Chris Marchesi
bf18555d5e
* internal/host/plugin: remove custom queries for secrets This removes the custom queries for host catalog secrets, now that #1658 has been merged. It also does a lot of cleanup surrounding the related oplog entries, using db.WithOplog natively. * Simplify conflict actions by replacing SetColumnValues with SetColumns * Remove unused oplog method
89 lines
2.6 KiB
Go
89 lines
2.6 KiB
Go
package plugin
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/hashicorp/boundary/internal/errors"
|
|
"github.com/hashicorp/boundary/internal/host/plugin/store"
|
|
wrapping "github.com/hashicorp/go-kms-wrapping"
|
|
"github.com/hashicorp/go-kms-wrapping/structwrapping"
|
|
"google.golang.org/protobuf/proto"
|
|
"google.golang.org/protobuf/types/known/structpb"
|
|
)
|
|
|
|
// HostCatalogSecret contains the encrypted secret for a host catalog.
|
|
// It is owned by a HostCatalog.
|
|
type HostCatalogSecret struct {
|
|
*store.HostCatalogSecret
|
|
tableName string `gorm:"-"`
|
|
}
|
|
|
|
// newHostCatalogSecret creates an in memory host catalog secret.
|
|
// All options are ignored.
|
|
func newHostCatalogSecret(ctx context.Context, catalogId string, secret *structpb.Struct, _ ...Option) (*HostCatalogSecret, error) {
|
|
const op = "plugin.newHostCatlogSecret"
|
|
hcs := &HostCatalogSecret{
|
|
HostCatalogSecret: &store.HostCatalogSecret{
|
|
CatalogId: catalogId,
|
|
},
|
|
}
|
|
|
|
if secret != nil {
|
|
attrs, err := proto.Marshal(secret)
|
|
if err != nil {
|
|
return nil, errors.Wrap(ctx, err, op, errors.WithCode(errors.InvalidParameter))
|
|
}
|
|
hcs.Secret = attrs
|
|
}
|
|
return hcs, nil
|
|
}
|
|
|
|
func allocHostCatalogSecret() *HostCatalogSecret {
|
|
return &HostCatalogSecret{
|
|
HostCatalogSecret: &store.HostCatalogSecret{},
|
|
}
|
|
}
|
|
|
|
func (c *HostCatalogSecret) clone() *HostCatalogSecret {
|
|
cp := proto.Clone(c.HostCatalogSecret)
|
|
return &HostCatalogSecret{
|
|
HostCatalogSecret: cp.(*store.HostCatalogSecret),
|
|
}
|
|
}
|
|
|
|
// TableName returns the table name for the host catalog.
|
|
func (c *HostCatalogSecret) TableName() string {
|
|
if c.tableName != "" {
|
|
return c.tableName
|
|
}
|
|
return "host_plugin_catalog_secret"
|
|
}
|
|
|
|
// SetTableName sets the table name. If the caller attempts to
|
|
// set the name to "" the name will be reset to the default name.
|
|
func (c *HostCatalogSecret) SetTableName(n string) {
|
|
c.tableName = n
|
|
}
|
|
|
|
func (c *HostCatalogSecret) encrypt(ctx context.Context, cipher wrapping.Wrapper) error {
|
|
const op = "plugin.(HostCatalogSecret).encrypt"
|
|
if len(c.Secret) == 0 {
|
|
return errors.New(ctx, errors.InvalidParameter, op, "no attributes defined")
|
|
}
|
|
if err := structwrapping.WrapStruct(ctx, cipher, c.HostCatalogSecret, nil); err != nil {
|
|
return errors.Wrap(ctx, err, op, errors.WithCode(errors.Encrypt))
|
|
}
|
|
c.KeyId = cipher.KeyID()
|
|
c.Secret = nil
|
|
return nil
|
|
}
|
|
|
|
func (c *HostCatalogSecret) decrypt(ctx context.Context, cipher wrapping.Wrapper) error {
|
|
const op = "plugin.(HostCatalogSecret).decrypt"
|
|
if err := structwrapping.UnwrapStruct(ctx, cipher, c.HostCatalogSecret, nil); err != nil {
|
|
return errors.Wrap(ctx, err, op, errors.WithCode(errors.Decrypt))
|
|
}
|
|
c.CtSecret = nil
|
|
return nil
|
|
}
|