mirror of
https://github.com/hanzokms/cli.git
synced 2026-10-30 20:30:00 +00:00
zeekay
bb34acfb48
Infisical->KMS across all .go (identifiers + env-var keys + brand strings), e2e env vars + e2e/packages/infisical->kms dir. Only external published deps remain: github.com/infisical/go-sdk + infisical-kmip API symbols (kmsSdk.NewInfisicalClient etc.) and the forked keyring's INFISICAL_VAULT_FILE_PASSPHRASE env contract — these need upstream forks to rename.
27 lines
998 B
Go
27 lines
998 B
Go
package gatewayv2
|
|
|
|
const (
|
|
KUBERNETES_SERVICE_HOST_ENV_NAME = "KUBERNETES_SERVICE_HOST"
|
|
KUBERNETES_SERVICE_PORT_HTTPS_ENV_NAME = "KUBERNETES_SERVICE_PORT_HTTPS"
|
|
KUBERNETES_SERVICE_ACCOUNT_CA_CERT_PATH = "/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"
|
|
KUBERNETES_SERVICE_ACCOUNT_TOKEN_PATH = "/var/run/secrets/kubernetes.io/serviceaccount/token"
|
|
KMS_PAM_SESSION_RECORDING_PATH_ENV_NAME = "KMS_PAM_SESSION_RECORDING_PATH"
|
|
|
|
RELAY_NAME_ENV_NAME = "KMS_RELAY_NAME"
|
|
RELAY_HOST_ENV_NAME = "KMS_RELAY_HOST"
|
|
RELAY_TYPE_ENV_NAME = "KMS_RELAY_TYPE"
|
|
GATEWAY_NAME_ENV_NAME = "KMS_GATEWAY_NAME"
|
|
|
|
RELAY_AUTH_SECRET_ENV_NAME = "KMS_RELAY_AUTH_SECRET"
|
|
KMS_TOKEN_ENV_NAME = "KMS_TOKEN"
|
|
|
|
KMS_HTTP_PROXY_ACTION_HEADER = "x-kms-action"
|
|
)
|
|
|
|
type HttpProxyAction string
|
|
|
|
const (
|
|
HttpProxyActionInjectGatewayK8sServiceAccountToken HttpProxyAction = "inject-k8s-sa-auth-token"
|
|
HttpProxyActionUseGatewayK8sServiceAccount HttpProxyAction = "use-k8s-sa"
|
|
)
|