Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Documentation for Self Healing Auto Auth Proxy and Agent #26324

Merged
merged 3 commits into from
Apr 9, 2024

Conversation

divyaac
Copy link
Contributor

@divyaac divyaac commented Apr 9, 2024

Documentation for how Auto Auth will self-heal for Agent and Proxy.

RFC: https://hermes.hashicorp.services/document/1yTtWJEvyoYLPkYRQ3lxs6dHmqAVyC177BMEBEXuu8fE?draft=false

@divyaac divyaac added the docs label Apr 9, 2024
@divyaac divyaac requested a review from a team as a code owner April 9, 2024 20:11
@github-actions github-actions bot added the hashicorp-contributed-pr If the PR is HashiCorp (i.e. not-community) contributed label Apr 9, 2024
@divyaac divyaac added this to the 1.17.0-rc milestone Apr 9, 2024
Copy link

github-actions bot commented Apr 9, 2024

CI Results:
All Go tests succeeded! ✅

Copy link

github-actions bot commented Apr 9, 2024

Build Results:
All builds succeeded! ✅

Comment on lines 25 to 26
allowed. If renewal fails, the token has been revoked, or the token has exceeded the maximum number of uses,
it will attempt to reauthenticate.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
allowed. If renewal fails, the token has been revoked, or the token has exceeded the maximum number of uses,
it will attempt to reauthenticate.
allowed. If renewal fails, the token has been revoked, the token has exceeded
the maximum number of uses, or is invalid for any other reason, it will attempt to reauthenticate.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The 'any other reason' was the initial onus for this request, so I thought I'd call it out explicitly!

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I just want to make sure that they don't confuse "invalid for any other reason" to be invalid because of invalid policy access.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm, you're right: what about "invalid for any reason other than access control"?

Copy link
Contributor

@VioletHynes VioletHynes left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved, with a small additional suggestion

@divyaac divyaac merged commit 1e3efed into main Apr 9, 2024
32 checks passed
@divyaac divyaac deleted the VAULT-25021_Agent_Proxy_SelfHealing_AutoAuth branch April 9, 2024 20:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
docs hashicorp-contributed-pr If the PR is HashiCorp (i.e. not-community) contributed pr/no-changelog
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants