vault

Documentation

Index

• Constants
• func ConfigItems() []auconfigapi.ConfigItem
• type Impl
  • func (v *Impl) Authenticate(ctx context.Context) error
  • func (v *Impl) ObtainSecrets(ctx context.Context) error
  • func (v *Impl) Setup(ctx context.Context) error
• type K8sAuth
• type K8sAuthRequest
• type K8sAuthResponse
• type SecretsResponse
• type SecretsResponseData
• type Vault
  • func New() Vault

Constants

const (
	VaultEnabled                 = "VAULT_ENABLED"
	VaultServer                  = "VAULT_SERVER"
	VaultAuthToken               = "VAULT_AUTH_TOKEN"
	VaultAuthKubernetesRole      = "VAULT_AUTH_KUBERNETES_ROLE"
	VaultAuthKubernetesTokenPath = "VAULT_AUTH_KUBERNETES_TOKEN_PATH"
	VaultAuthKubernetesBackend   = "VAULT_AUTH_KUBERNETES_BACKEND"
	VaultSecretsConfig           = "VAULT_SECRETS_CONFIG"
)

Functions

func ConfigItems

func ConfigItems() []auconfigapi.ConfigItem

Types

type Impl

type Impl struct {
	VaultEnabled                 bool
	VaultProtocol                string
	VaultServer                  string
	VaultAuthToken               string
	VaultAuthKubernetesRole      string
	VaultAuthKubernetesTokenPath string
	VaultAuthKubernetesBackend   string
	VaultSecretsConfig           vaultSecretsDef

	VaultClient aurestclientapi.Client
}

func (*Impl) Authenticate

func (v *Impl) Authenticate(ctx context.Context) error

func (*Impl) ObtainSecrets

func (v *Impl) ObtainSecrets(ctx context.Context) error

func (*Impl) Setup

func (v *Impl) Setup(ctx context.Context) error

type K8sAuth

type K8sAuth struct {
	ClientToken string `json:"client_token"`
}

type K8sAuthRequest

type K8sAuthRequest struct {
	Jwt  string `json:"jwt"`
	Role string `json:"role"`
}

type K8sAuthResponse

type K8sAuthResponse struct {
	Auth   *K8sAuth `json:"auth"`
	Errors []string `json:"errors"`
}

type SecretsResponse

type SecretsResponse struct {
	Data   *SecretsResponseData `json:"data"`
	Errors []string             `json:"errors"`
}

type SecretsResponseData

type SecretsResponseData struct {
	Data map[string]string `json:"data"`
}

type Vault

type Vault interface {
	Setup(ctx context.Context) error
	Authenticate(ctx context.Context) error
	ObtainSecrets(ctx context.Context) error
}

func New

func New() Vault