Documentation
¶
Index ¶
- Constants
- Variables
- func ErrToString(e error) string
- func ProtoAuthToLogicalAuth(a *Auth) (*logical.Auth, error)
- func ProtoConnectionToLogicalConnection(c *Connection) *logical.Connection
- func ProtoErrToErr(e *ProtoError) error
- func ProtoLeaseOptionsToLogicalLeaseOptions(l *LeaseOptions) (logical.LeaseOptions, error)
- func ProtoRequestToLogicalRequest(r *Request) (*logical.Request, error)
- func ProtoRequestWrapInfoToLogicalRequestWrapInfo(i *RequestWrapInfo) *logical.RequestWrapInfo
- func ProtoResponseToLogicalResponse(r *Response) (*logical.Response, error)
- func ProtoResponseWrapInfoToLogicalResponseWrapInfo(i *ResponseWrapInfo) (*wrapping.ResponseWrapInfo, error)
- func ProtoSecretToLogicalSecret(s *Secret) (*logical.Secret, error)
- func ProtoStorageEntryToLogicalStorageEntry(e *StorageEntry) *logical.StorageEntry
- func ProtoTokenEntryToLogicalTokenEntry(t *TokenEntry) (*logical.TokenEntry, error)
- func RegisterBackendServer(s *grpc.Server, srv BackendServer)
- func RegisterStorageServer(s *grpc.Server, srv StorageServer)
- func RegisterSystemViewServer(s *grpc.Server, srv SystemViewServer)
- type Auth
- func (*Auth) Descriptor() ([]byte, []int)deprecated
- func (x *Auth) GetAccessor() string
- func (x *Auth) GetAlias() *logical.Alias
- func (x *Auth) GetBoundCIDRs() []string
- func (x *Auth) GetClientToken() string
- func (x *Auth) GetDisplayName() string
- func (x *Auth) GetEntityID() string
- func (x *Auth) GetExplicitMaxTTL() int64
- func (x *Auth) GetGroupAliases() []*logical.Alias
- func (x *Auth) GetIdentityPolicies() []string
- func (x *Auth) GetInternalData() string
- func (x *Auth) GetLeaseOptions() *LeaseOptions
- func (x *Auth) GetMetadata() map[string]string
- func (x *Auth) GetNoDefaultPolicy() bool
- func (x *Auth) GetNumUses() int64
- func (x *Auth) GetPeriod() int64
- func (x *Auth) GetPolicies() []string
- func (x *Auth) GetTokenPolicies() []string
- func (x *Auth) GetTokenType() uint32
- func (*Auth) ProtoMessage()
- func (x *Auth) ProtoReflect() protoreflect.Message
- func (x *Auth) Reset()
- func (x *Auth) String() string
- type BackendClient
- type BackendServer
- type CachingDisabledReply
- func (*CachingDisabledReply) Descriptor() ([]byte, []int)deprecated
- func (x *CachingDisabledReply) GetDisabled() bool
- func (*CachingDisabledReply) ProtoMessage()
- func (x *CachingDisabledReply) ProtoReflect() protoreflect.Message
- func (x *CachingDisabledReply) Reset()
- func (x *CachingDisabledReply) String() string
- type Connection
- type Empty
- type EntityInfoArgs
- type EntityInfoReply
- func (*EntityInfoReply) Descriptor() ([]byte, []int)deprecated
- func (x *EntityInfoReply) GetEntity() *logical.Entity
- func (x *EntityInfoReply) GetErr() string
- func (*EntityInfoReply) ProtoMessage()
- func (x *EntityInfoReply) ProtoReflect() protoreflect.Message
- func (x *EntityInfoReply) Reset()
- func (x *EntityInfoReply) String() string
- type GeneratePasswordFromPolicyReply
- func (*GeneratePasswordFromPolicyReply) Descriptor() ([]byte, []int)deprecated
- func (x *GeneratePasswordFromPolicyReply) GetPassword() string
- func (*GeneratePasswordFromPolicyReply) ProtoMessage()
- func (x *GeneratePasswordFromPolicyReply) ProtoReflect() protoreflect.Message
- func (x *GeneratePasswordFromPolicyReply) Reset()
- func (x *GeneratePasswordFromPolicyReply) String() string
- type GeneratePasswordFromPolicyRequest
- func (*GeneratePasswordFromPolicyRequest) Descriptor() ([]byte, []int)deprecated
- func (x *GeneratePasswordFromPolicyRequest) GetPolicyName() string
- func (*GeneratePasswordFromPolicyRequest) ProtoMessage()
- func (x *GeneratePasswordFromPolicyRequest) ProtoReflect() protoreflect.Message
- func (x *GeneratePasswordFromPolicyRequest) Reset()
- func (x *GeneratePasswordFromPolicyRequest) String() string
- type GroupsForEntityReply
- func (*GroupsForEntityReply) Descriptor() ([]byte, []int)deprecated
- func (x *GroupsForEntityReply) GetErr() string
- func (x *GroupsForEntityReply) GetGroups() []*logical.Group
- func (*GroupsForEntityReply) ProtoMessage()
- func (x *GroupsForEntityReply) ProtoReflect() protoreflect.Message
- func (x *GroupsForEntityReply) Reset()
- func (x *GroupsForEntityReply) String() string
- type HandleExistenceCheckArgs
- func (*HandleExistenceCheckArgs) Descriptor() ([]byte, []int)deprecated
- func (x *HandleExistenceCheckArgs) GetRequest() *Request
- func (x *HandleExistenceCheckArgs) GetStorageID() uint32
- func (*HandleExistenceCheckArgs) ProtoMessage()
- func (x *HandleExistenceCheckArgs) ProtoReflect() protoreflect.Message
- func (x *HandleExistenceCheckArgs) Reset()
- func (x *HandleExistenceCheckArgs) String() string
- type HandleExistenceCheckReply
- func (*HandleExistenceCheckReply) Descriptor() ([]byte, []int)deprecated
- func (x *HandleExistenceCheckReply) GetCheckFound() bool
- func (x *HandleExistenceCheckReply) GetErr() *ProtoError
- func (x *HandleExistenceCheckReply) GetExists() bool
- func (*HandleExistenceCheckReply) ProtoMessage()
- func (x *HandleExistenceCheckReply) ProtoReflect() protoreflect.Message
- func (x *HandleExistenceCheckReply) Reset()
- func (x *HandleExistenceCheckReply) String() string
- type HandleRequestArgs
- func (*HandleRequestArgs) Descriptor() ([]byte, []int)deprecated
- func (x *HandleRequestArgs) GetRequest() *Request
- func (x *HandleRequestArgs) GetStorageID() uint32
- func (*HandleRequestArgs) ProtoMessage()
- func (x *HandleRequestArgs) ProtoReflect() protoreflect.Message
- func (x *HandleRequestArgs) Reset()
- func (x *HandleRequestArgs) String() string
- type HandleRequestReply
- func (*HandleRequestReply) Descriptor() ([]byte, []int)deprecated
- func (x *HandleRequestReply) GetErr() *ProtoError
- func (x *HandleRequestReply) GetResponse() *Response
- func (*HandleRequestReply) ProtoMessage()
- func (x *HandleRequestReply) ProtoReflect() protoreflect.Message
- func (x *HandleRequestReply) Reset()
- func (x *HandleRequestReply) String() string
- type Header
- type InitializeArgs
- type InitializeReply
- type InvalidateKeyArgs
- type LeaseOptions
- func (*LeaseOptions) Descriptor() ([]byte, []int)deprecated
- func (x *LeaseOptions) GetIncrement() int64
- func (x *LeaseOptions) GetIssueTime() *timestamppb.Timestamp
- func (x *LeaseOptions) GetMaxTTL() int64
- func (x *LeaseOptions) GetRenewable() bool
- func (x *LeaseOptions) GetTTL() int64
- func (*LeaseOptions) ProtoMessage()
- func (x *LeaseOptions) ProtoReflect() protoreflect.Message
- func (x *LeaseOptions) Reset()
- func (x *LeaseOptions) String() string
- type LocalMountReply
- type MlockEnabledReply
- type Paths
- func (*Paths) Descriptor() ([]byte, []int)deprecated
- func (x *Paths) GetLocalStorage() []string
- func (x *Paths) GetRoot() []string
- func (x *Paths) GetSealWrapStorage() []string
- func (x *Paths) GetUnauthenticated() []string
- func (*Paths) ProtoMessage()
- func (x *Paths) ProtoReflect() protoreflect.Message
- func (x *Paths) Reset()
- func (x *Paths) String() string
- type PluginEnvReply
- func (*PluginEnvReply) Descriptor() ([]byte, []int)deprecated
- func (x *PluginEnvReply) GetErr() string
- func (x *PluginEnvReply) GetPluginEnvironment() *logical.PluginEnvironment
- func (*PluginEnvReply) ProtoMessage()
- func (x *PluginEnvReply) ProtoReflect() protoreflect.Message
- func (x *PluginEnvReply) Reset()
- func (x *PluginEnvReply) String() string
- type ProtoError
- func (*ProtoError) Descriptor() ([]byte, []int)deprecated
- func (x *ProtoError) GetErrCode() int64
- func (x *ProtoError) GetErrMsg() string
- func (x *ProtoError) GetErrType() uint32
- func (*ProtoError) ProtoMessage()
- func (x *ProtoError) ProtoReflect() protoreflect.Message
- func (x *ProtoError) Reset()
- func (x *ProtoError) String() string
- type ReplicationStateReply
- func (*ReplicationStateReply) Descriptor() ([]byte, []int)deprecated
- func (x *ReplicationStateReply) GetState() int32
- func (*ReplicationStateReply) ProtoMessage()
- func (x *ReplicationStateReply) ProtoReflect() protoreflect.Message
- func (x *ReplicationStateReply) Reset()
- func (x *ReplicationStateReply) String() string
- type Request
- func (*Request) Descriptor() ([]byte, []int)deprecated
- func (x *Request) GetAuth() *Auth
- func (x *Request) GetClientToken() string
- func (x *Request) GetClientTokenAccessor() string
- func (x *Request) GetClientTokenRemainingUses() int64
- func (x *Request) GetConnection() *Connection
- func (x *Request) GetData() string
- func (x *Request) GetDisplayName() string
- func (x *Request) GetEntityID() string
- func (x *Request) GetHeaders() map[string]*Header
- func (x *Request) GetID() string
- func (x *Request) GetMountAccessor() string
- func (x *Request) GetMountPoint() string
- func (x *Request) GetMountType() string
- func (x *Request) GetOperation() string
- func (x *Request) GetPath() string
- func (x *Request) GetPolicyOverride() bool
- func (x *Request) GetReplicationCluster() string
- func (x *Request) GetSecret() *Secret
- func (x *Request) GetUnauthenticated() bool
- func (x *Request) GetWrapInfo() *RequestWrapInfo
- func (*Request) ProtoMessage()
- func (x *Request) ProtoReflect() protoreflect.Message
- func (x *Request) Reset()
- func (x *Request) String() string
- type RequestWrapInfo
- func (*RequestWrapInfo) Descriptor() ([]byte, []int)deprecated
- func (x *RequestWrapInfo) GetFormat() string
- func (x *RequestWrapInfo) GetSealWrap() bool
- func (x *RequestWrapInfo) GetTTL() int64
- func (*RequestWrapInfo) ProtoMessage()
- func (x *RequestWrapInfo) ProtoReflect() protoreflect.Message
- func (x *RequestWrapInfo) Reset()
- func (x *RequestWrapInfo) String() string
- type Response
- func (*Response) Descriptor() ([]byte, []int)deprecated
- func (x *Response) GetAuth() *Auth
- func (x *Response) GetData() string
- func (x *Response) GetHeaders() map[string]*Header
- func (x *Response) GetRedirect() string
- func (x *Response) GetSecret() *Secret
- func (x *Response) GetWarnings() []string
- func (x *Response) GetWrapInfo() *ResponseWrapInfo
- func (*Response) ProtoMessage()
- func (x *Response) ProtoReflect() protoreflect.Message
- func (x *Response) Reset()
- func (x *Response) String() string
- type ResponseWrapDataArgs
- func (*ResponseWrapDataArgs) Descriptor() ([]byte, []int)deprecated
- func (x *ResponseWrapDataArgs) GetData() string
- func (x *ResponseWrapDataArgs) GetJWT() bool
- func (x *ResponseWrapDataArgs) GetTTL() int64
- func (*ResponseWrapDataArgs) ProtoMessage()
- func (x *ResponseWrapDataArgs) ProtoReflect() protoreflect.Message
- func (x *ResponseWrapDataArgs) Reset()
- func (x *ResponseWrapDataArgs) String() string
- type ResponseWrapDataReply
- func (*ResponseWrapDataReply) Descriptor() ([]byte, []int)deprecated
- func (x *ResponseWrapDataReply) GetErr() string
- func (x *ResponseWrapDataReply) GetWrapInfo() *ResponseWrapInfo
- func (*ResponseWrapDataReply) ProtoMessage()
- func (x *ResponseWrapDataReply) ProtoReflect() protoreflect.Message
- func (x *ResponseWrapDataReply) Reset()
- func (x *ResponseWrapDataReply) String() string
- type ResponseWrapInfo
- func (*ResponseWrapInfo) Descriptor() ([]byte, []int)deprecated
- func (x *ResponseWrapInfo) GetAccessor() string
- func (x *ResponseWrapInfo) GetCreationPath() string
- func (x *ResponseWrapInfo) GetCreationTime() *timestamppb.Timestamp
- func (x *ResponseWrapInfo) GetFormat() string
- func (x *ResponseWrapInfo) GetSealWrap() bool
- func (x *ResponseWrapInfo) GetTTL() int64
- func (x *ResponseWrapInfo) GetToken() string
- func (x *ResponseWrapInfo) GetWrappedAccessor() string
- func (x *ResponseWrapInfo) GetWrappedEntityID() string
- func (*ResponseWrapInfo) ProtoMessage()
- func (x *ResponseWrapInfo) ProtoReflect() protoreflect.Message
- func (x *ResponseWrapInfo) Reset()
- func (x *ResponseWrapInfo) String() string
- type Secret
- func (*Secret) Descriptor() ([]byte, []int)deprecated
- func (x *Secret) GetInternalData() string
- func (x *Secret) GetLeaseID() string
- func (x *Secret) GetLeaseOptions() *LeaseOptions
- func (*Secret) ProtoMessage()
- func (x *Secret) ProtoReflect() protoreflect.Message
- func (x *Secret) Reset()
- func (x *Secret) String() string
- type SetupArgs
- func (*SetupArgs) Descriptor() ([]byte, []int)deprecated
- func (x *SetupArgs) GetBackendUUID() string
- func (x *SetupArgs) GetBrokerID() uint32
- func (x *SetupArgs) GetConfig() map[string]string
- func (*SetupArgs) ProtoMessage()
- func (x *SetupArgs) ProtoReflect() protoreflect.Message
- func (x *SetupArgs) Reset()
- func (x *SetupArgs) String() string
- type SetupReply
- type SpecialPathsReply
- type StorageClient
- type StorageDeleteArgs
- type StorageDeleteReply
- type StorageEntry
- func (*StorageEntry) Descriptor() ([]byte, []int)deprecated
- func (x *StorageEntry) GetKey() string
- func (x *StorageEntry) GetSealWrap() bool
- func (x *StorageEntry) GetValue() []byte
- func (*StorageEntry) ProtoMessage()
- func (x *StorageEntry) ProtoReflect() protoreflect.Message
- func (x *StorageEntry) Reset()
- func (x *StorageEntry) String() string
- type StorageGetArgs
- type StorageGetReply
- func (*StorageGetReply) Descriptor() ([]byte, []int)deprecated
- func (x *StorageGetReply) GetEntry() *StorageEntry
- func (x *StorageGetReply) GetErr() string
- func (*StorageGetReply) ProtoMessage()
- func (x *StorageGetReply) ProtoReflect() protoreflect.Message
- func (x *StorageGetReply) Reset()
- func (x *StorageGetReply) String() string
- type StorageListArgs
- type StorageListReply
- func (*StorageListReply) Descriptor() ([]byte, []int)deprecated
- func (x *StorageListReply) GetErr() string
- func (x *StorageListReply) GetKeys() []string
- func (*StorageListReply) ProtoMessage()
- func (x *StorageListReply) ProtoReflect() protoreflect.Message
- func (x *StorageListReply) Reset()
- func (x *StorageListReply) String() string
- type StoragePutArgs
- type StoragePutReply
- type StorageServer
- type SystemViewClient
- type SystemViewServer
- type TTLReply
- type TaintedReply
- type TokenEntry
- func (*TokenEntry) Descriptor() ([]byte, []int)deprecated
- func (x *TokenEntry) GetAccessor() string
- func (x *TokenEntry) GetBoundCIDRs() []string
- func (x *TokenEntry) GetCreationTime() int64
- func (x *TokenEntry) GetCubbyholeID() string
- func (x *TokenEntry) GetDisplayName() string
- func (x *TokenEntry) GetEntityID() string
- func (x *TokenEntry) GetExplicitMaxTTL() int64
- func (x *TokenEntry) GetID() string
- func (x *TokenEntry) GetMeta() map[string]string
- func (x *TokenEntry) GetNamespaceID() string
- func (x *TokenEntry) GetNumUses() int64
- func (x *TokenEntry) GetParent() string
- func (x *TokenEntry) GetPath() string
- func (x *TokenEntry) GetPeriod() int64
- func (x *TokenEntry) GetPolicies() []string
- func (x *TokenEntry) GetRole() string
- func (x *TokenEntry) GetTTL() int64
- func (x *TokenEntry) GetType() uint32
- func (*TokenEntry) ProtoMessage()
- func (x *TokenEntry) ProtoReflect() protoreflect.Message
- func (x *TokenEntry) Reset()
- func (x *TokenEntry) String() string
- type TypeReply
- type UnimplementedBackendServer
- func (*UnimplementedBackendServer) Cleanup(context.Context, *Empty) (*Empty, error)
- func (*UnimplementedBackendServer) HandleExistenceCheck(context.Context, *HandleExistenceCheckArgs) (*HandleExistenceCheckReply, error)
- func (*UnimplementedBackendServer) HandleRequest(context.Context, *HandleRequestArgs) (*HandleRequestReply, error)
- func (*UnimplementedBackendServer) Initialize(context.Context, *InitializeArgs) (*InitializeReply, error)
- func (*UnimplementedBackendServer) InvalidateKey(context.Context, *InvalidateKeyArgs) (*Empty, error)
- func (*UnimplementedBackendServer) Setup(context.Context, *SetupArgs) (*SetupReply, error)
- func (*UnimplementedBackendServer) SpecialPaths(context.Context, *Empty) (*SpecialPathsReply, error)
- func (*UnimplementedBackendServer) Type(context.Context, *Empty) (*TypeReply, error)
- type UnimplementedStorageServer
- func (*UnimplementedStorageServer) Delete(context.Context, *StorageDeleteArgs) (*StorageDeleteReply, error)
- func (*UnimplementedStorageServer) Get(context.Context, *StorageGetArgs) (*StorageGetReply, error)
- func (*UnimplementedStorageServer) List(context.Context, *StorageListArgs) (*StorageListReply, error)
- func (*UnimplementedStorageServer) Put(context.Context, *StoragePutArgs) (*StoragePutReply, error)
- type UnimplementedSystemViewServer
- func (*UnimplementedSystemViewServer) CachingDisabled(context.Context, *Empty) (*CachingDisabledReply, error)
- func (*UnimplementedSystemViewServer) DefaultLeaseTTL(context.Context, *Empty) (*TTLReply, error)
- func (*UnimplementedSystemViewServer) EntityInfo(context.Context, *EntityInfoArgs) (*EntityInfoReply, error)
- func (*UnimplementedSystemViewServer) GeneratePasswordFromPolicy(context.Context, *GeneratePasswordFromPolicyRequest) (*GeneratePasswordFromPolicyReply, error)
- func (*UnimplementedSystemViewServer) GroupsForEntity(context.Context, *EntityInfoArgs) (*GroupsForEntityReply, error)
- func (*UnimplementedSystemViewServer) LocalMount(context.Context, *Empty) (*LocalMountReply, error)
- func (*UnimplementedSystemViewServer) MaxLeaseTTL(context.Context, *Empty) (*TTLReply, error)
- func (*UnimplementedSystemViewServer) MlockEnabled(context.Context, *Empty) (*MlockEnabledReply, error)
- func (*UnimplementedSystemViewServer) PluginEnv(context.Context, *Empty) (*PluginEnvReply, error)
- func (*UnimplementedSystemViewServer) ReplicationState(context.Context, *Empty) (*ReplicationStateReply, error)
- func (*UnimplementedSystemViewServer) ResponseWrapData(context.Context, *ResponseWrapDataArgs) (*ResponseWrapDataReply, error)
- func (*UnimplementedSystemViewServer) Tainted(context.Context, *Empty) (*TaintedReply, error)
Constants ¶
const ( ErrTypeUnknown uint32 = iota ErrTypeUserError ErrTypeInternalError ErrTypeCodedError ErrTypeStatusBadRequest ErrTypeUnsupportedOperation ErrTypeUnsupportedPath ErrTypeInvalidRequest ErrTypePermissionDenied ErrTypeMultiAuthzPending ErrTypeUnrecoverable )
Variables ¶
var File_sdk_plugin_pb_backend_proto protoreflect.FileDescriptor
Functions ¶
func ErrToString ¶
func ProtoConnectionToLogicalConnection ¶
func ProtoConnectionToLogicalConnection(c *Connection) *logical.Connection
func ProtoErrToErr ¶
func ProtoErrToErr(e *ProtoError) error
func ProtoLeaseOptionsToLogicalLeaseOptions ¶
func ProtoLeaseOptionsToLogicalLeaseOptions(l *LeaseOptions) (logical.LeaseOptions, error)
func ProtoRequestWrapInfoToLogicalRequestWrapInfo ¶
func ProtoRequestWrapInfoToLogicalRequestWrapInfo(i *RequestWrapInfo) *logical.RequestWrapInfo
func ProtoResponseWrapInfoToLogicalResponseWrapInfo ¶
func ProtoResponseWrapInfoToLogicalResponseWrapInfo(i *ResponseWrapInfo) (*wrapping.ResponseWrapInfo, error)
func ProtoStorageEntryToLogicalStorageEntry ¶
func ProtoStorageEntryToLogicalStorageEntry(e *StorageEntry) *logical.StorageEntry
func ProtoTokenEntryToLogicalTokenEntry ¶
func ProtoTokenEntryToLogicalTokenEntry(t *TokenEntry) (*logical.TokenEntry, error)
func RegisterBackendServer ¶
func RegisterBackendServer(s *grpc.Server, srv BackendServer)
func RegisterStorageServer ¶
func RegisterStorageServer(s *grpc.Server, srv StorageServer)
func RegisterSystemViewServer ¶
func RegisterSystemViewServer(s *grpc.Server, srv SystemViewServer)
Types ¶
type Auth ¶
type Auth struct {
LeaseOptions *LeaseOptions `sentinel:"" protobuf:"bytes,1,opt,name=lease_options,json=leaseOptions,proto3" json:"lease_options,omitempty"`
// InternalData is a JSON object that is stored with the auth struct.
// This will be sent back during a Renew/Revoke for storing internal data
// used for those operations.
InternalData string `sentinel:"" protobuf:"bytes,2,opt,name=internal_data,json=internalData,proto3" json:"internal_data,omitempty"`
// DisplayName is a non-security sensitive identifier that is
// applicable to this Auth. It is used for logging and prefixing
// of dynamic secrets. For example, DisplayName may be "armon" for
// the github credential backend. If the client token is used to
// generate a SQL credential, the user may be "github-armon-uuid".
// This is to help identify the source without using audit tables.
DisplayName string `sentinel:"" protobuf:"bytes,3,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
// Policies is the list of policies that the authenticated user
// is associated with.
Policies []string `sentinel:"" protobuf:"bytes,4,rep,name=policies,proto3" json:"policies,omitempty"`
// Metadata is used to attach arbitrary string-type metadata to
// an authenticated user. This metadata will be outputted into the
// audit log.
Metadata map[string]string `` /* 169-byte string literal not displayed */
// ClientToken is the token that is generated for the authentication.
// This will be filled in by Vault core when an auth structure is
// returned. Setting this manually will have no effect.
ClientToken string `sentinel:"" protobuf:"bytes,6,opt,name=client_token,json=clientToken,proto3" json:"client_token,omitempty"`
// Accessor is the identifier for the ClientToken. This can be used
// to perform management functionalities (especially revocation) when
// ClientToken in the audit logs are obfuscated. Accessor can be used
// to revoke a ClientToken and to lookup the capabilities of the ClientToken,
// both without actually knowing the ClientToken.
Accessor string `sentinel:"" protobuf:"bytes,7,opt,name=accessor,proto3" json:"accessor,omitempty"`
// Period indicates that the token generated using this Auth object
// should never expire. The token should be renewed within the duration
// specified by this period.
Period int64 `sentinel:"" protobuf:"varint,8,opt,name=period,proto3" json:"period,omitempty"`
// Number of allowed uses of the issued token
NumUses int64 `sentinel:"" protobuf:"varint,9,opt,name=num_uses,json=numUses,proto3" json:"num_uses,omitempty"`
// EntityID is the identifier of the entity in identity store to which the
// identity of the authenticating client belongs to.
EntityID string `sentinel:"" protobuf:"bytes,10,opt,name=entity_id,json=entityId,proto3" json:"entity_id,omitempty"`
// Alias is the information about the authenticated client returned by
// the auth backend
Alias *logical.Alias `sentinel:"" protobuf:"bytes,11,opt,name=alias,proto3" json:"alias,omitempty"`
// GroupAliases are the informational mappings of external groups which an
// authenticated user belongs to. This is used to check if there are
// mappings groups for the group aliases in identity store. For all the
// matching groups, the entity ID of the user will be added.
GroupAliases []*logical.Alias `sentinel:"" protobuf:"bytes,12,rep,name=group_aliases,json=groupAliases,proto3" json:"group_aliases,omitempty"`
// If set, restricts usage of the certificates to client IPs falling within
// the range of the specified CIDR(s).
BoundCIDRs []string `sentinel:"" protobuf:"bytes,13,rep,name=bound_cidrs,json=boundCidrs,proto3" json:"bound_cidrs,omitempty"`
// TokenPolicies and IdentityPolicies break down the list in Policies to
// help determine where a policy was sourced
TokenPolicies []string `sentinel:"" protobuf:"bytes,14,rep,name=token_policies,json=tokenPolicies,proto3" json:"token_policies,omitempty"`
IdentityPolicies []string `sentinel:"" protobuf:"bytes,15,rep,name=identity_policies,json=identityPolicies,proto3" json:"identity_policies,omitempty"`
// Explicit maximum lifetime for the token. Unlike normal TTLs, the maximum
// TTL is a hard limit and cannot be exceeded, also counts for periodic tokens.
ExplicitMaxTTL int64 `sentinel:"" protobuf:"varint,16,opt,name=explicit_max_ttl,json=explicitMaxTtl,proto3" json:"explicit_max_ttl,omitempty"`
// TokenType is the type of token being requested
TokenType uint32 `sentinel:"" protobuf:"varint,17,opt,name=token_type,json=tokenType,proto3" json:"token_type,omitempty"`
// Whether the default policy should be added automatically by core
NoDefaultPolicy bool `sentinel:"" protobuf:"varint,18,opt,name=no_default_policy,json=noDefaultPolicy,proto3" json:"no_default_policy,omitempty"`
// contains filtered or unexported fields
}
func (*Auth) Descriptor
deprecated
func (*Auth) GetAccessor ¶
func (*Auth) GetBoundCIDRs ¶
func (*Auth) GetClientToken ¶
func (*Auth) GetDisplayName ¶
func (*Auth) GetEntityID ¶
func (*Auth) GetExplicitMaxTTL ¶
func (*Auth) GetGroupAliases ¶
func (*Auth) GetIdentityPolicies ¶
func (*Auth) GetInternalData ¶
func (*Auth) GetLeaseOptions ¶
func (x *Auth) GetLeaseOptions() *LeaseOptions
func (*Auth) GetMetadata ¶
func (*Auth) GetNoDefaultPolicy ¶ added in v0.1.12
func (*Auth) GetNumUses ¶
func (*Auth) GetPolicies ¶
func (*Auth) GetTokenPolicies ¶
func (*Auth) GetTokenType ¶
func (*Auth) ProtoMessage ¶
func (*Auth) ProtoMessage()
func (*Auth) ProtoReflect ¶ added in v0.2.0
func (x *Auth) ProtoReflect() protoreflect.Message
type BackendClient ¶
type BackendClient interface {
// HandleRequest is used to handle a request and generate a response.
// The plugins must check the operation type and handle appropriately.
HandleRequest(ctx context.Context, in *HandleRequestArgs, opts ...grpc.CallOption) (*HandleRequestReply, error)
// SpecialPaths is a list of paths that are special in some way.
// See PathType for the types of special paths. The key is the type
// of the special path, and the value is a list of paths for this type.
// This is not a regular expression but is an exact match. If the path
// ends in '*' then it is a prefix-based match. The '*' can only appear
// at the end.
SpecialPaths(ctx context.Context, in *Empty, opts ...grpc.CallOption) (*SpecialPathsReply, error)
// HandleExistenceCheck is used to handle a request and generate a response
// indicating whether the given path exists or not; this is used to
// understand whether the request must have a Create or Update capability
// ACL applied. The first bool indicates whether an existence check
// function was found for the backend; the second indicates whether, if an
// existence check function was found, the item exists or not.
HandleExistenceCheck(ctx context.Context, in *HandleExistenceCheckArgs, opts ...grpc.CallOption) (*HandleExistenceCheckReply, error)
// Cleanup is invoked during an unmount of a backend to allow it to
// handle any cleanup like connection closing or releasing of file handles.
// Cleanup is called right before Vault closes the plugin process.
Cleanup(ctx context.Context, in *Empty, opts ...grpc.CallOption) (*Empty, error)
// InvalidateKey may be invoked when an object is modified that belongs
// to the backend. The backend can use this to clear any caches or reset
// internal state as needed.
InvalidateKey(ctx context.Context, in *InvalidateKeyArgs, opts ...grpc.CallOption) (*Empty, error)
// Setup is used to set up the backend based on the provided backend
// configuration. The plugin's setup implementation should use the provided
// broker_id to create a connection back to Vault for use with the Storage
// and SystemView clients.
Setup(ctx context.Context, in *SetupArgs, opts ...grpc.CallOption) (*SetupReply, error)
// Initialize is invoked just after mounting a backend to allow it to
// handle any initialization tasks that need to be performed.
Initialize(ctx context.Context, in *InitializeArgs, opts ...grpc.CallOption) (*InitializeReply, error)
// Type returns the BackendType for the particular backend
Type(ctx context.Context, in *Empty, opts ...grpc.CallOption) (*TypeReply, error)
}
BackendClient is the client API for Backend service.
For semantics around ctx use and closing/ending streaming RPCs, please refer to https://godoc.org/google.golang.org/grpc#ClientConn.NewStream.
func NewBackendClient ¶
func NewBackendClient(cc grpc.ClientConnInterface) BackendClient
type BackendServer ¶
type BackendServer interface {
// HandleRequest is used to handle a request and generate a response.
// The plugins must check the operation type and handle appropriately.
HandleRequest(context.Context, *HandleRequestArgs) (*HandleRequestReply, error)
// SpecialPaths is a list of paths that are special in some way.
// See PathType for the types of special paths. The key is the type
// of the special path, and the value is a list of paths for this type.
// This is not a regular expression but is an exact match. If the path
// ends in '*' then it is a prefix-based match. The '*' can only appear
// at the end.
SpecialPaths(context.Context, *Empty) (*SpecialPathsReply, error)
// HandleExistenceCheck is used to handle a request and generate a response
// indicating whether the given path exists or not; this is used to
// understand whether the request must have a Create or Update capability
// ACL applied. The first bool indicates whether an existence check
// function was found for the backend; the second indicates whether, if an
// existence check function was found, the item exists or not.
HandleExistenceCheck(context.Context, *HandleExistenceCheckArgs) (*HandleExistenceCheckReply, error)
// Cleanup is invoked during an unmount of a backend to allow it to
// handle any cleanup like connection closing or releasing of file handles.
// Cleanup is called right before Vault closes the plugin process.
Cleanup(context.Context, *Empty) (*Empty, error)
// InvalidateKey may be invoked when an object is modified that belongs
// to the backend. The backend can use this to clear any caches or reset
// internal state as needed.
InvalidateKey(context.Context, *InvalidateKeyArgs) (*Empty, error)
// Setup is used to set up the backend based on the provided backend
// configuration. The plugin's setup implementation should use the provided
// broker_id to create a connection back to Vault for use with the Storage
// and SystemView clients.
Setup(context.Context, *SetupArgs) (*SetupReply, error)
// Initialize is invoked just after mounting a backend to allow it to
// handle any initialization tasks that need to be performed.
Initialize(context.Context, *InitializeArgs) (*InitializeReply, error)
// Type returns the BackendType for the particular backend
Type(context.Context, *Empty) (*TypeReply, error)
}
BackendServer is the server API for Backend service.
type CachingDisabledReply ¶
type CachingDisabledReply struct {
Disabled bool `sentinel:"" protobuf:"varint,1,opt,name=disabled,proto3" json:"disabled,omitempty"`
// contains filtered or unexported fields
}
func (*CachingDisabledReply) Descriptor
deprecated
func (*CachingDisabledReply) Descriptor() ([]byte, []int)
Deprecated: Use CachingDisabledReply.ProtoReflect.Descriptor instead.
func (*CachingDisabledReply) GetDisabled ¶
func (x *CachingDisabledReply) GetDisabled() bool
func (*CachingDisabledReply) ProtoMessage ¶
func (*CachingDisabledReply) ProtoMessage()
func (*CachingDisabledReply) ProtoReflect ¶ added in v0.2.0
func (x *CachingDisabledReply) ProtoReflect() protoreflect.Message
func (*CachingDisabledReply) Reset ¶
func (x *CachingDisabledReply) Reset()
func (*CachingDisabledReply) String ¶
func (x *CachingDisabledReply) String() string
type Connection ¶
type Connection struct {
// RemoteAddr is the network address that sent the request.
RemoteAddr string `sentinel:"" protobuf:"bytes,1,opt,name=remote_addr,json=remoteAddr,proto3" json:"remote_addr,omitempty"`
// contains filtered or unexported fields
}
func LogicalConnectionToProtoConnection ¶
func LogicalConnectionToProtoConnection(c *logical.Connection) *Connection
func (*Connection) Descriptor
deprecated
func (*Connection) Descriptor() ([]byte, []int)
Deprecated: Use Connection.ProtoReflect.Descriptor instead.
func (*Connection) GetRemoteAddr ¶
func (x *Connection) GetRemoteAddr() string
func (*Connection) ProtoMessage ¶
func (*Connection) ProtoMessage()
func (*Connection) ProtoReflect ¶ added in v0.2.0
func (x *Connection) ProtoReflect() protoreflect.Message
func (*Connection) Reset ¶
func (x *Connection) Reset()
func (*Connection) String ¶
func (x *Connection) String() string
type Empty ¶
type Empty struct {
// contains filtered or unexported fields
}
func (*Empty) Descriptor
deprecated
func (*Empty) ProtoMessage ¶
func (*Empty) ProtoMessage()
func (*Empty) ProtoReflect ¶ added in v0.2.0
func (x *Empty) ProtoReflect() protoreflect.Message
type EntityInfoArgs ¶
type EntityInfoArgs struct {
EntityID string `sentinel:"" protobuf:"bytes,1,opt,name=entity_id,json=entityId,proto3" json:"entity_id,omitempty"`
// contains filtered or unexported fields
}
func (*EntityInfoArgs) Descriptor
deprecated
func (*EntityInfoArgs) Descriptor() ([]byte, []int)
Deprecated: Use EntityInfoArgs.ProtoReflect.Descriptor instead.
func (*EntityInfoArgs) GetEntityID ¶
func (x *EntityInfoArgs) GetEntityID() string
func (*EntityInfoArgs) ProtoMessage ¶
func (*EntityInfoArgs) ProtoMessage()
func (*EntityInfoArgs) ProtoReflect ¶ added in v0.2.0
func (x *EntityInfoArgs) ProtoReflect() protoreflect.Message
func (*EntityInfoArgs) Reset ¶
func (x *EntityInfoArgs) Reset()
func (*EntityInfoArgs) String ¶
func (x *EntityInfoArgs) String() string
type EntityInfoReply ¶
type EntityInfoReply struct {
Entity *logical.Entity `sentinel:"" protobuf:"bytes,1,opt,name=entity,proto3" json:"entity,omitempty"`
Err string `sentinel:"" protobuf:"bytes,2,opt,name=err,proto3" json:"err,omitempty"`
// contains filtered or unexported fields
}
func (*EntityInfoReply) Descriptor
deprecated
func (*EntityInfoReply) Descriptor() ([]byte, []int)
Deprecated: Use EntityInfoReply.ProtoReflect.Descriptor instead.
func (*EntityInfoReply) GetEntity ¶
func (x *EntityInfoReply) GetEntity() *logical.Entity
func (*EntityInfoReply) GetErr ¶
func (x *EntityInfoReply) GetErr() string
func (*EntityInfoReply) ProtoMessage ¶
func (*EntityInfoReply) ProtoMessage()
func (*EntityInfoReply) ProtoReflect ¶ added in v0.2.0
func (x *EntityInfoReply) ProtoReflect() protoreflect.Message
func (*EntityInfoReply) Reset ¶
func (x *EntityInfoReply) Reset()
func (*EntityInfoReply) String ¶
func (x *EntityInfoReply) String() string
type GeneratePasswordFromPolicyReply ¶ added in v0.2.0
type GeneratePasswordFromPolicyReply struct {
Password string `sentinel:"" protobuf:"bytes,1,opt,name=password,proto3" json:"password,omitempty"`
// contains filtered or unexported fields
}
func (*GeneratePasswordFromPolicyReply) Descriptor
deprecated
added in
v0.2.0
func (*GeneratePasswordFromPolicyReply) Descriptor() ([]byte, []int)
Deprecated: Use GeneratePasswordFromPolicyReply.ProtoReflect.Descriptor instead.
func (*GeneratePasswordFromPolicyReply) GetPassword ¶ added in v0.2.0
func (x *GeneratePasswordFromPolicyReply) GetPassword() string
func (*GeneratePasswordFromPolicyReply) ProtoMessage ¶ added in v0.2.0
func (*GeneratePasswordFromPolicyReply) ProtoMessage()
func (*GeneratePasswordFromPolicyReply) ProtoReflect ¶ added in v0.2.0
func (x *GeneratePasswordFromPolicyReply) ProtoReflect() protoreflect.Message
func (*GeneratePasswordFromPolicyReply) Reset ¶ added in v0.2.0
func (x *GeneratePasswordFromPolicyReply) Reset()
func (*GeneratePasswordFromPolicyReply) String ¶ added in v0.2.0
func (x *GeneratePasswordFromPolicyReply) String() string
type GeneratePasswordFromPolicyRequest ¶ added in v0.2.0
type GeneratePasswordFromPolicyRequest struct {
PolicyName string `sentinel:"" protobuf:"bytes,1,opt,name=policy_name,json=policyName,proto3" json:"policy_name,omitempty"`
// contains filtered or unexported fields
}
func (*GeneratePasswordFromPolicyRequest) Descriptor
deprecated
added in
v0.2.0
func (*GeneratePasswordFromPolicyRequest) Descriptor() ([]byte, []int)
Deprecated: Use GeneratePasswordFromPolicyRequest.ProtoReflect.Descriptor instead.
func (*GeneratePasswordFromPolicyRequest) GetPolicyName ¶ added in v0.2.0
func (x *GeneratePasswordFromPolicyRequest) GetPolicyName() string
func (*GeneratePasswordFromPolicyRequest) ProtoMessage ¶ added in v0.2.0
func (*GeneratePasswordFromPolicyRequest) ProtoMessage()
func (*GeneratePasswordFromPolicyRequest) ProtoReflect ¶ added in v0.2.0
func (x *GeneratePasswordFromPolicyRequest) ProtoReflect() protoreflect.Message
func (*GeneratePasswordFromPolicyRequest) Reset ¶ added in v0.2.0
func (x *GeneratePasswordFromPolicyRequest) Reset()
func (*GeneratePasswordFromPolicyRequest) String ¶ added in v0.2.0
func (x *GeneratePasswordFromPolicyRequest) String() string
type GroupsForEntityReply ¶ added in v0.2.0
type GroupsForEntityReply struct {
Groups []*logical.Group `sentinel:"" protobuf:"bytes,1,rep,name=groups,proto3" json:"groups,omitempty"`
Err string `sentinel:"" protobuf:"bytes,2,opt,name=err,proto3" json:"err,omitempty"`
// contains filtered or unexported fields
}
func (*GroupsForEntityReply) Descriptor
deprecated
added in
v0.2.0
func (*GroupsForEntityReply) Descriptor() ([]byte, []int)
Deprecated: Use GroupsForEntityReply.ProtoReflect.Descriptor instead.
func (*GroupsForEntityReply) GetErr ¶ added in v0.2.0
func (x *GroupsForEntityReply) GetErr() string
func (*GroupsForEntityReply) GetGroups ¶ added in v0.2.0
func (x *GroupsForEntityReply) GetGroups() []*logical.Group
func (*GroupsForEntityReply) ProtoMessage ¶ added in v0.2.0
func (*GroupsForEntityReply) ProtoMessage()
func (*GroupsForEntityReply) ProtoReflect ¶ added in v0.2.0
func (x *GroupsForEntityReply) ProtoReflect() protoreflect.Message
func (*GroupsForEntityReply) Reset ¶ added in v0.2.0
func (x *GroupsForEntityReply) Reset()
func (*GroupsForEntityReply) String ¶ added in v0.2.0
func (x *GroupsForEntityReply) String() string
type HandleExistenceCheckArgs ¶
type HandleExistenceCheckArgs struct {
StorageID uint32 `sentinel:"" protobuf:"varint,1,opt,name=storage_id,json=storageId,proto3" json:"storage_id,omitempty"`
Request *Request `sentinel:"" protobuf:"bytes,2,opt,name=request,proto3" json:"request,omitempty"`
// contains filtered or unexported fields
}
HandleExistenceCheckArgs is the args for HandleExistenceCheck method.
func (*HandleExistenceCheckArgs) Descriptor
deprecated
func (*HandleExistenceCheckArgs) Descriptor() ([]byte, []int)
Deprecated: Use HandleExistenceCheckArgs.ProtoReflect.Descriptor instead.
func (*HandleExistenceCheckArgs) GetRequest ¶
func (x *HandleExistenceCheckArgs) GetRequest() *Request
func (*HandleExistenceCheckArgs) GetStorageID ¶
func (x *HandleExistenceCheckArgs) GetStorageID() uint32
func (*HandleExistenceCheckArgs) ProtoMessage ¶
func (*HandleExistenceCheckArgs) ProtoMessage()
func (*HandleExistenceCheckArgs) ProtoReflect ¶ added in v0.2.0
func (x *HandleExistenceCheckArgs) ProtoReflect() protoreflect.Message
func (*HandleExistenceCheckArgs) Reset ¶
func (x *HandleExistenceCheckArgs) Reset()
func (*HandleExistenceCheckArgs) String ¶
func (x *HandleExistenceCheckArgs) String() string
type HandleExistenceCheckReply ¶
type HandleExistenceCheckReply struct {
CheckFound bool `sentinel:"" protobuf:"varint,1,opt,name=check_found,json=checkFound,proto3" json:"check_found,omitempty"`
Exists bool `sentinel:"" protobuf:"varint,2,opt,name=exists,proto3" json:"exists,omitempty"`
Err *ProtoError `sentinel:"" protobuf:"bytes,3,opt,name=err,proto3" json:"err,omitempty"`
// contains filtered or unexported fields
}
HandleExistenceCheckReply is the reply for HandleExistenceCheck method.
func (*HandleExistenceCheckReply) Descriptor
deprecated
func (*HandleExistenceCheckReply) Descriptor() ([]byte, []int)
Deprecated: Use HandleExistenceCheckReply.ProtoReflect.Descriptor instead.
func (*HandleExistenceCheckReply) GetCheckFound ¶
func (x *HandleExistenceCheckReply) GetCheckFound() bool
func (*HandleExistenceCheckReply) GetErr ¶
func (x *HandleExistenceCheckReply) GetErr() *ProtoError
func (*HandleExistenceCheckReply) GetExists ¶
func (x *HandleExistenceCheckReply) GetExists() bool
func (*HandleExistenceCheckReply) ProtoMessage ¶
func (*HandleExistenceCheckReply) ProtoMessage()
func (*HandleExistenceCheckReply) ProtoReflect ¶ added in v0.2.0
func (x *HandleExistenceCheckReply) ProtoReflect() protoreflect.Message
func (*HandleExistenceCheckReply) Reset ¶
func (x *HandleExistenceCheckReply) Reset()
func (*HandleExistenceCheckReply) String ¶
func (x *HandleExistenceCheckReply) String() string
type HandleRequestArgs ¶
type HandleRequestArgs struct {
StorageID uint32 `sentinel:"" protobuf:"varint,1,opt,name=storage_id,json=storageId,proto3" json:"storage_id,omitempty"`
Request *Request `sentinel:"" protobuf:"bytes,2,opt,name=request,proto3" json:"request,omitempty"`
// contains filtered or unexported fields
}
HandleRequestArgs is the args for HandleRequest method.
func (*HandleRequestArgs) Descriptor
deprecated
func (*HandleRequestArgs) Descriptor() ([]byte, []int)
Deprecated: Use HandleRequestArgs.ProtoReflect.Descriptor instead.
func (*HandleRequestArgs) GetRequest ¶
func (x *HandleRequestArgs) GetRequest() *Request
func (*HandleRequestArgs) GetStorageID ¶
func (x *HandleRequestArgs) GetStorageID() uint32
func (*HandleRequestArgs) ProtoMessage ¶
func (*HandleRequestArgs) ProtoMessage()
func (*HandleRequestArgs) ProtoReflect ¶ added in v0.2.0
func (x *HandleRequestArgs) ProtoReflect() protoreflect.Message
func (*HandleRequestArgs) Reset ¶
func (x *HandleRequestArgs) Reset()
func (*HandleRequestArgs) String ¶
func (x *HandleRequestArgs) String() string
type HandleRequestReply ¶
type HandleRequestReply struct {
Response *Response `sentinel:"" protobuf:"bytes,1,opt,name=response,proto3" json:"response,omitempty"`
Err *ProtoError `sentinel:"" protobuf:"bytes,2,opt,name=err,proto3" json:"err,omitempty"`
// contains filtered or unexported fields
}
HandleRequestReply is the reply for HandleRequest method.
func (*HandleRequestReply) Descriptor
deprecated
func (*HandleRequestReply) Descriptor() ([]byte, []int)
Deprecated: Use HandleRequestReply.ProtoReflect.Descriptor instead.
func (*HandleRequestReply) GetErr ¶
func (x *HandleRequestReply) GetErr() *ProtoError
func (*HandleRequestReply) GetResponse ¶
func (x *HandleRequestReply) GetResponse() *Response
func (*HandleRequestReply) ProtoMessage ¶
func (*HandleRequestReply) ProtoMessage()
func (*HandleRequestReply) ProtoReflect ¶ added in v0.2.0
func (x *HandleRequestReply) ProtoReflect() protoreflect.Message
func (*HandleRequestReply) Reset ¶
func (x *HandleRequestReply) Reset()
func (*HandleRequestReply) String ¶
func (x *HandleRequestReply) String() string
type Header ¶
type Header struct {
Header []string `sentinel:"" protobuf:"bytes,1,rep,name=header,proto3" json:"header,omitempty"`
// contains filtered or unexported fields
}
func (*Header) Descriptor
deprecated
func (*Header) ProtoMessage ¶
func (*Header) ProtoMessage()
func (*Header) ProtoReflect ¶ added in v0.2.0
func (x *Header) ProtoReflect() protoreflect.Message
type InitializeArgs ¶ added in v0.1.12
type InitializeArgs struct {
// contains filtered or unexported fields
}
InitializeArgs is the args for Initialize method.
func (*InitializeArgs) Descriptor
deprecated
added in
v0.1.12
func (*InitializeArgs) Descriptor() ([]byte, []int)
Deprecated: Use InitializeArgs.ProtoReflect.Descriptor instead.
func (*InitializeArgs) ProtoMessage ¶ added in v0.1.12
func (*InitializeArgs) ProtoMessage()
func (*InitializeArgs) ProtoReflect ¶ added in v0.2.0
func (x *InitializeArgs) ProtoReflect() protoreflect.Message
func (*InitializeArgs) Reset ¶ added in v0.1.12
func (x *InitializeArgs) Reset()
func (*InitializeArgs) String ¶ added in v0.1.12
func (x *InitializeArgs) String() string
type InitializeReply ¶ added in v0.1.12
type InitializeReply struct {
Err *ProtoError `sentinel:"" protobuf:"bytes,1,opt,name=err,proto3" json:"err,omitempty"`
// contains filtered or unexported fields
}
InitializeReply is the reply for Initialize method.
func (*InitializeReply) Descriptor
deprecated
added in
v0.1.12
func (*InitializeReply) Descriptor() ([]byte, []int)
Deprecated: Use InitializeReply.ProtoReflect.Descriptor instead.
func (*InitializeReply) GetErr ¶ added in v0.1.12
func (x *InitializeReply) GetErr() *ProtoError
func (*InitializeReply) ProtoMessage ¶ added in v0.1.12
func (*InitializeReply) ProtoMessage()
func (*InitializeReply) ProtoReflect ¶ added in v0.2.0
func (x *InitializeReply) ProtoReflect() protoreflect.Message
func (*InitializeReply) Reset ¶ added in v0.1.12
func (x *InitializeReply) Reset()
func (*InitializeReply) String ¶ added in v0.1.12
func (x *InitializeReply) String() string
type InvalidateKeyArgs ¶
type InvalidateKeyArgs struct {
Key string `sentinel:"" protobuf:"bytes,1,opt,name=key,proto3" json:"key,omitempty"`
// contains filtered or unexported fields
}
func (*InvalidateKeyArgs) Descriptor
deprecated
func (*InvalidateKeyArgs) Descriptor() ([]byte, []int)
Deprecated: Use InvalidateKeyArgs.ProtoReflect.Descriptor instead.
func (*InvalidateKeyArgs) GetKey ¶
func (x *InvalidateKeyArgs) GetKey() string
func (*InvalidateKeyArgs) ProtoMessage ¶
func (*InvalidateKeyArgs) ProtoMessage()
func (*InvalidateKeyArgs) ProtoReflect ¶ added in v0.2.0
func (x *InvalidateKeyArgs) ProtoReflect() protoreflect.Message
func (*InvalidateKeyArgs) Reset ¶
func (x *InvalidateKeyArgs) Reset()
func (*InvalidateKeyArgs) String ¶
func (x *InvalidateKeyArgs) String() string
type LeaseOptions ¶
type LeaseOptions struct {
TTL int64 `sentinel:"" protobuf:"varint,1,opt,name=TTL,proto3" json:"TTL,omitempty"`
Renewable bool `sentinel:"" protobuf:"varint,2,opt,name=renewable,proto3" json:"renewable,omitempty"`
Increment int64 `sentinel:"" protobuf:"varint,3,opt,name=increment,proto3" json:"increment,omitempty"`
IssueTime *timestamppb.Timestamp `sentinel:"" protobuf:"bytes,4,opt,name=issue_time,json=issueTime,proto3" json:"issue_time,omitempty"`
MaxTTL int64 `sentinel:"" protobuf:"varint,5,opt,name=MaxTTL,proto3" json:"MaxTTL,omitempty"`
// contains filtered or unexported fields
}
func LogicalLeaseOptionsToProtoLeaseOptions ¶
func LogicalLeaseOptionsToProtoLeaseOptions(l logical.LeaseOptions) (*LeaseOptions, error)
func (*LeaseOptions) Descriptor
deprecated
func (*LeaseOptions) Descriptor() ([]byte, []int)
Deprecated: Use LeaseOptions.ProtoReflect.Descriptor instead.
func (*LeaseOptions) GetIncrement ¶
func (x *LeaseOptions) GetIncrement() int64
func (*LeaseOptions) GetIssueTime ¶
func (x *LeaseOptions) GetIssueTime() *timestamppb.Timestamp
func (*LeaseOptions) GetMaxTTL ¶
func (x *LeaseOptions) GetMaxTTL() int64
func (*LeaseOptions) GetRenewable ¶
func (x *LeaseOptions) GetRenewable() bool
func (*LeaseOptions) GetTTL ¶
func (x *LeaseOptions) GetTTL() int64
func (*LeaseOptions) ProtoMessage ¶
func (*LeaseOptions) ProtoMessage()
func (*LeaseOptions) ProtoReflect ¶ added in v0.2.0
func (x *LeaseOptions) ProtoReflect() protoreflect.Message
func (*LeaseOptions) Reset ¶
func (x *LeaseOptions) Reset()
func (*LeaseOptions) String ¶
func (x *LeaseOptions) String() string
type LocalMountReply ¶
type LocalMountReply struct {
Local bool `sentinel:"" protobuf:"varint,1,opt,name=local,proto3" json:"local,omitempty"`
// contains filtered or unexported fields
}
func (*LocalMountReply) Descriptor
deprecated
func (*LocalMountReply) Descriptor() ([]byte, []int)
Deprecated: Use LocalMountReply.ProtoReflect.Descriptor instead.
func (*LocalMountReply) GetLocal ¶
func (x *LocalMountReply) GetLocal() bool
func (*LocalMountReply) ProtoMessage ¶
func (*LocalMountReply) ProtoMessage()
func (*LocalMountReply) ProtoReflect ¶ added in v0.2.0
func (x *LocalMountReply) ProtoReflect() protoreflect.Message
func (*LocalMountReply) Reset ¶
func (x *LocalMountReply) Reset()
func (*LocalMountReply) String ¶
func (x *LocalMountReply) String() string
type MlockEnabledReply ¶
type MlockEnabledReply struct {
Enabled bool `sentinel:"" protobuf:"varint,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
// contains filtered or unexported fields
}
func (*MlockEnabledReply) Descriptor
deprecated
func (*MlockEnabledReply) Descriptor() ([]byte, []int)
Deprecated: Use MlockEnabledReply.ProtoReflect.Descriptor instead.
func (*MlockEnabledReply) GetEnabled ¶
func (x *MlockEnabledReply) GetEnabled() bool
func (*MlockEnabledReply) ProtoMessage ¶
func (*MlockEnabledReply) ProtoMessage()
func (*MlockEnabledReply) ProtoReflect ¶ added in v0.2.0
func (x *MlockEnabledReply) ProtoReflect() protoreflect.Message
func (*MlockEnabledReply) Reset ¶
func (x *MlockEnabledReply) Reset()
func (*MlockEnabledReply) String ¶
func (x *MlockEnabledReply) String() string
type Paths ¶
type Paths struct {
// Root are the paths that require a root token to access
Root []string `sentinel:"" protobuf:"bytes,1,rep,name=root,proto3" json:"root,omitempty"`
// Unauthenticated are the paths that can be accessed without any auth.
Unauthenticated []string `sentinel:"" protobuf:"bytes,2,rep,name=unauthenticated,proto3" json:"unauthenticated,omitempty"`
// LocalStorage are paths (prefixes) that are local to this instance; this
// indicates that these paths should not be replicated
LocalStorage []string `sentinel:"" protobuf:"bytes,3,rep,name=local_storage,json=localStorage,proto3" json:"local_storage,omitempty"`
// SealWrapStorage are storage paths that, when using a capable seal,
// should be seal wrapped with extra encryption. It is exact matching
// unless it ends with '/' in which case it will be treated as a prefix.
SealWrapStorage []string `sentinel:"" protobuf:"bytes,4,rep,name=seal_wrap_storage,json=sealWrapStorage,proto3" json:"seal_wrap_storage,omitempty"`
// contains filtered or unexported fields
}
Paths is the structure of special paths that is used for SpecialPaths.
func (*Paths) Descriptor
deprecated
func (*Paths) GetLocalStorage ¶
func (*Paths) GetSealWrapStorage ¶
func (*Paths) GetUnauthenticated ¶
func (*Paths) ProtoMessage ¶
func (*Paths) ProtoMessage()
func (*Paths) ProtoReflect ¶ added in v0.2.0
func (x *Paths) ProtoReflect() protoreflect.Message
type PluginEnvReply ¶
type PluginEnvReply struct {
PluginEnvironment *logical.PluginEnvironment `sentinel:"" protobuf:"bytes,1,opt,name=plugin_environment,json=pluginEnvironment,proto3" json:"plugin_environment,omitempty"`
Err string `sentinel:"" protobuf:"bytes,2,opt,name=err,proto3" json:"err,omitempty"`
// contains filtered or unexported fields
}
func (*PluginEnvReply) Descriptor
deprecated
func (*PluginEnvReply) Descriptor() ([]byte, []int)
Deprecated: Use PluginEnvReply.ProtoReflect.Descriptor instead.
func (*PluginEnvReply) GetErr ¶
func (x *PluginEnvReply) GetErr() string
func (*PluginEnvReply) GetPluginEnvironment ¶
func (x *PluginEnvReply) GetPluginEnvironment() *logical.PluginEnvironment
func (*PluginEnvReply) ProtoMessage ¶
func (*PluginEnvReply) ProtoMessage()
func (*PluginEnvReply) ProtoReflect ¶ added in v0.2.0
func (x *PluginEnvReply) ProtoReflect() protoreflect.Message
func (*PluginEnvReply) Reset ¶
func (x *PluginEnvReply) Reset()
func (*PluginEnvReply) String ¶
func (x *PluginEnvReply) String() string
type ProtoError ¶
type ProtoError struct {
// Error type can be one of:
// ErrTypeUnknown uint32 = iota
// ErrTypeUserError
// ErrTypeInternalError
// ErrTypeCodedError
// ErrTypeStatusBadRequest
// ErrTypeUnsupportedOperation
// ErrTypeUnsupportedPath
// ErrTypeInvalidRequest
// ErrTypePermissionDenied
// ErrTypeMultiAuthzPending
// ErrTypeUnrecoverable
ErrType uint32 `sentinel:"" protobuf:"varint,1,opt,name=err_type,json=errType,proto3" json:"err_type,omitempty"`
ErrMsg string `sentinel:"" protobuf:"bytes,2,opt,name=err_msg,json=errMsg,proto3" json:"err_msg,omitempty"`
ErrCode int64 `sentinel:"" protobuf:"varint,3,opt,name=err_code,json=errCode,proto3" json:"err_code,omitempty"`
// contains filtered or unexported fields
}
func ErrToProtoErr ¶
func ErrToProtoErr(e error) *ProtoError
func (*ProtoError) Descriptor
deprecated
func (*ProtoError) Descriptor() ([]byte, []int)
Deprecated: Use ProtoError.ProtoReflect.Descriptor instead.
func (*ProtoError) GetErrCode ¶
func (x *ProtoError) GetErrCode() int64
func (*ProtoError) GetErrMsg ¶
func (x *ProtoError) GetErrMsg() string
func (*ProtoError) GetErrType ¶
func (x *ProtoError) GetErrType() uint32
func (*ProtoError) ProtoMessage ¶
func (*ProtoError) ProtoMessage()
func (*ProtoError) ProtoReflect ¶ added in v0.2.0
func (x *ProtoError) ProtoReflect() protoreflect.Message
func (*ProtoError) Reset ¶
func (x *ProtoError) Reset()
func (*ProtoError) String ¶
func (x *ProtoError) String() string
type ReplicationStateReply ¶
type ReplicationStateReply struct {
State int32 `sentinel:"" protobuf:"varint,1,opt,name=state,proto3" json:"state,omitempty"`
// contains filtered or unexported fields
}
func (*ReplicationStateReply) Descriptor
deprecated
func (*ReplicationStateReply) Descriptor() ([]byte, []int)
Deprecated: Use ReplicationStateReply.ProtoReflect.Descriptor instead.
func (*ReplicationStateReply) GetState ¶
func (x *ReplicationStateReply) GetState() int32
func (*ReplicationStateReply) ProtoMessage ¶
func (*ReplicationStateReply) ProtoMessage()
func (*ReplicationStateReply) ProtoReflect ¶ added in v0.2.0
func (x *ReplicationStateReply) ProtoReflect() protoreflect.Message
func (*ReplicationStateReply) Reset ¶
func (x *ReplicationStateReply) Reset()
func (*ReplicationStateReply) String ¶
func (x *ReplicationStateReply) String() string
type Request ¶
type Request struct {
// ID is the uuid associated with each request
ID string `sentinel:"" protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
// If set, the name given to the replication secondary where this request
// originated
ReplicationCluster string `sentinel:"" protobuf:"bytes,2,opt,name=ReplicationCluster,proto3" json:"ReplicationCluster,omitempty"`
// Operation is the requested operation type
Operation string `sentinel:"" protobuf:"bytes,3,opt,name=operation,proto3" json:"operation,omitempty"`
// Path is the part of the request path not consumed by the
// routing. As an example, if the original request path is "prod/aws/foo"
// and the AWS logical backend is mounted at "prod/aws/", then the
// final path is "foo" since the mount prefix is trimmed.
Path string `sentinel:"" protobuf:"bytes,4,opt,name=path,proto3" json:"path,omitempty"`
// Request data is a JSON object that must have keys with string type.
Data string `sentinel:"" protobuf:"bytes,5,opt,name=data,proto3" json:"data,omitempty"`
// Secret will be non-nil only for Revoke and Renew operations
// to represent the secret that was returned prior.
Secret *Secret `sentinel:"" protobuf:"bytes,6,opt,name=secret,proto3" json:"secret,omitempty"`
// Auth will be non-nil only for Renew operations
// to represent the auth that was returned prior.
Auth *Auth `sentinel:"" protobuf:"bytes,7,opt,name=auth,proto3" json:"auth,omitempty"`
// Headers will contain the http headers from the request. This value will
// be used in the audit broker to ensure we are auditing only the allowed
// headers.
Headers map[string]*Header `` /* 167-byte string literal not displayed */
// ClientToken is provided to the core so that the identity
// can be verified and ACLs applied. This value is passed
// through to the logical backends but after being salted and
// hashed.
ClientToken string `sentinel:"" protobuf:"bytes,9,opt,name=client_token,json=clientToken,proto3" json:"client_token,omitempty"`
// ClientTokenAccessor is provided to the core so that the it can get
// logged as part of request audit logging.
ClientTokenAccessor string `` /* 133-byte string literal not displayed */
// DisplayName is provided to the logical backend to help associate
// dynamic secrets with the source entity. This is not a sensitive
// name, but is useful for operators.
DisplayName string `sentinel:"" protobuf:"bytes,11,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
// MountPoint is provided so that a logical backend can generate
// paths relative to itself. The `Path` is effectively the client
// request path with the MountPoint trimmed off.
MountPoint string `sentinel:"" protobuf:"bytes,12,opt,name=mount_point,json=mountPoint,proto3" json:"mount_point,omitempty"`
// MountType is provided so that a logical backend can make decisions
// based on the specific mount type (e.g., if a mount type has different
// aliases, generating different defaults depending on the alias)
MountType string `sentinel:"" protobuf:"bytes,13,opt,name=mount_type,json=mountType,proto3" json:"mount_type,omitempty"`
// MountAccessor is provided so that identities returned by the authentication
// backends can be tied to the mount it belongs to.
MountAccessor string `sentinel:"" protobuf:"bytes,14,opt,name=mount_accessor,json=mountAccessor,proto3" json:"mount_accessor,omitempty"`
// WrapInfo contains requested response wrapping parameters
WrapInfo *RequestWrapInfo `sentinel:"" protobuf:"bytes,15,opt,name=wrap_info,json=wrapInfo,proto3" json:"wrap_info,omitempty"`
// ClientTokenRemainingUses represents the allowed number of uses left on the
// token supplied
ClientTokenRemainingUses int64 `` /* 151-byte string literal not displayed */
// EntityID is the identity of the caller extracted out of the token used
// to make this request
EntityID string `sentinel:"" protobuf:"bytes,17,opt,name=entity_id,json=entityId,proto3" json:"entity_id,omitempty"`
// PolicyOverride indicates that the requestor wishes to override
// soft-mandatory Sentinel policies
PolicyOverride bool `sentinel:"" protobuf:"varint,18,opt,name=policy_override,json=policyOverride,proto3" json:"policy_override,omitempty"`
// Whether the request is unauthenticated, as in, had no client token
// attached. Useful in some situations where the client token is not made
// accessible.
Unauthenticated bool `sentinel:"" protobuf:"varint,19,opt,name=unauthenticated,proto3" json:"unauthenticated,omitempty"`
// Connection will be non-nil only for credential providers to
// inspect the connection information and potentially use it for
// authentication/protection.
Connection *Connection `sentinel:"" protobuf:"bytes,20,opt,name=connection,proto3" json:"connection,omitempty"`
// contains filtered or unexported fields
}
func (*Request) Descriptor
deprecated
func (*Request) GetClientToken ¶
func (*Request) GetClientTokenAccessor ¶
func (*Request) GetClientTokenRemainingUses ¶
func (*Request) GetConnection ¶
func (x *Request) GetConnection() *Connection
func (*Request) GetDisplayName ¶
func (*Request) GetEntityID ¶
func (*Request) GetHeaders ¶
func (*Request) GetMountAccessor ¶
func (*Request) GetMountPoint ¶
func (*Request) GetMountType ¶
func (*Request) GetOperation ¶
func (*Request) GetPolicyOverride ¶
func (*Request) GetReplicationCluster ¶
func (*Request) GetUnauthenticated ¶
func (*Request) GetWrapInfo ¶
func (x *Request) GetWrapInfo() *RequestWrapInfo
func (*Request) ProtoMessage ¶
func (*Request) ProtoMessage()
func (*Request) ProtoReflect ¶ added in v0.2.0
func (x *Request) ProtoReflect() protoreflect.Message
type RequestWrapInfo ¶
type RequestWrapInfo struct {
// Setting to non-zero specifies that the response should be wrapped.
// Specifies the desired TTL of the wrapping token.
TTL int64 `sentinel:"" protobuf:"varint,1,opt,name=TTL,proto3" json:"TTL,omitempty"`
// The format to use for the wrapped response; if not specified it's a bare
// token
Format string `sentinel:"" protobuf:"bytes,2,opt,name=format,proto3" json:"format,omitempty"`
// A flag to conforming backends that data for a given request should be
// seal wrapped
SealWrap bool `sentinel:"" protobuf:"varint,3,opt,name=seal_wrap,json=sealWrap,proto3" json:"seal_wrap,omitempty"`
// contains filtered or unexported fields
}
func LogicalRequestWrapInfoToProtoRequestWrapInfo ¶
func LogicalRequestWrapInfoToProtoRequestWrapInfo(i *logical.RequestWrapInfo) *RequestWrapInfo
func (*RequestWrapInfo) Descriptor
deprecated
func (*RequestWrapInfo) Descriptor() ([]byte, []int)
Deprecated: Use RequestWrapInfo.ProtoReflect.Descriptor instead.
func (*RequestWrapInfo) GetFormat ¶
func (x *RequestWrapInfo) GetFormat() string
func (*RequestWrapInfo) GetSealWrap ¶
func (x *RequestWrapInfo) GetSealWrap() bool
func (*RequestWrapInfo) GetTTL ¶
func (x *RequestWrapInfo) GetTTL() int64
func (*RequestWrapInfo) ProtoMessage ¶
func (*RequestWrapInfo) ProtoMessage()
func (*RequestWrapInfo) ProtoReflect ¶ added in v0.2.0
func (x *RequestWrapInfo) ProtoReflect() protoreflect.Message
func (*RequestWrapInfo) Reset ¶
func (x *RequestWrapInfo) Reset()
func (*RequestWrapInfo) String ¶
func (x *RequestWrapInfo) String() string
type Response ¶
type Response struct {
// Secret, if not nil, denotes that this response represents a secret.
Secret *Secret `sentinel:"" protobuf:"bytes,1,opt,name=secret,proto3" json:"secret,omitempty"`
// Auth, if not nil, contains the authentication information for
// this response. This is only checked and means something for
// credential backends.
Auth *Auth `sentinel:"" protobuf:"bytes,2,opt,name=auth,proto3" json:"auth,omitempty"`
// Response data is a JSON object that must have string keys. For
// secrets, this data is sent down to the user as-is. To store internal
// data that you don't want the user to see, store it in
// Secret.InternalData.
Data string `sentinel:"" protobuf:"bytes,3,opt,name=data,proto3" json:"data,omitempty"`
// Redirect is an HTTP URL to redirect to for further authentication.
// This is only valid for credential backends. This will be blanked
// for any logical backend and ignored.
Redirect string `sentinel:"" protobuf:"bytes,4,opt,name=redirect,proto3" json:"redirect,omitempty"`
// Warnings allow operations or backends to return warnings in response
// to user actions without failing the action outright.
Warnings []string `sentinel:"" protobuf:"bytes,5,rep,name=warnings,proto3" json:"warnings,omitempty"`
// Information for wrapping the response in a cubbyhole
WrapInfo *ResponseWrapInfo `sentinel:"" protobuf:"bytes,6,opt,name=wrap_info,json=wrapInfo,proto3" json:"wrap_info,omitempty"`
// Headers will contain the http headers from the response. This value will
// be used in the audit broker to ensure we are auditing only the allowed
// headers.
Headers map[string]*Header `` /* 167-byte string literal not displayed */
// contains filtered or unexported fields
}
func (*Response) Descriptor
deprecated
func (*Response) GetHeaders ¶
func (*Response) GetRedirect ¶
func (*Response) GetWarnings ¶
func (*Response) GetWrapInfo ¶
func (x *Response) GetWrapInfo() *ResponseWrapInfo
func (*Response) ProtoMessage ¶
func (*Response) ProtoMessage()
func (*Response) ProtoReflect ¶ added in v0.2.0
func (x *Response) ProtoReflect() protoreflect.Message
type ResponseWrapDataArgs ¶
type ResponseWrapDataArgs struct {
Data string `sentinel:"" protobuf:"bytes,1,opt,name=data,proto3" json:"data,omitempty"`
TTL int64 `sentinel:"" protobuf:"varint,2,opt,name=TTL,proto3" json:"TTL,omitempty"`
JWT bool `sentinel:"" protobuf:"varint,3,opt,name=JWT,proto3" json:"JWT,omitempty"`
// contains filtered or unexported fields
}
func (*ResponseWrapDataArgs) Descriptor
deprecated
func (*ResponseWrapDataArgs) Descriptor() ([]byte, []int)
Deprecated: Use ResponseWrapDataArgs.ProtoReflect.Descriptor instead.
func (*ResponseWrapDataArgs) GetData ¶
func (x *ResponseWrapDataArgs) GetData() string
func (*ResponseWrapDataArgs) GetJWT ¶
func (x *ResponseWrapDataArgs) GetJWT() bool
func (*ResponseWrapDataArgs) GetTTL ¶
func (x *ResponseWrapDataArgs) GetTTL() int64
func (*ResponseWrapDataArgs) ProtoMessage ¶
func (*ResponseWrapDataArgs) ProtoMessage()
func (*ResponseWrapDataArgs) ProtoReflect ¶ added in v0.2.0
func (x *ResponseWrapDataArgs) ProtoReflect() protoreflect.Message
func (*ResponseWrapDataArgs) Reset ¶
func (x *ResponseWrapDataArgs) Reset()
func (*ResponseWrapDataArgs) String ¶
func (x *ResponseWrapDataArgs) String() string
type ResponseWrapDataReply ¶
type ResponseWrapDataReply struct {
WrapInfo *ResponseWrapInfo `sentinel:"" protobuf:"bytes,1,opt,name=wrap_info,json=wrapInfo,proto3" json:"wrap_info,omitempty"`
Err string `sentinel:"" protobuf:"bytes,2,opt,name=err,proto3" json:"err,omitempty"`
// contains filtered or unexported fields
}
func (*ResponseWrapDataReply) Descriptor
deprecated
func (*ResponseWrapDataReply) Descriptor() ([]byte, []int)
Deprecated: Use ResponseWrapDataReply.ProtoReflect.Descriptor instead.
func (*ResponseWrapDataReply) GetErr ¶
func (x *ResponseWrapDataReply) GetErr() string
func (*ResponseWrapDataReply) GetWrapInfo ¶
func (x *ResponseWrapDataReply) GetWrapInfo() *ResponseWrapInfo
func (*ResponseWrapDataReply) ProtoMessage ¶
func (*ResponseWrapDataReply) ProtoMessage()
func (*ResponseWrapDataReply) ProtoReflect ¶ added in v0.2.0
func (x *ResponseWrapDataReply) ProtoReflect() protoreflect.Message
func (*ResponseWrapDataReply) Reset ¶
func (x *ResponseWrapDataReply) Reset()
func (*ResponseWrapDataReply) String ¶
func (x *ResponseWrapDataReply) String() string
type ResponseWrapInfo ¶
type ResponseWrapInfo struct {
// Setting to non-zero specifies that the response should be wrapped.
// Specifies the desired TTL of the wrapping token.
TTL int64 `sentinel:"" protobuf:"varint,1,opt,name=TTL,proto3" json:"TTL,omitempty"`
// The token containing the wrapped response
Token string `sentinel:"" protobuf:"bytes,2,opt,name=token,proto3" json:"token,omitempty"`
// The token accessor for the wrapped response token
Accessor string `sentinel:"" protobuf:"bytes,3,opt,name=accessor,proto3" json:"accessor,omitempty"`
// The creation time. This can be used with the TTL to figure out an
// expected expiration.
CreationTime *timestamppb.Timestamp `sentinel:"" protobuf:"bytes,4,opt,name=creation_time,json=creationTime,proto3" json:"creation_time,omitempty"`
// If the contained response is the output of a token creation call, the
// created token's accessor will be accessible here
WrappedAccessor string `sentinel:"" protobuf:"bytes,5,opt,name=wrapped_accessor,json=wrappedAccessor,proto3" json:"wrapped_accessor,omitempty"`
// WrappedEntityID is the entity identifier of the caller who initiated the
// wrapping request
WrappedEntityID string `sentinel:"" protobuf:"bytes,6,opt,name=wrapped_entity_id,json=wrappedEntityID,proto3" json:"wrapped_entity_id,omitempty"`
// The format to use. This doesn't get returned, it's only internal.
Format string `sentinel:"" protobuf:"bytes,7,opt,name=format,proto3" json:"format,omitempty"`
// CreationPath is the original request path that was used to create
// the wrapped response.
CreationPath string `sentinel:"" protobuf:"bytes,8,opt,name=creation_path,json=creationPath,proto3" json:"creation_path,omitempty"`
// Controls seal wrapping behavior downstream for specific use cases
SealWrap bool `sentinel:"" protobuf:"varint,9,opt,name=seal_wrap,json=sealWrap,proto3" json:"seal_wrap,omitempty"`
// contains filtered or unexported fields
}
func LogicalResponseWrapInfoToProtoResponseWrapInfo ¶
func LogicalResponseWrapInfoToProtoResponseWrapInfo(i *wrapping.ResponseWrapInfo) (*ResponseWrapInfo, error)
func (*ResponseWrapInfo) Descriptor
deprecated
func (*ResponseWrapInfo) Descriptor() ([]byte, []int)
Deprecated: Use ResponseWrapInfo.ProtoReflect.Descriptor instead.
func (*ResponseWrapInfo) GetAccessor ¶
func (x *ResponseWrapInfo) GetAccessor() string
func (*ResponseWrapInfo) GetCreationPath ¶
func (x *ResponseWrapInfo) GetCreationPath() string
func (*ResponseWrapInfo) GetCreationTime ¶
func (x *ResponseWrapInfo) GetCreationTime() *timestamppb.Timestamp
func (*ResponseWrapInfo) GetFormat ¶
func (x *ResponseWrapInfo) GetFormat() string
func (*ResponseWrapInfo) GetSealWrap ¶
func (x *ResponseWrapInfo) GetSealWrap() bool
func (*ResponseWrapInfo) GetTTL ¶
func (x *ResponseWrapInfo) GetTTL() int64
func (*ResponseWrapInfo) GetToken ¶
func (x *ResponseWrapInfo) GetToken() string
func (*ResponseWrapInfo) GetWrappedAccessor ¶
func (x *ResponseWrapInfo) GetWrappedAccessor() string
func (*ResponseWrapInfo) GetWrappedEntityID ¶
func (x *ResponseWrapInfo) GetWrappedEntityID() string
func (*ResponseWrapInfo) ProtoMessage ¶
func (*ResponseWrapInfo) ProtoMessage()
func (*ResponseWrapInfo) ProtoReflect ¶ added in v0.2.0
func (x *ResponseWrapInfo) ProtoReflect() protoreflect.Message
func (*ResponseWrapInfo) Reset ¶
func (x *ResponseWrapInfo) Reset()
func (*ResponseWrapInfo) String ¶
func (x *ResponseWrapInfo) String() string
type Secret ¶
type Secret struct {
LeaseOptions *LeaseOptions `sentinel:"" protobuf:"bytes,1,opt,name=lease_options,json=leaseOptions,proto3" json:"lease_options,omitempty"`
// InternalData is a JSON object that is stored with the secret.
// This will be sent back during a Renew/Revoke for storing internal data
// used for those operations.
InternalData string `sentinel:"" protobuf:"bytes,2,opt,name=internal_data,json=internalData,proto3" json:"internal_data,omitempty"`
// LeaseID is the ID returned to the user to manage this secret.
// This is generated by Vault core. Any set value will be ignored.
// For requests, this will always be blank.
LeaseID string `sentinel:"" protobuf:"bytes,3,opt,name=lease_id,json=leaseId,proto3" json:"lease_id,omitempty"`
// contains filtered or unexported fields
}
func (*Secret) Descriptor
deprecated
func (*Secret) GetInternalData ¶
func (*Secret) GetLeaseID ¶
func (*Secret) GetLeaseOptions ¶
func (x *Secret) GetLeaseOptions() *LeaseOptions
func (*Secret) ProtoMessage ¶
func (*Secret) ProtoMessage()
func (*Secret) ProtoReflect ¶ added in v0.2.0
func (x *Secret) ProtoReflect() protoreflect.Message
type SetupArgs ¶
type SetupArgs struct {
BrokerID uint32 `sentinel:"" protobuf:"varint,1,opt,name=broker_id,json=brokerId,proto3" json:"broker_id,omitempty"`
Config map[string]string `` /* 165-byte string literal not displayed */
BackendUUID string `sentinel:"" protobuf:"bytes,3,opt,name=backendUUID,proto3" json:"backendUUID,omitempty"`
// contains filtered or unexported fields
}
SetupArgs is the args for Setup method.
func (*SetupArgs) Descriptor
deprecated
func (*SetupArgs) GetBackendUUID ¶
func (*SetupArgs) GetBrokerID ¶
func (*SetupArgs) ProtoMessage ¶
func (*SetupArgs) ProtoMessage()
func (*SetupArgs) ProtoReflect ¶ added in v0.2.0
func (x *SetupArgs) ProtoReflect() protoreflect.Message
type SetupReply ¶
type SetupReply struct {
Err string `sentinel:"" protobuf:"bytes,1,opt,name=err,proto3" json:"err,omitempty"`
// contains filtered or unexported fields
}
SetupReply is the reply for Setup method.
func (*SetupReply) Descriptor
deprecated
func (*SetupReply) Descriptor() ([]byte, []int)
Deprecated: Use SetupReply.ProtoReflect.Descriptor instead.
func (*SetupReply) GetErr ¶
func (x *SetupReply) GetErr() string
func (*SetupReply) ProtoMessage ¶
func (*SetupReply) ProtoMessage()
func (*SetupReply) ProtoReflect ¶ added in v0.2.0
func (x *SetupReply) ProtoReflect() protoreflect.Message
func (*SetupReply) Reset ¶
func (x *SetupReply) Reset()
func (*SetupReply) String ¶
func (x *SetupReply) String() string
type SpecialPathsReply ¶
type SpecialPathsReply struct {
Paths *Paths `sentinel:"" protobuf:"bytes,1,opt,name=paths,proto3" json:"paths,omitempty"`
// contains filtered or unexported fields
}
SpecialPathsReply is the reply for SpecialPaths method.
func (*SpecialPathsReply) Descriptor
deprecated
func (*SpecialPathsReply) Descriptor() ([]byte, []int)
Deprecated: Use SpecialPathsReply.ProtoReflect.Descriptor instead.
func (*SpecialPathsReply) GetPaths ¶
func (x *SpecialPathsReply) GetPaths() *Paths
func (*SpecialPathsReply) ProtoMessage ¶
func (*SpecialPathsReply) ProtoMessage()
func (*SpecialPathsReply) ProtoReflect ¶ added in v0.2.0
func (x *SpecialPathsReply) ProtoReflect() protoreflect.Message
func (*SpecialPathsReply) Reset ¶
func (x *SpecialPathsReply) Reset()
func (*SpecialPathsReply) String ¶
func (x *SpecialPathsReply) String() string
type StorageClient ¶
type StorageClient interface {
List(ctx context.Context, in *StorageListArgs, opts ...grpc.CallOption) (*StorageListReply, error)
Get(ctx context.Context, in *StorageGetArgs, opts ...grpc.CallOption) (*StorageGetReply, error)
Put(ctx context.Context, in *StoragePutArgs, opts ...grpc.CallOption) (*StoragePutReply, error)
Delete(ctx context.Context, in *StorageDeleteArgs, opts ...grpc.CallOption) (*StorageDeleteReply, error)
}
StorageClient is the client API for Storage service.
For semantics around ctx use and closing/ending streaming RPCs, please refer to https://godoc.org/google.golang.org/grpc#ClientConn.NewStream.
func NewStorageClient ¶
func NewStorageClient(cc grpc.ClientConnInterface) StorageClient
type StorageDeleteArgs ¶
type StorageDeleteArgs struct {
Key string `sentinel:"" protobuf:"bytes,1,opt,name=key,proto3" json:"key,omitempty"`
// contains filtered or unexported fields
}
func (*StorageDeleteArgs) Descriptor
deprecated
func (*StorageDeleteArgs) Descriptor() ([]byte, []int)
Deprecated: Use StorageDeleteArgs.ProtoReflect.Descriptor instead.
func (*StorageDeleteArgs) GetKey ¶
func (x *StorageDeleteArgs) GetKey() string
func (*StorageDeleteArgs) ProtoMessage ¶
func (*StorageDeleteArgs) ProtoMessage()
func (*StorageDeleteArgs) ProtoReflect ¶ added in v0.2.0
func (x *StorageDeleteArgs) ProtoReflect() protoreflect.Message
func (*StorageDeleteArgs) Reset ¶
func (x *StorageDeleteArgs) Reset()
func (*StorageDeleteArgs) String ¶
func (x *StorageDeleteArgs) String() string
type StorageDeleteReply ¶
type StorageDeleteReply struct {
Err string `sentinel:"" protobuf:"bytes,1,opt,name=err,proto3" json:"err,omitempty"`
// contains filtered or unexported fields
}
func (*StorageDeleteReply) Descriptor
deprecated
func (*StorageDeleteReply) Descriptor() ([]byte, []int)
Deprecated: Use StorageDeleteReply.ProtoReflect.Descriptor instead.
func (*StorageDeleteReply) GetErr ¶
func (x *StorageDeleteReply) GetErr() string
func (*StorageDeleteReply) ProtoMessage ¶
func (*StorageDeleteReply) ProtoMessage()
func (*StorageDeleteReply) ProtoReflect ¶ added in v0.2.0
func (x *StorageDeleteReply) ProtoReflect() protoreflect.Message
func (*StorageDeleteReply) Reset ¶
func (x *StorageDeleteReply) Reset()
func (*StorageDeleteReply) String ¶
func (x *StorageDeleteReply) String() string
type StorageEntry ¶
type StorageEntry struct {
Key string `sentinel:"" protobuf:"bytes,1,opt,name=key,proto3" json:"key,omitempty"`
Value []byte `sentinel:"" protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"`
SealWrap bool `sentinel:"" protobuf:"varint,3,opt,name=seal_wrap,json=sealWrap,proto3" json:"seal_wrap,omitempty"`
// contains filtered or unexported fields
}
func LogicalStorageEntryToProtoStorageEntry ¶
func LogicalStorageEntryToProtoStorageEntry(e *logical.StorageEntry) *StorageEntry
func (*StorageEntry) Descriptor
deprecated
func (*StorageEntry) Descriptor() ([]byte, []int)
Deprecated: Use StorageEntry.ProtoReflect.Descriptor instead.
func (*StorageEntry) GetKey ¶
func (x *StorageEntry) GetKey() string
func (*StorageEntry) GetSealWrap ¶
func (x *StorageEntry) GetSealWrap() bool
func (*StorageEntry) GetValue ¶
func (x *StorageEntry) GetValue() []byte
func (*StorageEntry) ProtoMessage ¶
func (*StorageEntry) ProtoMessage()
func (*StorageEntry) ProtoReflect ¶ added in v0.2.0
func (x *StorageEntry) ProtoReflect() protoreflect.Message
func (*StorageEntry) Reset ¶
func (x *StorageEntry) Reset()
func (*StorageEntry) String ¶
func (x *StorageEntry) String() string
type StorageGetArgs ¶
type StorageGetArgs struct {
Key string `sentinel:"" protobuf:"bytes,1,opt,name=key,proto3" json:"key,omitempty"`
// contains filtered or unexported fields
}
func (*StorageGetArgs) Descriptor
deprecated
func (*StorageGetArgs) Descriptor() ([]byte, []int)
Deprecated: Use StorageGetArgs.ProtoReflect.Descriptor instead.
func (*StorageGetArgs) GetKey ¶
func (x *StorageGetArgs) GetKey() string
func (*StorageGetArgs) ProtoMessage ¶
func (*StorageGetArgs) ProtoMessage()
func (*StorageGetArgs) ProtoReflect ¶ added in v0.2.0
func (x *StorageGetArgs) ProtoReflect() protoreflect.Message
func (*StorageGetArgs) Reset ¶
func (x *StorageGetArgs) Reset()
func (*StorageGetArgs) String ¶
func (x *StorageGetArgs) String() string
type StorageGetReply ¶
type StorageGetReply struct {
Entry *StorageEntry `sentinel:"" protobuf:"bytes,1,opt,name=entry,proto3" json:"entry,omitempty"`
Err string `sentinel:"" protobuf:"bytes,2,opt,name=err,proto3" json:"err,omitempty"`
// contains filtered or unexported fields
}
func (*StorageGetReply) Descriptor
deprecated
func (*StorageGetReply) Descriptor() ([]byte, []int)
Deprecated: Use StorageGetReply.ProtoReflect.Descriptor instead.
func (*StorageGetReply) GetEntry ¶
func (x *StorageGetReply) GetEntry() *StorageEntry
func (*StorageGetReply) GetErr ¶
func (x *StorageGetReply) GetErr() string
func (*StorageGetReply) ProtoMessage ¶
func (*StorageGetReply) ProtoMessage()
func (*StorageGetReply) ProtoReflect ¶ added in v0.2.0
func (x *StorageGetReply) ProtoReflect() protoreflect.Message
func (*StorageGetReply) Reset ¶
func (x *StorageGetReply) Reset()
func (*StorageGetReply) String ¶
func (x *StorageGetReply) String() string
type StorageListArgs ¶
type StorageListArgs struct {
Prefix string `sentinel:"" protobuf:"bytes,1,opt,name=prefix,proto3" json:"prefix,omitempty"`
// contains filtered or unexported fields
}
func (*StorageListArgs) Descriptor
deprecated
func (*StorageListArgs) Descriptor() ([]byte, []int)
Deprecated: Use StorageListArgs.ProtoReflect.Descriptor instead.
func (*StorageListArgs) GetPrefix ¶
func (x *StorageListArgs) GetPrefix() string
func (*StorageListArgs) ProtoMessage ¶
func (*StorageListArgs) ProtoMessage()
func (*StorageListArgs) ProtoReflect ¶ added in v0.2.0
func (x *StorageListArgs) ProtoReflect() protoreflect.Message
func (*StorageListArgs) Reset ¶
func (x *StorageListArgs) Reset()
func (*StorageListArgs) String ¶
func (x *StorageListArgs) String() string
type StorageListReply ¶
type StorageListReply struct {
Keys []string `sentinel:"" protobuf:"bytes,1,rep,name=keys,proto3" json:"keys,omitempty"`
Err string `sentinel:"" protobuf:"bytes,2,opt,name=err,proto3" json:"err,omitempty"`
// contains filtered or unexported fields
}
func (*StorageListReply) Descriptor
deprecated
func (*StorageListReply) Descriptor() ([]byte, []int)
Deprecated: Use StorageListReply.ProtoReflect.Descriptor instead.
func (*StorageListReply) GetErr ¶
func (x *StorageListReply) GetErr() string
func (*StorageListReply) GetKeys ¶
func (x *StorageListReply) GetKeys() []string
func (*StorageListReply) ProtoMessage ¶
func (*StorageListReply) ProtoMessage()
func (*StorageListReply) ProtoReflect ¶ added in v0.2.0
func (x *StorageListReply) ProtoReflect() protoreflect.Message
func (*StorageListReply) Reset ¶
func (x *StorageListReply) Reset()
func (*StorageListReply) String ¶
func (x *StorageListReply) String() string
type StoragePutArgs ¶
type StoragePutArgs struct {
Entry *StorageEntry `sentinel:"" protobuf:"bytes,1,opt,name=entry,proto3" json:"entry,omitempty"`
// contains filtered or unexported fields
}
func (*StoragePutArgs) Descriptor
deprecated
func (*StoragePutArgs) Descriptor() ([]byte, []int)
Deprecated: Use StoragePutArgs.ProtoReflect.Descriptor instead.
func (*StoragePutArgs) GetEntry ¶
func (x *StoragePutArgs) GetEntry() *StorageEntry
func (*StoragePutArgs) ProtoMessage ¶
func (*StoragePutArgs) ProtoMessage()
func (*StoragePutArgs) ProtoReflect ¶ added in v0.2.0
func (x *StoragePutArgs) ProtoReflect() protoreflect.Message
func (*StoragePutArgs) Reset ¶
func (x *StoragePutArgs) Reset()
func (*StoragePutArgs) String ¶
func (x *StoragePutArgs) String() string
type StoragePutReply ¶
type StoragePutReply struct {
Err string `sentinel:"" protobuf:"bytes,1,opt,name=err,proto3" json:"err,omitempty"`
// contains filtered or unexported fields
}
func (*StoragePutReply) Descriptor
deprecated
func (*StoragePutReply) Descriptor() ([]byte, []int)
Deprecated: Use StoragePutReply.ProtoReflect.Descriptor instead.
func (*StoragePutReply) GetErr ¶
func (x *StoragePutReply) GetErr() string
func (*StoragePutReply) ProtoMessage ¶
func (*StoragePutReply) ProtoMessage()
func (*StoragePutReply) ProtoReflect ¶ added in v0.2.0
func (x *StoragePutReply) ProtoReflect() protoreflect.Message
func (*StoragePutReply) Reset ¶
func (x *StoragePutReply) Reset()
func (*StoragePutReply) String ¶
func (x *StoragePutReply) String() string
type StorageServer ¶
type StorageServer interface {
List(context.Context, *StorageListArgs) (*StorageListReply, error)
Get(context.Context, *StorageGetArgs) (*StorageGetReply, error)
Put(context.Context, *StoragePutArgs) (*StoragePutReply, error)
Delete(context.Context, *StorageDeleteArgs) (*StorageDeleteReply, error)
}
StorageServer is the server API for Storage service.
type SystemViewClient ¶
type SystemViewClient interface {
// DefaultLeaseTTL returns the default lease TTL set in Vault configuration
DefaultLeaseTTL(ctx context.Context, in *Empty, opts ...grpc.CallOption) (*TTLReply, error)
// MaxLeaseTTL returns the max lease TTL set in Vault configuration; backend
// authors should take care not to issue credentials that last longer than
// this value, as Vault will revoke them
MaxLeaseTTL(ctx context.Context, in *Empty, opts ...grpc.CallOption) (*TTLReply, error)
// Tainted, returns true if the mount is tainted. A mount is tainted if it is in the
// process of being unmounted. This should only be used in special
// circumstances; a primary use-case is as a guard in revocation functions.
// If revocation of a backend's leases fails it can keep the unmounting
// process from being successful. If the reason for this failure is not
// relevant when the mount is tainted (for instance, saving a CRL to disk
// when the stored CRL will be removed during the unmounting process
// anyways), we can ignore the errors to allow unmounting to complete.
Tainted(ctx context.Context, in *Empty, opts ...grpc.CallOption) (*TaintedReply, error)
// CachingDisabled returns true if caching is disabled. If true, no caches
// should be used, despite known slowdowns.
CachingDisabled(ctx context.Context, in *Empty, opts ...grpc.CallOption) (*CachingDisabledReply, error)
// ReplicationState indicates the state of cluster replication
ReplicationState(ctx context.Context, in *Empty, opts ...grpc.CallOption) (*ReplicationStateReply, error)
// ResponseWrapData wraps the given data in a cubbyhole and returns the
// token used to unwrap.
ResponseWrapData(ctx context.Context, in *ResponseWrapDataArgs, opts ...grpc.CallOption) (*ResponseWrapDataReply, error)
// MlockEnabled returns the configuration setting for enabling mlock on
// plugins.
MlockEnabled(ctx context.Context, in *Empty, opts ...grpc.CallOption) (*MlockEnabledReply, error)
// LocalMount, when run from a system view attached to a request, indicates
// whether the request is affecting a local mount or not
LocalMount(ctx context.Context, in *Empty, opts ...grpc.CallOption) (*LocalMountReply, error)
// EntityInfo returns the basic entity information for the given entity id
EntityInfo(ctx context.Context, in *EntityInfoArgs, opts ...grpc.CallOption) (*EntityInfoReply, error)
// PluginEnv returns Vault environment information used by plugins
PluginEnv(ctx context.Context, in *Empty, opts ...grpc.CallOption) (*PluginEnvReply, error)
// GroupsForEntity returns the group membership information for the given
// entity id
GroupsForEntity(ctx context.Context, in *EntityInfoArgs, opts ...grpc.CallOption) (*GroupsForEntityReply, error)
// GeneratePasswordFromPolicy generates a password from an existing password policy
GeneratePasswordFromPolicy(ctx context.Context, in *GeneratePasswordFromPolicyRequest, opts ...grpc.CallOption) (*GeneratePasswordFromPolicyReply, error)
}
SystemViewClient is the client API for SystemView service.
For semantics around ctx use and closing/ending streaming RPCs, please refer to https://godoc.org/google.golang.org/grpc#ClientConn.NewStream.
func NewSystemViewClient ¶
func NewSystemViewClient(cc grpc.ClientConnInterface) SystemViewClient
type SystemViewServer ¶
type SystemViewServer interface {
// DefaultLeaseTTL returns the default lease TTL set in Vault configuration
DefaultLeaseTTL(context.Context, *Empty) (*TTLReply, error)
// MaxLeaseTTL returns the max lease TTL set in Vault configuration; backend
// authors should take care not to issue credentials that last longer than
// this value, as Vault will revoke them
MaxLeaseTTL(context.Context, *Empty) (*TTLReply, error)
// Tainted, returns true if the mount is tainted. A mount is tainted if it is in the
// process of being unmounted. This should only be used in special
// circumstances; a primary use-case is as a guard in revocation functions.
// If revocation of a backend's leases fails it can keep the unmounting
// process from being successful. If the reason for this failure is not
// relevant when the mount is tainted (for instance, saving a CRL to disk
// when the stored CRL will be removed during the unmounting process
// anyways), we can ignore the errors to allow unmounting to complete.
Tainted(context.Context, *Empty) (*TaintedReply, error)
// CachingDisabled returns true if caching is disabled. If true, no caches
// should be used, despite known slowdowns.
CachingDisabled(context.Context, *Empty) (*CachingDisabledReply, error)
// ReplicationState indicates the state of cluster replication
ReplicationState(context.Context, *Empty) (*ReplicationStateReply, error)
// ResponseWrapData wraps the given data in a cubbyhole and returns the
// token used to unwrap.
ResponseWrapData(context.Context, *ResponseWrapDataArgs) (*ResponseWrapDataReply, error)
// MlockEnabled returns the configuration setting for enabling mlock on
// plugins.
MlockEnabled(context.Context, *Empty) (*MlockEnabledReply, error)
// LocalMount, when run from a system view attached to a request, indicates
// whether the request is affecting a local mount or not
LocalMount(context.Context, *Empty) (*LocalMountReply, error)
// EntityInfo returns the basic entity information for the given entity id
EntityInfo(context.Context, *EntityInfoArgs) (*EntityInfoReply, error)
// PluginEnv returns Vault environment information used by plugins
PluginEnv(context.Context, *Empty) (*PluginEnvReply, error)
// GroupsForEntity returns the group membership information for the given
// entity id
GroupsForEntity(context.Context, *EntityInfoArgs) (*GroupsForEntityReply, error)
// GeneratePasswordFromPolicy generates a password from an existing password policy
GeneratePasswordFromPolicy(context.Context, *GeneratePasswordFromPolicyRequest) (*GeneratePasswordFromPolicyReply, error)
}
SystemViewServer is the server API for SystemView service.
type TTLReply ¶
type TTLReply struct {
TTL int64 `sentinel:"" protobuf:"varint,1,opt,name=TTL,proto3" json:"TTL,omitempty"`
// contains filtered or unexported fields
}
func (*TTLReply) Descriptor
deprecated
func (*TTLReply) ProtoMessage ¶
func (*TTLReply) ProtoMessage()
func (*TTLReply) ProtoReflect ¶ added in v0.2.0
func (x *TTLReply) ProtoReflect() protoreflect.Message
type TaintedReply ¶
type TaintedReply struct {
Tainted bool `sentinel:"" protobuf:"varint,1,opt,name=tainted,proto3" json:"tainted,omitempty"`
// contains filtered or unexported fields
}
func (*TaintedReply) Descriptor
deprecated
func (*TaintedReply) Descriptor() ([]byte, []int)
Deprecated: Use TaintedReply.ProtoReflect.Descriptor instead.
func (*TaintedReply) GetTainted ¶
func (x *TaintedReply) GetTainted() bool
func (*TaintedReply) ProtoMessage ¶
func (*TaintedReply) ProtoMessage()
func (*TaintedReply) ProtoReflect ¶ added in v0.2.0
func (x *TaintedReply) ProtoReflect() protoreflect.Message
func (*TaintedReply) Reset ¶
func (x *TaintedReply) Reset()
func (*TaintedReply) String ¶
func (x *TaintedReply) String() string
type TokenEntry ¶
type TokenEntry struct {
ID string `sentinel:"" protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
Accessor string `sentinel:"" protobuf:"bytes,2,opt,name=accessor,proto3" json:"accessor,omitempty"`
Parent string `sentinel:"" protobuf:"bytes,3,opt,name=parent,proto3" json:"parent,omitempty"`
Policies []string `sentinel:"" protobuf:"bytes,4,rep,name=policies,proto3" json:"policies,omitempty"`
Path string `sentinel:"" protobuf:"bytes,5,opt,name=path,proto3" json:"path,omitempty"`
Meta map[string]string `` /* 161-byte string literal not displayed */
DisplayName string `sentinel:"" protobuf:"bytes,7,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
NumUses int64 `sentinel:"" protobuf:"varint,8,opt,name=num_uses,json=numUses,proto3" json:"num_uses,omitempty"`
CreationTime int64 `sentinel:"" protobuf:"varint,9,opt,name=creation_time,json=creationTime,proto3" json:"creation_time,omitempty"`
TTL int64 `sentinel:"" protobuf:"varint,10,opt,name=ttl,proto3" json:"ttl,omitempty"`
ExplicitMaxTTL int64 `sentinel:"" protobuf:"varint,11,opt,name=explicit_max_ttl,json=explicitMaxTtl,proto3" json:"explicit_max_ttl,omitempty"`
Role string `sentinel:"" protobuf:"bytes,12,opt,name=role,proto3" json:"role,omitempty"`
Period int64 `sentinel:"" protobuf:"varint,13,opt,name=period,proto3" json:"period,omitempty"`
EntityID string `sentinel:"" protobuf:"bytes,14,opt,name=entity_id,json=entityId,proto3" json:"entity_id,omitempty"`
BoundCIDRs []string `sentinel:"" protobuf:"bytes,15,rep,name=bound_cidrs,json=boundCidrs,proto3" json:"bound_cidrs,omitempty"`
NamespaceID string `sentinel:"" protobuf:"bytes,16,opt,name=namespace_id,json=namespaceID,proto3" json:"namespace_id,omitempty"`
CubbyholeID string `sentinel:"" protobuf:"bytes,17,opt,name=cubbyhole_id,json=cubbyholeId,proto3" json:"cubbyhole_id,omitempty"`
Type uint32 `sentinel:"" protobuf:"varint,18,opt,name=type,proto3" json:"type,omitempty"`
// contains filtered or unexported fields
}
func LogicalTokenEntryToProtoTokenEntry ¶
func LogicalTokenEntryToProtoTokenEntry(t *logical.TokenEntry) *TokenEntry
func (*TokenEntry) Descriptor
deprecated
func (*TokenEntry) Descriptor() ([]byte, []int)
Deprecated: Use TokenEntry.ProtoReflect.Descriptor instead.
func (*TokenEntry) GetAccessor ¶
func (x *TokenEntry) GetAccessor() string
func (*TokenEntry) GetBoundCIDRs ¶
func (x *TokenEntry) GetBoundCIDRs() []string
func (*TokenEntry) GetCreationTime ¶
func (x *TokenEntry) GetCreationTime() int64
func (*TokenEntry) GetCubbyholeID ¶
func (x *TokenEntry) GetCubbyholeID() string
func (*TokenEntry) GetDisplayName ¶
func (x *TokenEntry) GetDisplayName() string
func (*TokenEntry) GetEntityID ¶
func (x *TokenEntry) GetEntityID() string
func (*TokenEntry) GetExplicitMaxTTL ¶
func (x *TokenEntry) GetExplicitMaxTTL() int64
func (*TokenEntry) GetID ¶
func (x *TokenEntry) GetID() string
func (*TokenEntry) GetMeta ¶
func (x *TokenEntry) GetMeta() map[string]string
func (*TokenEntry) GetNamespaceID ¶
func (x *TokenEntry) GetNamespaceID() string
func (*TokenEntry) GetNumUses ¶
func (x *TokenEntry) GetNumUses() int64
func (*TokenEntry) GetParent ¶
func (x *TokenEntry) GetParent() string
func (*TokenEntry) GetPath ¶
func (x *TokenEntry) GetPath() string
func (*TokenEntry) GetPeriod ¶
func (x *TokenEntry) GetPeriod() int64
func (*TokenEntry) GetPolicies ¶
func (x *TokenEntry) GetPolicies() []string
func (*TokenEntry) GetRole ¶
func (x *TokenEntry) GetRole() string
func (*TokenEntry) GetTTL ¶
func (x *TokenEntry) GetTTL() int64
func (*TokenEntry) GetType ¶
func (x *TokenEntry) GetType() uint32
func (*TokenEntry) ProtoMessage ¶
func (*TokenEntry) ProtoMessage()
func (*TokenEntry) ProtoReflect ¶ added in v0.2.0
func (x *TokenEntry) ProtoReflect() protoreflect.Message
func (*TokenEntry) Reset ¶
func (x *TokenEntry) Reset()
func (*TokenEntry) String ¶
func (x *TokenEntry) String() string
type TypeReply ¶
type TypeReply struct {
Type uint32 `sentinel:"" protobuf:"varint,1,opt,name=type,proto3" json:"type,omitempty"`
// contains filtered or unexported fields
}
TypeReply is the reply for the Type method.
func (*TypeReply) Descriptor
deprecated
func (*TypeReply) ProtoMessage ¶
func (*TypeReply) ProtoMessage()
func (*TypeReply) ProtoReflect ¶ added in v0.2.0
func (x *TypeReply) ProtoReflect() protoreflect.Message
type UnimplementedBackendServer ¶
type UnimplementedBackendServer struct {
}
UnimplementedBackendServer can be embedded to have forward compatible implementations.
func (*UnimplementedBackendServer) HandleExistenceCheck ¶
func (*UnimplementedBackendServer) HandleExistenceCheck(context.Context, *HandleExistenceCheckArgs) (*HandleExistenceCheckReply, error)
func (*UnimplementedBackendServer) HandleRequest ¶
func (*UnimplementedBackendServer) HandleRequest(context.Context, *HandleRequestArgs) (*HandleRequestReply, error)
func (*UnimplementedBackendServer) Initialize ¶ added in v0.1.12
func (*UnimplementedBackendServer) Initialize(context.Context, *InitializeArgs) (*InitializeReply, error)
func (*UnimplementedBackendServer) InvalidateKey ¶
func (*UnimplementedBackendServer) InvalidateKey(context.Context, *InvalidateKeyArgs) (*Empty, error)
func (*UnimplementedBackendServer) Setup ¶
func (*UnimplementedBackendServer) Setup(context.Context, *SetupArgs) (*SetupReply, error)
func (*UnimplementedBackendServer) SpecialPaths ¶
func (*UnimplementedBackendServer) SpecialPaths(context.Context, *Empty) (*SpecialPathsReply, error)
type UnimplementedStorageServer ¶
type UnimplementedStorageServer struct {
}
UnimplementedStorageServer can be embedded to have forward compatible implementations.
func (*UnimplementedStorageServer) Delete ¶
func (*UnimplementedStorageServer) Delete(context.Context, *StorageDeleteArgs) (*StorageDeleteReply, error)
func (*UnimplementedStorageServer) Get ¶
func (*UnimplementedStorageServer) Get(context.Context, *StorageGetArgs) (*StorageGetReply, error)
func (*UnimplementedStorageServer) List ¶
func (*UnimplementedStorageServer) List(context.Context, *StorageListArgs) (*StorageListReply, error)
func (*UnimplementedStorageServer) Put ¶
func (*UnimplementedStorageServer) Put(context.Context, *StoragePutArgs) (*StoragePutReply, error)
type UnimplementedSystemViewServer ¶
type UnimplementedSystemViewServer struct {
}
UnimplementedSystemViewServer can be embedded to have forward compatible implementations.
func (*UnimplementedSystemViewServer) CachingDisabled ¶
func (*UnimplementedSystemViewServer) CachingDisabled(context.Context, *Empty) (*CachingDisabledReply, error)
func (*UnimplementedSystemViewServer) DefaultLeaseTTL ¶
func (*UnimplementedSystemViewServer) EntityInfo ¶
func (*UnimplementedSystemViewServer) EntityInfo(context.Context, *EntityInfoArgs) (*EntityInfoReply, error)
func (*UnimplementedSystemViewServer) GeneratePasswordFromPolicy ¶ added in v0.2.0
func (*UnimplementedSystemViewServer) GeneratePasswordFromPolicy(context.Context, *GeneratePasswordFromPolicyRequest) (*GeneratePasswordFromPolicyReply, error)
func (*UnimplementedSystemViewServer) GroupsForEntity ¶ added in v0.2.0
func (*UnimplementedSystemViewServer) GroupsForEntity(context.Context, *EntityInfoArgs) (*GroupsForEntityReply, error)
func (*UnimplementedSystemViewServer) LocalMount ¶
func (*UnimplementedSystemViewServer) LocalMount(context.Context, *Empty) (*LocalMountReply, error)
func (*UnimplementedSystemViewServer) MaxLeaseTTL ¶
func (*UnimplementedSystemViewServer) MlockEnabled ¶
func (*UnimplementedSystemViewServer) MlockEnabled(context.Context, *Empty) (*MlockEnabledReply, error)
func (*UnimplementedSystemViewServer) PluginEnv ¶
func (*UnimplementedSystemViewServer) PluginEnv(context.Context, *Empty) (*PluginEnvReply, error)
func (*UnimplementedSystemViewServer) ReplicationState ¶
func (*UnimplementedSystemViewServer) ReplicationState(context.Context, *Empty) (*ReplicationStateReply, error)
func (*UnimplementedSystemViewServer) ResponseWrapData ¶
func (*UnimplementedSystemViewServer) ResponseWrapData(context.Context, *ResponseWrapDataArgs) (*ResponseWrapDataReply, error)
func (*UnimplementedSystemViewServer) Tainted ¶
func (*UnimplementedSystemViewServer) Tainted(context.Context, *Empty) (*TaintedReply, error)