secrets.go RawHistoryFolder

1package out
2
3import "context"
4
5// SecretProvider defines the contract for retrieving secrets.
6type SecretProvider interface {
7	// Name returns the provider name (e.g., "pass", "sops").
8	Name() string
9
10	// GetSecret retrieves a secret by key.
11	GetSecret(ctx context.Context, key string) (string, error)
12
13	// IsAvailable checks if this provider is available in the current environment.
14	IsAvailable() bool
15}
16
17// SecretWriter defines the contract for writing app secret values by path.
18// v3 app secrets live in pass at gordon/apps/<app>/<service>/<name>;
19// values cross this boundary only on the explicit SetSecrets path.
20type SecretWriter interface {
21	// SetSecret writes one secret value by path.
22	SetSecret(ctx context.Context, path, value string) error
23
24	// DeleteSecret removes one secret value by path.
25	DeleteSecret(ctx context.Context, path string) error
26}