package mysql import ( "context" "database/sql" "fmt" "strings" "sync" _ "github.com/go-sql-driver/mysql" "github.com/hashicorp/vault/sdk/framework" "github.com/hashicorp/vault/sdk/logical" ) func Factory(ctx context.Context, conf *logical.BackendConfig) (logical.Backend, error) { b := Backend() if err := b.Setup(ctx, conf); err != nil { return nil, err } return b, nil } func Backend() *backend { var b backend b.Backend = &framework.Backend{ Help: strings.TrimSpace(backendHelp), PathsSpecial: &logical.Paths{ SealWrapStorage: []string{ "config/connection", }, }, Paths: []*framework.Path{ pathConfigConnection(&b), pathConfigLease(&b), pathListRoles(&b), pathRoles(&b), pathRoleCreate(&b), }, Secrets: []*framework.Secret{ secretCreds(&b), }, Invalidate: b.invalidate, Clean: b.ResetDB, BackendType: logical.TypeLogical, } return &b } type backend struct { *framework.Backend db *sql.DB lock sync.Mutex } // DB returns the database connection. func (b *backend) DB(ctx context.Context, s logical.Storage) (*sql.DB, error) { b.lock.Lock() defer b.lock.Unlock() // If we already have a DB, we got it! if b.db != nil { if err := b.db.Ping(); err == nil { return b.db, nil } // If the ping was unsuccessful, close it and ignore errors as we'll be // reestablishing anyways b.db.Close() } // Otherwise, attempt to make connection entry, err := s.Get(ctx, "config/connection") if err != nil { return nil, err } if entry == nil { return nil, fmt.Errorf("configure the DB connection with config/connection first") } var connConfig connectionConfig if err := entry.DecodeJSON(&connConfig); err != nil { return nil, err } conn := connConfig.ConnectionURL if len(conn) == 0 { conn = connConfig.ConnectionString } b.db, err = sql.Open("mysql", conn) if err != nil { return nil, err } // Set some connection pool settings. We don't need much of this, // since the request rate shouldn't be high. b.db.SetMaxOpenConns(connConfig.MaxOpenConnections) b.db.SetMaxIdleConns(connConfig.MaxIdleConnections) return b.db, nil } // ResetDB forces a connection next time DB() is called. func (b *backend) ResetDB(_ context.Context) { b.lock.Lock() defer b.lock.Unlock() if b.db != nil { b.db.Close() } b.db = nil } func (b *backend) invalidate(ctx context.Context, key string) { switch key { case "config/connection": b.ResetDB(ctx) } } // Lease returns the lease information func (b *backend) Lease(ctx context.Context, s logical.Storage) (*configLease, error) { entry, err := s.Get(ctx, "config/lease") if err != nil { return nil, err } if entry == nil { return nil, nil } var result configLease if err := entry.DecodeJSON(&result); err != nil { return nil, err } return &result, nil } const backendHelp = ` The MySQL backend dynamically generates database users. After mounting this backend, configure it using the endpoints within the "config/" path. `