credhub

Documentation

Index

• func NewCredHubFactory(logger lager.Logger, credhub *LazyCredhub, prefix string) *credhubFactory
• func NewCredHubManagerFactory() creds.ManagerFactory
• type CredHubAtc
  • func (c CredHubAtc) Get(secretPath string) (interface{}, *time.Time, bool, error)
  • func (c CredHubAtc) NewSecretLookupPaths(teamName string, pipelineName string, allowRootPath bool) []creds.SecretLookupPath
• type CredHubManager
  • func (manager CredHubManager) Close(logger lager.Logger)
  • func (manager CredHubManager) Health() (*creds.HealthResponse, error)
  • func (manager *CredHubManager) Init(log lager.Logger) error
  • func (manager CredHubManager) IsConfigured() bool
  • func (manager *CredHubManager) MarshalJSON() ([]byte, error)
  • func (manager CredHubManager) NewSecretsFactory(logger lager.Logger) (creds.SecretsFactory, error)
  • func (manager CredHubManager) Validate() error
• type LazyCredhub
  • func (lc *LazyCredhub) CredHub() (*credhub.CredHub, error)
• type TLS
• type UAA

Functions

func NewCredHubFactory

func NewCredHubFactory(logger lager.Logger, credhub *LazyCredhub, prefix string) *credhubFactory

func NewCredHubManagerFactory

func NewCredHubManagerFactory() creds.ManagerFactory

Types

type CredHubAtc

type CredHubAtc struct {
	CredHub *LazyCredhub
	// contains filtered or unexported fields
}

func (CredHubAtc) Get

func (c CredHubAtc) Get(secretPath string) (interface{}, *time.Time, bool, error)

Get retrieves the value and expiration of an individual secret

func (CredHubAtc) NewSecretLookupPaths

func (c CredHubAtc) NewSecretLookupPaths(teamName string, pipelineName string, allowRootPath bool) []creds.SecretLookupPath

NewSecretLookupPaths defines how variables will be searched in the underlying secret manager

type CredHubManager

type CredHubManager struct {
	URL string `long:"url" description:"CredHub server address used to access secrets."`

	PathPrefix string `long:"path-prefix" default:"/concourse" description:"Path under which to namespace credential lookup."`

	TLS    TLS
	UAA    UAA
	Client *LazyCredhub
}

func (CredHubManager) Close

func (manager CredHubManager) Close(logger lager.Logger)

func (CredHubManager) Health

func (manager CredHubManager) Health() (*creds.HealthResponse, error)

func (*CredHubManager) Init

func (manager *CredHubManager) Init(log lager.Logger) error

func (CredHubManager) IsConfigured

func (manager CredHubManager) IsConfigured() bool

func (*CredHubManager) MarshalJSON

func (manager *CredHubManager) MarshalJSON() ([]byte, error)

func (CredHubManager) NewSecretsFactory

func (manager CredHubManager) NewSecretsFactory(logger lager.Logger) (creds.SecretsFactory, error)

func (CredHubManager) Validate

func (manager CredHubManager) Validate() error

type LazyCredhub

type LazyCredhub struct {
	// contains filtered or unexported fields
}

func (*LazyCredhub) CredHub

func (lc *LazyCredhub) CredHub() (*credhub.CredHub, error)

type TLS

type TLS struct {
	CACerts    []string `long:"ca-cert"              description:"Paths to PEM-encoded CA cert files to use to verify the CredHub server SSL cert."`
	ClientCert string   `long:"client-cert"          description:"Path to the client certificate for mutual TLS authorization."`
	ClientKey  string   `long:"client-key"           description:"Path to the client private key for mutual TLS authorization."`
	Insecure   bool     `long:"insecure-skip-verify" description:"Enable insecure SSL verification."`
}

type UAA

type UAA struct {
	ClientId     string `long:"client-id"     description:"Client ID for CredHub authorization."`
	ClientSecret string `long:"client-secret" description:"Client secret for CredHub authorization."`
}