Move lease renewal to LeaseStorage plugins.

Created on 19 March 2023, over 1 year ago
Updated 22 March 2023, over 1 year ago

Problem/Motivation

Currently we have a public getAllLeases() method available on LeaseStorage plugins to facilitate renewAllLeases(), this provides a public method that reveals all the currently stored leases.

Steps to reproduce

Review

Proposed resolution

Move renewal inside the LeaseStorage plugins so that we can make this a protected internal method which will increase the complexity for an attacker obtaining leases.

Remaining tasks

Patch

User interface changes

None

API changes

Remove getAllLeases() from VaultLeaseStorageInterface(). It shall remain an abstract method in VaultLeaseStoragePluginBase to be implemented by extenders.
A no-lease-storage client will be required for all LeaseStorage plugins which will create the lease.

Data model changes

None

πŸ“Œ Task
Status

Fixed

Version

2.0

Component

Code

Created by

πŸ‡ΊπŸ‡ΈUnited States cmlara

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.69.0 2024