vault

Documentation

Overview

KeyVal V2 secrets implementation for Hashicorp Vault

Index

• type Manager
  • func NewManager(opts *NewManagerOpts) (*Manager, error)
  • func (m *Manager) DeleteCredentials(ctx context.Context, secretID string) error
  • func (m *Manager) ReadCredentials(ctx context.Context, secretID string, creds any) error
  • func (m *Manager) SaveCredentials(ctx context.Context, orgID string, creds any) (string, error)
• type NewManagerOpts
• type Role
  • func (r Role) String() string

Types

type Manager

type Manager struct {
	// contains filtered or unexported fields
}

func NewManager

func NewManager(opts *NewManagerOpts) (*Manager, error)

NewManager creates a new credentials manager that uses Hashicorp Vault as backend Configured to write secrets in the KVv2 engine referenced by the provided mount path. SecretPrefix is used to namespace secrets in the KVv2 engine during write operations.

func (*Manager) DeleteCredentials

func (m *Manager) DeleteCredentials(ctx context.Context, secretID string) error

func (*Manager) ReadCredentials

func (m *Manager) ReadCredentials(ctx context.Context, secretID string, creds any) error

func (*Manager) SaveCredentials

func (m *Manager) SaveCredentials(ctx context.Context, orgID string, creds any) (string, error)

type NewManagerOpts

type NewManagerOpts struct {
	AuthToken, Address, MountPath, SecretPrefix string
	Logger                                      log.Logger
	Role                                        credentials.Role
}

type Role

type Role int64

const (
	Reader Role = iota
	Writer
)

func (Role) String

func (r Role) String() string