Struct VaultBackend 

pub struct VaultBackend { /* private fields */ }

Secret backend for HashiCorp Vault

Supports reading secrets from Vault’s KV v2 secrets engine.

Configuration

Set these environment variables:

• VAULT_ADDR: Vault server address (e.g., “http://localhost:8200”)
• VAULT_TOKEN: Authentication token

Example

use mecha10::secrets::{VaultBackend, SecretBackend};

let backend = VaultBackend::from_env("secret/mecha10").await?;

// Reads from: secret/data/mecha10/api_key
let api_key = backend.get("api_key").await?;

Implementations

impl VaultBackend

pub fn new(addr: String, token: String, mount_path: String) -> Self

Create a new Vault backend

Arguments

• addr - Vault server address
• token - Authentication token
• mount_path - Mount path for secrets (e.g., “secret/mecha10”)

pub async fn from_env(mount_path: &str) -> Result<Self>

Create from environment variables

Reads VAULT_ADDR and VAULT_TOKEN from environment.

Trait Implementations

impl SecretBackend for VaultBackend

fn get<'life0, 'life1, 'async_trait>( &'life0 self, key: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<String>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Retrieve a secret by key

fn set<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, key: &'life1 str, value: &'life2 str, ) -> Pin<Box<dyn Future<Output = Result<()>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Store a secret (if backend supports writing)

fn delete<'life0, 'life1, 'async_trait>( &'life0 self, key: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<()>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Delete a secret (if backend supports deletion)

fn list<'life0, 'async_trait>( &'life0 self, ) -> Pin<Box<dyn Future<Output = Result<Vec<String>>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

List all secret keys (if backend supports listing)