Documentation
¶
Overview ¶
Package secrets provides a HashiCorp Vault-backed implementation of config.SecretProvider. It authenticates once at startup (token, Kubernetes, or AppRole) and reads static secrets from KV / generic engines.
Scope note: secrets are fetched once and the client is then discarded — there is no background lease renewal. This is correct for static KV values (API keys, a database password). Dynamic/leased secrets (e.g. a "raw" reference to database/creds/<role>) are reachable but their short-lived credentials are NOT renewed here; renewing them would need a lease watcher and reconnect logic, which is intentionally out of scope.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Provider ¶
type Provider struct {
// contains filtered or unexported fields
}
Provider reads secrets from Vault. It implements config.SecretProvider.
Source Files