Documentation
¶
Index ¶
- type BoundRuntimeService
- func (s *BoundRuntimeService) CreateDynamic(ctx context.Context, name string, value []byte) (Reference, error)
- func (s *BoundRuntimeService) DeleteDynamic(ctx context.Context, name string, ref Reference) error
- func (s *BoundRuntimeService) ReadDynamic(ctx context.Context, name string, ref Reference) ([]byte, error)
- func (s *BoundRuntimeService) RotateDynamic(ctx context.Context, name string, ref Reference, value []byte) error
- type Metadata
- type Reference
- type Service
- func (s *Service) CreateDynamic(ctx context.Context, name string, value []byte) (Reference, error)
- func (s *Service) Delete(ctx context.Context, name, key string) error
- func (s *Service) DeleteDynamic(ctx context.Context, name string, ref Reference) error
- func (s *Service) Get(ctx context.Context, name, key string) ([]byte, error)
- func (s *Service) GetMany(ctx context.Context, name string, keys []string) (map[string][]byte, error)
- func (s *Service) List(ctx context.Context, name string) ([]Metadata, error)
- func (s *Service) ReadDynamic(ctx context.Context, name string, ref Reference) ([]byte, error)
- func (s *Service) RotateDynamic(ctx context.Context, name string, ref Reference, value []byte) error
- func (s *Service) Set(ctx context.Context, name, key string, value []byte) error
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type BoundRuntimeService ¶
type BoundRuntimeService struct {
// contains filtered or unexported fields
}
BoundRuntimeService is the least-privilege secret service used inside one per-application broker. It has no application store and cannot resolve or cross into another application's identity or state.
func NewBoundRuntimeService ¶
func NewBoundRuntimeService(app, environment, credentialsPath string, client *openbao.ApplicationRuntimeClient) (*BoundRuntimeService, error)
func (*BoundRuntimeService) CreateDynamic ¶
func (*BoundRuntimeService) DeleteDynamic ¶
func (*BoundRuntimeService) ReadDynamic ¶
func (*BoundRuntimeService) RotateDynamic ¶
type Reference ¶
type Reference string
Reference is a stable opaque handle applications may persist instead of a secret value. It intentionally exposes no provider path, tenant, app or environment details.
type Service ¶
type Service struct {
// contains filtered or unexported fields
}
func New ¶
func New(store application.Store) *Service
func NewRuntime ¶
func NewRuntime(store application.Store, client *openbao.ApplicationRuntimeClient) *Service
NewRuntime creates the narrow data-plane service used by the managed runtime API. Dynamic secret operations use the application's own OpenBao AppRole over the internal network and do not require Docker/Podman control or manager credentials.
func (*Service) CreateDynamic ¶
func (*Service) DeleteDynamic ¶
func (*Service) ReadDynamic ¶
func (*Service) RotateDynamic ¶
Click to show internal directories.
Click to hide internal directories.