credential

type Broker ¶

type Broker interface {
	Resolve(ctx context.Context, ref string, scope string) (Data, error)
}

Broker resolves opaque credential references into usable secret material. Implementations must never leak secret values through returned errors.

type Class ¶ added in v0.4.21

type Class string

Class is the normative BaseHarbor credential ownership class.

const (
	ClassHumanManagement    Class = "human-management"
	ClassApplicationService Class = "application-service"
	ClassInternalMachine    Class = "internal-machine"
)

func ParseClass(value string) (Class, error)

func (c Class) IsMachineIdentity() bool

func (c Class) Shareable() bool

type Data ¶

type Data struct {
	Payload map[string][]byte `json:"-"`
	Expires *time.Time        `json:"-"`
}

Data contains resolved secret material for a single operation. Payload and expiry metadata are deliberately excluded from JSON output.

type FilePreparedMaterialStore ¶ added in v0.4.21

type FilePreparedMaterialStore struct {
	Dir string
}

func (s FilePreparedMaterialStore) Clear(key string) error

func (s FilePreparedMaterialStore) Load(key string) ([]byte, error)

func (s FilePreparedMaterialStore) Save(key string, material []byte) error

type FileRotationJournal ¶ added in v0.4.21

type FileRotationJournal struct {
	Path string
}

func (j FileRotationJournal) Clear(key string) error

func (j FileRotationJournal) Load(key string) (RotationPhase, error)

func (j FileRotationJournal) Save(key string, phase RotationPhase) error

type NoopBroker ¶

type NoopBroker struct{}

NoopBroker is the safe default when no secret backend is configured.

func (NoopBroker) Resolve(_ context.Context, ref string, _ string) (Data, error)

type PreparedMaterialStore ¶ added in v0.4.21

type PreparedMaterialStore interface {
	Load(key string) ([]byte, error)
	Save(key string, material []byte) error
	Clear(key string) error
}

type Rotation ¶ added in v0.4.21

type Rotation struct {
	Prepare   func(context.Context) error
	Reconcile func(context.Context) error
	Verify    func(context.Context) error
	Retire    func(context.Context) error
	Rollback  func(context.Context) error
	Journal   RotationJournal
	Prepared  PreparedMaterialStore
	Key       string
}

Rotation performs one non-HA credential/material replacement.

Prepare must make new material usable without retiring the old path. Reconcile moves the managed consumer to the new material. Verify proves readiness/authentication with the new material. Retire runs only after successful verification.

func (r Rotation) Run(ctx context.Context) error

type RotationJournal ¶ added in v0.4.21

type RotationJournal interface {
	Load(key string) (RotationPhase, error)
	Save(key string, phase RotationPhase) error
	Clear(key string) error
}

type RotationPhase ¶ added in v0.4.21

type RotationPhase string

const (
	RotationPrepared   RotationPhase = "PREPARED"
	RotationReconciled RotationPhase = "RECONCILED"
	RotationVerified   RotationPhase = "VERIFIED"
	RotationRetired    RotationPhase = "RETIRED"
)