Enable transit->shamir seal migration in Enterprise (#8737)

* Enable transit->shamir seal migration in Enterprise

* prove that we can stop the transit cluster after migration is complete
This commit is contained in:
Mike Jarmy
2020-04-14 10:36:46 -04:00
committed by GitHub
parent 3bde67c285
commit 1530c05430
3 changed files with 203 additions and 207 deletions

View File

@@ -16,7 +16,6 @@ import (
)
var (
onEnterprise = false
createSecureRandomReaderFunc = createSecureRandomReader
adjustCoreConfigForEnt = adjustCoreConfigForEntNoop
)
@@ -62,10 +61,6 @@ func adjustCoreForSealMigration(logger log.Logger, core *vault.Core, barrierSeal
return errors.New(`Recovery seal configuration not found for existing seal`)
}
if onEnterprise && barrierSeal.BarrierType() == wrapping.Shamir {
return errors.New("Migrating from autoseal to Shamir seal is not currently supported on Vault Enterprise")
}
var migrationSeal vault.Seal
var newSeal vault.Seal