Struct LocalSecretManager 

pub struct LocalSecretManager {
    secrets: RwLock<HashMap<SecretId, Vec<u8>>>,
    secret_file_dir: PathBuf,
}

Fields

secrets: RwLock<HashMap<SecretId, Vec<u8>>>

secret_file_dir: PathBuf

The local directory used to write secrets into file, so that it can be passed into some libraries

Implementations

impl LocalSecretManager

pub fn init(temp_file_dir: String, cluster_id: String, worker_id: WorkerId)

Initialize the secret manager with the given temp file path, cluster id, and encryption key.

Panics

Panics if fail to create the secret file directory.

pub fn global() -> &'static LocalSecretManager

Get the global secret manager instance.

Panics

Panics if the secret manager is not initialized.

pub fn add_secret(&self, secret_id: SecretId, secret: Vec<u8>)

pub fn update_secret(&self, secret_id: SecretId, secret: Vec<u8>)

pub fn init_secrets(&self, secrets: Vec<PbSecret>)

pub fn get_secret(&self, secret_id: SecretId) -> Option<Vec<u8>>

pub fn remove_secret(&self, secret_id: SecretId)

pub fn fill_secrets( &self, options: BTreeMap<String, String>, secret_refs: BTreeMap<String, PbSecretRef>, ) -> SecretResult<BTreeMap<String, String>>

pub fn fill_secret(&self, secret_ref: PbSecretRef) -> SecretResult<String>

fn fill_secret_inner( &self, secret_ref: PbSecretRef, secret_guard: &RwLockReadGuard<'_, RawRwLock, HashMap<SecretId, Vec<u8>>>, ) -> SecretResult<String>

fn get_or_init_secret_file( &self, secret_id: SecretId, secret_bytes: Vec<u8>, ) -> SecretResult<String>

Get the secret file for the given secret id and return the path string. If the file does not exist, create it. WARNING: This method should be called only when the secret manager is locked.

fn remove_secret_file_if_exist(&self, secret_id: &SecretId)

WARNING: This method should be called only when the secret manager is locked.

fn get_secret_value(pb_secret_bytes: &[u8]) -> SecretResult<Vec<u8>>

pub fn get_pb_secret_backend( pb_secret_bytes: &[u8], ) -> SecretResult<SecretBackend>

Get the secret backend from the given decrypted secret bytes.

Trait Implementations

impl Debug for LocalSecretManager

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.