Function loadRuntimeSecrets

packages/runtime-secrets/src/index.ts:29–55

()

 * so a misconfigured container crashes instead of booting without its config.
 */
export async function loadRuntimeSecrets(): Promise<void> {
  const secretId = process.env[SECRET_ID_ENV]
  if (!secretId) {
    logger.info(`${SECRET_ID_ENV} not set; skipping runtime secret ingestion`)
    return
  }

  const client = new SecretsManagerClient(
    process.env.AWS_REGION ? { region: process.env.AWS_REGION } : {}
  )

  const secretString = await fetchSecretString(client, secretId)
  const entries = parseSecretJson(secretString)

  let loaded = 0
  let skipped = 0
  for (const [key, value] of Object.entries(entries)) {
    if (key in process.env) {
      skipped++
      continue
    }
    process.env[key] = typeof value === 'string' ? value : JSON.stringify(value)
    loaded++
  }

  logger.info('Runtime secrets ingested', { secretId, loaded, skipped })
}

async function fetchSecretString(client: SecretsManagerClient, secretId: string): Promise<string> {
  const response = await sendWithRetry(client, secretId)