119 lines
2.9 KiB
Go
119 lines
2.9 KiB
Go
// Copyright (c) HashiCorp, Inc.
|
|
// SPDX-License-Identifier: BUSL-1.1
|
|
|
|
package server
|
|
|
|
const (
|
|
getStorageBucketCredentialStatesByWorkerId = `
|
|
select spsb.public_id as storage_bucket_id,
|
|
wsbcs.permission_type, wsbcs.state,
|
|
wsbcs.checked_at, wsbcs.error_details
|
|
from worker_storage_bucket_credential_state wsbcs
|
|
join storage_plugin_storage_bucket spsb
|
|
on spsb.storage_bucket_credential_id = wsbcs.storage_bucket_credential_id
|
|
where wsbcs.worker_id = @worker_id;
|
|
`
|
|
|
|
deleteWhereCreateTimeSql = `create_time < ?`
|
|
|
|
deleteTagsByWorkerIdSql = `
|
|
delete
|
|
from server_worker_tag
|
|
where
|
|
source = ?
|
|
and
|
|
worker_id = ?`
|
|
|
|
deleteWorkerAuthQuery = `
|
|
delete from worker_auth_authorized
|
|
where worker_key_identifier = @worker_key_identifier;
|
|
`
|
|
deleteWorkerCertBundlesQuery = `
|
|
delete from worker_auth_certificate_bundle
|
|
where worker_key_identifier = @worker_key_identifier;
|
|
`
|
|
deleteRootCertificateQuery = `
|
|
delete from worker_auth_ca_certificate
|
|
where state = @state;
|
|
`
|
|
|
|
getWorkerAuthsByWorkerKeyIdQuery = `
|
|
with key_id_to_worker_id as (
|
|
select worker_id
|
|
from worker_auth_authorized
|
|
where worker_key_identifier = @worker_key_identifier
|
|
)
|
|
select *
|
|
from worker_auth_authorized
|
|
where worker_id in (select *
|
|
from key_id_to_worker_id)
|
|
`
|
|
|
|
getWorkerAuthStateByKeyIdQuery = `
|
|
select state
|
|
from worker_auth_authorized
|
|
where worker_key_identifier = @worker_key_identifier
|
|
`
|
|
|
|
deleteWorkerAuthByKeyId = `
|
|
with key_id_to_worker_id as (
|
|
select worker_id
|
|
from worker_auth_authorized
|
|
where worker_key_identifier = @worker_key_identifier
|
|
)
|
|
delete
|
|
from worker_auth_authorized
|
|
where state = 'current' and worker_id in (select *
|
|
from key_id_to_worker_id)
|
|
`
|
|
|
|
updateWorkerAuthStateByKeyId = `
|
|
update worker_auth_authorized
|
|
set state = 'current'
|
|
where worker_key_identifier = @worker_key_identifier
|
|
`
|
|
|
|
verifyKnownWorkersQuery = `
|
|
select public_id
|
|
from server_worker
|
|
where public_id in (?);
|
|
`
|
|
|
|
getWorkerAuthsByWorkerIdQuery = `
|
|
select *
|
|
from worker_auth_authorized
|
|
where worker_id = @worker_id
|
|
`
|
|
|
|
authorizedWorkerQuery = `
|
|
select distinct w.worker_key_identifier
|
|
from
|
|
worker_auth_certificate_bundle as w
|
|
where
|
|
w.worker_key_identifier in (?)
|
|
`
|
|
|
|
workerAuthRewrapQuery = `
|
|
select distinct
|
|
auth.worker_key_identifier,
|
|
auth.controller_encryption_priv_key,
|
|
auth.key_id
|
|
from server_worker worker
|
|
inner join worker_auth_authorized auth
|
|
on auth.worker_id = worker.public_id
|
|
where worker.scope_id = ?
|
|
and auth.key_id = ?
|
|
`
|
|
workerAuthServerLedActivationTokenRewrapQuery = `
|
|
select distinct
|
|
auth_token.worker_id,
|
|
auth_token.creation_time_encrypted,
|
|
auth_token.key_id
|
|
from server_worker worker
|
|
inner join worker_auth_server_led_activation_token auth_token
|
|
on auth_token.worker_id = worker.public_id
|
|
where worker.scope_id = ?
|
|
and auth_token.key_id = ?
|
|
`
|
|
)
|