api

package module

Go to main page

Versions in this module

v1

v1.13.0

Apr 19, 2024

Changes in this version

+ const CubbyHoleJWTSignatureAlgorithm

type AutopilotServer

+ func (a *AutopilotServer) String() string

type AutopilotState

+ func (a *AutopilotState) String() string

type AutopilotUpgrade

+ func (a *AutopilotUpgrade) String() string

type AutopilotZone

+ func (a *AutopilotZone) String() string

type AutopilotZoneUpgradeVersions

+ func (a *AutopilotZoneUpgradeVersions) String() string

type ClusterInfo

+ ReplicationPrimaryCanaryAgeMillis string

type HANode

+ ReplicationPrimaryCanaryAgeMillis int64

type HealthResponse

+ ReplicationPrimaryCanaryAgeMillis int64

type PluginRuntimeType

+ func PluginRuntimeTypeString(s string) (PluginRuntimeType, error)

+ func PluginRuntimeTypeValues() []PluginRuntimeType

+ func (i PluginRuntimeType) IsAPluginRuntimeType() bool

type RenewBehavior

+ func RenewBehaviorString(s string) (RenewBehavior, error)

+ func RenewBehaviorValues() []RenewBehavior

+ func (i RenewBehavior) IsARenewBehavior() bool

+ func (i RenewBehavior) String() string

v1.12.2

Mar 18, 2024

v1.12.1

Mar 13, 2024

Changes in this version

type Sys

+ func (c *Sys) GetAuth(path string) (*AuthMount, error)

+ func (c *Sys) GetAuthWithContext(ctx context.Context, path string) (*AuthMount, error)

+ func (c *Sys) GetMount(path string) (*MountOutput, error)

+ func (c *Sys) GetMountWithContext(ctx context.Context, path string) (*MountOutput, error)

v1.12.0

Feb 8, 2024

v1.11.0

Jan 24, 2024

Changes in this version

+ const DefaultAddress

type Client

+ func (c *Client) HCPCookie() string

+ func (c *Client) SetHCPCookie(v *http.Cookie) error

type ClusterInfo

+ ClockSkewMillis string

+ LastHeartBeatDurationMillis string

type GetPluginResponse

+ Runtime string

type HANode

+ ClockSkewMillis int64

+ EchoDurationMillis int64

type HealthResponse

+ ClockSkewMillis int64

+ EchoDurationMillis int64

+ Enterprise bool

type Logical

+ func (c *Logical) WriteRaw(path string, data []byte) (*Response, error)

+ func (c *Logical) WriteRawWithContext(ctx context.Context, path string, data []byte) (*Response, error)

type MountConfigInput

+ DelegatedAuthAccessors []string

+ IdentityTokenKey string

type MountConfigOutput

+ DelegatedAuthAccessors []string

+ IdentityTokenKey string

type PluginDetails

+ OCIImage string

+ Runtime string

type PluginType

+ func (p *PluginType) UnmarshalJSON(data []byte) error

+ func (p PluginType) MarshalJSON() ([]byte, error)

type RegisterPluginInput

+ Runtime string

type RegisterPluginRuntimeInput

+ Rootless bool

type Request

+ HCPCookie *http.Cookie

+ type RootReloadPluginInput struct

+ Plugin string

+ Scope string

+ Type PluginType

type SealStatusResponse

+ RecoverySealType string

type Secret

+ MountType string

type Sys

+ func (c *Sys) CapabilitiesAccessor(accessor, path string) ([]string, error)

+ func (c *Sys) CapabilitiesAccessorWithContext(ctx context.Context, accessor, path string) ([]string, error)

+ func (c *Sys) CreateUICustomMessage(req UICustomMessageRequest) (*Secret, error)

+ func (c *Sys) CreateUICustomMessageWithContext(ctx context.Context, req UICustomMessageRequest) (*Secret, error)

+ func (c *Sys) DeleteUICustomMessage(id string) error

+ func (c *Sys) DeleteUICustomMessageWithContext(ctx context.Context, id string) error

+ func (c *Sys) ListUICustomMessages(req UICustomMessageListRequest) (*Secret, error)

+ func (c *Sys) ListUICustomMessagesWithContext(ctx context.Context, req UICustomMessageListRequest) (*Secret, error)

+ func (c *Sys) ReadUICustomMessage(id string) (*Secret, error)

+ func (c *Sys) ReadUICustomMessageWithContext(ctx context.Context, id string) (*Secret, error)

+ func (c *Sys) RootReloadPlugin(ctx context.Context, i *RootReloadPluginInput) (string, error)

+ func (c *Sys) UpdateUICustomMessage(id string, req UICustomMessageRequest) error

+ func (c *Sys) UpdateUICustomMessageWithContext(ctx context.Context, id string, req UICustomMessageRequest) error

+ type UICustomMessageListRequest struct

+ Active *bool

+ Authenticated *bool

+ Type *string

+ func (r *UICustomMessageListRequest) WithActive(value bool) *UICustomMessageListRequest

+ func (r *UICustomMessageListRequest) WithAuthenticated(value bool) *UICustomMessageListRequest

+ func (r *UICustomMessageListRequest) WithType(value string) *UICustomMessageListRequest

+ type UICustomMessageRequest struct

+ Authenticated bool

+ EndTime string

+ Link *uiCustomMessageLink

+ Message string

+ Options map[string]any

+ StartTime string

+ Title string

+ Type string

+ func (r *UICustomMessageRequest) WithLink(title, href string) *UICustomMessageRequest

v1.10.0

Sep 5, 2023

Changes in this version

+ var PluginRuntimeTypes = []PluginRuntimeType

type Client

+ func (c *Client) CloneTLSConfig() bool

+ func (c *Client) SetCloneTLSConfig(clone bool)

+ type ClusterInfo struct

+ APIAddr string

+ ClusterAddress string

+ ConnectionStatus string

+ LastHeartBeat string

+ NodeID string

type Config

+ CloneTLSConfig bool

+ type DeregisterPluginRuntimeInput struct

+ Name string

+ Type PluginRuntimeType

type GetPluginResponse

+ OCIImage string

+ type GetPluginRuntimeInput struct

+ Name string

+ Type PluginRuntimeType

+ type GetPluginRuntimeResponse struct

+ CPU int64

+ CgroupParent string

+ Memory int64

+ Name string

+ OCIRuntime string

+ Type string

+ type ListPluginRuntimesInput struct

+ Type PluginRuntimeType

+ type ListPluginRuntimesResponse struct

+ Runtimes []PluginRuntimeDetails

+ type PluginRuntimeDetails struct

+ CPU int64

+ CgroupParent string

+ Memory int64

+ Name string

+ OCIRuntime string

+ Type string

+ type PluginRuntimeType uint32

+ const PluginRuntimeTypeContainer

+ const PluginRuntimeTypeUnsupported

+ func ParsePluginRuntimeType(PluginRuntimeType string) (PluginRuntimeType, error)

+ func (r PluginRuntimeType) String() string

type RegisterPluginInput

+ Env []string

+ OCIImage string

+ type RegisterPluginRuntimeInput struct

+ CPU int64

+ CgroupParent string

+ Memory int64

+ Name string

+ OCIRuntime string

+ Type PluginRuntimeType

+ type ReplicationStatusGenericResponse struct

+ ClusterID string

+ KnownPrimaryClusterAddrs []string

+ KnownSecondaries []string

+ LastDRWAL uint64

+ LastPerformanceWAL uint64

+ LastReindexEpoch string

+ LastRemoteWAL uint64

+ LastWAL uint64

+ MerkleRoot string

+ Mode string

+ Primaries []ClusterInfo

+ PrimaryClusterAddr string

+ SSCTGenerationCounter uint64

+ Secondaries []ClusterInfo

+ SecondaryID string

+ State string

+ type ReplicationStatusResponse struct

+ DR ReplicationStatusGenericResponse

+ Performance ReplicationStatusGenericResponse

type Sys

+ func (c *Sys) DeregisterPluginRuntime(ctx context.Context, i *DeregisterPluginRuntimeInput) error

+ func (c *Sys) GetPluginRuntime(ctx context.Context, i *GetPluginRuntimeInput) (*GetPluginRuntimeResponse, error)

+ func (c *Sys) ListPluginRuntimes(ctx context.Context, input *ListPluginRuntimesInput) (*ListPluginRuntimesResponse, error)

+ func (c *Sys) RaftAutopilotConfigurationWithDRToken(drToken string) (*AutopilotConfig, error)

+ func (c *Sys) RaftAutopilotStateWithDRToken(drToken string) (*AutopilotState, error)

+ func (c *Sys) RegisterPluginRuntime(ctx context.Context, i *RegisterPluginRuntimeInput) error

+ func (c *Sys) ReplicationDRStatusWithContext(ctx context.Context) (*ReplicationStatusGenericResponse, error)

+ func (c *Sys) ReplicationPerformanceStatusWithContext(ctx context.Context) (*ReplicationStatusGenericResponse, error)

+ func (c *Sys) ReplicationStatus() (*ReplicationStatusResponse, error)

+ func (c *Sys) ReplicationStatusWithContext(ctx context.Context, path string) (*ReplicationStatusResponse, error)

v1.9.2

May 26, 2023

v1.9.1

Apr 19, 2023

Changes in this version

type Config

+ func (c *Config) TLSConfig() *tls.Config

v1.9.0

Feb 9, 2023

Changes in this version

+ const AuthHeaderName

+ const NamespaceHeaderName

+ const RequestHeaderName

+ var PluginTypes = []PluginType

+ func CheckHCLKeys(node ast.Node, valid []string) error

+ type MFAConstraintAny struct

+ Any []*MFAMethodID

+ type MFAMethodID struct

+ ID string

+ Name string

+ Type string

+ UsesPasscode bool

+ type MFARequirement struct

+ MFAConstraints map[string]*MFAConstraintAny

+ MFARequestID string

+ type PluginType uint32

+ const PluginTypeCredential

+ const PluginTypeDatabase

+ const PluginTypeSecrets

+ const PluginTypeUnknown

+ func ParsePluginType(pluginType string) (PluginType, error)

+ func (p PluginType) String() string

+ type WALState struct

+ ClusterID string

+ LocalIndex uint64

+ ReplicatedIndex uint64

v1.8.3

Jan 19, 2023

Changes in this version

type Logical

+ func (c *Logical) ParseRawResponseAndCloseBody(resp *Response, err error) (*Secret, error)

+ func (c *Logical) ReadRawWithContext(ctx context.Context, path string) (*Response, error)

type MountConfigInput

+ UserLockoutConfig *UserLockoutConfigInput

type MountConfigOutput

+ UserLockoutConfig *UserLockoutConfigOutput

type SealStatusResponse

+ Warnings []string

+ type UserLockoutConfigInput struct

+ DisableLockout *bool

+ LockoutCounterResetDuration string

+ LockoutDuration string

+ LockoutThreshold string

+ type UserLockoutConfigOutput struct

+ DisableLockout *bool

+ LockoutCounterReset int

+ LockoutDuration int

+ LockoutThreshold uint

v1.8.2

Oct 31, 2022

Changes in this version

type Logical

+ func (c *Logical) ReadRaw(path string) (*Response, error)

+ func (c *Logical) ReadRawWithData(path string, data map[string][]string) (*Response, error)

+ func (c *Logical) ReadRawWithDataWithContext(ctx context.Context, path string, data map[string][]string) (*Response, error)

v1.8.1

Oct 12, 2022

Changes in this version

+ const EnvVaultDisableRedirects

type Config

+ DisableRedirects bool

type GetPluginInput

+ Version string

type GetPluginResponse

+ Version string

type MountConfigInput

+ PluginVersion string

v1.8.0

Sep 20, 2022

Changes in this version

+ const PluginAutoMTLSEnv

+ var ErrSecretNotFound = errors.New("secret not found")

type Client

+ func (c *Client) DisableKeepAlives() bool

+ func (c *Client) MaxIdleConnections() int

+ func (c *Client) SetDisableKeepAlives(disable bool)

+ func (c *Client) SetMaxIdleConnections(idle int)

type Config

+ func (c *Config) ParseAddress(address string) (*url.URL, error)

type DeregisterPluginInput

+ Version string

type GetPluginResponse

+ DeprecationStatus string

type ListPluginsResponse

+ Details []PluginDetails

type MountInput

+ PluginVersion string

type MountOutput

+ DeprecationStatus string

+ PluginVersion string

+ RunningSha256 string

+ RunningVersion string

+ type PluginDetails struct

+ Builtin bool

+ DeprecationStatus string

+ Name string

+ Type string

+ Version string

type RegisterPluginInput

+ Version string

type SealStatusResponse

+ HCPLinkResourceID string

+ HCPLinkStatus string

v1.7.2

Jun 9, 2022

v1.7.1

Jun 8, 2022

Changes in this version

+ type KVv1 struct

+ func (kv *KVv1) Delete(ctx context.Context, secretPath string) error

+ func (kv *KVv1) Get(ctx context.Context, secretPath string) (*KVSecret, error)

+ func (kv *KVv1) Put(ctx context.Context, secretPath string, data map[string]interface{}) error

+ type KVv2 struct

+ func (kv *KVv2) Delete(ctx context.Context, secretPath string) error

+ func (kv *KVv2) DeleteMetadata(ctx context.Context, secretPath string) error

+ func (kv *KVv2) DeleteVersions(ctx context.Context, secretPath string, versions []int) error

+ func (kv *KVv2) Destroy(ctx context.Context, secretPath string, versions []int) error

+ func (kv *KVv2) Get(ctx context.Context, secretPath string) (*KVSecret, error)

+ func (kv *KVv2) GetMetadata(ctx context.Context, secretPath string) (*KVMetadata, error)

+ func (kv *KVv2) GetVersion(ctx context.Context, secretPath string, version int) (*KVSecret, error)

+ func (kv *KVv2) GetVersionsAsList(ctx context.Context, secretPath string) ([]KVVersionMetadata, error)

+ func (kv *KVv2) Patch(ctx context.Context, secretPath string, newData map[string]interface{}, ...) (*KVSecret, error)

+ func (kv *KVv2) PatchMetadata(ctx context.Context, secretPath string, metadata KVMetadataPatchInput) error

+ func (kv *KVv2) Put(ctx context.Context, secretPath string, data map[string]interface{}, ...) (*KVSecret, error)

+ func (kv *KVv2) PutMetadata(ctx context.Context, secretPath string, metadata KVMetadataPutInput) error

+ func (kv *KVv2) Rollback(ctx context.Context, secretPath string, toVersion int) (*KVSecret, error)

+ func (kv *KVv2) Undelete(ctx context.Context, secretPath string, versions []int) error

v1.7.0

Jun 8, 2022

Changes in this version

+ const KVMergeMethodPatch

+ const KVMergeMethodReadWrite

+ const KVOptionCheckAndSet

+ const KVOptionMethod

type Client

+ func (c *Client) KVv1(mountPath string) *kvv1

+ func (c *Client) KVv2(mountPath string) *kvv2

+ type KVMetadata struct

+ CASRequired bool

+ CreatedTime time.Time

+ CurrentVersion int

+ CustomMetadata map[string]interface{}

+ DeleteVersionAfter time.Duration

+ MaxVersions int

+ OldestVersion int

+ Raw *Secret

+ UpdatedTime time.Time

+ Versions map[string]KVVersionMetadata

+ type KVMetadataPatchInput struct

+ CASRequired *bool

+ CustomMetadata map[string]interface{}

+ DeleteVersionAfter *time.Duration

+ MaxVersions *int

+ type KVMetadataPutInput struct

+ CASRequired bool

+ CustomMetadata map[string]interface{}

+ DeleteVersionAfter time.Duration

+ MaxVersions int

+ type KVOption func() (key string, value interface{})

+ func WithCheckAndSet(cas int) KVOption

+ func WithMergeMethod(method string) KVOption

+ func WithOption(key string, value interface{}) KVOption

+ type KVSecret struct

+ CustomMetadata map[string]interface{}

+ Data map[string]interface{}

+ Raw *Secret

+ VersionMetadata *KVVersionMetadata

+ type KVVersionMetadata struct

+ CreatedTime time.Time

+ DeletionTime time.Time

+ Destroyed bool

+ Version int

v1.6.0

May 25, 2022

Changes in this version

+ const EnvVaultCACertBytes

+ const EnvVaultProxyAddr

+ const ErrOutputPolicyRequest

+ func IsSudoPath(path string) bool

+ func SudoPaths() map[string]*regexp.Regexp

type Auth

+ func (a *Auth) MFALogin(ctx context.Context, authMethod AuthMethod, creds ...string) (*Secret, error)

+ func (a *Auth) MFAValidate(ctx context.Context, mfaSecret *Secret, payload map[string]interface{}) (*Secret, error)

type AutopilotConfig

+ DisableUpgradeMigration bool

type AutopilotServer

+ NodeType string

+ RedundancyZone string

+ UpgradeVersion string

+ Version string

type AutopilotState

+ OptimisticFailureTolerance int

+ RedundancyZones map[string]AutopilotZone

+ Upgrade *AutopilotUpgrade

+ type AutopilotUpgrade struct

+ OtherVersionNonVoters []string

+ OtherVersionReadReplicas []string

+ OtherVersionVoters []string

+ RedundancyZones map[string]AutopilotZoneUpgradeVersions

+ Status string

+ TargetVersion string

+ TargetVersionNonVoters []string

+ TargetVersionReadReplicas []string

+ TargetVersionVoters []string

+ type AutopilotZone struct

+ FailureTolerance int

+ Servers []string

+ Voters []string

+ type AutopilotZoneUpgradeVersions struct

+ OtherVersionNonVoters []string

+ OtherVersionVoters []string

+ TargetVersionNonVoters []string

+ TargetVersionVoters []string

type Client

+ func (c *Client) Namespace() string

+ func (c *Client) OutputPolicy() bool

+ func (c *Client) SetCheckRedirect(f func(*http.Request, []*http.Request) error)

+ func (c *Client) SetOutputPolicy(isSet bool)

+ func (c *Client) WithNamespace(namespace string) *Client

type Config

+ OutputPolicy bool

type HANode

+ RedundancyZone string

+ UpgradeVersion string

+ Version string

+ type OutputPolicyError struct

+ var LastOutputPolicyError *OutputPolicyError

+ func (d *OutputPolicyError) Error() string

+ func (d *OutputPolicyError) HCLString() (string, error)

type SealStatusResponse

+ BuildDate string

type Sys

+ func (c *Sys) MFAValidate(requestID string, payload map[string]interface{}) (*Secret, error)

+ func (c *Sys) MFAValidateWithContext(ctx context.Context, requestID string, payload map[string]interface{}) (*Secret, error)

type TLSConfig

+ CACertBytes []byte

v1.5.0

Mar 24, 2022

Changes in this version

+ const TLSErrorString

+ func VaultPluginTLSProviderContext(ctx context.Context, apiTLSConfig *TLSConfig) func() (*tls.Config, error)

type Client

+ func (c *Client) HelpWithContext(ctx context.Context, path string) (*Help, error)

type Logical

+ func (c *Logical) DeleteWithContext(ctx context.Context, path string) (*Secret, error)

+ func (c *Logical) DeleteWithDataWithContext(ctx context.Context, path string, data map[string][]string) (*Secret, error)

+ func (c *Logical) ListWithContext(ctx context.Context, path string) (*Secret, error)

+ func (c *Logical) ReadWithContext(ctx context.Context, path string) (*Secret, error)

+ func (c *Logical) ReadWithDataWithContext(ctx context.Context, path string, data map[string][]string) (*Secret, error)

+ func (c *Logical) UnwrapWithContext(ctx context.Context, wrappingToken string) (*Secret, error)

+ func (c *Logical) WriteBytesWithContext(ctx context.Context, path string, data []byte) (*Secret, error)

+ func (c *Logical) WriteWithContext(ctx context.Context, path string, data map[string]interface{}) (*Secret, error)

type SSH

+ func (c *SSH) CredentialWithContext(ctx context.Context, role string, data map[string]interface{}) (*Secret, error)

+ func (c *SSH) SignKeyWithContext(ctx context.Context, role string, data map[string]interface{}) (*Secret, error)

type SSHHelper

+ func (c *SSHHelper) VerifyWithContext(ctx context.Context, otp string) (*SSHVerifyResponse, error)

type Sys

+ func (c *Sys) AuditHashWithContext(ctx context.Context, path string, input string) (string, error)

+ func (c *Sys) CORSStatusWithContext(ctx context.Context) (*CORSResponse, error)

+ func (c *Sys) CapabilitiesSelfWithContext(ctx context.Context, path string) ([]string, error)

+ func (c *Sys) CapabilitiesWithContext(ctx context.Context, token, path string) ([]string, error)

+ func (c *Sys) ConfigureCORSWithContext(ctx context.Context, req *CORSRequest) error

+ func (c *Sys) DeletePolicyWithContext(ctx context.Context, name string) error

+ func (c *Sys) DeregisterPluginWithContext(ctx context.Context, i *DeregisterPluginInput) error

+ func (c *Sys) DisableAuditWithContext(ctx context.Context, path string) error

+ func (c *Sys) DisableAuthWithContext(ctx context.Context, path string) error

+ func (c *Sys) DisableCORSWithContext(ctx context.Context) error

+ func (c *Sys) EnableAuditWithOptionsWithContext(ctx context.Context, path string, options *EnableAuditOptions) error

+ func (c *Sys) EnableAuthWithOptionsWithContext(ctx context.Context, path string, options *EnableAuthOptions) error

+ func (c *Sys) GenerateDROperationTokenCancelWithContext(ctx context.Context) error

+ func (c *Sys) GenerateDROperationTokenInitWithContext(ctx context.Context, otp, pgpKey string) (*GenerateRootStatusResponse, error)

+ func (c *Sys) GenerateDROperationTokenStatusWithContext(ctx context.Context) (*GenerateRootStatusResponse, error)

+ func (c *Sys) GenerateDROperationTokenUpdateWithContext(ctx context.Context, shard, nonce string) (*GenerateRootStatusResponse, error)

+ func (c *Sys) GenerateRecoveryOperationTokenCancelWithContext(ctx context.Context) error

+ func (c *Sys) GenerateRecoveryOperationTokenInitWithContext(ctx context.Context, otp, pgpKey string) (*GenerateRootStatusResponse, error)

+ func (c *Sys) GenerateRecoveryOperationTokenStatusWithContext(ctx context.Context) (*GenerateRootStatusResponse, error)

+ func (c *Sys) GenerateRecoveryOperationTokenUpdateWithContext(ctx context.Context, shard, nonce string) (*GenerateRootStatusResponse, error)

+ func (c *Sys) GenerateRootCancelWithContext(ctx context.Context) error

+ func (c *Sys) GenerateRootInitWithContext(ctx context.Context, otp, pgpKey string) (*GenerateRootStatusResponse, error)

+ func (c *Sys) GenerateRootStatusWithContext(ctx context.Context) (*GenerateRootStatusResponse, error)

+ func (c *Sys) GenerateRootUpdateWithContext(ctx context.Context, shard, nonce string) (*GenerateRootStatusResponse, error)

+ func (c *Sys) GetPluginWithContext(ctx context.Context, i *GetPluginInput) (*GetPluginResponse, error)

+ func (c *Sys) GetPolicyWithContext(ctx context.Context, name string) (string, error)

+ func (c *Sys) HAStatusWithContext(ctx context.Context) (*HAStatusResponse, error)

+ func (c *Sys) HealthWithContext(ctx context.Context) (*HealthResponse, error)

+ func (c *Sys) InitStatusWithContext(ctx context.Context) (bool, error)

+ func (c *Sys) InitWithContext(ctx context.Context, opts *InitRequest) (*InitResponse, error)

+ func (c *Sys) KeyStatusWithContext(ctx context.Context) (*KeyStatus, error)

+ func (c *Sys) LeaderWithContext(ctx context.Context) (*LeaderResponse, error)

+ func (c *Sys) ListAuditWithContext(ctx context.Context) (map[string]*Audit, error)

+ func (c *Sys) ListAuthWithContext(ctx context.Context) (map[string]*AuthMount, error)

+ func (c *Sys) ListMountsWithContext(ctx context.Context) (map[string]*MountOutput, error)

+ func (c *Sys) ListPluginsWithContext(ctx context.Context, i *ListPluginsInput) (*ListPluginsResponse, error)

+ func (c *Sys) ListPoliciesWithContext(ctx context.Context) ([]string, error)

+ func (c *Sys) LookupWithContext(ctx context.Context, id string) (*Secret, error)

+ func (c *Sys) MountConfigWithContext(ctx context.Context, path string) (*MountConfigOutput, error)

+ func (c *Sys) MountWithContext(ctx context.Context, path string, mountInfo *MountInput) error

+ func (c *Sys) PutPolicyWithContext(ctx context.Context, name, rules string) error

+ func (c *Sys) PutRaftAutopilotConfigurationWithContext(ctx context.Context, opts *AutopilotConfig) error

+ func (c *Sys) RaftAutopilotConfigurationWithContext(ctx context.Context) (*AutopilotConfig, error)

+ func (c *Sys) RaftAutopilotStateWithContext(ctx context.Context) (*AutopilotState, error)

+ func (c *Sys) RaftJoinWithContext(ctx context.Context, opts *RaftJoinRequest) (*RaftJoinResponse, error)

+ func (c *Sys) RaftSnapshotRestoreWithContext(ctx context.Context, snapReader io.Reader, force bool) error

+ func (c *Sys) RaftSnapshotWithContext(ctx context.Context, snapWriter io.Writer) error

+ func (c *Sys) RegisterPluginWithContext(ctx context.Context, i *RegisterPluginInput) error

+ func (c *Sys) RekeyCancelWithContext(ctx context.Context) error

+ func (c *Sys) RekeyDeleteBackupWithContext(ctx context.Context) error

+ func (c *Sys) RekeyDeleteRecoveryBackupWithContext(ctx context.Context) error

+ func (c *Sys) RekeyInitWithContext(ctx context.Context, config *RekeyInitRequest) (*RekeyStatusResponse, error)

+ func (c *Sys) RekeyRecoveryKeyCancelWithContext(ctx context.Context) error

+ func (c *Sys) RekeyRecoveryKeyInitWithContext(ctx context.Context, config *RekeyInitRequest) (*RekeyStatusResponse, error)

+ func (c *Sys) RekeyRecoveryKeyStatusWithContext(ctx context.Context) (*RekeyStatusResponse, error)

+ func (c *Sys) RekeyRecoveryKeyUpdateWithContext(ctx context.Context, shard, nonce string) (*RekeyUpdateResponse, error)

+ func (c *Sys) RekeyRecoveryKeyVerificationCancelWithContext(ctx context.Context) error

+ func (c *Sys) RekeyRecoveryKeyVerificationStatusWithContext(ctx context.Context) (*RekeyVerificationStatusResponse, error)

+ func (c *Sys) RekeyRecoveryKeyVerificationUpdateWithContext(ctx context.Context, shard, nonce string) (*RekeyVerificationUpdateResponse, error)

+ func (c *Sys) RekeyRetrieveBackupWithContext(ctx context.Context) (*RekeyRetrieveResponse, error)

+ func (c *Sys) RekeyRetrieveRecoveryBackupWithContext(ctx context.Context) (*RekeyRetrieveResponse, error)

+ func (c *Sys) RekeyStatusWithContext(ctx context.Context) (*RekeyStatusResponse, error)

+ func (c *Sys) RekeyUpdateWithContext(ctx context.Context, shard, nonce string) (*RekeyUpdateResponse, error)

+ func (c *Sys) RekeyVerificationCancelWithContext(ctx context.Context) error

+ func (c *Sys) RekeyVerificationStatusWithContext(ctx context.Context) (*RekeyVerificationStatusResponse, error)

+ func (c *Sys) RekeyVerificationUpdateWithContext(ctx context.Context, shard, nonce string) (*RekeyVerificationUpdateResponse, error)

+ func (c *Sys) ReloadPluginStatusWithContext(ctx context.Context, reloadStatusInput *ReloadPluginStatusInput) (*ReloadStatusResponse, error)

+ func (c *Sys) ReloadPluginWithContext(ctx context.Context, i *ReloadPluginInput) (string, error)

+ func (c *Sys) RemountStatusWithContext(ctx context.Context, migrationID string) (*MountMigrationStatusOutput, error)

+ func (c *Sys) RemountWithContext(ctx context.Context, from, to string) error

+ func (c *Sys) RenewWithContext(ctx context.Context, id string, increment int) (*Secret, error)

+ func (c *Sys) ResetUnsealProcessWithContext(ctx context.Context) (*SealStatusResponse, error)

+ func (c *Sys) RevokeForceWithContext(ctx context.Context, id string) error

+ func (c *Sys) RevokePrefixWithContext(ctx context.Context, id string) error

+ func (c *Sys) RevokeWithContext(ctx context.Context, id string) error

+ func (c *Sys) RevokeWithOptionsWithContext(ctx context.Context, opts *RevokeOptions) error

+ func (c *Sys) RotateWithContext(ctx context.Context) error

+ func (c *Sys) SealStatusWithContext(ctx context.Context) (*SealStatusResponse, error)

+ func (c *Sys) SealWithContext(ctx context.Context) error

+ func (c *Sys) StartRemountWithContext(ctx context.Context, from, to string) (*MountMigrationOutput, error)

+ func (c *Sys) StepDownWithContext(ctx context.Context) error

+ func (c *Sys) TuneMountWithContext(ctx context.Context, path string, config MountConfigInput) error

+ func (c *Sys) UnmountWithContext(ctx context.Context, path string) error

+ func (c *Sys) UnsealWithContext(ctx context.Context, shard string) (*SealStatusResponse, error)

+ func (c *Sys) UnsealWithOptionsWithContext(ctx context.Context, opts *UnsealOpts) (*SealStatusResponse, error)

type TokenAuth

+ func (c *TokenAuth) CreateOrphanWithContext(ctx context.Context, opts *TokenCreateRequest) (*Secret, error)

+ func (c *TokenAuth) CreateWithContext(ctx context.Context, opts *TokenCreateRequest) (*Secret, error)

+ func (c *TokenAuth) CreateWithRoleWithContext(ctx context.Context, opts *TokenCreateRequest, roleName string) (*Secret, error)

+ func (c *TokenAuth) LookupAccessorWithContext(ctx context.Context, accessor string) (*Secret, error)

+ func (c *TokenAuth) LookupSelfWithContext(ctx context.Context) (*Secret, error)

+ func (c *TokenAuth) LookupWithContext(ctx context.Context, token string) (*Secret, error)

+ func (c *TokenAuth) RenewAccessorWithContext(ctx context.Context, accessor string, increment int) (*Secret, error)

+ func (c *TokenAuth) RenewSelfWithContext(ctx context.Context, increment int) (*Secret, error)

+ func (c *TokenAuth) RenewTokenAsSelfWithContext(ctx context.Context, token string, increment int) (*Secret, error)

+ func (c *TokenAuth) RenewWithContext(ctx context.Context, token string, increment int) (*Secret, error)

+ func (c *TokenAuth) RevokeAccessorWithContext(ctx context.Context, accessor string) error

+ func (c *TokenAuth) RevokeOrphanWithContext(ctx context.Context, token string) error

+ func (c *TokenAuth) RevokeSelfWithContext(ctx context.Context, token string) error

+ func (c *TokenAuth) RevokeTreeWithContext(ctx context.Context, token string) error

v1.4.1

Feb 25, 2022

v1.4.0

Feb 25, 2022

v1.3.1

Dec 22, 2021

v1.3.0

Oct 27, 2021

v1.2.0

Oct 14, 2021

v1.1.1

Jul 13, 2021

v1.1.0

Mar 30, 2021

v1.0.4

Jul 25, 2019

v1.0.3

Jul 25, 2019

v1.0.2

May 8, 2019

v1.0.1

Apr 15, 2019

Changes in this version

type Renewer

+ func (r *Renewer) DoneCh() <-chan error

+ func (r *Renewer) Renew()

+ func (r *Renewer) RenewCh() <-chan *RenewOutput

+ func (r *Renewer) Stop()

type RenewerInput

+ Grace time.Duration

+ Increment int

+ Rand *rand.Rand

+ RenewBuffer int

+ Secret *Secret

v0

v0.4.0

Feb 25, 2022

Changes in this version

+ const EnvHTTPProxy

+ const EnvRateLimit

+ const EnvVaultAddress

+ const EnvVaultAgentAddr

+ const EnvVaultAgentAddress

+ const EnvVaultCACert

+ const EnvVaultCAPath

+ const EnvVaultClientCert

+ const EnvVaultClientKey

+ const EnvVaultClientTimeout

+ const EnvVaultInsecure

+ const EnvVaultMFA

+ const EnvVaultMaxRetries

+ const EnvVaultNamespace

+ const EnvVaultSRVLookup

+ const EnvVaultSkipVerify

+ const EnvVaultTLSServerName

+ const EnvVaultToken

+ const EnvVaultWrapTTL

+ const ErrOutputStringRequest

+ const HeaderForward

+ const HeaderInconsistent

+ const HeaderIndex

+ const SSHHelperDefaultMountPoint

+ const VerifyEchoRequest

+ const VerifyEchoResponse

+ var DefaultLifetimeWatcherRenewBuffer = 5

+ var DefaultRenewerRenewBuffer = 5

+ var DefaultWrappingLookupFunc = func(operation, path string) string

+ var DefaultWrappingTTL = "5m"

+ var ErrIncompleteSnapshot = errors.New("incomplete snapshot, unable to read SHA256SUMS.sealed file")

+ var ErrLifetimeWatcherMissingInput = errors.New("missing input")

+ var ErrLifetimeWatcherMissingSecret = errors.New("missing secret")

+ var ErrLifetimeWatcherNoSecretData = errors.New("returned empty secret data")

+ var ErrLifetimeWatcherNotRenewable = errors.New("secret is not renewable")

+ var ErrRenewerMissingInput = errors.New("missing input to renewer")

+ var ErrRenewerMissingSecret = errors.New("missing secret to renew")

+ var ErrRenewerNoSecretData = errors.New("returned empty secret data")

+ var ErrRenewerNotRenewable = errors.New("secret is not renewable")

+ var PluginMetadataModeEnv = "VAULT_PLUGIN_METADATA_MODE"

+ var PluginUnwrapTokenEnv = "VAULT_UNWRAP_TOKEN"

+ func DefaultRetryPolicy(ctx context.Context, resp *http.Response, err error) (bool, error)

+ func MergeReplicationStates(old []string, new string) []string

+ func ParseReplicationState(raw string, hmacKey []byte) (*logical.WALState, error)

+ func VaultPluginTLSProvider(apiTLSConfig *TLSConfig) func() (*tls.Config, error)

+ type Audit struct

+ Description string

+ Local bool

+ Options map[string]string

+ Path string

+ Type string

+ type Auth struct

+ func (a *Auth) Login(ctx context.Context, authMethod AuthMethod) (*Secret, error)

+ func (a *Auth) Token() *TokenAuth

+ type AuthConfigInput = MountConfigInput

+ type AuthConfigOutput = MountConfigOutput

+ type AuthMethod interface

+ Login func(ctx context.Context, client *Client) (*Secret, error)

+ type AuthMount = MountOutput

+ type AutopilotConfig struct

+ CleanupDeadServers bool

+ DeadServerLastContactThreshold time.Duration

+ LastContactThreshold time.Duration

+ MaxTrailingLogs uint64

+ MinQuorum uint

+ ServerStabilizationTime time.Duration

+ func (ac *AutopilotConfig) MarshalJSON() ([]byte, error)

+ func (ac *AutopilotConfig) UnmarshalJSON(b []byte) error

+ type AutopilotServer struct

+ Address string

+ Healthy bool

+ ID string

+ LastContact string

+ LastIndex uint64

+ LastTerm uint64

+ Meta map[string]string

+ Name string

+ NodeStatus string

+ StableSince string

+ Status string

+ type AutopilotState struct

+ FailureTolerance int

+ Healthy bool

+ Leader string

+ NonVoters []string

+ Servers map[string]*AutopilotServer

+ Voters []string

+ type CORSRequest struct

+ AllowedHeaders []string

+ AllowedOrigins []string

+ Enabled bool

+ type CORSResponse struct

+ AllowedHeaders []string

+ AllowedOrigins []string

+ Enabled bool

+ type Client struct

+ func NewClient(c *Config) (*Client, error)

+ func (c *Client) AddHeader(key, value string)

+ func (c *Client) Address() string

+ func (c *Client) Auth() *Auth

+ func (c *Client) CheckRetry() retryablehttp.CheckRetry

+ func (c *Client) ClearNamespace()

+ func (c *Client) ClearToken()

+ func (c *Client) ClientTimeout() time.Duration

+ func (c *Client) Clone() (*Client, error)

+ func (c *Client) CloneConfig() *Config

+ func (c *Client) CloneHeaders() bool

+ func (c *Client) CloneToken() bool

+ func (c *Client) CloneWithHeaders() (*Client, error)

+ func (c *Client) CurrentWrappingLookupFunc() WrappingLookupFunc

+ func (c *Client) Headers() http.Header

+ func (c *Client) Help(path string) (*Help, error)

+ func (c *Client) Limiter() *rate.Limiter

+ func (c *Client) Logical() *Logical

+ func (c *Client) MaxRetries() int

+ func (c *Client) MaxRetryWait() time.Duration

+ func (c *Client) MinRetryWait() time.Duration

+ func (c *Client) NewLifetimeWatcher(i *LifetimeWatcherInput) (*LifetimeWatcher, error)

+ func (c *Client) NewRenewer(i *LifetimeWatcherInput) (*LifetimeWatcher, error)

+ func (c *Client) NewRequest(method, requestPath string) *Request

+ func (c *Client) OutputCurlString() bool

+ func (c *Client) RawRequest(r *Request) (*Response, error)

+ func (c *Client) RawRequestWithContext(ctx context.Context, r *Request) (*Response, error)

+ func (c *Client) ReadYourWrites() bool

+ func (c *Client) SRVLookup() bool

+ func (c *Client) SSH() *SSH

+ func (c *Client) SSHHelper() *SSHHelper

+ func (c *Client) SSHHelperWithMountPoint(mountPoint string) *SSHHelper

+ func (c *Client) SSHWithMountPoint(mountPoint string) *SSH

+ func (c *Client) SetAddress(addr string) error

+ func (c *Client) SetBackoff(backoff retryablehttp.Backoff)

+ func (c *Client) SetCheckRetry(checkRetry retryablehttp.CheckRetry)

+ func (c *Client) SetClientTimeout(timeout time.Duration)

+ func (c *Client) SetCloneHeaders(cloneHeaders bool)

+ func (c *Client) SetCloneToken(cloneToken bool)

+ func (c *Client) SetHeaders(headers http.Header)

+ func (c *Client) SetLimiter(rateLimit float64, burst int)

+ func (c *Client) SetLogger(logger retryablehttp.LeveledLogger)

+ func (c *Client) SetMFACreds(creds []string)

+ func (c *Client) SetMaxRetries(retries int)

+ func (c *Client) SetMaxRetryWait(retryWait time.Duration)

+ func (c *Client) SetMinRetryWait(retryWait time.Duration)

+ func (c *Client) SetNamespace(namespace string)

+ func (c *Client) SetOutputCurlString(curl bool)

+ func (c *Client) SetPolicyOverride(override bool)

+ func (c *Client) SetReadYourWrites(preventStaleReads bool)

+ func (c *Client) SetSRVLookup(srv bool)

+ func (c *Client) SetToken(v string)

+ func (c *Client) SetWrappingLookupFunc(lookupFunc WrappingLookupFunc)

+ func (c *Client) Sys() *Sys

+ func (c *Client) Token() string

+ func (c *Client) WithRequestCallbacks(callbacks ...RequestCallback) *Client

+ func (c *Client) WithResponseCallbacks(callbacks ...ResponseCallback) *Client

+ type Config struct

+ Address string

+ AgentAddress string

+ Backoff retryablehttp.Backoff

+ CheckRetry retryablehttp.CheckRetry

+ CloneHeaders bool

+ CloneToken bool

+ Error error

+ HttpClient *http.Client

+ Limiter *rate.Limiter

+ Logger retryablehttp.LeveledLogger

+ MaxRetries int

+ MaxRetryWait time.Duration

+ MinRetryWait time.Duration

+ OutputCurlString bool

+ ReadYourWrites bool

+ SRVLookup bool

+ Timeout time.Duration

+ func DefaultConfig() *Config

+ func (c *Config) ConfigureTLS(t *TLSConfig) error

+ func (c *Config) ReadEnvironment() error

+ type DeregisterPluginInput struct

+ Name string

+ Type consts.PluginType

+ type EnableAuditOptions struct

+ Description string

+ Local bool

+ Options map[string]string

+ Type string

+ type EnableAuthOptions = MountInput

+ type ErrorResponse struct

+ Errors []string

+ type GenerateRootStatusResponse struct

+ Complete bool

+ EncodedRootToken string

+ EncodedToken string

+ Nonce string

+ OTP string

+ OTPLength int

+ PGPFingerprint string

+ Progress int

+ Required int

+ Started bool

+ type GetPluginInput struct

+ Name string

+ Type consts.PluginType

+ type GetPluginResponse struct

+ Args []string

+ Builtin bool

+ Command string

+ Name string

+ SHA256 string

+ type HANode struct

+ APIAddress string

+ ActiveNode bool

+ ClusterAddress string

+ Hostname string

+ LastEcho *time.Time

+ type HAStatusResponse struct

+ Nodes []HANode

+ type HealthResponse struct

+ ClusterID string

+ ClusterName string

+ Initialized bool

+ LastWAL uint64

+ PerformanceStandby bool

+ ReplicationDRMode string

+ ReplicationPerformanceMode string

+ Sealed bool

+ ServerTimeUTC int64

+ Standby bool

+ Version string

+ type Help struct

+ Help string

+ OpenAPI map[string]interface{}

+ SeeAlso []string

+ type InitRequest struct

+ PGPKeys []string

+ RecoveryPGPKeys []string

+ RecoveryShares int

+ RecoveryThreshold int

+ RootTokenPGPKey string

+ SecretShares int

+ SecretThreshold int

+ StoredShares int

+ type InitResponse struct

+ Keys []string

+ KeysB64 []string

+ RecoveryKeys []string

+ RecoveryKeysB64 []string

+ RootToken string

+ type InitStatusResponse struct

+ Initialized bool

+ type KeyStatus struct

+ Encryptions int

+ InstallTime time.Time

+ Term int

+ type LeaderResponse struct

+ ActiveTime time.Time

+ HAEnabled bool

+ IsSelf bool

+ LastWAL uint64

+ LeaderAddress string

+ LeaderClusterAddress string

+ PerfStandby bool

+ PerfStandbyLastRemoteWAL uint64

+ RaftAppliedIndex uint64

+ RaftCommittedIndex uint64

+ type LifetimeWatcher struct

+ func (r *LifetimeWatcher) DoneCh() <-chan error

+ func (r *LifetimeWatcher) Renew()

+ func (r *LifetimeWatcher) RenewCh() <-chan *RenewOutput

+ func (r *LifetimeWatcher) Start()

+ func (r *LifetimeWatcher) Stop()

+ type LifetimeWatcherInput struct

+ Grace time.Duration

+ Increment int

+ Rand *rand.Rand

+ RenewBehavior RenewBehavior

+ RenewBuffer int

+ Secret *Secret

+ type ListPluginsInput struct

+ Type consts.PluginType

+ type ListPluginsResponse struct

+ Names []string

+ PluginsByType map[consts.PluginType][]string

+ type Logical struct

+ func (c *Logical) Delete(path string) (*Secret, error)

+ func (c *Logical) DeleteWithData(path string, data map[string][]string) (*Secret, error)

+ func (c *Logical) JSONMergePatch(ctx context.Context, path string, data map[string]interface{}) (*Secret, error)

+ func (c *Logical) List(path string) (*Secret, error)

+ func (c *Logical) Read(path string) (*Secret, error)

+ func (c *Logical) ReadWithData(path string, data map[string][]string) (*Secret, error)

+ func (c *Logical) Unwrap(wrappingToken string) (*Secret, error)

+ func (c *Logical) Write(path string, data map[string]interface{}) (*Secret, error)

+ func (c *Logical) WriteBytes(path string, data []byte) (*Secret, error)

+ type MountConfigInput struct

+ AllowedManagedKeys []string

+ AllowedResponseHeaders []string

+ AuditNonHMACRequestKeys []string

+ AuditNonHMACResponseKeys []string

+ DefaultLeaseTTL string

+ Description *string

+ ForceNoCache bool

+ ListingVisibility string

+ MaxLeaseTTL string

+ Options map[string]string

+ PassthroughRequestHeaders []string

+ PluginName string

+ TokenType string

+ type MountConfigOutput struct

+ AllowedManagedKeys []string

+ AllowedResponseHeaders []string

+ AuditNonHMACRequestKeys []string

+ AuditNonHMACResponseKeys []string

+ DefaultLeaseTTL int

+ ForceNoCache bool

+ ListingVisibility string

+ MaxLeaseTTL int

+ PassthroughRequestHeaders []string

+ PluginName string

+ TokenType string

+ type MountInput struct

+ Config MountConfigInput

+ Description string

+ ExternalEntropyAccess bool

+ Local bool

+ Options map[string]string

+ PluginName string

+ SealWrap bool

+ Type string

+ type MountMigrationOutput struct

+ MigrationID string

+ type MountMigrationStatusInfo struct

+ MigrationStatus string

+ SourceMount string

+ TargetMount string

+ type MountMigrationStatusOutput struct

+ MigrationID string

+ MigrationInfo *MountMigrationStatusInfo

+ type MountOutput struct

+ Accessor string

+ Config MountConfigOutput

+ Description string

+ ExternalEntropyAccess bool

+ Local bool

+ Options map[string]string

+ SealWrap bool

+ Type string

+ UUID string

+ type OutputStringError struct

+ ClientCACert string

+ ClientCAPath string

+ ClientCert string

+ ClientKey string

+ TLSSkipVerify bool

+ var LastOutputStringError *OutputStringError

+ func (d *OutputStringError) CurlString() string

+ func (d *OutputStringError) Error() string

+ type PluginAPIClientMeta struct

+ func (f *PluginAPIClientMeta) FlagSet() *flag.FlagSet

+ func (f *PluginAPIClientMeta) GetTLSConfig() *TLSConfig

+ type RaftJoinRequest struct

+ AutoJoin string

+ AutoJoinPort uint

+ AutoJoinScheme string

+ LeaderAPIAddr string

+ LeaderCACert string

+ LeaderClientCert string

+ LeaderClientKey string

+ NonVoter bool

+ Retry bool

+ type RaftJoinResponse struct

+ Joined bool

+ type RegisterPluginInput struct

+ Args []string

+ Command string

+ Name string

+ SHA256 string

+ Type consts.PluginType

+ type RekeyInitRequest struct

+ Backup bool

+ PGPKeys []string

+ RequireVerification bool

+ SecretShares int

+ SecretThreshold int

+ StoredShares int

+ type RekeyRetrieveResponse struct

+ Keys map[string][]string

+ KeysB64 map[string][]string

+ Nonce string

+ type RekeyStatusResponse struct

+ Backup bool

+ N int

+ Nonce string

+ PGPFingerprints []string

+ Progress int

+ Required int

+ Started bool

+ T int

+ VerificationNonce string

+ VerificationRequired bool

+ type RekeyUpdateResponse struct

+ Backup bool

+ Complete bool

+ Keys []string

+ KeysB64 []string

+ Nonce string

+ PGPFingerprints []string

+ VerificationNonce string

+ VerificationRequired bool

+ type RekeyVerificationStatusResponse struct

+ N int

+ Nonce string

+ Progress int

+ Started bool

+ T int

+ type RekeyVerificationUpdateResponse struct

+ Complete bool

+ Nonce string

+ type ReloadPluginInput struct

+ Mounts []string

+ Plugin string

+ Scope string

+ type ReloadPluginStatusInput struct

+ ReloadID string

+ type ReloadStatus struct

+ Error string

+ Timestamp time.Time

+ type ReloadStatusResponse struct

+ ReloadID string

+ Results map[string]*ReloadStatus

+ type RenewBehavior uint

+ const RenewBehaviorErrorOnErrors

+ const RenewBehaviorIgnoreErrors

+ const RenewBehaviorRenewDisabled

+ type RenewOutput struct

+ RenewedAt time.Time

+ Secret *Secret

+ type Renewer = LifetimeWatcher

+ type RenewerInput = LifetimeWatcherInput

+ type Request struct

+ Body io.Reader

+ BodyBytes []byte

+ BodySize int64

+ ClientToken string

+ Headers http.Header

+ Host string

+ MFAHeaderVals []string

+ Method string

+ Obj interface{}

+ Params url.Values

+ PolicyOverride bool

+ URL *url.URL

+ WrapTTL string

+ func (r *Request) ResetJSONBody() error

+ func (r *Request) SetJSONBody(val interface{}) error

+ func (r *Request) ToHTTP() (*http.Request, error)

+ type RequestCallback func(*Request)

+ func ForwardAlways() RequestCallback

+ func ForwardInconsistent() RequestCallback

+ func RequireState(states ...string) RequestCallback

+ type Response struct

+ func (r *Response) DecodeJSON(out interface{}) error

+ func (r *Response) Error() error

+ type ResponseCallback func(*Response)

+ func RecordState(state *string) ResponseCallback

+ type ResponseError struct

+ Errors []string

+ HTTPMethod string

+ NamespacePath string

+ RawError bool

+ StatusCode int

+ URL string

+ func (r *ResponseError) Error() string

+ type RevokeOptions struct

+ Force bool

+ LeaseID string

+ Prefix bool

+ Sync bool

+ type SSH struct

+ MountPoint string

+ func (c *SSH) Credential(role string, data map[string]interface{}) (*Secret, error)

+ func (c *SSH) SignKey(role string, data map[string]interface{}) (*Secret, error)

+ type SSHHelper struct

+ MountPoint string

+ func (c *SSHHelper) Verify(otp string) (*SSHVerifyResponse, error)

+ type SSHHelperConfig struct

+ AllowedCidrList string

+ AllowedRoles string

+ CACert string

+ CAPath string

+ Namespace string

+ SSHMountPoint string

+ TLSServerName string

+ TLSSkipVerify bool

+ VaultAddr string

+ func LoadSSHHelperConfig(path string) (*SSHHelperConfig, error)

+ func ParseSSHHelperConfig(contents string) (*SSHHelperConfig, error)

+ func (c *SSHHelperConfig) NewClient() (*Client, error)

+ func (c *SSHHelperConfig) SetTLSParameters(clientConfig *Config, certPool *x509.CertPool)

+ type SSHVerifyResponse struct

+ IP string

+ Message string

+ RoleName string

+ Username string

+ type SealStatusResponse struct

+ ClusterID string

+ ClusterName string

+ Initialized bool

+ Migration bool

+ N int

+ Nonce string

+ Progress int

+ RecoverySeal bool

+ Sealed bool

+ StorageType string

+ T int

+ Type string

+ Version string

+ type Secret struct

+ Auth *SecretAuth

+ Data map[string]interface{}

+ LeaseDuration int

+ LeaseID string

+ Renewable bool

+ RequestID string

+ Warnings []string

+ WrapInfo *SecretWrapInfo

+ func ParseSecret(r io.Reader) (*Secret, error)

+ func (s *Secret) TokenAccessor() (string, error)

+ func (s *Secret) TokenID() (string, error)

+ func (s *Secret) TokenIsRenewable() (bool, error)

+ func (s *Secret) TokenMetadata() (map[string]string, error)

+ func (s *Secret) TokenPolicies() ([]string, error)

+ func (s *Secret) TokenRemainingUses() (int, error)

+ func (s *Secret) TokenTTL() (time.Duration, error)

+ type SecretAuth struct

+ Accessor string

+ ClientToken string

+ EntityID string

+ IdentityPolicies []string

+ LeaseDuration int

+ MFARequirement *logical.MFARequirement

+ Metadata map[string]string

+ Orphan bool

+ Policies []string

+ Renewable bool

+ TokenPolicies []string

+ type SecretWrapInfo struct

+ Accessor string

+ CreationPath string

+ CreationTime time.Time

+ TTL int

+ Token string

+ WrappedAccessor string

+ type Sys struct

+ func (c *Sys) AuditHash(path string, input string) (string, error)

+ func (c *Sys) CORSStatus() (*CORSResponse, error)

+ func (c *Sys) Capabilities(token, path string) ([]string, error)

+ func (c *Sys) CapabilitiesSelf(path string) ([]string, error)

+ func (c *Sys) ConfigureCORS(req *CORSRequest) error

+ func (c *Sys) DeletePolicy(name string) error

+ func (c *Sys) DeregisterPlugin(i *DeregisterPluginInput) error

+ func (c *Sys) DisableAudit(path string) error

+ func (c *Sys) DisableAuth(path string) error

+ func (c *Sys) DisableCORS() error

+ func (c *Sys) EnableAudit(path string, auditType string, desc string, opts map[string]string) error

+ func (c *Sys) EnableAuditWithOptions(path string, options *EnableAuditOptions) error

+ func (c *Sys) EnableAuth(path, authType, desc string) error

+ func (c *Sys) EnableAuthWithOptions(path string, options *EnableAuthOptions) error

+ func (c *Sys) GenerateDROperationTokenCancel() error

+ func (c *Sys) GenerateDROperationTokenInit(otp, pgpKey string) (*GenerateRootStatusResponse, error)

+ func (c *Sys) GenerateDROperationTokenStatus() (*GenerateRootStatusResponse, error)

+ func (c *Sys) GenerateDROperationTokenUpdate(shard, nonce string) (*GenerateRootStatusResponse, error)

+ func (c *Sys) GenerateRecoveryOperationTokenCancel() error

+ func (c *Sys) GenerateRecoveryOperationTokenInit(otp, pgpKey string) (*GenerateRootStatusResponse, error)

+ func (c *Sys) GenerateRecoveryOperationTokenStatus() (*GenerateRootStatusResponse, error)

+ func (c *Sys) GenerateRecoveryOperationTokenUpdate(shard, nonce string) (*GenerateRootStatusResponse, error)

+ func (c *Sys) GenerateRootCancel() error

+ func (c *Sys) GenerateRootInit(otp, pgpKey string) (*GenerateRootStatusResponse, error)

+ func (c *Sys) GenerateRootStatus() (*GenerateRootStatusResponse, error)

+ func (c *Sys) GenerateRootUpdate(shard, nonce string) (*GenerateRootStatusResponse, error)

+ func (c *Sys) GetPlugin(i *GetPluginInput) (*GetPluginResponse, error)

+ func (c *Sys) GetPolicy(name string) (string, error)

+ func (c *Sys) HAStatus() (*HAStatusResponse, error)

+ func (c *Sys) Health() (*HealthResponse, error)

+ func (c *Sys) Init(opts *InitRequest) (*InitResponse, error)

+ func (c *Sys) InitStatus() (bool, error)

+ func (c *Sys) KeyStatus() (*KeyStatus, error)

+ func (c *Sys) Leader() (*LeaderResponse, error)

+ func (c *Sys) ListAudit() (map[string]*Audit, error)

+ func (c *Sys) ListAuth() (map[string]*AuthMount, error)

+ func (c *Sys) ListMounts() (map[string]*MountOutput, error)

+ func (c *Sys) ListPlugins(i *ListPluginsInput) (*ListPluginsResponse, error)

+ func (c *Sys) ListPolicies() ([]string, error)

+ func (c *Sys) Lookup(id string) (*Secret, error)

+ func (c *Sys) Monitor(ctx context.Context, logLevel string) (chan string, error)

+ func (c *Sys) Mount(path string, mountInfo *MountInput) error

+ func (c *Sys) MountConfig(path string) (*MountConfigOutput, error)

+ func (c *Sys) PutPolicy(name, rules string) error

+ func (c *Sys) PutRaftAutopilotConfiguration(opts *AutopilotConfig) error

+ func (c *Sys) RaftAutopilotConfiguration() (*AutopilotConfig, error)

+ func (c *Sys) RaftAutopilotState() (*AutopilotState, error)

+ func (c *Sys) RaftJoin(opts *RaftJoinRequest) (*RaftJoinResponse, error)

+ func (c *Sys) RaftSnapshot(snapWriter io.Writer) error

+ func (c *Sys) RaftSnapshotRestore(snapReader io.Reader, force bool) error

+ func (c *Sys) RegisterPlugin(i *RegisterPluginInput) error

+ func (c *Sys) RekeyCancel() error

+ func (c *Sys) RekeyDeleteBackup() error

+ func (c *Sys) RekeyDeleteRecoveryBackup() error

+ func (c *Sys) RekeyInit(config *RekeyInitRequest) (*RekeyStatusResponse, error)

+ func (c *Sys) RekeyRecoveryKeyCancel() error

+ func (c *Sys) RekeyRecoveryKeyInit(config *RekeyInitRequest) (*RekeyStatusResponse, error)

+ func (c *Sys) RekeyRecoveryKeyStatus() (*RekeyStatusResponse, error)

+ func (c *Sys) RekeyRecoveryKeyUpdate(shard, nonce string) (*RekeyUpdateResponse, error)

+ func (c *Sys) RekeyRecoveryKeyVerificationCancel() error

+ func (c *Sys) RekeyRecoveryKeyVerificationStatus() (*RekeyVerificationStatusResponse, error)

+ func (c *Sys) RekeyRecoveryKeyVerificationUpdate(shard, nonce string) (*RekeyVerificationUpdateResponse, error)

+ func (c *Sys) RekeyRetrieveBackup() (*RekeyRetrieveResponse, error)

+ func (c *Sys) RekeyRetrieveRecoveryBackup() (*RekeyRetrieveResponse, error)

+ func (c *Sys) RekeyStatus() (*RekeyStatusResponse, error)

+ func (c *Sys) RekeyUpdate(shard, nonce string) (*RekeyUpdateResponse, error)

+ func (c *Sys) RekeyVerificationCancel() error

+ func (c *Sys) RekeyVerificationStatus() (*RekeyVerificationStatusResponse, error)

+ func (c *Sys) RekeyVerificationUpdate(shard, nonce string) (*RekeyVerificationUpdateResponse, error)

+ func (c *Sys) ReloadPlugin(i *ReloadPluginInput) (string, error)

+ func (c *Sys) ReloadPluginStatus(reloadStatusInput *ReloadPluginStatusInput) (*ReloadStatusResponse, error)

+ func (c *Sys) Remount(from, to string) error

+ func (c *Sys) RemountStatus(migrationID string) (*MountMigrationStatusOutput, error)

+ func (c *Sys) Renew(id string, increment int) (*Secret, error)

+ func (c *Sys) ResetUnsealProcess() (*SealStatusResponse, error)

+ func (c *Sys) Revoke(id string) error

+ func (c *Sys) RevokeForce(id string) error

+ func (c *Sys) RevokePrefix(id string) error

+ func (c *Sys) RevokeWithOptions(opts *RevokeOptions) error

+ func (c *Sys) Rotate() error

+ func (c *Sys) Seal() error

+ func (c *Sys) SealStatus() (*SealStatusResponse, error)

+ func (c *Sys) StartRemount(from, to string) (*MountMigrationOutput, error)

+ func (c *Sys) StepDown() error

+ func (c *Sys) TuneMount(path string, config MountConfigInput) error

+ func (c *Sys) Unmount(path string) error

+ func (c *Sys) Unseal(shard string) (*SealStatusResponse, error)

+ func (c *Sys) UnsealWithOptions(opts *UnsealOpts) (*SealStatusResponse, error)

+ type TLSConfig struct

+ CACert string

+ CAPath string

+ ClientCert string

+ ClientKey string

+ Insecure bool

+ TLSServerName string

+ type TokenAuth struct

+ func (c *TokenAuth) Create(opts *TokenCreateRequest) (*Secret, error)

+ func (c *TokenAuth) CreateOrphan(opts *TokenCreateRequest) (*Secret, error)

+ func (c *TokenAuth) CreateWithRole(opts *TokenCreateRequest, roleName string) (*Secret, error)

+ func (c *TokenAuth) Lookup(token string) (*Secret, error)

+ func (c *TokenAuth) LookupAccessor(accessor string) (*Secret, error)

+ func (c *TokenAuth) LookupSelf() (*Secret, error)

+ func (c *TokenAuth) Renew(token string, increment int) (*Secret, error)

+ func (c *TokenAuth) RenewAccessor(accessor string, increment int) (*Secret, error)

+ func (c *TokenAuth) RenewSelf(increment int) (*Secret, error)

+ func (c *TokenAuth) RenewTokenAsSelf(token string, increment int) (*Secret, error)

+ func (c *TokenAuth) RevokeAccessor(accessor string) error

+ func (c *TokenAuth) RevokeOrphan(token string) error

+ func (c *TokenAuth) RevokeSelf(token string) error

+ func (c *TokenAuth) RevokeTree(token string) error

+ type TokenCreateRequest struct

+ DisplayName string

+ EntityAlias string

+ ExplicitMaxTTL string

+ ID string

+ Lease string

+ Metadata map[string]string

+ NoDefaultPolicy bool

+ NoParent bool

+ NumUses int

+ Period string

+ Policies []string

+ Renewable *bool

+ TTL string

+ Type string

+ type UnsealOpts struct

+ Key string

+ Migrate bool

+ Reset bool

+ type WrappingLookupFunc func(operation, path string) string

Other modules containing this package

github.com/hashicorp/vault

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL