12 Commits (4e308ef3625a6f4e155ed547f604e16bf3d875ae)

Author	SHA1	Message	Date
Martin Atkins	1e2da4f776	command/cliconfig: New CredentialsSource implementation ... This new implementation is not yet used, but should eventually replace the technique of composing together various types from the svchost/auth package, since our requirements are now complex enough that they're more straightforward to express in direct code within a single type than as a composition of the building blocks in the svchost/auth package.	7 years ago
Martin Atkins	ec8dadcfa9	svchost/auth: store and forget operations for helper programs ... This introduces two new verbs to the credentials helper protocol to store and forget credentials, and uses them to implement StoreForHost and ForgetForHost.	7 years ago
Martin Atkins	821d0401bc	svchost/auth: New API for storing and forgetting credentials ... This new functionality will be used as part of implementing the "terraform login" and "terraform logout" commands. As of this commit, the storage codepaths are all just stubs. Subsequent commits will implement these new methods for each of the different physical credentials sources.	7 years ago
Radek Simko	5b9f2fafc8	Standardise directory name for test data	7 years ago
Sander van Harmelen	179b32d426	Add a `CredentialsForHost` method to disco.Disco ... By adding this method you now only have to pass a `*disco.Disco` object around in order to do discovery and use any configured credentials for the discovered hosts. Of course you can also still pass around both a `*disco.Disco` and a `auth.CredentialsSource` object if there is a need or a reason for that!	8 years ago
Martin Atkins	d5b0beac01	svchost/auth: static credentials source ... This uses an in-memory table of credentials keyed on hostname. This is the simplest possible credentials source that can actually return credentials, and is suitable for representing statically-configured credentials from configuration.	9 years ago
Martin Atkins	0db521a281	svchost/auth: expose a "NoCredentials" credentials source ... For situations where no credentials are needed but where a working CredentialsSource is still required, this variable provides a convenient way to get a fully-functional-but-empty credentials source.	9 years ago
Martin Atkins	fcff4cbc95	svchost/auth: caching credentials source ... This credentials source wraps another and caches its results in memory in a map that is keyed on the request hostname. This should ease the common case of many services operating on the same hostname by allowing an initial set of credentials to be re-used for subsequent requests.	9 years ago
Martin Atkins	981c95f699	svchost/auth: CredentialsSource that runs an external program ... This CredentialsSource can serve as an extension point to pass credentials from an arbitrary external system to Terraform. For example, an external helper program could fetch limited-time credentials from HashiCorp Vault and return them, thus avoiding the need for any static configuration to be maintained locally (except a Vault token!). So far there are no real programs implementing this protocol, though this commit includes a basic implementation that we use for unit tests.	9 years ago
Martin Atkins	1b60e8fdb6	svchost/auth: HostCredentialsFromMap function ... This function deals with turning a map derived from some user input (e.g. in a config file) into a HostCredentials object, if possible. This will be used as a standard way to specify credentials so we have a place to add new credentials types in future and have support for those across all of our map-based CredentialsSources.	9 years ago
Martin Atkins	43a3357473	svchost/auth: token-based HostCredentials ... This is the only credentials type we support right now, which just sends an opaque token via the "Bearer" HTTP auth scheme.	9 years ago
Martin Atkins	3c65b5dd61	svchost/auth: package for looking up credentials for service hosts ... This commit establishes the primary types involved here. Subsequent commits will add specific implementations of these interfaces.	9 years ago