Sekret.Client 0.1.0

Sekret.Client

Strongly-typed .NET SDK for the Sekret secret-management server. Used by every Operaro .NET host through Sekret.Extensions.Configuration to load secrets at startup.

Available services

var client = new SekretClient(new SekretOptions { ... });

await client.Secrets.GetAsync("DATABASE_URL");
await client.Projects.ListAsync();
await client.Environments.ListAsync(project: "operaro");
await client.Tokens.CreateAsync(...);
await client.Audit.GetEventsAsync(...);
await client.Webhooks.RegisterAsync(...);
await client.Rotations.CreateAsync(...);   // W3.32

Rotation API (W3.32)

The rotation surface mirrors the Go server's /api/v1/projects/{project}/rotations/* endpoints. Each rotation configuration binds a secret key in a project + environment to a provider (currently postgres, redis, rabbitmq) and an interval; the server runs an internal scheduler that flips the underlying credential and updates the secret value in lockstep.

// 1. Define a rotation: rotate POSTGRES_PASSWORD every 90 days.
var created = await client.Rotations.CreateAsync(
    project: "operaro",
    new CreateRotationRequest
    {
        SecretKey = "POSTGRES_PASSWORD",
        EnvironmentName = "production",
        ProviderType = "postgres",
        IntervalDays = 90,
        ConnectionConfig = JsonSerializer.SerializeToElement(new
        {
            host = "operaro-postgres",
            port = 5432,
            user = "rotator",
            db = "postgres",
        }),
    });

// 2. Trigger an immediate manual rotation (e.g. responding to incident).
await client.Rotations.RotateAsync("operaro", created.Id);

// 3. Poll status until the scheduler reports success.
var status = await client.Rotations.GetStatusAsync("operaro", created.Id);
// status.RotationStatusValue ∈ { idle, running, succeeded, failed }

Recommended rotation cadence

Adding a new provider type

Implementations live on the Go server under internal/rotation/providers/*. The C# SDK is purely a transport client — adding a new provider type only requires the server change plus picking the new string for CreateRotationRequest.ProviderType.