Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type SecretDir ¶
type SecretDir struct {
// contains filtered or unexported fields
}
SecretDir implements Node and Handle This type is used for accessing all content in a VaultFS as everything maps to directory-like structures. Various lookups produce either a child SecretDir or a a StaticDir tree.
func NewSecretDir ¶
NewSecretDir creates a SecretDir node linked to the given secret and vault API.
func (*SecretDir) Lookup ¶
Lookup looks up a path. Vault policies mean its non-obvious what will happen. In brief: a path we can't access due to permissions always returns an unpopulated secret dir, which allows traversing further down the tree. But, if we can access it, and confirm it doesn't exist, we return ENOENT instead.
type SecretType ¶ added in v0.0.2
type SecretType int
SecretType is returned from internal lookup functions to track possibly changing key types.
const ( // SecretTypeBackendError returned if a key is not accessible at all. SecretTypeBackendError SecretType = iota // SecretTypeInaccessible returned if a key is inaccessible, and should be // treated as an empty, traversable directory until found otherwise. SecretTypeInaccessible // SecretTypeNonExistent return if key is non-existent (i.e. deleted since // we got here) SecretTypeNonExistent // SecretTypeDirectory returned if a key is accessible and list'able and // should be directory like SecretTypeDirectory // SecretTypeSecret returned if a key is read'able, and should have // secret-like behavior SecretTypeSecret )
type StaticDir ¶
type StaticDir struct {
// contains filtered or unexported fields
}
StaticDir implements a fuse directory structure with static content.
func NewStaticDir ¶
NewStaticDir generates a new static directory tree of arbitrary depth from the supplied map.
type StaticValue ¶
type StaticValue struct {
// contains filtered or unexported fields
}
StaticValue implements a node which always serves the same bytes.
func NewValue ¶
func NewValue(value string) (*StaticValue, error)
NewValue returns a new Value node (a file with static content)
func (*StaticValue) Read ¶
func (f *StaticValue) Read(ctx context.Context, req *fuse.ReadRequest, resp *fuse.ReadResponse) error
Read simply returns the statically stored content of the node.
type VaultFS ¶
type VaultFS struct {
// contains filtered or unexported fields
}
VaultFS is a vault filesystem. It also wraps the accessor functions needed by the filesystem nodes to manage access to backend keys in vault (i.e. error handling, failover and re-auth attempts.
func New ¶
func New(config *api.Config, mountpoint string, root string, token string, authMethod string) (*VaultFS, error)
New returns a new VaultFS
Source Files