mirror of
https://github.com/hashicorp/vault.git
synced 2025-08-08 15:47:00 +02:00
39bcd5c715
* use automtls for v5 secrets/auth plugins * add automtls env guard * start backend without metadata mode * use PluginClientConfig for backend's NewPluginClient param refactor * - fix pluginutil test - do not expect plugin to be unloaded in UT - fix pluginutil tests --need new env var - use require in UT - fix lazy load test * add changelog * prioritize automtls; improve comments * user multierror; refactor pluginSet for v4 unit test * add test cases for v4 and v5 plugin versions * remove unnecessary call to AutoMTLSSupported * update comment on pluginSets * use runconfig directly in sdk newpluginclient * use automtls without metadatamode for v5 backend plugin registration * use multierror for plugin runconfig calls * remove some unnecessary code
60 lines
1.5 KiB
Go
60 lines
1.5 KiB
Go
package plugin
|
|
|
|
import (
|
|
"context"
|
|
"sync/atomic"
|
|
|
|
"google.golang.org/grpc"
|
|
|
|
log "github.com/hashicorp/go-hclog"
|
|
plugin "github.com/hashicorp/go-plugin"
|
|
"github.com/hashicorp/vault/sdk/logical"
|
|
"github.com/hashicorp/vault/sdk/plugin/pb"
|
|
)
|
|
|
|
var (
|
|
_ plugin.Plugin = (*GRPCBackendPlugin)(nil)
|
|
_ plugin.GRPCPlugin = (*GRPCBackendPlugin)(nil)
|
|
)
|
|
|
|
// GRPCBackendPlugin is the plugin.Plugin implementation that only supports GRPC
|
|
// transport
|
|
type GRPCBackendPlugin struct {
|
|
Factory logical.Factory
|
|
MetadataMode bool
|
|
AutoMTLSSupported bool
|
|
Logger log.Logger
|
|
|
|
// Embeding this will disable the netRPC protocol
|
|
plugin.NetRPCUnsupportedPlugin
|
|
}
|
|
|
|
func (b GRPCBackendPlugin) GRPCServer(broker *plugin.GRPCBroker, s *grpc.Server) error {
|
|
pb.RegisterBackendServer(s, &backendGRPCPluginServer{
|
|
broker: broker,
|
|
factory: b.Factory,
|
|
// We pass the logger down into the backend so go-plugin will forward
|
|
// logs for us.
|
|
logger: b.Logger,
|
|
})
|
|
return nil
|
|
}
|
|
|
|
func (b *GRPCBackendPlugin) GRPCClient(ctx context.Context, broker *plugin.GRPCBroker, c *grpc.ClientConn) (interface{}, error) {
|
|
ret := &backendGRPCPluginClient{
|
|
client: pb.NewBackendClient(c),
|
|
clientConn: c,
|
|
broker: broker,
|
|
cleanupCh: make(chan struct{}),
|
|
doneCtx: ctx,
|
|
// Only run in metadata mode if mode is true and autoMTLS is not supported
|
|
metadataMode: b.MetadataMode && !b.AutoMTLSSupported,
|
|
}
|
|
|
|
// Create the value and set the type
|
|
ret.server = new(atomic.Value)
|
|
ret.server.Store((*grpc.Server)(nil))
|
|
|
|
return ret, nil
|
|
}
|