vault

Documentation

Overview

Copyright (C) 2021-2023, Kubefirst This program is licensed under MIT. See the LICENSE file for more details.

Copyright (C) 2021-2023, Kubefirst

This program is licensed under MIT. See the LICENSE file for more details.

Copyright (C) 2021-2023, Kubefirst

This program is licensed under MIT. See the LICENSE file for more details.

Copyright (C) 2021-2023, Kubefirst

This program is licensed under MIT. See the LICENSE file for more details.

Copyright (C) 2021-2023, Kubefirst

This program is licensed under MIT. See the LICENSE file for more details.

Copyright (C) 2021-2023, Kubefirst

This program is licensed under MIT. See the LICENSE file for more details.

Index

• Constants
• Variables
• func NewVault() *api.Config
• type Configuration
  • func (conf *Configuration) AutoUnseal() (*vaultapi.InitResponse, error)
  • func (conf *Configuration) GetUserPassword(endpoint string, token string, username string, key string) (string, error)
  • func (conf *Configuration) IterSecrets(endpoint, token, fileName string) error

Constants

const (
	// Default address when leveraging port-forward
	VaultDefaultAddress = "http://127.0.0.1:8200"
	// Name for the Secret that gets created that contains root auth data
	VaultSecretName string = "vault-unseal-secret"
	// Namespace that Vault runs in
	VaultNamespace string = "vault"
	// number of recovery shares for Vault unseal
	RecoveryShares int = 5
	// number of recovery keys for Vault
	RecoveryThreshold int = 3
	// number of secret shares for Vault unseal
	SecretShares = 5
	// number of secret threshold Vault unseal
	SecretThreshold = 3
)

Variables

var Conf = Configuration{
	Config: NewVault(),
}

Functions

func NewVault

func NewVault() *api.Config

Types

type Configuration

type Configuration struct {
	Config *vaultapi.Config
}

func (*Configuration) AutoUnseal

func (conf *Configuration) AutoUnseal() (*vaultapi.InitResponse, error)

func (*Configuration) GetUserPassword

func (conf *Configuration) GetUserPassword(endpoint string, token string, username string, key string) (string, error)

GetUserPassword retrieves the password for a Vault user at the users mount path

func (*Configuration) IterSecrets

func (conf *Configuration) IterSecrets(endpoint, token, fileName string) error

IterSecrets returns the contents of Vault secret data using the key/value contents of chosen paths in the key value store in the form of export statements that can be leveraged in a bash shell to set environment variables

If the argument at fileName is an existing file, it will be removed