secrets

Documentation

Index

• func CyberArkAPIGatherer(cyberArkAPI *CyberArkAPI) func() (interface{}, error)
• func CyberArkCLIGatherer(cyberArkCLI *CyberArkCLI) func() (interface{}, error)
• func KMSGatherer(kms *KMS) func() (interface{}, error)
• func ObfuscateGatherer(obfuscated *Obfuscated) func() (interface{}, error)
• func VaultGatherer(vault *Vault) func() (interface{}, error)
• type CyberArkAPI
  • func (g *CyberArkAPI) Validate() error
• type CyberArkCLI
  • func (g *CyberArkCLI) Validate() error
• type KMS
  • func (k *KMS) Validate() error
• type Obfuscated
  • func (o *Obfuscated) Validate() error
• type Vault
  • func (g *Vault) Validate() error

Functions

func CyberArkAPIGatherer

func CyberArkAPIGatherer(cyberArkAPI *CyberArkAPI) func() (interface{}, error)

CyberArkAPIGatherer instantiates a CyberArkAPI variable gatherer from the given configuration. The result is a map with a single "password" key value pair

func CyberArkCLIGatherer

func CyberArkCLIGatherer(cyberArkCLI *CyberArkCLI) func() (interface{}, error)

CyberArkCLIGatherer instantiates a CyberArkCLI variable gatherer from the given configuration. The result is a map with a single "password" key value pair

func KMSGatherer

func KMSGatherer(kms *KMS) func() (interface{}, error)

KMSGatherer instantiates a KMS variable gatherer from the given configuration. The fetching process // will return either a map containing access paths to the stored JSON or ShortHand, or a string if the // stored secret is just a string. E.g. if the stored secret is `{"car":{"brand":"Opel","model":"Corsa"}}`, the returned Map contents will be: "car.brand" -> "Opel" "car.model" -> "Corsa"

func ObfuscateGatherer

func ObfuscateGatherer(obfuscated *Obfuscated) func() (interface{}, error)

ObfuscateGatherer instantiates a Obfuscate variable gatherer from the given configuration. The fetching process will return either a map containing access paths to the stored JSON. E.g. if the stored Secret is `{"account":{"user":"test1","password":"test2"}}`, the returned Map contents will be: "account.user" -> "test1" "account.password" -> "test2"

func VaultGatherer

func VaultGatherer(vault *Vault) func() (interface{}, error)

VaultGatherer instantiates a Vault variable gatherer from the given configuration. The fetching process will return either a map containing access paths to the stored JSON. E.g. if the stored secret is `{"person":{"name":"Matias","surname":"Burni"}}`, the returned Map contents will be: "person.name" -> "Matias" "person.surname" -> "Burni"

Types

type CyberArkAPI

type CyberArkAPI struct {
	HTTP *http
}

func (*CyberArkAPI) Validate

func (g *CyberArkAPI) Validate() error

type CyberArkCLI

type CyberArkCLI struct {
	CLI    string `yaml:"cli"`
	AppID  string `yaml:"app-id"`
	Safe   string `yaml:"safe"`
	Folder string `yaml:"folder"`
	Object string `yaml:"object"`
}

func (*CyberArkCLI) Validate

func (g *CyberArkCLI) Validate() error

type KMS

type KMS struct {
	Data           string
	File           string
	HTTP           *http
	CredentialFile string `yaml:"credential_file"`
	ConfigFile     string `yaml:"config_file"`
	Region         string `yaml:"region"`
	Endpoint       string `yaml:"endpoint"`
	DisableSSL     bool   `yaml:"disableSSL"`
	Type           string `yaml:"type,omitempty"` // can be 'json', 'equal' and 'plain' (default)
}

KMS defines the AWS-KMS data source

func (*KMS) Validate

func (k *KMS) Validate() error

Validate checks if the KMS configuration is correct

type Obfuscated

type Obfuscated struct {
	Key    string `yaml:"key"`
	Secret string `yaml:"secret"`
}

func (*Obfuscated) Validate

func (o *Obfuscated) Validate() error

type Vault

type Vault struct {
	HTTP *http
}

func (*Vault) Validate

func (g *Vault) Validate() error