Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

secrets

package

Go to main page

Versions in this module

v0

v0.6.0

Oct 30, 2026

Changes in this version

+ const PipelineCredentialsPolicyPath

+ func IsForbidden(err error) bool

+ func IsNotFound(err error) bool

+ func IsPathSegment(s string) bool

+ func PipelineCredentialPrefix(env, orgID, app string) (string, error)

+ type KVBrowser interface

+ GetSecret func(ctx context.Context, path string) (map[string]any, error)

+ ListKeys func(ctx context.Context, path string) ([]string, error)

+ PutSecret func(ctx context.Context, path string, data map[string]any) error

+ type KVDeleter interface

+ DeleteSecret func(ctx context.Context, path string) error

+ ListKeys func(ctx context.Context, path string) ([]string, error)

type OpenBaoStore

+ func (s *OpenBaoStore) DeleteSecret(ctx context.Context, path string) error

+ func (s *OpenBaoStore) GetSecret(ctx context.Context, path string) (map[string]any, error)

+ func (s *OpenBaoStore) ListKeys(ctx context.Context, path string) ([]string, error)

+ func (s *OpenBaoStore) PutSecret(ctx context.Context, path string, data map[string]any) error

type Router

+ func (r *Router) DeleteTreeForStack(ctx context.Context, provider, stackID, prefix string) error

+ type StatusError struct

+ Body string

+ Status int

+ func (e *StatusError) Error() string

v0.5.0

Aug 31, 2026

Changes in this version

+ const ControllerRole

+ const ControllerServiceAccount

+ const DefaultEnv

+ var ErrProviderNotConfigured = errors.New("secret provider not configured")

+ func GitHubAPITokenPath(env, orgID string) string

+ func GitLabAPITokenPath(env, orgID string) string

+ type HealthChecker interface

+ Check func(ctx context.Context) error

+ type KubernetesAuthConfig struct

+ Kubeconfig []byte

+ Namespace string

+ Role string

+ ServiceAccount string

+ ServiceName string

+ ServicePort string

+ type KubernetesTokenProvider struct

+ func NewKubernetesTokenProvider(login func(ctx context.Context) (string, time.Duration, error)) *KubernetesTokenProvider

+ func (p *KubernetesTokenProvider) Token(ctx context.Context) (string, error)

+ type OpenBaoStore struct

+ func NewKubernetesAuthStore(cfg KubernetesAuthConfig) (*OpenBaoStore, error)

+ func NewOpenBaoStore(addr, token string) *OpenBaoStore

+ func NewOpenBaoStoreWithProvider(addr string, provider TokenProvider) *OpenBaoStore

+ func (s *OpenBaoStore) Check(ctx context.Context) error

+ func (s *OpenBaoStore) GetToken(ctx context.Context, path string) (string, error)

+ func (s *OpenBaoStore) PutToken(ctx context.Context, path, value string) error

+ type Resolver interface

+ Resolve func(ctx context.Context, provider, stackID string) (Store, error)

+ type Router struct

+ func NewRouter() *Router

+ func (r *Router) Check(ctx context.Context, provider string) error

+ func (r *Router) CheckForStack(ctx context.Context, provider, stackID string) error

+ func (r *Router) ForStack(ctx context.Context, provider, stackID string) (Store, error)

+ func (r *Router) GetToken(ctx context.Context, provider, path string) (string, error)

+ func (r *Router) GetTokenForStack(ctx context.Context, provider, stackID, path string) (string, error)

+ func (r *Router) Has(provider string) bool

+ func (r *Router) InvalidateStack(stackID string)

+ func (r *Router) PutToken(ctx context.Context, provider, path, value string) error

+ func (r *Router) PutTokenForStack(ctx context.Context, provider, stackID, path, value string) error

+ func (r *Router) Register(provider string, store Store)

+ func (r *Router) WithResolver(resolver Resolver) *Router

+ type StaticTokenProvider struct

+ func NewStaticTokenProvider(token string) *StaticTokenProvider

+ func (p *StaticTokenProvider) Token(context.Context) (string, error)

+ type Store interface

+ GetToken func(ctx context.Context, path string) (string, error)

+ PutToken func(ctx context.Context, path, value string) error

+ type TokenProvider interface

+ Token func(ctx context.Context) (string, error)

v0.4.1

Aug 9, 2026

v0.4.0-alpha

Aug 9, 2026

v0.3.0-alpha

Jul 27, 2026