envtypes

type AWS struct {
	Region                  string `desc:"The AWS region to use."`
	AccessKeyID             string `envconfig:"ACCESS_KEY_ID" desc:"The AWS access key ID to use for authenticating with AWS."`
	AccessKeySecret         string `split_words:"true" desc:"The AWS access key secret to use for authenticating with AWS."`
	CertificateAuthorityARN string `envconfig:"CERTIFICATE_AUTHORITY_ARN" desc:"The ARN of a pre-created CA which will be used to issue the certificates."`
	TimeToLive              int    `default:"30" desc:"The lifetime of certificates requested from the AWS CA, in number of days."`
}

type AuthMethod int

type CFSSL struct {
	URL        url.URL `desc:"The URL of the CFSSL server."`
	CACertPath string  `` /* 133-byte string literal not displayed */
	Profile    string  `desc:"The profile on the CFSSL server that should be used. If unset, the default profile will be used."`
	AuthKey    string  `split_words:"true" desc:"Optionally defines an authentication key to use when connecting to CFSSL."`
}

type Issuer int

type KeyGenerator func() (crypto.PrivateKey, error)

type LogFormat func(*logrus.Entry) ([]byte, error)

type Vault struct {
	URL                     url.URL    `desc:"The URL of the Vault instance."`
	Token                   string     `desc:"The Vault secret token that should be used when issuing certificates. DEPRECATED; use AuthMethod instead."`
	AuthMethod              AuthMethod `split_words:"true" desc:"The method to use for authenticating against Vault. Supported methods are constant and renewing."`
	AuthMethodRenewingToken struct {
		Initial     string        `desc:"The token used to initially authenticate against Vault. It must be renewable."`
		RenewBefore time.Duration `split_words:"true" default:"30m" desc:"How long before the expiry of the token it should be renewed."`
		TimeToLive  time.Duration `split_words:"true" default:"24h" desc:"How long the new token should be valid for."`
	} `split_words:"true" desc:"Configuration of the renewing token."`
	AuthMethodConstantToken      vault.ConstantToken `split_words:"true" desc:"The constant token to use when talking to Vault."`
	Mount                        string              `default:"pki" desc:"The name under which the PKI secrets engine is mounted."`
	Role                         string              `desc:"The Vault Role that should be used when issuing certificates."`
	CACertPath                   string              `` /* 133-byte string literal not displayed */
	TimeToLive                   time.Duration       `split_words:"true" default:"720h" desc:"Configures the lifetime of certificates requested from the Vault server."`
	URISubjectAlternativeNames   []string            `` /* 213-byte string literal not displayed */
	OtherSubjectAlternativeNames []string            `` /* 223-byte string literal not displayed */
}