vault

type VaultAuthConfig struct {
	// Method specifies the authentication method: "token" (default), "oidc", or "jwt"
	Method string `json:"method,omitempty" yaml:"method,omitempty"`
	// Role is the Vault role to authenticate as (required when using oidc/jwt auth)
	Role string `json:"role,omitempty" yaml:"role,omitempty"`
	// Mount is the mount path for the auth backend (optional, defaults to "jwt" for oidc/jwt)
	Mount string `json:"mount,omitempty" yaml:"mount,omitempty"`
	// Token is the Vault authentication token (optional, defaults to VAULT_TOKEN env var)
	Token string `json:"token,omitempty" yaml:"token,omitempty"`
}

type VaultConfig struct {
	// Address is the Vault server address (optional, defaults to VAULT_ADDR env var)
	Address string `json:"address,omitempty" yaml:"address,omitempty"`
	// Path is the path to the secret in Vault (required)
	Path string `json:"path" yaml:"path"`
	// Mount is the secret engine mount path (optional, defaults to "secret")
	Mount string `json:"mount,omitempty" yaml:"mount,omitempty"`
	// Auth contains authentication configuration
	Auth *VaultAuthConfig `json:"auth,omitempty" yaml:"auth,omitempty"`

	// Internal: SSO tokens injected by the collector
	SSOAccessToken string `json:"-" yaml:"-"`
	SSOIDToken     string `json:"-" yaml:"-"`
}

type VaultProvider struct {
	// contains filtered or unexported fields
}