open-consul/vendor/github.com/hashicorp
Hans Hasselberg 02de4c8b76
add primary keys to list keyring (#8522)
During gossip encryption key rotation it would be nice to be able to see if all nodes are using the same key. This PR adds another field to the json response from `GET v1/operator/keyring` which lists the primary keys in use per dc. That way an operator can tell when a key was successfully setup as primary key.

Based on https://github.com/hashicorp/serf/pull/611 to add primary key to list keyring output:

```json
[
  {
    "WAN": true,
    "Datacenter": "dc2",
    "Segment": "",
    "Keys": {
      "0OuM4oC3Os18OblWiBbZUaHA7Hk+tNs/6nhNYtaNduM=": 6,
      "SINm887hKTzmMWeBNKTJReaTLX3mBEJKriDyt88Ad+g=": 6
    },
    "PrimaryKeys": {
      "SINm887hKTzmMWeBNKTJReaTLX3mBEJKriDyt88Ad+g=": 6
    },
    "NumNodes": 6
  },
  {
    "WAN": false,
    "Datacenter": "dc2",
    "Segment": "",
    "Keys": {
      "0OuM4oC3Os18OblWiBbZUaHA7Hk+tNs/6nhNYtaNduM=": 8,
      "SINm887hKTzmMWeBNKTJReaTLX3mBEJKriDyt88Ad+g=": 8
    },
    "PrimaryKeys": {
      "SINm887hKTzmMWeBNKTJReaTLX3mBEJKriDyt88Ad+g=": 8
    },
    "NumNodes": 8
  },
  {
    "WAN": false,
    "Datacenter": "dc1",
    "Segment": "",
    "Keys": {
      "0OuM4oC3Os18OblWiBbZUaHA7Hk+tNs/6nhNYtaNduM=": 3,
      "SINm887hKTzmMWeBNKTJReaTLX3mBEJKriDyt88Ad+g=": 8
    },
    "PrimaryKeys": {
      "SINm887hKTzmMWeBNKTJReaTLX3mBEJKriDyt88Ad+g=": 8
    },
    "NumNodes": 8
  }
]
```

I intentionally did not change the CLI output because I didn't find a good way of displaying this information. There are a couple of options that we could implement later:
* add a flag to show the primary keys
* add a flag to show json output

Fixes #3393.
2020-08-18 09:50:24 +02:00
..
errwrap Update vendoring from go mod. (#5566) 2019-03-26 17:50:42 -04:00
go-bexpr Update go-bexpr (#6190) 2019-07-23 14:45:20 -04:00
go-checkpoint Updating go-checkpoint lib to have a fixed timeout (#3564) 2017-10-17 17:01:23 -07:00
go-cleanhttp Update vendoring from go mod. (#5566) 2019-03-26 17:50:42 -04:00
go-connlimit gossip: Avoid issue where two unique leave events for the same node could lead to infinite rebroadcast storms (#8343) 2020-07-21 15:48:10 -05:00
go-discover Update go-discover dependency (#7731) 2020-05-04 10:59:48 -04:00
go-hclog Allow users to configure either unstructured or JSON logging (#7130) 2020-01-28 17:50:41 -06:00
go-immutable-radix vendor: Update github.com/armon/go-metrics to v0.3.3 2020-07-23 11:37:33 -07:00
go-memdb Update go-memdb and go-lru dependencies 2020-06-16 13:00:28 -04:00
go-msgpack agent: transfer leadership when establishLeadership fails (#5247) 2019-06-19 14:50:48 +02:00
go-multierror agent: don't let left nodes hold onto their node-id (#7747) 2020-05-04 18:39:08 +02:00
go-raftchunking Revert "connect: support AWS PCA as a CA provider" (#6251) 2019-07-31 09:08:10 -04:00
go-retryablehttp connect: intermediate CA certs generated with the vault provider lack URI SANs (#6491) 2019-09-23 12:04:40 -05:00
go-rootcerts api: add option to set TLS options in-memory for API client (#7093) 2020-01-28 11:54:49 +01:00
go-sockaddr connect: intermediate CA certs generated with the vault provider lack URI SANs (#6491) 2019-09-23 12:04:40 -05:00
go-syslog Update vendoring from go mod. (#5566) 2019-03-26 17:50:42 -04:00
go-uuid acl: add auth method for JWTs (#7846) 2020-05-11 20:59:29 -05:00
go-version Update github.com/joyent/triton-go to latest 2020-04-16 12:34:29 -04:00
golang-lru Update go-memdb and go-lru dependencies 2020-06-16 13:00:28 -04:00
hcl connect: intermediate CA certs generated with the vault provider lack URI SANs (#6491) 2019-09-23 12:04:40 -05:00
hil Update vendoring from go mod. (#5566) 2019-03-26 17:50:42 -04:00
mdns fix remaining CI failures after Go 1.12.1 Upgrade (#5576) 2019-03-29 16:29:27 +01:00
memberlist agent: don't let left nodes hold onto their node-id (#7747) 2020-05-04 18:39:08 +02:00
net-rpc-msgpackrpc Manage dependencies via Godep 2016-02-12 16:50:37 -08:00
raft raft: update raft to v1.1.2 (#7079) 2020-01-20 13:58:02 +01:00
raft-boltdb Chunking support (#6172) 2019-07-24 17:06:39 -04:00
serf add primary keys to list keyring (#8522) 2020-08-18 09:50:24 +02:00
vault connect: intermediate CA certs generated with the vault provider lack URI SANs (#6491) 2019-09-23 12:04:40 -05:00
vic Pull go-discover to fix Sirupsen/logrus (#5598) 2019-04-03 20:07:00 +01:00
yamux Upgrade xDS (go-control-plane) API to support Envoy 1.10. (#5872) 2019-06-07 07:10:43 -05:00