Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Backport of Duplicate groups creation bug into release/1.12.x #20970

Merged

Conversation

hc-github-team-secure-vault-core
Copy link
Collaborator

Backport

This PR is auto-generated from #20964 to be assessed for backporting due to the inclusion of the label backport/1.12.x.

🚨

Warning automatic cherry-pick of commits failed. If the first commit failed,
you will see a blank no-op commit below. If at least one commit succeeded, you
will see the cherry-picked commits up to, not including, the commit where
the merge conflict occurred.

The person who merged in the original PR is:
@akshya96
This person should manually cherry-pick the original PR into a new backport PR,
and close this one when the manual backport PR is merged in.

merge conflict error: POST https://api.github.com/repos/hashicorp/vault/merges: 409 Merge conflict []

The below text is copied from the body of the original PR.


https://hashicorp.atlassian.net/browse/VAULT-16649
Vault does not prevent the creation of duplicate groups when multiple "create group" requests with the same group name are sent simultaneously to different nodes. The issue arises because Vault relies on the view of MemDB from IdentityStore, which is independent for each node, to check for the presence of another group with the same name. As a result, when requests occur within a short time frame, the MemDB on each node may not have the group names.

Currently, the request is only forwarded to the active node for writing to storage based on the ID i.e, as part of UpsertGroupInTxn function, we would only forward the write to storage request using SendGroupUpdate https://github.com/hashicorp/vault-enterprise/blob/5e4c01ae563d2ad3f4138171e95cb6bdb2ee9e20/vault/identity_store_util.go#LL1826C1-L1834C4.

Approved ent PR: https://github.com/hashicorp/vault-enterprise/pull/4137


Overview of commits

@hc-github-team-secure-vault-core hc-github-team-secure-vault-core force-pushed the backport/vault-16649-oss/usefully-leading-foal branch from 9234d09 to d7e28db Compare June 2, 2023 21:02
@hashicorp-cla
Copy link

hashicorp-cla commented Jun 2, 2023

CLA assistant check
All committers have signed the CLA.

* fix duplicate groups creation

* add changelog
@akshya96 akshya96 force-pushed the backport/vault-16649-oss/usefully-leading-foal branch from 0677409 to 9e911d1 Compare June 2, 2023 21:23
@akshya96 akshya96 marked this pull request as ready for review June 2, 2023 21:23
@akshya96 akshya96 added this to the 1.12.8 milestone Jun 2, 2023
@akshya96 akshya96 enabled auto-merge (squash) June 8, 2023 18:24
@akshya96 akshya96 merged commit 16e5492 into release/1.12.x Jun 8, 2023
@akshya96 akshya96 deleted the backport/vault-16649-oss/usefully-leading-foal branch June 8, 2023 18:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants