Function KeyFromKeyRef

internal/utils/key_resolver.go:42–47

KeyFromKeyRef resolves a key from either a file path or a Kubernetes secret reference. This provides a unified interface for both public and private key resolution. Supported formats: - File path: "/path/to/key.pem" - Kubernetes secret: "k8s://namespace/secret-name/key-field" (explicit key field) -

(ctx context.Context, keyRef string, fs afero.Fs)

// - Kubernetes secret: "k8s://namespace/secret-name/key-field" (explicit key field)
// - Kubernetes secret: "k8s://namespace/secret-name" (auto-select if single key exists)
func KeyFromKeyRef(ctx context.Context, keyRef string, fs afero.Fs) ([]byte, error) {
	if strings.HasPrefix(keyRef, "k8s://") {
		return keyFromKubernetesSecret(ctx, keyRef)
	}
	return keyFromFile(keyRef, fs)
}

// PublicKeyFromKeyRef resolves a public key from either a file path or a Kubernetes secret reference.
// This provides a consistent interface with PrivateKeyFromKeyRef.