vault/sdk
Tom Proctor 07e76196ba
Support running plugins in isolated containers (#22712)
Implements running plugins in containers to give them some degree
of isolation from the main Vault process and other plugins. It only
supports running on Linux initially, where it is easiest to manage unix
socket communication across the container boundary.

Additionally

* Adds -env arg to vault plugin register.
* Don't return env from 'vault plugin info'

Historically it's been omitted, and it could conceivably have secret information in
it, so if we want to return it in the response, it should probably only be via explicit
opt-in. Skipping for now though as it's not the main purpose of the commit.
2023-09-01 17:55:17 +00:00
..
database Bump google.golang.go/protobuf dependency to v1.31.0 (#22176) 2023-08-02 17:19:16 +00:00
framework events: Add full api_path; rename Send (#22487) 2023-08-23 15:11:22 -07:00
helper Support running plugins in isolated containers (#22712) 2023-09-01 17:55:17 +00:00
logical reduce calls to DetermineRoleFromLoginRequest from 3 to 1 for aws auth method (#22583) 2023-08-28 16:01:07 -05:00
physical add autoloaded license path to the cache exempt list (#22363) 2023-08-16 13:31:02 +00:00
plugin events: Add full api_path; rename Send (#22487) 2023-08-23 15:11:22 -07:00
queue adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
go.mod Support running plugins in isolated containers (#22712) 2023-09-01 17:55:17 +00:00
go.sum Support running plugins in isolated containers (#22712) 2023-09-01 17:55:17 +00:00
LICENSE [COMPLIANCE] License changes (#22290) 2023-08-10 18:14:03 -07:00
README.md Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00

Vault SDK libs

This package provides the sdk package which contains code useful for developing Vault plugins.

Although we try not to break functionality, we reserve the right to reorganize the code at will and may occasionally cause breaks if they are warranted. As such we expect the tag of this module will stay less than v1.0.0.

For any major changes we will try to give advance notice in the CHANGES section of Vault's CHANGELOG.md.