domain_secrets.go RawHistoryFolder

1package out
2
3// AttachmentSecrets represents secrets for an attachment container.
4type AttachmentSecrets struct {
5	// Service is the attachment service name (e.g., "gitea-postgres")
6	Service string
7	// Keys is the list of secret keys for this attachment
8	Keys []string
9}
10
11// DomainSecretStore defines the contract for managing domain-scoped secrets.
12// These are environment variables stored per-domain for container injection.
13type DomainSecretStore interface {
14	// ListKeys returns the list of secret keys for a domain (not values).
15	ListKeys(domain string) ([]string, error)
16
17	// GetAll returns all secrets for a domain as a key-value map.
18	GetAll(domain string) (map[string]string, error)
19
20	// Set sets or updates multiple secrets for a domain, merging with existing.
21	Set(domain string, secrets map[string]string) error
22
23	// Delete removes a specific secret key from a domain.
24	Delete(domain, key string) error
25
26	// SetAttachment sets or updates multiple secrets for an attachment container.
27	SetAttachment(containerName string, secrets map[string]string) error
28
29	// GetAllAttachment returns all secrets for an attachment container as a key-value map.
30	GetAllAttachment(containerName string) (map[string]string, error)
31
32	// DeleteAttachment removes a specific secret key from an attachment container.
33	DeleteAttachment(containerName, key string) error
34
35	// ListAttachmentKeys finds and returns secret keys for attachment containers
36	// associated with the given domain. Returns a list of AttachmentSecrets, one
37	// for each attachment that has secrets configured.
38	ListAttachmentKeys(domain string) ([]AttachmentSecrets, error)
39}