vault

Documentation

Overview

Copyright Jetstack Ltd. See LICENSE for details.

Copyright Jetstack Ltd. See LICENSE for details.

Index

• Constants
• func NewTunnel(tunnel interfaces.Tunnel, fqdn string, vaultCA *x509.CertPool) (*vaultTunnel, error)
• type Vault
  • func NewFromCluster(cluster interfaces.Cluster) (*Vault, error)
  • func (v *Vault) RootToken() (string, error)
  • func (v *Vault) Tunnel() (interfaces.VaultTunnel, error)
  • func (v *Vault) TunnelFromFQDNs(vaultInternalFQDNs []string, vaultCA string) (interfaces.VaultTunnel, error)
  • func (v *Vault) VerifyInitFromFQDNs(instances []string, vaultCA, vaultKMSKeyID, vaultUnsealKeyName string) error

Constants

const (
	VaultStateSealed = iota
	VaultStateUnsealed
	VaultStateUnintialised
	VaultStateErr
)

const (
	Retries = 60
)

Functions

func NewTunnel

func NewTunnel(
	tunnel interfaces.Tunnel, fqdn string, vaultCA *x509.CertPool,
) (*vaultTunnel, error)

Types

type Vault

type Vault struct {
	// contains filtered or unexported fields
}

func NewFromCluster

func NewFromCluster(cluster interfaces.Cluster) (*Vault, error)

func (*Vault) RootToken

func (v *Vault) RootToken() (string, error)

func (*Vault) Tunnel

func (v *Vault) Tunnel() (interfaces.VaultTunnel, error)

create tunnels

func (*Vault) TunnelFromFQDNs

func (v *Vault) TunnelFromFQDNs(vaultInternalFQDNs []string, vaultCA string) (interfaces.VaultTunnel, error)

returns the active vault tunnel for the whole cluster with provided FQDNs

func (*Vault) VerifyInitFromFQDNs

func (v *Vault) VerifyInitFromFQDNs(instances []string, vaultCA, vaultKMSKeyID, vaultUnsealKeyName string) error