open-vault/builtin/credential
Mike Jarmy e0ce2195cc AWS upgrade role entries (#7025)
* upgrade aws roles

* test upgrade aws roles

* Initialize aws credential backend at mount time

* add a TODO

* create end-to-end test for builtin/credential/aws

* fix bug in initializer

* improve comments

* add Initialize() to logical.Backend

* use Initialize() in Core.enableCredentialInternal()

* use InitializeRequest to call Initialize()

* improve unit testing for framework.Backend

* call logical.Backend.Initialize() from all of the places that it needs to be called.

* implement backend.proto changes for logical.Backend.Initialize()

* persist current role storage version when upgrading aws roles

* format comments correctly

* improve comments

* use postUnseal funcs to initialize backends

* simplify test suite

* improve test suite

* simplify logic in aws role upgrade

* simplify aws credential initialization logic

* simplify logic in aws role upgrade

* use the core's activeContext for initialization

* refactor builtin/plugin/Backend

* use a goroutine to upgrade the aws roles

* misc improvements and cleanup

* do not run AWS role upgrade on DR Secondary

* always call logical.Backend.Initialize() when loading a plugin.

* improve comments

* on standbys and DR secondaries we do not want to run any kind of upgrade logic

* fix awsVersion struct

* clarify aws version upgrade

* make the upgrade logic for aws auth more explicit

* aws upgrade is now called from a switch

* fix fallthrough bug

* simplify logic

* simplify logic

* rename things

* introduce currentAwsVersion const to track aws version

* improve comments

* rearrange things once more

* conglomerate things into one function

* stub out aws auth initialize e2e test

* improve aws auth initialize e2e test

* finish aws auth initialize e2e test

* tinker with aws auth initialize e2e test

* tinker with aws auth initialize e2e test

* tinker with aws auth initialize e2e test

* fix typo in test suite

* simplify logic a tad

* rearrange assignment

* Fix a few lifecycle related issues in #7025 (#7075)

* Fix panic when plugin fails to load
2019-07-05 16:55:40 -07:00
..
app-id Update to api 1.0.1 and sdk 0.1.8 2019-04-15 14:10:07 -04:00
approle Fix some compatibility (#7048) 2019-07-02 23:29:42 -04:00
aws AWS upgrade role entries (#7025) 2019-07-05 16:55:40 -07:00
cert Add UpgradeValue path to tokenutil (#7041) 2019-07-02 09:52:05 -04:00
github Add bound cidr checking at login time for remaining auths (#7046) 2019-07-02 17:44:38 -04:00
ldap Fix import cycle 2019-07-02 21:01:34 -04:00
okta Add bound cidr checking at login time for remaining auths (#7046) 2019-07-02 17:44:38 -04:00
radius Add bound cidr checking at login time for remaining auths (#7046) 2019-07-02 17:44:38 -04:00
token Move password to sdk 2019-04-12 18:12:13 -04:00
userpass Add bound cidr checking at login time for remaining auths (#7046) 2019-07-02 17:44:38 -04:00