SecretServiceParamsBuilder
- SecurityProvider - Class in com.atlassian.secrets.service.aes
-
This class provides a security provider for the AES secret service.
- setFileWriter(FileWriter) - Method in class com.atlassian.secrets.service.SecretServiceParams.SecretServiceParamsBuilder
- setHomeDirectory(Path) - Method in class com.atlassian.secrets.service.SecretServiceParams.SecretServiceParamsBuilder
-
Set the secretConfigFile and keyDirectory relative to the homeDirectory.
- setKeysDirectory(Path) - Method in class com.atlassian.secrets.service.SecretServiceParams.SecretServiceParamsBuilder
-
Set the keyDirectory explicitly.
- setSecretDao(SecretDao) - Method in class com.atlassian.secrets.service.SecretServiceParams.SecretServiceParamsBuilder
-
Set the
SecretDaoto be used to maintain an inventory ofSealedSecret - setSecretsConfigFile(Path) - Method in class com.atlassian.secrets.service.SecretServiceParams.SecretServiceParamsBuilder
-
Set the secretConfigFile explicitly.
T
- TAG_LENGTH - Static variable in class com.atlassian.secrets.service.aes.AESEncryptionBackend
- toString() - Method in class com.atlassian.secrets.service.EncryptionBasedSecret
- toString() - Method in class com.atlassian.secrets.service.IdentifierBasedSecret
- toString(SealedSecretFormat.SecretType, SealedSecret) - Method in class com.atlassian.secrets.service.CBORFormat
U
- Underlock - Class in com.atlassian.secrets.service.dao
-
Utility class used to edit a file, complete with locking to prevent concurrent edits by other cluster nodes or
gitprocesses. - Underlock.LockedFile - Interface in com.atlassian.secrets.service.dao
- UnderlockFileWriter - Class in com.atlassian.secrets.service.file
- UnderlockFileWriter() - Constructor for class com.atlassian.secrets.service.file.UnderlockFileWriter
- unseal(SealedSecret) - Method in class com.atlassian.secrets.service.aes.AESEncryptionBackend
- unseal(SealedSecret) - Method in class com.atlassian.secrets.service.aws.AWSSecretBackend
- unseal(SealedSecret) - Method in class com.atlassian.secrets.service.vault.VaultSecretBackend
-
Unseals a secret from HashiCorp Vault.
V
- VaultSecretBackend - Class in com.atlassian.secrets.service.vault
-
This class is an implementation of
SecretServiceBackendfor interacting with HashiCorp Vault. - VaultSecretBackend(String, VaultConfig) - Constructor for class com.atlassian.secrets.service.vault.VaultSecretBackend
-
Constructs a new VaultSecretService with the provided configuration.
- VaultSecretBackend(String, VaultConfig, VaultTemplateFactory, VaultAuthenticationProvider) - Constructor for class com.atlassian.secrets.service.vault.VaultSecretBackend
-
Constructs a new VaultSecretService with the provided configuration, template factory, and authentication provider.
W
- withResolvedKey(Path) - Method in class com.atlassian.secrets.service.aes.AESConfig
- write(FileWriteRequest) - Method in class com.atlassian.secrets.service.file.AtomicFileWriter
- write(FileWriteRequest) - Method in class com.atlassian.secrets.service.file.UnderlockFileWriter
- write(ReadableByteChannel) - Method in interface com.atlassian.secrets.service.dao.Underlock.LockedFile
-
Acquires a lock on the file, and then writes the contents of the provided
ReadableByteChannelto it. - write(ReadableByteChannel) - Method in class com.atlassian.secrets.service.dao.Underlock
-
Acquires a lock on the file, and then writes the contents of the provided
ReadableByteChannelto it.
All Classes and Interfaces|All Packages|Constant Field Values