vault

type AuthAppRole struct {
	RoleID        string         `yaml:"role_id" category:"experimental"`
	SecretID      flagext.Secret `yaml:"secret_id" category:"experimental"`
	WrappingToken bool           `yaml:"wrapping_token,omitempty" category:"experimental"`
	MountPath     string         `yaml:"mount_path,omitempty" category:"experimental"`
}

type AuthConfig struct {
	AuthType string `yaml:"type" category:"experimental"`

	AuthAppRole    AuthAppRole    `yaml:"approle,omitempty" category:"experimental"`
	AuthKubernetes AuthKubernetes `yaml:"kubernetes,omitempty" category:"experimental"`
	AuthUserPass   AuthUserPass   `yaml:"userpass,omitempty" category:"experimental"`
	AuthToken      AuthToken      `yaml:"token,omitempty" category:"experimental"`
}

type AuthKubernetes struct {
	RoleName                string         `yaml:"role_name" category:"experimental"`
	ServiceAccountToken     flagext.Secret `yaml:"service_account_token,omitempty" category:"experimental"`
	ServiceAccountTokenPath string         `yaml:"service_account_token_path,omitempty" category:"experimental"`
	MountPath               string         `yaml:"mount_path,omitempty" category:"experimental"`
}

type AuthToken struct {
	Token flagext.Secret `yaml:"token" category:"experimental"`
}

type AuthUserPass struct {
	Username  string         `yaml:"username" category:"experimental"`
	Password  flagext.Secret `yaml:"password" category:"experimental"`
	MountPath string         `yaml:"mount_path,omitempty" category:"experimental"`
}

type Config struct {
	Enabled bool `yaml:"enabled" category:"experimental"`

	URL       string     `yaml:"url" category:"experimental"`
	MountPath string     `yaml:"mount_path" category:"experimental"`
	Auth      AuthConfig `yaml:"auth" category:"experimental"`

	Mock SecretsEngine `yaml:"-"`
}

type SecretsEngine interface {
	Get(ctx context.Context, path string) (*hashivault.KVSecret, error)
}

type Vault struct {
	// contains filtered or unexported fields
}