config

Documentation

Index

• type AutoAuth
• type Cache
• type Config
  • func LoadConfig(path string, logger log.Logger) (*Config, error)
• type Listener
• type Method
• type Sink
• type Vault

Types

type AutoAuth

type AutoAuth struct {
	Method *Method `hcl:"-"`
	Sinks  []*Sink `hcl:"sinks"`

	// NOTE: This is unsupported outside of testing and may disappear at any
	// time.
	EnableReauthOnNewCredentials bool `hcl:"enable_reauth_on_new_credentials"`
}

type Cache

type Cache struct {
	UseAutoAuthToken bool        `hcl:"use_auto_auth_token"`
	Listeners        []*Listener `hcl:"listeners"`
}

type Config

type Config struct {
	AutoAuth      *AutoAuth `hcl:"auto_auth"`
	ExitAfterAuth bool      `hcl:"exit_after_auth"`
	PidFile       string    `hcl:"pid_file"`
	Cache         *Cache    `hcl:"cache"`
	Vault         *Vault    `hcl:"vault"`
}

Config is the configuration for the vault server.

func LoadConfig

func LoadConfig(path string, logger log.Logger) (*Config, error)

LoadConfig loads the configuration at the given path, regardless if its a file or directory.

type Listener

type Listener struct {
	Type   string
	Config map[string]interface{}
}

type Method

type Method struct {
	Type       string
	MountPath  string        `hcl:"mount_path"`
	WrapTTLRaw interface{}   `hcl:"wrap_ttl"`
	WrapTTL    time.Duration `hcl:"-"`
	Config     map[string]interface{}
}

type Sink

type Sink struct {
	Type       string
	WrapTTLRaw interface{}   `hcl:"wrap_ttl"`
	WrapTTL    time.Duration `hcl:"-"`
	DHType     string        `hcl:"dh_type"`
	DHPath     string        `hcl:"dh_path"`
	AAD        string        `hcl:"aad"`
	AADEnvVar  string        `hcl:"aad_env_var"`
	Config     map[string]interface{}
}

type Vault

type Vault struct {
	Address       string `hcl:"address"`
	CACert        string `hcl:"ca_cert"`
	CAPath        string `hcl:"ca_path"`
	TLSSkipVerify bool   `hcl:"tls_skip_verify"`
	ClientCert    string `hcl:"client_cert"`
	ClientKey     string `hcl:"client_key"`
}