open-vault/command/server/seal
Jeff Mitchell a83ed04730 Add ability to migrate autoseal to autoseal (#5930)
* Add ability to migrate autoseal to autoseal

This adds the ability to migrate from shamir to autoseal, autoseal to
shamir, or autoseal to autoseal, by allowing multiple seal stanzas. A
disabled stanza will be used as the config being migrated from; this can
also be used to provide an unwrap seal on ent over multiple unseals.

A new test is added to ensure that autoseal to autoseal works as
expected.

* Fix test

* Provide default shamir info if not given in config

* Linting feedback

* Remove context var that isn't used

* Don't run auto unseal watcher when in migration, and move SetCores to SetSealsForMigration func

* Slight logic cleanup

* Fix test build and fix bug

* Updates

* remove GetRecoveryKey function
2019-03-04 14:11:56 -08:00
..
server_seal.go Add ability to migrate autoseal to autoseal (#5930) 2019-03-04 14:11:56 -08:00
server_seal_alicloudkms.go Add ability to migrate autoseal to autoseal (#5930) 2019-03-04 14:11:56 -08:00
server_seal_awskms.go Add ability to migrate autoseal to autoseal (#5930) 2019-03-04 14:11:56 -08:00
server_seal_azurekeyvault.go Add ability to migrate autoseal to autoseal (#5930) 2019-03-04 14:11:56 -08:00
server_seal_gcpckms.go Add ability to migrate autoseal to autoseal (#5930) 2019-03-04 14:11:56 -08:00
server_seal_transit.go Add ability to migrate autoseal to autoseal (#5930) 2019-03-04 14:11:56 -08:00