gcpsecrets

Documentation

Index

• Constants
• func Backend() *backend
• func Factory(ctx context.Context, conf *logical.BackendConfig) (logical.Backend, error)
• type ImpersonatedAccount
• type PluginIdentityTokenSupplier
  • func (p *PluginIdentityTokenSupplier) SubjectToken(ctx context.Context, opts externalaccount.SupplierOptions) (string, error)
• type ResourceBindings
• type RoleSet
• type StaticAccount
• type TokenGenerator

Constants

const SecretTypeAccessToken = "access_token"

THIS SECRET TYPE IS DEPRECATED - future secret requests returns a response with no framework.Secret We are keeping them as part of the created framework.Secret to allow for clean up of access_token secrets and leases from older versions of Vault.

const (
	SecretTypeKey = "service_account_key"
)

Functions

func Backend

func Backend() *backend

func Factory

func Factory(ctx context.Context, conf *logical.BackendConfig) (logical.Backend, error)

Factory returns a new backend as logical.Backend.

Types

type ImpersonatedAccount

type ImpersonatedAccount struct {
	Name string
	gcputil.ServiceAccountId

	TokenScopes []string
	Ttl         int
}

type PluginIdentityTokenSupplier

type PluginIdentityTokenSupplier struct {
	// contains filtered or unexported fields
}

func (*PluginIdentityTokenSupplier) SubjectToken

func (p *PluginIdentityTokenSupplier) SubjectToken(ctx context.Context, opts externalaccount.SupplierOptions) (string, error)

type ResourceBindings

type ResourceBindings map[string]util.StringSet

ResourceBindings represent a map of GCP resource name to IAM roles to be bound on that resource.

type RoleSet

type RoleSet struct {
	Name       string
	SecretType string

	RawBindings string
	Bindings    ResourceBindings

	AccountId *gcputil.ServiceAccountId
	TokenGen  *TokenGenerator
}

type StaticAccount

type StaticAccount struct {
	Name        string
	SecretType  string
	RawBindings string
	Bindings    ResourceBindings
	gcputil.ServiceAccountId

	TokenGen *TokenGenerator
}

type TokenGenerator

type TokenGenerator struct {
	KeyName    string
	B64KeyJSON string
	Scopes     []string
}

TokenGenerator wraps the service account key and params required to create access tokens.