vault

Documentation

Index

• func NewClient(thelmaConfig config.Config, creds credentials.Credentials, ...) (*vaultapi.Client, error)
• func NewVaultTokenStore() stores.Store
• func TokenProvider(thelmaConfig config.Config, creds credentials.Credentials, ...) (credentials.TokenProvider, error)
• type ClientOption
• type ClientOptions
  • func (c *ClientOptions) ConfigureVaultClient(configureFn func(*vaultapi.Config))
• type MaskingRoundTripper
  • func (m MaskingRoundTripper) RoundTrip(req *http.Request) (*http.Response, error)

Functions

func NewClient

func NewClient(thelmaConfig config.Config, creds credentials.Credentials, clientOptions ...ClientOption) (*vaultapi.Client, error)

NewClient returns a new authenticated vault client

func NewVaultTokenStore

func NewVaultTokenStore() stores.Store

NewVaultTokenStore returns a token store that reads and writes values to the current user's ~/.vault-token file. (Note that token keys are ignored.)

func TokenProvider

func TokenProvider(thelmaConfig config.Config, creds credentials.Credentials, clientOptions ...ClientOption) (credentials.TokenProvider, error)

TokenProvider returns a new credentials.TokenProvider that provides a Vault token

Types

type ClientOption

type ClientOption func(*ClientOptions)

type ClientOptions

type ClientOptions struct {
	CredentialStore    stores.Store
	VaultClientOptions []func(*vaultapi.Config)
}

func (*ClientOptions) ConfigureVaultClient

func (c *ClientOptions) ConfigureVaultClient(configureFn func(*vaultapi.Config))

type MaskingRoundTripper

type MaskingRoundTripper struct {
	// contains filtered or unexported fields
}

MaskingRoundTripper implements the http.RoundTripper interface, automatically masking any secrets returned from the Vault API

func (MaskingRoundTripper) RoundTrip

func (m MaskingRoundTripper) RoundTrip(req *http.Request) (*http.Response, error)