/* Copyright 2015 Home Office All rights reserved. Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. */ package main import ( "os" "os/signal" "syscall" "github.com/golang/glog" ) const ( Prog = "vault-sidekick" Version = "0.0.2" ) func main() { var err error var vault *VaultService // step: parse and validate the command line / environment options if err = parseOptions(); err != nil { showUsage("invalid options, %s", err) } glog.Infof("starting the %s, version: %s", Prog, Version) // step: create a client to vault if vault, err = NewVaultService(options.vaultURL); err != nil { showUsage("unable to create the vault client: %s", err) } // step: setup the termination signals signalChannel := make(chan os.Signal) signal.Notify(signalChannel, syscall.SIGHUP, syscall.SIGINT, syscall.SIGTERM, syscall.SIGQUIT) // step: create a channel to receive events upon and add our resources for renewal updates := make(chan VaultEvent, 10) vault.AddListener(updates) // step: add each of the resources to the service processor for _, rn := range options.resources.items { if err := rn.IsValid(); err != nil { showUsage("%s", err) } vault.Watch(rn) } // step: we simply wait for events i.e. secrets from vault and write them to the output directory for { select { case evt := <-updates: go writeResource(evt.Resource, evt.Secret) case <-signalChannel: glog.Infof("recieved a termination signal, shutting down the service") os.Exit(0) } } }