vault

Jan 3, 2024

Changes in this version

+ var ErrAccessKeyId = errors.New("access key id must be defined for vault authorization with AWS IAM auth")

+ var ErrAuthNotDefined = errors.New("auth method not defined")

+ var ErrEmptyToken = errors.New("unable to authenticate to vault with empty token")

+ var ErrInitializeWatcher = func(err error) error

+ var ErrNoAuthInfo = errors.New("no auth info was returned after login")

+ var ErrPartialCredentials = func(err error) error

+ var ErrSecretAccessKey = errors.New("secret access key must be defined for vault authorization with AWS IAM auth")

+ var ErrVaultAuthentication = func(err error) error

+ var MLastLoginFailure = utils.Int64Measure("gloo.solo.io/vault/last_login_failure", ...)

+ var MLastLoginFailureView = utils.ViewForCounter(MLastLoginFailure, view.LastValue())

+ var MLastLoginSuccess = utils.Int64Measure("gloo.solo.io/vault/last_login_success", ...)

+ var MLastLoginSuccessView = utils.ViewForCounter(MLastLoginSuccess, view.LastValue())

+ var MLastRenewFailure = utils.Int64Measure("gloo.solo.io/vault/last_renew_failure", ...)

+ var MLastRenewFailureView = utils.ViewForCounter(MLastRenewFailure, view.LastValue())

+ var MLastRenewSuccess = utils.Int64Measure("gloo.solo.io/vault/last_renew_success", ...)

+ var MLastRenewSuccessView = utils.ViewForCounter(MLastRenewSuccess, view.LastValue())

+ var MLoginFailures = utils.Int64Measure("gloo.solo.io/vault/login_failures", ...)

+ var MLoginFailuresView = utils.ViewForCounter(MLoginFailures, view.Sum())

+ var MLoginSuccesses = utils.Int64Measure("gloo.solo.io/vault/login_successes", ...)

+ var MLoginSuccessesView = utils.ViewForCounter(MLoginSuccesses, view.Sum())

+ var MRenewFailures = utils.Int64Measure("gloo.solo.io/vault/renew_failures", ...)

+ var MRenewFailuresView = utils.ViewForCounter(MRenewFailures, view.Sum())

+ var MRenewSuccesses = utils.Int64Measure("gloo.solo.io/vault/renew_successes", ...)

+ var MRenewSuccessesView = utils.ViewForCounter(MRenewSuccesses, view.Sum())

+ func AuthenticateClient(ctx context.Context, client *vault.Client, clientAuth ClientAuth) (*vault.Secret, error)

+ func NewAuthenticatedClient(ctx context.Context, vaultSettings *v1.Settings_VaultSecrets, ...) (*vault.Client, error)

+ func NewUnauthenticatedClient(vaultSettings *v1.Settings_VaultSecrets) (*vault.Client, error)

+ type ClientAuth interface

+ ManageTokenRenewal func(ctx context.Context, client *vault.Client, secret *vault.Secret)

+ func ClientAuthFactory(vaultSettings *v1.Settings_VaultSecrets) (ClientAuth, error)

+ func NewRemoteTokenAuth(authMethod vault.AuthMethod, t TokenRenewer, retryOptions ...retry.Option) ClientAuth

+ func NewStaticTokenAuth(token string) ClientAuth

+ type NewVaultTokenRenewerParams struct

+ GetWatcher getWatcherFunc

+ LeaseIncrement int

+ RetryOnNonRenewableSleep int

+ type RemoteTokenAuth struct

+ func (r *RemoteTokenAuth) Login(ctx context.Context, client *vault.Client) (*vault.Secret, error)

+ func (r *RemoteTokenAuth) ManageTokenRenewal(ctx context.Context, client *vault.Client, secret *vault.Secret)

+ type StaticTokenAuth struct

+ func (*StaticTokenAuth) ManageTokenRenewal(ctx context.Context, client *vault.Client, secret *vault.Secret)

+ func (s *StaticTokenAuth) GetToken() string

+ func (s *StaticTokenAuth) Login(ctx context.Context, _ *vault.Client) (*vault.Secret, error)

+ type TokenRenewer interface

+ ManageTokenRenewal func(ctx context.Context, client *vault.Client, clientAuth ClientAuth, ...)

+ type TokenWatcher interface

+ DoneCh func() <-chan error

+ RenewCh func() <-chan *vault.RenewOutput

+ Start func()

+ Stop func()

+ type VaultTokenRenewer struct

+ func NewVaultTokenRenewer(params *NewVaultTokenRenewerParams) *VaultTokenRenewer

+ func (r *VaultTokenRenewer) RenewToken(ctx context.Context, client *vault.Client, clientAuth ClientAuth, ...) error

+ func (t *VaultTokenRenewer) ManageTokenRenewal(ctx context.Context, client *vault.Client, clientAuth ClientAuth, ...)