apis

Documentation

Index

• Constants

Constants

const (
	Finalizer = "kubevault.com"

	// required fields:
	// - Secret.Data["token"] - a vault token
	SecretTypeTokenAuth core.SecretType = "kubevault.com/token"

	// required for SecretTypeTokenAut
	TokenAuthTokenKey = "token"

	// required fields:
	// - Secret.Data["access_key_id"] - aws access key id
	// - Secret.Data["secret_access_key"] - aws access secret key
	SecretTypeAWSAuth core.SecretType = "kubevault.com/aws"

	// required for SecretTypeAWSAuth
	AWSAuthAccessKeyIDKey = "access_key_id"
	// required for SecretTypeAWSAuth
	AWSAuthAccessSecretKey = "secret_access_key"
	// optional for SecretTypeAWSAuth
	AWSAuthSecurityTokenKey = "security_token"

	// required fields:
	// - Secret.Data["sa.json"] - gcp access secret key
	SecretTypeGCPAuth core.SecretType = "kubevault.com/gcp"
	// required for SecretTypeGCPAuth
	GCPAuthSACredentialJson = "sa.json"

	// - Secret.Data["msiToken"] - azure managed service identity (MSI)  jwt token
	SecretTypeAzureAuth = "kubevault.com/azure"

	// required for SecretTypeAzureAuth
	AzureMSIToken = "msiToken"
)

const (
	VaultAuthK8sRole    = "role"
	VaultAuthApprole    = "role"
	VaultAuthLDAPGroups = "groups"
	VaultAuthLDAPUsers  = "users"
	VaultAuthJWTRole    = "role"
	VaultAuthOIDCRole   = "role"
)

const (
	CertificatePath            = "/etc/vault/tls"
	VaultServerCertsVolumeName = "vault-server-certs"
	VaultClientCertsVolumeName = "vault-client-certs"
)

const (
	VaultServerInitializing        = "Initializing"
	VaultServerInitialized         = "Initialized"
	VaultServerUnsealing           = "Unsealing"
	VaultServerUnsealed            = "Unsealed"
	VaultServerAcceptingConnection = "AcceptingConnection"
	AllReplicasAreReady            = "AllReplicasReady"
	SomeReplicasAreNotReady        = "SomeReplicasNotReady"
	VaultServerPaused              = "Paused"
	VaultReadWriteOK               = "ReadWriteOK"

	// health check constants
	VaultHealthCheckPaused = "HealthCheckPaused"
)

const (
	ResourceKindStatefulSet = "StatefulSet"
)

const (
	// moved from operator/pkg/controller/vault.go
	TLSCACertKey = "ca.crt"
)

const (
	VaultAPIPort = 8200
)