kubricate/dist/esm/secret/SecretRegistry.js

A TypeScript framework for building reusable, type-safe Kubernetes infrastructure — without the YAML mess.

import { validateString } from '../internal/utils.js';
/**
 * SecretRegistry
 *
 * @description
 * Central registry to globally manage all declared SecretManager instances within a project.
 *
 * - Provides a single authoritative map of all available SecretManagers.
 * - Allows consistent conflict resolution across the entire project (not per-stack).
 * - Decouples SecretManager lifecycle from consumer frameworks (e.g., Stacks in Kubricate).
 * - Enables flexible, multi-environment setups (e.g., staging, production, DR plans).
 *
 * @remarks
 * - **Conflict detection** during secret orchestration (apply/plan) operates *only* at the registry level.
 * - **Stacks** or **consumers** simply reference SecretManagers; they are not responsible for conflict handling.
 * - Synthing and Kubricate treat the registry as the **single source of truth** for all secret orchestration workflows.
 *
 * ---
 *
 * # Example
 *
 * ```ts
 * const registry = new SecretRegistry()
 *   .register('frontend', frontendManager)
 *   .register('backend', backendManager);
 *
 * const manager = registry.get('frontend');
 * ```
 *
 *
 */
// eslint-disable-next-line @typescript-eslint/no-empty-object-type
export class SecretRegistry {
  registry = /*#__PURE__*/new Map();
  /**
   * Register a named SecretManager into the registry.
   *
   * @param name - Unique name for the secret manager.
   * @param manager - SecretManager instance to register.
   * @returns {SecretRegistry} for chaining
   *
   * @throws {Error} if a duplicate name is registered
   */
  add(name, manager) {
    if (this.registry.has(name)) {
      throw new Error(`[SecretRegistry] Duplicate secret manager name: "${name}"`);
    }
    this.registry.set(name, manager);
    return this;
  }
  /**
   * Retrieve a SecretManager by its registered name.
   *
   * @param name - The name of the secret manager.
   * @returns {SecretManager}
   *
   * @throws {Error} if the name is not found
   */
  get(name) {
    validateString(name);
    const manager = this.registry.get(name);
    if (!manager) {
      throw new Error(`[SecretRegistry] Secret manager not found for name: "${name}"`);
    }
    return manager;
  }
  /**
   * Return all registered secret managers as an object.
   *
   * Used internally by the orchestrator.
   */
  list() {
    const result = {};
    for (const [name, manager] of this.registry.entries()) {
      result[name] = manager;
    }
    return result;
  }
}
//# sourceMappingURL=SecretRegistry.js.map