Class VaultKubernetesAuthService


  • @ApplicationScoped
    public class VaultKubernetesAuthService
    extends Object
    This service provides programmatic access to the Kubernetes auth method. This may be used by admin clients that provision Vault for use from Kubernetes.
    • Method Detail

      • configure

        public void configure​(VaultKubernetesAuthConfig config)
        Configure the Kubernetes auth method.
        Parameters:
        config - configuration detail
      • getConfig

        public VaultKubernetesAuthConfig getConfig()
        Gives access to the currently configured Kubernetes auth method.
        Returns:
        the configuration
      • getRole

        public VaultKubernetesAuthRole getRole​(String name)
        Returns the definition of a Kubernetes vault role.
        Parameters:
        name - role name
        Returns:
        the Kubernetes vault role
      • createRole

        public void createRole​(String name,
                               VaultKubernetesAuthRole role)
        Create or update a Kubernetes vault role.
        Parameters:
        name - role name
        role - role attributes
      • deleteRole

        public void deleteRole​(String name)
        Delete a Kubernetes vault role through its name.
        Parameters:
        name - role name to delete
      • getRoles

        public List<String> getRoles()
        Get the names of the existing Kubernetes vault roles.
        Returns:
        the role names