vault

Documentation

Index

• func CreateVaultSdkClient(vaultAddress string, vaultCaCertFilePath string, logger log.Logger) (*api.Client, error)
• func DecodeCert(cert []byte) (x509.Certificate, error)
• func InsertNth(s string, n int) string
• func Login(client *api.Client, roleID string, secretID string) error
• func ToHexInt(n *big.Int) string
• func Unseal(client *api.Client, unsealFile string, logger log.Logger) error
• type LoggingRoundTripper
  • func NewLoggingRoundTripper(next http.RoundTripper) *LoggingRoundTripper
  • func (lrt LoggingRoundTripper) RoundTrip(req *http.Request) (res *http.Response, e error)
• type VaultSecrets
  • func NewVaultSecrets(address string, pkiPath string, roleID string, secretID string, CA string, ...) (*VaultSecrets, error)
  • func NewVaultSecretsWithClient(client *api.Client, address string, pkiPath string, roleID string, ...) (*VaultSecrets, error)
  • func (vs *VaultSecrets) CreateCA(ctx context.Context, caType secrets.CAType, CAName string, ca secrets.Cert) (secrets.Cert, error)
  • func (vs *VaultSecrets) DeleteCA(ctx context.Context, caType secrets.CAType, ca string) error
  • func (vs *VaultSecrets) DeleteCert(ctx context.Context, caType secrets.CAType, caName string, serialNumber string) error
  • func (vs *VaultSecrets) GetCA(ctx context.Context, caType secrets.CAType, caName string) (secrets.Cert, error)
  • func (vs *VaultSecrets) GetCAs(ctx context.Context, caType secrets.CAType) (secrets.Certs, error)
  • func (vs *VaultSecrets) GetCert(ctx context.Context, caType secrets.CAType, caName string, serialNumber string) (secrets.Cert, error)
  • func (vs *VaultSecrets) GetIssuedCerts(ctx context.Context, caType secrets.CAType, caName string) (secrets.Certs, error)
  • func (vs *VaultSecrets) GetSecretProviderName(ctx context.Context) string
  • func (vs *VaultSecrets) ImportCA(ctx context.Context, caType secrets.CAType, CAName string, ...) error
  • func (vs *VaultSecrets) SignCertificate(ctx context.Context, caType secrets.CAType, caName string, ...) (string, error)

Functions

func CreateVaultSdkClient

func CreateVaultSdkClient(vaultAddress string, vaultCaCertFilePath string, logger log.Logger) (*api.Client, error)

func DecodeCert

func DecodeCert(cert []byte) (x509.Certificate, error)

func InsertNth

func InsertNth(s string, n int) string

func Login

func Login(client *api.Client, roleID string, secretID string) error

func ToHexInt

func ToHexInt(n *big.Int) string

func Unseal

func Unseal(client *api.Client, unsealFile string, logger log.Logger) error

Types

type LoggingRoundTripper

type LoggingRoundTripper struct {
	// contains filtered or unexported fields
}

This type implements the http.RoundTripper interface

func NewLoggingRoundTripper

func NewLoggingRoundTripper(next http.RoundTripper) *LoggingRoundTripper

func (LoggingRoundTripper) RoundTrip

func (lrt LoggingRoundTripper) RoundTrip(req *http.Request) (res *http.Response, e error)

type VaultSecrets

type VaultSecrets struct {
	// contains filtered or unexported fields
}

func NewVaultSecrets

func NewVaultSecrets(address string, pkiPath string, roleID string, secretID string, CA string, unsealFile string, ocspUrl string, logger log.Logger) (*VaultSecrets, error)

func NewVaultSecretsWithClient

func NewVaultSecretsWithClient(client *api.Client, address string, pkiPath string, roleID string, secretID string, CA string, unsealFile string, ocspUrl string, logger log.Logger) (*VaultSecrets, error)

func (*VaultSecrets) CreateCA

func (vs *VaultSecrets) CreateCA(ctx context.Context, caType secrets.CAType, CAName string, ca secrets.Cert) (secrets.Cert, error)

func (*VaultSecrets) DeleteCA

func (vs *VaultSecrets) DeleteCA(ctx context.Context, caType secrets.CAType, ca string) error

func (*VaultSecrets) DeleteCert

func (vs *VaultSecrets) DeleteCert(ctx context.Context, caType secrets.CAType, caName string, serialNumber string) error

func (*VaultSecrets) GetCA

func (vs *VaultSecrets) GetCA(ctx context.Context, caType secrets.CAType, caName string) (secrets.Cert, error)

func (*VaultSecrets) GetCAs

func (vs *VaultSecrets) GetCAs(ctx context.Context, caType secrets.CAType) (secrets.Certs, error)

func (*VaultSecrets) GetCert

func (vs *VaultSecrets) GetCert(ctx context.Context, caType secrets.CAType, caName string, serialNumber string) (secrets.Cert, error)

func (*VaultSecrets) GetIssuedCerts

func (vs *VaultSecrets) GetIssuedCerts(ctx context.Context, caType secrets.CAType, caName string) (secrets.Certs, error)

func (*VaultSecrets) GetSecretProviderName

func (vs *VaultSecrets) GetSecretProviderName(ctx context.Context) string

func (*VaultSecrets) ImportCA

func (vs *VaultSecrets) ImportCA(ctx context.Context, caType secrets.CAType, CAName string, caImport secrets.CAImport) error

func (*VaultSecrets) SignCertificate

func (vs *VaultSecrets) SignCertificate(ctx context.Context, caType secrets.CAType, caName string, csr *x509.CertificateRequest, signVerbatim bool) (string, error)