secrets.go RawHistoryFolder

1package in
2
3import (
4	"context"
5
6	"github.com/bnema/gordon/internal/boundaries/out"
7)
8
9// SecretService defines the contract for managing domain-scoped secrets.
10// These are environment variables stored per-domain for container injection.
11type SecretService interface {
12	// ListKeys returns the list of secret keys for a domain (not values).
13	// Returns an error if the domain is invalid.
14	ListKeys(ctx context.Context, domain string) ([]string, error)
15
16	// ListKeysWithAttachments returns the list of secret keys for a domain
17	// along with any attachment secrets for containers associated with the domain.
18	ListKeysWithAttachments(ctx context.Context, domain string) ([]string, []out.AttachmentSecrets, error)
19
20	// GetAll returns all secrets for a domain as a key-value map.
21	// Returns an error if the domain is invalid.
22	GetAll(ctx context.Context, domain string) (map[string]string, error)
23
24	// Set sets or updates multiple secrets for a domain, merging with existing.
25	// Returns an error if the domain is invalid.
26	Set(ctx context.Context, domain string, secrets map[string]string) error
27
28	// Delete removes a specific secret key from a domain.
29	// Returns an error if the domain is invalid.
30	Delete(ctx context.Context, domain, key string) error
31
32	// SetAttachment sets or updates multiple secrets for an attachment container.
33	// The container name is derived from the domain and service name.
34	SetAttachment(ctx context.Context, domain, service string, secrets map[string]string) error
35
36	// DeleteAttachment removes a specific secret key from an attachment container.
37	// The container name is derived from the domain and service name.
38	DeleteAttachment(ctx context.Context, domain, service, key string) error
39}