Built-in Plugins
Components registered by the gestaltd binary at startup.
Auth Providers
| Name | Purpose |
|---|---|
none | Disables platform authentication. Every request is treated as anonymous. |
local | Single-user auth for local development. No external identity provider required. |
google | Google OAuth 2.0 platform login. Supports allowed_domains restriction. |
oidc | Generic OpenID Connect. Works with Okta, Auth0, Azure AD, Keycloak, and others. |
Datastores
| Name | Purpose |
|---|---|
sqlite | File-backed. Best for local or single-node deployments. |
postgres | Recommended production datastore. |
mysql | SQL-backed production datastore. |
dynamodb | DynamoDB-backed datastore. |
mongodb | MongoDB-backed datastore. |
oracle | Oracle-backed datastore. |
firestore | Firestore-backed datastore. |
sqlserver | SQL Server-backed datastore. |
Secret Managers
| Name | Purpose |
|---|---|
env | Resolves secrets from environment variables. Default when secrets is omitted. |
file | Resolves secrets from files in a configured directory. Works with Kubernetes volume-mounted secrets. |
google_secret_manager | Resolves secrets from Google Cloud Secret Manager. |
aws_secrets_manager | Resolves secrets from AWS Secrets Manager. |
vault | Resolves secrets from HashiCorp Vault (KV v2). |
azure_key_vault | Resolves secrets from Azure Key Vault. |
Telemetry Providers
| Name | Purpose |
|---|---|
stdout | Outputs structured logs to standard output. Traces and metrics use noop providers. Default when telemetry is omitted. |
otlp | Exports traces, metrics, and logs via OpenTelemetry Protocol. |
noop | Disables all telemetry collection. |
Bindings
| Name | Purpose |
|---|---|
webhook | Inbound HTTP endpoint with optional HMAC signature verification and provider forwarding. |
proxy | HTTP proxy surface with egress policy enforcement and credential injection. |
Named Providers
No named providers are currently built into the binary. BigQuery, Jira, Slack, and other external plugins are published from the standalone valon-technologies/gestalt-plugins repository.
Scope
This page lists only components wired into cmd/gestaltd. Test fixtures and examples still ship in this repository, but external plugins now live outside the main gestalt codebase and are not compiled into the binary.