Proxy endpoint certificate secrets through EndpointCertificateSecretStore

1 files changed, 25 insertions, 0 deletions

diff --git a/config-model-api/src/main/java/com/yahoo/config/model/api/EndpointCertificateSecretStore.java b/config-model-api/src/main/java/com/yahoo/config/model/api/EndpointCertificateSecretStore.java
new file mode 100644
index 00000000000..78be1942db7
--- /dev/null
+++ b/config-model-api/src/main/java/com/yahoo/config/model/api/EndpointCertificateSecretStore.java
@@ -0,0 +1,25 @@
+// Copyright Vespa.ai. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.
+
+package com.yahoo.config.model.api;
+
+import java.util.List;
+import java.util.Optional;
+
+public abstract class EndpointCertificateSecretStore {
+
+    public final EndpointCertificateSecrets getSecret(EndpointCertificateMetadata metadata) {
+        Optional<String> certificate = getCertificate(metadata);
+        Optional<String> key = getPrivateKey(metadata);
+        if (certificate.isPresent() && key.isPresent()) {
+            return new EndpointCertificateSecrets(certificate.get(), key.get(), metadata.version());
+        } else {
+            return EndpointCertificateSecrets.missing(metadata.version());
+        }
+    }
+
+    public abstract Optional<String> getPrivateKey(EndpointCertificateMetadata metadata);
+    public abstract Optional<String> getCertificate(EndpointCertificateMetadata metadata);
+
+    public abstract boolean supports(EndpointCertificateMetadata.Provider provider);
+
+}