open-vault/command/agentproxyshared/auth
Daniel Huckins 958ccda6b1
agent: Add implementation for injecting secrets as environment variables to vault agent cmd (#20739)
* added exec and env_template config/parsing

* add tests

* we can reuse ctconfig here

* do not create a non-nil map

* check defaults

* Apply suggestions from code review

Co-authored-by: Anton Averchenkov <84287187+averche@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: Anton Averchenkov <84287187+averche@users.noreply.github.com>

* first go of exec server

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* convert to list

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* convert to list

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* sig test

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* add failing example

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* refactor for config changes

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* add test for invalid signal

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* account for auth token changes

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* only start the runner once we have a token

* tests in diff branch

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: Anton Averchenkov <84287187+averche@users.noreply.github.com>

* fix rename

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* Update command/agent/exec/exec.go

Co-authored-by: Anton Averchenkov <84287187+averche@users.noreply.github.com>

* apply suggestions from code review

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* cleanup

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* remove unnecessary lock

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* refactor to use enum

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* dont block

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* handle default

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* make more explicit

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* cleanup

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* remove unused

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* remove unused file

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* remove test app

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: Anton Averchenkov <84287187+averche@users.noreply.github.com>

* apply suggestions from code review

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* update comment

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* add changelog

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* new channel for exec server token

* wire to run with vault agent

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* watch for child process to exit on its own

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

* block before returning

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>

---------

Signed-off-by: Daniel Huckins <dhuckins@users.noreply.github.com>
Co-authored-by: Anton Averchenkov <84287187+averche@users.noreply.github.com>
2023-05-25 09:23:56 -04:00
..
alicloud VAULT-15547 First pass at agent/proxy decoupling (#20548) 2023-05-17 09:38:34 -04:00
approle VAULT-15547 First pass at agent/proxy decoupling (#20548) 2023-05-17 09:38:34 -04:00
aws VAULT-15547 First pass at agent/proxy decoupling (#20548) 2023-05-17 09:38:34 -04:00
azure VAULT-15547 First pass at agent/proxy decoupling (#20548) 2023-05-17 09:38:34 -04:00
cert VAULT-15547 First pass at agent/proxy decoupling (#20548) 2023-05-17 09:38:34 -04:00
cf VAULT-15547 First pass at agent/proxy decoupling (#20548) 2023-05-17 09:38:34 -04:00
gcp VAULT-15547 First pass at agent/proxy decoupling (#20548) 2023-05-17 09:38:34 -04:00
jwt VAULT-15547 First pass at agent/proxy decoupling (#20548) 2023-05-17 09:38:34 -04:00
kerberos VAULT-15547 First pass at agent/proxy decoupling (#20548) 2023-05-17 09:38:34 -04:00
kubernetes VAULT-15547 First pass at agent/proxy decoupling (#20548) 2023-05-17 09:38:34 -04:00
oci VAULT-15547 First pass at agent/proxy decoupling (#20548) 2023-05-17 09:38:34 -04:00
token-file VAULT-15547 First pass at agent/proxy decoupling (#20548) 2023-05-17 09:38:34 -04:00
auth.go agent: Add implementation for injecting secrets as environment variables to vault agent cmd (#20739) 2023-05-25 09:23:56 -04:00
auth_test.go VAULT-15547 First pass at agent/proxy decoupling (#20548) 2023-05-17 09:38:34 -04:00