merka-vault 0.3.2

Vault provisioning and management crate integrating with merka-core
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

use crate::vault::common::VaultStatus;
use crate::vault::{UnsealResult, VaultError};
use async_trait::async_trait;

/// Core Vault operations that both CLI and Actor implementations must support
#[async_trait]
pub trait VaultInterface {
    /// Check the status of the vault
    async fn check_status(&self, addr: &str) -> Result<VaultStatus, VaultError>;

    /// Unseal vault with provided keys
    async fn unseal(&self, addr: &str, keys: Vec<String>) -> Result<UnsealResult, VaultError>;

    // Setup root vault
    async fn setup_root(
        &self,
        addr: &str,
        secret_shares: u8,
        secret_threshold: u8,
        key_name: &str,
    ) -> Result<String, VaultError>;

    // Setup sub vault
    async fn setup_sub(
        &self,
        root_addr: &str,
        root_token: &str,
        sub_addr: &str,
        domain: &str,
        ttl: &str,
    ) -> Result<String, VaultError>;

    /// Get an unwrapped transit token for auto-unseal
    async fn get_unwrapped_transit_token(
        &self,
        root_addr: &str,
        root_token: &str,
        key_name: &str,
    ) -> Result<String, VaultError>;
}