mirror of
https://github.com/hashicorp/vault.git
synced 2026-05-21 01:37:44 -04:00
2f4ae7f215
* Initial work * rework * s/dr/recovery * Add sys/raw support to recovery mode (#7577) * Factor the raw paths out so they can be run with a SystemBackend. # Conflicts: # vault/logical_system.go * Add handleLogicalRecovery which is like handleLogical but is only sufficient for use with the sys-raw endpoint in recovery mode. No authentication is done yet. * Integrate with recovery-mode. We now handle unauthenticated sys/raw requests, albeit on path v1/raw instead v1/sys/raw. * Use sys/raw instead raw during recovery. * Don't bother persisting the recovery token. Authenticate sys/raw requests with it. * RecoveryMode: Support generate-root for autounseals (#7591) * Recovery: Abstract config creation and log settings * Recovery mode integration test. (#7600) * Recovery: Touch up (#7607) * Recovery: Touch up * revert the raw backend creation changes * Added recovery operation token prefix * Move RawBackend to its own file * Update API path and hit it using CLI flag on generate-root * Fix a panic triggered when handling a request that yields a nil response. (#7618) * Improve integ test to actually make changes while in recovery mode and verify they're still there after coming back in regular mode. * Refuse to allow a second recovery token to be generated. * Resize raft cluster to size 1 and start as leader (#7626) * RecoveryMode: Setup raft cluster post unseal (#7635) * Setup raft cluster post unseal in recovery mode * Remove marking as unsealed as its not needed * Address review comments * Accept only one seal config in recovery mode as there is no scope for migration |
||
|---|---|---|
| .. | ||
| test-fixtures | ||
| api_test.go | ||
| auth.go | ||
| auth_token.go | ||
| client.go | ||
| client_test.go | ||
| go.mod | ||
| go.sum | ||
| help.go | ||
| logical.go | ||
| output_string.go | ||
| plugin_helpers.go | ||
| renewer.go | ||
| renewer_test.go | ||
| request.go | ||
| request_test.go | ||
| response.go | ||
| secret.go | ||
| ssh.go | ||
| ssh_agent.go | ||
| ssh_agent_test.go | ||
| sys.go | ||
| sys_audit.go | ||
| sys_auth.go | ||
| sys_capabilities.go | ||
| sys_config_cors.go | ||
| sys_generate_root.go | ||
| sys_health.go | ||
| sys_init.go | ||
| sys_leader.go | ||
| sys_leases.go | ||
| sys_mounts.go | ||
| sys_plugins.go | ||
| sys_policy.go | ||
| sys_raft.go | ||
| sys_rekey.go | ||
| sys_rotate.go | ||
| sys_seal.go | ||
| sys_stepdown.go | ||