Skip to main content

SecretResolver

zeph_core::config

Trait SecretResolver 

Source 
pub trait SecretResolver {
    // Required methods
    fn resolve_secrets(
        &mut self,
        vault: &dyn VaultProvider,
    ) -> impl Future<Output = Result<(), ConfigError>> + Send;
    fn resolve_secrets_masked(
        &mut self,
        vault: &dyn VaultProvider,
        registry: Option<&Arc<SecretMaskRegistry>>,
    ) -> impl Future<Output = Result<(), ConfigError>> + Send;
}
Expand description

Extension trait for resolving vault secrets into a Config.

Implemented for Config in zeph-core because VaultProvider lives here. Call with use zeph_core::config::SecretResolver in scope.

Required Methods§

Source

fn resolve_secrets( &mut self, vault: &dyn VaultProvider, ) -> impl Future<Output = Result<(), ConfigError>> + Send

Populate secrets fields from the vault.

§Errors

Returns an error if the vault backend fails.

Source

fn resolve_secrets_masked( &mut self, vault: &dyn VaultProvider, registry: Option<&Arc<SecretMaskRegistry>>, ) -> impl Future<Output = Result<(), ConfigError>> + Send

Same as resolve_secrets, but additionally registers every successfully resolved secret value with registry for outbound LLM masking (#5437).

When registry is None (secret masking disabled), behaves identically to resolve_secrets.

§Errors

Returns an error if the vault backend fails.

Dyn Compatibility§

This trait is not dyn compatible.

In older versions of Rust, dyn compatibility was called "object safety".

Implementors§