objectstore

type AzureCredentials struct {
}

type Backend string

type Client struct {
	// contains filtered or unexported fields
}

type Config struct {
	// Identity. Defaults: Name="objectstore", Namespace="gitlab",
	// Subsystem="objectstore".
	Name      string
	Namespace string
	Subsystem string

	// Backend selects which SDK + gocloud opener to use. Required.
	Backend Backend

	// Bucket name (S3/GCS) or container (Azure). Required.
	Bucket string

	// Region (S3 only). Required for AWS S3; informational for
	// S3-compatibles when Endpoint is set.
	Region string

	// Endpoint overrides the backend's default service URL. Used for
	// S3-compatibles and for GCS emulators / custom GCS endpoints. Empty
	// for AWS S3 and for production GCS.
	Endpoint string

	// PathStyle forces path-style addressing (S3-compatibles).
	PathStyle bool

	// UniverseDomain selects a non-default GCS universe domain (sovereign
	// / Trusted Partner Cloud, e.g. "apis.gov"). Empty uses the default
	// googleapis.com universe.
	UniverseDomain string

	// Per-backend credential structs. Only one is honoured per Backend;
	// the others are ignored. nil = use the SDK's default credential
	// chain (IRSA / Workload Identity / Managed Identity).
	S3Credentials    *S3Credentials
	GCSCredentials   *GCSCredentials
	AzureCredentials *AzureCredentials
}

type GCSCredentials struct {
	// JSON is the raw service-account key JSON. When empty (or
	// GCSCredentials is nil), the GCS SDK falls back to Application
	// Default Credentials (Workload Identity / metadata server /
	// GOOGLE_APPLICATION_CREDENTIALS).
	JSON []byte
}

type Option func(*clientOptions)

type S3Credentials struct {
	AccessKeyID     string
	SecretAccessKey string
	SessionToken    string // optional — STS / temporary credentials
}