Skip to main content

Crate hasp_backend_gcp_sm

Crate hasp_backend_gcp_sm 

Source
Expand description

gcp-sm:// backend for hasp.

Grammar: gcp-sm://<project-id>/<secret-id>?version=<version>&field=<path>

  • <project-id> — GCP project identifier (host). Must be non-empty.
  • <secret-id> — Secret ID (path). Identifiers must match ^[a-zA-Z0-9-_]{1,255}$ per GCP. Leading / is stripped.
  • ?version — Optional version label. Defaults to latest.
  • ?field — Optional dotted JSON path. When set, the decoded secret value is parsed as JSON and the named scalar is returned (see hasp_core::extract_field). Non-JSON payloads fail with InvalidUrl.

Supported operations: get, put, list, delete, exists.

Authentication is ambient only: GOOGLE_APPLICATION_CREDENTIALS or VM metadata service. gcp-auth resolves these transparently. No auth-bootstrap flows or credential refresh logic lives in this crate.

Structs§

GcpSmBackend
Google Cloud Secret Manager REST backend.
GcpSmUrl
URL shape for gcp-sm:// addresses.