open-vault/vault/seal
Jeff Mitchell a83ed04730 Add ability to migrate autoseal to autoseal (#5930)
* Add ability to migrate autoseal to autoseal

This adds the ability to migrate from shamir to autoseal, autoseal to
shamir, or autoseal to autoseal, by allowing multiple seal stanzas. A
disabled stanza will be used as the config being migrated from; this can
also be used to provide an unwrap seal on ent over multiple unseals.

A new test is added to ensure that autoseal to autoseal works as
expected.

* Fix test

* Provide default shamir info if not given in config

* Linting feedback

* Remove context var that isn't used

* Don't run auto unseal watcher when in migration, and move SetCores to SetSealsForMigration func

* Slight logic cleanup

* Fix test build and fix bug

* Updates

* remove GetRecoveryKey function
2019-03-04 14:11:56 -08:00
..
alicloudkms autoseal: fix error typos (#5877) 2018-11-29 16:07:08 -08:00
awskms Check ec2 instance metadata for region (#6025) 2019-01-18 14:49:24 -08:00
azurekeyvault fix key version tracking (#5757) 2018-11-12 09:52:31 -08:00
gcpckms Typo fix in gcpckms.go (#6081) 2019-01-23 07:52:31 -05:00
transit Transit Autounseal (#5995) 2019-02-28 13:13:56 -08:00
envelope.go [Review Only] Autoseal OSS port (#757) 2018-10-19 14:43:57 -07:00
envelope_test.go [Review Only] Autoseal OSS port (#757) 2018-10-19 14:43:57 -07:00
seal.go Transit Autounseal (#5995) 2019-02-28 13:13:56 -08:00
seal_testing.go Add ability to migrate autoseal to autoseal (#5930) 2019-03-04 14:11:56 -08:00