vault

Documentation

Index

• type ChartConfig
• type ChartsConfig
• type Config
  • func (c Config) Validate() error
• type CustomVault
• type IntegratedServicesManager
  • func MakeIntegratedServiceManager(clusterGetter integratedserviceadapter.ClusterGetter, ...) IntegratedServicesManager
  • func (m IntegratedServicesManager) GetOutput(ctx context.Context, clusterID uint, ...) (integratedservices.IntegratedServiceOutput, error)
  • func (m IntegratedServicesManager) Name() string
  • func (m IntegratedServicesManager) ValidateSpec(ctx context.Context, spec integratedservices.IntegratedServiceSpec) error
• type IntegratedServicesOperator
  • func MakeIntegratedServicesOperator(clusterGetter integratedserviceadapter.ClusterGetter, ...) IntegratedServicesOperator
  • func (op IntegratedServicesOperator) Apply(ctx context.Context, clusterID uint, ...) error
  • func (op IntegratedServicesOperator) Deactivate(ctx context.Context, clusterID uint, ...) error
  • func (op IntegratedServicesOperator) Name() string
• type KubernetesService
• type ManagedConfig
• type Settings

Types

type ChartConfig

type ChartConfig struct {
	Chart   string
	Version string
	Values  map[string]interface{}
}

type ChartsConfig

type ChartsConfig struct {
	Webhook ChartConfig
}

type Config

type Config struct {
	Namespace string
	Managed   ManagedConfig
	Charts    ChartsConfig
}

Config contains configuration for the vault integrated service.

func (Config) Validate

func (c Config) Validate() error

type CustomVault

type CustomVault struct {
	Enabled  bool   `json:"enabled" mapstructure:"enabled"`
	Address  string `json:"address" mapstructure:"address"`
	Policy   string `json:"policy" mapstructure:"policy"`
	SecretID string `json:"secretId" mapstructure:"secretId"`
}

type IntegratedServicesManager

type IntegratedServicesManager struct {
	integratedservices.PassthroughIntegratedServiceSpecPreparer
	// contains filtered or unexported fields
}

IntegratedServiceManager implements the Vault integrated service manager

func MakeIntegratedServiceManager

func MakeIntegratedServiceManager(
	clusterGetter integratedserviceadapter.ClusterGetter,
	secretStore services.SecretStore,
	config Config,
	logger services.Logger,
) IntegratedServicesManager

MakeIntegratedServiceManager builds a new integrated service manager component

func (IntegratedServicesManager) GetOutput

func (m IntegratedServicesManager) GetOutput(ctx context.Context, clusterID uint, spec integratedservices.IntegratedServiceSpec) (integratedservices.IntegratedServiceOutput, error)

GetOutput returns the Vault integrated service' output

func (IntegratedServicesManager) Name

func (m IntegratedServicesManager) Name() string

Name returns the integrated service' name

func (IntegratedServicesManager) ValidateSpec

func (m IntegratedServicesManager) ValidateSpec(ctx context.Context, spec integratedservices.IntegratedServiceSpec) error

ValidateSpec validates a Vault integrated service specification

type IntegratedServicesOperator

type IntegratedServicesOperator struct {
	// contains filtered or unexported fields
}

IntegratedServiceOperator implements the Vault integrated service operator

func MakeIntegratedServicesOperator

func MakeIntegratedServicesOperator(
	clusterGetter integratedserviceadapter.ClusterGetter,
	clusterService integratedservices.ClusterService,
	helmService services.HelmService,
	kubernetesService KubernetesService,
	secretStore services.SecretStore,
	config Config,
	logger services.Logger,
) IntegratedServicesOperator

MakeIntegratedServicesOperator returns a Vault integrated service operator

func (IntegratedServicesOperator) Apply

func (op IntegratedServicesOperator) Apply(ctx context.Context, clusterID uint, spec integratedservices.IntegratedServiceSpec) error

Apply applies the provided specification to the cluster integrated service

func (IntegratedServicesOperator) Deactivate

func (op IntegratedServicesOperator) Deactivate(ctx context.Context, clusterID uint, spec integratedservices.IntegratedServiceSpec) error

Deactivate deactivates the cluster integrated service

func (IntegratedServicesOperator) Name

func (op IntegratedServicesOperator) Name() string

Name returns the name of the Vault integrated service

type KubernetesService

type KubernetesService interface {
	// GetKubeConfig gets a kube config for a specific cluster.
	GetKubeConfig(ctx context.Context, clusterID uint) (*k8srest.Config, error)

	// EnsureObject makes sure that a given Object is on the cluster and returns it.
	EnsureObject(ctx context.Context, clusterID uint, o client.Object) error

	// DeleteObject deletes an Object from a specific cluster.
	DeleteObject(ctx context.Context, clusterID uint, o client.Object) error
}

type ManagedConfig

type ManagedConfig struct {
	Enabled  bool
	Endpoint string
}

ManagedConfig contains cluster managed vault configuration.

type Settings

type Settings struct {
	Namespaces      []string `json:"namespaces" mapstructure:"namespaces"`
	ServiceAccounts []string `json:"serviceAccounts" mapstructure:"serviceAccounts"`
}