Batch Certificate Endpoint Addition (#8800) (#9223)

* Base batchFetch functionality.

* Finished Path work, simple test.

* Add Changelog.

* Re-Alphabetize Test; add new endpoint to auth-test.

* Improvement formatting changelog.

* Fix CE tests; PR-feedback on err responses.

* Add Test Go Docs.

Co-authored-by: Kit Haines <khaines@mit.edu>
This commit is contained in:
Vault Automation 2025-09-09 13:55:34 -06:00 committed by GitHub
parent c19829ccd7
commit fd52499843
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 7 additions and 4 deletions

View file

@ -6959,6 +6959,8 @@ func TestProperAuthing(t *testing.T) {
eabKid := "13b80844-e60d-42d2-b7e9-152a8e834b90"
acmeKeyId := "hrKmDYTvicHoHGVN2-3uzZV_BPGdE0W_dNaqYTtYqeo="
paths := map[string]pathAuthChecker{
"acme/mgmt/account/keyid/": shouldBeAuthed,
"acme/mgmt/account/keyid/" + acmeKeyId: shouldBeAuthed,
"ca_chain": shouldBeUnauthedReadList,
"cert/ca_chain": shouldBeUnauthedReadList,
"ca": shouldBeUnauthedReadList,
@ -6996,6 +6998,8 @@ func TestProperAuthing(t *testing.T) {
"crl/delta/pem": shouldBeUnauthedReadList,
"crl/rotate": shouldBeAuthed,
"crl/rotate-delta": shouldBeAuthed,
"eab/": shouldBeAuthed,
"eab/" + eabKid: shouldBeAuthed,
"intermediate/cross-sign": shouldBeAuthed,
"intermediate/generate/exported": shouldBeAuthed,
"intermediate/generate/internal": shouldBeAuthed,
@ -7075,10 +7079,6 @@ func TestProperAuthing(t *testing.T) {
"unified-crl/delta/pem": shouldBeUnauthedReadList,
"unified-ocsp": shouldBeUnauthedWriteOnly,
"unified-ocsp/dGVzdAo=": shouldBeUnauthedReadList,
"eab/": shouldBeAuthed,
"eab/" + eabKid: shouldBeAuthed,
"acme/mgmt/account/keyid/": shouldBeAuthed,
"acme/mgmt/account/keyid/" + acmeKeyId: shouldBeAuthed,
}
entPaths := getEntProperAuthingPaths(serial)

3
changelog/_8800.txt Normal file
View file

@ -0,0 +1,3 @@
```release-note:improvement
secrets/pki (enterprise): add new batch/certs endpoint to allow multiple certificates to be fetched at once.
```