mirror of
https://github.com/hashicorp/vault.git
synced 2025-08-22 15:11:07 +02:00
ceb9c6d062
* adding password to static roles * adding check for password rotation to disable password edit * update field type and tests * adding changelog * replacing readonly with enableinput, added disable arg, test updates * update to unless * PR comments
249 lines
10 KiB
JavaScript
249 lines
10 KiB
JavaScript
/**
|
|
* Copyright (c) HashiCorp, Inc.
|
|
* SPDX-License-Identifier: BUSL-1.1
|
|
*/
|
|
|
|
export const AVAILABLE_PLUGIN_TYPES = [
|
|
{
|
|
value: 'elasticsearch-database-plugin',
|
|
displayName: 'Elasticsearch',
|
|
fields: [
|
|
{ attr: 'plugin_name' },
|
|
{ attr: 'name' },
|
|
{ attr: 'verify_connection', show: false },
|
|
{ attr: 'password_policy' },
|
|
{ attr: 'url', group: 'pluginConfig' },
|
|
{ attr: 'username', group: 'pluginConfig', show: false },
|
|
{ attr: 'password', group: 'pluginConfig', show: false },
|
|
{ attr: 'ca_cert', group: 'pluginConfig' },
|
|
{ attr: 'ca_path', group: 'pluginConfig' },
|
|
{ attr: 'client_cert', group: 'pluginConfig' },
|
|
{ attr: 'client_key', group: 'pluginConfig' },
|
|
{ attr: 'tls_server_name', group: 'pluginConfig' },
|
|
{ attr: 'insecure', group: 'pluginConfig' },
|
|
{ attr: 'username_template', group: 'pluginConfig' },
|
|
{ attr: 'skip_static_role_rotation_import', group: 'pluginConfig', isEnterprise: true },
|
|
],
|
|
},
|
|
{
|
|
value: 'mongodb-database-plugin',
|
|
displayName: 'MongoDB',
|
|
fields: [
|
|
{ attr: 'plugin_name' },
|
|
{ attr: 'name' },
|
|
{ attr: 'connection_url' },
|
|
{ attr: 'verify_connection', show: false },
|
|
{ attr: 'password_policy' },
|
|
{ attr: 'username', group: 'pluginConfig', show: false },
|
|
{ attr: 'password', group: 'pluginConfig', show: false },
|
|
{ attr: 'write_concern', group: 'pluginConfig' },
|
|
{ attr: 'username_template', group: 'pluginConfig' },
|
|
{ attr: 'skip_static_role_rotation_import', group: 'pluginConfig', isEnterprise: true },
|
|
{ attr: 'tls', group: 'pluginConfig', subgroup: 'TLS options' },
|
|
{ attr: 'tls_ca', group: 'pluginConfig', subgroup: 'TLS options' },
|
|
{ attr: 'root_rotation_statements', group: 'statements' },
|
|
],
|
|
},
|
|
{
|
|
value: 'mssql-database-plugin',
|
|
displayName: 'MSSQL',
|
|
fields: [
|
|
{ attr: 'plugin_name' },
|
|
{ attr: 'name' },
|
|
{ attr: 'connection_url' },
|
|
{ attr: 'verify_connection', show: false },
|
|
{ attr: 'password_policy' },
|
|
{ attr: 'username', group: 'pluginConfig', show: false },
|
|
{ attr: 'password', group: 'pluginConfig', show: false },
|
|
{ attr: 'username_template', group: 'pluginConfig' },
|
|
{ attr: 'max_open_connections', group: 'pluginConfig' },
|
|
{ attr: 'max_idle_connections', group: 'pluginConfig' },
|
|
{ attr: 'max_connection_lifetime', group: 'pluginConfig' },
|
|
{ attr: 'skip_static_role_rotation_import', group: 'pluginConfig', isEnterprise: true },
|
|
{ attr: 'root_rotation_statements', group: 'statements' },
|
|
],
|
|
},
|
|
{
|
|
value: 'mysql-aurora-database-plugin',
|
|
displayName: 'MySQL (Aurora)',
|
|
fields: [
|
|
{ attr: 'plugin_name' },
|
|
{ attr: 'name' },
|
|
{ attr: 'verify_connection', show: false },
|
|
{ attr: 'password_policy' },
|
|
{ attr: 'connection_url', group: 'pluginConfig' },
|
|
{ attr: 'username', group: 'pluginConfig', show: false },
|
|
{ attr: 'password', group: 'pluginConfig', show: false },
|
|
{ attr: 'max_open_connections', group: 'pluginConfig' },
|
|
{ attr: 'max_idle_connections', group: 'pluginConfig' },
|
|
{ attr: 'max_connection_lifetime', group: 'pluginConfig' },
|
|
{ attr: 'username_template', group: 'pluginConfig' },
|
|
{ attr: 'skip_static_role_rotation_import', group: 'pluginConfig', isEnterprise: true },
|
|
{ attr: 'tls', group: 'pluginConfig', subgroup: 'TLS options' },
|
|
{ attr: 'tls_ca', group: 'pluginConfig', subgroup: 'TLS options' },
|
|
{ attr: 'root_rotation_statements', group: 'statements' },
|
|
],
|
|
},
|
|
{
|
|
value: 'mysql-legacy-database-plugin',
|
|
displayName: 'MySQL (Legacy)',
|
|
fields: [
|
|
{ attr: 'plugin_name' },
|
|
{ attr: 'name' },
|
|
{ attr: 'verify_connection', show: false },
|
|
{ attr: 'password_policy' },
|
|
{ attr: 'connection_url', group: 'pluginConfig' },
|
|
{ attr: 'username', group: 'pluginConfig', show: false },
|
|
{ attr: 'password', group: 'pluginConfig', show: false },
|
|
{ attr: 'max_open_connections', group: 'pluginConfig' },
|
|
{ attr: 'max_idle_connections', group: 'pluginConfig' },
|
|
{ attr: 'max_connection_lifetime', group: 'pluginConfig' },
|
|
{ attr: 'username_template', group: 'pluginConfig' },
|
|
{ attr: 'skip_static_role_rotation_import', group: 'pluginConfig', isEnterprise: true },
|
|
{ attr: 'tls', group: 'pluginConfig', subgroup: 'TLS options' },
|
|
{ attr: 'tls_ca', group: 'pluginConfig', subgroup: 'TLS options' },
|
|
{ attr: 'root_rotation_statements', group: 'statements' },
|
|
],
|
|
},
|
|
{
|
|
value: 'mysql-database-plugin',
|
|
displayName: 'MySQL/MariaDB',
|
|
fields: [
|
|
{ attr: 'plugin_name' },
|
|
{ attr: 'name' },
|
|
{ attr: 'verify_connection', show: false },
|
|
{ attr: 'password_policy' },
|
|
{ attr: 'connection_url', group: 'pluginConfig' },
|
|
{ attr: 'username', group: 'pluginConfig', show: false },
|
|
{ attr: 'password', group: 'pluginConfig', show: false },
|
|
{ attr: 'max_open_connections', group: 'pluginConfig' },
|
|
{ attr: 'max_idle_connections', group: 'pluginConfig' },
|
|
{ attr: 'max_connection_lifetime', group: 'pluginConfig' },
|
|
{ attr: 'username_template', group: 'pluginConfig' },
|
|
{ attr: 'skip_static_role_rotation_import', group: 'pluginConfig', isEnterprise: true },
|
|
{ attr: 'tls', group: 'pluginConfig', subgroup: 'TLS options' },
|
|
{ attr: 'tls_ca', group: 'pluginConfig', subgroup: 'TLS options' },
|
|
{ attr: 'root_rotation_statements', group: 'statements' },
|
|
],
|
|
},
|
|
{
|
|
value: 'mysql-rds-database-plugin',
|
|
displayName: 'MySQL (RDS)',
|
|
fields: [
|
|
{ attr: 'plugin_name' },
|
|
{ attr: 'name' },
|
|
{ attr: 'verify_connection', show: false },
|
|
{ attr: 'password_policy' },
|
|
{ attr: 'connection_url', group: 'pluginConfig' },
|
|
{ attr: 'username', group: 'pluginConfig', show: false },
|
|
{ attr: 'password', group: 'pluginConfig', show: false },
|
|
{ attr: 'max_open_connections', group: 'pluginConfig' },
|
|
{ attr: 'max_idle_connections', group: 'pluginConfig' },
|
|
{ attr: 'max_connection_lifetime', group: 'pluginConfig' },
|
|
{ attr: 'username_template', group: 'pluginConfig' },
|
|
{ attr: 'skip_static_role_rotation_import', group: 'pluginConfig', isEnterprise: true },
|
|
{ attr: 'tls', group: 'pluginConfig', subgroup: 'TLS options' },
|
|
{ attr: 'tls_ca', group: 'pluginConfig', subgroup: 'TLS options' },
|
|
{ attr: 'root_rotation_statements', group: 'statements' },
|
|
],
|
|
},
|
|
{
|
|
value: 'vault-plugin-database-oracle',
|
|
displayName: 'Oracle',
|
|
fields: [
|
|
{ attr: 'plugin_name' },
|
|
{ attr: 'name' },
|
|
{ attr: 'verify_connection', show: false },
|
|
{ attr: 'password_policy' },
|
|
{ attr: 'connection_url', group: 'pluginConfig' },
|
|
{ attr: 'username', group: 'pluginConfig', show: false },
|
|
{ attr: 'password', group: 'pluginConfig', show: false },
|
|
{ attr: 'max_open_connections', group: 'pluginConfig' },
|
|
{ attr: 'max_idle_connections', group: 'pluginConfig' },
|
|
{ attr: 'max_connection_lifetime', group: 'pluginConfig' },
|
|
{ attr: 'username_template', group: 'pluginConfig' },
|
|
{ attr: 'skip_static_role_rotation_import', group: 'pluginConfig', isEnterprise: true },
|
|
{ attr: 'root_rotation_statements', group: 'statements' },
|
|
],
|
|
},
|
|
{
|
|
value: 'postgresql-database-plugin',
|
|
displayName: 'PostgreSQL',
|
|
fields: [
|
|
{ attr: 'plugin_name' },
|
|
{ attr: 'name' },
|
|
{ attr: 'verify_connection', show: false },
|
|
{ attr: 'password_policy' },
|
|
{ attr: 'connection_url', group: 'pluginConfig' },
|
|
{ attr: 'username', group: 'pluginConfig', show: false },
|
|
{ attr: 'password', group: 'pluginConfig', show: false },
|
|
{ attr: 'password_authentication', group: 'pluginConfig' },
|
|
{ attr: 'max_open_connections', group: 'pluginConfig' },
|
|
{ attr: 'max_idle_connections', group: 'pluginConfig' },
|
|
{ attr: 'max_connection_lifetime', group: 'pluginConfig' },
|
|
{ attr: 'auth_type', group: 'pluginConfig' },
|
|
{ attr: 'service_account_json', group: 'pluginConfig' },
|
|
{ attr: 'use_private_ip', group: 'pluginConfig' },
|
|
{ attr: 'username_template', group: 'pluginConfig' },
|
|
{ attr: 'disable_escaping', group: 'pluginConfig' },
|
|
{ attr: 'root_rotation_statements', group: 'statements' },
|
|
{ attr: 'self_managed', group: 'pluginConfig', isEnterprise: true },
|
|
{ attr: 'skip_static_role_rotation_import', group: 'pluginConfig', isEnterprise: true },
|
|
{ attr: 'private_key', group: 'pluginConfig', subgroup: 'TLS options' },
|
|
{ attr: 'tls_ca', group: 'pluginConfig', subgroup: 'TLS options' },
|
|
{ attr: 'tls_certificate', group: 'pluginConfig', subgroup: 'TLS options' },
|
|
],
|
|
},
|
|
];
|
|
|
|
export const ROLE_FIELDS = {
|
|
static: ['username', 'password', 'rotation_period', 'skip_import_rotation'],
|
|
dynamic: ['default_ttl', 'max_ttl'],
|
|
};
|
|
|
|
export const STATEMENT_FIELDS = {
|
|
static: {
|
|
default: ['rotation_statements'],
|
|
'elasticsearch-database-plugin': [],
|
|
'mongodb-database-plugin': [],
|
|
'mssql-database-plugin': [],
|
|
'mysql-database-plugin': [],
|
|
'mysql-aurora-database-plugin': [],
|
|
'mysql-legacy-database-plugin': [],
|
|
'mysql-rds-database-plugin': [],
|
|
'vault-plugin-database-oracle': [],
|
|
'postgresql-database-plugin': [],
|
|
},
|
|
dynamic: {
|
|
default: ['creation_statements', 'revocation_statements', 'rollback_statements', 'renew_statements'],
|
|
'elasticsearch-database-plugin': ['creation_statement'],
|
|
'mongodb-database-plugin': ['creation_statement', 'revocation_statement'],
|
|
'mssql-database-plugin': ['creation_statements', 'revocation_statements'],
|
|
'mysql-database-plugin': ['creation_statements', 'revocation_statements'],
|
|
'mysql-aurora-database-plugin': ['creation_statements', 'revocation_statements'],
|
|
'mysql-legacy-database-plugin': ['creation_statements', 'revocation_statements'],
|
|
'mysql-rds-database-plugin': ['creation_statements', 'revocation_statements'],
|
|
'vault-plugin-database-oracle': ['creation_statements', 'revocation_statements'],
|
|
'postgresql-database-plugin': [
|
|
'creation_statements',
|
|
'revocation_statements',
|
|
'rollback_statements',
|
|
'renew_statements',
|
|
],
|
|
},
|
|
};
|
|
|
|
export function getStatementFields(type, plugin) {
|
|
if (!type) return null;
|
|
let dbValidFields = STATEMENT_FIELDS[type].default;
|
|
if (STATEMENT_FIELDS[type][plugin]) {
|
|
dbValidFields = STATEMENT_FIELDS[type][plugin];
|
|
}
|
|
return dbValidFields;
|
|
}
|
|
|
|
export function getRoleFields(type) {
|
|
if (!type) return null;
|
|
return ROLE_FIELDS[type];
|
|
}
|