vault

Documentation

Index

• Constants
• type ClientLogger
  • func (l ClientLogger) Debug(msg string, args ...map[string]interface{})
  • func (l ClientLogger) Error(msg string, args ...map[string]interface{})
  • func (l ClientLogger) Info(msg string, args ...map[string]interface{})
  • func (l ClientLogger) Trace(msg string, args ...map[string]interface{})
  • func (l ClientLogger) Warn(msg string, args ...map[string]interface{})
• type Config
• type Provider
  • func (*Provider) NewMutator(obj metav1.Object, logger *slog.Logger) (provider.Mutator, error)

Constants

const (
	// AgentConfig is a string that represents the configuration for the Vault agent.
	// It includes the path to the pid file, and the configuration for automatic authentication.
	// The automatic authentication is configured to use the Kubernetes method,
	// with a specified namespace, mount path, and role.
	// The configuration also includes a sink of type "file", which specifies the path
	// to the token that the Vault agent will use for authentication.
	// This part of the code is called when the 'UseAgent' annotation is set to true.
	// When 'UseAgent' is true, the Vault agent is used for handling Vault authentication and token renewal.
	// This ConfigMap, created in the active selection, is necessary for its configuration.
	// It sets the name of the ConfigMap, assigns the owner references, and populates the data with the agent configuration.
	// The agent configuration is formatted with the Vault namespace, path, and role specified in the manager's configuration.
	AgentConfig = `` /* 250-byte string literal not displayed */

	ProviderName = "vault"
)

Types

type ClientLogger

type ClientLogger struct {
	Logger *slog.Logger
}

func (ClientLogger) Debug

func (l ClientLogger) Debug(msg string, args ...map[string]interface{})

func (ClientLogger) Error

func (l ClientLogger) Error(msg string, args ...map[string]interface{})

func (ClientLogger) Info

func (l ClientLogger) Info(msg string, args ...map[string]interface{})

func (ClientLogger) Trace

func (l ClientLogger) Trace(msg string, args ...map[string]interface{})

func (ClientLogger) Warn

func (l ClientLogger) Warn(msg string, args ...map[string]interface{})

type Config

type Config struct {
	ObjectNamespace               string
	Addr                          string
	AuthMethod                    string
	Role                          string
	Path                          string
	SkipVerify                    bool
	TLSSecret                     string
	ClientTimeout                 time.Duration
	UseAgent                      bool
	TransitKeyID                  string
	TransitPath                   string
	TransitBatchSize              int
	CtConfigMap                   string
	CtImage                       string
	CtInjectInInitcontainers      bool
	CtOnce                        bool
	CtImagePullPolicy             corev1.PullPolicy
	CtShareProcess                bool
	CtShareProcessDefault         string
	CtCPU                         resource.Quantity
	CtMemory                      resource.Quantity
	ConfigfilePath                string
	AgentConfigMap                string
	AgentOnce                     bool
	AgentShareProcess             bool
	AgentShareProcessDefault      string
	AgentCPULimit                 resource.Quantity
	AgentMemoryLimit              resource.Quantity
	AgentCPURequest               resource.Quantity
	AgentMemoryRequest            resource.Quantity
	AgentImage                    string
	AgentImagePullPolicy          corev1.PullPolicy
	AgentEnvVariables             string
	ServiceAccountTokenVolumeName string
	TokenAuthMount                string
	VaultNamespace                string
	VaultServiceAccount           string
	Token                         string
	IgnoreMissingSecrets          string
	Passthrough                   string
	LogLevel                      string
	FromPath                      string
}

type Provider

type Provider struct{}

func (*Provider) NewMutator

func (*Provider) NewMutator(obj metav1.Object, logger *slog.Logger) (provider.Mutator, error)