fs

Documentation

Index

• func Init(path string, init *InitConfig, seal *SealConfig) (*sys.Vault, []sys.UnsealKey, error)
• func Open(path string, errorLog *log.Logger) (*sys.Vault, error)
• func WriteInitConfig(filename string, config *InitConfig) error
• type InitConfig
  • func ReadInitConfig(filename string) (*InitConfig, error)
• type SealConfig

Functions

func Init

func Init(path string, init *InitConfig, seal *SealConfig) (*sys.Vault, []sys.UnsealKey, error)

Init initializes a stateful KES deployment within the given path using the InitConfig and SealConfig.

It returns an initialized Vault and a set of UnsealKeys to unseal the Vault in the future.

func Open

func Open(path string, errorLog *log.Logger) (*sys.Vault, error)

Open returns a new Vault that reads its initial and seal configuration from config files within the given path.

func WriteInitConfig

func WriteInitConfig(filename string, config *InitConfig) error

WriteInitConfig writes the YAML representation of the given InitConfig to a file.

Types

type InitConfig

type InitConfig struct {
	Version string

	Address yml.String

	PrivateKey yml.String

	Certificate yml.String

	Password yml.String

	VerifyClientCerts yml.Bool

	ProxyIdentities []yml.Identity

	ProxyClientCert yml.String
}

InitConfig contains the initial configuration for a stateful KES deployment.

func ReadInitConfig

func ReadInitConfig(filename string) (*InitConfig, error)

ReadInitConfig reads and parses the InitConfig YAML representation from the given file.

type SealConfig

type SealConfig struct {
	SysAdmin kes.Identity

	Sealer sys.Sealer
}

SealConfig contains the initial seal configuration for a stateful KESdeployment.