registrytoken

type ACR struct {
	Client      *http.Client
	FallbackTTL time.Duration
	// LoginBase and ExchangeBase override the AAD and registry URLs, for tests.
	LoginBase    string
	ExchangeBase string
	Now          func() time.Time
}

type ArtifactRegistry struct {
	Client *http.Client
}

type Config struct {
	Region       string `json:"region,omitempty"`
	RegistryHost string `json:"registry_host,omitempty"`
}

type CredentialStore interface {
	ListRegistryCredentials(ctx context.Context) ([]store.RegistryCredential, error)
	GetRegistryCredential(ctx context.Context, id string) (store.RegistryCredential, error)
	RecordRegistryCredentialRefresh(ctx context.Context, id, registryHost, username string, expiresAt, refreshedAt, nextAt *time.Time, errMsg string) error
}

type ECR struct {
	Client *http.Client
	// Endpoint overrides the regional API URL, for tests.
	Endpoint string
	Now      func() time.Time
}

type Minted struct {
	RegistryHost string
	Username     string
	Password     string
	ExpiresAt    time.Time
}

type Minter interface {
	Mint(ctx context.Context, cloudSecret string, cfg Config) (Minted, error)
}

type Refresher struct {
	Store    CredentialStore
	Secrets  SecretStore
	Minters  map[string]Minter
	Settings Settings
	Now      func() time.Time
	Logger   *slog.Logger
	// contains filtered or unexported fields
}

type SecretStore interface {
	SetValue(ctx context.Context, serviceName, envKey, plaintext string) error
	Resolve(ctx context.Context, serviceName, envKey string) (string, error)
}

type Settings struct {
	Lead, Interval, Retry, FallbackTTL time.Duration
}