google

Documentation

Index

• func VaultTokenSource(tokenConfig *VaultTokenConfig) (oauth2.TokenSource, error)
• type VaultTokenConfig

Functions

func VaultTokenSource

func VaultTokenSource(tokenConfig *VaultTokenConfig) (oauth2.TokenSource, error)

VaultTokenSource returns a Google Cloud TokenSource derived from a HashiCorp Vault TOKEN

Use this TokenSource to derive a Google Cloud Credential from a HashiCorp Vault Token. You must configure a Vault policy the VAULT_TOKEN that returns a GCP access_token: https://www.vaultproject.io/docs/secrets/gcp/index.html#access-tokens

VaultToken (string): The VAULT_TOKEN capable of deriving a GCP access_token.
VaultPath (string): Vault gcp secrets policy endpoint. (eg "gcp/token/my-token-roleset")
VaultCAcert (string): The root CA Certificate for the Vault Server's endpoint
VaultAddr (string): Hostname/Address URI for the vault server (https://your_vault.server:8200/)

Types

type VaultTokenConfig

type VaultTokenConfig struct {
	VaultToken  string
	VaultPath   string
	VaultCAcert string
	VaultAddr   string
}