features

func BaseCredentialsMutation ¶

func BaseCredentialsMutation(version string) secret.Mutation

BaseCredentialsMutation writes the application's core credentials into the Secret. It is always enabled.

NOTE: Real controllers must never hard-code credentials. Source them from external secret stores, environment variables, or operator CR fields.

func MetricsTokenMutation ¶

func MetricsTokenMutation(version string, enableMetrics bool) secret.Mutation

MetricsTokenMutation adds a Prometheus remote-write auth token to the Secret. It is enabled when enableMetrics is true.

func TracingTokenMutation ¶

func TracingTokenMutation(version string, enableTracing bool) secret.Mutation

TracingTokenMutation adds an OpenTelemetry tracing auth token to the Secret. It is enabled when enableTracing is true.

func VersionLabelMutation ¶

func VersionLabelMutation(version string) secret.Mutation

VersionLabelMutation sets the app.kubernetes.io/version label on the Secret. It is always enabled.