conjur

Documentation

Index

• Constants
• func NewConjurFactory(log lager.Logger, client *conjurapi.Client, ...) *conjurFactory
• func NewManagerFactory() creds.ManagerFactory
• type Conjur
  • func NewConjur(log lager.Logger, client IConjurClient, ...) *Conjur
  • func (c Conjur) Get(secretPath string) (interface{}, *time.Time, bool, error)
  • func (c Conjur) NewSecretLookupPaths(teamName string, pipelineName string, allowRootPath bool) []creds.SecretLookupPath
• type IConjurClient
• type Manager
  • func (manager Manager) Close(logger lager.Logger)
  • func (manager *Manager) Health() (*creds.HealthResponse, error)
  • func (manager *Manager) Init(log lager.Logger) error
  • func (manager *Manager) IsConfigured() bool
  • func (manager *Manager) NewSecretsFactory(log lager.Logger) (creds.SecretsFactory, error)
  • func (manager *Manager) Validate() error

Constants

const DefaultPipelineSecretTemplate = "concourse/{{.Team}}/{{.Pipeline}}/{{.Secret}}"

const DefaultTeamSecretTemplate = "concourse/{{.Team}}/{{.Secret}}"

Functions

func NewConjurFactory

func NewConjurFactory(log lager.Logger, client *conjurapi.Client, secretTemplates []*creds.SecretTemplate) *conjurFactory

func NewManagerFactory

func NewManagerFactory() creds.ManagerFactory

Types

type Conjur

type Conjur struct {
	// contains filtered or unexported fields
}

func NewConjur

func NewConjur(log lager.Logger, client IConjurClient, secretTemplates []*creds.SecretTemplate) *Conjur

func (Conjur) Get

func (c Conjur) Get(secretPath string) (interface{}, *time.Time, bool, error)

func (Conjur) NewSecretLookupPaths

func (c Conjur) NewSecretLookupPaths(teamName string, pipelineName string, allowRootPath bool) []creds.SecretLookupPath

type IConjurClient

type IConjurClient interface {
	RetrieveSecret(string) ([]byte, error)
}

type Manager

type Manager struct {
	ConjurApplianceUrl     string `long:"appliance-url" description:"URL of the conjur instance"`
	ConjurAccount          string `long:"account" description:"Conjur Account"`
	ConjurCertFile         string `long:"cert-file" description:"Cert file used if conjur instance is using a self signed cert. E.g. /path/to/conjur.pem"`
	ConjurAuthnLogin       string `long:"authn-login" description:"Host username. E.g host/concourse"`
	ConjurAuthnApiKey      string `long:"authn-api-key" description:"Api key related to the host"`
	ConjurAuthnTokenFile   string `long:"authn-token-file" description:"Token file used if conjur instance is running in k8s or iam. E.g. /path/to/token_file"`
	PipelineSecretTemplate string `` /* 172-byte string literal not displayed */
	TeamSecretTemplate     string `` /* 150-byte string literal not displayed */
	SecretTemplate         string `` /* 136-byte string literal not displayed */
	Conjur                 *Conjur
}

func (Manager) Close

func (manager Manager) Close(logger lager.Logger)

func (*Manager) Health

func (manager *Manager) Health() (*creds.HealthResponse, error)

func (*Manager) Init

func (manager *Manager) Init(log lager.Logger) error

func (*Manager) IsConfigured

func (manager *Manager) IsConfigured() bool

func (*Manager) NewSecretsFactory

func (manager *Manager) NewSecretsFactory(log lager.Logger) (creds.SecretsFactory, error)

func (*Manager) Validate

func (manager *Manager) Validate() error