secrets

type CLIOptions struct {
	VaultTokenFile string
	VaultAddr      string
	VaultPrefix    string
	VaultRole      string

	VaultToken string
}

type Client interface {
	ReadOnlyClient
	SetFieldOnItem(itemName, fieldName string, fieldValue []byte) error
	UpdateNotesOnItem(itemName string, notes string) error
}

type DynamicCensor struct {
	sync.RWMutex
	*secretutil.ReloadingCensorer
	// contains filtered or unexported fields
}

type ReadOnlyClient interface {
	GetFieldOnItem(itemName, fieldName string) ([]byte, error)
	GetInUseInformationForAllItems(optionalPrefix string) (map[string]SecretUsageComparer, error)
	GetUserSecrets() (map[types.NamespacedName]map[string]string, error)
	HasItem(itemname string) (bool, error)
}

type SecretUsageComparer interface {
	LastChanged() time.Time
	UnusedFields(inUse sets.Set[string]) (Difference sets.Set[string])
	SuperfluousFields() sets.Set[string]
}

type VaultClient interface {
	GetKV(path string) (*vaultclient.KVData, error)
	ListKVRecursively(path string) ([]string, error)
	UpsertKV(path string, data map[string]string) error
}