securestore

Documentation

Index

• func AddSecret(ctx context.Context, secstore SecretStore, secret secret.Secret, ...) error
• func CheckSecretID(ctx context.Context, secstore SecretStore, secretID string) bool
• func DeleteSecret(ctx context.Context, secstore SecretStore, secretId string) error
• func GetSecret(ctx context.Context, secstore SecretStore, secretID string) (secret.Secret, error)
• func ListSecrets(ctx context.Context, secstore SecretStore) error
• func UnWrappeSecret(ctx context.Context, secstore SecretStore, token string) (secret.Secret, error)
• func UnWrappeSecretJSON(ctx context.Context, secstore SecretStore, token string) (string, error)
• func WrapCubbyhole(ctx context.Context, secstore SecretStore, secretID string, ttl time.Duration) (string, error)
• func WrapSecret(ctx context.Context, secstore SecretStore, secretID string, ttl time.Duration) (string, error)
• type SecretStore
  • func ConnectVault(ctx context.Context) (SecretStore, error)
  • func ConnectVaultWithTLSConfig(ctx context.Context, tlsConfig *tls.Config) (SecretStore, error)
  • func ConnectVaultWithToken(ctx context.Context, token string) (SecretStore, error)
  • func ConnectVaultWithUsernamePassword(ctx context.Context, username, password string) (SecretStore, error)
  • func ConnectVaulwithYubikey(ctx context.Context, yubikey *piv.YubiKey, pin string) (SecretStore, error)

Functions

func AddSecret

func AddSecret(ctx context.Context, secstore SecretStore, secret secret.Secret, secretID string) error

this function add a Secret to vault for the given secstore and secretID

func CheckSecretID

func CheckSecretID(ctx context.Context, secstore SecretStore, secretID string) bool

check if SecretId already exist in vault

func DeleteSecret

func DeleteSecret(ctx context.Context, secstore SecretStore, secretId string) error

this function will update a secret in vault for a given secstore, secret and secretID

func GetSecret

func GetSecret(ctx context.Context, secstore SecretStore, secretID string) (secret.Secret, error)

func ListSecrets

func ListSecrets(ctx context.Context, secstore SecretStore) error

this function list all secrets in vault for the given mountpath and readAPPNAME() and display them in tabuuar format

func UnWrappeSecret

func UnWrappeSecret(ctx context.Context, secstore SecretStore, token string) (secret.Secret, error)

this function will unwrap a cubbyhole and return the secret

func UnWrappeSecretJSON

func UnWrappeSecretJSON(ctx context.Context, secstore SecretStore, token string) (string, error)

this function will unwrap a secret and return a json string

func WrapCubbyhole

func WrapCubbyhole(ctx context.Context, secstore SecretStore, secretID string, ttl time.Duration) (string, error)

take a cubbyhole and wrap the secret and return the wrapped token

func WrapSecret

func WrapSecret(ctx context.Context, secstore SecretStore, secretID string, ttl time.Duration) (string, error)

create a wrap secret for a given appname and return the token

Types

type SecretStore

type SecretStore struct {
	Client    *vault.Client
	Mountpath string
	Appname   string
}

func ConnectVault

func ConnectVault(ctx context.Context) (SecretStore, error)

connect to vault in annonymous mode

func ConnectVaultWithTLSConfig

func ConnectVaultWithTLSConfig(ctx context.Context, tlsConfig *tls.Config) (SecretStore, error)

connect to vault with specific tls config

func ConnectVaultWithToken

func ConnectVaultWithToken(ctx context.Context, token string) (SecretStore, error)

connect to vault using token

func ConnectVaultWithUsernamePassword

func ConnectVaultWithUsernamePassword(ctx context.Context, username, password string) (SecretStore, error)

connect to vault using username and password and return the client

func ConnectVaulwithYubikey

func ConnectVaulwithYubikey(ctx context.Context, yubikey *piv.YubiKey, pin string) (SecretStore, error)

connect to vault with yubikey