mirror of
https://github.com/optim-enterprises-bv/vault.git
synced 2025-10-29 17:52:32 +00:00
a2c467cc22
* initial implementation of unseal trace * close file if we fail to start the trace didn't bother to check the error from traceFile.Close() * use reloadable config instead of env var * license * remove leftover * allow setting custom dir and remove new package * bring back StartDebugTrace after talking to Kuba it sounds like it's a good idea to try to move stuff out of core, so even if there's no immediate need for a generic debug trace function it's still fair to add it * track postUnseal instead of unsealInternal also some usability improvements from manual testing * address PR comments * address security review there were concerns about using the /tmp directory because of permissions, or having a default dir at all, so now it's required to set a dir in order to generate the traces. * add unit tests to StartDebugTrace * move back to default dir * document new parameters * add tiny integration test * avoid column in trace filename sounds like it might be forbidden in Windows and possibly cause problems in some MacOS applications. * address PR feedback * add go doc to test CI was complaining about missing comments on the new test function. It feels a bit silly to require this of tests but whatever XD * fix tests
63 lines
1.2 KiB
HCL
63 lines
1.2 KiB
HCL
# Copyright (c) HashiCorp, Inc.
|
|
# SPDX-License-Identifier: BUSL-1.1
|
|
|
|
disable_cache = true
|
|
disable_mlock = true
|
|
log_requests_level = "Basic"
|
|
|
|
ui = true
|
|
|
|
api_addr = "top_level_api_addr"
|
|
cluster_addr = "top_level_cluster_addr"
|
|
|
|
listener "tcp" {
|
|
address = "127.0.0.1:443"
|
|
chroot_namespace="admin/"
|
|
disable_request_limiter = false
|
|
}
|
|
|
|
backend "consul" {
|
|
advertise_addr = "foo"
|
|
token = "foo"
|
|
}
|
|
|
|
ha_backend "consul" {
|
|
bar = "baz"
|
|
advertise_addr = "snafu"
|
|
disable_clustering = "true"
|
|
token = "foo"
|
|
}
|
|
|
|
service_registration "consul" {
|
|
token = "foo"
|
|
}
|
|
|
|
telemetry {
|
|
statsd_address = "bar"
|
|
circonus_api_token = "baz"
|
|
metrics_prefix = "pfx"
|
|
usage_gauge_period = "5m"
|
|
maximum_gauge_cardinality = 100
|
|
}
|
|
|
|
sentinel {
|
|
additional_enabled_modules = ["http"]
|
|
}
|
|
|
|
seal "awskms" {
|
|
region = "us-east-1"
|
|
access_key = "AKIAIOSFODNN7EXAMPLE"
|
|
secret_key = "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"
|
|
}
|
|
|
|
max_lease_ttl = "30d"
|
|
default_lease_ttl = "365d"
|
|
cluster_name = "testcluster"
|
|
pid_file = "./pidfile"
|
|
raw_storage_endpoint = true
|
|
disable_sealwrap = true
|
|
disable_sentinel_trace = true
|
|
administrative_namespace_path = "admin/"
|
|
enable_post_unseal_trace = true
|
|
post_unseal_trace_directory = "/tmp"
|