Documentation
¶
Overview ¶
Package command supplies the explicit MFA key-rotation operation. Parse before boot; Run borrows the application's configured MFA store and keyring.
Index ¶
Constants ¶
const DefaultBatch = 128
const DefaultMaxBatches = 10000
Variables ¶
This section is empty.
Functions ¶
func Declaration ¶
func Declaration(construct func(foundation.Resolver) (*mfa.Store, error)) (cli.Declaration, error)
Declaration registers `mfa reencrypt` in the ordinary CLI registry. The constructor resolves the configured MFA store after boot; parsing does no I/O.
Types ¶
type Command ¶
type Command struct {
// contains filtered or unexported fields
}
Command is a validated immutable re-encryption run.
func Parse ¶
Parse parses bounded MFA re-encryption arguments and writes flag help to help. Help requests return flag.ErrHelp.
func (Command) Run ¶
Run re-encrypts every factor that does not use the active key, in bounded batches, and reports committed counts, also when a later batch fails. Factors whose key is no longer retained are counted as failed and make the command fail after reporting; restore the retired key and run again. It never prints factor material.
Source Files