Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding support for AWS Secrets Manager #955

Closed
wants to merge 41 commits into from

Conversation

chris-j-h
Copy link
Collaborator

@chris-j-h chris-j-h commented Jan 7, 2020

Adds supports for AWS Secrets Manager as a way to store and retrieve Tessera key pairs.

Replaces #947. Differences to #947 include:

  • Merged with master
    • Update to work with the new pico cli implementation
    • Update to work with the new generic/default key vault config object
  • Improve dependency management
  • Update tests

chris-j-h and others added 30 commits October 24, 2019 10:08
AWS Secrets Manager implementation for KeyVault added
…o feature/AWSSecretManager

� Conflicts:
�	cli/cli-api/src/test/java/com/quorum/tessera/cli/keypassresolver/CliKeyPasswordResolverTest.java
�	cli/config-cli/src/main/java/com/quorum/tessera/config/cli/parsers/KeyGenerationParser.java
�	cli/config-cli/src/test/java/com/quorum/tessera/config/cli/OverrideUtilTest.java
�	cli/config-cli/src/test/java/com/quorum/tessera/config/cli/parsers/KeyGenerationParserTest.java
�	config-migration/src/test/java/com/quorum/tessera/config/migration/test/FixtureUtil.java
�	config/src/main/java/com/quorum/tessera/config/JaxbConfigFactory.java
�	config/src/main/java/com/quorum/tessera/config/KeyConfiguration.java
�	config/src/main/java/com/quorum/tessera/config/adapters/KeyDataAdapter.java
�	config/src/test/java/com/quorum/tessera/config/adapters/KeyDataAdapterTest.java
�	key-generation/src/main/java/com/quorum/tessera/key/generation/DefaultKeyGeneratorFactory.java
�	key-generation/src/test/java/com/quorum/tessera/key/generation/KeyGeneratorFactoryTest.java
…Pair.java

Co-Authored-By: chris-j-h <39617426+chris-j-h@users.noreply.github.com>
…Pair.java

Co-Authored-By: chris-j-h <39617426+chris-j-h@users.noreply.github.com>
…hub.com/vgeorgescu/tessera into feature/AWSSecretManager

� Conflicts:
�	tessera-grpc/grpc-service/pom.xml
Excluding the dependency would introduce issues for users running acceptance tests with the slim jar when not also including the aws shaded jar on the classpath
The updated validation checks only that a scheme has been provided. This makes testing simpler and should be sufficient for now.
# Conflicts:
#	cli/config-cli/src/main/java/com/quorum/tessera/config/cli/parsers/KeyGenerationParser.java
#	cli/config-cli/src/test/java/com/quorum/tessera/config/cli/parsers/KeyGenerationParserTest.java
#	config/src/main/java/com/quorum/tessera/config/KeyConfiguration.java
#	pom.xml
Krish1979
Krish1979 previously approved these changes Jan 7, 2020
@codecov-io
Copy link

codecov-io commented Jan 7, 2020

Codecov Report

Merging #955 into master will decrease coverage by 0.01%.
The diff coverage is 98.92%.

Impacted file tree graph

@@             Coverage Diff             @@
##             master    #955      +/-   ##
===========================================
- Coverage     99.31%   99.3%   -0.02%     
- Complexity     2088    2146      +58     
===========================================
  Files           320     328       +8     
  Lines          5709    5871     +162     
  Branches        328     345      +17     
===========================================
+ Hits           5670    5830     +160     
  Misses            5       5              
- Partials         34      36       +2
Impacted Files Coverage Δ Complexity Δ
...va/com/quorum/tessera/config/KeyConfiguration.java 100% <ø> (ø) 19 <0> (ø) ⬇️
...m/quorum/tessera/config/DefaultKeyVaultConfig.java 100% <ø> (ø) 6 <0> (ø) ⬇️
...quorum/tessera/config/KeyVaultConfigConverter.java 100% <100%> (ø) 4 <2> (ø) ⬇️
...onfig/constraints/UnsupportedKeyPairValidator.java 97.14% <100%> (+0.47%) 18 <8> (+2) ⬆️
...sera/key/vault/aws/AWSSecretsManagerException.java 100% <100%> (ø) 1 <1> (?)
...a/key/generation/AWSSecretManagerKeyGenerator.java 100% <100%> (ø) 6 <6> (?)
...n/java/com/quorum/tessera/config/KeyVaultType.java 100% <100%> (ø) 1 <0> (ø) ⬇️
...c/main/java/com/quorum/tessera/config/KeyData.java 100% <100%> (ø) 34 <5> (+4) ⬆️
...ra/config/constraints/KeyVaultConfigValidator.java 100% <100%> (ø) 14 <0> (+3) ⬆️
...com/quorum/tessera/config/keypairs/AWSKeyPair.java 100% <100%> (ø) 7 <7> (?)
... and 18 more

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 54e13ee...a91da86. Read the comment docs.

@chris-j-h chris-j-h closed this Jan 7, 2020
@chris-j-h chris-j-h deleted the AWSSecretsManager-merged branch January 13, 2020 12:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

5 participants