Module secrets 

Secret provider abstraction — fetches secrets from external vaults at allocation time. Values are never stored in Raft state.

Modules

env

Environment variable secret provider — reads secrets from process env. Used for testing and local development.

sops

SOPS secret provider — decrypts secrets from SOPS-encrypted files. Used for local development with encrypted secret files.

Structs

ResolvedSecrets

Resolved secrets ready for injection into a task.

SecretFile

A secret file to write.

SecretResolver

Resolve a set of secret refs into env vars and file mounts.

SecretValue

A fetched secret value (zeroized on drop if the zeroize feature is enabled).

Traits

SecretFetcher

Trait for secret provider backends.