Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

secret/ssh: add support for allow_empty_principals on roles #2354

Merged

Conversation

fairclothjm
Copy link
Contributor

hashicorp/vault#28466 introduced a breaking change (Vault 1.18, backported to 1.17) for the SSH Backend by disallowing empty roles by default. This PR allows configuring that via TFVP.

Closes #2340

@fairclothjm fairclothjm added this to the 4.5.0 milestone Nov 6, 2024
@fairclothjm fairclothjm requested a review from a team November 6, 2024 17:16
Copy link
Contributor

@vinay-gopalan vinay-gopalan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good! Had a couple of non-blocking queries. Since this field is not returned by Vault, it makes sense that adding a test case for the specific field is tricky

vault/resource_ssh_secret_backend_role.go Show resolved Hide resolved
vault/resource_ssh_secret_backend_role_test.go Outdated Show resolved Hide resolved
@fairclothjm fairclothjm merged commit d8d1353 into main Nov 7, 2024
5 checks passed
@fairclothjm fairclothjm deleted the VAULT-31682/ssh-backend-role/allow_empty_principals branch November 7, 2024 18:20
@fairclothjm
Copy link
Contributor Author

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[Enhancement]: Support allow_empty_principals on vault_ssh_secret_backend_role
2 participants