Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func ContextWithRejectedEnvValue ¶
ContextWithRejectedEnvValue marks a secret lookup with the SHA-256 hex fingerprint of a value its consumer has rejected. An empty fingerprint clears a prior rejection, including one inherited from incoming RPC metadata.
func RegisterEnvRefresher ¶
func RegisterEnvRefresher(r EnvRefresher)
RegisterEnvRefresher installs the hook consulted by envProvider. Passing nil clears it. It is safe to call concurrently.
func RejectedEnvValue ¶
RejectedEnvValue returns the rejected value's fingerprint at either end of a secret RPC. Outgoing metadata takes precedence to allow clearing it.
Types ¶
type EnvRefresher ¶
EnvRefresher is an optional hook, consulted by envProvider before it reads a requested variable from the process environment. It lets a higher layer keep a dynamically-managed env var (e.g. a short-lived OAuth bearer token) fresh: the hook may refresh the credential and update os.Setenv for name before the value is read. It is best-effort unless the consumer has explicitly rejected the old value: a nil hook is ignored, and otherwise failures are logged and recorded on the current span. A rejected value must not mask a refresh error.
This indirection avoids a dependency from this low-level provider package on the CLI's llmconfig package (which owns OAuth refresh); the CLI registers the hook at startup via RegisterEnvRefresher.
type SecretProvider ¶
type SecretProvider struct{}
func NewSecretProvider ¶
func NewSecretProvider() SecretProvider
func (SecretProvider) GetSecret ¶
func (sp SecretProvider) GetSecret(ctx context.Context, req *secrets.GetSecretRequest) (*secrets.GetSecretResponse, error)
func (SecretProvider) Register ¶
func (sp SecretProvider) Register(server *grpc.Server)
type SecretProviderProxy ¶ added in v0.19.7
type SecretProviderProxy struct {
// contains filtered or unexported fields
}
func NewSecretProviderProxy ¶ added in v0.19.7
func NewSecretProviderProxy(client secrets.SecretsClient) SecretProviderProxy
func (SecretProviderProxy) GetSecret ¶ added in v0.19.7
func (sp SecretProviderProxy) GetSecret(ctx context.Context, req *secrets.GetSecretRequest) (*secrets.GetSecretResponse, error)
func (SecretProviderProxy) Register ¶ added in v0.19.7
func (sp SecretProviderProxy) Register(server *grpc.Server)
type SecretResolver ¶
func ResolverForID ¶
func ResolverForID(id string) (SecretResolver, string, error)
Source Files