BestAuth determines the best auth to use based on the environment.

Find a secret from keychain on OS X.

IsErrUpgradingNonVersionedToVersionedData can happen right after start-up during a read to the KV secrets engine.

ListData lists which secrets are under the given path directory.

NewDummServer for unit testing.

GetGithubAuth grabs the github token from keychain on mac OSX.

Check and set: -1 to ignore 0: write only allowed if key doesn't exist 1+: write only allowed if cas matches the current version of the secret.

SplitKVPath splits a full path into it's mount, type, and path components.

go:embed setup-region.sh.

go:embed setup.sh.

JWK is the data stored in Vault.

JWKS stores the multiple versions of data retrieved from Vault, as well as the data needed to access Vault.

KVData is the data from the normal get path.

KVJWK represents the kv data in vault returned by a specific version request.

KVMetadata is the metadata from the metadata path.

NoAuth skips any auth.