vault

func (*Vault) ClearRotation ¶

func (v *Vault) ClearRotation(token, namespace, path string)

func (*Vault) CreateAndStoreChildCreationToken ¶

func (v *Vault) CreateAndStoreChildCreationToken(token, namespace string, policyPaths []string) error

Store an orphaned child token based on the token used to request rotation

This token will have a specific read only policy created against it but the ability to create child tokens.

func (*Vault) CreateEncryptionKey ¶

func (v *Vault) CreateEncryptionKey(policy *config.Policy) (string, error)

func (*Vault) Decrypt ¶

func (v *Vault) Decrypt(what, key string) string

Decrypt an encrypted string and return the plaintext

func (*Vault) Encrypt ¶

func (v *Vault) Encrypt(what, key string) string

encrypt a string and return the result

func (*Vault) GetEncryptionKey ¶

func (v *Vault) GetEncryptionKey() (string, error)

func (*Vault) GetToken ¶

func (v *Vault) GetToken(namespace, encryptionKey string) (string, error)

Get a response wrapped token for client usage

func (*Vault) Init ¶

func (v *Vault) Init() error

func (*Vault) Read ¶

func (v *Vault) Read(path, token, namespace string) (map[string]string, error)

Gets a list of credentials that need to be rotated on a machine

func (*Vault) Rotate ¶

func (v *Vault) Rotate(path, token, search, namespace string, compromised bool, logChannel *chan loki.SimpleMessage) []error

Rotates the contents of a path matching `search`

`search` can be either a key at a given path, or the secret value at a given path

If a match is found, the value stored at that key will be updated

func (*Vault) Search ¶

func (v *Vault) Search(password, token, namespace string, results *[]Result) error

/ Searches a vault namespace for a given password

func (*Vault) StoreEncryptionKey ¶

func (v *Vault) StoreEncryptionKey(key string) error

func (*Vault) Unwrap ¶

func (v *Vault) Unwrap(token, namespace string) (string, error)

Unwrap a response wrapped token - used in the agent

func (*Vault) Wrap ¶

func (v *Vault) Wrap(what interface{}) (string, error)

response wrap a given piece of information and return the secret assigned to that wrap.