Table of Contents

Namespace Quilt4Net.Toolkit.Features.ValueGroup

Classes

AtlasDatabaseAccessEntry

A MongoDB Atlas database user delivered as part of a ValueGroupBundle, read-only or read-write per AccessMode. ConnectionString is the cluster's SRV connection string with Username/Password already embedded — consumers can pass it straight to a MongoClient. To revoke access, the team admin removes the underlying access in the Quilt4Net.Server admin UI, which deletes the Atlas database user.

AtlasFirewallCredentialEntry

An Atlas project credential delivered via a value-group bundle for IP-access-list (firewall) management. Consumers use this credential to call Atlas's /groups/{groupId}/accessList endpoint directly. PrivateSecret is plaintext on the wire (transport over TLS, behind an API-key-gated bundle fetch).

AtlasFirewallProxyKeyEntry

A Quilt4Net firewall API key delivered in a ValueGroupBundle. It lets a consumer open the Atlas firewall (and/or report usage) for one Atlas project through the Quilt4Net proxy — the Atlas Project-Owner Service Account never leaves the server, and no Atlas credential is handed out. Build a typed client with IAtlasFirewallClientFactory.Create(entry).

KeyValueEntry

Plain key/value entry inside a ValueGroupBundle. Values are transported as-is (no encryption). Future feature extensions (an IsSecret flag, encryption at rest, masking) are planned in a coordinated follow-up that also addresses today's ApplicationInsightsConfigurationResponse.ClientSecret plain-text storage.

ValueGroupAuthorizationException

Thrown by GetAsync(CancellationToken) when the server returns 401 or 403. Differs from IRemoteConfigurationService's silent-fallback behaviour by design: a revoked agent must learn it has been revoked rather than continue serving cached secret-bearing data.

ValueGroupBundle

Typed bundle returned by GetAsync(CancellationToken). New member types (KV pairs, Atlas credentials, …) get added as additional properties when later features ship — the shape is additive-only so older clients keep deserializing successfully against newer servers.

ValueGroupClientOptions

Options for IValueGroupClient. Configuration path: Quilt4Net:ValueGroup.

Interfaces

IValueGroupClient

Fetches the configured Value Group's bundle from Quilt4Net.Server. One client = one group (the group id is bound at registration). Apps that need multiple groups register multiple clients via keyed services.

Enums

AtlasDatabaseAccessMode

Privilege level of an AtlasDatabaseAccessEntry delivered in a ValueGroupBundle: read-only (readAnyDatabase) or read-write (readWriteAnyDatabase).