cdk

Overview ¶

Package cdk is the multi-backend object-store adapter (spec 0040): one implementation over gocloud.dev/blob, which speaks S3, Google Cloud Storage, Azure Blob, the local filesystem and memory through a single portable API.

This is the "don't maintain our own per-cloud adapters" half of 0040. It is possible only because keryx stores blobs CONTENT-ADDRESSED (blobs/<sha256>): gocloud's portable API deliberately exposes no object versioning, and keryx no longer needs any — the sha256 is the content identity, and human version numbers live in the git-tracked ledger (media.log), not the store.

Credentials are never read from keryx config: each driver resolves them from its own environment chain (AWS default chain, Google Application Default Credentials, Azure default credential), exactly as CI federated identity expects.