325e822e8a
* NewCore tech debt refactoring * addExtraCredentialBackends * singletonMounts => mountTypeToken instead of 'token' * NewCore tests support ent backend addition * PR feedback * reorder method calls * mounthPath___ standardization * Try to be more explicit about the min number of backends * Include cluster listener * explicit declaration of events before assignment * Removed nil checking * resolve conflicts Co-authored-by: Peter Wilson <peter.wilson@hashicorp.com>
79 lines
2.4 KiB
Go
79 lines
2.4 KiB
Go
// Copyright (c) HashiCorp, Inc.
|
|
// SPDX-License-Identifier: MPL-2.0
|
|
|
|
//go:build !enterprise
|
|
|
|
package vault
|
|
|
|
import (
|
|
"context"
|
|
"path"
|
|
|
|
"github.com/hashicorp/vault/helper/namespace"
|
|
"github.com/hashicorp/vault/sdk/logical"
|
|
)
|
|
|
|
func addPathCheckers(c *Core, entry *MountEntry, backend logical.Backend, viewPath string) {
|
|
c.addBackendWriteForwardedPaths(backend, viewPath)
|
|
}
|
|
|
|
func removePathCheckers(c *Core, entry *MountEntry, viewPath string) {
|
|
c.writeForwardedPaths.RemovePathPrefix(viewPath)
|
|
}
|
|
|
|
func addAuditPathChecker(*Core, *MountEntry, *BarrierView, string) {}
|
|
func removeAuditPathChecker(*Core, *MountEntry) {}
|
|
func addFilterablePath(*Core, string) {}
|
|
func addKnownPath(*Core, string) {}
|
|
func preprocessMount(*Core, *MountEntry, *BarrierView) (bool, error) { return false, nil }
|
|
func clearIgnoredPaths(context.Context, *Core, logical.Backend, string) error { return nil }
|
|
func addLicenseCallback(*Core, logical.Backend) {}
|
|
func runFilteredPathsEvaluation(context.Context, *Core, bool) error { return nil }
|
|
|
|
// ViewPath returns storage prefix for the view
|
|
func (e *MountEntry) ViewPath() string {
|
|
switch e.Type {
|
|
case mountTypeSystem:
|
|
return systemBarrierPrefix
|
|
case "token":
|
|
return path.Join(systemBarrierPrefix, tokenSubPath) + "/"
|
|
}
|
|
|
|
switch e.Table {
|
|
case mountTableType:
|
|
return backendBarrierPrefix + e.UUID + "/"
|
|
case credentialTableType:
|
|
return credentialBarrierPrefix + e.UUID + "/"
|
|
case auditTableType:
|
|
return auditBarrierPrefix + e.UUID + "/"
|
|
}
|
|
|
|
panic("invalid mount entry")
|
|
}
|
|
|
|
func verifyNamespace(*Core, *namespace.Namespace, *MountEntry) error { return nil }
|
|
|
|
// mountEntrySysView creates a logical.SystemView from global and
|
|
// mount-specific entries; because this should be called when setting
|
|
// up a mountEntry, it doesn't check to ensure that me is not nil
|
|
func (c *Core) mountEntrySysView(entry *MountEntry) extendedSystemView {
|
|
esi := extendedSystemViewImpl{
|
|
dynamicSystemView{
|
|
core: c,
|
|
mountEntry: entry,
|
|
perfStandby: c.perfStandby,
|
|
},
|
|
}
|
|
|
|
// Due to complexity in the ACME interface, only return it when we
|
|
// are a PKI plugin that needs it.
|
|
if entry.Type != "pki" {
|
|
return esi
|
|
}
|
|
return c.NewAcmeBillingSystemView(esi)
|
|
}
|
|
|
|
func (c *Core) entBuiltinPluginMetrics(ctx context.Context, entry *MountEntry, val float32) error {
|
|
return nil
|
|
}
|