Documentation
¶
Overview ¶
Package env ships the default credential source: the OAuth provider's client credential is read from the process environment ONCE at boot.
This is the historical behavior, preserved byte-for-byte. An operator config that omits `credential_source` (or sets it to `env`) resolves `client_id_env` / `client_secret_env` at boot and fails loud when either env var is unset — the same message the pre-seam `BuildProviders` emitted. The process environment is fixed at exec, so the resolved credential is immutable for the runtime's life; the source caches it at [source.ValidateAtBoot] and every [source.Resolve] returns the cached value. The env source NEVER performs I/O and emits NO events.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func New ¶
func New(cfg credsource.Config) (credsource.Source, error)
New constructs the `env` source for one provider entry. Registered as the source Factory; `BuildProviders` dispatches by name.
Types ¶
This section is empty.