token

type AuthProvider ¶

type AuthProvider interface {
	Auth(*api.Client) error
	String() string
}

AuthMethod the method used to authenticate against vault and update the client token.

type AuthProviderAppRole ¶

type AuthProviderAppRole struct {
	Mount    string
	RoleID   string
	SecretID string
}

func (p AuthProviderAppRole) Auth(client *api.Client) error

func (p AuthProviderAppRole) String() string

type AuthProviderKubernetes ¶

type AuthProviderKubernetes struct {
	Mount     string
	Role      string
	TokenFile string
}

func (p AuthProviderKubernetes) Auth(client *api.Client) error

func (p AuthProviderKubernetes) String() string

type Renewer ¶

type Renewer struct {
	// contains filtered or unexported fields
}

Renewer manages vault token, it starts a control loop that checks the status of a token every second and performs the following actions:

- If no token exists then auth is attempted (requires auth method) - If the token is half way through its lifespan a token renew is attempted - If the token is expired auth is attempted (requires auth method)

If any of these actions fail the renewer exits with an error, allowing the application to handle to handle this failure. Its worth noting that the vault client has built in support for retrying failed requests, so a single failure should not cause an error.

func NewRenewer(client *api.Client, authProvider AuthProvider) *Renewer

func (r *Renewer) Run(done <-chan struct{}) error

func (r *Renewer) RunOnce() error