Struct SecretEncryption 

pub struct SecretEncryption { /* private fields */ }

Encrypts and decrypts SecretStore specs using one active key plus optional decrypt-only keys.

Implementations

impl SecretEncryption

pub fn from_key(key: SecretKeyHandle) -> Self

Creates a single-key encryptor and decryptor from one key handle.

pub fn from_keyring(keyring: &KeyRing) -> Result<Self>

Build from a KeyRing — active key for encryption, all non-terminal keys for decryption.

pub fn encrypt_secret_store_spec( &self, project: &str, name: &str, spec: &Value, ) -> Result<String>

Encrypts a SecretStore spec into an authenticated envelope bound to resource identity.

pub fn decrypt_secret_store_spec( &self, project: &str, name: &str, spec_json: &str, ) -> Result<Value>

Decrypts a SecretStore envelope and verifies its authenticated resource identity.

Trait Implementations

impl Clone for SecretEncryption

fn clone(&self) -> SecretEncryption

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecretEncryption

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.