Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Do not store local service account token and CA to config. #122

Merged
merged 11 commits into from
Jan 7, 2022
Merged

Do not store local service account token and CA to config. #122

merged 11 commits into from
Jan 7, 2022

Commits on Oct 14, 2021

  1. Do not store local service account token and CA to config. 

    When defaulting to local JWT token and CA certificate in a pod, always read
them from local filesystem and do not store them persistenly with the config.

Token will be re-read periodically to avoid using expired token.

The change allows running Vault on Kubernetes 1.21 and newer, which switched
to ID token that is bound to the pod and will expire.

Signed-off-by: Tero Saarni <tero.saarni@est.tech>
    @tsaarni
    tsaarni committed Oct 14, 2021
    Configuration menu
    Copy the full SHA
    b657e15 View commit details
    Browse the repository at this point in the history

Commits on Oct 27, 2021

  1. review comment fix: load only token or ca cert if other is given in c… 

    …onfig
    @tsaarni
    tsaarni committed Oct 27, 2021
    Configuration menu
    Copy the full SHA
    a8d2533 View commit details
    Browse the repository at this point in the history

Commits on Nov 30, 2021

  1. changed the reload period to 1 minute

    @tsaarni
    tsaarni committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    0997bc2 View commit details
    Browse the repository at this point in the history

Commits on Dec 6, 2021

  1. fixed review comments

    @tsaarni
    tsaarni committed Dec 6, 2021
    Configuration menu
    Copy the full SHA
    910097d View commit details
    Browse the repository at this point in the history

Commits on Dec 7, 2021

  1. take lock also on alias lookahead path

    @tsaarni
    tsaarni committed Dec 7, 2021
    Configuration menu
    Copy the full SHA
    9684ecb View commit details
    Browse the repository at this point in the history

Commits on Dec 14, 2021

  1. more review fixes

    @tsaarni
    tsaarni committed Dec 14, 2021
    Configuration menu
    Copy the full SHA
    93e5047 View commit details
    Browse the repository at this point in the history

  2. proposal to fix the read/write lock issue

    @tsaarni
    tsaarni committed Dec 14, 2021
    Configuration menu
    Copy the full SHA
    b3e3a5a View commit details
    Browse the repository at this point in the history

Commits on Dec 18, 2021

  1. fixed typo

    @tsaarni
    tsaarni committed Dec 18, 2021
    Configuration menu
    Copy the full SHA
    067a44d View commit details
    Browse the repository at this point in the history

  2. cachedFile by value to avoid mutation while not holding log

    @tsaarni
    tsaarni committed Dec 18, 2021
    Configuration menu
    Copy the full SHA
    8aea07a View commit details
    Browse the repository at this point in the history

Commits on Jan 6, 2022

  1. aquire lock in same place as in pathLogin

    @tsaarni
    tsaarni committed Jan 6, 2022
    Configuration menu
    Copy the full SHA
    859e023 View commit details
    Browse the repository at this point in the history

  2. added debug log entry when local token is not found and falling back … 

    …to client token
    @tsaarni
    tsaarni committed Jan 6, 2022
    Configuration menu
    Copy the full SHA
    4b6ee54 View commit details
    Browse the repository at this point in the history