model

type KubernetesCertificateData struct {
	CACertificate string
	Token         string
}

type VaultAuthAccessor struct {
	Name  string
	Rules string
}

type VaultAuthType string

type VaultInitializationData struct {
	JWTRoles        []*VaultJWTRole
	KubernetesRoles []*VaultKubernetesRole
	Policies        []*VaultPolicy
	Plugins         []*vaultapi.RegisterPluginInput
	SecretEngines   []*VaultSecretEngine
}

type VaultInitializationManager interface {
	InitializeVault(ctx context.Context, vaultInitializationData *VaultInitializationData) error
}

type VaultJWTRole struct {
	Name           string
	RoleType       string
	BoundAudiences []string
	UserClaim      string
	TokenType      string
	TokenPolicies  []string
	ClaimMappings  map[string]string
}

type VaultKeys struct {
	RootToken  string
	UnsealKeys []string
}

type VaultKubernetesRole struct {
	BoundServiceAccountNames      []string
	BoundServiceAccountNamespaces []string
	Name                          string
	Policies                      []string
	TTL                           string
}

type VaultPolicy struct {
	Name  string
	Rules string
}

type VaultSecretEngine struct {
	Path        string
	Type        string
	Description string
}

type VaultSecretEngineType string

type VaultSystemManager interface {
	ConfigureJWTAuth(ctx context.Context) error
	ConfigureJWTAuthRoles(roles []*VaultJWTRole) error
	ConfigureKubernetesAuth(ctx context.Context) error
	ConfigureKubernetesAuthRoles(roles []*VaultKubernetesRole) error
	CreateCredentials(ctx context.Context, vaultKeys *VaultKeys) error
	CreateTransitKey(mount, key string) error
	EnableJWTAuth() error
	EnableKubernetesAuth() error
	EnableSecretEngines(secretEngines []*VaultSecretEngine) error
	GetAuthMethod(name string) (*vaultapi.AuthMount, error)
	GetCredentials(ctx context.Context) (*VaultKeys, error)
	GetKubernetesAuthConfig(ctx context.Context) (*KubernetesCertificateData, error)
	Initialize(ctx context.Context) (*VaultKeys, error)
	IsJWTAuthEnabled() (bool, error)
	IsKubernetesAuthEnabled() (bool, error)
	PutPolicies(policies []*VaultPolicy) error
	RegisterPlugins(plugins []*vaultapi.RegisterPluginInput) error
	SetToken(vaultKeys *VaultKeys)
	Unseal(vaultKeys *VaultKeys) error
}