openbao

Documentation

Index

• func WithAuth(cfg *config.Config) bastion.SSHAuthMethod
• type SignedCert
  • func Sign(cfg *config.Config) (*SignedCert, error)
  • func (s *SignedCert) Write(cfg *config.Config) (string, func(), error)

Functions

func WithAuth

func WithAuth(cfg *config.Config) bastion.SSHAuthMethod

WithAuth returns a bastion-go SSHAuthMethod that signs the configured key with OpenBao and authenticates using the resulting certificate together with its matching private key.

Types

type SignedCert

type SignedCert struct {
	// Certificate is the signed certificate in authorized_keys format.
	Certificate string
	// PublicKey is the path to the public key that was signed.
	PublicKey string
	// PrivateKey is the path to the matching private key.
	PrivateKey string
}

SignedCert is the result of signing an SSH key with the OpenBao SSH engine.

func Sign

func Sign(cfg *config.Config) (*SignedCert, error)

Sign requests a signed SSH certificate for the configured public key from the OpenBao SSH secrets engine.

func (*SignedCert) Write

func (s *SignedCert) Write(cfg *config.Config) (string, func(), error)

Write writes the certificate to the configured output path, or to a temporary file if no path is configured. It returns the path to the written certificate and a cleanup function that removes the temporary file (a no-op for a configured path).