luxolus/open-vault
2
0
Fork 0
Code Issues 1 Pull requests Releases Activity

Wrap the dev logs in a sync.Once and deregister first, to eliminate the possibility of emitting the dev output twice in a race. (#10258)

Browse source
This commit is contained in:
Scott Miller 2020-10-28 10:23:18 -05:00 committed by GitHub
parent a4bcbb84e2
commit dd0ea9a389
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 61 additions and 59 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

120
command/server.go
View file

@ -1667,75 +1667,77 @@ CLUSTER_SYNTHESIS_COMPLETE:
} }
var qw *quiescenceSink var qw *quiescenceSink
var qwo sync.Once
qw = &quiescenceSink{ qw = &quiescenceSink{
t: time.AfterFunc(100*time.Millisecond, func() { t: time.AfterFunc(100*time.Millisecond, func() {
// Print the big dev mode warning! qwo.Do(func() {
c.UI.Warn(wrapAtLength( c.logger.DeregisterSink(qw)
"WARNING! dev mode is enabled! In this mode, Vault runs entirely " +
"in-memory and starts unsealed with a single unseal key. The root " +
"token is already authenticated to the CLI, so you can immediately " +
"begin using Vault."))
c.UI.Warn("")
c.UI.Warn("You may need to set the following environment variable:")
c.UI.Warn("")
endpointURL := "http://" + config.Listeners[0].Address // Print the big dev mode warning!
if runtime.GOOS == "windows" {
c.UI.Warn("PowerShell:")
c.UI.Warn(fmt.Sprintf(" $env:VAULT_ADDR=\"%s\"", endpointURL))
c.UI.Warn("cmd.exe:")
c.UI.Warn(fmt.Sprintf(" set VAULT_ADDR=%s", endpointURL))
} else {
c.UI.Warn(fmt.Sprintf(" $ export VAULT_ADDR='%s'", endpointURL))
}
// Unseal key is not returned if stored shares is supported
if len(init.SecretShares) > 0 {
c.UI.Warn("")
c.UI.Warn(wrapAtLength( c.UI.Warn(wrapAtLength(
"The unseal key and root token are displayed below in case you want " + "WARNING! dev mode is enabled! In this mode, Vault runs entirely " +
"to seal/unseal the Vault or re-authenticate.")) "in-memory and starts unsealed with a single unseal key. The root " +
"token is already authenticated to the CLI, so you can immediately " +
"begin using Vault."))
c.UI.Warn("")
c.UI.Warn("You may need to set the following environment variable:")
c.UI.Warn("") c.UI.Warn("")
c.UI.Warn(fmt.Sprintf("Unseal Key: %s", base64.StdEncoding.EncodeToString(init.SecretShares[0])))
}
if len(init.RecoveryShares) > 0 { endpointURL := "http://" + config.Listeners[0].Address
c.UI.Warn("") if runtime.GOOS == "windows" {
c.UI.Warn(wrapAtLength( c.UI.Warn("PowerShell:")
"The recovery key and root token are displayed below in case you want " + c.UI.Warn(fmt.Sprintf(" $env:VAULT_ADDR=\"%s\"", endpointURL))
"to seal/unseal the Vault or re-authenticate.")) c.UI.Warn("cmd.exe:")
c.UI.Warn("") c.UI.Warn(fmt.Sprintf(" set VAULT_ADDR=%s", endpointURL))
c.UI.Warn(fmt.Sprintf("Recovery Key: %s", base64.StdEncoding.EncodeToString(init.RecoveryShares[0]))) } else {
} c.UI.Warn(fmt.Sprintf(" $ export VAULT_ADDR='%s'", endpointURL))
}
c.UI.Warn(fmt.Sprintf("Root Token: %s", init.RootToken))
// Unseal key is not returned if stored shares is supported
if len(plugins) > 0 { if len(init.SecretShares) > 0 {
c.UI.Warn("") c.UI.Warn("")
c.UI.Warn(wrapAtLength( c.UI.Warn(wrapAtLength(
"The following dev plugins are registered in the catalog:")) "The unseal key and root token are displayed below in case you want " +
for _, p := range plugins { "to seal/unseal the Vault or re-authenticate."))
c.UI.Warn(fmt.Sprintf(" - %s", p)) c.UI.Warn("")
c.UI.Warn(fmt.Sprintf("Unseal Key: %s", base64.StdEncoding.EncodeToString(init.SecretShares[0])))
}
if len(init.RecoveryShares) > 0 {
c.UI.Warn("")
c.UI.Warn(wrapAtLength(
"The recovery key and root token are displayed below in case you want " +
"to seal/unseal the Vault or re-authenticate."))
c.UI.Warn("")
c.UI.Warn(fmt.Sprintf("Recovery Key: %s", base64.StdEncoding.EncodeToString(init.RecoveryShares[0])))
}
c.UI.Warn(fmt.Sprintf("Root Token: %s", init.RootToken))
if len(plugins) > 0 {
c.UI.Warn("")
c.UI.Warn(wrapAtLength(
"The following dev plugins are registered in the catalog:"))
for _, p := range plugins {
c.UI.Warn(fmt.Sprintf(" - %s", p))
}
}
if len(pluginsNotLoaded) > 0 {
c.UI.Warn("")
c.UI.Warn(wrapAtLength(
"The following dev plugins FAILED to be registered in the catalog due to unknown type:"))
for _, p := range pluginsNotLoaded {
c.UI.Warn(fmt.Sprintf(" - %s", p))
}
} }
}
if len(pluginsNotLoaded) > 0 {
c.UI.Warn("") c.UI.Warn("")
c.UI.Warn(wrapAtLength( c.UI.Warn(wrapAtLength(
"The following dev plugins FAILED to be registered in the catalog due to unknown type:")) "Development mode should NOT be used in production installations!"))
for _, p := range pluginsNotLoaded { c.UI.Warn("")
c.UI.Warn(fmt.Sprintf(" - %s", p)) })
} })}
}
c.UI.Warn("")
c.UI.Warn(wrapAtLength(
"Development mode should NOT be used in production installations!"))
c.UI.Warn("")
c.logger.DeregisterSink(qw)
}),
}
c.logger.RegisterSink(qw) c.logger.RegisterSink(qw)
} }