vault

Documentation

Index

• type Client
• type ClientBuilder
• type CreateToken
• type Interface
  • func New(namespace string, createTokenFn func(ns string) CreateToken, ...) (Interface, error)
• type Vault
  • func (v *Vault) IsVaultInitializedAndUnsealed() error
  • func (v *Vault) Sign(csrPEM []byte, duration time.Duration) (cert []byte, ca []byte, err error)

Types

type Client

type Client interface {
	NewRequest(method, requestPath string) *vault.Request
	RawRequest(r *vault.Request) (*vault.Response, error)
	SetToken(v string)
}

Client implements functionality to talk to a Vault server.

type ClientBuilder

type ClientBuilder func(namespace string, _ func(ns string) CreateToken, _ internalinformers.SecretLister, _ v1.GenericIssuer) (Interface, error)

ClientBuilder is a function type that returns a new Interface. Can be used in tests to create a mock signer of Vault certificate requests.

type CreateToken

type CreateToken func(ctx context.Context, saName string, req *authv1.TokenRequest, opts metav1.CreateOptions) (*authv1.TokenRequest, error)

For mocking purposes.

type Interface

type Interface interface {
	Sign(csrPEM []byte, duration time.Duration) (certPEM []byte, caPEM []byte, err error)
	IsVaultInitializedAndUnsealed() error
}

Interface implements various high level functionality related to connecting with a Vault server, verifying its status and signing certificate request for Vault's certificate.

func New

func New(namespace string, createTokenFn func(ns string) CreateToken, secretsLister internalinformers.SecretLister, issuer v1.GenericIssuer) (Interface, error)

New returns a new Vault instance with the given namespace, issuer and secrets lister. Returned errors may be network failures and should be considered for retrying.

type Vault

type Vault struct {
	// contains filtered or unexported fields
}

Vault implements Interface and holds a Vault issuer, secrets lister and a Vault client.

func (*Vault) IsVaultInitializedAndUnsealed

func (v *Vault) IsVaultInitializedAndUnsealed() error

func (*Vault) Sign

func (v *Vault) Sign(csrPEM []byte, duration time.Duration) (cert []byte, ca []byte, err error)

Sign will connect to a Vault instance to sign a certificate signing request.