service

type AggregateError struct {
	// contains filtered or unexported fields
}

type AuthMethod uint

type AuthenticatedVaultClient struct {
	// contains filtered or unexported fields
}

type CA interface {
	// CreateETCDMembers creates a CA that issues ETCD member certificates.
	CreateETCDMembers(clusterID, domainName string, force bool) error
	// CreateK8sAll creates CA's that issues K8S member certificates for all K8S components.
	// Each component gets its own CA.
	CreateK8sAll(clusterID, domainName string, force bool) error
	// CreateK8s creates a CA that issues K8S member certificates for the various K8S components.
	CreateK8s(clusterID, component, domainName string, force bool) error
	// IssueETCDCertificate issues a new certificate for a specific service.
	IssueETCDCertificate(clusterID string, config IssueConfig) error
	// IssueK8sCertificate issues a new certificate for a specific service.
	IssueK8sCertificate(clusterID string, config IssueConfig) error
	// IssueCertificate issues a new certificate for a specific service.
	IssueCertificate(clusterID, service string, config IssueConfig) error
	// ListETCDCertificates issues a new certificate for a specific service.
	ListETCDCertificates(clusterID string) error
	// ListK8sCertificates issues a new certificate for a specific service.
	ListK8sCertificates(clusterID string) error
	// ListCertificates issues a new certificate for a specific service.
	ListCertificates(clusterID, service string) error
	// TidyETCDCertificates performs cleanup of the expired ETCD certificates.
	TidyETCDCertificates(clusterID string, options TidyOptions) error
	// TidyK8sCertificates performs cleanup of the expired kubernetes certificates.
	TidyK8sCertificates(clusterID string, options TidyOptions) error
	// TidyCertificates performs cleanup of expired certificates for a specific service.
	TidyCertificates(clusterID, service string, options TidyOptions) error
}

type Cluster interface {
	// Create creates the app-id mapping for a cluster with given id.
	// It also creates and uses a policy for accessing only the jobs within the cluster.
	Create(clusterID string) error
	// Delete removes the app-id mapping for a cluster with given id.
	// It also removes the policy for accessing only the jobs within the cluster.
	Delete(clusterID string) error
	// AddMachine creates the user-id mapping for adding a machine to a cluster.
	AddMachine(clusterID, machineID, cidrBlock string) error
	// RemoveMachine removes the user-id mapping for removing a machine from a cluster.
	RemoveMachine(clusterID, machineID string) error
}

type EnvSecret struct {
	SecretPath     string
	SecretField    string
	EnvironmentKey string
}

type FileSecret struct {
	SecretPath  string
	SecretField string
}

type GithubLoginData struct {
	GithubToken string
	Mount       string // defaults to "github"
}

type IssueConfig struct {
	Role                string
	CommonName          string
	AltNames            []string
	IPSans              []string
	OutputDir           string
	CertificateFileName string
	KeyFileName         string
	CAFileName          string
	FileMode            uint32
}

type Job interface {
	// Create creates the authentication mapping for a job with given id.
	Create(jobID, policyName string) error
	// Delete removes the authentication mapping for a job with given id.
	Delete(jobID string) error
	// AllowCluster creates the user-id mapping for allowing a cluster access to the secrets of a job.
	AllowCluster(jobID, clusterID string) error
	// DenyCluster removes the user-id mapping so the cluster is denied access to the secrets of a job.
	DenyCluster(jobID, clusterID string) error
}

type K8sClient struct {
	// contains filtered or unexported fields
}

type ServerLoginData interface {
	JobID() (string, error)
	ClusterID() (string, error)
	MachineID() (string, error)
}

type TidyOptions struct {
	TidyCertificateStore bool
	TidyRevocationList   bool
	SafetyBuffer         time.Duration
}

type TokenConfig struct {
	Policies []string
	Role     string
	Template string
	WrapTTL  string
}

type VaultClient struct {
	Address string
	Client  *api.Client
}

type VaultService struct {
	// contains filtered or unexported fields
}

type VaultServiceConfig struct {
	VaultAddr      string // URL of the vault
	VaultCACert    string // Path to a PEM-encoded CA cert file to use to verify the Vault server SSL certificate
	VaultCAPath    string // Path to a directory of PEM-encoded CA cert files to verify the Vault server SSL certificate
	TokenPath      string // Path of a file containing the login token
	IPv4Only       bool   // If set, only use IPv4 addresses
	IPv6Only       bool   // If set, only use IPv6 addresses
	DisableAppID   bool   // If set, AppID authentication is disabled
	DisableAppRole bool   // If set, AppRole authentication is disabled
}