scottk/vault
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/vault.git synced 2025-11-02 11:38:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

Diagnoses Consul Direct Access Check (#11505)

Browse Source 
* Create helpers which integrate with OpenTelemetry for diagnose collection

* Go mod vendor

* consul tls checks

* draft for storage end to end check

* Comments

* Update vault/diagnose/helpers.go

Co-authored-by: swayne275 <swayne275@gmail.com>

* Add unit test/example

* tweak output

* More comments

* add spot check concept

* Get unit tests working on Result structs

* Fix unit test

* Get unit tests working, and make diagnose sessions local rather than global

* Comments

* Last comments

* No need for init

* :|

* Fix helpers_test

* cleaned up chan logic. Tests next.

* fix tests

* remove a comment

* tests

* remove a comment

* run direct access checks in diagnose command

* review comments

Co-authored-by: Scott G. Miller <smiller@hashicorp.com>
Co-authored-by: swayne275 <swayne275@gmail.com>
This commit is contained in:
Hridoy Roy
2021-05-02 16:21:06 -07:00
committed by GitHub
parent e06b90b7dc
commit 52d70a4683
9 changed files with 113 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
command/server/test-fixtures/config_bad_https_storage.hcl
View File

@@ -9,6 +9,7 @@ listener "tcp" {
}
backend "consul" {
address = "127.0.0.1:8500"
foo = "bar"
advertise_addr = "foo"
scheme = "https"
@@ -17,6 +18,7 @@ backend "consul" {
}
ha_backend "consul" {
address = "127.0.0.1:8500"
bar = "baz"
advertise_addr = "snafu"
disable_clustering = "true"

4
command/server/test-fixtures/config_diagnose_hastorage_bad_https.hcl
View File

@@ -11,6 +11,8 @@ listener "tcp" {
backend "consul" {
foo = "bar"
advertise_addr = "foo"
address = "127.0.0.1:1028"
}
ha_backend "consul" {
@@ -24,6 +26,8 @@ ha_backend "consul" {
service_registration "consul" {
foo = "bar"
address = "127.0.0.1:1028"
}
telemetry {

3
command/server/test-fixtures/config_diagnose_ok.hcl
View File

@@ -9,17 +9,20 @@ listener "tcp" {
}
backend "consul" {
address = "127.0.0.1:8500"
foo = "bar"
advertise_addr = "foo"
}
ha_backend "consul" {
address = "127.0.0.1:8500"
bar = "baz"
advertise_addr = "snafu"
disable_clustering = "true"
}
service_registration "consul" {
address = "127.0.0.1:8500"
foo = "bar"
}

4
command/server/test-fixtures/diagnose_bad_https_consul_sr.hcl
View File

@@ -11,17 +11,19 @@ listener "tcp" {
backend "consul" {
foo = "bar"
advertise_addr = "foo"
address = "127.0.0.1:8500"
}
ha_backend "consul" {
bar = "baz"
advertise_addr = "snafu"
disable_clustering = "true"
address = "127.0.0.1:8500"
}
service_registration "consul" {
address = "https://consulserverIP:8500"
foo = "bar"
address = "https://127.0.0.1:8200"
tls_cert_file = "./../vault/diagnose/test-fixtures/expiredcert.pem"
tls_key_file = "./../vault/diagnose/test-fixtures/expiredprivatekey.pem"
}

27
command/server/test-fixtures/diagnose_ok_storage_direct_access.hcl Normal file
View File

@@ -0,0 +1,27 @@
disable_cache = true
disable_mlock = true
ui = true
listener "tcp" {
address = "127.0.0.1:1024"
tls_disable = true
}
backend "consul" {
address = "consulserver:8500"
foo = "bar"
advertise_addr = "foo"
}
ha_backend "consul" {
address = "127.0.0.1:1024"
bar = "baz"
advertise_addr = "snafu"
disable_clustering = "true"
}
service_registration "consul" {
address = "127.0.0.1:8500"
foo = "bar"
}

3
command/server/test-fixtures/tls_config_ok.hcl
View File

@@ -12,16 +12,19 @@ listener "tcp" {
backend "consul" {
foo = "bar"
advertise_addr = "foo"
address = "127.0.0.1:8500"
}
ha_backend "consul" {
bar = "baz"
advertise_addr = "snafu"
disable_clustering = "true"
address = "127.0.0.1:8500"
}
service_registration "consul" {
foo = "bar"
address = "127.0.0.1:8500"
}
telemetry {