mirror of
https://github.com/hashicorp/vault.git
synced 2025-08-18 21:21:06 +02:00
a54603039d
The result will still pass gofmtcheck and won't trigger additional changes if someone isn't using goimports, but it will avoid the piecemeal imports changes we've been seeing.
120 lines
3.6 KiB
Go
120 lines
3.6 KiB
Go
package rabbitmq
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/hashicorp/errwrap"
|
|
"github.com/hashicorp/vault/logical"
|
|
"github.com/hashicorp/vault/logical/framework"
|
|
rabbithole "github.com/michaelklishin/rabbit-hole"
|
|
)
|
|
|
|
func pathConfigConnection(b *backend) *framework.Path {
|
|
return &framework.Path{
|
|
Pattern: "config/connection",
|
|
Fields: map[string]*framework.FieldSchema{
|
|
"connection_uri": &framework.FieldSchema{
|
|
Type: framework.TypeString,
|
|
Description: "RabbitMQ Management URI",
|
|
},
|
|
"username": &framework.FieldSchema{
|
|
Type: framework.TypeString,
|
|
Description: "Username of a RabbitMQ management administrator",
|
|
},
|
|
"password": &framework.FieldSchema{
|
|
Type: framework.TypeString,
|
|
Description: "Password of the provided RabbitMQ management user",
|
|
},
|
|
"verify_connection": &framework.FieldSchema{
|
|
Type: framework.TypeBool,
|
|
Default: true,
|
|
Description: `If set, connection_uri is verified by actually connecting to the RabbitMQ management API`,
|
|
},
|
|
},
|
|
|
|
Callbacks: map[logical.Operation]framework.OperationFunc{
|
|
logical.UpdateOperation: b.pathConnectionUpdate,
|
|
},
|
|
|
|
HelpSynopsis: pathConfigConnectionHelpSyn,
|
|
HelpDescription: pathConfigConnectionHelpDesc,
|
|
}
|
|
}
|
|
|
|
func (b *backend) pathConnectionUpdate(ctx context.Context, req *logical.Request, data *framework.FieldData) (*logical.Response, error) {
|
|
uri := data.Get("connection_uri").(string)
|
|
if uri == "" {
|
|
return logical.ErrorResponse("missing connection_uri"), nil
|
|
}
|
|
|
|
username := data.Get("username").(string)
|
|
if username == "" {
|
|
return logical.ErrorResponse("missing username"), nil
|
|
}
|
|
|
|
password := data.Get("password").(string)
|
|
if password == "" {
|
|
return logical.ErrorResponse("missing password"), nil
|
|
}
|
|
|
|
// Don't check the connection_url if verification is disabled
|
|
verifyConnection := data.Get("verify_connection").(bool)
|
|
if verifyConnection {
|
|
// Create RabbitMQ management client
|
|
client, err := rabbithole.NewClient(uri, username, password)
|
|
if err != nil {
|
|
return nil, errwrap.Wrapf("failed to create client: {{err}}", err)
|
|
}
|
|
|
|
// Verify that configured credentials is capable of listing
|
|
if _, err = client.ListUsers(); err != nil {
|
|
return nil, errwrap.Wrapf("failed to validate the connection: {{err}}", err)
|
|
}
|
|
}
|
|
|
|
// Store it
|
|
entry, err := logical.StorageEntryJSON("config/connection", connectionConfig{
|
|
URI: uri,
|
|
Username: username,
|
|
Password: password,
|
|
})
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
if err := req.Storage.Put(ctx, entry); err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
// Reset the client connection
|
|
b.resetClient(ctx)
|
|
|
|
return nil, nil
|
|
}
|
|
|
|
// connectionConfig contains the information required to make a connection to a RabbitMQ node
|
|
type connectionConfig struct {
|
|
// URI of the RabbitMQ server
|
|
URI string `json:"connection_uri"`
|
|
|
|
// Username which has 'administrator' tag attached to it
|
|
Username string `json:"username"`
|
|
|
|
// Password for the Username
|
|
Password string `json:"password"`
|
|
}
|
|
|
|
const pathConfigConnectionHelpSyn = `
|
|
Configure the connection URI, username, and password to talk to RabbitMQ management HTTP API.
|
|
`
|
|
|
|
const pathConfigConnectionHelpDesc = `
|
|
This path configures the connection properties used to connect to RabbitMQ management HTTP API.
|
|
The "connection_uri" parameter is a string that is used to connect to the API. The "username"
|
|
and "password" parameters are strings that are used as credentials to the API. The "verify_connection"
|
|
parameter is a boolean that is used to verify whether the provided connection URI, username, and password
|
|
are valid.
|
|
|
|
The URI looks like:
|
|
"http://localhost:15672"
|
|
`
|