policy

type Acceptance int

type Config struct {
	// Keeper is the name of the keeper to wrap.
	Keeper string `mapstructure:"keeper" yaml:"keeper"`
	// DefaultRule configures the default rule for the keeper.
	DefaultRule RuleConfig `mapstructure:",squash" yaml:",inline"`
	// Rules configures the match rules for the keeper.
	Rules []MatchRuleConfig `mapstructure:"rules" yaml:"rules"`
}

type Match struct {
	// contains filtered or unexported fields
}

type MatchConfig struct {
	// LocationMatch is a matches a rule by location by exact match, glob, or
	// regular expression.
	LocationMatch string `mapstructure:"location" yaml:"location"`
	// NameMatch is a matches a rule by name by exact match, glob, or regular
	// expression.
	NameMatch string `mapstructure:"name" yaml:"name"`
	// UsernameMatch is a matches a rule by username by exact match, glob, or
	// regular expression.
	UsernameMatch string `mapstructure:"username" yaml:"username"`
	// TypeMatch is a matches a rule by secret type by exact match, glob, or
	// regular expression.
	TypeMatch string `mapstructure:"secret_type" yaml:"secret_type"`
	// UrlMatch is a matches a rule by URL by exact match, glob, or regular
	// expression.
	UrlMatch string `mapstructure:"url" yaml:"url"`
}

type MatchRule struct {
	*Match
	*Rule
}

type MatchRuleConfig struct {
	// MatchConfig configures the matchers for a rule.
	MatchConfig `mapstructure:",squash" yaml:",inline"`
	// RuleConfig configures the action to apply with a rule.
	RuleConfig `mapstructure:",squash" yaml:",inline"`
}

type Policy struct {
	secrets.Keeper
	// contains filtered or unexported fields
}

type Rule struct {
	// contains filtered or unexported fields
}

type RuleConfig struct {
	// Lifetime is the maximum lifetime of a secret in the keeper.
	Lifetime time.Duration `mapstructure:"lifetime" yaml:"lifetime"`
	// Acceptance determines whether access to the secret is allowed or denied.
	Acceptance string `mapstructure:"acceptance" yaml:"acceptance"`
}