mirror of
https://github.com/hashicorp/vault.git
synced 2025-08-22 15:11:07 +02:00
a65d9133a1
When creating database connections, there is a race condition when multiple goroutines try to create the connection at the same time. This happens, for example, on leadership changes in a cluster. Normally, the extra database connections are cleaned up when this is detected. However, some database implementations, notably Postgres, do not seem to clean up in a timely manner, and can leak in these scenarios. To fix this, we create a global lock when creating database connections to prevent multiple connections from being created at the same time. We also clean up the logic at the end so that if (somehow) we ended up creating an additional connection, we use the existing one rather than the new one. This by itself would solve our problem long-term, however, would still involve many transient database connections being created and immediately killed on leadership changes. It's not ideal to have a single global lock for database connection creation. Some potential alternatives: * a map of locks from the connection name to the lock. The biggest downside is the we probably will want to garbage collect this map so that we don't have an unbounded number of locks. * a small pool of locks, where we hash the connection names to pick the lock. Using such a pool generally is a good way to introduce deadlock, but since we will only use it in a specific case, and the purpose is to improve performance for concurrent connection creation, this is probably acceptable. Co-authored-by: Jason O'Donnell <2160810+jasonodonnell@users.noreply.github.com>
98 lines
2.2 KiB
Go
98 lines
2.2 KiB
Go
// Copyright (c) HashiCorp, Inc.
|
|
// SPDX-License-Identifier: BUSL-1.1
|
|
|
|
package database
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"time"
|
|
|
|
log "github.com/hashicorp/go-hclog"
|
|
v5 "github.com/hashicorp/vault/sdk/database/dbplugin/v5"
|
|
)
|
|
|
|
const mockV5Type = "mockv5"
|
|
|
|
// MockDatabaseV5 is an implementation of Database interface
|
|
type MockDatabaseV5 struct {
|
|
config map[string]interface{}
|
|
}
|
|
|
|
var _ v5.Database = &MockDatabaseV5{}
|
|
|
|
// New returns a new in-memory instance
|
|
func New() (interface{}, error) {
|
|
db := MockDatabaseV5{}
|
|
return db, nil
|
|
}
|
|
|
|
// Run instantiates a MongoDB object, and runs the RPC server for the plugin
|
|
func RunV5() error {
|
|
dbType, err := New()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
v5.Serve(dbType.(v5.Database))
|
|
|
|
return nil
|
|
}
|
|
|
|
// Run instantiates a MongoDB object, and runs the RPC server for the plugin
|
|
func RunV6Multiplexed() error {
|
|
v5.ServeMultiplex(New)
|
|
|
|
return nil
|
|
}
|
|
|
|
func (m MockDatabaseV5) Initialize(ctx context.Context, req v5.InitializeRequest) (v5.InitializeResponse, error) {
|
|
log.Default().Info("Initialize called",
|
|
"req", req)
|
|
|
|
config := req.Config
|
|
if config == nil {
|
|
config = map[string]interface{}{}
|
|
}
|
|
config["from-plugin"] = "this value is from the plugin itself"
|
|
|
|
resp := v5.InitializeResponse{
|
|
Config: req.Config,
|
|
}
|
|
return resp, nil
|
|
}
|
|
|
|
func (m MockDatabaseV5) NewUser(ctx context.Context, req v5.NewUserRequest) (v5.NewUserResponse, error) {
|
|
log.Default().Info("NewUser called",
|
|
"req", req)
|
|
|
|
now := time.Now()
|
|
user := fmt.Sprintf("mockv5_user_%s", now.Format(time.RFC3339))
|
|
resp := v5.NewUserResponse{
|
|
Username: user,
|
|
}
|
|
return resp, nil
|
|
}
|
|
|
|
func (m MockDatabaseV5) UpdateUser(ctx context.Context, req v5.UpdateUserRequest) (v5.UpdateUserResponse, error) {
|
|
log.Default().Info("UpdateUser called",
|
|
"req", req)
|
|
return v5.UpdateUserResponse{}, nil
|
|
}
|
|
|
|
func (m MockDatabaseV5) DeleteUser(ctx context.Context, req v5.DeleteUserRequest) (v5.DeleteUserResponse, error) {
|
|
log.Default().Info("DeleteUser called",
|
|
"req", req)
|
|
return v5.DeleteUserResponse{}, nil
|
|
}
|
|
|
|
func (m MockDatabaseV5) Type() (string, error) {
|
|
log.Default().Info("Type called")
|
|
return mockV5Type, nil
|
|
}
|
|
|
|
func (m MockDatabaseV5) Close() error {
|
|
log.Default().Info("Close called")
|
|
return nil
|
|
}
|