pb

package
v0.9.5 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Feb 26, 2018 License: MPL-2.0 Imports: 13 Imported by: 0

Documentation ¶

Overview ¶

Package pb is a generated protocol buffer package.

It is generated from these files: 

logical/plugin/pb/backend.proto

It has these top-level messages: 

Empty
Header
ProtoError
Paths
Request
Alias
Auth
LeaseOptions
Secret
Response
ResponseWrapInfo
RequestWrapInfo
HandleRequestArgs
HandleRequestReply
SpecialPathsReply
HandleExistenceCheckArgs
HandleExistenceCheckReply
SetupArgs
SetupReply
TypeReply
InvalidateKeyArgs
StorageEntry
StorageListArgs
StorageListReply
StorageGetArgs
StorageGetReply
StoragePutArgs
StoragePutReply
StorageDeleteArgs
StorageDeleteReply
TTLReply
SudoPrivilegeArgs
SudoPrivilegeReply
TaintedReply
CachingDisabledReply
ReplicationStateReply
ResponseWrapDataArgs
ResponseWrapDataReply
MlockEnabledReply
LocalMountReply
Connection

Index ¶

Constants ¶

View Source 
const (
	ErrTypeUnknown uint32 = iota
	ErrTypeUserError
	ErrTypeInternalError
	ErrTypeCodedError
	ErrTypeStatusBadRequest
	ErrTypeUnsupportedOperation
	ErrTypeUnsupportedPath
	ErrTypeInvalidRequest
	ErrTypePermissionDenied
	ErrTypeMultiAuthzPending
)

Variables ¶

This section is empty.

Functions ¶

func ErrToString ¶ 

func ErrToString(e error) string

func ProtoAliasToLogicalAlias ¶ 

func ProtoAliasToLogicalAlias(a *Alias) *logical.Alias

func ProtoAuthToLogicalAuth ¶ 

func ProtoAuthToLogicalAuth(a *Auth) (*logical.Auth, error)

func ProtoConnectionToLogicalConnection ¶ added in v0.9.4 

func ProtoConnectionToLogicalConnection(c *Connection) *logical.Connection

func ProtoErrToErr ¶ 

func ProtoErrToErr(e *ProtoError) error

func ProtoLeaseOptionsToLogicalLeaseOptions ¶ 

func ProtoLeaseOptionsToLogicalLeaseOptions(l *LeaseOptions) (logical.LeaseOptions, error)

func ProtoRequestToLogicalRequest ¶ 

func ProtoRequestToLogicalRequest(r *Request) (*logical.Request, error)

func ProtoRequestWrapInfoToLogicalRequestWrapInfo ¶ 

func ProtoRequestWrapInfoToLogicalRequestWrapInfo(i *RequestWrapInfo) *logical.RequestWrapInfo

func ProtoResponseToLogicalResponse ¶ 

func ProtoResponseToLogicalResponse(r *Response) (*logical.Response, error)

func ProtoResponseWrapInfoToLogicalResponseWrapInfo ¶ 

func ProtoResponseWrapInfoToLogicalResponseWrapInfo(i *ResponseWrapInfo) (*wrapping.ResponseWrapInfo, error)

func ProtoSecretToLogicalSecret ¶ 

func ProtoSecretToLogicalSecret(s *Secret) (*logical.Secret, error)

func ProtoStorageEntryToLogicalStorageEntry ¶ 

func ProtoStorageEntryToLogicalStorageEntry(e *StorageEntry) *logical.StorageEntry

func RegisterBackendServer ¶ 

func RegisterBackendServer(s *grpc.Server, srv BackendServer)

func RegisterStorageServer ¶ 

func RegisterStorageServer(s *grpc.Server, srv StorageServer)

func RegisterSystemViewServer ¶ 

func RegisterSystemViewServer(s *grpc.Server, srv SystemViewServer)

Types ¶

type Alias ¶ 

type Alias struct {
	// MountType is the backend mount's type to which this identity belongs
	MountType string `sentinel:"" protobuf:"bytes,1,opt,name=mount_type,json=mountType" json:"mount_type,omitempty"`
	// MountAccessor is the identifier of the mount entry to which this
	// identity belongs
	MountAccessor string `sentinel:"" protobuf:"bytes,2,opt,name=mount_accessor,json=mountAccessor" json:"mount_accessor,omitempty"`
	// Name is the identifier of this identity in its authentication source
	Name string `sentinel:"" protobuf:"bytes,3,opt,name=name" json:"name,omitempty"`
}

func LogicalAliasToProtoAlias ¶ 

func LogicalAliasToProtoAlias(a *logical.Alias) *Alias

func (*Alias) Descriptor ¶ 

func (*Alias) Descriptor() ([]byte, []int)

func (*Alias) GetMountAccessor ¶ 

func (m *Alias) GetMountAccessor() string

func (*Alias) GetMountType ¶ 

func (m *Alias) GetMountType() string

func (*Alias) GetName ¶ 

func (m *Alias) GetName() string

func (*Alias) ProtoMessage ¶ 

func (*Alias) ProtoMessage()

func (*Alias) Reset ¶ 

func (m *Alias) Reset()

func (*Alias) String ¶ 

func (m *Alias) String() string

type Auth ¶ 

type Auth struct {
	LeaseOptions *LeaseOptions `sentinel:"" protobuf:"bytes,1,opt,name=lease_options,json=leaseOptions" json:"lease_options,omitempty"`
	// InternalData is a JSON object that is stored with the auth struct.
	// This will be sent back during a Renew/Revoke for storing internal data
	// used for those operations.
	InternalData string `sentinel:"" protobuf:"bytes,2,opt,name=internal_data,json=internalData" json:"internal_data,omitempty"`
	// DisplayName is a non-security sensitive identifier that is
	// applicable to this Auth. It is used for logging and prefixing
	// of dynamic secrets. For example, DisplayName may be "armon" for
	// the github credential backend. If the client token is used to
	// generate a SQL credential, the user may be "github-armon-uuid".
	// This is to help identify the source without using audit tables.
	DisplayName string `sentinel:"" protobuf:"bytes,3,opt,name=display_name,json=displayName" json:"display_name,omitempty"`
	// Policies is the list of policies that the authenticated user
	// is associated with.
	Policies []string `sentinel:"" protobuf:"bytes,4,rep,name=policies" json:"policies,omitempty"`
	// Metadata is used to attach arbitrary string-type metadata to
	// an authenticated user. This metadata will be outputted into the
	// audit log.
	Metadata map[string]string `` /* 148-byte string literal not displayed */
	// ClientToken is the token that is generated for the authentication.
	// This will be filled in by Vault core when an auth structure is
	// returned. Setting this manually will have no effect.
	ClientToken string `sentinel:"" protobuf:"bytes,6,opt,name=client_token,json=clientToken" json:"client_token,omitempty"`
	// Accessor is the identifier for the ClientToken. This can be used
	// to perform management functionalities (especially revocation) when
	// ClientToken in the audit logs are obfuscated. Accessor can be used
	// to revoke a ClientToken and to lookup the capabilities of the ClientToken,
	// both without actually knowing the ClientToken.
	Accessor string `sentinel:"" protobuf:"bytes,7,opt,name=accessor" json:"accessor,omitempty"`
	// Period indicates that the token generated using this Auth object
	// should never expire. The token should be renewed within the duration
	// specified by this period.
	Period int64 `sentinel:"" protobuf:"varint,8,opt,name=period" json:"period,omitempty"`
	// Number of allowed uses of the issued token
	NumUses int64 `sentinel:"" protobuf:"varint,9,opt,name=num_uses,json=numUses" json:"num_uses,omitempty"`
	// EntityID is the identifier of the entity in identity store to which the
	// identity of the authenticating client belongs to.
	EntityID string `sentinel:"" protobuf:"bytes,10,opt,name=entity_id,json=entityId" json:"entity_id,omitempty"`
	// Alias is the information about the authenticated client returned by
	// the auth backend
	Alias *Alias `sentinel:"" protobuf:"bytes,11,opt,name=alias" json:"alias,omitempty"`
	// GroupAliases are the informational mappings of external groups which an
	// authenticated user belongs to. This is used to check if there are
	// mappings groups for the group aliases in identity store. For all the
	// matching groups, the entity ID of the user will be added.
	GroupAliases []*Alias `sentinel:"" protobuf:"bytes,12,rep,name=group_aliases,json=groupAliases" json:"group_aliases,omitempty"`
}

func LogicalAuthToProtoAuth ¶ 

func LogicalAuthToProtoAuth(a *logical.Auth) (*Auth, error)

func (*Auth) Descriptor ¶ 

func (*Auth) Descriptor() ([]byte, []int)

func (*Auth) GetAccessor ¶ 

func (m *Auth) GetAccessor() string

func (*Auth) GetAlias ¶ 

func (m *Auth) GetAlias() *Alias

func (*Auth) GetClientToken ¶ 

func (m *Auth) GetClientToken() string

func (*Auth) GetDisplayName ¶ 

func (m *Auth) GetDisplayName() string

func (*Auth) GetEntityID ¶ 

func (m *Auth) GetEntityID() string

func (*Auth) GetGroupAliases ¶ 

func (m *Auth) GetGroupAliases() []*Alias

func (*Auth) GetInternalData ¶ 

func (m *Auth) GetInternalData() string

func (*Auth) GetLeaseOptions ¶ 

func (m *Auth) GetLeaseOptions() *LeaseOptions

func (*Auth) GetMetadata ¶ 

func (m *Auth) GetMetadata() map[string]string

func (*Auth) GetNumUses ¶ 

func (m *Auth) GetNumUses() int64

func (*Auth) GetPeriod ¶ 

func (m *Auth) GetPeriod() int64

func (*Auth) GetPolicies ¶ 

func (m *Auth) GetPolicies() []string

func (*Auth) ProtoMessage ¶ 

func (*Auth) ProtoMessage()

func (*Auth) Reset ¶ 

func (m *Auth) Reset()

func (*Auth) String ¶ 

func (m *Auth) String() string

type BackendClient ¶ 

type BackendClient interface {
	// HandleRequest is used to handle a request and generate a response.
	// The plugins must check the operation type and handle appropriately.
	HandleRequest(ctx context.Context, in *HandleRequestArgs, opts ...grpc.CallOption) (*HandleRequestReply, error)
	// SpecialPaths is a list of paths that are special in some way.
	// See PathType for the types of special paths. The key is the type
	// of the special path, and the value is a list of paths for this type.
	// This is not a regular expression but is an exact match. If the path
	// ends in '*' then it is a prefix-based match. The '*' can only appear
	// at the end.
	SpecialPaths(ctx context.Context, in *Empty, opts ...grpc.CallOption) (*SpecialPathsReply, error)
	// HandleExistenceCheck is used to handle a request and generate a response
	// indicating whether the given path exists or not; this is used to
	// understand whether the request must have a Create or Update capability
	// ACL applied. The first bool indicates whether an existence check
	// function was found for the backend; the second indicates whether, if an
	// existence check function was found, the item exists or not.
	HandleExistenceCheck(ctx context.Context, in *HandleExistenceCheckArgs, opts ...grpc.CallOption) (*HandleExistenceCheckReply, error)
	// Cleanup is invoked during an unmount of a backend to allow it to
	// handle any cleanup like connection closing or releasing of file handles.
	// Cleanup is called right before Vault closes the plugin process.
	Cleanup(ctx context.Context, in *Empty, opts ...grpc.CallOption) (*Empty, error)
	// InvalidateKey may be invoked when an object is modified that belongs
	// to the backend. The backend can use this to clear any caches or reset
	// internal state as needed.
	InvalidateKey(ctx context.Context, in *InvalidateKeyArgs, opts ...grpc.CallOption) (*Empty, error)
	// Setup is used to set up the backend based on the provided backend
	// configuration. The plugin's setup implementation should use the provided
	// broker_id to create a connection back to Vault for use with the Storage
	// and SystemView clients.
	Setup(ctx context.Context, in *SetupArgs, opts ...grpc.CallOption) (*SetupReply, error)
	// Type returns the BackendType for the particular backend
	Type(ctx context.Context, in *Empty, opts ...grpc.CallOption) (*TypeReply, error)
}

func NewBackendClient ¶ 

func NewBackendClient(cc *grpc.ClientConn) BackendClient

type BackendServer ¶ 

type BackendServer interface {
	// HandleRequest is used to handle a request and generate a response.
	// The plugins must check the operation type and handle appropriately.
	HandleRequest(context.Context, *HandleRequestArgs) (*HandleRequestReply, error)
	// SpecialPaths is a list of paths that are special in some way.
	// See PathType for the types of special paths. The key is the type
	// of the special path, and the value is a list of paths for this type.
	// This is not a regular expression but is an exact match. If the path
	// ends in '*' then it is a prefix-based match. The '*' can only appear
	// at the end.
	SpecialPaths(context.Context, *Empty) (*SpecialPathsReply, error)
	// HandleExistenceCheck is used to handle a request and generate a response
	// indicating whether the given path exists or not; this is used to
	// understand whether the request must have a Create or Update capability
	// ACL applied. The first bool indicates whether an existence check
	// function was found for the backend; the second indicates whether, if an
	// existence check function was found, the item exists or not.
	HandleExistenceCheck(context.Context, *HandleExistenceCheckArgs) (*HandleExistenceCheckReply, error)
	// Cleanup is invoked during an unmount of a backend to allow it to
	// handle any cleanup like connection closing or releasing of file handles.
	// Cleanup is called right before Vault closes the plugin process.
	Cleanup(context.Context, *Empty) (*Empty, error)
	// InvalidateKey may be invoked when an object is modified that belongs
	// to the backend. The backend can use this to clear any caches or reset
	// internal state as needed.
	InvalidateKey(context.Context, *InvalidateKeyArgs) (*Empty, error)
	// Setup is used to set up the backend based on the provided backend
	// configuration. The plugin's setup implementation should use the provided
	// broker_id to create a connection back to Vault for use with the Storage
	// and SystemView clients.
	Setup(context.Context, *SetupArgs) (*SetupReply, error)
	// Type returns the BackendType for the particular backend
	Type(context.Context, *Empty) (*TypeReply, error)
}

type CachingDisabledReply ¶ 

type CachingDisabledReply struct {
	Disabled bool `sentinel:"" protobuf:"varint,1,opt,name=disabled" json:"disabled,omitempty"`
}

func (*CachingDisabledReply) Descriptor ¶ 

func (*CachingDisabledReply) Descriptor() ([]byte, []int)

func (*CachingDisabledReply) GetDisabled ¶ 

func (m *CachingDisabledReply) GetDisabled() bool

func (*CachingDisabledReply) ProtoMessage ¶ 

func (*CachingDisabledReply) ProtoMessage()

func (*CachingDisabledReply) Reset ¶ 

func (m *CachingDisabledReply) Reset()

func (*CachingDisabledReply) String ¶ 

func (m *CachingDisabledReply) String() string

type Connection ¶ added in v0.9.4 

type Connection struct {
	// RemoteAddr is the network address that sent the request.
	RemoteAddr string `sentinel:"" protobuf:"bytes,1,opt,name=remote_addr,json=remoteAddr" json:"remote_addr,omitempty"`
}

func LogicalConnectionToProtoConnection ¶ added in v0.9.4 

func LogicalConnectionToProtoConnection(c *logical.Connection) *Connection

func (*Connection) Descriptor ¶ added in v0.9.4 

func (*Connection) Descriptor() ([]byte, []int)

func (*Connection) GetRemoteAddr ¶ added in v0.9.4 

func (m *Connection) GetRemoteAddr() string

func (*Connection) ProtoMessage ¶ added in v0.9.4 

func (*Connection) ProtoMessage()

func (*Connection) Reset ¶ added in v0.9.4 

func (m *Connection) Reset()

func (*Connection) String ¶ added in v0.9.4 

func (m *Connection) String() string

type Empty ¶ 

type Empty struct {
}

func (*Empty) Descriptor ¶ 

func (*Empty) Descriptor() ([]byte, []int)

func (*Empty) ProtoMessage ¶ 

func (*Empty) ProtoMessage()

func (*Empty) Reset ¶ 

func (m *Empty) Reset()

func (*Empty) String ¶ 

func (m *Empty) String() string

type HandleExistenceCheckArgs ¶ 

type HandleExistenceCheckArgs struct {
	StorageID uint32   `sentinel:"" protobuf:"varint,1,opt,name=storage_id,json=storageId" json:"storage_id,omitempty"`
	Request   *Request `sentinel:"" protobuf:"bytes,2,opt,name=request" json:"request,omitempty"`
}

HandleExistenceCheckArgs is the args for HandleExistenceCheck method.

func (*HandleExistenceCheckArgs) Descriptor ¶ 

func (*HandleExistenceCheckArgs) Descriptor() ([]byte, []int)

func (*HandleExistenceCheckArgs) GetRequest ¶ 

func (m *HandleExistenceCheckArgs) GetRequest() *Request

func (*HandleExistenceCheckArgs) GetStorageID ¶ 

func (m *HandleExistenceCheckArgs) GetStorageID() uint32

func (*HandleExistenceCheckArgs) ProtoMessage ¶ 

func (*HandleExistenceCheckArgs) ProtoMessage()

func (*HandleExistenceCheckArgs) Reset ¶ 

func (m *HandleExistenceCheckArgs) Reset()

func (*HandleExistenceCheckArgs) String ¶ 

func (m *HandleExistenceCheckArgs) String() string

type HandleExistenceCheckReply ¶ 

type HandleExistenceCheckReply struct {
	CheckFound bool        `sentinel:"" protobuf:"varint,1,opt,name=check_found,json=checkFound" json:"check_found,omitempty"`
	Exists     bool        `sentinel:"" protobuf:"varint,2,opt,name=exists" json:"exists,omitempty"`
	Err        *ProtoError `sentinel:"" protobuf:"bytes,3,opt,name=err" json:"err,omitempty"`
}

HandleExistenceCheckReply is the reply for HandleExistenceCheck method.

func (*HandleExistenceCheckReply) Descriptor ¶ 

func (*HandleExistenceCheckReply) Descriptor() ([]byte, []int)

func (*HandleExistenceCheckReply) GetCheckFound ¶ 

func (m *HandleExistenceCheckReply) GetCheckFound() bool

func (*HandleExistenceCheckReply) GetErr ¶ 

func (m *HandleExistenceCheckReply) GetErr() *ProtoError

func (*HandleExistenceCheckReply) GetExists ¶ 

func (m *HandleExistenceCheckReply) GetExists() bool

func (*HandleExistenceCheckReply) ProtoMessage ¶ 

func (*HandleExistenceCheckReply) ProtoMessage()

func (*HandleExistenceCheckReply) Reset ¶ 

func (m *HandleExistenceCheckReply) Reset()

func (*HandleExistenceCheckReply) String ¶ 

func (m *HandleExistenceCheckReply) String() string

type HandleRequestArgs ¶ 

type HandleRequestArgs struct {
	StorageID uint32   `sentinel:"" protobuf:"varint,1,opt,name=storage_id,json=storageId" json:"storage_id,omitempty"`
	Request   *Request `sentinel:"" protobuf:"bytes,2,opt,name=request" json:"request,omitempty"`
}

HandleRequestArgs is the args for HandleRequest method.

func (*HandleRequestArgs) Descriptor ¶ 

func (*HandleRequestArgs) Descriptor() ([]byte, []int)

func (*HandleRequestArgs) GetRequest ¶ 

func (m *HandleRequestArgs) GetRequest() *Request

func (*HandleRequestArgs) GetStorageID ¶ 

func (m *HandleRequestArgs) GetStorageID() uint32

func (*HandleRequestArgs) ProtoMessage ¶ 

func (*HandleRequestArgs) ProtoMessage()

func (*HandleRequestArgs) Reset ¶ 

func (m *HandleRequestArgs) Reset()

func (*HandleRequestArgs) String ¶ 

func (m *HandleRequestArgs) String() string

type HandleRequestReply ¶ 

type HandleRequestReply struct {
	Response *Response   `sentinel:"" protobuf:"bytes,1,opt,name=response" json:"response,omitempty"`
	Err      *ProtoError `sentinel:"" protobuf:"bytes,2,opt,name=err" json:"err,omitempty"`
}

HandleRequestReply is the reply for HandleRequest method.

func (*HandleRequestReply) Descriptor ¶ 

func (*HandleRequestReply) Descriptor() ([]byte, []int)

func (*HandleRequestReply) GetErr ¶ 

func (m *HandleRequestReply) GetErr() *ProtoError

func (*HandleRequestReply) GetResponse ¶ 

func (m *HandleRequestReply) GetResponse() *Response

func (*HandleRequestReply) ProtoMessage ¶ 

func (*HandleRequestReply) ProtoMessage()

func (*HandleRequestReply) Reset ¶ 

func (m *HandleRequestReply) Reset()

func (*HandleRequestReply) String ¶ 

func (m *HandleRequestReply) String() string
type Header struct {
	Header []string `sentinel:"" protobuf:"bytes,1,rep,name=header" json:"header,omitempty"`
}

func (*Header) Descriptor ¶ 

func (*Header) Descriptor() ([]byte, []int)

func (*Header) GetHeader ¶ 

func (m *Header) GetHeader() []string

func (*Header) ProtoMessage ¶ 

func (*Header) ProtoMessage()

func (*Header) Reset ¶ 

func (m *Header) Reset()

func (*Header) String ¶ 

func (m *Header) String() string

type InvalidateKeyArgs ¶ 

type InvalidateKeyArgs struct {
	Key string `sentinel:"" protobuf:"bytes,1,opt,name=key" json:"key,omitempty"`
}

func (*InvalidateKeyArgs) Descriptor ¶ 

func (*InvalidateKeyArgs) Descriptor() ([]byte, []int)

func (*InvalidateKeyArgs) GetKey ¶ 

func (m *InvalidateKeyArgs) GetKey() string

func (*InvalidateKeyArgs) ProtoMessage ¶ 

func (*InvalidateKeyArgs) ProtoMessage()

func (*InvalidateKeyArgs) Reset ¶ 

func (m *InvalidateKeyArgs) Reset()

func (*InvalidateKeyArgs) String ¶ 

func (m *InvalidateKeyArgs) String() string

type LeaseOptions ¶ 

type LeaseOptions struct {
	TTL       int64                      `sentinel:"" protobuf:"varint,1,opt,name=TTL" json:"TTL,omitempty"`
	Renewable bool                       `sentinel:"" protobuf:"varint,2,opt,name=renewable" json:"renewable,omitempty"`
	Increment int64                      `sentinel:"" protobuf:"varint,3,opt,name=increment" json:"increment,omitempty"`
	IssueTime *google_protobuf.Timestamp `sentinel:"" protobuf:"bytes,4,opt,name=issue_time,json=issueTime" json:"issue_time,omitempty"`
}

func LogicalLeaseOptionsToProtoLeaseOptions ¶ 

func LogicalLeaseOptionsToProtoLeaseOptions(l logical.LeaseOptions) (*LeaseOptions, error)

func (*LeaseOptions) Descriptor ¶ 

func (*LeaseOptions) Descriptor() ([]byte, []int)

func (*LeaseOptions) GetIncrement ¶ 

func (m *LeaseOptions) GetIncrement() int64

func (*LeaseOptions) GetIssueTime ¶ 

func (m *LeaseOptions) GetIssueTime() *google_protobuf.Timestamp

func (*LeaseOptions) GetRenewable ¶ 

func (m *LeaseOptions) GetRenewable() bool

func (*LeaseOptions) GetTTL ¶ 

func (m *LeaseOptions) GetTTL() int64

func (*LeaseOptions) ProtoMessage ¶ 

func (*LeaseOptions) ProtoMessage()

func (*LeaseOptions) Reset ¶ 

func (m *LeaseOptions) Reset()

func (*LeaseOptions) String ¶ 

func (m *LeaseOptions) String() string

type LocalMountReply ¶ added in v0.9.4 

type LocalMountReply struct {
	Local bool `sentinel:"" protobuf:"varint,1,opt,name=local" json:"local,omitempty"`
}

func (*LocalMountReply) Descriptor ¶ added in v0.9.4 

func (*LocalMountReply) Descriptor() ([]byte, []int)

func (*LocalMountReply) GetLocal ¶ added in v0.9.4 

func (m *LocalMountReply) GetLocal() bool

func (*LocalMountReply) ProtoMessage ¶ added in v0.9.4 

func (*LocalMountReply) ProtoMessage()

func (*LocalMountReply) Reset ¶ added in v0.9.4 

func (m *LocalMountReply) Reset()

func (*LocalMountReply) String ¶ added in v0.9.4 

func (m *LocalMountReply) String() string

type MlockEnabledReply ¶ 

type MlockEnabledReply struct {
	Enabled bool `sentinel:"" protobuf:"varint,1,opt,name=enabled" json:"enabled,omitempty"`
}

func (*MlockEnabledReply) Descriptor ¶ 

func (*MlockEnabledReply) Descriptor() ([]byte, []int)

func (*MlockEnabledReply) GetEnabled ¶ 

func (m *MlockEnabledReply) GetEnabled() bool

func (*MlockEnabledReply) ProtoMessage ¶ 

func (*MlockEnabledReply) ProtoMessage()

func (*MlockEnabledReply) Reset ¶ 

func (m *MlockEnabledReply) Reset()

func (*MlockEnabledReply) String ¶ 

func (m *MlockEnabledReply) String() string

type Paths ¶ 

type Paths struct {
	// Root are the paths that require a root token to access
	Root []string `sentinel:"" protobuf:"bytes,1,rep,name=root" json:"root,omitempty"`
	// Unauthenticated are the paths that can be accessed without any auth.
	Unauthenticated []string `sentinel:"" protobuf:"bytes,2,rep,name=unauthenticated" json:"unauthenticated,omitempty"`
	// LocalStorage are paths (prefixes) that are local to this instance; this
	// indicates that these paths should not be replicated
	LocalStorage []string `sentinel:"" protobuf:"bytes,3,rep,name=local_storage,json=localStorage" json:"local_storage,omitempty"`
	// SealWrapStorage are storage paths that, when using a capable seal,
	// should be seal wrapped with extra encryption. It is exact matching
	// unless it ends with '/' in which case it will be treated as a prefix.
	SealWrapStorage []string `sentinel:"" protobuf:"bytes,4,rep,name=seal_wrap_storage,json=sealWrapStorage" json:"seal_wrap_storage,omitempty"`
}

Paths is the structure of special paths that is used for SpecialPaths.

func (*Paths) Descriptor ¶ 

func (*Paths) Descriptor() ([]byte, []int)

func (*Paths) GetLocalStorage ¶ 

func (m *Paths) GetLocalStorage() []string

func (*Paths) GetRoot ¶ 

func (m *Paths) GetRoot() []string

func (*Paths) GetSealWrapStorage ¶ 

func (m *Paths) GetSealWrapStorage() []string

func (*Paths) GetUnauthenticated ¶ 

func (m *Paths) GetUnauthenticated() []string

func (*Paths) ProtoMessage ¶ 

func (*Paths) ProtoMessage()

func (*Paths) Reset ¶ 

func (m *Paths) Reset()

func (*Paths) String ¶ 

func (m *Paths) String() string

type ProtoError ¶ 

type ProtoError struct {
	// Error type can be one of:
	// ErrTypeUnknown uint32 = iota
	// ErrTypeUserError
	// ErrTypeInternalError
	// ErrTypeCodedError
	// ErrTypeStatusBadRequest
	// ErrTypeUnsupportedOperation
	// ErrTypeUnsupportedPath
	// ErrTypeInvalidRequest
	// ErrTypePermissionDenied
	// ErrTypeMultiAuthzPending
	ErrType uint32 `sentinel:"" protobuf:"varint,1,opt,name=err_type,json=errType" json:"err_type,omitempty"`
	ErrMsg  string `sentinel:"" protobuf:"bytes,2,opt,name=err_msg,json=errMsg" json:"err_msg,omitempty"`
	ErrCode int64  `sentinel:"" protobuf:"varint,3,opt,name=err_code,json=errCode" json:"err_code,omitempty"`
}

func ErrToProtoErr ¶ 

func ErrToProtoErr(e error) *ProtoError

func (*ProtoError) Descriptor ¶ 

func (*ProtoError) Descriptor() ([]byte, []int)

func (*ProtoError) GetErrCode ¶ 

func (m *ProtoError) GetErrCode() int64

func (*ProtoError) GetErrMsg ¶ 

func (m *ProtoError) GetErrMsg() string

func (*ProtoError) GetErrType ¶ 

func (m *ProtoError) GetErrType() uint32

func (*ProtoError) ProtoMessage ¶ 

func (*ProtoError) ProtoMessage()

func (*ProtoError) Reset ¶ 

func (m *ProtoError) Reset()

func (*ProtoError) String ¶ 

func (m *ProtoError) String() string

type ReplicationStateReply ¶ 

type ReplicationStateReply struct {
	State int32 `sentinel:"" protobuf:"varint,1,opt,name=state" json:"state,omitempty"`
}

func (*ReplicationStateReply) Descriptor ¶ 

func (*ReplicationStateReply) Descriptor() ([]byte, []int)

func (*ReplicationStateReply) GetState ¶ 

func (m *ReplicationStateReply) GetState() int32

func (*ReplicationStateReply) ProtoMessage ¶ 

func (*ReplicationStateReply) ProtoMessage()

func (*ReplicationStateReply) Reset ¶ 

func (m *ReplicationStateReply) Reset()

func (*ReplicationStateReply) String ¶ 

func (m *ReplicationStateReply) String() string

type Request ¶ 

type Request struct {
	// ID is the uuid associated with each request
	ID string `sentinel:"" protobuf:"bytes,1,opt,name=id" json:"id,omitempty"`
	// If set, the name given to the replication secondary where this request
	// originated
	ReplicationCluster string `sentinel:"" protobuf:"bytes,2,opt,name=ReplicationCluster" json:"ReplicationCluster,omitempty"`
	// Operation is the requested operation type
	Operation string `sentinel:"" protobuf:"bytes,3,opt,name=operation" json:"operation,omitempty"`
	// Path is the part of the request path not consumed by the
	// routing. As an example, if the original request path is "prod/aws/foo"
	// and the AWS logical backend is mounted at "prod/aws/", then the
	// final path is "foo" since the mount prefix is trimmed.
	Path string `sentinel:"" protobuf:"bytes,4,opt,name=path" json:"path,omitempty"`
	// Request data is a JSON object that must have keys with string type.
	Data string `sentinel:"" protobuf:"bytes,5,opt,name=data" json:"data,omitempty"`
	// Secret will be non-nil only for Revoke and Renew operations
	// to represent the secret that was returned prior.
	Secret *Secret `sentinel:"" protobuf:"bytes,6,opt,name=secret" json:"secret,omitempty"`
	// Auth will be non-nil only for Renew operations
	// to represent the auth that was returned prior.
	Auth *Auth `sentinel:"" protobuf:"bytes,7,opt,name=auth" json:"auth,omitempty"`
	// Headers will contain the http headers from the request. This value will
	// be used in the audit broker to ensure we are auditing only the allowed
	// headers.
	Headers map[string]*Header `` /* 146-byte string literal not displayed */
	// ClientToken is provided to the core so that the identity
	// can be verified and ACLs applied. This value is passed
	// through to the logical backends but after being salted and
	// hashed.
	ClientToken string `sentinel:"" protobuf:"bytes,9,opt,name=client_token,json=clientToken" json:"client_token,omitempty"`
	// ClientTokenAccessor is provided to the core so that the it can get
	// logged as part of request audit logging.
	ClientTokenAccessor string `` /* 126-byte string literal not displayed */
	// DisplayName is provided to the logical backend to help associate
	// dynamic secrets with the source entity. This is not a sensitive
	// name, but is useful for operators.
	DisplayName string `sentinel:"" protobuf:"bytes,11,opt,name=display_name,json=displayName" json:"display_name,omitempty"`
	// MountPoint is provided so that a logical backend can generate
	// paths relative to itself. The `Path` is effectively the client
	// request path with the MountPoint trimmed off.
	MountPoint string `sentinel:"" protobuf:"bytes,12,opt,name=mount_point,json=mountPoint" json:"mount_point,omitempty"`
	// MountType is provided so that a logical backend can make decisions
	// based on the specific mount type (e.g., if a mount type has different
	// aliases, generating different defaults depending on the alias)
	MountType string `sentinel:"" protobuf:"bytes,13,opt,name=mount_type,json=mountType" json:"mount_type,omitempty"`
	// MountAccessor is provided so that identities returned by the authentication
	// backends can be tied to the mount it belongs to.
	MountAccessor string `sentinel:"" protobuf:"bytes,14,opt,name=mount_accessor,json=mountAccessor" json:"mount_accessor,omitempty"`
	// WrapInfo contains requested response wrapping parameters
	WrapInfo *RequestWrapInfo `sentinel:"" protobuf:"bytes,15,opt,name=wrap_info,json=wrapInfo" json:"wrap_info,omitempty"`
	// ClientTokenRemainingUses represents the allowed number of uses left on the
	// token supplied
	ClientTokenRemainingUses int64 `` /* 144-byte string literal not displayed */
	// EntityID is the identity of the caller extracted out of the token used
	// to make this request
	EntityID string `sentinel:"" protobuf:"bytes,17,opt,name=entity_id,json=entityId" json:"entity_id,omitempty"`
	// PolicyOverride indicates that the requestor wishes to override
	// soft-mandatory Sentinel policies
	PolicyOverride bool `sentinel:"" protobuf:"varint,18,opt,name=policy_override,json=policyOverride" json:"policy_override,omitempty"`
	// Whether the request is unauthenticated, as in, had no client token
	// attached. Useful in some situations where the client token is not made
	// accessible.
	Unauthenticated bool `sentinel:"" protobuf:"varint,19,opt,name=unauthenticated" json:"unauthenticated,omitempty"`
	// Connection will be non-nil only for credential providers to
	// inspect the connection information and potentially use it for
	// authentication/protection.
	Connection *Connection `sentinel:"" protobuf:"bytes,20,opt,name=connection" json:"connection,omitempty"`
}

func LogicalRequestToProtoRequest ¶ 

func LogicalRequestToProtoRequest(r *logical.Request) (*Request, error)

func (*Request) Descriptor ¶ 

func (*Request) Descriptor() ([]byte, []int)

func (*Request) GetAuth ¶ 

func (m *Request) GetAuth() *Auth

func (*Request) GetClientToken ¶ 

func (m *Request) GetClientToken() string

func (*Request) GetClientTokenAccessor ¶ 

func (m *Request) GetClientTokenAccessor() string

func (*Request) GetClientTokenRemainingUses ¶ 

func (m *Request) GetClientTokenRemainingUses() int64

func (*Request) GetConnection ¶ added in v0.9.4 

func (m *Request) GetConnection() *Connection

func (*Request) GetData ¶ 

func (m *Request) GetData() string

func (*Request) GetDisplayName ¶ 

func (m *Request) GetDisplayName() string

func (*Request) GetEntityID ¶ 

func (m *Request) GetEntityID() string

func (*Request) GetHeaders ¶ 

func (m *Request) GetHeaders() map[string]*Header

func (*Request) GetID ¶ 

func (m *Request) GetID() string

func (*Request) GetMountAccessor ¶ 

func (m *Request) GetMountAccessor() string

func (*Request) GetMountPoint ¶ 

func (m *Request) GetMountPoint() string

func (*Request) GetMountType ¶ 

func (m *Request) GetMountType() string

func (*Request) GetOperation ¶ 

func (m *Request) GetOperation() string

func (*Request) GetPath ¶ 

func (m *Request) GetPath() string

func (*Request) GetPolicyOverride ¶ 

func (m *Request) GetPolicyOverride() bool

func (*Request) GetReplicationCluster ¶ 

func (m *Request) GetReplicationCluster() string

func (*Request) GetSecret ¶ 

func (m *Request) GetSecret() *Secret

func (*Request) GetUnauthenticated ¶ 

func (m *Request) GetUnauthenticated() bool

func (*Request) GetWrapInfo ¶ 

func (m *Request) GetWrapInfo() *RequestWrapInfo

func (*Request) ProtoMessage ¶ 

func (*Request) ProtoMessage()

func (*Request) Reset ¶ 

func (m *Request) Reset()

func (*Request) String ¶ 

func (m *Request) String() string

type RequestWrapInfo ¶ 

type RequestWrapInfo struct {
	// Setting to non-zero specifies that the response should be wrapped.
	// Specifies the desired TTL of the wrapping token.
	TTL int64 `sentinel:"" protobuf:"varint,1,opt,name=TTL" json:"TTL,omitempty"`
	// The format to use for the wrapped response; if not specified it's a bare
	// token
	Format string `sentinel:"" protobuf:"bytes,2,opt,name=format" json:"format,omitempty"`
	// A flag to conforming backends that data for a given request should be
	// seal wrapped
	SealWrap bool `sentinel:"" protobuf:"varint,3,opt,name=seal_wrap,json=sealWrap" json:"seal_wrap,omitempty"`
}

func LogicalRequestWrapInfoToProtoRequestWrapInfo ¶ 

func LogicalRequestWrapInfoToProtoRequestWrapInfo(i *logical.RequestWrapInfo) *RequestWrapInfo

func (*RequestWrapInfo) Descriptor ¶ 

func (*RequestWrapInfo) Descriptor() ([]byte, []int)

func (*RequestWrapInfo) GetFormat ¶ 

func (m *RequestWrapInfo) GetFormat() string

func (*RequestWrapInfo) GetSealWrap ¶ 

func (m *RequestWrapInfo) GetSealWrap() bool

func (*RequestWrapInfo) GetTTL ¶ 

func (m *RequestWrapInfo) GetTTL() int64

func (*RequestWrapInfo) ProtoMessage ¶ 

func (*RequestWrapInfo) ProtoMessage()

func (*RequestWrapInfo) Reset ¶ 

func (m *RequestWrapInfo) Reset()

func (*RequestWrapInfo) String ¶ 

func (m *RequestWrapInfo) String() string

type Response ¶ 

type Response struct {
	// Secret, if not nil, denotes that this response represents a secret.
	Secret *Secret `sentinel:"" protobuf:"bytes,1,opt,name=secret" json:"secret,omitempty"`
	// Auth, if not nil, contains the authentication information for
	// this response. This is only checked and means something for
	// credential backends.
	Auth *Auth `sentinel:"" protobuf:"bytes,2,opt,name=auth" json:"auth,omitempty"`
	// Response data is a JSON object that must have string keys. For
	// secrets, this data is sent down to the user as-is. To store internal
	// data that you don't want the user to see, store it in
	// Secret.InternalData.
	Data string `sentinel:"" protobuf:"bytes,3,opt,name=data" json:"data,omitempty"`
	// Redirect is an HTTP URL to redirect to for further authentication.
	// This is only valid for credential backends. This will be blanked
	// for any logical backend and ignored.
	Redirect string `sentinel:"" protobuf:"bytes,4,opt,name=redirect" json:"redirect,omitempty"`
	// Warnings allow operations or backends to return warnings in response
	// to user actions without failing the action outright.
	Warnings []string `sentinel:"" protobuf:"bytes,5,rep,name=warnings" json:"warnings,omitempty"`
	// Information for wrapping the response in a cubbyhole
	WrapInfo *ResponseWrapInfo `sentinel:"" protobuf:"bytes,6,opt,name=wrap_info,json=wrapInfo" json:"wrap_info,omitempty"`
}

func LogicalResponseToProtoResponse ¶ 

func LogicalResponseToProtoResponse(r *logical.Response) (*Response, error)

func (*Response) Descriptor ¶ 

func (*Response) Descriptor() ([]byte, []int)

func (*Response) GetAuth ¶ 

func (m *Response) GetAuth() *Auth

func (*Response) GetData ¶ 

func (m *Response) GetData() string

func (*Response) GetRedirect ¶ 

func (m *Response) GetRedirect() string

func (*Response) GetSecret ¶ 

func (m *Response) GetSecret() *Secret

func (*Response) GetWarnings ¶ 

func (m *Response) GetWarnings() []string

func (*Response) GetWrapInfo ¶ 

func (m *Response) GetWrapInfo() *ResponseWrapInfo

func (*Response) ProtoMessage ¶ 

func (*Response) ProtoMessage()

func (*Response) Reset ¶ 

func (m *Response) Reset()

func (*Response) String ¶ 

func (m *Response) String() string

type ResponseWrapDataArgs ¶ 

type ResponseWrapDataArgs struct {
	Data string `sentinel:"" protobuf:"bytes,1,opt,name=data" json:"data,omitempty"`
	TTL  int64  `sentinel:"" protobuf:"varint,2,opt,name=TTL" json:"TTL,omitempty"`
	JWT  bool   `sentinel:"" protobuf:"varint,3,opt,name=JWT" json:"JWT,omitempty"`
}

func (*ResponseWrapDataArgs) Descriptor ¶ 

func (*ResponseWrapDataArgs) Descriptor() ([]byte, []int)

func (*ResponseWrapDataArgs) GetData ¶ 

func (m *ResponseWrapDataArgs) GetData() string

func (*ResponseWrapDataArgs) GetJWT ¶ 

func (m *ResponseWrapDataArgs) GetJWT() bool

func (*ResponseWrapDataArgs) GetTTL ¶ 

func (m *ResponseWrapDataArgs) GetTTL() int64

func (*ResponseWrapDataArgs) ProtoMessage ¶ 

func (*ResponseWrapDataArgs) ProtoMessage()

func (*ResponseWrapDataArgs) Reset ¶ 

func (m *ResponseWrapDataArgs) Reset()

func (*ResponseWrapDataArgs) String ¶ 

func (m *ResponseWrapDataArgs) String() string

type ResponseWrapDataReply ¶ 

type ResponseWrapDataReply struct {
	WrapInfo *ResponseWrapInfo `sentinel:"" protobuf:"bytes,1,opt,name=wrap_info,json=wrapInfo" json:"wrap_info,omitempty"`
	Err      string            `sentinel:"" protobuf:"bytes,2,opt,name=err" json:"err,omitempty"`
}

func (*ResponseWrapDataReply) Descriptor ¶ 

func (*ResponseWrapDataReply) Descriptor() ([]byte, []int)

func (*ResponseWrapDataReply) GetErr ¶ 

func (m *ResponseWrapDataReply) GetErr() string

func (*ResponseWrapDataReply) GetWrapInfo ¶ 

func (m *ResponseWrapDataReply) GetWrapInfo() *ResponseWrapInfo

func (*ResponseWrapDataReply) ProtoMessage ¶ 

func (*ResponseWrapDataReply) ProtoMessage()

func (*ResponseWrapDataReply) Reset ¶ 

func (m *ResponseWrapDataReply) Reset()

func (*ResponseWrapDataReply) String ¶ 

func (m *ResponseWrapDataReply) String() string

type ResponseWrapInfo ¶ 

type ResponseWrapInfo struct {
	// Setting to non-zero specifies that the response should be wrapped.
	// Specifies the desired TTL of the wrapping token.
	TTL int64 `sentinel:"" protobuf:"varint,1,opt,name=TTL" json:"TTL,omitempty"`
	// The token containing the wrapped response
	Token string `sentinel:"" protobuf:"bytes,2,opt,name=token" json:"token,omitempty"`
	// The token accessor for the wrapped response token
	Accessor string `sentinel:"" protobuf:"bytes,3,opt,name=accessor" json:"accessor,omitempty"`
	// The creation time. This can be used with the TTL to figure out an
	// expected expiration.
	CreationTime *google_protobuf.Timestamp `sentinel:"" protobuf:"bytes,4,opt,name=creation_time,json=creationTime" json:"creation_time,omitempty"`
	// If the contained response is the output of a token creation call, the
	// created token's accessor will be accessible here
	WrappedAccessor string `sentinel:"" protobuf:"bytes,5,opt,name=wrapped_accessor,json=wrappedAccessor" json:"wrapped_accessor,omitempty"`
	// WrappedEntityID is the entity identifier of the caller who initiated the
	// wrapping request
	WrappedEntityID string `sentinel:"" protobuf:"bytes,6,opt,name=wrapped_entity_id,json=wrappedEntityID" json:"wrapped_entity_id,omitempty"`
	// The format to use. This doesn't get returned, it's only internal.
	Format string `sentinel:"" protobuf:"bytes,7,opt,name=format" json:"format,omitempty"`
	// CreationPath is the original request path that was used to create
	// the wrapped response.
	CreationPath string `sentinel:"" protobuf:"bytes,8,opt,name=creation_path,json=creationPath" json:"creation_path,omitempty"`
	// Controls seal wrapping behavior downstream for specific use cases
	SealWrap bool `sentinel:"" protobuf:"varint,9,opt,name=seal_wrap,json=sealWrap" json:"seal_wrap,omitempty"`
}

func LogicalResponseWrapInfoToProtoResponseWrapInfo ¶ 

func LogicalResponseWrapInfoToProtoResponseWrapInfo(i *wrapping.ResponseWrapInfo) (*ResponseWrapInfo, error)

func (*ResponseWrapInfo) Descriptor ¶ 

func (*ResponseWrapInfo) Descriptor() ([]byte, []int)

func (*ResponseWrapInfo) GetAccessor ¶ 

func (m *ResponseWrapInfo) GetAccessor() string

func (*ResponseWrapInfo) GetCreationPath ¶ 

func (m *ResponseWrapInfo) GetCreationPath() string

func (*ResponseWrapInfo) GetCreationTime ¶ 

func (m *ResponseWrapInfo) GetCreationTime() *google_protobuf.Timestamp

func (*ResponseWrapInfo) GetFormat ¶ 

func (m *ResponseWrapInfo) GetFormat() string

func (*ResponseWrapInfo) GetSealWrap ¶ 

func (m *ResponseWrapInfo) GetSealWrap() bool

func (*ResponseWrapInfo) GetTTL ¶ 

func (m *ResponseWrapInfo) GetTTL() int64

func (*ResponseWrapInfo) GetToken ¶ 

func (m *ResponseWrapInfo) GetToken() string

func (*ResponseWrapInfo) GetWrappedAccessor ¶ 

func (m *ResponseWrapInfo) GetWrappedAccessor() string

func (*ResponseWrapInfo) GetWrappedEntityID ¶ 

func (m *ResponseWrapInfo) GetWrappedEntityID() string

func (*ResponseWrapInfo) ProtoMessage ¶ 

func (*ResponseWrapInfo) ProtoMessage()

func (*ResponseWrapInfo) Reset ¶ 

func (m *ResponseWrapInfo) Reset()

func (*ResponseWrapInfo) String ¶ 

func (m *ResponseWrapInfo) String() string

type Secret ¶ 

type Secret struct {
	LeaseOptions *LeaseOptions `sentinel:"" protobuf:"bytes,1,opt,name=lease_options,json=leaseOptions" json:"lease_options,omitempty"`
	// InternalData is a JSON object that is stored with the secret.
	// This will be sent back during a Renew/Revoke for storing internal data
	// used for those operations.
	InternalData string `sentinel:"" protobuf:"bytes,2,opt,name=internal_data,json=internalData" json:"internal_data,omitempty"`
	// LeaseID is the ID returned to the user to manage this secret.
	// This is generated by Vault core. Any set value will be ignored.
	// For requests, this will always be blank.
	LeaseID string `sentinel:"" protobuf:"bytes,3,opt,name=lease_id,json=leaseId" json:"lease_id,omitempty"`
}

func LogicalSecretToProtoSecret ¶ 

func LogicalSecretToProtoSecret(s *logical.Secret) (*Secret, error)

func (*Secret) Descriptor ¶ 

func (*Secret) Descriptor() ([]byte, []int)

func (*Secret) GetInternalData ¶ 

func (m *Secret) GetInternalData() string

func (*Secret) GetLeaseID ¶ 

func (m *Secret) GetLeaseID() string

func (*Secret) GetLeaseOptions ¶ 

func (m *Secret) GetLeaseOptions() *LeaseOptions

func (*Secret) ProtoMessage ¶ 

func (*Secret) ProtoMessage()

func (*Secret) Reset ¶ 

func (m *Secret) Reset()

func (*Secret) String ¶ 

func (m *Secret) String() string

type SetupArgs ¶ 

type SetupArgs struct {
	BrokerID uint32            `sentinel:"" protobuf:"varint,1,opt,name=broker_id,json=brokerId" json:"broker_id,omitempty"`
	Config   map[string]string `` /* 144-byte string literal not displayed */
}

SetupArgs is the args for Setup method.

func (*SetupArgs) Descriptor ¶ 

func (*SetupArgs) Descriptor() ([]byte, []int)

func (*SetupArgs) GetBrokerID ¶ 

func (m *SetupArgs) GetBrokerID() uint32

func (*SetupArgs) GetConfig ¶ 

func (m *SetupArgs) GetConfig() map[string]string

func (*SetupArgs) ProtoMessage ¶ 

func (*SetupArgs) ProtoMessage()

func (*SetupArgs) Reset ¶ 

func (m *SetupArgs) Reset()

func (*SetupArgs) String ¶ 

func (m *SetupArgs) String() string

type SetupReply ¶ 

type SetupReply struct {
	Err string `sentinel:"" protobuf:"bytes,1,opt,name=err" json:"err,omitempty"`
}

SetupReply is the reply for Setup method.

func (*SetupReply) Descriptor ¶ 

func (*SetupReply) Descriptor() ([]byte, []int)

func (*SetupReply) GetErr ¶ 

func (m *SetupReply) GetErr() string

func (*SetupReply) ProtoMessage ¶ 

func (*SetupReply) ProtoMessage()

func (*SetupReply) Reset ¶ 

func (m *SetupReply) Reset()

func (*SetupReply) String ¶ 

func (m *SetupReply) String() string

type SpecialPathsReply ¶ 

type SpecialPathsReply struct {
	Paths *Paths `sentinel:"" protobuf:"bytes,1,opt,name=paths" json:"paths,omitempty"`
}

SpecialPathsReply is the reply for SpecialPaths method.

func (*SpecialPathsReply) Descriptor ¶ 

func (*SpecialPathsReply) Descriptor() ([]byte, []int)

func (*SpecialPathsReply) GetPaths ¶ 

func (m *SpecialPathsReply) GetPaths() *Paths

func (*SpecialPathsReply) ProtoMessage ¶ 

func (*SpecialPathsReply) ProtoMessage()

func (*SpecialPathsReply) Reset ¶ 

func (m *SpecialPathsReply) Reset()

func (*SpecialPathsReply) String ¶ 

func (m *SpecialPathsReply) String() string

type StorageClient ¶ 

type StorageClient interface {
	List(ctx context.Context, in *StorageListArgs, opts ...grpc.CallOption) (*StorageListReply, error)
	Get(ctx context.Context, in *StorageGetArgs, opts ...grpc.CallOption) (*StorageGetReply, error)
	Put(ctx context.Context, in *StoragePutArgs, opts ...grpc.CallOption) (*StoragePutReply, error)
	Delete(ctx context.Context, in *StorageDeleteArgs, opts ...grpc.CallOption) (*StorageDeleteReply, error)
}

func NewStorageClient ¶ 

func NewStorageClient(cc *grpc.ClientConn) StorageClient

type StorageDeleteArgs ¶ 

type StorageDeleteArgs struct {
	Key string `sentinel:"" protobuf:"bytes,1,opt,name=key" json:"key,omitempty"`
}

func (*StorageDeleteArgs) Descriptor ¶ 

func (*StorageDeleteArgs) Descriptor() ([]byte, []int)

func (*StorageDeleteArgs) GetKey ¶ 

func (m *StorageDeleteArgs) GetKey() string

func (*StorageDeleteArgs) ProtoMessage ¶ 

func (*StorageDeleteArgs) ProtoMessage()

func (*StorageDeleteArgs) Reset ¶ 

func (m *StorageDeleteArgs) Reset()

func (*StorageDeleteArgs) String ¶ 

func (m *StorageDeleteArgs) String() string

type StorageDeleteReply ¶ 

type StorageDeleteReply struct {
	Err string `sentinel:"" protobuf:"bytes,1,opt,name=err" json:"err,omitempty"`
}

func (*StorageDeleteReply) Descriptor ¶ 

func (*StorageDeleteReply) Descriptor() ([]byte, []int)

func (*StorageDeleteReply) GetErr ¶ 

func (m *StorageDeleteReply) GetErr() string

func (*StorageDeleteReply) ProtoMessage ¶ 

func (*StorageDeleteReply) ProtoMessage()

func (*StorageDeleteReply) Reset ¶ 

func (m *StorageDeleteReply) Reset()

func (*StorageDeleteReply) String ¶ 

func (m *StorageDeleteReply) String() string

type StorageEntry ¶ 

type StorageEntry struct {
	Key      string `sentinel:"" protobuf:"bytes,1,opt,name=key" json:"key,omitempty"`
	Value    []byte `sentinel:"" protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"`
	SealWrap bool   `sentinel:"" protobuf:"varint,3,opt,name=seal_wrap,json=sealWrap" json:"seal_wrap,omitempty"`
}

func LogicalStorageEntryToProtoStorageEntry ¶ 

func LogicalStorageEntryToProtoStorageEntry(e *logical.StorageEntry) *StorageEntry

func (*StorageEntry) Descriptor ¶ 

func (*StorageEntry) Descriptor() ([]byte, []int)

func (*StorageEntry) GetKey ¶ 

func (m *StorageEntry) GetKey() string

func (*StorageEntry) GetSealWrap ¶ 

func (m *StorageEntry) GetSealWrap() bool

func (*StorageEntry) GetValue ¶ 

func (m *StorageEntry) GetValue() []byte

func (*StorageEntry) ProtoMessage ¶ 

func (*StorageEntry) ProtoMessage()

func (*StorageEntry) Reset ¶ 

func (m *StorageEntry) Reset()

func (*StorageEntry) String ¶ 

func (m *StorageEntry) String() string

type StorageGetArgs ¶ 

type StorageGetArgs struct {
	Key string `sentinel:"" protobuf:"bytes,1,opt,name=key" json:"key,omitempty"`
}

func (*StorageGetArgs) Descriptor ¶ 

func (*StorageGetArgs) Descriptor() ([]byte, []int)

func (*StorageGetArgs) GetKey ¶ 

func (m *StorageGetArgs) GetKey() string

func (*StorageGetArgs) ProtoMessage ¶ 

func (*StorageGetArgs) ProtoMessage()

func (*StorageGetArgs) Reset ¶ 

func (m *StorageGetArgs) Reset()

func (*StorageGetArgs) String ¶ 

func (m *StorageGetArgs) String() string

type StorageGetReply ¶ 

type StorageGetReply struct {
	Entry *StorageEntry `sentinel:"" protobuf:"bytes,1,opt,name=entry" json:"entry,omitempty"`
	Err   string        `sentinel:"" protobuf:"bytes,2,opt,name=err" json:"err,omitempty"`
}

func (*StorageGetReply) Descriptor ¶ 

func (*StorageGetReply) Descriptor() ([]byte, []int)

func (*StorageGetReply) GetEntry ¶ 

func (m *StorageGetReply) GetEntry() *StorageEntry

func (*StorageGetReply) GetErr ¶ 

func (m *StorageGetReply) GetErr() string

func (*StorageGetReply) ProtoMessage ¶ 

func (*StorageGetReply) ProtoMessage()

func (*StorageGetReply) Reset ¶ 

func (m *StorageGetReply) Reset()

func (*StorageGetReply) String ¶ 

func (m *StorageGetReply) String() string

type StorageListArgs ¶ 

type StorageListArgs struct {
	Prefix string `sentinel:"" protobuf:"bytes,1,opt,name=prefix" json:"prefix,omitempty"`
}

func (*StorageListArgs) Descriptor ¶ 

func (*StorageListArgs) Descriptor() ([]byte, []int)

func (*StorageListArgs) GetPrefix ¶ 

func (m *StorageListArgs) GetPrefix() string

func (*StorageListArgs) ProtoMessage ¶ 

func (*StorageListArgs) ProtoMessage()

func (*StorageListArgs) Reset ¶ 

func (m *StorageListArgs) Reset()

func (*StorageListArgs) String ¶ 

func (m *StorageListArgs) String() string

type StorageListReply ¶ 

type StorageListReply struct {
	Keys []string `sentinel:"" protobuf:"bytes,1,rep,name=keys" json:"keys,omitempty"`
	Err  string   `sentinel:"" protobuf:"bytes,2,opt,name=err" json:"err,omitempty"`
}

func (*StorageListReply) Descriptor ¶ 

func (*StorageListReply) Descriptor() ([]byte, []int)

func (*StorageListReply) GetErr ¶ 

func (m *StorageListReply) GetErr() string

func (*StorageListReply) GetKeys ¶ 

func (m *StorageListReply) GetKeys() []string

func (*StorageListReply) ProtoMessage ¶ 

func (*StorageListReply) ProtoMessage()

func (*StorageListReply) Reset ¶ 

func (m *StorageListReply) Reset()

func (*StorageListReply) String ¶ 

func (m *StorageListReply) String() string

type StoragePutArgs ¶ 

type StoragePutArgs struct {
	Entry *StorageEntry `sentinel:"" protobuf:"bytes,1,opt,name=entry" json:"entry,omitempty"`
}

func (*StoragePutArgs) Descriptor ¶ 

func (*StoragePutArgs) Descriptor() ([]byte, []int)

func (*StoragePutArgs) GetEntry ¶ 

func (m *StoragePutArgs) GetEntry() *StorageEntry

func (*StoragePutArgs) ProtoMessage ¶ 

func (*StoragePutArgs) ProtoMessage()

func (*StoragePutArgs) Reset ¶ 

func (m *StoragePutArgs) Reset()

func (*StoragePutArgs) String ¶ 

func (m *StoragePutArgs) String() string

type StoragePutReply ¶ 

type StoragePutReply struct {
	Err string `sentinel:"" protobuf:"bytes,1,opt,name=err" json:"err,omitempty"`
}

func (*StoragePutReply) Descriptor ¶ 

func (*StoragePutReply) Descriptor() ([]byte, []int)

func (*StoragePutReply) GetErr ¶ 

func (m *StoragePutReply) GetErr() string

func (*StoragePutReply) ProtoMessage ¶ 

func (*StoragePutReply) ProtoMessage()

func (*StoragePutReply) Reset ¶ 

func (m *StoragePutReply) Reset()

func (*StoragePutReply) String ¶ 

func (m *StoragePutReply) String() string

type StorageServer ¶ 

type StorageServer interface {
	List(context.Context, *StorageListArgs) (*StorageListReply, error)
	Get(context.Context, *StorageGetArgs) (*StorageGetReply, error)
	Put(context.Context, *StoragePutArgs) (*StoragePutReply, error)
	Delete(context.Context, *StorageDeleteArgs) (*StorageDeleteReply, error)
}

type SudoPrivilegeArgs ¶ 

type SudoPrivilegeArgs struct {
	Path  string `sentinel:"" protobuf:"bytes,1,opt,name=path" json:"path,omitempty"`
	Token string `sentinel:"" protobuf:"bytes,2,opt,name=token" json:"token,omitempty"`
}

func (*SudoPrivilegeArgs) Descriptor ¶ 

func (*SudoPrivilegeArgs) Descriptor() ([]byte, []int)

func (*SudoPrivilegeArgs) GetPath ¶ 

func (m *SudoPrivilegeArgs) GetPath() string

func (*SudoPrivilegeArgs) GetToken ¶ 

func (m *SudoPrivilegeArgs) GetToken() string

func (*SudoPrivilegeArgs) ProtoMessage ¶ 

func (*SudoPrivilegeArgs) ProtoMessage()

func (*SudoPrivilegeArgs) Reset ¶ 

func (m *SudoPrivilegeArgs) Reset()

func (*SudoPrivilegeArgs) String ¶ 

func (m *SudoPrivilegeArgs) String() string

type SudoPrivilegeReply ¶ 

type SudoPrivilegeReply struct {
	Sudo bool `sentinel:"" protobuf:"varint,1,opt,name=sudo" json:"sudo,omitempty"`
}

func (*SudoPrivilegeReply) Descriptor ¶ 

func (*SudoPrivilegeReply) Descriptor() ([]byte, []int)

func (*SudoPrivilegeReply) GetSudo ¶ 

func (m *SudoPrivilegeReply) GetSudo() bool

func (*SudoPrivilegeReply) ProtoMessage ¶ 

func (*SudoPrivilegeReply) ProtoMessage()

func (*SudoPrivilegeReply) Reset ¶ 

func (m *SudoPrivilegeReply) Reset()

func (*SudoPrivilegeReply) String ¶ 

func (m *SudoPrivilegeReply) String() string

type SystemViewClient ¶ 

type SystemViewClient interface {
	// DefaultLeaseTTL returns the default lease TTL set in Vault configuration
	DefaultLeaseTTL(ctx context.Context, in *Empty, opts ...grpc.CallOption) (*TTLReply, error)
	// MaxLeaseTTL returns the max lease TTL set in Vault configuration; backend
	// authors should take care not to issue credentials that last longer than
	// this value, as Vault will revoke them
	MaxLeaseTTL(ctx context.Context, in *Empty, opts ...grpc.CallOption) (*TTLReply, error)
	// SudoPrivilege returns true if given path has sudo privileges
	// for the given client token
	SudoPrivilege(ctx context.Context, in *SudoPrivilegeArgs, opts ...grpc.CallOption) (*SudoPrivilegeReply, error)
	// Tainted, returns true if the mount is tainted. A mount is tainted if it is in the
	// process of being unmounted. This should only be used in special
	// circumstances; a primary use-case is as a guard in revocation functions.
	// If revocation of a backend's leases fails it can keep the unmounting
	// process from being successful. If the reason for this failure is not
	// relevant when the mount is tainted (for instance, saving a CRL to disk
	// when the stored CRL will be removed during the unmounting process
	// anyways), we can ignore the errors to allow unmounting to complete.
	Tainted(ctx context.Context, in *Empty, opts ...grpc.CallOption) (*TaintedReply, error)
	// CachingDisabled returns true if caching is disabled. If true, no caches
	// should be used, despite known slowdowns.
	CachingDisabled(ctx context.Context, in *Empty, opts ...grpc.CallOption) (*CachingDisabledReply, error)
	// ReplicationState indicates the state of cluster replication
	ReplicationState(ctx context.Context, in *Empty, opts ...grpc.CallOption) (*ReplicationStateReply, error)
	// ResponseWrapData wraps the given data in a cubbyhole and returns the
	// token used to unwrap.
	ResponseWrapData(ctx context.Context, in *ResponseWrapDataArgs, opts ...grpc.CallOption) (*ResponseWrapDataReply, error)
	// MlockEnabled returns the configuration setting for enabling mlock on
	// plugins.
	MlockEnabled(ctx context.Context, in *Empty, opts ...grpc.CallOption) (*MlockEnabledReply, error)
	// LocalMount, when run from a system view attached to a request, indicates
	// whether the request is affecting a local mount or not
	LocalMount(ctx context.Context, in *Empty, opts ...grpc.CallOption) (*LocalMountReply, error)
}

func NewSystemViewClient ¶ 

func NewSystemViewClient(cc *grpc.ClientConn) SystemViewClient

type SystemViewServer ¶ 

type SystemViewServer interface {
	// DefaultLeaseTTL returns the default lease TTL set in Vault configuration
	DefaultLeaseTTL(context.Context, *Empty) (*TTLReply, error)
	// MaxLeaseTTL returns the max lease TTL set in Vault configuration; backend
	// authors should take care not to issue credentials that last longer than
	// this value, as Vault will revoke them
	MaxLeaseTTL(context.Context, *Empty) (*TTLReply, error)
	// SudoPrivilege returns true if given path has sudo privileges
	// for the given client token
	SudoPrivilege(context.Context, *SudoPrivilegeArgs) (*SudoPrivilegeReply, error)
	// Tainted, returns true if the mount is tainted. A mount is tainted if it is in the
	// process of being unmounted. This should only be used in special
	// circumstances; a primary use-case is as a guard in revocation functions.
	// If revocation of a backend's leases fails it can keep the unmounting
	// process from being successful. If the reason for this failure is not
	// relevant when the mount is tainted (for instance, saving a CRL to disk
	// when the stored CRL will be removed during the unmounting process
	// anyways), we can ignore the errors to allow unmounting to complete.
	Tainted(context.Context, *Empty) (*TaintedReply, error)
	// CachingDisabled returns true if caching is disabled. If true, no caches
	// should be used, despite known slowdowns.
	CachingDisabled(context.Context, *Empty) (*CachingDisabledReply, error)
	// ReplicationState indicates the state of cluster replication
	ReplicationState(context.Context, *Empty) (*ReplicationStateReply, error)
	// ResponseWrapData wraps the given data in a cubbyhole and returns the
	// token used to unwrap.
	ResponseWrapData(context.Context, *ResponseWrapDataArgs) (*ResponseWrapDataReply, error)
	// MlockEnabled returns the configuration setting for enabling mlock on
	// plugins.
	MlockEnabled(context.Context, *Empty) (*MlockEnabledReply, error)
	// LocalMount, when run from a system view attached to a request, indicates
	// whether the request is affecting a local mount or not
	LocalMount(context.Context, *Empty) (*LocalMountReply, error)
}

type TTLReply ¶ 

type TTLReply struct {
	TTL int64 `sentinel:"" protobuf:"varint,1,opt,name=TTL" json:"TTL,omitempty"`
}

func (*TTLReply) Descriptor ¶ 

func (*TTLReply) Descriptor() ([]byte, []int)

func (*TTLReply) GetTTL ¶ 

func (m *TTLReply) GetTTL() int64

func (*TTLReply) ProtoMessage ¶ 

func (*TTLReply) ProtoMessage()

func (*TTLReply) Reset ¶ 

func (m *TTLReply) Reset()

func (*TTLReply) String ¶ 

func (m *TTLReply) String() string

type TaintedReply ¶ 

type TaintedReply struct {
	Tainted bool `sentinel:"" protobuf:"varint,1,opt,name=tainted" json:"tainted,omitempty"`
}

func (*TaintedReply) Descriptor ¶ 

func (*TaintedReply) Descriptor() ([]byte, []int)

func (*TaintedReply) GetTainted ¶ 

func (m *TaintedReply) GetTainted() bool

func (*TaintedReply) ProtoMessage ¶ 

func (*TaintedReply) ProtoMessage()

func (*TaintedReply) Reset ¶ 

func (m *TaintedReply) Reset()

func (*TaintedReply) String ¶ 

func (m *TaintedReply) String() string

type TypeReply ¶ 

type TypeReply struct {
	Type uint32 `sentinel:"" protobuf:"varint,1,opt,name=type" json:"type,omitempty"`
}

TypeReply is the reply for the Type method.

func (*TypeReply) Descriptor ¶ 

func (*TypeReply) Descriptor() ([]byte, []int)

func (*TypeReply) GetType ¶ 

func (m *TypeReply) GetType() uint32

func (*TypeReply) ProtoMessage ¶ 

func (*TypeReply) ProtoMessage()

func (*TypeReply) Reset ¶ 

func (m *TypeReply) Reset()

func (*TypeReply) String ¶ 

func (m *TypeReply) String() string

Source Files ¶

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.