sandboxhostbootstrap

Documentation

Overview

Package sandboxhostbootstrap enrolls one already-mounted local or CI host identity in the sandbox control ledger. It deliberately has no production profile: production enrollment remains an external operator authority.

Index

• func Run(ctx context.Context, config Config, lookup SecretLookup) error
• type Config
  • func Parse(input io.Reader) (Config, error)
• type SecretLookup

Functions

func Run

func Run(ctx context.Context, config Config, lookup SecretLookup) error

Run opens the existing ledger and creates or proves the exact enrollment. It never migrates a database, writes secret files, starts a host or logs configuration material.

Types

type Config

type Config struct {
	// contains filtered or unexported fields
}

Config is the strict, non-secret declaration for a one-shot bootstrap.

func Parse

func Parse(input io.Reader) (Config, error)

Parse decodes exactly one strict local/CI bootstrap declaration.

type SecretLookup

type SecretLookup func(string) (string, bool)

SecretLookup resolves only an explicit already-mounted database value.