secrets

package
v0.1.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: May 10, 2026 License: MIT Imports: 6 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type Resolver

type Resolver struct {
	// contains filtered or unexported fields
}

Resolver resolves secrets using a priority chain: env var → setec → literal value.

func NewResolver

func NewResolver(secrets map[string]string, envPrefix string) *Resolver

NewResolver creates a new secret resolver. secrets maps logical key names to either setec secret names or literal values. envPrefix is used for environment variable lookups (e.g. "MYAPP" checks MYAPP_<KEY>).

func (*Resolver) InitSetecStore

func (r *Resolver) InitSetecStore(ctx context.Context, httpClient *http.Client, serverURL string) error

InitSetecStore initializes the setec secret store. Must be called after tsnet is running (setec authenticates via Tailscale identity).

func (*Resolver) ResolveSecret

func (r *Resolver) ResolveSecret(key string) (string, error)

ResolveSecret resolves a secret by key using the priority chain: 1. Environment variable <PREFIX>_<UPPER_KEY> (dashes replaced with underscores) 2. setec store (if configured) 3. Literal value from config

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL