hashicorp / vault-plugin-secrets-azure

Vault Azure Secrets plugin
Mozilla Public License 2.0
26 stars 20 forks source link

fix(api): get apps by object id #198

Closed gsantos-hc closed 4 months ago

gsantos-hc commented 4 months ago

Overview

Fix an inconsistency between the GetApplication function's behavior and that of its callers.

All callers to the function pass in an application's Object ID. However, the function expected the Client ID.

This led to inconsistent behaviors when configuring a role with application_object_id:

Design of Change

Detected this bug while implementing a separate feature. To reproduce, try configuring an Azure role with application_object_id. You shouldn't be able to configure the role using the Object ID. If you use the Client ID instead, you can configure the role but then you can't create secrets for that application.

Contributor Checklist

[ ] Add relevant docs to upstream Vault repository, or sufficient reasoning why docs won’t be added yet My Docs PR Link Example [ ] Add output for any tests not ran in CI to the PR description (eg, acceptance tests) [ ] Backwards compatible

hashicorp-cla-app[bot] commented 4 months ago

CLA assistant check
All committers have signed the CLA.

gsantos-hc commented 4 months ago

Looks like there was already another fix in flight for this. Closing in favor of #196 .