unsealer

Documentation

Index

• type AppRoleUnsealer
  • func (u AppRoleUnsealer) Name() string
  • func (u AppRoleUnsealer) Token() (string, error)
• type AwsUnsealer
  • func (aws AwsUnsealer) Name() string
  • func (aws AwsUnsealer) Token() (string, error)
• type GitHubUnsealer
  • func (gh GitHubUnsealer) Name() string
  • func (gh GitHubUnsealer) Token() (string, error)
• type TokenUnsealer
  • func (t TokenUnsealer) Name() string
  • func (t TokenUnsealer) Token() (string, error)
• type Unsealer
• type UserPassUnsealer
  • func (u UserPassUnsealer) Name() string
  • func (u UserPassUnsealer) Token() (string, error)
• type WrappedTokenUnsealer
  • func (t WrappedTokenUnsealer) Name() string
  • func (t WrappedTokenUnsealer) Token() (string, error)

Types

type AppRoleUnsealer

type AppRoleUnsealer struct {
	RoleId   string
	SecretId string
	Endpoint string
	Wrap     time.Duration
	// contains filtered or unexported fields
}

The AppRole unsealer retrives a token using RoleId and SecretId.

func (AppRoleUnsealer) Name

func (u AppRoleUnsealer) Name() string

func (AppRoleUnsealer) Token

func (u AppRoleUnsealer) Token() (string, error)

type AwsUnsealer

type AwsUnsealer struct {
	Role  string
	Nonce string
	// contains filtered or unexported fields
}

The AwsUnsealer uses the aws-ec2 method to authorized with Vault.

func (AwsUnsealer) Name

func (aws AwsUnsealer) Name() string

func (AwsUnsealer) Token

func (aws AwsUnsealer) Token() (string, error)

type GitHubUnsealer

type GitHubUnsealer struct {
	PersonalToken string
	// contains filtered or unexported fields
}

The GitHubUnsealer retrieves a token from Vault using a user's Github personal token

func (GitHubUnsealer) Name

func (gh GitHubUnsealer) Name() string

func (GitHubUnsealer) Token

func (gh GitHubUnsealer) Token() (string, error)

type TokenUnsealer

type TokenUnsealer struct {
	AuthToken string
}

The TokenUnsealer simply returns the token it was instatiated with as the token for Vault.

func (TokenUnsealer) Name

func (t TokenUnsealer) Name() string

func (TokenUnsealer) Token

func (t TokenUnsealer) Token() (string, error)

Retrieving a token with the TokenUnsealer checks that the token is still valid first.

type Unsealer

type Unsealer interface {
	Token() (string, error)
	Name() string
}

The Unsealer interface represets a type that can retrieve a valid token for usage with Vault.

type UserPassUnsealer

type UserPassUnsealer struct {
	Username string
	Password string
	Endpoint string
	// contains filtered or unexported fields
}

The UserPassUnsealer retrieves a token from Vault using a username & password combiniation that is authorized with Vault already.

func (UserPassUnsealer) Name

func (u UserPassUnsealer) Name() string

func (UserPassUnsealer) Token

func (u UserPassUnsealer) Token() (string, error)

type WrappedTokenUnsealer

type WrappedTokenUnsealer struct {
	TempToken string
}

The WrappedToken unsealer retrieves a token created by vault that was responsewrapped into another token.

func (WrappedTokenUnsealer) Name

func (t WrappedTokenUnsealer) Name() string

func (WrappedTokenUnsealer) Token

func (t WrappedTokenUnsealer) Token() (string, error)