Documentation
¶
Index ¶
- func ConfigDir() string
- func EnsureStoredSecret(name string) (string, error)
- func ProfilesPath() string
- func ResolveSecretRef(ref string) (string, error)
- func ResolveTarget(target string) (endpoint, workspace, device, secretRef string, err error)
- func Save(cfg *ProfilesConfig) error
- func SecretsPath() string
- func SetStoredSecret(name, value string) (string, error)
- type AWSStaticCredentials
- type Profile
- type ProfilesConfig
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func EnsureStoredSecret ¶ added in v0.1.6
func ResolveSecretRef ¶
ResolveSecretRef resolves a secret reference to the actual secret value.
func ResolveTarget ¶
ResolveTarget resolves a target string to backend connection parameters. If target matches a profile name, returns that profile's parameters. If target is a URI (contains ://), returns it as-is for endpoint.
func SecretsPath ¶ added in v0.1.6
func SecretsPath() string
func SetStoredSecret ¶ added in v0.1.6
SetStoredSecret stores a specific plaintext value under name in the user-level secret store and returns a stored:// reference. Used by the sync repo compiler to persist a freshly unlocked secret as a device-local reference so the plaintext never enters the generated runtime config. The value never enters project or vault state.
Types ¶
type AWSStaticCredentials ¶ added in v0.2.0
AWSStaticCredentials is the complete static credential set from one AWS shared-credentials profile. Callers must keep values in memory only.
func LoadAWSStaticCredentials ¶ added in v0.2.0
func LoadAWSStaticCredentials(profileName string) (AWSStaticCredentials, error)
LoadAWSStaticCredentials reads one AWS shared-credentials profile without invoking a shell or exposing values in errors.
type Profile ¶
type Profile struct {
Endpoint string `yaml:"endpoint" json:"endpoint"`
Workspace string `yaml:"workspace" json:"workspace,omitempty"`
Device string `yaml:"device" json:"device,omitempty"`
SecretRef string `yaml:"secret_ref,omitempty" json:"secret_ref,omitempty"`
DefaultScope string `yaml:"default_scope,omitempty" json:"default_scope,omitempty"`
}
Profile represents a named backend connection configuration.
Source Files