gcpsecrets

Documentation

Index

• Constants
• func Backend() *backend
• func Factory(ctx context.Context, conf *logical.BackendConfig) (logical.Backend, error)
• type ResourceBindings
• type RoleSet
• type TokenGenerator

Constants

const SecretTypeAccessToken = "access_token"

EVERYTHING USING THIS SECRET TYPE IS CURRENTLY DEPRECATED. We keep it to allow for clean up of access_token secrets/leases that may have be left over by older versions of Vault.

const (
	SecretTypeKey = "service_account_key"
)

Functions

func Backend

func Backend() *backend

func Factory

func Factory(ctx context.Context, conf *logical.BackendConfig) (logical.Backend, error)

Factory returns a new backend as logical.Backend.

Types

type ResourceBindings

type ResourceBindings map[string]util.StringSet

ResourceBindings represent a map of GCP resource name to IAM roles to be bound on that resource.

type RoleSet

type RoleSet struct {
	Name       string
	SecretType string

	RawBindings string
	Bindings    ResourceBindings

	AccountId *gcputil.ServiceAccountId
	TokenGen  *TokenGenerator
}

type TokenGenerator

type TokenGenerator struct {
	KeyName    string
	B64KeyJSON string
	Scopes     []string
}

TokenGenerator wraps the service account key and params required to create access tokens.