mirror of
https://github.com/hashicorp/vault.git
synced 2025-08-28 10:01:11 +02:00
3b8b68097d
* Lazy load plugins to avoid setup-unwrap cycle * Remove commented blocks * Refactor NewTestCluster, use single core cluster on basic plugin tests * Set c.pluginDirectory in TestAddTestPlugin for setupPluginCatalog to work properly * Add special path to mock plugin * Move ensureCoresSealed to vault/testing.go * Use same method for EnsureCoresSealed and Cleanup * Bump ensureCoresSealed timeout to 60s * Correctly handle nil opts on NewTestCluster * Add metadata flag to APIClientMeta, use meta-enabled plugin when mounting to bootstrap * Check metadata flag directly on the plugin process * Plumb isMetadataMode down to PluginRunner * Add NOOP shims when running in metadata mode * Remove unused flag from the APIMetadata object * Remove setupSecretPlugins and setupCredentialPlugins functions * Move when we setup rollback manager to after the plugins are initialized * Fix tests * Fix merge issue * start rollback manager after the credential setup * Add guards against running certain client and server functions while in metadata mode * Call initialize once a plugin is loaded on the fly * Add more tests, update basic secret/auth plugin tests to trigger lazy loading * Skip mount if plugin removed from catalog * Fixup * Remove commented line on LookupPlugin * Fail on mount operation if plugin is re-added to catalog and mount is on existing path * Check type and special paths on startBackend * Fix merge conflicts * Refactor PluginRunner run methods to use runCommon, fix TestSystemBackend_Plugin_auth
140 lines
2.9 KiB
Go
140 lines
2.9 KiB
Go
package plugin
|
|
|
|
import (
|
|
"net/rpc"
|
|
|
|
"github.com/hashicorp/go-plugin"
|
|
"github.com/hashicorp/vault/logical"
|
|
)
|
|
|
|
// StorageClient is an implementation of logical.Storage that communicates
|
|
// over RPC.
|
|
type StorageClient struct {
|
|
client *rpc.Client
|
|
}
|
|
|
|
func (s *StorageClient) List(prefix string) ([]string, error) {
|
|
var reply StorageListReply
|
|
err := s.client.Call("Plugin.List", prefix, &reply)
|
|
if err != nil {
|
|
return reply.Keys, err
|
|
}
|
|
if reply.Error != nil {
|
|
return reply.Keys, reply.Error
|
|
}
|
|
return reply.Keys, nil
|
|
}
|
|
|
|
func (s *StorageClient) Get(key string) (*logical.StorageEntry, error) {
|
|
var reply StorageGetReply
|
|
err := s.client.Call("Plugin.Get", key, &reply)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
if reply.Error != nil {
|
|
return nil, reply.Error
|
|
}
|
|
return reply.StorageEntry, nil
|
|
}
|
|
|
|
func (s *StorageClient) Put(entry *logical.StorageEntry) error {
|
|
var reply StoragePutReply
|
|
err := s.client.Call("Plugin.Put", entry, &reply)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if reply.Error != nil {
|
|
return reply.Error
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (s *StorageClient) Delete(key string) error {
|
|
var reply StorageDeleteReply
|
|
err := s.client.Call("Plugin.Delete", key, &reply)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if reply.Error != nil {
|
|
return reply.Error
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// StorageServer is a net/rpc compatible structure for serving
|
|
type StorageServer struct {
|
|
impl logical.Storage
|
|
}
|
|
|
|
func (s *StorageServer) List(prefix string, reply *StorageListReply) error {
|
|
keys, err := s.impl.List(prefix)
|
|
*reply = StorageListReply{
|
|
Keys: keys,
|
|
Error: plugin.NewBasicError(err),
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (s *StorageServer) Get(key string, reply *StorageGetReply) error {
|
|
storageEntry, err := s.impl.Get(key)
|
|
*reply = StorageGetReply{
|
|
StorageEntry: storageEntry,
|
|
Error: plugin.NewBasicError(err),
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (s *StorageServer) Put(entry *logical.StorageEntry, reply *StoragePutReply) error {
|
|
err := s.impl.Put(entry)
|
|
*reply = StoragePutReply{
|
|
Error: plugin.NewBasicError(err),
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (s *StorageServer) Delete(key string, reply *StorageDeleteReply) error {
|
|
err := s.impl.Delete(key)
|
|
*reply = StorageDeleteReply{
|
|
Error: plugin.NewBasicError(err),
|
|
}
|
|
return nil
|
|
}
|
|
|
|
type StorageListReply struct {
|
|
Keys []string
|
|
Error *plugin.BasicError
|
|
}
|
|
|
|
type StorageGetReply struct {
|
|
StorageEntry *logical.StorageEntry
|
|
Error *plugin.BasicError
|
|
}
|
|
|
|
type StoragePutReply struct {
|
|
Error *plugin.BasicError
|
|
}
|
|
|
|
type StorageDeleteReply struct {
|
|
Error *plugin.BasicError
|
|
}
|
|
|
|
// NOOPStorage is used to deny access to the storage interface while running a
|
|
// backend plugin in metadata mode.
|
|
type NOOPStorage struct{}
|
|
|
|
func (s *NOOPStorage) List(prefix string) ([]string, error) {
|
|
return []string{}, nil
|
|
}
|
|
|
|
func (s *NOOPStorage) Get(key string) (*logical.StorageEntry, error) {
|
|
return nil, nil
|
|
}
|
|
|
|
func (s *NOOPStorage) Put(entry *logical.StorageEntry) error {
|
|
return nil
|
|
}
|
|
|
|
func (s *NOOPStorage) Delete(key string) error {
|
|
return nil
|
|
}
|