Struct VaultResolver 

pub struct VaultResolver { /* private fields */ }

Resolves secrets from HashiCorp Vault

Mode is auto-negotiated based on environment:

• If VAULT_TOKEN and VAULT_ADDR are set → HTTP mode
• Otherwise → CLI mode (uses vault CLI)

The source field in SecretSpec can be:

• A JSON-encoded VaultSecretConfig

Implementations

impl VaultResolver

pub fn new() -> Result<Self, SecretError>

Create a new Vault resolver with auto-detected mode

If Vault credentials are available in environment, uses HTTP mode. Otherwise, CLI mode will be used.

Errors

Returns an error if the Vault HTTP client cannot be initialized.

Trait Implementations

impl Debug for VaultResolver

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl SecretResolver for VaultResolver

fn provider_name(&self) -> &'static str

Get the provider name for this resolver.

fn resolve<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, name: &'life1 str, spec: &'life2 SecretSpec, ) -> Pin<Box<dyn Future<Output = Result<String, SecretError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Resolve a single secret by name and spec.

fn resolve_secure<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, name: &'life1 str, spec: &'life2 SecretSpec, ) -> Pin<Box<dyn Future<Output = Result<SecureSecret, SecretError>> + Send + 'async_trait>>

where 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait, Self: 'async_trait,

Resolve a single secret returning a secure value.

fn resolve_batch<'life0, 'life1, 'async_trait>( &'life0 self, secrets: &'life1 HashMap<String, SecretSpec>, ) -> Pin<Box<dyn Future<Output = Result<HashMap<String, SecureSecret>, SecretError>> + Send + 'async_trait>>

where 'life0: 'async_trait, 'life1: 'async_trait, Self: 'async_trait,

Resolve multiple secrets in batch with concurrent execution.

fn supports_native_batch(&self) -> bool

Check if this resolver supports native batch resolution.