secret_files.go RawHistoryFolder

1package out
2
3import "context"
4
5// SecretFileSet identifies one container's secret file directory.
6type SecretFileSet struct{ App, Container string }
7
8// SecretFileStore persists per-container secret files on the host. Values
9// cross this boundary in memory only; nothing is logged.
10type SecretFileStore interface {
11	// Write creates the container's directory with one 0444 file per key
12	// and returns key -> absolute host path. It fails when the directory
13	// already exists, so another container's files are never replaced.
14	Write(ctx context.Context, app, container string, values map[string]string) (map[string]string, error)
15	// Read returns one file's content.
16	Read(ctx context.Context, app, container, key string) (string, error)
17	// Remove deletes the container's directory (missing is not an error) and
18	// the app directory when it becomes empty.
19	Remove(ctx context.Context, app, container string) error
20	// List returns every existing container directory, sorted by app then container.
21	List(ctx context.Context) ([]SecretFileSet, error)
22}