Add vault community changes for the Seal HA project.#22515

Merged

victorr merged 30 commits intomainfrom victorr/vault-16843-seal-ha-community

Aug 24, 2023

+2,694-881

Commits on Aug 24, 2023

Seal HA: Use new SealWrappedValue type to abstract seal wrapped values
victorr
committed
Vault-13769: Support configuring and using multiple seals for unsealing

rculpepper
authored and
victorr
committed
Make sealWrapBackend start using multiple seals
victorr
committed
Allow the use of multiple seals for entropy augmentation

DeLuci
authored and
victorr
committed
Individually health check each wrapper, and add a sys/seal-backend-status endpoint.

sgmiller
authored and
victorr
committed
Address a race, and also a failed test mock that I didn't catch

sgmiller
authored and
victorr
committed
Track partial wrapping failures...

sgmiller
authored and
victorr
committed
Add new data structure to track seal config generation (#4492 )

divyapola5
authored and
victorr
committed
Scope the wrapper health check locks individually (#4491 )

sgmiller
authored and
victorr
committed
Refactor setSeal function in server.go. (#4505 )
victorr
committed
Decouple CreateSecureRandomReaderFunc from seal package.
victorr
committed
Move SealGenerationInfo tracking to the seal Access.
victorr
committed
Add MultiWrapValue protobuf message

sgmiller
and
victorr
committed
Use generation to determine if a seal wrapped value is up-to-date. (#4542 )
victorr
committed
Add logging to seal Access implementation.
victorr
committed
Seal HA buf format run (#4561 )

Matt Schultz
authored and
victorr
committed
Vault-18958: Add unit tests for config checks

authored and
victorr
committed
Handle migrations between single-wrapper and multi-wrapper autoSeals
victorr
committed
Automatically rewrap partially seal wrapped values on an interval

Matt Schultz
authored and
victorr
committed
Allow multi-wrapper autoSeals to include disabled seal wrappers.
victorr
committed
Fix bug with not providing name (#4580 )

rculpepper
authored and
victorr
committed
Only attempt to rewrap partial values when all seals are healthy.

Matt Schultz
authored and
victorr
committed
Remove stale TODOs and commented out code.
victorr
committed
Merge fix: move EntropySourcerInfo from kms_ent.go to kms.go.
victorr
committed
Merge fix: move UnsealWrapValue from seal_util_ent.go to seal_util.go.
victorr
committed
Merge fix: create stub for IsSealHABetaEnabled.
victorr
committed
Merge fix: create stub startPartialSealRewrapping.
victorr
committed
Merge fix: remove unnecessary function from core_util.go.
victorr
committed
Merge fix: fix test TestParseSeals.
victorr
committed
Merge fix: make fmt.
victorr
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add vault community changes for the Seal HA project.#22515

Commits on Aug 24, 2023

Seal HA: Use new SealWrappedValue type to abstract seal wrapped values

Vault-13769: Support configuring and using multiple seals for unsealing

Make sealWrapBackend start using multiple seals

Allow the use of multiple seals for entropy augmentation

Individually health check each wrapper, and add a sys/seal-backend-status endpoint.

Address a race, and also a failed test mock that I didn't catch

Track partial wrapping failures...

Add new data structure to track seal config generation (#4492 )

Scope the wrapper health check locks individually (#4491 )

Refactor setSeal function in server.go. (#4505 )

Decouple CreateSecureRandomReaderFunc from seal package.

Move SealGenerationInfo tracking to the seal Access.

Add MultiWrapValue protobuf message

Use generation to determine if a seal wrapped value is up-to-date. (#4542 )

Add logging to seal Access implementation.

Seal HA buf format run (#4561 )

Vault-18958: Add unit tests for config checks

Handle migrations between single-wrapper and multi-wrapper autoSeals

Automatically rewrap partially seal wrapped values on an interval

Allow multi-wrapper autoSeals to include disabled seal wrappers.

Fix bug with not providing name (#4580 )

Only attempt to rewrap partial values when all seals are healthy.

Remove stale TODOs and commented out code.

Merge fix: move EntropySourcerInfo from kms_ent.go to kms.go.

Merge fix: move UnsealWrapValue from seal_util_ent.go to seal_util.go.

Merge fix: create stub for IsSealHABetaEnabled.

Merge fix: create stub startPartialSealRewrapping.

Merge fix: remove unnecessary function from core_util.go.

Merge fix: fix test TestParseSeals.

Merge fix: make fmt.