vault

Documentation

Index

• Constants
• type ApproleAuth
  • func NewApproleAuth(roleId string, secretId *approle.SecretID) (*ApproleAuth, error)
  • func (a *ApproleAuth) Login(ctx context.Context, client *vault.Client) (*vault.Secret, error)
  • func (a *ApproleAuth) Logout(ctx context.Context, client *vault.Client) error
• type Auth
• type AutoRenew
  • func NewAutoRenew(auth Auth, done chan bool) (*AutoRenew, error)
  • func (t *AutoRenew) Login(ctx context.Context, client *api.Client) (*api.Secret, error)
  • func (t *AutoRenew) Logout(ctx context.Context, client *api.Client) error
• type AwsDynamicCredentials
• type ImplicitAuth
  • func NewImplicitAuth(tokenLocations ...string) (*ImplicitAuth, error)
  • func (t *ImplicitAuth) Login(_ context.Context, _ *api.Client) (*api.Secret, error)
  • func (t *ImplicitAuth) Logout(_ context.Context, _ *api.Client) error
• type KubernetesAuth
  • func NewVaultKubernetesAuth(role string, mountPath string) (*KubernetesAuth, error)
  • func (t *KubernetesAuth) Login(ctx context.Context, client *api.Client) (*api.Secret, error)
  • func (t *KubernetesAuth) Logout(ctx context.Context, client *api.Client) error
• type TokenAuth
  • func NewTokenAuth(token string) (*TokenAuth, error)
  • func (t *TokenAuth) Login(_ context.Context, _ *api.Client) (*api.Secret, error)
  • func (t *TokenAuth) Logout(_ context.Context, _ *api.Client) error
• type VaultBackend
  • func NewVaultBackend(vaultConfig config.VaultConfig, auth Auth) (*VaultBackend, error)
  • func (vault *VaultBackend) Authenticate() error
  • func (vault *VaultBackend) Logout() error
  • func (vault *VaultBackend) ReadAccount(hash string) (*certstorage.AcmeAccount, error)
  • func (vault *VaultBackend) ReadAwsCredentials() (aws.Credentials, error)
  • func (vault *VaultBackend) ReadFullCertificateData(domain string) (*certstorage.AcmeCertificate, error)
  • func (vault *VaultBackend) ReadPublicCertificateData(domain string) (*certstorage.AcmeCertificate, error)
  • func (vault *VaultBackend) WriteAccount(acmeRegistration certstorage.AcmeAccount) error
  • func (vault *VaultBackend) WriteCertificate(resource *certstorage.AcmeCertificate) error

Constants

const ApproleAuthName = "approle"

const (
	ImplicitAuthName = "implicit"
)

const (
	KubernetesAuthName = "kubernetes"
)

const TokenAuthName = "token"

Types

type ApproleAuth

type ApproleAuth struct {
	// contains filtered or unexported fields
}

func NewApproleAuth

func NewApproleAuth(roleId string, secretId *approle.SecretID) (*ApproleAuth, error)

func (*ApproleAuth) Login

func (a *ApproleAuth) Login(ctx context.Context, client *vault.Client) (*vault.Secret, error)

func (*ApproleAuth) Logout

func (a *ApproleAuth) Logout(ctx context.Context, client *vault.Client) error

type Auth

type Auth interface {
	Login(ctx context.Context, client *api.Client) (*api.Secret, error)
	Logout(ctx context.Context, client *api.Client) error
}

type AutoRenew

type AutoRenew struct {
	// contains filtered or unexported fields
}

func NewAutoRenew

func NewAutoRenew(auth Auth, done chan bool) (*AutoRenew, error)

func (*AutoRenew) Login

func (t *AutoRenew) Login(ctx context.Context, client *api.Client) (*api.Secret, error)

func (*AutoRenew) Logout

func (t *AutoRenew) Logout(ctx context.Context, client *api.Client) error

type AwsDynamicCredentials

type AwsDynamicCredentials struct {
	AccessKeyId     string
	SecretAccessKey string
	Expiry          time.Time
}

type ImplicitAuth

type ImplicitAuth struct {
	// contains filtered or unexported fields
}

func NewImplicitAuth

func NewImplicitAuth(tokenLocations ...string) (*ImplicitAuth, error)

func (*ImplicitAuth) Login

func (t *ImplicitAuth) Login(_ context.Context, _ *api.Client) (*api.Secret, error)

func (*ImplicitAuth) Logout

func (t *ImplicitAuth) Logout(_ context.Context, _ *api.Client) error

type KubernetesAuth

type KubernetesAuth struct {
	// contains filtered or unexported fields
}

func NewVaultKubernetesAuth

func NewVaultKubernetesAuth(role string, mountPath string) (*KubernetesAuth, error)

func (*KubernetesAuth) Login

func (t *KubernetesAuth) Login(ctx context.Context, client *api.Client) (*api.Secret, error)

func (*KubernetesAuth) Logout

func (t *KubernetesAuth) Logout(ctx context.Context, client *api.Client) error

type TokenAuth

type TokenAuth struct {
	// contains filtered or unexported fields
}

func NewTokenAuth

func NewTokenAuth(token string) (*TokenAuth, error)

func (*TokenAuth) Login

func (t *TokenAuth) Login(_ context.Context, _ *api.Client) (*api.Secret, error)

func (*TokenAuth) Logout

func (t *TokenAuth) Logout(_ context.Context, _ *api.Client) error

type VaultBackend

type VaultBackend struct {
	// contains filtered or unexported fields
}

func NewVaultBackend

func NewVaultBackend(vaultConfig config.VaultConfig, auth Auth) (*VaultBackend, error)

func (*VaultBackend) Authenticate

func (vault *VaultBackend) Authenticate() error

func (*VaultBackend) Logout

func (vault *VaultBackend) Logout() error

func (*VaultBackend) ReadAccount

func (vault *VaultBackend) ReadAccount(hash string) (*certstorage.AcmeAccount, error)

func (*VaultBackend) ReadAwsCredentials

func (vault *VaultBackend) ReadAwsCredentials() (aws.Credentials, error)

func (*VaultBackend) ReadFullCertificateData

func (vault *VaultBackend) ReadFullCertificateData(domain string) (*certstorage.AcmeCertificate, error)

func (*VaultBackend) ReadPublicCertificateData

func (vault *VaultBackend) ReadPublicCertificateData(domain string) (*certstorage.AcmeCertificate, error)

func (*VaultBackend) WriteAccount

func (vault *VaultBackend) WriteAccount(acmeRegistration certstorage.AcmeAccount) error

func (*VaultBackend) WriteCertificate

func (vault *VaultBackend) WriteCertificate(resource *certstorage.AcmeCertificate) error