Documentation
¶
Overview ¶
Package gcloud wires the Google Cloud Secret Manager adapter into a provider.Factory / provider.Registry. It builds a Secret Manager client from Application Default Credentials and hands it to the secret subpackage.
Google Cloud offers no parameter store, so the factory returns provider.ErrUnsupportedKind for KindParam.
Index ¶
Constants ¶
const EmulatorEnvVar = "SUVE_GCLOUD_SECRETMANAGER_ENDPOINT"
EmulatorEnvVar is the environment variable that, when set (e.g. to "localhost:9090"), points the Secret Manager client at a local emulator over plaintext gRPC with no authentication. It is a testing seam only: in normal use it is unset and the client uses Application Default Credentials over TLS. Never set this in production.
Variables ¶
This section is empty.
Functions ¶
func NewRegistry ¶
NewRegistry returns a provider.Registry with the Google Cloud provider registered.
Types ¶
type Factory ¶
type Factory struct{}
Factory builds Google Cloud-backed provider.Store values for a scope + kind.
func (Factory) Store ¶
func (Factory) Store(ctx context.Context, scope provider.Scope, kind provider.Kind) (provider.Store, error)
Store builds a Store for the given scope and kind. Google Cloud supports only KindSecret; KindParam yields provider.ErrUnsupportedKind. The Secret Manager client authenticates via Application Default Credentials.
Source Files
Directories