vault

type AuthCreateTokenRequest struct {
	RoleName        string                 `json:"role_name,omitempty"`
	ID              string                 `json:"id,omitempty"`
	Policies        []string               `json:"policies,omitempty"`
	Meta            map[string]interface{} `json:"meta,omitempty"`
	NoParent        bool                   `json:"no_parent,omitempty"`
	NoDefaultPolicy bool                   `json:"no_default_policy,omitempty"`
	Renewable       bool                   `json:"renewable,omitempty"`
	TTL             string                 `json:"ttl,omitempty"`
	Type            string                 `json:"type,omitempty"`
	EntityAlias     string                 `json:"entity_alias,omitempty"`
}

type AuthCreateTokenResponse struct {
	RequestID     string      `json:"request_id"`
	LeaseID       string      `json:"lease_id"`
	Renewable     bool        `json:"renewable"`
	LeaseDuration int         `json:"lease_duration"`
	Data          interface{} `json:"data"`
	WrapInfo      interface{} `json:"wrap_info"`
	Warnings      []string    `json:"warnings"`
	Auth          struct {
		ClientToken   string      `json:"client_token"`
		Accessor      string      `json:"accessor"`
		Policies      []string    `json:"policies"`
		TokenPolicies []string    `json:"token_policies"`
		Metadata      interface{} `json:"metadata"`
		LeaseDuration int         `json:"lease_duration"`
		Renewable     bool        `json:"renewable"`
		EntityID      string      `json:"entity_id"`
		TokenType     string      `json:"token_type"`
		Orphan        bool        `json:"orphan"`
		NumUses       int         `json:"num_uses"`
	} `json:"auth"`
	MountType string `json:"mount_type"`
}

type AuthProvider interface {
	Auth() (*AuthResponse, error)
}

type AuthResponse struct {
	Auth struct {
		ClientToken   string   `json:"client_token"`
		Accessor      string   `json:"accessor"`
		Policies      []string `json:"policies"`
		LeaseDuration int      `json:"lease_duration"`
		Renewable     bool     `json:"renewable"`
		Metadata      struct {
			Role                     string `json:"role"`
			ServiceAccountName       string `json:"service_account_name"`
			ServiceAccountNamespace  string `json:"service_account_namespace"`
			ServiceAccountSecretName string `json:"service_account_secret_name"`
			ServiceAccountUID        string `json:"service_account_uid"`
		} `json:"metadata"`
	} `json:"auth"`
}

type Authentication struct {
	Service
}

type Client struct {
	*api.Client
	// contains filtered or unexported fields
}

type ClientOpts func(c *Client) error

type KVv1 struct {
	Service
}

type KVv1ListResponse struct {
	Data struct {
		Keys []string `json:"keys"`
	} `json:"data"`
}

type KVv1ReadResponse struct {
	Data map[string]string `json:"data"`
}

type KubernetesAuthOpt func(k *kubernetesAuth) error

type PKI struct {
	Service
}

type PKICreateRoleRequest struct {
	IssuerRef        string   `json:"issuer_ref"`
	TTL              string   `json:"ttl,omitempty"`
	MaxTTL           string   `json:"max_ttl,omitempty"`
	AllowedDomains   []string `json:"allowed_domains,omitempty"`
	AllowBareDomain  bool     `json:"allow_bare_domain,omitempty"`
	AllowGlobDomains bool     `json:"allow_glob_domains,omitempty"`
	AllowWildcard    bool     `json:"allow_wildcard_certificates,omitempty"`
	AllowSubdomains  bool     `json:"allow_subdomains,omitempty"`
	ServerFlag       bool     `json:"server_flag,omitempty"`
}

type PKIGenerateIntermediateOptions struct {
	CommonName       string `json:"common_name"`
	KeyName          string `json:"key_name,omitempty"`
	AltNames         string `json:"alt_names,omitempty"`
	Format           string `json:"format,omitempty"`
	PrivateKeyFormat string `json:"private_key_format,omitempty"`
	KeyType          string `json:"key_type,omitempty"`
}

type PKIGenerateIntermediateResponse struct {
	LeaseID       string `json:"lease_id"`
	Renewable     bool   `json:"renewable"`
	LeaseDuration int    `json:"lease_duration"`
	Data          struct {
		CSR            string `json:"csr"`
		PrivateKey     string `json:"private_key"`
		PrivateKeyType string `json:"private_key_type"`
	} `json:"data"`
}

type PKIImportCABundleRequest struct {
	PemBundle string `json:"pem_bundle"`
}

type PKIImportCABundleResponse struct {
	Data struct {
		ImportedIssuers []string          `json:"imported_issuers"`
		ImportedKeys    []string          `json:"imported_keys"`
		Mapping         map[string]string `json:"mapping"`
		ExistingIssuers []string          `json:"existing_issuers"`
		ExistingKeys    []string          `json:"existing_keys"`
	} `json:"data"`
}

type PKIIssueOptions struct {
	CommonName string `json:"common_name"`
	TTL        string `json:"ttl,omitempty"`
}

type PKIIssueResponse struct {
	LeaseID       string `json:"lease_id"`
	Renewable     bool   `json:"renewable"`
	LeaseDuration int    `json:"lease_duration"`
	Data          struct {
		SerialNumber   string   `json:"serial_number"`
		Expiration     int      `json:"expiration"`
		PrivateKeyType string   `json:"private_key_type"`
		PrivateKey     string   `json:"private_key"`
		IssuingCA      string   `json:"issuing_ca"`
		CAChain        []string `json:"ca_chain"`
		Certificate    string   `json:"certificate"`
	} `json:"data"`
}

type PKIListIssuersResponse struct {
	Data struct {
		KeyInfo map[string]struct {
			IssuerName string `json:"issuer_name"`
		} `json:"key_info"`
		Keys []string `json:"keys"`
	} `json:"data"`
}

type PKIReadIssuerResponse struct {
	Data struct {
		CACertificateChain []string `json:"ca_chain"`
		Certificate        string   `json:"certificate"`
		RevocationTime     int      `json:"revocation_time"`
	} `json:"data"`
}

type PKIRevokeIssuerResponse struct {
	CAChain              []string    `json:"ca_chain"`
	Certificate          string      `json:"certificate"`
	IssuerID             string      `json:"issuer_id"`
	IssuerName           string      "json:\"issuer_name\""
	KeyID                string      `json:"key_id"`
	LeafNotAfterBehavior string      `json:"leaf_not_after_behavior"`
	ManualChain          interface{} `json:"manual_chain"`
	Usage                string      `json:"usage"`
	RevocationTime       int64       `json:"revocation_time"`
}

type PKIRoleResponse struct {
	AllowAnyName              bool     `json:"allow_any_name"`
	AllowBareDomains          bool     `json:"allow_bare_domains"`
	AllowGlobDomains          bool     `json:"allow_glob_domains"`
	AllowIPSans               bool     `json:"allow_ip_sans"`
	AllowLocalhost            bool     `json:"allow_localhost"`
	AllowSubdomains           bool     `json:"allow_subdomains"`
	AllowTokenDisplayname     bool     `json:"allow_token_displayname"`
	AllowWildcardCertificates bool     `json:"allow_wildcard_certificates"`
	AllowedDomains            []string `json:"allowed_domains"`
	AllowedDomainsTemplate    bool     `json:"allowed_domains_template"`
	AllowedOtherSans          []string `json:"allowed_other_sans"`
	AllowedSerialNumbers      []string `json:"allowed_serial_numbers"`
	AllowedURISans            []string `json:"allowed_uri_sans"`
	AllowedURISansTemplate    bool     `json:"allowed_uri_sans_template"`
	AllowedUserIDs            []string `json:"allowed_user_ids"`
	EnforceHostnames          bool     `json:"enforce_hostnames"`
	GenerateLease             bool     `json:"generate_lease"`
	IssuerRef                 string   `json:"issuer_ref"`
	KeyUsage                  []string `json:"key_usage"`
	MaxTTL                    string   `json:"max_ttl"`
	NoStore                   bool     `json:"no_store"`
	NotAfter                  string   `json:"not_after"`
	NotBeforeDuration         string   `json:"not_before_duration"`
	ServerFlag                bool     `json:"server_flag"`
	TTL                       string   `json:"ttl"`
	UseCSRCommonName          bool     `json:"use_csr_common_name"`
	UseCSRSans                bool     `json:"use_csr_sans"`
}

type PKISignCSROptions struct {
	CSR        string `json:"csr"`
	CommonName string `json:"common_name,omitempty"`
	AltNames   string `json:"alt_names,omitempty"`
	TTL        string `json:"ttl,omitempty"`
	Format     string `json:"format,omitempty"`
	NotAfter   string `json:"not_after,omitempty"`
}

type PKISignIntermediateOptions struct {
	CSR          string `json:"csr"`
	CommonName   string `json:"common_name"`
	AltNames     string `json:"alt_names,omitempty"`
	TTL          string `json:"ttl,omitempty"`
	Format       string `json:"format,omitempty"`
	KeyUsage     string `json:"key_usage,omitempty"`
	UseCSRValues bool   `json:"use_csr_values,omitempty"`
	NotAfter     string `json:"not_after,omitempty"`
}

type PKISignIntermediateResponse struct {
	LeaseID       string `json:"lease_id"`
	Renewable     bool   `json:"renewable"`
	LeaseDuration int    `json:"lease_duration"`
	Data          struct {
		Expiration   int      `json:"expiration"`
		Certificate  string   `json:"certificate"`
		IssuingCA    string   `json:"issuing_ca"`
		CAChain      []string `json:"ca_chain"`
		SerialNumber string   `json:"serial_number"`
	} `json:"data"`
}

type PKISignResponse struct {
	LeaseID string `json:"lease_id"`
	Data    struct {
		Expiration   int      `json:"expiration"`
		Certificate  string   `json:"certificate"`
		IssuingCA    string   `json:"issuing_ca"`
		CAChain      []string `json:"ca_chain"`
		SerialNumber string   `json:"serial_number"`
	} `json:"data"`
}

type PKIUpdateIssuerRequest struct {
	IssuerName           string   `json:"issuer_name"`
	LeafNotAfterBehavior string   `json:"leaf_not_after_behavior,omitempty"`
	ManualChain          []string `json:"manual_chain,omitempty"`
	Usage                []string `json:"usage,omitempty"`
}

type PKIUpdateIssuerResponse struct {
	Data struct {
		CACertificateChain           []string    `json:"ca_chain"`
		Certificate                  string      `json:"certificate"`
		IssuerID                     string      `json:"issuer_id"`
		IssuerName                   string      `json:"issuer_name"`
		KeyID                        string      `json:"key_id"`
		LeafNotAfterBehavior         string      `json:"leaf_not_after_behavior"`
		ManualChain                  interface{} `json:"manual_chain"`
		Usage                        string      `json:"usage"`
		RevocationSignatureAlgorithm string      `json:"revocation_signature_algorithm"`
		IssuingCertificates          []string    `json:"issuing_certificates"`
		CRLDistributionPoints        []string    `json:"crl_distribution_points"`
		DeltaCRLDistributionPoints   []string    `json:"delta_crl_distribution_points"`
		OCSPServers                  []string    `json:"ocsp_servers"`
	} `json:"data"`
}

type RequestOptions struct {
	Parameters url.Values

	// SkipRenewal defines if the client should retry this Request with a new Token if it fails because of
	// 403 Permission Denied
	// The default behavior of the client is to always Request a new Token on 403
	// Only if this is explicitly set to true, the client will continue processing the first failed request
	// and skip the renewal
	// This should generally only be disabled for TokenAuth requests (a failed TokenAuth request can't be fixed by
	// doing another TokenAuth request, this would lead to infinite recursion)
	SkipRenewal bool
}

type SSH struct {
	Service
}

type SSHReadPubKeyResponse struct {
	LeaseID       string `json:"lease_id"`
	Renewable     bool   `json:"renewable"`
	LeaseDuration int    `json:"lease_duration"`
	Data          struct {
		PublicKey string `json:"public_key"`
	} `json:"data"`
}

type SSHSignOptions struct {
	PublicKey       string `json:"public_key"`
	CertType        string `json:"cert_type,omitempty"`
	ValidPrincipals string `json:"valid_principals,omitempty"`
}

type SSHSignResponse struct {
	LeaseID       string `json:"lease_id"`
	Renewable     bool   `json:"renewable"`
	LeaseDuration int    `json:"lease_duration"`
	Data          struct {
		SerialNumber string `json:"serial_number"`
		SignedKey    string `json:"signed_key"`
	} `json:"data"`
}

type Service struct {
	MountPoint string
	// contains filtered or unexported fields
}

type TLSConfig struct {
	*api.TLSConfig
}

type Transit struct {
	Service
}

type TransitBatchCiphertext struct {
	Ciphertext string `json:"ciphertext"`
	Context    string `json:"context,omitempty"`
}

type TransitBatchPlaintext struct {
	Plaintext string `json:"plaintext"`
	Context   string `json:"context,omitempty"`
}

type TransitBatchSignInput struct {
	Input   string `json:"input"`
	Context string `json:"context,omitempty"`
}

type TransitBatchSignature struct {
	Signature  string `json:"signature"`
	KeyVersion int    `json:"key_version,omitempty"`
}

type TransitBatchVerifyData struct {
	Valid bool `json:"valid"`
}

type TransitBatchVerifyInput struct {
	Input     string `json:"input"`
	Signature string `json:"signature"`
	Context   string `json:"context,omitempty"`
}

type TransitCreateOptions struct {
	ConvergentEncryption *bool  `json:"convergent_encryption,omitempty"`
	Derived              *bool  `json:"derived,omitempty"`
	Exportable           *bool  `json:"exportable,omitempty"`
	AllowPlaintextBackup *bool  `json:"allow_plaintext_backup,omitempty"`
	Type                 string `json:"type,omitempty"`
}

type TransitDecryptOptions struct {
	Ciphertext string `json:"ciphertext"`
	Context    string `json:"context,omitempty"`
	Nonce      string `json:"nonce,omitempty"`
}

type TransitDecryptOptionsBatch struct {
	BatchInput []TransitBatchCiphertext `json:"batch_input"`
}

type TransitDecryptResponse struct {
	Data struct {
		Plaintext string `json:"plaintext"`
	} `json:"data"`
}

type TransitDecryptResponseBatch struct {
	Data struct {
		BatchResults []TransitBatchPlaintext `json:"batch_results"`
	} `json:"data"`
}

type TransitEncryptOptions struct {
	Plaintext            string `json:"plaintext"`
	Context              string `json:"context,omitempty"`
	KeyVersion           *int   `json:"key_version,omitempty"`
	Nonce                string `json:"nonce,omitempty"`
	Type                 string `json:"type,omitempty"`
	ConvergentEncryption string `json:"convergent_encryption,omitempty"`
}

type TransitEncryptOptionsBatch struct {
	BatchInput           []TransitBatchPlaintext `json:"batch_input"`
	KeyVersion           *int                    `json:"key_version,omitempty"`
	Type                 string                  `json:"type,omitempty"`
	ConvergentEncryption string                  `json:"convergent_encryption,omitempty"`
}

type TransitEncryptResponse struct {
	Data struct {
		Ciphertext string `json:"ciphertext"`
	} `json:"data"`
}

type TransitEncryptResponseBatch struct {
	Data struct {
		BatchResults []TransitBatchCiphertext `json:"batch_results"`
	} `json:"data"`
}

type TransitExportOptions struct {
	KeyType string `json:"key_type"`
	Version string `json:"version,omitempty"`
}

type TransitExportResponse struct {
	Data struct {
		Name string         `json:"name"`
		Keys map[int]string `json:"keys"`
		Type string         `json:"type"`
	} `json:"data"`
}

type TransitListResponse struct {
	Data struct {
		Keys []string `json:"keys"`
	} `json:"data"`
}

type TransitReadResponse struct {
	Data TransitReadResponseData `json:"data"`
}

type TransitReadResponseData struct {
	Name                 string              `json:"name"`
	Type                 string              `json:"type"`
	Keys                 map[int]interface{} `json:"keys"`
	MinDecryptionVersion int                 `json:"min_decrytion_version"`
	MinEncryptionVersion int                 `json:"min_encryption_version"`
	LatestVersion        int                 `json:"latest_version"`
	DeletionAllowed      bool                `json:"deletion_allowed"`
	Derived              bool                `json:"derived"`
	Exportable           bool                `json:"exportable"`
	AllowPlaintextBackup bool                `json:"allow_plaintext_backup"`
	SupportsEncryption   bool                `json:"supports_encryption"`
	SupportsDecryption   bool                `json:"supports_decryption"`
	SupportsDerivation   bool                `json:"supports_derivation"`
	SupportsSigning      bool                `json:"supports_signing"`
}

type TransitSignOptions struct {
	Input               string `json:"input"`
	KeyVersion          *int   `json:"key_version,omitempty"`
	HashAlgorithm       string `json:"hash_algorithm,omitempty"`
	Context             string `json:"context,omitempty"`
	Prehashed           bool   `json:"prehashed,omitempty"`
	SignatureAlgorithm  string `json:"signature_algorithm,omitempty"`
	MarshalingAlgorithm string `json:"marshaling_algorithm,omitempty"`
	SaltLength          string `json:"salt_length,omitempty"`
}

type TransitSignOptionsBatch struct {
	BatchInput          []TransitBatchSignInput `json:"batch_input"`
	KeyVersion          *int                    `json:"key_version,omitempty"`
	HashAlgorithm       string                  `json:"hash_algorithm,omitempty"`
	Prehashed           bool                    `json:"prehashed,omitempty"`
	SignatureAlgorithm  string                  `json:"signature_algorithm,omitempty"`
	MarshalingAlgorithm string                  `json:"marshaling_algorithm,omitempty"`
	SaltLength          string                  `json:"salt_length,omitempty"`
}

type TransitSignResponse struct {
	Data struct {
		Signature  string `json:"signature"`
		KeyVersion int    `json:"key_version,omitempty"`
	} `json:"data"`
}

type TransitSignResponseBatch struct {
	Data struct {
		BatchResults []TransitBatchSignature `json:"batch_results"`
	} `json:"data"`
}

type TransitUpdateOptions struct {
	MinDecryptionVersion int   `json:"min_decrytion_version,omitempty"`
	MinEncryptionVersion int   `json:"min_encryption_version,omitempty"`
	DeletionAllowed      *bool `json:"deletion_allowed,omitempty"`
	Exportable           *bool `json:"exportable,omitempty"`
	AllowPlaintextBackup *bool `json:"allow_plaintext_backup,omitempty"`
}

type TransitVerifyOptions struct {
	Input               string `json:"input"`
	Signature           string `json:"signature"`
	HashAlgorithm       string `json:"hash_algorithm,omitempty"`
	Context             string `json:"context,omitempty"`
	Prehashed           bool   `json:"prehashed,omitempty"`
	SignatureAlgorithm  string `json:"signature_algorithm,omitempty"`
	MarshalingAlgorithm string `json:"marshaling_algorithm,omitempty"`
	SaltLength          string `json:"salt_length,omitempty"`
}

type TransitVerifyOptionsBatch struct {
	BatchInput          []TransitBatchVerifyInput `json:"batch_input"`
	HashAlgorithm       string                    `json:"hash_algorithm,omitempty"`
	Context             string                    `json:"context,omitempty"`
	Prehashed           bool                      `json:"prehashed,omitempty"`
	SignatureAlgorithm  string                    `json:"signature_algorithm,omitempty"`
	MarshalingAlgorithm string                    `json:"marshaling_algorithm,omitempty"`
	SaltLength          string                    `json:"salt_length,omitempty"`
}

type TransitVerifyResponse struct {
	Data struct {
		Valid bool `json:"valid"`
	} `json:"data"`
}

type TransitVerifyResponseBatch struct {
	Data struct {
		BatchResults []TransitBatchVerifyData `json:"batch_results"`
	} `json:"data"`
}

type UserpassAuth struct {
	Client *Client
	// contains filtered or unexported fields
}

type UserpassAuthOpt func(k *UserpassAuth) error