Alexander Scheel
Alexander Scheel
@achetronic Here's the recording: https://lf-edge.atlassian.net/wiki/spaces/OP/pages/15211863/OpenBao+Meetings The policy system is already pluggable; EGP existed in Vault Enterprise so there's a lot of hooks for another system should we choose to add...
Test failure looks unrelated: ``` 2024-10-03T18:49:04.4239870Z === [31mFailed[0m 2024-10-03T18:49:04.4240858Z === [31mFAIL[0m: vault TestOIDC_PeriodicFunc/test-key-nil-next-signing-key (4.35s) 2024-10-03T18:49:04.4243295Z identity_store_oidc_test.go:1165: For key: test-key-nil-next-signing-key at cycle: 2 expected namedKey's KeyRing to be at least of...
Cool, looks like this is working as intended as far as I can tell. Thank you!
@DanGhita This would be ready for review if you want :-)
I was testing this with the KV plugin as an external plugin and it doesn't seem to be detecting it as transactional, so I'll have to revise this.
Ok, you need to make this change to KV to test: ```diff diff --git a/builtin/logical/kv/backend.go b/builtin/logical/kv/backend.go index e29a87ef95..125d258b8b 100644 --- a/builtin/logical/kv/backend.go +++ b/builtin/logical/kv/backend.go @@ -81,9 +81,9 @@ func Factory(ctx context.Context,...
@sspirate24 I'm not an AWS expert but it looks like their docs mention that you can choose your IOPS: https://aws.amazon.com/ebs/general-purpose/ What are your limits configured at and are they similar...
@sspirate24 A few things: 1. Running [with `log_level=trace`](https://openbao.org/docs/configuration/#parameters) would be great. 2. It'd be interesting to see something like `iostat -x` on both, if you can -- is the disk...
@sspirate24 Sorry about the delay here. Honestly, the stats you gave didn't really jump out to me as to why it would be slower. > Point to Note: We don't...
@sspirate24 Raft should emit the following metrics: https://openbao.org/docs/internals/telemetry/metrics/raft/ You'd have to configure a telemetry provider in the config file: https://openbao.org/docs/configuration/telemetry/ The core request metrics might also be interesting, along with...