infrapi/lib

Opinionated Go building blocks shared by InfraPI services. Each package covers one concern - configuration, serving, calling, authenticating, logging, tracing, errors - and they are designed to be used together from the same AppConfig.

Where to start#

Page	What it covers
Getting started	Add the dependency, write a dotenv file, serve an API group and call another service.
Development	The quality gate, building these docs, and the repository layout.

Install with go get github.com/infrapi/lib (Go 1.26.7 or later).

Packages#

Package	Import path	What it does
`api`	`github.com/infrapi/lib/pkg/api`	The URL layout every service exposes, `/apis/{name}.{domain}/{version}/namespaces/{namespace}/{resource}`, shared by `server`, `client` and `auth`.
`auth`	`github.com/infrapi/lib/pkg/auth`	Authenticates requests against an upstream authentication service’s `/oauth2/userinfo` endpoint, with an in-memory cache, as a gin middleware.
`client`	`github.com/infrapi/lib/pkg/client`	Resty-based client of the APIs `server` exposes, with TLS/mTLS, retry and hedging.
`config`	`github.com/infrapi/lib/pkg/config`	Reads a dotenv file, validates values, exposes a typed `AppConfig`.
`errors`	`github.com/infrapi/lib/pkg/errors`	RFC 9457 application error with an HTTP status, a cause, a remediation hint, a stable code and an explicit retryable flag.
`listener`	`github.com/infrapi/lib/pkg/listener`	Opens the service socket, TCP or systemd socket activation.
`logger`	`github.com/infrapi/lib/pkg/logger`	Builds the `*logger.Logger` a service’s own code logs through, from the same `AppConfig` log level and format, with one shared set of conventions.
`server`	`github.com/infrapi/lib/pkg/server`	`gin.Engine` pre-wired with CORS, trusted proxies, Prometheus metrics, a span per request, generated OpenAPI docs or the service’s own contracts — enforced on every request — and rendering an `errors.Error` as `application/problem+json`.
`tofu`	`github.com/infrapi/lib/pkg/tofu`	Drives any OpenTofu provider plugin and resource type, and applies a declarative set of providers and resources on top.
`tracing`	`github.com/infrapi/lib/pkg/tracing`	Sends the traces over OTLP (HTTP or gRPC), from the `INFRAPI_TRACING_*` keys.
`vault`	`github.com/infrapi/lib/pkg/vault`	Wraps `vault-client-go` with TLS/mTLS, retry, AppRole/token login, and an opinionated KV v2 and PKI surface.