Directories
¶
| Path | Synopsis |
|---|---|
|
Package audit provides tamper-evident structured audit logging for every secret read, write, and delete.
|
Package audit provides tamper-evident structured audit logging for every secret read, write, and delete. |
|
Package cache provides a small pluggable cache abstraction for expensive, re-derivable results (discovery output, ListSecrets results).
|
Package cache provides a small pluggable cache abstraction for expensive, re-derivable results (discovery output, ListSecrets results). |
|
Package circuitbreaker provides circuit breaker pattern implementation for external API calls.
|
Package circuitbreaker provides circuit breaker pattern implementation for external API calls. |
|
client
|
|
|
azure
Package azure implements an Azure Key Vault source + sync-target backend.
|
Package azure implements an Azure Key Vault source + sync-target backend. |
|
gcp
Package gcp implements a Google Cloud Secret Manager source + sync-target backend.
|
Package gcp implements a Google Cloud Secret Manager source + sync-target backend. |
|
httpstore
Package httpstore implements a generic HTTP/webhook secret store backend.
|
Package httpstore implements a generic HTTP/webhook secret store backend. |
|
k8s
Package k8s implements a Kubernetes Secrets target backend for secrets-sync.
|
Package k8s implements a Kubernetes Secrets target backend for secrets-sync. |
|
Package condition implements declarative gating for conditional sync: a target can be skipped unless environment, tag, and time-window conditions are all satisfied.
|
Package condition implements declarative gating for conditional sync: a target can be skipped unless environment, tag, and time-window conditions are all satisfied. |
|
Package crypto provides client-side envelope encryption for secrets-sync's merge store, so secret bundles are encrypted before they ever reach the storage backend (zero-knowledge mode).
|
Package crypto provides client-side envelope encryption for secrets-sync's merge store, so secret bundles are encrypted before they ever reach the storage backend (zero-knowledge mode). |
|
Package diff provides change detection and reporting for secrets synchronization.
|
Package diff provides change detection and reporting for secrets synchronization. |
|
discovery
|
|
|
Package lock provides distributed coordination for multi-replica deployments: an S3-backed mutual-exclusion lock (via conditional writes, with lease expiry) and a leader-election loop built on top of it, plus deterministic work partitioning.
|
Package lock provides distributed coordination for multi-replica deployments: an S3-backed mutual-exclusion lock (via conditional writes, with lease expiry) and a leader-election loop built on top of it, plus deterministic work partitioning. |
|
Package observability provides metrics and tracing for production debugging.
|
Package observability provides metrics and tracing for production debugging. |
|
Package pipeline provides automatic detection of available clients and features.
|
Package pipeline provides automatic detection of available clients and features. |
|
Package policy implements declarative allow/deny sync policies (policy as code).
|
Package policy implements declarative allow/deny sync policies (policy as code). |
|
Package serverless holds the provider-agnostic core of the secrets-sync serverless entrypoints.
|
Package serverless holds the provider-agnostic core of the secrets-sync serverless entrypoints. |
|
Package utils provides utility functions for secrets-sync.
|
Package utils provides utility functions for secrets-sync. |
Click to show internal directories.
Click to hide internal directories.