vault_client

type ApproleAuthMethod struct {
	// contains filtered or unexported fields
}

type ApproleLoginResponse struct {
	Auth struct {
		// LeaseDuration is how long this token lives for in seconds
		LeaseDuration int `json:"lease_duration"`

		// Accessor is an accessor that can be used to lookup this token
		Accessor string `json:"accessor"`

		// ClientToken is the actual token
		ClientToken cfg.SecretData `json:"client_token"`

		// TokenPolicies is a list of policies that are attached to this token
		TokenPolicies []string `json:"token_policies"`
	} `json:"auth"`
}

type AuthMethod interface {
	// GetToken returns the token to use when talking to Vault
	GetToken(ctx context.Context) (token cfg.SecretData, expiresAt time.Time, err error)

	// Options provides the current client options, useful for auth methods
	// that need an underlying vault client to function.
	Options(*Options)
}

type Client struct {
	// contains filtered or unexported fields
}

type CreateApproleOptions struct {
	// Name is the name of the approle to create
	Name string `json:"-"`

	TokenTTL      string   `json:"token_ttl,omitempty"`
	TokenMaxTTL   string   `json:"token_max_ttl,omitempty"`
	TokenPolicies []string `json:"token_policies,omitempty"`
	Period        int      `json:"period,omitempty"`
	BindSecretID  bool     `json:"bind_secret_id,omitempty"`
}

type CreateApproleSecretIDResponse struct {
	SecretIDAccessor string         `json:"secret_id_accessor"`
	SecretID         cfg.SecretData `json:"secret_id"`
	SecretIDTTL      int            `json:"secret_id_ttl"`
}

type CreateAuthMethodOptions struct {
	// Path is the path that this auth method should be mounted on.
	// If not set, type is used.
	Path string `json:"-"`

	// Description is an optional description of this auth method, for humans
	Description string `json:"description,omitempty"`

	// Type is the type of auth method to create. Required.
	// Options: https://www.vaultproject.io/api-docs/system/auth#type
	Type string `json:"type,omitempty"`

	// Config is auth method specific options, see: https://www.vaultproject.io/api-docs/system/auth#config
	Config map[string]interface{} `json:"config,omitempty"`
}

type CreateEngineOptions struct {
	// Description is an optional description of this auth method, for humans
	Description string `json:"description,omitempty"`

	// Type is the type of engine to create. Required.
	// Options: https://www.vaultproject.io/api-docs/system/mounts#type
	Type string `json:"type,omitempty"`

	// Config is auth method specific options, see: https://www.vaultproject.io/api-docs/system/mounts#config
	Config map[string]interface{} `json:"config,omitempty"`

	// Options are options specific to the given engine, see: https://www.vaultproject.io/api-docs/system/mounts#options
	Options map[string]interface{} `json:"options,omitempty"`
}

type ErrorResponse struct {
	// Errors is a list of errors that were encountered when Vault tried
	// to process this request.
	Errors []string `json:"errors"`
}

type HealthResponse struct {
	Initialized         bool   `json:"initialized"`
	Sealed              bool   `json:"sealed"`
	Standby             bool   `json:"standby"`
	PerformanceStandby  bool   `json:"performance_standby"`
	ReplicationPerfMode string `json:"replication_perf_mode"`
	ReplicationDrMode   string `json:"replication_dr_mode"`
	ServerTimeUtc       int    `json:"server_time_utc"`
	Version             string `json:"version"`
	ClusterName         string `json:"cluster_name"`
	ClusterID           string `json:"cluster_id"`
}

type InitializeOptions struct {
	// SecretShares are how many secret shares to break the unseal key into
	SecretShares int `json:"secret_shares"`

	// SecretThreshold is how many of the secret shares should be provided
	// to be able to unseal the Vault. This must not be more than SecretShares.
	SecretThreshold int `json:"secret_threshold"`

	// RecoveryShares are how many recovery shares to split the recovery key into
	// This is only required when Vault is in autounseal mode.
	RecoveryShares int `json:"recovery_shares,omitempty"`
	// RecoveryThreshold is how many of the recovery shares should be provided for
	// an operation that requires the recovery key.
	RecoveryThreshold int `json:"recovery_threshold,omitempty"`
}

type InitializeResponse struct {
	// Keys are the keys returned by the initialization call
	Keys []string `json:"keys"`

	// RecoveryKeys are the recovery keys returned by initialization.
	// These are only present when the underlying Vault configuration is
	// setup to be auto-unsealed.
	RecoveryKeys []string `json:"recovery_keys"`

	// RootToken is the Vault root token returned by the initialization call
	RootToken string `json:"root_token"`
}

type KV2Secret struct {
	Metadata struct {
		// CreatedTime is when this secret was created
		CreatedTime string `json:"created_time"`

		// DeletionTime is when this secret was destroyed
		DeletionTime string `json:"deletion_time"`

		// Destroyed denotes if this secret was destroyed or not
		Destroyed bool `json:"destroyed"`

		// Version is the current version (revision) of this secret
		Version int `json:"version"`
	} `json:"metadata"`

	// Data contains the data that makes up this secret
	Data map[string]interface{} `json:"data"`
}

type LookupTokenResponse struct {
	Accessor         string    `json:"accessor"`
	CreationTime     int       `json:"creation_time"`
	CreationTTL      int       `json:"creation_ttl"`
	DisplayName      string    `json:"display_name"`
	EntityID         string    `json:"entity_id"`
	ExpireTime       time.Time `json:"expire_time"`
	ExplicitMaxTTL   int       `json:"explicit_max_ttl"`
	ID               string    `json:"id"`
	IdentityPolicies []string  `json:"identity_policies"`
	IssueTime        string    `json:"issue_time"`
	Meta             struct {
		Username string `json:"username"`
	} `json:"meta"`
	NumUses   int      `json:"num_uses"`
	Orphan    bool     `json:"orphan"`
	Path      string   `json:"path"`
	Policies  []string `json:"policies"`
	Renewable bool     `json:"renewable"`
	TTL       int      `json:"ttl"`
}

type Options struct {

	// Host is the host of the Vault instance
	Host string
	// contains filtered or unexported fields
}

type Opts func(*Options)

type TokenAuthMethod struct {
	// contains filtered or unexported fields
}

type TokenFileAuthMethod struct {
	// contains filtered or unexported fields
}