Skip to content

DBPW - Enables AutoMTLS for DB plugins#10220

Merged
pcman312 merged 3 commits into
masterfrom
dbpw-auto-mtls-for-the-last-time
Oct 22, 2020
Merged

DBPW - Enables AutoMTLS for DB plugins#10220
pcman312 merged 3 commits into
masterfrom
dbpw-auto-mtls-for-the-last-time

Conversation

@pcman312
Copy link
Copy Markdown
Contributor

@pcman312 pcman312 commented Oct 22, 2020

Description

This enables AutoMTLS for DB plugins. The Serve function within sdk/database/dbplugin/v5/plugin_server.go is also changed so it does not take in a TLS provider function. This precipitated the need to remove couchbase, elasticsearch, and mongodbatlas from Vault temporarily since they were referencing the original Serve within their respective Run functions. They can't be modified in place because those three plugins are external repos that are pulled in as dependencies. For this PR, those three are commented out so the SDK can be updated. The next step will be to update the three external repos to use the new Serve function, followed by re-enabling them in Vault.

Part 1/3: Adding AutoMTLS into the DB engine for external databases, disable couchbase, elasticsearch, and mongodbatlas
Part 2/3: Update couchbase, elasticsearch, & mongodbatlas to use new Serve function
Part 3/3: Re-enable couchbase, elasticsearch, & mongodbatlas & revendor into Vault

Kudos to @briankassouf for figuring out the issue with the previous attempt to use AutoMTLS: #10204

This also temporarily disables couchbase, elasticsearch, and
mongodbatlas because the `Serve` function needs to change signatures
and those plugins are vendored in from external repos, causing problems
when building.
@pcman312 pcman312 merged commit d876571 into master Oct 22, 2020
@pcman312 pcman312 deleted the dbpw-auto-mtls-for-the-last-time branch October 22, 2020 21:43
pcman312 added a commit that referenced this pull request Oct 23, 2020
This also temporarily disables couchbase, elasticsearch, and
mongodbatlas because the `Serve` function needs to change signatures
and those plugins are vendored in from external repos, causing problems
when building.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants