1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
package vaultmain
import (
"encoding/hex"
"fmt"
"os"
"path/filepath"
)
func kcpRootDir(cfg Config) string {
if cfg.KCPRootDir != "" {
return cfg.KCPRootDir
}
return filepath.Dir(cfg.KCPKubeconfig)
}
func kcpAdminTokenStorePath(cfg Config) string {
return filepath.Join(kcpRootDir(cfg), ".admin-token-store")
}
func kcpAdminTokenStoreData(cfg Config) (map[string]any, error) {
path := kcpAdminTokenStorePath(cfg)
raw, err := os.ReadFile(path)
if err != nil {
return nil, fmt.Errorf("the shard-admin token store kcp writes at startup is not readable at %s: %w", path, err)
}
if len(raw) == 0 {
return nil, fmt.Errorf("the shard-admin token store at %s is empty, so kcp has not written the token hash yet", path)
}
return map[string]any{"token-hash": hex.EncodeToString(raw)}, nil
}
