io.quarkus.vault.runtime.client.backend.VaultInternalSystemBackend Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of quarkus-vault Show documentation
Store your credentials securely in HashiCorp Vault
There is a newer version: 3.0.0.Beta1
package io.quarkus.vault.runtime.client.backend;

import static java.util.Collections.emptyMap;

import java.util.HashMap;
import java.util.Map;

import javax.inject.Singleton;

import io.quarkus.vault.runtime.client.VaultInternalBase;
import io.quarkus.vault.runtime.client.dto.sys.VaultHealthResult;
import io.quarkus.vault.runtime.client.dto.sys.VaultInitBody;
import io.quarkus.vault.runtime.client.dto.sys.VaultInitResponse;
import io.quarkus.vault.runtime.client.dto.sys.VaultLeasesBody;
import io.quarkus.vault.runtime.client.dto.sys.VaultLeasesLookup;
import io.quarkus.vault.runtime.client.dto.sys.VaultListPolicyResult;
import io.quarkus.vault.runtime.client.dto.sys.VaultPolicyBody;
import io.quarkus.vault.runtime.client.dto.sys.VaultPolicyResult;
import io.quarkus.vault.runtime.client.dto.sys.VaultRenewLease;
import io.quarkus.vault.runtime.client.dto.sys.VaultSealStatusResult;
import io.quarkus.vault.runtime.client.dto.sys.VaultUnwrapBody;
import io.quarkus.vault.runtime.client.dto.sys.VaultWrapResult;

@Singleton
public class VaultInternalSystemBackend extends VaultInternalBase {

    public int systemHealth(boolean isStandByOk, boolean isPerfStandByOk) {
        Map queryParams = getHealthParams(isStandByOk, isPerfStandByOk);
        return vaultClient.head("sys/health", queryParams);
    }

    public VaultHealthResult systemHealthStatus(boolean isStandByOk, boolean isPerfStandByOk) {
        Map queryParams = getHealthParams(isStandByOk, isPerfStandByOk);
        return vaultClient.get("sys/health", queryParams, VaultHealthResult.class);
    }

    public VaultSealStatusResult systemSealStatus() {
        return vaultClient.get("sys/seal-status", emptyMap(), VaultSealStatusResult.class);
    }

    public VaultInitResponse init(int secretShares, int secretThreshold) {
        VaultInitBody body = new VaultInitBody(secretShares, secretThreshold);
        return vaultClient.put("sys/init", body, VaultInitResponse.class);
    }

    public VaultWrapResult wrap(String token, long ttl, Object object) {
        Map headers = new HashMap<>();
        headers.put("X-Vault-Wrap-TTL", "" + ttl);
        return vaultClient.post("sys/wrapping/wrap", token, headers, object, VaultWrapResult.class);
    }

    public  T unwrap(String wrappingToken, Class resultClass) {
        return vaultClient.post("sys/wrapping/unwrap", wrappingToken, VaultUnwrapBody.EMPTY, resultClass);
    }

    public VaultPolicyResult getPolicy(String token, String name) {
        return vaultClient.get("sys/policy/" + name, token, VaultPolicyResult.class);
    }

    public void createUpdatePolicy(String token, String name, VaultPolicyBody body) {
        vaultClient.put("sys/policy/" + name, token, body, 204);
    }

    public VaultListPolicyResult listPolicies(String token) {
        return vaultClient.get("sys/policy", token, VaultListPolicyResult.class);
    }

    public void deletePolicy(String token, String name) {
        vaultClient.delete("sys/policy/" + name, token, 204);
    }

    public VaultLeasesLookup lookupLease(String token, String leaseId) {
        VaultLeasesBody body = new VaultLeasesBody(leaseId);
        return vaultClient.put("sys/leases/lookup", token, body, VaultLeasesLookup.class);
    }

    public VaultRenewLease renewLease(String token, String leaseId) {
        VaultLeasesBody body = new VaultLeasesBody(leaseId);
        return vaultClient.put("sys/leases/renew", token, body, VaultRenewLease.class);
    }

    // ---

    private Map getHealthParams(boolean isStandByOk, boolean isPerfStandByOk) {
        Map queryParams = new HashMap<>();
        if (isStandByOk) {
            queryParams.put("standbyok", "true");
        }

        if (isPerfStandByOk) {
            queryParams.put("perfstandbyok", "true");
        }

        return queryParams;
    }
}