vaultutil

Documentation

Index

• Constants
• func DecodeSecret[T any](manager *Manager, path string) (T, error)
• func KubernetesToken(client *api.Client, role string) (*api.Secret, error)
• type Manager
  • func Init(ctx context.Context, params Params) (*Manager, error)
  • func (m *Manager) AWSConfig(ctx context.Context) (*aws.Config, error)
  • func (m *Manager) AWSCredentialsProvider() aws.CredentialsProvider
  • func (m *Manager) GetClient() *api.Client
• type Params
  • func (p *Params) Bind(cmd *cobra.Command)
  • func (p *Params) BindAWS(cmd *cobra.Command)

Constants

const (
	KubernetesTokenPath      = "/run/secrets/kubernetes.io/serviceaccount/token"
	KubernetesAuthMountPoint = "kubernetes"
)

const (
	RenewIntervalSeconds = 1800
)

Functions

func DecodeSecret

func DecodeSecret[T any](manager *Manager, path string) (T, error)

func KubernetesToken

func KubernetesToken(client *api.Client, role string) (*api.Secret, error)

Types

type Manager

type Manager struct {
	// contains filtered or unexported fields
}

func Init

func Init(ctx context.Context, params Params) (*Manager, error)

func (*Manager) AWSConfig

func (m *Manager) AWSConfig(ctx context.Context) (*aws.Config, error)

func (*Manager) AWSCredentialsProvider

func (m *Manager) AWSCredentialsProvider() aws.CredentialsProvider

func (*Manager) GetClient

func (m *Manager) GetClient() *api.Client

type Params

type Params struct {
	Address string
	Role    string
	Token   string

	AWSRole       string
	AWSEnginePath string
}

func (*Params) Bind

func (p *Params) Bind(cmd *cobra.Command)

func (*Params) BindAWS

func (p *Params) BindAWS(cmd *cobra.Command)