in vault-api-helper/main.go [397:432]
func main() {
initMode := flag.String("mode", "GCP-KSA", "a string")
ttlCheckInterval := flag.String("duration", "5m", "ttl checks")
flag.Parse()
server.SecretsConfig.vaultAddr = mustGetenv("VAULT_ADDR")
server.SecretsConfig.vaultCAPath = mustGetenv("VAULT_CAPATH")
server.SecretsConfig.gcpRolesetKeyPath = mustGetenv("INIT_GCP_KEYPATH")
server.SecretsConfig.k8sTokenPath = mustGetenv("INIT_K8S_TOKEN_KEYPATH")
server.SecretsConfig.k8sPath = mustGetenv("INIT_K8S_KEYPATH")
server.SecretsConfig.k8sRole = mustGetenv("INIT_K8S_ROLE")
server.SecretsConfig.credentialPath = mustGetenv("GOOGLE_APPLICATION_CREDENTIALS")
server.SecretsConfig.k8sNamespace = mustGetenv("MY_POD_NAMESPACE")
log.WithFields(log.Fields{
"initMode": *initMode,
}).Info("main:start")
log.WithFields(log.Fields{
"vaultAddr": server.SecretsConfig.vaultAddr,
"vaultCAPath": server.SecretsConfig.vaultCAPath,
}).Info("main:Parms")
if *initMode == "GCP-RECYCLE" {
dur, _ := time.ParseDuration(*ttlCheckInterval)
ticker = time.NewTicker(dur)
monitor()
os.Exit(0)
}
getSecrets()
}