vault

Documentation

Index

• func New(config *Config) (providers.EncryptionClient, error)
• type Config

Functions

func New

func New(config *Config) (providers.EncryptionClient, error)

New creates an instance of the KMS client.

Types

type Config

type Config struct {
	// The names of encryption key for Vault transit communication
	KeyNames []string `json:"keyNames" yaml:"keyNames"`

	// Vault listen address, for example https://localhost:8200
	Address string `json:"address" yaml:"address"`

	// Token authentication information
	Token string `json:"token" yaml:"token"`

	// TLS certificate authentication information
	ClientCert string `json:"clientCert" yaml:"clientCert"`
	ClientKey  string `json:"clientKey" yaml:"clientKey"`

	// AppRole authentication information
	RoleID   string `json:"roleID" yaml:"roleID"`
	SecretID string `json:"secretID" yaml:"secretID"`

	// CACert is the path to a PEM-encoded CA cert file to use to verify the
	// Vault server SSL certificate.
	VaultCACert string `json:"vaultCACert" yaml:"vaultCACert"`

	// TLSServerName, if set, is used to set the SNI host when connecting via TLS.
	TLSServerName string `json:"tlsServerName" yaml:"tlsServerName"`

	// The path for transit API, default is "transit"
	TransitPath string `json:"transitPath" yaml:"transitPath"`

	// The path for auth backend, default is "auth"
	AuthPath string `json:"authPath" yaml:"authPath"`
}

Config contains the details of connection.