secrets

Documentation

Index

• Variables
• func NoopSymmetricProvider(_ string) ([]byte, error)
• type Manager
• type OpenPGPSecret
  • func OpenPGPFromConfig(conf *SecretsConfig) *OpenPGPSecret
• type SecretsConfig
• type SymmetricProvider
  • func ProviderFromConfig(conf *SecretsConfig) SymmetricProvider
• type SymmetricSecret

Variables

var NoopSecretManager = Manager{
	Provider: NoopSymmetricProvider,
	OpenPGP:  nil,
}

NoopSecretManager is an empty secret manager

Functions

func NoopSymmetricProvider

func NoopSymmetricProvider(_ string) ([]byte, error)

NoopSymmetricProvider returns an empty provider

Types

type Manager

type Manager struct {
	Provider SymmetricProvider
	OpenPGP  *OpenPGPSecret
}

type OpenPGPSecret

type OpenPGPSecret struct {
	// A private (though not secret) identifier that points to a PGP keyring that this instance of hoard
	// will use to provide PGP grants
	PrivateID string
	File      string
	Data      []byte
}

func OpenPGPFromConfig

func OpenPGPFromConfig(conf *SecretsConfig) *OpenPGPSecret

OpenPGPFromConfig reads a given PGP keyring

type SecretsConfig

type SecretsConfig struct {
	Symmetric []SymmetricSecret
	OpenPGP   *OpenPGPSecret
}

SecretsConfig lists the configured secrets, Symmetric secrets are those local to the running daemon and OpenPGP identifies an entity in the given keyring

type SymmetricProvider

type SymmetricProvider func(secretID string) ([]byte, error)

func ProviderFromConfig

func ProviderFromConfig(conf *SecretsConfig) SymmetricProvider

ProviderFromConfig creates a secret reader from a set of symmetric secrets

type SymmetricSecret

type SymmetricSecret struct {
	// An identifier for this secret that will be stored in the clear with the grant
	PublicID   string
	Passphrase string
}