mirror of
https://github.com/optim-enterprises-bv/vault.git
synced 2025-10-29 17:52:32 +00:00
088bb4b6b9
* make one component and make one test file for that component. remove the two components and associated files the new component replaces * make access type subtext dynamic based on model type * clean up * clean up * remove model attr for display purposes * split out lease to another second config model type and make is-wif-engine helper * welp missed the old controller * small removal of overkill comment * pr feedback * save lease config if only thing changed * error handling in acceptance test * test fix * replace notOk with throw * move back error message * clean up focused largely on wif component test * replace ok with true
109 lines
3.6 KiB
JavaScript
109 lines
3.6 KiB
JavaScript
/**
|
||
* Copyright (c) HashiCorp, Inc.
|
||
* SPDX-License-Identifier: BUSL-1.1
|
||
*/
|
||
|
||
import Model, { attr } from '@ember-data/model';
|
||
import fieldToAttrs, { expandAttributeMeta } from 'vault/utils/field-to-attrs';
|
||
|
||
// Note: while the API docs indicate subscriptionId and tenantId are required, the UI does not enforce this because the user may pass these values in as environment variables.
|
||
// https://developer.hashicorp.com/vault/api-docs/secret/azure#configure-access
|
||
export default class AzureConfig extends Model {
|
||
@attr('string') backend; // dynamic path of secret -- set on response from value passed to queryRecord
|
||
@attr('string', { label: 'Subscription ID' }) subscriptionId;
|
||
@attr('string', { label: 'Tenant ID' }) tenantId;
|
||
@attr('string', { label: 'Client ID' }) clientId;
|
||
@attr('string', { sensitive: true }) clientSecret; // obfuscated, never returned by API
|
||
@attr('string') environment;
|
||
|
||
@attr('string', {
|
||
subText:
|
||
'The audience claim value for plugin identity tokens. Must match an allowed audience configured for the target IAM OIDC identity provider.',
|
||
})
|
||
identityTokenAudience;
|
||
|
||
@attr({
|
||
label: 'Identity token TTL',
|
||
helperTextDisabled:
|
||
'The TTL of generated tokens. Defaults to 1 hour, turn on the toggle to specify a different value.',
|
||
helperTextEnabled: 'The TTL of generated tokens.',
|
||
editType: 'ttl',
|
||
})
|
||
identityTokenTtl;
|
||
|
||
@attr({
|
||
label: 'Root password TTL',
|
||
editType: 'ttl',
|
||
helperTextDisabled:
|
||
'Specifies how long the root password is valid for in Azure when rotate-root generates a new client secret. Defaults to 182 days or 6 months, 1 day and 13 hours.',
|
||
})
|
||
rootPasswordTtl;
|
||
|
||
configurableParams = [
|
||
'subscriptionId',
|
||
'tenantId',
|
||
'clientId',
|
||
'clientSecret',
|
||
'identityTokenAudience',
|
||
'identityTokenTtl',
|
||
'rootPasswordTtl',
|
||
'environment',
|
||
];
|
||
|
||
/* GETTERS used by configure-azure component
|
||
these getters help:
|
||
1. determine if the model is new or existing
|
||
2. if wif or azure attributes have been configured
|
||
*/
|
||
get isConfigured() {
|
||
// if every value is falsy, this engine has not been configured yet
|
||
return !this.configurableParams.every((param) => !this[param]);
|
||
}
|
||
|
||
get isWifPluginConfigured() {
|
||
return !!this.identityTokenAudience || !!this.identityTokenTtl;
|
||
}
|
||
|
||
get isAccountPluginConfigured() {
|
||
// clientSecret is not checked here because it's never return by the API
|
||
// however it is an Azure account field
|
||
return !!this.rootPasswordTtl;
|
||
}
|
||
|
||
/* GETTERS used to generate array of fields to be displayed in:
|
||
1. details view
|
||
2. edit/create view
|
||
*/
|
||
get displayAttrs() {
|
||
const formFields = expandAttributeMeta(this, this.configurableParams);
|
||
return formFields.filter((attr) => attr.name !== 'clientSecret');
|
||
}
|
||
|
||
// "filedGroupsWif" and "fieldGroupsAccount" are passed to the FormFieldGroups component to determine which group to show in the form (ex: @groupName="fieldGroupsWif")
|
||
get fieldGroupsWif() {
|
||
return fieldToAttrs(this, this.formFieldGroups('wif'));
|
||
}
|
||
|
||
get fieldGroupsAccount() {
|
||
return fieldToAttrs(this, this.formFieldGroups('account'));
|
||
}
|
||
|
||
formFieldGroups(accessType = 'account') {
|
||
const formFieldGroups = [];
|
||
formFieldGroups.push({
|
||
default: ['subscriptionId', 'tenantId', 'clientId', 'environment'],
|
||
});
|
||
if (accessType === 'wif') {
|
||
formFieldGroups.push({
|
||
default: ['identityTokenAudience', 'identityTokenTtl'],
|
||
});
|
||
}
|
||
if (accessType === 'account') {
|
||
formFieldGroups.push({
|
||
default: ['clientSecret', 'rootPasswordTtl'],
|
||
});
|
||
}
|
||
return formFieldGroups;
|
||
}
|
||
}
|