lookupchain

type Config []ConfigEntry

type ConfigEntry struct {
	// Source is the name of the source used to look up the secret.
	Source string `json:"source"`
	json.RawMessage
}

type Env struct {
	// Source is the name of the source used to look up the secret.
	// It must be "env".
	Source string `json:"source"`
	// Name is the name of the environment variable to look up.
	Name string `json:"name"`
	// Binding binds the value of the environment variable to a well-known name in the helper.
	// If not specified, the value is bound to the default secret of the helper.
	Binding string `json:"binding,omitempty"`
}

type Google struct {
	// Source must be "google".
	Source string `json:"source"`

	// TokenType selects which kind of token to mint: "access" (default) or "id" / "jwt".
	TokenType string `json:"token_type,omitempty"`

	// Scopes are defined in
	// https://developers.google.com/identity/protocols/oauth2/scopes
	Scopes []string `json:"scopes,omitempty"`

	// Audience is the OIDC target audience.
	// It is used when minting an ID token.
	Audience string `json:"audience,omitempty"`

	// Binding binds the value to a well-known name in the helper.
	// If not specified, the value is bound to the default secret of the helper.
	Binding string `json:"binding,omitempty"`
}

type GoogleTokenResponse struct {
	IdentityToken string `json:"id_token,omitempty"`
	oauth2.Token
}

type Keyring struct {
	// Source is the name of the source used to look up the secret.
	// It must be "keyring".
	Source string `json:"source"`
	// Service is the name of the key to look up in the keyring.
	Service string `json:"service"`
	// Binding binds the value of the keyring secret to a well-known name in the helper.
	// If not specified, the value is bound to the default secret of the helper.
	Binding string `json:"binding,omitempty"`
}

type LookupChain struct {
	// contains filtered or unexported fields
}

type NotFoundErr struct {
	// contains filtered or unexported fields
}

type Source interface {
	Lookup(binding string) (string, error)
	Canonicalize()
	SetupInstructions(binding string) (string, bool)
}

type Static struct {
	// Source is the name of the source used to look up the secret.
	// It must be "static".
	Source string `json:"source"`
	// Value is the static value to return.
	Value string `json:"name"`
	// Binding binds the value of the environment variable to a well-known name in the helper.
	// If not specified, the value is bound to the default secret of the helper.
	Binding string `json:"binding,omitempty"`
}