Luke Granger-Brown
7592e76a31
tokend is responsible for issuing service-scoped tokens based on the token held and generated by the Vault Agent. It can also generate "server-user" scoped tokens, which exist for convenience's sake: they are not a strong attestation of the user on the machine, and have limited privileges compared to a Vault token issued using e.g. `vault login -method=oidc`. |
||
|---|---|---|
| .. | ||
| default.nix | ||
| tokencache.go | ||
| tokend.go | ||
| vaultissuer.go | ||