conjur

Documentation

Index

• func ProviderFactory(options plugin_v1.ProviderOptions) (plugin_v1.Provider, error)
• type Provider
  • func (p *Provider) GetName() string
  • func (p *Provider) GetValue(id string) ([]byte, error)

Functions

func ProviderFactory

func ProviderFactory(options plugin_v1.ProviderOptions) (plugin_v1.Provider, error)

ProviderFactory constructs a Conjur Provider. The API client is configured from environment variables. To authenticate with Conjur, you can provide Secretless with:

• A Conjur username and API key
• A path to a file where a Conjur access token is stored
• Config info to use the Conjur k8s authenticator client to retrieve an access token from Conjur (i.e. Conjur version, account, authn url, username, and SSL cert)

Types

type Provider

type Provider struct {
	// Data related to Provider config
	AuthenticationMutex *sync.Mutex
	Authenticator       *authenticator.Authenticator
	Config              conjurapi.Config
	Conjur              *conjurapi.Client
	Version             string
	Name                string

	// Credentials for API-key based auth
	APIKey   string
	Username string

	// Authn URL for K8s-authenticator based auth
	AuthnURL string
}

Provider provides data values from the Conjur vault.

func (*Provider) GetName

func (p *Provider) GetName() string

GetName returns the name of the provider

func (*Provider) GetValue

func (p *Provider) GetValue(id string) ([]byte, error)

GetValue obtains a value by ID. The recognized IDs are:

• "accessToken"
• Any Conjur variable ID