vaultclient

Documentation

Index

• Constants
• type AWSSTSCredential
• type Authenticator
  • func NewAuthenticator(client VaultClient, cliFlags util.CliFlags) (Authenticator, error)
• type VaultClient
  • func NewVaultClient(secretsPrefix string, clientTimeout time.Duration, clientRetries int) (VaultClient, error)

Constants

const SSHPrivateKey = "id_rsa"

SSHPrivateKey is the name of the output file with the the SSH private key (think: ssh -i id_rsa ....).

const SSHPublicKey = "id_rsa.pub"

SSHPublicKey is the corresponding public key, used for signing.

const SecretsServicePathV1 = "/secret/application-config/services/"

const SecretsServicePathV2 = "/kv/data/application-config/services/"

Types

type AWSSTSCredential

type AWSSTSCredential struct {
	AccessKey    string
	SecretKey    string
	SessionToken string
}

type Authenticator

type Authenticator interface {
	Authenticate() (*util.WrappedToken, error)
}

func NewAuthenticator

func NewAuthenticator(client VaultClient, cliFlags util.CliFlags) (Authenticator, error)

type VaultClient

type VaultClient interface {
	VerifyVaultToken(vaultToken string) (*api.Secret, error)
	Delegate() *api.Client
	FetchAWSSTSCredential(awsConfig config.AWSType, stsTTL time.Duration) (*AWSSTSCredential, *util.WrappedToken, error)
	CreateSSHCertificate(sshConfig config.SSHCertificateType) error
	RefreshVaultToken() (*api.Secret, error)
	ServiceSecretPrefix(configVersion int) string

	Address() string
	ReadWithData(string, map[string][]string) (*api.Secret, error)
	Read(string) (*api.Secret, error)
	SetToken(token string)
}

func NewVaultClient

func NewVaultClient(secretsPrefix string, clientTimeout time.Duration, clientRetries int) (VaultClient, error)

NewVaultClient constructs a new VaultClient implementation.