• Vishal Nayak's avatar
    Seal migration with Raft (#8103) · 9f980ade
    Vishal Nayak authored
    
    
    * Seal migration after unsealing
    
    * Refactor migration fields migrationInformation in core
    
    * Perform seal migration as part of postUnseal
    
    * Remove the sleep logic
    
    * Use proper seal in the unseal function
    
    * Fix migration from Auto to Shamir
    
    * Fix the recovery config missing issue
    
    * Address the non-ha migration case
    
    * Fix the multi cluster case
    
    * Avoid re-running seal migration
    
    * Run the post migration code in new leaders
    
    * Fix the issue of wrong recovery being set
    
    * Address review feedback
    
    * Add more complete testing coverage for seal migrations.   (#8247)
    
    * Add more complete testing coverage for seal migrations.  Also remove VAULT_ACC gate from some tests that just depend on docker, cleanup dangling recovery config in storage after migration, and fix a call in adjustCoreForSealMigration that seems broken.
    
    * Fix the issue of wrong recovery key being set
    
    * Adapt tests to work with multiple cores.
    
    * Add missing line to disable raft join.
    Co-authored-by: default avatarVishal Nayak <vishalnayak@users.noreply.github.com>
    
    * Fix all known issues
    
    * Remove warning
    
    * Review feedback.
    
    * Revert my previous change that broke raft tests.  We'll need to come back and at least comment
    this once we better understand why it's needed.
    
    * Don't allow migration between same types for now
    
    * Disable auto to auto tests for now since it uses migration between same types which is not allowed
    
    * Update vault/core.go
    Co-Authored-By: default avatarBrian Kassouf <briankassouf@users.noreply.github.com>
    
    * Add migration logs
    
    * Address review comments
    
    * Add the recovery config check back
    
    * Skip a few steps if migration is already done
    
    * Return from waitForLeadership if migration fails
    Co-authored-by: default avatarncabatoff <nick.cabatoff@gmail.com>
    Co-authored-by: default avatarBrian Kassouf <briankassouf@users.noreply.github.com>
    9f980ade