vault

Jul 25, 2019

Changes in this version

+ func NoopBackendFactory(_ context.Context, _ *logical.BackendConfig) (logical.Backend, error)

+ type NoopBackend struct

+ BackendType logical.BackendType

+ DefaultLeaseTTL time.Duration

+ Invalidations []string

+ Login []string

+ MaxLeaseTTL time.Duration

+ Paths []string

+ RequestHandler RouterTestHandlerFunc

+ Requests []*logical.Request

+ Response *logical.Response

+ Root []string

+ func (n *NoopBackend) Cleanup(ctx context.Context)

+ func (n *NoopBackend) HandleExistenceCheck(ctx context.Context, req *logical.Request) (bool, bool, error)

+ func (n *NoopBackend) HandleRequest(ctx context.Context, req *logical.Request) (*logical.Response, error)

+ func (n *NoopBackend) Initialize(ctx context.Context) error

+ func (n *NoopBackend) InvalidateKey(ctx context.Context, k string)

+ func (n *NoopBackend) Logger() log.Logger

+ func (n *NoopBackend) Setup(ctx context.Context, config *logical.BackendConfig) error

+ func (n *NoopBackend) SpecialPaths() *logical.Paths

+ func (n *NoopBackend) System() logical.SystemView

+ func (n *NoopBackend) Type() logical.BackendType

+ type RouterTestHandlerFunc func(context.Context, *logical.Request) (*logical.Response, error)

Apr 11, 2019

Changes in this version

+ func AddNoopAudit(conf *CoreConfig)

type ACL

+ func (a *ACL) CheckAllowedFromNonExactPaths(path string, bareMount bool) *ACLPermissions

type LicensingConfig

+ AdditionalPublicKeys []interface{}

Mar 18, 2019

Changes in this version

+ func NewRequestForwardingHandler(c *Core, fws *http2.Server, perfStandbySlots chan struct{}, ...) (*requestForwardingHandler, error)

+ type ClusterClient interface

+ ClientLookup func(context.Context, *tls.CertificateRequestInfo) (*tls.Certificate, error)

+ type ClusterHandler interface

+ CALookup func(context.Context) (*x509.Certificate, error)

+ Handoff func(context.Context, *sync.WaitGroup, chan struct{}, *tls.Conn) error

+ ServerLookup func(context.Context, *tls.ClientHelloInfo) (*tls.Certificate, error)

+ Stop func() error

+ type ClusterListener struct

+ func (cl *ClusterListener) AddClient(alpn string, client ClusterClient)

+ func (cl *ClusterListener) AddHandler(alpn string, handler ClusterHandler)

+ func (cl *ClusterListener) RemoveClient(alpn string)

+ func (cl *ClusterListener) Run(ctx context.Context) error

+ func (cl *ClusterListener) Server() *http2.Server

+ func (cl *ClusterListener) Stop()

+ func (cl *ClusterListener) StopHandler(alpn string)

+ func (cl *ClusterListener) TLSConfig(ctx context.Context) (*tls.Config, error)

type CoreConfig

+ CounterSyncInterval time.Duration

+ MetricsHelper *metricsutil.MetricsHelper

+ type DatedRequestCounter struct

+ StartTime time.Time

type PathRules

+ HasSegmentWildcards bool

+ type RequestCounter struct

+ Total *uint64

type TestClusterCore

+ Barrier SecurityBarrier

Feb 12, 2019

Changes in this version

+ func IsFatalError(err error) bool

type APIMountConfig

+ AllowedResponseHeaders []string

type BarrierView

+ func (v *BarrierView) Prefix() string

+ type ClusterLeaderParams struct

+ LeaderClusterAddr string

+ LeaderRedirectAddr string

+ LeaderUUID string

type Core

+ func (c *Core) SetLoadCaseSensitiveIdentityStore(caseSensitive bool)

+ func (c *Core) SetNeverBecomeActive(on bool)

type MountConfig

+ AllowedResponseHeaders []string

type NonFatalError

+ func NewNonFatalError(err error) *NonFatalError

type PathRules

+ IsPrefix bool

+ Path string

type Seal

+ RecoveryKey func(context.Context) ([]byte, error)

type TestClusterCore

+ func (c *TestClusterCore) Seal(t testing.T)

type TestSealOpts

+ Secret []byte

Dec 3, 2018

Changes in this version

+ const StoredBarrierKeysPath

+ var ErrPluginBadType = errors.New("unable to determine plugin type")

+ func NewMockBuiltinRegistry() *mockBuiltinRegistry

type APIMountConfig

+ TokenType string

+ type BuiltinRegistry interface

+ Contains func(name string, pluginType consts.PluginType) bool

+ Get func(name string, pluginType consts.PluginType) (func() (interface{}, error), bool)

+ Keys func(pluginType consts.PluginType) []string

type Core

+ func (c *Core) IsBatchTokenCreationRequest(ctx context.Context, path string) (bool, error)

+ func (c *Core) IsInSealMigration() bool

+ func (c *Core) PhysicalSealConfigs(ctx context.Context) (*SealConfig, *SealConfig, error)

+ func (c *Core) SetSealsForMigration(migrationSeal, newSeal Seal)

type CoreConfig

+ BuiltinRegistry BuiltinRegistry

+ DisableIndexing bool

+ DisableKeyEncodingChecks bool

+ func (c *CoreConfig) Clone() *CoreConfig

type MountConfig

+ TokenType logical.TokenType

type PluginCatalog

+ func (c *PluginCatalog) UpgradePlugins(ctx context.Context, logger log.Logger) error

type Seal

+ func NewAutoSeal(lowLevel seal.Access) Seal

+ SetCachedBarrierConfig func(*SealConfig)

+ SetCachedRecoveryConfig func(*SealConfig)

type TestClusterCore

+ CoreConfig *CoreConfig

Oct 23, 2018

Changes in this version

+ const CoreLockPath

+ var LastWAL = lastWALImpl

Oct 2, 2018

Changes in this version

+ const DRReplicationALPN

+ const PerformanceReplicationALPN

+ var NamespaceByID func(context.Context, string, *Core) (*namespace.Namespace, error) = namespaceByID

+ var TokenLength = 24

+ var WaitUntilWALShipped = waitUntilWALShippedImpl

+ func CleanupClusters(clusters []*TestCluster)

+ func SetReplicationFailureMode(core *TestClusterCore, mode uint32)

type ACLPermissions

+ ControlGroup *ControlGroup

+ MFAMethods []string

type ACLResults

+ CapabilitiesBitmap uint32

+ ControlGroup *ControlGroup

type AuditBroker

+ func (a *AuditBroker) IsLocal(name string) (bool, error)

+ type ClientKey struct

+ D []byte

+ Type string

+ X []byte

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ Y []byte

+ func (*ClientKey) Descriptor() ([]byte, []int)

+ func (*ClientKey) ProtoMessage()

+ func (m *ClientKey) GetD() []byte

+ func (m *ClientKey) GetType() string

+ func (m *ClientKey) GetX() []byte

+ func (m *ClientKey) GetY() []byte

+ func (m *ClientKey) Reset()

+ func (m *ClientKey) String() string

+ func (m *ClientKey) XXX_DiscardUnknown()

+ func (m *ClientKey) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ClientKey) XXX_Merge(src proto.Message)

+ func (m *ClientKey) XXX_Size() int

+ func (m *ClientKey) XXX_Unmarshal(b []byte) error

+ type ControlGroup struct

+ Factors []*ControlGroupFactor

+ TTL time.Duration

+ type ControlGroupFactor struct

+ Identity *IdentityFactor

+ Name string

+ type ControlGroupHCL struct

+ Factors map[string]*ControlGroupFactor

+ TTL interface{}

type Core

+ func TestCoreUI(t testing.T, enableUI bool) *Core

+ func TestCoreUnsealedWithConfig(t testing.T, conf *CoreConfig) (*Core, [][]byte, string)

+ func TestCoreWithConfig(t testing.T, conf *CoreConfig) *Core

+ func TestCoreWithSealAndUI(t testing.T, opts *CoreConfig) *Core

+ func (c *Core) Features() license.Features

+ func (c *Core) HasFeature(license.Features) bool

+ func (c *Core) RegisterAuth(ctx context.Context, tokenTTL time.Duration, path string, auth *logical.Auth) error

type CoreConfig

+ DevLicenseDuration time.Duration

+ DisablePerformanceStandby bool

+ DisableSealWrap bool

+ LicensingConfig *LicensingConfig

+ type ExpireLeaseStrategy func(context.Context, *ExpirationManager, *leaseEntry)

type GenerateRootStrategy

+ var GenerateDROperationTokenStrategy GenerateRootStrategy = generateStandardRootToken{}

+ type IdentityFactor struct

+ ApprovalsRequired int

+ GroupIDs []string

+ GroupNames []string

+ type LicensingConfig struct

type ListingVisibilityType

+ const MountTableNoUpdateStorage

+ const MountTableUpdateStorage

type MountEntry

+ NamespaceID string

+ func (e *MountEntry) APIPath() string

+ func (e *MountEntry) Namespace() *namespace.Namespace

+ func (e *MountEntry) ViewPath() string

type PathRules

+ ControlGroupHCL *ControlGroupHCL

+ MFAMethodsHCL []string

+ type PerfStandbyElectionInput struct

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*PerfStandbyElectionInput) Descriptor() ([]byte, []int)

+ func (*PerfStandbyElectionInput) ProtoMessage()

+ func (m *PerfStandbyElectionInput) Reset()

+ func (m *PerfStandbyElectionInput) String() string

+ func (m *PerfStandbyElectionInput) XXX_DiscardUnknown()

+ func (m *PerfStandbyElectionInput) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *PerfStandbyElectionInput) XXX_Merge(src proto.Message)

+ func (m *PerfStandbyElectionInput) XXX_Size() int

+ func (m *PerfStandbyElectionInput) XXX_Unmarshal(b []byte) error

+ type PerfStandbyElectionResponse struct

+ CaCert []byte

+ ClientCert []byte

+ ClientKey *ClientKey

+ ClusterId string

+ Id string

+ PrimaryClusterAddr string

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*PerfStandbyElectionResponse) Descriptor() ([]byte, []int)

+ func (*PerfStandbyElectionResponse) ProtoMessage()

+ func (m *PerfStandbyElectionResponse) GetCaCert() []byte

+ func (m *PerfStandbyElectionResponse) GetClientCert() []byte

+ func (m *PerfStandbyElectionResponse) GetClientKey() *ClientKey

+ func (m *PerfStandbyElectionResponse) GetClusterId() string

+ func (m *PerfStandbyElectionResponse) GetId() string

+ func (m *PerfStandbyElectionResponse) GetPrimaryClusterAddr() string

+ func (m *PerfStandbyElectionResponse) Reset()

+ func (m *PerfStandbyElectionResponse) String() string

+ func (m *PerfStandbyElectionResponse) XXX_DiscardUnknown()

+ func (m *PerfStandbyElectionResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *PerfStandbyElectionResponse) XXX_Merge(src proto.Message)

+ func (m *PerfStandbyElectionResponse) XXX_Size() int

+ func (m *PerfStandbyElectionResponse) XXX_Unmarshal(b []byte) error

type Policy

+ func (p *Policy) ShallowClone() *Policy

+ type RegisterAuthFunc func(context.Context, time.Duration, string, *logical.Auth) error

+ type ReplicatedCluster struct

+ ClusterID string

+ PrimaryClusterAddr string

+ State consts.ReplicationState

type ReplicatedClusters

+ DR *ReplicatedCluster

+ Performance *ReplicatedCluster

+ type ReplicationTokenInfo struct

type RequestForwardingClient

+ PerformanceStandbyElectionRequest func(ctx context.Context, in *PerfStandbyElectionInput, opts ...grpc.CallOption) (RequestForwarding_PerformanceStandbyElectionRequestClient, error)

type RequestForwardingServer

+ PerformanceStandbyElectionRequest func(*PerfStandbyElectionInput, ...) error

+ type RequestForwarding_PerformanceStandbyElectionRequestClient interface

+ Recv func() (*PerfStandbyElectionResponse, error)

+ type RequestForwarding_PerformanceStandbyElectionRequestServer interface

+ Send func(*PerfStandbyElectionResponse) error

type Router

+ func (r *Router) MatchingAPIPrefixByStoragePath(ctx context.Context, path string) (*namespace.Namespace, string, string, bool)

type SealAccess

+ func (s *SealAccess) BarrierType() string

+ type SecondaryConnsCacheVals struct

+ Connection net.Conn

+ ID string

+ Mode consts.ReplicationState

+ Token string

+ type UnsealStrategy interface

Sep 6, 2018

Changes in this version

type Core

+ func (c *Core) AddLogger(logger log.Logger)

+ func (c *Core) SetLogLevel(level log.Level)

type CoreConfig

+ AllLoggers []log.Logger

Aug 28, 2018

Changes in this version

type AuthResults

+ DeniedError bool

type Core

+ func (c *Core) PerfStandby() bool

type Policy

+ Templated bool

type PolicyEntry

+ Templated bool

+ type TemplateError struct

+ Err error

+ func (t *TemplateError) Error() string

+ func (t *TemplateError) WrappedErrors() []error

Jul 25, 2018

Changes in this version

+ var DefaultMaxRequestDuration = 999999 * time.Hour

type ExpirationManager

+ func (m *ExpirationManager) LazyRevoke(leaseID string) error

+ type HandlerProperties struct

+ Core *Core

+ DisablePrintableCheck bool

+ MaxRequestDuration time.Duration

+ MaxRequestSize int64

type IdentityStore

+ func (i *IdentityStore) UpsertGroupInTxn(txn *memdb.Txn, group *identity.Group, persist bool) error

type ListingVisibilityType

+ const ListingVisibilityDefault

Jun 6, 2018

Changes in this version

+ func TestWaitActiveWithError(core *Core) error

type Core

+ func (c *Core) RekeyVerify(ctx context.Context, key []byte, nonce string, recovery bool) (ret *RekeyVerifyResult, retErr logical.HTTPCodedError)

+ func (c *Core) RekeyVerifyRestart(recovery bool) logical.HTTPCodedError

type EchoReply

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (dst *EchoReply) XXX_Merge(src proto.Message)

+ func (m *EchoReply) XXX_DiscardUnknown()

+ func (m *EchoReply) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *EchoReply) XXX_Size() int

+ func (m *EchoReply) XXX_Unmarshal(b []byte) error

type EchoRequest

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (dst *EchoRequest) XXX_Merge(src proto.Message)

+ func (m *EchoRequest) XXX_DiscardUnknown()

+ func (m *EchoRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *EchoRequest) XXX_Size() int

+ func (m *EchoRequest) XXX_Unmarshal(b []byte) error

type ExpirationManager

+ func (m *ExpirationManager) CreateOrFetchRevocationLeaseByToken(te *TokenEntry) (string, error)

+ type ListingVisibilityType string

type RekeyResult

+ VerificationNonce string

+ VerificationRequired bool

+ type RekeyVerifyResult struct

+ Complete bool

+ Nonce string

type SealAccess

+ func (s *SealAccess) SetTestingParams(params *SealAccessTestingParams) error

+ type SealAccessTestingParams struct

+ PretendRecoveryKey []byte

+ PretendToAllowRecoveryKeys bool

+ PretendToAllowStoredShares bool

type SealConfig

+ RekeyProgress [][]byte

+ VerificationKey []byte

+ VerificationNonce string

+ VerificationProgress [][]byte

+ VerificationRequired bool

type TestCluster

+ func (c *TestCluster) UnsealCoresWithError() error

Apr 25, 2018

Changes in this version

type TokenEntry

+ BoundCIDRs []*sockaddr.SockAddrMarshaler

Apr 10, 2018

Changes in this version

type APIMountConfig

+ PassthroughRequestHeaders []string

type Core

+ func (c *Core) UIEnabled() bool

+ func (c *Core) UIHeaders() (http.Header, error)

type MountConfig

+ PassthroughRequestHeaders []string

type MountEntry

+ BackendAwareUUID string

type TestCluster

+ func (c *TestCluster) UnsealCores(t testing.T)

type TestClusterOptions

+ Logger log.Logger

+ type UIConfig struct

+ func NewUIConfig(enabled bool, physicalStorage physical.Backend, barrierStorage logical.Storage) *UIConfig

+ func (c *UIConfig) DeleteHeader(ctx context.Context, header string) error

+ func (c *UIConfig) Enabled() bool

+ func (c *UIConfig) GetHeader(ctx context.Context, header string) (string, error)

+ func (c *UIConfig) HeaderKeys(ctx context.Context) ([]string, error)

+ func (c *UIConfig) Headers(ctx context.Context) (http.Header, error)

+ func (c *UIConfig) SetHeader(ctx context.Context, header, value string) error

Mar 20, 2018

Changes in this version

type APIMountConfig

+ AuditNonHMACRequestKeys []string

+ AuditNonHMACResponseKeys []string

+ ListingVisibility ListingVisiblityType

+ type ListingVisiblityType string

+ const ListingVisibilityHidden

+ const ListingVisibilityUnauth

type MountConfig

+ AuditNonHMACRequestKeys []string

+ AuditNonHMACResponseKeys []string

+ ListingVisibility ListingVisiblityType

type MountEntry

+ func (e *MountEntry) SyncCache()

Feb 26, 2018

Changes in this version

+ type ReplicatedClusters struct

type Seal

+ func NewDefaultSeal() Seal

type TestClusterOptions

+ CACert []byte

+ CAKey *ecdsa.PrivateKey

Feb 20, 2018

Changes in this version

+ func NewSealUnwrapper(underlying physical.Backend, logger log.Logger) physical.Backend

type IdentityStore

+ func (i *IdentityStore) CreateOrFetchEntity(alias *logical.Alias) (*identity.Entity, error)

+ func (i *IdentityStore) MemDBAliasByFactorsInTxn(txn *memdb.Txn, mountAccessor, aliasName string, clone bool, groupAlias bool) (*identity.Alias, error)

Jan 26, 2018

Changes in this version

+ var HeartbeatInterval = 5 * time.Second

type Core

+ func (c *Core) ActiveNodeReplicationState() consts.ReplicationState

+ func (c *Core) GetContext() (context.Context, context.CancelFunc)

+ func (c *Core) IsDRSecondary() bool

type EchoReply

+ ReplicationState uint32

+ func (m *EchoReply) GetReplicationState() uint32

Dec 21, 2017

Changes in this version

+ func TestAddTestPluginTempDir(t testing.T, c *Core, name, testFunc, tempDir string)

type TestCluster

+ func (c *TestCluster) UnsealWithStoredKeys(t testing.T) error

type TestClusterOptions

+ TempDir string

Nov 14, 2017

Changes in this version

+ const RecoveryTypeShamir

+ const RecoveryTypeUnsupported

+ const SealTypeAWSKMS

+ const SealTypePKCS11

+ const SealTypeShamir

+ const SealTypeTest

+ func AddTestCredentialBackend(name string, factory logical.Factory) error

+ func TestCoreUnsealWithRecoveryKeys(core *Core, key []byte) (bool, error)

+ type ACLPermissions struct

+ AllowedParameters map[string][]interface{}

+ CapabilitiesBitmap uint32

+ DeniedParameters map[string][]interface{}

+ MaxWrappingTTL time.Duration

+ MinWrappingTTL time.Duration

+ RequiredParameters []string

+ func (p *ACLPermissions) Clone() (*ACLPermissions, error)

+ type ACLResults struct

+ Allowed bool

+ IsRoot bool

+ MFAMethods []string

+ RootPrivs bool

+ type AuthResults struct

+ ACLResults *ACLResults

+ Allowed bool

+ Error *multierror.Error

+ RootPrivs bool

+ type BarrierEncryptorAccess struct

+ func NewBarrierEncryptorAccess(barrierEncryptor BarrierEncryptor) *BarrierEncryptorAccess

+ func (b *BarrierEncryptorAccess) Decrypt(key string, ciphertext []byte) ([]byte, error)

+ func (b *BarrierEncryptorAccess) Encrypt(key string, plaintext []byte) ([]byte, error)

type Core

+ func TestCoreUnsealedWithConfigSealOpts(t testing.T, barrierConf, recoveryConf *SealConfig, sealOpts *TestSealOpts) (*Core, [][]byte, [][]byte, string)

+ func (c *Core) BarrierEncryptorAccess() *BarrierEncryptorAccess

+ func (c *Core) IdentityStore() *IdentityStore

+ func (c *Core) PhysicalAccess() *physical.PhysicalAccess

+ func (c *Core) RouterAccess() *RouterAccess

+ func (c *Core) UnsealWithRecoveryKeys(key []byte) (bool, error)

type EchoRequest

+ ClusterAddrs []string

+ func (m *EchoRequest) GetClusterAddrs() []string

type Entry

+ SealWrap bool

type GenerateRootConfig

+ Strategy GenerateRootStrategy

type GenerateRootResult

+ EncodedToken string

+ type GenerateRootStrategy interface

+ var GenerateStandardRootTokenStrategy GenerateRootStrategy = generateStandardRootToken{}

+ type IdentityStore struct

+ func NewIdentityStore(core *Core, config *logical.BackendConfig) (*IdentityStore, error)

+ func (i *IdentityStore) CreateEntity(alias *logical.Alias) (*identity.Entity, error)

+ func (i *IdentityStore) Invalidate(key string)

+ func (i *IdentityStore) LockForEntityID(entityID string) *locksutil.LockEntry

+ func (i *IdentityStore) MemDBAliasByCanonicalID(canonicalID string, clone bool, groupAlias bool) (*identity.Alias, error)

+ func (i *IdentityStore) MemDBAliasByCanonicalIDInTxn(txn *memdb.Txn, canonicalID string, clone bool, groupAlias bool) (*identity.Alias, error)

+ func (i *IdentityStore) MemDBAliasByFactors(mountAccessor, aliasName string, clone bool, groupAlias bool) (*identity.Alias, error)

+ func (i *IdentityStore) MemDBAliasByID(aliasID string, clone bool, groupAlias bool) (*identity.Alias, error)

+ func (i *IdentityStore) MemDBAliasByIDInTxn(txn *memdb.Txn, aliasID string, clone bool, groupAlias bool) (*identity.Alias, error)

+ func (i *IdentityStore) MemDBAliases(ws memdb.WatchSet, groupAlias bool) (memdb.ResultIterator, error)

+ func (i *IdentityStore) MemDBAliasesByMetadata(filters map[string]string, clone bool, groupAlias bool) ([]*identity.Alias, error)

+ func (i *IdentityStore) MemDBDeleteAliasByID(aliasID string, groupAlias bool) error

+ func (i *IdentityStore) MemDBDeleteAliasByIDInTxn(txn *memdb.Txn, aliasID string, groupAlias bool) error

+ func (i *IdentityStore) MemDBDeleteEntityByID(entityID string) error

+ func (i *IdentityStore) MemDBDeleteEntityByIDInTxn(txn *memdb.Txn, entityID string) error

+ func (i *IdentityStore) MemDBDeleteGroupByIDInTxn(txn *memdb.Txn, groupID string) error

+ func (i *IdentityStore) MemDBDeleteGroupByNameInTxn(txn *memdb.Txn, groupName string) error

+ func (i *IdentityStore) MemDBEntities(ws memdb.WatchSet) (memdb.ResultIterator, error)

+ func (i *IdentityStore) MemDBEntitiesByBucketEntryKeyHash(hashValue string) ([]*identity.Entity, error)

+ func (i *IdentityStore) MemDBEntitiesByBucketEntryKeyHashInTxn(txn *memdb.Txn, hashValue string) ([]*identity.Entity, error)

+ func (i *IdentityStore) MemDBEntitiesByMetadata(filters map[string]string, clone bool) ([]*identity.Entity, error)

+ func (i *IdentityStore) MemDBEntityByAliasID(aliasID string, clone bool) (*identity.Entity, error)

+ func (i *IdentityStore) MemDBEntityByAliasIDInTxn(txn *memdb.Txn, aliasID string, clone bool) (*identity.Entity, error)

+ func (i *IdentityStore) MemDBEntityByID(entityID string, clone bool) (*identity.Entity, error)

+ func (i *IdentityStore) MemDBEntityByIDInTxn(txn *memdb.Txn, entityID string, clone bool) (*identity.Entity, error)

+ func (i *IdentityStore) MemDBEntityByMergedEntityID(mergedEntityID string, clone bool) (*identity.Entity, error)

+ func (i *IdentityStore) MemDBEntityByMergedEntityIDInTxn(txn *memdb.Txn, mergedEntityID string, clone bool) (*identity.Entity, error)

+ func (i *IdentityStore) MemDBEntityByName(entityName string, clone bool) (*identity.Entity, error)

+ func (i *IdentityStore) MemDBEntityByNameInTxn(txn *memdb.Txn, entityName string, clone bool) (*identity.Entity, error)

+ func (i *IdentityStore) MemDBGroupByAliasID(aliasID string, clone bool) (*identity.Group, error)

+ func (i *IdentityStore) MemDBGroupByAliasIDInTxn(txn *memdb.Txn, aliasID string, clone bool) (*identity.Group, error)

+ func (i *IdentityStore) MemDBGroupByID(groupID string, clone bool) (*identity.Group, error)

+ func (i *IdentityStore) MemDBGroupByIDInTxn(txn *memdb.Txn, groupID string, clone bool) (*identity.Group, error)

+ func (i *IdentityStore) MemDBGroupByName(groupName string, clone bool) (*identity.Group, error)

+ func (i *IdentityStore) MemDBGroupByNameInTxn(txn *memdb.Txn, groupName string, clone bool) (*identity.Group, error)

+ func (i *IdentityStore) MemDBGroupIterator(ws memdb.WatchSet) (memdb.ResultIterator, error)

+ func (i *IdentityStore) MemDBGroupsByBucketEntryKeyHash(hashValue string) ([]*identity.Group, error)

+ func (i *IdentityStore) MemDBGroupsByBucketEntryKeyHashInTxn(txn *memdb.Txn, hashValue string) ([]*identity.Group, error)

+ func (i *IdentityStore) MemDBGroupsByMemberEntityID(entityID string, clone bool, externalOnly bool) ([]*identity.Group, error)

+ func (i *IdentityStore) MemDBGroupsByMemberEntityIDInTxn(txn *memdb.Txn, entityID string, clone bool, externalOnly bool) ([]*identity.Group, error)

+ func (i *IdentityStore) MemDBGroupsByParentGroupID(memberGroupID string, clone bool) ([]*identity.Group, error)

+ func (i *IdentityStore) MemDBGroupsByParentGroupIDInTxn(txn *memdb.Txn, memberGroupID string, clone bool) ([]*identity.Group, error)

+ func (i *IdentityStore) MemDBGroupsByPolicy(policyName string, clone bool) ([]*identity.Group, error)

+ func (i *IdentityStore) MemDBGroupsByPolicyInTxn(txn *memdb.Txn, policyName string, clone bool) ([]*identity.Group, error)

+ func (i *IdentityStore) MemDBUpsertAlias(alias *identity.Alias, groupAlias bool) error

+ func (i *IdentityStore) MemDBUpsertAliasInTxn(txn *memdb.Txn, alias *identity.Alias, groupAlias bool) error

+ func (i *IdentityStore) MemDBUpsertEntity(entity *identity.Entity) error

+ func (i *IdentityStore) MemDBUpsertEntityInTxn(txn *memdb.Txn, entity *identity.Entity) error

+ func (i *IdentityStore) MemDBUpsertGroup(group *identity.Group) error

+ func (i *IdentityStore) MemDBUpsertGroupInTxn(txn *memdb.Txn, group *identity.Group) error

+ func (i *IdentityStore) UpsertGroup(group *identity.Group, persist bool) error

type MountEntry

+ SealWrap bool

+ type PathRules struct

+ AllowedParametersHCL map[string][]interface{}

+ Capabilities []string

+ DeniedParametersHCL map[string][]interface{}

+ Glob bool

+ MaxWrappingTTLHCL interface{}

+ MinWrappingTTLHCL interface{}

+ Permissions *ACLPermissions

+ Policy string

+ Prefix string

+ RequiredParametersHCL []string

type Policy

+ Type PolicyType

+ func ParseACLPolicy(rules string) (*Policy, error)

+ type PolicyCheckOpts struct

+ RootPrivsRequired bool

+ Unauth bool

type PolicyEntry

+ Type PolicyType

+ type PolicyType uint32

+ const PolicyTypeACL

+ const PolicyTypeEGP

+ const PolicyTypeRGP

+ const PolicyTypeToken

+ func (p PolicyType) String() string

type Router

+ func (r *Router) MatchingStorageByAPIPath(path string) logical.Storage

+ func (r *Router) MatchingStorageByStoragePath(path string) logical.Storage

+ func (r *Router) MatchingStoragePrefixByAPIPath(path string) (string, string, bool)

+ func (r *Router) MatchingStoragePrefixByStoragePath(path string) (string, string, bool)

+ func (r *Router) MountConflict(path string) string

+ type RouterAccess struct

+ func NewRouterAccess(c *Core) *RouterAccess

+ func (r *RouterAccess) StoragePrefixByAPIPath(path string) (string, string, bool)

type Seal

+ func NewTestSeal(t testing.T, opts *TestSealOpts) Seal

type SealAccess

+ func NewSealAccess(seal Seal) *SealAccess

+ func (s *SealAccess) ClearCaches()

+ func (s *SealAccess) VerifyRecoveryKey(key []byte) error

type TestCluster

+ RecoveryKeys [][]byte

type TestClusterCore

+ UnderlyingStorage physical.Backend

type TestClusterOptions

+ RawLogger interface{}

+ SealFunc func() Seal

+ type TestSealOpts struct

+ RecoveryKeysDisabled bool

+ StoredKeysDisabled bool

type TokenEntry

+ EntityID string

+ func (te *TokenEntry) SentinelGet(key string) (interface{}, error)

+ func (te *TokenEntry) SentinelKeys() []string

Sep 19, 2017

Changes in this version

type Core

+ func TestCoreRaw(t testing.T) *Core

+ func TestCoreUnsealedRaw(t testing.T) (*Core, [][]byte, string)

type CoreConfig

+ EnableRaw bool

Sep 5, 2017

Changes in this version

+ var DefaultNumCores = 3

+ var ErrPluginNotFound = errors.New("plugin not found in the catalog")

type CoreConfig

+ ClusterCipherSuites string

type ExpirationManager

+ func (m *ExpirationManager) RestoreSaltedTokenCheck(source string, saltedID string) (bool, error)

type TestCluster

+ func (c *TestCluster) EnsureCoresSealed(t testing.T)

type TestClusterOptions

+ NumCores int

+ SkipInit bool

Aug 16, 2017

Changes in this version

+ var ErrRelativePath = errors.New("relative paths not supported")

Aug 9, 2017

Changes in this version

+ const CORSDisabled

+ const CORSEnabled

+ var StdAllowedHeaders = []string

+ type APIMountConfig struct

+ DefaultLeaseTTL string

+ ForceNoCache bool

+ MaxLeaseTTL string

+ PluginName string

+ type CORSConfig struct

+ AllowedHeaders []string

+ AllowedOrigins []string

+ Enabled uint32

+ func (c *CORSConfig) Disable() error

+ func (c *CORSConfig) Enable(urls []string, headers []string) error

+ func (c *CORSConfig) IsEnabled() bool

+ func (c *CORSConfig) IsValidOrigin(origin string) bool

type Core

+ func (c *Core) CORSConfig() *CORSConfig

type MountConfig

+ PluginName string

type MountEntry

+ Accessor string

type Router

+ func (r *Router) MatchingMountByAccessor(mountAccessor string) *MountEntry

+ func (r *Router) MatchingMountByUUID(mountID string) *MountEntry

type TestCluster

+ BarrierKeys [][]byte

+ CACert *x509.Certificate

+ CACertBytes []byte

+ CACertPEM []byte

+ CACertPEMFile string

+ CAKey *ecdsa.PrivateKey

+ CAKeyPEM []byte

+ Cores []*TestClusterCore

+ ID string

+ RootCAs *x509.CertPool

+ RootToken string

+ TempDir string

+ func NewTestCluster(t testing.T, base *CoreConfig, opts *TestClusterOptions) *TestCluster

+ func (t *TestCluster) Cleanup()

+ func (t *TestCluster) Start()

type TestClusterCore

+ Handler http.Handler

+ ReloadFuncs *map[string][]reload.ReloadFunc

+ ReloadFuncsLock *sync.RWMutex

+ Server *http.Server

+ ServerCert *x509.Certificate

+ ServerCertBytes []byte

+ ServerCertPEM []byte

+ ServerKey *ecdsa.PrivateKey

+ ServerKeyPEM []byte

+ type TestClusterOptions struct

+ BaseListenAddress string

+ HandlerFunc func(*Core) http.Handler

+ KeepStandbysSealed bool

type TokenStore

+ func (ts *TokenStore) Invalidate(key string)

+ func (ts *TokenStore) Salt() (*salt.Salt, error)

Jun 7, 2017

Changes in this version

type AuditBroker

+ func (a *AuditBroker) Invalidate(key string)

type Core

+ func (c *Core) SetClusterHandler(handler http.Handler)

+ type EchoReply struct

+ ClusterAddrs []string

+ Message string

+ func (*EchoReply) Descriptor() ([]byte, []int)

+ func (*EchoReply) ProtoMessage()

+ func (m *EchoReply) GetClusterAddrs() []string

+ func (m *EchoReply) GetMessage() string

+ func (m *EchoReply) Reset()

+ func (m *EchoReply) String() string

+ type EchoRequest struct

+ ClusterAddr string

+ Message string

+ func (*EchoRequest) Descriptor() ([]byte, []int)

+ func (*EchoRequest) ProtoMessage()

+ func (m *EchoRequest) GetClusterAddr() string

+ func (m *EchoRequest) GetMessage() string

+ func (m *EchoRequest) Reset()

+ func (m *EchoRequest) String() string

type Permissions

+ func (p *Permissions) Clone() (*Permissions, error)

type RequestForwardingClient

+ Echo func(ctx context.Context, in *EchoRequest, opts ...grpc.CallOption) (*EchoReply, error)

type RequestForwardingServer

+ Echo func(context.Context, *EchoRequest) (*EchoReply, error)

May 5, 2017

Changes in this version

+ var ErrDirectoryNotConfigured = errors.New("could not set plugin, plugin directory is not configured")

+ func TestAddTestPlugin(t testing.TB, c *Core, name, testFunc string)

+ func TestDynamicSystemView(c *Core) *dynamicSystemView

type CoreConfig

+ PluginDirectory string

type ExpirationManager

+ func (m *ExpirationManager) Tidy() error

+ type PluginCatalog struct

+ func (c *PluginCatalog) Delete(name string) error

+ func (c *PluginCatalog) Get(name string) (*pluginutil.PluginRunner, error)

+ func (c *PluginCatalog) List() ([]string, error)

+ func (c *PluginCatalog) Set(name, command string, sha256 []byte) error

Mar 16, 2017

Changes in this version

+ var LastRemoteWAL = lastRemoteWALImpl

+ func TestCoreWithBackendTokenStore(t testing.TB, backend physical.Backend) (*Core, *TokenStore, [][]byte, string)

type AESGCMBarrier

+ func (b *AESGCMBarrier) Decrypt(key string, ciphertext []byte) ([]byte, error)

+ func (b *AESGCMBarrier) Encrypt(key string, plaintext []byte) ([]byte, error)

+ func (b *AESGCMBarrier) Keyring() (*Keyring, error)

+ func (b *AESGCMBarrier) SetMasterKey(key []byte) error

+ type BarrierEncryptor interface

+ Decrypt func(key string, ciphertext []byte) ([]byte, error)

+ Encrypt func(key string, plaintext []byte) ([]byte, error)

type Core

+ func TestCoreUnsealedBackend(t testing.TB, backend physical.Backend) (*Core, [][]byte, string)

+ func (c *Core) ReplicationState() consts.ReplicationState

type CoreConfig

+ DevToken string

+ EnableUI bool

type MountConfig

+ ForceNoCache bool

type MountEntry

+ Local bool

type PathCapabilities

+ AllowedParametersHCL map[string][]interface{}

+ DeniedParametersHCL map[string][]interface{}

+ MaxWrappingTTLHCL interface{}

+ MinWrappingTTLHCL interface{}

+ Permissions *Permissions

+ type Permissions struct

+ AllowedParameters map[string][]interface{}

+ CapabilitiesBitmap uint32

+ DeniedParameters map[string][]interface{}

+ MaxWrappingTTL time.Duration

+ MinWrappingTTL time.Duration

type SecurityBarrier

+ Keyring func() (*Keyring, error)

+ SetMasterKey func(key []byte) error

type TestClusterCore

+ Client *api.Client

+ ClusterID string

type TokenStore

+ func (ts *TokenStore) Initialize() error

Feb 7, 2017

Changes in this version

+ func TestSealDefConfigs() (*SealConfig, *SealConfig)

+ type AuditedHeadersConfig struct

+ Headers map[string]*auditedHeaderSettings

+ func (a *AuditedHeadersConfig) ApplyConfig(headers map[string][]string, hashFunc func(string) string) (result map[string][]string)

type Core

+ func TestCoreNewSeal(t *testing.T) *Core

+ func TestCoreUnsealedWithConfigs(t *testing.T, barrierConf, recoveryConf *SealConfig) (*Core, [][]byte, [][]byte, string)

+ func (c *Core) AuditedHeadersConfig() *AuditedHeadersConfig

type RequestForwardingClient

+ ForwardRequest func(ctx context.Context, in *forwarding.Request, opts ...grpc.CallOption) (*forwarding.Response, error)

type RequestForwardingServer

+ ForwardRequest func(context.Context, *forwarding.Request) (*forwarding.Response, error)

type Router

+ func (r *Router) MatchingStoragePrefix(path string) (string, string, bool)

type TestClusterCore

+ BarrierKeys [][]byte

+ type TestSeal struct

+ func (d *TestSeal) BarrierConfig() (*SealConfig, error)

+ func (d *TestSeal) BarrierType() string

+ func (d *TestSeal) Finalize() error

+ func (d *TestSeal) GetStoredKeys() ([][]byte, error)

+ func (d *TestSeal) Init() error

+ func (d *TestSeal) RecoveryConfig() (*SealConfig, error)

+ func (d *TestSeal) RecoveryKeySupported() bool

+ func (d *TestSeal) RecoveryType() string

+ func (d *TestSeal) SetBarrierConfig(config *SealConfig) error

+ func (d *TestSeal) SetCore(core *Core)

+ func (d *TestSeal) SetRecoveryConfig(config *SealConfig) error

+ func (d *TestSeal) SetRecoveryKey(key []byte) error

+ func (d *TestSeal) SetStoredKeys(keys [][]byte) error

+ func (d *TestSeal) StoredKeysSupported() bool

+ func (d *TestSeal) VerifyRecoveryKey(key []byte) error

Dec 6, 2016

Changes in this version

type Core

+ func (c *Core) LookupToken(token string) (*TokenEntry, error)

+ type KeyNotFoundError struct

+ Err error

+ func (e *KeyNotFoundError) Error() string

+ func (e *KeyNotFoundError) WrappedErrors() []error

Oct 5, 2016

Changes in this version

type Core

+ func (c *Core) ValidateWrappingToken(token string) (bool, error)

type CoreConfig

+ ReloadFuncs *map[string][]ReloadFunc

+ ReloadFuncsLock *sync.RWMutex

+ type InitParams struct

+ BarrierConfig *SealConfig

+ RecoveryConfig *SealConfig

+ RootTokenPGPKey string

+ type ReloadFunc func(map[string]string) error

type TokenEntry

+ CreationTimeDeprecated int64

+ DisplayNameDeprecated string

+ ExplicitMaxTTLDeprecated time.Duration

+ NumUsesDeprecated int

type TokenStore

+ func (ts *TokenStore) UseTokenByID(id string) (*TokenEntry, error)

Aug 21, 2016

Changes in this version

+ const IntNoForwardingHeaderName

+ const TestClusterCACert

+ const TestClusterCAKey

+ const TestClusterServerCert

+ const TestClusterServerKey

+ var ErrCannotForward = errors.New("cannot forward request; no connection or address not known")

+ func RegisterRequestForwardingServer(s *grpc.Server, srv RequestForwardingServer)

+ func TestCoreInitClusterWrapperSetup(t *testing.T, core *Core, clusterAddrs []*net.TCPAddr, ...) ([]byte, string)

+ func TestCoreUnseal(core *Core, key []byte) (bool, error)

+ func TestWaitActive(t *testing.T, core *Core)

+ func WrapHandlerForClustering(handler http.Handler, logger log.Logger) func() (http.Handler, http.Handler)

+ func WrapListenersForClustering(addrs []string, logger log.Logger) func() ([]net.Listener, error)

+ type Cluster struct

+ ID string

+ Name string

type Core

+ func (c *Core) BarrierKeyLength() (min, max int)

+ func (c *Core) Cluster() (*Cluster, error)

+ func (c *Core) ClusterTLSConfig() (*tls.Config, error)

+ func (c *Core) ForwardRequest(req *http.Request) (int, []byte, error)

+ func (c *Core) Logger() log.Logger

+ func (c *Core) SetClusterListenerAddrs(addrs []*net.TCPAddr)

+ func (c *Core) SetClusterSetupFuncs(handler func() (http.Handler, http.Handler))

type CoreConfig

+ ClusterAddr string

+ ClusterName string

+ RedirectAddr string

+ type RequestForwardingClient interface

+ HandleRequest func(ctx context.Context, in *forwarding.Request, opts ...grpc.CallOption) (*forwarding.Response, error)

+ func NewRequestForwardingClient(cc *grpc.ClientConn) RequestForwardingClient

+ type RequestForwardingServer interface

+ HandleRequest func(context.Context, *forwarding.Request) (*forwarding.Response, error)

+ type TestClusterCore struct

+ CACert *x509.Certificate

+ CACertBytes []byte

+ Key []byte

+ Listeners []*TestListener

+ Root string

+ TLSConfig *tls.Config

+ func TestCluster(t *testing.T, handlers []http.Handler, base *CoreConfig, unsealStandbys bool) []*TestClusterCore

+ func (t *TestClusterCore) CloseListeners()

+ type TestListener struct

+ Address *net.TCPAddr

type TokenEntry

+ Period time.Duration

Jun 14, 2016

Changes in this version

type Core

+ func TestCoreWithSeal(t *testing.T, testSeal Seal) *Core

+ func (c *Core) BarrierRekeyInit(config *SealConfig) error

+ func (c *Core) BarrierRekeyUpdate(key []byte, nonce string) (*RekeyResult, error)

+ func (c *Core) RecoveryRekeyInit(config *SealConfig) error

+ func (c *Core) RecoveryRekeyUpdate(key []byte, nonce string) (*RekeyResult, error)

+ func (c *Core) RekeyThreshold(recovery bool) (int, error)

+ func (c *Core) SealAccess() *SealAccess

+ func (c *Core) SealWithRequest(req *logical.Request) error

+ func (c *Core) UnsealWithStoredKeys() error

type CoreConfig

+ Seal Seal

+ type DefaultSeal struct

+ func (d *DefaultSeal) BarrierConfig() (*SealConfig, error)

+ func (d *DefaultSeal) BarrierType() string

+ func (d *DefaultSeal) Finalize() error

+ func (d *DefaultSeal) GetStoredKeys() ([][]byte, error)

+ func (d *DefaultSeal) Init() error

+ func (d *DefaultSeal) RecoveryConfig() (*SealConfig, error)

+ func (d *DefaultSeal) RecoveryKeySupported() bool

+ func (d *DefaultSeal) RecoveryType() string

+ func (d *DefaultSeal) SetBarrierConfig(config *SealConfig) error

+ func (d *DefaultSeal) SetCore(core *Core)

+ func (d *DefaultSeal) SetRecoveryConfig(config *SealConfig) error

+ func (d *DefaultSeal) SetRecoveryKey(key []byte) error

+ func (d *DefaultSeal) SetStoredKeys(keys [][]byte) error

+ func (d *DefaultSeal) StoredKeysSupported() bool

+ func (d *DefaultSeal) VerifyRecoveryKey([]byte) error

type InitResult

+ RecoveryShares [][]byte

type Keyring

+ func (k *Keyring) Zeroize(keysToo bool)

type MountEntry

+ Table string

type MountTable

+ Type string

+ type NonFatalError struct

+ Err error

+ func (e *NonFatalError) Error() string

+ func (e *NonFatalError) WrappedErrors() []error

type RekeyResult

+ RecoveryKey bool

+ type Seal interface

+ BarrierConfig func() (*SealConfig, error)

+ BarrierType func() string

+ Finalize func() error

+ GetStoredKeys func() ([][]byte, error)

+ Init func() error

+ RecoveryConfig func() (*SealConfig, error)

+ RecoveryKeySupported func() bool

+ RecoveryType func() string

+ SetBarrierConfig func(*SealConfig) error

+ SetCore func(*Core)

+ SetRecoveryConfig func(*SealConfig) error

+ SetRecoveryKey func([]byte) error

+ SetStoredKeys func([][]byte) error

+ StoredKeysSupported func() bool

+ VerifyRecoveryKey func([]byte) error

+ type SealAccess struct

+ func (s *SealAccess) BarrierConfig() (*SealConfig, error)

+ func (s *SealAccess) RecoveryConfig() (*SealConfig, error)

+ func (s *SealAccess) RecoveryKeySupported() bool

+ func (s *SealAccess) SetSeal(seal Seal)

+ func (s *SealAccess) StoredKeysSupported() bool

type SealConfig

+ StoredShares int

+ Type string

+ func (s *SealConfig) Clone() *SealConfig

type TokenEntry

+ ExplicitMaxTTL time.Duration

Mar 16, 2016

Changes in this version

+ const RootCapability

type ACL

+ func (a *ACL) Capabilities(path string) (pathCapabilities []string)

type Core

+ func (c *Core) Capabilities(token, path string) ([]string, error)

+ func (c *Core) CapabilitiesAccessor(accessor, path string) ([]string, error)

+ func (c *Core) StepDown(token string) error

type ExpirationManager

+ func (m *ExpirationManager) RevokeForce(prefix string) error

+ type StatusBadRequest struct

+ Err string

+ func (s *StatusBadRequest) Error() string

type TokenEntry

+ Accessor string

+ Role string

Feb 10, 2016

Changes in this version

+ const CreateCapability

+ const CreateCapabilityInt

+ const DeleteCapability

+ const DeleteCapabilityInt

+ const DenyCapability

+ const DenyCapabilityInt

+ const ListCapability

+ const ListCapabilityInt

+ const OldDenyPathPolicy

+ const OldReadPathPolicy

+ const OldSudoPathPolicy

+ const OldWritePathPolicy

+ const ReadCapability

+ const ReadCapabilityInt

+ const SudoCapability

+ const SudoCapabilityInt

+ const UpdateCapability

+ const UpdateCapabilityInt

+ func GenerateRandBytes(length int) ([]byte, error)

+ func TestCoreWithTokenStore(t *testing.T) (*Core, *TokenStore, []byte, string)

type Core

+ func (c *Core) GenerateRootCancel() error

+ func (c *Core) GenerateRootConfiguration() (*GenerateRootConfig, error)

+ func (c *Core) GenerateRootInit(otp, pgpKey string) error

+ func (c *Core) GenerateRootProgress() (int, error)

+ func (c *Core) GenerateRootUpdate(key []byte, nonce string) (*GenerateRootResult, error)

+ func (c *Core) RekeyDeleteBackup() error

+ func (c *Core) RekeyRetrieveBackup() (*RekeyBackup, error)

type CoreConfig

+ HAPhysical physical.HABackend

type ExpirationManager

+ func (m *ExpirationManager) FetchLeaseTimes(leaseID string) (*leaseEntry, error)

+ func (m *ExpirationManager) FetchLeaseTimesByToken(source, token string) (*leaseEntry, error)

+ type GenerateRootConfig struct

+ Nonce string

+ OTP string

+ PGPFingerprint string

+ PGPKey string

+ type GenerateRootResult struct

+ EncodedRootToken string

+ PGPFingerprint string

+ Progress int

+ Required int

+ type PathCapabilities struct

+ Capabilities []string

+ CapabilitiesBitmap uint32

+ Glob bool

+ Policy string

+ Prefix string

+ type RekeyBackup struct

+ Keys map[string][]string

+ Nonce string

type RekeyResult

+ Backup bool

+ PGPFingerprints []string

type Router

+ func (r *Router) RouteExistenceCheck(req *logical.Request) (bool, bool, error)

type SealConfig

+ Backup bool

+ Nonce string

Dec 10, 2015

Changes in this version

type AuditBroker

+ func (a *AuditBroker) GetHash(name string, input string) (string, error)

type Core

+ func (c *Core) ResetUnsealProcess()

Sep 28, 2015

Changes in this version

+ const AESGCMVersion1

+ const AESGCMVersion2

+ func AddTestLogicalBackend(name string, factory logical.Factory) error

+ func CubbyholeBackendFactory(conf *logical.BackendConfig) (logical.Backend, error)

+ func LeaseSwitchedPassthroughBackend(conf *logical.BackendConfig, leases bool) (logical.Backend, error)

+ func LeasedPassthroughBackendFactory(conf *logical.BackendConfig) (logical.Backend, error)

+ func StartSSHHostTestServer() (string, error)

type CoreConfig

+ DefaultLeaseTTL time.Duration

+ MaxLeaseTTL time.Duration

+ type CubbyholeBackend struct

+ type MountConfig struct

+ DefaultLeaseTTL time.Duration

+ MaxLeaseTTL time.Duration

type MountEntry

+ Config MountConfig

type MountTable

+ func (t *MountTable) ShallowClone() *MountTable

type PassthroughBackend

+ func (b *PassthroughBackend) GeneratesLeases() bool

type Router

+ func (r *Router) MatchingBackend(path string) logical.Backend

+ func (r *Router) MatchingMountEntry(path string) *MountEntry

+ func (r *Router) MatchingStorageView(path string) *BarrierView

+ func (r *Router) MatchingSystemView(path string) logical.SystemView

type SealConfig

+ PGPKeys []string

type TokenEntry

+ CreationTime int64

+ TTL time.Duration

Jul 13, 2015

Changes in this version

type AESGCMBarrier

+ func (b *AESGCMBarrier) ActiveKeyInfo() (*KeyInfo, error)

+ func (b *AESGCMBarrier) CheckUpgrade() (bool, uint32, error)

+ func (b *AESGCMBarrier) CreateUpgrade(term uint32) error

+ func (b *AESGCMBarrier) DestroyUpgrade(term uint32) error

+ func (b *AESGCMBarrier) Rekey(key []byte) error

+ func (b *AESGCMBarrier) ReloadKeyring() error

+ func (b *AESGCMBarrier) ReloadMasterKey() error

+ func (b *AESGCMBarrier) Rotate() (uint32, error)

+ func (b *AESGCMBarrier) VerifyMaster(key []byte) error

type Core

+ func (c *Core) RekeyCancel() error

+ func (c *Core) RekeyConfig() (*SealConfig, error)

+ func (c *Core) RekeyInit(config *SealConfig) error

+ func (c *Core) RekeyProgress() (int, error)

+ func (c *Core) RekeyUpdate(key []byte) (*RekeyResult, error)

+ func (c *Core) Shutdown() error

+ type EncodedKeyring struct

+ Keys []*Key

+ MasterKey []byte

+ type Key struct

+ InstallTime time.Time

+ Term uint32

+ Value []byte

+ Version int

+ func DeserializeKey(buf []byte) (*Key, error)

+ func (k *Key) Serialize() ([]byte, error)

+ type KeyInfo struct

+ InstallTime time.Time

+ Term int

+ type Keyring struct

+ func DeserializeKeyring(buf []byte) (*Keyring, error)

+ func NewKeyring() *Keyring

+ func (k *Keyring) ActiveKey() *Key

+ func (k *Keyring) ActiveTerm() uint32

+ func (k *Keyring) AddKey(key *Key) (*Keyring, error)

+ func (k *Keyring) Clone() *Keyring

+ func (k *Keyring) MasterKey() []byte

+ func (k *Keyring) RemoveKey(term uint32) (*Keyring, error)

+ func (k *Keyring) Serialize() ([]byte, error)

+ func (k *Keyring) SetMasterKey(val []byte) *Keyring

+ func (k *Keyring) TermKey(term uint32) *Key

type PathPolicy

+ Glob bool

+ func (p *PathPolicy) TakesPrecedence(other *PathPolicy) bool

+ type PolicyEntry struct

+ Raw string

+ Version int

+ type RekeyResult struct

+ SecretShares [][]byte

type SecurityBarrier

+ ActiveKeyInfo func() (*KeyInfo, error)

+ CheckUpgrade func() (bool, uint32, error)

+ CreateUpgrade func(term uint32) error

+ DestroyUpgrade func(term uint32) error

+ Rekey func([]byte) error

+ ReloadKeyring func() error

+ ReloadMasterKey func() error

+ Rotate func() (uint32, error)

+ VerifyMaster func(key []byte) error

type SystemBackend

+ Backend *framework.Backend

Apr 28, 2015

Changes in this version

+ const PathPolicyDeny

+ const PathPolicyRead

+ const PathPolicySudo

+ const PathPolicyWrite

+ var ErrAlreadyInit = errors.New("Vault is already initialized")

+ var ErrBarrierAlreadyInit = errors.New("Vault is already initialized")

+ var ErrBarrierInvalidKey = errors.New("Unseal failed, invalid key")

+ var ErrBarrierNotInit = errors.New("Vault is not initialized")

+ var ErrBarrierSealed = errors.New("Vault is sealed")

+ var ErrHANotEnabled = errors.New("Vault is not configured for highly-available mode")

+ var ErrInternalError = errors.New("internal error")

+ var ErrNotInit = errors.New("Vault is not initialized")

+ var ErrSealed = errors.New("Vault is sealed")

+ var ErrStandby = errors.New("Vault is in standby mode")

+ func ClearView(view *BarrierView) error

+ func CollectKeys(view *BarrierView) ([]string, error)

+ func LockMemory() error — darwin/amd64, linux/amd64, windows/amd64

+ func NewSystemBackend(core *Core) logical.Backend

+ func PassthroughBackendFactory(map[string]string) (logical.Backend, error)

+ func ScanView(view *BarrierView, cb func(path string)) error

+ func TestCoreInit(t *testing.T, core *Core) ([]byte, string)

+ func TestKeyCopy(key []byte) []byte

+ type ACL struct

+ func NewACL(policies []*Policy) (*ACL, error)

+ func (a *ACL) AllowOperation(op logical.Operation, path string) bool

+ func (a *ACL) RootPrivilege(path string) bool

+ type AESGCMBarrier struct

+ func NewAESGCMBarrier(physical physical.Backend) (*AESGCMBarrier, error)

+ func (b *AESGCMBarrier) Delete(key string) error

+ func (b *AESGCMBarrier) GenerateKey() ([]byte, error)

+ func (b *AESGCMBarrier) Get(key string) (*Entry, error)

+ func (b *AESGCMBarrier) Initialize(key []byte) error

+ func (b *AESGCMBarrier) Initialized() (bool, error)

+ func (b *AESGCMBarrier) KeyLength() (int, int)

+ func (b *AESGCMBarrier) List(prefix string) ([]string, error)

+ func (b *AESGCMBarrier) Put(entry *Entry) error

+ func (b *AESGCMBarrier) Seal() error

+ func (b *AESGCMBarrier) Sealed() (bool, error)

+ func (b *AESGCMBarrier) Unseal(key []byte) error

+ type AuditBroker struct

+ func NewAuditBroker(log *log.Logger) *AuditBroker

+ func (a *AuditBroker) Deregister(name string)

+ func (a *AuditBroker) IsRegistered(name string) bool

+ func (a *AuditBroker) LogRequest(auth *logical.Auth, req *logical.Request) error

+ func (a *AuditBroker) LogResponse(auth *logical.Auth, req *logical.Request, resp *logical.Response, err error) error

+ func (a *AuditBroker) Register(name string, b audit.Backend, v *BarrierView)

+ type BarrierStorage interface

+ Delete func(key string) error

+ Get func(key string) (*Entry, error)

+ List func(prefix string) ([]string, error)

+ Put func(entry *Entry) error

+ type BarrierView struct

+ func NewBarrierView(barrier BarrierStorage, prefix string) *BarrierView

+ func (v *BarrierView) Delete(key string) error

+ func (v *BarrierView) Get(key string) (*logical.StorageEntry, error)

+ func (v *BarrierView) List(prefix string) ([]string, error)

+ func (v *BarrierView) Put(entry *logical.StorageEntry) error

+ func (v *BarrierView) SubView(prefix string) *BarrierView

+ type Core struct

+ func NewCore(conf *CoreConfig) (*Core, error)

+ func TestCore(t *testing.T) *Core

+ func TestCoreUnsealed(t *testing.T) (*Core, []byte, string)

+ func (c *Core) HandleRequest(req *logical.Request) (*logical.Response, error)

+ func (c *Core) Initialize(config *SealConfig) (*InitResult, error)

+ func (c *Core) Initialized() (bool, error)

+ func (c *Core) Leader() (bool, string, error)

+ func (c *Core) Seal(token string) error

+ func (c *Core) SealConfig() (*SealConfig, error)

+ func (c *Core) Sealed() (bool, error)

+ func (c *Core) SecretProgress() int

+ func (c *Core) Standby() (bool, error)

+ func (c *Core) Unseal(key []byte) (bool, error)

+ type CoreConfig struct

+ AdvertiseAddr string

+ AuditBackends map[string]audit.Factory

+ CacheSize int

+ CredentialBackends map[string]logical.Factory

+ DisableCache bool

+ DisableMlock bool

+ Logger *log.Logger

+ LogicalBackends map[string]logical.Factory

+ Physical physical.Backend

+ type Entry struct

+ Key string

+ Value []byte

+ func (e *Entry) Logical() *logical.StorageEntry

+ type ErrInvalidKey struct

+ Reason string

+ func (e *ErrInvalidKey) Error() string

+ type ExpirationManager struct

+ func NewExpirationManager(router *Router, view *BarrierView, ts *TokenStore, logger *log.Logger) *ExpirationManager

+ func (m *ExpirationManager) Register(req *logical.Request, resp *logical.Response) (string, error)

+ func (m *ExpirationManager) RegisterAuth(source string, auth *logical.Auth) error

+ func (m *ExpirationManager) Renew(leaseID string, increment time.Duration) (*logical.Response, error)

+ func (m *ExpirationManager) RenewToken(source string, token string, increment time.Duration) (*logical.Auth, error)

+ func (m *ExpirationManager) Restore() error

+ func (m *ExpirationManager) Revoke(leaseID string) error

+ func (m *ExpirationManager) RevokeByToken(token string) error

+ func (m *ExpirationManager) RevokePrefix(prefix string) error

+ func (m *ExpirationManager) Stop() error

+ type InitResult struct

+ RootToken string

+ SecretShares [][]byte

+ type MountEntry struct

+ Description string

+ Options map[string]string

+ Path string

+ Tainted bool

+ Type string

+ UUID string

+ func (e *MountEntry) Clone() *MountEntry

+ type MountTable struct

+ Entries []*MountEntry

+ func (t *MountTable) Clone() *MountTable

+ func (t *MountTable) Find(path string) *MountEntry

+ func (t *MountTable) Hash() ([]byte, error)

+ func (t *MountTable) Remove(path string) bool

+ func (t *MountTable) SetTaint(path string, value bool) bool

+ type PassthroughBackend struct

+ type PathPolicy struct

+ Policy string

+ Prefix string

+ type Policy struct

+ Name string

+ Paths []*PathPolicy

+ Raw string

+ func Parse(rules string) (*Policy, error)

+ type PolicyStore struct

+ func NewPolicyStore(view *BarrierView) *PolicyStore

+ func (ps *PolicyStore) ACL(names ...string) (*ACL, error)

+ func (ps *PolicyStore) DeletePolicy(name string) error

+ func (ps *PolicyStore) GetPolicy(name string) (*Policy, error)

+ func (ps *PolicyStore) ListPolicies() ([]string, error)

+ func (ps *PolicyStore) SetPolicy(p *Policy) error

+ type RollbackManager struct

+ func NewRollbackManager(logger *log.Logger, mounts *MountTable, router *Router) *RollbackManager

+ func (m *RollbackManager) Rollback(path string) error

+ func (m *RollbackManager) Start()

+ func (m *RollbackManager) Stop()

+ type Router struct

+ func NewRouter() *Router

+ func (r *Router) LoginPath(path string) bool

+ func (r *Router) MatchingMount(path string) string

+ func (r *Router) MatchingView(path string) *BarrierView

+ func (r *Router) Mount(backend logical.Backend, prefix, salt string, view *BarrierView) error

+ func (r *Router) Remount(src, dst string) error

+ func (r *Router) RootPath(path string) bool

+ func (r *Router) Route(req *logical.Request) (*logical.Response, error)

+ func (r *Router) Taint(path string) error

+ func (r *Router) Unmount(prefix string) error

+ func (r *Router) Untaint(path string) error

+ type SealConfig struct

+ SecretShares int

+ SecretThreshold int

+ func (s *SealConfig) Validate() error

+ type SecurityBarrier interface

+ GenerateKey func() ([]byte, error)

+ Initialize func([]byte) error

+ Initialized func() (bool, error)

+ KeyLength func() (int, int)

+ Seal func() error

+ Sealed func() (bool, error)

+ Unseal func(key []byte) error

+ type SystemBackend struct

+ Core *Core

+ type TokenEntry struct

+ DisplayName string

+ ID string

+ Meta map[string]string

+ NumUses int

+ Parent string

+ Path string

+ Policies []string

+ type TokenStore struct

+ func NewTokenStore(c *Core) (*TokenStore, error)

+ func (t *TokenStore) SetExpirationManager(exp *ExpirationManager)

+ func (ts *TokenStore) Create(entry *TokenEntry) error

+ func (ts *TokenStore) Lookup(id string) (*TokenEntry, error)

+ func (ts *TokenStore) Revoke(id string) error

+ func (ts *TokenStore) RevokeTree(id string) error

+ func (ts *TokenStore) RootToken() (*TokenEntry, error)

+ func (ts *TokenStore) SaltID(id string) string

+ func (ts *TokenStore) UseToken(te *TokenEntry) error