vault

type Client struct {
	// contains filtered or unexported fields
}

type Config struct {
	Address       string
	Token         string
	CACert        string
	TLSSkipVerify bool
	// ClientCert, when non-nil, is presented during the TLS handshake. It is
	// used by the cert auth method (mtls / mtls+tpm): the certificate's
	// private key may be a hardware-backed crypto.Signer, so GetClientCertificate
	// invokes it lazily per handshake rather than holding key bytes.
	ClientCert *tls.Certificate
}

type Event struct {
	EventType string
	Path      string
	DataPath  string
	MountPath string
	Version   int
}

type HealthResponse struct {
	Version     string
	Enterprise  bool
	ClusterName string
}

type IssuedCert struct {
	// CertPEM is the leaf certificate followed by any CA chain, PEM-encoded.
	CertPEM string
	// PrivateKeyPEM is populated only by IssueCertificate (Vault generates the
	// key). SignCSR leaves it empty because the key never left the host.
	PrivateKeyPEM string
	// Serial is the certificate serial number, for audit/revocation.
	Serial string
}

type LoginResult struct {
	Token        string
	MFARequired  bool
	MFARequestID string
	MFAMethods   []MFAMethod
}

type MFAMethod struct {
	ID           string `json:"id"`
	Type         string `json:"type"`
	UsesPasscode bool   `json:"uses_passcode"`
}

type Secret struct {
	Data    map[string]any
	Version int
}