vault

Documentation

Index

• func InitAuthServerVault(vaultAddr string, vaultTimeout time.Duration, vaultCACert, vaultPath string, ...)
• type AuthServerVault
  • func (a *AuthServerVault) AuthMethods() []mysql.AuthMethod
  • func (a *AuthServerVault) DefaultAuthMethodDescription() mysql.AuthMethodDescription
  • func (a *AuthServerVault) HandleUser(user string) bool
  • func (a *AuthServerVault) UserEntryWithHash(conn *mysql.Conn, salt []byte, user string, authResponse []byte, ...) (mysql.Getter, error)

Functions

func InitAuthServerVault

func InitAuthServerVault(vaultAddr string, vaultTimeout time.Duration, vaultCACert, vaultPath string, vaultCacheTTL time.Duration, vaultTokenFile, vaultRoleID, vaultRoleSecretIDFile, vaultRoleMountPoint string)

InitAuthServerVault - entrypoint for initialization of Vault AuthServer implementation

Types

type AuthServerVault

type AuthServerVault struct {
	// contains filtered or unexported fields
}

AuthServerVault implements AuthServer with a config loaded from Vault.

func (*AuthServerVault) AuthMethods

func (a *AuthServerVault) AuthMethods() []mysql.AuthMethod

AuthMethods returns the list of registered auth methods implemented by this auth server.

func (*AuthServerVault) DefaultAuthMethodDescription

func (a *AuthServerVault) DefaultAuthMethodDescription() mysql.AuthMethodDescription

DefaultAuthMethodDescription returns MysqlNativePassword as the default authentication method for the auth server implementation.

func (*AuthServerVault) HandleUser

func (a *AuthServerVault) HandleUser(user string) bool

HandleUser is part of the Validator interface. We handle any user here since we don't check up front.

func (*AuthServerVault) UserEntryWithHash

func (a *AuthServerVault) UserEntryWithHash(conn *mysql.Conn, salt []byte, user string, authResponse []byte, remoteAddr net.Addr) (mysql.Getter, error)

UserEntryWithHash is called when mysql_native_password is used.