Zabbix

<?php declare(strict_types = 0);

/*

** Zabbix

** Copyright (C) 2001-2025 Zabbix SIA

**

** This program is free software; you can redistribute it and/or modify

** it under the terms of the GNU General Public License as published by

** the Free Software Foundation; either version 2 of the License, or

** (at your option) any later version.

**

** This program is distributed in the hope that it will be useful,

** but WITHOUT ANY WARRANTY; without even the implied warranty of

** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

** GNU General Public License for more details.

**

** You should have received a copy of the GNU General Public License

** along with this program; if not, write to the Free Software

** Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.

**/

​

​

/**

 * A class for load secrets from HashiCorp Vault secret manager.

 */

class CVaultHelper {

​

    /**

     * Vault API endpoint.

     *

     * @var string

     */

    protected $api_endpoint = '';

​

    /**

     * Vault access token.

     *

     * @var string

     */

    protected $token = '';

​

    public function __construct(string $api_endpoint, string $token) {

        if (self::validateVaultApiEndpoint($api_endpoint)) {

            $this->api_endpoint = rtrim(trim($api_endpoint), '/');

        }

        if (self::validateVaultToken($token)) {

            $this->token = $token;

        }

    }

​

    /**

     * Function returns Vault secret. Assumes given $path is correct.

     *

     * @param string $path  Path to secret.

     *

     * @throws Exception in case of configuration is not set.

     *

     * @return array

     */

    public function loadSecret(string $path): array {

        if ($this->token === '') {

            throw new Exception(_('Incorrect Vault token.'));

        }

​