vault

Documentation

Index

• Constants
• func FetchCert(vaultAddress, pkiMount string, binary bool) ([]byte, error)
• func FetchCertChain(vaultAddress, pkiMount string) ([]byte, error)
• func FetchCrl(vaultAddress, pkiMount string, binary bool) ([]byte, error)
• type AppRoleAuth
  • func NewAppRoleAuth(client *api.Client, loginData map[string]string, mountPath string) (*AppRoleAuth, error)
  • func (t *AppRoleAuth) Authenticate() (string, error)
  • func (t *AppRoleAuth) Cleanup() error
• type AuthMethod
• type KubernetesAuth
  • func NewVaultKubernetesAuth(client *api.Client, role string) (*KubernetesAuth, error)
  • func (t *KubernetesAuth) Authenticate() (string, error)
  • func (t *KubernetesAuth) Cleanup() error
• type TokenAuth
  • func NewTokenAuth(token string) (*TokenAuth, error)
  • func (t *TokenAuth) Authenticate() (string, error)
  • func (t *TokenAuth) Cleanup() error
• type TokenImplicitAuth
  • func NewTokenImplicitAuth() *TokenImplicitAuth
  • func (t *TokenImplicitAuth) Authenticate() (string, error)
  • func (t *TokenImplicitAuth) Cleanup() error
• type VaultClient
  • func NewVaultPki(client *api.Client, auth AuthMethod, config *conf.Config) (*VaultClient, error)
  • func (c *VaultClient) Cleanup() error
  • func (c *VaultClient) Issue(opts *conf.Config) (*pki.CertData, error)
  • func (c *VaultClient) ReadAcme(commonName string, conf *conf.Config) (*pki.CertData, error)
  • func (c *VaultClient) Revoke(serial string) error
  • func (c *VaultClient) Sign(csr string, opts *conf.Config) (*pki.Signature, error)
  • func (c *VaultClient) Tidy() error

Constants

const (
	KeyRoleId       = "role_id"
	KeySecretId     = "secret_id"
	KeySecretIdFile = "secret_id_file"
)

Functions

func FetchCert

func FetchCert(vaultAddress, pkiMount string, binary bool) ([]byte, error)

func FetchCertChain

func FetchCertChain(vaultAddress, pkiMount string) ([]byte, error)

func FetchCrl

func FetchCrl(vaultAddress, pkiMount string, binary bool) ([]byte, error)

Types

type AppRoleAuth

type AppRoleAuth struct {
	// contains filtered or unexported fields
}

func NewAppRoleAuth

func NewAppRoleAuth(client *api.Client, loginData map[string]string, mountPath string) (*AppRoleAuth, error)

func (*AppRoleAuth) Authenticate

func (t *AppRoleAuth) Authenticate() (string, error)

func (*AppRoleAuth) Cleanup

func (t *AppRoleAuth) Cleanup() error

type AuthMethod

type AuthMethod interface {
	Authenticate() (string, error)
	Cleanup() error
}

type KubernetesAuth

type KubernetesAuth struct {
	// contains filtered or unexported fields
}

func NewVaultKubernetesAuth

func NewVaultKubernetesAuth(client *api.Client, role string) (*KubernetesAuth, error)

func (*KubernetesAuth) Authenticate

func (t *KubernetesAuth) Authenticate() (string, error)

func (*KubernetesAuth) Cleanup

func (t *KubernetesAuth) Cleanup() error

type TokenAuth

type TokenAuth struct {
	// contains filtered or unexported fields
}

func NewTokenAuth

func NewTokenAuth(token string) (*TokenAuth, error)

func (*TokenAuth) Authenticate

func (t *TokenAuth) Authenticate() (string, error)

func (*TokenAuth) Cleanup

func (t *TokenAuth) Cleanup() error

type TokenImplicitAuth

type TokenImplicitAuth struct {
}

func NewTokenImplicitAuth

func NewTokenImplicitAuth() *TokenImplicitAuth

func (*TokenImplicitAuth) Authenticate

func (t *TokenImplicitAuth) Authenticate() (string, error)

func (*TokenImplicitAuth) Cleanup

func (t *TokenImplicitAuth) Cleanup() error

type VaultClient

type VaultClient struct {
	// contains filtered or unexported fields
}

func NewVaultPki

func NewVaultPki(client *api.Client, auth AuthMethod, config *conf.Config) (*VaultClient, error)

func (*VaultClient) Cleanup

func (c *VaultClient) Cleanup() error

func (*VaultClient) Issue

func (c *VaultClient) Issue(opts *conf.Config) (*pki.CertData, error)

func (*VaultClient) ReadAcme

func (c *VaultClient) ReadAcme(commonName string, conf *conf.Config) (*pki.CertData, error)

func (*VaultClient) Revoke

func (c *VaultClient) Revoke(serial string) error

func (*VaultClient) Sign

func (c *VaultClient) Sign(csr string, opts *conf.Config) (*pki.Signature, error)

func (*VaultClient) Tidy

func (c *VaultClient) Tidy() error