@nogoo9/no-crd / index / resolveSessionSecret

Function: resolveSessionSecret()

resolveSessionSecret(coreApi, namespace, port?): Promise<string>

Defined in: src/k8s/session.ts:46

Resolves the session signing key via a 5-step priority cascade:

1. PROXY_SESSION_SECRET env var
2. JWT_SECRET env var
3. Best-effort k8s Secret (read/create with 409 retry)
4. Peer discovery (query sibling pods' internal endpoint)
5. In-memory random key

The result is cached in-memory for the process lifetime.

Parameters

coreApi

ObjectCoreV1Api | null

Kubernetes CoreV1Api client.

namespace

string

Deployment namespace.

port?

number = 3000

Server port (for peer discovery).

Returns

Promise<string>

The resolved signing key.