conf

package

v1.13.5 Latest Latest Go to latest Published: Mar 21, 2024 License: GPL-3.0 Imports: 6 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/soerenschneider/vault-pki-cli

Links

Open Source Insights

Documentation ¶

Constants ¶

View Source

const (
	FLAG_CONFIG_FILE = "config"
	FLAG_DEBUG       = "debug"

	FLAG_VAULT_ADDRESS                     = "vault-address"
	FLAG_VAULT_AUTH_TOKEN                  = "vault-auth-token" // #nosec G101
	FLAG_VAULT_AUTH_IMPLICIT               = "vault-auth-implicit"
	FLAG_VAULT_AUTH_K8S_ROLE               = "vault-auth-k8s"
	FLAG_VAULT_AUTH_APPROLE_ID             = "vault-auth-role-id"
	FLAG_VAULT_AUTH_APPROLE_SECRET_ID      = "vault-auth-secret-id"      // #nosec G101
	FLAG_VAULT_AUTH_APPROLE_SECRET_ID_FILE = "vault-auth-secret-id-file" // #nosec G101
	FLAG_VAULT_APPROLE_MOUNT               = "vault-approle-mount"
	FLAG_VAULT_PKI_MOUNT                   = "vault-pki-mount"
	FLAG_VAULT_PKI_BACKEND_ROLE            = "vault-pki-role-name"
	FLAG_VAULT_MOUNT_KV2                   = "vault-kv2-mount"

	FLAG_ISSUE_FORCE_NEW_CERTIFICATE         = "force-new-certificate"
	FLAG_ISSUE_LIFETIME_THRESHOLD_PERCENTAGE = "lifetime-threshold-percent"
	FLAG_ISSUE_PRIVATE_KEY_FILE              = "private-key-file"
	FLAG_ISSUE_BACKEND_CONFIG                = "backend-config"
	FLAG_READACME_ACME_PREFIX                = "acme-prefix"

	FLAG_ISSUE_TTL          = "ttl"
	FLAG_ISSUE_DAEMONIZE    = "daemonize"
	FLAG_ISSUE_IP_SANS      = "ip-sans"
	FLAG_ISSUE_COMMON_NAME  = "common-name"
	FLAG_ISSUE_ALT_NAMES    = "alt-names"
	FLAG_METRICS_FILE       = "metrics-file"
	FLAG_ISSUE_METRICS_ADDR = "metrics-addr"
	FLAG_ISSUE_HOOKS        = "hooks"

	FLAG_OUTPUT_FILE = "output-file"
	FLAG_DER_ENCODED = "der-encoding"

	FLAG_CERTIFICATE_FILE = "certificate-file"
	FLAG_CA_FILE          = "ca-file"
	FLAG_CSR_FILE         = "csr-file"
	FLAG_FILE_OWNER       = "owner"
	FLAG_FILE_GROUP       = "group"
)

View Source

const (
	FLAG_VAULT_PKI_BACKEND_ROLE_DEFAULT              = "my_role"
	FLAG_VAULT_MOUNT_APPROLE_DEFAULT                 = "approle"
	FLAG_VAULT_MOUNT_KV2_DEFAULT                     = "/secret"
	FLAG_ISSUE_LIFETIME_THRESHOLD_PERCENTAGE_DEFAULT = 33.
	FLAG_ISSUE_TTL_DEFAULT                           = "48h"
	FLAG_FILE_OWNER_DEFAULT                          = "root"
	FLAG_ISSUE_DAEMONIZE_DEFAULT                     = false

	FLAG_READACME_ACME_PREFIX_DEFAULT = "acmevault/prod"

	FLAG_VAULT_MOUNT_PKI_DEFAULT    = "pki_intermediate"
	FLAG_ISSUE_METRICS_ADDR_DEFAULT = ":9172"
)

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Config ¶

type Config struct {
	VaultAddress      string `mapstructure:"vault-address" validate:"required"`
	VaultAuthMethod   string `mapstructure:"vault-auth-method" validate:"required"`
	VaultToken        string `mapstructure:"vault-auth-token" validate:"required_if=VaultAuthMethod token"`
	VaultAuthK8sRole  string `mapstructure:"vault-auth-k8s-role" validate:"required_if=VaultAuthMethod k8s"`
	VaultRoleId       string `mapstructure:"vault-auth-role-id" validate:"required_if=VaultAuthMethod approle"`
	VaultSecretId     string `` /* 140-byte string literal not displayed */
	VaultSecretIdFile string `` /* 137-byte string literal not displayed */
	VaultMountApprole string `mapstructure:"vault-approle-mount" validate:"required_if=VaultAuthMethod approle"`
	VaultMountPki     string `mapstructure:"vault-pki-mount" validate:"required"`
	VaultMountKv2     string `mapstructure:"vault-kv2-mount"`
	VaultPkiRole      string `mapstructure:"vault-pki-role-name" validate:"required"`

	Daemonize bool `mapstructure:"daemonize"`

	CommonName string   `mapstructure:"common-name"`
	Ttl        string   `mapstructure:"ttl"`
	IpSans     []string `mapstructure:"ip-sans"`
	AltNames   []string `mapstructure:"alt-names"`

	AcmePrefix string `mapstructure:"acme-prefix"`

	MetricsFile string `mapstructure:"metrics-file"`
	MetricsAddr string `mapstructure:"metrics-addr"`

	ForceNewCertificate bool                `mapstructure:"force-new-certificate"`
	StorageConfig       []map[string]string `mapstructure:"storage"`

	PostHooks                              []string `mapstructure:"post-hooks"`
	CertificateLifetimeThresholdPercentage float64  `mapstructure:"lifetime-threshold-percent"`

	DerEncoded bool
}

func (*Config) Print ¶ added in v1.8.0

func (c *Config) Print()

func (*Config) Validate ¶

func (c *Config) Validate() error

func (*Config) ValidateIssue ¶ added in v1.8.0

func (c *Config) ValidateIssue() error

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL