open-vault/command/healthcheck
Steven Clark c8837f2010
Add ACME health checks to pki health-check CLI (#20619)
* Add ACME health checks to pki health-check CLI

 - Verify we have the required header values listed within allowed_response_headers: 'Replay-Nonce', 'Link', 'Location'
 - Make sure the local cluster config path variable contains an URL with an https scheme

* Split ACME health checks into two separate verifications

 - Promote ACME usage through the enable_acme_issuance check, if ACME is disabled currently
 - If ACME is enabled verify that we have a valid
    'path' field within local cluster configuration as well as the proper response headers allowed.
 - Factor out response header verifications into a separate check mainly to work around possible permission issues.

* Only recommend enabling ACME on mounts with intermediate issuers

* Attempt to connect to the ACME directory based on the cluster path variable

 - Final health check is to attempt to connect to the ACME directory based on the cluster local 'path' value. Only if we successfully connect do we say ACME is healthy.

* Fix broken unit test
2023-05-23 10:37:31 -04:00
..
healthcheck.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
pki.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
pki_allow_acme_headers.go Add ACME health checks to pki health-check CLI (#20619) 2023-05-23 10:37:31 -04:00
pki_allow_if_modified_since.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
pki_audit_visibility.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
pki_ca_validity_period.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
pki_crl_validity_period.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
pki_enable_acme_issuance.go Add ACME health checks to pki health-check CLI (#20619) 2023-05-23 10:37:31 -04:00
pki_enable_auto_tidy.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
pki_hardware_backed_root.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
pki_role_allows_glob_wildcards.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
pki_role_allows_localhost.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
pki_role_no_store_false.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
pki_root_issued_leaves.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
pki_tidy_last_run.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
pki_too_many_certs.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
shared.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
util.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00