vault: add KVWrite support

1 files changed, 25 insertions, 0 deletions

diff --git a/vault/client.go b/vault/client.go
index d1a6d14..afc1868 100644
--- a/vault/client.go
+++ b/vault/client.go
@@ -2,6 +2,7 @@ package vault
 
 import (
         "context"
+        "encoding/json"
         "fmt"
         "os"
         "path"
@@ -21,6 +22,7 @@ type VaultClient interface {
         DbCredential(c context.Context, suffix string) (*VaultUsernamePassword, error)
 
         KV(c context.Context, suffix string, out interface{}) (*VaultSecret, error)
+        KVWrite(c context.Context, suffix string, in interface{}) error
         KVApiKey(c context.Context, suffix string) (*VaultApiKey, error)
         KVCredential(c context.Context, suffix string) (*VaultUsernamePassword, error)
 
@@ -176,6 +178,22 @@ func (c *vaultClient) read(ctx context.Context, prefix, suffix string) (*api.Sec
         return s, key, nil
 }
 
+func (c *vaultClient) writeJson(ctx context.Context, prefix, suffix string, in interface{}) (*api.Secret, string, error) {
+        key := path.Join(prefix, suffix)
+
+        inBytes, err := json.Marshal(in)
+        if err != nil {
+                return nil, "", fmt.Errorf("error encoding json: %w", err)
+        }
+
+        s, err := c.lc.WriteBytesWithContext(ctx, key, inBytes)
+        if err != nil {
+                return nil, "", err
+        }
+
+        return s, key, nil
+}
+
 func (c *vaultClient) stop() {
         c.Lock()
         defer c.Unlock()
@@ -287,6 +305,13 @@ func (c *vaultClient) KV(ctx context.Context, suffix string, out interface{}) (*
         return &VaultSecret{s: s, n: k}, nil
 }
 
+func (c *vaultClient) KVWrite(ctx context.Context, suffix string, in interface{}) error {
+        if _, _, err := c.writeJson(ctx, "kv/data", suffix, in); err != nil {
+                return err
+        }
+        return nil
+}
+
 func (c *vaultClient) KVApiKey(ctx context.Context, suffix string) (*VaultApiKey, error) {
         var ak VaultApiKey
         s, err := c.KV(ctx, suffix, &ak)