SecretsClient

class oci.secrets.SecretsClient(config, **kwargs)

API for retrieving secrets from vaults.

Methods

__init__(config, **kwargs) Creates a new service client
get_secret_bundle(secret_id, **kwargs) Gets a secret bundle that matches either the specified stage, label, or versionNumber parameter.
list_secret_bundle_versions(secret_id, **kwargs) Lists all secret bundle versions for the specified secret.
__init__(config, **kwargs)

Creates a new service client

Parameters:
  • config (dict) – Configuration keys and values as per SDK and Tool Configuration. The from_file() method can be used to load configuration from a file. Alternatively, a dict can be passed. You can validate_config the dict using validate_config()
  • service_endpoint (str) – (optional) The endpoint of the service to call using this client. For example https://iaas.us-ashburn-1.oraclecloud.com. If this keyword argument is not provided then it will be derived using the region in the config parameter. You should only provide this keyword argument if you have an explicit need to specify a service endpoint.
  • timeout (float or tuple(float, float)) – (optional) The connection and read timeouts for the client. The default values are connection timeout 10 seconds and read timeout 60 seconds. This keyword argument can be provided as a single float, in which case the value provided is used for both the read and connection timeouts, or as a tuple of two floats. If a tuple is provided then the first value is used as the connection timeout and the second value as the read timeout.
  • signer (AbstractBaseSigner) –

    (optional) The signer to use when signing requests made by the service client. The default is to use a Signer based on the values provided in the config parameter.

    One use case for this parameter is for Instance Principals authentication by passing an instance of InstancePrincipalsSecurityTokenSigner as the value for this keyword argument

  • retry_strategy (obj) –

    (optional) A retry strategy to apply to all calls made by this service client (i.e. at the client level). There is no retry strategy applied by default. Retry strategies can also be applied at the operation level by passing a retry_strategy keyword argument as part of calling the operation. Any value provided at the operation level will override whatever is specified at the client level.

    This should be one of the strategies available in the retry module. A convenience DEFAULT_RETRY_STRATEGY is also available. The specifics of the default retry strategy are described here.

get_secret_bundle(secret_id, **kwargs)

Gets a secret bundle that matches either the specified stage, label, or versionNumber parameter. If none of these parameters are provided, the bundle for the secret version marked as CURRENT will be returned.

Parameters:
  • secret_id (str) – (required) The OCID of the secret.
  • opc_request_id (str) – (optional) Unique identifier for the request.
  • version_number (int) – (optional) The version number of the secret.
  • secret_version_name (str) – (optional) The name of the secret. (This might be referred to as the name of the secret version. Names are unique across the different versions of a secret.)
  • stage (str) –

    (optional) The rotation state of the secret version.

    Allowed values are: “CURRENT”, “PENDING”, “LATEST”, “PREVIOUS”, “DEPRECATED”

  • retry_strategy (obj) –

    (optional) A retry strategy to apply to this specific operation/call. This will override any retry strategy set at the client-level.

    This should be one of the strategies available in the retry module. A convenience DEFAULT_RETRY_STRATEGY is also available. The specifics of the default retry strategy are described here.

    To have this operation explicitly not perform any retries, pass an instance of NoneRetryStrategy.

Returns:

A Response object with data of type SecretBundle

Return type:

Response

list_secret_bundle_versions(secret_id, **kwargs)

Lists all secret bundle versions for the specified secret.

Parameters:
  • secret_id (str) – (required) The OCID of the secret.
  • opc_request_id (str) – (optional) Unique identifier for the request.
  • limit (int) –

    (optional) The maximum number of items to return in a paginated “List” call. For information about pagination, see List Pagination.

  • page (str) –

    (optional) The value of the opc-next-page response header from the previous “List” call. For information about pagination, see List Pagination.

  • sort_by (str) –

    (optional) The field to sort by. You can specify only one sort order. The default order for VERSION_NUMBER is ascending.

    Allowed values are: “VERSION_NUMBER”

  • sort_order (str) –

    (optional) The sort order to use, either ascending (ASC) or descending (DESC).

    Allowed values are: “ASC”, “DESC”

  • retry_strategy (obj) –

    (optional) A retry strategy to apply to this specific operation/call. This will override any retry strategy set at the client-level.

    This should be one of the strategies available in the retry module. A convenience DEFAULT_RETRY_STRATEGY is also available. The specifics of the default retry strategy are described here.

    To have this operation explicitly not perform any retries, pass an instance of NoneRetryStrategy.

Returns:

A Response object with data of type list of SecretBundleVersionSummary

Return type:

Response