forked from hashicorp/vault
-
Notifications
You must be signed in to change notification settings - Fork 0
/
renew.go
90 lines (72 loc) · 2.06 KB
/
renew.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
package command
import (
"fmt"
"strconv"
"strings"
)
// RenewCommand is a Command that mounts a new mount.
type RenewCommand struct {
Meta
}
func (c *RenewCommand) Run(args []string) int {
var format string
flags := c.Meta.FlagSet("renew", FlagSetDefault)
flags.StringVar(&format, "format", "table", "")
flags.Usage = func() { c.Ui.Error(c.Help()) }
if err := flags.Parse(args); err != nil {
return 1
}
args = flags.Args()
if len(args) < 1 || len(args) >= 3 {
flags.Usage()
c.Ui.Error(fmt.Sprintf(
"\nRenew expects at least one argument: the lease ID to renew"))
return 1
}
var increment int
leaseId := args[0]
if len(args) > 1 {
parsed, err := strconv.ParseInt(args[1], 10, 0)
if err != nil {
c.Ui.Error(fmt.Sprintf(
"Invalid increment, must be an int: %s", err))
return 1
}
increment = int(parsed)
}
client, err := c.Client()
if err != nil {
c.Ui.Error(fmt.Sprintf(
"Error initializing client: %s", err))
return 2
}
secret, err := client.Sys().Renew(leaseId, increment)
if err != nil {
c.Ui.Error(fmt.Sprintf(
"Renew error: %s", err))
return 1
}
return OutputSecret(c.Ui, format, secret)
}
func (c *RenewCommand) Synopsis() string {
return "Renew the lease of a secret"
}
func (c *RenewCommand) Help() string {
helpText := `
Usage: vault renew [options] id [increment]
Renew the lease on a secret, extending the time that it can be used
before it is revoked by Vault.
Every secret in Vault has a lease associated with it. If the user of
the secret wants to use it longer than the lease, then it must be
renewed. Renewing the lease will not change the contents of the secret.
To renew a secret, run this command with the lease ID returned when it
was read. Optionally, request a specific increment in seconds. Vault
is not required to honor this request.
General Options:
` + generalOptionsUsage() + `
Renew Options:
-format=table The format for output. By default it is a whitespace-
delimited table. This can also be json.
`
return strings.TrimSpace(helpText)
}