-
Notifications
You must be signed in to change notification settings - Fork 4.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add entity information request to system view #4681
Conversation
logical/identity.go
Outdated
// Aliases contains the unique identifiers assigned by the | ||
// auth methods | ||
Aliases []*Alias `json:"aliases"` | ||
} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Could we instead have this be a proto message here, that will remove the translations for plugins
vault/dynamic_system_view.go
Outdated
aliases := make([]*logical.Alias, len(entity.Aliases)) | ||
for i, alias := range entity.Aliases { | ||
aliases[i] = &logical.Alias{ | ||
MountType: alias.MountType, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Aliases do not hold mount type, this value will always be blank from a pure lookup. See https://github.com/hashicorp/vault/blob/master/vault/identity_store_aliases.go#L451 for how to look it up in real time.
In theory for aliases it might be okay to store the type (just not the path). But if we have to look up the path anyways in real-time (since it can change) we are already getting the type...and we have had cases in the past where we've upgraded one type to another (e.g. aws-ec2 to aws) so it's safer.
No description provided.