secret

package

v0.1.61 Latest Latest Go to latest Published: Oct 20, 2026 License: Apache-2.0 Imports: 14 Imported by: 0

Details

This section is empty.

View Source

var (
	// KMSConnection is the connection to the key management service
	// that's used to encrypt and decrypt secrets.
	KMSConnection string
)

func InvalidateKeeper()

InvalidateKeeper drops the cached keeper so a KMSConnection change takes effect immediately instead of after the cache TTL.

func KeeperFromConnection(ctx context.Context, connectionString string) (*secrets.Keeper, error)

type Ciphertext []byte

func Encrypt(ctx context.Context, sensitive Sensitive) (Ciphertext, error)

func ParseCiphertext(s string) (Ciphertext, error)

func (t Ciphertext) MarshalJSON() ([]byte, error)

func (t Ciphertext) MarshalText() ([]byte, error)

func (t Ciphertext) String() string

type Sensitive []byte

func Decrypt(ctx context.Context, ciphertext Ciphertext) (Sensitive, error)

func (t *Sensitive) Clear()

func (t Sensitive) MarshalJSON() ([]byte, error)

func (t Sensitive) MarshalText() ([]byte, error)

func (t Sensitive) PlainText() string

func (t Sensitive) String() string