keyvault

package
v0.10.0 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Aug 10, 2025 License: MIT Imports: 38 Imported by: 0

Documentation

Index

Constants

View Source 
const (
	CertFormatPem    = "application/x-pem-file"
	CertFormatPkcs12 = "application/x-pkcs12"
)
View Source 
const CertificateObjectType = "kv/certificate"
View Source 
const KeyObjectType = "kv/key"
View Source 
const SecretObjectType = "kv/secret"

Variables

This section is empty.

Functions

func AcquireCertificateData 

func AcquireCertificateData(certData []byte, password string) (core.ConfidentialCertificateData, error)

func AcquireJWT 

func AcquireJWT(keyData []byte, password string) (interface{}, error)

func AzKeyVaultObjectIdentityModelSchema 

func AzKeyVaultObjectIdentityModelSchema() identityschema.Schema

func CreateCertificateEncryptedMessage 

func CreateCertificateEncryptedMessage(certData core.ConfidentialCertificateData, coord *core.AzKeyVaultObjectCoordinate, md core.SecondaryProtectionParameters, pubKey *rsa.PublicKey) (core.EncryptedMessage, core.SecondaryProtectionParameters, error)

func CreateKeyEncryptedMessage 

func CreateKeyEncryptedMessage(jwtKey interface{}, destLock *core.AzKeyVaultObjectCoordinate, md core.SecondaryProtectionParameters, pubKey *rsa.PublicKey) (core.EncryptedMessage, core.SecondaryProtectionParameters, error)

func CreateSecretEncryptedMessage 

func CreateSecretEncryptedMessage(confidentialString string, coord *core.AzKeyVaultObjectCoordinate, md core.SecondaryProtectionParameters, pubKey *rsa.PublicKey) (core.EncryptedMessage, core.SecondaryProtectionParameters, error)

func DecryptCertificateMessage 

func DecryptCertificateMessage(em core.EncryptedMessage, decrypted core.RSADecrypter) (core.ConfidentialDataJsonHeader, core.ConfidentialCertificateData, error)

func DecryptKeyMessage 

func DecryptKeyMessage(em core.EncryptedMessage, decrypter core.RSADecrypter) (core.ConfidentialDataJsonHeader, jwk.Key, error)

func DecryptSecretMessage 

func DecryptSecretMessage(em core.EncryptedMessage, decrypted core.RSADecrypter) (core.ConfidentialDataJsonHeader, core.ConfidentialStringData, error)

func NewCertificateEncryptorFunction 

func NewCertificateEncryptorFunction() function.Function

func NewCertificateResource 

func NewCertificateResource() resource.Resource

func NewKeyEncryptorFunction 

func NewKeyEncryptorFunction() function.Function

func NewKeyResource 

func NewKeyResource() resource.Resource

func NewSecretEncryptorFunction 

func NewSecretEncryptorFunction() function.Function

func NewSecretResource 

func NewSecretResource() resource.Resource

Types

type AzKVObjectCoordinateParamValidator 

type AzKVObjectCoordinateParamValidator struct{}

func (*AzKVObjectCoordinateParamValidator) ValidateParameterObject 

func (v *AzKVObjectCoordinateParamValidator) ValidateParameterObject(ctx context.Context, req function.ObjectParameterValidatorRequest, res *function.ObjectParameterValidatorResponse)

type AzKeyVaultCertificateResourceSpecializer 

type AzKeyVaultCertificateResourceSpecializer struct {
	// contains filtered or unexported fields
}

func (*AzKeyVaultCertificateResourceSpecializer) CheckPlacement 

func (a *AzKeyVaultCertificateResourceSpecializer) CheckPlacement(ctx context.Context, pc []core.ProviderConstraint, pl []core.PlacementConstraint, tfModel *CertificateModel) diag.Diagnostics

func (*AzKeyVaultCertificateResourceSpecializer) ConvertToTerraform 

func (a *AzKeyVaultCertificateResourceSpecializer) ConvertToTerraform(_ context.Context, azObj azcertificates.Certificate, tfModel *CertificateModel) diag.Diagnostics

func (*AzKeyVaultCertificateResourceSpecializer) Decrypt 

func (a *AzKeyVaultCertificateResourceSpecializer) Decrypt(_ context.Context, em core.EncryptedMessage, decr core.RSADecrypter) (core.ConfidentialDataJsonHeader, core.ConfidentialCertificateData, error)

func (*AzKeyVaultCertificateResourceSpecializer) DoCreate 

func (a *AzKeyVaultCertificateResourceSpecializer) DoCreate(ctx context.Context, data *CertificateModel, confidentialData core.ConfidentialCertificateData) (azcertificates.Certificate, diag.Diagnostics)

func (*AzKeyVaultCertificateResourceSpecializer) DoDelete 

func (a *AzKeyVaultCertificateResourceSpecializer) DoDelete(ctx context.Context, data *CertificateModel) diag.Diagnostics

func (*AzKeyVaultCertificateResourceSpecializer) DoRead 

func (a *AzKeyVaultCertificateResourceSpecializer) DoRead(ctx context.Context, data *CertificateModel) (azcertificates.Certificate, resources.ResourceExistenceCheck, diag.Diagnostics)

func (*AzKeyVaultCertificateResourceSpecializer) DoUpdate 

func (a *AzKeyVaultCertificateResourceSpecializer) DoUpdate(ctx context.Context, planData *CertificateModel) (azcertificates.Certificate, diag.Diagnostics)

func (*AzKeyVaultCertificateResourceSpecializer) GetConfidentialMaterialFrom 

func (a *AzKeyVaultCertificateResourceSpecializer) GetConfidentialMaterialFrom(mdl CertificateModel) resources.ConfidentialMaterialModel

func (*AzKeyVaultCertificateResourceSpecializer) GetJsonDataImporter 

func (a *AzKeyVaultCertificateResourceSpecializer) GetJsonDataImporter() core.ObjectJsonImportSupport[core.ConfidentialCertificateData]

func (*AzKeyVaultCertificateResourceSpecializer) NewTerraformModel 

func (a *AzKeyVaultCertificateResourceSpecializer) NewTerraformModel() CertificateModel

func (*AzKeyVaultCertificateResourceSpecializer) SetFactory 

func (a *AzKeyVaultCertificateResourceSpecializer) SetFactory(factory core.AZClientsFactory)

type AzKeyVaultKeyResourceSpecializer 

type AzKeyVaultKeyResourceSpecializer struct {
	// contains filtered or unexported fields
}

func (*AzKeyVaultKeyResourceSpecializer) CheckPlacement 

func (a *AzKeyVaultKeyResourceSpecializer) CheckPlacement(ctx context.Context, pc []core.ProviderConstraint, pl []core.PlacementConstraint, tfModel *KeyModel) diag.Diagnostics

func (*AzKeyVaultKeyResourceSpecializer) ConvertToTerraform 

func (a *AzKeyVaultKeyResourceSpecializer) ConvertToTerraform(_ context.Context, azObj azkeys.KeyBundle, tfModel *KeyModel) diag.Diagnostics

func (*AzKeyVaultKeyResourceSpecializer) Decrypt 

func (a *AzKeyVaultKeyResourceSpecializer) Decrypt(_ context.Context, em core.EncryptedMessage, decr core.RSADecrypter) (core.ConfidentialDataJsonHeader, jwk.Key, error)

func (*AzKeyVaultKeyResourceSpecializer) DoCreate 

func (a *AzKeyVaultKeyResourceSpecializer) DoCreate(ctx context.Context, data *KeyModel, jwkKey jwk.Key) (azkeys.KeyBundle, diag.Diagnostics)

func (*AzKeyVaultKeyResourceSpecializer) DoDelete 

func (a *AzKeyVaultKeyResourceSpecializer) DoDelete(ctx context.Context, data *KeyModel) diag.Diagnostics

func (*AzKeyVaultKeyResourceSpecializer) DoRead 

func (a *AzKeyVaultKeyResourceSpecializer) DoRead(ctx context.Context, data *KeyModel) (azkeys.KeyBundle, resources.ResourceExistenceCheck, diag.Diagnostics)

func (*AzKeyVaultKeyResourceSpecializer) DoUpdate 

func (a *AzKeyVaultKeyResourceSpecializer) DoUpdate(ctx context.Context, data *KeyModel) (azkeys.KeyBundle, diag.Diagnostics)

func (*AzKeyVaultKeyResourceSpecializer) GetConfidentialMaterialFrom 

func (a *AzKeyVaultKeyResourceSpecializer) GetConfidentialMaterialFrom(mdl KeyModel) resources.ConfidentialMaterialModel

func (*AzKeyVaultKeyResourceSpecializer) GetJsonDataImporter 

func (a *AzKeyVaultKeyResourceSpecializer) GetJsonDataImporter() core.ObjectJsonImportSupport[core.ConfidentialBinaryData]

func (*AzKeyVaultKeyResourceSpecializer) NewTerraformModel 

func (a *AzKeyVaultKeyResourceSpecializer) NewTerraformModel() KeyModel

func (*AzKeyVaultKeyResourceSpecializer) SetFactory 

func (a *AzKeyVaultKeyResourceSpecializer) SetFactory(factory core.AZClientsFactory)

type AzKeyVaultObjectIdentityModel 

type AzKeyVaultObjectIdentityModel struct {
	VaultName     string `tfsdk:"vault_name"`
	ObjectType    string `tfsdk:"object_type"`
	ObjectName    string `tfsdk:"object_name"`
	ObjectVersion string `tfsdk:"object_version"`
}

func (*AzKeyVaultObjectIdentityModel) AsCoordinate 

func (a *AzKeyVaultObjectIdentityModel) AsCoordinate() core.AzKeyVaultObjectVersionedCoordinate

type AzKeyVaultSecretResourceSpecializer 

type AzKeyVaultSecretResourceSpecializer struct {
	// contains filtered or unexported fields
}

AzKeyVaultSecretResourceSpecializer Generified Implementation

func (*AzKeyVaultSecretResourceSpecializer) CheckPlacement 

func (a *AzKeyVaultSecretResourceSpecializer) CheckPlacement(ctx context.Context, pc []core.ProviderConstraint, pl []core.PlacementConstraint, tfModel *SecretModel) diag.Diagnostics

func (*AzKeyVaultSecretResourceSpecializer) ConvertToTerraform 

func (a *AzKeyVaultSecretResourceSpecializer) ConvertToTerraform(_ context.Context, secret azsecrets.Secret, tfModel *SecretModel) diag.Diagnostics

func (*AzKeyVaultSecretResourceSpecializer) Decrypt 

func (a *AzKeyVaultSecretResourceSpecializer) Decrypt(_ context.Context, em core.EncryptedMessage, decr core.RSADecrypter) (core.ConfidentialDataJsonHeader, core.ConfidentialStringData, error)

func (*AzKeyVaultSecretResourceSpecializer) DoCreate 

func (a *AzKeyVaultSecretResourceSpecializer) DoCreate(ctx context.Context, data *SecretModel, unwrappedData core.ConfidentialStringData) (azsecrets.Secret, diag.Diagnostics)

func (*AzKeyVaultSecretResourceSpecializer) DoDelete 

func (a *AzKeyVaultSecretResourceSpecializer) DoDelete(ctx context.Context, data *SecretModel) diag.Diagnostics

func (*AzKeyVaultSecretResourceSpecializer) DoRead 

func (a *AzKeyVaultSecretResourceSpecializer) DoRead(ctx context.Context, data *SecretModel) (azsecrets.Secret, resources.ResourceExistenceCheck, diag.Diagnostics)

func (*AzKeyVaultSecretResourceSpecializer) DoUpdate 

func (a *AzKeyVaultSecretResourceSpecializer) DoUpdate(ctx context.Context, data *SecretModel) (azsecrets.Secret, diag.Diagnostics)

func (*AzKeyVaultSecretResourceSpecializer) GetConfidentialMaterialFrom 

func (a *AzKeyVaultSecretResourceSpecializer) GetConfidentialMaterialFrom(mdl SecretModel) resources.ConfidentialMaterialModel

func (*AzKeyVaultSecretResourceSpecializer) GetJsonDataImporter 

func (a *AzKeyVaultSecretResourceSpecializer) GetJsonDataImporter() core.ObjectJsonImportSupport[core.ConfidentialStringData]

func (*AzKeyVaultSecretResourceSpecializer) NewTerraformModel 

func (a *AzKeyVaultSecretResourceSpecializer) NewTerraformModel() SecretModel

func (*AzKeyVaultSecretResourceSpecializer) SetFactory 

func (a *AzKeyVaultSecretResourceSpecializer) SetFactory(factory core.AZClientsFactory)

type AzKvCertificateParamValidator 

type AzKvCertificateParamValidator struct{}

func (*AzKvCertificateParamValidator) ValidateParameterObject 

func (vld *AzKvCertificateParamValidator) ValidateParameterObject(ctx context.Context, req function.ObjectParameterValidatorRequest, res *function.ObjectParameterValidatorResponse)

type AzKvPrivateKeyParamValidator 

type AzKvPrivateKeyParamValidator struct{}

func (*AzKvPrivateKeyParamValidator) ValidateParameterObject 

func (vld *AzKvPrivateKeyParamValidator) ValidateParameterObject(ctx context.Context, req function.ObjectParameterValidatorRequest, res *function.ObjectParameterValidatorResponse)

type CertificateDataFunctionParameter 

type CertificateDataFunctionParameter struct {
	Certificate types.String `tfsdk:"certificate"`
	Password    types.String `tfsdk:"password"`
}

type CertificateModel 

type CertificateModel struct {
	resources.WrappedAzKeyVaultObjectConfidentialMaterialModel
	VersionlessId       types.String `tfsdk:"versionless_id"`
	SecretId            types.String `tfsdk:"secret_id"`
	VersionlessSecretId types.String `tfsdk:"versionless_secret_id"`

	DestinationCert    core.AzKeyVaultObjectCoordinateModel `tfsdk:"destination_certificate"`
	CertificateVersion types.String                         `tfsdk:"version"`

	Thumbprint            types.String `tfsdk:"thumbprint"`
	CertificateData       types.String `tfsdk:"certificate_data"`
	CertificateDataBase64 types.String `tfsdk:"certificate_data_base64"`
}

func (*CertificateModel) Accept 

func (cm *CertificateModel) Accept(cert azcertificates.Certificate)

func (*CertificateModel) AssignId 

func (cm *CertificateModel) AssignId(cert azcertificates.Certificate)

func (*CertificateModel) ConvertToImportCertParam 

func (d *CertificateModel) ConvertToImportCertParam() azcertificates.ImportCertificateParameters

func (*CertificateModel) ConvertToUpdateCertParam 

func (d *CertificateModel) ConvertToUpdateCertParam() azcertificates.UpdateCertificateParameters

type KeyDataFunctionParameter 

type KeyDataFunctionParameter struct {
	Key      types.String `tfsdk:"key"`
	Password types.String `tfsdk:"password"`
}

type KeyModel 

type KeyModel struct {
	resources.WrappedAzKeyVaultObjectConfidentialMaterialModel

	HSM            types.Bool                           `tfsdk:"hsm"`
	DestinationKey core.AzKeyVaultObjectCoordinateModel `tfsdk:"destination_key"`
	KeyOperations  types.Set                            `tfsdk:"key_opts"`

	KeyVersion types.String `tfsdk:"key_version"`

	PublicKeyPem     types.String `tfsdk:"public_key_pem"`
	PublicKeyOpenSSH types.String `tfsdk:"public_key_openssh"`
}

func (*KeyModel) Accept 

func (cm *KeyModel) Accept(key azkeys.KeyBundle, diagnostics *diag.Diagnostics)

func (*KeyModel) ConvertToImportKeyParam 

func (cm *KeyModel) ConvertToImportKeyParam(ctx context.Context) azkeys.ImportKeyParameters

func (*KeyModel) ConvertToUpdateKeyParam 

func (cm *KeyModel) ConvertToUpdateKeyParam(ctx context.Context) azkeys.UpdateKeyParameters

func (*KeyModel) GetDestinationKeyCoordinate 

func (cm *KeyModel) GetDestinationKeyCoordinate(defaultVaultName string) core.AzKeyVaultObjectCoordinate

func (*KeyModel) GetKeyOperations 

func (cm *KeyModel) GetKeyOperations(ctx context.Context) []*azkeys.KeyOperation

type SecretModel 

type SecretModel struct {
	resources.WrappedAzKeyVaultObjectConfidentialMaterialModel

	ContentType       types.String                         `tfsdk:"content_type"`
	DestinationSecret core.AzKeyVaultObjectCoordinateModel `tfsdk:"destination_secret"`

	SecretVersion types.String `tfsdk:"secret_version"`
}

func (*SecretModel) Accept 

func (cm *SecretModel) Accept(secret azsecrets.Secret)

func (*SecretModel) ContentTypeAsPtr 

func (cm *SecretModel) ContentTypeAsPtr() *string

func (*SecretModel) ConvertToSetSecretParam 

func (cm *SecretModel) ConvertToSetSecretParam(data *SecretModel) azsecrets.SetSecretParameters

func (*SecretModel) ConvertToUpdateSecretPropertiesParam 

func (cm *SecretModel) ConvertToUpdateSecretPropertiesParam(data *SecretModel) azsecrets.UpdateSecretPropertiesParameters

func (*SecretModel) GetDestinationSecretCoordinate 

func (cm *SecretModel) GetDestinationSecretCoordinate(defaultVaultName string) core.AzKeyVaultObjectCoordinate

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.