conjur

Documentation

Index

• func ProviderFactory(options plugin_v1.ProviderOptions) (plugin_v1.Provider, error)
• type Provider
  • func (p *Provider) GetName() string
  • func (p *Provider) GetValue(id string) ([]byte, error)
  • func (p *Provider) GetValues(ids ...string) (map[string]plugin_v1.ProviderResponse, error)

Functions

func ProviderFactory

func ProviderFactory(options plugin_v1.ProviderOptions) (plugin_v1.Provider, error)

ProviderFactory constructs a Conjur Provider. The API client is configured from environment variables. To authenticate with Conjur, you can provide Secretless with:

• A Conjur username and API key
• A path to a file where a Conjur access token is stored
• Config info to use the Conjur k8s authenticator client to retrieve an access token from Conjur (i.e. Conjur version, account, authn url, username, and SSL cert)

Types

type Provider

type Provider struct {
	// Data related to Provider config
	AuthenticationMutex *sync.Mutex
	Authenticator       authenticator.Authenticator
	AuthenticatorConfig authnConfig.Configuration
	Config              conjurapi.Config
	Conjur              *conjurapi.Client
	Version             string
	Name                string

	// Credentials for API-key based auth
	APIKey   string
	Username string

	// Authn URL for K8s-authenticator based auth
	AuthnURL string
}

Provider provides data values from the Conjur vault.

func (*Provider) GetName

func (p *Provider) GetName() string

GetName returns the name of the provider

func (*Provider) GetValue

func (p *Provider) GetValue(id string) ([]byte, error)

GetValue obtains a value by ID. The recognized IDs are:

• "accessToken"
• Any Conjur variable ID

func (*Provider) GetValues

func (p *Provider) GetValues(ids ...string) (map[string]plugin_v1.ProviderResponse, error)

GetValues takes in variable ids and returns their resolved values. This method is needed to the Provider interface