applicationsecret

package

v0.1.0-rc.1 Latest Latest Go to latest Published: Sep 9, 2026 License: Apache-2.0 Imports: 12 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/mcpdev80/baseharbor

Links

Open Source Insights

Documentation ¶

Index ¶

type BoundRuntimeService
- func NewBoundRuntimeService(app, environment, credentialsPath string, ...) (*BoundRuntimeService, error)
type Metadata
type Reference
- func (r Reference) String() string
type Service
- func New(store application.Store) *Service
- func NewRuntime(store application.Store, client *openbao.ApplicationRuntimeClient) *Service

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type BoundRuntimeService ¶

type BoundRuntimeService struct {
	// contains filtered or unexported fields
}

BoundRuntimeService is the least-privilege secret service used inside one per-application broker. It has no application store and cannot resolve or cross into another application's identity or state.

func NewBoundRuntimeService ¶

func NewBoundRuntimeService(app, environment, credentialsPath string, client *openbao.ApplicationRuntimeClient) (*BoundRuntimeService, error)

func (*BoundRuntimeService) CreateDynamic ¶

func (s *BoundRuntimeService) CreateDynamic(ctx context.Context, name string, value []byte) (Reference, error)

func (*BoundRuntimeService) DeleteDynamic ¶

func (s *BoundRuntimeService) DeleteDynamic(ctx context.Context, name string, ref Reference) error

func (*BoundRuntimeService) ReadDynamic ¶

func (s *BoundRuntimeService) ReadDynamic(ctx context.Context, name string, ref Reference) ([]byte, error)

func (*BoundRuntimeService) RotateDynamic ¶

func (s *BoundRuntimeService) RotateDynamic(ctx context.Context, name string, ref Reference, value []byte) error

type Metadata ¶

type Metadata struct {
	Name     string `json:"name"`
	Required bool   `json:"required"`
	Present  bool   `json:"present"`
	Usable   bool   `json:"usable"`
}

type Reference ¶

type Reference string

Reference is a stable opaque handle applications may persist instead of a secret value. It intentionally exposes no provider path, tenant, app or environment details.

func (Reference) String ¶

func (r Reference) String() string

type Service ¶

type Service struct {
	// contains filtered or unexported fields
}

func New ¶

func New(store application.Store) *Service

func NewRuntime ¶

func NewRuntime(store application.Store, client *openbao.ApplicationRuntimeClient) *Service

NewRuntime creates the narrow data-plane service used by the managed runtime API. Dynamic secret operations use the application's own OpenBao AppRole over the internal network and do not require Docker/Podman control or manager credentials.

func (*Service) CreateDynamic ¶

func (s *Service) CreateDynamic(ctx context.Context, name string, value []byte) (Reference, error)

func (*Service) Delete ¶

func (s *Service) Delete(ctx context.Context, name, key string) error

func (*Service) DeleteDynamic ¶

func (s *Service) DeleteDynamic(ctx context.Context, name string, ref Reference) error

func (*Service) Get ¶

func (s *Service) Get(ctx context.Context, name, key string) ([]byte, error)

func (*Service) List ¶

func (s *Service) List(ctx context.Context, name string) ([]Metadata, error)

func (*Service) ReadDynamic ¶

func (s *Service) ReadDynamic(ctx context.Context, name string, ref Reference) ([]byte, error)

func (*Service) RotateDynamic ¶

func (s *Service) RotateDynamic(ctx context.Context, name string, ref Reference, value []byte) error

func (*Service) Set ¶

func (s *Service) Set(ctx context.Context, name, key string, value []byte) error

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL