# == Class: barbican::plugins::vault
#
# Sets up Barbican vault plugin
#
# === Parameters
#
# [*vault_url*]
#   (optional) The Vault URL.
#   Defaults to $::os_service_default
#
# [*root_token_id*]
#   (optional) Vault Root Token ID.
#   Defaults to $::os_service_default
#
# [*approle_role_id*]
#   (optional) Set the approle role ID.
#   Defaults to $::os_service_default
#
# [*approle_secret_id*]
#   (optional) Set the approle secret ID.
#   Defaults to $::os_service_default
#
# [*kv_mountpoint*]
#   (optional) Set the mountpoint of the KV.
#   Defaults to $::os_service_default
#
# [*use_ssl*]
#   (optional) Enable or disable SSL
#   Defaults to false
#
# [*ssl_ca_crt_file*]
#   (optional) Set the ssl CA cert file
#   Defaults to $::os_service_default
#
# [*global_default*]
#   (optional) set plugin as global default
#   Defaults to false
#
class barbican::plugins::vault (
  $vault_url         = $::os_service_default,
  $root_token_id     = $::os_service_default,
  $approle_role_id   = $::os_service_default,
  $approle_secret_id = $::os_service_default,
  $kv_mountpoint     = $::os_service_default,
  $use_ssl           = false,
  $ssl_ca_crt_file   = $::os_service_default,
  $global_default    = false,
) {

  barbican_config {
    'secretstore:vault/secret_store_plugin':  value => 'vault_plugin';
    'secretstore:vault/global_default':       value => $global_default;
    'vault_plugin/vault_url':                 value => $vault_url;
    'vault_plugin/root_token_id':             value => $root_token_id;
    'vault_plugin/approle_role_id':           value => $approle_role_id;
    'vault_plugin/approle_secret_id':         value => $approle_secret_id;
    'vault_plugin/kv_mountpoint':             value => $kv_mountpoint;
    'vault_plugin/use_ssl':                   value => $use_ssl;
    'vault_plugin/ssl_ca_crt_file':           value => $ssl_ca_crt_file;
  }
}